CN102006216B - Deep packet inspection system and packet processing method - Google Patents

Deep packet inspection system and packet processing method Download PDF

Info

Publication number
CN102006216B
CN102006216B CN200910168943.4A CN200910168943A CN102006216B CN 102006216 B CN102006216 B CN 102006216B CN 200910168943 A CN200910168943 A CN 200910168943A CN 102006216 B CN102006216 B CN 102006216B
Authority
CN
China
Prior art keywords
control strategy
control
testing result
module
strategy
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
CN200910168943.4A
Other languages
Chinese (zh)
Other versions
CN102006216A (en
Inventor
宋晓丽
杨波
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
ZTE Corp
Original Assignee
ZTE Corp
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by ZTE Corp filed Critical ZTE Corp
Priority to CN200910168943.4A priority Critical patent/CN102006216B/en
Priority to PCT/CN2010/072882 priority patent/WO2011026345A1/en
Publication of CN102006216A publication Critical patent/CN102006216A/en
Application granted granted Critical
Publication of CN102006216B publication Critical patent/CN102006216B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L47/00Traffic control in data switching networks
    • H04L47/70Admission control; Resource allocation
    • H04L47/80Actions related to the user profile or the type of traffic
    • H04L47/805QOS or priority aware
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L47/00Traffic control in data switching networks
    • H04L47/10Flow control; Congestion control
    • H04L47/24Traffic characterised by specific attributes, e.g. priority or QoS
    • H04L47/2441Traffic characterised by specific attributes, e.g. priority or QoS relying on flow classification, e.g. using integrated services [IntServ]
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L47/00Traffic control in data switching networks
    • H04L47/70Admission control; Resource allocation
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L47/00Traffic control in data switching networks
    • H04L47/70Admission control; Resource allocation
    • H04L47/78Architectures of resource allocation
    • H04L47/781Centralised allocation of resources

Abstract

The invention provides a deep packet inspection system and a packet processing method. The system comprises a management unit, a control unit and an execution unit, wherein the execution unit comprises an inspection module and a strategy control module; the management unit is used for saving and managing system information and is provided with a first interface used for interacting with an entity of the next generation network; the inspection module is used for performing deep packet inspection on data packets according to a recognition rule to acquire a first inspection result, and the recognition rule is a rule transmitted by the entity of the next generation network through the first interface; the control unit is used for transmitting a control strategy generated according to the first inspection result and the system information; and the strategy control module is used for controlling service flow in the next generation network environment according to the control strategy. The invention can control any service in the next generation network (NGN), so the quality of service can be ensured and the user requirement can be met.

Description

A kind of deep message detection system and message processing method
Technical field
The present invention relates to data communication field, especially for one can be applicable to deep message detection system under NGN (NextGeneration Network, next generation network) and non-NGN environment and message processing method simultaneously.
Background technology
Along with operator is for the enhancing day by day of the controlled demand of network traffics, there is DPI (the Deep Packet Inspection of deep message measuring ability, deep message detects) the equipment utilization in a network of function is more and more extensive, DPI equipment possesses business data flow identification, business datum flow-control capability, be operated in OSI (Open System Interconnect, open system interconnection) transport layer of model is to application layer (layer 2 to layer 7), there is high Data Stream Processing ability, the business that can carry network identifies and traffic management, backbone network can be deployed in, the network equipment of metropolitan area network and enterprise network inside.
RACF (Resource Access Control Facility under NGN environment, resource access control entity) be based on transport layer authentication information, business service grade, network strategy, traffic prioritization etc. to transfer resource in NGN carry out that QoS (Quality of Service) controls in the technology of grinding, specific strategy comprises RSVP, allocated bandwidth, packet filtering, traffic shaping, priority business process etc.In current RACF, the resource control mode of support divides two kinds, and one triggers from operation layer, and another kind is that UE (Userequipment, subscriber equipment) utilizes transport layer signaling to trigger.
But two kinds of above-mentioned modes cannot be applicable to all business in NGN network, do not possess versatility, as above-mentioned two kinds of modes just cannot be suitable for for some business (such as game, network key business).
Summary of the invention
The object of this invention is to provide a kind of deep message detection system and message processing method, can all business in NGN network be controlled.
To achieve these goals, the invention provides a kind of deep message detection system, it is characterized in that, comprise administrative unit, control unit and performance element, described performance element comprises detection module and strategic control module, wherein:
Described administrative unit, for preserving and management system information, and is provided with for carrying out mutual first interface with the entity in next generation network;
Described detection module, for carrying out deep message detection according to recognition rule to data message, obtain one first testing result, described recognition rule is the rule that the entity in described next generation network is issued by described first interface;
Described control unit is used for issuing control strategy, and described control strategy is the strategy generated according to described first testing result and system information;
Strategic control module, for carrying out the control of service traffics in next generation network environment according to described control strategy.
Above-mentioned deep message detection system, wherein, described administrative unit be also provided with for described next generation network outside network in entity carry out the second mutual interface;
Described detection module carries out deep message detection according to the recognition rule of webmaster static configuration to data message, obtains the second testing result;
Described control unit is also for generating the 4th control strategy according to described second testing result and system information;
Described strategic control module is also for carrying out the control of service traffics according to described 4th control strategy.
Above-mentioned deep message detection system, wherein, described control strategy is:
The first control strategy that described control unit generates according to described first testing result and system information; And/or
The second control strategy that entity in described next generation network generates according to described first testing result and described system information.
Above-mentioned deep message detection system, wherein, when described control strategy is described first control strategy, described control unit specifically comprises:
First receiver module, for receiving described testing result;
Policy generation module, for generating described first control strategy according to described testing result and described system information;
First issues module, for described first control strategy is handed down to described strategy control unit.
Above-mentioned deep message detection system, wherein, when described control strategy is described second control strategy, described control unit specifically comprises:
First receiver module, for receiving described testing result;
Upper transmission module, for being uploaded to the entity in described next generation network by described first interface by described testing result;
Second receiver module, described second control strategy that the entity for receiving in described next generation network is issued by described first interface;
Second issues module, for issuing described second control strategy to described strategy control unit.
Above-mentioned deep message detection system, wherein, described control strategy also comprises the 3rd control strategy;
Described control unit also comprises:
3rd issues module, for the 3rd control strategy of the webmaster received from described administrative unit static configuration is issued to described strategic control module.
Above-mentioned deep message detection system, wherein, also comprises in described control unit:
Information acquisition module, carries out deep message and detects for gathering and preserving described detection module the testing result obtained.
Above-mentioned deep message detection system, wherein, also comprises in described control unit:
Association stream processing module, for according to multiple testing result identifications of preserving in described information acquisition module for generating the type of service of control strategy.
To achieve these goals, the embodiment of the present invention additionally provides a kind of message processing method, comprising:
Deep message detection system carries out deep message detection according to recognition rule to data message, obtain one first testing result, described recognition rule is the rule that the entity in next generation network is issued by the first interface be arranged in described deep message detection system;
Described deep message detection system carries out the control of service traffics according to control strategy;
Described control strategy is the strategy generated according to described first testing result and system information.。
Above-mentioned message processing method, wherein, under next generation network environment, described control strategy is:
The first control strategy that described control unit generates according to described first testing result and system information; And/or
The second control strategy that entity in described next generation network generates according to described first testing result and described system information.。
Above-mentioned message processing method, wherein, also comprises:
In the network environment of described deep message detection system outside described next generation network, the recognition rule according to webmaster static configuration carries out deep message detection to data message, obtains the second testing result;
Described deep message detection system generates the 4th control strategy according to described second testing result and system information;
Described deep message detection system is according to the control carrying out service traffics in the network environment of described 4th control strategy outside described next generation network.
Above-mentioned message processing method, wherein, described control strategy also comprises the 3rd control strategy of webmaster static configuration.
The present invention has following beneficial effect:
In the present invention, the recognition rule issued according to the entity in NGN by detection module carries out deep message detection to data message, obtain a testing result, then strategy control unit is used for the control carrying out service traffics according to the control strategy utilizing this testing result and system information to generate, so for any business in NGN, can control it, therefore, it is possible to guarantee service quality, meet consumers' demand.
Meanwhile, in the present invention, by arranging the interface with the entity in NGN and the entity interaction in network outside NGN, making deep message detection system of the present invention and message processing method can be applied to network outside NGN and NGN simultaneously, there is versatility.
Accompanying drawing explanation
Fig. 1 is the structural representation of the deep message detection system of first embodiment of the invention;
Fig. 2 is the first structural representation of control unit in the embodiment of the present invention;
Fig. 3 is the second structural representation of control unit in the embodiment of the present invention;
Fig. 4 is the schematic flow sheet of the method for the embodiment of the present invention.
Embodiment
In the embodiment of the present invention, for NGN network, according to the recognition rule issued by the entity in NGN network, message is identified by deep message detection system, and utilize this testing result to carry out the control of business datum message, make all business in NGN network can realize Qos and control.
The deep message detection system of the embodiment of the present invention as shown in Figure 1, comprises administrative unit, control unit and performance element, is provided with detection module and strategy control unit in described performance element, wherein:
Described administrative unit, for preserving and management system information, and is provided with the first interface mutual with the first application domain in NGN;
Described detection module is used for carrying out deep message detection according to recognition rule to data message, obtains one first testing result, the rule that described recognition rule is issued by the first interface that described administrative unit provides for the entity be arranged in described first application domain;
Described control unit is used for issuing control strategy, and described control strategy is the strategy generated according to described first testing result and system information;
Described strategy control unit is used for the control carrying out service traffics according to control strategy;
Described control strategy is the strategy generated according to described testing result and described system information, and in a particular embodiment of the present invention, under NGN environment, this control strategy is:
Described control unit generates according to described first testing result and system information and is issued to the first control strategy of described strategy control unit; And/or
Entity in described first application domain generates according to described first testing result and described system information and is issued to the second control strategy of described strategy control unit.
In a particular embodiment of the present invention, entity in this first application domain is RACF, NACF (Network Attachment Control Function, network attached controlling functions) entity and SCF (Service Control Function, service control function) entity etc.
In a particular embodiment of the present invention, be described in detail for RACF.
Simultaneously, in FIG, although connected by control unit between described administrative unit and described performance element, but it should be understood that, this administrative unit also directly can be connected with performance element, and therefore, the recognition rule that described RACF entity is issued by the interface that described administrative unit provides both can be issued to described performance element by administrative unit by control unit, and in the situation that this administrative unit and performance element are directly connected, also can directly be handed down to described performance element by administrative unit.
In a particular embodiment of the present invention, the control of described service traffics comprises shaping, current limliting, packet amendment, data packet discarding etc.
In a particular embodiment of the present invention, described according to recognition rule to data message carry out deep message detect can be comprise user's identification, content recognition, traffic identification and priority identification etc.
In a particular embodiment of the present invention, this system information includes but not limited to: user profile, business information, reservation policy information and related information etc.
For user profile, business information, no further details to be given herein for reservation policy information, is described in detail as follows for related information.
Generally, consider stability and the disposal ability of system, this deep message detection system is generally provided with multiple, at this, this related information have recorded the deep message detection system that can backup each other or have incidence relation, if when having unit to go wrong in current depth packet check system (as System Operation exception, overload etc.), according to this related information, can be processed by other deep message detection systems, ensure the stability of system.
No matter be generate control strategy by RACF or by control unit, it all needs to consider user profile, business information and reservation policy information etc., illustrates as follows.
Assuming that have recorded the type of service of customization in user profile, then when formulating control strategy, whether the type of service needing to identify packet is the type of service of customization, if not, then control strategy is for abandoning this packet, otherwise is forwarding data bag.
And for example, subscribing policy information is the packet abandoning P2P business, then, when formulating control strategy, need whether the type of service identifying packet is P2P business, if not, then control strategy is for abandoning this packet, otherwise is forwarding data bag.
Certainly, can also be other information, not enumerate explanation at this.
Simultaneously, from seeing above, strategy control unit carries out the control of service traffics according to control strategy, this control strategy comprises two kinds of situations, it can be the first control strategy that control unit generates according to described testing result and described system information, also can be the second control strategy that described RACF generates according to described testing result and described system information, below the structure of control unit under both of these case is described respectively.
When described control strategy is described first control strategy, described control unit needs to generate control strategy in conjunction with testing result and system information, and as shown in Figure 2, described control unit specifically comprises:
First receiver module, for receiving described testing result;
Policy generation module, for generating described first control strategy according to described testing result and described system information;
First issues module, for described first control strategy is handed down to described strategy control unit.
And when described control strategy is described second control strategy, and when being connected by control unit between described administrative unit with described performance element, as shown in Figure 3, described control unit specifically comprises:
First receiver module, for receiving described testing result;
Upper transmission module, for being uploaded to described RACF by described testing result by described administrative unit;
Second receiver module, for receiving described second control strategy that RACF is issued by described administrative unit;
Second issues module, for issuing described second control strategy to described strategy control unit.
Certainly, in some cases, also comprise in described control unit:
3rd issues module, for the 3rd control strategy of the webmaster received from described administrative unit static configuration is issued to described strategy control unit.
Certainly, consider the comprehensive of system, this control unit can comprise aforesaid all modules (the first receiver module, policy generation module, first issue module, the second receiver module and second issues unit).
And it should be understood that, aforesaid all unit can be arranged separately, also can concentrated setting.
Meanwhile, conveniently charging, statistics and inquiry, also comprise in this control unit:
Information acquisition module, carries out deep message and detects for gathering and preserving described detection module the described testing result obtained, for charging, statistics and inquiry.
Simultaneously, for some business, as ftp business, it needs multiplely just can carry out confirmation type of service by multiple packet check result, in this case, in the embodiment of the present invention, in this control unit, be also provided with association stream processing module, for according to the packet check result identification services type of preserving in described information acquisition module, generate described first control strategy or described RACF for described policy generation module and generate described second control strategy.
The type of service identified in described association stream processing module supplies described policy generation module to generate the used time of described first control strategy, this association stream processing module is connected with this information acquisition module and described policy generation module, and supply described RACF to generate the used time of described second control strategy in the type of service that described association stream processing module identifies, this association stream processing module and this information acquisition module and describedly upload model calling, described upper transmission module is also for being uploaded to described RACF by type of service testing result by described administrative unit.
Certainly, consider that RACF has inherently possessed the control ability of data message, in an embodiment of the present invention, also can be carried out the control of data message by RACF.
Certainly, consider applied environment, in the embodiment of the present invention, described administrative unit be also provided with NGN outside network the second application domain in the second interface of entity.
When described deep message detection system is applied in the network environment outside described next generation network, except described administrative unit be also provided with for described next generation network except network in entity carry out outside the second mutual interface, described detection module also carries out deep message detection for the recognition rule according to webmaster static configuration to data message, obtains the second testing result; Described control unit is also for generating the 4th control strategy according to described second testing result and system information; Described strategic control module is also for according to the control carrying out service traffics in the network environment of the 4th control strategy outside described next generation network.
In network outside NGN, the entity in this second application domain comprises aaa server, security management entity and linkage management entity etc.
For the application of installation of the embodiment of the present invention to for non-NGN network (network outside NGN), with be applied to compared with NGN network, as can be seen from the above description, difference wherein is only that entity in the difference of interaction content and non-NGN network cannot oneself control data message, therefore its control strategy must be generated by control unit, so control strategy only has the first control strategy, other side is all identical, and no further details to be given herein.
The message processing method of the specific embodiment of the invention as shown in Figure 4, comprising:
Step 41, the administrative unit of described deep message detection system obtains the recognition rule being arranged at the entity in the application domain of NGN and issuing by first interface;
Step 42, the detection module in described deep message detection system carries out deep message detection according to described recognition rule to data message, obtains a testing result;
Step 43, the strategy control unit in described deep message detection system carries out the control of service traffics according to control strategy; Described control strategy is the strategy generated according to described testing result and described system information.
In a particular embodiment of the present invention, this control strategy of NGN environment is comprised:
The first control strategy that control unit in described deep message detection system generates according to described testing result and system information; And/or
The second control strategy that entity in described second application domain generates according to described testing result and described system information.
When described control strategy is the second control strategy, also comprise between step 42 and 43:
Described testing result is uploaded to described RACF by described administrative unit by the detection module in described deep message detection system;
Administrative unit in described deep message detection system obtains described second control strategy by described first interface, and is issued to described strategy control unit.
In a particular embodiment of the present invention, this control strategy of the network environment outside NGN is comprised:
Described control unit is also for generating the 4th control strategy according to described second testing result and system information; And this second testing result is described detection module carries out deep message according to the recognition rule of webmaster static configuration to data message and detect the result obtained.
With different object lessons, the embodiment of the present invention is described in detail below.
In prior art, under NGN environment, some business does not possess resource request function (as game, or network key business etc.), therefore, Virtual network operator cannot ensure the QoS of the business of these high-quality demands, and the apparatus and method of the embodiment of the present invention can solve the problem.
Assuming that need for game service provides QoS to ensure, then first RACF formulates a recognition rule, and is issued to the administrative unit in described deep message detection system by interface;
Administrative unit after receiving recognition rule, by this recognition rule directly or be issued to detection module by control unit;
After detection module receives this recognition rule, message depth detection is carried out to the data message received, and obtain a testing result;
After this testing result of acquisition, control strategy can be formulated by two kinds of modes, be respectively described below.
< mode one >
Testing result is sent to control unit by detection module;
Control unit utilizes the system information in administrative unit and testing result to formulate control strategy;
This control strategy is issued to strategy control unit by control unit;
Strategy control unit utilizes this control strategy to process accordingly data message.
Illustrate as follows.
According to testing result, control unit finds that the tagged word of current data message is A;
Be game service A for the business of tagged word corresponding to the message of A, and have recorded game service A in system information and applied for bandwidth value-added service, then according to the information in this testing result and administrative unit, control unit determines that corresponding control strategy is for " forwarding with limit priority ".
And strategy control unit is according to this control strategy, with limit priority forwarding data packets, the Qos of Deterministic service.
By above-mentioned process, under NGN environment, even if some business does not possess resource request function (as game, or network key business etc.), Virtual network operator still can ensure the QoS of the business of these high-quality demands.
< mode two >
Testing result is reported NACF by the interface arranged in administrative unit by testing result by detection module;
NACF utilizes the system information in administrative unit and testing result to formulate control strategy;
This control strategy is issued to administrative unit by the interface arranged in administrative unit by NACF;
Administrative unit by this control strategy directly or be issued to strategy control unit by control unit;
Strategy control unit utilizes this control strategy to process accordingly data message.
Illustrate as follows.
According to testing result, NACF finds that the tagged word of current data message is A;
Be game service A for the business of tagged word corresponding to the message of A, and have recorded game service A in system information and applied for bandwidth value-added service, then according to the information in this testing result and administrative unit, NACF determines that corresponding control strategy is for " forwarding with limit priority ".
And strategy control unit is according to this control strategy, with limit priority forwarding data packets, the Qos of Deterministic service.
By above-mentioned process, under NGN environment, even if some business does not possess resource request function (as game, or network key business etc.), Virtual network operator still can ensure the QoS of the business of these high-quality demands.
Certainly, above-mentioned control strategy is only one and illustrates, does not limit concrete control strategy in the specific embodiment of the invention.
The above is only the preferred embodiment of the present invention; it should be pointed out that for those skilled in the art, under the premise without departing from the principles of the invention; can also make some improvements and modifications, these improvements and modifications also should be considered as protection scope of the present invention.

Claims (10)

1. a deep message detection system, is characterized in that, comprises administrative unit, control unit and performance element, and described performance element comprises detection module and strategic control module, wherein:
Described administrative unit, for preserving and management system information, and is provided with for carrying out mutual first interface with the entity in next generation network;
Described detection module, for carrying out deep message detection according to recognition rule to data message, obtain one first testing result, described recognition rule is the rule that the entity in described next generation network is issued by described first interface;
Described control unit is used for issuing control strategy, and described control strategy is the strategy generated according to described first testing result and system information;
Strategic control module, for carrying out the control of service traffics in next generation network environment according to described control strategy;
Described administrative unit be also provided with for described next generation network outside network in entity carry out the second mutual interface;
Described detection module carries out deep message detection according to the recognition rule of webmaster static configuration to data message, obtains the second testing result;
Described control unit is also for generating the 4th control strategy according to described second testing result and system information;
Described strategic control module is also for carrying out the control of service traffics according to described 4th control strategy.
2. deep message detection system according to claim 1, is characterized in that, described control strategy is:
The first control strategy that described control unit generates according to described first testing result and system information; And/or
The second control strategy that entity in described next generation network generates according to described first testing result and described system information.
3. deep message detection system according to claim 2, is characterized in that, when described control strategy is described first control strategy, described control unit specifically comprises:
First receiver module, for receiving described first testing result;
Policy generation module, for generating described first control strategy according to described first testing result and described system information;
First issues module, for described first control strategy is handed down to described strategic control module.
4. deep message detection system according to claim 2, is characterized in that, when described control strategy is described second control strategy, described control unit specifically comprises:
First receiver module, for receiving described first testing result;
Upper transmission module, for being uploaded to the entity in described next generation network by described first interface by described first testing result;
Second receiver module, described second control strategy that the entity for receiving in described next generation network is issued by described first interface;
Second issues module, for issuing described second control strategy to described strategic control module.
5. the deep message detection system according to claim 1,2,3 or 4, is characterized in that:
Described control strategy also comprises the 3rd control strategy;
Described control unit also comprises:
3rd issues module, for the 3rd control strategy of the webmaster received from described administrative unit static configuration is issued to described strategic control module.
6. the deep message detection system according to claim 1,2,3 or 4, is characterized in that, also comprises in described control unit:
Information acquisition module, carries out deep message and detects for gathering and preserving described detection module the testing result obtained.
7. deep message detection system according to claim 6, is characterized in that, also comprises in described control unit:
Association stream processing module, for according to multiple testing result identifications of preserving in described information acquisition module for generating the type of service of control strategy.
8. a message processing method, is characterized in that, comprising:
Deep message detection system carries out deep message detection according to recognition rule to data message, obtain one first testing result, described recognition rule is the rule that the entity in next generation network is issued by the first interface be arranged in described deep message detection system;
Described deep message detection system carries out the control of service traffics according to control strategy;
Described control strategy is the strategy generated according to described first testing result and system information;
In the network environment of described deep message detection system outside described next generation network, the recognition rule according to webmaster static configuration carries out deep message detection to data message, obtains the second testing result;
Described deep message detection system generates the 4th control strategy according to described second testing result and system information;
Described deep message detection system is according to the control carrying out service traffics in the network environment of described 4th control strategy outside described next generation network.
9. message processing method according to claim 8, is characterized in that, under next generation network environment, described control strategy is:
The first control strategy that control unit generates according to described first testing result and system information; And/or
The second control strategy that entity in described next generation network generates according to described first testing result and described system information.
10. message processing method according to claim 9, is characterized in that, described control strategy also comprises the 3rd control strategy of webmaster static configuration.
CN200910168943.4A 2009-09-02 2009-09-02 Deep packet inspection system and packet processing method Active CN102006216B (en)

Priority Applications (2)

Application Number Priority Date Filing Date Title
CN200910168943.4A CN102006216B (en) 2009-09-02 2009-09-02 Deep packet inspection system and packet processing method
PCT/CN2010/072882 WO2011026345A1 (en) 2009-09-02 2010-05-18 Deep packet inspection system and packet processing method

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN200910168943.4A CN102006216B (en) 2009-09-02 2009-09-02 Deep packet inspection system and packet processing method

Publications (2)

Publication Number Publication Date
CN102006216A CN102006216A (en) 2011-04-06
CN102006216B true CN102006216B (en) 2015-04-01

Family

ID=43648863

Family Applications (1)

Application Number Title Priority Date Filing Date
CN200910168943.4A Active CN102006216B (en) 2009-09-02 2009-09-02 Deep packet inspection system and packet processing method

Country Status (2)

Country Link
CN (1) CN102006216B (en)
WO (1) WO2011026345A1 (en)

Families Citing this family (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN102918804B (en) * 2011-05-31 2016-08-03 华为技术有限公司 Policy control method, device and communication system
CN102868571B (en) 2012-08-07 2015-04-08 华为技术有限公司 Method and device for rule matching
CN104935478A (en) * 2015-06-19 2015-09-23 上海斐讯数据通信技术有限公司 Intelligent terminal depth perception method and system thereof
CN107645400B (en) * 2016-07-22 2019-09-03 中兴通讯股份有限公司 Tactful sending, receiving method, device and controller
CN115150338A (en) * 2021-03-29 2022-10-04 华为技术有限公司 Message flow control method, device, equipment and computer readable storage medium

Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1937623A (en) * 2006-10-18 2007-03-28 华为技术有限公司 Method and system for controlling network business
CN101399749A (en) * 2007-09-27 2009-04-01 华为技术有限公司 Method, system and device for packet filtering

Family Cites Families (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US7970930B2 (en) * 2007-06-05 2011-06-28 Ellacoya Networks, Inc. Communications system and method to control and manage both session-based and non-session-based application services

Patent Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1937623A (en) * 2006-10-18 2007-03-28 华为技术有限公司 Method and system for controlling network business
CN101399749A (en) * 2007-09-27 2009-04-01 华为技术有限公司 Method, system and device for packet filtering

Also Published As

Publication number Publication date
CN102006216A (en) 2011-04-06
WO2011026345A1 (en) 2011-03-10

Similar Documents

Publication Publication Date Title
CN110099370B (en) Service layer southbound interface and quality of service
CN101242568B (en) A method and system for service quality negotiation in wireless communication network
CN101340374B (en) Method, system, apparatus for control transmission priority and user network edge equipment
RU2571377C2 (en) System and method of control of services, advanced nodeb and data packet network gateway
CN105813079A (en) Terminal access method
CN102170663B (en) 3G (The Third Generation Telecommunication)-based method and equipment for guaranteeing service quality in real-time transmission service
CN102006216B (en) Deep packet inspection system and packet processing method
CN105681260B (en) Transmit method, converged communication platform, transmitting terminal and the system of cloud storage file
CN101356846B (en) The method of service quality is provided in WiMAX communication network and is selected the method for access transport resource controlling functions in a communication network by policy decision function
CN103384365B (en) A kind of method for network access, method for processing business, system and equipment
CN101390361A (en) Dynamic flow control method and system
CN102802206B (en) A kind of WLAN shunt method and shunting network element
CN101466158A (en) Communication method in a network comprising a primary network and a secondary network
CN100363909C (en) On-switch policy rule caching for data communication switch
CN101945437B (en) Method for determining traffic distribution strategy, access network equipment and route equipment
CN101836196B (en) Methods and systems for providing efficient provisioning of data flows
CN101378583B (en) Method, device and system for obtaining service quality report
CN101409689B (en) Method for exchanging internet address
CN104284372A (en) Differentiation communication pipeline system, transmission method and local flow access control method
CN102075588A (en) Method and system for realizing network address translation (NAT) transversing and equipment
CN101485148B (en) User network and method for using multiple access systems toconnect to remote communications network(s)
CN102685801B (en) Network management equipment and method
CN101895928A (en) Method and system for creating reserved service flow
CN101820410A (en) Call processing method, system and device
CN101247325A (en) Method and system for adding new service

Legal Events

Date Code Title Description
C06 Publication
PB01 Publication
C10 Entry into substantive examination
SE01 Entry into force of request for substantive examination
C14 Grant of patent or utility model
GR01 Patent grant