Background technology
Along with the development of information technology, the information network taking the Internet as representative has played more and more important effect in economy and social development.But the Internet has also in use exposed increasing problem.At the beginning of the Internet design, only considered fixing terminal trusty, not support terminal mobility, does not have inherent Security Assurance Mechanism yet.Along with the development of the wireless technologys such as 3G (third generation mobile technology), rear 3G, 4G (the 4th generation mobile communication technology), the Internet becomes more and more urgent problem to the support of mobile terminal.Meanwhile, along with the expansion of internet, applications scope, safety problem is also more outstanding, and these problems have been difficult to solve under existing Internet technology framework.
TCP/IP (transmission control protocol/Internet Interconnection agreement) agreement is the basis of the Internet.IP address has the double attribute of identity and position, is that ambulant root cannot be supported in the Internet.As the identity attribute of terminal, IP address can not change in fast mobile terminal process, otherwise the upper-layer service connection meetings such as TCP and UDP (User Datagram Protoco (UDP)) are interrupted along with the change of address; As the position attribution of terminal, IP address must change (address must have the subnet prefix at current place) in fast mobile terminal process, otherwise router cannot correctly be forwarded to terminal packet.Meanwhile, the double attribute of IP address is also that the fail safe of the Internet can not get the basic reason place solving.Because IP address must comprise the position attribution of terminal, so mobile terminal cannot be assigned to fixing IP address, therefore cannot determine according to IP address on the internet the assailants' such as hacker identity.This is that the safety problems such as attack on current internet, swindle and abuse can not get the basic reason solving.
There is the defect of double attribute for IP address, industry is at the multiple next generation network technology separating with position based on identity of research, as LISP (network that station location marker separates with identify label), HIP (host identity protocol) and integrated network etc.The common feature of these technology is to have introduced two space encoders, the identity of a GC group connector, the position of a GC group connector.The existing identity coding of each terminal, also have one position encoded.It is that identity coding and opposite end based on terminal establishes a communications link that TCP is connected with upper-layer service such as UDP.When fast mobile terminal, its position encoded change thereupon, but its identity coding remains unchanged.Therefore, the movement of terminal can not cause the interruption of upper-layer service.
The identity coding of terminal and position encoded after separating, just can give fixing identity coding of each terminal distribution, as the identify label of terminal room communication.So just having realized user surfs the Net with true identity.
The Next Generation Internet (hereinafter to be referred as new net) separating with position based on identity, identity and the station location marker transmission method in network is a very important key technology, it has determined to implement the influence degree of new net to existing network, and the efficiency of transmission of new net.
The transmission problem in network for identity and station location marker, Chinese patent application prospectus 200610001825.0 discloses a kind of internet access method separating with position based on identity, and its main technical schemes is as follows:
Define following concept:
Access mark: identifying user identity information;
Route Distinguisher: identifying user positional information;
Access support node (ASN): complete the mapping between access mark and switching and routing mark.
The transmission flow of packet comprises:
Step 1: user terminal sends to access the packet that is designated source/destination address to ASN;
Step 2:ASN searches corresponding Route Distinguisher according to the access mark in packet;
Step 3:ASN sends to key subnetwork after the access mark in packet is replaced with to Route Distinguisher;
Step 4: key subnetwork transmits the packet taking Route Distinguisher as source/destination address;
Step 5: object ASN receives after packet, searches corresponding access mark according to Route Distinguisher in packet;
Step 6: object ASN sends to object user terminal after the Route Distinguisher in packet is replaced with to access mark.
Can be found out by above process, in the transmitting procedure of packet, access mark and Route Distinguisher are one to one, therefore, need to all distribute a Route Distinguisher for each terminal, object ASN could find correct access mark according to Route Distinguisher, so as by Packet Generation to object terminal, this just needs a large amount of Route Distinguisher, has aggravated the anxiety of backbone network IP address; And the router of destination also needs to inquire about the corresponding relation of AID and RID, just can complete to object terminal generation packet, increase the burden of destination.
Summary of the invention
The technical problem to be solved in the present invention is to provide method and system and the router of a kind of transfer of data, reception, solves the problem of IP address resource anxiety, realizes with a small amount of IP address transfer data how as far as possible.
For solving the problems of the technologies described above, a kind of data transmission method of the present invention, is applied in the network system separating with Route Distinguisher (RID) based on access mark (AID), comprising:
Source terminal sends the first packet to object terminal, using the AID of the AID of source terminal and object terminal respectively as source address and the destination address of this first packet;
Source router receives after the first packet, obtain the RID of the object router under object terminal according to the AID inquiry of object terminal, be the payload user data of the second packet by Reseal together with source terminal and the AID of object terminal and the data content of the first packet, using the RID of the RID of source router and object router respectively as source address and the destination address of this second packet;
Source router arrives object router by backbone network by this second Packet Generation.
Further, object router carries out decapsulation to this second packet of receiving, and after Reseal, reverts to this first packet, by this first Packet Generation to object terminal.
Further, to be the whole network unique for the AID of the terminal in system.
Further, source router is according to the AID of object terminal, and inquiry AID-RID map information obtains the RID of the object router under object terminal, the corresponding relation of the AID of whole terminals of the ASN subordinate that AID-RID map information identifies for RID and this RID.
Further, a kind of data transmission system, comprising: source terminal, object terminal, source router and object router, wherein:
Source terminal, for sending the first packet to object terminal, using the AID of the AID of source terminal and object terminal respectively as source address and the destination address of this first packet;
Source router, for receiving after the first packet, obtain the RID of the object router under object terminal according to the AID inquiry of object terminal, be the payload user data of the second packet by Reseal together with source terminal and the AID of object terminal and the data content of the first packet, using the RID of the RID of source router and object router respectively as source address and the destination address of this second packet, and by backbone network by this second Packet Generation to object router.
Further, object router for this second packet of receiving is carried out to decapsulation, and reverts to this first packet after Reseal, by this first Packet Generation to object terminal.
Further, to be the whole network unique for the AID of the terminal in system.
Further, source router is according to the AID of object terminal, and inquiry AID-RID map information obtains the RID of the object router under object terminal, the corresponding relation of the AID of whole terminals of the ASN subordinate that AID-RID map information identifies for RID and this RID.
Further, a kind of data receive method, is applied in the network system separating with RID based on AID, comprising:
Object router receives after the second packet of source router transmission, and the second packet receiving is carried out to decapsulation, is packaged with the AID of source terminal, AID and the data message of object terminal in the payload user data of the second packet;
The data message that object router takes on deblocking is encapsulated as the payload user data of the 3rd packet as data content, using the AID of the AID of source terminal and object terminal respectively as source address and the destination address of the 3rd packet;
Object router by the 3rd Packet Generation to object terminal.
Further, a kind of data receiving system, is applied in the network system separating with RID based on AID, comprising: source router, object router and object terminal, wherein:
Source router, for sending the second packet to object router;
Object router, for receiving after the second packet of source router transmission, carries out decapsulation to the second packet receiving, and is packaged with the AID of source terminal, AID and the data message of object terminal in the payload user data of the second packet; The data message that deblocking is taken on is encapsulated as the payload user data of the 3rd packet as data content, using the AID of the AID of source terminal and object terminal respectively as source address and the destination address of the 3rd packet, and by the 3rd Packet Generation to object terminal.
Further, a kind of data transmission method, is applied in the network system separating with RID based on AID, comprising:
Source terminal sends the first packet to object terminal, using the AID of the AID of source terminal and object terminal respectively as source address and the destination address of this first packet;
Source access support node (ASN) is received after this first packet, obtain the RID of the object ASN under object terminal according to the AID inquiry of object terminal, be the data content of the second packet by Reseal together with source terminal and the AID of object terminal and the data content of the first packet, using the RID of the RID of this ASN and object ASN respectively as source address and the destination address of this second packet;
This source ASN arrives object ASN by broad sense Forwarding plane by this second Packet Generation.
Further, object ASN carries out decapsulation to this second packet of receiving, and after Reseal, reverts to this first packet, by this first Packet Generation to object terminal.
Further, to be the whole network unique for the AID of the terminal in system.
Further, source ASN, from the identity location register (ILR) of mapping forward plane or at local search AID-RID map information, obtains the RID of the affiliated object ASN of object terminal.
The corresponding relation of the AID of whole terminals of the ASN subordinate that further, AID-RID map information identifies for RID and this RID.
Further, the IPv4 address of the ASN that RID identifies for this RID.
Further, source ASN, via Access Network, receives the first packet from source terminal.
Further, source ASN, in the time of encapsulation the second packet, adopts the encapsulation format of transmission control protocol (TCP) packet or the encapsulation format of User Datagram Protoco (UDP) (UDP) packet.
Further, a kind of data transmission system, comprising: source terminal, object terminal, source ASN and object ASN, wherein:
Source terminal, for sending the first packet to object terminal, using the AID of the AID of source terminal and object terminal respectively as source address and the destination address of this first packet;
Source ASN, for receiving after this first packet, obtain the RID of the object ASN under object terminal according to the AID inquiry of object terminal, be the data content of the second packet by Reseal together with source terminal and the AID of object terminal and the data content of the first packet, using the RID of the RID of this ASN and object ASN respectively as source address and the destination address of this second packet; And by broad sense Forwarding plane, this second Packet Generation is arrived to object ASN.
Further, object ASN for this second packet of receiving is carried out to decapsulation, and reverts to this first packet after Reseal, by this first Packet Generation to object terminal.
Further, to be the whole network unique for the AID of the terminal in system.
Further, this system also comprises mapping forward plane, in this mapping forward plane, comprises ILR, and this ILR is used for storing AID-RID map information;
Source ASN, from ILR or at local search AID-RID map information, obtains the RID of the affiliated object ASN of object terminal.
The corresponding relation of the AID of whole terminals of the ASN subordinate that further, AID-RID map information identifies for RID and this RID.
Further, the IPv4 address of the ASN that RID identifies for this RID.
Further, source ASN, in the time of encapsulation the second packet, adopts the encapsulation format of tcp data bag or the encapsulation format of UDP message bag.
Further, a kind of data receive method, is applied in the network system separating with Route Distinguisher based on access mark, comprising:
Object ASN receives after the second packet of source ASN transmission, and the second packet receiving is carried out to decapsulation, is packaged with the AID of source terminal, AID and the data message of object terminal in the payload user data of the second packet;
The data message that object ASN takes on deblocking is encapsulated as the payload user data of the 3rd packet as data content, using the AID of the AID of source terminal and object terminal respectively as source address and the destination address of the 3rd packet;
Object ASN by the 3rd Packet Generation to object terminal.
Further, object ASN receives the second packet via broad sense Forwarding plane from source ASN; Via Access Network by the 3rd Packet Generation to object terminal.
Further, a kind of data receiving system, is applied in the network system separating with Route Distinguisher based on access mark, comprising: source ASN, object ASN and object terminal, wherein:
Source ASN, for sending the second packet to object ASN;
Object ASN, for receiving after the second packet of source ASN transmission, carries out decapsulation to the second packet receiving, and is packaged with the AID of source terminal, AID and the data message of object terminal in the payload user data of the second packet; The data message that deblocking is taken on is encapsulated as the payload user data of the 3rd packet as data content, using the AID of the AID of source terminal and object terminal respectively as source address and the destination address of the 3rd packet; And by the 3rd Packet Generation to object terminal.
Further, this system also comprises: broad sense Forwarding plane and Access Network, wherein:
Object ASN receives the second packet via broad sense Forwarding plane from source ASN; Via Access Network by the 3rd Packet Generation to object terminal.
Further, a kind of data transmission method, is applied in the network system separating with RID based on AID, comprising:
Source terminal sends the first packet to object terminal, using the AID of the AID of source terminal and object terminal respectively as source address and the destination address of this first packet;
Source access switch router (ASR) is received after this first packet, obtain the RID of the object ASR under object terminal according to the AID inquiry of object terminal, be the data content of the second packet by Reseal together with source terminal and the AID of object terminal and the data content of the first packet, using the RID of the RID of this ASR and object ASR respectively as source address and the destination address of this second packet;
This source ASR arrives object ASR by backbone network by this second Packet Generation.
Further, object ASR carries out decapsulation to this second packet of receiving, and after Reseal, reverts to this first packet, by this first Packet Generation to object terminal.
Further, to be the whole network unique for the AID of the terminal in system.
Further, source ASR, from the mapping server of backbone network or at local search AID-RID map information, obtains the RID of the affiliated object ASR of object terminal.
The corresponding relation of the AID of whole terminals of the ASR subordinate that further, AID-RID map information identifies for RID and this RID.
Further, a kind of data transmission system, is applied in the network system separating with RID based on AID, comprising: source terminal, object terminal, source ASR and object ASR, wherein:
Source terminal, for sending the first packet to object terminal, using the AID of the AID of source terminal and object terminal respectively as source address and the destination address of this first packet;
Source ASR receives after this first packet, obtain the RID of the object ASR under object terminal according to the AID inquiry of object terminal, be the data content of the second packet by Reseal together with source terminal and the AID of object terminal and the data content of the first packet, using the RID of the RID of this ASR and object ASR respectively as source address and the destination address of this second packet; And by backbone network, this second Packet Generation is arrived to object ASR.
Further, object ASR for this second packet of receiving is carried out to decapsulation, and reverts to this first packet after Reseal, by this first Packet Generation to object terminal.
Further, to be the whole network unique for the AID of the terminal in system.
Further, this system also comprises: mapping server, for storing AID-RID map information;
Source ASR, from the mapping server of backbone network or at local search AID-RID map information, obtains the RID of the affiliated object ASR of object terminal.
The corresponding relation of the AID of whole terminals of the ASR subordinate that further, AID-RID map information identifies for RID and this RID.
Further, a kind of data receiving system, is applied in the network system separating with Route Distinguisher based on access mark, comprising: source ASR, object ASR and object terminal, wherein:
Source ASR, for sending the second packet to object ASR;
Object ASR, for receiving after the second packet of source ASR transmission, carries out decapsulation to the second packet receiving, and is packaged with the AID of source terminal, AID and the data message of object terminal in the payload user data of the second packet; The data message that deblocking is taken on is encapsulated as the payload user data of the 3rd packet as data content, using the AID of the AID of source terminal and object terminal respectively as source address and the destination address of the 3rd packet; And by the 3rd Packet Generation to object terminal.
Further, a kind of router, comprising: transceiver module, enquiry module, package module and decapsulation module, wherein:
Transceiver module, for by receive the first Packet Generation to decapsulation module, the source address of this first packet and destination address are respectively the AID of source terminal and the AID of object terminal; Also for the second Packet Generation being arrived to object router by backbone network;
Decapsulation module, for the first packet is carried out to decapsulation, sends to enquiry module by the AID of object terminal; The data content of the AID of the AID of source terminal, object terminal and the first packet is sent to package module;
Enquiry module, obtains the RID of the object router under object terminal for the AID inquiry according to object terminal, and sends to package module;
Package module, for being the data content of the second packet by Reseal together with source terminal and the AID of object terminal and the data content of the first packet, using the RID of the RID of this router and object router respectively as source address and the destination address of this second packet; By the second Packet Generation to transceiver module.
Further, transceiver module, also for by the 3rd Packet Generation receiving to decapsulation module; And by the 4th Packet Generation to source terminal;
Decapsulation module, also, for the 3rd packet is carried out to decapsulation, sends to package module by the data content of the AID of the AID of source terminal, object terminal and the 3rd packet;
Package module, also for the data content of the 3rd packet being encapsulated as to the data content of the 4th packet, destination address and source address using the AID of the AID of source terminal and object terminal as the 4th packet, by the 4th Packet Generation to transceiver module.
In sum, the present invention is on the basis of the existing Ipv4 agreement of compatibility, access mark is encapsulated in packet, ASN realizes the distribution of packet according to the access mark encapsulating in packet, the address of having saved Route Distinguisher takies, can reduce the impact on existing network, keep the uniqueness of access mark, can adapt to solve the needs of internet-ip address ambiguity problem; And can be without the corresponding relation of inquiry AID and RID at destination router, between adopt the AID of the source terminal encapsulating in packet and the AID of object terminal, to object terminal transmission packet.
Embodiment
The mode that adopts mark to replace is transmitted packet, needs the Route Distinguisher for the unique correspondence of access mark configuration, otherwise ASN cannot determine correct access mark according to Route Distinguisher, to determine to which terminal distributing data.The Route Distinguisher that configures unique correspondence has caused Route Distinguisher to take very large address space, has aggravated the anxiety of IP address resource.
The main thought of technical solution of the present invention is as follows: be the unique access mark (AID) of each user terminal configuration the whole network, AID does not change with the movement of terminal, has kept the continuity of business; Adopt the IPv4 address of the affiliated ASN of user terminal as the Route Distinguisher (RID) of transfer of data, user terminal under same access support node all adopts same RID, that is: adopt the corresponding multiple access marks of a Route Distinguisher, saved IP address; Access the Route Distinguisher of support node using source and destination as the source and destination address of the packet between access support node, source and destination access mark is encapsulated as packet content.
Below in conjunction with accompanying drawing, the specific embodiment of the present invention is described.
Fig. 1 is the integrated network that identity separates with station location marker, wherein, mapping server, certificate server, access switch router (ASR) and core router (GSR), in the consolidated network plane in backbone network, ASR is connected with terminal.
Fig. 2 is the network that another kind of identity separates with station location marker, and wherein the logic function of each network element is as follows:
Access support node (ASN), be responsible for various mobile terminals access service is provided, for user assignment access mark (AID) and the Route Distinguisher (RID) of access, and send in core net and transmit after user's data message is encapsulated.
Mapping forward plane, is made up of multiple identity location register/packet forwardings (ILR/PTF), is responsible for user's identify label and the mapping relations of Route Distinguisher in maintaining network, and provides inquiry service to ASN and other ILR., if the route positional information of Correspondent Node is not preserved in ASN this locality, just search by mapping forward plane during to end position in ASN query communication.
Authentication center, is responsible for the information such as recording user classification and user's grade of service, in the time that user accesses, user is carried out to legitimacy authentication and authorization.Bi-directional authentification between authentication center's network enabled and user.
IP backbone, is the internet between ASN, and major function is to carry out routing and forwarding data packets according to the Route Distinguisher in data message, and the data retransmission that ASN is sent is to correct destination; IP network is made up of core switch router (CSR).IP backbone is identical with existing IP network, does not need to carry out any amendment.
Interworking gateway (ISN), is the intercommunication node of identify label and station location marker separated network and other network, and the network that two classes are different must communicate by ISN.
Wireless network, is responsible for providing also maintenance customer's terminal to two layers of link between ASN, in cellular mobile network, to be responsible for allocation of radio resources and management etc.Wireless network can be the wireless networks such as WCDMA (Wideband Code Division Multiple Access (WCDMA)), TD-SCDMA (Time Division-Synchronous Code Division Multiple Access), CDMA2000 (CDMA 2000), LTE (Long Term Evolution).
Method of the present invention, can be applied in the network that above-mentioned two kinds of identity separate with station location marker, and certainly, the present invention is also not limited to adopt the network of ASR and ASN, adopts the network that the identity of other router separates with station location marker all can adopt method of the present invention.
To apply method of the present invention in the network shown in Fig. 2, as example, the present invention will be described below, and as shown in Figure 3, data transmission method of the present invention comprises:
Step 301: source terminal sends the first packet to source ASN, the AID (source AID) that the source address of the first packet is source terminal, destination address is the AID (object AID) of object terminal;
Data packet format is the Ipv4 data packet format of standard.
Step 302: source ASN receives after first packet of source terminal by the transmission of access side network, inquiry AID-RID map information, obtain the RID that object AID is corresponding (object RID), be the data content of the second packet by Reseal together with the data content of source and destination AID and the first packet, source address using the RID of himself (source RID) as the second packet, using object RID as destination address;
The encapsulation format of transmission control protocol (TCP) packet after the source ASN of Figure 4 shows that heavily encapsulates, wherein, using source RID as destination address, using object RID as destination address, together encapsulates source and destination AID and data content.
The encapsulation format of User Datagram Protoco (UDP) (UDP) packet after the source ASN of Figure 5 shows that heavily encapsulates.
Can be at identity location register (ILR) or the local configuration of ASN AID-RID map information in the present invention, ILR is the server of mapping relations between storage access mark and Route Distinguisher, ASN can be from ILR or at local search map information, determine RID, map information is whole corresponding relation of the AID of user terminals under the ASN of a RID and this RID mark.
Step 303: source ASN is by the second Packet Generation after Reseal to backbone network, and core router is according to object RID, by the second package forward to object ASN;
Step 304: object ASN carries out decapsulation to the second packet receiving, and obtains source and destination AID, and after Reseal, reverts to this first packet;
Particularly, object router receives after the second packet of source router transmission, and the second packet receiving is carried out to decapsulation, is packaged with the AID of source terminal, AID and the data message of object terminal in the payload user data of the second packet; The data message that object router takes on deblocking is encapsulated as the payload user data of the 3rd packet as data content, using the AID of the AID of source terminal and object terminal respectively as source address and the destination address of the 3rd packet; By the 3rd Packet Generation to object terminal.The 3rd packet is the first packet that source terminal sends.
Step 305: object ASN by recover the first Packet Generation to object terminal;
Step 306: object terminal sends the packet returning to object ASN, using the AID of himself as source address, using the AID of source terminal as destination address;
Step 307: object ASN receives after the packet returning of object terminal, inquire about corresponding RID according to the destination address of this packet, the data content of source, object AID and the packet that returns is heavily encapsulated as to the data content of the 4th packet, adopt the RID of the current affiliated ASN of object terminal as destination address, the RID of himself is as source address;
Step 308: object ASN is by the 4th Packet Generation to backbone network, and core router is according to destination address, by the 4th package forward to source ASN.
It is identical with object ASN that source ASN receives handling process after packet, comprise: the 4th packet is carried out to decapsulation, the data content of the 4th packet is encapsulated as to the data content of the 5th packet, destination address and source address using the AID of the AID of source terminal and object terminal as the 5th packet, by the 5th Packet Generation to source terminal.
In the time that method of the present invention is applied in the system shown in Fig. 1, processing method and above-mentioned flow process are similar, and difference is the processing that ASN completes, and changes into by ASR and completing.
Please refer again to Fig. 1, the present invention also provides a kind of data transmission system, comprising: source terminal, object terminal, source ASN and object ASN, wherein:
Source terminal, for sending the first packet to object terminal, using the AID of the AID of source terminal and object terminal respectively as source address and the destination address of this first packet;
Source ASN, for receiving after this first packet, obtain the RID of the object ASN under object terminal according to the AID inquiry of object terminal, be the data content of the second packet by Reseal together with source terminal and the AID of object terminal and the data content of the first packet, using the RID of the RID of this ASN and object ASN respectively as source address and the destination address of this second packet; And by backbone network, this second Packet Generation is arrived to object ASN; Source ASN, from ILR or at local search AID-RID corresponding relation, obtains the RID of the affiliated object ASN of object terminal.AID-RID corresponding relation is the corresponding relation of the AID of whole terminals of the ASN subordinate of RID and its mark.
Object ASN for this second packet of receiving is carried out to decapsulation, and reverts to this first packet after Reseal, by this first Packet Generation to object terminal.
Wherein, to be the whole network unique for the AID of the terminal in system.
Other function of devices in system please refer to the description of method content.
The structure chart that Figure 6 shows that router of the present invention, comprising: transceiver module, enquiry module, package module and decapsulation module, wherein:
Transceiver module, for by receive the first Packet Generation to decapsulation module, the source address of this first packet and destination address are respectively the AID of source terminal and the AID of object terminal; Also for the second Packet Generation being arrived to object router by backbone network; Also for by the 3rd Packet Generation receiving to decapsulation module; And by the 4th Packet Generation to source terminal;
Decapsulation module, for the first packet is carried out to decapsulation, sends to enquiry module by the AID of object terminal; The data content of the AID of the AID of source terminal, object terminal and the first packet is sent to package module; Also, for the 3rd packet is carried out to decapsulation, the data content of the AID of the AID of source terminal, object terminal and the 3rd packet is sent to package module;
Enquiry module, obtains the RID of the object ASN under object terminal for the AID inquiry according to object terminal, and sends to package module;
Package module, is the data content of the second packet for Reseal together with source terminal and the AID of object terminal and the data content of the first packet, using the RID of the RID of this ASN and object ASN respectively as source address and the destination address of this second packet; By the second Packet Generation to transceiver module; Also for the data content of the 3rd packet being encapsulated as to the data content of the 4th packet, destination address and source address using the AID of the AID of source terminal and object terminal as the 4th packet, by the 4th Packet Generation to transceiver module.