CN102630376A - Method, apparatus and system for transferring control service - Google Patents

Method, apparatus and system for transferring control service Download PDF

Info

Publication number
CN102630376A
CN102630376A CN2011800033207A CN201180003320A CN102630376A CN 102630376 A CN102630376 A CN 102630376A CN 2011800033207 A CN2011800033207 A CN 2011800033207A CN 201180003320 A CN201180003320 A CN 201180003320A CN 102630376 A CN102630376 A CN 102630376A
Authority
CN
China
Prior art keywords
business
control
information
traffic transmission
classification request
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Granted
Application number
CN2011800033207A
Other languages
Chinese (zh)
Other versions
CN102630376B (en
Inventor
胡翔
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Huawei Technologies Co Ltd
Original Assignee
Huawei Technologies Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Huawei Technologies Co Ltd filed Critical Huawei Technologies Co Ltd
Publication of CN102630376A publication Critical patent/CN102630376A/en
Application granted granted Critical
Publication of CN102630376B publication Critical patent/CN102630376B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L67/00Network arrangements or protocols for supporting network services or applications
    • H04L67/50Network services
    • H04L67/56Provisioning of proxy services
    • H04L67/564Enhancement of application control based on intercepted application data

Abstract

Embodiments of the present invention provide a method, an apparatus and a system for transferring a control service. The method includes: receiving a data message sent by a sending end; sending classification request information to a server, the classification request message including L34 layer information of the service extracted form the data message; receiving classification request response information sent by the server, the classification request response information including a control message determined by the L34 layer; and controlling the transference of the service. By determining the control message of the service by the server set outside the gateway device, the gateway device controls the transference of the service according to the control message, which can realize the control of all services including non-browsing type services and encrypted type services, reduce influence on performance of the gateway device by configuring L34 filters, and maintain continuous updating of black and white list data and reduce the workload of network maintenance.

Description

The methods, devices and systems of control traffic transmission
Technical field
The present invention relates to the communications field, relate in particular to the methods, devices and systems of control traffic transmission.
Background technology
When comprising online type professional fast developments such as mobile subscriber equipment online, client application, therefore illegal website and also growths thereupon of application such as politics, pornographic, violence, gambling also propose for the demand that purifies Internet environment thereupon.
Gateway general grouping service wireless support node (GGSN; Gateway GPRS Support Node)/packet data serving node (PDSN; Packet Data Serving Network) etc. gateway device inserts last equipment of the core network before the Internet as mobile broadband network; Can survey (SPI based on the shallow-layer message; Shallow Packet Inspection)/deep message parsing (DPI, Deep Packet Inspection) is technological to be surveyed the data message of business, obtains this professional L34 layer information.Therefore, can in gateway device, dispose the L34 filter,, confirm this professional processing policy is controlled this traffic transmission, realize professional black and white lists function through the L34 layer information and the professional black and white lists rule of business are mated.
But configuration L34 filter is high for the gateway device performance demands, and the unlatching filtering function can produce very big influence to the performance of gateway device.In addition; Because the system resource constraints of gateway device, cause the specification of the filter that gateway device can support all very little, and need the manual black and white lists tabulation of safeguarding; Therefore; For existing network this website change and frequent scene thereof, the network maintenance staff there is very big workload, be difficult to keep the continuous updating of black and white lists data.
Therefore, need suitable scheme to control traffic transmission,, keep the continuous updating of black and white lists data, reduce the workload of network operation to reduce because of disposing the L34 filter to the influence that the gateway device performance causes.
Summary of the invention
The embodiment of the invention provides a kind of method and apparatus of controlling traffic transmission, can reduce the gateway device Effect on Performance, keeps the continuous updating of black and white lists data.
On the one hand, a kind of method of controlling traffic transmission is provided, this method comprises: the data message that receiving end/sending end sends; Send the classification request message to server, this classification request message comprises the L34 layer information of the business of from this data message, extracting; Receive the classification request-reply message that this server sends, this classification request-reply message comprises this professional control information that this server is confirmed according to this L34 layer information; According to this control information, this traffic transmission is controlled.
On the other hand, a kind of method of controlling traffic transmission is provided, this method comprises: receive gateway device and send the classification request message, this classification request message comprises the L34 layer information of the business that this gateway device extracts from data message; According to this L34 layer information, confirm the control information that this is professional; Send classification request-reply message to this gateway device, this classification request-reply message comprises this control information, so that this gateway device according to this control information, is controlled this traffic transmission.
On the one hand, a kind of device of controlling traffic transmission is provided again, this device comprises: first receiving element is used for the data message that receiving end/sending end sends; Transmitting element is used for sending the classification request message to server, and this classification request message comprises the L34 layer information of the business of from this data message, extracting; Second receiving element is used to receive the classification request-reply message that this server sends, and this classification request-reply message comprises this professional control information that this server is confirmed according to this L34 layer information; Control unit is used for according to this control information this traffic transmission being controlled.
On the one hand, a kind of device of controlling traffic transmission is provided again, this device comprises: receiving element, and be used to receive gateway device and send the classification request message, this classification request message comprises the L34 layer information of the business that this gateway device extracts from data message; Confirm the unit, be used for confirming the control information that this is professional according to this L34 layer information; Transmitting element is used for sending classification request-reply message to this gateway device, and this classification request-reply message comprises this and confirms this control information that the unit is confirmed, so that this gateway device according to this control information, is controlled this traffic transmission.
On the one hand, a kind of system that controls traffic transmission is provided again, has comprised: gateway device and server.This gateway device comprises: first receiving element is used for the data message that receiving end/sending end sends; Transmitting element is used for sending the classification request message to server, and this classification request message comprises the L34 layer information of the business of from this data message, extracting; Second receiving element is used to receive the classification request-reply message that this server sends, and this classification request-reply message comprises this professional control information that this server is confirmed according to this L34 layer information; Control unit is used for according to this control information this traffic transmission being controlled.This server comprises: receiving element, and be used to receive gateway device and send the classification request message, this classification request message comprises the L34 layer information of the business that this gateway device extracts from data message; Confirm the unit, be used for confirming the control information that this is professional according to this L34 layer information; Transmitting element is used for sending classification request-reply message to this gateway device, and this classification request-reply message comprises this and confirms this control information that the unit is confirmed, so that this gateway device according to this control information, is controlled this traffic transmission.
Therefore; Method and apparatus according to the control traffic transmission of the embodiment of the invention; Through being arranged on the control information that the gateway device external server confirms that this is professional; Gateway device is controlled this traffic transmission according to this control information, can realize reducing the influence that the gateway device performance is caused because of configuration L34 filter to comprising that non-type of browsing and all business of the type of service of encrypting control; And can keep the continuous updating of black and white lists data, reduce the workload of network operation.
Description of drawings
In order to be illustrated more clearly in the technical scheme of the embodiment of the invention; To do to introduce simply to the accompanying drawing of required use in embodiment or the description of the Prior Art below; Obviously, the accompanying drawing in describing below only is some embodiments of the present invention, for those of ordinary skills; Under the prerequisite of not paying creative work, can also obtain other accompanying drawing according to these accompanying drawings.
Fig. 1 is the indicative flowchart according to the method for the control traffic transmission of the embodiment of the invention.
Fig. 2 is an indicative flowchart of controlling the method for traffic transmission according to another embodiment of the present invention.
Fig. 3 is the interaction figure according to the method for the control traffic transmission of the embodiment of the invention.
Fig. 4 is the schematic block diagram according to the device of the control traffic transmission of the embodiment of the invention.
Fig. 5 is a schematic block diagram of controlling the device of traffic transmission according to another embodiment of the present invention.
Fig. 6 is the schematic block diagram according to the system of the control traffic transmission of the embodiment of the invention.
Embodiment
To combine the accompanying drawing in the embodiment of the invention below, the technical scheme in the embodiment of the invention is carried out clear, intactly description, obviously, described embodiment is the present invention's part embodiment, rather than whole embodiment.Based on the embodiment among the present invention, those of ordinary skills are not making the every other embodiment that is obtained under the creative work prerequisite, all belong to the scope of the present invention's protection.
Technical scheme of the present invention; Can be applied to various communication systems; For example: global system for mobile telecommunications (GSM, Global System of Mobile communication) system, code division multiple access (CDMA, Code Division Multiple Access) system, WCDMA (WCDMA; Wideband Code Division Multiple Access) system, GPRS (GPRS; GeneralPacket Radio Service), Long Term Evolution (LTE, Long Term Evolution) system, LTE FDD (FDD, Frequency Division Duplex) system, LTE time division duplex (TDD; Time Division Duplex), UMTS (UMTS, Universal Mobile Telecommunication System) etc.
The user; Also can be referred to as subscriber equipment (UE, User Equipment), portable terminal (Mobile Terminal), mobile subscriber equipment etc., can be through wireless access network (RAN for example; Radio Access Network) communicates with one or more core net; Subscriber equipment can be a portable terminal, like mobile phone (or being called " honeycomb " phone) with have the computer of portable terminal, for example; Can be portable, pocket, hand-hold type, built-in computer or vehicle-mounted mobile device, they exchange language and/or data with wireless access network.
Fig. 1 shows from the angle of gateway device side and describes, according to the indicative flowchart of the method 100 of the control traffic transmission of the embodiment of the invention.As shown in Figure 1, this method 100 comprises:
S110, the data message that receiving end/sending end sends;
S120 sends the classification request message to server, and this classification request message comprises the L34 layer information of the business of from this data message, extracting;
S130 receives the classification request-reply message that this server sends, and this classification request-reply message comprises this professional control information that this server is confirmed according to this L34 layer information;
S140 according to this control information, controls this traffic transmission.
Gateway device is behind the data message that receives the transmitting terminal transmission; Can be according to this data message; Obtain professional L34 layer information, and send the classification request message that comprises this L34 layer information to server, server can be confirmed the control information that this is professional according to this L34 layer information; And send the classification request-reply message that comprises this control information to this gateway device; After the classification request-reply message that receives this server transmission, can this traffic transmission be controlled according to this control information.
Method according to the control traffic transmission of the embodiment of the invention; Can control comprising non-type of browsing and all business of the type of service of encrypting, for example according to L34 layer information; Mutual through gateway device and server; If this traffic transmission is controlled, can reach comprising all purposes of controlling through the business of this IP address transfer of non-type of browsing and the type of service of encrypting based on Internet protocol (IP, Internet Procotol) address.If this traffic transmission is controlled based on port, can realize some software or instrument that uses particular port to carry out professional transmission is controlled, no matter this Software deployment is at what server, the control of can classifying.
Simultaneously,,, therefore reduced performance demands, reduced influence gate performance to gateway because only need carry out SPI to the data message just can obtain L34 layer information as far as gate performance.
Server can receive the black and white lists tabulation that records its L34 layer information of following the tracks of the illegal website of confirming and categorical attribute of government or the transmission of other network supervision departments; Can also pass through some self-defining web analytics algorithms; The mode of taking to travel through conducts interviews to the website of service externally is provided in the existing network; Carry out the categorical attribute analysis based on visit data; The final categorical attribute of confirming this website through these L34 layer information and categorical attribute are imported the black and white lists database, can be kept the continuous updating of black and white lists data.
Therefore; Method according to the control traffic transmission of the embodiment of the invention; Through being arranged on the control information that the gateway device external server confirms that this is professional; Gateway device is controlled this traffic transmission according to this control information, can realize reducing the influence that the gateway device performance is caused because of configuration L34 filter to comprising that non-type of browsing and all business of the type of service of encrypting control; And can keep the continuous updating of black and white lists data, reduce the workload of network operation.
In embodiments of the present invention, the L34 layer can comprise the L3 layer, or the L4 layer, or L3 layer and L4 layer.L3 layer information can comprise the interconnected (OSI of open system; Open System Interconnect) Internet protocol (IP of the network layer in the network model; Internet Procotol) address information; L4 layer information can comprise transmission control protocol/UDP (TCP/UDP, Transfer Control Protocol/User Datagram Protocol) port information of the transport layer in the OSI network model.Therefore, L34 layer information can comprise information such as the IP address of transmitting this professional service server, port.
Server also can be called content filter server, third-party server, is arranged on the gateway device outside, and is independent mutually with gateway device.
Gateway device can comprise GGSN, PDSN and Wimax access service network (WASN; Wimax Access Service Network) etc.; The gateway device that should be understood that the embodiment of the invention can also comprise can realize service set convergent point and the network element that can realize the Business Stream of end-user access is carried out Context resolution and control in other networks.
Professional transmission between subscriber equipment and service server need be passed through gateway device; And; The L34 layer information that the data message of same business (for example, this professional data message of this professional data message that subscriber equipment sends and service server generation) comprises is identical, therefore; Transmitting terminal in the embodiment of the invention can be a subscriber equipment, also can be service server.
In embodiments of the present invention, the classification request-reply message that server is confirmed according to L34 layer information can comprise professional categorical attribute or control strategy, and wherein categorical attribute can comprise door, science and technology, social activity, politics, pornographic, violence, gambling etc.Control strategy can comprise normal access, block, is redirected to the prompting page etc.For door, science and technology, social activity etc., control strategy can correspond to normal access etc.; For politics, pornographic, violence, gambling etc., control strategy can correspond to block or be redirected to reminds the page etc.Should understand; The above-mentioned categorical attribute in the embodiment of the invention and the title of control strategy with and concise and to the point the description just understand the embodiment of the invention better for the reader; The present invention is not limited to this; And, the concrete implication of above-mentioned categorical attribute and control strategy, the concrete operations that should combine to describe in the embodiment of the invention are understood.
For a certain categorical attribute, different users can have identical control strategy, also the Different control strategy can be arranged, and for example, for the business of pornographic attribute, all users' control strategy can be obstruction.For the business of social attribute, if customization should business, control strategy can be for passing through, if user's un-customized should business, control strategy can be to block.Therefore; Different users possibly have the Different control strategy because of the difference of CAMEL-Subscription-Information; Method according to the control traffic transmission of the embodiment of the invention; Can also on the basis of confirming categorical attribute, further confirm control strategy, to realize that different user flexibility is formulated the Different control strategy according to user's CAMEL-Subscription-Information and ID.
In the present embodiment; To a certain categorical attribute; If all users' control strategy all identical (for example, for the business of pornographic attribute, all users' control strategy is obstruction) in the net; Then gateway device or server only according to the categorical attribute of business, just can be confirmed the control strategy that this is professional.If different user (is for example had the Different control strategy; Business for social attribute; Different users possibly have the Different control strategy because of the difference of CAMEL-Subscription-Information); Then gateway device and server need be according to the categorical attribute of business and the ID of transmitting this professional subscriber equipment, for this user formulates professional control strategy.
Specifically; Under the situation that all users' control strategy is all identical in net; Gateway device can only comprise the L34 layer information that this is professional to the classification request message that server sends; And the classification request-reply message that this server that gateway device receives sends can comprise the categorical attribute that this is professional, also can comprise the control strategy that this is professional.
Different user is being had under the situation of Different control strategy; If the classification request message that gateway device sends to server only comprises professional L34 layer information; Then server only can be based on this L34 layer information; Confirm the categorical attribute that this is professional, gateway device also needs further according to this categorical attribute and the ID of transmitting this professional subscriber equipment, for this user formulates control strategy.If the classification request message that gateway device sends to server comprises the ID of professional L34 layer information and this professional subscriber equipment of transmission; Then server can be based on this L34 layer information; Confirm the categorical attribute that this is professional; And further formulate control strategy for this user, thereby gateway device can directly be controlled to traffic transmission according to this control strategy according to ID.Below, omit explanation to same or similar situation.
Therefore, alternatively, in embodiments of the present invention, gateway device can also obtain the ID of this professional subscriber equipment of transmission according to data message.Gateway device can comprise the L34 layer information that this is professional to the classification request message that server sends; Also can comprise L34 layer information and ID; And; The classification request-reply message that the server that gateway device receives sends can comprise the categorical attribute that this is professional, also can comprise the control strategy that this is professional.
Specifically, when this classification request-reply message comprised this professional categorical attribute, gateway device can be confirmed control strategy according to this categorical attribute, and according to this control strategy this traffic transmission is controlled.Therefore, this is controlled this traffic transmission according to this control information, can comprise:
According to this professional categorical attribute that this control information comprises, confirm the control strategy that this is professional;
According to this control strategy, this traffic transmission is controlled.
Alternatively, in embodiments of the present invention, gateway device can also be confirmed the control strategy that this is professional further according to this L34 layer information and ID.Therefore, this is controlled this traffic transmission according to this control information, can comprise:
This professional categorical attribute that comprises according to this control information and the ID of from this data message, extracting are confirmed the control strategy that this is professional;
According to this control strategy, this traffic transmission is controlled.
When this classification request-reply message comprised this professional control strategy, gateway device can be controlled this traffic transmission according to this control strategy.Therefore, this is controlled this traffic transmission according to this control information, can comprise:
According to this professional control strategy that this control information comprises, this traffic transmission is controlled.
In embodiments of the present invention, this control strategy can be that server is confirmed according to the L34 layer information that this classification request message comprises, also can be that server is confirmed according to L34 layer information and ID that this classification request message comprises.Therefore, this is controlled this traffic transmission according to this control information, can comprise:
According to this professional control strategy that this business control information comprises, this traffic transmission to be controlled, this control strategy is that this server is confirmed according to the ID of from this data message, extracting that this L34 layer information and this classification request message comprise.
Specifically; In embodiments of the present invention; Need confirm under the situation of professional control strategy according to this professional user's of transmission CAMEL-Subscription-Information, can in gateway device or content filter, be provided with and comprise the subscriber policy database that concerns between the DP of ID and professional black and white lists this.
When the subscriber policy database is arranged in the gateway device; Gateway device can send to server with L34 layer information; Server is confirmed the categorical attribute that this is professional according to this L34 layer information, and this categorical attribute is handed down to gateway device, and gateway device can obtain the ID of this professional subscriber equipment of transmission according to data message; And based on this ID inquiring user policy database; Confirm the control strategy that this subscriber equipment should be carried out for this categorical attribute, control (for example, block or through) according to this control strategy.
When the subscriber policy database is arranged in the server; Gateway device can send to server with L34 layer information and ID; Server is at first confirmed professional categorical attribute according to this L34 layer information, then based on ID inquiring user policy database, confirm the control strategy that this subscriber equipment should carry out for this categorical attribute (such as block or through); Then this control strategy is issued to gateway device, so that gateway device is controlled.
Therefore,, can based on the subscriber policy CAMEL-Subscription-Information, obtain the DP of a large amount of black and white lists, thereby can realize different user flexibility is formulated the Different control strategy according to ID according to the method for the control traffic transmission of the embodiment of the invention.
In embodiments of the present invention; ID (USER ID) can comprise mobile subscriber cellphone number (MSISDN; Mobile Subscriber Integrated Services Digital Network), IMSI International Mobile Subscriber Identity (IMSI; International Mobile Station Equipment Identity) and International Mobile Station Equipment Identity information such as (IMEI, International Mobile Subscriber Identity).The ID that should be understood that the embodiment of the invention is not limited to above information, and the cell that other can unique embodiment ID all falls in the scope of the embodiment of the invention.
Fig. 2 shows from server side and describes, according to the indicative flowchart of the method 200 of the control traffic transmission of the embodiment of the invention.As shown in Figure 2, this method 200 comprises:
S210 receives gateway device and sends the classification request message, and this classification request message comprises the L34 layer information of the business that this gateway device extracts from data message;
S220 according to this L34 layer information, confirms the control information that this is professional;
S230 sends classification request-reply message to this gateway device, and this classification request-reply message comprises this control information, so that this gateway device according to this control information, is controlled this traffic transmission.
Gateway device is behind the data message that receives the transmitting terminal transmission; Can be according to this data message; Obtain professional L34 layer information, and send the classification request message that comprises this L34 layer information to server, server can be confirmed the control information that this is professional according to this L34 layer information; And send the classification request-reply message that comprises this control information to this gateway device; After the classification request-reply message that receives this server transmission, can this traffic transmission be controlled according to this control information.
Method according to the control traffic transmission of the embodiment of the invention; Can control comprising non-type of browsing and all business of the type of service of encrypting, for example according to L34 layer information; Mutual through gateway device and server; If this traffic transmission is controlled, can reach comprising all purposes of controlling through the business of this IP address transfer of non-type of browsing and the type of service of encrypting based on Internet protocol (IP, Internet Procotol) address.If this traffic transmission is controlled based on port, can realize some software or instrument that uses particular port to carry out professional transmission is controlled, no matter this Software deployment is at what server, the control of can classifying.
Simultaneously,,, therefore reduced performance demands, reduced influence gate performance to gateway because only need carry out SPI to the data message just can obtain L34 layer information as far as gate performance.
Server can receive the black and white lists tabulation that records its L34 layer information of following the tracks of the illegal website of confirming and categorical attribute of government or the transmission of other network supervision departments; Can also pass through some self-defining web analytics algorithms; The mode of taking to travel through conducts interviews to the website of service externally is provided in the existing network; Carry out the categorical attribute analysis based on visit data; The final categorical attribute of confirming this website through these L34 layer information and categorical attribute are imported the black and white lists database, can be kept the continuous updating of black and white lists data.
Therefore; Method according to the control traffic transmission of the embodiment of the invention; Through being arranged on the control information that the gateway device external server confirms that this is professional; Gateway device is controlled this traffic transmission according to this control information, can realize reducing the influence that the gateway device performance is caused because of configuration L34 filter to comprising that non-type of browsing and all business of the type of service of encrypting control; And can keep the continuous updating of black and white lists data, reduce the workload of network operation.
In embodiments of the present invention, the L34 layer can comprise the L3 layer, or the L4 layer, or L3 layer and L4 layer.L3 layer information can comprise the IP address information of the network layer in the OSI network model, and L4 layer information can comprise the TCP/UDP port information in the OSI network model.Therefore, L34 layer information can comprise information such as the IP address of transmitting this professional service server, port.
Alternatively, in embodiments of the present invention, gateway device can also obtain the ID of this professional subscriber equipment of transmission according to data message.Gateway device can comprise the L34 layer information that this is professional to the classification request message that server sends; Also can comprise this L34 layer information and ID; And; The classification request-reply message that the server that gateway device receives sends can comprise the categorical attribute that this is professional, also can comprise the control strategy that this is professional.
Specifically, when the classification request message that the gateway device that receives when server sends comprised this professional L34 layer information, server can be confirmed the categorical attribute that this is professional according to this L34 layer information.Therefore, this confirms the control information that this is professional according to this L34 layer information, comprising:
According to this L34 layer information, this professional control information of the categorical attribute of confirming to comprise that this is professional.
And when the classification request message that the gateway device that receives when server sends comprised this professional L34 layer information, server can also be confirmed the control strategy that this is professional according to this L34 layer information.Therefore, this confirms the control information that this is professional according to this L34 layer information, comprising:
According to this L34 layer information, this professional control information of the control strategy of confirming to comprise that this is professional.
When the classification request message that the gateway device that receives when server sends comprised L34 layer information that this is professional and ID, server can be confirmed the control strategy that this is professional according to this L34 layer information and ID.Therefore, this confirms the control information that this is professional according to this L34 layer information, comprising:
The ID that this gateway device that comprises according to this L34 layer information and this classification request message extracts from this data message, this professional control information of the control strategy of confirming to comprise that this is professional.
Specifically; In embodiments of the present invention; Need confirm under the situation of professional control strategy according to this professional user's of transmission CAMEL-Subscription-Information, can in gateway device or content filter, be provided with and comprise the subscriber policy database that concerns between the DP of ID and professional black and white lists this.
When the subscriber policy database is arranged in the gateway device; Gateway device can send to server with L34 layer information; Server is confirmed the categorical attribute that this is professional according to this L34 layer information, and this categorical attribute is handed down to gateway device, and gateway device can obtain the ID of this professional subscriber equipment of transmission according to data message; And based on this ID inquiring user policy database; Confirm the control strategy that this subscriber equipment should be carried out for this categorical attribute, control (for example, block or through) according to this control strategy.
When the subscriber policy database is arranged in the server; Gateway device can send to server with L34 layer information and ID; Server is at first confirmed professional categorical attribute according to this L34 layer information, then based on ID inquiring user policy database, confirm the control strategy that this subscriber equipment should carry out for this categorical attribute (such as block or through); Then this control strategy is issued to gateway device, so that gateway device is controlled.
Therefore,, can based on the subscriber policy CAMEL-Subscription-Information, obtain the DP of a large amount of black and white lists, thereby can realize different user flexibility is formulated the Different control strategy according to ID according to the method for the control traffic transmission of the embodiment of the invention.
In embodiments of the present invention, ID can comprise information such as MSISDN, IMSI, IMEI.The ID that should be understood that the embodiment of the invention is not limited to above information, and the cell that other can unique embodiment ID all falls in the scope of the embodiment of the invention.
Fig. 3 shows the interaction figure according to the method for the control traffic transmission of the embodiment of the invention.Below, with the IP address as L34 layer information, describe as gateway device with GGSN.Show that like Fig. 3 in S301, GGSN receives the data message of UE or service server transmission.
In S302; GGSN can obtain this professional L34 layer information, for example IP address based on the SPI technology after receiving professional data message; Therefore GGSN only needs the data message is carried out the shallow-layer parsing; Thereby having reduced requirement to gateway device, and, can reduce the gateway device Effect on Performance.
Alternatively, GGSN can also obtain USER ID according to data message.Specifically; Gateway can be this UE distribute data message and USER ID when UE activates; Identifying this UE uniquely, and gateway can notify peripheral network element to be used for the USER ID index of uplink data messages (UE sends the data message that is given to service server); Set up a UE inquiry list item, be used for the USER ID index of downlink data message (sending to the data message of UE from service server) based on UE IP address.Uplink data messages selects to carry this professional contextual information by UE; The final data message can carry the ID that gateway distributes for this UE after sending to gateway when UE activates in the message header field; The context that gateway is preserved based on this ID index this locality, thus USER ID obtained.Downlink message carries this professional contextual information by gateway device based on UE ID address choice and obtains USER ID.Should be understood that data message that carries USERID and the data message that carries L34 layer information can be the same or different, the present invention does not limit especially.
Alternatively, GGSN can at first determine whether and need carry out the filtration based on L34 layer information to this business after receiving professional data message; Specifically; Can in strategic server, whether need carry out CAMEL-Subscription-Information by this professional UE of buffer memory transmission, and when this UE activated, strategic server can be according to this CAMEL-Subscription-Information based on the filtration of L34 layer information; Whether notice GGSN need carry out the filtration based on L34 layer information to this business; If the unlatching content filtering function, then in this traffic transmission process, GGSN and external server are carried out alternately.And, can also in gateway device, increase an overall situation or based on the configuration of APN (APN, Access Point Name); To confirm whether this professional UE of transmission need carry out the filtration based on L34 layer information, when UE activates, based on this configuration; Determine whether and to carry out filtration to this business based on L34 layer information; If the unlatching content filtering function, then in the Operational Visit process, GGSN and external server are carried out alternately.Therefore, can starting stage of control according to user signing contract information, confirm control mode, thereby can control neatly business, improve the efficient of traffic transmission.
In S303, GGSN can send the classification request message to server, and wherein, this classification request message can comprise the IP address, also can comprise IP address and USER ID.
In S304, server can be confirmed classification request-reply message according to this request message of classifying; Specifically, when the classification request message comprised the IP address, server can contrast the IP address of illegal website and the black and white lists tabulation of categorical attribute; Be the categorical attribute database, confirm the categorical attribute that this is professional, according to this categorical attribute; For all UE in netting confirm this professional control strategy uniformly; For example, for door, science and technology, social activity etc., gateway device or server can correspond to normal access etc. with its control strategy; For politics, pornographic, violence, gambling etc., gateway device or server can correspond to its control strategy to block or be redirected to reminds the page etc.And; When the classification request message comprises IP address and USER ID; Server can at first contrast the IP address of illegal website and the tabulation of categorical attribute; Confirm the categorical attribute that this is professional, based on USER ID inquiring user policy database, confirm the control strategy that to carry out for this categorical attribute then.
In S305, server can send the request-reply message of should classifying to GGSN, and wherein, this classification request-reply message can comprise the categorical attribute that this is professional, also can comprise the control strategy that this is professional.
In S306; GGSN can confirm to this professional control strategy, specifically according to this request-reply message of classifying; When this classification request-reply message comprised this professional control strategy, GGSN can directly extract this control strategy from this classification request-reply message.And; When this classification request-reply message comprised this professional categorical attribute, GGSN can confirm this professional control strategy according to this categorical attribute; Also can confirm the control strategy that to carry out for this categorical attribute based on USER ID inquiring user policy database.
In S307, GGSN is according to this control strategy, and control is professional to be transmitted between UE and service server.
Therefore; Method according to the control traffic transmission of the embodiment of the invention; Through being arranged on the control information that the gateway device external server confirms that this is professional; Gateway device is controlled this traffic transmission according to this control information, can realize reducing the influence that the gateway device performance is caused because of configuration L34 filter to comprising that non-type of browsing and all business of the type of service of encrypting control; And can keep the continuous updating of black and white lists data, reduce the workload of network operation.
And, can based on the subscriber policy CAMEL-Subscription-Information, obtain the DP of a large amount of black and white lists according to ID, thereby can realize different user equipment is formulated the Different control strategy flexibly.
In the preceding text,, describe method in detail, will combine Fig. 4 to Fig. 5 below, describe device in detail according to the control traffic transmission of the embodiment of the invention according to the control traffic transmission of the embodiment of the invention in conjunction with Fig. 1 to Fig. 3.
Fig. 4 shows the schematic block diagram according to the device 400 of the control traffic transmission of the embodiment of the invention.As shown in Figure 4, this device 400 comprises:
First receiving element 410 is used for the data message that receiving end/sending end sends;
Transmitting element 420 is used for sending the classification request message to server, and this classification request message comprises the L34 layer information of the business of from this data message, extracting;
Second receiving element 430 is used to receive the classification request-reply message that this server sends, and this classification request-reply message comprises this professional control information that this server is confirmed according to this L34 layer information;
Control unit 440 is used for according to this control information this traffic transmission being controlled.
Therefore; Device according to the control traffic transmission of the embodiment of the invention; Through being arranged on the control information that the gateway device external server confirms that this is professional; Gateway device is controlled this traffic transmission according to this control information, can realize reducing the influence that the gateway device performance is caused because of configuration L34 filter to comprising that non-type of browsing and all business of the type of service of encrypting control; And can keep the continuous updating of black and white lists data, reduce the workload of network operation.
In embodiments of the present invention, the classification request-reply message that second receiving element 430 receives can comprise the categorical attribute that this is professional, with the control strategy that can comprise that this is professional.Therefore, when classification request-reply message comprises this professional categorical attribute,
This control unit 440 also is used for this professional categorical attribute of comprising according to this control information, confirms the control strategy that this is professional; And
Be used for this traffic transmission being controlled according to this control strategy.
Alternatively, in embodiments of the present invention, gateway device can also be confirmed the control strategy that this is professional further according to this L34 layer information and ID.Therefore,
This control unit also is used for this professional categorical attribute that comprises according to this control information and the ID of from this data message, extracting, and confirms the control strategy that this is professional; And
Be used for this traffic transmission being controlled according to this control strategy.
In embodiments of the present invention, this control strategy can be that server is confirmed according to the L34 layer information that this classification request message comprises.Therefore,
This control unit also is used for this professional control strategy of comprising according to this control information, and this traffic transmission is controlled.
In embodiments of the present invention, this control strategy can also can be that server is confirmed according to L34 layer information and ID that this classification request message comprises.Therefore,
This control unit also is used for this professional control strategy of comprising according to this business control information; This traffic transmission is controlled, and this control strategy is that this server is confirmed according to the ID of from this data message, extracting that this L34 layer information and this classification request message comprise.
Therefore; According to the device of the control traffic transmission of the embodiment of the invention, can be according to ID, based on the subscriber policy CAMEL-Subscription-Information; Obtain the DP of a large amount of black and white lists, thereby can realize different user equipment is formulated the Different control strategy flexibly.
And in embodiments of the present invention, this L34 layer information can comprise information such as the IP of this professional service server address, port are provided.
This ID can comprise information such as MSISDN, IMSI and IMEI.
Device 400 according to the control traffic transmission of the embodiment of the invention can be corresponding to the gateway device in the method for the embodiment of the invention (for example GGSN); And; Each unit in the device 400 of this control traffic transmission and above-mentioned other operations and/or function are respectively in order to realize the corresponding flow process of the method 100 among Fig. 1; For succinctly, repeat no more at this.
Fig. 5 shows the schematic block diagram according to the device 500 of the control traffic transmission of the embodiment of the invention.As shown in Figure 5, this device 500 comprises:
Receiving element 510 is used to receive gateway device and sends the classification request message, and this classification request message comprises the L34 layer information of the business that this gateway device extracts from data message;
Confirm unit 520, be used for confirming the control information that this is professional according to this L34 layer information;
Transmitting element 530 is used for sending classification request-reply message to this gateway device, and this classification request-reply message comprises this and confirms this control information that unit 520 is confirmed, so that this gateway device according to this control information, is controlled this traffic transmission.
Therefore; Device according to the control traffic transmission of the embodiment of the invention; Through being arranged on the control information that the gateway device external server confirms that this is professional; Gateway device is controlled this traffic transmission according to this control information, can realize reducing the influence that the gateway device performance is caused because of configuration L34 filter to comprising that non-type of browsing and all business of the type of service of encrypting control; And can keep the continuous updating of black and white lists data, reduce the workload of network operation.
When the classification request message that the gateway device that receives when server sends comprised this professional L34 layer information, server can be confirmed the categorical attribute that this is professional according to this L34 layer information.Therefore,
Should confirm that unit 520 also was used for according to this L34 layer information, this professional control information of the categorical attribute of confirming to comprise that this is professional.
And when the classification request message that the gateway device that receives when server sends comprised this professional L34 layer information, server can also be confirmed the control strategy that this is professional according to this L34 layer information.Therefore,
Should confirm that unit 520 also was used for according to this L34 layer information, this professional control information of the control strategy of confirming to comprise that this is professional.
When the classification request message that the gateway device that receives when server sends comprised L34 layer information that this is professional and ID, server can be confirmed the control strategy that this is professional according to this L34 layer information and ID.Therefore,
Should confirm that unit 520 also was used for comprising the ID that this gateway device extracts according to this L34 layer information and this classification request message from data message, this professional control information of the control strategy of confirming to comprise that this is professional.
Therefore, the device according to the control traffic transmission of the embodiment of the invention can obtain the DP of a large amount of black and white lists based on the subscriber policy CAMEL-Subscription-Information, thereby can realize different user equipment is formulated the Different control strategy flexibly.
In embodiments of the present invention, this professional L34 layer information of comprising of the classification request message that sends of the gateway device that receives of receiving element 510 can comprise information such as the IP of this professional service server address, port are provided.
The ID that the classification request message that the gateway device that receiving element 510 receives sends comprises can comprise information such as MSISDN, IMSI and IMEI.
Device 500 according to the control traffic transmission of the embodiment of the invention can be corresponding to the server in the method for the embodiment of the invention; And; Each unit in the device 500 of this control traffic transmission and above-mentioned other operations and/or function are respectively in order to realize the corresponding flow process of the method 200 among Fig. 2; For succinctly, repeat no more at this.
In the preceding text,, describe method and apparatus in detail, will combine Fig. 6 below, describe system in detail according to the control traffic transmission of the embodiment of the invention according to the control traffic transmission of the embodiment of the invention in conjunction with Fig. 1 to Fig. 5.
Fig. 6 shows the schematic block diagram according to the system 600 of the control traffic transmission of the embodiment of the invention.As shown in Figure 6, this system 600 comprises: according to the device 400 of the embodiment of the invention with according to the device 500 of the embodiment of the invention.
This device 400 comprises: first receiving element 410 is used for the data message that receiving end/sending end sends; Transmitting element 420 is used for sending the classification request message to server, and this classification request message comprises the L34 layer information of the business of from this data message, extracting; Second receiving element 430 is used to receive the classification request-reply message that this server sends, and this classification request-reply message comprises this professional control information that this server is confirmed according to this L34 layer information; Control unit 440 is used for according to this control information this traffic transmission being controlled.
This device 500 comprises: receiving element 510, and be used to receive gateway device and send the classification request message, this classification request message comprises the L34 layer information of the business that this gateway device extracts from data message; Confirm unit 520, be used for confirming the control information that this is professional according to this L34 layer information; Transmitting element 530 is used for sending classification request-reply message to this gateway device, and this classification request-reply message comprises this and confirms this control information that unit 520 is confirmed, so that this gateway device according to this control information, is controlled this traffic transmission.
Therefore; System according to the control traffic transmission of the embodiment of the invention; Through being arranged on the control information that the gateway device external server confirms that this is professional; Gateway device is controlled this traffic transmission according to this control information, can realize reducing the influence that the gateway device performance is caused because of configuration L34 filter to comprising that non-type of browsing and all business of the type of service of encrypting control; And can keep the continuous updating of black and white lists data, reduce the workload of network operation.
Said apparatus 400 can be corresponding to the gateway device in the method for the embodiment of the invention, and each unit in this device 400 and above-mentioned other operations and/or function are respectively in order to realize the corresponding flow process of the method 100 among Fig. 1.Said apparatus 500 can be corresponding to the server in the method for the embodiment of the invention, and, each unit in this device 500 and above-mentioned other operations and/or function respectively for the corresponding flow process that realizes the method 200 among Fig. 2 for succinctly, repeat no more at this.
And; In various embodiment of the present invention; The size of the sequence number of above-mentioned each process does not also mean that the priority of execution sequence, and the execution sequence of each process should be definite with its function and internal logic, and should not constitute any qualification to the implementation process of the embodiment of the invention.
Those of ordinary skills can recognize, the unit and the algorithm steps of each example of describing in conjunction with embodiment disclosed herein can be realized with the combination of electronic hardware or computer software and electronic hardware.These functions still are that software mode is carried out with hardware actually, depend on the application-specific and the design constraint of technical scheme.The professional and technical personnel can use distinct methods to realize described function to each certain applications, but this realization should not thought and exceeds scope of the present invention.
The those skilled in the art can be well understood to, for the convenience described with succinct, the concrete course of work of the system of foregoing description, device and unit can repeat no more at this with reference to the corresponding process among the preceding method embodiment.
In several embodiment that the application provided, should be understood that the system that is disclosed, apparatus and method can realize through other mode.For example, device embodiment described above only is schematically, for example; The division of said unit; Only be that a kind of logic function is divided, during actual the realization other dividing mode can be arranged, for example a plurality of unit or assembly can combine or can be integrated into another system; Or some characteristics can ignore, or do not carry out.Another point, the coupling each other that shows or discuss or directly coupling or communication to connect can be through some interfaces, the INDIRECT COUPLING of device or unit or communication connect, and can be electrically, machinery or other form.
Said unit as separating component explanation can or can not be physically to separate also, and the parts that show as the unit can be or can not be physical locations also, promptly can be positioned at a place, perhaps also can be distributed on a plurality of NEs.Can realize the purpose of present embodiment scheme according to the needs selection some or all of unit wherein of reality.
In addition, each functional unit in each embodiment of the present invention can be integrated in the processing unit, also can be that the independent physics in each unit exists, and also can be integrated in the unit two or more unit.
If said function realizes with the form of SFU software functional unit and during as independently production marketing or use, can be stored in the computer read/write memory medium.Based on such understanding; The part that technical scheme of the present invention contributes to prior art in essence in other words or the part of this technical scheme can be come out with the embodied of software product; This computer software product is stored in the storage medium; Comprise some instructions with so that computer equipment (can be personal computer, server, the perhaps network equipment etc.) carry out all or part of step of the said method of each embodiment of the present invention.And aforesaid storage medium comprises: various media that can be program code stored such as USB flash disk, portable hard drive, read-only memory (ROM, Read-Only Memory), random access memory (RAM, Random Access Memory), magnetic disc or CD.
The above; Be merely embodiment of the present invention, but protection scope of the present invention is not limited thereto, any technical staff who is familiar with the present technique field is in the technical scope that the present invention discloses; Can expect easily changing or replacement, all should be encompassed within protection scope of the present invention.Therefore, protection scope of the present invention should be as the criterion by said protection range with claim.

Claims (27)

1. a method of controlling traffic transmission is characterized in that, said method comprises:
The data message that receiving end/sending end sends;
Send the classification request message to server, said classification request message comprises the L34 layer information of the business of from said data message, extracting;
Receive the classification request-reply message that said server sends, said classification request-reply message comprises the control information of said server according to the definite said business of said L34 layer information;
According to said control information, said traffic transmission is controlled.
2. method according to claim 1 is characterized in that, and is said according to said control information, and said traffic transmission is controlled, and comprising:
The categorical attribute of the said business that comprises according to said control information is confirmed the control strategy of said business;
According to said control strategy, said traffic transmission is controlled.
3. method according to claim 1 is characterized in that, and is said according to said control information, and said traffic transmission is controlled, and comprising:
The categorical attribute of the said business that comprises according to said control information and the ID of from said data message, extracting are confirmed the control strategy of said business;
According to said control strategy, said traffic transmission is controlled.
4. method according to claim 1 is characterized in that, and is said according to said control information, and said traffic transmission is controlled, and comprising:
The control strategy of the said business that comprises according to said control information is controlled said traffic transmission.
5. method according to claim 1 is characterized in that, and is said according to said business control information, and said traffic transmission is controlled, and comprising:
The control strategy of the said business that comprises according to said business control information; Said traffic transmission is controlled, and the said control strategy ID of from said data message, extracting that to be said server comprise according to said L34 layer information and said classification request message is confirmed.
6. according to claim 3 or 5 described methods, it is characterized in that said ID comprises at least one among mobile subscriber cellphone number MSISDN, IMSI International Mobile Subscriber Identity IMSI and the International Mobile Station Equipment Identity IMEI.
7. according to each described method in the claim 1 to 6, it is characterized in that said L34 layer information comprises at least one in server Internet protocol IP address and the Service-Port.
8. a method of controlling traffic transmission is characterized in that, said method comprises:
Receive gateway device and send the classification request message, said classification request message comprises the L34 layer information of the business that said gateway device extracts from data message;
According to said L34 layer information, confirm the control information of said business;
Send classification request-reply message to said gateway device, said classification request-reply message comprises said control information, so that said gateway device according to said control information, is controlled said traffic transmission.
9. method according to claim 8 is characterized in that, saidly confirms the control information of said business according to said L34 layer information, comprising:
According to said L34 layer information, confirm to comprise the control information of said business of the categorical attribute of said business.
10. method according to claim 8 is characterized in that, saidly confirms the control information of said business according to said L34 layer information, comprising:
According to said L34 layer information, confirm to comprise the control information of said business of the control strategy of said business.
11. method according to claim 8 is characterized in that, saidly confirms the control information of said business according to said L34 layer information, comprising:
The ID that the said gateway device that comprises according to said L34 layer information and said classification request message extracts from said data message confirms to comprise the control information of said business of the control strategy of said business.
12. method according to claim 11 is characterized in that, said ID comprises at least one among mobile subscriber cellphone number MSISDN, IMSI International Mobile Subscriber Identity IMSI and the International Mobile Station Equipment Identity IMEI.
13. each described method in 12 is characterized in that said L34 layer information comprises at least one in server Internet protocol IP address and the Service-Port according to Claim 8.
14. a device of controlling traffic transmission is characterized in that, said device comprises:
First receiving element is used for the data message that receiving end/sending end sends;
Transmitting element is used for sending the classification request message to server, and said classification request message comprises the L34 layer information of the business of from said data message, extracting;
Second receiving element is used to receive the classification request-reply message that said server sends, and said classification request-reply message comprises the control information of said server according to the definite said business of said L34 layer information;
Control unit is used for according to said control information said traffic transmission being controlled.
15. device according to claim 14 is characterized in that, the categorical attribute of the said business that said control unit also is used for comprising according to said control information is confirmed the control strategy of said business; And
Be used for said traffic transmission being controlled according to said control strategy.
16. device according to claim 14 is characterized in that, the categorical attribute of the said business that said control unit also is used for comprising according to said control information and the ID of from said data message, extracting are confirmed the control strategy of said business; And
Be used for said traffic transmission being controlled according to said control strategy.
17. device according to claim 14 is characterized in that, the control strategy of the said business that said control unit also is used for comprising according to said control information is controlled said traffic transmission.
18. device according to claim 14; It is characterized in that; The control strategy of the said business that said control unit also is used for comprising according to said business control information; Said traffic transmission is controlled, and the said control strategy ID of from said data message, extracting that to be said server comprise according to said L34 layer information and said classification request message is confirmed.
19. device according to claim 18 is characterized in that, said ID comprises at least one among mobile subscriber cellphone number MSISDN, IMSI International Mobile Subscriber Identity IMSI and the International Mobile Station Equipment Identity IMEI.
20., it is characterized in that said L34 layer information comprises at least one in server Internet protocol IP address and the Service-Port according to each described device in the claim 14 to 19.
21. a device of controlling traffic transmission is characterized in that, said device comprises:
Receiving element is used to receive gateway device and sends the classification request message, and said classification request message comprises the L34 layer information of the business that said gateway device extracts from data message;
Confirm the unit, be used for confirming the control information of said business according to said L34 layer information;
Transmitting element; Be used for sending classification request-reply message to said gateway device; Said classification request-reply message comprises the said control information that said definite unit is confirmed, so that said gateway device according to said control information, is controlled said traffic transmission.
22. device according to claim 21 is characterized in that, said definite unit also is used for according to said L34 layer information, confirms to comprise the control information of said business of the categorical attribute of said business.
23. device according to claim 21 is characterized in that, said definite unit also is used for according to said L34 layer information, confirms to comprise the control information of said business of the control strategy of said business.
24. device according to claim 21; It is characterized in that; Said definite unit also is used for according to said L34 layer information; Comprise the ID that said gateway device extracts with said classification request message from data message, confirm to comprise the control information of said business of the control strategy of said business.
25. device according to claim 24 is characterized in that, said ID comprises at least one among mobile subscriber cellphone number MSISDN, IMSI International Mobile Subscriber Identity IMSI and the International Mobile Station Equipment Identity IMEI.
26., it is characterized in that said L34 layer information comprises at least one in server Internet protocol IP address and the Service-Port according to each described device in the claim 21 to 25.
27. a system that controls traffic transmission is characterized in that, said system comprises:
The device of each described control traffic transmission in the claim 14 to 20; With
The device of each described control traffic transmission in the claim 21 to 26.
CN201180003320.7A 2011-12-08 2011-12-08 Method, apparatus and system for transferring control service Active CN102630376B (en)

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
PCT/CN2011/083722 WO2013082793A1 (en) 2011-12-08 2011-12-08 Method, device and system for controlling service transmission

Publications (2)

Publication Number Publication Date
CN102630376A true CN102630376A (en) 2012-08-08
CN102630376B CN102630376B (en) 2014-11-05

Family

ID=46588267

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201180003320.7A Active CN102630376B (en) 2011-12-08 2011-12-08 Method, apparatus and system for transferring control service

Country Status (2)

Country Link
CN (1) CN102630376B (en)
WO (1) WO2013082793A1 (en)

Cited By (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN106789587A (en) * 2016-12-28 2017-05-31 国家计算机网络与信息安全管理中心 The communicator and method of reliable news under a kind of cloud computing environment
WO2018137255A1 (en) * 2017-01-26 2018-08-02 华为技术有限公司 Method, apparatus and system for protecting data
CN110324284A (en) * 2018-03-30 2019-10-11 华为技术有限公司 Access the method and communication device of IMS
CN111695148A (en) * 2020-05-15 2020-09-22 浙江信网真科技股份有限公司 Network node self-learning security filtering method and device

Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1585444A (en) * 2004-06-12 2005-02-23 中兴通讯股份有限公司 Method for filtering backward frame in mobile communication system
CN1726671A (en) * 2002-12-17 2006-01-25 瑞通网络公司 Adaptive classification of network traffic
CN1801760A (en) * 2005-01-05 2006-07-12 阿尔卡特公司 Method to configure a DSL connection
US20070280277A1 (en) * 2006-05-30 2007-12-06 Martin Lund Method and system for adaptive queue and buffer control based on monitoring in a packet network switch

Patent Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1726671A (en) * 2002-12-17 2006-01-25 瑞通网络公司 Adaptive classification of network traffic
CN1585444A (en) * 2004-06-12 2005-02-23 中兴通讯股份有限公司 Method for filtering backward frame in mobile communication system
CN1801760A (en) * 2005-01-05 2006-07-12 阿尔卡特公司 Method to configure a DSL connection
US20070280277A1 (en) * 2006-05-30 2007-12-06 Martin Lund Method and system for adaptive queue and buffer control based on monitoring in a packet network switch

Cited By (8)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN106789587A (en) * 2016-12-28 2017-05-31 国家计算机网络与信息安全管理中心 The communicator and method of reliable news under a kind of cloud computing environment
WO2018137255A1 (en) * 2017-01-26 2018-08-02 华为技术有限公司 Method, apparatus and system for protecting data
CN110024331A (en) * 2017-01-26 2019-07-16 华为技术有限公司 The guard method of data, device and system
US11140545B2 (en) 2017-01-26 2021-10-05 Huawei Technologies Co., Ltd. Method, apparatus, and system for protecting data
CN110024331B (en) * 2017-01-26 2021-11-19 华为技术有限公司 Data protection method, device and system
CN110324284A (en) * 2018-03-30 2019-10-11 华为技术有限公司 Access the method and communication device of IMS
CN110324284B (en) * 2018-03-30 2020-10-27 华为技术有限公司 Method and communication device for accessing IMS
CN111695148A (en) * 2020-05-15 2020-09-22 浙江信网真科技股份有限公司 Network node self-learning security filtering method and device

Also Published As

Publication number Publication date
WO2013082793A1 (en) 2013-06-13
CN102630376B (en) 2014-11-05

Similar Documents

Publication Publication Date Title
CN103037314B (en) The method of pocket transmission news on the mobile terminal in autonomous network
ES2761261T3 (en) Optimization of a return network connection in a mobile communication network
CN106936890B (en) Aggregating vehicle-related big data
CN103051725A (en) Application identification method, data mining method, device and system
CN102693297B (en) Data processing method, node and ETL (extract transform and load) system
CN101938705A (en) Group management method, network equipment and network system
CN102474753A (en) Header compression for relay nodes
CN102917443A (en) Method and device for selecting gateway and transmitting information, and network system
CN1839591B (en) Method for discarding all segments corresponding to same packet in buffer
CN102630376B (en) Method, apparatus and system for transferring control service
CN105307173A (en) Communication network architecture, access authentication method and system based on communication network architecture
CN101309220A (en) Flow control method and apparatus
CN102427598A (en) Method and device for limiting loading service in wireless communication
CN102612825A (en) Methods and apparatus for improving header compression
CN105684381A (en) Apparatus and method for lawful interception
EP3096492B1 (en) Page push method and system
CN103988571A (en) Method, system, and recording medium for analyzing wireless network load reduction policy
Gurusamy et al. DDoS risk in 5G enabled IoT and solutions
CN103796184A (en) Spam short message recognition method and system
US9130827B2 (en) Sampling from distributed streams of data
CN1996960B (en) A filtering method for instant communication message and instant communication system
CN102075386A (en) Identification method and device
CN104994108A (en) URL filtering method, device and system
CN103200620A (en) Method and device for accessing core network in long term evolution (LTE) system
CN102209347A (en) Method and device for reporting and analyzing data

Legal Events

Date Code Title Description
C06 Publication
PB01 Publication
C10 Entry into substantive examination
SE01 Entry into force of request for substantive examination
C14 Grant of patent or utility model
GR01 Patent grant