CN105721270A - Control method for trunking communication virtual net - Google Patents
Control method for trunking communication virtual net Download PDFInfo
- Publication number
- CN105721270A CN105721270A CN201410730155.0A CN201410730155A CN105721270A CN 105721270 A CN105721270 A CN 105721270A CN 201410730155 A CN201410730155 A CN 201410730155A CN 105721270 A CN105721270 A CN 105721270A
- Authority
- CN
- China
- Prior art keywords
- virtual net
- vpn
- user
- group
- virtual
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
Abstract
The invention provides a control method for a trunking communication virtual net. The method comprises the steps: setting virtual net configuration information with virtual net identification for each virtual net; enabling a terminal to be configured in the virtual net during the virtual net account-opening operation for the terminal, and recording the virtual net identification of the virtual net in the account opening data of the terminal. The method can achieve the number porting function and can achieve the nesting of the virtual net.
Description
Technical field
The present invention relates to mobile communication technology field, particularly relate to the control method of a kind of trunking communication virtual net.
Background technology
In trunking communication framework in the prior art, be all employing section to divide virtual net (VPN, VirtualPrivateNetwork), namely identify different virtual nets by the prefix of number.Fig. 1 is the structural representation of trunking communication virtual net of the prior art, as it is shown in figure 1, trunking communication virtual net of the prior art includes: CCC, transmission network and each VPN subnet of multiple VPN subnet are communicated with CCC by transmission network.
But, making the virtual net divided in aforementioned manners in prior art is a kind of flat structure, is the resource dividing virtual net in same number space continuously.Owing to virtual net of the prior art has above-mentioned structure, therefore there are some problems as described below in actual applications:
1), the number of taking can not be realized and turn net.
The number of one terminal just entirely defines the virtual net (i.e. VPN subnet) belonging to this terminal, if terminal is switched to other virtual net, needs to change the number of terminal, therefore cannot realize the number of taking and turn the function of net.
2) nesting of virtual net cannot, be realized.
Owing to the structure of trunking communication virtual net of the prior art is a kind of flat structure, and flat virtual net divides the nesting that cannot accomplish virtual net, therefore can not meet part or the management of mechanism's layering, scheduling method in reality.
Summary of the invention
In view of this, the invention provides the control method of a kind of trunking communication virtual net, turn net function such that it is able to realize the number of taking and realize the nesting of virtual net.
Technical scheme is specifically achieved in that
A kind of control method of trunking communication virtual net, including:
The virtual net configuration information carrying virtual net mark is set for each virtual net；
When carrying out virtual net account-opening for terminal, described terminal is arranged in a virtual net, and in the data of opening an account of described terminal, records the virtual net mark of its place virtual net.
It is also preferred that the left the method may further comprise:
When terminal needs to change to another virtual net from a virtual net, the virtual net of described terminal is identified the virtual network mark of the virtual net changed to needed for being revised as.
It is also preferred that the left described in data of opening an account include:
Global Subscriber identification card usim card virtual net configuration information, user's virtual net configuration information and group's virtual net configuration information.
It is also preferred that the left the described virtual net mark arranging place virtual net in the data of opening an account corresponding with described terminal includes:
The virtual net mark of the international mobile subscriber identity IMSI that described usim card is set in usim card virtual net configuration information and the virtual net that accesses；
The virtual net mark of the ISDN ISDN number that described user is set in user's virtual net configuration information and the virtual net that accesses；
The virtual net mark of the group number that described group is set in group's virtual net configuration information and the virtual net that accesses.
It is also preferred that the left the method farther includes:
System level operation person and virtual net level operator are set at network side and corresponding operating right is set.
It is also preferred that the left the authority of system level operation person includes:
VPN is set, including: increase, delete, revise and inquiry VPN；
VPN level operator is set；
Carrying out account-opening for any one VPN, the relation between configuration group and user, including the relation between the user between VPN and group；
For the authority that the PTT PTT user setup of VPN is exhaled across VPN point, including incoming call and dialing restriction；
Number resource within the scope of configuration VPN.
It is also preferred that the left the authority of VPN level operator includes:
Additions and deletions or change and look into the usim card of this VPN, user and group；
Configure the usim card of this VPN, user and group relation；
Check the number resource of this VPN；
Check all users that this group comprises, including configured by system level operation person across VPN user.
It is also preferred that the left the method may further comprise:
Whether virtual net configuration information and user are had permission the configuration information exhaled across VPN point and is synchronized to dispatcher.
It is also preferred that the left the method may further comprise:
System-level dispatcher and virtual net level dispatcher are set at network side and corresponding operating right is set.
It is also preferred that the left the authority of system-level dispatcher includes: carry out total system scheduling operation；
The authority of VPN level dispatcher includes:
User in the VPN that operating system grade dispatcher specifies and group；
Dispatch user and the group of the VPN of its subordinate；
Check the interior user and group that authorize VPN；
The scheduling authority of place VPN.
As seen from the above technical solution, in the control method of the trunking communication virtual net of the present invention, owing to will arrange, for each virtual net (VPN), the virtual net configuration information carrying virtual net mark, then when terminal accesses a virtual net, the open an account data corresponding with described terminal arrange the virtual net mark of place virtual net, turns net function such that it is able to realize the number of taking and realize the nesting of virtual net.It addition, by above-mentioned method, utilize the isolation method of opening an account of VPN, it is possible to control the relation between user and the group of VPN.And point is exhaled and is judged by VPN traffic isolation, such that it is able to accomplish that voice VPN isolates.It addition, the scheduling authority of dispatcher can be scheduling control of authority according to the scope of VPN.
Accompanying drawing explanation
Fig. 1 is the schematic flow sheet of the control method of the trunking communication virtual net in the embodiment of the present invention.
Detailed description of the invention
For making technical scheme and advantage clearly understand, below in conjunction with drawings and the specific embodiments, the present invention is further detailed explanation.
Fig. 1 is the schematic flow sheet of the control method of the trunking communication virtual net in the embodiment of the present invention.As it is shown in figure 1, the control method of the trunking communication virtual net in the embodiment of the present invention includes:
Step 101, arranges the virtual net configuration information carrying virtual net mark for each virtual net (VPN).
In the inventive solutions, in order to each virtual net is made a distinction and identified, the virtual net configuration information carrying virtual net mark will be set for each virtual net (VPN).
It is also preferred that the left in a particular embodiment of the present invention, described virtual net configuration information may include that virtual net mark, virtual net title, user's quota, group's quota.
Wherein, in the preferred embodiment, described virtual net mark may is that virtual net is numbered.Therefore, it can be numbered by virtual net distinguish different virtual nets.
It addition, described virtual net numbering can pre-set according to the needs of actual application environment, for instance, described virtual net numbering can according to specification from 1 open numbering, and numbering arrives maximum specification number always.
Described user's quota refers to the maximum total number of users that this virtual net can configure.Setting by described user's quota, it is possible to be used for limiting the sum of Global Subscriber identification card (USIM) and user
Described group quota refers to the group's sum that can configure in this virtual net.
Additionally, further, described virtual net configuration information can also include: the virtual net mark of upper level virtual net.Such as, it is advantageous to, in a particular embodiment of the present invention, if current virtual net also has the virtual net of upper level, then the virtual net mark of upper level virtual net may is that the numbering of upper level virtual net；If current virtual net does not have the virtual net of upper level, then the virtual net mark of upper level virtual net can be invalid value.
Identified by the virtual net of above-mentioned upper level virtual net, the nesting of virtual net can be realized, such that it is able to realize the multi-zone supervision to whole virtual net system and scheduling.
Step 102, when carrying out virtual net account-opening for terminal, is arranged in described terminal in a virtual net, and records the virtual net mark of its place virtual net in the data of opening an account of described terminal.
After arrange the virtual net configuration information carrying virtual net mark for each virtual net, when opening an account in virtual net when there being terminal to need, network side will carry out virtual net account-opening for this terminal.Now, this terminal can be arranged in some virtual net by network side, then the virtual net identification record of the virtual net at this terminal place is opened an account in data in this terminal, so that the terminal of each access of virtual net has unique virtual net mark, it is possible to effectively which virtual net each terminal place clear and definite is.
So, it is advantageous to, in the inventive solutions, said method also can farther include:
When any one terminal needs to change to another virtual net from a virtual net, the virtual net opening an account in data that only need to change this terminal corresponding identifies, namely the virtual net of described terminal only need to be identified the virtual net mark of the virtual net changed to needed for being revised as, without changing the number that this terminal uses, such that it is able to the number of taking easily realizing terminal turns net operation.
It is also preferred that the left in a particular embodiment of the present invention, described in data of opening an account may include that usim card virtual net configuration information, user's virtual net configuration information and group's virtual net configuration information.
It is therefore advantageous to, in a particular embodiment of the present invention, the described virtual net mark arranging place virtual net in the data of opening an account corresponding with described terminal may include that
The virtual net mark (such as, virtual net numbering) of the international mobile subscriber identity (IMSI) that described usim card is set in usim card virtual net configuration information and the virtual net accessed；
The virtual net mark (such as, virtual net numbering) of ISDN (ISDN) number that described user is set in user's virtual net configuration information and the virtual net that accesses；
The virtual net mark (such as, virtual net numbering) of the group number that described group is set in group's virtual net configuration information and the virtual net that accesses.
By the above-mentioned virtual net mark arranging place virtual net in data of opening an account, thus establishing contacting between usim card, Subscriber Number, group number and virtual net.
In the inventive solutions, configuration of opening an account (namely arranging the virtual net mark of place virtual net in the data of opening an account corresponding with the described terminal) operation of virtual net is completed by operator.
In order to manage and for the purpose of safety, in the preferred embodiment, it is possible to for different operators, different operating rights is set, after operator logs in terminal of opening an account, can only in the configuration operation of opening an account of the virtual net within the scope of operating right.
Such as, in the preferred embodiment, it is possible to system level operation person and virtual net (VPN) level operator are set at network side and corresponding operating right is set.
Wherein, the authority of system level operation person includes:
1) VPN is set, operates including increase, delete, revise and inquiry VPN etc..
2) arranging VPN level operator, namely specifying a certain user is VPN level operator.
3) system-wide IMSI, user, group configure authority, can think that any one VPN carries out account-opening, and the relation between configuration group and user, including the relation between the user between VPN and group.Relation between the user between VPN and the group that are configured by system level operation person can only be modified by system level operation person or deletion action；Number within the scope of some VPN configured by system level operation person can be managed by VPN level operator.
4) PTT (PTT) user of a VPN can be arranged whether have permission and exhale across VPN point, be the authority that the PTT PTT user setup of VPN is exhaled across VPN point, including incoming call and dialing restriction.Default situations is for can not breathe out across VPN, it is possible to across VPN incoming call.
5) number resource within the scope of configuration VPN.Number resource within the scope of VPN can only be configured by Systems Operator.After one VPN arranges deletion, its administrative number is not belonging to any VPN.
The authority of VPN level operator includes:
1) additions and deletions or change and look into the usim card of this VPN, user and group.
2) usim card of this VPN, user and group relation can only be configured, it is impossible to other VPN user in deletion group, because this user is likely to be system level operation person's configuration, can only be deleted by the Systems Operator having permission.
3) number resource of this VPN can only be checked, the usim card of this VPN, user and group is visible.
4) user that group is included, it is possible to check all users that this group comprises, including configured by system level operation person across VPN user.
It addition, in the inventive solutions, in addition it is also necessary to whether the virtual net configuration information opened an account set by terminal and user are had permission the configuration information exhaled across VPN point and is synchronized to dispatcher, do, as dispatcher, the basis for estimation that business isolation checks.
In the inventive solutions, it is also possible to the dispatcher of dispatcher is divided into system-level dispatcher and virtual net (VPN) level dispatcher.
Wherein, the authority of system-level dispatcher includes: can carry out total system scheduling operation.
And the authority of VPN level dispatcher includes:
1) only can user in the VPN that specifies of operating system grade dispatcher and group.
2) user and the group of the VPN of its subordinate can be dispatched.
3) the interior user authorizing VPN and group can only be checked.
4) VPN acquiescence in dispatcher's account place has the scheduling authority of this VPN.
Additionally, in the inventive solutions, it is also possible to carry out the operation of virtual net (VPN) voice call control.Wherein, the operation of described VPN voice call control may include that group is exhaled and point is exhaled.
Exhaling also referred to as group call for described group, the group call right of user can be configured when this user is carried out account-opening, and the group that user can only initiate its affiliated group is exhaled.
Exhaling about point, the point in VPN exhales the acquiescence can not across Virtual Private Network call.The point of VPN is exhaled according to configuration information and is restricted by dispatcher.
After dispatcher receives the INVITE signaling of core net (CNS), it is judged that the VPN belonging to called subscriber, if do not belong to a VPN together with calling subscribe, then check whether this user is configured to the call authority specifying VPN, if not having, restriction exhalation.For called, then need to determine whether the incoming call authority across VPN.
In sum, in the inventive solutions, owing to will arrange, for each virtual net (VPN), the virtual net configuration information carrying virtual net mark, then when terminal accesses a virtual net, the open an account data corresponding with described terminal arrange the virtual net mark of place virtual net, turns net function such that it is able to realize the number of taking and realize the nesting of virtual net.It addition, by above-mentioned method, utilize the isolation method of opening an account of VPN, it is possible to control the relation between user and the group of VPN.And point is exhaled and is judged by VPN traffic isolation, such that it is able to accomplish that voice VPN isolates.It addition, the scheduling authority of dispatcher can be scheduling control of authority according to the scope of VPN.
The foregoing is only presently preferred embodiments of the present invention, not in order to limit the present invention, all within the spirit and principles in the present invention, any amendment of making, equivalent replacement, improvement etc., should be included within the scope of protection of the invention.
Claims (10)
1. the control method of a trunking communication virtual net, it is characterised in that including:
The virtual net configuration information carrying virtual net mark is set for each virtual net；
When carrying out virtual net account-opening for terminal, described terminal is arranged in a virtual net, and in the data of opening an account of described terminal, records the virtual net mark of its place virtual net.
2. method according to claim 1, it is characterised in that the method may further comprise:
When terminal needs to change to another virtual net from a virtual net, the virtual net of described terminal is identified the virtual network mark of the virtual net changed to needed for being revised as.
3. method according to claim 1, it is characterised in that described in data of opening an account include:
Global Subscriber identification card usim card virtual net configuration information, user's virtual net configuration information and group's virtual net configuration information.
4. method according to claim 1, it is characterised in that the described virtual net mark arranging place virtual net in the data of opening an account corresponding with described terminal includes:
The virtual net mark of the international mobile subscriber identity IMSI that described usim card is set in usim card virtual net configuration information and the virtual net that accesses；
The virtual net mark of the ISDN ISDN number that described user is set in user's virtual net configuration information and the virtual net that accesses；
The virtual net mark of the group number that described group is set in group's virtual net configuration information and the virtual net that accesses.
5. method according to claim 1, it is characterised in that the method farther includes:
System level operation person and virtual net level operator are set at network side and corresponding operating right is set.
6. method according to claim 5, it is characterised in that the authority of system level operation person includes:
VPN is set, including: increase, delete, revise and inquiry VPN；
VPN level operator is set；
Carrying out account-opening for any one VPN, the relation between configuration group and user, including the relation between the user between VPN and group；
For the authority that the PTT PTT user setup of VPN is exhaled across VPN point, including incoming call and dialing restriction；
Number resource within the scope of configuration VPN.
7. method according to claim 6, it is characterised in that the authority of VPN level operator includes:
Additions and deletions or change and look into the usim card of this VPN, user and group；
Configure the usim card of this VPN, user and group relation；
Check the number resource of this VPN；
Check all users that this group comprises, including configured by system level operation person across VPN user.
8. method according to claim 7, it is characterised in that the method may further comprise:
Whether virtual net configuration information and user are had permission the configuration information exhaled across VPN point and is synchronized to dispatcher.
9. method according to claim 8, it is characterised in that the method may further comprise:
System-level dispatcher and virtual net level dispatcher are set at network side and corresponding operating right is set.
10. method according to claim 9, it is characterised in that:
The authority of system-level dispatcher includes: carry out total system scheduling operation；
The authority of VPN level dispatcher includes:
User in the VPN that operating system grade dispatcher specifies and group；
Dispatch user and the group of the VPN of its subordinate；
Check the interior user and group that authorize VPN；
The scheduling authority of place VPN.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201410730155.0A CN105721270B (en) | 2014-12-04 | 2014-12-04 | Control method of cluster communication virtual network |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201410730155.0A CN105721270B (en) | 2014-12-04 | 2014-12-04 | Control method of cluster communication virtual network |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN105721270A true CN105721270A (en) | 2016-06-29 |
| CN105721270B CN105721270B (en) | 2020-05-08 |
Family
ID=56143411
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201410730155.0A Active CN105721270B (en) | 2014-12-04 | 2014-12-04 | Control method of cluster communication virtual network |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN105721270B (en) |
Cited By (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN109548185A (en) * | 2019-01-04 | 2019-03-29 | 中国联合网络通信集团有限公司 | A kind of group user number of taking turns the communication means of net, Gateway Mobile Switching Center |
Citations (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101198097A (en) * | 2007-12-29 | 2008-06-11 | 中国移动通信集团湖北有限公司 | Method for implementing virtual net charging across areas of mobile communication |
| CN101355557A (en) * | 2008-09-05 | 2009-01-28 | 杭州华三通信技术有限公司 | Method and system for implementing network access control in MPLS/VPN network |
| CN101453399A (en) * | 2007-11-30 | 2009-06-10 | 华为技术有限公司 | Virtual network configuration, section switching method, apparatus and system |
| CN102025589A (en) * | 2009-09-18 | 2011-04-20 | 中兴通讯股份有限公司 | Method and system for realizing virtual private network |
| CN103079017A (en) * | 2013-01-31 | 2013-05-01 | 施狄峰 | System and method for realizing formation of same virtual network short number intercommunication among different telecom operator users |
-
2014
- 2014-12-04 CN CN201410730155.0A patent/CN105721270B/en active Active
Patent Citations (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101453399A (en) * | 2007-11-30 | 2009-06-10 | 华为技术有限公司 | Virtual network configuration, section switching method, apparatus and system |
| CN101198097A (en) * | 2007-12-29 | 2008-06-11 | 中国移动通信集团湖北有限公司 | Method for implementing virtual net charging across areas of mobile communication |
| CN101355557A (en) * | 2008-09-05 | 2009-01-28 | 杭州华三通信技术有限公司 | Method and system for implementing network access control in MPLS/VPN network |
| CN102025589A (en) * | 2009-09-18 | 2011-04-20 | 中兴通讯股份有限公司 | Method and system for realizing virtual private network |
| CN103079017A (en) * | 2013-01-31 | 2013-05-01 | 施狄峰 | System and method for realizing formation of same virtual network short number intercommunication among different telecom operator users |
Cited By (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN109548185A (en) * | 2019-01-04 | 2019-03-29 | 中国联合网络通信集团有限公司 | A kind of group user number of taking turns the communication means of net, Gateway Mobile Switching Center |
Also Published As
| Publication number | Publication date |
|---|---|
| CN105721270B (en) | 2020-05-08 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN107153565B (en) | Method for configuring resource and network equipment thereof | |
| CN103152197B (en) | Rule set layout processing method, device and cluster data system | |
| CN106713406A (en) | Method and system for accessing to slice network | |
| CN102075872A (en) | Public bearer processing methods, network node and communication system | |
| CN107172066A (en) | The implementation method and equipment of a kind of private network communication | |
| CN102238688A (en) | Method based on user identity information access control and apparatus thereof | |
| CN110235466A (en) | It carries out managing safe context when idle mode is mobile between different wireless communication system | |
| CN101005437B (en) | Method and system for realizing heap virtual local area network | |
| AU2015374472B2 (en) | Method and apparatus for providing access to local services and applications to multi-agency responders | |
| Han et al. | Security trust zone in 5G networks | |
| CN106331997B (en) | A method of group membership registers to a group main control server when classification networking | |
| CN104284031A (en) | Speech communication method, communication terminal and server | |
| CN108701278A (en) | Method for providing service to the user equipment for being connected to the first carrier network via the second carrier network | |
| CN103297929B (en) | Cluster system multi-seat dispatching desk system and achieving method | |
| CN109068285A (en) | A kind of implementation method in cluster pond | |
| CN106612560A (en) | Terminal call method and device in multi-broadband trunk system | |
| CN103401905B (en) | Mobile application platform system for power grid scheduling based on mobile intelligent terminal | |
| CN107969017A (en) | Realize the method and system of network section | |
| CN112788593A (en) | Security policy updating method, device and system | |
| CN105721270A (en) | Control method for trunking communication virtual net | |
| CN101170495B (en) | Method, device, system and access point for access list update | |
| CN102868941A (en) | Controllable interphone and method for realizing control safety communication of interphones | |
| CN104854826B (en) | For controlling the method and system set up for passing through the calling of communication system | |
| CN109286600A (en) | Access control method and device in a kind of video monitoring system | |
| CN106211128B (en) | The generation method and device of WLAN access state event |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |