CN112565937A

CN112565937A - Method, device and system for selecting BNG-UP device

Info

Publication number: CN112565937A
Application number: CN201910913533.1A
Authority: CN
Inventors: 郭一明; 姜宇驰
Original assignee: Huawei Technologies Co Ltd
Current assignee: Huawei Technologies Co Ltd
Priority date: 2019-09-25
Filing date: 2019-09-25
Publication date: 2021-03-26
Anticipated expiration: 2039-09-25
Also published as: CN112565937B

Abstract

A method, a device and a system for selecting BNG-UP equipment relate to the technical field of communication and are beneficial to reducing the maintenance cost of a communication system. The method is applied to the network cloud engine NCE equipment and comprises the following steps: acquiring identification information of BNG-UP equipment; wherein, the BNG-UP device is used for implementing the strategy subscribed by the user; and sending first information to an optical cable target terminal OLT, wherein the first information is used for indicating the OLT to send a message from user equipment of a user to the BNG-UP equipment.

Description

Method, device and system for selecting BNG-UP device

Technical Field

The present application relates to the field of communications technologies, and in particular, to a method, an apparatus, and a system for selecting a broadband network gateway-user plane (BNG-UP) device.

Background

A communication system architecture based on Software Defined Networking (SDN) and Network Function Virtualization (NFV) includes: an Optical Line Terminal (OLT), a broadband network gateway control plane (BNG-CP) device, a BNG-UP device, and an authentication, authorization, and accounting (AAA) server.

Currently, when a new user accesses a network, an administrator manually configures, in an OLT, Virtual Local Area Network (VLAN) identification information of an interface of the OLT, which is accessed by a user device of the user, and one VLAN includes a BNG-UP device. For a newly-accessed user, the identification information of the local area network of the interface of the OLT, to which the user equipment of the user is accessed, needs to be manually configured in the OLT, and the manual configuration is complex, has regional limitation, and wastes human resources, so the maintenance cost of the communication system is high.

Disclosure of Invention

Embodiments of the present application provide methods, apparatuses, and systems for selecting a BNG-UP device, which help to reduce maintenance costs of a communication system.

In order to achieve the above purpose, the embodiment of the present application adopts the following technical solutions:

in a first aspect, a method for selecting a BNG-UP device is provided, where the method is applied to a Network Cloud Engine (NCE) device, and the method includes: acquiring identification information of BNG-UP equipment; wherein the BNG-UP device is used for implementing the strategy subscribed by the user; and sending first information to the OLT, wherein the first information is used for instructing the OLT to send the message from the user equipment of the user to the BNG-UP equipment. In the technical scheme, the NCE device can configure the OLT, so that the OLT sends the message from the user device of the user to the BNG-UP device, which is favorable for reducing the workload of manual configuration at the OLT, reducing the waste of human resources and reducing the maintenance cost of the communication system.

In one possible design, before sending the first information to the OLT, the method further includes: determining the identification information of the local area network configured to the interface of the OLT according to the identification information of the BNG-UP device; the interface is used for the user equipment to access the OLT; the BNG-UP device is located in the local area network; wherein the first information comprises identification information of the local area network. In this possible design, the configuration of the OLT by the NCE specifically refers to the configuration of the local area network identification information of the interface of the OLT, which is accessed by the user equipment of the user, by the NCE.

In another possible design, prior to obtaining the identification information of the BNG-UP device, the method further comprises: and receiving the second information sent by the BNG-CP device. The second information includes: a user account of a user or policy information of a policy subscribed by the user. The obtaining of the identification information of the BNG-UP device specifically includes: and obtaining the identification information of the BNG-UP device according to the second information. Therefore, the BNG-CP device actively sends the policy information of the latest policy subscribed by the user to the NCE device, which is beneficial to the NCE device to acquire the identification information of the BNG-UP device according to the information, thereby achieving the aim of realizing policy change in the online process of the user.

In another possible design, determining identification information of the BNG-UP device based on the first information includes: and when the second information comprises the user account, determining the identification information of the BNG-UP device according to the mapping relation between the user account of the user and the identification information of the BNG-UP device. When the second information includes policy information, the identification information of the BNG-UP device is determined according to the mapping relationship between the policy information and the identification information of the BNG-UP device. Thus, the NCE device can search the identification information of the BNG-UP device corresponding to the information according to the received information.

In another possible design, the method further includes: and when the second information comprises the user account, receiving the identification information of the interface of the OLT, which is sent by the BNG-CP equipment. Alternatively, the method further comprises: when the second information comprises the policy information, receiving a user account of the user sent by the BNG-CP device; determining identification information of an interface of the OLT according to the user account of the user; wherein, the interface of the OLT is used for the user equipment of the user to access the OLT. In this way, whether the NCE device knows or does not know the location information accessed by the user device of the user (e.g., the identification information of the interface of the OLT accessed by the user device, the identification information of the OLT accessed by the user device, etc.), the NCE device may determine the location information accessed by the user device of the user according to the received information sent by the BNG-CP, and modify the configuration of the OLT. The method and the device are beneficial to reducing the workload of manual configuration on the OLT, reducing the waste of human resources and reducing the maintenance cost of the communication system.

In another possible design, the obtaining, by the NCE device, the identification information of the BNG-UP device specifically includes: and receiving the identification information of the BNG-UP device sent by the BNG-CP device. Thus, the work of determining the identification information of the BNG-UP device can be done by the BNG-CP device, which can reduce the burden on the NCE device.

In a second aspect, a method of selecting a BNG-UP device is provided, the method being applied to a BNG-CP device; the method comprises the following steps: acquiring third information; the third information comprises a user account of the user and identification information of an interface of the OLT; or the third information comprises a user account of the user and policy information of a policy subscribed by the user. The interface is used for the user equipment of the user to access the OLT. Sending third information to NCE equipment; the third information is used for the NCE device to determine the identification information of the BNG-UP device and send the first information to the OLT, the BNG-UP device is used for implementing the policy subscribed by the user, and the first information is used for the OLT to send the message from the user device of the user to the BNG-UP device. The beneficial effects of this technical solution can refer to the first aspect described above. In addition, in this technical solution, when the NCE device does not know the location information accessed by the user device of the user, the NCE device may determine the identification information of the BNG-UP device according to the location information and the user account information sent by the BNG-CP device, and instruct the OLT to send the information sent by the user device of the user to the BNG-UP device indicated by the identification information of the determined BNG-UP device. The NCE device stores a corresponding relationship between a user account of the user and location information of the user (e.g., identification information of an OLT accessed by user equipment of the user, identification information of an interface of the OLT accessed by the user equipment of the user, etc.). The NCE equipment can determine the position information of the user according to the received user account of the user and determine the identification information of the BNG-UP equipment according to the strategy information of the strategy subscribed by the user, thereby achieving the purposes of changing the strategy and reselecting the BNG-UP equipment in the online process of the user, reducing the manual configuration on the NCE equipment or OLT, and reducing the maintenance cost of the communication system.

In one possible design, when the BNG-CP device receives the indication information sent by the AAA server, the third information is obtained; wherein the indication information is used for indicating the user verification result or the policy change subscribed by the user.

In a third aspect, a method for selecting a BNG-UP device is provided, the method being applied to a BNG-CP device; the method comprises the following steps: acquiring fourth information; the fourth information comprises a user account of the user and identification information of the BNG-UP device; or, the fourth information includes identification information of an interface of the OLT and identification information of the BNG-UP device, which are accessed by the user equipment of the user; BNG-UP is used to enforce the policies subscribed by the user; sending fourth information to NCE equipment; the fourth information is used for the NCE device to send the first information to the OLT accessed by the user device of the user, and the first information is used for the OLT to send the message from the user device of the user to the BNG-UP device. The beneficial effects of this technical solution can refer to the first aspect described above. In addition, in this technical solution, when the fourth information includes the user account of the user and the identification information of the BNG-UP device, the NCE device stores a corresponding relationship between the user account of the user and the location information of the user (e.g., the identification information of the OLT accessed by the user device of the user, the identification information of the interface of the OLT accessed by the user device of the user, etc.). In this way, the NCE device can determine the location information accessed by the user equipment of the user according to the received information sent by the BNG-CP, whether the NCE device knows or does not know the location information accessed by the user equipment of the user (e.g. the identification information of the interface of the OLT accessed by the user equipment, the identification information of the OLT accessed by the user equipment, etc.). Instructing the OLT to select a BNG-UP device to implement the policy subscribed by the user.

In one possible design, obtaining the fourth information includes: when receiving the indication information sent by the AAA server, acquiring fourth information; wherein the indication information is used for indicating the user authentication result. Alternatively, the indication information is used to indicate a policy change subscribed by the user.

In another possible design, when the indication information is used to indicate that the user authentication fails, the indication information includes a user account of the user; when receiving the indication information sent by the AAA server, acquiring fourth information, including: and when receiving the indication information sent by the AAA server, determining the identification information of the BNG-UP device according to the mapping relation between the user account of the user and the identification information of the BNG-UP device. Or when the indication information is used for indicating that the policy subscribed by the user is changed, the indication information comprises policy information of the policy subscribed by the user; when receiving the indication information sent by the AAA server, acquiring fourth information, including: and when receiving the indication information sent by the AAA server, determining the identification information of the BNG-UP device according to the mapping relation between the strategy information and the identification information of the BNG-UP device. The beneficial effects of this technical solution can refer to the first aspect described above. In addition, in the technical scheme, the BNG-CP device determines the identification information of the BNG-UP device, and may send the determined identification information of the BNG-UP device to the NCE device. And the OLT used for the NCE device to indicate the user equipment of the user to access sends the message sent by the user equipment of the user to the BNG-UP device indicated by the identification information of the determined BNG-UP device.

In a fourth aspect, a method of selecting a BNG-UP device is provided, the method being applied to an AAA server; the method comprises the following steps: generating indication information, wherein the indication information is used for indicating that the user fails to verify or indicating that the strategy subscribed by the user is changed; sending the indication information to the BNG-CP device; the indication information is used for indicating the BNG-CP device to send second information to the NCE device; the second information is used for indicating the NCE equipment to send first information to an OLT (optical line terminal) accessed by the user equipment of the user, and the first information is used for indicating the OLT to send a message from the user equipment to the BNG-UP equipment; wherein the BNG-UP device is configured to enforce the policy subscribed by the user. The beneficial effects of this technical solution can refer to the first aspect described above.

In one possible design, when the indication information is used to indicate that the target user authentication failed, the indication information includes: a user account and link identification information of a target user; wherein the link identification information includes: identification information of the OLT (e.g., anid), identification information of an interface of the OLT (e.g., frame/slot/subslot/port: associated). Thus, the BNG-CP device can obtain the location information accessed by the user equipment of the user (e.g., the identification information of the OLT accessed by the user equipment of the user, the identification information of the interface of the OLT accessed by the user equipment of the user, etc.) according to the indication information.

In another possible design, when the indication information is used to indicate a policy change subscribed to by the target user, the indication information includes: the user account of the target user and the strategy information of the target strategy subscribed by the target user. Thus, the BNG-CP device can determine the identification information of the BNG-UP device according to the policy information of the target policy subscribed by the target user.

In another possible design, the method further includes: the AAA server searches the link identification information corresponding to the user information of the target user according to the corresponding relation between the stored user information of at least one user and the link identification information; if the searched link identification information is consistent with the link identification information in the second message, the verification is passed; if not, the verification is not passed. The user information comprises a user account and a user password of the user. It should be noted that, the AAA server stores the correspondence between the user information of each user who has accessed the network and the link identification information of the link that should be used by the user equipment of the user. One link corresponds to one policy. After the policy subscribed by the user is changed, the user information and the link identification information of the user stored in the AAA server are also changed. Thus, the AAA server also fails authentication when the link identification information is incorrect, thereby notifying the BNG-CP device to notify the NCE device and having the NCE device instruct the OLT to change the configuration.

In a fifth aspect, a method of selecting a BNG-UP device is provided, the method comprising: the BNG-CP equipment sends second information to the NCE equipment; the second information comprises a user account of the user or strategy information of a strategy subscribed by the user; the NCE equipment determines the identification information of the BNG-UP equipment according to the second information; the NCE equipment sends first information to an OLT (optical line terminal) accessed by user equipment of a user; wherein, the first information is used to instruct the OLT to send the message from the user equipment to the BNG-UP device. The BNG-UP device is used to enforce the policies subscribed to by the user. The beneficial effects of this technical solution can refer to the first aspect described above.

In one possible design, the AAA server generates the indication information and sends the indication information to the BNG-CP device; wherein the indication information is used for indicating that the user fails to verify or indicating that the user subscribes to the policy change; the BNG-CP device sends second information to the NCE device, wherein the second information comprises: the BNG-CP device sends the second information to the NCE device according to the indication information.

In another possible design, before the NCE device sends the first information to the OLT that the user equipment of the user accesses, the method further includes: the NCE equipment determines the identification information of the local area network configured to the interface of the OLT according to the identification information of the BNG-UP equipment; the interface is used for the user equipment to access the OLT; the BNG-UP device is located in the local area network; wherein the first information comprises identification information of the local area network.

In another possible design, when the second information includes the user account, the determining, by the NCE device, the identification information of the BNG-UP device according to the second information includes: the NCE equipment determines the identification information of the BNG-UP equipment according to the mapping relation between the user account of the user and the identification information of the BNG-UP equipment; or, when the second information includes policy information, the NCE device determining, according to the second information, the identification information of the BNG-UP device includes: and the NCE equipment determines the identification information of the BNG-UP equipment according to the mapping relation between the strategy information and the identification information of the BNG-UP equipment.

In another possible design, the method further includes: when the second information comprises the user account, the BNG-CP equipment sends the identification information of the interface of the OLT to the NCE equipment; or when the second information comprises the policy information, the BNG-CP device sends the user account of the user to the NCE device; the NCE equipment determines the identification information of the interface of the OLT according to the user account of the user; wherein, the interface is used for the user equipment of the user to access the OLT. The beneficial effects of this technical solution can refer to the first aspect described above.

In a sixth aspect, there is provided an NCE apparatus operable to perform any of the methods provided by the first aspect and any of the possible designs of the first aspect.

In one possible design, the NCE device may be partitioned into functional blocks according to any one of the methods provided in the first aspect. For example, the functional blocks may be divided for the respective functions, or two or more functions may be integrated into one processing block. For another example, based on the NCE device including the processing module, the NCE device may further include a transceiver module for transceiving data between the NCE device and another apparatus (or device), including a receiving module and a transmitting module.

In a seventh aspect, a computer-readable storage medium, such as a computer non-transitory readable storage medium, is provided. Having stored thereon a computer program (or instructions) which, when run on a computer, causes the computer to perform any of the methods provided by the first aspect or any of the possible designs of the first aspect.

In an eighth aspect, there is provided a computer program product enabling, when running on a computer, any one of the methods provided by the first aspect or any one of the possible designs of the first aspect to be performed.

In a ninth aspect, there is provided a BNG-CP device operable to perform any one of the possible designs of the second aspect, the third aspect, the second aspect and any one of the methods provided by any one of the possible designs of the third aspect described above.

In one possible design, the BNG-CP device may be divided into functional modules according to any of the methods provided in the second or third aspects. For example, the functional blocks may be divided for the respective functions, or two or more functions may be integrated into one processing block. For another example, based on the BNG-CP device including the processing module, the BNG-CP device may further include a transceiver module for transceiving data between the BNG-CP device and other apparatuses (or devices), including a receiving module and a transmitting module.

In a tenth aspect, a computer-readable storage medium, such as a computer non-transitory readable storage medium, is provided. Having stored thereon a computer program (or instructions) which, when run on a computer, causes the computer to perform any of the methods provided by the second aspect, any of the possible designs of the second aspect, the third aspect or any of the possible designs of the third aspect described above.

In an eleventh aspect, there is provided a computer program product which, when run on a computer, causes the performance of any one of the methods provided by the second aspect, any one of the possible designs of the second aspect, the third aspect, or any one of the possible designs of the third aspect.

In a twelfth aspect, there is provided an AAA server operable to perform any of the methods provided by any of the possible designs of the fourth aspect and the fourth aspect described above.

In one possible design, the AAA server may be partitioned into functional modules according to any one of the methods provided in the fourth aspect. For example, the functional blocks may be divided for the respective functions, or two or more functions may be integrated into one processing block. For another example, based on the AAA server including the processing module, the AAA server may further include a transceiver module for transceiving data between the AAA server and another device (or apparatus), including a receiving module and a transmitting module.

In a thirteenth aspect, a computer-readable storage medium, such as a computer non-transitory readable storage medium, is provided. Having stored thereon a computer program (or instructions) which, when run on a computer, causes the computer to perform any of the methods provided by any of the possible designs of the fourth aspect and the fourth aspect described above.

In a fourteenth aspect, there is provided a computer program product which, when run on a computer, causes the performance of any one of the methods provided by the fourth aspect and by any one of the possible designs of the fourth aspect.

In a fifteenth aspect, a communication system is provided comprising an OLT, a BNG-UP device, an NCE device as provided by the first aspect or any of the possible designs of the first aspect, a BNG-CP device as provided by the second aspect or any of the possible designs of the third aspect), and an AAA server as provided by any of the possible designs of the fourth aspect or the fourth aspect.

It is understood that any one of the NCE device, the BNG-CP device, the AAA server, the computer storage medium or the computer program product provided above can be applied to the corresponding method provided above, and therefore, the beneficial effects achieved by the method can refer to the beneficial effects in the corresponding method, and are not described herein again.

Drawings

Fig. 1 is a schematic diagram of a communication system applicable to an embodiment of the present application;

fig. 2 is a schematic structural diagram of a BNG-CP device to which the technical solution provided in the present application is applied;

fig. 3 is a schematic flowchart of a method for selecting a BNG-UP device according to an embodiment of the present application;

fig. 4 is a schematic flowchart of another method for selecting a BNG-UP device according to an embodiment of the present application;

fig. 5 is a schematic structural diagram of a BNG-CP device according to an embodiment of the present application;

fig. 6 is a schematic structural diagram of an NCE device according to an embodiment of the present application;

fig. 7 is a schematic structural diagram of an AAA server according to an embodiment of the present application.

Detailed Description

In the embodiments of the present application, words such as "exemplary" or "for example" are used to mean serving as an example, instance, or illustration. Any embodiment or design described herein as "exemplary" or "e.g.," is not necessarily to be construed as preferred or advantageous over other embodiments or designs. Rather, use of the word "exemplary" or "such as" is intended to present concepts related in a concrete fashion.

In the embodiments of the present application, "at least one" means one or more. "plurality" means two or more.

In the embodiment of the present application, "and/or" is only one kind of association relationship describing an association object, and indicates that three relationships may exist, for example, a and/or B may indicate: a exists alone, A and B exist simultaneously, and B exists alone. In addition, the character "/" herein generally indicates that the former and latter related objects are in an "or" relationship.

The user equipment needs to authenticate the user before it normally accesses the network. The verification process may include: the user equipment sends a request to the OLT, where the request carries user information (such as an account number and a password), and the request is used to request authentication of the user. And the OLT sends the account and the password to the BNG-UP device in the virtual local area network indicated by the link information according to the stored outgoing interface link information of the OLT accessed by the user equipment of the user. And the BNG-UP device receives the account and the password and then sends the account and the password to the BNG-CP device. The BNG-CP equipment sends the account and the password to an AAA server; the AAA server matches the stored account and password with the received account and password to verify the identity of the user, and after the verification is passed (namely the stored account and password are respectively the same as the received account and password), the AAA server sends a response message to the user equipment through the BNG-CP equipment, the BNG-UP equipment and the OLT; subsequently, the user equipment can normally access the network.

For a user newly accessing a network, the output interface link information of the OLT accessed by the user equipment of the user needs to be manually configured in the OLT, and the manual configuration is complicated, has a region limitation, and wastes human resources. Accordingly, the present application provides methods, apparatuses, and systems for selecting a BNG-UP device.

Fig. 1 is a schematic diagram of an architecture of a communication system applicable to the embodiments of the present application; the communication system shown in fig. 1 may include a plurality of Optical Network Terminals (ONTs) 101, wherein the plurality of ONTs 101 are connected to an OLT102, and the OLT102 connects an interface configured by the OLT102 to a BNG-UP device 103 in a local area network identified by identification information of the local area network configured by the interface according to the identification information of the local area network configured by the interface. Different BNG-UP devices 103 implement different policies. A plurality of BNG-UP devices 103 are connected to one BNG-CP device 104. The BNG-CP device 104 is connected to the AAA server 105 and the NCE device 106.

The ONT101 is an optical network terminal for a user terminal. Such as light cats and the like.

The OLT102 is configured to implement functions of controlling, managing, and ranging the ONT101, and send a message received from an interface connected to the ONT101 to the BNG-UP device 103 in the local area network identified by the local area network identifier configured in the interface.

The BNG-UP device 103 is a user plane of a Broadband Remote Access Server (BRAS), is located at the edge of a network layer, and functions as a bridge between a broadband access network and a backbone network, and provides a basic access means and a management function of the broadband access network. The method realizes the convergence and forwarding of various services, can meet the requirements of different users on transmission capacity and bandwidth utilization rate, and is core equipment for broadband user access.

The BNG-CP device 104 is the control plane of the BRAS for implementing the authentication, accounting and management functions of user access in cooperation with the authentication system, accounting system, customer management system, service policy control system and AAA server 105.

The AAA server 105 is a server capable of processing a user access request, provides authentication authorization and account services, and mainly aims to manage the user access to a network server and provide services for users having access rights.

The NCE device 106 is a network cloud engine, and is connected to the OLT102 and the BNG-CP device 104 by creating a fiber channel based on a Simple Network Management Protocol (SNMP) and a fiber channel based on a network configuration protocol (netconf) mainly through an information technology and an internet technology, the NCE device 106 serves as a client, the OLT102 and the BNG-CP device 104 serve as a server, and the NCE device 106 manages the OLT102 and the BNG-CP device 104. The client can read the data of the server through the optical fiber channel.

The ONT101, OLT102, BNG-UP device 103, BNG-CP device 104, AAA server 105, and NCE device 106 described above may all be implemented by the communication device 30 as shown in FIG. 2. The communication device 30 is used for executing the method for selecting a BNG-UP device provided in the embodiment of the present application, and the communication device 30 may include at least one processor 301, a communication line 302, a memory 303, and at least one communication interface 304.

The processor 301 may be a general-purpose Central Processing Unit (CPU), a microprocessor, an application-specific integrated circuit (ASIC), or one or more ics for controlling the execution of programs in accordance with the present disclosure.

The communication link 302 may include a path for communicating information between the aforementioned components (e.g., the at least one processor 301, the communication link 302, the memory 303, and the at least one communication interface 304).

The communication interface 304 may be any device, such as a transceiver, for communicating with other devices or communication networks, such as Wide Area Networks (WAN), Local Area Networks (LAN), etc.

The memory 303 may be, but is not limited to, a read-only memory (ROM) or other type of static storage device that may store static information and instructions, a Random Access Memory (RAM) or other type of dynamic storage device that may store information and instructions, an electrically erasable programmable read-only memory (EEPROM), a compact disc read-only memory (CD-ROM) or other optical disk storage, optical disk storage (including compact disc, laser disc, optical disc, digital versatile disc, blu-ray disc, etc.), magnetic disk storage media or other magnetic storage devices, or any other medium that can be used to carry or store desired program code in the form of instructions or data structures and that can be accessed by a computer. The memory 303, which may be separate, is coupled to the processor 301 via the communication line 302. The memory 303 may also be integrated with the processor 301. The memory 303 provided by the embodiments of the present application may generally have a nonvolatile property. The memory 303 is used for storing computer instructions for executing the present application, and is controlled by the processor 301. The processor 301 is configured to execute computer instructions stored in the memory 303, thereby implementing the methods provided by the embodiments described below.

Optionally, the computer instructions in the embodiments of the present application may also be referred to as application program codes, which are not specifically limited in the embodiments of the present application.

In one embodiment, the NCE device 30 may include a plurality of processors, and each of the processors may be a single-core (single-CPU) processor or a multi-core (multi-CPU) processor. A processor herein may refer to one or more devices, circuits, and/or processing cores for processing data (e.g., computer program instructions).

In particular implementations, NCE device 30 may also include an output device 305 and/or an input device 306, as one embodiment. The output device 305 is in communication with the processor 301 and may display information in a variety of ways. For example, the output device 305 may be a Liquid Crystal Display (LCD), a Light Emitting Diode (LED) display device, a Cathode Ray Tube (CRT) display device, a projector (projector), or the like. The input device 306 is in communication with the processor 301 and may receive user input in a variety of ways. For example, the input device 306 may be a mouse, a keyboard, a touch screen device, or a sensing device, among others.

The technical solutions in the embodiments of the present application will be clearly and completely described below with reference to the drawings in the embodiments of the present application, and it is obvious that the described embodiments are only a part of the embodiments of the present application, and not all of the embodiments. All other embodiments, which can be derived by a person skilled in the art from the embodiments given herein without making any creative effort, shall fall within the protection scope of the present application.

In order to make the advantages of the technical solutions of the present application more clear, the present application is described in detail below with reference to the accompanying drawings and embodiments.

Example one

Fig. 3 is a schematic flow chart of a method for selecting a BNG-UP device according to an embodiment of the present application. Illustratively, the present embodiment may be applied to the architecture of the communication system shown in fig. 1. The embodiment can be applied to a scene that the user equipment applies for accessing the network. The method shown in fig. 3 may comprise the following steps:

s101: and the user equipment sends the first message to the ONT. The first message carries user information of a target user, wherein the user information of the target user comprises an account and a password of the target user. The first message is used for the user equipment to apply for accessing the network.

Before the user equipment normally accesses the network, the user equipment needs to send a first message to the ONT to apply for accessing the network. The user equipment may be a terminal equipment such as a mobile phone, a palm computer, a desktop computer, and a notebook computer that can access a network. The method for applying for accessing the network can comprise the following steps: dial-up access, etc.

The first packet may include a Pppo Active Discovery Initiation (PADI) packet or a Dynamic Host Configuration Protocol (DHCP) request packet.

The user information of the target user carried in the first message may be as shown in table 1 below:

TABLE 1

User account	Cipher code
		account1	111111

S102: the ONT sends a first message to the OLT.

S103: and the OLT adds the link identification information to the first message to generate a second message. Wherein the link identification information includes: identification information of the OLT (e.g., anid), identification information of an interface of the OLT (e.g., frame/slot/subslot/port: associated).

The interface of the OLT is an interface used when the OLT receives the first message. Generally, one OLT may include one or more interfaces. The source lan identification information is the lan identification information of the downlink currently configured by the interface of the OLT. Typically, an interface will be configured with a lan identification information.

Illustratively, the link identification information may be as shown in table 2 below:

TABLE 2

Identification information of OLT	Identification information of interface of OLT	Source local area network identification information
			anid1	ponid1	vlanid2

Optionally, the link identification information further includes identification information of the source BNG-UP device. Wherein the source BNG-UP device is the BNG-UP device in the source local area network indicated by the source local area network identification information in the link identification information. Typically, a local area network comprises a BNG-UP device.

In one example, the link identification information may be option82 information. In this case, the interface of the OLT needs to enable the option82 function, and the administrator may use a raio-mode (profile-mode) to select a common (common) mode to configure the link identification information. The link identification information format may be: xPON port: anid xpon frame/slot/subslot/port and contid.

In one example, the identification information of the OLT and the identification information of the interface of the OLT may be referred to as location information accessed by the user equipment of the target user.

S104: and the OLT sends a second message to the source BNG-UP device.

S105: and the source BNG-UP device sends a second message to the AAA server through the BNG-CP device.

S106: the AAA server verifies the second packet according to the stored correspondence between the user information of the at least one user and the link identification information, and obtains a verification result (i.e., verification passed or verification failed).

Specifically, the AAA server searches for link identification information corresponding to the user information of the target user according to a stored correspondence between the user information of at least one user and the link identification information; if the searched link identification information is consistent with the link identification information in the second message, the verification is passed; if not, the verification is not passed.

It should be noted that, the AAA server stores the correspondence between the user information of each user who has accessed the network and the link identification information of the link that should be used by the user equipment of the user. One link corresponds to one policy. After the policy subscribed by the user is changed, the user information and the link identification information of the user stored in the AAA server are also changed.

For example, the correspondence between the user information stored by the AAA server and the link identification information may be as shown in table 3 below:

TABLE 3

Based on table 3, if the second packet includes the user information shown in table 1 and the link identification information shown in table 2, after S106 is executed, the verification result is that the verification is not passed.

It should be noted that, in practical application, the link identification information may be identification information indicating the identification information of the OLT, the identification information of the interface of the OLT, and the identification information of the source local area network. Thus, the AAA server only needs to verify the user account, the password, and the link identification information during authentication.

S107: and the AAA server generates a first message according to the verification result of the second message. The information one includes user information of the target user, link identification information in the second message, and verification result indication information of the second message.

The embodiment of the application does not limit the specific implementation manner of the verification result indication information. For example, if the verification result indication information is 0, it indicates that the second message is not verified; and if the verification result indication information is 1, the second message passes the verification.

Based on the above example in S106 (i.e., verification failed), information one may be as shown in table 4 below:

TABLE 4

It should be noted that, in an example, the first information generated by the AAA server may not include the link identification information, and in this case, the link identification information may be stored when the BNG-CP receives the message sent by the user equipment from the target user.

S108: the AAA server sends information one to the BNG-CP device.

S109: the BNG-CP device generates at least one of information two and information three according to the information one. The information three is used for indicating the verification result of the target user, for example, the third information includes the verification result indicating information and the user account of the target user.

The specific situations are divided into two cases:

in case one, if the verification result in the information one indicates that the verification is successful, information three is generated. And if the verification result in the information I indicates that the verification fails, generating information II and information III.

In one possible design, information two includes: a user account of the target user (e.g., a user name of a point-to-point protocol over ethernet (pppoe)), identification information of an interface of the OLT, and identification information of the OLT. Assuming that the first information is shown in table 4, the second information can be shown in table 5 below:

TABLE 5

In another possible design, the information two includes: a user account number of the target user, identification information of an interface of the OLT, identification information of the OLT, and identification information of the target BNG-UP device. The BNG-CP device may determine, according to a correspondence between at least one user account stored in the BNG-CP device and the identification information of the BNG-UP device, the identification information of the target BNG-UP device corresponding to the user account of the target user carried in the first information.

It should be noted that the BNG-CP device may store a correspondence between a user account of each user who has accessed the network and identification information of the BNG-UP device implementing the policy subscribed by the user. A BNG-UP device implements a policy. After the policy subscribed by the user is changed, the identification information of the BNG-UP device corresponding to the user account of the user stored in the BNG-CP device is also changed.

For example, the correspondence between the user account stored by the BNG-CP device and the identification information of the BNG-UP device can be shown in the following table 6:

TABLE 6

User account	Identification information of BNG-UP device
		account1	BNG-UP ID1
account2	BNG-UP ID2
		account3	BNG-UP ID3

Assuming that the information is as shown in table 4, the identification information of the target BNG-UP device corresponding to the user account (i.e., account1) of the target user found by the BNG-CP device based on table 6 is BNG-UP ID 1. Based on this, the information carried by the information two can be as shown in the following table 7:

TABLE 7

In case two, no matter whether the verification result in information one indicates that the verification is successful or fails, information two and information three are generated.

In one possible design, information two includes: the user account of the target user, the identification information of the interface of the OLT, the identification information of the BNG-UP device, the status information, and the identification information of the local area network where the BNG-UP device is located, which is indicated by the identification information of the BNG-UP device.

Wherein the status information is used to indicate a user equipment change policy (change-service), online (on-line), or offline (off-line) of the target user.

Based on this, in one example, the data model of the information two may be in the following format:

the format of the second generation information may be:

s110: the BNG-CP device sends information three to the user equipment of the target user via the source BNG-UP device, OLT and ONT. After S110 is executed, the present flow ends. Subsequently, the user equipment of the target user can normally access the network.

S111: the BNG-CP device sends information two to the NCE device.

Optionally, the BNG-CP device may send the information two to the NCE device through a representational state transfer (restful) interface, for example.

It should be noted that S110 and S111 are not sequentially distinguished. The BNG-CP device may first perform S110 or S111.

S112: and the NCE equipment determines the identification information of the target BNG-UP equipment according to the second information.

If the second information does not include the identification information of the target BNG-UP device and does not include the status information, or the second information includes the status information and the status information indicates that the second message fails to be verified (if the status information is off-line), the NCE device searches for the corresponding relationship between the user account and the BNG-UP device stored in the NCE device, obtains the identification information of the BNG-UP device corresponding to the user account of the target user in the second information, and uses the identification information of the BNG-UP device as the identification information of the target BNG-UP device. Specifically, reference may be made to step S110, which is not described herein again.

And if the second information includes the identification information of the target BNG-UP device and does not include the state information, the NCE device reads the identification information of the target BNG-UP device from the second information.

Optionally, the NCE device establishes a corresponding relationship between the user account of the user and the identification information of the interface of the OLT according to the second information.

S113: and the NCE equipment determines information IV according to the identification information of the target BNG-UP equipment. And the information IV comprises identification information of the target local area network and identification information of an interface of the OLT. The identification information of the interface of the OLT in the information four is the same as the identification information of the interface of the OLT in the information two.

Specifically, the NCE device searches for a correspondence between the identification information of the BNG-UP device and the local area network identification information according to the identification information of the target BNG-UP device, and obtains the local area network identification information corresponding to the identification information of the target BNG-UP device, which is used as the identification information of the target local area network.

It should be noted that after the communication network is established, different BNG-UP devices are included in different local area networks. And only one BNG-UP device is included in one local area network so that different local area networks implement different policies. For example, the correspondence between the identification information of the BNG-UP device and the local network identification information is shown in the following table 8:

TABLE 8

Identification information of BNG-UP device	Local area network identification information
		BNG-UP ID1	vlanid1
BNG-UP ID2	vlanid2

Based on table 8, if the second information is as shown in table 7, in S113, the fourth information specified by the NCE device is vlan 1.

And S114, the NCE equipment sends information IV to the OLT. The OLT is the OLT where the interface indicated by the identification information of the interface of the OLT is located.

When the second information does not include the identification information of the OLT, the NCE device may search the identification information of the OLT corresponding to the identification information of the interface of the OLT in the second information according to the relationship between the stored identification information of the OLT and the identification information of the interface of the OLT. When the second information includes the identification information of the OLT, the NCE device determines, through the identification information of the OLT, the OLT where the interface of the OLT indicated by the identification information of the interface of the OLT is located.

And S115, the OLT modifies the local area network identification information configured in the interface indicated by the identification information of the OLT interface into the identification information of the target local area network. The identification information of the interface of the OLT is the identification information of the interface of the OLT contained in the information four.

Subsequently, when the OLT receives the message sent by the user equipment of the target user again, the identification information of the target local area network, the identification information of the OLT, and the identification information of the interface used by the OLT to receive the message may be added to the message to obtain a new message; and sends the new message to the target BNG-UP device. The target BNG-UP device sends the new message to the AAA server through the BNG-CP device, and the AAA server verifies the new message. In this case, the verification result is verification pass. Subsequently, the user equipment of the target user can normally access the network.

In this embodiment, when performing identity authentication on a user, the AAA server not only authenticates user information but also authenticates link identification information, and sends an authentication result to the BNG-CP device. And if the BNG-CP equipment determines that the verification is not passed, sending information two to the NCE equipment, determining the identification information of the target local area network by the NCE equipment according to the information two, sending the identification information of the target local area network to the OLT indicated by the identification information of the OLT in the information two, and modifying the local area network identification information configured by the interface for receiving the message sent by the user equipment of the target user into the identification information of the target local area network by the OLT. Therefore, the newly-accessed user does not need to manually modify the configuration at the OLT, thereby dynamically selecting the BNG-UP equipment to realize the link switching and reducing the maintenance cost.

Generally, a user may subscribe to different policies, and the communication system needs to select different BNG-UP devices to implement the corresponding policies. This may result in a poor user experience.

Based on this, the following second embodiment provides a method for reselecting the BNG-UP device in the online process without reapplying the access for the user handover policy, so as to implement the link handover.

Example two

Fig. 4 is a schematic flow chart of another method for selecting a BNG-UP device according to the embodiment of the present application. Illustratively, the present embodiment may be applied to the architecture of the communication system shown in fig. 1. The embodiment can be applied to the scene of policy adjustment subscribed by the user. The method shown in fig. 4 may comprise the steps of:

s201: the AAA server generates information one, such as information one according to the instruction of the administrator. Wherein, information one includes: the user account of the target user and the target strategy information subscribed by the target user. The information one is used to indicate policy changes subscribed to by the target user. The target policy information includes identification information of the target policy, and the like. Information one may be a change of authorization (COA) message.

For example, an operator adjusts a Service Level Agreement (SLA) policy or adjusts a service of a user on an AAA server, a user account of a target user is account1 in information one generated by an AAA server administrator according to an indication, and target policy information subscribed by the target user is policy 1.

S202: the AAA server sends information one to the BNG-CP device.

S203: and the BNG-CP equipment acquires the information II.

In one possible implementation, the second information includes: the user account of the target user and the target policy information.

In another possible implementation manner, the second information and the second information in the first embodiment may contain the same number of information, for example, the second information includes: the user account of the target user, the identification information of the OLT, the identification information of the interface of the OLT, the identification information of the BNG-UP device, the status information, and the local network identification information of the local network in which the BNG-UP device is located, which is indicated by the identification information of the BNG-UP device. Specifically, refer to the information two in the case two of S109 in the first embodiment, which is not described herein again.

In another possible implementation, the information two includes: the user account of the target user and the identification information of the target BNG-UP device. And the BNG-CP device searches the identification information of the BNG-UP device corresponding to the target policy information in the correspondence between the stored policy information and the identification information of the BNG-UP device according to the target policy information in the first information, and takes the found identification information of the BNG-UP device as the identification information of the target BNG-UP device. A BNG-UP device implements a policy. There is a correspondence between a BNG-UP device and the policy information of the policy it implements, which may be determined at network deployment time and may be updated.

For example, the correspondence between the policy information stored in the BNG-CP device and the identification information of the BNG-UP device is shown in the following table 9:

TABLE 9

Identification information of BNG-UP device	Policy information
		BNG-UP ID1	Strategy 1
BNG-UP ID2	Strategy 2

Based on the example in S201, the policy information shown in the BNG-CP device lookup table 9 corresponds to the identification information of the BNG-UP device, and the obtained identification information of the target BNG-UP device of policy 1 is the BNG-UP ID 1.

S204: the BNG-CP device sends information two to the NCE device.

S205: and the NCE equipment acquires the identification information of the target BNG-UP equipment according to the second information.

And if the second information comprises the identification information of the BNG-UP device, the NCE device acquires the identification information of the target BNG-UP device in the second information.

If the identification information of the BNG-UP device is not included in the second information, the NCE device searches the identification information of the BNG-UP device corresponding to the target policy information in the correspondence between the stored policy information and the identification information of the BNG-UP device, and uses the identification information as the identification information of the target BNG-UP device. For a specific implementation, reference may be made to the example in step S203, which is not described herein again.

S206: and the NCE equipment determines information four according to the information two. And the information IV comprises identification information of the target local area network and identification information of an interface of the OLT corresponding to the user account of the target user.

The meaning of the identification information of the target lan and the obtaining method thereof can refer to S113 and its example in the first embodiment, and are not described herein again.

The method for acquiring the identification information of the interface of the OLT may include:

and when the second information includes the identification information of the OLT and the identification information of the interface of the OLT, the NCE equipment acquires the identification information of the interface of the OLT in the second information.

When the second information does not include the identification information of the interface of the OLT, the NCE device may search, according to the user account of the target user in the second information, the identification information of the interface of the OLT corresponding to the user account of the target user in the stored correspondence between the user account and the identification information of the interface of the OLT. The NCE device stores a corresponding relationship between a user account which is applied to access the network once and passes verification and identification information of an interface of the OLT which receives a message sent by the user device using the user account.

For example, the correspondence between the user account stored in the NCE device and the identification information of the interface of the OLT may be as shown in table 10 below:

watch 10

User account	OLT interfaceIdentification information of
		account1	Interface 1
account2	Interface 2

Based on table 10, the identification information of the interface of the OLT corresponding to the user account of the target user in the example of S201 is interface 1.

S207: and the NCE equipment sends information IV to the OLT. And the OLT is the OLT where the interface of the OLT indicated by the identification information of the interface of the OLT in the information four is located.

When the second information does not include the identification information of the OLT, the NCE device may search the identification information of the OLT corresponding to the identification information of the interface of the OLT in the second information according to the relationship between the stored identification information of the OLT and the identification information of the interface of the OLT. And determining the OLT where the interface of the OLT indicated by the identification information of the interface of the OLT is located through the identification information of the OLT.

S208: and the OLT modifies the local area network identification information configured in the interface indicated by the identification information of the interface of the OLT into the identification information of the target local area network. The identification information of the interface of the OLT is the identification information of the interface of the OLT contained in the information four.

Subsequently, after receiving the new message sent by the user equipment of the target user again, the OLT may send the new message to the target BNG-UP device.

In this embodiment, since the BNG-CP device sends the second information to the NCE device, the second information is used to indicate that the policy subscribed by the target user changes and includes the location information accessed by the user device of the target user when the NCE device does not store the location information accessed by the user device of the target user (e.g., the identification information of the interface of the OLT accessed by the user device, the identification information of the OLT accessed by the user device, etc.), the NCE device may send the fourth information to the OLT according to the second information, and the second information is used for the OLT to modify the local area network identification information configured by the interface of the OLT, which receives the message sent by the user device of the target user, into the identification information of the target local area network. Therefore, the BNG-UP equipment after the strategy subscribed by the user is changed is selected, and the switching of the link is finally realized. And manual maintenance is not needed at the NCE equipment or the OLT, so that the maintenance cost is saved, the user can switch services in the online process, and the user experience is improved.

The scheme provided by the embodiment of the application is mainly introduced from the perspective of a method. To implement the above functions, it includes hardware structures and/or software modules for performing the respective functions. Those of skill in the art will readily appreciate that the present application is capable of hardware or a combination of hardware and computer software implementing the exemplary method steps described in connection with the embodiments disclosed herein. Whether a function is performed as hardware or computer software drives hardware depends upon the particular application and design constraints imposed on the solution. Skilled artisans may implement the described functionality in varying ways for each particular application, but such implementation decisions should not be interpreted as causing a departure from the scope of the present application.

The embodiment of the present application may perform the division of the functional modules on the communication apparatus (such as a BNG-CP device, an NCE device, or an AAA server) according to the above method example, for example, each functional module may be divided corresponding to each function, or two or more functions may be integrated into one processing module. The integrated module can be realized in a hardware mode, and can also be realized in a software functional module mode. It should be noted that, in the embodiment of the present application, the division of the module is schematic, and is only one logic function division, and there may be another division manner in actual implementation.

Fig. 5 is a schematic structural diagram of a BNG-CP device 50 according to an embodiment of the present application. The BNG-CP device 50 can be used to perform the functions performed by the BNG-CP device in any of the above embodiments (e.g., any of the embodiments shown in fig. 3-4). The BNG-CP device 50 may comprise: a transceiver module 501 and a processing module 502.

In one implementation, the processing module 502 is configured to obtain the third information. The third information includes a user account of the user and identification information of an interface of the optical cable target terminal OLT, where the interface is used for the user equipment of the user to access the OLT. Or the third information comprises a user account of the user and policy information of a policy subscribed by the user. A transceiver module 501, configured to send third information to NCE equipment; the third information is used for the NCE device to determine the identification information of the BNG-UP device and send the first information to the OLT, the BNG-UP device is used for implementing the policy subscribed by the user, and the first information is used for the OLT to send the message from the user device of the user to the BNG-UP device. For example, in conjunction with fig. 3, the processing module 502 may be configured to execute S109, and the transceiver module 501 may be configured to execute the receiving step in S108 and the transmitting steps in S110 and S111. With reference to fig. 4, the processing module 502 may be configured to execute S203, and the transceiver module 501 may be configured to execute the receiving step in S202 and the transmitting step in S204.

Optionally, the processing module 502 is further configured to: when the transceiver module 501 receives the indication information sent by the AAA server, the third information is acquired; when the third information includes the user account of the user and the identification information of the interface of the optical cable target terminal OLT, the indication information is used for indicating the user verification result, and when the third information includes the user account of the user and the policy information of the policy subscribed by the user, the indication information is used for indicating the policy subscribed by the user to be changed.

In another implementation, the processing module 502 is configured to obtain the fourth information. Wherein the fourth information comprises the user account of the user and the identification information of the BNG-UP device. Or, the fourth information includes identification information of an interface of the OLT and identification information of the BNG-UP device accessed by the user device of the user. The BNG-UP device is used to enforce the policies subscribed to by the user. The transceiver module 501 is configured to send fourth information to the NCE device. The fourth information is used for the NCE device to send first information to the OLT accessed by the user device of the user, and the first information is used for the OLT to send a message from the user device of the user to the BNG-UP device. For example, in conjunction with fig. 3, the processing module 502 may be configured to execute S109, and the transceiver module 501 may be configured to execute the receiving step in S108 and the transmitting steps in S110 and S111. With reference to fig. 4, the processing module 502 may be configured to execute S203, and the transceiver module 501 may be configured to execute the receiving step in S202 and the transmitting step in S204.

Optionally, the processing module 502 is specifically configured to: when the transceiver module 501 receives the indication information sent by the AAA server, the fourth information is acquired; wherein, when the fourth information includes the identification information of the interface of the OLT accessed by the user equipment of the user and the identification information of the BNG-UP device, the indication information is used for indicating the user authentication result, and when the fourth information includes the user account of the user and the identification information of the BNG-UP device, the indication information is used for indicating the policy change subscribed by the user.

Optionally, when the indication information is used to indicate that the user authentication fails, the indication information includes a user account of the user; the processing module 502 is further configured to determine the identification information of the BNG-UP device according to the mapping relationship between the user account of the user and the identification information of the BNG-UP device. Or when the indication information is used for indicating that the policy subscribed by the user changes, the indication information comprises policy information of the policy subscribed by the user; the processing module 502 is further configured to determine the identification information of the BNG-UP device according to the mapping relationship between the policy information and the identification information of the BNG-UP device.

In one example, referring to fig. 2, the transceiver module 501 may be implemented by the communication interface 304 in fig. 2; the processing modules 502 may each be implemented by the processor 301 in fig. 2 calling a computer program stored in the memory 303.

For the detailed description of the above alternative modes, reference is made to the foregoing method embodiments, which are not described herein again. In addition, for any explanation and description of the advantageous effects of the BNG-CP device 50 provided above, reference may be made to the corresponding method embodiment described above, and details are not repeated.

It should be noted that the actions performed by the above units are only specific examples, and the actions actually performed by the above units refer to the actions or steps mentioned in the description of the embodiment based on fig. 3 to fig. 4.

Fig. 6 is a schematic structural diagram of an NCE device according to an embodiment of the present application. The NCE device 60 may be used to perform the functions performed by the NCE device in any of the embodiments described above (e.g., any of the embodiments shown in fig. 3-4). The NCE device 60 may include: a transceiver module 601 and a processing module 602. A processing module 602, configured to obtain identification information of a BNG-UP device; wherein the BNG-UP device is configured to enforce policies subscribed by the user. The transceiver module 601 is configured to send first information to the OLT, where the first information is used to instruct the OLT to send a message from the user equipment of the user to the BNG-UP device. For example, in conjunction with fig. 3, the processing module 602 may be configured to execute steps S112 and S113, and the transceiver module 601 may be configured to execute the receiving step in step S111 and the transmitting step in step S114. With reference to fig. 4, the processing module 502 may be configured to execute steps S205 and S206, and the transceiver module 601 may be configured to execute the receiving step in step S204 and the transmitting step in step S207.

Optionally, the processing module 602 is further configured to: determining the identification information of the local area network configured to the interface of the OLT according to the identification information of the BNG-UP device; the interface is used for the user equipment to access the OLT; the BNG-UP device is located in the local area network; wherein the first information comprises identification information of the local area network.

Optionally, the transceiver module 601 is further configured to: receiving second information sent by BNG-CP equipment; the second information includes: the user account of the user or the strategy information of the strategy subscribed by the user; the processing module 602 is specifically configured to obtain the identification information of the BNG-UP device according to the second information.

Optionally, when the second information includes user information, the processing module 602 is specifically configured to determine the identification information of the BNG-UP device according to a mapping relationship between the user information of the user and the identification information of the BNG-UP device; or, when the second information includes policy information, the processing module 602 is specifically configured to determine the identification information of the BNG-UP device according to a mapping relationship between the policy information and the identification information of the BNG-UP device.

Optionally, when the second information includes the user account, the transceiver module 601 is further configured to: and receiving the identification information of the interface of the OLT, which is sent by the BNG-CP equipment.

Or, when the second information includes the policy information, the transceiver module 601 is further configured to receive a user account of the user sent by the BNG-CP device; the processing module 602 is further configured to determine, according to the user account of the user, identification information of an interface of the OLT. Wherein, the interface is used for the user equipment to access the OLT.

Optionally, the transceiver module 601 is further configured to: and receiving the identification information of the BNG-UP device sent by the BNG-CP device.

In one example, referring to fig. 2, the transceiver module 601 may be implemented by the communication interface 304 in fig. 2; the processing module 602 may be implemented by the processor 301 in fig. 2 calling a computer program stored in the memory 303.

For the detailed description of the above alternative modes, reference is made to the foregoing method embodiments, which are not described herein again. In addition, for any explanation and beneficial effect description of the NCE device 60 provided above, reference may be made to the corresponding method embodiment described above, and details are not repeated.

Fig. 7 is a schematic structural diagram of an AAA server 70 according to an embodiment of the present disclosure. The AAA server 70 may be configured to perform the functions performed by the AAA server in any of the embodiments described above (e.g., any of the embodiments shown in fig. 3-4). AAA server 70 may include: a transceiver module 701 and a processing module 702. The processing module 702 is configured to generate indication information, where the indication information is used to indicate that the user fails to authenticate or indicate a policy change subscribed by the user; the transceiver module 701 is configured to send the indication information to the BNG-CP device; the indication information is used for indicating the BNG-CP device to send second information to the NCE device; the second information is used for indicating the NCE equipment to send first information to an OLT (optical line terminal) accessed by the user equipment of the user, and the first information is used for indicating the OLT to send a message from the user equipment to the BNG-UP equipment; wherein the BNG-UP device is configured to enforce the policy subscribed by the user. For example, in conjunction with fig. 3, processing module 702 may be used to perform S106 and S107. The transceiving module 701 may be configured to perform the receiving step in S105 and the transmitting step in S108.

Optionally, when the indication information is used to indicate that the target user fails to authenticate, the indication information includes: a user account and link identification information of a target user; wherein the link identification information includes: identification information of the OLT, identification information of an interface of the OLT, and source local area network identification information. Thus, the BNG-CP device can obtain the location information accessed by the user equipment of the user according to the indication information. When the indication information is used for indicating the policy change subscribed by the target user, the indication information includes: the user account of the target user and the strategy information of the target strategy subscribed by the target user.

Optionally, the processing module 702 is further configured to search, according to the stored correspondence between the user information of the at least one user and the link identification information, link identification information corresponding to the user information of the target user; if the searched link identification information is consistent with the link identification information in the second message, the verification is passed; if not, the verification is not passed. The user information comprises a user account and a user password of the user.

In one example, referring to fig. 2, the transceiver module 701 may be implemented by the communication interface 304 in fig. 2; the processing module 702 may be implemented by the processor 301 in fig. 2 calling a computer program stored in the memory 303.

For the detailed description of the above alternative modes, reference is made to the foregoing method embodiments, which are not described herein again. In addition, for the explanation and the description of the beneficial effects of any AAA server 70 provided above, reference may be made to the corresponding method embodiment described above, and details are not repeated.

The embodiment of the present application further provides a communication system for selecting a BNG-UP device, which includes the BNG-CP device, NCE device and AAA server provided above; the steps performed by these devices can be referred to above, and are not described here.

The embodiment of the application also provides a chip. Integrated with circuitry and one or more interfaces for implementing the functions of the processor described above. Optionally, the functions supported by the chip may include processing actions in the embodiments described based on fig. 3 or fig. 4, which are not described herein again. Those skilled in the art will appreciate that all or part of the steps for implementing the above embodiments may be implemented by a program instructing the associated hardware to perform the steps. The program may be stored in a computer-readable storage medium. The above-mentioned storage medium may be a read-only memory, a random access memory, or the like. The processing unit or processor may be a central processing unit, a general purpose processor, an Application Specific Integrated Circuit (ASIC), a microprocessor (DSP), a Field Programmable Gate Array (FPGA) or other programmable logic device, a transistor logic device, a hardware component, or any combination thereof.

The embodiments of the present application also provide a computer program product containing instructions, which when executed on a computer, cause the computer to execute any one of the methods in the above embodiments. The computer program product includes one or more computer instructions. The procedures or functions described in accordance with the embodiments of the present application are all or partially generated upon loading and execution of computer program instructions on a computer. The computer may be a general purpose computer, a special purpose computer, a network of computers, or other programmable device. The computer instructions may be stored on a computer readable storage medium or transmitted from one computer readable storage medium to another computer readable storage medium, for example, the computer instructions may be transmitted from one website, computer, server, or data center to another website, computer, server, or data center via wire (e.g., coaxial cable, fiber optic, Digital Subscriber Line (DSL)) or wireless (e.g., infrared, wireless, microwave, etc.). Computer-readable storage media can be any available media that can be accessed by a computer or can comprise one or more data storage devices, such as servers, data centers, and the like, that can be integrated with the media. The usable medium may be a magnetic medium (e.g., floppy disk, hard disk, magnetic tape), an optical medium (e.g., DVD), or a semiconductor medium (e.g., Solid State Disk (SSD)), among others.

It should be noted that the above devices for storing computer instructions or computer programs provided in the embodiments of the present application, such as, but not limited to, the above memories, computer readable storage media, communication chips, and the like, are all nonvolatile (non-volatile).

Other variations to the disclosed embodiments can be understood and effected by those skilled in the art in practicing the claimed application, from a review of the drawings, the disclosure, and the appended claims. In the claims, the word "comprising" does not exclude other elements or steps, and the word "a" or "an" does not exclude a plurality. A single processor or other unit may fulfill the functions of several items recited in the claims. The mere fact that certain measures are recited in mutually different dependent claims does not indicate that a combination of these measures cannot be used to advantage.

Although the present application has been described in conjunction with specific features and embodiments thereof, various modifications and combinations can be made thereto without departing from the spirit and scope of the application. Accordingly, the specification and figures are merely exemplary of the present application as defined in the appended claims and are intended to cover any and all modifications, variations, combinations, or equivalents within the scope of the present application.

Claims

1. A method for selecting a broadband network service gateway user plane, BNG-UP, device, the method being applied to a network clouding engine, NCE, device, the method comprising:

acquiring identification information of BNG-UP equipment; wherein the BNG-UP device is used for implementing the policy subscribed by the user;

and sending first information to an optical cable target terminal OLT, wherein the first information is used for indicating the OLT to send a message from the user equipment of the user to the BNG-UP equipment.

2. The method of claim 1, wherein before said sending the first information to the OLT, the method further comprises:

determining the identification information of the local area network configured to the interface of the OLT according to the identification information of the BNG-UP device; the interface is used for the user equipment to access the OLT; the BNG-UP device is located in the local area network;

wherein the first information includes identification information of the local area network.

3. The method according to claim 1 or 2, wherein before said obtaining identification information of said BNG-UP device, said method further comprises:

receiving second information sent by broadband network service gateway control plane BNG-CP equipment; the second information includes: policy information of a user account of the user or the policy subscribed by the user;

the obtaining the identification information of the BNG-UP device comprises:

and obtaining the identification information of the BNG-UP equipment according to the second information.

4. The method of claim 3, wherein said determining identification information of said BNG-UP device according to said first information comprises:

when the second information comprises the user account, determining the identification information of the BNG-UP device according to the mapping relation between the user account of the user and the identification information of the BNG-UP device;

or, when the second information includes the policy information, determining the identification information of the BNG-UP device according to a mapping relationship between the policy information and the identification information of the BNG-UP device.

5. The method according to claim 3 or 4, characterized in that the method further comprises:

when the second information comprises the user account, receiving identification information of an interface of the OLT, which is sent by the BNG-CP equipment;

or, when the second information includes the policy information, receiving a user account of the user sent by the BNG-CP device; determining identification information of an interface of the OLT according to the user account of the user;

wherein, the interface of the OLT is used for the user equipment of the user to access the OLT.

6. The method according to claim 1 or 2, wherein said obtaining identification information of said BNG-UP device comprises:

and receiving the identification information of the BNG-UP device sent by the BNG-CP device.

7. A method for selecting broadband network service gateway user plane BNG-UP device, characterized in that the method is applied to broadband network service gateway control plane BNG-CP device; the method comprises the following steps:

acquiring third information, and sending the third information to network cloud engine NCE equipment;

the third information comprises a user account of a user and identification information of a BNG-UP device, and is used for the NCE device to send first information to an OLT (optical line terminal) accessed by user equipment of the user;

or, the third information includes identification information of an interface of an optical cable target terminal OLT accessed by user equipment of a user and identification information of a BNG-UP device, and is used for the NCE device to send first information to the OLT accessed by the user equipment of the user, and the interface is used for the user equipment of the user to access the OLT;

or, the third information includes a user account of the user and identification information of an interface of the OLT, the identification information is used for the NCE device to determine the identification information of the BNG-UP device and send the first information to the OLT, and the interface is used for the user device of the user to access the OLT;

or, the third information includes a user account of a user and policy information of a policy subscribed by the user, and is used by the NCE device to determine identification information of a BNG-UP device and send first information to the OLT, where the BNG-UP device is used to implement the policy subscribed by the user;

wherein the first information is used for the OLT to send a message from the user equipment of the user to the BNG-UP device.

8. The method of claim 7, wherein the obtaining third information comprises:

when the third information includes the user account of the user and the identification information of the interface of the OLT, or the third information includes the identification information of the interface of the OLT and the identification information of the BNG-UP device, when first indication information sent by an authentication, authorization and accounting AAA server is received, the third information is obtained; the first indication information is used for indicating the user verification result;

or, when the third information includes a user account of a user and policy information of a policy subscribed by the user, or the third information includes the user account of the user and identification information of the BNG-UP device, when receiving second indication information sent by an AAA server, obtaining the third information; the second indication information is used for indicating the strategy change subscribed by the user.

9. The method of claim 8,

when the third information includes identification information of an interface of the OLT and identification information of the BNG-UP device,

the first indication information comprises a user account of the user; when receiving the indication information sent by the AAA server, the obtaining the third information includes: when first indication information sent by an AAA server is received, determining the identification information of the BNG-UP device according to the mapping relation between the user account of the user and the identification information of the BNG-UP device;

or, when the third information includes the user account of the user and the identification information of the BNG-UP device, the second indication information includes policy information of a policy subscribed by the user; when receiving the indication information sent by the AAA server, the obtaining the third information includes: and when receiving the indication information sent by the AAA server, determining the identification information of the BNG-UP device according to the mapping relation between the strategy information and the identification information of the BNG-UP device.

10. A method for selecting a broadband network service gateway user plane, BNG-UP, device, the method comprising:

the broadband network service gateway control plane BNG-CP equipment sends second information to the network clouding engine NCE equipment; wherein the second information comprises a user account of the user or policy information of the policy subscribed by the user;

the NCE equipment determines the identification information of the BNG-UP equipment according to the second information;

the NCE equipment sends first information to an optical cable target terminal OLT accessed by the user equipment of the user; wherein the first information is used to instruct the OLT to send a message from the user equipment to the BNG-UP device; the BNG-UP device is used to enforce the policies subscribed to by the user.

11. The method of claim 10, further comprising:

the authentication, authorization and accounting AAA server generates indication information and sends the indication information to the BNG-CP equipment; wherein the indication information is used for indicating that the user authentication fails or indicating the policy change subscribed by the user;

the BNG-CP device sends second information to the NCE device, including:

and the BNG-CP equipment sends the second information to the NCE equipment according to the indication information.

12. The method according to claim 10 or 11, wherein before the NCE device sends the first information to the OLT accessed by the user equipment of the user, the method further comprises:

the NCE equipment determines the identification information of the local area network configured to the interface of the OLT according to the identification information of the BNG-UP equipment; the interface is used for the user equipment to access the OLT; the BNG-UP device is located in the local area network;

13. The method according to any one of claims 10 to 12,

when the second information includes the user account, the determining, by the NCE device according to the second information, the identification information of the BNG-UP device includes: the NCE equipment determines the identification information of the BNG-UP equipment according to the mapping relation between the user account of the user and the identification information of the BNG-UP equipment;

or, when the second information includes the policy information, the determining, by the NCE device according to the second information, the identification information of the BNG-UP device includes: and the NCE equipment determines the identification information of the BNG-UP equipment according to the mapping relation between the strategy information and the identification information of the BNG-UP equipment.

14. The method of claim 13, further comprising:

when the second information comprises the user account, the BNG-CP device sends identification information of an interface of the OLT to the NCE device;

or, when the second information includes the policy information, the BNG-CP device sends a user account of the user to the NCE device; the NCE equipment determines identification information of an interface of the OLT according to the user account of the user;

wherein, the interface is used for the user equipment of the user to access the OLT.

15. A network clouding engine NCE device, comprising:

the processing module is used for obtaining the identification information of the BNG-UP equipment; wherein the BNG-UP device is used for implementing the policy subscribed by the user;

a transceiver module, configured to send first information to an optical cable target terminal OLT, where the first information is used to instruct the OLT to send a message from the user equipment of the user to the BNG-UP device.

16. The NCE device according to claim 15, wherein,

the processing module is further configured to: determining the identification information of the local area network configured to the interface of the OLT according to the identification information of the BNG-UP device; the interface is used for the user equipment to access the OLT; the BNG-UP device is located in the local area network; wherein the first information includes identification information of the local area network.

17. The NCE device according to claim 15 or 16, characterized in that,

the transceiver module is further configured to: receiving second information sent by broadband network service gateway control plane BNG-CP equipment; the second information includes: policy information of a user account of the user or the policy subscribed by the user;

the processing module is specifically configured to: and obtaining the identification information of the BNG-UP equipment according to the second information.

18. The NCE device of claim 17, wherein the processing module is specifically configured to:

when the second information comprises the user information, determining the identification information of the BNG-UP device according to the mapping relation between the user information of the user and the identification information of the BNG-UP device;

19. The NCE device according to claim 17 or 18,

when the second information includes the user account, the transceiver module is further configured to: receiving identification information of an interface of the OLT, which is sent by the BNG-CP equipment;

or, when the second information includes the policy information, the transceiver module is further configured to: receiving the user account of the user sent by the BNG-CP equipment; the processing module is further configured to: determining identification information of an interface of the OLT according to the user account of the user; wherein, the interface is used for the user equipment to access the OLT.

20. The NCE device according to claim 15 or 16, characterized in that,

the transceiver module is further configured to: and receiving the identification information of the BNG-UP device sent by the BNG-CP device.

21. A broadband network service gateway control plane, BNG-CP, device, comprising:

the processing module is used for acquiring third information; the third information comprises a user account of a user and identification information of broadband network service gateway user plane (BNG-UP) equipment, and is used for sending first information to an optical cable target terminal (OLT) accessed by the user equipment of the user by a Network Clouding Engine (NCE) equipment;

or, the third information includes identification information of an interface of an OLT accessed by user equipment of a user and identification information of a BNG-UP device, the NCE device is configured to send the first information to the OLT accessed by the user equipment of the user, and the interface is used for the user equipment of the user to access the OLT;

wherein the first information is used for the OLT to send a message from the user equipment of the user to the BNG-UP equipment;

and the transceiver module is used for sending the third information to the NCE equipment.

22. The BNG-CP device of claim 21,

when the third information includes the user account of the user and the identification information of the interface of the OLT, or the third information includes the identification information of the interface of the OLT and the identification information of the BNG-UP device, the processing module is specifically configured to: when the transceiver module receives first indication information sent by an authentication, authorization and accounting AAA server, acquiring the third information; the first indication information is used for indicating the user verification result;

or, when the third information includes a user account of the user and policy information of a policy subscribed by the user, or the third information includes the user account of the user and identification information of the BNG-UP device, the processing module is specifically configured to: when the transceiver module receives second indication information sent by an AAA server, acquiring the third information; the second indication information is used for indicating the strategy change subscribed by the user.

23. The BNG-CP device of claim 22,

the first indication information comprises a user account of the user; when the transceiver module receives the first indication information sent by the AAA server, the processing module acquires the third information, including: when the transceiver module receives first indication information sent by an AAA server, determining the identification information of the BNG-UP device according to the mapping relation between the user account of the user and the identification information of the BNG-UP device;

or, when the third information includes the user account of the user and the identification information of the BNG-UP device, the second indication information includes policy information of a policy subscribed by the user; when the transceiver module receives second indication information sent by an AAA server, the processing module acquires the third information, including: and when the transceiver module receives the indication information sent by the AAA server, determining the identification information of the BNG-UP device according to the mapping relation between the strategy information and the identification information of the BNG-UP device.

24. A computer-readable storage medium, having stored thereon a computer program which, when run on a computer, causes the computer to perform the method of any one of claims 1 to 14.