CN112995986A - Access method of internet service, double-card bi-pass mobile terminal and firewall - Google Patents

Access method of internet service, double-card bi-pass mobile terminal and firewall Download PDF

Info

Publication number
CN112995986A
CN112995986A CN202110203505.8A CN202110203505A CN112995986A CN 112995986 A CN112995986 A CN 112995986A CN 202110203505 A CN202110203505 A CN 202110203505A CN 112995986 A CN112995986 A CN 112995986A
Authority
CN
China
Prior art keywords
card
main card
auxiliary
packet
main
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Granted
Application number
CN202110203505.8A
Other languages
Chinese (zh)
Other versions
CN112995986B (en
Inventor
张余
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
China United Network Communications Group Co Ltd
Original Assignee
China United Network Communications Group Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by China United Network Communications Group Co Ltd filed Critical China United Network Communications Group Co Ltd
Priority to CN202110203505.8A priority Critical patent/CN112995986B/en
Publication of CN112995986A publication Critical patent/CN112995986A/en
Application granted granted Critical
Publication of CN112995986B publication Critical patent/CN112995986B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W8/00—Network data management
    • H04W8/26—Network addressing or numbering for mobility support
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W36/00—Hand-off or reselection arrangements
    • H04W36/14—Reselecting a network or an air interface
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W36/00—Hand-off or reselection arrangements
    • H04W36/16—Performing reselection for specific purposes
    • H04W36/18—Performing reselection for specific purposes for allowing seamless reselection, e.g. soft reselection
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W88/00—Devices specially adapted for wireless communication networks, e.g. terminals, base stations or access point devices
    • H04W88/02—Terminal devices
    • H04W88/06—Terminal devices adapted for operation in multiple networks or having at least two operational modes, e.g. multi-mode terminals

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Databases & Information Systems (AREA)
  • Mobile Radio Communication Systems (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)

Abstract

The invention provides an access method of internet service, a double-card double-pass mobile terminal and a firewall, wherein the method comprises the following steps: when the access to the internet service is started, the communication module respectively sends attachment instructions to the main card and the auxiliary card and receives the same private network IP addresses respectively sent after the attachment of the main card and the auxiliary card is finished; the communication module respectively sends forward IP packets sent by the application system to the external network to the main card and the auxiliary card according to a preset proportion; the main card and the auxiliary card respectively send the received forward IP packets to respective corresponding gateways; and when the main card has an incoming call, the main card sends a connection releasing request to a main card gateway. The method, the dual-card dual-pass mobile terminal and the firewall can solve the problems that in the related technology, when the dual-card dual-pass mobile terminal accesses the internet service through the 4G main card, the internet service is easily interrupted, or the switching mode signaling interaction is complex, the time consumption is long, and the user experience is poor.

Description

Access method of internet service, double-card bi-pass mobile terminal and firewall
Technical Field
The invention relates to the technical field of networks, in particular to an access method of internet services, a dual-card bi-pass mobile terminal and a firewall.
Background
At present, a dual-card dual-standby mobile terminal is a relatively popular configuration, where a dual card refers to a mobile terminal having two card slots, and two USIM (Universal Subscriber identity Module)/SIM (Subscriber identity Module) cards can be installed on the mobile terminal, each USIM/SIM card can support one or more network systems, and the two USIM/SIM cards can belong to the same operator or different operators, and a dual standby function refers to that when the two USIM/SIM cards support different network systems, the mobile terminal supports that the two USIM/SIM cards are successfully registered in two networks respectively and are in standby simultaneously; when the two USIM/SIM cards support the same network system, the mobile terminal supports the two USIM/SIM cards to register successfully on the same network respectively and stand by at the same time. The dual-card dual-standby dual-pass (called dual-card dual-pass for short) means that the mobile terminal simultaneously connects signals from two communication networks.
At present, when a dual-card dual-pass mobile terminal accesses an internet service through a 4G master card, when an incoming call calls the mobile terminal, the mobile terminal either disconnects the internet service and falls back to a 2G/3G network for voice call, thereby causing internet service interruption, or selects a PS (Packet Switched) switching mode to switch the internet service into a 2G/3G network Packet network and simultaneously falls back to the 2G/3G network for voice call, but the switching mode has complex signaling interaction and long time consumption, thereby causing poor user experience.
Disclosure of Invention
The technical problem to be solved by the present invention is to provide an access method for an internet service, a dual-card bi-pass mobile terminal and a firewall for solving the problem that when the dual-card bi-pass mobile terminal accesses the internet service through a 4G master card in the related art, the internet service is easily interrupted, or the signaling interaction of the switching mode is complex and consumes a long time, which results in poor user experience.
In a first aspect, an embodiment of the present invention provides an internet service access method, which is applied to a dual-card dual-pass mobile terminal, where the mobile terminal includes a main card, an auxiliary card, a communication module, and an application system, and the method includes:
when the access to the internet service is started, the communication module respectively sends attachment instructions to the main card and the auxiliary card and receives the same private network IP addresses respectively sent after the attachment of the main card and the auxiliary card is finished;
the communication module respectively sends a forward IP packet sent by an application system to an external network to the main card and the auxiliary card according to a preset proportion, wherein a source address of the forward IP packet is the private network IP address;
the main card and the auxiliary card respectively send the received forward IP packets to respective corresponding gateways, so that the gateways send the respective received forward IP packets to a firewall, and the firewall replaces the source address of the received forward IP packet with a public network IP address and forwards the forward IP packet after address conversion to an external network;
when the main card has an incoming call, the main card sends a connection releasing request to a main card gateway, so that the main card gateway sends the main card connection releasing request to a firewall, and after the firewall releases the connection of the main card, a reverse IP packet sent by an external network to the application system is sent to the auxiliary card through an auxiliary card gateway.
Preferably, the sending, by the communication module, the attachment indication to the primary card and the secondary card respectively specifically includes:
and the communication module pops up a prompt box for whether to start the access network multiplexing service and respectively sends an attachment indication to the main card and the auxiliary card according to the access network multiplexing service instruction of the user.
Preferably, the primary card gateway is a PDN GW, and the secondary card gateway is a GGSN;
the communication module sends attachment instructions to the main card and the auxiliary card respectively, and receives the same private network IP addresses sent by the main card and the auxiliary card respectively after the attachment of the main card and the auxiliary card is completed, and the method specifically comprises the following steps:
the communication module sends an instruction of attaching PDN GW to the main card;
the main card starts a PDN GW attaching process and acquires the private network IP address distributed by the PDN GW for the main card;
the master card sends the private network IP address to the communication module;
the communication module sends an instruction of attaching GGSN to the auxiliary card;
the auxiliary card starts a GGSN attaching process and acquires the private network IP address which is distributed by the GGSN to the auxiliary card and is the same as the private network IP address distributed by the main card;
and the auxiliary card sends the private network IP address to the communication module.
Preferably, before the communication module sends the forward IP packet sent by the application system to the external network to the primary card and the secondary card respectively according to a preset ratio, the method further includes:
and the communication module acquires the network types of the access networks in the current states of the main card and the auxiliary card, and determines the preset proportion of the IP packets distributed to the main card and the auxiliary card according to the network types.
Preferably, the communication module sends the forward IP packet sent by the application system to the external network to the primary card and the secondary card according to a preset ratio, and specifically includes:
the communication module receives the forward IP packet sent to the external network by the application system within a preset time;
and the communication module respectively sends the forward IP packets received within the preset time to the main card and the auxiliary card according to the preset proportion.
Preferably, after the primary card and the secondary card respectively send the received forward IP packets to their respective corresponding gateways, the method further includes:
the main card receives a reverse IP packet which is sent to the application system by an external network and sent by the PDN GW;
the main card sends the received reverse IP packet to the communication module so that the communication module forwards the received reverse IP packet to the application system;
the auxiliary card receives the reverse IP packet which is sent to the application system by an external network and sent by the GGSN;
and the secondary card sends the received reverse IP packet to the communication module so that the communication module forwards the received reverse IP packet to the application system.
In a second aspect, an embodiment of the present invention provides an access method for an internet service, which is applied to a firewall, and the method includes:
when a mobile terminal starts to access internet services, receiving forward IP packets which are respectively sent by a main card and an auxiliary card through respective gateways and have the same source address, wherein the forward IP packets are respectively sent to the main card and the auxiliary card by a communication module according to a preset proportion, and the source address of the forward IP packet is a private network IP address;
replacing the source address of the received forward IP packet with a public network IP address, and forwarding the forward IP packet after address conversion to an external network;
receiving a main card connection releasing request sent by a main card gateway when a main card has an incoming call, and releasing the connection of the main card according to the main card connection releasing request;
and sending the reverse IP packet sent to the application system by the external network to the auxiliary card through the auxiliary card gateway.
Preferably, the primary card gateway is a PDN GW, and the secondary card gateway is a GGSN;
after forwarding the forward IP packet after address translation to the external network, the method further includes:
receiving a reverse IP packet sent to the application system by the external network within a preset time;
and respectively sending the reverse IP packets to the PDN GW and the GGSN according to the preset proportion, so that the PDN GW and the GGSN respectively send the received reverse IP packets to the main card and the auxiliary card, and the main card and the auxiliary card respectively forward the received reverse IP packets to an application system through the communication module.
In a third aspect, an embodiment of the present invention provides a dual-card dual-pass mobile terminal, including a primary card, a secondary card, a communication module, and an application system;
the communication module is used for respectively sending attachment instructions to the main card and the auxiliary card when the internet access service is started, and receiving the same private network IP addresses respectively sent by the main card and the auxiliary card after the attachment is finished;
the communication module is further configured to send a forward IP packet sent by the application system to an external network to the main card and the auxiliary card, respectively, according to a preset ratio, where a source address of the forward IP packet is the private network IP address;
the main card and the auxiliary card are used for respectively sending the received forward IP packets to respective corresponding gateways so that the gateways send the respective received forward IP packets to a firewall, and the firewall replaces the source address of the received forward IP packet with a public network IP address and forwards the forward IP packet after address conversion to an external network;
when the main card has an incoming call, the main card is also used for sending a connection releasing request to the main card gateway, so that the main card gateway sends the main card connection releasing request to a firewall, and after the firewall releases the connection of the main card, a reverse IP packet sent to the application system by an external network is sent to the auxiliary card through the auxiliary card gateway.
In a fourth aspect, an embodiment of the present invention provides a firewall, including:
the forward IP packet receiving module is used for receiving forward IP packets which are respectively sent by a main card and an auxiliary card through respective gateways and have the same source address when the mobile terminal starts to access the internet service, wherein the forward IP packets are respectively sent to the main card and the auxiliary card by the communication module according to a preset proportion, and the source addresses of the forward IP packets are private network IP addresses;
the address conversion module is connected with the forward IP packet receiving module and used for replacing a source address of the received forward IP packet with a public network IP address and forwarding the forward IP packet after address conversion to an external network;
the connection releasing module is connected with the address conversion module and used for receiving a main card releasing connection request sent by a main card gateway when a main card has an incoming call and releasing the connection of the main card according to the main card releasing connection request;
and the reverse IP packet sending module is connected with the connection releasing module and is used for sending the reverse IP packet sent to the application system by the external network to the auxiliary card through the auxiliary card gateway.
According to the access method of the internet service, the double-card bi-pass mobile terminal and the firewall provided by the embodiment of the invention, when the mobile terminal starts to access the internet service, the communication module respectively sends the attachment instructions to the main card and the auxiliary card and receives the same private network IP addresses respectively sent after the attachment of the main card and the auxiliary card is finished; the communication module respectively sends a forward IP packet sent by an application system to an external network to the main card and the auxiliary card according to a preset proportion, wherein a source address of the forward IP packet is the private network IP address; the main card and the auxiliary card respectively send the received forward IP packets to the corresponding gateways, so that the gateways send the received forward IP packets to the firewall, the firewall replaces the source address of the received forward IP packet with a public network IP address and forwards the forward IP packet after address conversion to the external network, and therefore an application system can simultaneously access internet services through the main card and the auxiliary card, the internet access speed is improved, and service multiplexing of the main card and the auxiliary card is achieved. When the main card has the incoming call, the main card sends the release connection request to the main card gateway, so that the main card gateway sends the release main card connection request to preventing the hot wall, and makes prevent the hot wall release after the connection of main card, send the extranet give application system's reverse IP package sends through the vice card gateway and gives the vice card to can reduce the interaction of signaling when guaranteeing the continuity of surfing the net, improve user's experience, when having solved two card bi-pass mobile terminal and having passed through 4G main card access internet service among the correlation technique, lead to internet service interrupt easily, perhaps switch mode signaling interaction is complicated, and is consuming time longer, leads to the not good problem of user experience.
Drawings
FIG. 1: a flow chart of an access method of an internet service according to embodiment 1 of the present invention;
FIG. 2: the invention discloses an interactive schematic diagram of an access method of internet service;
FIG. 3: a flow chart of an access method of an internet service according to embodiment 2 of the present invention;
FIG. 4: is a schematic structural diagram of a dual-card bi-pass mobile terminal in embodiment 3 of the present invention;
FIG. 5: is a schematic structural diagram of a firewall in embodiment 4 of the present invention.
Detailed Description
It should be noted that the embodiments and features of the embodiments in the present application may be combined with each other without conflict. The present application will be described in detail below with reference to the embodiments with reference to the attached drawings.
In order to make the technical solutions better understood by those skilled in the art, the technical solutions in the embodiments of the present application will be clearly and completely described below with reference to the drawings in the embodiments of the present application, and it is obvious that the described embodiments are only partial embodiments of the present application, but not all embodiments. All other embodiments, which can be derived by a person skilled in the art from the embodiments given herein without making any creative effort, shall fall within the protection scope of the present application.
Example 1:
the embodiment provides an internet service access method, which is applied to a dual-card dual-pass mobile terminal, where the mobile terminal includes a main card, an auxiliary card, a communication module, and an application system, and as shown in fig. 1, the method includes:
step S102: when the access to the internet service is started, the communication module respectively sends attachment instructions to the main card and the auxiliary card and receives the same private network IP addresses respectively sent after the attachment of the main card and the auxiliary card is finished.
In this embodiment, the dual-card bi-pass mobile terminal includes a main card and an auxiliary card, where the main card is a USIM card and the auxiliary card is a SIM card, and belongs to the same operator, and a mobile terminal user may apply for a main card and an auxiliary card access network multiplexing service to the operator, and after signing is completed, a main card number service signing attribute of the mobile terminal includes an access network multiplexing service on an HSS (Home Subscriber Server), and an auxiliary card number service signing attribute of the mobile terminal includes an access network multiplexing service on an HLR (Home Location Register). When the mobile terminal is started, the joint attachment of the main card can be started firstly, namely the main card is attached to the 4G network and the 2G/3G network simultaneously, and meanwhile, the auxiliary card is attached to the 2G/3G network. In order to facilitate the main and auxiliary cards to realize the access network multiplexing service, a special communication module is arranged between an application system of the mobile terminal and the USIM and SIM cards, and is used for distributing IP packets sent by the application system to the main card and the auxiliary card and sending the IP packets received by the main card and the auxiliary card to the application system.
Optionally, the sending, by the communication module, the attachment indication to the primary card and the secondary card respectively may specifically include:
and the communication module pops up a prompt box for whether to start the access network multiplexing service and respectively sends an attachment indication to the main card and the auxiliary card according to the access network multiplexing service instruction of the user.
In this embodiment, when the mobile terminal starts to access the internet service, the communication module may pop up a prompt box to the user to prompt the user that the access network multiplexing service is to be started currently, or ask the user whether to start the access network multiplexing service, and after the user determines that the user is about to start the access network multiplexing service, the communication module sends the attachment indications to the main card and the auxiliary card, respectively. The triggering condition for the mobile terminal to start accessing the internet service may be that the user clicks an application system or clicks a function key on the application system, the internet service may be a video service, a voice service, a web browsing service, and the like, and the application system may be an application system of the mobile terminal itself.
Optionally, the primary card Gateway is a PDN GW (Packet Data Network Gateway), and the secondary card Gateway is a GGSN (Gateway GPRS Support Node);
the communication module sends the attachment indication to the main card and the auxiliary card respectively, and receives the same private network IP addresses sent by the main card and the auxiliary card respectively after the attachment is completed, which may specifically include:
the communication module sends an instruction of attaching PDN GW to the main card;
the main card starts a PDN GW attaching process and acquires a private network IP address distributed by the PDN GW for the main card;
the main card sends a private network IP address to the communication module;
the communication module sends out the indication of attaching GGSN to the auxiliary card;
the auxiliary card starts a GGSN attaching process and acquires a private network IP address which is distributed by the GGSN for the auxiliary card and is the same as the private network IP address distributed by the main card;
the secondary card sends a private network IP address to the communication module.
In this embodiment, in order to implement service multiplexing of the primary card and the secondary card, the primary card gateway PDN GW and the secondary card gateway GGSN allocate the same private network IP address to the primary card and the secondary card, respectively. Specifically, a communication module starts a main card to send an attachment request to a PDN GW, the PDN GW returns an IP address allocated to the main card after attachment is completed, then starts a secondary card to send an attachment request to a GGSN to complete attachment and apply for the IP address, the GGSN obtains the number of the secondary card to apply for an access network multiplexing service and obtains the number of the main card when inquiring the service attribute of the secondary card through an HLR, the GGSN inquires the IP address allocated by the number of the main card to the HSS, the GGSN allocates the IP address same as that of the main card to the secondary card and returns the IP address to the secondary card, and the main card and the secondary card respectively send the same private network IP address allocated by respective gateways to the communication module.
Step S104: the communication module respectively sends a forward IP packet sent by the application system to the external network to the main card and the auxiliary card according to a preset proportion, wherein the source address of the forward IP packet is a private network IP address.
In this embodiment, the forward IP packet refers to an IP packet sent by the application system to the external network, and similarly, the reverse IP packet refers to an IP packet sent by the external network to the application system. After receiving the private network IP addresses sent by the main card and the auxiliary card, the communication module can forward the private network IP addresses to the application system so that the application system can use the private network IP addresses to construct a forward IP packet, namely the source address of the forward IP packet is the private network IP address.
Optionally, before the communication module sends the forward IP packet sent by the application system to the external network to the primary card and the secondary card according to the preset ratio, the method may further include:
the communication module acquires the network types of the access networks in the current states of the main card and the auxiliary card, and determines the preset proportion of the IP packets distributed to the main card and the auxiliary card according to the network types.
In this embodiment, the preset ratio is a ratio of the number of IP packets allocated to the primary card and the secondary card, and the communication module may determine the preset ratio according to the types of access networks in the current states of the primary card and the secondary card. For example, the primary card and the secondary card have the same network type and can be allocated with equal IP packet numbers. For example, the network type of the main card is 4G, the network type of the auxiliary card is 3G, and the ratio of the number of IP packets allocated to the main card and the auxiliary card may be 10: 1. For example, the network type of the primary card is 3G, the network type of the secondary card is 2G, and the ratio of the number of IP packets allocated to the primary card and the secondary card may be 100:1, which may be specifically set according to the actual situation.
Optionally, the communication module sends the forward IP packet sent by the application system to the external network to the primary card and the secondary card according to a preset ratio, which may specifically include:
the communication module receives a forward IP packet sent to an external network by an application system within a preset time;
and the communication module respectively sends the forward IP packets received within the preset time to the main card and the auxiliary card according to a preset proportion.
In this embodiment, the communication module may set a timer, and send the forward IP packets received within a predetermined time to the primary card and the secondary card according to a preset ratio.
Step S106: the main card and the auxiliary card respectively send the received forward IP packets to the corresponding gateways so that the gateways send the received forward IP packets to the firewall, and the firewall replaces the source address of the received forward IP packet with a public network IP address and forwards the forward IP packet after address conversion to the external network.
In this embodiment, the gateways corresponding to the main card and the secondary card are all connected to the same firewall, the PDN GW and the GGSN send the forward IP packets sent by the main card and the secondary card to the firewall, and after receiving the forward IP packets, the firewall replaces the source address with the public network IP address and forwards the forward IP packets after address conversion to the external network.
Optionally, after the primary card and the secondary card respectively send the received forward IP packets to their respective corresponding gateways, the method may further include:
the main card receives a reverse IP packet which is sent to an application system by an external network and sent by a PDN GW;
the main card sends the received reverse IP packet to the communication module so that the communication module forwards the received reverse IP packet to the application system;
the auxiliary card receives a reverse IP packet which is sent to an application system by an external network and sent by GGSN;
the secondary card sends the received reverse IP packet to the communication module so that the communication module forwards the received reverse IP packet to the application system.
In this embodiment, the firewall may set a timer, receive a reverse IP packet sent to the application system by the intranet or the extranet within a predetermined time, and send the reverse IP packet to the PDN GW and the GGSN, respectively, according to a predetermined ratio, so that the PDN GW and the GGSN send the received reverse IP packet to the corresponding primary card or the corresponding secondary card. And the reverse IP packets received by the main card and the auxiliary card are sent to the communication module, and the communication module forwards the reverse IP packets to the application system.
Step S108: when the main card has an incoming call, the main card sends a connection releasing request to the main card gateway, so that the main card gateway sends the main card connection releasing request to the firewall, and after the firewall releases the connection of the main card, a reverse IP packet which is sent to an application system by an external network is sent to the auxiliary card through the auxiliary card gateway.
In this embodiment, when there is an incoming call from the host card, an MSC (Mobile Switching Center) sends a paging request to an MME (Mobility Management Entity), the MME sends a paging request to the host card, the host card sends a connection release request to a PDN GW, the PDN GW sends a connection release request to a firewall, the firewall releases the connection of the host card, and all reverse IP packets sent to the Mobile terminal application system are sent to the secondary card, meanwhile, the host card sends information of a fallback cell to the MME, the MME sends response information to the MSC, the host card obtains information of a cell frequency point where the secondary card currently resides, and the cell frequency point information falls back to the cell to perform location update, and sends a call establishment request to the MSC to complete the call.
Fig. 2 is an interaction diagram illustrating an access method for an internet service according to an embodiment of the present invention. The dual-card dual-standby dual-channel mobile terminal comprises a main card and an auxiliary card, wherein the main card is a USIM card, the auxiliary card is an SIM card, the USIM card and the auxiliary card belong to the same operator, a mobile terminal user applies for multiplexing services of the main card and the auxiliary card, and the mobile terminal is provided with a special communication module between an application system and the USIM card and between the application system and the SIM card, and is used for distributing IP packets sent by the application system to the main card and the auxiliary card and sending the IP packets received by the main card and the auxiliary card to the application system. In the attaching process, private network IP addresses are respectively allocated to the main card and the auxiliary card by a PDN GW and a GGSN, and the method specifically comprises the following processes:
s01: starting the joint attachment of the main card when the mobile terminal is started, and attaching the auxiliary card to the 2G/3G network;
it should be noted that, before step S01, the dual-card dual-standby dual-active mobile terminal user has already applied for the access network multiplexing service of the primary card and the secondary card from the operator, and the service subscription attribute of the primary card number of the mobile terminal on the HSS includes the access network multiplexing service. The service subscription attribute of the auxiliary card number of the mobile terminal on the HLR contains access network multiplexing service.
S02: when the mobile terminal starts to access the internet service, the communication module pops up a prompt box to the user whether to start the access network multiplexing service;
s03: after the user determines, the communication module sends an instruction of attaching PDN GW to the main card;
s04-05: and the main card starts a PDN GW attachment flow, acquires a private network IP address distributed by the PDN GW and feeds back the private network IP address to the communication module, and the communication module sends the private network IP address to the application system.
S06: the communication module sends an indication of attaching the GGSN to the secondary card.
S07: the auxiliary card sends out the attachment information to GGSN, and obtains the private network IP address which is distributed by GGSN and is the same as the main card
Specifically, the auxiliary card sends out the attachment information to the GGSN, the GGSN inquires the service attribute of the auxiliary card number from the HLR, and obtains the main card number multiplexed by the access network applied by the auxiliary card, and the GGSN inquires the private network IP address allocated to the main card from the HSS through the main card number and allocates the IP address to the auxiliary card at the same time.
S08-S09: the auxiliary card feeds back the obtained IP address to the communication module, and the communication module sends the IP address to the application system;
s10: the communication module acquires the network types of the access networks of the main card and the auxiliary card in the current states, and determines the quantity proportion of the IP packets allocated to the main card and the auxiliary card according to the network types.
Specifically, the communication module obtains the network types of the access networks in the current states of the main card and the auxiliary card, and determines the quantity proportion of the IP packets allocated to the main card and the auxiliary card according to the network types. For example, the network types of the main card and the auxiliary card are the same, and the number of IP packets allocated to the main card and the auxiliary card is equal. If the network type of the primary card is 4G and the network type of the secondary card is 3G, the ratio of the number of IP packets allocated to the primary card and the secondary card may be 10: 1. If the network type of the main card is 3G, the network type of the auxiliary card is 2G, and the ratio of the number of IP packets allocated to the main card to the number of IP packets allocated to the auxiliary card is 100: 1.
S11: the communication module is arranged in a preset time length and respectively sends the IP packets sent by the application system to the main card and the auxiliary card according to a preset proportion.
Specifically, the communication module sets a timer, and sends the IP packets sent by the application system to the primary card and the secondary card according to the ratio of the number of the IP packets allocated to the primary card and the secondary card within a predetermined time.
S12: the main card and the auxiliary card send the received IP packet to the corresponding PDN GW or GGSN;
specifically, the primary card sends the received IP packet to the PDN GW, and the secondary card sends the received IP packet to the GGSN.
S13: and the PDN GW and the GGSN send the IP packet to the firewall.
Specifically, the PDN GW and the GGSN are both connected to the same firewall, and the PDN GW and the GGSN send IP packets of the primary card and the secondary card to the firewall.
S14: and the firewall determines the quantity proportion of the IP packets of the main card and the auxiliary card according to the IP packets which are respectively sent to the external network by the PDN GW and the GGSN within the preset time.
Specifically, the firewall sets a timer, and counts the number of IP packets respectively sent to the external network by the PDN GW and the GGSN according to the source IP address within a preset time period, and determines the number proportion of the IP packets of the main card and the auxiliary card.
S15: the firewall performs address translation and sends the IP packet after address translation to the external network.
Specifically, the firewall converts the source private network IP address in the IP packet sent by the mobile terminal into the public network IP address of the firewall through address conversion, and sends the public network IP address to the external network.
S16: and the firewall respectively sends the IP packets received from the external network within a preset time period to the PDN GW and the GGSN according to the quantity proportion of the IP packets of the main card and the auxiliary card.
Specifically, the firewall sets a timer, and when receiving the IP packet sent to the mobile terminal by the external network within a preset time, the firewall respectively sends the IP packet to the PDN GW and the GGSN according to the quantity proportion of the IP packets of the main card and the auxiliary card.
S17: PDN GW and GGSN send IP packet to corresponding main card or auxiliary card.
S18-S19: the main card and the auxiliary card send the received IP packet to the communication module, and the communication module forwards the IP packet to the application system
S20: when the main card has an incoming call, the main card sends a connection releasing request to the PDN GW.
Specifically, when the mobile terminal main card has an incoming call, the MSC sends a paging request to the MME, the MME sends a paging request to the main card, and the main card sends a connection release request to the PDN GW.
S21: PDN GW sends main card connection releasing request to firewall
S22: the firewall releases the connection of the main card and sends the data packets sent to the mobile terminal to the auxiliary card.
Specifically, the firewall releases the connection of the main card, and sends the data packets sent to the mobile terminal to the GGSN and then to the subsidiary card, so that the internet service interruption can be avoided, and the signaling interaction can be reduced.
Specifically, the main card sends information of a fallback cell to the MME, the MME sends response information to the MSC, the main card obtains information of a cell frequency point where the secondary card currently resides, falls back to the cell, performs location update, sends a call establishment request to the MSC, and connects a call.
In the method for accessing internet service provided by this embodiment, when the mobile terminal starts to access the internet service, the communication module sends the attachment indication to the main card and the auxiliary card respectively, and receives the same private network IP addresses sent by the main card and the auxiliary card respectively after the attachment is completed; the communication module respectively sends a forward IP packet sent by an application system to an external network to the main card and the auxiliary card according to a preset proportion, wherein a source address of the forward IP packet is the private network IP address; the main card and the auxiliary card respectively send the received forward IP packets to the corresponding gateways, so that the gateways send the received forward IP packets to the firewall, the firewall replaces the source address of the received forward IP packet with a public network IP address and forwards the forward IP packet after address conversion to the external network, and therefore an application system can simultaneously access internet services through the main card and the auxiliary card, the internet access speed is improved, and service multiplexing of the main card and the auxiliary card is achieved. When the main card has the incoming call, the main card sends the release connection request to the main card gateway, so that the main card gateway sends the release main card connection request to preventing the hot wall, and makes prevent the hot wall release after the connection of main card, send the extranet give application system's reverse IP package sends through the vice card gateway and gives the vice card to can reduce the interaction of signaling when guaranteeing the continuity of surfing the net, improve user's experience, when having solved two card bi-pass mobile terminal and having passed through 4G main card access internet service among the correlation technique, lead to internet service interrupt easily, perhaps switch mode signaling interaction is complicated, and is consuming time longer, leads to the not good problem of user experience.
Example 2:
as shown in fig. 3, this embodiment provides an access method for internet services, which is applied to a firewall, and the method includes:
step S202: when the mobile terminal starts to access internet services, forward IP packets which are respectively sent by a main card and an auxiliary card through respective gateways and have the same source address are received, wherein the forward IP packets are respectively sent to the main card and the auxiliary card by a communication module according to a preset proportion, and the source address of the forward IP packet is a private network IP address;
step S204: replacing the source address of the received forward IP packet with a public network IP address, and forwarding the forward IP packet after address conversion to the external network;
step S206: receiving a main card connection releasing request sent by a main card gateway when a main card has an incoming call, and releasing the connection of the main card according to the main card connection releasing request;
step S208: and sending the reverse IP packet sent to the application system by the external network to the auxiliary card through the auxiliary card gateway.
Optionally, the primary card gateway is a PDN GW, and the secondary card gateway is a GGSN;
after forwarding the forward IP packet after address translation to the external network, the method further includes:
receiving a reverse IP packet sent to an application system by an intranet and an extranet within a preset time;
and respectively sending the reverse IP packets to the PDN GW and the GGSN according to a preset proportion so that the PDN GW and the GGSN respectively send the received reverse IP packets to the main card and the auxiliary card, and the main card and the auxiliary card respectively forward the received reverse IP packets to the application system through the communication module.
Example 3:
as shown in fig. 4, the present embodiment provides a dual-card dual-pass mobile terminal, which includes a main card 31, an auxiliary card 32, a communication module 33, and an application system 34;
the communication module 33 is configured to send attachment instructions to the main card 31 and the sub-card 32, respectively, when starting access to an internet service, and receive the same private network IP addresses sent by the main card 31 and the sub-card 32 after attachment is completed, respectively;
the communication module 33 is further configured to send a forward IP packet sent by the application system 34 to the external network to the main card 31 and the auxiliary card 32 according to a preset ratio, respectively, where a source address of the forward IP packet is a private network IP address;
the main card 31 and the auxiliary card 32 are configured to send the received forward IP packets to respective corresponding gateways, so that the gateways send the respective received forward IP packets to the firewall, and the firewall replaces the source address of the received forward IP packet with a public network IP address and then forwards the forward IP packet after address conversion to the external network;
when there is an incoming call to the main card 31, the main card 31 is further configured to send a connection release request to the main card gateway, so that the main card gateway sends the connection release request to the firewall, and after the firewall releases the connection of the main card 31, the reverse IP packet sent by the external network to the application system 34 is sent to the auxiliary card 32 through the auxiliary card gateway.
Example 4:
as shown in fig. 5, the present embodiment provides a firewall, including:
a forward IP packet receiving module 41, configured to receive forward IP packets with the same source address and sent by the primary card and the secondary card through respective gateways when the mobile terminal starts to access an internet service, where the forward IP packets are sent by the communication module to the primary card and the secondary card according to a preset ratio, and the source addresses of the forward IP packets are private network IP addresses;
an address conversion module 42, connected to the forward IP packet receiving module 41, configured to replace the source address of the received forward IP packet with a public network IP address, and forward the forward IP packet after address conversion to the external network;
a connection releasing module 43, connected to the address converting module 42, for receiving a main card connection releasing request sent by the main card gateway when the main card has an incoming call, and releasing the connection of the main card according to the main card connection releasing request;
and a reverse IP packet sending module 44, connected to the connection releasing module 43, for sending the reverse IP packet sent by the external network to the application system to the secondary card through the secondary card gateway.
Optionally, the method may further include:
the reverse IP packet receiving module is used for receiving a reverse IP packet which is sent to the application system by the internal network and the external network in a preset time;
and the reverse IP packet forwarding module is used for respectively sending the reverse IP packets to the PDN GW and the GGSN according to a preset proportion so that the PDN GW and the GGSN respectively send the received reverse IP packets to the main card and the auxiliary card and the main card and the auxiliary card forward the received reverse IP packets to the application system through the communication module.
Embodiments 2 to 4 provide an access method for an internet service, a dual-card bi-pass mobile terminal, and a firewall, in which when the mobile terminal starts to access the internet service, a communication module sends an attachment indication to a main card and an auxiliary card, and receives the same private network IP addresses sent by the main card and the auxiliary card after the attachment is completed; the communication module respectively sends a forward IP packet sent by an application system to an external network to the main card and the auxiliary card according to a preset proportion, wherein a source address of the forward IP packet is the private network IP address; the main card and the auxiliary card respectively send the received forward IP packets to the corresponding gateways, so that the gateways send the received forward IP packets to the firewall, the firewall replaces the source address of the received forward IP packet with a public network IP address and forwards the forward IP packet after address conversion to the external network, and therefore an application system can simultaneously access internet services through the main card and the auxiliary card, the internet access speed is improved, and service multiplexing of the main card and the auxiliary card is achieved. When the main card has the incoming call, the main card sends the release connection request to the main card gateway, so that the main card gateway sends the release main card connection request to preventing the hot wall, and makes prevent the hot wall release after the connection of main card, send the extranet give application system's reverse IP package sends through the vice card gateway and gives the vice card to can reduce the interaction of signaling when guaranteeing the continuity of surfing the net, improve user's experience, when having solved two card bi-pass mobile terminal and having passed through 4G main card access internet service among the correlation technique, lead to internet service interrupt easily, perhaps switch mode signaling interaction is complicated, and is consuming time longer, leads to the not good problem of user experience.
It will be understood that the above embodiments are merely exemplary embodiments taken to illustrate the principles of the present invention, which is not limited thereto. It will be apparent to those skilled in the art that various modifications and improvements can be made without departing from the spirit and substance of the invention, and these modifications and improvements are also considered to be within the scope of the invention.

Claims (10)

1. An internet service access method is applied to a dual-card dual-pass mobile terminal, wherein the mobile terminal comprises a main card, an auxiliary card, a communication module and an application system, and the method comprises the following steps:
when the access to the internet service is started, the communication module respectively sends attachment instructions to the main card and the auxiliary card and receives the same private network IP addresses respectively sent after the attachment of the main card and the auxiliary card is finished;
the communication module respectively sends a forward IP packet sent by an application system to an external network to the main card and the auxiliary card according to a preset proportion, wherein a source address of the forward IP packet is the private network IP address;
the main card and the auxiliary card respectively send the received forward IP packets to respective corresponding gateways, so that the gateways send the respective received forward IP packets to a firewall, and the firewall replaces the source address of the received forward IP packet with a public network IP address and forwards the forward IP packet after address conversion to an external network;
when the main card has an incoming call, the main card sends a connection releasing request to a main card gateway, so that the main card gateway sends the main card connection releasing request to a firewall, and after the firewall releases the connection of the main card, a reverse IP packet sent by an external network to the application system is sent to the auxiliary card through an auxiliary card gateway.
2. The method according to claim 1, wherein the communication module sends the attachment indication to the primary card and the secondary card respectively, and specifically includes:
and the communication module pops up a prompt box for whether to start the access network multiplexing service and respectively sends an attachment indication to the main card and the auxiliary card according to the access network multiplexing service instruction of the user.
3. The method of claim 1, wherein the primary card gateway is a PDN GW, and the secondary card gateway is a GGSN;
the communication module sends attachment instructions to the main card and the auxiliary card respectively, and receives the same private network IP addresses sent by the main card and the auxiliary card respectively after the attachment of the main card and the auxiliary card is completed, and the method specifically comprises the following steps:
the communication module sends an instruction of attaching PDN GW to the main card;
the main card starts a PDN GW attaching process and acquires the private network IP address distributed by the PDN GW for the main card;
the master card sends the private network IP address to the communication module;
the communication module sends an instruction of attaching GGSN to the auxiliary card;
the auxiliary card starts a GGSN attaching process and acquires the private network IP address which is distributed by the GGSN to the auxiliary card and is the same as the private network IP address distributed by the main card;
and the auxiliary card sends the private network IP address to the communication module.
4. The method of claim 3, wherein before the forward IP packet sent by the application system to the external network is sent to the primary card and the secondary card by the communication module according to a preset ratio, the method further comprises:
and the communication module acquires the network types of the access networks in the current states of the main card and the auxiliary card, and determines the preset proportion of the IP packets distributed to the main card and the auxiliary card according to the network types.
5. The method according to claim 4, wherein the communication module sends forward IP packets sent from the application system to the external network to the primary card and the secondary card respectively according to a preset ratio, and specifically includes:
the communication module receives the forward IP packet sent to the external network by the application system within a preset time;
and the communication module respectively sends the forward IP packets received within the preset time to the main card and the auxiliary card according to the preset proportion.
6. The method according to claim 5, wherein after the primary card and the secondary card respectively send the received forward IP packets to their corresponding gateways, the method further comprises:
the main card receives a reverse IP packet which is sent to the application system by an external network and sent by the PDN GW;
the main card sends the received reverse IP packet to the communication module so that the communication module forwards the received reverse IP packet to the application system;
the auxiliary card receives the reverse IP packet which is sent to the application system by an external network and sent by the GGSN;
and the secondary card sends the received reverse IP packet to the communication module so that the communication module forwards the received reverse IP packet to the application system.
7. An access method for internet services, which is applied to a firewall, the method comprising:
when a mobile terminal starts to access internet services, receiving forward IP packets which are respectively sent by a main card and an auxiliary card through respective gateways and have the same source address, wherein the forward IP packets are respectively sent to the main card and the auxiliary card by a communication module according to a preset proportion, and the source address of the forward IP packet is a private network IP address;
replacing the source address of the received forward IP packet with a public network IP address, and forwarding the forward IP packet after address conversion to an external network;
receiving a main card connection releasing request sent by a main card gateway when a main card has an incoming call, and releasing the connection of the main card according to the main card connection releasing request;
and sending the reverse IP packet sent to the application system by the external network to the auxiliary card through the auxiliary card gateway.
8. The method of claim 7, wherein the primary card gateway is a PDN GW, and the secondary card gateway is a GGSN;
after forwarding the forward IP packet after address translation to the external network, the method further includes:
receiving a reverse IP packet sent to the application system by the external network within a preset time;
and respectively sending the reverse IP packets to the PDN GW and the GGSN according to the preset proportion, so that the PDN GW and the GGSN respectively send the received reverse IP packets to the main card and the auxiliary card, and the main card and the auxiliary card respectively forward the received reverse IP packets to an application system through the communication module.
9. A dual-card bi-pass mobile terminal is characterized by comprising a main card, an auxiliary card, a communication module and an application system;
the communication module is used for respectively sending attachment instructions to the main card and the auxiliary card when the internet access service is started, and receiving the same private network IP addresses respectively sent by the main card and the auxiliary card after the attachment is finished;
the communication module is further configured to send a forward IP packet sent by the application system to an external network to the main card and the auxiliary card, respectively, according to a preset ratio, where a source address of the forward IP packet is the private network IP address;
the main card and the auxiliary card are used for respectively sending the received forward IP packets to respective corresponding gateways so that the gateways send the respective received forward IP packets to a firewall, and the firewall replaces the source address of the received forward IP packet with a public network IP address and forwards the forward IP packet after address conversion to an external network;
when the main card has an incoming call, the main card is also used for sending a connection releasing request to the main card gateway, so that the main card gateway sends the main card connection releasing request to a firewall, and after the firewall releases the connection of the main card, a reverse IP packet sent to the application system by an external network is sent to the auxiliary card through the auxiliary card gateway.
10. A firewall, comprising:
the forward IP packet receiving module is used for receiving forward IP packets which are respectively sent by a main card and an auxiliary card through respective gateways and have the same source address when the mobile terminal starts to access the internet service, wherein the forward IP packets are respectively sent to the main card and the auxiliary card by the communication module according to a preset proportion, and the source addresses of the forward IP packets are private network IP addresses;
the address conversion module is connected with the forward IP packet receiving module and used for replacing a source address of the received forward IP packet with a public network IP address and forwarding the forward IP packet after address conversion to an external network;
the connection releasing module is connected with the address conversion module and used for receiving a main card releasing connection request sent by a main card gateway when a main card has an incoming call and releasing the connection of the main card according to the main card releasing connection request;
and the reverse IP packet sending module is connected with the connection releasing module and is used for sending the reverse IP packet sent to the application system by the external network to the auxiliary card through the auxiliary card gateway.
CN202110203505.8A 2021-02-23 2021-02-23 Internet service access method, double-card double-pass mobile terminal and firewall Active CN112995986B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN202110203505.8A CN112995986B (en) 2021-02-23 2021-02-23 Internet service access method, double-card double-pass mobile terminal and firewall

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN202110203505.8A CN112995986B (en) 2021-02-23 2021-02-23 Internet service access method, double-card double-pass mobile terminal and firewall

Publications (2)

Publication Number Publication Date
CN112995986A true CN112995986A (en) 2021-06-18
CN112995986B CN112995986B (en) 2023-06-23

Family

ID=76349866

Family Applications (1)

Application Number Title Priority Date Filing Date
CN202110203505.8A Active CN112995986B (en) 2021-02-23 2021-02-23 Internet service access method, double-card double-pass mobile terminal and firewall

Country Status (1)

Country Link
CN (1) CN112995986B (en)

Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN105577775A (en) * 2015-12-17 2016-05-11 小米科技有限责任公司 Dual-channel downloading method and device
CN108990122A (en) * 2018-08-30 2018-12-11 中国联合网络通信集团有限公司 A kind of call handover method and system
CN109068315A (en) * 2018-10-08 2018-12-21 中国联合网络通信集团有限公司 Access internet service method and mould group, mobile terminal, data access system
US20190261299A1 (en) * 2016-10-31 2019-08-22 Huawei Technologies Co., Ltd. Dual card dual active communication method, terminal, network, and system
CN110167014A (en) * 2019-05-27 2019-08-23 中国联合网络通信集团有限公司 The solution and system of double card bilateral mobile terminal down going channel failure

Patent Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN105577775A (en) * 2015-12-17 2016-05-11 小米科技有限责任公司 Dual-channel downloading method and device
US20190261299A1 (en) * 2016-10-31 2019-08-22 Huawei Technologies Co., Ltd. Dual card dual active communication method, terminal, network, and system
CN108990122A (en) * 2018-08-30 2018-12-11 中国联合网络通信集团有限公司 A kind of call handover method and system
CN109068315A (en) * 2018-10-08 2018-12-21 中国联合网络通信集团有限公司 Access internet service method and mould group, mobile terminal, data access system
CN110167014A (en) * 2019-05-27 2019-08-23 中国联合网络通信集团有限公司 The solution and system of double card bilateral mobile terminal down going channel failure

Also Published As

Publication number Publication date
CN112995986B (en) 2023-06-23

Similar Documents

Publication Publication Date Title
CN109151807B (en) Method and system for binding main card and auxiliary card of dual-card dual-standby mobile terminal
EP2249605B1 (en) Method and system of circuit switched domain page realisation
JP5132815B2 (en) Method and system for determining activation of signaling saving function in idle mode
US9706444B2 (en) Method and system for enabling circuit switched fallback service in evolved packet system
US8537748B2 (en) Technique for performing GSM/WCDMA circuit switched services over a long term evolution radio access
US20100302937A1 (en) Control Method, System, and Device for Circuit Domain Fallback
KR20000019261A (en) Radio packet data terminal
US20150011250A1 (en) Method and System for Implementing Packet Switch Domain Short Message Service, and User Equipment
WO2009129725A1 (en) A method, system and device for service providing
JP4418136B2 (en) Communications system
CN108990124B (en) Voice call and data service switching method and device
WO2010133107A1 (en) Method and system for home node b gateway forwarding messages to home node b
JP2023515393A (en) Mode switching method and equipment
CN101394340A (en) Data transmission method, system and apparatus
CN110139356B (en) Method and system for non-joint attached call of dual-card dual-standby mobile terminal
US9391890B2 (en) Network-initiated method and system for establishing data communication using IP with a wireless terminal
WO2009067880A1 (en) Method, system for the mobility management of a terminal and apparatus thereof
CN112995986B (en) Internet service access method, double-card double-pass mobile terminal and firewall
US20040264490A1 (en) Multicast transmission to a radio access network
WO2007117825A2 (en) Method for routing calls in a mobile communication network
WO2015043244A1 (en) User equipment, request message receiving method and apparatus, and system thereof
CN115226037A (en) Method, system and storage medium for reducing power consumption based on wide-band and narrow-band fusion
CN102348260A (en) Terminal calling network selection implementation method and system for single wireless channel access user equipment
CN101790140A (en) Method and device for initiating and processing service request
GB2402846A (en) Method for enabling a mobile station to receive a circuit switched page

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
GR01 Patent grant
GR01 Patent grant