CN114285900B - Scheduling system, authentication method, scheduling method, device, server and medium - Google Patents

Scheduling system, authentication method, scheduling method, device, server and medium Download PDF

Info

Publication number
CN114285900B
CN114285900B CN202111499800.9A CN202111499800A CN114285900B CN 114285900 B CN114285900 B CN 114285900B CN 202111499800 A CN202111499800 A CN 202111499800A CN 114285900 B CN114285900 B CN 114285900B
Authority
CN
China
Prior art keywords
user terminal
address
server
authentication
lns
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
CN202111499800.9A
Other languages
Chinese (zh)
Other versions
CN114285900A (en
Inventor
杨振东
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
China United Network Communications Group Co Ltd
Original Assignee
China United Network Communications Group Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by China United Network Communications Group Co Ltd filed Critical China United Network Communications Group Co Ltd
Priority to CN202111499800.9A priority Critical patent/CN114285900B/en
Publication of CN114285900A publication Critical patent/CN114285900A/en
Application granted granted Critical
Publication of CN114285900B publication Critical patent/CN114285900B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Landscapes

  • Mobile Radio Communication Systems (AREA)

Abstract

The application provides a dispatching system, an authentication method, a dispatching method, a device, a server and a medium, wherein the dispatching system comprises an authentication server and a dispatching server, the authentication server is used for determining the IP address of a two-layer tunnel protocol network server LNS corresponding to a user terminal based on an authentication request, the IP address of the LNS is added into a response message of the authentication request, and the corresponding LNS in the response message is used for distributing a source IP address for the user terminal so that the user terminal initiates a service access request based on the source IP address; the scheduling server is used for receiving the service access request of the user terminal, determining the destination IP address of the edge cloud service end corresponding to the user terminal based on the source IP address in the service access request, and responding the service access request by the edge cloud service end corresponding to the user terminal, so that the resource scheduling method with a single mobile network user as granularity is realized, and the scheduling cost is low, the speed is high, and the flexibility is high.

Description

Scheduling system, authentication method, scheduling method, device, server and medium
Technical Field
The present application relates to the field of network technologies, and in particular, to a scheduling system, an authentication method, a scheduling method, a device, a server, and a medium.
Background
With the continuous development of 5G (5 th Generation, fifth Generation mobile communication) network technologies, the enrichment of high quality service content and the popularization of intelligent terminals, the requirements of people on network delay are also higher, and the reduction of the network delay becomes a technical problem to be solved by operators urgently.
The Edge Cloud (EC) technology realizes sinking of computing power to network Edge nearer to user terminal, and constructs Edge data center facing to service so as to reduce time delay of network service and raise service quality.
Aiming at a dispatching system constructed based on an edge cloud technology, when dispatching an edge cloud server or a service terminal, the dispatching system can be usually only carried out based on an IP (Internet Protocol, protocol interconnected between networks) address configured by an SMF (Session Management Function ) for a user, has low dispatching flexibility, and is not beneficial To the development of 2C (To Consumer, public personal user facing the mobile network) service.
Disclosure of Invention
The application provides a scheduling system, an authentication method, a scheduling method, a device, a server and a medium, which are used for solving the problem of low scheduling flexibility based on an edge cloud server.
In a first aspect, the present application provides a scheduling system, including an authentication server and a scheduling server;
The authentication server is used for receiving an authentication request of a user terminal, determining an IP address of a two-layer tunneling protocol network server LNS corresponding to the user terminal based on the authentication request, adding the IP address of the LNS corresponding to the user terminal into a response message of the authentication request, and distributing a source IP address to the user terminal by the LNS corresponding to the IP address of the LNS in the response message so that the user terminal initiates a service access request based on the source IP address;
the scheduling server is configured to receive a service access request of the user terminal, and determine an IP address of an edge cloud server corresponding to the user terminal based on a source IP address in the service access request, so that the edge cloud server corresponding to the user terminal responds to the service access request.
Optionally, the authentication request of the user terminal is generated by the session management function unit SMF according to subscription data of the user terminal stored in the unified data management function unit UDM acquired in advance when the user terminal initiates a service request.
Optionally, the authentication request further includes an identification code of the user terminal, and the authentication server is specifically configured to:
And determining the IP address of the LNS corresponding to the user terminal according to the identification code in the authentication request of the user terminal.
Optionally, the authentication server is specifically configured to:
acquiring a first pre-established corresponding relation, wherein the first corresponding relation is used for describing the corresponding relation between the identification code and the IP address of the LNS;
and determining the IP address of the LNS corresponding to the user terminal according to the first corresponding relation and the identification code in the authentication request of the user terminal.
Optionally, the authentication server is specifically configured to:
determining a user tag corresponding to the user terminal according to the identification code in the authentication request of the user terminal;
if the user label corresponding to the user terminal is a preset label, determining the IP address of the LNS corresponding to the user terminal according to the authentication request of the user terminal.
Optionally, the scheduling server is specifically configured to:
acquiring service IP address segments corresponding to all edge cloud service ends;
determining a service IP address segment to which the source IP address belongs according to the source IP address in the service access request;
and determining an edge cloud server corresponding to the service IP address segment to which the source IP address belongs, and performing the edge cloud server corresponding to the service access for the user terminal.
Optionally, the authentication server is an AAA server, and the scheduling server is an OTT server.
In a second aspect, the present application provides an authentication method applied to an authentication server, the method comprising:
acquiring an authentication request of a user terminal;
according to the authentication request of the user terminal, determining the IP address of a two-layer tunnel protocol network server LNS corresponding to the user terminal;
and adding the IP address of the corresponding LNS of the user terminal into a response message of the authentication request, so that the IP address of the LNS in the response message corresponds to the LNS to determine a source IP address of the user terminal, and the user terminal initiates a service access request based on the source IP address.
Optionally, determining, according to the authentication request of the user terminal, an IP address of the LNS corresponding to the user terminal includes:
and determining the IP address of the LNS corresponding to the user terminal according to the identification code in the authentication request of the user terminal.
Optionally, determining the IP address of the LNS corresponding to the user terminal according to the identification code in the authentication request of the user terminal includes:
acquiring a first pre-established corresponding relation, wherein the first corresponding relation is used for describing the corresponding relation between the identification code and the IP address of the LNS;
And determining the IP address of the LNS corresponding to the user terminal according to the first corresponding relation and the identification code in the authentication request of the user terminal.
Optionally, the authentication request further includes an identification code of the user terminal, and the method further includes:
and determining the user label corresponding to the user terminal according to the identification code in the authentication request of the user terminal.
Correspondingly, determining the IP address of the LNS corresponding to the user terminal according to the authentication request of the user terminal includes:
if the user label corresponding to the user terminal is a preset label, determining the IP address of the LNS corresponding to the user terminal according to the authentication request of the user terminal.
In a third aspect, the present application provides a scheduling method, which is applied to a scheduling server, the method comprising:
acquiring a service access request sent by a user terminal, wherein the service access request comprises a source IP address of the user terminal, the source IP address of the user terminal is an address distributed to the user terminal by a two-layer tunnel protocol network server LNS corresponding to the user terminal, and the IP address of the LNS corresponding to the user terminal is determined by an authentication server according to the authentication request of the user terminal;
And determining an edge cloud server corresponding to the user terminal according to the source IP address in the service access request, so that the edge cloud server corresponding to the user terminal responds to the service access request.
Optionally, determining, according to the source IP address in the service access request, an edge cloud server corresponding to the user terminal includes:
acquiring service IP address segments corresponding to all edge cloud service ends;
determining a service IP address segment to which the source IP address belongs according to the source IP address in the service access request;
and determining an edge cloud server corresponding to the service IP address segment to which the source IP address belongs, and performing the edge cloud server corresponding to the service access for the user terminal.
In a fourth aspect, the present application also provides an authentication apparatus, the apparatus being applied to an authentication server, the apparatus comprising:
an authentication request acquisition module, configured to acquire an authentication request of a user terminal;
the LNS address determining module is used for determining the IP address of the LNS corresponding to the user terminal according to the authentication request of the user terminal;
the address adding module is used for adding the IP address of the corresponding LNS of the user terminal to the response message of the authentication request, so that the IP address of the LNS in the response message corresponds to the LNS to determine the source IP address of the user terminal, and the user terminal initiates a service access request based on the source IP address.
Optionally, the address adding module is specifically configured to:
and determining the IP address of the LNS corresponding to the user terminal according to the identification code in the authentication request of the user terminal.
Optionally, the address adding module is specifically configured to:
acquiring a first pre-established corresponding relation, wherein the first corresponding relation is used for describing the corresponding relation between the identification code and the IP address of the LNS;
and determining the IP address of the LNS corresponding to the user terminal according to the first corresponding relation and the identification code in the authentication request of the user terminal.
Optionally, the authentication device further includes:
and the user tag determining module is used for determining the user tag corresponding to the user terminal according to the identification code in the authentication request of the user terminal.
Correspondingly, the address adding module is specifically configured to:
if the user label corresponding to the user terminal is a preset label, determining the IP address of the LNS corresponding to the user terminal according to the authentication request of the user terminal.
In a fifth aspect, the present application also provides a scheduling apparatus, where the apparatus is applied to a scheduling server, the apparatus includes:
a service access request acquisition module, configured to acquire a service access request sent by a user terminal, where the service access request includes a source IP address of the user terminal, where the source IP address of the user terminal is an address allocated to the user terminal by a two-layer tunneling protocol network server LNS corresponding to the user terminal, and an IP address of the LNS corresponding to the user terminal is determined by an authentication server according to an authentication request of the user terminal;
And the resource scheduling module is used for determining an edge cloud server corresponding to the user terminal according to the source IP address in the service access request so as to respond to the service access request by the edge cloud server corresponding to the user terminal.
Optionally, the resource scheduling module is specifically configured to:
acquiring service IP address segments corresponding to all edge cloud service ends;
determining a service IP address segment to which the source IP address belongs according to the source IP address in the service access request;
and determining an edge cloud server corresponding to the service IP address segment to which the source IP address belongs, and performing the edge cloud server corresponding to the service access for the user terminal.
In a sixth aspect, the present application also provides an authentication server, including: a processor, and a memory communicatively coupled to the processor; the memory stores computer-executable instructions; the processor executes computer-executable instructions stored in the memory to implement the authentication method provided in the second aspect.
In a seventh aspect, the present application further provides a scheduling server, including: a processor, and a memory communicatively coupled to the processor; the memory stores computer-executable instructions; the processor executes computer-executable instructions stored in the memory to implement the scheduling method provided in the third aspect.
In an eighth aspect, the present application further provides a computer readable storage medium having stored therein computer executable instructions for implementing the authentication method according to any of the second aspect of the present application and/or the scheduling method according to the third aspect when executed by a processor.
In a ninth aspect, the present application also provides a computer program product comprising a computer program which, when executed by a processor, implements the authentication method of any of the second aspect of the present application, and/or the scheduling method of the third aspect.
The dispatching system, the authentication method, the dispatching method, the device, the server and the medium provided by the application aim at the application scene of an operator responding to the service request of a mobile network user, based on the authentication server in the dispatching system responding to the authentication request of a user terminal, thereby determining the IP address of the LNS corresponding to the user terminal, further distributing the IP address, namely the source IP address, to the user terminal by the LNS corresponding to the user terminal, thereby initiating the service access request by the user terminal based on the source IP address, the dispatching server responding to the service access request by the edge cloud server matched with the dispatching address based on the source IP address in the service access request, the resource dispatching method taking a single mobile network user as granularity is realized, the dispatching cost is low, the dispatching speed is high, the resource dispatching strategy flexibly deployed in a wide area range according to needs is realized by combining the configuration of the IP address field of the edge cloud server, and the service scene applicable to 2B (to Business and vertical industry clients) and 2C; meanwhile, network acceleration is performed based on the edge cloud server, so that network delay is reduced, and user satisfaction is improved.
Drawings
The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate embodiments consistent with the application and together with the description, serve to explain the principles of the application.
FIG. 1 is a schematic diagram of a conventional cloud service architecture;
fig. 2 is a schematic structural diagram of a cloud service architecture according to an embodiment of the present application;
FIG. 3 is a schematic diagram of a scheduling system according to an embodiment of the present application;
FIG. 4 is a schematic diagram of a scheduling system according to another embodiment of the present application;
FIG. 5 is a flow chart of an authentication method according to an embodiment of the present application;
fig. 6 is a flowchart of a scheduling method according to an embodiment of the present application.
Specific embodiments of the present application have been shown by way of the above drawings and will be described in more detail below. The drawings and the written description are not intended to limit the scope of the inventive concepts in any way, but rather to illustrate the inventive concepts to those skilled in the art by reference to the specific embodiments.
Detailed Description
Reference will now be made in detail to exemplary embodiments, examples of which are illustrated in the accompanying drawings. When the following description refers to the accompanying drawings, the same numbers in different drawings refer to the same or similar elements, unless otherwise indicated. The implementations described in the following exemplary examples do not represent all implementations consistent with the application. Rather, they are merely examples of apparatus and methods consistent with aspects of the application as detailed in the accompanying claims.
Fig. 1 is a schematic diagram of a conventional cloud service architecture, as shown in fig. 1, where the cloud service architecture is composed of a plurality of central cloud service ends deployed in a central cloud machine room and a cloud platform operating system, when resources are allocated to a remote user terminal, the usage situation of a resource pool of the entire cloud service architecture is often considered, for example, resource scheduling is performed based on factors such as resource occupation requests and processing speed of each central cloud service end, so that the central cloud service ends are allocated to the user terminal to provide corresponding data services.
Based on the traditional resource scheduling mode of the cloud service architecture, the network delay is higher, and the network delay cannot be suitable for the requirements of high-quality services, such as high-definition videos, cloud games and the like.
In order to improve the real-time performance of network services, a cloud service architecture based on edge computing is widely applied. Fig. 2 is a schematic structural diagram of a cloud service architecture provided by an embodiment of the present application, as shown in fig. 2, where the cloud service architecture includes a plurality of central cloud service ends and scheduling servers deployed in a central cloud machine room, and edge cloud service ends deployed in a plurality of edge cloud machine rooms, and each scheduling server schedules an edge cloud server to provide data service for a user terminal within a service range of the edge cloud server, so as to realize sinking of the central cloud service by using the edge cloud machine room, reduce network delay of a service, and improve cloud service quality.
In some embodiments, the edge cloud machine room may include a convergence layer edge machine room and a ground-level edge cloud machine room, and may also include a field-level edge cloud machine room.
In some embodiments, the edge cloud service may be a site-level, convergence layer, or ground-market-level edge cloud service.
In some embodiments, in a scenario facing the convergence layer edge room, the mobile upstream flows reach the UPF (User Plane Function ) network elements deployed in the convergence layer edge cloud room through MAR (Metro Access Router, metropolitan area network access device), MER (Metro Edge Router, metropolitan area network convergence device). In a scene facing to a city-level edge cloud machine room, the upstream flow of the mobile network reaches UPF (User Plane Function ) network elements deployed in the city-level edge cloud machine room through MAR, MER and MCR (metropolitan area network core equipment).
In some embodiments, the ground level edge cloud machine room or provincial core machine room is further deployed with an SMF (Session Management Function ) network element, and in fig. 2, the SMF is deployed in the ground level edge cloud machine room as an example.
In the mobile network service scheduling policy based on the cloud service architecture shown in fig. 2, the scheduling server generally performs resource scheduling based on the static address of the user terminal configured by the SMF network element, so that the service scheduling flexibility is poor, and the scheduling server is not suitable for the development of mobile network personal users or 2C services.
In order to improve the flexibility of resource scheduling of a cloud service mechanism based on edge cloud, the embodiment of the application provides an edge cloud service scheduling strategy taking a single mobile network user as granularity, which is executed by a scheduling system, an authentication server of the scheduling system determines an IP address of an LNS (L2 TP Network Server, two-layer tunneling protocol network server) corresponding to a user terminal, and then the LNS of the IP address dynamically allocates a source IP address to the user terminal based on a private IP address pool, so that the scheduling server allocates an edge cloud service end to a service access request of the user terminal based on the source IP address, thereby reducing network delay of a service and improving service quality.
The following describes the technical scheme of the present application and how the technical scheme of the present application solves the above technical problems in detail with specific embodiments. The following embodiments may be combined with each other, and the same or similar concepts or processes may not be described in detail in some embodiments. Embodiments of the present application will be described below with reference to the accompanying drawings.
Fig. 3 is a schematic structural diagram of a scheduling system according to an embodiment of the present application, where the scheduling system is applicable to the cloud service architecture in the embodiment shown in fig. 2, and as shown in fig. 3, the scheduling system includes an authentication server 310 and a scheduling server 320, where the authentication server 310 and the scheduling server 320 are both deployed in a central cloud room.
The authentication server 310 is configured to receive an authentication request of a user terminal, determine an IP address of a two-layer tunneling protocol network server LNS corresponding to the user terminal based on the authentication request, and add the IP address of the LNS corresponding to the user terminal to a response message of the authentication request, so that an LNS corresponding to the IP address of the LNS in the response message allocates a source IP address to the user terminal, so that the user terminal initiates a service access request based on the source IP address; the scheduling server 320 is configured to receive a service access request of the user terminal, and determine, based on a source IP address in the service access request, an IP address of an edge cloud server corresponding to the user terminal, so that the edge cloud server 330 corresponding to the user terminal responds to the service access request. The edge cloud service end 330 is deployed in each city-level edge cloud machine room.
In some embodiments, authentication server 310 is an AAA server and dispatch server 320 is an OTT server.
In some embodiments, after the user terminal is started up to log on or a location update occurs, if the location of the user terminal exceeds the service range or coverage area of the current edge cloud service end 330, when the user terminal initiates a service request, the edge cloud service end 330 is allocated to the service request of the user terminal based on the scheduling system provided in this embodiment.
Fig. 4 is a schematic structural diagram of a dispatching system provided in another embodiment of the present application, and referring to fig. 3 and fig. 4, the dispatching system includes a central cloud room, a plurality of city level edge cloud rooms and a convergence layer edge cloud room, where a UDM (Unified Data Management, unified data management function), a plurality of central cloud servers, an authentication server 310 and a dispatching server 320 are disposed in the central cloud room; SMF, MCR, UPF, LNS, CR (Core Router, metropolitan area network Core Router) and an edge cloud server 330 are deployed in the city level edge cloud machine room; MER, UPF, LNS and an edge cloud server 330 are deployed in the convergence layer edge cloud machine room.
In some embodiments, the authentication request for the user terminal is generated by the SMF based on a service request for the user terminal.
Specifically, when the user terminal initiates a service request, the SMF generates an authentication request for the user terminal according to subscription data of the user terminal stored in a UDM acquired in advance.
Specifically, after the mobile network user subscribes to the edge cloud acceleration service, the BSS (Business Support System, service support system) may configure subscription data, such as authentication parameters, for the mobile network user in the UDM, and may also configure an IP address of the LNS corresponding to the mobile network user in an authentication server, such as an AAA (Authentication, authorization, accounting, authentication, authorization, and accounting) server, by the BSS.
Further, the correspondence between the mobile subscriber and the AAA server used by the mobile subscriber may be established in the UDM according to the mobile subscriber's identification code, such as MSISDN (Mobile Subscriber ISDN ), IMSI (International Mobile Subscriber Identity, international mobile subscriber identity), SUPI (Subscription Permanent Identifier, subscriber permanent identity), etc., where the ISDN is an integrated services digital network (Integrated Services Digital Network), i.e. the IP address of the AAA server corresponding to the mobile subscriber is found based on the identification code.
In some embodiments, the service request includes an identification code of the mobile network user corresponding to the user terminal.
Specifically, the SMF may search for subscription data of the corresponding mobile network user based on the identifier code in the service request sent by the user terminal and the identifier code acquired in advance from the UDM, and if the IP address of the AAA server corresponding to the identifier code is searched, send an authentication request to the AAA server.
Further, if the IP address of the AAA server corresponding to the identifier code is not retrieved, for example, the mobile network user does not subscribe to the edge cloud acceleration service, the SMF does not send an authentication request, and allocates a source IP address, i.e., the IP address of the user terminal, to the mobile terminal of the mobile network user in its own IP address pool, where the user can access the service end of the central cloud through the source IP address.
Specifically, after the SMF obtains the subscription data corresponding to the user terminal or the mobile network user, when the user initiates a service request, a flow of authentication to the authentication server 310 is triggered based on the subscription data.
In some embodiments, the authentication request is a Radius (Remote Authentication Dial In User Service, remote authentication dial-in user service) authentication request. The SMF generates a Radius authentication request based on the subscription data of the user terminal and triggers the Radius authentication request flow.
Specifically, after the authentication server 310 receives the authentication request of the user terminal sent by the SMF, the Radius authentication request flow is triggered, and the authentication server 310 determines the IP address of the LNS corresponding to the user terminal based on the identification code of the user terminal.
Further, the IP address of the LNS corresponding to the user terminal of the mobile network user may be determined based on the correspondence between the identification code of the mobile network user and the IP address of the LNS stored in the authentication server 310.
Further, the IP address of the LNS corresponding to the user terminal may be determined based on the identification code of the mobile network user in the service request and the IP address of the LAC (L2 TP Access Concentrator, two-layer tunneling protocol access concentrator) where the user terminal is located. The LAC device where the user terminal is located may be an SMF or a UPF corresponding to the user terminal. Or, the IP address of the LNS corresponding to the user terminal may be determined based on the identification Code of the mobile network user in the service request and the TAC Code (Track Area Code) where the user terminal is located.
Optionally, the authentication server 310 is specifically configured to: and determining the IP address of the LNS corresponding to the user terminal according to the identification code in the authentication request of the user terminal.
Optionally, the authentication server 310 is specifically configured to: acquiring a first pre-established corresponding relation, wherein the first corresponding relation is used for describing the corresponding relation between the identification code and the IP address of the LNS; and determining the IP address of the LNS corresponding to the user terminal according to the first corresponding relation and the identification code in the authentication request of the user terminal.
In some embodiments, the first correspondence may be modified based on requirements, that is, the IP address of the LNS corresponding to the identification code of the mobile network user may be adjusted, so as to implement fine and flexible configuration of resources, implement flexible switching between different edge cloud service ends 330 by the user terminal, and guide the traffic of the user to different edge clouds.
And mapping the mobile network user and the LNS address through a first pre-established corresponding relation, so that the response speed of address configuration is improved.
Specifically, after determining the IP address of the LNS corresponding to the user terminal, the authentication server 310 adds the IP address of the LNS to the response message of the Radius authentication request of the user terminal, so that the LNS corresponding to the IP address of the LNS in the response message allocates a source IP address to the user terminal.
Specifically, the SMF/UPF is taken as LAC, the router is taken as LNS, an L2TP VPN (Virtual Private Networks, virtual private network) tunnel is established between the UPF and the router, a private network IP address pool is independently planned and configured by the LNS corresponding to the IP address of the LNS in the response message, and a source IP address is distributed for a mobile network user or a user terminal based on the private network IP address pool.
Specifically, an L2TP VPN tunnel may be established between the UPF and the router based on the IP address of the LAC where the user terminal is located and the mapping relationship between the IP address of the LAC and the IP address of the LNS stored in the authentication server, or the TAC code where the user terminal is located and the mapping relationship between the TAC code stored in the authentication server and the IP address of the LNS.
In some embodiments, in the first correspondence, the IP address of the SMF/UPF corresponds one-to-one with the IP address of the LNS, or the TAC code corresponds one-to-one with the IP address of the LNS.
In some embodiments, the IP address of one SMF/UPF may correspond to the IP addresses of multiple LNS's, or one TAC encoding may correspond to the IP addresses of multiple LNS's. Thereby realizing that the LAC can establish the L2TP VPN tunnel with a plurality of different LNS devices at the same time.
Specifically, the LNS maps the IP address in the private network IP address pool to an IP address in a specified public network IP address field through NAT ((Network Address Translation, network address translation), and determines a source IP address of the user terminal based on the mapped IP address in the public network IP address field, so that the user terminal can access the corresponding scheduling server through the IP address in the public network IP address field.
Optionally, the authentication server 310 is specifically configured to:
determining a user tag corresponding to the user terminal according to the identification code in the authentication request of the user terminal; if the user label corresponding to the user terminal is a preset label, determining the IP address of the LNS corresponding to the user terminal according to the authentication request of the user terminal.
The preset label is a label of a user subscribed to the edge cloud acceleration service.
Specifically, based on the identification code in the authentication request of the user terminal, configuration information corresponding to the identification code stored in the authentication server 310 may be obtained, so as to determine whether a user tag corresponding to the user terminal is preset based on the configuration information; if yes, determining the IP address of the LNS corresponding to the user terminal according to the authentication request of the user terminal, and adding the IP address of the LNS corresponding to the user terminal into a response message of the authentication request of the user terminal so as to carry out a subsequent flow based on the response message; if not, directly generating a response message of the authentication request of the user terminal without determining the IP address of the LNS corresponding to the user terminal, wherein the response message does not contain the IP address of the LNS so as to carry out subsequent flow based on the response message.
After determining the source IP address of the user terminal, the user terminal sends a service access request to the scheduling server 320, where the scheduling server allocates an edge cloud server 330 with a matching address to the user terminal based on the source IP address in the service access request (i.e., the IP address in the private network IP address pool allocated by the LNS to the user terminal, and maps the IP address to the IP address in the specified public network IP address segment through NAT), that is, determines the IP address of the edge cloud server 330 corresponding to the user terminal, so that the edge cloud server 330 corresponding to the user terminal responds to the service access request.
The identities of the mobile network users are distinguished through the setting of the preset labels, so that the flexibility of resource scheduling is improved.
Specifically, the scheduling server 320 determines that, in the service area, the edge cloud service end 330 corresponding to the source IP address in the service access request of the user terminal is a service end of the user terminal, and the corresponding edge cloud service end 330 provides the data access service for the user terminal.
Optionally, the scheduling server 320 is specifically configured to:
acquiring service IP address segments corresponding to the edge cloud service ends 330; determining a service IP address segment to which the source IP address belongs according to the source IP address in the service access request; and determining an edge cloud server corresponding to the service IP address segment to which the source IP address belongs, and performing an edge cloud server 330 corresponding to the service access for the user terminal.
For example, for a service access request of which the source IP address belongs to an IP address pool of a mobile network user specified in an edge cloud a coverage area, returning to an IP address of an edge cloud server a as a destination address for access by the mobile network user, where the edge cloud server a is an edge cloud server dedicated to serving the mobile network user in the edge cloud a service area and is deployed in an edge cloud a machine room; and returning the IP address of the edge cloud server B to a service access request of an IP address pool of the mobile network user, which belongs to the specified coverage area of the edge cloud B, wherein the IP address of the edge cloud server B is a destination address accessed by the mobile network user, and the edge cloud server B is an edge cloud server which is specially used for serving the mobile network user in the service area of the edge cloud B and is deployed in a machine room of the edge cloud B.
Network service of the user terminal in the corresponding area is performed through the plurality of edge cloud service ends 330 with different coverage areas, so that network delay is reduced, and service quality is improved.
The scheduling system provided by the embodiment is aimed at an application scenario of an operator responding to a service request of a mobile network user, an authentication server in the scheduling system responds to the authentication request of a user terminal, so that an IP address of an LNS (network node) corresponding to the user terminal is determined, and then the LNS corresponding to the user terminal distributes an IP address, namely a source IP address, to the user terminal, so that the user terminal initiates the service access request based on the source IP address, and the scheduling server dispatches an edge cloud server with the matched IP address to respond to the service access request based on the source IP address in the service access request, thereby realizing a resource scheduling method with a single mobile network user as granularity, having low scheduling cost and high speed, combining the configuration of a service IP address field corresponding to the edge cloud server, realizing a resource scheduling strategy flexibly deployed in a wide area range as required, and being applicable to service scenarios of 2B (to government and vertical industry clients) and 2C; meanwhile, network acceleration is performed based on the edge cloud server, so that network delay is reduced, and user satisfaction is improved.
Fig. 5 is a flowchart of an authentication method according to an embodiment of the present application, which may be performed by the authentication server, as shown in fig. 5, and the authentication method includes the following steps:
step S501, an authentication request of a user terminal is acquired.
Step S502, according to the authentication request of the user terminal, determining the IP address of the LNS corresponding to the user terminal.
Step S503, adding the IP address of the LNS corresponding to the user terminal to the response message of the authentication request, so that the source IP address of the user terminal is determined by the LNS corresponding to the IP address of the LNS in the response message, so that the user terminal initiates a service access request based on the source IP address.
Optionally, determining, according to the authentication request of the user terminal, an IP address of the LNS corresponding to the user terminal includes:
and determining the IP address of the LNS corresponding to the user terminal according to the identification code in the authentication request of the user terminal.
Optionally, determining the IP address of the LNS corresponding to the user terminal according to the identification code in the authentication request of the user terminal includes:
acquiring a first pre-established corresponding relation, wherein the first corresponding relation is used for describing the corresponding relation between the identification code and the IP address of the LNS; and determining the IP address of the LNS corresponding to the user terminal according to the first corresponding relation and the identification code in the authentication request of the user terminal.
Optionally, the authentication request further includes an identification code of the user terminal, and the method further includes:
and determining the user label corresponding to the user terminal according to the identification code in the authentication request of the user terminal.
Correspondingly, determining the IP address of the LNS corresponding to the user terminal according to the authentication request of the user terminal includes:
if the user label corresponding to the user terminal is a preset label, determining the IP address of the LNS corresponding to the user terminal according to the authentication request of the user terminal.
Fig. 6 is a schematic diagram of a scheduling method according to an embodiment of the present application, where the scheduling method may be executed by the scheduling server, and the scheduling method shown in fig. 6 includes the following steps:
step S601, a service access request sent by a user terminal is obtained.
The service access request includes a source IP address of the user terminal, where the source IP address of the user terminal is an IP address allocated to the user terminal by a two-layer tunneling protocol network server LNS corresponding to the user terminal, and the IP address of the LNS corresponding to the user terminal is determined by an authentication server according to the authentication request of the user terminal.
Step S602, according to the source IP address in the service access request, determining an edge cloud server corresponding to the user terminal, so that the edge cloud server corresponding to the user terminal responds to the service access request.
Optionally, determining, according to the source IP address in the service access request, an edge cloud server corresponding to the user terminal includes:
acquiring service IP address segments corresponding to all edge cloud service ends; determining a service IP address segment to which the source IP address belongs according to the source IP address in the service access request; and determining an edge cloud server corresponding to the service IP address segment to which the source IP address belongs, and performing the edge cloud server corresponding to the service access for the user terminal.
An authentication apparatus, the apparatus being applied to an authentication server, the apparatus comprising: an authentication request acquisition module, configured to acquire an authentication request of a user terminal; the LNS address determining module is used for determining the IP address of the LNS corresponding to the user terminal according to the authentication request of the user terminal; the address adding module is used for adding the IP address of the corresponding LNS of the user terminal to the response message of the authentication request, so that the LNS corresponding to the IP address of the LNS in the response message determines the source IP address of the user terminal, and the user terminal initiates a service access request based on the source IP address.
Optionally, the address adding module is specifically configured to:
and determining the IP address of the LNS corresponding to the user terminal according to the identification code in the authentication request of the user terminal.
Optionally, the address adding module is specifically configured to:
acquiring a first pre-established corresponding relation, wherein the first corresponding relation is used for describing the corresponding relation between the identification code and the IP address of the LNS; and determining the IP address of the LNS corresponding to the user terminal according to the first corresponding relation and the identification code in the authentication request of the user terminal.
Optionally, the authentication device further includes:
and the user tag determining module is used for determining the user tag corresponding to the user terminal according to the identification code in the authentication request of the user terminal.
Correspondingly, the address adding module is specifically configured to:
if the user label corresponding to the user terminal is a preset label, determining the IP address of the LNS corresponding to the user terminal according to the authentication request of the user terminal.
A scheduling apparatus, the apparatus being applied to a scheduling server, the apparatus comprising:
a service access request acquisition module, configured to acquire a service access request sent by a user terminal, where the service access request includes a source IP address of the user terminal, where the source IP address of the user terminal is an IP address allocated to the user terminal by a two-layer tunneling protocol network server LNS corresponding to the user terminal, and an IP address of the LNS corresponding to the user terminal is determined by an authentication server according to an authentication request of the user terminal; and the resource scheduling module is used for determining an edge cloud server corresponding to the user terminal according to the source IP address in the service access request so as to respond to the service access request by the edge cloud server corresponding to the user terminal.
Optionally, the resource scheduling module is specifically configured to:
acquiring service IP address segments corresponding to all edge cloud service ends; determining a service IP address segment to which the source IP address belongs according to the source IP address in the service access request; and determining an edge cloud server corresponding to the service IP address segment to which the source IP address belongs, and performing the edge cloud server corresponding to the service access for the user terminal.
An authentication server comprising a processor, and a memory communicatively coupled to the processor; the memory stores computer-executable instructions; the processor executes the computer-executable instructions stored in the memory to implement the authentication method provided by any embodiment of the present application.
A dispatch server comprising a processor and a memory communicatively coupled to the processor; the memory stores computer-executable instructions; the processor executes the computer-executed instructions stored in the memory to implement the scheduling method provided by any embodiment of the present application.
A non-transitory computer readable storage medium, which when executed by a processor of a scheduling system, causes the scheduling system to perform the method provided by any of the embodiments described above.
For example, the non-transitory computer readable storage medium may be ROM, random Access Memory (RAM), CD-ROM, magnetic tape, floppy disk, optical data storage device, etc.
Embodiments of the present application also provide a computer program product comprising an executable computer program stored in a readable storage medium. The computer program may be read from a readable storage medium by at least one processor of a parameter configuration apparatus, and executed by the at least one processor, causes the parameter configuration device to implement the parameter configuration methods provided in the various embodiments described above.
Other embodiments of the application will be apparent to those skilled in the art from consideration of the specification and practice of the application disclosed herein. This application is intended to cover any variations, uses, or adaptations of the application following, in general, the principles of the application and including such departures from the present disclosure as come within known or customary practice within the art to which the application pertains. It is intended that the specification and examples be considered as exemplary only, with a true scope and spirit of the application being indicated by the following claims.
It is to be understood that the application is not limited to the precise arrangements and instrumentalities shown in the drawings, which have been described above, and that various modifications and changes may be effected without departing from the scope thereof. The scope of the application is limited only by the appended claims.

Claims (12)

1. A dispatch system comprising an authentication server and a dispatch server;
the authentication server is used for receiving an authentication request of a user terminal, determining an IP address of a two-layer tunneling protocol network server LNS corresponding to the user terminal based on the authentication request, adding the IP address of the LNS corresponding to the user terminal into a response message of the authentication request, and distributing a source IP address to the user terminal by the LNS corresponding to the IP address of the LNS in the response message so that the user terminal initiates a service access request based on the source IP address;
the scheduling server is used for receiving the service access request of the user terminal, and determining the IP address of the edge cloud server corresponding to the user terminal based on the source IP address in the service access request so as to respond to the service access request by the edge cloud server corresponding to the user terminal;
the authentication request of the user terminal is generated by a session management function unit SMF according to the subscription data of the user terminal stored in a unified data management function unit UDM acquired in advance when the user terminal initiates a service request;
The authentication request further includes an identification code of the user terminal, and the authentication server is specifically configured to:
determining a user tag corresponding to the user terminal according to the identification code in the authentication request of the user terminal;
if the user tag corresponding to the user terminal is a preset tag, determining the IP address of the LNS corresponding to the user terminal according to the authentication request of the user terminal, wherein the preset tag is a tag of a user ordering the edge cloud acceleration service.
2. The system of claim 1, wherein the authentication server is configured in particular to:
acquiring a first pre-established corresponding relation, wherein the first corresponding relation is used for describing the corresponding relation between the identification code and the IP address of the LNS;
and determining the IP address of the LNS corresponding to the user terminal according to the first corresponding relation and the identification code in the authentication request of the user terminal.
3. The system according to claim 1 or 2, characterized in that the scheduling server is in particular adapted to:
acquiring service IP address segments corresponding to all edge cloud service ends;
determining a service IP address segment to which the source IP address belongs according to the source IP address in the service access request;
And determining an edge cloud server corresponding to the service IP address segment to which the source IP address belongs as the edge cloud server accessed by the user terminal.
4. A system according to any of claims 1-3, characterized in that the authentication server is an AAA server and the dispatch server is an OTT server.
5. An authentication method, the method being applied to an authentication server, the method comprising:
acquiring an authentication request of a user terminal, wherein the authentication request of the user terminal is generated by a session management function unit SMF according to subscription data of the user terminal stored in a unified data management function unit UDM acquired in advance when the user terminal initiates a service request;
according to the authentication request of the user terminal, determining the IP address of a two-layer tunnel protocol network server LNS corresponding to the user terminal;
adding the IP address of the corresponding LNS of the user terminal to the response message of the authentication request, so that the IP address of the LNS in the response message corresponds to the LNS to determine the source IP address of the user terminal, so that the user terminal initiates a service access request based on the source IP address, the response of the service access request is performed by the edge cloud server corresponding to the user terminal, and the IP address of the edge cloud server corresponding to the user terminal is determined by a scheduling server based on the source IP address in the received service access request;
The authentication request further includes an identification code of the user terminal, and the method further includes:
determining a user tag corresponding to the user terminal according to the identification code in the authentication request of the user terminal;
correspondingly, determining the IP address of the LNS corresponding to the user terminal according to the authentication request of the user terminal includes:
if the user tag corresponding to the user terminal is a preset tag, determining the IP address of the LNS corresponding to the user terminal according to the authentication request of the user terminal, wherein the preset tag is a tag of a user ordering the edge cloud acceleration service.
6. A scheduling method, wherein the method is applied to a scheduling server, the method comprising:
acquiring a service access request sent by a user terminal, wherein the service access request comprises a source IP address of the user terminal, the source IP address of the user terminal is an IP address distributed to the user terminal by a two-layer tunnel protocol network server LNS corresponding to the user terminal, the IP address of the LNS corresponding to the user terminal is an authentication server, when the authentication server determines that a user tag corresponding to the user terminal is a preset tag, the authentication request of the user terminal is determined according to the authentication request of the user terminal, when the user terminal initiates the service request, a session management function unit SMF generates according to subscription data of the user terminal stored in a unified data management function unit UDM acquired in advance, the user tag corresponding to the user terminal is determined according to an identification code in the authentication request of the user terminal, and the preset tag is a tag of a user subscribed to an edge cloud acceleration service;
And determining an edge cloud server corresponding to the user terminal according to the source IP address in the service access request, so that the edge cloud server corresponding to the user terminal responds to the service access request.
7. The method of claim 6, wherein determining the edge cloud server corresponding to the user terminal according to the source IP address in the service access request comprises:
acquiring service IP address segments corresponding to all edge cloud service ends;
determining a service IP address segment to which the source IP address belongs according to the source IP address in the service access request;
and determining an edge cloud server corresponding to the service IP address segment to which the source IP address belongs, and performing the edge cloud server corresponding to the service access for the user terminal.
8. An authentication apparatus, the apparatus being applied to an authentication server, the apparatus comprising:
the authentication request acquisition module is used for acquiring an authentication request of a user terminal, wherein the authentication request of the user terminal is generated by a session management function unit SMF according to subscription data of the user terminal stored in a unified data management function unit UDM acquired in advance when the user terminal initiates a service request;
The LNS address determining module is used for determining the IP address of the two-layer tunnel protocol network server LNS corresponding to the user terminal according to the authentication request of the user terminal;
an address adding module, configured to add an IP address of a corresponding LNS of the user terminal to a response message of the authentication request, so that an IP address of the LNS in the response message corresponds to the LNS to determine a source IP address of the user terminal, so that the user terminal initiates a service access request based on the source IP address, a response of the service access request is performed by an edge cloud server corresponding to the user terminal, and an IP address of the edge cloud server corresponding to the user terminal is determined by a scheduling server based on the source IP address in the received service access request;
the authentication request further includes an identification code of the user terminal, and the authentication device further includes:
the user tag determining module is used for determining the user tag corresponding to the user terminal according to the identification code in the authentication request of the user terminal;
correspondingly, the address adding module is specifically configured to:
if the user tag corresponding to the user terminal is a preset tag, determining the IP address of the LNS corresponding to the user terminal according to the authentication request of the user terminal, wherein the preset tag is a tag of a user ordering the edge cloud acceleration service.
9. A scheduling apparatus, the apparatus being applied to a scheduling server, the apparatus comprising:
a service access request acquisition module, configured to acquire a service access request sent by a user terminal, where the service access request includes a source IP address of the user terminal, where the source IP address of the user terminal is an address allocated to the user terminal by a two-layer tunneling protocol network server LNS corresponding to the user terminal, where the IP address of the LNS corresponding to the user terminal is determined by an authentication server according to an authentication request of the user terminal when determining that a user tag corresponding to the user terminal is a preset tag, where the authentication request of the user terminal is generated by a session management function unit SMF according to subscription data of the user terminal stored in a unified data management function unit UDM acquired in advance when the user terminal initiates the service request, and where the user tag corresponding to the user terminal is determined according to an identifier code in the authentication request of the user terminal, and where the preset tag is a tag of a user subscribed to an edge cloud acceleration service;
and the resource scheduling module is used for determining an edge cloud server corresponding to the user terminal according to the source IP address in the service access request so as to respond to the service access request by the edge cloud server corresponding to the user terminal.
10. An authentication server, comprising:
a processor, and a memory communicatively coupled to the processor;
the memory stores computer-executable instructions;
the processor executes computer-executable instructions stored in the memory to implement the authentication method of claim 5.
11. A dispatch server, comprising:
a processor, and a memory communicatively coupled to the processor;
the memory stores computer-executable instructions;
the processor executes computer-executable instructions stored in the memory to implement the scheduling method of claim 6 or 7.
12. A computer readable storage medium having stored therein computer executable instructions which when executed by a processor are adapted to carry out the method of any of claims 5-7.
CN202111499800.9A 2021-12-09 2021-12-09 Scheduling system, authentication method, scheduling method, device, server and medium Active CN114285900B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN202111499800.9A CN114285900B (en) 2021-12-09 2021-12-09 Scheduling system, authentication method, scheduling method, device, server and medium

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN202111499800.9A CN114285900B (en) 2021-12-09 2021-12-09 Scheduling system, authentication method, scheduling method, device, server and medium

Publications (2)

Publication Number Publication Date
CN114285900A CN114285900A (en) 2022-04-05
CN114285900B true CN114285900B (en) 2023-10-03

Family

ID=80871553

Family Applications (1)

Application Number Title Priority Date Filing Date
CN202111499800.9A Active CN114285900B (en) 2021-12-09 2021-12-09 Scheduling system, authentication method, scheduling method, device, server and medium

Country Status (1)

Country Link
CN (1) CN114285900B (en)

Families Citing this family (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN114928664B (en) * 2022-06-16 2023-10-31 中国电信股份有限公司 Network tunnel establishment method and device, storage medium and electronic equipment
CN115665744B (en) * 2022-11-21 2023-05-23 成都卫士通信息产业股份有限公司 Internet of vehicles interaction method, device, equipment and medium

Citations (11)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101163085A (en) * 2007-11-16 2008-04-16 中国联合通信有限公司 Method and system for implementing CDMA1xLNS load balancing
WO2009143729A1 (en) * 2008-05-27 2009-12-03 华为技术有限公司 Method, system and apparatus for realizing dhcp user service wholesale
CN102111326A (en) * 2009-12-25 2011-06-29 杭州华三通信技术有限公司 Method, system and device for realizing mobility in layer 2 tunnel protocol virtual private network
CN106130926A (en) * 2016-08-30 2016-11-16 杭州迪普科技有限公司 A kind of processing method and processing device of message
WO2017014164A1 (en) * 2015-07-17 2017-01-26 日本電気株式会社 Communication system, communication device, communication method, terminal, and program
JP2018038001A (en) * 2016-09-02 2018-03-08 日本電信電話株式会社 Communication system, selection method, authentication device, and selection program
WO2018076712A1 (en) * 2016-10-25 2018-05-03 华为技术有限公司 Terminal authentication method and device
WO2020132308A2 (en) * 2018-12-19 2020-06-25 Apple Inc. Configuration management, performance management, and fault management to support edge computing
CN112738132A (en) * 2021-01-27 2021-04-30 华北石油通信有限公司 Secondary authentication access system and method thereof
CN113542386A (en) * 2019-07-15 2021-10-22 腾讯科技(深圳)有限公司 Service processing method and related equipment
CN113746872A (en) * 2020-05-27 2021-12-03 中国联合网络通信集团有限公司 Service access method and equipment

Family Cites Families (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20150288578A1 (en) * 2013-10-21 2015-10-08 Centurylink Intellectual Property Llc InstaLink: Instant Provisioning of Network Services

Patent Citations (11)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101163085A (en) * 2007-11-16 2008-04-16 中国联合通信有限公司 Method and system for implementing CDMA1xLNS load balancing
WO2009143729A1 (en) * 2008-05-27 2009-12-03 华为技术有限公司 Method, system and apparatus for realizing dhcp user service wholesale
CN102111326A (en) * 2009-12-25 2011-06-29 杭州华三通信技术有限公司 Method, system and device for realizing mobility in layer 2 tunnel protocol virtual private network
WO2017014164A1 (en) * 2015-07-17 2017-01-26 日本電気株式会社 Communication system, communication device, communication method, terminal, and program
CN106130926A (en) * 2016-08-30 2016-11-16 杭州迪普科技有限公司 A kind of processing method and processing device of message
JP2018038001A (en) * 2016-09-02 2018-03-08 日本電信電話株式会社 Communication system, selection method, authentication device, and selection program
WO2018076712A1 (en) * 2016-10-25 2018-05-03 华为技术有限公司 Terminal authentication method and device
WO2020132308A2 (en) * 2018-12-19 2020-06-25 Apple Inc. Configuration management, performance management, and fault management to support edge computing
CN113542386A (en) * 2019-07-15 2021-10-22 腾讯科技(深圳)有限公司 Service processing method and related equipment
CN113746872A (en) * 2020-05-27 2021-12-03 中国联合网络通信集团有限公司 Service access method and equipment
CN112738132A (en) * 2021-01-27 2021-04-30 华北石油通信有限公司 Secondary authentication access system and method thereof

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
"Support for L2TP on N6".3GPP SA WG2 Meeting #144e S2-2102154.2021,全文. *

Also Published As

Publication number Publication date
CN114285900A (en) 2022-04-05

Similar Documents

Publication Publication Date Title
US11743075B2 (en) Communication method and apparatus
CN114285900B (en) Scheduling system, authentication method, scheduling method, device, server and medium
CN110048951B (en) PCF addressing method and device, equipment and storage medium
EP1563666B1 (en) Mobile ip registration supporting port identification
WO2023000935A1 (en) Data processing method, network element device, and readable storage medium
US11432349B2 (en) Group creation method, apparatus, and system
EP3920562A1 (en) Method and system for performing charging processing on network slice client, and related device
CN114902634A (en) Apparatus and method for providing information of application server in mobile communication system
US7251496B2 (en) Mobile director
CN113810512A (en) Internet of things terminal access system, method and device and storage medium
US11496947B2 (en) Method for accessing local network and device
CN104253878B (en) The vlan information management system and method for DHCP RELAY termination sub-interfaces
CN114257439B (en) Service scheduling method, AAA server and service supporting system
CA2502063C (en) Methods and apparatus for home address management at home agent for nai based mobile nodes
CN113347282A (en) IP address distribution and duplicate checking method and system for satellite internet
CN110868762B (en) Data stream processing method, device and system
CN107566994A (en) Group region method of adjustment and system, cluster application server and trunking user terminal
CN114826920B (en) Network slice opening method, device, equipment and storage medium
CN109561170A (en) Address pool creation method, device, address pool management system and storage medium
CN113438641B (en) Group processing method, equipment and storage medium
WO2024060472A1 (en) Data distributing method, double-domain private network system, device, storage medium, and program product
US20230007448A1 (en) Mechanism to deliver sms meant for user's public or private 5g identity over wlan network
CN116708370A (en) IP address allocation method, device, equipment and medium
CN117998367A (en) Data distribution method, system, equipment and storage medium
KR101641274B1 (en) Method and system for private network service and gateway therefor

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
GR01 Patent grant
GR01 Patent grant