CN114500395A - Flow control method, device and equipment - Google Patents

Flow control method, device and equipment Download PDF

Info

Publication number
CN114500395A
CN114500395A CN202111633236.5A CN202111633236A CN114500395A CN 114500395 A CN114500395 A CN 114500395A CN 202111633236 A CN202111633236 A CN 202111633236A CN 114500395 A CN114500395 A CN 114500395A
Authority
CN
China
Prior art keywords
address
dynamic
terminal equipment
flow control
traffic
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Granted
Application number
CN202111633236.5A
Other languages
Chinese (zh)
Other versions
CN114500395B (en
Inventor
邵涛
严炎
张然懋
刘博宇
陈咏进
郭昌集
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
China Unicom Smart Connection Technology Ltd
Original Assignee
China Unicom Smart Connection Technology Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by China Unicom Smart Connection Technology Ltd filed Critical China Unicom Smart Connection Technology Ltd
Priority to CN202111633236.5A priority Critical patent/CN114500395B/en
Publication of CN114500395A publication Critical patent/CN114500395A/en
Application granted granted Critical
Publication of CN114500395B publication Critical patent/CN114500395B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L47/00—Traffic control in data switching networks
    • H04L47/10—Flow control; Congestion control
    • H04L47/24—Traffic characterised by specific attributes, e.g. priority or QoS
    • H04L47/2441—Traffic characterised by specific attributes, e.g. priority or QoS relying on flow classification, e.g. using integrated services [IntServ]

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)
  • Mobile Radio Communication Systems (AREA)

Abstract

The embodiment of the invention provides a flow control method, a flow control device and flow control equipment. The method comprises the following steps: receiving an internet access request sent by terminal equipment, wherein the internet access request comprises a dynamic IP address of the terminal equipment; determining an IP address section corresponding to the dynamic IP address according to the dynamic IP address; determining a flow control strategy corresponding to the IP address field according to the IP address field, wherein the flow control strategy comprises a control strategy for judging whether the terminal equipment can access a target application through the dynamic IP address; and determining to allow or deny the terminal equipment to access the target application through the dynamic IP address according to the flow management and control strategy. The embodiment of the invention avoids resource waste and inflexible architecture, thereby saving resources and making the architecture more flexible.

Description

Flow control method, device and equipment
[ technical field ] A method for producing a semiconductor device
The invention relates to the technical field of car networking, in particular to a flow control method, a flow control device and flow control equipment.
[ background of the invention ]
Along with the popularization and the continuous development of vehicles, users pay more attention to vehicle using experience when selecting vehicles, how to improve the vehicle using experience of the users becomes an important problem in vehicle research and development, and the vehicle networking technology comes up at the end. The car networking technology takes a running car as an information perception object, and realizes network connection between the car and other connectable equipment by means of a new generation information communication technology, thereby achieving the purpose of accessing the internet. For example, the car networking technology may enable network connectivity between cars, cars and roads, and cars and service platforms. The car networking technology effectively utilizes all vehicle dynamic information in the information network platform, provides different functional services for users in the running process of the vehicle, such as map service, music service, video service and the like, and improves the intelligent driving level of the vehicle. However, at the same time, various functional services also use more traffic, so it is very important to manage the traffic of the terminal device. In the related art, a mobile network operator configures a dedicated static IP address for each SIM card, and a terminal device corresponding to the SIM card can access the internet using the static IP address, but when the terminal device does not need to use the static IP address, the static IP address is still in an occupied state, that is, the static IP address cannot be used by other terminal devices, thereby causing resource waste of the static IP address and inflexibility of the framework when the static IP address is used.
[ summary of the invention ]
In view of this, embodiments of the present invention provide a method, an apparatus, and a device for traffic control, so as to solve the problems of resource waste and inflexible architecture caused by using a static IP address in the prior art.
In a first aspect, an embodiment of the present invention provides a flow management and control method, where the method is applied to a flow management and control device, and the method includes:
receiving an internet access request sent by terminal equipment, wherein the internet access request comprises a dynamic IP address of the terminal equipment;
determining an IP address section corresponding to the dynamic IP address according to the dynamic IP address;
determining a flow control strategy corresponding to the IP address field according to the IP address field, wherein the flow control strategy comprises a control strategy for judging whether the terminal equipment can access a target application through the dynamic IP address;
and determining to allow or deny the terminal equipment to access the target application through the dynamic IP address according to the flow management and control strategy.
In one possible implementation manner, the method further includes:
and the dynamic IP address is distributed to the terminal equipment based on a flow control strategy corresponding to the terminal equipment.
In a second aspect, an embodiment of the present invention provides a flow management method, where the method includes:
the method comprises the steps that a flow control device receives an internet access request sent by a terminal device, wherein the internet access request comprises a dynamic IP address of the terminal device;
the flow control equipment determines an IP address section corresponding to the dynamic IP address according to the dynamic IP address;
the flow control equipment determines a flow control strategy corresponding to the IP address field according to the IP address field, wherein the flow control strategy comprises a control strategy for judging whether the terminal equipment can access a target application through the dynamic IP address;
and the traffic control equipment determines to allow or refuse the terminal equipment to access the target application through the dynamic IP address according to the traffic control strategy.
In one possible implementation manner, the method further includes:
and if the flow control equipment determines that the terminal equipment is allowed to access the target application through the dynamic IP address according to the flow control strategy, sending the Internet access request to an application server so that the terminal equipment can access the target application.
In a possible implementation manner, before the traffic control device receives an internet access request sent by a terminal device, the method further includes:
the terminal equipment sends a RADIUS connection request to a gateway, wherein the RADIUS connection request comprises the IMSI of the terminal equipment;
the gateway sends the RADIUS connection request to an authentication, authorization and accounting AAA server;
the AAA server determines the terminal equipment according to the IMSI and inquires a flow control strategy corresponding to the terminal equipment;
the AAA server determines an IP address field corresponding to the flow control strategy according to the flow control strategy corresponding to the terminal equipment, and allocates the dynamic IP address for the terminal equipment from the IP address field corresponding to the flow control strategy;
the AAA server sends the dynamic IP address to the gateway;
and the gateway sends the dynamic IP address to the terminal equipment so as to establish APN connection between the terminal equipment and the flow control equipment.
In a possible implementation manner, before the sending, by the terminal device, the first RADIUS to the gateway, the method further includes:
the flow control equipment sets a flow control strategy corresponding to at least one IP address field;
and the flow control equipment sends the flow control strategy corresponding to the at least one IP address field to the AAA server.
In one possible implementation, the method further includes:
the terminal equipment sends a RADIUS disconnection request to the gateway, wherein the RADIUS disconnection request comprises the IMSI of the terminal equipment;
the gateway sends the RADIUS disconnection request to the AAA server;
and the AAA server determines the terminal equipment according to the IMSI and releases the dynamic IP address of the terminal equipment so as to disconnect the APN between the terminal equipment and the flow control equipment.
In a third aspect, an embodiment of the present invention provides a traffic control apparatus, where the apparatus includes:
the system comprises a receiving module, a sending module and a receiving module, wherein the receiving module is used for receiving an Internet access request sent by terminal equipment, and the Internet access request comprises a dynamic IP address of the terminal equipment;
the first determining module is used for determining an IP address section corresponding to the dynamic IP address according to the dynamic IP address;
a second determining module, configured to determine, according to the IP address field, a traffic control policy corresponding to the IP address field, where the traffic control policy includes a control policy of whether the terminal device can access a target application through the dynamic IP address;
and the third determining module is used for determining to allow or deny the terminal equipment to access the target application through the dynamic IP address according to the flow management and control strategy.
In a fourth aspect, an embodiment of the present invention provides a traffic management and control device, including one or more processors; a memory; and one or more computer programs, wherein the one or more computer programs are stored in the memory, the one or more computer programs comprising instructions which, when executed by the traffic managing device, cause the traffic managing device to perform the traffic managing method of the first aspect as described above.
In a fifth aspect, the present invention provides a computer-readable storage medium, where the computer-readable storage medium includes a stored program, where the program, when executed, controls an apparatus in which the computer-readable storage medium is located to perform the flow management and control method according to the first aspect.
In the technical scheme of the flow management and control method, device and equipment provided by the embodiment of the invention, an internet access request sent by terminal equipment is received, wherein the internet access request comprises a dynamic IP address of the terminal equipment; determining an IP address section corresponding to the dynamic IP address according to the dynamic IP address; determining a flow control strategy corresponding to the IP address field according to the IP address field, wherein the flow control strategy comprises a control strategy for judging whether the terminal equipment can access a target application through a dynamic IP address; and determining to allow or deny the terminal equipment to access the target application through the dynamic IP address according to the flow control strategy. In the embodiment of the invention, the terminal equipment accesses the target application through the dynamic IP address, so that the resource waste caused by that the terminal equipment still occupies one static IP address when the terminal equipment does not need to use the static IP address is avoided, and the inflexible framework when the terminal equipment uses the static IP address is also avoided, thereby saving the resource and enabling the framework to be more flexible.
[ description of the drawings ]
In order to more clearly illustrate the technical solutions of the embodiments of the present invention, the drawings needed to be used in the embodiments will be briefly described below, and it is obvious that the drawings in the following description are only some embodiments of the present invention, and it is obvious for those skilled in the art to obtain other drawings based on these drawings without inventive labor.
Fig. 1 is a schematic structural diagram of a flow management and control system according to an embodiment of the present invention.
Fig. 2 is a flowchart of a flow control method according to an embodiment of the present invention.
Fig. 3 is a signaling flowchart of a flow management and control method according to an embodiment of the present invention.
Fig. 4 is a schematic structural diagram of a flow rate control device according to an embodiment of the present invention.
Fig. 5 is a schematic structural diagram of a traffic control device according to an embodiment of the present invention.
[ detailed description ] embodiments
For better understanding of the technical solutions of the present invention, the following detailed descriptions of the embodiments of the present invention are provided with reference to the accompanying drawings.
It should be understood that the described embodiments are only some embodiments of the invention, and not all embodiments. All other embodiments, which can be derived by a person skilled in the art from the embodiments given herein without making any creative effort, shall fall within the protection scope of the present invention.
The terminology used in the embodiments of the invention is for the purpose of describing particular embodiments only and is not intended to be limiting of the invention. As used in the examples of the present invention and the appended claims, the singular forms "a," "an," and "the" are intended to include the plural forms as well, unless the context clearly indicates otherwise.
It should be understood that the term "and/or" as used herein is merely one type of associative relationship that describes an associated object, meaning that three types of relationships may exist, e.g., A and/or B, may mean: a exists alone, A and B exist simultaneously, and B exists alone. In addition, the character "/" herein generally indicates that the former and latter related objects are in an "or" relationship.
Fig. 1 is a schematic structural diagram of a flow management and control system according to an embodiment of the present invention, as shown in fig. 1, the system includes: terminal device 11, gateway 12, Authentication, Authorization, Accounting (AAA) server 13, traffic control device 14, and application server 15.
In this embodiment of the present invention, the terminal device 11 includes a terminal device capable of implementing the traffic control method in this embodiment of the present invention, and the terminal device 11 establishes a network connection with the AAA server 13 through the gateway 12 and establishes a network connection with the traffic control device 14 through an Access Point Name (APN). One terminal device 11 corresponds to an International Mobile Subscriber Identity (IMSI), which is an Identity that does not repeat in all cellular networks and is used for distinguishing different subscribers in the cellular networks. The IMSI must be used whenever a user using a mobile network needs to perform data interaction with other mobile networks. The IMSI consists of a string of decimal digits with a maximum length of 15 digits. For example, terminal device 11 may include a car networking terminal, which may correspond to an IMSI of 460001234567890.
The gateway 12 is also called an internetwork connector, protocol converter. The gateway 12 implements network interconnection above the network layer, and is a complex network interconnection device, and is only used for implementing interconnection between two networks with different higher-layer protocols. The gateway 12 may be used for both wide area network interconnection and local area network interconnection. Gateway 12 is a computer system or device that acts as a switch-operative. In the embodiment of the present invention, the gateway 12 is used to connect the mobile network corresponding to the SIM card used by the terminal device 11 with another data network. For example, the Gateway 12 may include a Gateway GPRS Support Node (GGSN) or a Public Data Network Gateway (PGW). Other Data networks may include Integrated Services Digital Networks (ISDN), Packet Switched Public Data Networks (PSPDN), Local Area Networks (LAN), and so on.
AAA server 13 is a server program capable of handling user access requests and providing authentication, authorization, and accounting services for the user. The AAA server 13 is mainly used to manage user access to a network server and provide services to users with access rights. AAA server 13 typically works in conjunction with network access control, gateway servers, databases, and user information directories, etc. The network connection server interface that cooperates with the AAA server 13 is Remote Authentication Dial In User Service (RADIUS for short).
The traffic management device 14 includes a device that controls and manages traffic usage of the terminal device 11. The traffic control device 14 may formulate a corresponding control policy for traffic usage of the terminal device 11 based on characteristics such as Domain Name System (DNS) resolution, hypertext Transfer Protocol (HTTP), Uniform Resource Locator (URL), source Internet Protocol (IP) address, or destination IP address, where the control policy includes allowing the terminal device to access a target application by using a traffic package through a dynamic IP address, prohibiting the terminal device from accessing the target application by using the traffic package through the dynamic IP address, and limiting a network speed when the terminal device accesses the target application by using the traffic package through the dynamic IP address. The traffic control device 14 determines, according to data characteristics of each traffic, for example, an application that sends a request for accessing the internet according to a source IP address, an IP address field corresponding to the source IP address, and the like, determines an application server 15 that the traffic is to be accessed according to a destination IP address, a domain name, a protocol type, and the like, and configures a traffic control policy that allows the terminal device to access the target application by using the traffic package through the dynamic IP address, denies the terminal device to access the target application by using the traffic package through the dynamic IP address, or limits a network speed when the terminal device accesses the target application by using the traffic package through the dynamic IP address.
The application server 15 includes a server corresponding to a target application that can provide a functional service. The target application comprises, for example, a map application, a music application or a video application, in which case the application server 15 comprises a map server, a music server or a video server.
The embodiment of the invention provides a flow control method, which can be realized based on the flow control system in fig. 1.
Fig. 2 is a flowchart of a flow control method according to an embodiment of the present invention, and as shown in fig. 2, the method includes:
step 101, receiving an internet access request sent by a terminal device, wherein the internet access request comprises a dynamic IP address of the terminal device.
Each step in the embodiment of the present invention may be performed by a traffic management and control device.
And step 102, determining an IP address section corresponding to the dynamic IP address according to the dynamic IP address.
Step 103, determining a traffic control policy corresponding to the IP address field according to the IP address field, where the traffic control policy includes a control policy whether the terminal device can access the target application through the dynamic IP address.
And 104, determining to allow or deny the terminal equipment to access the target application through the dynamic IP address according to the flow management and control strategy.
In the technical scheme of the flow management and control method provided by the embodiment of the invention, an internet access request sent by terminal equipment is received, wherein the internet access request comprises a dynamic IP address of the terminal equipment; determining an IP address section corresponding to the dynamic IP address according to the dynamic IP address; determining a flow control strategy corresponding to the IP address field according to the IP address field, wherein the flow control strategy comprises a control strategy for judging whether the terminal equipment can access a target application through a dynamic IP address; and determining to allow or deny the terminal equipment to access the target application through the dynamic IP address according to the flow control strategy. In the embodiment of the invention, the terminal equipment accesses the target application through the dynamic IP address, so that the resource waste caused by that the terminal equipment still occupies one static IP address when the terminal equipment does not need to use the static IP address is avoided, and the inflexible framework when the terminal equipment uses the static IP address is also avoided, thereby saving the resource and enabling the framework to be more flexible.
The embodiment of the invention provides a flow control method, which can be realized based on the flow control system in fig. 1. Fig. 3 is a signaling flowchart of a flow management method according to an embodiment of the present invention, and as shown in fig. 3, the method includes:
step 201, a traffic control device sets a traffic control policy corresponding to at least one IP address segment and a traffic package corresponding to each IP address segment.
In the embodiment of the present invention, the gateway between the terminal device and the AAA server may include any gateway that can complete data interaction between the terminal device and the AAA server.
Table 1 shows a traffic management rule.
Figure BDA0003441682500000081
Figure BDA0003441682500000091
As shown in table 1 above, the traffic control device sets a traffic control rule, where the traffic control rule includes a traffic control policy corresponding to at least one IP address segment and a traffic package corresponding to each IP address segment, and the IP address segment may include a source IP address segment. For example, when the IP address field is 10.10.0.0/16, the traffic package corresponding to the IP address field is a map traffic packet, and the traffic control policy corresponding to the IP address field includes only allowing the terminal device to access the map application through the map traffic packet, and prohibiting the terminal device from accessing other applications through the map traffic packet. When the IP address segment is 10.20.0.0/16, the traffic package corresponding to the IP address segment is a music traffic packet, and the traffic management and control policy corresponding to the IP address segment includes only allowing the terminal device to access the map application and the music application through the music traffic packet, and prohibiting the terminal device from accessing other applications through the music traffic packet. When the IP address field is 10.30.0.0/16, the traffic package corresponding to the IP address field is a video traffic packet, and the traffic control policy corresponding to the IP address field includes that only the terminal device is allowed to access the map application, the music application and the video application through the video traffic packet, and the terminal device is prohibited from accessing other applications through the video traffic packet. When the IP address field is 10.40.0.0/16, the traffic package corresponding to the IP address field is a full-function traffic packet, and the traffic control policy corresponding to the IP address field includes that the terminal device is allowed to access all applications through the full-function traffic packet.
Step 202, the traffic control device sends the traffic control policy corresponding to the at least one IP address segment to the AAA server.
In this step, as shown in table 1 above, the traffic control policy corresponding to at least one IP address segment sent by the traffic control device to the AAA server includes: the IP address field 10.10.0.0/16 corresponds to a traffic control strategy which only allows the terminal equipment to access the map application through the map traffic packet and forbids the terminal equipment to access other applications through the map traffic packet; the traffic control policy corresponding to the IP address segment of 10.20.0.0/16 includes a traffic control policy that only allows the terminal device to access the map application and the music application through the music traffic packet, and prohibits the terminal device from accessing other applications through the music traffic packet; the traffic control policy corresponding to the IP address segment 10.30.0.0/16 includes a traffic control policy that only allows the terminal device to access the map application, the music application, and the video application through the video traffic packet, and prohibits the terminal device from accessing other applications through the video traffic packet; the traffic policing policy corresponding to IP address segment 10.40.0.0/16 includes a traffic policing policy that allows the end device to access all applications via full-power traffic packets.
Step 203, the terminal device sends a RADIUS connection request to the gateway, where the RADIUS connection request includes the IMSI of the terminal device.
In this step, the RADIUS connection request is a request for applying for establishing an APN connection between the terminal device and the flow control device, the RADIUS connection request includes an IMSI of the terminal device, and the RADIUS connection request is automatically sent to the gateway when the terminal device is powered on. One terminal device corresponds to one IMSI, and the IMSI is used for uniquely identifying one terminal device, that is, the unique terminal device corresponding to the IMSI can be determined according to the IMSI.
Step 204, the gateway sends the RADIUS connection request to the AAA server.
In this step, the gateway forwards the received RADIUS connection request sent by the terminal device to the AAA server, where the RADIUS connection request includes the IMSI of the terminal device, so that the AAA server can obtain the IMSI and determine the terminal device according to the IMSI.
Step 205, the AAA server determines the terminal device according to the IMSI, and queries a traffic control policy corresponding to the terminal device.
In this step, the AAA server stores the traffic package corresponding to the terminal device and the traffic control policy sent by the traffic control device. And the AAA server determines the only terminal equipment corresponding to the IMSI according to the IMSI and inquires the flow package and the flow control strategy corresponding to the terminal equipment. For example, as shown in table 1 above, the AAA server determines the terminal device corresponding to the IMSI according to the IMSI, and queries that the traffic package corresponding to the terminal device is a music traffic packet, where the traffic policy corresponding to the terminal device includes only allowing the terminal device to access the map application and the music application through the music traffic packet, and forbidding the terminal device to access other applications through the music traffic packet.
Step 206, the AAA server determines an IP address field corresponding to the traffic control policy according to the traffic control policy corresponding to the terminal device, and allocates a dynamic IP address for the terminal device from the IP address field corresponding to the traffic control policy.
In this step, the dynamic IP address is allocated to the terminal device based on the traffic control policy corresponding to the terminal device. For example, as shown in table 1 above, the traffic management policy corresponding to the terminal device includes only allowing the terminal device to access the map application and the music application through the music traffic packet, and prohibiting the terminal device from accessing other applications through the music traffic packet. The IP address field corresponding to the flow control strategy is 10.20.0.0/16, and the AAA server randomly allocates a dynamic IP address in an idle state for the terminal equipment from the IP address field. For example, the AAA server assigns 10.20.0.12 as the dynamic IP address for the terminal device.
Step 207, the AAA server sends the dynamic IP address to the gateway.
In this step, for example, the AAA server assigns 10.20.0.12 a dynamic IP address for the terminal device, and sends 10.20.0.12 the dynamic IP address to the gateway.
And step 208, the gateway sends the dynamic IP address to the terminal equipment so as to establish APN connection between the terminal equipment and the flow control equipment.
In this step, the gateway sends the dynamic IP address to the terminal device, the APN connection between the terminal device and the traffic control device is successfully established, when the terminal device uses traffic, an IP address segment corresponding to the dynamic IP address needs to be determined according to the dynamic IP address of the terminal device by the traffic control device, a traffic control policy corresponding to the IP address segment is determined according to the IP address segment, and whether the terminal device is allowed or denied to access the target application through the dynamic IP address is determined according to the traffic control policy. After the gateway sends the dynamic IP address to the terminal equipment, the dynamic IP address is temporarily bound with the terminal equipment, and other terminal equipment except the terminal equipment cannot access the application server by using the dynamic IP address.
And step 209, the terminal device sends an internet access request to the traffic control device, wherein the internet access request comprises a dynamic IP address of the terminal device.
In this step, because the APN connection is established between the terminal device and the traffic control device, when the terminal device uses traffic, it is necessary to send an internet access request to the traffic control device, and the traffic control device determines whether to allow or deny the terminal device to access the target application through the dynamic IP address according to the traffic control policy. The internet access request sent by the terminal equipment is a request for accessing an application server corresponding to the target application. The internet request carries the dynamic IP address of the terminal device at the IP layer, i.e. the source IP address at the IP layer. And the terminal equipment sends out a request for accessing an application server corresponding to the target application in the identity of the dynamic IP address. For example, the traffic package corresponding to the terminal device includes a music traffic packet, and the target application is a music application.
Step 210, the traffic control device determines an IP address segment corresponding to the dynamic IP address according to the dynamic IP address.
In this step, the traffic control device identifies a dynamic IP address corresponding to the terminal device according to an internet access request sent by the terminal device, and then determines an IP address segment corresponding to the dynamic IP address according to the dynamic IP address. For example, the dynamic IP address included in the request for accessing the internet sent by the terminal device is 10.20.0.12, and the IP address segment corresponding to the dynamic IP address 10.20.0.12 is 10.20.0.0/16.
Step 211, the traffic control device determines a traffic control policy corresponding to the IP address field according to the IP address field, where the traffic control policy includes whether the terminal device can access the target application through the dynamic IP address by using the traffic package corresponding to the IP address field.
In this step, for example, the IP address segment corresponding to the dynamic IP is 10.20.0.0/16, and as shown in table 1 above, the traffic control policy corresponding to the IP address segment 10.20.0.0/16 includes that the terminal device is only allowed to access the map application and the music application through the music traffic packet, and the terminal device is prohibited from accessing other applications through the music traffic packet.
And step 212, the traffic control device determines to allow or deny the terminal device to access the target application by using the traffic package corresponding to the IP address field through the dynamic IP address according to the traffic control policy.
In this step, if the traffic control device determines, according to the traffic control policy, that the terminal device is allowed to access the target application by using the traffic package corresponding to the IP address field through the dynamic IP address, the traffic control device sends an internet access request to the application server, so that the terminal device accesses the target application. For example, the traffic control policy includes allowing the terminal device to access the map application and the music application only through the music traffic packet, and prohibiting the terminal device from accessing other applications through the music traffic packet. The target application comprises a map application, a music application and a video application, at the moment, the flow control equipment determines that the terminal equipment is allowed to access the map application and the music application through the music flow packet according to the flow control strategy, and the terminal equipment is refused to access the video application through the music flow packet.
As an alternative, when the terminal device is denied to access the target application through the dynamic IP address by using the traffic package corresponding to the IP address field, a prompt message of "connection failure" or "access failure" may be displayed on the terminal device interface to remind the user that the request for accessing the application server fails.
Step 213, if the traffic control device determines according to the traffic control policy that the terminal device is allowed to access the target application through the dynamic IP address using the traffic package corresponding to the IP address segment, sending an internet access request to the application server, so that the terminal device accesses the target application.
In the embodiment of the invention, an internet access request is sent to the application server, so that the terminal equipment can access the target application through the internet application server.
For example, the traffic control device determines, according to the traffic control policy, that the terminal device is allowed to access the target application by using the traffic package corresponding to the IP address segment through the dynamic IP address, and then the traffic control device sends the request for accessing the internet to the application server corresponding to the music application, so that the terminal device can access the music application.
As an alternative, when the terminal device needs to disconnect the APN connection between the terminal device and the traffic control device, the following steps may also be performed:
step 214, the terminal device sends a RADIUS disconnection request to the gateway, where the RADIUS disconnection request includes the IMSI of the terminal device.
In this step, the RADIUS disconnection request is a request for applying for disconnection of an APN connection between the terminal device and the flow control device, the RADIUS disconnection request includes an IMSI of the terminal device, and the RADIUS disconnection request may be automatically sent to the gateway when the terminal device is powered off.
Step 215, the gateway sends a RADIUS disconnect request to the AAA server.
Step 216, the AAA server determines the terminal device according to the IMSI, and releases the dynamic IP address of the terminal device, so as to disconnect the APN between the terminal device and the traffic control device.
In this step, the gateway forwards the received RADIUS disconnection request sent by the terminal device to the AAA server, where the RADIUS disconnection request includes the IMSI of the terminal device, so that the AAA server determines the terminal device and the dynamic IP address corresponding to the terminal device according to the IMSI. After the AAA server releases the dynamic IP address of the terminal device, the dynamic IP address is in an idle state, and the AAA server may allocate the dynamic IP address to other terminal devices as the dynamic IP address in the idle state.
In the technical scheme of the flow management and control method provided by the embodiment of the invention, an AAA server determines an IP address field corresponding to a flow management and control strategy according to the flow management and control strategy corresponding to a terminal device, and allocates a dynamic IP address for the terminal device from the IP address field corresponding to the flow management and control strategy; the AAA server sends the dynamic IP address to the gateway; and the gateway sends the dynamic IP address to the terminal equipment so as to establish APN connection between the terminal equipment and the flow control equipment. And the AAA server determines the terminal equipment according to the IMSI and releases the dynamic IP address of the terminal equipment so as to disconnect the APN between the terminal equipment and the flow control equipment. The embodiment of the invention avoids the resource waste caused by that the terminal equipment still occupies one static IP address when the static IP address is not needed to be used, and also avoids the inflexible architecture when the terminal equipment uses the static IP address, thereby saving the resources and enabling the architecture to be more flexible.
In the embodiment of the invention, the flow control equipment sets different flow control strategies according to different use requirements of the flow when the user uses the terminal equipment, so that the purpose of controlling the flow use permission applied on the terminal equipment is achieved, the flow use of the terminal equipment is favorably and reasonably controlled, and the flow charge of the terminal equipment is reduced.
Fig. 4 is a schematic structural diagram of a flow rate control device according to an embodiment of the present invention, and as shown in fig. 4, the flow rate control device includes: a receiving module 21, a first determining module 22, a second determining module 23 and a third determining module 24. The receiving module 21 is connected with the first determining module 22, the first determining module 22 is connected with the receiving module 21 and the second determining module 23, the second determining module 23 is connected with the first determining module 22 and the third determining module 24, and the third determining module 24 is connected with the second determining module 23.
The receiving module 21 is configured to receive an internet access request sent by a terminal device, where the internet access request includes a dynamic IP address of the terminal device.
The first determining module 22 is configured to determine an IP address segment corresponding to the dynamic IP address according to the dynamic IP address.
The second determining module 23 is configured to determine, according to the IP address field, a traffic control policy corresponding to the IP address field, where the traffic control policy includes a control policy that whether the terminal device can access the target application through the dynamic IP address.
The third determining module 24 is configured to determine, according to the traffic control policy, whether to allow or deny the terminal device to access the target application through the dynamic IP address.
In the embodiment of the present invention, the apparatus further includes a sending module 25. The sending module 25 is connected to the third determining module 24.
The sending module 25 is configured to send an internet access request to the application server to enable the terminal device to access the target application if the third determining module 24 determines, according to the traffic control policy, that the terminal device is allowed to access the target application by using the traffic package corresponding to the IP address field through the dynamic IP address.
In the embodiment of the present invention, the apparatus further includes a setting module 26. The setting module 26 is connected to the sending module 25.
The setting module 26 is configured to set a traffic control policy corresponding to at least one IP address segment.
The sending module 25 is further configured to send the traffic control policy corresponding to the at least one IP address segment to the AAA server.
In the technical scheme of the traffic control device provided by the embodiment of the invention, a receiving module receives an internet access request sent by terminal equipment, wherein the internet access request comprises a dynamic IP address of the terminal equipment; the first determining module determines an IP address section corresponding to the dynamic IP address according to the dynamic IP address; the second determining module determines a flow control strategy corresponding to the IP address field according to the IP address field, wherein the flow control strategy comprises a control strategy for judging whether the terminal equipment can access a target application through a dynamic IP address; and the third determining module determines to allow or deny the terminal equipment to access the target application through the dynamic IP address according to the flow management and control strategy. In the embodiment of the invention, the terminal equipment accesses the target application through the dynamic IP address, so that the resource waste caused by the fact that the terminal equipment still occupies one static IP address when the terminal equipment does not need to use the static IP address is avoided, and the inflexible framework when the terminal equipment uses the static IP address is also avoided.
An embodiment of the present invention provides a storage medium, where the storage medium includes a stored program, where, when the program runs, a device in which the storage medium is located is controlled to execute each step of the above embodiment of the flow management and control method, and specific descriptions may refer to the above embodiment of the flow management and control method.
An embodiment of the present invention provides a flow management and control device, which includes a memory and a processor, where the memory is configured to store information including program instructions, and the processor is configured to control execution of the program instructions, and the program instructions are loaded and executed by the processor to implement steps of the embodiment of the flow management and control method.
Fig. 5 is a schematic structural diagram of a traffic control device according to an embodiment of the present invention, and as shown in fig. 5, the traffic control device 30 includes: a processor 31, a memory 32, and a computer program 33 stored in the memory 32 and capable of running on the processor 31, wherein the computer program 33 is implemented by the processor 31 to implement the data processing method applied in the embodiment, and therefore, for avoiding repetition, detailed descriptions thereof are omitted here. Alternatively, the computer program is executed by the processor 31 to implement the functions of each model/unit applied to the traffic control device 30 in the embodiment, and for avoiding repetition, the description is omitted here.
The traffic policing device 30 includes, but is not limited to, a processor 31, a memory 32. Those skilled in the art will appreciate that fig. 4 is merely an example of the traffic policing device 30, and does not constitute a limitation on the traffic policing device 30, and may include more or fewer components than shown, or some components in combination, or different components, e.g., the traffic policing device 30 may also include input-output devices, network access devices, buses, etc.
The Processor 31 may be a Central Processing Unit (CPU), or other general-purpose Processor, a Digital Signal Processor (DSP), an Application Specific Integrated Circuit (ASIC), a Field Programmable Gate Array (FPGA) or other Programmable logic device, discrete Gate or transistor logic device, discrete hardware component, or the like. A general purpose processor may be a microprocessor or the processor may be any conventional processor or the like.
The memory 32 may be an internal storage unit of the traffic policing device 30, such as a hard disk or a memory of the traffic policing device 30. The memory 32 may also be an external storage device of the traffic control device 30, such as a plug-in hard disk, a Smart Media (SM) Card, a Secure Digital (SD) Card, a Flash memory Card (Flash Card), and the like, which are provided on the traffic control device 30. Further, the memory 32 may also include both an internal storage unit of the traffic management device 30 and an external storage device. The memory 32 is used for storing computer programs and other programs and data required by the computer device. The memory 32 may also be used to temporarily store data that has been output or is to be output.
In the embodiments provided in the present invention, it should be understood that the disclosed system, apparatus and method may be implemented in other ways. For example, the above-described apparatus embodiments are merely illustrative, and for example, the division of the units is only one logical division, and there may be other divisions in actual implementation, for example, a plurality of units or components may be combined or integrated into another system, or some features may be omitted, or not executed. In addition, the shown or discussed mutual coupling or direct coupling or communication connection may be an indirect coupling or communication connection through some interfaces, devices or units, and may be in an electrical, mechanical or other form.
The units described as separate parts may or may not be physically separate, and parts displayed as units may or may not be physical units, may be located in one place, or may be distributed on a plurality of network units. Some or all of the units can be selected according to actual needs to achieve the purpose of the solution of the embodiment.
In addition, functional units in the embodiments of the present invention may be integrated into one processing unit, or each unit may exist alone physically, or two or more units are integrated into one unit. The integrated unit can be realized in a form of hardware, or in a form of hardware plus a software functional unit.
The above description is only for the purpose of illustrating the preferred embodiments of the present invention and is not to be construed as limiting the invention, and any modifications, equivalents, improvements and the like made within the spirit and principle of the present invention should be included in the scope of the present invention.

Claims (10)

1. A flow control method is applied to flow control equipment and comprises the following steps:
receiving an internet access request sent by terminal equipment, wherein the internet access request comprises a dynamic IP address of the terminal equipment;
determining an IP address section corresponding to the dynamic IP address according to the dynamic IP address;
determining a flow control strategy corresponding to the IP address field according to the IP address field, wherein the flow control strategy comprises a control strategy for judging whether the terminal equipment can access a target application through the dynamic IP address;
and determining to allow or deny the terminal equipment to access the target application through the dynamic IP address according to the flow management and control strategy.
2. The method of claim 1,
and the dynamic IP address is distributed to the terminal equipment based on a flow control strategy corresponding to the terminal equipment.
3. A method of flow management, the method comprising:
the method comprises the steps that a flow control device receives an internet access request sent by a terminal device, wherein the internet access request comprises a dynamic IP address of the terminal device;
the flow control equipment determines an IP address section corresponding to the dynamic IP address according to the dynamic IP address;
the flow control equipment determines a flow control strategy corresponding to the IP address field according to the IP address field, wherein the flow control strategy comprises a control strategy for judging whether the terminal equipment can access a target application through the dynamic IP address;
and the traffic control equipment determines to allow or refuse the terminal equipment to access the target application through the dynamic IP address according to the traffic control strategy.
4. The method of claim 3, further comprising:
and if the traffic control equipment determines that the terminal equipment is allowed to access the target application through the dynamic IP address according to the traffic control strategy, sending the Internet access request to an application server so that the terminal equipment can access the target application.
5. The method according to claim 3, wherein before the traffic control device receives the request for accessing the internet sent by the terminal device, the method further comprises:
the terminal equipment sends a RADIUS connection request to a gateway, wherein the RADIUS connection request comprises the IMSI of the terminal equipment;
the gateway sends the RADIUS connection request to an AAA server;
the AAA server determines the terminal equipment according to the IMSI and inquires a flow control strategy corresponding to the terminal equipment;
the AAA server determines an IP address field corresponding to the flow control strategy according to the flow control strategy corresponding to the terminal equipment, and allocates the dynamic IP address for the terminal equipment from the IP address field corresponding to the flow control strategy;
the AAA server sends the dynamic IP address to the gateway;
and the gateway sends the dynamic IP address to the terminal equipment so as to establish APN connection between the terminal equipment and the flow control equipment.
6. The method of claim 5, wherein before the end device sends the first RADIUS to the gateway, further comprising:
the flow control equipment sets a flow control strategy corresponding to at least one IP address field;
and the flow control equipment sends the flow control strategy corresponding to the at least one IP address field to the AAA server.
7. The method of claim 3, further comprising:
the terminal equipment sends a RADIUS disconnection request to the gateway, wherein the RADIUS disconnection request comprises the IMSI of the terminal equipment;
the gateway sends the RADIUS disconnection request to the AAA server;
and the AAA server determines the terminal equipment according to the IMSI and releases the dynamic IP address of the terminal equipment so as to disconnect the APN between the terminal equipment and the flow control equipment.
8. A flow management device, comprising:
the system comprises a receiving module, a sending module and a receiving module, wherein the receiving module is used for receiving an Internet access request sent by terminal equipment, and the Internet access request comprises a dynamic IP address of the terminal equipment;
the first determining module is used for determining an IP address section corresponding to the dynamic IP address according to the dynamic IP address;
a second determining module, configured to determine, according to the IP address field, a traffic control policy corresponding to the IP address field, where the traffic control policy includes a control policy of whether the terminal device can access a target application through the dynamic IP address;
and the third determining module is used for determining to allow or deny the terminal equipment to access the target application through the dynamic IP address according to the flow management and control strategy.
9. A traffic management device comprising one or more processors; a memory; and one or more computer programs, wherein the one or more computer programs are stored in the memory, the one or more computer programs comprising instructions which, when executed by the traffic management device, cause the traffic management device to perform the method of any of claims 1 to 7.
10. A computer-readable storage medium, comprising a stored program, wherein the program, when executed, controls an apparatus in which the computer-readable storage medium resides to perform the method of any one of claims 1 to 7.
CN202111633236.5A 2021-12-29 2021-12-29 Flow control method, device and equipment Active CN114500395B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN202111633236.5A CN114500395B (en) 2021-12-29 2021-12-29 Flow control method, device and equipment

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN202111633236.5A CN114500395B (en) 2021-12-29 2021-12-29 Flow control method, device and equipment

Publications (2)

Publication Number Publication Date
CN114500395A true CN114500395A (en) 2022-05-13
CN114500395B CN114500395B (en) 2023-10-31

Family

ID=81495652

Family Applications (1)

Application Number Title Priority Date Filing Date
CN202111633236.5A Active CN114500395B (en) 2021-12-29 2021-12-29 Flow control method, device and equipment

Country Status (1)

Country Link
CN (1) CN114500395B (en)

Citations (12)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US7185079B1 (en) * 2001-08-08 2007-02-27 Cisco Technology, Inc. Automated management of network addresses in a broadband managed access environment
US7197549B1 (en) * 2001-06-04 2007-03-27 Cisco Technology, Inc. On-demand address pools
CN102318314A (en) * 2011-07-29 2012-01-11 华为技术有限公司 Method and devices for handling access authorities
US20140050208A1 (en) * 2012-08-14 2014-02-20 Stoke, Inc. Apn ip management
CN103703748A (en) * 2011-10-13 2014-04-02 思科技术公司 Systems and methods for IP reachability in communications network
CN105519079A (en) * 2014-04-03 2016-04-20 华为技术有限公司 Ip address allocation device, system and method
CN106856511A (en) * 2015-12-08 2017-06-16 中国电信股份有限公司 Method, gateway, PCRF network elements and system for dynamic assignment IP address pond
WO2020038049A1 (en) * 2018-08-20 2020-02-27 中兴通讯股份有限公司 Communication connection method, device, communication device and computer readable storage medium
CN111147425A (en) * 2018-11-05 2020-05-12 成都鼎桥通信技术有限公司 Data access processing method, device, equipment and storage medium
CN111385790A (en) * 2018-12-27 2020-07-07 中国电信股份有限公司 User access control method, system and computer readable storage medium
CN113055835A (en) * 2019-12-10 2021-06-29 中国电信股份有限公司 Vehicle-mounted application traffic processing method, device and system
CN113395368A (en) * 2020-03-13 2021-09-14 阿里巴巴集团控股有限公司 Access configuration method, access method and device

Patent Citations (12)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US7197549B1 (en) * 2001-06-04 2007-03-27 Cisco Technology, Inc. On-demand address pools
US7185079B1 (en) * 2001-08-08 2007-02-27 Cisco Technology, Inc. Automated management of network addresses in a broadband managed access environment
CN102318314A (en) * 2011-07-29 2012-01-11 华为技术有限公司 Method and devices for handling access authorities
CN103703748A (en) * 2011-10-13 2014-04-02 思科技术公司 Systems and methods for IP reachability in communications network
US20140050208A1 (en) * 2012-08-14 2014-02-20 Stoke, Inc. Apn ip management
CN105519079A (en) * 2014-04-03 2016-04-20 华为技术有限公司 Ip address allocation device, system and method
CN106856511A (en) * 2015-12-08 2017-06-16 中国电信股份有限公司 Method, gateway, PCRF network elements and system for dynamic assignment IP address pond
WO2020038049A1 (en) * 2018-08-20 2020-02-27 中兴通讯股份有限公司 Communication connection method, device, communication device and computer readable storage medium
CN111147425A (en) * 2018-11-05 2020-05-12 成都鼎桥通信技术有限公司 Data access processing method, device, equipment and storage medium
CN111385790A (en) * 2018-12-27 2020-07-07 中国电信股份有限公司 User access control method, system and computer readable storage medium
CN113055835A (en) * 2019-12-10 2021-06-29 中国电信股份有限公司 Vehicle-mounted application traffic processing method, device and system
CN113395368A (en) * 2020-03-13 2021-09-14 阿里巴巴集团控股有限公司 Access configuration method, access method and device

Also Published As

Publication number Publication date
CN114500395B (en) 2023-10-31

Similar Documents

Publication Publication Date Title
CN109315004B (en) PDU type setting method and related entity
CN112437456B (en) Communication method and equipment in non-public network
JP5926433B2 (en) Telecommunications network and time-based network access method
CN101072170B (en) Wireless communication network strategy and billing rule functional network element addressing method
EP2849469A1 (en) Uplink/downlink transmission method for small amount of data, and corresponding terminal and mobility management unit
JPH1065737A (en) Substitutive server device and server device
CN101163085A (en) Method and system for implementing CDMA1xLNS load balancing
CN114745724A (en) Access processing method and device, electronic equipment and computer readable medium
US20120014283A1 (en) System and method operable to enable shortest connection route
CN112752231B (en) Roaming service access control method, intelligent card, terminal and gateway equipment
CN112333659A (en) Internet of vehicles-based over-the-air downloading method, system, equipment and medium
CN114500395B (en) Flow control method, device and equipment
CN114172951B (en) MEC sharing method, communication device and storage medium
CN103619005B (en) Method and system for obtaining cell phone number of 3G network user
CN115413014A (en) Network resource service method, device, system, readable medium and electronic equipment
CN114938508A (en) 5G private network control method and device, electronic equipment and storage medium
CN111163457B (en) Processing method, device and storage medium for access terminal
JP4339894B2 (en) Mobile connection broker
CN108462962B (en) Method and device for connecting access point
CN111416815A (en) Message processing method, electronic device and storage medium
CN110839219A (en) Method for accessing terminal into cellular network and cellular network system
CN113904939B (en) Method, device and storage medium for managing target terminal
CN113422772B (en) Private network terminal access processing method and device and electronic equipment
FI112137B (en) A system and method for allocating dynamic IP addresses
WO2023215347A1 (en) Dynamic allocation of network slice limits and on-demand network slices

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
GR01 Patent grant
GR01 Patent grant