CN115065995B - Associated information management method, device, electronic equipment and storage medium - Google Patents

Associated information management method, device, electronic equipment and storage medium Download PDF

Info

Publication number
CN115065995B
CN115065995B CN202210845225.1A CN202210845225A CN115065995B CN 115065995 B CN115065995 B CN 115065995B CN 202210845225 A CN202210845225 A CN 202210845225A CN 115065995 B CN115065995 B CN 115065995B
Authority
CN
China
Prior art keywords
information
associated information
value
network element
ttl value
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
CN202210845225.1A
Other languages
Chinese (zh)
Other versions
CN115065995A (en
Inventor
曹维华
李建钊
高敏
刘浩
牛云
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
China Telecom Corp Ltd
Original Assignee
China Telecom Corp Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by China Telecom Corp Ltd filed Critical China Telecom Corp Ltd
Priority to CN202210845225.1A priority Critical patent/CN115065995B/en
Publication of CN115065995A publication Critical patent/CN115065995A/en
Application granted granted Critical
Publication of CN115065995B publication Critical patent/CN115065995B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W28/00—Network traffic management; Network resource management
    • H04W28/16—Central resource management; Negotiation of resources or communication parameters, e.g. negotiating bandwidth or QoS [Quality of Service]
    • H04W28/24—Negotiating SLA [Service Level Agreement]; Negotiating QoS [Quality of Service]
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W8/00—Network data management
    • H04W8/18—Processing of user or subscriber data, e.g. subscribed services, user preferences or user profiles; Transfer of user or subscriber data

Landscapes

  • Engineering & Computer Science (AREA)
  • Quality & Reliability (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Databases & Information Systems (AREA)
  • Mobile Radio Communication Systems (AREA)

Abstract

The disclosure provides a method, a device, an electronic device and a storage medium for managing associated information, wherein the method for managing associated information comprises the following steps: analyzing the network signaling surface data of the terminal equipment to obtain the associated information of the terminal equipment, wherein the associated information comprises signaling surface information associated with user surface information of the terminal equipment; setting a time-to-live (TTL) value for the associated information, wherein the initial value of the TTL value is a preset time value, the TTL value gradually decreases along with the increase of time until the associated information is repeatedly acquired, resetting the TTL value of the associated information to the preset time value, and sending a request message to an SMF network element to subscribe the signaling surface information of the terminal equipment when the TTL value of the associated information is smaller than a preset threshold value; and updating or deleting the associated information according to the result of the returned information of the SMF network element. The method and the device solve the problem of associated information loss caused by online and long-time immobility of the user terminal network.

Description

Associated information management method, device, electronic equipment and storage medium
Technical Field
The disclosure relates to the technical field of mobile communication, and in particular relates to a method and device for managing associated information, electronic equipment and a storage medium.
Background
In a mobile internet scenario, a DPI (Deep Packet Inspection ) system needs to correlate the user plane traffic with the signaling plane traffic, accurately analyze the user plane traffic correlated with the user information, and generate an xDR (external Data Representation ) ticket, so as to analyze the network quality according to the user dimension, and provide SLA (service level agreement, quality of service agreement) service guarantee for the user.
In the prior art, because the terminal equipment is not moved on line for a long time, the terminal equipment cannot generate signaling, so that associated information is lost, part of telephone bills cannot be associated with user information, and the telephone bills become invalid telephone bills.
Based on this, the problem that the related information is easily lost becomes a technical problem to be solved.
It should be noted that the information disclosed in the above background section is only for enhancing understanding of the background of the present disclosure and thus may include information that does not constitute prior art known to those of ordinary skill in the art.
Disclosure of Invention
The present disclosure provides a method, an apparatus, an electronic device, and a storage medium for managing associated information, which overcome, at least to some extent, the problem that associated information is easy to be lost in the related art.
Other features and advantages of the present disclosure will be apparent from the following detailed description, or may be learned in part by the practice of the disclosure.
According to an aspect of the present disclosure, there is provided a related information management method including: analyzing network signaling surface data of terminal equipment to obtain associated information of the terminal equipment, wherein the associated information comprises signaling surface information associated with user surface information of the terminal equipment; setting a Time To Live (TTL) value for the associated information, wherein the initial value of the TTL value is a preset Time value, the TTL value gradually decreases along with the increase of Time until the associated information is repeatedly acquired, and resetting the TTL value of the associated information To the preset Time value; when the TTL value of the association information is smaller than a preset threshold value, a request message is sent to a session management function (SMF (Session Management Function, session management function) network element, wherein the request message is used for requesting the SMF network element to provide target signaling plane information of the terminal equipment; and updating or deleting the associated information according to the result of the returned information of the SMF network element.
In one embodiment of the present disclosure, updating or deleting the association information according to a result of the SMF network element returning information includes: judging whether target signaling plane information returned by the SMF network element can be received or not; and under the condition that the target signaling plane information returned by the SMF network element can be received, resetting the TTL value to a preset time value, and updating the associated information according to the target signaling plane information returned by the SMF to obtain updated associated information.
In one embodiment of the present disclosure, the method further comprises: and generating an external data representation xDR ticket according to the updated associated information.
In one embodiment of the present disclosure, the method further comprises: and under the condition that target signaling plane information returned by the SMF network element cannot be received, the TTL value of the associated information continues to gradually decrease along with the time increase until the TTL value of the associated information is 0, and deleting the associated information.
In one embodiment of the present disclosure, before analyzing the network signaling plane data of the terminal device to obtain the association information of the terminal device, the method further includes: and collecting network signaling surface data of the terminal equipment at the signaling surface interface.
In one embodiment of the present disclosure, the signaling plane interface is at least one of N1, N2, N4, N11 interfaces.
In one embodiment of the present disclosure, the signaling plane information is at least one of a mobile subscriber directory number MDN (Mobile Directory Number, mobile subscriber directory number) of the terminal device, a tunnel terminal identification TEID (Tunnel Endpoint Identifier, tunnel terminal identification) and a subscription permanent identifier SUPI (Subscription Permanent Identifier ).
According to another aspect of the present disclosure, there is provided an associated information management apparatus including: the system comprises a correlation information acquisition module, a processing module and a processing module, wherein the correlation information acquisition module is used for analyzing network signaling surface data of terminal equipment to obtain the correlation information of the terminal equipment, and the correlation information comprises signaling surface information correlated with user surface information of the terminal equipment; the TTL value setting module is used for setting a time-to-live TTL value for the associated information, wherein the initial value of the TTL value is a preset time value, the TTL value gradually decreases along with the increase of time, and the TTL value is reset to the preset time value until the associated information is repeatedly acquired; an information subscription module, configured to send a request message to a session management function SMF network element when a TTL value of the association information is smaller than a preset threshold, where the request message is used to request the SMF network element to provide target signaling plane information of the terminal device; and the associated information management module is used for updating or deleting the associated information according to the result of the returned information of the SMF network element.
In an embodiment of the present disclosure, the above-mentioned association information management module is further configured to determine whether target signaling plane information returned by the SMF network element can be received; and under the condition that the target signaling plane information returned by the SMF network element can be received, resetting the TTL value to a preset time value, and updating the associated information according to the target signaling plane information returned by the SMF to obtain updated associated information.
In one embodiment of the disclosure, the apparatus further includes a ticket generating module, where the ticket generating module is configured to generate an xDR ticket according to the updated association information.
In an embodiment of the present disclosure, the above-mentioned association information management module is further configured to, in a case where the target signaling plane information returned by the SMF network element is not received, continuously gradually decrease the TTL value of the association information with time until the TTL value of the association information is 0, and delete the association information.
In one embodiment of the disclosure, the apparatus further includes a data acquisition module configured to acquire network signaling plane data of the terminal device at a signaling plane interface.
In one embodiment of the present disclosure, the signaling plane interface is at least one of N1, N2, N4, N11 interfaces.
In one embodiment of the present disclosure, the signaling plane information is at least one of a mobile subscriber directory number MDN, a tunnel terminal identification TEID, and a subscription permanent identifier SUPI of the terminal device.
According to still another aspect of the present disclosure, there is provided an electronic apparatus including: a processor; and a memory for storing executable instructions of the processor; wherein the processor is configured to perform the above-described association information management method via execution of the executable instructions.
According to still another aspect of the present disclosure, there is provided a computer-readable storage medium having stored thereon a computer program which, when executed by a processor, implements the above-described associated information management method.
The embodiment of the disclosure provides a method, a device, an electronic device and a storage medium for managing associated information, wherein the method for managing associated information comprises the following steps: analyzing network signaling surface data of the terminal equipment to obtain associated information of the terminal equipment, wherein the associated information comprises signaling surface information associated with user surface information of the terminal equipment; setting a time-to-live (TTL) value for the associated information, wherein the initial value of the TTL value is a preset time value, the TTL value gradually decreases along with the increase of time until the associated information is repeatedly acquired, resetting the TTL value of the associated information to the preset time value, and sending a request message to an SMF network element to subscribe the signaling surface information of the terminal equipment when the TTL value of the associated information is smaller than a preset threshold value; and updating or deleting the associated information according to the result of the returned information of the SMF network element. The method solves the problem of associated information loss caused by the online and long-time immobility of the user terminal network, and automatically updates the associated information of the terminal equipment by acquiring the signaling plane information from the SMF network element through the NEF network element, thereby ensuring that the user plane flow can be associated and backfilled.
Further, when the TTL value of the association information is smaller than a preset threshold, a request message is sent to the SMF network element to obtain target signaling plane information from the SMF network element, and the method and the device only subscribe signaling plane information corresponding to the association information with a small amount of TTL value fast expiring to the SMF network element of the core network, and have less influence on performance of the core network element than subscribing to the signaling plane information of the full online terminal device.
It is to be understood that both the foregoing general description and the following detailed description are exemplary and explanatory only and are not restrictive of the disclosure.
Drawings
The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate embodiments consistent with the disclosure and together with the description, serve to explain the principles of the disclosure. It will be apparent to those of ordinary skill in the art that the drawings in the following description are merely examples of the disclosure and that other drawings may be derived from them without undue effort.
Fig. 1 illustrates an architectural diagram of a communication system in an embodiment of the present disclosure;
FIG. 2 illustrates a flowchart of a method for association information management in an embodiment of the present disclosure;
FIG. 3 illustrates another associated information management method flow diagram in an embodiment of the present disclosure;
FIG. 4 illustrates another associated information management method flow diagram in an embodiment of the present disclosure;
FIG. 5 illustrates another associated information management method flow diagram in an embodiment of the present disclosure;
FIG. 6 illustrates another associated information management method flow diagram in an embodiment of the present disclosure;
FIG. 7 is a schematic diagram of a method for managing association information according to an embodiment of the disclosure;
FIG. 8 is a schematic diagram of an associated information management apparatus according to an embodiment of the present disclosure; and
fig. 9 shows a block diagram of an electronic device in an embodiment of the disclosure.
Detailed Description
Example embodiments will now be described more fully with reference to the accompanying drawings. However, the exemplary embodiments may be embodied in many forms and should not be construed as limited to the examples set forth herein; rather, these embodiments are provided so that this disclosure will be thorough and complete, and will fully convey the concept of the example embodiments to those skilled in the art. The described features, structures, or characteristics may be combined in any suitable manner in one or more embodiments.
Furthermore, the drawings are merely schematic illustrations of the present disclosure and are not necessarily drawn to scale. The same reference numerals in the drawings denote the same or similar parts, and thus a repetitive description thereof will be omitted. Some of the block diagrams shown in the figures are functional entities and do not necessarily correspond to physically or logically separate entities. These functional entities may be implemented in software or in one or more hardware modules or integrated circuits or in different networks and/or processor devices and/or microcontroller devices.
As mentioned in the background art, the user plane traffic only has the information of user IP address, N3 interface information, TEID, etc., and lacks the user information of telephone number, etc., and the original association method is to extract the information of user session N3 interface information, telephone number, SUPI, etc. from the signaling interaction flow and store them in the memory, and then to carry out association backfill according to the N3 interface information and the user plane traffic. Because the user base number is large, the associated record in the memory, such as N3 interface information, telephone number, SUPI and the like, can set TTL value for the associated information when the associated information is initially learned, and can reset the TTL value of the associated information when the same record is subsequently learned. However, in the current network application, since the terminal device is not moved online for a long time, no control plane signaling occurs, the DPI system cannot update the record in the memory, and after the TTL value of the associated information is reduced to 0, the record is deleted, which results in that part of the user plane traffic is not backfilled in an associated manner, and further, the call ticket data is deleted, and the accuracy of data analysis is reduced.
Based on the above, the present disclosure provides a method, an apparatus, an electronic device, and a storage medium for managing associated information, where when a TTL value of the associated information is smaller than a preset threshold, the present disclosure subscribes to signaling plane information of a terminal device by sending a request message to an SMF network element, and updates or deletes the associated information according to a result of information returned by the SMF network element. The method solves the problem of associated information loss caused by the online and long-time immobility of the user terminal network, and automatically updates the associated information of the terminal equipment by acquiring the signaling plane information from the SMF network element through the NEF network element, thereby ensuring that the user plane flow can be associated and backfilled.
As shown in fig. 1, fig. 1 shows a schematic diagram of a communication system architecture to which the association information management method of the present disclosure can be applied.
Some relevant functional entities comprised in the communication system are described below.
A User Equipment (UE) accesses a Data Network (DN) or the like by accessing an operator Network, and services provided by an operator or a third party on the DN can be used. For convenience of explanation, a user terminal, a user equipment, a terminal device, or a terminal in the embodiments of the present disclosure may be collectively referred to as a UE. Although the UE described in the embodiments of the present disclosure may be replaced by a user terminal, a user equipment, a terminal device, or a terminal unless otherwise specified, they may be interchanged.
The access and mobility management function (AMF, access and Mobility Management Function) is a control plane function in 3GPP networks and is mainly responsible for access control and mobility management of UEs accessing the operator network. The security anchor function (SEAF, security Anchor Function) may be deployed in the AMF, or the SEAF may be deployed in another device different from the AMF, for example, the SEAF is deployed in the AMF. When the SEAF is deployed in an AMF, the SEAF and AMF may be collectively referred to as an AMF.
The SMF network element is a control plane function in a 3GPP network, where the SMF is mainly responsible for managing Packet Data Unit (PDU) sessions of UEs. A PDU session is a channel for transmitting PDUs, and the UE may send PDUs to each other through the PDU session and DN. The SMF is responsible for management tasks such as establishment, maintenance, and deletion of PDU sessions.
A Data Network (DN, data Network), also known as a packet Data Network (PDN, packet Data Network), is a Network located outside the 3GPP Network. The 3GPP network can access a plurality of DNs, and a plurality of services provided by an operator or a third party can be deployed on the DNs. For example, a DN is a private network of an intelligent plant, and a sensor installed in a plant of the intelligent plant plays the role of a UE, and the DN configures a control server of the sensor. The UE communicates with the control server, and after acquiring an instruction from the control server, the UE may transfer the acquired data to the control server according to the instruction. For another example, the DN is an internal office network of a company, and the terminals used by employees of the company may act as UEs that can access information and other resources within the company.
The unified data management entity (UDM, unified Data Management) is also a control plane function in the 3GPP network, and the UDM is mainly responsible for storing subscription data, credentials (trust), and permanent identity (SUPI, subscriber Permanent Identifier) of a subscriber (UE) in the 3GPP network. These data may be used for authentication and authorization of the UE to access the operator 3GPP network.
Among them, the network open function (NEF, network Exposure Function) is also a control plane function among 3GPP networks. The NEF is mainly responsible for opening the external interface of the 3GPP network to the third party in a secure way. When the functional entity such as SMF needs to communicate with the third party network element, NEF can be used as a relay for communication. In the relay process, the NEF can translate the internal and external identifiers. For example, when the SUPI of the UE is sent from the 3GPP network to the third party, the NEF may translate the SUPI into its corresponding external Identity (ID). Conversely, the NEF may translate the external identity ID into a corresponding SUPI when sent to the 3GPP network.
The network storage function (NRF, network Repository Function) is also a control plane function in the 3GPP network, and is mainly responsible for storing configuration service profile (profile) of the Network Function (NF) that can be accessed, and providing discovery service of the network function for other functional entities.
The user plane function (UPF, user Plane Function) is a gateway for the 3GPP network to communicate with the DN.
The policy control function (PCF, policy Control Function) is a control plane function in the 3GPP network for providing the SMF with policies for PDU sessions. Policies may include charging, quality of service (QoS, quality ofService), authorization-related policies, and the like.
AN Access Network (AN) is a sub-Network of a 3GPP Network, and a UE needs to first pass through the AN in order to Access the 3GPP Network. AN is also called a radio access network (RAN, radio Access Network) in a radio access scenario, so the terms RAN and AN are often not distinguished from each other.
The 3GPP network refers to a network conforming to the 3GPP standard. Wherein the parts of fig. 1 other than the UE and DN may be regarded as a 3GPP network. The 3GPP network is not limited to the 5G network defined by the 3GPP, but may include 2G, 3G, and 4G networks. Typically 3GPP networks are operated by operators. In addition, N1, N2, N3, N4, N6 in the architecture shown in fig. 1 respectively represent Reference points (Reference points) between related network entities/network functions.
The present exemplary embodiment will be described in detail below with reference to the accompanying drawings and examples.
First, in the embodiments of the present disclosure, a method for managing association information is provided, where the method may be applied to a DPI system or executed by any electronic device having a computing processing capability.
Fig. 2 shows a flowchart of a method for managing association information in an embodiment of the present disclosure, and as shown in fig. 2, the method for managing association information provided in the embodiment of the present disclosure includes the following steps:
S202, analyzing network signaling surface data of the terminal equipment to obtain associated information of the terminal equipment, wherein the associated information comprises signaling surface information associated with user surface information of the terminal equipment;
it should be noted that, the network signaling plane data may be session messages between different network elements in the 5G core network, such as session messages between the terminal device and the AMF network element, session messages between the UPF network element and the SMF network element, session messages between the AMF network element and the SMF network element, and so on; here, the information of the user session N3 interface, the user terminal identifier, the SUPI and the like can be extracted from the network signaling plane data analysis; the association information may be signaling plane information corresponding to the N3 interface; the signaling plane information may include one or more of user identity, user terminal calling number, user location information, etc.; the user plane information may be N3 interface information, where the N3 interface information may be an IP address of a UPF network element, and in one embodiment of the present disclosure, data of a user plane interface and a signaling plane interface may be collected through various probe devices of a DPI system, where the DPI system may collect user plane traffic and signaling plane traffic, and perform association analysis on the user plane traffic and the signaling plane traffic to obtain the user plane information and the signaling plane information.
S204, setting a time-to-live TTL value for the associated information, wherein the initial value of the TTL value is a preset time value, and the TTL value gradually decreases along with the time until the associated information is repeatedly acquired, and resetting the TTL value of the associated information to the preset time value;
it should be noted that, the preset time value may be freely set according to the actual requirement, for example, the preset time value is set to 60 minutes, the association is recorded in the DPI system memory after the association information is obtained, the TTL value may represent the residence time of the association information recorded in the DPI system memory, the TTL value gradually decreases with time, and when the DPI system obtains the association information again, the TTL value of the association information is reset to the initial value.
S206, when the TTL value of the associated information is smaller than a preset threshold value, a request message is sent to a Session Management Function (SMF) network element, wherein the request message is used for requesting the SMF network element to provide target signaling plane information of the terminal equipment;
it should be noted that, the request message may include a type of signaling plane information, the target signaling plane information is user information associated with an N3 interface of the UPF network element, the user information may be one or more of information such as a user identity identifier, a user terminal call number, and user location information, a preset threshold may be freely set according to an actual requirement, for example, the preset threshold is set to 5 minutes, when no association information is continuously obtained, a TTL value of the association information is reduced to less than 5 minutes over time, the request message is sent to the SMF network element through the NEF network element, and the SMF network element subscribes to the signaling plane information of the terminal device, and may return corresponding signaling plane information according to the type of signaling plane information carried in the request message.
And S208, updating or deleting the associated information according to the result of the returned information of the SMF network element.
After sending the request message to the SMF network element, determining whether the target signaling plane information of the terminal device returned by the SMF network element can be received, if the target signaling plane information can be received, updating the associated information according to the target signaling plane information; if the target signaling plane information cannot be received, deleting the associated information to realize management of the associated information according to the result of returned information of the SMF network element.
According to the association information management method, network signaling surface data of terminal equipment are analyzed to obtain association information of the terminal equipment, a time-to-live (TTL) value is set for the association information, wherein an initial value of the TTL value is a preset time value, the TTL value gradually decreases along with time increase until the association information is repeatedly obtained, the TTL value of the association information is reset to the preset time value, and when the TTL value of the association information is smaller than a preset threshold value, a request message is sent to an SMF network element through an NEF network element, and signaling surface information of the terminal equipment is subscribed; and updating or deleting the associated information according to the result of the returned information of the SMF network element. The method solves the problem of associated information loss caused by the online and long-time immobility of the user terminal network, and automatically updates the associated information of the terminal equipment by acquiring the signaling plane information from the SMF network element through the NEF network element, thereby ensuring that the user plane flow can be associated and backfilled.
Further, when the TTL value of the association information is smaller than a preset threshold, a request message is sent to the SMF network element to obtain target signaling plane information from the SMF network element, and the method and the device only subscribe signaling plane information corresponding to the association information with a small amount of TTL value fast expiring to the SMF network element of the core network, and have less influence on performance of the core network element than subscribing to the signaling plane information of the full online terminal device.
In one embodiment of the present disclosure, updating or deleting the association information according to the result of the SMF network element return information may be implemented through the steps disclosed in fig. 3, referring to another flowchart of an association information management method shown in fig. 3, may include the following steps:
s302, judging whether target signaling plane information returned by the SMF network element can be received or not;
s304, under the condition that the target signaling surface information returned by the SMF network element can be received, resetting the TTL value to a preset time value, and updating the associated information according to the target signaling surface information returned by the SMF to obtain updated associated information.
In one embodiment of the present disclosure, referring to another flowchart of the association information management method shown in fig. 4, the following steps may be further included after S204:
s306, according to the updated association information, an external data representation xDR ticket is generated.
It should be noted that, in one embodiment of the present disclosure, after receiving the target signaling plane information returned by the SMF network element, the DPI system updates the association information according to the target signaling plane information, and uses the N3 interface information of the user plane traffic as the association attribute to implement association between the user plane traffic and information such as the user number, the SUPI, and the like, by using the user plane traffic analysis module, so as to generate the XDR ticket.
According to the method and the device, the TTL value is dynamically updated in advance according to the opening capability of the 5G core network element, so that the associated information of the user is not deleted under the online condition, the situation that the associated information of the user is invalid due to the lack of signaling interaction flow after the single TTL value is set is avoided, the characteristics that the 5G core network SMF network element centrally manages the session information of the user and the capability of the 5G core network is opened are utilized, and the associated information of the online user is updated and backfilled in time by subscribing the associated information of the user to the core network.
In one embodiment of the present disclosure, referring to another flowchart of the association information management method shown in fig. 5, the following steps may be further included after S202:
s303, when the target signaling surface information returned by the SMF network element cannot be received, the TTL value of the associated information continues to gradually decrease along with the time until the TTL value of the associated information is 0, and the associated information is deleted.
In one embodiment of the present disclosure, referring to another flowchart of the association information management method shown in fig. 6, the following steps may be further included before S202:
s201, collecting network signaling surface data of terminal equipment at the signaling surface interface.
In one embodiment of the present disclosure, the signaling plane interface is at least one of the N1, N2, N4, N11 interfaces.
In one embodiment of the present disclosure, the signaling plane information is at least one of a mobile subscriber directory number MDN, a tunnel terminal identification TEID, and a subscription permanent identifier SUPI of the terminal device.
In one embodiment of the disclosure, the association information of the terminal device may be acquired by various probe devices in the DPI system, where the association information includes N3 interface information, TEID, MDN, SUPI, and the like, all acquired association information is recorded in real time in a DPI system memory, a TTL value is set for each recorded association information, an initial value of the TTL value is 60 minutes, and a time threshold is set to 5 minutes, where table 1 shows the three cases of association information and TTL values acquired by the DPI system, as shown in table 1.
TABLE 1
If the DPI system repeatedly acquires the association information 1 but the association information 2 and the association information 3 are not acquired after 30 minutes elapses with the time of recording the association information, the TTL value of the association information 1 is reset to the initial value of 60 minutes, the TTL value of the association information 2 and the association information 3 is reduced to 30 minutes, and the updated data are shown in table 2.
TABLE 2
When the TTL value of the association information 2 and the association information 3 is reduced to 5 minutes, the DPI system subscribes to the SMF network element through the NEF network element to inquire about the signaling plane information, wherein the signaling plane information may include TEID, MDN and MDN corresponding to the N3 interface information, at this time, the DPI system receives the signaling plane information returned by the SMF network element, if only the signaling plane information for updating the association information 2 is received and the signaling plane information for updating the association information 3 is not received, the TTL value of the association information 2 is reset to 60 minutes, the TTL value of the association information 3 is continuously reduced, and when the TTL value of the association information 3 is reduced to 0, the association information 3 is deleted, at this time, only the association information 1 and the association information 2 remain in the record, as shown in table 3.
TABLE 3 Table 3
Here, the DPI system may further implement association between the user plane traffic and information such as TEID, MDN, and SUPI by using the user plane traffic analysis module and based on the N3 interface information of the user plane traffic as an association attribute, and generate an xDR ticket based on the association information.
In one embodiment of the present disclosure, referring to a schematic diagram of an association information management method shown in fig. 7, an eNodeB (Evolved Node B, eNB) is a radio base station in an LTE (Long Term Evolution, long term evolution of universal mobile telecommunications technology) network, and is also a network element of an LTE radio access network, responsible for all functions related to an air interface; the DPI system comprises a signaling surface flow analysis module and a user surface flow analysis module, wherein the signaling surface flow analysis module is used for acquiring associated information based on signaling flow, recording the associated information and setting a TTL value for the associated information, resetting the TTL value of the associated information to an initial value when the same associated information is repeatedly acquired, and sending a request message to an SMF network element when the TTL value is reduced to a preset threshold value along with time, wherein the request message is used for requesting the SMF network element to provide target signaling surface information of terminal equipment; and the user plane flow analysis module is used for receiving the target signaling plane information returned by the SMF network element, updating the associated information according to the target signaling plane information, and backfilling the user plane ticket, namely the xDR ticket, based on the updated associated information.
Based on the same inventive concept, the embodiments of the present disclosure also provide an associated information management apparatus, such as the following embodiments. Since the principle of solving the problem of the embodiment of the device is similar to that of the embodiment of the method, the implementation of the embodiment of the device can be referred to the implementation of the embodiment of the method, and the repetition is omitted.
Fig. 8 is a schematic diagram of an association information management apparatus according to an embodiment of the disclosure, as shown in fig. 8, the apparatus includes:
the association information obtaining module 810 is configured to analyze network signaling plane data of the terminal device to obtain association information of the terminal device, where the association information includes signaling plane information associated with user plane information of the terminal device;
the TTL value setting module 820 is configured to set a time-to-live TTL value for the associated information, where an initial value of the TTL value is a preset time value, and the TTL value gradually decreases with time until the associated information is repeatedly acquired, and reset the TTL value to the preset time value;
an information subscription module 830, configured to send a request message to a session management function SMF network element when a TTL value of the association information is smaller than a preset threshold, where the request message is used to request the SMF network element to provide target signaling plane information of the terminal device;
And the association information management module 840 is configured to update or delete association information according to a result of the SMF network element return information.
In one embodiment of the present disclosure, the association information management module 840 is further configured to determine whether target signaling plane information returned by the SMF network element can be received; under the condition that the target signaling plane information returned by the SMF network element can be received, resetting the TTL value to a preset time value, and updating the associated information according to the target signaling plane information returned by the SMF to obtain the updated associated information.
In one embodiment of the disclosure, the apparatus further includes a ticket generating module, where the ticket generating module is configured to generate an xDR ticket according to the updated association information.
In an embodiment of the present disclosure, the above-mentioned association information management module 840 is further configured to, in a case where the target signaling plane information returned by the SMF network element is not received, delete the association information when the TTL value of the association information is 0, and the TTL value of the association information continues to gradually decrease with time.
In one embodiment of the disclosure, the apparatus further includes a data acquisition module configured to acquire network signaling plane data of the terminal device at the signaling plane interface.
In one embodiment of the present disclosure, the signaling plane interface is at least one of the N1, N2, N4, N11 interfaces.
In one embodiment of the present disclosure, the signaling plane information is at least one of a mobile subscriber directory number MDN, a tunnel terminal identification TEID, and a subscription permanent identifier SUPI of the terminal device.
Those skilled in the art will appreciate that the various aspects of the present disclosure may be implemented as a system, method, or program product. Accordingly, various aspects of the disclosure may be embodied in the following forms, namely: an entirely hardware embodiment, an entirely software embodiment (including firmware, micro-code, etc.) or an embodiment combining hardware and software aspects may be referred to herein as a "circuit," module "or" system.
An electronic device 900 according to such an embodiment of the present disclosure is described below with reference to fig. 9. The electronic device 900 shown in fig. 9 is merely an example and should not be construed to limit the functionality and scope of use of embodiments of the present disclosure in any way.
As shown in fig. 9, the electronic device 900 is embodied in the form of a general purpose computing device. Components of electronic device 900 may include, but are not limited to: the at least one processing unit 910, the at least one storage unit 920, and a bus 930 connecting the different system components (including the storage unit 920 and the processing unit 910).
Wherein the storage unit stores program code that is executable by the processing unit 910 such that the processing unit 910 performs steps according to various exemplary embodiments of the present disclosure described in the above-described "exemplary methods" section of the present specification. For example, the processing unit 910 may perform the following steps of the method embodiment described above: analyzing network signaling surface data of the terminal equipment to obtain associated information of the terminal equipment, wherein the associated information comprises signaling surface information associated with user surface information of the terminal equipment; setting a time-to-live TTL value for the associated information, wherein the initial value of the TTL value is a preset time value, the TTL value gradually decreases along with the increase of time, and the TTL value of the associated information is reset to the preset time value until the associated information is acquired again; when the TTL value of the associated information is smaller than a preset threshold value, subscribing the signaling plane information of the terminal equipment to a Session Management Function (SMF) network element through a network opening function (NEF) network element; and updating or deleting the associated information according to the result of the returned information of the SMF network element.
The storage unit 920 may include readable media in the form of volatile storage units, such as Random Access Memory (RAM) 9201 and/or cache memory 9202, and may further include Read Only Memory (ROM) 9203.
The storage unit 920 may also include a program/utility 9204 having a set (at least one) of program modules 9205, such program modules 9205 include, but are not limited to: an operating system, one or more application programs, other program modules, and program data, each or some combination of which may include an implementation of a network environment.
The bus 930 may be one or more of several types of bus structures including a memory unit bus or memory unit controller, a peripheral bus, an accelerated graphics port, a processing unit, or a local bus using any of a variety of bus architectures.
The electronic device 900 may also communicate with one or more external devices 940 (e.g., keyboard, pointing device, bluetooth device, etc.), one or more devices that enable a user to interact with the electronic device 900, and/or any devices (e.g., routers, modems, etc.) that enable the electronic device 900 to communicate with one or more other computing devices. Such communication may occur through an input/output (I/O) interface 950. Also, electronic device 900 may communicate with one or more networks such as a Local Area Network (LAN), a Wide Area Network (WAN), and/or a public network, such as the Internet, through network adapter 960. As shown, the network adapter 960 communicates with other modules of the electronic device 900 over the bus 930. It should be appreciated that although not shown, other hardware and/or software modules may be used in connection with electronic device 900, including, but not limited to: microcode, device drivers, redundant processing units, external disk drive arrays, RAID systems, tape drives, data backup storage systems, and the like.
From the above description of embodiments, those skilled in the art will readily appreciate that the example embodiments described herein may be implemented in software, or may be implemented in software in combination with the necessary hardware. Thus, the technical solution according to the embodiments of the present disclosure may be embodied in the form of a software product, which may be stored in a non-volatile storage medium (may be a CD-ROM, a U-disk, a mobile hard disk, etc.) or on a network, including several instructions to cause a computing device (may be a personal computer, a server, a terminal device, or a network device, etc.) to perform the method according to the embodiments of the present disclosure.
In an exemplary embodiment of the present disclosure, a computer-readable storage medium, which may be a readable signal medium or a readable storage medium, is also provided. On which a program product is stored which enables the implementation of the method described above of the present disclosure. In some possible implementations, various aspects of the disclosure may also be implemented in the form of a program product comprising program code for causing a terminal device to carry out the steps according to the various exemplary embodiments of the disclosure as described in the "exemplary methods" section of this specification, when the program product is run on the terminal device.
More specific examples of the computer readable storage medium in the present disclosure may include, but are not limited to: an electrical connection having one or more wires, a portable computer diskette, a hard disk, a Random Access Memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disc read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the foregoing.
In this disclosure, a computer readable storage medium may include a data signal propagated in baseband or as part of a carrier wave, with readable program code embodied therein. Such a propagated data signal may take any of a variety of forms, including, but not limited to, electro-magnetic, optical, or any suitable combination of the foregoing. A readable signal medium may also be any readable medium that is not a readable storage medium and that can communicate, propagate, or transport a program for use by or in connection with an instruction execution system, apparatus, or device.
Alternatively, the program code embodied on a computer readable storage medium may be transmitted using any appropriate medium, including but not limited to wireless, wireline, optical fiber cable, RF, etc., or any suitable combination of the foregoing.
In particular implementations, the program code for carrying out operations of the present disclosure may be written in any combination of one or more programming languages, including an object oriented programming language such as Java, C++ or the like and conventional procedural programming languages, such as the "C" programming language or similar programming languages. The program code may execute entirely on the user's computing device, partly on the user's device, as a stand-alone software package, partly on the user's computing device, partly on a remote computing device, or entirely on the remote computing device or server. In the case of remote computing devices, the remote computing device may be connected to the user computing device through any kind of network, including a Local Area Network (LAN) or a Wide Area Network (WAN), or may be connected to an external computing device (e.g., connected via the Internet using an Internet service provider).
It should be noted that although in the above detailed description several modules or units of a device for action execution are mentioned, such a division is not mandatory. Indeed, the features and functionality of two or more modules or units described above may be embodied in one module or unit in accordance with embodiments of the present disclosure. Conversely, the features and functions of one module or unit described above may be further divided into a plurality of modules or units to be embodied.
Furthermore, although the steps of the methods in the present disclosure are depicted in a particular order in the drawings, this does not require or imply that the steps must be performed in that particular order or that all illustrated steps be performed in order to achieve desirable results. Additionally or alternatively, certain steps may be omitted, multiple steps combined into one step to perform, and/or one step decomposed into multiple steps to perform, etc.
From the description of the above embodiments, those skilled in the art will readily appreciate that the example embodiments described herein may be implemented in software, or may be implemented in software in combination with the necessary hardware. Thus, the technical solution according to the embodiments of the present disclosure may be embodied in the form of a software product, which may be stored in a non-volatile storage medium (may be a CD-ROM, a U-disk, a mobile hard disk, etc.) or on a network, including several instructions to cause a computing device (may be a personal computer, a server, a mobile terminal, or a network device, etc.) to perform the method according to the embodiments of the present disclosure.
Other embodiments of the disclosure will be apparent to those skilled in the art from consideration of the specification and practice of the disclosure disclosed herein. This disclosure is intended to cover any adaptations, uses, or adaptations of the disclosure following the general principles of the disclosure and including such departures from the present disclosure as come within known or customary practice within the art to which the disclosure pertains. It is intended that the specification and examples be considered as exemplary only, with a true scope and spirit of the disclosure being indicated by the following claims.

Claims (10)

1. A method of association information management, comprising:
analyzing network signaling surface data of terminal equipment to obtain associated information of the terminal equipment, wherein the associated information comprises signaling surface information associated with user surface information of the terminal equipment; setting a time-to-live TTL value for the associated information, wherein the initial value of the TTL value is a preset time value, the TTL value gradually decreases along with the time increase until the associated information is repeatedly acquired, and resetting the TTL value of the associated information to the preset time value;
when the TTL value of the association information is smaller than a preset threshold value, sending a request message to a Session Management Function (SMF) network element, wherein the request message is used for requesting the SMF network element to provide target signaling plane information of the terminal equipment;
updating or deleting the associated information according to the result of the returned information of the SMF network element;
the association information is stored in a deep packet inspection DPI system memory.
2. The association information management method according to claim 1, wherein updating or deleting the association information according to a result of the SMF network element return information comprises:
Judging whether target signaling plane information returned by the SMF network element can be received or not;
and under the condition that the target signaling plane information returned by the SMF network element can be received, resetting the TTL value to a preset time value, and updating the associated information according to the target signaling plane information returned by the SMF to obtain updated associated information.
3. The association information management method according to claim 2, characterized in that the method further comprises:
and generating an external data representation xDR ticket according to the updated associated information.
4. The association information management method according to claim 2, characterized in that the method further comprises:
and under the condition that target signaling plane information returned by the SMF network element cannot be received, the TTL value of the associated information continues to gradually decrease along with the time increase until the TTL value of the associated information is 0, and deleting the associated information.
5. The association information management method according to claim 1, wherein before analyzing network signaling plane data of a terminal device to obtain association information of the terminal device, the method further comprises:
and collecting network signaling surface data of the terminal equipment at the signaling surface interface.
6. The association information management method according to claim 5, wherein the signaling plane interface is at least one of N1, N2, N4, N11 interfaces.
7. The association information management method according to claim 5, wherein the signaling plane information is at least one of a mobile subscriber directory number MDN, a tunnel terminal identification TEID, and a subscription permanent identifier SUPI of the terminal device.
8. An associated information management apparatus, comprising:
the system comprises a correlation information acquisition module, a processing module and a processing module, wherein the correlation information acquisition module is used for analyzing network signaling surface traffic of terminal equipment to obtain the correlation information of the terminal equipment, and the correlation information comprises signaling surface information correlated with user surface information of the terminal equipment;
the TTL value setting module is used for setting a time-to-live TTL value for the associated information, wherein the initial value of the TTL value is a preset time value, the TTL value gradually decreases along with the increase of time, and the TTL value is reset to the preset time value until the associated information is repeatedly acquired;
an information subscription module, configured to send a request message to a session management function SMF network element when a TTL value of the association information is smaller than a preset threshold, where the request message is used to request the SMF network element to provide target signaling plane information of the terminal device;
The associated information management module is used for updating or deleting the associated information according to the result of the returned information of the SMF network element;
the association information is stored in a deep packet inspection DPI system memory.
9. An electronic device, comprising:
a processor; and
a memory for storing executable instructions of the processor;
wherein the processor is configured to perform the association information management method of any one of claims 1 to 7 via execution of the executable instructions.
10. A computer-readable storage medium having stored thereon a computer program, wherein the computer program, when executed by a processor, implements the associated information management method of any one of claims 1 to 7.
CN202210845225.1A 2022-07-18 2022-07-18 Associated information management method, device, electronic equipment and storage medium Active CN115065995B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN202210845225.1A CN115065995B (en) 2022-07-18 2022-07-18 Associated information management method, device, electronic equipment and storage medium

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN202210845225.1A CN115065995B (en) 2022-07-18 2022-07-18 Associated information management method, device, electronic equipment and storage medium

Publications (2)

Publication Number Publication Date
CN115065995A CN115065995A (en) 2022-09-16
CN115065995B true CN115065995B (en) 2024-01-30

Family

ID=83205872

Family Applications (1)

Application Number Title Priority Date Filing Date
CN202210845225.1A Active CN115065995B (en) 2022-07-18 2022-07-18 Associated information management method, device, electronic equipment and storage medium

Country Status (1)

Country Link
CN (1) CN115065995B (en)

Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN104486743A (en) * 2014-12-29 2015-04-01 武汉虹信技术服务有限责任公司 Method for user information correlation of XDR (external data representation) data of interfaces of core network
CN111371628A (en) * 2020-03-24 2020-07-03 江苏省通信服务有限公司 User plane and control plane information correlation method in LTE network
CN112738791A (en) * 2020-12-28 2021-04-30 恒安嘉新（北京）科技股份公司 User information correlation backfill method, device, equipment and medium based on 5G core network
WO2021226634A1 (en) * 2020-05-05 2021-11-11 Apple Inc. System and method for survival time delivery in 5gc
CN114158000A (en) * 2021-10-19 2022-03-08 长安通信科技有限责任公司 CU two-side data association method and system based on 5G network and intelligent terminal

Patent Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN104486743A (en) * 2014-12-29 2015-04-01 武汉虹信技术服务有限责任公司 Method for user information correlation of XDR (external data representation) data of interfaces of core network
CN111371628A (en) * 2020-03-24 2020-07-03 江苏省通信服务有限公司 User plane and control plane information correlation method in LTE network
WO2021226634A1 (en) * 2020-05-05 2021-11-11 Apple Inc. System and method for survival time delivery in 5gc
CN112738791A (en) * 2020-12-28 2021-04-30 恒安嘉新（北京）科技股份公司 User information correlation backfill method, device, equipment and medium based on 5G core network
CN114158000A (en) * 2021-10-19 2022-03-08 长安通信科技有限责任公司 CU two-side data association method and system based on 5G network and intelligent terminal

Also Published As

Publication number Publication date
CN115065995A (en) 2022-09-16

Similar Documents

Publication Publication Date Title
CN109818868B (en) Method, device, equipment and storage medium for realizing edge network capability opening
CN111901135B (en) Data analysis method and device
CN109167847B (en) IPv6 address generation method, SMF and communication system
WO2021037175A1 (en) Network slice management method and related device
WO2018232570A1 (en) Registration and session establishment methods, terminal, and amf entity
WO2021017550A1 (en) Method, device and system for sending event report
US9948646B1 (en) Machine type communication interworking function proxy
CN110519824B (en) Method and device for updating terminal routing strategy
CN112566164A (en) Communication system and service quality control method
US11849351B2 (en) Removal of application identifier
WO2022116061A1 (en) Communication method and apparatus
CN115065995B (en) Associated information management method, device, electronic equipment and storage medium
WO2023236497A1 (en) Authentication method and apparatus, storage medium, and electronic device
CN114691734B (en) Cache management and control method and device, computer readable medium and electronic equipment
CN114554538B (en) Flow statistics method, device, electronic equipment and storage medium
CN110890967A (en) Charging processing method, network element and network system
CN113382410B (en) Communication method and related device and computer readable storage medium
WO2022067538A1 (en) Network element discovery method and apparatus, and device and storage medium
CN112153647B (en) Communication method and related equipment
CN116261137A (en) Network element security authentication method and device, electronic equipment and storage medium
EP4037344A1 (en) Method and apparatus for accessing network
CN112449377A (en) Network data reporting method and device
CN118200891A (en) AMF redirection-oriented UE policy optimization method, device, electronic equipment and medium
CN118158748A (en) AMF redirection-oriented UE policy management method, device, electronic equipment and medium
KR20190135298A (en) Network apparatus and control method thereof

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
GR01 Patent grant
GR01 Patent grant