CN116866297A

CN116866297A - Address matching method, device, communication equipment and storage medium of dual-domain private network

Info

Publication number: CN116866297A
Application number: CN202310928026.1A
Authority: CN
Inventors: 刘双月; 尹君; 李文苡; 郑洁莹
Original assignee: China Telecom Technology Innovation Center; China Telecom Corp Ltd
Current assignee: China Telecom Technology Innovation Center; China Telecom Corp Ltd
Priority date: 2023-07-26
Filing date: 2023-07-26
Publication date: 2023-10-10

Abstract

The application relates to an address matching method, device, communication equipment and storage medium of a dual-domain private network, and relates to the technical field of mobile communication. The method comprises the following steps: under the condition that the first data network session and the second data network session are successfully established, the network element equipment in the home network receives a target user plane message sent by the network element equipment in the visiting network; further, according to the target user plane message, a first IP address of the UE corresponding to the first data network session is obtained; further, a mapping relation between the first IP address and a second IP address of the UE corresponding to the second data network session is established. The method can enable the network element equipment in the home network to identify the first IP address, reduce the difficulty of matching the IP address of the UE in the dual-domain private network, realize the requirement of tracing the IP address, ensure that the UE can smoothly access the private network of the home in the visiting place, and simultaneously not influence the access of the UE to the public network of the visiting place.

Description

Address matching method, device, communication equipment and storage medium of dual-domain private network

Technical Field

The present application relates to the field of mobile communications technologies, and in particular, to a method, an apparatus, a communication device, and a storage medium for address matching in a dual-domain private network.

Background

The dual-domain private network can meet the requirement that users access the public network and the private network simultaneously, and has been widely used. In the roaming scenario, the visited place allocates a UE (User Equipment) public network IP (Internet Protocol ) address to the public network session through an SMF (Session Management Function ) or a UPF (User Plane Function, user plane function), and the home place allocates a UE private network IP address to the private network session through an SMF or a UPF. Based on the current communication technology and standard flow, the public network IP address of the UE is not transferred to the home location, so that the conversion of the public network IP address and the private network IP address of the UE cannot be realized, and the home location UPF cannot identify the data packet carrying the public network IP address and forwarded by the visiting location UPF, thereby influencing the private network of the UE visiting the home location in the visiting network.

Disclosure of Invention

In view of the foregoing, it is desirable to provide an address matching method, apparatus, communication device, and storage medium for a dual-domain private network capable of implementing IP address conversion based on a user plane message.

In a first aspect, the present application provides an address matching method for a dual-domain private network, applied to a network element device in a home network, including:

Receiving a target user plane message sent by network element equipment in a visiting area network under the condition that a first data network session and a second data network session are successfully established; the first data network session is used for the User Equipment (UE) to access the public network, and the second data network session is used for the UE to access the private network;

acquiring a first IP address of the UE corresponding to the first data network session according to the target user plane message;

and establishing a mapping relation between the first IP address and a second IP address of the UE corresponding to the second data network session.

In one embodiment, the method further comprises:

receiving private network traffic which is sent by UE through network element equipment in a visiting place network and used for accessing a private network;

based on the mapping relation, the IP address of the UE corresponding to the second data network session carrying the private network traffic is replaced by the first IP address, and the private network is accessed based on the private network traffic after the replacement of the IP address.

In one embodiment, before receiving the target user plane message sent by the network element device in the visited network in case of successful establishment of the first data network session and the second data network session, the method further comprises:

receiving a second data network session establishment request sent by network element equipment in the visited network;

And according to the second data network session establishment request, distributing a second IP address corresponding to the second data network session to the UE, and establishing the second data network session.

In one embodiment, before receiving the second data network session establishment request sent by the network element device in the visited network, the method further includes:

receiving a second subscription data acquisition request sent by network element equipment in the visiting place network based on a target session policy; the target session policy is used for triggering the establishment of a second data network session for the UE to access the public network and the private network in parallel;

and sending the subscription data of the second data network session to the network element equipment in the visiting place network based on the second subscription data acquisition request so as to send a second data network session establishment request to the network element equipment in the visiting place network.

In one embodiment, before receiving the second subscription data acquisition request sent by the network element device in the visited network based on the target session policy, the method further includes:

receiving a UE subscription policy request sent by network element equipment in a visiting place network;

based on the UE signing policy request, sending a signing policy of the UE to network element equipment in the visited network; the subscription policy of the UE comprises a target session policy, wherein the target session policy is used for indicating network element equipment in the visited network to allocate a first IP address for the UE.

In one embodiment, the subscription policy of the UE further includes IP address indication information, where the IP address indication information is used to indicate an IP address range of the private network, and the IP address range is used to indicate that the network element device in the visited network allocates the first IP address to the UE outside the IP address range.

In one embodiment, the method further comprises:

receiving a first subscription data acquisition request sent by network element equipment in a visiting place network;

and sending the subscription data of the first data network session to the network element equipment in the visiting place network based on the first subscription data acquisition request so as to enable the network element equipment in the visiting place network to establish the first data network session.

In a second aspect, the present application provides an address matching method for a dual-domain private network, applied to a network element device in a visited network, including:

under the condition of successfully establishing the first data network session and the second data network session, sending a target user plane message to network element equipment in a home network; the first data network session is used for the User Equipment (UE) to access the public network, and the second data network session is used for the UE to access the private network;

the target user plane message is used for indicating network element equipment in the home network to acquire a first IP address of the UE corresponding to the first data network session, and establishing a mapping relation between the first IP address and a second IP address of the UE corresponding to the second data network session.

In one embodiment, the method further comprises:

and sending private network traffic for accessing the private network by the UE to network element equipment in the home network, triggering the network element equipment in the home network to replace the IP address of the UE corresponding to the second data network session bearing the private network traffic by the first IP address with the second IP address based on the mapping relation, and accessing the private network based on the private network traffic after the replacement of the IP address.

In one embodiment, before sending the target user plane message to the network element device in the home network in case of successful establishment of the first data network session and the second data network session, the method further comprises:

sending a second data network session establishment request to network element equipment in the home network;

the second data network session establishment request is used for indicating the network element equipment in the home network to allocate a second IP address corresponding to the second data network session for the UE, and establishing the second data network session.

In one embodiment, before sending the second data network session establishment request to the network element device in the home network, the method further comprises:

sending a second subscription data acquisition request to network element equipment in the home network according to the target session policy; the target session policy is used for triggering the establishment of a second data network session for the UE to access the public network and the private network in parallel;

The second subscription data acquisition request is used for indicating the network element equipment in the home network to send the subscription data of the second data network session so that the network element equipment in the visiting network can send the second data network session establishment request.

In one embodiment, before sending the second subscription data acquisition request to the network element device in the home network according to the target session policy, the method further comprises:

sending a UE subscription policy request and a first subscription data acquisition request to network element equipment in a home network;

the UE subscription policy request is used for indicating network element equipment in the home network to send the subscription policy of the UE, and the first subscription data acquisition request is used for indicating the network element equipment in the home network to send the subscription data of the first data network session; the subscription policy of the UE comprises a target session policy, wherein the target session policy is used for indicating network element equipment in the visited network to allocate a first IP address for the UE.

In one embodiment, the subscription policy of the UE further includes IP address indication information, where the IP address indication information is used to indicate an IP address range of the private network, and the method further includes:

the UE is assigned a first IP address outside the IP address range.

In one embodiment, the method further comprises:

receiving subscription data of a first data network session sent by network element equipment in a home network based on a first subscription data acquisition request;

and establishing the first data network session according to the subscription data of the first data network session.

In a third aspect, the present application also provides an address matching device for a dual-domain private network, where the device includes:

a receiving module, configured to receive a target user plane message sent by a network element device in a visited network, where the first data network session and the second data network session are successfully established; the first data network session is used for the User Equipment (UE) to access the public network, and the second data network session is used for the UE to access the private network;

the acquisition module is used for acquiring a first IP address of the UE corresponding to the first data network session according to the target user plane message;

and the establishing module is used for establishing a mapping relation between the first IP address and a second IP address of the UE corresponding to the second data network session.

In a fourth aspect, the present application also provides another address matching device for a dual-domain private network, where the device includes:

a sending module, configured to send a target user plane message to a network element device in a home network when the first data network session and the second data network session are successfully established; the first data network session is used for the User Equipment (UE) to access the public network, and the second data network session is used for the UE to access the private network;

In a fifth aspect, the present application also provides a communication device, including: a transmitter, a receiver, a processor and a memory, the memory storing a computer program;

a receiver, configured to receive a target user plane message sent by a network element device in a visited network, where the first data network session and the second data network session are successfully established; the first data network session is used for the User Equipment (UE) to access the public network, and the second data network session is used for the UE to access the private network;

the processor executes a computer program for acquiring a first IP address of the UE corresponding to the first data network session according to the target user plane message, and establishing a mapping relation between the first IP address and a second IP address of the UE corresponding to the second data network session.

In a sixth aspect, the present application also provides a communication apparatus, comprising: a transmitter, a receiver, a processor and a memory, the memory storing a computer program;

A transmitter, configured to send a target user plane message to a network element device in a home network in case of successful establishment of a first data network session and a second data network session; the first data network session is used for the User Equipment (UE) to access the public network, and the second data network session is used for the UE to access the private network;

In a seventh aspect, the present application also provides a computer-readable storage medium. The computer readable storage medium having stored thereon a computer program which, when executed by a processor, implements the steps of the address matching method of the two-domain private network of the first and/or second aspect described above.

In an eighth aspect, the present application also provides a computer program product comprising a computer program which, when executed by a processor, implements the steps of the address matching method of the two-domain private network of the first and/or second aspects described above.

The address matching method, the device, the communication equipment and the storage medium of the dual-domain private network are characterized in that under the condition that a first data network session and a second data network session are successfully established, network element equipment in a home network receives a target user plane message sent by the network element equipment in a visiting network; further, according to the target user plane message, a first IP address of the UE corresponding to the first data network session is obtained; further, a mapping relation between the first IP address and a second IP address of the UE corresponding to the second data network session is established; wherein the first data network session is used for the user equipment UE to access the public network and the second data network session is used for the UE to access the private network. Compared with the prior art, the method and the device send the target user plane message to the network element equipment in the home network through the network element equipment in the visited network, and transfer the first IP address of the UE in the public network based on the target user plane message, so that the network element equipment in the home network can identify the first IP address, the difficulty in matching the IP address of the UE in the dual-domain private network is reduced, the requirement of tracing the IP address is met, and the UE can smoothly access the private network of the home in the visited network.

Drawings

FIG. 1 is an application scenario diagram of an address matching method for a dual-domain private network in one embodiment;

FIG. 2 is a flow chart of a method for address matching of a dual-domain private network in one embodiment;

FIG. 3 is a flow diagram of IP address replacement in one embodiment;

FIG. 4 is a flow diagram of establishing a second data network session in one embodiment;

FIG. 5 is a flow diagram of a first data network session setup in one embodiment;

FIG. 6 is a flow chart of an address matching method of a dual-domain private network in another embodiment;

FIG. 7 is a flow chart illustrating a second exemplary embodiment of establishing a second data network session;

FIG. 8 is a flow chart illustrating a method for establishing a first data network session according to another embodiment;

FIG. 9 is a flow chart of a method for address matching in a dual-domain private network according to yet another embodiment;

FIG. 10 is a block diagram of an address matching device of a dual-domain private network in one embodiment;

fig. 11 is a block diagram of an address matching device of a dual-domain private network in another embodiment.

Detailed Description

The present application will be described in further detail with reference to the drawings and examples, in order to make the objects, technical solutions and advantages of the present application more apparent. It should be understood that the specific embodiments described herein are for purposes of illustration only and are not intended to limit the scope of the application.

The address matching method of the dual-domain private network provided by the embodiment of the application can be applied to an application scene shown in fig. 1. The public network traffic of the UE may be sent to a visiting location convergence network element UPF/GW-U (Gateway-User) through a 4G base station eNodeB or a 5G base station gNodeB, so as to directly access the local public network at the visiting location; the private network traffic of the UE may be forwarded by the visitor UPF to the home UPF after being sent to the visitor converged network element UPF/GW-U, thereby visiting the private network of the enterprise at the home.

Specifically, the visiting network element further includes an MME (Mobile Management Entity, mobility management entity), an AMF (Access and Mobility management Function, mobility management function), and an SMF; the home network element also includes UDM (the Unified Data Management, unified data management function), PCF (Policy Control Function ) and SMF. The MME and the AMF are used for providing a session management message transmission channel for the UE and the SMF; the SMF is used for acquiring subscription data of the session from the UDM, distributing IP addresses, collecting charging data and connecting a charging center; the UDM is used for issuing subscription data of the session; the PCF is used to issue session policies.

In one embodiment, as shown in fig. 2, there is provided an address matching method of a dual-domain private network, applied to a network element device in a home network, including the following steps:

S201, under the condition that the first data network session and the second data network session are successfully established, receiving a target user plane message sent by network element equipment in the visiting network.

The first data network session is for the user equipment UE to access the public network and the second data network session is for the UE to access the private network. In particular, the first data network session may be a generic DNN (Data Network Name ) session and the second data network session may be a private DNN session.

In this embodiment, the first data network session may be established by the visited network first, and then the second data network session may be established by the home network if the first data network session is successfully established, and then the network element device in the visited network sends the target user plane message if the second data network session is successfully established, so that the network element device in the home network receives the target user plane message. Specifically, the home area UPF may receive the target user plane message sent by the visited area UPF.

S202, a first IP address of the UE corresponding to the first data network session is obtained according to the target user plane message.

The target user plane message may be a network element device in the visited network, and is based on a data packet sent by a first IP address of the UE corresponding to the first data network session in the public network, that is, a data packet sent based on the public network IP address of the UE. The first IP address corresponding to the first data network session may be determined according to a source of a data packet, and specifically, the data packet may be a ping packet based on ICMP (Internet Control Message Protocol, internet control message) protocol.

S203, establishing a mapping relation between the first IP address and a second IP address of the UE corresponding to the second data network session.

Under the condition that network element equipment in the home network acquires a first IP address of UE corresponding to a first data network session, a mapping relation between the first IP address and a second IP address of the UE corresponding to a second data network session is established. Specifically, the home UPF may establish a mapping relationship between the first IP address and the second IP address.

For example, an IP address mapping table of a dual-domain private network is established, where the IP address mapping table of the dual-domain private network is used to store a first IP address and a second IP address of each UE, so that a network element device in a home network can identify the first IP address of the UE, and further ensure that the UE can access a private network of the home in a visited place. It should be noted that, the first IP address of the UE is an IP address for accessing the public network, which is allocated to the UE by the visiting network element device in the first data network session, and the second IP address of the UE is an IP address for accessing the private network, which is allocated to the UE by the home network element device in the second data network session. In an actual application scenario, the UE only acquires the first IP address, but the second IP address is not issued to the UE, so that the UE is unaware of the second IP address.

Compared with the prior art, the scheme has the advantages that the network element equipment in the home network receives the target user plane message sent by the network element equipment in the visiting network under the condition that the first data network session and the second data network session are successfully established; further, according to the target user plane message, a first IP address of the UE corresponding to the first data network session is obtained; further, a mapping relation between the first IP address and a second IP address of the UE corresponding to the second data network session is established; wherein the first data network session is used for the user equipment UE to access the public network and the second data network session is used for the UE to access the private network. The network element equipment in the visiting place network sends the target user plane information to the network element equipment in the home place network, and the first IP address of the UE in the public network is transmitted based on the target user plane information, so that the network element equipment in the home place network can identify the first IP address, the difficulty of matching the IP address of the UE in the dual-domain private network is reduced, the requirement of tracing the IP address is met, and the UE can smoothly visit the private network of the home place in the visiting place.

Furthermore, in this embodiment, the first IP address of the UE corresponding to the first data network session is transferred through the user plane message, so that a control plane interface, such as an N16a or N4 interface, does not need to be changed, and the address replacement method for the dual-domain private network provided in this embodiment further has the feature of low implementation difficulty.

As an optional implementation manner of this embodiment, as shown in fig. 3, the address matching method of the dual-domain private network provided in this embodiment may further include the following steps:

s301, receiving private network traffic which is sent by UE through network element equipment in the visited network and accesses the private network.

Network element equipment in the home network, such as home UPF, receives private network traffic sent by the UE through network element equipment in the visited network, such as converged network element UPF/GW-U. The private network traffic may be generated when the UE accesses the private network service.

S302, based on the mapping relation, the IP address of the UE corresponding to the second data network session carrying private network traffic is replaced by the first IP address, and the private network is accessed based on the private network traffic after the replacement of the IP address.

And replacing the UE IP address of the second data network session carrying private network traffic by the first IP address based on the mapping relation between the first IP address and the second IP address of the UE, so that the private network traffic can access the private network at the home location based on the second IP address.

Optionally, the public network IP address corresponding to the first data network session is replaced with the private network IP address corresponding to the second data network session based on the mapping relationship, and then private network traffic sent by the UE through the network element device in the visited network is received, and the private network is accessed based on the private network traffic after the IP address replacement.

It can be understood that the network element equipment in the home network replaces the first IP address with the second IP address based on the mapping relation, so that the UE can smoothly access the private network of the home in the visit place, and meanwhile, the UE does not influence the access of the UE to the public network of the home, and the dual-session service access in the dual-domain private network is realized.

In order to successfully establish the second data network session, in an embodiment, a second IP address in the private network may be allocated to the UE based on the target session policy, so as to refine the address replacement method of the dual-domain private network. As shown in fig. 4, the method specifically includes the following steps:

s401, receiving a second subscription data acquisition request sent by network element equipment in the visiting place network based on the target session policy.

And triggering the network element equipment in the visiting place network to send a second subscription data acquisition request to the network element equipment in the home place network based on the target session policy under the condition that the first data network session is successfully established. The target session policy is used for triggering the establishment of a second data network session for the UE to access the public network and the private network in parallel, and is issued to the network element equipment in the visiting network by the network element equipment in the home network when the first data network session is established. Specifically, the target session policy may be a dual-domain private network session policy.

Correspondingly, the network element equipment in the home network, namely the home UDM, receives the second subscription data acquisition request sent by the network element equipment in the visited network, namely the visited SMF.

S402, based on the second subscription data acquisition request, the subscription data of the second data network session is sent to the network element equipment in the visiting place network, so that the network element equipment in the visiting place network can send a second data network session establishment request.

The subscription data of the second data network session may be subscription data of a dedicated DNN session for establishing the dedicated DNN session. And under the condition that the second subscription data acquisition request is received, the network element equipment in the home network, namely the home UDM, sends subscription data of the second data network session to the network element equipment in the visiting network, namely the visiting SMF.

S403, receiving a second data network session establishment request sent by the network element equipment in the visiting place network.

And under the condition that the network element equipment in the visiting place network acquires the subscription data of the second data network session, the network element equipment in the visiting place network, namely the visiting place SMF, directly sends a second data network session establishment request to the network element equipment in the home place network, namely the home place SMF.

Accordingly, the home SMF receives the second data network session establishment request sent by the visited SMF.

S404, according to the second data network session establishment request, a second IP address corresponding to the second data network session is allocated to the UE, and the second data network session is established.

The home SMF or UPF allocates a second IP address in the private network for the UE, in other words, allocates a private network IP address for the second data network session, thereby establishing the second data network session.

In this embodiment, a second IP address in the private network is allocated to the UE through a network element device in the home network, and a second data network session is established, and specifically, the logic for establishing the second data network session is triggered based on a target session policy transferred during the establishment of the first data network session. In this way, the network element equipment in the home network can realize the IP address matching of the UE in the dual-domain private network according to the second IP address, thereby not only reducing the IP address matching difficulty and realizing the requirement of IP address tracing, but also ensuring that the UE can smoothly access the private network of the home in the visiting place.

In order to successfully establish the first data network session, in one embodiment, a first IP address in a public network may be allocated to the UE based on a target session policy, so as to refine the address replacement method of the dual-domain private network. As shown in fig. 5, the method specifically includes the following steps:

S501, receiving a first subscription data acquisition request sent by network element equipment in a visited network.

And under the condition that the network element equipment in the visiting place network receives a first data network session establishment request sent by the UE, the network element equipment in the visiting place network sends a first subscription data acquisition request to the network element equipment in the home place network. Specifically, the network element device in the visited network, i.e. the visited SMF, sends a first subscription data acquisition request to the network element device in the home network, i.e. the home UDM.

Correspondingly, the home UDM receives a first subscription data acquisition request sent by the visited SMF.

S502, based on the first subscription data acquisition request, subscription data of a first data network session is sent to network element equipment in the visiting place network so that the network element equipment in the visiting place network can establish the first data network session.

The subscription data of the first data network session may be subscription data of a generic DNN session, for establishing the generic DNN session. And under the condition that the first subscription data acquisition request is received, the network element equipment in the home network, namely the home UDM, sends subscription data of the first data network session to the network element equipment in the visiting network, namely the visiting SMF.

In an alternative embodiment, a UE subscription policy request sent by a network element device in the visited network may be received, and a subscription policy of the UE may be sent to the network element device in the visited network based on the UE subscription policy request.

Wherein the subscription policy of the UE includes a target session policy. The target session policy is used for the UE to access the public network and the private network in parallel, and the target session policy is issued by the network element equipment in the home network to the network element equipment in the visited network when the first data network session is established, and can instruct the network element equipment in the visited network to allocate the first IP address to the UE. The target session policy may be a dual domain private network session policy.

Specifically, the network element equipment in the home network, namely the home PCF, sends the subscription policy of the UE to the network element equipment in the visited network, namely the visited SMF.

The subscription policy of the UE further includes IP address indication information, where the IP address indication information is used to indicate an IP address range of the private network, and the IP address range is used to indicate that the network element device in the visited network allocates a first IP address to the UE outside the IP address range.

The IP address indication information may include information such as a private network server IP address field and a domain name of the campus, such as a second IP address. When the first data network session is established, the IP address indication information can be synchronously sent to the network element equipment in the visited network, so that when the network element equipment in the visited network is instructed to allocate the first IP address, namely the public network IP address, for the first data network session, the second IP address is bypassed, the problem that the IP address allocated by the visited place of the user conflicts with the IP address of the private network server of the park is avoided, and it is understood that if the IP addresses of the user and the park server are the same, the source and the destination of the user are the same, the flow is closed-loop, and the target user plane message cannot be smoothly transferred between the visited place and the home place.

In this embodiment, a subscription policy, such as a target session policy, and IP address indication information, of the UE is sent to a network element device in the visited network, so that the network element device in the visited network allocates a first IP address in a public network to the UE, and establishes a first data network session. In this way, the network element equipment in the home network can realize the IP address matching of the UE in the dual-domain private network according to the first IP address, thereby not only reducing the IP address matching difficulty and realizing the requirement of IP address tracing, but also ensuring that the UE can smoothly access the private network of the home in the visiting place.

In one embodiment, as shown in fig. 6, there is provided an address matching method of a dual-domain private network, applied to a network element device in a visited network, including the following steps:

s601, under the condition that the first data network session and the second data network session are successfully established, a target user plane message is sent to network element equipment in a home network.

In this embodiment, the first data network session may be established by the visited network first, and then the second data network session may be established by the home network if the first data network session is successfully established, and then the network element device in the visited network sends the target user plane message if the second data network session is successfully established, so that the network element device in the home network receives the target user plane message. Specifically, the visited UPF may send a target user plane message to the home UPF.

The target user plane message is used for indicating network element equipment in the home network to acquire a first IP address of the UE in the public network and establishing a mapping relation between the first IP address and a second IP address of the UE in the private network.

Specifically, the home UPF may establish a mapping relationship between the first IP address and the second IP address. It should be noted that, the first IP address of the UE is an IP address for accessing the public network, which is allocated to the UE by the visiting network element device in the first data network session, and the second IP address of the UE is an IP address for accessing the private network, which is allocated to the UE by the home network element device in the second data network session. In an actual application scenario, the UE only acquires the first IP address, but in the process of establishing the second data network session, the second IP address allocated to the UE is not issued to the UE, so that the UE does not have awareness of the second IP address.

S602, sending private network traffic of the UE for accessing the private network to network element equipment in the home network, triggering the network element equipment in the home network to replace an IP address of the UE corresponding to a second data network session bearing the private network traffic by the first IP address with the second IP address based on the mapping relation, and accessing the private network based on the private network traffic after the replacement of the IP address.

Network element equipment in the visiting place network, such as a fusion network element UPF/GW-U, sends private network traffic to network element equipment in the home place network, such as the home place UPF. The private network traffic may be generated when the UE accesses the private network service.

Further, the home location UPF may replace the IP address of the UE corresponding to the second data network session corresponding to the private network traffic with the second IP address based on the mapping relationship between the first IP address and the second IP address of the UE, so that the private network traffic may access the private network of the home location based on the second IP address.

Compared with the prior art, the scheme has the advantages that under the condition that the first data network session and the second data network session are successfully established, the network element equipment in the visiting place network sends the target user plane message to the network element equipment in the home place network; further, based on the target user plane message, indicating network element equipment in the home network, acquiring a first IP address of the UE corresponding to the first data network session, and establishing a mapping relation between the first IP address and a second IP address of the UE corresponding to the second data network session; wherein the first data network session is used for the user equipment UE to access the public network and the second data network session is used for the UE to access the private network. In this way, the network element equipment in the home network can identify the first IP address, the difficulty of matching the IP address of the UE in the dual-domain private network is reduced, the requirement of tracing the IP address is met, the UE can smoothly access the private network of the home in the visit place, the public network of the visit place is not influenced, and the dual-session service access in the dual-domain private network is realized.

In order to successfully establish the second data network session, in an embodiment, a second IP address in the private network may be allocated to the UE based on the target session policy, so as to refine the address replacement method of the dual-domain private network. As shown in fig. 7, the method specifically includes the following steps:

s701, sending a second subscription data acquisition request to network element equipment in the home network according to the target session policy.

And triggering the network element equipment in the visiting place network to send a second subscription data acquisition request to the network element equipment in the home place network based on the target session policy under the condition that the first data network session is successfully established. Wherein the target session policy is used to trigger establishment of a second data network session for concurrent access by the UE to the public network and the private network. The target session policy is issued by the network element device in the home network to the network element device in the visited network when the first data network session is established, and may instruct the network element device in the visited network to allocate a first IP address to the UE. Specifically, the target session policy may be a dual-domain private network session policy.

The network element equipment in the visited place network, namely the visited place SMF, sends a second subscription data acquisition request to the network element equipment in the home place network, namely the home place UDM. The second subscription data acquisition request is used for indicating the network element equipment in the home network to send the subscription data of the second data network session so that the network element equipment in the visiting network can send the second data network session establishment request.

S702, receiving the second subscription data and sending a second data network session establishment request to network element equipment in the home network.

The subscription data of the second data network session may be subscription data of a dedicated DNN session for establishing the dedicated DNN session. The network element equipment in the visiting place network, namely the visiting place SMF, receives the subscription data of the second data network session sent by the network element equipment in the home place network, namely the home place UDM, and further directly sends a second data network session establishment request to the network element equipment in the home place network, namely the home place SMF.

The second data network session establishment request is used for indicating the network element equipment in the home network to allocate a second IP address corresponding to the second data network session for the UE, and establishing the second data network session. Specifically, the home SMF or UPF allocates a second IP address in the private network to the UE, in other words, allocates a private network IP address to the second data network session, thereby establishing the second data network session.

The logic for establishing the second data network session is triggered based on the target session policy transferred in the first data network session establishment process, and the second data network session establishment request is sent to the network element equipment in the home network to instruct the network element equipment in the home network to allocate the unaware second IP address to the UE, so that the IP address matching of the UE in the dual-domain private network can be realized according to the second IP address, the IP address matching difficulty is reduced, the requirement of IP address tracing is realized, and the UE can smoothly access the private network of the home in the visiting place.

In order to successfully establish the first data network session, in one embodiment, a first IP address in a public network may be allocated to the UE based on a target session policy, so as to refine the address replacement method of the dual-domain private network. As shown in fig. 8, the method specifically includes the following steps:

s801, sending a UE subscription policy request and a first subscription data acquisition request to network element equipment in a home network.

Under the condition that network element equipment in a visiting place network receives a first data network session establishment request sent by UE, visiting place AMF or MME selects visiting place SMF according to the position of the UE, supported network slices, DNAI (Data Network Access Identifier ) and other information, the visiting place SMF sends a first subscription data acquisition request to a home place UDM and sends a UE subscription policy request to a home place PCF.

It should be noted that, the UE subscription policy request and the first subscription data acquisition request may be sent sequentially, which is not limited in this embodiment.

S802, receiving subscription data of a first data network session sent by network element equipment in a home network based on a first subscription data acquisition request.

The subscription data of the first data network session may be subscription data of a generic DNN session, for establishing the generic DNN session. The network element equipment in the home network, namely the home UDM, sends subscription data of the first data network session to the network element equipment in the visited network, namely the visited SMF.

Optionally, the first subscription data acquisition request is used for indicating the network element equipment in the home network to send the subscription data of the first data network session, and the UE subscription policy request is used for indicating the network element equipment in the home network to send the subscription policy of the UE.

Wherein the subscription policy of the UE includes a target session policy. The target session policy is used for triggering the establishment of a second data network session for the UE to access the public network and the private network in parallel, and the target session policy is issued to the network element equipment in the visiting network by the network element equipment in the home network when the first data network session is established. Specifically, the target session policy may be a dual-domain private network session policy. The network element equipment in the home network, namely the home PCF, sends the subscription policy of the UE to the network element equipment in the visiting network, namely the visiting SMF.

S803, the first data network session is established according to the subscription data of the first data network session.

And distributing a first IP address for the UE according to the subscription strategy of the UE, so as to establish a first data network session according to subscription data of the first data network session. The subscription policy of the UE further includes IP address indication information, where the IP address indication information is used to indicate an IP address range of the private network, and the IP address range is used to indicate a network element device in the visited network to allocate a first IP address to the UE outside the IP address range.

For example, the IP address indication information may include private network server IP address field and domain name of the campus, such as the second IP address. When the network element equipment in the visiting place network, namely SMF or UPF/GW-U, allocates a first IP address for the first data network session, namely the public network IP address, the second IP address is bypassed, so that the problem of conflict between the IP address allocated by the visiting place of the user and the IP address of the private network server of the park is avoided.

In this embodiment, the network element device in the visited network allocates a first IP address in the public network to the UE based on the subscription policy of the UE, such as the target session policy and the IP address indication information, and establishes a first data network session. In this way, the network element equipment in the home network can realize the IP address matching of the UE in the dual-domain private network according to the first IP address, thereby not only reducing the IP address matching difficulty and realizing the requirement of IP address tracing, but also ensuring that the UE can smoothly access the private network of the home in the visiting place.

In one embodiment, as shown in fig. 9, an alternative example of an address matching method for a dual domain private network is provided. The specific process is as follows:

in a first step, the UE initiates a generic DNN session establishment request at a visited place through the RAN (Radio Access Network ).

And a second step, the visiting place AMF or MME selects the visiting place SMF and starts the general DNN session establishment.

And thirdly, the SMF at the visiting place acquires the subscription data of the universal DNN session from the UDM at the home place and acquires the subscription policy of the UE from the PCF at the home place. The subscription policy of the UE comprises a dual-domain private network session policy, a private DNN and park IP address related information.

And fourthly, the visiting place SMF or UPF/GW-U distributes a first IP address for the universal DNN session according to the subscription strategy of the UE issued by the PCF.

And fifthly, the AME or the MME issues the first IP address to the UE, and the universal DNN session is established successfully. Therefore, the public network traffic can directly access the local public network through the visiting place UPF/GW-U.

And sixthly, triggering the visited place SMF to acquire the subscription information of the special DNN session from the home place UDM according to the double-domain private network session strategy issued by the PCF, and directly initiating the special DNN session establishment to the home place SMF.

Seventh step, the home SMF or UPF allocates a second IP address for the special DNN session.

And eighth step, the visiting place UPF uses the first IP address corresponding to the universal DNN session to send the specific data packet to the attribution place UPF.

And a ninth step, the attribution UPF establishes a mapping relation between a first IP address corresponding to the universal DNN session and a second IP address corresponding to the special DNN session.

And tenth step, private network flow can flow to the attribution UPF through the visit place UPF/GW-U so that the attribution UPF can replace the IP address by utilizing the mapping relation of the two IP addresses, and the private network flow can access the enterprise private network after the IP address is replaced.

The specific process of the above steps may refer to the description of the above method embodiments, and its implementation principle and technical effects are similar, and are not repeated herein.

It should be understood that, although the steps in the flowcharts related to the embodiments described above are sequentially shown as indicated by arrows, these steps are not necessarily sequentially performed in the order indicated by the arrows. The steps are not strictly limited to the order of execution unless explicitly recited herein, and the steps may be executed in other orders. Moreover, at least some of the steps in the flowcharts described in the above embodiments may include a plurality of steps or a plurality of stages, which are not necessarily performed at the same time, but may be performed at different times, and the order of the steps or stages is not necessarily performed sequentially, but may be performed alternately or alternately with at least some of the other steps or stages.

Based on the same inventive concept, the embodiment of the application also provides an address matching device of the dual-domain private network for realizing the address matching method of the dual-domain private network. The implementation of the solution provided by the device is similar to the implementation described in the above method, so the specific limitation in the embodiments of the address matching device for one or more dual-domain private networks provided below may be referred to the limitation of the address matching method for the dual-domain private network hereinabove, and will not be repeated herein.

In one embodiment, as shown in fig. 10, there is provided an address matching device 1 of a dual-domain private network, including: a receiving module 10, an acquiring module 20 and an establishing module 30, wherein:

and the receiving module 10 is configured to receive a target user plane message sent by a network element device in the visited network, where the first data network session and the second data network session are successfully established.

The first data network session is for the user equipment UE to access the public network and the second data network session is for the UE to access the private network.

And the acquiring module 20 is configured to acquire, according to the target user plane message, a first IP address of the UE corresponding to the first data network session.

And the establishing module 30 is configured to establish a mapping relationship between the first IP address and a second IP address of the UE corresponding to the second data network session.

In one embodiment, the address matching device 1 of the dual-domain private network may further include:

and the flow receiving module is used for receiving private network flow which is sent by the UE through network element equipment in the visited network and is used for accessing the private network.

And the address replacement module is used for replacing the IP address of the UE corresponding to the second data network session carrying the private network traffic by the first IP address based on the mapping relation, and accessing the private network based on the private network traffic after the IP address replacement.

and the first request receiving module is used for receiving a second data network session establishment request sent by the network element equipment in the visiting place network.

And the address allocation module is used for allocating a second IP address corresponding to the second data network session to the UE according to the second data network session establishment request and establishing the second data network session.

and the second request receiving module is used for receiving a second subscription data acquisition request sent by the network element equipment in the visiting place network based on the target session policy.

The target session policy is used to trigger establishment of a second data network session for concurrent access by the UE to the public network and the private network.

And the second data sending module is used for sending the subscription data of the second data network session to the network element equipment in the visiting place network based on the second subscription data acquisition request so as to send a second data network session establishment request to the network element equipment in the visiting place network.

and the third request receiving module is used for receiving the UE subscription policy request sent by the network element equipment in the visiting place network.

And the policy sending module is used for sending the signing policy of the UE to the network element equipment in the visiting place network based on the signing policy request of the UE.

The subscription policy of the UE comprises a target session policy, wherein the target session policy is used for indicating network element equipment in the visited network to allocate a first IP address for the UE. The subscription policy of the UE further includes IP address indication information, where the IP address indication information is used to indicate an IP address range of the private network, and the IP address range is used to indicate that the network element device in the visited network allocates a first IP address to the UE outside the IP address range.

and the fourth request receiving module is used for receiving the first subscription data acquisition request sent by the network element equipment in the visiting place network.

The first data sending module is used for sending the subscription data of the first data network session to the network element equipment in the visiting place network based on the first subscription data acquisition request so as to enable the network element equipment in the visiting place network to establish the first data network session.

In one embodiment, as shown in fig. 11, there is provided an address matching device 2 of a dual-domain private network, including: a transmitting module 10 and a triggering module 20, wherein:

a sending module 10, configured to send a target user plane message to a network element device in the home network in case the first data network session and the second data network session are successfully established.

The first data network session is used for the User Equipment (UE) to access the public network, and the second data network session is used for the UE to access the private network; the target user plane message is used for indicating network element equipment in the home network to acquire a first IP address of the UE corresponding to the first data network session, and establishing a mapping relation between the first IP address and a second IP address of the UE corresponding to the second data network session.

The triggering module 20 is configured to send private network traffic for accessing the private network by the UE to a network element device in the home network, so as to trigger the network element device in the home network to replace an IP address of the UE corresponding to the second data network session carrying the private network traffic with the first IP address based on the mapping relationship, and access the private network based on the private network traffic after the replacement of the IP address.

In one embodiment, the address matching device 2 of the dual-domain private network may further include:

a first request sending module, configured to send a second data network session establishment request to a network element device in the home network.

and the second request sending module is used for sending a second subscription data acquisition request to network element equipment in the home network according to the target session policy.

The target session policy is used for triggering the establishment of a second data network session for the UE to access the public network and the private network in parallel; the second subscription data acquisition request is used for indicating the network element equipment in the home network to send the subscription data of the second data network session so that the network element equipment in the visiting network can send the second data network session establishment request.

and the third request sending module is used for sending the first subscription data acquisition request to network element equipment in the home network.

The method comprises the steps that a UE subscription policy request is used for indicating network element equipment in a home network to send a subscription policy of the UE, and a first subscription data acquisition request is used for indicating the network element equipment in the home network to send subscription data of a first data network session; the subscription policy of the UE comprises a target session policy, wherein the target session policy is used for indicating network element equipment in the visited network to allocate a first IP address for the UE.

and the address allocation module is used for allocating a first IP address to the UE outside the IP address range.

The subscription policy of the UE further includes IP address indication information for indicating an IP address range of the private network.

the data receiving module is used for receiving the subscription data of the first data network session sent by the network element equipment in the home network based on the first subscription data acquisition request.

And the session establishment module is used for establishing the first data network session according to the subscription data of the first data network session.

The above-mentioned each module in the address matching device of the dual-domain private network may be implemented in whole or in part by software, hardware, and combinations thereof. The above modules may be embedded in hardware or may be independent of a processor in the computer device, or may be stored in software in a memory in the computer device, so that the processor may call and execute operations corresponding to the above modules.

In one embodiment, a communication device is provided that includes a transmitter, a receiver, a processor, and a memory storing a computer program. Wherein the processor of the communication device is adapted to provide computing and control capabilities, the steps of the above-described method embodiments being implemented when the processor executes a computer program. The memory of the communication device includes a non-volatile storage medium and an internal memory. The non-volatile storage medium stores an operating system, computer programs, and a database. The internal memory provides an environment for the operation of the operating system and computer programs in the non-volatile storage media. The network interface of the communication device is used for communicating with an external terminal through a network connection.

In one embodiment, a communication device is provided that includes a transmitter, a receiver, a processor, and a memory, the memory storing a computer program; the receiver is used for receiving a target user plane message sent by network element equipment in the visiting area network under the condition that the first data network session and the second data network session are successfully established; the first data network session is used for the User Equipment (UE) to access the public network, and the second data network session is used for the UE to access the private network; the processor executes the computer program to obtain a first IP address of the UE corresponding to the first data network session according to the target user plane message, and establish a mapping relationship between the first IP address and a second IP address of the UE corresponding to the second data network session.

In one embodiment, a communication device is provided that includes a transmitter, a receiver, a processor, and a memory, the memory storing a computer program; the sender is used for sending a target user plane message to network element equipment in the home network under the condition that the first data network session and the second data network session are successfully established; the first data network session is used for the User Equipment (UE) to access the public network, and the second data network session is used for the UE to access the private network; the target user plane message is used for indicating network element equipment in the home network to acquire a first IP address of the UE corresponding to the first data network session, and establishing a mapping relation between the first IP address and a second IP address of the UE corresponding to the second data network session.

In one embodiment, a computer readable storage medium is provided, on which a computer program is stored, which when executed by a processor implements the steps of the address matching method of the two-domain private network described above.

In one embodiment, a computer program product is provided comprising a computer program which, when executed by a processor, implements the steps of the address matching method of a two-domain private network described above.

Those skilled in the art will appreciate that implementing all or part of the above described methods may be accomplished by way of a computer program stored on a non-transitory computer readable storage medium, which when executed, may comprise the steps of the embodiments of the methods described above. Any reference to memory, database, or other medium used in embodiments provided herein may include at least one of non-volatile and volatile memory. The nonvolatile Memory may include Read-Only Memory (ROM), magnetic tape, floppy disk, flash Memory, optical Memory, high density embedded nonvolatile Memory, resistive random access Memory (ReRAM), magnetic random access Memory (Magnetoresistive Random Access Memory, MRAM), ferroelectric Memory (Ferroelectric Random Access Memory, FRAM), phase change Memory (Phase Change Memory, PCM), graphene Memory, and the like. Volatile memory can include random access memory (Random Access Memory, RAM) or external cache memory, and the like. By way of illustration, and not limitation, RAM can be in the form of a variety of forms, such as static random access memory (Static Random Access Memory, SRAM) or dynamic random access memory (Dynamic Random Access Memory, DRAM), and the like. The databases referred to in the embodiments provided herein may include at least one of a relational database and a non-relational database. The non-relational database may include, but is not limited to, a blockchain-based distributed database, and the like. The processor referred to in the embodiments provided in the present application may be a general-purpose processor, a central processing unit, a graphics processor, a digital signal processor, a programmable logic unit, a data processing logic unit based on quantum computing, or the like, but is not limited thereto.

The technical features of the above embodiments may be arbitrarily combined, and all possible combinations of the technical features in the above embodiments are not described for brevity of description, however, as long as there is no contradiction between the combinations of the technical features, they should be considered as the scope of the description.

The foregoing examples illustrate only a few embodiments of the application and are described in detail herein without thereby limiting the scope of the application. It should be noted that it will be apparent to those skilled in the art that several variations and modifications can be made without departing from the spirit of the application, which are all within the scope of the application. Accordingly, the scope of the application should be assessed as that of the appended claims.

Claims

1. An address matching method of a dual-domain private network, applied to network element equipment in a home network, is characterized by comprising the following steps:

receiving a target user plane message sent by network element equipment in a visiting area network under the condition that a first data network session and a second data network session are successfully established; the first data network session is used for the User Equipment (UE) to access a public network, and the second data network session is used for the UE to access a private network;

2. The method according to claim 1, wherein the method further comprises:

receiving private network traffic which is sent by the UE through network element equipment in the visiting place network and used for accessing the private network;

and based on the mapping relation, replacing the IP address of the UE corresponding to the second data network session carrying the private network traffic by the first IP address, and accessing the private network based on the private network traffic after the replacement of the IP address.

3. The method according to claim 1, wherein, in case of successful establishment of the first data network session and the second data network session, before receiving the target user plane message sent by the network element device in the visited network, the method further comprises:

receiving a second data network session establishment request sent by network element equipment in the visiting place network;

and distributing the second IP address corresponding to the second data network session to the UE according to the second data network session establishment request, and establishing the second data network session.

4. A method according to claim 3, wherein prior to receiving the second data network session establishment request sent by the network element device in the visited network, the method further comprises:

receiving a second subscription data acquisition request sent by network element equipment in the visiting place network based on a target session policy; the target session policy is used for triggering the establishment of the second data network session for the UE to access the public network and the private network in parallel;

and sending the subscription data of the second data network session to the network element equipment in the visiting place network based on the second subscription data acquisition request so that the network element equipment in the visiting place network can send the second data network session establishment request.

5. The method of claim 4, wherein prior to receiving the second subscription data acquisition request sent by the network element device in the visited network based on the target session policy, the method further comprises:

receiving a UE subscription policy request sent by network element equipment in the visiting place network;

based on the UE subscription policy request, sending the subscription policy of the UE to network element equipment in the visiting place network; the subscription policy of the UE includes the target session policy, where the target session policy is used to instruct a network element device in the visited network to allocate the first IP address to the UE.

6. The method of claim 5, wherein the subscription policy of the UE further comprises IP address indication information, the IP address indication information being used to indicate an IP address range of the private network, the IP address range being used to indicate that a network element device in the visited network assigns the first IP address to the UE outside the IP address range.

7. The method of claim 5, wherein the method further comprises:

receiving a first subscription data acquisition request sent by network element equipment in the visiting place network;

8. The address matching method of the dual-domain private network is applied to network element equipment in a visiting place network and is characterized by comprising the following steps:

under the condition of successfully establishing the first data network session and the second data network session, sending a target user plane message to network element equipment in a home network; the first data network session is used for the User Equipment (UE) to access a public network, and the second data network session is used for the UE to access a private network;

9. The method of claim 8, wherein the method further comprises:

and sending private network traffic of the UE for accessing the private network to network element equipment in the home network, so as to trigger the network element equipment in the home network to replace the IP address of the UE corresponding to the second data network session carrying the private network traffic by the first IP address with the second IP address based on the mapping relation, and accessing the private network based on the private network traffic after the IP address replacement.

10. The method of claim 8, wherein the method further comprises, in the event that the first data network session and the second data network session are successfully established, prior to sending the target user plane message to the network element device in the home network:

The second data network session establishment request is used for indicating network element equipment in the home network to allocate the second IP address corresponding to the second data network session for the UE, and establishing the second data network session.

11. The method of claim 10, wherein prior to sending the second data network session establishment request to the network element device in the home network, the method further comprises:

sending a second subscription data acquisition request to network element equipment in the home network according to a target session policy; the target session policy is used for triggering the establishment of the second data network session for the UE to access the public network and the private network in parallel;

the second subscription data obtaining request is used for indicating the network element equipment in the home network to send the subscription data of the second data network session, so that the network element equipment in the visiting network can send the second data network session establishment request.

12. The method of claim 11, wherein before the sending the second subscription data acquisition request to the network element device in the home network according to the target session policy, the method further comprises:

Sending a UE subscription policy request and a first subscription data acquisition request to network element equipment in the home network;

the UE subscription policy request is used for indicating a network element device in the home network to send a subscription policy of the UE, and the first subscription data acquisition request is used for indicating the network element device in the home network to send subscription data of the first data network session; the subscription policy of the UE includes a target session policy, where the target session policy is used to instruct a network element device in the visited network to allocate the first IP address to the UE.

13. The method of claim 12, wherein the subscription policy of the UE further comprises IP address indication information, the IP address indication information being used to indicate an IP address range of the private network, the method further comprising:

the UE is assigned the first IP address outside the IP address range.

14. The method according to claim 12, wherein the method further comprises:

receiving subscription data of a first data network session sent by network element equipment in the home network based on the first subscription data acquisition request;

15. An address matching device for a dual-domain private network, comprising:

a receiving module, configured to receive a target user plane message sent by a network element device in a visited network, where the first data network session and the second data network session are successfully established; the first data network session is used for the User Equipment (UE) to access a public network, and the second data network session is used for the UE to access a private network;

an obtaining module, configured to obtain a first IP address of the UE corresponding to the first data network session according to the target user plane message;

and the establishing module is used for establishing a mapping relation between the first IP address and the second IP address of the UE corresponding to the second data network session.

16. An address matching device for a dual-domain private network, comprising:

a sending module, configured to send a target user plane message to a network element device in a home network when the first data network session and the second data network session are successfully established; the first data network session is used for the User Equipment (UE) to access a public network, and the second data network session is used for the UE to access a private network;

17. A communication device, comprising: a transmitter, a receiver, a processor and a memory, the memory storing a computer program;

the receiver is configured to receive a target user plane message sent by a network element device in a visited network, where the first data network session and the second data network session are successfully established; the first data network session is used for the User Equipment (UE) to access a public network, and the second data network session is used for the UE to access a private network;

the processor executes the computer program, and is configured to obtain a first IP address of the UE corresponding to the first data network session according to the target user plane message, and establish a mapping relationship between the first IP address and a second IP address of the UE corresponding to the second data network session.

18. A communication device, comprising: a transmitter, a receiver, a processor and a memory, the memory storing a computer program;

The transmitter is configured to send a target user plane message to a network element device in the home network in case that the first data network session and the second data network session are successfully established; the first data network session is used for the User Equipment (UE) to access a public network, and the second data network session is used for the UE to access a private network;

19. A computer readable storage medium, on which a computer program is stored, characterized in that the computer program, when being executed by a processor, implements the steps of the method of any of claims 1 to 14.

20. A computer program product comprising a computer program, characterized in that the computer program, when being executed by a processor, implements the steps of the method of any one of claims 1 to 14.