CN116938754A

CN116938754A - Network terminal identification method and related equipment

Info

Publication number: CN116938754A
Application number: CN202210334383.0A
Authority: CN
Inventors: 陆利锋
Original assignee: Huawei Technologies Co Ltd
Current assignee: Huawei Technologies Co Ltd
Priority date: 2022-03-31
Filing date: 2022-03-31
Publication date: 2023-10-24

Abstract

The embodiment of the application discloses a network terminal identification method and related equipment, which are used for determining terminal equipment for sending a message. The method of the embodiment of the application comprises the following steps: the terminal access device receives messages of at least two terminal devices, wherein the at least two terminal devices comprise a first terminal device and a second terminal device. The terminal access device inserts a first terminal identifier of the first terminal device and a second terminal identifier of the second terminal device into a first message sent by the first terminal device and a second message sent by the second terminal device respectively. The terminal access device sends the first message and the second message to the upstream network device, so that the upstream network device determines flow information corresponding to the first terminal device and the second terminal device according to the first message and the second message.

Description

Network terminal identification method and related equipment

Technical Field

The embodiment of the application relates to the field of signal processing, in particular to a network terminal identification method and related equipment.

Background

In a fixed network, the network appeal of different types of terminals is not exactly the same. For example: mobile terminals such as mobile phones and tablet computers require that network signals can be fully covered; fixed terminals such as televisions and the like require a network bandwidth to be large enough; the camera equipment such as the network camera has higher requirements on privacy security. However, because of the existence of the terminal access devices such as the home gateway, the network upstream device cannot distinguish the messages of different terminals, so that the most suitable network service cannot be provided for different terminal devices.

In the method for distinguishing different terminals, the upstream network equipment analyzes the message sent by the terminal equipment to acquire the terminal model information of the terminal equipment. And under the same home network, the upstream network equipment determines that the messages with the same terminal model are the messages sent by the same terminal.

In the existing method for determining terminal equipment according to a message, the upstream network equipment only supports determining the terminal type for sending the message according to the message, and different terminals with the same type cannot be distinguished according to the message.

Disclosure of Invention

The embodiment of the application provides a network terminal identification method and related equipment, which are used for accurately determining terminal equipment for sending a message.

The first aspect of the embodiment of the application provides a network terminal identification method, which is applied to a fixed network system, wherein the fixed network system comprises a plurality of terminal devices, a plurality of terminal access devices and upstream network devices. The method comprises the following steps: the terminal access device receives messages of at least two terminal devices, wherein the at least two terminal devices comprise a first terminal device and a second terminal device. The terminal access device inserts a first terminal identifier of the first terminal device and a second terminal identifier of the second terminal device into a first message sent by the first terminal device and a second message sent by the second terminal device respectively. The terminal access device sends the first message and the second message to the upstream network device, so that the upstream network device determines flow information corresponding to the first terminal device and the second terminal device according to the first message and the second message.

In the possible implementation manner, the terminal access device inserts the terminal identifier of the terminal device into the corresponding message, so that the upstream network device can accurately determine the terminal device for sending the message according to the received message; on the other hand, the stream following detection of the terminal equipment is realized.

In a possible implementation manner of the first aspect, in the terminal access device, the first terminal identifier of the first terminal device and the second terminal identifier of the second terminal device are respectively inserted into a first packet sent by the first terminal device and a second packet sent by the second terminal device, where the method further includes: the terminal access device determines a first terminal identity and a second terminal identity.

In a possible implementation manner of the first aspect, the determining, by the terminal access device, the first terminal identifier and the second terminal identifier includes: the terminal access device determines a first terminal identifier and a second terminal identifier through a hash algorithm according to the MAC address of the first terminal device and the MAC address of the second terminal device respectively.

In the possible implementation manner, the terminal access device determines the terminal identifier through the hash algorithm according to the multiple MAC addresses of the terminal device, so that the terminal device can be determined uniquely according to the terminal identifier, and the MAC address of the terminal cannot be determined reversely according to the terminal identifier due to the irreversible characteristic of the hash algorithm, and the safety performance of a network system for transmitting messages is enhanced.

In a possible implementation manner of the first aspect, the first packet and the second packet are a first IPv4 packet and a second IPv4 packet, where the first IPv4 packet and the second IPv4 packet include terminal identifier options, and the terminal access device inserts, into the first packet sent by the first terminal device and the second packet sent by the second terminal device, a first terminal identifier of the first terminal device and a second terminal identifier of the second terminal device, respectively, where the method includes: the terminal access device inserts a first terminal identifier of the first terminal device and a second terminal identifier of the second terminal device into terminal identifier options of a first IPv4 message sent by the first terminal device and a second IPv4 message sent by the second terminal device respectively.

In a possible implementation manner of the first aspect, the first packet and the second packet are a first IPv6 packet and a second IPv6 packet, where the first IPv6 packet and the second IPv6 packet include a terminal identifier extension header, and the terminal access device inserts, respectively, a first terminal identifier of the first terminal device and a second terminal identifier of the second terminal device into the first packet sent by the first terminal device and the second packet sent by the second terminal device, where the method includes: the terminal access device inserts the first terminal identifier of the first terminal device and the second terminal identifier of the second terminal device into the terminal identifier extension header of the first IPv6 message and the second IPv6 message respectively.

In a possible implementation manner of the first aspect, the first packet and the second packet are a first transmission control protocol TCP packet and a second TCP packet, where the first TCP packet and the second TCP packet include terminal identification options, and the terminal access device inserts a first terminal identification of the first terminal device and a second terminal identification of the second terminal device into the first packet sent by the first terminal device and the second packet sent by the second terminal device, respectively, and the method includes: the terminal access device inserts a first terminal identifier of the first terminal device and a second terminal identifier of the second terminal device into terminal identifier options of a first TCP message sent by the first terminal device and a second TCP message sent by the second terminal device respectively.

In a possible implementation manner of the first aspect, the first packet and the second packet are a first TCP SYN packet and a second TCP SYN packet that are synchronized by a first transmission control protocol, where the first TCP packet and the second TCP packet include terminal identification options, and the terminal access device inserts a first terminal identification of the first terminal device and a second terminal identification of the second terminal device into the first packet sent by the first terminal device and the second packet sent by the second terminal device, respectively, and the method includes: the terminal access device inserts the first terminal identifier of the first terminal device and the second terminal identifier of the second terminal device into terminal identifier options of the first TCP SYN message and the second TCP SYN message, and does not insert the terminal identifier into a message transmitted by the same link of the first TCP SYN message and the second TCP SYN message.

In the possible implementation manner, the characteristics of the TCP SYN message are synchronized according to the transmission control protocol, namely, the message transmitted by the same link is the message transmitted by the same terminal equipment, the TCP SYN message is inserted, and the terminal identification is not inserted into the message transmitted by the same link, so that the size of the network transmission message is reduced, and network resources are saved.

A second aspect of an embodiment of the present application provides a network terminal identification method, which is applied to a fixed network system, where the fixed network system includes a plurality of terminal devices, a plurality of terminal access devices, and an upstream network device. The method comprises the following steps: the upstream network equipment receives a plurality of messages respectively sent by the terminal access equipment, wherein the messages comprise a first message and a second message, and the messages carry a plurality of terminal identifiers of a plurality of corresponding terminal equipment; the upstream network equipment determines that a plurality of messages carrying the same terminal identifier in a plurality of messages are messages sent by the same terminal equipment; and the upstream network equipment determines flow information of a plurality of corresponding terminal equipment according to the plurality of messages sent by the same terminal equipment.

In this possible implementation manner, the terminal access device inserts a plurality of terminal identifiers of a plurality of terminal devices into a plurality of corresponding messages, so that the upstream network device can accurately determine the terminal device sending the message according to the received message; on the other hand, the stream following detection of the terminal equipment is realized.

In a possible implementation manner of the second aspect, the plurality of messages include a tcp syn-chronization tcp syn message, and the method further includes: the upstream network equipment determines that the messages transmitted by the same link of the plurality of messages and the TCPSYN message are messages sent by the same terminal equipment.

A third aspect of the present application provides a terminal access device having functionality to implement the method of the first aspect or any one of the possible implementations of the first aspect. The functions can be realized by hardware, and can also be realized by executing corresponding software by hardware. The hardware or software includes one or more modules corresponding to the functions described above, such as: and a transmitting module.

A fourth aspect of the application provides an upstream network device having functionality to implement the method of the second aspect or any one of the possible implementations of the second aspect. The functions can be realized by hardware, and can also be realized by executing corresponding software by hardware. The hardware or software includes one or more modules corresponding to the functions described above, such as: and a receiving module.

A fifth aspect of the present application provides a terminal access device comprising at least one processor, a memory, an input/output (I/O) interface and computer-executable instructions stored in the memory and executable on the processor, the processor performing the method according to the first aspect or any one of the possible implementations of the first aspect when the computer-executable instructions are executed by the processor.

A sixth aspect of the present application provides an upstream network device comprising at least one processor, a memory, an input/output (I/O) interface and computer-executable instructions stored in the memory and executable on the processor, the processor performing the method according to the second aspect or any one of the possible implementations of the second aspect when the computer-executable instructions are executed by the processor.

A seventh aspect of the application provides a computer readable storage medium storing one or more computer executable instructions which, when executed by a processor, perform a method as described above or any one of the possible implementations of the first aspect.

An eighth aspect of the application provides a computer readable storage medium storing one or more computer executable instructions which, when executed by a processor, perform a method as described above in the second aspect or any one of the possible implementations of the second aspect.

A ninth aspect of the application provides a computer program product storing one or more computer-executable instructions which, when executed by a processor, perform a method as described above or any one of the possible implementations of the first aspect.

A tenth aspect of the application provides a computer program product storing one or more computer-executable instructions which, when executed by a processor, perform a method as described above in the second aspect or any one of the possible implementations of the second aspect.

An eleventh aspect of the present application provides a chip system comprising at least one processor for implementing the functions referred to in the first aspect or any one of the possible implementations of the first aspect. In one possible design, the chip system may further include memory to hold program instructions and data necessary for the apparatus to process the artificial intelligence model. The chip system can be composed of chips, and can also comprise chips and other discrete devices.

A twelfth aspect of the application provides a chip system comprising at least one processor for implementing the functions involved in the second aspect or any one of the possible implementations of the second aspect. In one possible design, the chip system may further include memory to hold program instructions and data necessary for the apparatus to process the artificial intelligence model. The chip system can be composed of chips, and can also comprise chips and other discrete devices.

From the above technical solutions, the embodiment of the present application has the following advantages:

in the embodiment of the application, the terminal access device inserts a plurality of terminal identifiers of a plurality of terminal devices into a plurality of corresponding messages, so that the upstream network device can accurately determine the terminal device for sending the message according to the received message; on the other hand, the stream following detection of the terminal equipment is realized.

Drawings

Fig. 1 is a schematic view of a scenario of a conventional network terminal identification method;

fig. 2 is a schematic diagram of a scenario of a network terminal identification method according to an embodiment of the present application;

fig. 3 is a signaling flow chart of a network terminal identification method in an embodiment of the application;

fig. 4 is a schematic diagram of a scenario of a network terminal identification method according to an embodiment of the present application;

fig. 5 is a schematic structural diagram of a terminal access device according to an embodiment of the present application;

fig. 6 is a schematic structural diagram of an upstream network device according to an embodiment of the present application;

fig. 7 is another schematic structural diagram of a terminal access device according to an embodiment of the present application;

fig. 8 is a schematic diagram of another structure of an upstream network device according to an embodiment of the present application;

fig. 9 is a schematic structural diagram of a fixed network system according to an embodiment of the present application.

Detailed Description

The embodiment of the application provides a network terminal identification method and related equipment, which are used for determining terminal equipment for sending a message.

Embodiments of the present application will now be described with reference to the accompanying drawings, in which it is evident that the embodiments described are only some, but not all embodiments of the present application. As one of ordinary skill in the art can know, with the development of technology and the appearance of new scenes, the technical scheme provided by the embodiment of the application is also applicable to similar technical problems.

The terms first, second and the like in the description and in the claims and in the above-described figures, are used for distinguishing between similar elements and not necessarily for describing a particular sequential or chronological order. It is to be understood that the data so used may be interchanged where appropriate such that the embodiments described herein may be implemented in other sequences than those illustrated or otherwise described herein. Furthermore, the terms "comprises," "comprising," and "having," and any variations thereof, are intended to cover a non-exclusive inclusion, such that a process, method, system, article, or apparatus that comprises a list of steps or elements is not necessarily limited to those steps or elements expressly listed but may include other steps or elements not expressly listed or inherent to such process, method, article, or apparatus.

As shown in fig. 1, in a fixed network, the requirements of different types of terminals on the network are not exactly the same. For example: mobile terminals such as mobile phones and tablet computers require that network signals can be fully covered; fixed terminals such as televisions and the like require a network bandwidth to be large enough; the camera equipment such as the network camera has higher requirements on privacy security. However, because of the existence of the terminal access devices such as the home gateway, the network upstream device cannot distinguish the messages of different terminals, so that the most suitable network service cannot be provided for different terminal devices. In the method for distinguishing different terminals, the upstream network equipment analyzes the message sent by the terminal equipment to acquire the terminal model information of the terminal equipment. And under the same home network, the upstream network equipment determines that the messages with the same terminal model are the messages sent by the same terminal.

As shown in fig. 2, an embodiment of the present application provides a network terminal identification method, which is applicable to a fixed network system including a plurality of terminal devices, a plurality of terminal access devices, and an upstream network device. The terminal equipment comprises mobile phones, computers, household cameras and other terminal equipment. The terminal Access device includes an Access Point (AP) and an optical network terminal (Optical Network Terminal, ONT), etc. The upstream network devices include upstream network devices such as an optical line terminal (Optical Line Termination, OLT), a broadband remote access server (Broadband Remote Access Server, BRAS), a Core Router (CR), a network clouding engine (Network Cloud Engine, NCE), and the like. The method comprises the following steps: the terminal access device receives messages of at least two terminal devices, wherein the at least two terminal devices comprise a first terminal device and a second terminal device. The terminal access device inserts a first terminal identifier of the first terminal device and a second terminal identifier of the second terminal device into a first message sent by the first terminal device and a second message sent by the second terminal device respectively. The terminal access device sends the first message and the second message to the upstream network device, so that the upstream network device determines flow information corresponding to the first terminal device and the second terminal device according to the first message and the second message.

In the embodiment of the application, the related terminal access equipment is a device which is deployed in an access network and provides a communication function for the terminal equipment. Terminal access devices may include various forms of macro base stations, micro base stations, i.e., small stations, relay stations, access points, and the like. In systems employing different radio Access technologies, the names of terminal Access devices may vary, such as base transceiver stations (Base Transceiver Station, BTS) in global system for mobile communications (Global System for Mobile Communication, GSM) or code division multiple Access (Code Division Multiple Access, CDMA) networks, NB (NodeB) in wideband code division multiple Access (Wideband Code Division Multiple Access, WCDMA), eNB or eNodeB (Evolutional NodeB) in long term evolution (Long Term Evolution, LTE), access Points (APs) and optical network terminals (Optical Network Terminal, ONTs). The terminal access device may also be a wireless controller in the context of a cloud wireless access network (Cloud Radio Access Network, CRAN).

In the embodiment of the present application, the device for implementing the function of the terminal access device may be the terminal access device; or may be a device, such as a system-on-a-chip, capable of supporting the terminal access device to perform this function, which may be installed in the terminal access device. In the technical solution provided in the embodiment of the present application, the device for implementing the function of the terminal access device is taken as an example of the terminal access device, and the technical solution provided in the embodiment of the present application is described.

In the embodiment of the present application, the terminal device may be simply referred to as a terminal, and also referred to as a User Equipment (UE), which is a device having a wireless transceiver function or a wired communication function. The terminal device may be deployed on land, including indoors or outdoors, hand-held or vehicle-mounted; can also be deployed on the water surface (such as ships, etc.); but may also be deployed in the air (e.g., on an aircraft, drone, balloon, satellite, etc.). The terminal device may be a mobile phone, a tablet computer, a computer with wireless or wired transceiving function, a virtual reality terminal device, an augmented reality terminal device, a wireless or wired terminal device in industrial control, a wireless or wired terminal device in unmanned aerial vehicle, a wireless or wired terminal device in telemedicine, a wireless or wired terminal device in smart grid, a wireless or wired terminal device in transportation security, a wireless or wired terminal device in smart city, a wireless or wired terminal device in smart home. The terminal device may also be fixed or mobile. The embodiment of the present application is not limited thereto.

In the embodiment of the present application, the device for implementing the function of the terminal may be a terminal device; or a device, such as a chip system, capable of supporting the terminal device to realize the function, which may be installed in the terminal device. In the embodiment of the application, the chip system can be composed of chips, and can also comprise chips and other discrete devices. In the technical solution provided in the embodiment of the present application, the device for implementing the function of the terminal device is an example of the terminal device, and the technical solution provided in the embodiment of the present application is described.

Based on the above-mentioned fixed network system, a network terminal identification method in the embodiment of the present application is described below.

Fig. 3 is a schematic flow chart of a signal processing method according to an embodiment of the present application. As shown in fig. 3, the method flow includes the following steps.

301. The terminal access device receives at least two messages sent by at least two terminal devices respectively.

In the communication process of the fixed network system, at least two terminal devices respectively send at least two messages to the terminal access device, wherein the at least two terminal devices comprise a first terminal device and a second terminal device, and correspondingly, the terminal access device receives at least two messages respectively sent by the corresponding at least two terminal devices.

As shown in fig. 4, the home camera (MAC address c4:63:89:bf: 37:6a) accesses the network through WIFI of the optical network terminal (Optical Network Terminal, ONT), the television (MAC address f4: 79:60:b8:b4:fe) accesses the network through LAN, and the mobile phone (MAC address 8c: e5:ef:1d:5e: 60) accesses the network through WIFI. The optical network terminal ONT will receive the message 1 sent by the home camera, the message 2 sent by the television, the message 3 sent by the television, the message 4 sent by the mobile phone and the message 5 sent by the mobile phone.

In a possible implementation, the at least two messages carry media access control (Media Access Control Address, MAC) addresses of corresponding at least two terminal devices transmitting the at least two messages.

In the embodiment of the present application, the message sent by the at least two terminal devices may carry the corresponding MAC address, in addition, the message may also carry other identifiers that may uniquely determine the terminal device, for example, identifiers allocated or generated by the terminal access device or the upstream network device to the terminal device, and the specific embodiment is not limited herein.

302. The terminal access device determines at least two terminal identities of at least two terminal devices.

The terminal access device determines at least two terminal identifications of the at least two terminal devices according to the MAC addresses of the at least two terminal devices.

Specifically, after the terminal access device obtains the MAC addresses of at least two terminal devices, the terminal access device determines the terminal identifiers of the corresponding at least two terminal devices according to the MAC addresses of the at least two terminal devices through a hash algorithm.

For example, in fig. 4, the ONT may determine, according to the MAC address c4:63:89:bf:37:6a of the camera, that the last four bytes of the hash value are the terminal identifier cid=sha (c4:63:89:bf:37:6a) =0x041 b4bb8 of the camera through the SHA-256 hash algorithm; accordingly, the terminal identification cid=sha (f4:79:60:b8:b4:fe) =0x6f4b 3056 of the television set; terminal identification cid=sha (8 c: e5: ef:1d:5e: 60) =0x9f 716407 of the mobile phone.

In the embodiment of the application, the terminal access device determines the terminal identifier of the terminal device through a secure hash algorithm (Secure Hash Algorithm, SHA) -256 hash algorithm, and in addition, the terminal access device may determine the terminal identifier of the terminal device through other hash algorithms, for example, a message verification code MD5 algorithm, etc., which is not limited in detail herein.

In the embodiment of the present application, the manner in which the terminal access device obtains the MAC addresses of at least two terminal devices may be obtained by establishing connection between at least two terminal devices and the terminal access device, or may be obtained by analyzing at least two messages sent by at least two terminal devices, which is not limited in this particular.

In the embodiment of the present application, step 302: the terminal access device determining that at least two terminal identities of at least two terminal devices may be in step 301: before the terminal access device receives the at least two messages sent by the at least two terminal devices respectively, or after step 301, the method is not limited herein specifically.

303. The terminal access device inserts at least two terminal identifications into at least two corresponding messages.

The terminal access device inserts at least two terminal identifiers of at least two terminal devices into at least two corresponding messages, wherein the at least two terminal identifiers are in one-to-one correspondence with the at least two terminal devices.

As shown in fig. 4, the ONT inserts the terminal identifier 0x041b4bb8 of the camera into the message 1, the ONT inserts the terminal identifier 0x6f4b3056 of the television into the message 2 and the message 3, and the Access Point (AP) inserts the terminal identifier 0x9f716407 of the mobile phone into the message 4 and the message 5.

In the embodiment of the application, when the fixed network system is an IPV4 network, a message of the IPV4 network is newly added with a terminal identification option, at least two terminal devices respectively send messages which are IPV4 messages, and the terminal access device inserts the corresponding terminal identification into the terminal identification option of the IPV4 message.

In the embodiment of the application, when the fixed network system is an IPV6 network, a message of the IPV6 network is newly added with a terminal identification extension header, at least two terminal devices respectively send messages which are IPV6 messages, and the terminal access device inserts the corresponding terminal identification into the terminal identification extension header of the IPV6 message.

In the embodiment of the application, when the fixed network system is a TCP network, a message of the TCP network is newly added with a terminal identification option, at least two messages respectively sent by terminal equipment are TCP messages, and the terminal access equipment inserts the corresponding terminal identification into the terminal identification option of the TCP messages.

In a possible implementation manner, when the fixed network system is a TCP network, the terminal access device may also insert the terminal identifier into a "terminal identifier" option of a TCP SYN packet for transmission control protocol synchronization. Therefore, when the terminal access device receives the subsequent message of the TCP SYN message (i.e. the message transmitted by the same link as the TCP SYN message), the subsequent message and the TCP SYN message are messages sent by the same terminal device, and the subsequent message and the TCP SYN message have serial number identifiers capable of determining association relations, so that the terminal access device can not insert terminal identifiers into the subsequent message of the TCP SYN message.

In the embodiment of the application, the terminal access device inserts at least two terminal identifiers into at least two corresponding messages, which can be realized by software or solidified into a forwarding chip to be realized by hardware, and the embodiment is not limited herein.

304. The terminal access device sends at least two messages to the upstream network device.

And the terminal access equipment transmits at least two messages inserted with the terminal identification to the upstream network equipment. Accordingly, the upstream network device receives at least two messages sent by the terminal access device.

305. And the upstream network equipment determines flow information corresponding to at least two terminal equipment according to the at least two messages.

After the upstream network device receives at least two messages sent by the terminal access device, determining that the at least two messages carrying the same terminal identifier are messages sent by the same terminal device according to the terminal identifier carried by the messages, and then determining flow information corresponding to the terminal device according to the messages sent by the same terminal device.

As shown in fig. 4, after receiving the messages 1 to 5 sent by the camera, the television and the mobile phone, the upstream network device determines that the message 2 and the message 3 are messages sent by the same terminal device according to the fact that the message 2 and the message 3 carry the terminal identifier 0x6f4b3056 of the same television. And the upstream network equipment determines that the message 4 and the message 5 are messages sent by the same terminal equipment according to the message 4 and the message 5 carrying the terminal identification 0x9f716407 of the same mobile phone. And the upstream network equipment determines that the message 1 is a message sent by another terminal equipment according to the terminal identifier 0x041b4bb8 of the camera carried by the message 1.

In one possible implementation manner, when the fixed network system is a TCP network, the upstream network device receives that at least two messages sent by the terminal access device include a TCP SYN message, and the upstream network device may determine that a message carrying the same terminal identifier as the TCP SYN message is a message sent by the same terminal device, and may determine that a subsequent message of the TCP SYN message (i.e., a message transmitted by the same link as the TCP SYN message) is a message sent by the same terminal device.

In the embodiment of the application, after the upstream network equipment determines the flow information corresponding to at least two terminal equipment, different management modes can be adopted for each terminal to provide different network services.

The following describes a terminal access device in an embodiment of the present application. Fig. 5 is a schematic structural diagram of a terminal access device according to an embodiment of the present application. As shown in fig. 5, in an embodiment of the present application, a terminal access device 500 may be the terminal access device in fig. 3, where the terminal access device 500 includes:

a receiving module 501, configured to receive at least two messages sent by at least two terminal devices respectively; for specific implementation, please refer to step 301 in the embodiment shown in fig. 3: the terminal access device receives at least two messages sent by at least two terminal devices respectively, which are not described herein.

A determining module 502 is configured to determine at least two terminal identities of at least two terminal devices. For specific implementation, please refer to step 302 in the embodiment shown in fig. 3: the terminal access device determines at least two terminal identities of at least two terminal devices, which are not described in detail herein.

In one possible implementation, the determining module 502 is specifically configured to: and determining at least two terminal identifications through a hash algorithm according to at least two MAC addresses of at least two terminal devices, wherein the at least two MAC addresses correspond to the at least two terminal identifications one by one. For specific implementation, please refer to step 302 in the embodiment shown in fig. 3: the terminal access device determines at least two terminal identities of at least two terminal devices, which are not described in detail herein.

An inserting module 503, configured to insert at least two terminal identifiers of at least two terminal devices into at least two corresponding messages, where the at least two terminal identifiers are in one-to-one correspondence with the at least two terminal devices; for specific implementation, please refer to step 303 in the embodiment shown in fig. 3: the terminal access device inserts at least two terminal identifiers into at least two corresponding messages, which are not described herein.

In one possible implementation manner, the at least two messages are at least two IPv4 messages, where the at least two IPv4 messages include a terminal identification option, and the inserting module 503 is specifically configured to: and inserting at least two terminal identifiers of at least two terminal devices into terminal identifier options of at least two IPv4 messages. For specific implementation, please refer to step 303 in the embodiment shown in fig. 3: the terminal access device inserts at least two terminal identifiers into at least two corresponding messages, which are not described herein.

In one possible implementation manner, the at least two messages are at least two IPv6 messages, where at least two IPv6 messages include a terminal identifier extension header, and the inserting module 503 is specifically configured to: and inserting at least two terminal identifiers of at least two terminal devices into terminal identifier extension heads of at least two IPv6 messages. For specific implementation, please refer to step 303 in the embodiment shown in fig. 3: the terminal access device inserts at least two terminal identifiers into at least two corresponding messages, which are not described herein.

In one possible implementation, at least two messages are TCP messages, where the at least two TCP messages include a terminal identifier option, and the inserting module 503 is specifically configured to: and inserting at least two terminal identifiers of at least two terminal devices into terminal identifier options of at least two TCP messages. For specific implementation, please refer to step 303 in the embodiment shown in fig. 3: the terminal access device inserts at least two terminal identifiers into at least two corresponding messages, which are not described herein.

In one possible implementation manner, at least two messages are TCP SYN messages synchronized by a transmission control protocol, where the at least two TCP SYN messages include a terminal identification option, and the inserting module 503 is specifically configured to: and inserting at least two terminal identifiers of at least two terminal devices into terminal identifier options of at least two TCP SYN messages, and not inserting the terminal identifiers into messages transmitted by the same link of the at least two TCP SYN messages. For specific implementation, please refer to step 303 in the embodiment shown in fig. 3: the terminal access device inserts at least two terminal identifiers into at least two corresponding messages, which are not described herein.

And the sending module 504 is configured to send at least two messages to the upstream network device, so that the upstream network device determines flow information corresponding to at least two terminal devices according to the at least two messages. For specific implementation, please refer to step 304 in the embodiment shown in fig. 3: the terminal access device sends at least two messages to the upstream network device, which will not be described in detail herein.

In this embodiment, the terminal access device may perform the operations performed by the terminal access device in any one of the embodiments shown in fig. 3, which are not described herein in detail.

The upstream network device in the embodiment of the present application is described below. Fig. 6 is a schematic structural diagram of an upstream network device according to an embodiment of the present application. As shown in fig. 6, an upstream network device 600 provided in an embodiment of the present application may be the upstream network device 600 in fig. 3, where the upstream network device 600 includes:

a receiving module 601, configured to receive a plurality of messages sent by a terminal access device, where the plurality of messages carry a plurality of terminal identifiers of a plurality of corresponding terminal devices; for specific implementation, please refer to step 304 in the embodiment shown in fig. 3: the terminal access device sends at least two messages to the upstream network device, which will not be described in detail herein.

A first determining module 602, configured to determine that a plurality of messages carrying the same terminal identifier in a plurality of messages are messages sent by the same terminal device; for specific implementation, please refer to step 305 in the embodiment shown in fig. 3: the upstream network device determines flow information corresponding to at least two terminal devices according to at least two messages, which is not described herein.

In one possible implementation, the plurality of packets includes a TCP SYN packet synchronized by a transmission control protocol, and the first determining module 602 is specifically configured to: and determining that the messages transmitted by the same link of the plurality of messages and the TCP SYN message are messages sent by the same terminal equipment. For specific implementation, please refer to step 305 in the embodiment shown in fig. 3: the upstream network device determines flow information corresponding to at least two terminal devices according to at least two messages, which is not described herein.

The second determining module 603 is configured to determine traffic information of a plurality of corresponding terminal devices according to a plurality of messages carrying the same terminal identifier. For specific implementation, please refer to step 305 in the embodiment shown in fig. 3: the upstream network device determines flow information corresponding to at least two terminal devices according to at least two messages, which is not described herein.

In this embodiment, the upstream network device may perform the operations performed by the upstream network device in any of the embodiments shown in fig. 3, which are not described herein.

Fig. 7 is a schematic structural diagram of a terminal access device according to an embodiment of the present application, where the terminal access device 700 may include one or more central processing units (central processing units, CPU) 701 and a memory 705, and one or more application programs or data are stored in the memory 705.

Wherein the memory 705 may be volatile storage or persistent storage. The program stored in the memory 705 may include one or more modules, each of which may include a series of instruction operations in the terminal access device. Still further, the central processor 701 may be configured to communicate with the memory 705 and execute a series of instruction operations in the memory 705 on the terminal access device 700.

Wherein the central processor 701 is configured to execute a computer program in the memory 705 to cause the terminal access device 700 to perform: the terminal access device receives messages of at least two terminal devices, wherein the at least two terminal devices comprise a first terminal device and a second terminal device. The terminal access device inserts a first terminal identifier of the first terminal device and a second terminal identifier of the second terminal device into a first message sent by the first terminal device and a second message sent by the second terminal device respectively. The terminal access device sends the first message and the second message to the upstream network device, so that the upstream network device determines flow information corresponding to the first terminal device and the second terminal device according to the first message and the second message. For specific implementation, please refer to steps 301-305 in the embodiment shown in fig. 3, and details are not repeated here.

The terminal access device 700 may also include one or more power supplies 702, one or more wired or wireless network interfaces 703, one or more input/output interfaces 704, and/or one or more operating systems, such as Windows ServerTM, mac OS XTM, unixTM, linuxTM, freeBSDTM, etc.

The terminal access device 700 may perform the operations performed by the terminal access device in the embodiment shown in fig. 3, which are not described herein.

Fig. 8 is a schematic structural diagram of an upstream network device according to an embodiment of the present application, where the upstream network device 800 may include one or more central processing units (central processing units, CPU) 801 and a memory 805, where the memory 805 stores one or more application programs or data.

Wherein the memory 805 may be volatile storage or persistent storage. The program stored in the memory 805 may include one or more modules, each of which may include a series of instruction operations in an upstream network device. Still further, the central processor 801 may be arranged to communicate with the memory 805, executing a series of instruction operations in the memory 805 on the upstream network device 800.

Wherein the central processor 801 is configured to execute a computer program in the memory 805 to cause the upstream network device 800 to perform: the upstream network equipment receives a plurality of messages respectively sent by the terminal access equipment, wherein the messages comprise a first message and a second message, and the messages carry a plurality of terminal identifiers of a plurality of corresponding terminal equipment; the upstream network equipment determines that a plurality of messages carrying the same terminal identifier in a plurality of messages are messages sent by the same terminal equipment; and the upstream network equipment determines flow information of a plurality of corresponding terminal equipment according to the plurality of messages sent by the same terminal equipment. For specific implementation, please refer to steps 301-305 in the embodiment shown in fig. 3, and details are not repeated here.

Upstream network device 800 may also include one or more power supplies 802, one or more wired or wireless network interfaces 803, one or more input/output interfaces 804, and/or one or more operating systems, such as Windows ServerTM, mac OS XTM, unixTM, linuxTM, freeBSDTM, etc.

The upstream network device 800 may perform the operations performed by the upstream network device in the embodiment shown in fig. 3, which are not described herein.

Fig. 9 is a schematic structural diagram of a fixed network system 900 according to an embodiment of the present application, where the fixed network system 900 includes a plurality of terminal devices 901, a plurality of terminal access devices 902, and an upstream network device 903, where the plurality of terminal devices 901 may perform operations performed by the plurality of terminal devices in the embodiment shown in any one of the foregoing fig. 3, and the terminal access device may perform operations performed by the terminal access device in the embodiment shown in the foregoing fig. 3, and the upstream network device may perform operations performed by the upstream network device in the embodiment shown in the foregoing fig. 3. For specific implementation, please refer to steps 301-305 in the embodiment shown in fig. 3, and details are not repeated here.

It will be clear to those skilled in the art that, for convenience and brevity of description, specific working procedures of the above-described systems, apparatuses and units may refer to corresponding procedures in the foregoing method embodiments, which are not repeated herein.

In the several embodiments provided in the present application, it should be understood that the disclosed systems, devices, and methods may be implemented in other manners. For example, the apparatus embodiments described above are merely illustrative, e.g., the division of the units is merely a logical function division, and there may be additional divisions when actually implemented, e.g., multiple units or components may be combined or integrated into another system, or some features may be omitted or not performed. Alternatively, the coupling or direct coupling or communication connection shown or discussed with each other may be an indirect coupling or communication connection via some interfaces, devices or units, which may be in electrical, mechanical or other form.

The units described as separate units may or may not be physically separate, and units shown as units may or may not be physical units, may be located in one place, or may be distributed on a plurality of network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

In addition, each functional unit in the embodiments of the present application may be integrated in one processing unit, or each unit may exist alone physically, or two or more units may be integrated in one unit. The integrated units may be implemented in hardware or in software functional units.

The integrated units, if implemented in the form of software functional units and sold or used as stand-alone products, may be stored in a computer readable storage medium. Based on such understanding, the technical solution of the present application may be embodied essentially or in part or all of the technical solution or in part in the form of a software product stored in a storage medium, including instructions for causing a computer device (which may be a personal computer, a server, or a network device, etc.) to perform all or part of the steps of the method according to the embodiments of the present application. And the aforementioned storage medium includes: a U-disk, a removable hard disk, a read-only memory (ROM), a random access memory (RAM, random access memory), a magnetic disk, or an optical disk, or other various media capable of storing program codes.

Claims

1. A network terminal identification method, the method comprising:

the method comprises the steps that terminal access equipment receives messages of at least two terminal equipment, wherein the at least two terminal equipment comprises first terminal equipment and second terminal equipment;

the terminal access device inserts a first terminal identifier of the first terminal device and a second terminal identifier of the second terminal device into a first message sent by the first terminal device and a second message sent by the second terminal device respectively;

the terminal access device sends the first message and the second message to upstream network equipment, so that the upstream network equipment determines flow information corresponding to the first terminal equipment and the second terminal equipment according to the first message and the second message.

2. The method of claim 1, wherein before the terminal access device inserts the first terminal identifier of the first terminal device and the second terminal identifier of the second terminal device into the first message sent by the first terminal device and the second message sent by the second terminal device, respectively, the method further comprises:

the terminal access device determines the first terminal identity and the second terminal identity.

3. The method of claim 2, wherein the terminal access device determining the first terminal identity and the second terminal identity comprises:

the terminal access device determines the first terminal identifier and the second terminal identifier through a hash algorithm according to the MAC address of the first terminal device and the MAC address of the second terminal device respectively.

4. The method of claim 3, wherein the first message and the second message are a first IPv4 message and a second IPv4 message, the first IPv4 message and the second IPv4 message include a terminal identifier option, and the terminal access device inserts a first terminal identifier of the first terminal device and a second terminal identifier of the second terminal device into the first message sent by the first terminal device and the second message sent by the second terminal device, respectively, and the method comprises:

the terminal access device inserts a first terminal identifier of the first terminal device and a second terminal identifier of the second terminal device into terminal identifier options of the first IPv4 message sent by the first terminal device and the second IPv4 message sent by the second terminal device respectively.

5. The method of claim 3, wherein the first message and the second message are a first IPv6 message and a second IPv6 message, the first IPv6 message and the second IPv6 message include a terminal identifier extension header, and the terminal access device inserts a first terminal identifier of the first terminal device and a second terminal identifier of the second terminal device into the first message sent by the first terminal device and the second message sent by the second terminal device, respectively, and the method comprises:

the terminal access device inserts the first terminal identifier of the first terminal device and the second terminal identifier of the second terminal device into the terminal identifier extension header of the first IPv6 message and the second IPv6 message respectively.

6. A method according to claim 3, wherein the first message and the second message are a first transmission control protocol TCP message and a second TCP message, the first TCP message and the second TCP message including a terminal identification option, the terminal access device inserting a first terminal identification of the first terminal device and a second terminal identification of the second terminal device into the first message sent by the first terminal device and the second message sent by the second terminal device, respectively, comprising:

The terminal access device inserts the first terminal identifier of the first terminal device and the second terminal identifier of the second terminal device into terminal identifier options of a first TCP message sent by the first terminal device and a second TCP message sent by the second terminal device respectively.

7. A method according to claim 3, wherein the first message and the second message are a first TCP SYN message and a second TCP SYN message synchronized by a first transmission control protocol, the first TCP message and the second TCP message including a terminal identification option, the terminal access device inserting a first terminal identification of the first terminal device and a second terminal identification of the second terminal device into the first message sent by the first terminal device and the second message sent by the second terminal device, respectively, comprising:

the terminal access device inserts the first terminal identifier of the first terminal device and the second terminal identifier of the second terminal device into terminal identifier options of the first TCP SYN message and the second TCP SYN message, and does not insert the terminal identifier into a message transmitted by the same link of the first TCP SYN message and the second TCP SYN message.

8. A terminal access device, the terminal access device comprising:

the receiving module is used for receiving messages of at least two terminal devices, wherein the at least two terminal devices comprise a first terminal device and a second terminal device;

the inserting module is used for respectively inserting the first terminal identifier of the first terminal device and the second terminal identifier of the second terminal device into a first message sent by the first terminal device and a second message sent by the second terminal device;

and the sending module is used for sending the first message and the second message to upstream network equipment so that the upstream network equipment determines flow information corresponding to the first terminal equipment and the second terminal equipment according to the first message and the second message.

9. The terminal access device of claim 8, wherein the terminal access device further comprises:

and the determining module is used for determining the first terminal identifier and the second terminal identifier.

10. The terminal access device according to claim 9, wherein the determining module is specifically configured to:

and determining the first terminal identifier and the second terminal identifier through a hash algorithm according to the MAC address of the first terminal device and the MAC address of the second terminal device respectively.

11. The terminal access device of claim 10, wherein the first message and the second message are a first IPv4 message and a second IPv4 message, the first IPv4 message and the second IPv4 message include a terminal identification option, and the inserting module is configured to:

and respectively inserting a first terminal identifier of the first terminal device and a second terminal identifier of the second terminal device into terminal identifier options of the first IPv4 message sent by the first terminal device and the second IPv4 message sent by the second terminal device.

12. The terminal access device of claim 10, wherein the first message and the second message are a first IPv6 message and a second IPv6 message, the first IPv6 message and the second IPv6 message include a terminal identifier extension header, and the inserting module is configured to:

and respectively inserting the first terminal identifier of the first terminal device and the second terminal identifier of the second terminal device into terminal identifier extension heads of the first IPv6 message and the second IPv6 message.

13. The terminal access device of claim 10, wherein the first message and the second message are a first transmission control protocol TCP message and a second TCP message, the first TCP message and the second TCP message including a terminal identification option, and the inserting module is configured to:

And respectively inserting the first terminal identifier of the first terminal device and the second terminal identifier of the second terminal device into the first message sent by the first terminal device and the second message sent by the second terminal device, and selecting the terminal identifiers.

14. The terminal access device of claim 10, wherein the first message and the second message are a first transmission control protocol synchronization TCP SYN message and a second TCP SYN message, the first TCP message and the second TCP message including a terminal identification option, and wherein the insertion module is configured to:

and inserting the first terminal identifier of the first terminal device and the second terminal identifier of the second terminal device into terminal identifier options of the first TCP SYN message and the second TCP SYN message, and not inserting the terminal identifier into a message transmitted by the same link of the first TCP SYN message and the second TCP SYN message.

15. An upstream network device, the upstream network device comprising:

the receiving module is used for receiving a plurality of messages sent by the terminal access equipment, wherein the messages comprise a first message and a second message, and the messages carry a plurality of terminal identifications of a plurality of corresponding terminal equipment;

A first determining module, configured to determine that a plurality of messages carrying the same terminal identifier in the plurality of messages are messages sent by the same terminal device;

and the second determining module is used for determining the flow information of the corresponding terminal devices according to the messages carrying the same terminal identifier.

16. The upstream network device of claim 15, wherein the plurality of messages comprise transmission control protocol synchronization, TCP SYN, messages, and wherein the first determining module is configured to:

and determining that the messages transmitted by the same link of the plurality of messages and the TCP SYN message are messages sent by the same terminal equipment.

17. A fixed network system comprising a plurality of terminal devices, a terminal access device according to any of claims 8-14 and an upstream network device according to any of claims 15-16.