CN117041211A - Message processing method and device, nonvolatile storage medium and electronic equipment - Google Patents
Message processing method and device, nonvolatile storage medium and electronic equipment Download PDFInfo
- Publication number
- CN117041211A CN117041211A CN202311016874.1A CN202311016874A CN117041211A CN 117041211 A CN117041211 A CN 117041211A CN 202311016874 A CN202311016874 A CN 202311016874A CN 117041211 A CN117041211 A CN 117041211A
- Authority
- CN
- China
- Prior art keywords
- network element
- message
- source address
- address
- request message
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
- 238000003672 processing method Methods 0.000 title claims abstract description 14
- 230000004044 response Effects 0.000 claims abstract description 85
- 230000011664 signaling Effects 0.000 claims abstract description 72
- 238000000034 method Methods 0.000 claims abstract description 40
- 238000012545 processing Methods 0.000 claims description 37
- 230000006870 function Effects 0.000 claims description 28
- 238000004891 communication Methods 0.000 claims description 12
- 230000002159 abnormal effect Effects 0.000 claims description 9
- 230000003993 interaction Effects 0.000 abstract description 6
- 238000007726 management method Methods 0.000 description 19
- 238000010586 diagram Methods 0.000 description 8
- 230000005540 biological transmission Effects 0.000 description 6
- 238000013475 authorization Methods 0.000 description 3
- 238000006243 chemical reaction Methods 0.000 description 3
- 230000000694 effects Effects 0.000 description 3
- 238000005516 engineering process Methods 0.000 description 3
- 230000008569 process Effects 0.000 description 3
- 230000008878 coupling Effects 0.000 description 2
- 238000010168 coupling process Methods 0.000 description 2
- 238000005859 coupling reaction Methods 0.000 description 2
- 238000011161 development Methods 0.000 description 2
- 238000010295 mobile communication Methods 0.000 description 2
- 238000012544 monitoring process Methods 0.000 description 2
- 230000006978 adaptation Effects 0.000 description 1
- 238000013500 data storage Methods 0.000 description 1
- 238000002955 isolation Methods 0.000 description 1
- 239000004973 liquid crystal related substance Substances 0.000 description 1
- 230000036244 malformation Effects 0.000 description 1
- 238000012986 modification Methods 0.000 description 1
- 230000004048 modification Effects 0.000 description 1
- 230000003287 optical effect Effects 0.000 description 1
- 101150102131 smf-1 gene Proteins 0.000 description 1
- 239000007787 solid Substances 0.000 description 1
- 238000013024 troubleshooting Methods 0.000 description 1
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L61/00—Network arrangements, protocols or services for addressing or naming
- H04L61/45—Network directories; Name-to-address mapping
- H04L61/4535—Network directories; Name-to-address mapping using an address exchange platform which sets up a session between two nodes, e.g. rendezvous servers, session initiation protocols [SIP] registrars or H.323 gatekeepers
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L61/00—Network arrangements, protocols or services for addressing or naming
- H04L61/50—Address allocation
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L61/00—Network arrangements, protocols or services for addressing or naming
- H04L61/59—Network arrangements, protocols or services for addressing or naming using proxies for addressing
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L65/00—Network arrangements, protocols or services for supporting real-time applications in data packet communication
- H04L65/1066—Session management
- H04L65/1101—Session protocols
- H04L65/1104—Session initiation protocol [SIP]
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L2101/00—Indexing scheme associated with group H04L61/00
- H04L2101/30—Types of network names
- H04L2101/39—Globally routable user-agent uniform resource identifier [GRUU] for the session initiation protocol [SIP]
Landscapes
- Engineering & Computer Science (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Business, Economics & Management (AREA)
- General Business, Economics & Management (AREA)
- Multimedia (AREA)
- Data Exchanges In Wide-Area Networks (AREA)
Abstract
The application discloses a message processing method and device, a nonvolatile storage medium and electronic equipment. Wherein the method comprises the following steps: the signaling intercommunication gateway receives a request message sent by a first network element to a second network element; the signaling intercommunication gateway allocates a first proxy address for a source address corresponding to the first network element, allocates a second proxy address for a destination address corresponding to the second network element, and determines target index information; storing a source address in a database corresponding to the signaling intercommunication gateway according to the target index information; the signaling intercommunication gateway receives a response message sent by the second network element to the first network element, searches a source address in a database according to the target index information, and forwards the response message to the network element corresponding to the source address. The application solves the technical problem that the signaling intercommunication gateway cannot distribute the response message according to the data packet identification information in the received response message, thereby influencing the data interaction between the private network element and the core network element.
Description
Technical Field
The present application relates to the field of network technologies and security, and in particular, to a method and apparatus for processing a packet, a nonvolatile storage medium, and an electronic device.
Background
The private network service in the fifth generation mobile communication technology is rapidly developed, the intercommunication requirement of the private network and the basic network of the operator is increasingly urgent, for example, banking industry needs to utilize a DN-AAA server to realize unified access management of a client side, wherein the DN-AAA server needs to be connected with a session management function network element of a core network side in the basic network of the operator to acquire messages such as authentication and accounting. In order to avoid the core network being directly exposed in the non-trust domain, the operator proposes a signaling intercommunication gateway architecture, AAA-P (Authentication, authorization, accounting Proxy) is a sub-service under the architecture, and is used as a bridge between a session management function network element and a DN-AAA server to complete AAA message Proxy forwarding, thereby realizing the functions of network isolation, topology hiding, network security and the like, ensuring the security of the basic network and the private network of the operator, and improving the convenience and controllability of service development.
However, in the data interaction process between the private network element and the core network element, the signaling interworking gateway cannot distribute the response message according to the data packet identification information in the received response message, so that the response message is failed to be sent, and the development of related services is further affected.
In view of the above problems, no effective solution has been proposed at present.
Disclosure of Invention
The embodiment of the application provides a message processing method and device, a nonvolatile storage medium and electronic equipment, which at least solve the technical problem that a signaling intercommunication gateway cannot distribute a response message according to data packet identification information in the received response message so as to influence data interaction between a private network element and a core network element.
According to an aspect of an embodiment of the present application, there is provided a method for processing a packet, including: the signaling intercommunication gateway receives a request message sent by a first network element to a second network element, wherein the request message at least carries: the data packet identification information and the message type information, wherein the first network element is a core network element, the second network element is a private network element, or the first network element is a private network element, and the second network element is a core network element; the signaling intercommunication gateway allocates a first proxy address for a source address corresponding to the first network element, allocates a second proxy address for a destination address corresponding to the second network element, and determines target index information according to the data packet identification information, the message type information, the first proxy address and the second proxy address; storing a source address in a database corresponding to the signaling intercommunication gateway according to the target index information; the signaling intercommunication gateway receives a response message sent by the second network element to the first network element, searches a source address in a database according to the target index information, and forwards the response message to the network element corresponding to the source address.
Optionally, forwarding the response message to the network element corresponding to the source address includes: analyzing the response message to obtain data packet identification information and message type information; searching target index information according to the data packet identification information and the message type information; searching a source address in a database according to the target index information; and sending the response message to the network element corresponding to the source address.
Optionally, searching the source address in the database according to the target index information includes: and discarding the response message under the condition that the source address cannot be found in the database according to the target index information.
Optionally, after storing the source address in the database corresponding to the signaling interworking gateway according to the target index information, the method further includes: adding the first proxy address and the second proxy address into a request message to obtain a target request message; and forwarding the target request message to the second network element.
Optionally, the signaling interworking gateway receives a request message sent by the first network element to the second network element, including: determining whether the message length of the request message is within a preset interval; discarding the request message under the condition that the message length of the request message is not within a preset interval; under the condition that the message length of the request message is in a preset interval, determining whether the format of the request message is a normal format; discarding the message under the condition that the format of the request message is not the normal format; under the condition that the format of the request message is a normal format, determining whether the request message comprises abnormal characters and/or abnormal codes; in case the request message comprises exception characters and/or exception codes, the request message is discarded.
Optionally, after the response message is allocated according to the source address, the method further includes: and deleting the source address in the database under the condition that the target message sent by the first network element is received, wherein the target message is the message of the response message successfully received by the first network element.
Optionally, the core network element is a session management function network element, and the private network element is a network element corresponding to the DN-AAA server.
According to still another aspect of the embodiment of the present application, there is further provided a method for processing a packet, including: the signaling intercommunication gateway receives a request message sent by a first network element to a second network element, wherein the request message at least carries: the data packet identification information and the message type information, wherein the first network element is a core network element, the second network element is a private network element, or the first network element is a private network element, and the second network element is a core network element; the signaling intercommunication gateway receives a response message sent by a second network element to a first network element, searches a source address in a database according to target index information, and forwards the response message to the network element corresponding to the source address, wherein the target index information is determined according to data packet identification information, message type information, a first proxy address corresponding to the first network element and a second proxy address corresponding to the second network element.
According to still another aspect of the embodiment of the present application, there is also provided a system for processing a packet, including: the system comprises a signaling intercommunication gateway, a first network element and a second network element, wherein the signaling intercommunication gateway is respectively in communication connection with the first network element and the second network element and is used for executing a message processing method; the first network element is used for sending a request message or a response message to the second network element; the second network element is configured to send a request message or a response message to the first network element, where the first network element is a core network element, and the second network element is a private network element, or the first network element is a private network element, and the second network element is a core network element.
According to still another aspect of the embodiment of the present application, there is further provided a device for processing a packet, including: the receiving module is configured to receive a request packet sent by the first network element to the second network element, where the request packet at least carries: the data packet identification information and the message type information, wherein the first network element is a core network element, the second network element is a private network element, or the first network element is a private network element, and the second network element is a core network element; the determining module is used for distributing a first proxy address to a source address corresponding to the first network element, distributing a second proxy address to a destination address corresponding to the second network element, and determining target index information according to the data packet identification information, the message type information, the first proxy address and the second proxy address; the storage module is used for storing the source address in a database corresponding to the signaling intercommunication gateway according to the target index information; and the sending module is used for receiving the response message sent by the second network element to the first network element, searching the source address in the database according to the target index information, and forwarding the response message to the network element corresponding to the source address.
According to still another aspect of the embodiment of the present application, there is further provided a nonvolatile storage medium, where the storage medium includes a stored program, and when the program runs, the device where the storage medium is controlled to execute the above method for processing a message.
According to still another aspect of the embodiment of the present application, there is also provided an electronic device including: the system comprises a memory and a processor, wherein the processor is used for running a program stored in the memory, and the program runs to execute the processing method of the message.
In the embodiment of the application, a request message sent by a first network element to a second network element is received, wherein the request message at least carries: the data packet identification information and the message type information, wherein the first network element is a core network element, the second network element is a private network element, or the first network element is a private network element, and the second network element is a core network element; the signaling intercommunication gateway allocates a first proxy address for a source address corresponding to the first network element, allocates a second proxy address for a destination address corresponding to the second network element, and determines target index information according to the data packet identification information, the message type information, the first proxy address and the second proxy address; storing a source address in a database corresponding to the signaling intercommunication gateway according to the target index information; the signaling intercommunication gateway receives a response message sent by a second network element to a first network element, searches a source address in a database according to target index information, and forwards the response message to the network element corresponding to the source address, the source address is stored in the database according to the target index information by determining the target index information, after the response message is received, the source address is searched in the database according to the target index information, and the response message is forwarded to the network element corresponding to the source address, so that the aim of accurately distributing the response message is fulfilled, the technical effect of ensuring the data interaction efficiency between the private network element and the core network element is realized, and the technical problem that the signaling intercommunication gateway cannot distribute the response message according to the data packet identification information in the received response message so as to influence the data interaction between the private network element and the core network element is solved.
Drawings
The accompanying drawings, which are included to provide a further understanding of the application and are incorporated in and constitute a part of this specification, illustrate embodiments of the application and together with the description serve to explain the application and do not constitute a limitation on the application. In the drawings:
FIG. 1 is a flow chart of a method of processing a message according to the related art;
FIG. 2 is a flow chart of a method for processing a message according to an embodiment of the application;
FIG. 3 is a flow chart of another method for processing a message according to an embodiment of the application;
FIG. 4 is a flow chart of another method for processing a message according to an embodiment of the application;
FIG. 5 is a block diagram of a message processing system according to an embodiment of the present application;
FIG. 6 is a schematic diagram of a message processing system according to an embodiment of the present application;
FIG. 7 is a block diagram of a message processing apparatus according to an embodiment of the present application;
fig. 8 is a block diagram of a hardware structure of a computer terminal (or electronic device) of a message processing method according to an embodiment of the present application.
Detailed Description
In order that those skilled in the art will better understand the present application, a technical solution in the embodiments of the present application will be clearly and completely described below with reference to the accompanying drawings in which it is apparent that the described embodiments are only some embodiments of the present application, not all embodiments. All other embodiments, which can be made by those skilled in the art based on the embodiments of the present application without making any inventive effort, shall fall within the scope of the present application.
It should be noted that the terms "first," "second," and the like in the description and the claims of the present application and the above figures are used for distinguishing between similar objects and not necessarily for describing a particular sequential or chronological order. It is to be understood that the data so used may be interchanged where appropriate such that the embodiments of the application described herein may be implemented in sequences other than those illustrated or otherwise described herein. Furthermore, the terms "comprises," "comprising," and "having," and any variations thereof, are intended to cover a non-exclusive inclusion, such that a process, method, system, article, or apparatus that comprises a list of steps or elements is not necessarily limited to those steps or elements expressly listed but may include other steps or elements not expressly listed or inherent to such process, method, article, or apparatus.
Fig. 1 is a flowchart of a method for processing a message according to the related art, as shown in fig. 1, in the related art, a signaling interworking gateway discards a malformed message if the received message is the malformed message; the signaling intercommunication gateway forwards the request message to a target network element under the condition that the received message is the request message; the signaling intercommunication gateway determines a source address of a network element for sending the request message according to the data packet identification information in the request message corresponding to the response message under the condition that the received message is the response message; after the source address and the destination address are replaced by proxy addresses distributed by the signaling intercommunication gateway, the response message is forwarded according to the Internet protocol address number or the port number corresponding to the source address. Fig. 6 is a schematic diagram of a message processing system according to an embodiment of the present application, as shown in fig. 6, the C-IWF is a Customized signaling interworking gateway (Customized-Inter Working Function), the SMF is a session management function network element (Session Management Function), that is, a core network element, and the DN-AAA is a dedicated network element, because the gateway that receives a request message and the gateway that receives a response message are likely not the same gateway, for example, the gateway that receives the request message sent by the SMF1 is C-IWF1, and the gateway that receives the response message corresponding to the request message is C-IWF2, where the gateway cannot allocate the response message according to the packet identification information in the received response message, thereby bringing the following problems: 1. each gateway is connected with a plurality of core network elements or private network elements at the same time, and cannot uniquely identify the response message of a core network element and a private network element based on the data packet identification information; 2. when the data packet identification information is only one byte and is forwarded in high concurrency, the data packet identification information is used as an index, and the situation that the repetition can occur possibly is that before the response message is not forwarded, part of source ports are covered, so that part of message forwarding fails; 3. the destination port of each request message may be 1812, 1813, 3799, and the source port of the request message is a random value of 0-65535, the gateway must record the source port information, otherwise the response message cannot be forwarded successfully. In order to solve the above problems, related solutions are provided in the embodiments of the present application, and are described in detail below.
According to an embodiment of the present application, there is provided a method embodiment of a method for processing a message, it should be noted that, steps illustrated in the flowchart of the drawings may be performed in a computer system such as a set of computer executable instructions, and although a logical order is illustrated in the flowchart, in some cases, steps illustrated or described may be performed in an order different from that illustrated herein.
Fig. 2 is a flowchart of a method for processing a message according to an embodiment of the present application, as shown in fig. 2, the method includes the following steps:
step S202, the signaling intercommunication gateway receives a request message sent by a first network element to a second network element, wherein the request message at least carries: the data packet identification information and the message type information, wherein the first network element is a core network element, the second network element is a private network element, or the first network element is a private network element, and the second network element is a core network element.
According to some alternative embodiments of the present application, the signaling interworking gateway is a network device for implementing signaling interworking and conversion between different communication systems. The signaling intercommunication gateway can analyze and convert signaling of different communication networks, so that intercommunication and coordination can be carried out among different networks. The signaling interworking gateway typically supports a variety of communication protocols and interfaces, such as SS7, SIP, ISDN, etc. The gateway may convert signaling from one network to a signaling format required by another network to enable interworking between different networks, e.g., converting signaling from an enterprise private network to a signaling format required by an operator core network. Meanwhile, the signaling intercommunication gateway can also provide some value added services and functions, such as call forwarding, voice mail, short message service and the like. Therefore, the signaling interworking gateway has wide application in the fields of telecom operators, enterprise communication networks, internet phone service providers, and the like.
The packet identification information refers to information for identifying and recognizing a packet included in a packet transmitted in the network. The information generally includes a source address and a destination address, which are used to indicate a sending party and a receiving party of the data packet, for example, in the data packet identification information of the request message sent by the first network element to the second network element and received by the signaling interworking gateway, the source address is an address corresponding to the first network element, and the destination address is an address corresponding to the second network element. In addition, the packet identification information further includes a sequence number of the packet, which is used to ensure that the packet is transmitted and reassembled in the correct sequence, and other possible identification information further includes a length of the packet, a checksum, and the like.
The message type information includes the type of the communication message, such as a text message, a picture message, an audio message, a video message, a file message, a link message, an event message, and the like.
Step S204, the signaling intercommunication gateway allocates a first proxy address for the source address corresponding to the first network element, allocates a second proxy address for the destination address corresponding to the second network element, and determines target index information according to the data packet identification information, the message type information, the first proxy address and the second proxy address.
According to other alternative embodiments of the present application, the gateway allocates a proxy address to the network element, which means that the gateway replaces the source address with the proxy address for data transmission in the network. This situation often arises when there are multiple network elements in the network, and in order to protect the privacy of the source address or to implement certain specific functions, it is necessary to use proxy addresses for communication. In this case, the gateway will assign each network element a unique proxy address. When the network element needs to communicate with other network elements, the network element replaces the source address with its own proxy address and sends the data to the gateway. After receiving the data, the gateway resolves the target address into a real target network element address and forwards the data to the target network element. When the target network element receives the data, the true source address can be used for replying. By using proxy addresses, the real source address can be hidden, increasing the security of the network. At the same time, proxy addresses may also be used to implement some special functions, such as load balancing, flow control, etc. It should be noted that the proxy address assigned by the gateway to the network element should be unique to ensure that each network element in the network has a separate proxy address. In addition, the gateway also needs to realize the function of address conversion, map the proxy address with the real network element address, and perform corresponding conversion during data forwarding.
And taking the target index information as an index of the database, wherein the index is a data structure in the database and is used for quickly positioning and accessing the data in the database. The index can improve the inquiry performance and reduce the input and output operations of the database.
According to step S204, by using the packet identification information, the message type information, the first proxy address and the second proxy address as the target index information, the repetition of the index information is reduced, and the risk of source port coverage is reduced.
Step S206, according to the target index information, the source address is stored in the database corresponding to the signaling intercommunication gateway.
In some optional embodiments of the present application, the database corresponding to the signaling interworking gateway is, for example: redis, which is an open-source memory data structure storage system, is also referred to as a key database. Redis can be used as a database, cache, and message broker. Redis supports a variety of data structures, such as strings, hash tables, lists, collections, ordered collections, etc., and provides rich operating commands.
Step S208, the signaling intercommunication gateway receives the response message sent by the second network element to the first network element, searches the source address in the database according to the target index information, and forwards the response message to the network element corresponding to the source address.
As some optional embodiments of the present application, the network element corresponding to the source address is determined by looking up a routing table or other network configuration information, and the response message is forwarded to the network element corresponding to the source address, where the routing table is a table stored in the router, and is used to determine a transmission path of the data packet in the network. The routing table contains the destination network address and information of the next hop router. Each record of the routing table typically includes the following information: 1. destination network address: indicating to which network the data packet is to be transmitted; 2. subnet mask: for determining a range of destination network addresses; 3. the next hop router: an internet protocol address of the router indicating the next hop; 4. and (3) an outlet interface: indicating from which interface the packet is sent.
According to the steps, the target index information is determined, the source address is stored in the database according to the target index information, after the response message is received, the source address is searched in the database according to the target index information, and the response message is forwarded to the network element corresponding to the source address, so that the aim of accurately distributing the response message is fulfilled, and the technical effect of ensuring the data interaction efficiency between the private network element and the core network element is realized.
According to some optional embodiments of the application, forwarding the response message to the network element corresponding to the source address comprises the steps of: analyzing the response message to obtain data packet identification information and message type information; searching target index information according to the data packet identification information and the message type information; searching a source address in a database according to the target index information; and sending the response message to the network element corresponding to the source address.
According to other alternative embodiments of the present application, searching a database for a source address based on target index information includes the steps of: and discarding the response message under the condition that the source address cannot be found in the database according to the target index information.
According to other optional embodiments of the present application, after storing the source address in the database corresponding to the signaling interworking gateway according to the destination index information, it is further required that: adding the first proxy address and the second proxy address into a request message to obtain a target request message; and forwarding the target request message to the second network element.
In some optional embodiments of the present application, the signaling interworking gateway receives a request message sent by a first network element to a second network element, including the following steps: determining whether the message length of the request message is within a preset interval; discarding the request message under the condition that the message length of the request message is not within a preset interval; under the condition that the message length of the request message is in a preset interval, determining whether the format of the request message is a normal format; discarding the message under the condition that the format of the request message is not in a normal format (namely message malformation); under the condition that the format of the request message is a normal format, determining whether the request message comprises abnormal characters and/or abnormal codes; in case the request message comprises exception characters and/or exception codes, the request message is discarded.
In determining whether a message is malformed, the following aspects can be considered: 1. message format: checking whether the format of the message accords with the specified format, including message header, message length, message content and the like, and judging that the message is malformed if the message format does not accord with the specification. 2. Message length: checking whether the message length is in a reasonable range, and judging that the message is malformed if the message length is too long or too short. 3. The message content is as follows: and checking whether the content of the message accords with the specified format and rule, for example, checking whether illegal characters, illegal commands and the like exist in the message, and judging that the message is malformed if the content of the message does not accord with the specification. 4. Message frequency: and checking whether the sending frequency of the message is abnormal, and if the sending frequency of the message is too high or too low, judging that the message is a malformed message. 5. Message source address: checking whether the source address of the message is legal or not, and if the source address of the message is false or illegal, judging that the message is malformed. 6. Message repeatability: checking whether the message is repeatedly sent, and if the message is repeatedly sent for a plurality of times, judging that the message is a malformed message.
As some optional embodiments of the present application, after allocating the response packet according to the source address, it is further required that: and deleting the source address in the database under the condition that the target message sent by the first network element is received, wherein the target message is the message of the response message successfully received by the first network element.
According to some optional embodiments of the application, the core network element is a session management function network element, and the private network element is a network element corresponding to the DN-AAA server.
The DN-AAA server is a server for authentication, authorization, and account management. AAA stands for Authentication, authorization and account management (Accounting), which are important components in networks for managing user identities and rights. The DN-AAA server is mainly used for realizing the following functions: 1. and (3) authentication: verifying the identity information of the user, ensuring that only authorized users can access the network resource 2: according to the identity and authority of the user, determining the resources and services which can be accessed by the user; 3. and (3) account management: managing account information of the user, including creating, modifying and deleting accounts, recording and tracking activities of the user; 4. auditing and billing: and recording the network use condition of the user for auditing and charging purposes. DN-AAA servers are often used in conjunction with other network devices (e.g., routers, firewalls, etc.) to provide comprehensive network access control and management functionality. The DN-AAA server can intensively manage the identity and authority of the user, simplify the complexity of network management and improve the security and usability of the network.
In the above steps, binding the data packet identification information with the proxy address and the message type information, and storing the source address of the request message, because the source addresses of the request messages are different each time, the application can ensure the forwarding of the response message, and ensure the uniqueness of the message identifications between different core network elements and special network elements in the signaling intercommunication gateway deployment environment.
Fig. 3 is a flowchart of another method for processing a message according to an embodiment of the present application, as shown in fig. 3, the method includes the following steps:
step S302, judging whether the received message is a malformed message, if so, executing discarding operation on the message.
Step S304, determining whether the received message is a response message, executing step S310 if the received message is a response message, and executing step S306 if the received message is not a response message/if the received message is a request message.
Step S306, the head of the request message is analyzed, the data packet identification information and the message type information are obtained, the source address and the destination address in the data packet identification information are determined, and the proxy address corresponding to the source address and the proxy address corresponding to the destination address are determined. And storing the source address of the request message containing the port information into a Redis database by taking a character string consisting of the proxy address corresponding to the source address, the proxy address corresponding to the target address, the data packet identification information and the message type information as index information.
Step S308, the source address is replaced by the local proxy address corresponding to the core network element or the private network element, the destination address is replaced by the local proxy address corresponding to the core network element or the private network element, the request message is forwarded, and step S314 is executed.
Wherein the core network elements include, but are not limited to: session management function network elements, which refer to devices or modules in a network responsible for managing and maintaining session states, generally have the following functions: responsible for establishing and terminating sessions: when a user initiates a session request, the session management function network element assigns a unique session identifier and associates the identifier with the user's session information. When the session is ended, the session management function network element releases the relevant resources and clears the session information. The state responsible for tracking and maintaining the session: the session management function network element will record status information of each session, such as session start time, duration, participant information, etc. Such status information may be used to monitor and manage the running of the session. Session routing and forwarding: based on the session identifier and the destination address, the session data is forwarded to the correct destination. The session management function network element may send session data to the appropriate target device or module according to a pre-configured routing policy. Session security and rights control: is responsible for ensuring the security and confidentiality of the session. The session management function network element may implement security measures such as authentication, encryption, and access control to protect session data from unauthorized access. Session monitoring and troubleshooting: and is responsible for monitoring the running condition of the session and performing fault removal when faults or anomalies occur. Session management function network elements may collect and analyze session data in order to identify and resolve problems in time.
In step S310, the header of the response message is parsed, the packet identification information and the message type information are obtained, the proxy address corresponding to the target address and the proxy address corresponding to the source address are determined, and the character string composed of the proxy address corresponding to the target address, the proxy address corresponding to the source address, the packet identification information and the message type information is used as index information, wherein it is noted that the index information of the response message and the index information of the request message should be kept consistent. And according to the index information, acquiring a source address of the corresponding request message from the Redis database, and if the acquisition of the data from the Redis fails, discarding the response message and not executing the forwarding operation.
Step S312, the replacement source address is a local proxy address corresponding to the core network element or the private network element, the replacement destination address is a local proxy address corresponding to the core network element or the private network element, and the response message is forwarded.
Step S314, deleting the Redis data corresponding to the index information under the condition that the response message is successfully forwarded.
As shown in fig. 4, another method for processing a message is further provided in an embodiment of the present application, including:
step S402, the signaling intercommunication gateway receives a request message sent by a first network element to a second network element, wherein the request message at least carries: the data packet identification information and the message type information, wherein the first network element is a core network element, the second network element is a private network element, or the first network element is a private network element, and the second network element is a core network element;
Step S404, the signaling intercommunication gateway receives a response message sent by the second network element to the first network element, searches a source address in a database according to target index information, and forwards the response message to the network element corresponding to the source address, wherein the target index information is determined according to the data packet identification information, the message type information, the first proxy address corresponding to the first network element and the second proxy address corresponding to the second network element.
It should be noted that, the preferred scheme of the embodiment shown in fig. 4 may refer to the related schemes of the embodiments shown in fig. 2 and 3, and will not be described herein.
Fig. 5 is a block diagram of a message processing system according to an embodiment of the present application, as shown in fig. 5, the system includes: a signaling interworking gateway 50, a first network element 52, and a second network element 54, wherein,
the signaling intercommunication gateway 50 is respectively in communication connection with the first network element 52 and the second network element 54, and is used for executing the message processing method shown in fig. 2;
the first network element 52 is configured to send a request message or a response message to the second network element 54;
the second network element 54 is configured to send a request message or a response message to the first network element 52, where the first network element 52 is a core network element, the second network element 54 is a private network element, or the first network element 52 is a private network element, and the second network element 54 is a core network element.
Fig. 7 is a block diagram of a message processing apparatus according to an embodiment of the present application, as shown in fig. 7, including:
the receiving module 70 is configured to receive a request packet sent by a first network element to a second network element, where the request packet at least carries: the data packet identification information and the message type information, wherein the first network element is a core network element, the second network element is a private network element, or the first network element is a private network element, and the second network element is a core network element;
a determining module 72, configured to allocate a first proxy address to a source address corresponding to the first network element, allocate a second proxy address to a destination address corresponding to the second network element, and determine target index information according to the packet identification information, the message type information, the first proxy address, and the second proxy address;
a storage module 74, configured to store a source address in a database corresponding to the signaling interworking gateway according to the target index information;
the sending module 76 is configured to receive a response message sent by the second network element to the first network element, search a source address corresponding to the first network element in the database according to the target index information, and forward the response message to the first network element corresponding to the source address.
Note that each module in fig. 7 may be a program module (for example, a set of program instructions for implementing a specific function), or may be a hardware module, and for the latter, it may be represented by the following form, but is not limited thereto: the expression forms of the modules are all a processor, or the functions of the modules are realized by one processor.
It should be noted that, the preferred implementation manner of the embodiment shown in fig. 7 may refer to the related description of the embodiment shown in fig. 2, which is not repeated herein.
Fig. 8 shows a block diagram of a hardware structure of a computer terminal (or mobile device) for implementing a method of processing a message. As shown in fig. 8, the computer terminal 80 (or mobile device 80) may include one or more processors 802 (shown in the figures as 802a, 802b, … …,802 n) (the processor 802 may include, but is not limited to, a microprocessor MCU or a processing device such as a programmable logic device FPGA), a memory 804 for storing data, and a transmission module 806 for communication functions. In addition, the method may further include: a display, an input/output interface (I/O interface), a Universal Serial BUS (USB) port (which may be included as one of the ports of the BUS), a network interface, a power supply, and/or a camera. It will be appreciated by those of ordinary skill in the art that the configuration shown in fig. 8 is merely illustrative and is not intended to limit the configuration of the electronic device described above. For example, the computer terminal 80 may also include more or fewer components than shown in FIG. 8, or have a different configuration than shown in FIG. 8.
It should be noted that the one or more processors 802 and/or other data processing circuits described above may be referred to herein generally as "data processing circuits. The data processing circuit may be embodied in whole or in part in software, hardware, firmware, or any other combination. Furthermore, the data processing circuitry may be a single stand-alone processing module, or incorporated, in whole or in part, into any of the other elements in the computer terminal 80 (or mobile device). As referred to in embodiments of the application, the data processing circuit acts as a processor control (e.g., selection of the path of the variable resistor termination connected to the interface).
The memory 804 may be used to store software programs and modules of application software, such as program instructions/data storage devices corresponding to the processing methods of the messages in the embodiments of the present application, and the processor 802 executes the software programs and modules stored in the memory 804, thereby executing various functional applications and data processing, that is, implementing the processing methods of the messages described above. The memory 804 may include high-speed random access memory, but may also include non-volatile memory, such as one or more magnetic storage devices, flash memory, or other non-volatile solid state memory. In some examples, the memory 804 may further include memory located remotely from the processor 802, which may be connected to the computer terminal 80 via a network. Examples of such networks include, but are not limited to, the internet, intranets, local area networks, mobile communication networks, and combinations thereof.
The transmission module 806 is used to receive or transmit data via a network. The specific examples of the network described above may include a wireless network provided by a communication provider of the computer terminal 80. In one example, the transmission module 806 includes a network adapter (Network Interface Controller, NIC) that can connect to other network devices through a base station to communicate with the internet. In one example, the transmission module 806 may be a Radio Frequency (RF) module for communicating with the internet wirelessly.
The display may be, for example, a touch screen type Liquid Crystal Display (LCD) that may enable a user to interact with a user interface of the computer terminal 80 (or mobile device).
It should be noted here that, in some alternative embodiments, the computer device (or the electronic device) shown in fig. 8 may include hardware elements (including circuits), software elements (including computer code stored on a computer readable medium), or a combination of both hardware elements and software elements. It should be noted that fig. 8 is only one example of a specific example, and is intended to illustrate the types of components that may be present in the computer device (or electronic device) described above.
It should be noted that, the electronic device shown in fig. 8 is configured to execute the processing method of the message shown in fig. 2, so the explanation of the method for executing the command is also applicable to the electronic device, and will not be repeated here.
The embodiment of the application also provides a nonvolatile storage medium, which comprises a stored program, wherein the program runs to control the equipment where the storage medium is positioned to execute the processing method of the message.
The nonvolatile storage medium executes a program of the following functions: the signaling intercommunication gateway receives a request message sent by a first network element to a second network element, wherein the request message at least carries: the data packet identification information and the message type information, wherein the first network element is a core network element, the second network element is a private network element, or the first network element is a private network element, and the second network element is a core network element; the signaling intercommunication gateway allocates a first proxy address for a source address corresponding to the first network element, allocates a second proxy address for a destination address corresponding to the second network element, and determines target index information according to the data packet identification information, the message type information, the first proxy address and the second proxy address; storing a source address in a database corresponding to the signaling intercommunication gateway according to the target index information; the signaling intercommunication gateway receives a response message sent by the second network element to the first network element, searches a source address in a database according to the target index information, and forwards the response message to the network element corresponding to the source address.
The embodiment of the application also provides electronic equipment, which comprises: the system comprises a memory and a processor, wherein the processor is used for running a program stored in the memory, and the program runs to execute the processing method of the message.
The processor is configured to execute a program that performs the following functions: the signaling intercommunication gateway receives a request message sent by a first network element to a second network element, wherein the request message at least carries: the data packet identification information and the message type information, wherein the first network element is a core network element, the second network element is a private network element, or the first network element is a private network element, and the second network element is a core network element; the signaling intercommunication gateway allocates a first proxy address for a source address corresponding to the first network element, allocates a second proxy address for a destination address corresponding to the second network element, and determines target index information according to the data packet identification information, the message type information, the first proxy address and the second proxy address; storing a source address in a database corresponding to the signaling intercommunication gateway according to the target index information; the signaling intercommunication gateway receives a response message sent by the second network element to the first network element, searches a source address in a database according to the target index information, and forwards the response message to the network element corresponding to the source address.
The foregoing embodiment numbers of the present application are merely for the purpose of description, and do not represent the advantages or disadvantages of the embodiments.
In the foregoing embodiments of the present application, the descriptions of the embodiments are emphasized, and for a portion of this disclosure that is not described in detail in this embodiment, reference is made to the related descriptions of other embodiments.
In the several embodiments provided in the present application, it should be understood that the disclosed technology may be implemented in other manners. The above-described embodiments of the apparatus are merely exemplary, and the division of the units, for example, may be a logic function division, and may be implemented in another manner, for example, a plurality of units or components may be combined or may be integrated into another system, or some features may be omitted, or not performed. Alternatively, the coupling or direct coupling or communication connection shown or discussed with each other may be through some interfaces, units or modules, or may be in electrical or other forms.
The units described as separate parts may or may not be physically separate, and parts displayed as units may or may not be physical units, may be located in one place, or may be distributed on a plurality of units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of this embodiment.
In addition, each functional unit in the embodiments of the present application may be integrated in one processing unit, or each unit may exist alone physically, or two or more units may be integrated in one unit. The integrated units may be implemented in hardware or in software functional units.
The integrated units, if implemented in the form of software functional units and sold or used as stand-alone products, may be stored in a computer readable storage medium. Based on such understanding, the technical solution of the present application may be embodied in essence or a part contributing to the related art or all or part of the technical solution, in the form of a software product stored in a storage medium, including several instructions for causing a computer device (which may be a personal computer, a server or a network device, etc.) to perform all or part of the steps of the method according to the embodiments of the present application. And the aforementioned storage medium includes: a U-disk, a Read-Only Memory (ROM), a random access Memory (RAM, random Access Memory), a removable hard disk, a magnetic disk, or an optical disk, or other various media capable of storing program codes.
The foregoing is merely a preferred embodiment of the present application and it should be noted that modifications and adaptations to those skilled in the art may be made without departing from the principles of the present application, which are intended to be comprehended within the scope of the present application.
Claims (12)
1. A method for processing a message, comprising:
the signaling intercommunication gateway receives a request message sent by a first network element to a second network element, wherein the request message at least carries: the data packet identification information and the message type information, wherein the first network element is a core network element, the second network element is a private network element, or the first network element is a private network element, and the second network element is a core network element;
the signaling intercommunication gateway allocates a first proxy address for a source address corresponding to the first network element, allocates a second proxy address for a destination address corresponding to the second network element, and determines target index information according to the data packet identification information, the message type information, the first proxy address and the second proxy address;
according to the target index information, the source address is stored in a database corresponding to the signaling intercommunication gateway;
The signaling intercommunication gateway receives a response message sent by the second network element to the first network element, searches the source address in the database according to the target index information, and forwards the response message to the network element corresponding to the source address.
2. The method according to claim 1, wherein forwarding the response message to the network element corresponding to the source address comprises:
analyzing the response message to obtain the data packet identification information and the message type information;
searching the target index information according to the data packet identification information and the message type information;
searching the source address in the database according to the target index information;
and sending the response message to the network element corresponding to the source address.
3. The method of claim 2, wherein looking up the source address in the database based on the target index information comprises:
and discarding the response message under the condition that the source address cannot be found in the database according to the target index information.
4. The method according to claim 2, wherein, according to the target index information, after storing the source address in a database corresponding to the signaling interworking gateway, the method further comprises:
Adding the first proxy address and the second proxy address to the request message to obtain a target request message;
and forwarding the target request message to the second network element.
5. The method of claim 1, wherein the signaling interworking gateway receiving the request message sent by the first network element to the second network element comprises:
determining whether the message length of the request message is within a preset interval;
discarding the request message under the condition that the message length of the request message is not within the preset interval;
determining whether the format of the request message is a normal format or not under the condition that the message length of the request message is within the preset interval;
discarding the message under the condition that the format of the request message is not the normal format;
determining whether the request message comprises abnormal characters and/or abnormal codes or not under the condition that the format of the request message is the normal format;
and discarding the request message under the condition that the request message comprises the abnormal character and/or the abnormal code.
6. The method of claim 1, wherein after assigning the response message according to the source address, the method further comprises:
And deleting the source address in the database under the condition that the target message sent by the first network element is received, wherein the target message is the message of the response message successfully received by the first network element.
7. The method of claim 1, wherein the core network element is a session management function network element, and the private network element is a network element corresponding to a DN-AAA server.
8. A method for processing a message, comprising:
the signaling intercommunication gateway receives a request message sent by a first network element to a second network element, wherein the request message at least carries: the data packet identification information and the message type information, wherein the first network element is a core network element, the second network element is a private network element, or the first network element is a private network element, and the second network element is a core network element;
the signaling intercommunication gateway receives a response message sent by the second network element to the first network element, searches a source address in a database according to target index information, and forwards the response message to the network element corresponding to the source address, wherein the target index information is determined according to the data packet identification information, the message type information, a first proxy address corresponding to the first network element and a second proxy address corresponding to the second network element.
9. A system for processing a message, comprising: a signaling interworking gateway, a first network element, and a second network element, wherein,
the signaling intercommunication gateway is respectively in communication connection with the first network element and the second network element and is used for executing the message processing method of any one of claims 1 to 8;
the first network element is used for sending a request message or a response message to the second network element;
the second network element is configured to send a request message or a response message to the first network element, where the first network element is a core network element, and the second network element is a private network element, or the first network element is a private network element, and the second network element is a core network element.
10. A message processing apparatus, comprising:
a receiving module, configured to receive a request packet sent by a first network element to a second network element, where the request packet at least carries: the data packet identification information and the message type information, wherein the first network element is a core network element, the second network element is a private network element, or the first network element is a private network element, and the second network element is a core network element;
a determining module, configured to allocate a first proxy address to a source address corresponding to the first network element, allocate a second proxy address to a destination address corresponding to the second network element, and determine target index information according to the packet identification information, the message type information, the first proxy address and the second proxy address;
The storage module is used for storing the source address in a database corresponding to the signaling intercommunication gateway according to the target index information;
and the sending module is used for receiving a response message sent by the second network element to the first network element, searching the source address in the database according to the target index information, and forwarding the response message to the network element corresponding to the source address.
11. A non-volatile storage medium, characterized in that the non-volatile storage medium comprises a stored program, wherein the program, when run, controls a device in which the non-volatile storage medium is located to perform the method of processing a message according to any one of claims 1 to 8.
12. An electronic device, comprising: a memory and a processor for executing a program stored in the memory, wherein the program is executed to perform the method of processing a message according to any one of claims 1 to 8.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202311016874.1A CN117041211A (en) | 2023-08-11 | 2023-08-11 | Message processing method and device, nonvolatile storage medium and electronic equipment |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202311016874.1A CN117041211A (en) | 2023-08-11 | 2023-08-11 | Message processing method and device, nonvolatile storage medium and electronic equipment |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN117041211A true CN117041211A (en) | 2023-11-10 |
Family
ID=88638678
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202311016874.1A Pending CN117041211A (en) | 2023-08-11 | 2023-08-11 | Message processing method and device, nonvolatile storage medium and electronic equipment |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN117041211A (en) |
-
2023
- 2023-08-11 CN CN202311016874.1A patent/CN117041211A/en active Pending
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| US6885871B2 (en) | Method for the addressing of a mobile terminal | |
| US8250184B2 (en) | System, network entities and computer programs for configuration management of a dynamic host configuration protocol framework | |
| EP2033370B1 (en) | Service-centric communication network monitoring | |
| CN109981803B (en) | Service request processing method and device | |
| US20150358470A1 (en) | Intercepting voice over ip communications and other data communications | |
| US20050060390A1 (en) | Method and system for plug and play installation of network entities in a mobile wireless internet | |
| CN101820432A (en) | Safety control method and device of stateless address configuration | |
| EP1701516A1 (en) | Method for facilitating application server functionality and access node comprising same | |
| CN110913011B (en) | Session holding method, session holding device, readable storage medium and electronic device | |
| EP3016423A1 (en) | Network safety monitoring method and system | |
| CN110012322A (en) | A kind of method and system that view networking service is initiated | |
| US20050144289A1 (en) | Connection control system, connection control equipment and connection management equipment | |
| US9942766B1 (en) | Caller validation for end service providers | |
| US8776237B2 (en) | Method and apparatus for end-to-end security in a heterogeneous network | |
| EP1687934B1 (en) | Apparatus for mediating in management orders | |
| CN115086276B (en) | Address management method, device, equipment and system | |
| EP3836487A1 (en) | Internet access behavior management system, device and method | |
| JP6462783B2 (en) | IP-PBX system, IP-PBX setting automation method, and IP-PBX setting automation program | |
| US20040117473A1 (en) | Proxy network control apparatus | |
| CN111327619A (en) | Micro-service data exchange method and device | |
| US8055746B2 (en) | Method and system for improved management of a communication network by extending the simple network management protocol | |
| CN117041211A (en) | Message processing method and device, nonvolatile storage medium and electronic equipment | |
| CN114157632B (en) | Network isolation method, device, equipment and storage medium | |
| Cisco | Configuring the Cisco SIP Proxy Server (CSPS) | |
| CN110995510B (en) | Management method and device for realizing VOIP service zero configuration in POL |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination |