CN1281038C - Method of carrying out radio data service integrated network gate - Google Patents
Method of carrying out radio data service integrated network gate Download PDFInfo
- Publication number
- CN1281038C CN1281038C CNB200410026629XA CN200410026629A CN1281038C CN 1281038 C CN1281038 C CN 1281038C CN B200410026629X A CNB200410026629X A CN B200410026629XA CN 200410026629 A CN200410026629 A CN 200410026629A CN 1281038 C CN1281038 C CN 1281038C
- Authority
- CN
- China
- Prior art keywords
- address
- packet
- service
- business
- service processor
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Expired - Fee Related
Links
Images
Abstract
The present invention relates to a method of carrying out a radio data service integrated network gate. The integrated network gate receives an IP package from a client. If a purpose address of the IP package is an IP address of the integrated network gate, and a purpose terminal port is occupied by an application program or a service processor of a computer, the IP package is directly processed by the application program or the service processor of the computer. If the purpose address of the IP package is different from the IP address of the integrated network gate, the IP package is verified according to rules and is processed according to different situations. The service processor receives a data package and processes the data package, and finally, a charging call ticket is generated. Because the present invention adopts a low level protocol of a TCP/IP protocol, the cost for unpacking the package and repacking the package is reduced, the processing ability of a system is improved and is not limited by an HTTP protocol any longer, and the ability of interconnection and intercommunication of the system is improved. The present invention avoids the defect caused by the phenomenon that URL is rewritten and Cookie is rewritten, the stability of the system is enhanced, and the system also has safety, good adaptability and expansibility.
Description
Technical field
The present invention relates to RFDC value-added service field, relate in particular to and utilize unified synthesized gateway to visit the method for various cdma wireless data application, content resource.
Background technology
Along with the progressively startup that the widespread usage and the 3G network of 2.5G equipment are built, wireless data service has become the emphasis that domestic and overseas operators is paid close attention to.Meanwhile, the technology of wireless data service itself is also in develop rapidly, WAP (Wireless Application Protocol, WAP (wireless application protocol)), J2ME (Java 2 pocket editions), BREW (Binary Runtime Environment for Wireless, wireless system binary system environment) have opened the gate for wireless with fusions internet two big industries.The competition in wireless communications market future can be summed up as the competition of wireless data service.
Core component---the wireless data service synthesized gateway of wireless application development, authentication, authentication, information filtering, access control, billing function that operation systems such as it should be realized, and WAP browses, J2ME/BREW download, the online application of J2ME/BREW, LBS (location-based service), Multimedia Message need jointly.
Existing wireless data service synthesized gateway product often relies on the WAP door and realizes, be actually the application program of a WAP, when dispatching from the factory, terminal sets in advance a WAP door as unified inlet by operator, each WAP request and URL (Uniform Resoure Locator uniform resource locator) in the response message link and all be replaced by with the synthesized gateway is the URL of prefix, each request all is with HTTP (Hyper Text Transfer Protocol, HTML (Hypertext Markup Language)) mode is visited dynamic routine on the synthesized gateway, this program is at first resolved the URL of user's request, according to URL and HTTP head the user is authenticated and authentication, initiating request by this program again gives professional, after the request that the business of receiving is sent, URL hyperlink in the response contents is carried out URL one by one replaces, if comprise that in request header and response HTTP Cookie (places a small text file on the client computer by Web server, identity card as the sign client computer), then also need Cookie is done Path (path) conversion, replacing with the Path of Cookie with synthesized gateway IP or its domain name is the character string of prefix.Owing to be subjected in the http protocol predetermined restricted such as URL length, and need the URL content is replaced and the Cookie replacement to all carrying out in the process of two-way interactive, this scheme performance is lower, to the URL limited length system of wireless application itself.
Usually need the server of direct accesses network side on the other hand in the online application of J2ME/BREW, the flow of Chan Shenging has been walked around synthesized gateway like this, and synthesized gateway can't be chargeed to this type of application.
Prior problem is, application provider uses the resource of content supplier as a rule not based on http protocol, and be to use special-purpose Socket interface, under such situation, present synthesized gateway also can't be supported, can't satisfy operator it is realized management, control and the requirement of chargeing.
Summary of the invention
The object of the present invention is to provide a kind of method that realizes the wireless data service synthesized gateway.Only need to revise the configuration parameter of access server (as PDSN) or AAA (Authentication, Authorization, Accounting authentication, mandate, note are taken) server, the packet route of terminal is pointed to synthesized gateway, perhaps on the egress router of the inner network segment of operator directly the wireless data service synthesized gateway be set to export route, can realize functions such as authentication, authentication, information filtering, access control, for end-user access business, Operational Visit content resource provide service.
Technical scheme of the present invention is:
1.1 synthesized gateway is received the IP bag from client computer, handles by 1.2 or 1.3 steps respectively;
1.2 the destination address as IP bag is an IP address of synthesized gateway, and destination interface taken by native application or service processor, is then directly handled by native application or service processor;
1.3 if the destination address of IP bag is different with IP address of synthesized gateway, then carries out regular verification, and according to circumstances handle by one of following three kinds of modes:
Directly do not abandon process ends 1.3.1 will meet the direct packet of transmitting rule and business process rule;
1.3.2 will meet the target ip address that the direct IP packet of transmitting rule is transmitted past this packet, synthesized gateway directly is transmitted to client computer, process ends after receiving the packet that returns; Under the situation that needs NAT (network address translation) ability, need revise IP packet packet header when transmitting mutual IP packet;
1.3.3 will meet the destination address of IP packet of business process rule and service processor IP address and the Business Processing port that destination interface is revised as the business process rule appointment; Perhaps keep original packet header, increasing a service processor IP address and a Business Processing port with the business process rule appointment in addition again is the packet header of destination address and port; Transmit the Business Processing port of packet to the service processor IP address at last; Changeed for 1.4 steps;
1.4 service processor is received packet and is handled.
Service processor in the step 1.4 is handled the packet that receives, and comprising:
2.1 judge the service bearer agreement according to the port numbers of receiving data by the service port definition rule, as http, ftp;
2.2 obtain relevant information and user profile according to bearing protocol, carry out basic authentication and authentication;
2.3 the information inquiry configuration database according to obtaining in 2.2 obtains corresponding service/content information, information filtering rule;
2.4 according to business/content information, customer information inquiry customer database, obtain the authority information that this client uses this business/content, can also comprise charging way, prepayment information;
2.5 have no right to use this business/content as this client, then return error message, and log, process ends, or
2.6 have the right to use this business/content as this client, and satisfied charging condition then service processor initiate to connect to business/content server;
2.7 transmit request, the difference according to the service bearer agreement in this step may reorganize packet by needs;
2.8 IP obtains response from destination server;
Give the client 2.10 return response, and log.
The information of obtaining in the step 2.2, be meant: analyze the packet of receiving, obtain source IP address, purpose IP address and port numbers, and obtain its distinctive parameter (the URL parameter that requires as http protocol) according to the service bearer agreement, and according to these parameter analyses acquisition customer informations, and inquire about customer database (physical database, AAA etc.) and carry out basic authentication and authentication, can comprise specifically whether the user has the right by gateway, whether have the right to visit this URL or purpose IP address etc.
Between step 2.8 and step 2.9, also have a step, promptly information filtering is carried out in the response of returning according to the information filtering rule.
A step that generates charging bill in the end can also be arranged.
This method has at first solved management, control and the charging requirement of the resource of use content supplier of application provider, secondly for the application based on the HTTP carrying provides transparent seamless solution, also taken into account application simultaneously based on other TCP/IP upper-layer protocols.Compared with prior art, the method for the invention is the lower layer protocol of ICP/IP protocol owing to what adopt, has reduced the expense that unpacks and repack, and system processing power improves greatly; Also no longer be subjected to the restriction of http protocol, improved the interconnection and interflow ability of system; Avoided having improved the stability of system because URL rewrites, Cookie rewrites the defective that causes; And terminal isolated the greatly fail safe of Ti Gaoing fully with communicating by letter of application, application and content resource.The service processor part that can be used as synthesized gateway is deployed on the same station server in actual applications, also can dispose separately, possesses better flexibility and autgmentability.
Description of drawings
Fig. 1 is a flow chart of the present invention.
Fig. 2 is the service processor workflow diagram among the present invention.
Fig. 3 is that the present invention is applied to by synthesized gateway but the not schematic diagram by the WAP gateway access application server of terminal use.
Fig. 4 is that the present invention is applied to mobile phone users by WAP gateway, synthesized gateway access application server, and the PC terminal is the schematic diagram by the WAP gateway access application server by synthesized gateway but not.
Fig. 5 is that the present invention is applied to mobile phone users by WAP gateway, synthesized gateway access application server and external the Internet, and the PC terminal is the schematic diagram of access application server and external the Internet by WAP gateway, synthesized gateway but directly.
Fig. 6 is that the present invention is applied to mobile phone users by synthesized gateway but by WAP gateway access application server and external the Internet, and the PC terminal is the schematic diagram of access application server and external the Internet by WAP gateway, synthesized gateway but directly.
Fig. 7 is the schematic diagram that the present invention is applied to the application server access content server.
Embodiment
Be described in further detail below in conjunction with the enforcement of accompanying drawing technical scheme:
At first explanation is used server in operator's in-house network in the operator's private network among Fig. 3, Fig. 4, Fig. 5, Fig. 6, Fig. 7, may use to keep the IP address; And the Internet public network server is used legitimate ip address, can arrive this server at arbitrary node visit of the Internet.
Fig. 1 is a flow chart of the present invention, i.e. wireless data service synthesized gateway handle packet schematic diagram.At first purpose IP address is synthesized gateway IP, and the IP that destination interface is used by this locality or service processor directly takies bag is directly submitted to local application/service processor processing; As do not meet this condition, then determine the whereabouts of IP bag according to the verification rule.The verification of IP rule comprises at least: whether the destination address of packet and port have been IP address and the port numbers of directly transmitting or mail to service processor, service processor with application/relevance, processing rule.
Fig. 2 is a service processor workflow diagram among the present invention.Service processor step referring to summary of the invention.The miscellaneous service bearing protocol has determined the difference of the packet mode that the service processor analysis is received, checks URL, request mode, HTTP head as http protocol, and the File Transfer Protocol inspection is aggressive mode or Passive Mode, POP3 protocol testing username and password.The agreement that has can't be with user profile in request data package, that also needs to go according to source IP inquiry MDN or user name to equipment such as AAA.
As follows according to Fig. 1 and Fig. 2 simple example: terminal to
Http:// www.yahoo.comInitiate request, synthesized gateway (10.0.0.1) receives that destination server is
Www.yahoo.com, destination interface is 80 IP packet, synthesized gateway finds to meet business process rule, service processor IP address and synthesized gateway in the business process rule are same, the Business Processing port is 8080, and then the purpose IP address with the IP packet changes 10.0.0.1 into, and destination interface changes 8080 into; The service processor that operates in 8080 ports obtains request, then obtains URL, MDN parameter from the HTTP head of request package, and initiate and
Www.yahoo.comMutual, and return results is given the client.
Fig. 3 is that the present invention is applied to by synthesized gateway but the not schematic diagram by the WAP gateway access application server of terminal use.As shown in Figure 3, described system comprises two kinds of user terminals: portable terminal and PC terminal.Terminal is set up the IP data by access server such as PDSN and is connected, and the IP message that access server sends terminal mails to IP address of synthesized gateway.So terminal mail to the request of application server all will be through synthesized gateway, synthesized gateway can realize functions such as authentication, charging, access control in the reason process herein by technical scheme 1.2 and 1.3 analyzing and processing data bags partly.
Fig. 4 is that the present invention is applied to mobile phone users by WAP gateway, synthesized gateway access application server, and the PC terminal is the schematic diagram by the WAP gateway access application server by synthesized gateway but not; This figure is that with the difference of Fig. 3 professional need of WAP of portable terminal is transmitted to synthesized gateway by WAP gateway, other business such as J2ME/BREW then can directly be connected with synthesized gateway, and the default gateway IP address of WAP gateway must be set to IP address of synthesized gateway.If the built-in WAP gateway function of synthesized gateway is then identical with Fig. 3.
Fig. 5 is that the present invention is applied to mobile phone users by WAP gateway, synthesized gateway access application server and external the Internet, and the PC terminal is the schematic diagram of access application server and external the Internet by WAP gateway, synthesized gateway but directly.Access server (as PDSN) or the aaa server user name when inserting is given the different network segment of terminal distribution, for example portable terminal adopts 165 user names to realize dial-up access, and the PC terminal adopts the 165# user name to realize inserting, and access server distributes the IP address of different segment for PC, portable terminal according to user name.Access server or router are done tactful route according to source IP network section and are made PC terminal by WAP gateway, synthesized gateway but directly access application server and external the Internet, and the WAP service needed of mobile phone users is by WAP gateway, synthesized gateway access application server and external the Internet, other business such as J2ME/BREW then can directly be connected with synthesized gateway, and the default gateway IP address of WAP gateway must be set to IP address of synthesized gateway.So portable terminal and WAP gateway mail to the request of application server and external the Internet all will be through synthesized gateway, synthesized gateway can realize functions such as authentication, charging, access control in the reason process herein by 1.2 and 1.3 analyzing and processing data bags of technical scheme part.If the built-in WAP gateway function of synthesized gateway is then identical with Fig. 6.The position of WAP gateway is placed on before the tactful route among this figure, but also can after being placed on tactful route in actual applications.The advantage of this scheme has been to reduce the flow of synthesized gateway, has also reduced the restriction to the PC terminal, but also can't realize simultaneously the functions such as IP charge on traffic, access control to the PC terminal on synthesized gateway.
Fig. 6 is that the present invention is applied to mobile phone users by synthesized gateway but by WAP gateway access application server and external the Internet, and the PC terminal is the schematic diagram of access application server and external the Internet by WAP gateway, synthesized gateway but directly.Access server (as PDSN) or the aaa server user name when inserting is given the different network segment of terminal distribution, for example portable terminal adopts 165 user names to realize dial-up access, and the PC terminal adopts the 165# user name to realize inserting, and access server distributes the IP address of different segment for PC, portable terminal according to user name.Access server or router are done tactful route according to source IP network section and are made PC terminal by WAP gateway, synthesized gateway but directly access application server and external the Internet; The IP message that portable terminal sends is mail to IP address of synthesized gateway by tactful route.So portable terminal mail to the request of application server and external the Internet all will be through synthesized gateway, synthesized gateway is by 1.2 and 1.3 analyzing and processing data bags of technical scheme part, can realize the functions such as authentication, charging, access control at portable terminal herein in the reason process.
Fig. 7 is the schematic diagram that the present invention is applied to the application server access content server; There are two kinds of application modes in this figure according to the position of application server.Application server is in operator's net, and the default gateway of the default gateway of application server or application server network segment egress router is set to IP address of synthesized gateway.So application server mail to the request of content server all will be through synthesized gateway, processing procedure and Fig. 4 of synthesized gateway are basic identical.Difference be if application server outside operator net, cannot be set to IP address of synthesized gateway by its default gateway, like this then must on synthesized gateway, open one the agreement port, and this port opened to application server as the content service port, application server is initiated request to synthesized gateway, synthesized gateway receives that the back replaces application server to communicate by letter with content server according to predefined matching strategy, and the result returned to application server, can realize functions such as authentication, charging, access control in the reason process herein.If packet does not meet predefined strategy then abandons.
As follows according to Fig. 7 simple example: the application provider's server (202.0.0.1) on the Internet is initiated request to synthesized gateway (220.0.0.1), destination interface is 10080, synthesized gateway finds that this port is taken by service processor, the service processor that operates in 1 0080 ports obtains request, find the 1900 port services of the content server 192.168.9.9 on the corresponding operator of this business internal network according to business rule, then service processor is initiated the request package that request also transmits self terminal fully to 192.168.9.9, and the respond packet that 192.168.9.9 returns is sent back to terminal.
Claims (4)
1, a kind of method that realizes the wireless data service synthesized gateway may further comprise the steps:
1.1 synthesized gateway is received the IP bag from client computer, handles by 1.2 or 1.3 steps respectively;
1.2 the destination address as IP bag is an IP address of synthesized gateway, and destination interface taken by native application or service processor, is then directly handled by native application or service processor;
1.3 if the destination address of IP bag is different with IP address of synthesized gateway, then carries out regular verification, and according to circumstances handle by one of following three kinds of modes:
Directly do not abandon process ends 1.3.1 will meet the direct packet of transmitting rule and business process rule;
1.3.2 will meet the target ip address that the direct IP packet of transmitting rule is transmitted past this packet, synthesized gateway directly is transmitted to client computer, process ends after receiving the packet that returns; Under the situation that needs the network address translation ability, need revise IP packet packet header when transmitting mutual IP packet;
1.3.3 will meet the destination address of IP packet of business process rule and service processor IP address and the Business Processing port that destination interface is revised as the business process rule appointment; Perhaps keep original packet header, increasing a service processor IP address and a Business Processing port with the business process rule appointment in addition again is the packet header of destination address and port; Transmit the Business Processing port of packet to the service processor IP address at last; Changeed for 1.4 steps;
1.4 service processor is received packet and is handled.
2, the method for the described realization wireless data service of claim 1 synthesized gateway is characterized in that, the service processor in the described step 1.4 is handled the packet that receives, and comprising:
2.1 judge the service bearer agreement by the service port definition rule according to the port numbers of receiving data;
2.2 the packet of receiving according to the service bearer protocal analysis, obtain source IP address, purpose IP address and port numbers, and obtain its distinctive parameter, and obtain customer information according to these parameter analyses according to the service bearer agreement, and the inquiry customer database, carry out basic authentication and authentication;
2.3 the information inquiry configuration database according to obtaining in 2.2 obtains corresponding service/content information, information filtering rule;
2.4, obtain the authority information that this client uses this business/content according to business/content information, customer information inquiry customer database;
2.5 have no right to use this business/content as this client, then return error message, and log, process ends, or
2.6 have the right to use this business/content as this client, and satisfied charging condition then service processor initiate to connect to business/content server;
2.7 transmit request;
2.8 IP obtains response from destination server;
Give the client 2.9 return response, and log.
3, the method for the described realization wireless data service of claim 2 synthesized gateway is characterized in that, also has a step between step 2.8 and step 2.9, promptly
According to the information filtering rule information filtering is carried out in the response of returning.
4, the method for the described realization wireless data service of claim 2 synthesized gateway is characterized in that, in the end also has a step that generates charging bill.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CNB200410026629XA CN1281038C (en) | 2004-03-21 | 2004-03-21 | Method of carrying out radio data service integrated network gate |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CNB200410026629XA CN1281038C (en) | 2004-03-21 | 2004-03-21 | Method of carrying out radio data service integrated network gate |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN1564552A CN1564552A (en) | 2005-01-12 |
| CN1281038C true CN1281038C (en) | 2006-10-18 |
Family
ID=34480669
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CNB200410026629XA Expired - Fee Related CN1281038C (en) | 2004-03-21 | 2004-03-21 | Method of carrying out radio data service integrated network gate |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN1281038C (en) |
Families Citing this family (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN104067563B (en) * | 2011-11-18 | 2017-10-31 | 瑞典爱立信有限公司 | Data distribution platform |
| CN102694821A (en) * | 2012-06-15 | 2012-09-26 | 杭州华三通信技术有限公司 | Method and device for assigning IP (Internet Protocol) addresses based on authentication information |
| CN102932406B (en) * | 2012-09-19 | 2018-07-27 | 邦讯技术股份有限公司 | Realize the method, apparatus and system surfed the Internet by WAP modes when flow unloading |
| CN106100863B (en) * | 2016-07-21 | 2020-02-21 | 网宿科技股份有限公司 | Method, device and system for providing value-added service |
| CN111914194B (en) * | 2020-07-02 | 2021-09-17 | 网联清算有限公司 | Business system changing method and device, electronic equipment and storage medium |
-
2004
- 2004-03-21 CN CNB200410026629XA patent/CN1281038C/en not_active Expired - Fee Related
Also Published As
| Publication number | Publication date |
|---|---|
| CN1564552A (en) | 2005-01-12 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| AU750059B2 (en) | Push information delivery method and its repeater | |
| KR101868180B1 (en) | Aggregating multiple functions into a single platform | |
| EP1351434B1 (en) | Billing method for an information communication network | |
| US7631101B2 (en) | Systems and methods for direction of communication traffic | |
| CN1314251C (en) | Comprehensive business platform and its business flow path control method | |
| US20040122951A1 (en) | Method and apparatus for providing Web users with a click-to-contact service | |
| CN102171673B (en) | Cross-layer pipelining optimizations for reduced roundtrips and improving quality of experience | |
| EP1345456A2 (en) | Mobile services platform architecture | |
| US20020101848A1 (en) | Systems and methods for on-location, wireless access of web content | |
| US20030145106A1 (en) | System and method for directing wireless data packet traffic | |
| Kim et al. | Architecture for implementing the mobile government services in Korea | |
| CN1249590A (en) | Method and device for agency of buffer memory specimen seal impression for radio subscriber in agent server | |
| CN1326652A (en) | Method for utilizing local resources in communication system | |
| CN101072197A (en) | Method and system for integrating electronic mails provided by multi servicers | |
| WO2004083995A2 (en) | Method and apparatus for interfacing web services with mobile terminal applications during a browser or sip session | |
| CN108702396A (en) | For the method for data processing, equipment and computer program and hierarchical domain name system area file | |
| WO2004010662A1 (en) | Electronic mail server, electronic mail delivery relaying method, and computer program | |
| CN101635887A (en) | Method for reading website information through mobile phone short message | |
| Varshney et al. | Wireless in the enterprise: requirements, solutions and research directions | |
| CN1281038C (en) | Method of carrying out radio data service integrated network gate | |
| US8010087B2 (en) | Mobile carrier capability | |
| US7526528B2 (en) | Network access arrangement | |
| CN101466088A (en) | System for Java wireless service charging and implementing method thereof | |
| US20020069283A1 (en) | Apparatus and method for providing communication service based on personal identifier in internet network | |
| KR20090086929A (en) | Method for refining address |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| C14 | Grant of patent or utility model | ||
| GR01 | Patent grant | ||
| CF01 | Termination of patent right due to non-payment of annual fee |
Granted publication date: 20061018 Termination date: 20150321 |
|
| EXPY | Termination of patent right or utility model |