EP3414969A1 - Procédé permettant de faire converger des données d'iot avec un noyau mobile - Google Patents

Procédé permettant de faire converger des données d'iot avec un noyau mobile

Info

Publication number
EP3414969A1
EP3414969A1 EP17705959.9A EP17705959A EP3414969A1 EP 3414969 A1 EP3414969 A1 EP 3414969A1 EP 17705959 A EP17705959 A EP 17705959A EP 3414969 A1 EP3414969 A1 EP 3414969A1
Authority
EP
European Patent Office
Prior art keywords
service
gateways
data
low power
network
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Ceased
Application number
EP17705959.9A
Other languages
German (de)
English (en)
Inventor
Samita Chakrabarti
Samy Touati
Ayush SHARMA
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Telefonaktiebolaget LM Ericsson AB
Original Assignee
Telefonaktiebolaget LM Ericsson AB
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Priority claimed from US15/042,450 external-priority patent/US10212030B2/en
Application filed by Telefonaktiebolaget LM Ericsson AB filed Critical Telefonaktiebolaget LM Ericsson AB
Publication of EP3414969A1 publication Critical patent/EP3414969A1/fr
Ceased legal-status Critical Current

Links

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W76/00—Connection management
    • H04W76/10—Connection setup
    • H04W76/12—Setup of transport tunnels
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W4/00—Services specially adapted for wireless communication networks; Facilities therefor
    • H04W4/70—Services for machine-to-machine communication [M2M] or machine type communication [MTC]
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W4/00—Services specially adapted for wireless communication networks; Facilities therefor
    • H04W4/80—Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication
    • Y—GENERAL TAGGING OF NEW TECHNOLOGICAL DEVELOPMENTS; GENERAL TAGGING OF CROSS-SECTIONAL TECHNOLOGIES SPANNING OVER SEVERAL SECTIONS OF THE IPC; TECHNICAL SUBJECTS COVERED BY FORMER USPC CROSS-REFERENCE ART COLLECTIONS [XRACs] AND DIGESTS
    • Y02—TECHNOLOGIES OR APPLICATIONS FOR MITIGATION OR ADAPTATION AGAINST CLIMATE CHANGE
    • Y02D—CLIMATE CHANGE MITIGATION TECHNOLOGIES IN INFORMATION AND COMMUNICATION TECHNOLOGIES [ICT], I.E. INFORMATION AND COMMUNICATION TECHNOLOGIES AIMING AT THE REDUCTION OF THEIR OWN ENERGY USE
    • Y02D30/00—Reducing energy consumption in communication networks
    • Y02D30/70—Reducing energy consumption in communication networks in wireless communication networks

Definitions

  • Embodiments of the invention relate to the field of mobile networks; and more specifically, to the mobile network and Internet of Things (IOT) convergence.
  • IOT Internet of Things
  • IPv6 Internet Protocol version 6 (IPv6) over Low Power Wireless Personal Area
  • 61owPAN IPv6 over Constrained Node Networks
  • 61o IPv6 over Constrained Node Networks
  • 61owPAN IPv6 over Constrained Node Networks
  • RFCs 4919, 4944, 6282, 6568, 6606, 6775 These devices connect directly to the Internet or Cloud systems via an access router and not through the network of a telecom operator.
  • a method in a network device selecting, by the network device based upon a service request from a customer, one or more device gateways from a plurality of device gateways.
  • the plurality of device gateways are communicatively coupled with a plurality of low powered devices, and the plurality of device gateways do not include a Subscriber Identity Module (SIM).
  • SIM Subscriber Identity Module
  • the method also includes transmitting configuration information over a public network to the selected one or more device gateways to cause the selected one or more device gateways to configure particular ones of the plurality of low power devices to perform actions according to the service request.
  • the method further includes receiving, from the selected one or more device gateways over the public network, data generated by at least some of the configured particular ones of the plurality of low power devices.
  • the method further includes establishing, specific to the one or more requested service actions, one or more GPRS Tunnel Protocol (GTP) tunnels with a Packet Data Network (PDN) gateway of a mobile network operator, and sending the received data over the one or more GTP tunnels to be processed by the mobile network operator.
  • GTP GPRS Tunnel Protocol
  • PDN Packet Data Network
  • the one or more GTP tunnels include a plurality of GTP tunnels, a first portion of the received data is sent over a first of the plurality of GTP tunnels to be processed by the mobile network operator, and a second portion of the received data is sent over a second of the plurality of GTP tunnels to be processed by the mobile network operator.
  • the service request identifies a plurality of service types, where each of the plurality of service types identifies a location or type of IOT device that can be used to identify the particular ones of the plurality of low power devices.
  • the first portion of the received data corresponds to a first of the plurality of service types, and the second portion of the received data corresponds to a second of the plurality of service types.
  • each of the plurality of GTP tunnels is a 3rd Generation
  • the public network comprises the Internet.
  • the at least some of the configured particular ones of the plurality of low power devices comprise sensor devices.
  • the sensor devices are temperature sensor devices or moisture sensor devices, and wherein the received data comprises data values generated by said temperature sensor devices or moisture sensor devices.
  • the service request identifies a service action.
  • the service action is to enable, disable, start, or stop collection of data from the particular ones of the plurality of low power devices.
  • the configuration information is based upon the identified service action.
  • the service request further identifies a service type, and the service type identifies a location or type of IOT device that can be used to identify the particular ones of the plurality of low power devices.
  • the service request does not include identifiers of the particular ones of the plurality of low power devices, and the selecting of the one or more device gateways from the plurality of device gateways is based upon the identified service type of the service request.
  • the service request further identifies a service sub type value of a sub type field.
  • the sub type field identifies a recipient of the data generated by the at least some of the configured particular ones of the plurality of low power devices.
  • the identified service sub type value of the service request identifies the mobile network operator.
  • a non-transitory computer-readable storage medium has instructions which, when executed by one or more processors of a network device, cause the network device to perform operations.
  • the operations include selecting, based upon a service request from a customer, one or more device gateways from a plurality of device gateways.
  • the plurality of device gateways are
  • the operations also include transmitting configuration information over a public network to the selected one or more device gateways to cause the selected one or more device gateways to configure particular ones of the plurality of low power devices to perform actions according to the service request.
  • the operations also include receiving, from the selected one or more device gateways over the public network, data generated by at least some of the configured particular ones of the plurality of low power devices.
  • the operations also include establishing, specific to the one or more requested service actions, one or more GTP tunnels with a PDN gateway of a mobile network operator, and sending the received data over the one or more GTP tunnels to be processed by the mobile network operator.
  • a device includes one or more processors and one or more non-transitory computer-readable storage media.
  • the one or more non- transitory computer-readable storage media have instructions which, when executed by the one or more processors, cause the device to perform operations.
  • the operations include selecting, based upon a service request from a customer, one or more device gateways from a plurality of device gateways.
  • the plurality of device gateways are communicatively coupled with a plurality of low powered devices, and the plurality of device gateways do not include a SIM.
  • the operations also include transmitting configuration information over a public network to the selected one or more device gateways to cause the selected one or more device gateways to configure particular ones of the plurality of low power devices to perform actions according to the service request.
  • the operations also include receiving, from the selected one or more device gateways over the public network, data generated by at least some of the configured particular ones of the plurality of low power devices.
  • the operations also include establishing, specific to the one or more requested service actions, one or more GTP tunnels with a PDN gateway of a mobile network operator, and sending the received data over the one or more GTP tunnels to be processed by the mobile network operator.
  • a network device can converge IOT devices not utilizing or including a SIM with a mobile network.
  • Figure 1 illustrates a block diagram of a system 100 converging IOT devices without a Subscriber Identity Module with a mobile network according to some embodiments
  • Figure 2 illustrates an exemplary version of system 100 including exemplary physical connections and layout between nodes and devices and the protocols and security features used on the connections according to some embodiments;
  • Figure 3 illustrates an exemplary 3GPP architecture 300 with a MARS service 114 according to some embodiments
  • Figure 4 is a network transaction diagram illustrating an exemplary transaction between the 61o GW 118, controller 108, MARS 120, AAA 124, and operator 130 for converging IOT devices according to some embodiments;
  • Figure 5 illustrates connectivity between network devices (NDs) within an exemplary network, as well as three exemplary implementations of the NDs, according to some embodiments;
  • FIG. 6 illustrates a general purpose control plane device 604 including hardware 640 comprising a set of one or more processor(s) 642 (which are often Commercial off-the-shelf (COTS) processors) and network interface controller(s) 644 (NICs; also known as network interface cards) (which include physical NIs 646), as well as non-transitory machine readable storage media 648 having stored therein centralized control plane (CCP) software 650), according to some embodiments;
  • processor(s) 642 which are often Commercial off-the-shelf (COTS) processors
  • NICs network interface controller
  • NICs network interface controller
  • CCP centralized control plane
  • Figure 7 is a flow diagram illustrating a method for converging IOT devices in a mobile network according to some embodiments
  • Figure 8 is a block diagram illustrating an exemplary architecture 800 of a system utilizing one or more L2/L3 networks to couple a MARS with one or more gateways according to some embodiments;
  • Figure 9 illustrates an exemplary 3GPP architecture 900 with a MARS service 114 coupled with one or more gateways over one or more L2/L3 networks according to some embodiments.
  • Figure 10 is a flow diagram illustrating a method for converging IOT devices with a mobile network according to some embodiments.
  • IOT mobile network internet of things
  • SIM Subscriber Identity Module
  • partitioning/sharing/duplication implementations types and interrelationships of system components, and logic partitioning/integration choices are set forth in order to provide a more thorough understanding of the present invention. It will be appreciated, however, by one skilled in the art that the invention may be practiced without such specific details. In other instances, control structures, gate level circuits and full software instruction sequences have not been shown in detail in order not to obscure the invention. Those of ordinary skill in the art, with the included descriptions, will be able to implement appropriate functionality without undue experimentation.
  • references in the specification to "one embodiment,” “an embodiment,” “an example embodiment,” etc., indicate that the embodiment described may include a particular feature, structure, or characteristic, but every embodiment may not necessarily include the particular feature, structure, or characteristic. Moreover, such phrases are not necessarily referring to the same embodiment. Further, when a particular feature, structure, or characteristic is described in connection with an embodiment, it is submitted that it is within the knowledge of one skilled in the art to affect such feature, structure, or characteristic in connection with other embodiments whether or not explicitly described.
  • Bracketed text and blocks with dashed borders may be used herein to illustrate optional operations that add additional features to embodiments of the invention. However, such notation should not be taken to mean that these are the only options or optional operations, and/or that blocks with solid borders are not optional in certain embodiments of the invention.
  • Coupled is used to indicate that two or more elements, which may or may not be in direct physical or electrical contact with each other, co-operate or interact with each other.
  • Connected is used to indicate the establishment of communication between two or more elements that are coupled with each other.
  • An electronic device stores and transmits (internally and/or with other electronic devices over a network) code (which is composed of software instructions and which is sometimes referred to as computer program code) and/or data using machine-readable media, such as non-transitory machine-readable media (e.g., machine-readable storage media such as magnetic disks, optical disks, read only memory, flash memory devices, phase change memory) and transitory machine-readable transmission media (e.g., electrical, optical, acoustical or other form of propagated signals - such as carrier waves, infrared signals).
  • machine-readable media such as non-transitory machine-readable media (e.g., machine-readable storage media such as magnetic disks, optical disks, read only memory, flash memory devices, phase change memory) and transitory machine-readable transmission media (e.g., electrical, optical, acoustical or other form of propagated signals - such as carrier waves, infrared signals).
  • an electronic device e.g., a computer
  • hardware and software such as a set of one or more processors coupled to one or more non-transitory machine-readable storage media (to store code for execution on the set of processors and data) and a set or one or more physical network interface(s) to establish network connections (to transmit code and/or data using propagating signals).
  • processors coupled to one or more non-transitory machine-readable storage media (to store code for execution on the set of processors and data) and a set or one or more physical network interface(s) to establish network connections (to transmit code and/or data using propagating signals).
  • a set of one or more processors coupled to one or more non-transitory machine-readable storage media (to store code for execution on the set of processors and data) and a set or one or more physical network interface(s) to establish network connections (to transmit code and/or data using propagating signals).
  • One or more parts of some embodiments may be implemented using different combinations of software, firmware, and/or hardware.
  • a network device is an electronic device that communicatively interconnects other electronic devices on the network (e.g., other network devices, end- user devices).
  • Some network devices are "multiple services network devices" that provide support for multiple networking functions (e.g., routing, bridging, switching, Layer 2 aggregation, session border control, Quality of Service, and/or subscriber management), and/or provide support for multiple application services (e.g., data, voice, and video).
  • a network device may include network interfaces.
  • a network interface may be physical or virtual; and in the context of IP, an interface address is an IP address assigned to a NI, be it a physical NI or virtual NI.
  • a virtual NI may be associated with a physical NI, with another virtual interface, or stand on its own (e.g., a loopback interface, a point-to-point protocol interface).
  • a NI physical or virtual
  • a loopback interface (and its loopback address) is a specific type of virtual NI (and IP address) of a NE/VNE (physical or virtual) often used for management purposes; where such an IP address is referred to as the nodal loopback address.
  • IP addresses of that ND are referred to as IP addresses of that ND; at a more granular level, the IP address(es) assigned to NI(s) assigned to a NE/VNE implemented on a ND can be referred to as IP addresses of that NE/VNE.
  • a data store includes a non-transitory computer readable storage medium that stores data.
  • the data store may include some or all of a non-transitory computer readable storage medium within an electronic device.
  • the data store may receive requests to read and write data to the non-transitory computer readable storage medium of the data store from a software process source representing software code currently executing via one or more processors on the electronic device.
  • the data store may also receive requests to read and write data from sources external to the electronic device.
  • the data store may be a standalone physical device that includes the non-transitory computer readable storage medium and basic hardware for performing read and write operations against the non-transitory computer readable storage medium.
  • the data store is coupled to external electronic device sources and receives requests from these external electronic device sources to read data from or write data to the non-transitory computer readable storage medium of the data store.
  • the data on the data store may be organized in a variety of data structures (e.g., a relational database, a directed graph structure, an association list) depending upon the requirements of the source that makes the read and write requests.
  • a cellular network or mobile network is a wireless network distributed over geographical areas called cells, each served by at least one transmitter and receiver. These cells generally do not overlap with each other. Some cells may transmit and receive on the same frequencies as other cells.
  • Portable transmitter/receiver units connect to the transmitter/receiver units for each cell to send and receive data such as voice communication and Internet Protocol packet data.
  • Such a system of multiple cells may support a number of portable transmitter/receivers that is greater than the amount of available frequency bandwidth needed by this number of portable transmitter/receivers.
  • a portable transmitter/receiver is able to move from one cell to another cell via a handover mechanism that coordinates the move between the original cell, the destination cell, and the portable transmitter/receiver.
  • mobile network technologies include those defined by the 3rd Generation Partnership Project, which include components such as LTE (Long Term Evolution), UMTS (Universal Mobile Telecommunications System), and GSM (Global System for Mobile
  • a Machine to Machine (M2M) Aggregation Routing Services collects Internet of Things (IOT) device data from low powered device gateways (e.g., 61o interfaces or gateways) with no subscriber identity modules (SIMs), and then consults an AAA (authentication, authorization and accounting) server to authenticate the low powered device gateway.
  • the MARS service then establishes a General Packet Radio Service Tunnel Protocol (GTP) tunnel with the mobile core of the operator's mobile (cellular) network (e.g., a packet data network (PDN) GW, evolved packet gateway (EPG) or a Data Connection Devices) to forward data from the low powered device gateways to the mobile core of the operator's mobile network.
  • GTP General Packet Radio Service Tunnel Protocol
  • the MARS service allows a low powered device gateway without a SIM to authenticate with a mobile network.
  • SIM subscriber identity module
  • telecom operators have a method to account for the data from IOT devices connected to these low powered device gateways without SIMs and they can offer or monetize services for these IOT devices and networks. Therefore, the MARS service converges the pure IOT data of these SIM-less low powered device gateways with a mobile network so that the mobile core of the mobile network may process this data.
  • FIG. 1 illustrates a block diagram of a system 100 converging IOT devices with a mobile network according to some embodiments.
  • System 100 includes IOT a set of devices 120a-n, 122a-n, 124a-n, and 128a-n. These devices include a variety of low powered or constrained node devices that may utilize 61o or 61owPAN
  • IOT devices include temperature sensors, moisture sensors, light intensity sensors, utility meters, gas level sensors, switch devices, light emitters, sound sensors, vehicles, charging points, field soil sensors, industrial device monitors, building monitors, bridge monitors, environmental monitors, and body sensors.
  • System 100 includes 61o gateways (GWs) 118a-c. These 61o GWs are coupled with the IOT devices 120-28 via a link layer wireless communications protocol such as Bluetooth (e.g., Bluetooth v.4.1, December 2013).
  • a link layer wireless communications protocol such as Bluetooth (e.g., Bluetooth v.4.1, December 2013).
  • System 100 also includes a M2M aggregation routing service (MARS) 114a-b.
  • M2M aggregation routing service MARS
  • the MARS service is coupled with a controller 112, the 61o GW 118, and an operator 108.
  • the operator 108 is a gateway operated by a mobile operator that is coupled with external IP networks such as the Internet.
  • the MARS service is coupled with the 61o GW 118 using a Wi-Fi, Ethernet, or a similar layer 2 protocol non-mobile connection. This connection may be part of a private network administered by the mobile operator.
  • system 100 receives customer request 106 from a customer associated with a customer account.
  • the system 100 receives customer request 106 at an orchestrator 104.
  • Orchestrator 104 may be software residing on a separate device coupled to controller 112, or may be a software stored in non-transitory computer readable storage medium of an electronic device that also includes the software for controller 112.
  • the customer request 106 identifies a service type and a service action.
  • a service type identifies a location and/or type of IOT device that a customer wishes to activate or enable. For example, a customer may identify a set of light sensors in a warehouse location. The locations of the IOT devices may be identified using a data store of available locations for the selected customer within data store 132. Data store 132 may also store the available types of IOT devices at the available locations associated with the particular customer.
  • a service action identifies an action that a customer has selected for the IOT devices identified using the service type.
  • the action can take a variety of forms, and can be different for different embodiments.
  • a service action may include, but not limited to: 1) a request for a single report of current data from running IOT devices (e.g., the orchestrator 104 may receive a request to report the current temperature data from a set of sensors in a freezer); 2) a request to report the current status of the selected IOT devices (e.g., the orchestrator 104 may receive a request to report the functional status and any error conditions of a set of moisture sensors; 3) a request to enable, disable, start, or stop collection of data from the selected IOT devices; 4) a request to enable security between the selected IOT devices and the 61o GW associated with the selected IOT devices, and/or to enable security between the 61o GW and the MARS service (e.g., the request may be to enable an IPSec (Internet Protocol
  • configuration of the 61o GW including a configuration of selected IOT devices associated with the 61o GW (e.g., a configuration option may include calibration of selected IOT devices associated with the 61o GW or a configuration of the reporting rate for selected IOT devices associated with the 61o GW). Additional details regarding service actions are described in reference to Figure 4.
  • customer request 106 also includes a sub type indicator.
  • This sub type indicator indicates to the 61o GW whether to send data received from the IOT devices identified in the service type to the operator 108 or to a fixed operator 110.
  • Some customer requests 106 do not include service actions that instruct the 61o GW to return data.
  • a sub type indicator may not be specified.
  • a fixed operator such as fixed operator 110, is a non-mobile operator that may receive the data from the selected IOT devices indicated by the service type.
  • a fixed operator may be an internet service provider (ISP) or cloud service.
  • ISP internet service provider
  • the orchestrator 104 communicates this information to the controller 112.
  • the orchestrator 104 also sends a customer identifier (ID) identifying the customer accessing the orchestrator 104 to the controller 112.
  • ID is also known as a subscriber ID.
  • the orchestrator 104 may determine the customer ID based upon login information used by the customer to access the orchestrator 104 and submit the customer request 106.
  • the orchestrator 104 is an application residing on the same physical network device as the MARS service 114. In such an embodiment, the orchestrator 104 communicates directly with the MARS service and the controller 112 is not used.
  • controller 112 includes a data store to determine the correct MARS service to communicate with and to determine which interface or protocol to communicate with the MARS service.
  • the physical layout of the controller 112 will be described in more detail in relation to Figure 6.
  • the controller 112 communicates the service type, service action, sub type indicator (if provided), and customer ID to the MARS service 114.
  • the controller 112 and the MARS service 114 may communicate over an interface using a different protocol than that used by the customer request 106, and this may require conversion of the message(s) including the service type, service action, customer ID, and sub type indicator provided by the orchestrator 104 to the correct protocol.
  • a different protocol than that used by the customer request 106
  • the communications between the MARS service 114 and the controller 112 is through a non-mobile link layer protocol such as Ethernet, Wi-Fi, Asynchronous Transfer Mode (ATM), etc.
  • a non-mobile link layer protocol such as Ethernet, Wi-Fi, Asynchronous Transfer Mode (ATM), etc.
  • the MARS service 114 For each customer request 106, the MARS service 114 receives the service type, service action, sub type indicator, and customer ID from the controller 112. The MARS service determines which selected 61o GW 118 includes the IOT devices identified in the service type. The information regarding which 61o GWs are coupled to which IOT devices at which geographic location may be stored in a data store 134. A set of profile properties of the 61o GWs and IOT devices that the MARS service 114 communicates with may also be stored in data store 134.
  • the profile properties for each selected 61o GW defines a set of supported communications protocols, security settings, extensions, and other configuration elements for the MARS service to communicate with the selected 61o GW (e.g., the MARS service may convert the service action it receives from the controller 112 in to a format that may be understood by the selected 61o GW).
  • the MARS service 114 determines which of the 61o GWs 118 to communicate with based on the service type, and transmits one or more messages to the selected 61o GW 118 to cause the 61o GW 118 to select a set of one or more IOT devices based on the service type, and configures the IOT devices to perform a particular action according to the service action.
  • the one or more messages transmitted by the MARS service to the selected 61o GW 118 also includes an Internet Protocol version 6 (IPv6) prefix used to configure the IP addresses of the selected IOT devices identified based on the service type.
  • IPv6 Internet Protocol version 6
  • IPv6 device such as one of the selected IOT devices, configures its IPv6 address using IPv6 autoconfiguration by appending the prefix to a unique identifier that the device has determined to be unique based on IPv6 neighbor discovery protocols.
  • IPv6 Internet Protocol version 6
  • DHCP Dynamic Host Configuration Protocol
  • the IOT devices might be addressed using IPv4 and the MARS service 114 may communicate with these IOT devices using IPv4.
  • the MARS service may further support non-IP based IOT devices by providing a proxy service.
  • the MARS service 114 utilizes IPv6/IPv4 transition mechanisms (e.g., Stateless IP/I CMP (Internet Control Message Protocol) Translation, RFC 6145, 6144; tunnel brokerage; 6rd, RFC 5569, 5969; Transport Relay Translation, RFC 3142; Network Address Translation 64 (NAT64), RFC 6146, RFC 6877) to connect to the IPv6 based 61o GW 118 through an IPv4 network.
  • IPv6/IPv4 transition mechanisms e.g., Stateless IP/I CMP (Internet Control Message Protocol) Translation, RFC 6145, 6144; tunnel brokerage; 6rd, RFC 5569, 5969; Transport Relay Translation, RFC 3142; Network Address Translation 64 (NAT64), RFC 6146, RFC 6877
  • the selected 61o GW 118 After the selected 61o GW 118 receives the one or more configuration messages from the MARS service, it sends a confirmation message to the MARS service 114 for the requested service type including an acknowledgement of configuration message receipt to the MARS service 114.
  • the MARS service 114 may be able to communicate with more than one operator, as each customer sending a customer request may be associated with separate operators.
  • the MARS service sends a request to an AAA (authentication, authorization, and accounting) server 102 to cause the AAA server 102 to determine if it has a record associated with the service type identifier, customer ID, and IP address of the selected 61o GW corresponding to the received customer request 106.
  • the AAA server 102 includes record(s) associating an operator identifier with the unique identifier of a service type identifier, customer ID, and IP addresses of the selected 61o GW. If the AAA server 102 determines that a record does exist, the MARS service 114 receives from the AAA server the operator identifier associated with the particular service type, customer ID, and 61o GW address. The MARS service 114 uses this operator identifier to determine which operator to send the received data from the 61o GW to. In some embodiments, this operator information is an APN (access point name) if the operator identified is a mobile operator such as operator 108.
  • APN access point name
  • the MARS service sends such a request to the AAA server 102 every time a customer request 106 is received. In alternative embodiments, the MARS service sends such a request to the AAA server 102 only if no session exists that may be identified by the service type, customer ID/subscriber ID, and 61o GW IP address corresponding to the received customer request 106.
  • each record on the AAA corresponding to unique service type, customer ID, and GW address combination also includes an active/inactive flag, and records are marked as active once a successful request matching that record from the MARS service 114 is made, or marked as inactive if the MARS service 114 communicates a termination request to the AAA server 102 for the service
  • the MARS service 114 may communicate with the AAA server using standard AAA protocols such as RADIUS (Remote Authentication Dial In User Service) and Diameter, with the additional information being requested using custom vendor extensions.
  • the MARS service 114 receives additional information from the AAA server 102, including but not limited to compression configuration information, security configuration information, and quality of service (QoS) configuration information for the unique identifier of service type, customer ID, and 61o GW address combination.
  • This additional information may be stored as attribute-value pairs on the AAA server 102 in data store 130, and may be supplied by the operator or customer when the customer is registered with the operator's mobile system.
  • the MARS service 114 may send one or more configuration messages to the 61o GW 118 based on this additional information. For example, the MARS service 114 may send configuration messages to the 61o GW 118 to cause it to compress the data sent from the 61o GW 118 to the MARS service 114 using a specified compression algorithm (e.g., the deflate compression algorithm) or to request the 61o GW to cause the selected IOT devices to compress the data the IOT devices send to the 61o GW 118. As another example, the MARS service may send configuration messages to the 61o GW 118 to cause the 61o GW to encrypt any messages sent by the 61o GW 118 to the MARS service 114.
  • a specified compression algorithm e.g., the deflate compression algorithm
  • the 61o GW 118 may begin to send back any sensor data or status data from the IOT devices to the MARS service 114 if the service action from the customer request 106 indicated that the 61o GW 118 should return data to the MARS service 114 (e.g., a service action indicating the start of sensor data collection).
  • the MARS service 114 forwards this received data from the selected 61o GW 118 to the operator identified in the operator identifier from the AAA server 102.
  • the identified operator may be a mobile network operator, such as the operator 108.
  • the identified operator may be a fixed operator, such as fixed operator 110.
  • the MARS service 114 also establishes one or more tunnels 126 with the operator 108.
  • This tunnel encapsulates the packetized data between the MARS service and the operator 108.
  • this tunnel is a GPRS Tunneling Protocol (GTP; 3 GPP TS 29.060, 32.295, 29.274) tunnel.
  • GTP GPRS Tunneling Protocol
  • the MARS service 114 aggregates data from the IOT devices according to the type of the data as identified in the service type.
  • a type of data refers to a type of sensor or device, such as temperature measurement devices, or switch devices.
  • Aggregation refers to the collection of multiple data elements into a single data stream or element over a period of time, or another organizational method for data.
  • Each set of the aggregated data is sent to the corresponding operator 108 using a separate GTP tunnel.
  • the MARS service 114 may create separate tunnels for each stream to the operator 108 if the MARS service 114 has been configured to do so.
  • two sets of data of the same type are to be sent to different operators, then they will not be aggregated together.
  • the MARS service 114 creates a GTP tunnel for each 61o GW 118. Data from all the IOT devices associated with a 61o GW 118 are
  • the MARS service 114 retrieves this policy information from the AAA server 102.
  • this policy is included in the customer request 106 or can be obtained from a policy server (e.g., a policy and charging rules function (PCRF) server) based on customer/service credentials, and is passed to the MARS service via the orchestrator 104 and controller 112.
  • PCRF policy and charging rules function
  • the operator 108 may forward the data to the customer.
  • the data may be forwarded and presented to the customer via an application such as orchestrator 104.
  • the operator 108 may also charge the customer for the data and enable QoS for the data. Further details regarding the operation of the operator 108 will be described in relation to Figure 3.
  • system 100 includes multiple sets of IOT devices, such as IOT devices 120-128.
  • Each set of IOT devices may be devices of a certain type (e.g., a temperature sensor).
  • Multiple sets of devices may be coupled with a single 61o GW, depending on, for example, a configuration determined by an administrator or physical constraints such as the distance between IOT devices.
  • Multiple 61o GWs 118 may also be coupled with a single MARS service 114.
  • Multiple MARS service modules may further be coupled with a single operator or single AAA server. In this manner, a customer may be able to access many sets of IOT devices through a central interface organized by an operator.
  • Figure 2 illustrates an exemplary embodiment of system 100.
  • the controller 112 is coupled with the MARS service 114 via a private network Ethernet link 202.
  • the communications between these the controller 112 and the MARS service 114 using private network Ethernet link 202 may be secured using technologies such as Internet Protocol Security (IPSec; RFCs 4301, 6071, 2401, etc.) based virtual private networks (VPNs) or data link layer security (e.g. private VLANs).
  • IPSec Internet Protocol Security
  • RFCs 4301 6071, 2401, etc.
  • VPNs virtual private networks
  • a private network Ethernet link 202 is also used between the AAA server 102 and the MARS service 114.
  • the MARS service may reside separately on a network device or may share the same network device hardware with another component of the mobile network.
  • the MARS service resides in a network device at the edge of mobile network 208.
  • This network device may be, although not required, a building aggregation router device, site aggregation switching device, edge switching device, access router, or other edge access device.
  • This network device may also include an existing 3GPP mobile network element, such as an Evolved Packet Data Gateway (ePDG; 3GPP TS 23.402 vl2.4.0).
  • ePDG Evolved Packet Data Gateway
  • the MARS service is coupled to the operator 108, which represents a mobile core gateway device such as a PDN (packet data network) GW, via a GTP (GPRS Tunneling Protocol; 3 GPP TS 29.060, 32.295, 29.274) tunnel 126.
  • GTP GPRS Tunneling Protocol
  • 3 GPP TS 29.060, 32.295, 29.274 GTP is an IP based protocol of the mobile network. GTP may be used with TCP or UDP.
  • the MARS service and the operator 108 may exchange data using various different protocols, such as Internet Protocol (IP), X.25, or Frame Relay, based on the specifications or support of the operator 108. These protocols are encapsulated by the GTP tunnel between the MARS service and the operator 108.
  • the MARS service 114 is coupled to the 61o GW 118 using a secured private network Ethernet link 204 in the depicted embodiment.
  • this link is not private and is instead a link in a public network (e.g., the Internet).
  • the link is not a secured link.
  • the link is an Ethernet link in the depicted embodiment, the link between the MARS service 114 and the 61o GW 118 is not limited to Ethernet and can be implemented using other link layer technologies (e.g., Wi-Fi (IEEE 802.11), ATM, and Point-to-Point ("PPP"; RFC 1161).
  • the 61o GW 118 when the 61o GW 118 is first connected or reconnected to the private (or public) network, it uses a DNS server to discover the IP address of the MARS service 114 to register with the MARS service.
  • the MARS service stores in its data store the IP address of the 61o GW 1 18 after registration.
  • a secured connection may be initiated during an initial configuration of the 61o GW 118 by the MARS service 114 as specified by the orchestrator 104 using a service action.
  • a secured connection may also be configured based on received information from the AAA server 102.
  • This secure connection may be a layer 2 secure channel implemented using a layer 2 secure channel protocol (e.g., layer 2 MPLS (Multiprotocol Label Switching) VPN).
  • the secure connection may also be a layer 3 secure channel such as an IPSec tunnel with Encapsulating Security Pay load (ESP).
  • ESP Encapsulating Security Pay load
  • the controller 112 specifies the type of secure channel based on the security protocols available between the MARS service 114 and the 61o GW 118. Each secured channel that is created may be identified by the MARS service 114 using the customer ID, service type, tunnel ID, 61o GW IP address, or any combination thereof.
  • the 61o GW 118 resides outside the mobile network 208 and may not be owned or operated by the mobile operator that operates the MARS service 114.
  • the 61o GW 118 is coupled with various IOT devices, such as temperature sensors 120 and moisture sensors 122 on the customer's agricultural farm site 210, with a secured private wireless link 206.
  • This link may be implemented using any short or long range wireless communications link layer protocols or air interfaces. Examples include, but not limited to, Bluetooth, ZigBee (ZigBee 2004, 2006, PRO), Z- wave (Z-Wave Alliance), Wi-Fi (IEEE 802.11), wireless personal area network technology (e.g., IEEE 801.15.4), and Digital European Cordless Telecommunications (DECT).
  • the communications between the 61o GW 118 and the IOT devices 120-122 are secured.
  • the security used for securing link 206 may require a key to encrypt communications between the 61o GW and the IOT devices 120-22.
  • This key may be a device key provided by the vendor of the IOT device and stored on the 61o GW 118 to allow the 61o GW to communicate with the IOT device.
  • the MARS service 114 generates a key based upon the service type and sub type indicator the MARS service 114 receives from the controller 112. The MARS service 114 passes this generated key to the 61o GW 118, which then uses this generated key in combination with the device key for the connected IOT devices to securely
  • the controller 112 may send to the MARS service 114 information about the key and how to generate the key, and the method by which the 61o GW 118 should utilize the key to encrypt communications (e.g., the controller may request that the key be used as a group password for a VPN connection between the IOT devices and the 61o GW).
  • the security is configured using the NETCONF (Network Configuration Protocol) protocol.
  • FIG 3 illustrates an exemplary 3GPP architecture 300 with a MARS service 114 according to some embodiments.
  • the MARS service 114 is coupled to the external IP networks 306 (e.g., the Internet) via the PDN GW.
  • the MARS service 114 is coupled with the PDN GW 308 via one or more GTP tunnels 126.
  • the PDN GW 308 may implement functionalities of operator 108.
  • the MARS service utilizes various functionalities of the PDN GW 308.
  • the MARS service utilizes the offline charging functionality of the PDN GW 308 to charge (i.e., collect a payment) for data sent and/or received according to volume, time of day, and service type.
  • the MARS service may also utilize the online real time charging functionality of the PDN GW 308 to charge in real time based on service usage. In some embodiments, this charging is performed via OFCS (offline charging system; 3GPP TS 32.240) 311 and OCS (online charging system; 3 GPP TS 32.296) 310.
  • the PDN GW 308 may also provide QoS or rate limiting functions on a flow level using dedicated bearers (i.e., transport services with QoS attributes; referenced in 3GPP TS 23.107, which is hereby incorporated by reference) to data received from the MARS service 114. Each flow may correspond to a different service type and GTP tunnel as described previously.
  • the PDN GW 308 may support multiple APNs (as described in 3 GPP TS 23.003, which is hereby incorporated by reference) and may expose this to the MARS service 114. In such a case, the MARS service 114 may utilize this multiple APN functionality of the PDN GW to forward data to multiple packet data networks (PDNs; e.g., external IP networks) as defined in each APN at the PDN GW 308.
  • PDNs packet data networks
  • the exemplary architecture 300 also includes an ePDG (Evolved Packet Data Gateway) 302, which allows the 3GPP system to accept data from devices that include a SIM but which are accessing the mobile network using an untrusted connection.
  • ePDG Evolved Packet Data Gateway
  • an access network discovery and selection function service (ANDSF) 312 directs the device 310 to access untrusted Wi-Fi network 304.
  • device 310 connects to ePDG 302 using an IPSec tunnel, after which ePDG 302 establishes a GTP tunnel for the device 310 to PDN GW 308.
  • the ePDG 302 may also authenticate and/or authorize the device 310 via AAA server 102 using the identifying information in the SIM for device.
  • the MARS service 114 is a software component that resides with the ePDG 302 on a network device.
  • Figure 4 is a network transaction diagram illustrating an exemplary transaction between the 61o GW 118, controller 108, MARS 120, AAA 124, and operator 130 for converging IOT devices according to some embodiments.
  • controller 112 sends an initiation message to MARS 114.
  • This message includes the service type, service action, sub type, and customer ID as described above in relation to Figure 1.
  • the service action may also include instructions to the MARS service 114 on how to aggregate the data received from the IOT devices (e.g., aggregate based on the IOT device type type), and for service-aware control (e.g. intelligent instructions based on a dynamic awareness of the current system).
  • the MARS service 114 sends a request including information regarding the service type and service action to the 61o GW 118 in response to the request from the controller 112.
  • this request of transaction 404 also includes IPv6 prefix information to configure the IP address of the IOT devices as described above.
  • the 61o GW 118 responds to the request of transaction 404 with a message confirming the service type with an acknowledgement.
  • two customer requests from different customers may have the same service type (e.g., two requests from two different customers with different customer IDs for the same sensors).
  • the MARS service 114 may further pass the customer ID to the 61o GW 118 and the 61o GW will return the customer ID to the MARS service at transaction 406 in order to identify the correct customer.
  • the MARS service 114 sends an authentication request to the AAA server 102 including the unique identifier of customer ID, service type, and 61o GW IP address.
  • this request includes a request for additional information regarding the connection, such as the compression configuration for the data, using custom extensions in the authentication protocol used by the AAA server 102.
  • the MARS service 114 receives a response from the AAA server 102 indicating that the AAA server 102 was able to locate a record corresponding to the unique identifier of customer ID, service type, and 61o GW IP address.
  • the response of transaction 412 also includes, in one embodiment, an operator identifier retrieved from the located record identifying the operator 108.
  • the AAA server 102 also responds to any of the additional information requested via the custom extensions.
  • the MARS service 114 configures the 61o GW with any additional information received from the AAA server as part of transaction 412. This may include the additional configuration information provided via the custom extensions received as part of transaction 412.
  • the additional information may include compression configuration information, security configuration information, and QoS configuration information as described above in reference to Figure 1.
  • the MARS service 114 may send the 61o GW 1 18 this additional configuration information as part of transaction 414.
  • the MARS service 114 establishes a GTP tunnel with the operator 108, in order to begin transferring data that it will receive from the 61o GW 118.
  • a tunnel may be created for each service type, or for each 61o GW, using mechanisms described above.
  • FIG. 5 illustrates a network device 570 (ND) coupled with controller 112 and having the functionality of a MARS service in an exemplary network, as well as three exemplary implementations of the ND, according to some embodiments.
  • ND 570 is a physical device, and is connected to other NDs via wireless or wired connections (often referred to as a link).
  • Two of the exemplary ND implementations in Figure 5 are: 1) a special -purpose network device 502 that uses custom application-specific integrated-circuits (ASICs) and a proprietary operating system (OS); and 2) a general purpose network device 504 that uses common off-the-shelf (COTS) processors and a standard OS.
  • ASICs application-specific integrated-circuits
  • OS operating system
  • COTS common off-the-shelf
  • the special-purpose network device 502 includes networking hardware 510 comprising compute resource(s) 512 (which typically include a set of one or more processors), forwarding resource(s) 514 (which typically include one or more ASICs and/or network processors), and physical network interfaces (NIs) 516 (sometimes called physical ports), as well as non-transitory machine readable storage media 518 having stored therein networking software 520.
  • a physical NI is hardware in a ND through which a network connection (e.g., wirelessly through a wireless network interface controller (WNIC) or through plugging in a cable to a physical port connected to a network interface controller (NIC)) is made.
  • WNIC wireless network interface controller
  • NIC network interface controller
  • the networking software 520 may be executed by the networking hardware 510 to instantiate a set of one or more networking software instance(s) 522.
  • Each of the networking software instance(s) 522, and that part of the networking hardware 510 that executes that network software instance form a separate virtual network element 530A-R.
  • Each of the virtual network element(s) (VNEs) 530A-R includes a control communication and configuration module 532A-R
  • a given virtual network element (e.g., 530A) includes the control communication and configuration module (e.g., 532A), a set of one or more forwarding table(s) (e.g., 534A), and that portion of the networking hardware 510 that executes the virtual network element (e.g., 530A).
  • the special-purpose network device 502 is often physically and/or logically considered to include: 1) a ND control plane 524 (sometimes referred to as a control plane) comprising the compute resource(s) 512 that execute the control communication and configuration module(s) 532A-R; and 2) a ND forwarding plane 526 (sometimes referred to as a forwarding plane, a data plane, or a media plane) comprising the forwarding resource(s) 514 that utilize the forwarding table(s) 534A-R and the physical NIs 516.
  • a ND control plane 524 (sometimes referred to as a control plane) comprising the compute resource(s) 512 that execute the control communication and configuration module(s) 532A-R
  • a ND forwarding plane 526 sometimes referred to as a forwarding plane, a data plane, or a media plane
  • forwarding resource(s) 514 that utilize the forwarding table(s) 534A-R and the physical NIs 516.
  • the ND control plane 524 (the compute resource(s) 512 executing the control communication and configuration module(s) 532A-R) is typically responsible for participating in controlling how data (e.g., packets) is to be routed (e.g., the next hop for the data and the outgoing physical NI for that data) and storing that routing information in the forwarding table(s) 534A-R, and the ND forwarding plane 526 is responsible for receiving that data on the physical NIs 516 and forwarding that data out the appropriate ones of the physical NIs 516 based on the forwarding table(s) 534A-R.
  • data e.g., packets
  • the ND forwarding plane 526 is responsible for receiving that data on the physical NIs 516 and forwarding that data out the appropriate ones of the physical NIs 516 based on the forwarding table(s) 534A-R.
  • the networking software 520 that executes on ND 502 includes instructions that when executed by the networking hardware 510 cause the ND 502 to have functionality similar to the functionality described for the MARS service 114.
  • the software 520 may include a controller communications module 524 that includes instructions to allow the ND 502 to communicate with the controller 112 with functionality similar to that described above for the MARS service 114 and the controller 112.
  • the software 520 may include a 61o communications module 522 that includes instructions to allow the ND 502 to communicate with a 61o GW such as 61o GW 118 with functionality similar to that described above for the MARS service 114 and the 61o GW 118.
  • the software 520 may also include an operator communications module 528 that includes instructions to allow the ND 502 to communicate with the operator 108 with functionality similar to that described above for the MARS service 114 and the operator 108.
  • Non-transitory machine readable storage media 518 also includes a data store 522.
  • This data store may provide similar functionality to the functionality provided by data store 134 as described above.
  • the general purpose network device 504 includes hardware 540 comprising a set of one or more processor(s) 542 (which are often COTS processors) and network interface controller(s) 544 (NICs; also known as network interface cards) (which include physical NIs 546), as well as non-transitory machine readable storage media 548 having stored therein software 550.
  • the processor(s) 542 execute the software 550 to instantiate a hypervisor 554 (sometimes referred to as a virtual machine monitor (VMM)) and one or more virtual machines 562A-R that are run by the hypervisor 554, which are collectively referred to as software instance(s) 552.
  • a hypervisor 554 sometimes referred to as a virtual machine monitor (VMM)
  • VMM virtual machine monitor
  • a virtual machine is a software implementation of a physical machine that runs programs as if they were executing on a physical, non-virtualized machine; and applications generally do not know they are running on a virtual machine as opposed to running on a "bare metal" host electronic device, though some systems provide para-virtualization which allows an operating system or application to be aware of the presence of virtualization for optimization purposes.
  • Each of the virtual machines 562A-R, and that part of the hardware 540 that executes that virtual machine (be it hardware dedicated to that virtual machine and/or time slices of hardware temporally shared by that virtual machine with others of the virtual machine(s) 562A- R), forms a separate virtual network element(s) 560A-R.
  • the networking software 550 that executes on ND 504 includes instructions that when executed by the processor 542 cause the virtualized network elements 560A-Rto have functionality similar to the functionality described for the MARS service 114.
  • the software 550 may include a controller communications module 554 that includes instructions to allow the virtualized network elements 560A-R to communicate with the controller 112 with functionality similar to that described above for the MARS service 114 and the controller 112.
  • the software 520 may include a 61o communications module 522 that includes instructions to allow the virtualized network elements 560A- R to communicate with a 61o GW such as 61o GW 118 with functionality similar to that described above for the MARS service 114 and the 61o GW118.
  • the software 520 may also include an operator communications module 528 that includes instructions to allow the virtualized network elements 560A-R to communicate with the operator 108 with functionality similar to that described above for the MARS service 114 and the operator 108.
  • Non-transitory machine readable storage media 548 also includes a data stores
  • the virtual network element(s) 560A-R perform similar functionality to the virtual network element(s) 530A-R.
  • the hypervisor 554 may present a virtual operating platform that appears like networking hardware 510 to virtual machine 562 A, and the virtual machine 562A may be used to implement functionality similar to the control communication and configuration module(s) 532A and forwarding table(s) 534A (this virtualization of the hardware 540 is sometimes referred to as network function virtualization (NFV)).
  • NFV network function virtualization
  • NFV may be used to consolidate many network equipment types onto industry standard high volume server hardware, physical switches, and physical storage, which could be located in Data centers, NDs, and customer premise equipment (CPE).
  • FIG. 562A-R may implement one or more of the virtual machine(s) 562A-R differently.
  • VNE 560A-R may implement this correspondence at a finer level granularity (e.g., line card virtual machines virtualize line cards, control card virtual machine virtualize control cards, etc.); it should be understood that the techniques described herein with reference to a correspondence of virtual machines to VNEs also apply to embodiments where such a finer level of granularity is used.
  • the hypervisor 554 includes a virtual switch that provides similar forwarding services as a physical Ethernet switch. Specifically, this virtual switch forwards traffic between virtual machines and the NIC(s) 544, as well as optionally between the virtual machines 562A-R; in addition, this virtual switch may enforce network isolation between the VNEs 560A-Rthat by policy are not permitted to communicate with each other (e.g., by honoring virtual local area networks (VLANs)).
  • VLANs virtual local area networks
  • the third exemplary ND implementation in Figure 5 is a hybrid network device 506, which includes both custom ASICs/proprietary OS and COTS processors/standard OS in a single ND or a single card within an ND.
  • a platform VM i.e., a VM that that implements the functionality of the special -purpose network device 502 could provide for para- virtualization to the networking hardware present in the hybrid network device 506.
  • each of the VNEs receives data on the physical NIs (e.g., 516, 546) and forwards that data out the appropriate ones of the physical NIs (e.g., 516, 546).
  • a VNE physical NIs
  • IP router functionality forwards IP packets on the basis of some of the IP header information in the IP packet; where IP header information includes source IP address, destination IP address, source port, destination port (where "source port” and “destination port” refer herein to protocol ports, as opposed to physical ports of a ND), transport protocol (e.g., user datagram protocol (UDP) (RFC 768, 2460, 2675, 4113, and 5405), Transmission Control Protocol (TCP) (RFC 793 and 1180), and
  • UDP user datagram protocol
  • TCP Transmission Control Protocol
  • DSCP differentiated services
  • the NDs of Figure 5 may form part of the Internet or a private network; and other electronic devices (not shown; such as end user devices including workstations, laptops, netbooks, tablets, palm tops, mobile phones, smartphones, multimedia phones, Voice Over Internet Protocol (VOIP) phones, terminals, portable media players, GPS units, wearable devices, gaming systems, set-top boxes, Internet enabled household appliances) may be coupled to the network (directly or through other networks such as access networks) to communicate over the network (e.g., the Internet or virtual private networks (VPNs) overlaid on (e.g., tunneled through) the Internet) with each other (directly or through servers) and/or access content and/or services.
  • end user devices including workstations, laptops, netbooks, tablets, palm tops, mobile phones, smartphones, multimedia phones, Voice Over Internet Protocol (VOIP) phones, terminals, portable media players, GPS units, wearable devices, gaming systems, set-top boxes, Internet enabled household appliances
  • VOIP Voice Over Internet Protocol
  • terminals e.
  • Such content and/or services are typically provided by one or more servers (not shown) belonging to a service/content provider or one or more end user devices (not shown) participating in a peer-to-peer (P2P) service, and may include, for example, public webpages (e.g., free content, store fronts, search services), private webpages (e.g., username/password accessed webpages providing email services), and/or corporate networks over VPNs.
  • end user devices may be coupled (e.g., through customer premise equipment coupled to an access network (wired or wirelessly)) to edge NDs, which are coupled (e.g., through one or more core NDs) to other edge NDs, which are coupled to electronic devices acting as servers.
  • one or more of the electronic devices operating as the NDs in Figure 5 may also host one or more such servers (e.g., in the case of the general purpose network device 504, one or more of the virtual machines 562A-R may operate as servers; the same would be true for the hybrid network device 506; in the case of the special-purpose network device 502, one or more such servers could also be run on a hypervisor executed by the compute resource(s) 512); in which case the servers are said to be co-located with the VNEs of that ND.
  • the servers are said to be co-located with the VNEs of that ND.
  • FIG. 6 illustrates, a general purpose control plane device 604 including hardware 640 comprising a set of one or more processor(s) 642 (which are often COTS processors) and network interface controller(s) 644 (NICs; also known as network interface cards) (which include physical NIs 646), as well as non-transitory machine readable storage media 648 having stored therein centralized control plane (CCP) software 650.
  • processors 642 which are often COTS processors
  • NICs network interface controller
  • NICs network interface controller
  • non-transitory machine readable storage media 648 having stored therein centralized control plane (CCP) software 650.
  • CCP centralized control plane
  • the processor(s) 642 typically execute software to instantiate a hypervisor 654 (sometimes referred to as a virtual machine monitor (VMM)) and one or more virtual machines 662A-R that are run by the hypervisor 654; which are collectively referred to as software instance(s) 652.
  • a virtual machine is a software implementation of a physical machine that runs programs as if they were executing on a physical, non-virtualized machine; and applications generally are not aware they are running on a virtual machine as opposed to running on a "bare metal" host electronic device, though some systems provide para-virtualization which allows an operating system or application to be aware of the presence of virtualization for optimization purposes.
  • CCP instance 676A an instance of the CCP software 650 (illustrated as CCP instance 676A) on top of an operating system 664A are typically executed within the virtual machine 662A.
  • CCP instance 676A on top of operating system 664A is executed on the "bare metal" general purpose control plane device 604.
  • the operating system 664A provides basic processing, input/output (I/O), and networking capabilities.
  • the CCP instance 676A includes a network controller instance 678.
  • the network controller instance 678 includes a centralized reachability and forwarding information module instance 679 (which is a middleware layer providing the context of the network controller 578 to the operating system 664A and communicating with the various NEs), and an CCP application layer 680 (sometimes referred to as an application layer) over the middleware layer (providing the intelligence required for various network operations such as protocols, network situational awareness, and user - interfaces).
  • this CCP application layer 680 within the centralized control plane 576 works with virtual network view(s) (logical view(s) of the network) and the middleware layer provides the conversion from the virtual networks to the physical view.
  • the functionality provided by the orchestrator 104 as described above is software residing on non-transitory machine readable storage media 648 and executing in the application layer of control plane device 604 as orchestrator IOT service application 692.
  • the functionality provided by the controller 112 as described above in regards to communications with the MARS service beyond that of a typical control plane device 104 is software residing on non-transitory machine readable storage media 648 and executing in the middleware layer 679 of control plane device 604 as IOT-GW Configuration and Service Enablement Module 690.
  • the centralized control plane 576 transmits relevant messages to the data plane
  • a flow may be defined as a set of packets whose headers match a given pattern of bits; in this sense, traditional IP forwarding is also flow-based forwarding where the flows defined by the destination IP address for example; however, in other implementations the given pattern of bits used for a flow definition may include more fields (e.g., 10 or more) in the packet headers.
  • Different NDs/NEs/VNEs of the data plane 580 may receive different messages, and thus different forwarding information.
  • the data plane 580 processes these messages and programs the appropriate flow information and corresponding actions in the forwarding tables (sometime referred to as flow tables) of the appropriate NE/VNEs, and then the NEs/VNEs map incoming packets to flows represented in the forwarding tables and forward packets based on the matches in the forwarding tables.
  • Figure 7 is a flow diagram illustrating a method for converging IOT devices in a mobile network according to some embodiments.
  • method 700 can be performed by the MARS service 114.
  • Method 700 may be implemented in software, firmware, hardware, or any combination thereof.
  • the operations in the flow diagrams will be described with reference to the exemplary embodiments of the other figures. However, it should be understood that the operations of the flow diagrams can be performed by embodiments other than those discussed with reference to the other figures, and the embodiments discussed with reference to these other figures can perform operations different than those discussed with reference to the flow diagrams.
  • the MARS service transmits configuration information to a low powered device gateway coupled with a plurality of low powered devices based on a received configuration request, wherein the low powered device gateway does not include a Subscriber Identity Module (SIM).
  • SIM Subscriber Identity Module
  • the low powered device gateway is 61o GW 118 and the low powered devices are IOT devices 120-128.
  • the configuration information includes a service type and a service action based on the received configuration request, wherein the service type identifies the selection of the plurality of low powered devices, and wherein the service action causes the low powered device gateway to perform at least one of report data, start data collection, stop data collection, and establish secure communications between the low powered device gateway and the network element.
  • the configuration information further includes IP address configuration information, and wherein upon receiving the IP address configuration information, the low powered device gateway is caused to configure the selection of the plurality of low powered devices with IP addresses based on the IP address configuration information.
  • the configuration request is received from a software defined networking (SDN) controller (e.g., controller 112, and wherein the SDN controller includes an orchestrator module (e.g., orchestrator 104) that receives input from a customer for the configuration request.
  • SDN software defined networking
  • the MARS service communicates with an AAA server to authenticate a selection of the plurality of low powered devices.
  • this AAA server is AAA server 102.
  • the communication with the AAA server to authenticate the selection of the plurality of low powered devices includes the MARS service authenticating the selection of the plurality of low powered devices based on a service type, a customer identifier, and the address of the low powered device gateway, wherein the service type identifies the selection of the plurality of low powered devices, and wherein the customer identifier identifies a customer account from which the configuration request was received.
  • the communication with the AAA server to authenticate the selection of the plurality of low powered devices includes the MARS service receiving from the AAA server a reply with an identifier of the PDN gateway.
  • the MARS service establishes a GPRS Tunnel Protocol (GTP) tunnel with a PDN gateway.
  • GTP GPRS Tunnel Protocol
  • the PDN gateway is operator 108.
  • the MARS service for each of a set of one or more service types received in the configuration request, establishes a corresponding GTP tunnel to the PDN gateway for that service type.
  • the MARS service receives from the low powered device gateway collected data from a selection of the plurality of low powered devices.
  • the MARS service sends the collected data to the PDN gateway.
  • the MARS service aggregates the collected data to be sent to the PDN gateway, wherein the collected data is aggregated based upon a type of the collected data.
  • the MARS service establishes a secured channel between the MARS service and the low powered device gateway based on the received configuration request.
  • the gateways 118 can be communicatively coupled with the MARS 114 (and other entities) using a variety of telecommunications technologies.
  • Figure 2 illustrates a secured private network Ethernet link 204 coupling the MARS 114 with the one or more gateways 118, and this link is described as alternatively utilizing any number of different wired and/or wireless communication technologies.
  • Figure 3 illustrates the MARS 114 being communicatively coupled with one or more gateways 118 using a logical SWu' interface (e.g., an IPSec tunnel) and also coupled with a PDN GW 308 via an S2b' interface (e.g., one or more GTP tunnels 126).
  • a logical SWu' interface e.g., an IPSec tunnel
  • PDN GW 308 e.g., one or more GTP tunnels 126.
  • FIG 8 is a block diagram illustrating an exemplary architecture 800 of a system utilizing one or more L2/L3 networks 802 to communicatively couple a MARS with one or more gateways 118 according to some embodiments.
  • Figure 8 is similar to Figure 2, although some differences exist.
  • the one or more gateways 118A-118N (which do not have SIMs, or do not have SIMs that are utilized for the purposes described herein) can be communicatively coupled with MARS 114 using one or more L2 or L3 networks 802 (Level 2 or Level 3 in the seven-layer Open Systems Interconnection - or OSI - model of computer networking, which represent the data link layer and network layer, respectively).
  • the one or more L2 or L3 networks 802 can include a public network such as the Internet and/or another network using, for example, ATM, Wi-Fi, PPP, IPv4, IPv6, etc.
  • the one or more gateways 118A-118N can be configured with (or provided) a network address or network identifier of the MARS 114 that the one or more gateways 118A-118N can use to "connect" to (or simply, transmit data to and/or receive data from) the MARS 114.
  • the one or more gateways 118A-118N in some embodiments are configured with (or provided) one or more publicly-routable IP addresses of the MARS 114 that can be used as a destination address for sending data via the one or more L2 or L3 networks 802.
  • the one or more gateways 118A-118N can be provided or configured with a network identifier comprising a domain, hostname, Uniform Resource Identifier (URI) or Uniform Resource Locator (URL), etc., which the one or more gateways
  • 118A-118N can use to perform DNS lookups to acquire a routable network address for the MARS 114, which can be used to perform an initial registration, transmit data, etc.
  • one or more gateways 118 each communicatively coupled with one or more sensors 120/122 - which can be located at one or more multiple sites 210A-210M - can be communicatively coupled with MARS 114 (e.g., using the Internet or other network(s)) to provide aggregation service for one or multiple users, via one or multiple operators 108A-108L (e.g., mobile network operators).
  • MARS 114 e.g., using the Internet or other network(s)
  • operators 108A-108L e.g., mobile network operators
  • Figure 9 illustrates an exemplary 3GPP architecture 900 with a MARS service 114 coupled with one or more gateways over one or more L2/L3 networks according to some embodiments.
  • Figure 9 is similar to Figure 3, however it presents several differences.
  • the 61o GW 118 - which is communicatively coupled with one or more IOT devices 120 - is further communicatively coupled with MARS 114 using a connection/link 904 travelling through one or more L2/L3 networks 802, such as the Internet.
  • MARS 114 can be communicatively coupled with a PDN GW 308 (e.g., of an operator) via a logical S2a interface, which can comprise a GTP tunnel (e.g., a GTPv2 tunnel) that supports interworking with 3GPP and non- 3 GPP access systems.
  • a GTP tunnel e.g., a GTPv2 tunnel
  • FIG 10 is a diagram illustrating a flow 1000 for converging IOT devices with a mobile network according to some embodiments.
  • the flow 1000 can be performed by the MARS service 114, such as the MARS service 114 illustrated in Figure 9.
  • the flow includes selecting, based upon a service request from a customer, one or more device gateways from a plurality of device gateways.
  • the plurality of device gateways are communicatively coupled with a plurality of low powered devices, and the plurality of device gateways do not include or utilize a SIM.
  • the flow includes transmitting configuration information over a public network to the selected one or more device gateways, to cause the selected one or more device gateways to configure particular ones of the plurality of low power devices to perform actions according to the service request.
  • the one or more device gateways are 61o GW 118, and the low powered devices are IOT devices 120-128.
  • the configuration information identifies a service type and a service action, where the service type identifies the selection of the plurality of low powered devices, and the service action causes the device gateway to perform at least one of report data, start data collection, stop data collection, and establish secure communications between the device gateway and, for example, the MARS service 114.
  • the configuration information further includes IP address configuration information, and upon receiving this IP address configuration information, the one or more device gateways are caused to configure the selection of the plurality of low powered devices with IP addresses based on the IP address configuration information.
  • the flow can include communicating with an AAA server to authenticate a selection of the plurality of low powered devices.
  • this AAA server is AAA server 102.
  • the communication with the AAA server to authenticate the selection of the plurality of low powered devices includes authenticating the selection of the plurality of low powered devices based on a service type, a customer identifier, and the address of the device gateway, wherein the service type identifies the selection of the plurality of low powered devices, and wherein the customer identifier identifies a customer account from which the configuration request was received.
  • the communication with the AAA server to authenticate the selection of the plurality of low powered devices includes receiving, from the AAA server, a reply with an identifier of a PDN gateway.
  • the flow includes receiving, from the selected one or more device gateways over the public network, data generated by at least some of the configured particular ones of the plurality of low power devices, and at block 1008, the flow includes establishing, specific to the one or more requested service actions, one or more GPRS Tunnel Protocol (GTP) tunnels with a Packet Data Network (PDN) gateway of a mobile network operator.
  • GTP GPRS Tunnel Protocol
  • PDN gateway Packet Data Network gateway
  • the PDN gateway is operator 108.
  • the flow for each of a set of one or more service types received in the configuration request, the flow includes establishing a corresponding GTP tunnel to the PDN gateway for that service type.
  • the flow includes sending the received data over the one or more GTP tunnels to be processed by the mobile network operator.
  • the collected data is aggregated to be sent to the PDN gateway, wherein the collected data is aggregated based upon a type of the collected data.

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Mobile Radio Communication Systems (AREA)

Abstract

L'invention concerne un procédé exécuté dans un dispositif de réseau. Le procédé consiste à sélectionner, sur la base d'une demande de service, un ou plusieurs dispositifs passerelle parmi une pluralité de dispositifs passerelle qui sont couplés pour une communication à une pluralité de dispositifs basse puissance. Les dispositifs basse puissance ne comprennent pas de modules d'identité d'abonné. Des informations de configuration sont transmises sur un réseau public aux dispositifs passerelle sélectionnés, ce qui amène les dispositifs passerelle sélectionnés à configurer certains des dispositifs basse puissance de sorte à exécuter des actions d'après la demande de service. Des données sont reçues des dispositifs passerelle sélectionnés, sur le réseau public généré par les dispositifs basse puissance configurés. Un ou plusieurs tunnels de protocole de tunnellisation GPRS (GTP) sont établis avec une passerelle de réseau de données par paquets (PDN) d'un opérateur de réseau mobile, et les données reçues sont envoyées via le ou les tunnels GTP en vue d'être traitées par l'opérateur de réseau mobile.
EP17705959.9A 2016-02-12 2017-02-06 Procédé permettant de faire converger des données d'iot avec un noyau mobile Ceased EP3414969A1 (fr)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
US15/042,450 US10212030B2 (en) 2014-06-13 2016-02-12 Mobile network IOT convergence
PCT/IB2017/050639 WO2017137881A1 (fr) 2016-02-12 2017-02-06 Procédé permettant de faire converger des données d'iot avec un noyau mobile

Publications (1)

Publication Number Publication Date
EP3414969A1 true EP3414969A1 (fr) 2018-12-19

Family

ID=58057188

Family Applications (1)

Application Number Title Priority Date Filing Date
EP17705959.9A Ceased EP3414969A1 (fr) 2016-02-12 2017-02-06 Procédé permettant de faire converger des données d'iot avec un noyau mobile

Country Status (3)

Country Link
EP (1) EP3414969A1 (fr)
CN (1) CN108702799A (fr)
WO (1) WO2017137881A1 (fr)

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN112165424A (zh) * 2016-04-29 2021-01-01 华为技术有限公司 一种业务部署方法、装置以及网元

Families Citing this family (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
KR101926276B1 (ko) * 2017-12-13 2018-12-06 전자부품연구원 LoRaWAN 기반 대규모 시설물 관리를 위한 사물인터넷 네트워크 관리방법 및 이를 적용한 사물인터넷 네트워크 서버 및 단말
IL266963B2 (en) * 2018-05-29 2023-08-01 Firstpoint Mobile Guard Ltd A system and method for securing communication and information of the Internet of Things through a controlled cellular network
CN110488773B (zh) * 2019-07-05 2021-11-02 河北白晶环境科技有限公司 环保全过程工况监控系统及其组态方法

Family Cites Families (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
EP2533466B1 (fr) * 2011-06-08 2020-03-04 Alcatel Lucent Procédé et appareil pour la fourniture d'un accès au réseau à une entité utilisateur
US9264898B2 (en) * 2012-04-26 2016-02-16 Juniper Networks, Inc. Non-mobile authentication for mobile network gateway connectivity
RU2621973C2 (ru) * 2013-01-04 2017-06-08 Хуавэй Текнолоджиз Ко., Лтд. Способ, устройство и система для выбора pdn-шлюза
US20160156753A1 (en) * 2013-04-30 2016-06-02 Nokia Solutions And Networks Oy Enhanced gprs tunnel protocol tunnel endpoint identifier
US10135678B2 (en) * 2014-06-13 2018-11-20 Telefonaktiebolaget Lm Ericsson (Publ) Mobile network IOT convergence

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN112165424A (zh) * 2016-04-29 2021-01-01 华为技术有限公司 一种业务部署方法、装置以及网元
CN112165424B (zh) * 2016-04-29 2021-07-13 华为技术有限公司 一种业务部署方法、装置以及网元

Also Published As

Publication number Publication date
WO2017137881A1 (fr) 2017-08-17
CN108702799A (zh) 2018-10-23

Similar Documents

Publication Publication Date Title
US10652086B2 (en) Converging IOT data with mobile core networks
EP2955940B1 (fr) Convergence iot de reseau mobile
US10560352B2 (en) Subscriber-aware TWAMP data monitoring in computer networks
US10050840B2 (en) Method and system for an internet of things (IOT) device access in a software-defined networking (SDN) system
US10574763B2 (en) Session-identifer based TWAMP data session provisioning in computer networks
EP2954713B1 (fr) Procédé et appareil pour reconfigurer une passerelle domestique virtuelle
US9456006B2 (en) Method, device and system for session binding
US20150350912A1 (en) Residential service delivery based on unique residential apn
US11317272B2 (en) Method and system for enabling broadband roaming services
US9271318B2 (en) Internet protocol address registration
JP2009533980A (ja) ホーム・エージェントの自動選択
EP3935814B1 (fr) Sélection de réseau d'accès dynamique sur la base d'informations d'orchestration d'application dans un système de nuage de périphérie
US20190059005A1 (en) Control apparatus for gateway in mobile communication system
KR102117434B1 (ko) 전기통신 네트워크와 적어도 하나의 사용자 장비 간의 적어도 하나의 통신 교환의 개선된 핸들링을 위한 방법, 전기통신 네트워크, 사용자 장비, 시스템, 프로그램 및 컴퓨터 프로그램 제품
EP3414969A1 (fr) Procédé permettant de faire converger des données d'iot avec un noyau mobile
WO2013060214A1 (fr) Procédé et appareil de signalement d'informations d'application
US20240276342A1 (en) System and Method for Establishing a Dual-Layer PDU Session
US10708188B2 (en) Application service virtual circuit

Legal Events

Date Code Title Description
STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: UNKNOWN

STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: THE INTERNATIONAL PUBLICATION HAS BEEN MADE

PUAI Public reference made under article 153(3) epc to a published international application that has entered the european phase

Free format text: ORIGINAL CODE: 0009012

STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: REQUEST FOR EXAMINATION WAS MADE

17P Request for examination filed

Effective date: 20180727

AK Designated contracting states

Kind code of ref document: A1

Designated state(s): AL AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HR HU IE IS IT LI LT LU LV MC MK MT NL NO PL PT RO RS SE SI SK SM TR

AX Request for extension of the european patent

Extension state: BA ME

RIC1 Information provided on ipc code assigned before grant

Ipc: H04W 4/00 20180101ALI20170901BHEP

Ipc: H04W 76/02 20090101AFI20170901BHEP

DAV Request for validation of the european patent (deleted)
DAX Request for extension of the european patent (deleted)
STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: EXAMINATION IS IN PROGRESS

17Q First examination report despatched

Effective date: 20190730

REG Reference to a national code

Ref country code: DE

Ref legal event code: R003

STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: THE APPLICATION HAS BEEN REFUSED

18R Application refused

Effective date: 20200525