JP2003258857A - Network policy control system and policy server used in the same - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To obtain a network control system capable of autonomously determining a transfer path when an edge label switch router in an IP core network receives a stream. <P>SOLUTION: This network control system is provided with a call controller 1 for performing establishment processing of a session between two terminals 9 and 10 housed in different label switch routers 41 to 46 in the IP core network 4, a policy server 2 for performing a resource reservation on the basis of the addresses and CoS (class of service) of the transmitting source and a destination terminal of a stream transmitted in the session with respect to a resource reservation request from the call controller 1 at session establishment when a virtual communication path that can house the CoS of the stream and resources amounts exists, and first stage label switch routers 41 and 44 for determining a virtual communication path fitting the destination address and the CoS stored in the packet of the stream and transferring the stream according to the virtual communication path. <P>COPYRIGHT: (C)2003,JPO

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a network policy control system capable of guaranteeing the communication quality of a session stream in an IP network equipped with a label switching router, and a policy server used therefor.

[0002]

2. Description of the Related Art VoIP (Voice over Internet Prot) in a conventional IP (Internet Protocol) network
QoS (Quality of Service) of communication using
As a conventional technique relating to a guarantee method, Japanese Patent Laid-Open No. 2001-27
There is a communication quality assurance path setting method for VoIP and a network management system disclosed in Japanese Patent No. 4833. According to the communication quality assurance path setting method for VoIP disclosed in this prior art, MPLS (Multi Protocol Label Swi
tching) / IP network to guarantee QoS for VoIP streams.

FIG. 44 is a block diagram of a system that guarantees QoS by performing packet transfer by MPLS in the IP network 117 disclosed in this prior art. In the system shown in FIG. 44, the call control device 1
01, edge label switching routers (denoted as EdgeLSR in FIG. 44) 112 and 115, and media gateways (also denoted as MG) 113 and 114.
And the label switching type MPLS server 120
And a core label switching router (also Core
LSR) 123-127.
Here, the edge label switching routers 112 and 11
Reference numeral 5 accommodates media gateways 113 and 114 that accommodate telephones 128 and 129, respectively. The call control device 101 is a device that controls a call between telephones.
In the following, the label switching router (Label Sw
Itching Router) is referred to as LSR.

When the telephone 128 makes a call to the telephone 129, a session is established through the call control device 101. On the other hand, the voice data from the telephone 128 to the telephone 129 is converted between the voice data and the VoIP stream by the media gateways 113 and 114,
Media gateway 113 and media gateway 1
On the IP network 117 between the
The stream is transferred.

Next, the QoS guarantee of the VoIP stream in this system will be described. First, the telephone set 128 makes a call to the telephone set 129, and V is set between the media gateway 113 and the media gateway 114.
When establishing the oIP connection, the call control device 101 is connected to the MPLS server 12 only when QoS guarantee is required.
0 to request resource reservation for transferring VoIP stream. If the MPLS server 120 already has a QoS-guaranteed Label Switched Path (hereinafter referred to as LS) between the edge LSR 112 and the edge LSR 115, the VoIP stream can be accommodated.
(Denoted as P) is set, the filter condition for flowing the VoIP stream to the LSP is set for the edge LSR 112 and the edge LSR 115. Also, if the QoS guaranteed LSP has insufficient resources to accommodate the VoIP stream, or the QoS guaranteed LSP has an edge LSR1.
12 and the edge LSR 115, if not set between the edge LSR 112 and the edge LSR 115.
Is instructed to set a QoS-guaranteed LSP, the VoIP stream is accommodated in the set LSP, and the QoS is guaranteed.

[0006]

However, in the above-mentioned conventional technique, the edges LSR 112 and 115 are VoI.
When receiving the P stream, it is not possible to autonomously determine which QoS should be transferred to the LSP that provides the P stream, and the setting from the MPLS server 120 is required. That is, when a call is made between the telephones 128 and 129, that is, when a session is established, M
The setting of the LSP including the QoS for flowing the VoIP stream between the telephones 128 and 129 from the PLS server 120 to the edge LSR 112 and 115, that is, the filter condition that defines to which LSP the received packet is transferred Had to make settings.
Further, the MPLS server 120 sets this filter condition to L
There is a problem that an excessive load is generated on the MPLS server 120 because it is necessary to set the SR and manage the remaining resource amount for each LSP.

Further, when the IP network 117 is a network having a function of accommodating a plurality of VPNs, there is a problem that resource management for each VPN (Virtual Private Network) cannot be performed.
Furthermore, it is expected that the number of calls will become enormous as the network becomes large in scale. In the conventional communication quality assurance path setting method for VoIP, the call control device 101, the MPLS server 120, and the Since a sequence is generated between the edge LSRs 112 and 115, there is a problem that an excessive load is generated.

The present invention has been made in view of the above,
To obtain a network control system capable of autonomously determining to which LSP to transfer when receiving a stream transmitted between two terminals in different networks by an edge LSR, and a policy server used for this. The first purpose.

A second object of the present invention is to obtain a network control system capable of managing resources for each of a plurality of VPNs in an IP network having a function of accommodating a plurality of VPNs and a policy server used for the network control system. .

A third object of the present invention is to obtain a network policy control system capable of suppressing an excessive load on a call control device even when the number of calls increases and a policy server used for the network policy control system.

[0011]

In order to achieve the above object, a network policy control system according to the present invention comprises an IP core network having a plurality of LSRs,
A network policy control system comprising: two terminals accommodated in different LSRs in the IP core network; and a call control device for establishing a session between the two terminals. Virtual communication path defining means for defining a virtual communication path defined by a combination of the first-stage LSR, the last-stage LSR and the service class and configured by one or more LSPs, and a virtual communication path for setting the virtual communication path in the LSR In response to a resource reservation request from the call control device at the time of establishing a session between the setting means and the two terminals, the stream is transmitted based on the addresses and service classes of the source and destination terminals of the stream transmitted in the session. The virtual communication path to accommodate the virtual machine Further comprising a policy server including a resource reservation unit that selects a resource from the communication path definition unit and reserves a resource when it is determined that the resource amount of the stream can be accommodated in the remaining resource amount of the selected virtual communication path, The first stage LSR that first receives the stream from the terminal determines a virtual communication path that matches the destination address and service class stored in the packet of the stream, and transfers the stream according to the virtual communication path. Is characterized by.

According to the present invention, an IP core network having a plurality of LSRs, two terminals accommodated in different LSRs in the IP core network, and a call for establishing a session between the two terminals A first stage L, which includes a control device and first receives a stream from the terminal.
The SR provides a network policy control system in which a virtual communication path matching a destination address and a service class stored in a packet of the stream is determined, and the stream is transferred according to the virtual communication path. Here, the virtual communication path definition means of the policy server defines a virtual communication path that is specified by a combination of the first-stage LSR, the last-stage LSR and the service class in the IP core network, and is composed of one or more LSPs. Also, the virtual communication path setting means sets the virtual communication path in the LSR. further,
In response to a resource reservation request from the call control device at the time of establishing a session between the two terminals by the resource reservation means, the stream based on the address and service class of the source and destination terminals of the stream transmitted in the session Is selected from the virtual communication path defining means, resource reservation is performed when it is determined that the resource amount of the stream can be accommodated in the remaining resource amount of the selected virtual communication path. Be seen.

In the network policy control system according to the next invention, in the above invention, a user information database for storing user information including a terminal address of the terminal accommodated in the LSR, a service class and a line resource amount is further provided. When the call control device receives a session establishment request / response between the two terminals, the call control device acquires the service class and line resource amount applied to the stream of the session acquired from the user information, and reserves the resource. A resource reservation request means for creating a request and transmitting it to the policy server is provided.

According to the present invention, the user information database stores the user information including the terminal address of the terminal accommodated in the LSR, the service class and the line resource amount. When the resource reservation requesting means of the call control device receives the session establishment request / response between the two terminals, the service class and line resource amount applied to the stream of the session acquired from the user information. Is obtained, the resource reservation request is created, and is transmitted to the policy server.

In the network policy control system according to the next invention, in the above invention, when the resource reservation unit determines that the remaining resource amount of the virtual communication path cannot accommodate the line resource amount of the stream, It is characterized by further including a function of adding a line resource amount to the virtual communication path and securing a service class and a line resource amount of the stream in the virtual communication path.

According to the present invention, when it is determined by the resource reservation means that the line resource amount of the stream cannot be accommodated in the remaining resource amount of the virtual communication path, the line resource amount of the virtual communication path is reduced. Addition is performed, and the service class of the stream and the amount of line resources are secured in the virtual communication path.

In the network policy control system according to the next invention, in the above invention, the service class further includes a delay class in which a delay time from the input to the output of the IP core network is classified. Is characterized by.

According to the present invention, the service class includes a delay class in which the delay time required for the stream from the input to the output of the IP core network is classified.

In the network policy control system according to the next invention, in the above invention, the line resource amount is defined by a line resource amount class classified by the guaranteed line resource amount, and the resource reservation is performed. The means has a function of selecting an LSP having a sufficiently large remaining resource amount compared to the resource amount corresponding to the line resource amount class from the selected virtual communication paths.

According to the present invention, the line resource amount is defined by the line resource amount class classified by the guaranteed line resource amount. Also,
The resource reservation unit selects, from the selected virtual communication paths, an LSP having a sufficiently large remaining resource amount as compared with the resource amount corresponding to the line resource amount class.

A network policy control system according to the next invention comprises an IP core network having a plurality of LSRs, two terminals accommodated in different LSRs in the IP core network, and a session between the two terminals. A network policy control system for controlling stream transmission via a VPN constructed between the two terminals, the network policy control system comprising:
A label switch path defining means for defining an LSP in which a required resource amount and a destination network are set for each PN, and an LSP accommodating the stream at the time of establishing a session between the two terminals from the label switch path defining means. If it is determined that the line resource amount of the stream can be accommodated in the line resource amount assigned to the VPN of the selected LSP, the LSR is set to transfer the stream to the LSP. A label switch path setting means is included, and the LSR constructs a VPN in the set LSP and transfers the stream.

According to the present invention, an IP core network having a plurality of LSRs, two terminals accommodated in different LSRs in the IP core network, and a call for establishing a session between the two terminals In a network system including a control device, stream transmission control is performed via a VPN constructed between the two terminals. First, the label switch path defining means of the policy server defines the LSP in which the required resource amount and the destination network are set for each VPN. Next, by the label switch path setting means of the policy server,
At the time of establishing a session between two terminals, an LSP accommodating the stream is selected from the label switch path defining means, and the line resource amount of the stream is accommodated in the line resource amount assigned to the VPN of the selected LSP. If it is determined that it is possible, the LSR is set to transfer the stream to the LSP.
Then, by the LSR, the VP is set to the set LSP.
N is constructed and the stream is transferred.

A network policy control system according to the next invention is a network policy control for establishing a session in two terminals accommodated in different LSRs in an IP core network having a plurality of LSRs and for controlling a policy of a stream to be transmitted. A system, a user information database storing user information including a terminal address of a terminal accommodated in the LSR, a service class, and a line resource amount, with a VPN identifier attached for each VPN, and between the two terminals. Upon receiving a session establishment request / response including the VPN identifier of the
A call control device including resource reservation request means for acquiring the service class and line resource amount applied to the stream transmitted to the session corresponding to the identifier from the user information database, creating the resource reservation request, and transmitting the resource reservation request to the policy server. And a virtual communication path which is specified by a combination of the first stage LSR, the last stage LSR and the service class in the IP core network, is composed of one or more LSPs, and defines the line resource amount for each VPN. A virtual communication path defining means for setting the virtual communication path in the LSR, and a resource reservation request from the call control device at the time of establishing a session between the two terminals. Send stream sent to session And a virtual communication path that matches the address, service class, and VPN identifier of the destination terminal is selected from the virtual communication path definition means, and the resource amount of the stream is accommodated in the remaining resource amount of the corresponding VPN of the selected virtual communication path. A policy server including resource reservation means that reserves resources when it is determined to be possible, and the first stage LSR that first receives the stream from the terminal is the destination address stored in the packet of the stream. , A virtual communication path conforming to the service class and the VPN identifier is determined, and the stream is transferred according to the virtual communication path.

According to the present invention, different LSRs in an IP core network including a user information database, a call control device, and a policy server, and having a plurality of LSRs are provided.
In a network system in which a session is established between two terminals accommodated in the above and policy control of a stream to be transmitted is performed, the destination stored in the packet of the stream by the first stage LSR that first receives the stream from the terminal. A virtual communication path matching the address, class of service and VPN identifier is determined, and the stream is transferred according to the virtual communication path. Here, in the user information database, the terminal address of the terminal accommodated in the LSR,
User information including service class and line resource amount is stored with a VPN identifier attached for each VPN.
Further, the call control device is provided with a resource reservation requesting means, and when the resource reservation requesting means receives a session establishment request / response including the VPN identifier between the two terminals, the session corresponding to the VPN identifier is received. The service class and line resource amount applied to the stream to be transmitted to the server are acquired from the user information database, the resource reservation request is created, and transmitted to the policy server. Further, the policy server is provided with a virtual communication path defining means, a virtual communication path setting means, and a resource reservation means. The virtual communication path setting means specifies a combination of the first-stage LSR, the last-stage LSR and the service class in the IP core network, is composed of one or more LSPs, and defines the line resource amount for each VPN. A communication path is defined. The defined virtual communication path is set in the LSR by the virtual communication path setting means. By the resource reservation means, in response to a resource reservation request from the call control device at the time of establishing a session between the two terminals, the address, service class and VPN identifier of the source and destination terminals of the stream transmitted to the session A virtual communication path conforming to the above is selected from the virtual communication path defining means, and when it is determined that the resource amount of the stream can be accommodated in the residual resource amount of the corresponding VPN of the selected virtual communication path, resource reservation is made. Is done. Then, the first-stage LSR that first receives the stream from the terminal determines a virtual communication path that matches the destination address, the service class, and the VPN identifier stored in the packet of the stream, and according to the virtual communication path, The stream is transferred.

A network policy control system according to the next invention comprises different LSs in an IP core network.
A VPN accommodated in the R and user information including an address of the network, a service class, and a line resource amount are attached to each VPN and stored for each network, and installed in the VPN.
An intra-PN user information database, a VPN call control device accommodated in each of the different networks, a call control device for establishing a session between two terminals existing in the different networks, and between the two terminals. Is a network policy control system including a call control device and a policy server for controlling the transmission of the stream, wherein the intra-VPN call control device receives a VPN identifier from a terminal in a network accommodated in the intra-VPN call control device. When receiving the session establishment request / response including the VPN, from the user information in the VPN user information database provided in the network to which the terminal belongs, the VPN
The call control device comprises means for acquiring a service class / line resource amount and a VPN identifier applied to the stream corresponding to the identifier, and transferring the VPN identifier attached to the session establishment request / response, wherein the call control device is the intra-VPN call control device. A resource reservation request means for transmitting a resource reservation request for the stream to the policy server when receiving a session establishment request / response to which the service class / line resource amount and VPN identifier are attached from
The policy server is a virtual communication path that is specified by a combination of the first-stage LSR, the last-stage LSR, and the service class in the IP core network, is composed of one or more LSPs, and defines the line resource amount for each VPN. For defining the virtual communication path, the virtual communication path setting means for setting the virtual communication path in the LSR, and the source of the stream in response to the resource reservation request from the intra-VPN call controller. A virtual communication path that matches the address, service class, and VPN identifier of the destination terminal is selected from the virtual communication path definition means, and the resource amount of the stream can be accommodated in the remaining resource amount of the corresponding VPN of the selected virtual communication path. If you judge that A first stage LSR, which comprises a resource reservation unit for making a reservation, and which accommodates the terminal, determines a virtual communication path that matches the destination address, the service class, and the VPN identifier stored in the stream from the terminal, The stream is transferred according to a communication path.

According to the present invention, the networks accommodated in different LSRs in the IP core network and the user information including the network address, service class and line resource amount are assigned to each VPN with a VPN identifier, A VPN user information database stored for each network and installed in the VPN, a VPN call control device accommodated in each of the different networks, and a session between two terminals existing in the different networks. In a network policy control system including a call control device that establishes a call, and a call control device that controls transmission of a stream between the two terminals and a policy server, a stream from the terminal is converted into a stream by the first stage LSR that accommodates the terminal. Stored destination address, server Sukurasu and VPN identifiers compatible virtual communication path is determined, the stream is transferred in accordance with the virtual communication path. Here, when the intra-VPN call control device receives a session establishment request / response including a VPN identifier from a terminal in a network accommodated with the intra-VPN call control device,
The VPN provided in the network to which the terminal belongs
From the user information in the internal user information database, the service class / line resource amount applied to the stream corresponding to the VPN identifier and the VPN identifier are acquired, and are attached to the session establishment request / response and transferred. Further, the call control device includes resource reservation requesting means, and the resource reservation requesting means causes the VPN
Session establishment request with the service class / line resource amount and VPN identifier attached from the internal call control device /
When a response is received, a resource reservation request for the stream is sent to the policy server. further,
The policy server includes a virtual communication path defining means, a virtual communication path setting means, and a resource reservation means. A first stage LSR in the IP core network by the virtual communication path defining means,
It is specified by the combination of the last stage LSR and service class, is composed of one or more LSPs, and has a VPN.
A virtual communication path that defines the amount of line resources for each is defined. The virtual communication path setting means sets the virtual communication path in the LSR.
In response to the resource reservation request from the intra-VPN call control device, the resource reservation means creates a virtual communication path that matches the addresses and service classes of the stream source and destination terminals and the VPN identifier. When it is determined by the definition means that the remaining resource amount of the corresponding VPN of the selected virtual communication path can accommodate the resource amount of the stream, resource reservation is performed.

A network policy control system according to the next invention provides an IP core network having a plurality of LSRs, two terminals accommodated in the different LSRs, and a session establishment request / response from the two terminals to the IP core network. A network policy control system comprising: a sub-call control device that first performs a transfer process in a core network; and a sub-policy server that is associated with each of the sub-call control devices, wherein the sub-call control device is a session. When the establishment request / response is received, a resource reservation request for a stream destined for the terminal accommodated in the other sub call control device is transmitted to the sub policy server associated with the sub call control device. Means for transmitting, wherein said sub-policy server is associated with said sub-policy server Upon receiving the resource reservation request from the call control apparatus, LSP for accommodating the stream
Is selected, and when it is determined that the stream can be accommodated in the selected LSP, a means for setting the LSR so as to transfer the stream to the LSP is provided, and between the two terminals. When establishing a session, the sub policy server sets an LSP defining a transfer procedure of the stream in the LSR.

According to the present invention, an IP core network having a plurality of LSRs, two terminals accommodated in the different LSRs, and a session establishment request / response from the two terminals are first transmitted in the IP core network. In a network policy control system including a sub-call control device that performs a transfer process and a sub-policy server associated with each of the sub-call control devices, the sub-policy server is configured to establish a session between the two terminals. An LSP defining a transfer procedure of the stream is set for the LSR. Here, when the session establishment request / response is received by the sub call control device, it is stored in the other sub call control device with respect to the sub policy server associated with the sub call control device. A resource reservation request for a stream destined for the existing terminal is transmitted. Further, when the sub-policy server receives the resource reservation request from the sub-call control device associated with the sub-policy server, an LSP accommodating the stream is selected, and the selected LSP is set to the LSP. When it is determined that the stream can be accommodated, the LSR is set so that the stream is transferred to the LSP.

In the network policy control system according to the next invention, an IP core network including a plurality of LSRs, two terminals accommodated in the different LSRs, and a session establishment request / response from the two terminals are transmitted to the IP core network. A secondary call control device that first performs transfer processing in the core network, a secondary policy server associated with each of the secondary call control devices, a terminal address of a terminal accommodated in the LSR, a service class, and a line resource amount. And a user information database that stores user information including: wherein the sub-call control device is accommodated in the other sub-call control device when the session establishment request / response is received. The service class / line resource amount to be applied to the stream whose destination is the existing terminal A resource reservation request for the stream is sent to the means for transferring from the user information database by attaching it to the session establishment request / response and the sub policy server associated with the sub call control device. Transmitting means, the sub-policy server, in response to the resource reservation request from the sub-call control device associated with the sub-policy server, addresses and service classes of the source and destination terminals of the stream. If a virtual communication path that conforms to is selected, and it is determined that the resource amount of the stream can be accommodated in the remaining resource amount of the selected virtual communication path, a resource reservation unit that performs resource reservation is provided, and one terminal is Resource reservation processing of the stream as the destination is accommodated in the terminal on the source side of the stream. Characterized in that it is performed by Fukuko controller and secondary policy server.

According to the present invention, an IP core network having a plurality of LSRs, two terminals accommodated in the different LSRs, and a session establishment request / response from the two terminals are first transmitted in the IP core network. And a sub-policy server associated with each of the sub-call control devices, and user information including the terminal address, service class and line resource amount of the terminal accommodated in the LSR. In a network policy control system including a user information database storing therein, a resource reservation process for a stream destined for one terminal is a sub-call control device and a sub-policy accommodated in the terminal on the source side of the stream. Done by the server. Here, when the sub-call control device receives the session establishment request / response, the sub-call control device uses the service class / line resource amount applied to the stream destined for the terminal accommodated in the other sub-call control device. Request from the user information database
And a means for transmitting the stream resource reservation request to the sub-policy server associated with the sub-call control device. Further, the sub policy server includes a resource reservation unit, and by the resource reservation unit, in response to the resource reservation request from the sub call control device associated with the sub policy server, a source and a destination terminal of the stream. If a virtual communication path that matches the address and service class of the stream is selected, and it is determined that the resource amount of the stream can be accommodated in the remaining resource amount of the selected virtual communication path, resource reservation is performed.

A network policy control system according to the next invention comprises different LSs in an IP core network.
A VPN accommodated in the R and user information including an address of the network, a service class, and a line resource amount are attached to each VPN and stored for each network, and installed in the VPN.
The intra-PN user information database, the intra-VPN call control device accommodated in each of the different networks, the sub-call control device accommodated in the intra-VPN call control device, and the sub-call control device are associated with each other. And a sub-policy server that is installed in the VPN, wherein the intra-VPN call control device receives a session establishment request / response including a VPN identifier from a terminal in a network accommodated in the intra-VPN call control device. Then, from the user information of the VPN user information database provided in the network to which the terminal belongs, the VP
Obtain the service class / line resource amount and VPN identifier applied to the stream corresponding to the N identifier,
The sub call control device comprises means for transferring the session establishment request / response by attaching the service class / line resource amount and the VPN from the intra-VPN call control device.
When a session establishment request / response to which an identifier is attached is received, resource reservation request means for transmitting a resource reservation request for the stream to the sub policy server associated with the sub call control device is provided, and the sub policy In response to the resource reservation request, the server selects a virtual communication path that matches the addresses of the source and destination terminals of the stream, the service class, and the VPN identifier, and the corresponding VPN of the selected virtual communication path.
The resource reservation means for performing resource reservation when it is determined that the remaining resource amount can accommodate the resource amount of the stream, and the LSR accommodating the terminal is the destination stored in the stream from the terminal. A virtual communication path that matches an address, a service class, and a VPN identifier is determined, and the stream is transferred according to the virtual communication path.

According to the present invention, the networks accommodated in different LSRs in the IP core network and the user information including the network address, the service class and the line resource amount are attached to each VPN with a VPN identifier, In-VPN user information database stored for each network and installed in the VPN, intra-VPN call control device accommodated in each of the different networks, and sub-call control accommodated in the intra-VPN call control device In a network policy control system comprising a device and a sub-policy server associated with each of the sub-call control devices, the LSR accommodating the terminal
The virtual communication path that matches the destination address, the service class, and the VPN identifier stored in the stream from the terminal is determined, and the stream is transferred according to the determined virtual communication path. Here, by the call control device in the VPN,
When a session establishment request / response including a VPN identifier is received from a terminal in a network accommodated in the intra-VPN call control device, the user of the intra-VPN user information database provided in the network to which the terminal belongs From the information, the service class / line resource amount and VP to be applied to the stream corresponding to the VPN identifier
The N identifier is obtained, and is attached to the session establishment request / response and transferred. The sub-call control device further comprises a resource reservation request means, and the resource reservation request means receives a session establishment request / response to which the service class / line resource amount and VPN identifier are attached from the intra-VPN call control device. Then, a resource reservation request for the stream is transmitted to the sub policy server associated with the sub call control device. Furthermore, the sub-policy server comprises resource reservation means,
With respect to the resource reservation request, the resource reservation means selects a virtual communication path that matches the addresses of the source and destination terminals of the stream, the service class, and the VPN identifier, and corresponds to the selected virtual communication path. When it is determined that the stream resource amount can be accommodated in the VPN remaining resource amount, resource reservation is performed.

In the network policy control system according to the next invention, in the above invention, the call control device for collectively managing the sub call control device in the network policy control system and the sub policy server are collectively managed. And a policy server.

According to the present invention, the call control device
The sub-call control device in the network policy control system is managed collectively, by the policy server,
The sub policy servers are collectively managed.

The network policy control system according to the next invention is characterized in that, in the above-mentioned invention, the sub-policy server can be associated with a plurality of sub-call control devices.

According to the present invention, the sub policy server associates a plurality of sub call control devices with each other.

A network policy control system according to the next invention is characterized in that, in the above-mentioned invention, the sub-call control device and the sub-policy server are provided in the same device.

According to the present invention, the sub-call control device and the sub-policy server are provided in the same device.

A network policy control system according to the next invention is characterized in that, in the above-mentioned invention, the sub-call control device and the sub-policy server are provided in the same LSR.

According to the present invention, the sub call control device and the sub policy server are provided in the same LSR.

A policy server according to the next invention comprises an IP core network having a plurality of label switching routers, two terminals accommodated in different label switching routers in the IP core network, and between the two terminals. In a policy server used in a network policy control system including a call control device that performs session establishment processing, a policy server specified by a combination of a first-stage label switching router, a last-stage label switching router, and a service class in the IP core network, A virtual communication path defining means for defining a virtual communication path composed of a label switch path, a virtual communication path setting means for setting the virtual communication path in the label switching router, and between the two terminals. In response to a resource reservation request from the call control device at the time of session establishment, the virtual communication path for accommodating the stream is set based on the addresses and service classes of the source and destination terminals of the stream transmitted in the session. A resource reservation unit that selects a resource from the definition unit and reserves resources when it is determined that the resource amount of the stream can be accommodated in the remaining resource amount of the selected virtual communication path;
It is characterized by including.

According to the present invention, the policy server includes the virtual communication path defining means, the virtual communication path setting means, and the resource reservation means, and the IP core network includes a plurality of label switching routers, and the IP core. There is provided a policy server used in a network policy control system including two terminals accommodated in different label switching routers in a network and a call control device that performs a session establishing process between the two terminals. First, the virtual communication path defining means defines a virtual communication path that is specified by a combination of the first-stage label switching router, the last-stage label switching router, and the service class in the IP core network, and is configured by one or more label switch paths. It Next, the virtual communication path setting means sets the virtual communication path in the label switching router. Then, in response to a resource reservation request from the call control device at the time of establishing a session between the two terminals by the resource reservation means, based on the addresses and service classes of the source and destination terminals of the stream transmitted in the session. A virtual communication path accommodating the stream is selected from the virtual communication path defining means, and resource reservation is performed when it is determined that the resource amount of the stream can be accommodated in the remaining resource amount of the selected virtual communication path. .

The policy server according to the next invention is characterized in that, in the above-mentioned invention, the virtual communication path defining means further has a function of defining a line resource amount for each VPN in the virtual communication path.

According to the present invention, the virtual communication path defining means further defines the line resource amount for each VPN in the virtual communication path.

A policy server according to the next invention comprises an IP core network having a plurality of LSRs, two terminals accommodated in different LSRs in the IP core network, and a session establishment process between the two terminals. And a call control device that performs
In a policy server used in a network policy control system for controlling transmission of a stream via a PN, a label switch path defining means for defining an LSP in which a required resource amount and a destination network are set for each VPN, and between the two terminals. When the session is established, the LSP accommodating the stream is selected from the label switch path defining means, and it is determined that the line resource amount of the stream can be accommodated in the line resource amount allocated to the VPN of the selected LSP. If you do, the LS
Label switch path setting means for setting the LSR so as to transfer the stream to P.

According to the present invention, there is provided a policy server comprising a label switch path defining means and a label switch path setting means, the IP core network having a plurality of LSRs, and different LSRs in the IP core network.
Network policy for controlling stream transmission via a VPN constructed between the two terminals, and a call control device for establishing a session between the two terminals. A policy server for the control system is provided. First, the label switch path defining means defines an LSP in which a required resource amount and a destination network are set for each VPN. Then, when the session between the two terminals is established by the label switch path setting means, the LSP accommodating the stream is selected from the label switch path defining means, and the line resource allocated to the VPN of the selected LSP. If it is determined that the amount can accommodate the line resource amount of the stream, the LSR is set to transfer the stream to the LSP.

[0047]

BEST MODE FOR CARRYING OUT THE INVENTION Preferred embodiments of a network policy control system according to the present invention and a policy server used therein will be described in detail below with reference to the accompanying drawings.

Embodiment 1. 1 is a configuration diagram showing a first embodiment of a network policy control system according to the present invention. This network system includes a call control device (denoted as CA in FIG. 1) 1, a policy server (also denoted as PS) 2, a user information database (also denoted as UDB) 3, and an IP core network. 4 of the voice stream MPLS (Multi Protocol Lab
LSR4 which performs routing processing by el Switching)
1 to 46, a gateway device (also referred to as GW) 5 accommodated in the LSR 41, a gateway device 6 accommodated in the LSR 44, an access network 7 accommodated in the LSR 41, and an access network 8 accommodated in the LSR 44. , A terminal 9 existing in the access network 7, and a terminal 10 existing in the access network 8.
And have.

In the network policy control system according to the first embodiment, as in the prior art, L
The SP can accommodate a plurality of session streams (packets transferred on an established session). Further, as a protocol for establishing / controlling a session between the terminals 9 and 10, when a session is established, a calling side issues a request (hereinafter referred to as a session establishment request), and a called side responds to it. (Less than,
SIP having a structure for returning a session establishment response)
(Session Initiation Protocol), ITU-T (Inter
national Telecommunication Union-Telecommunication
H323 or SS7 recommended by sector)
Protocols such as (Signaling System 7) can be used.

Next, a processing procedure for setting a virtual communication path to the LSR in the network system of FIG. 1 will be described with reference to the flowchart of FIG. First, the network administrator defines the user information indicating the service grade of the network user on the policy server 2 (step S1), and the user information is stored in the user information database 3 shown in FIG. (Step S2). This user information includes flow identification information (terminal address / address mask, transport protocol type, coding method, etc.) and a CoS (Class of Ser) indicating a service grade applied to the flow.
vice, service class) and required line resource amount are defined.

On the policy server 2, the first LS
R, last stage LSR, these first stage LSR and last stage LSR
The network manager defines virtual communication path information including the amount of line resources and CoS required between and (step S3). In the present invention, a path specified from virtual communication path information is called a virtual communication path. That is, the virtual communication path is [first-stage LS
R, final stage LSR, CoS] is uniquely identified.

The policy server 2 stores the input information composed of the user information and the virtual communication information, and determines a plurality or a single LSP to be actually set in the network from the virtual communication path information (step S4).
For example, in FIG. 1, when the first stage LSR of the virtual communication path is input as LSR41 and the last stage LSR is input as LSR44, "LSR41-LSR42-LSR43-LS" is input.
R44 "and" LSR41-LSR46-LSR45-
It is conceivable that the LSPs of the two routes of "LSR44" will be the constituent elements of the virtual communication path. And
The policy server 2 has a function of referring to a network topology database (TDB) from these LSPs and determining an optimal LSP set. In addition,
The sum of the line resource amounts of these LSPs forming the virtual communication path is determined so as to match the line resource amount of the virtual communication path.

FIG. 4 is a diagram showing a configuration example of a virtual communication path including attribute information. Here, the virtual communication path identifier (VID) is an identifier that uniquely identifies the virtual communication path, and is an LSP identifier (LSPID).
Is an identifier for uniquely identifying the LSP belonging to the virtual communication path. The destination address / address mask is obtained by the policy server 2 from the network topology database. For example, the LSR 41 shown in FIG. 1 is the first stage LSR and the LSR 44 is the last stage LSR.
In the case of a virtual communication path with SR, the destination address / address mask is the destination address / address mask of the access network 8. With the above, LSR41
The process of setting the LSP to 46 is completed.

Then, the policy server 2 sets these LSP groups in the individual LSRs 41 to 46 on the IP core network according to the operation by the network administrator (step S5). Specifically, the first stage L of LSP
Notify the SR about the information about the LSP, and
RSVP-TE (Resource ReSerVation Proto), which is being considered by the Internet Engineering Task Force
col for Traffic Engineering, RFC (Request For C
omments) 3209) and other signaling protocols. At this time, the LSR which is the first stage LSR of one of the virtual communication paths also includes the virtual communication path attribute information including the virtual communication path identifier, the resource amount, the CoS, the destination address / address mask, and the LSP identifier. Is set.

In setting the LSP, the first stage LSR
And the LSR of each LSP set as the last stage LSR
41 to 46 have a function as an edge LSR in the LSP.

Next, the procedure from the session establishment between the calling terminal and the called terminal to the transmission of the session stream in this system will be described with reference to the flowcharts of FIGS. Here, a case where the terminal 9 calls the terminal 10 in FIG. 1 will be described as an example.

First, the terminal 9 transmits a session establishment request to the terminal 10 (step S11), but the session establishment request is received by the call control device 1 before being transmitted to the terminal 10 (step S12). ). This session establishment request is generally used by a session identifier for uniquely identifying a session, a calling terminal address (address of terminal 9), a called terminal address (address of terminal 10), and a session stream. A transport protocol, a port number of the transport protocol, an encoding type, etc. are included. In the following description, the terminal 9 is called a calling terminal and the terminal 10 is called a called terminal.

Upon receiving the session establishment request, the call control device 1 collates the contents of the session establishment request with the user information database 3 for the stream from the called terminal 10 to the calling terminal 9 of the session, and the stream The CoS / line resource amount to be applied to is acquired (step S13). For example, if the stream from the called terminal 10 to the calling terminal 9 matches the first entry in the user information database 3 shown in FIG. 3, the call control device 1 determines that the transfer priority class = 1 and Discard priority class = 2
And the resource amount of 10 Mbps.

Then, the call control device 1 transmits a resource reservation request including information on the session identifier, the destination terminal address, the source terminal address, the CoS and the resource amount to the policy server 2 (step S14). Here, the information included in the resource reservation request will be described. The session identifier is an identifier that uniquely identifies a session. In addition, the destination terminal address is the destination address of the stream for which resource reservation is made. In this case,
Since the resource is reserved for the stream in the direction from the call receiving terminal 10 to the calling terminal 9 of the session, the destination terminal address is the address of the calling terminal 9. The source terminal is the source address of the stream for resource reservation,
In this case, it becomes the address of the called terminal 10. CoS
Is the CoS acquired from the user information database 3, and the resource amount is the resource amount also acquired from the user information database 3.

Upon receiving the resource reservation request (step S31), the policy server 2 derives the LSR 44 accommodating the source terminal address of the resource reservation request (that is, the address of the called terminal 10) from the network topology database (step S31). Step S32). Further, the policy server 2 uses the destination address / address mask and CoS of the virtual communication path in which the LSR 44 is the first stage LSR, the destination terminal address (that is, the address of the calling terminal 9) included in the resource reservation request, and C.
Then, the matching virtual communication path is determined as the virtual communication path accommodating the session (step S33).

After that, the policy server 2 determines whether the stream can be accommodated in the matching virtual communication path (step S34). That is,
When the remaining resource amount of the virtual communication path is sufficient and the required resource amount for the stream can be secured, or the remaining resource amount of the virtual communication path is insufficient, but the resource amount of the LSP in the virtual communication path increases. Alternatively, if the resource amount can be added by means such as setting a new LSP, it is determined that the stream can be accommodated in the virtual communication path. Here, the setting of increasing the resource amount of the LSP in the virtual communication path and the setting of the new LSP are performed by the signaling protocol described above for the first stage LSR of the LSP.

When the policy server 2 determines that the stream can be accommodated in the virtual communication path (Yes in step S34), the resource amount of the stream is subtracted from the remaining resource amount of the virtual communication path. The remaining resource amount of the virtual communication path is associated with the virtual communication path and stored together with the session identifier and the resource amount of the stream (step S35). After that, the policy server 2 returns a resource reservation response (success) to the call control device 1 (step S).
36).

On the other hand, when the policy server 2 determines in step S34 that the stream cannot be accommodated in the virtual communication path (No in step S34).
In this case), the policy server 2 returns a resource reservation response (failure) to the call control device 1 (step S3).
7). In steps S31 to S37 described above, the resource reservation confirmation process for the stream in the direction from the called terminal 10 to the calling terminal 9 of the session ends.

When the call control device 1 receives the resource reservation response from the policy server 2 (step S15), it determines whether or not the resource reservation response is successful (step S16). If the resource reservation response is successful (Yes in step S16), the above-described step S
The CoS / line resource amount acquired in 13 is attached to the session establishment request and transferred to the called terminal 10 (step S17).

On the other hand, if the resource reservation response is unsuccessful (No in step S16), the call control device 1
Executes a failure sequence defined by the session control protocol, such as transmitting a message notifying the session establishment response failure to the calling terminal 9 (step S
19), the process ends.

When the call-in terminal 10 receives the session establishment request from the call control device 1 (step S18), it makes necessary changes to the session establishment request to create a session establishment response, and issues the session establishment response. It transmits to the terminal 9 via the call control apparatus 1 (step S20).
When the call control device 1 receives the session establishment response from the call-in terminal 10 (step S21), each of the direction from the call-incoming terminal 9 to the call-in terminal 10 / the direction from the call-in terminal 10 to the call-in terminal 9 in the session is transmitted. CoS / applied to the stream
The line resource amount is acquired from the user information database (step S22). Note that the resource reservation confirmation of the stream in the direction from the called terminal 10 to the calling terminal 9 in step S22 has already been performed when the session establishment request is made, but since the called terminal 10 has negotiated the session information. In addition, it is also required for session establishment response. Then, the resource reservation request for the stream is transmitted to the policy server 2 (step S23).

The resource reservation confirmation for the stream in the direction from the calling terminal 9 to the called terminal 10 / in the direction from the called terminal 10 to the calling terminal 9 of the session in the policy server 2 is performed by the steps S31 to S37 in FIG. The same process is performed. That is, the policy server 2
Find the virtual communication path that accommodates the above stream,
If the stream can be accommodated in the virtual communication path, a resource reservation response (success) is transmitted to the call control device 1, and if not, the resource reservation response (failure) is transmitted to the call control device 1.

After that, the call control device 1 makes the policy server 2
Receives a resource reservation response from the server (step S24)
Then, the call control device 1 determines whether or not the resource reservation response is successful (step S25). When it is determined that the resource reservation response is successful (step S25)
In the case of Yes), the CoS / line resource amount applied to the stream in the direction from the calling terminal 9 to the called terminal 10 of the session acquired in the process of resource reservation processing is attached to the session establishment response. The data is transferred to the calling terminal 9 (step S26).

On the other hand, if the resource reservation response is unsuccessful (No in step S25), the failure sequence defined by the session control protocol is executed (step S28), and the process ends. As a failure sequence, for example, when the call control device 1 transmits a session establishment cancel message to the call reception terminal 10, the call reception device 10 notifies the call control device 1 of success / failure in response to this message, and The call control device 1 includes a calling terminal 9
A process of transmitting a message notifying that the session establishment response has failed is performed.

The calling terminal 9 receives the session establishment response with the CoS / line resource amount attached (step S2).
7), recognizing that a session has been established between the calling terminal 9 and the called terminal 10, the calling terminal 9 and the called terminal 10 are recognized.
The process of establishing a session between and ends.

After that, the calling terminal 9 recognizes that a session has been established between the calling terminal 9 and the called terminal 10, and then starts transmitting a stream to the called terminal 10 in the session. At this time, the stream is transferred with the amount of resources included in the session establishment response or less, and CoS included in the session establishment response is added to the packets forming the stream to be transferred. The field of the packet for setting this CoS corresponds to the ToS field in IPv4 and the FlowLabel field in IPv6.

Upon receiving the packet forming the stream from the calling terminal 9 via the gateway device 5, the LSR 41 forms a stream together with the destination address / address mask and CoS of the virtual communication path set in itself. Destination address and CoS of packets to be sent
And the virtual communication path for transferring the stream is determined. The virtual communication path determined by the LSR 41 matches the virtual communication path determined by the policy server 2 in step S33 of FIG. 7 described above.

Upon receiving the stream packet, the first-stage LSR 41 transfers the stream packet to the virtual communication path in which the resources are secured when the session is established. Here, L constituting the virtual communication path
If the SP is single, transfer the stream to that LSP. Also, an LSP that constitutes a virtual communication path
If there are a plurality of LSPs, the stream is transferred to each LSP while scheduling so as not to exceed the resource amount of each LSP.

On the other hand, the called terminal 10 receives the session establishment request at step S18 described above,
It is recognized that a session has been established between the calling terminal 9 and the called terminal 10. Then, the transmission of the packets forming the stream is started by the same processing method as the procedure of transmitting the stream in the calling terminal 9 described above.

The LS which receives the packet forming the stream from the called terminal 10 via the gateway device 6.
The R44 transfers the stream to the LSP forming the virtual communication path by the transfer processing method similar to that of the LSR41 described above. In this way, stream transmission is realized between the calling terminal 9 and the called terminal 10.

As described above, according to the first embodiment, the first stage LSR, the last stage LSR, and the LS having the same CoS are used.
The set of Ps is defined as a virtual communication path, and the virtual communication path in which the resource reservation for the session is made by the policy server 2 and the virtual communication path obtained from the destination address of the stream and the CoS by the first stage LSRs 41 and 44 are inevitable. Therefore, the policy server 2 does not have to make settings for the edge LSR every time a session is established between the terminals 9 and 10. Further, in the edge LSR, the filtering process for determining whether or not to transfer the stream for each packet of the stream becomes unnecessary, and the edge LS
The load on R is reduced.

Embodiment 2. Next, a second embodiment of the present invention will be described with reference to FIGS. In the second embodiment, when the network administrator defines CoS in the above-described first embodiment, the delay time from the input of the stream to the IP core network 4 to the output of the stream is classified. To further define a delay class

FIG. 8 is a diagram showing an example of classifying delay classes, and FIG. 9 is a diagram showing a configuration example of the user information database 3 in which CoS further includes delay classes.
FIG. 10 is a diagram showing a configuration example of a virtual communication path in which CoS further includes a delay class.

In the example of FIG. 8, the delay classes are 4 of 1 to 4 depending on the combination of the maximum delay time and the minimum delay time.
It is divided into stages. Delay class 1 has a maximum delay time of 100 ms and a minimum delay time of 0,
It is set for the terminal with the least delay. Also,
Delay class 2 has a delay time of 100 ms to 400 ms, delay class 3 has a delay time of 400 ms to 1000 ms, and delay class 4 has a delay time of 1000 ms or more.

User information database 3 shown in FIG.
Is the CoS of the user information database 3 shown in FIG.
In, a delay class is added. In this delay class, the maximum delay time and the minimum delay time are defined by the delay class shown in FIG.

Further, the virtual communication path shown in FIG. 10 has a configuration in which the delay class can be further defined as an attribute in the CoS of the virtual communication path shown in FIG. Also in this delay class, the maximum delay time and the minimum delay time are defined by the delay class shown in FIG. This delay class is used when determining the route of the LSP that constitutes the virtual communication path. In particular,
If the delay time of the LSP is calculated to be greater than or equal to the minimum delay time defined in the delay class and less than or equal to the maximum delay time, the LS
P is determined as the route of the LSP forming the virtual communication path. As a method of calculating the delay time, the policy server 2, the edge LSRs 41 and 44 are
It is performed by calculating from the network topology database including the delay time of R.

Even when the delay class is added to CoS, the session establishing process and the policy control process are performed according to the procedure described in FIG. 2 and FIG. 5 to FIG. 7 of the first embodiment.

According to the second embodiment, it becomes possible to grade the service grade of the user in the IP core network 4 in consideration of the delay time.

Embodiment 3. FIG. Next, a third embodiment of the present invention will be described with reference to FIGS. In the third embodiment, when the network administrator defines CoS in the above-described second embodiment, the line resource amount class is defined by further classifying the resource amount guaranteed by the IP core network 4. .

FIG. 11 is a diagram showing an example of classifying the line resource amount class, and FIG. 12 is a diagram showing a configuration example of the user information database 3 in which the line resource amount class is further included in CoS. .. The line resource amount class does not define an attribute for the virtual communication path.

In the example of FIG. 11, the line resource amount class is classified into four stages of 1 to 4 depending on the combination of the maximum bandwidth, the minimum guaranteed bandwidth and the maximum burst size. The maximum bandwidth of line resource amount class 1 is 64k
bps, the minimum guaranteed bandwidth is 8 kbps, and the maximum burst size is 8 kbyte, which is the lowest class of line resource amount. As the level of the line resource amount class goes up, the content is highly guaranteed. In the line resource amount class 4, the maximum bandwidth is 16 Mbps, the minimum guaranteed bandwidth is 8 Mbps, and the maximum burst size is 8 kbyte. Yes, it is the highest class in terms of line resources. The correspondence table between the line resource amount class and the resource amount is shown in the user information database 3 and the edge LSRs 41 to 41.
It is set to 46.

The user information database 3 shown in FIG. 12 is "C" of the user information database 3 shown in FIG.
In the "OS" field, the line resource amount class is further added, and the "resource amount" field is deleted. The line resource amount class of this “CoS” field is defined by the line resource amount class shown in FIG. 11 described above.

The procedure of session establishment and policy control from the calling terminal 9 to the called terminal 10 in the third embodiment is the same as the processing shown in FIGS. 5 to 7 described in the first embodiment. The description is omitted here. However, when the call control device 1 receives the session establishment request from the calling terminal 9,
5, the call control device 1 according to the first embodiment directly determines the resource amount from the entry in the user information database 3 that matches the content of the session establishment request. However, in the third embodiment, the call control device 1 collates the contents of the session establishment request with the user information database 3, and the CoS field of the matching entry in the user information database 3 The difference is that when the line resource amount class is defined, the resource amount is acquired from the correspondence table of the line resource amount class and the resource amount as shown in FIG. The resource reservation confirmation processing for the streams in the direction from the calling terminal 9 to the called terminal 10 and in the direction from the called terminal 10 to the calling terminal 9 in step S22 of FIG. 6 is also the same.

The transfer process of the stream packet of the LSR after the stream is transmitted from the calling terminal 9 and the called terminal 10 will be described with reference to the flowchart of FIG.

When a session from the calling terminal 9 to the called terminal 10 is established, the calling terminal 9 and the called terminal 10 start transmitting a stream, as in the case of the above-described first embodiment. . At this time, when the LSR 41 and the LSR 44, which are the first stage LSR of the virtual communication path, receive the stream (step S41), the LSR 4
Matches the CoS excluding the destination address / address mask and the line resource amount class of the virtual communication path set to 1, 44 itself with the CoS excluding the destination address and the line resource amount class of the packets forming the stream. Then, the virtual communication path for transferring the stream is determined (step S42). For example, if the information shown in FIG.
When set to, virtual communication paths of transfer priority class = 1, discard priority class = 2, delay class = 3 are determined.

Then, the resource amount is acquired from the line resource amount class / resource amount correspondence table as shown in FIG. 11 and the CoS line resource amount class included in the stream (step S44). After that, the QoS control for the stream is performed according to the acquired CoS (step S45).

For example, when 3 is set as the line resource amount class of the stream, LSR4
11, LSPs having a residual bandwidth sufficiently larger than the minimum guaranteed bandwidth of 1 Mbps shown in FIG. 11 are set as stream transfer destinations from the searched virtual communication paths. Then, the minimum guaranteed bandwidth (1 Mbps) is subtracted from the set remaining bandwidth of the LSP. Then, the stream is shaped with a maximum bandwidth of 8 Mbps to guarantee a minimum guaranteed bandwidth of 1 Mbps and a maximum burst size of 8 kbytes.

After that, the LS set for the stream transfer is set.
If it is not performed for a predetermined period between Ps, the setting for securing the line resource amount for the stream in the LSP is canceled. That is, the minimum guaranteed bandwidth (1 Mbps) subtracted during the above setting is added to the remaining bandwidth of the LSP.

As described above, according to the third embodiment, the line resource amount is classified according to the combination of the maximum bandwidth, the minimum guaranteed bandwidth and the maximum burst size, and is defined in CoS. In the edge LSR, more detailed QoS control of the stream becomes possible.

Fourth Embodiment Next, a fourth embodiment of the present invention will be described with reference to FIGS. In the fourth embodiment, the IP core network has a plurality of VPNs.
It is intended to provide a network policy control system having a function of accommodating the above, and capable of performing resource management for each VPN.

FIG. 14 is a block diagram showing the fourth embodiment of the network policy control system according to the present invention. This network system includes a call control device (see FIG. 14).
In the above, CA and 1 and the policy server (also,
2), LSRs 41 to 46 that perform routing processing of the session stream by MPLS in the IP core network 4, gateway devices (also referred to as GW) 5-1 to 5-n accommodated in the LSR 41,
Gateway devices 6-1 to 6- housed in the LSR 44
n and the access network 7 accommodated in the LSR 41
-1 to 7-n, access networks 8-1 to 8-n accommodated in the LSR 44, and access network 7-
1 and a terminal 10 existing in the access network 8-1.

Next, a processing method of resource management for each VPN in communication using the VPN via the IP core network 4 will be described.

The network administrator is the policy server 2
The LSP is defined above, and the defined LSP is set in the LSRs 41 to 46 existing on the IP core network 4. In the setting at this time, the required line resource amount and the destination network are defined for each VPN.

Here, the processing procedure of session establishment and policy control when the terminal 9 makes a call to the terminal 10 will be described with reference to the flowcharts of FIGS.

The terminal 9 first transmits a session establishment request to the terminal 10 (step S51), but the session establishment request is received by the call control device 1 before being transmitted to the terminal 10 (step S52). At this time, the terminal 9
The VPN-ID set for itself is added to the session establishment request and transmitted. In the following explanation,
The terminal 9 is called a calling terminal, and the terminal 10 is called a called terminal.

Upon receiving the session establishment request, the call control device 1 performs resource reservation processing for the stream from the called terminal 10 to the calling terminal 9 of the session (step S53). This resource reservation processing is performed by the call control device 1
To the policy server 2, the direction from the called terminal 10 to the calling terminal 9 of the session including the session identifier, the calling terminal address, the called terminal address, the line resource amount required for the stream, and the VPN-ID. By sending a resource reservation request for the stream.

When the policy server 2 receives the resource reservation request (step S71), it determines the LSP candidate that accommodates the stream (step S72), and then determines the LS.
Whether the above stream can be accommodated in P is V of LSP
The determination is made by comparing the resource amount assigned to the PN with the resource amount required for the stream (step S73). If there is an LSP with a sufficient amount of resources to accommodate the stream (step S
If Yes in 73), the first stage LSR 44 of the LSP is set so as to transfer the stream to this LSP (step S74), and a resource reservation response (success) is returned to the call control device 1 (step S75). .

On the other hand, in step S73, when there is no LSP having a sufficient resource amount for accommodating the stream (No in step S73), a resource reservation response (failure) is sent to the call control device 1. It is returned (step S76). The resource reservation processing for the above-described stream is completed by the above-described processing steps of steps S71 to S76 by the policy server 2.

Upon receiving the resource reservation response from the policy server 2 (step S54), the call control device 1 determines whether the resource reservation response is successful (step S55). When the resource reservation response is successful (Yes in step S55), the call control device 1 transfers the session establishment request to the called terminal 10 (step S56). On the other hand, if the resource reservation response is unsuccessful (No in step S55), the call control device 1 executes the failure sequence defined by the session control protocol (step S57).

Upon receiving the session establishment request from the call control device 1 (step S58), the called terminal 10 returns a session establishment response to the calling terminal 9 (step S59). However, also in this case, the session establishment response is received by the call control device 1 before being transmitted to the calling terminal 9 (step S60).

Upon receiving the session establishment response, the call control device 1 determines the direction / direction of the session from the calling terminal 9 to the called terminal 10 based on the information included in the session establishment response.
A resource reservation request for each stream from the called terminal 10 to the calling terminal 9 is transmitted to the policy server 2, and resource reservation processing is performed (step S61). In the policy server 2, step S71 of FIG. 17 described above.
The resource reservation process from S76 to S76 is performed, and the resource reservation response is transmitted to the call control device 1.

When the call control device 1 receives the resource reservation response from the policy server 2 (step S62), the call control device 1 determines whether or not the resource reservation response is successful (step S63). If the resource reservation response is successful (Yes in step S63), the session establishment response is transferred to the calling terminal 9 (step S64).
Then, the calling terminal 9 receives the session establishment response, and the session establishment process ends. On the other hand, step S63
If the resource reservation response fails in step S63 (step S63).
In the case of No), the call control device 1 executes the failure sequence defined by the session control protocol (step S66).

When the calling terminal 9 receives the session establishment response and when the called terminal 10 receives the session establishment request, it starts transmitting the session stream. The session stream is transferred to the LSP in the LSRs 41 and 44 based on the set information.

As described above, according to the fourth embodiment, resource management for each VPN can be performed in the IP core network 4.

Embodiment 5. FIG. Next, a fifth embodiment of the invention will be described with reference to FIGS. In the fifth embodiment, the IP core network has a plurality of VPNs.
The present invention provides a network policy control system which has a function of accommodating each and can manage resources for each VPN.

FIG. 18 is a block diagram showing a fifth embodiment of the network policy control system according to the present invention. In this network policy control system, a user information database (indicated as UDB in FIG. 18) 3 is further added in FIG. 14 of the fourth embodiment described above, and the other configurations are the same as those in FIG. Since it is the same as 14, the description thereof will be omitted.

Next, a resource management processing method for each VPN in the IP core network 4 will be described.

L in the network system of FIG.
The processing procedure for setting the SR virtual communication path will be described with reference to the flowchart in FIG.
First, the network administrator uses the policy server 2
Above, user information is entered for each VPN (step S
81), the user information is stored in the user information database 3 shown in FIG. 20 for each VPN (step S).
82). The user information stored in this user information database is basically the same as the configuration of the user information database 3 shown in FIG. 3 of the first embodiment, but the user information of the fifth embodiment is the same. The database 3 is different in that a plurality of pieces of information such as flow identification information, CoS and required line resource amount are defined for each VPN.

Then, on the policy server 2, the network administrator defines the virtual communication path information including the first stage LSR, the last stage LSR, the required line resource amount and CoS (step S83). The definition of the virtual communication path is basically the same as the method of defining the virtual communication path in the first embodiment described above,
It is necessary to define the resource amount and the destination address / address mask for each VPN. The policy server 2 stores the virtual communication path information, determines a plurality or a single LSP to be actually set in the network from the virtual communication path information (step S84), and sets this LSP group to the individual LSRs 41 to 41 on the network. Set to 46.

FIG. 21 is a diagram showing a configuration example of a virtual communication path including attribute information. Since the configuration of this virtual communication path is basically the same as the configuration of the virtual communication path shown in FIG. 4 of the first embodiment, the description of the parts having the same configuration will be omitted. The difference from the configuration of the virtual communication path shown in FIG. 4 of the first embodiment is the resource amount and the destination address / address mask, which are defined for each VPN.

Next, a processing procedure for establishing a VPN between a calling terminal and a called terminal in this system and transferring a session stream will be described with reference to the flowcharts of FIGS. 22 to 24.

First, the terminal 9 has the V set for itself.
A session establishment request added with the PN-ID is transmitted to the terminal 10 (step S91), but the session establishment request is received by the call control device 1 before being transmitted to the terminal 10 (step S92). In the following description, the terminal 9 will be referred to as a calling terminal and the terminal 10 will be referred to as a called terminal.

Upon receiving the session establishment request to which the VPN-ID is added, the call control device 1 acquires the VPN-ID included in the session establishment request for the stream from the called terminal 10 to the calling terminal 9 of the session. Then, the contents of the session establishment request and V of the user information database 3
VPN that matches the PN column and applies to the above stream
The CoS / line resource amount of (step S9
3). Then, the call control device 1 identifies them as an identifier for uniquely identifying the calling terminal address, the called terminal address, and the session included in the session establishment request (hereinafter,
Along with the session identifier), it is transmitted to the policy server 2 as a resource reservation request regarding the stream in the direction from the called terminal 10 to the calling terminal 9 of the session (step S94).

When the policy server 2 receives the resource reservation request (step S111), the policy server 2 shown in FIG.
The virtual communication path is searched for by the same method as steps S32 to S33 shown in (steps S112 to S1).
13). Then, it is determined whether the session can be accommodated in the virtual communication path (step S11).
4). That is, when the remaining resource amount allocated to the VPN of the virtual communication path is sufficient, or when the remaining resource amount allocated to the VPN of the virtual communication path is insufficient, but the LSP in the virtual communication path is
If the resource amount can be added by means of increasing the resource amount or setting a new LSP, the policy server 2 determines that the stream can be accommodated in the virtual communication path (Yes in step S114).
in the case of). Then, the policy server 2 subtracts the resource amount required for the session from the residual resource amount assigned to the VPN of the virtual communication path, and stores the session identifier and the resource amount in association with the virtual communication path (step S115). . After that, a resource reservation response (success) is returned to the call control device 1 (step S).
116). On the other hand, when it is determined in step S114 that the session cannot be accommodated in the residual resource amount allocated to the VPN of the virtual communication path (No in step S114), the policy server 2
Returns a resource reservation response (failure) to the call control device 1 (step S117). Steps S111 to S above
At 117, the resource reservation confirmation process for the stream in the direction from the called terminal 10 to the calling terminal 9 of the session is completed.

Upon receiving the resource reservation response from the policy server 2 (step S95), the call control device 1 determines whether the resource reservation response is successful (step S96). If the resource reservation response is successful (Yes in step S96), the call control device 1 attaches the CoS / line resource amount acquired in step S93 to the session establishment request, and the called terminal 10 (Step S97). On the other hand, when the resource reservation response is unsuccessful (No in step S96), the call control device 1 executes the failure sequence defined by the session control protocol (step S98).

Upon receiving the session establishment request (step S99), the called terminal 10 receives the V set for itself.
Calling terminal 9 sends a session establishment response with PN-ID added
However, the session establishment response is received by the call control device 1 before being received by the calling terminal 9 (step S101).

When the call control device 1 receives the session establishment response, it acquires the VPN-ID in the session establishment response, and the direction / direction from the calling terminal 9 of the session to the called terminal 10 is changed.
The VPN CoS / line resource amount is acquired for each stream in the direction from the called terminal 10 to the calling terminal 9 (step S102). Then, the call control device 1
A resource reservation request is sent to the policy server 2 for each stream in the direction from the calling terminal 9 to the called terminal 10 in the session / in the direction from the called terminal 10 to the calling terminal 9 (step S103), and the resource reservation confirmation process is performed. I do. The resource reservation confirmation process performed by the policy server 2 is the same as the process in steps S111 to S117 of FIG. 24 described above, and thus description thereof will be omitted.

Upon receiving the resource reservation response from the policy server 2 (step S104), the call control device 1 determines whether the resource reservation response is successful (step S105). When the resource reservation response is successful (Yes in step S105), the call control device 1 applies the stream from the calling terminal 9 to the called terminal 10 in the session acquired in step S102. The CoS and the resource amount are attached and transferred to the calling terminal 9 (step S106), and the calling terminal 9 receives the session establishment response (step S107). On the other hand, if the resource reservation response is unsuccessful (No in step S105)
In the case of), the call control device 1 executes the failure sequence defined by the session control protocol (step S108).

At this time, similarly to the case of the above-described first embodiment, when the calling terminal 9 receives the session establishment response, the called terminal 10 receives the session establishment request,
Each starts sending the session stream.

When the session stream from the calling terminal 9 is received, the LSR 41, which is the first stage LSR of the stream transmitted from the calling terminal 9 to the called terminal 10, receives the session stream as in the case of the first embodiment. Determine the virtual communication path to transfer. Then, the VPN-ID label is obtained from the reception interface number of the session stream, and the VPN-ID label is set as a second label in each packet forming the session stream. The top label contains the LSP to be transferred.
Label is set. The LSP to be transferred is determined by the same method as in the first embodiment, and the session stream is transferred via the VPN defined by the VPN-ID.

On the other hand, when the LSR 44, which is the first stage LSR of the stream transmitted from the called terminal 10 to the calling terminal 9, receives the session stream from the called terminal 10,
The session stream is transferred to the LSP by the same procedure as in the case of the LSR 41 described above.

As described above, according to the fifth embodiment, the virtual communication path information in which the service class is graded for the session established between the terminals 9 and 10 is stored in the LSRs 41 to 46 together with the policy server 2. The policy server 2 performs resource reservation for the virtual communication path when the session is established, and the LSRs 41 to 46 autonomously transfer the session stream according to the virtual communication path. As a result, the policy server 2 does not need to set the edge LSRs 41 and 44 one by one when the session is established, so that the load on the policy server 2 can be reduced. Also, in the IP core network 4, VPN
It is possible to manage resources for each.

Sixth Embodiment Next, a sixth embodiment of the invention will be described with reference to FIGS. In the sixth embodiment, access networks 7-1 to 7-
A network policy having a network configuration in which information in the VPN such as user information is not disclosed to the outside when the terminals 9 and 10 in n, 8-1 to 8-n establish a session via the IP core network 4. It provides a control system.

FIG. 25 is a block diagram showing a sixth embodiment of the network policy control system according to the present invention. This network system is shown in FIG.
In addition to the network system described in 4,
A policy server in the VPN that performs policy control in the VPN (Fig. 2
5) (indicated as VPS) 25, VPN user information databases (also referred to as VUDB) 23 and 24 for storing user information in the VPN, and VPN access networks 7-1 to 7- n, 8-1 to 8-n accommodating a VPN call control device (also referred to as VCA)
21 and 22 are provided.

Here, the VPN administrator defines on the VPN policy server 25 the user information of the system user who does not want the user information to be disclosed to the outside, and defines the defined user information. It is set in the VPN user information databases 23 and 24 provided in the respective access networks of the VPN. In addition, the VPN call control device 2
In 1 and 22, the VPN-ID of the VPN which the in-VPN call control devices 21 and 22 themselves are in charge of is set. Figure 2
In the example of 5, the VP is provided between the terminal 9 in the access network 7-1 and the terminal 10 in the access network 8-1.
Since this is the case where N1 is set, the intra-VPN call control device 2
“1” is set in the Nos. 1 and 22 as the VPN-ID.

Next, the procedure for establishing a session between the calling terminal and the called terminal in this system using the VPN will be described with reference to the flowcharts of FIGS. Here, in FIG. 25, the terminal 9 in the access network 7-1 is
A case will be described as an example where a call is made to the terminal 10 within −1 to establish the VPN.

The terminal 9 sends a session establishment request to the terminal 10
To (step S120). The session establishment request is first received by the intra-VPN call control device 21 (step S121). VPN internal call control device 2
1 receives the session establishment request, the content of the session establishment request and the VP in the access network 7-1.
By collating with the in-N user information database 23, the CoS / line resource amount and VPN-ID applied to the session stream are acquired, and these pieces of information are included in the session establishment request and transferred (step S122). In the following description, the terminal 9 is called a calling terminal and the terminal 10 is called a called terminal.

The call control device 1 includes the VPN internal call control device 21.
When a session establishment request attached with the CoS / line resource amount and VPN-ID applied to the session stream is received from (step S123), the called terminal 10 originates using the information included in the session establishment request. A resource reservation request for a stream directed to the call terminal 9 is generated and transmitted to the policy server 2 (step S124). Then, the called terminal 10 of the session
The resource reservation confirmation processing described in steps S111 to S117 of FIG. 24 of the fifth embodiment is performed on the stream from the calling terminal 9 to the calling terminal 9.

When the call control device 1 receives the resource reservation response from the policy server 2 (step S125), it determines whether the resource reservation response is successful (step S1).
26). If it is a resource reservation response (success) (Yes in step S126), the session establishment request is transferred (step S127). On the other hand, if it is a resource reservation response (failure) (No in step S126), the call control device 1 executes the failure sequence defined by the session control protocol (step S128).

The called terminal 10 is connected to the VPN internal call control device 22.
When the session establishment request is received via (step S129), the session establishment response is returned to the terminal 9 (step S130).

The VPN internal call control device 22 is connected to the called terminal 10
Receives a session establishment response from the server (step S13).
1) is collated with the contents of the session establishment response and the VPN user information database 24 in the access network 8-1, and the CoS / line resource amount and VPN-ID applied to the session stream are acquired, and these information are obtained. Is included in the session establishment response and transferred (step S
132).

The call control device 1 is connected to the intra-VPN call control device 22.
From the session establishment response (step S13)
3), and generating a resource reservation request for a stream in the direction from the calling terminal 9 to the called terminal / in the direction from the called terminal 10 to the calling terminal 9 in the session from the information included in the session establishment response, The resource reservation request is transmitted to the policy server 2 (step S134). The policy server 2 operates from the calling terminal 9 of this session to the called terminal 1
For the stream 0 direction / direction from the called terminal 10 to the calling terminal 9, step S11 of FIG.
The resource reservation confirmation processing described in 1 to S117 is performed.

When the call control device 1 receives the resource reservation response from the policy server 2 (step S135), it determines whether or not the resource reservation response is successful (step S1).
36). If it is a resource reservation response (success) (Yes in step S136), the session establishment response is transferred (step S137). On the other hand, if it is a resource reservation response (failure) (No in step S136), the call control device 1 executes the failure sequence defined by the session control protocol (step S138) to establish the session. The process ends.

The calling terminal 9 receives the session establishment response via the intra-VPN call control device 21 (step S1).
39), the VPN is established between the calling terminal 9 and the called terminal 10.

In the above steps, when the calling terminal 9 receives the session establishment response and when the called terminal 10 receives the session establishment request, it starts transmission of the session stream. The method of transferring the session stream in the LSRs 41 and 44 is the same as that in the above-mentioned fifth embodiment, and therefore its explanation is omitted.

As described above, the sixth embodiment
According to the VPN user information database for each VPN
Since it is provided in the access network, the user information is not disclosed to the outside and the security of the management of the user information is maintained. Also, an ID number (identifier) for each VPN
Since there is no need to set a VPN-ID for each terminal, there is an effect that VPN management becomes easy.

Seventh Embodiment Next, a seventh embodiment of the present invention will be described with reference to FIGS. The seventh embodiment provides a network policy control system and method capable of distributing an excessive load among a call control device, a policy server and an edge LSR against an increase in the number of calls in a large scale network. It is a thing.

FIG. 29 is a block diagram showing the seventh embodiment of the network policy control system according to the present invention. This network system is shown in FIG.
In addition to the network system described in
Secondary policy servers 33, 34 for controlling SRs 41, 44
And the sub-call control devices 31 and 32 associated with the sub-policy servers 33 and 34. Since other configurations are the same as those in FIG. 1,
The description is omitted.

The sub-call control devices 31 and 32 use the edge LSR.
The call control device first relays the session establishment request / response issued by the terminals 9, 10 in the access networks 7, 8 accommodated by the LSRs 41, 44 in the IP core network 4. Then, each sub-call control device 3
Sub policy servers 33 and 34 are installed for 1 and 32, respectively. The call control device 1 manages a plurality of sub call control devices 31 and 32, and the policy server 2 manages a plurality of sub call control devices 31 in the IP core network 4 with respect to a plurality of sub policy servers. It manages a plurality of sub-policy servers 33, 34 such as by associating with the sub-policy server 32.

Next, a resource management processing method for each VPN in the IP core network 4 will be described.

L in the network system of FIG.
The processing procedure for setting the LSP of SR will be described with reference to the flowcharts of FIGS. Here, the operation when the terminal 9 makes a call to the terminal 10 will be described as an example.

The terminal 9 sends a session establishment request to the terminal 10
(Step S141), the session establishment request is received by the sub call control device 32 via the sub call control device 31 and the call control device 1 (step S142). The sub-call control device 32 needs the session identifier, the calling terminal address, the called terminal address, and the stream for the stream in the direction from the terminal 10 to the terminal 9 of the session, based on the information included in the received session establishment request. A resource reservation request including the appropriate line resource amount is transmitted to the sub policy server 34 (step S143). In the following description, the terminal 9 is called a calling terminal and the terminal 10 is called a called terminal 10.

When the sub-policy server 34 receives the resource reservation request (step S171), it determines LSP candidates that accommodate the stream (step S172).
Whether or not the stream can be accommodated in the LSP is L
The determination is made by comparing the SP resource amount with the resource amount required for the stream (step S17).
3). If the LSP has a sufficient resource amount (Yes in step S173), the sub policy server 3
4 transfers L to the LSP to transfer the stream.
It is set to the first stage LSR of the SP (LSR 44 in the case of FIG. 29) (step S174), and resource reservation response (success)
Is returned to the sub call control device 32 (step S175).
On the other hand, when the LSP does not have a sufficient amount of resources (No in step S173), the sub policy server 3
4 returns the resource reservation response (failure) to the sub call control device 32 (step S176). Step S171 above
The resource reservation process by the sub policy server 34 described above is completed in S176.

Upon receiving the resource reservation response (step S144), the sub-call control device 32 determines whether the resource reservation response is successful (step S145).
If it is a resource reservation response (success) (step S14)
If Yes in 5), the session establishment request is transferred to the called terminal 10 (step S146). On the other hand, if it is a resource reservation response (failure) (N in step S145)
If it is o), the failure sequence defined by the session control protocol is executed (step S14).
7).

Upon receipt of the session establishment request (step S148), the called terminal 10 returns a session establishment response to the calling terminal 9 (step S149).

The session establishment response is first received by the sub-call control device 32 (step S150), and the sub-call control device 32, based on the information included in the session establishment response, receives the session establishment request as described above. A resource reservation request for a stream in the direction from the called terminal 10 of the session to the calling terminal 9 is transmitted to the sub policy server 34 (step S151).

The sub-policy server 34 uses the sub-call control device 3
When the resource reservation request is received from No. 2, the above-mentioned FIG.
The resource reservation confirmation process described in steps S171 to S176 of FIG.
Send to.

The sub-call control device 32 is the sub-policy server 3
4 receives the resource reservation response (step S15).
2), it is determined whether or not the resource reservation response is successful (step S153). Resource reservation response (success)
If (Yes in step S153),
The session establishment response is transferred (step S154).
On the other hand, if the response is a resource reservation response (failure) (No in step S153), the failure sequence defined by the session control protocol is executed (step S155).

The session establishment response transmitted from the sub call control device 32 is received by the sub call control device 31 via the call control device 1 (step S156). The sub call control device 31 transmits a resource reservation request for the stream from the calling terminal 9 of the session to the called terminal 10 to the sub policy server 33 based on the information included in the session establishment response (step S157).

The sub-policy server 33 uses the sub-call control device 3
When the resource reservation request is received from No. 1, the above-mentioned FIG.
Similarly to the resource reservation confirmation processing described in steps S171 to S176, resource reservation processing is performed for the stream from the calling terminal 9 to the called terminal 10 and a resource reservation response is transmitted to the sub call control device 31. .

Upon receiving the resource reservation response (step S158), the sub-call control device 31 determines whether the resource reservation response is successful (step S15).
9). If it is a resource reservation response (success) (Yes in step S159), the session establishment response is transferred to the calling terminal 9 (step S160), and the calling terminal 9 receives the session establishment response. (Step S
161). On the other hand, when the response is a resource reservation response (failure) (No in step S159), the secondary call control device 31 executes the failure sequence defined by the session control protocol (step S162).

In the above steps, when the calling terminal 9 receives the session establishment response, and when the called terminal 10 receives the session establishment request, the calling terminal 9 and the called terminal 10 respectively transmit the session stream. Start. Here, the session streams are LSR 41, 4
At 4, the data is transferred to the LSP based on the information set in the above steps.

As described above, the seventh embodiment
According to the above, the resource reservation confirmation process associated with the session establishment request is processed by the secondary call control device and the secondary policy server, and the processing load is distributed. Therefore, it is possible to cope with an increase in the number of calls. There is.

Eighth Embodiment Next, an eighth embodiment of the invention will be described with reference to FIGS. 34 to 38. The eighth embodiment provides a network policy control method capable of distributing an excessive load among a call control device, a policy server and an edge LSR against an increase in the number of calls in a large scale network. .

FIG. 34 is a block diagram showing the eighth embodiment of the network policy control system according to the present invention. This network system is shown in FIG.
In the network system described in 9, the user information databases 35 and 36 are the sub-call control devices 31 and 32.
It is provided for each. The other configuration is the same as that of FIG. 29, and thus the description thereof is omitted.

In this system, the network manager saves the user information in the user information databases 35 and 36 on the policy server 2 as in the first embodiment. However, the user information databases 35 and 36 are installed so as to correspond to the sub call control devices 31 and 32.

Here, the processing procedure for setting the LSP of the LSRs 41 to 46 in the network system of FIG. 34 will be described with reference to the flowcharts of FIGS. 35 to 38. Here, the operation when the terminal 9 makes a call to the terminal 10 will be described as an example.

First, the terminal 9 transmits a session establishment request to the terminal 10 (step S181). The session establishment request is received by the sub call control device 32 via the sub call control device 31 and the call control device 1 (step S182). The secondary call control device 32 collates the content of the session establishment request with the user information database 36, and acquires the CoS / line resource amount applied to the stream from the called terminal 10 to the calling terminal 9 of the session ( Step S183), and the sub-policy server 34
A resource reservation request for a stream in the direction from the called terminal 10 to the calling terminal 9 is transmitted to (step S
184).

The sub-policy server 34 performs the same process as the resource reservation confirmation process described in steps S31 to S37 of FIG. 7 of the first embodiment, for the stream from the called terminal 10 to the calling terminal 9. Resource reservation processing is performed, and a resource reservation response is transmitted to the sub call control device 32.

The sub-call control device 32 is the sub-policy server 3
4 receives the resource reservation response (step S18).
5), it is determined whether the resource reservation response is successful (step S186). Resource reservation response (success)
If (Yes in step S186),
The session establishment request is transferred to the called terminal 10 (step S187). On the other hand, if the response is a resource reservation response (failure) (No in step S186), the failure sequence defined by the session control protocol is executed (step S188).

When the call-in terminal 10 receives the session establishment request from the sub-call control device 32 (step S189), the call-in terminal returns a session establishment response to the calling terminal (step S190).

When the sub call control device 32 receives the session establishment response (step S191), the contents of the session establishment response are collated with the user information database 36, and the direction from the called terminal 10 to the calling terminal 9 of the session is changed. The CoS / line resource amount to be applied to the stream is acquired (step S192), and a resource reservation request for the stream in the direction from the called terminal 10 to the calling terminal 9 is transmitted to the sub policy server 34 (step S192). S19
3). Note that the resource reservation processing in the direction from the called terminal 10 to the calling terminal 9 has already been performed, but the session information is negotiated when the called terminal 10 receives the session establishment request and returns the session establishment response. In addition, the resource reservation processing in the direction from the called terminal 10 to the calling terminal 9 is also performed here.

The sub-policy server 34 uses the sub-call control device 3
When the resource reservation request is received from the terminal 2, the resource reservation confirmation processing in the direction from the called terminal 10 to the calling terminal 9 is performed in the same manner as the processing described in steps S31 to S37 of FIG. 7 of the first embodiment described above. , And transmits a resource reservation response to the sub call control device 32.

The sub call control device 32 is connected to the sub policy server 34.
Receives a resource reservation response from the server (step S194)
Then, it is determined whether or not the resource reservation response is successful (step S195). If it is a resource reservation response (success) (Yes in step S195), the session establishment response is transferred (step S19).
6). On the other hand, if the response is a resource reservation response (failure) (No in step S195), the failure sequence defined by the session control protocol is executed (step S197).

The session establishment response transmitted from the sub call control device 32 is transmitted via the call control device 1 to the sub call control device 3
1 is received (step S198). Upon receiving the session establishment response, the sub call control device 31 collates the contents of the session establishment response with the user information database 35, and applies the CoS / line to the stream in the direction from the calling terminal 9 to the called terminal 10 of the session. The resource amount is acquired (step S199), and the sub policy server 33
A resource reservation request for a stream from the calling terminal 9 of the session to the called terminal 10 is transmitted (step S200).

The sub-policy server 33 uses the sub-call control device 3
When the resource reservation request is received from No. 1, the session calling terminal 9 to the called terminal 1 are processed in the same manner as the processing described in steps S31 to S37 of FIG.
Resource reservation confirmation processing is performed for the stream in the 0 direction, and a resource reservation response is transmitted to the sub call control device 31.

Upon receiving the resource reservation response (step S201), the sub-call control device 31 determines whether or not the resource reservation response is successful (step S20).
2). If it is a resource reservation response (success) (Yes in step S202), the session establishment response is transferred to the calling terminal 9 (step S203), and the calling terminal 9 receives the session establishment response (step S203). Step S2
04). On the other hand, if the response is a resource reservation response (failure) (No in step S202), the failure sequence defined by the session control protocol is executed (step S205).

In the above steps, when the calling terminal 9 receives the session establishment response, and when the called terminal 10 receives the session establishment request, the calling terminal 9 and the called terminal 10 respectively transmit the session stream. Start. Further, the transfer method of the session stream in the LSR is the same as that in the first embodiment, and therefore its explanation is omitted.

As described above, according to the eighth embodiment, the virtual communication path information in which the service class is graded for the session established between the terminals 9 and 10 is stored in the LSR 41 together with the policy server 2.
.. to 46, the policy server 2 performs resource reservation for the virtual communication path at the time of establishing the session, and the LSRs 41 to 46 autonomously transfer the session stream according to the virtual communication path. As a result, the policy server 2 does not need to set the edge LSRs 41 and 44 one by one when the session is established, so that the load on the policy server 2 can be reduced. Further, in the edge LSR, since the filtering for each session stream is unnecessary, the load is reduced accordingly. Further, since the resource reservation confirmation process associated with the session establishment request is processed by the secondary call control device and the secondary policy server, there is an effect that the load of the processing performed by them is distributed.

Ninth Embodiment Next, a ninth embodiment of the invention will be described with reference to FIGS. 39 to 43. In the ninth embodiment, access networks 7-1 to 7-
When the terminals 9 and 10 in n, 8-1 to 8-n establish a session via the IP core network 4, the VPN server has a network configuration in which information in the VPN such as user information is not disclosed to the outside. A network policy control system capable of distributing an excessive load among a call control device, a policy server, and an edge LSR against an increase in the number of calls in a large-scale network.

FIG. 39 is a diagram showing Embodiment 9 of the network policy control system according to the present invention.
This network system is the same as the network system described with reference to FIG. 25 of the sixth embodiment, and further includes a sub policy server 33 that controls the edge LSRs 41 and 44.
34 and sub call control devices 31 and 32 associated with the sub policy servers 33 and 34. Since these devices are the same as those shown in FIG. 34 of the eighth embodiment and other configurations are the same as those shown in FIG. 25, their explanations are omitted. The call control device 1 manages a plurality of sub call control devices 31 and 32, and the policy server 2 manages a plurality of sub policy servers 33 and 34.

Now, the procedure for establishing a VPN in the network system of FIG. 39 will be described with reference to the flow charts of FIGS. Here, the terminal 9
An operation will be described by way of example when a call is made to the terminal 10.

The terminal 9 transmits a session establishment request to the terminal 10 (step S210). Below, terminal 9
Is called a calling terminal, and the terminal 10 is called a called terminal. The session establishment request is first received by the intra-VPN call control device 21 (step S211). Upon receiving the session establishment request, the VPN call control device 21 collates the contents of the session establishment request with the VPN user information database 23 in the access network 7-1 and applies the CoS / line resource to the session stream. The amount and the VPN-ID are acquired, and these pieces of information are included in the session establishment request and transferred (step S212).

The transmitted session establishment request is sent to the sub call control unit 32 via the sub call control unit 31 and the call control unit 1.
Is received (step S213). Upon receiving the session establishment request, the sub call control device 32 generates a resource reservation request for the stream in the direction from the called terminal 10 to the calling terminal 9 of the session based on the information included in the session establishment request. , To the sub-policy server 34 (step S214). Then, similar to the processing described in steps S111 to S117 of FIG. 24 of the fifth embodiment, the sub-policy server 34 performs the resource reservation confirmation processing for the stream in the direction from the called terminal 10 to the calling terminal 9 of the session. I do. However, although the policy server 2 performs the process in FIG. 5, in the ninth embodiment, the process of steps S111 to S117 is performed by the sub policy server 34 associated with the sub call control device 32.

The sub-call control device 32 is the sub-policy server 3
4 receives the resource reservation response (step S21).
5), it is determined whether or not the resource reservation response is successful (step S216). If it is a resource reservation response (success) (Yes in step S216), the secondary call control device 32 transfers the session establishment request (step S217). On the other hand, in the case of the resource reservation response (failure) (No in step S216), the call control device executes the failure sequence defined by the session control protocol (step S).
218).

The session establishment request transferred by the sub-call control device 32 is sent via the intra-VPN call control device 22.
It is received by the called terminal 10 (step S21).
9). Upon receiving the session establishment request, the called terminal 10
The session establishment response is returned to the calling terminal 9 (step S220).

The session establishment response transmitted by the called terminal 10 is received by the VPN call control device 22 (step S221). VPN internal call control device 22
When the session establishment response is received, the contents of the session establishment request and the VPN in the access network 8-1 are received.
CoS / line resource amount and V applied to the session stream by collating with the internal user information database 24
The PN-ID is acquired, and these pieces of information are included in the session establishment request and transferred (step S222).

When the sub call control device 32 receives the session establishment response (step S223), the resource reservation request is made to the stream in the direction from the called terminal 10 to the calling terminal 9 of the session based on the information included in the session establishment response. Is generated, a resource reservation request is transmitted to the sub policy server 34, and resource reservation confirmation processing is performed (step S22).
4). Then, step S11 of FIG. 24 of the fifth embodiment.
1 to S117, the sub-policy server 34 changes the session from the called terminal 10 to the calling terminal 9 in the same manner.
Perform resource reservation confirmation processing for streams in the direction. However, in FIG. 5, the policy server 2 performs the process, but the process here is performed by the sub policy server 34 associated with the sub call control device 32.

The sub-call control device 32 is the sub-policy server 3
4 receives a resource reservation response (step S22).
5), it is judged whether or not the resource reservation response is successful (step S226). If it is a resource reservation response (success) (Yes in step S226), the secondary call control device 32 transfers the session establishment response (step S227). On the other hand, if it is a resource reservation response (failure) (No in step S226)
First, the secondary call control device 32 executes the failure sequence defined by the session control protocol (step S228).

The session establishment response transmitted by the sub call control device 32 is received by the sub call control device 31 via the call control device 1 (step S229). Upon receiving the session establishment response, the sub call control device 31 generates a resource reservation request for the stream from the calling terminal 9 to the called terminal 10 of the session, and transmits the resource reservation request to the sub policy server 33. A resource reservation confirmation process is performed (step S230). Then, similarly to the processing described in steps S111 to S117 of FIG. 24 of the fifth embodiment, the resource reservation confirmation processing for the stream from the calling terminal 9 to the called terminal 10 of the session is performed. However, in FIG. 5, the policy server 2 performs the process, but the process here is performed by the sub policy server 33 associated with the sub call control device 31.

The sub call control device 31 is connected to the sub policy server 3
3 receives the resource reservation response (step S23)
1) and it is judged whether or not the resource reservation response is successful (step S232). If it is a resource reservation response (success) (Yes in step S232), the secondary call control device 31 transfers the session establishment response (step S233). On the other hand, if it is a resource reservation response (failure) (No in step S232)
First, the sub-call control device 31 executes the failure sequence defined by the session control protocol (step S234).

Then, the session establishment response transmitted by the sub-call control device 31 is received by the calling terminal 9 via the intra-VPN call control device 21 (step S2).
35).

In the above steps, when the calling terminal 9 receives the session establishment response, and the called terminal 10 receives the session establishment request, the calling terminal 9 and the called terminal 10 respectively transmit the session stream. Start. Further, the transfer method of the session stream in the LSR is the same as that in the first embodiment, and therefore its explanation is omitted.

As described above, the ninth embodiment
According to the VPN user information database for each VPN
Since it is provided in the access network, the user information is not disclosed to the outside and the security of the management of the user information is maintained. Moreover, since an ID number is assigned to each VPN, there is an effect that it is not necessary to set a VPN-ID for each terminal. As a result, VPN management becomes easier.
Further, it is possible to determine whether or not resources for a session stream can be secured in the IP core network without performing service grading on the session and setting the edge LSR every time the session is established. Further, in the edge LSR, the setting and filtering of the LSP for each session stream are unnecessary, so the load is reduced accordingly. Further, since the resource reservation confirmation process associated with the session establishment request is processed by the secondary call control device and the secondary policy server, there is an effect that the load of the processing performed by them is distributed.

In the embodiment described above, the sub call control devices 31 and 32 and the sub policy servers 33 and 34 and the edge LSR 4 associated with the sub call control devices 31 and 32.
1, 44 were described as if they were separate devices,
Secondary call control devices 31, 32 and secondary policy servers 33, 34
Corresponds to a processing unit such as software, so the sub call control devices 31 and 32 and the sub policy server 33,
34 may be configured to operate in the same device, or the secondary call control devices 31 and 32 and the secondary policy servers 33 and 34 may be configured to operate in the edge LSRs 41 and 44.

[0191]

As described above, according to the present invention, the LSPs specified by the combination of the first stage LSR, the last stage LSR and the service class in the IP core network are collectively defined as a virtual communication path. Therefore, the policy server can perform policy management only in units of virtual communication paths. Further, the policy server only reserves resources for the virtual communication path for the stream transmitted to the session, and does not need to perform the setting process at the time of establishing the session for the LSR. As a result, the load on the policy server can be reduced. Furthermore, the LS that becomes the first stage LSR
The R selects a virtual communication path from the service class and the destination address obtained from the packet of the received stream, and performs only the process of transferring the stream to the virtual communication path. And the LSR, which was necessary in the past
Since it is not necessary to perform the filtering process of the received stream by, it is possible to speed up the transfer process of the stream.

According to the next invention, since the user information database for storing the user information including the terminal address of the terminal using the service, the service class, and the line resource amount is provided, the service is provided for each user. Classes can be set and services can be provided according to the user.

According to the next invention, the policy server
When it is determined that the remaining resource amount of the selected virtual communication path cannot accommodate the line resource amount of the stream, the line resource amount is added to the virtual communication path to secure the service class and the line resource amount of the stream. Since the resource reserving means having the function to perform is provided, even if a large number of sessions are established and the number of streams transferred in the same virtual communication path increases, the line resource of the virtual communication path is automatically set. By increasing the quantity, the quality of service to the user can be maintained.

According to the next invention, the service class I
Since the delay class in which the delay time from the input to the output of the P core network is classified is provided, it is possible to provide a wider variety of services to users.

According to the next invention, the line resource amount is
Since it is configured to be defined by the line resource amount class that is classified by the guaranteed line resource amount, the first-stage LSR that receives the stream first receives a finer QoS for the stream according to the line resource amount class. Control can be performed.

According to the next invention, since the LSP in which the required resource amount and the destination network are set is defined for each VPN, resource management for each VPN can be performed in the IP core network. .

According to the next invention, it is specified by the combination of the first stage LSR, the last stage LSR and the service class,
Since the virtual communication path is configured by one or more LSPs and the line resource amount for each VPN is defined in the policy server and the LSR, the policy server configures a virtual communication path for a stream transmitted to a session. Only the resource reservation for the communication path is performed, and it is not necessary to set the LSR when establishing a session. Further, the policy server can perform resource management for each VPN in the IP core network. Further, the LSR only needs to select a virtual communication path from the service class, the destination address, and the VPN identifier obtained from the packet of the received stream, and transfer the stream to the virtual communication path. Since it is not necessary to perform the stream filtering process described above, it is possible to speed up the stream transfer process.

According to the next invention, a VP that stores user information including the address of the network to which the user's terminal belongs, the service class, and the amount of line resources for each network by attaching a VPN identifier to each VPN
Since the in-N user information database is provided inside the VPN, it is possible to suppress unauthorized intrusion from the outside of the user information database and enhance the security of the VPN. Further, since the policy server does not need to set the VPN identifier for each terminal existing in the network,
It is possible to reduce the processing of the policy server.

According to the next invention, since the sub-call control device and the sub-policy server are provided, the process of session establishment that increases when the network becomes large is handled by one call control device. Since it is not executed by the policy server but by a plurality of sub call control devices having the same function and the sub policy server, the processing load can be distributed.

According to the next invention, when the sub-policy server determines that the remaining resource amount of the selected virtual communication path cannot accommodate the line resource amount of the stream, it adds the line resource amount to the virtual communication path. By configuring the resource reservation means having the function of securing the service class of the stream and the amount of line resources, the number of sessions established and the amount of streams transferred in the same virtual communication path is Even if the number increases, the line resource amount of the virtual communication path can be automatically increased. As a result, it becomes possible to provide services to users without degrading quality. Further, since the sub-call control device and the sub-policy server are configured to be provided, the process of session establishment, which increases when the network becomes large in scale,
Instead of using a single call controller and policy server,
Since it is executed by a plurality of sub call control devices and sub policy servers having the same function, it is possible to distribute the processing load.

According to the next invention, a VP that stores user information including the address of the network to which the user's terminal belongs, the service class, and the amount of line resources for each network by attaching a VPN identifier to each VPN
Since the in-N user information database is provided inside the VPN, it is possible to suppress unauthorized intrusion from the outside of the user information database and enhance the security of the VPN. Also, since the sub-call control device and the sub-policy server are configured to be provided, the process of session establishment that increases when the network becomes large is not performed by one call control device and the policy server. Since it is executed by a plurality of sub-call control devices having the same function and the sub-policy server, it is possible to distribute the processing load.

According to the next invention, since the sub-call control device is managed by the call control device and the sub-policy server is managed by the policy server, the role of each sub-call control device and sub-policy server is controlled. It is possible to share, and it is possible to improve the efficiency of processing in the entire system.

According to the next invention, since the sub-policy server can be associated with a plurality of sub-call control devices, the placement of the sub-policy server on the system can be freely designed in consideration of the load level. can do.

According to the next invention, since the sub-call control device and the sub-policy server are provided in the same device, the number of devices installed in the system can be reduced and the system configuration can be made complicated. Can be suppressed.

According to the next invention, since the sub-call control device and the sub-policy server are provided in the same LSR, the number of devices installed in the system can be reduced.
It is possible to prevent the system configuration from becoming complicated.

According to the next invention, the policy server
When it is determined that the remaining resource amount of the selected virtual communication path cannot accommodate the line resource amount of the stream, the line resource amount is added to the virtual communication path to secure the service class and the line resource amount of the stream. Since the resource reserving means having the function to perform is provided, even if a large number of sessions are established and the number of streams transferred in the same virtual communication path increases, the line resource of the virtual communication path is automatically set. By increasing the quantity, the quality of service to the user can be maintained.

According to the next invention, the virtual communication path defining means of the policy server is configured to further have a function of determining the line resource amount for each VPN in the virtual communication path, so that communication is performed via the IP core network. It becomes possible to build a VPN between the networks to be performed.

According to the next invention, since the policy server is configured to define the LSP in which the required resource amount and the destination network are set for each VPN, resource management for each VPN can be performed in the IP core network. It will be possible.

[Brief description of drawings]

FIG. 1 is a block diagram showing a configuration of a first embodiment of a network policy control system according to the present invention.

FIG. 2 is a flowchart showing a procedure for setting a virtual communication path.

FIG. 3 is a diagram showing an example of a configuration of a user information database.

FIG. 4 is a diagram showing a configuration example of a virtual communication path including attribute information.

FIG. 5 is a flowchart showing a procedure for establishing a session between a calling terminal and a called terminal (No. 1).

FIG. 6 is a flowchart showing a procedure for establishing a session between a calling terminal and a called terminal (No. 2).

FIG. 7 is a flowchart showing a procedure for establishing a session between a calling terminal and a called terminal (part 3).

FIG. 8 is a diagram showing an example of classifying service classes (CoS) delay classes used in the second embodiment of the present invention.

FIG. 9 is a diagram showing an example of the configuration of a user information database.

FIG. 10 is a diagram showing a configuration example of a virtual communication path including attribute information.

FIG. 11 is a diagram showing an example of classifying the line resource amount according to the third embodiment of the present invention.

FIG. 12 is a diagram showing an example of the configuration of a user information database.

FIG. 13 is a flowchart showing a procedure for setting a virtual communication path.

FIG. 14 is a block diagram showing a configuration of a fourth embodiment of the network policy control system according to the present invention.

FIG. 15 is a flowchart showing a procedure for establishing a session between a calling terminal and a called terminal (No. 1).

FIG. 16 is a flowchart showing a procedure for establishing a session between a calling terminal and a called terminal (No. 2).

FIG. 17 is a flowchart showing a procedure for establishing a session between a calling terminal and a called terminal (part 3).

FIG. 18 is a block diagram showing a configuration of a fifth embodiment of the network policy control system according to the present invention.

FIG. 19 is a flowchart showing a procedure for setting a virtual communication path.

FIG. 20 is a diagram showing an example of the configuration of a user information database.

FIG. 21 is a diagram showing a configuration example of a virtual communication path including attribute information.

FIG. 22 is a flowchart showing a procedure of establishing a session between a calling terminal and a called terminal (No. 1).

FIG. 23 is a flowchart showing a procedure for establishing a session between a calling terminal and a called terminal (No. 2).

FIG. 24 is a flowchart showing a procedure for establishing a session between a calling terminal and a called terminal (part 3).

FIG. 25 is a block diagram showing the configuration of a sixth embodiment of the network policy control system according to the present invention.

FIG. 26 is a flowchart showing a procedure for establishing a session between a calling terminal and a called terminal (No. 1).

FIG. 27 is a flowchart showing a procedure for establishing a session between a calling terminal and a called terminal (No. 2).

FIG. 28 is a flowchart showing a procedure for establishing a session between a calling terminal and a called terminal (part 3).

FIG. 29 is a block diagram showing the configuration of a seventh embodiment of the network policy control system according to the present invention.

FIG. 30 is a flowchart showing a procedure for establishing a session between a calling terminal and a called terminal (No. 1).

FIG. 31 is a flowchart showing a procedure for establishing a session between a calling terminal and a called terminal (No. 2).

FIG. 32 is a flowchart showing a procedure for establishing a session between a calling terminal and a called terminal (part 3).

FIG. 33 is a flowchart showing a procedure for establishing a session between a calling terminal and a called terminal (No. 4).

FIG. 34 is a block diagram showing a configuration of an eighth embodiment of the network policy control system according to the present invention.

FIG. 35 is a flowchart showing a procedure for establishing a session between a calling terminal and a called terminal (No. 1).

FIG. 36 is a flowchart showing a procedure for establishing a session between a calling terminal and a called terminal (No. 2).

FIG. 37 is a flowchart showing a procedure for establishing a session between a calling terminal and a called terminal (part 3).

FIG. 38 is a flowchart showing a procedure for establishing a session between a calling terminal and a called terminal (No. 4).

FIG. 39 is a block diagram showing the configuration of the ninth embodiment of the network policy control system according to the present invention.

FIG. 40 is a flowchart showing a procedure for establishing a session between a calling terminal and a called terminal (No. 1).

FIG. 41 is a flowchart showing a procedure for establishing a session between a calling terminal and a called terminal (No. 2).

FIG. 42 is a flowchart showing a procedure for establishing a session between a calling terminal and a called terminal (part 3).

FIG. 43 is a flowchart showing a procedure for establishing a session between a calling terminal and a called terminal (No. 4).

FIG. 44 shows V on the MPLS / IP network.
It is a block diagram which shows the prior art example of the system which guarantees the QoS of an oIP stream.

[Explanation of symbols]

1 call control device, 2 policy server, 3, 35, 36
User information database, 4 IP core network, 5,6 gateway, 7,8 access network, 9,10 terminal, 21,22 VPN internal call control device, 23,24 VPN user information database, 25
VPN policy server, 31, 32 sub-call control device,
33, 34 Sub-policy server, 41-46 Label switching router.

Claims (18)

[Claims] 1. An IP core network having a plurality of label switching routers, two terminals accommodated in different label switching routers in the IP core network, and a call for establishing a session between the two terminals. A network policy control system including a control device, the virtual communication being specified by a combination of a first-stage label switching router, a last-stage label switching router, and a service class in the IP core network, the virtual communication including one or more label switch paths. Virtual communication path defining means for defining a path, virtual communication path setting means for setting the virtual communication path in the label switching router, and resource reservation from the call control device at the time of establishing a session between the two terminals In response to the request, a virtual communication path accommodating the stream is selected from the virtual communication path defining means based on the addresses and service classes of the source and destination terminals of the stream transmitted in the session, and the selected virtual communication path The first-stage label switching router that first receives the stream from the terminal, further comprising a resource reservation unit that reserves resources when it is determined that the remaining resource amount of the stream can accommodate the resource amount of the stream. A network policy control system characterized by determining a virtual communication path that matches a destination address and a service class stored in a packet of the stream, and transferring the stream according to the virtual communication path. 2. A user information database for storing user information including a terminal address of a terminal accommodated in the label switching router, a service class, and a line resource amount, further comprising: the call control device; When a session establishment request / response is received, the service class and the amount of line resources to be applied to the stream of the session acquired from the user information are acquired to create the resource reservation request, and the resource is transmitted to the policy server. The network policy control system according to claim 1, further comprising a reservation requesting unit. 3. The resource reservation means, when determining that the remaining amount of resources of the virtual communication path cannot accommodate the amount of line resources of the stream, adds the amount of line resources to the virtual communication path, The network policy control system according to claim 1 or 2, further comprising a function of securing a service class and a line resource amount of a stream in the virtual communication path. 4. The service class according to claim 1, further comprising a delay class in which a delay time required for the stream from input to output of the IP core network is classified. The network policy control system described in 1. 5. The line resource amount is defined by a line resource amount class classified by a guaranteed line resource amount, and the resource reservation unit sets a resource amount corresponding to the line resource amount class. The network policy control system according to any one of claims 1 to 4, further comprising a function of selecting a label switch path having a sufficiently large remaining resource amount from the selected virtual communication paths. . 6. An IP core network having a plurality of label switching routers, two terminals accommodated in different label switching routers in the IP core network, and a call for establishing a session between the two terminals. A network policy control system comprising a control device and controlling transmission of a stream via a VPN constructed between the two terminals, wherein a label switch path in which a required resource amount and a destination network are set for each VPN A label switch path defining unit to be defined and a label switch path accommodating the stream at the time of establishing a session between the two terminals are selected from the label switch path defining unit and assigned to the VPN of the selected label switch path. The line resource of the stream to the allocated line resource amount. A label switch path setting unit configured to set the label switching router so as to transfer the stream to the label switch path when it is determined that the label switching path can be accommodated. The network policy control system, wherein the router constructs a VPN in the set label switch path and transfers the stream. 7. A network policy control system for establishing a session and controlling a policy of a stream to be transmitted between two terminals accommodated in different label switching routers in an IP core network having a plurality of label switching routers, A user information database that stores user information including a terminal address of a terminal accommodated in the label switching router, a service class, and a line resource amount, with a VPN identifier attached for each VPN, and a VPN identifier between the two terminals. Upon receiving a session establishment request / response including the service request and response, the service class and line resource amount applied to the stream transmitted to the session corresponding to the VPN identifier are acquired from the user information database to create the resource reservation request, and the policy A call control device including a resource reservation requesting means for transmitting to a server, a first-stage label switching router in the IP core network, a last-stage label switching router, and a service class, and are configured by one or more label switch paths. In addition, a virtual communication path defining unit that defines a virtual communication path in which the line resource amount for each VPN is defined, a virtual communication path setting unit that sets the virtual communication path in the label switching router, and the two In response to a resource reservation request from the call control device at the time of establishing a session between terminals, a virtual communication path matching the address and service class of the source and destination terminals of the stream transmitted to the session is set to the virtual communication path. Fixed A resource reservation unit that makes a resource reservation when it is determined that the resource amount of the stream can be accommodated in the remaining resource amount of the corresponding VPN of the selected virtual communication path, and a policy server including: The first-stage label switching router, which first receives the stream from the terminal, determines a virtual communication path that matches a destination address and a service class stored in a packet of the stream, and follows the virtual communication path to determine the virtual communication path. A network policy control system which is characterized in that 8. A network accommodated in different label switching routers in an IP core network, and user information including an address of the network, a service class, and a line resource amount are attached to each VPN with a VPN identifier, VPN for each network
An in-VPN user information database installed in the network, an in-VPN call control device accommodated in each of the different networks, and a call control device that establishes a session between two terminals existing in the different networks, A network policy control system comprising a call control device and a policy server for controlling transmission of a stream between the two terminals, wherein the intra-VPN call control device is within a network accommodated in the intra-VPN call control device. When a session establishment request / response including a VPN identifier is received from a terminal, a service applied to the stream corresponding to the VPN identifier from the user information in the VPN user information database provided in the network to which the terminal belongs. class/
The call control device includes means for acquiring a line resource amount and a VPN identifier, and transferring the session class request / response by attaching the service class / line resource amount and the VPN identifier from the intra-VPN call control device. A resource reservation request means for transmitting a resource reservation request for the stream to the policy server when receiving the attached session establishment request / response, wherein the policy server is a first-stage label switching router in the IP core network; And a virtual communication path defining means for defining a virtual communication path which is specified by a combination of the final stage label switching router and the service class, is composed of one or more label switch paths, and defines the line resource amount for each VPN. , The virtual A virtual communication path setting means for setting a communication path for the label switching router, and a resource reservation request from the intra-VPN call control device that matches the address and service class of the source and destination terminals of the stream. When a virtual communication path is selected from the virtual communication path definition means and it is determined that the resource amount of the stream can be accommodated in the remaining resource amount of the corresponding VPN of the selected virtual communication path, resource reservation is performed. A first-stage label switching router that accommodates the terminal,
A network policy control system characterized by determining a virtual communication path that matches a destination address and a service class stored in a stream from the terminal and transferring the stream according to the virtual communication path. 9. An IP core network having a plurality of label switching routers, two terminals accommodated in the different label switching routers, and a session establishment request / response from the two terminals are first transmitted in the IP core network. 1. A network policy control system comprising: a sub-call control device that performs transfer processing to a sub-call control device; and a sub-policy server associated with each of the sub-call control devices, wherein the sub-call control device sends a session establishment request / response. Upon reception, a means for transmitting a resource reservation request for a stream destined for a terminal accommodated in the other sub-call control device to the sub-policy server associated with the sub-call control device is provided. , The sub-policy server from the sub-call control device associated with the sub-policy server Upon receiving the resource reservation request, a label switch path that accommodates the stream is selected, and when it is determined that the stream can be accommodated in the selected label switch path, the stream is stored in the label switch path. A means for setting the label switching router so that the label switching path is transferred, and when the session between the two terminals is established, the sub-policy server provides the label switching router with a label switch path which defines a transfer procedure of the stream. A network policy control system characterized by setting. 10. An IP core network including a plurality of label switching routers, two terminals accommodated in the different label switching routers, a session establishment request / response from the two terminals which accommodates the two terminals. A sub-call control device that first performs a transfer process in the IP core network, a sub-policy server associated with each sub-call control device, a terminal address of a terminal accommodated in the label switching router, and a service class. And a user information database that stores user information including the amount of line resources, wherein the sub-call control device receives the session establishment request / response and the other sub-call control device. Services applied to streams destined for terminals accommodated in Means for acquiring the amount of network / line resources from the user information database, transferring the session / attachment request / response with the session establishment request / response, and the sub-policy server associated with the sub-call control device, Means for transmitting a resource reservation request for a stream, wherein the sub-policy server responds to the resource reservation request from the sub-call control device associated with the sub-policy server in response to the source and destination of the stream. When a virtual communication path suitable for the address and service class of the terminal is selected and it is determined that the resource amount of the stream can be accommodated in the remaining resource amount of the selected virtual communication path, resource reservation means for resource reservation is provided. The resource reservation process for a stream destined for one terminal is Network policy control system, characterized in that it is performed by Fukuko controller and secondary policy server accommodated in the transmission source terminal. 11. A network accommodated in different label switching routers in an IP core network, and user information including an address of the network, a service class, and a line resource amount are attached to each VPN with a VPN identifier, Stored for each network VP
A user information database in VPN installed in N,
VPN accommodated in each of the different networks
A network policy control system comprising an internal call control device, a sub-call control device accommodated in the VPN internal call control device, and a sub-policy server associated with each of the sub-call control devices, wherein the VPN When the internal call control device receives a session establishment request / response including a VPN identifier from a terminal in a network accommodated in the intra-VPN call control device, the intra-VPN user information database provided in the network to which the terminal belongs From the user information of the service class / service class applied to the stream corresponding to the VPN identifier,
The sub call control device comprises means for acquiring the line resource amount and the VPN identifier, and transferring the session resource with the session establishment request / response, and the sub call control device from the intra-VPN call control device, the service class / line resource amount and VPN identifier. A session reservation request / response attached thereto, the resource reservation request means for transmitting a resource reservation request for the stream to the sub-policy server associated with the sub-call control device, the sub-policy server In response to the resource reservation request, selects a virtual communication path that matches the addresses and service classes of the source and destination terminals of the stream, and sets the stream to the remaining resource amount of the corresponding VPN of the selected virtual communication path. If it is determined that the resource amount of Comprising starts selling resources reservation means, the label switching router that accommodates the terminal,
A network policy control system characterized by determining a virtual communication path that matches a destination address and a service class stored in the stream from the terminal, and transferring the stream according to the virtual communication path. 12. A call control device that collectively manages the sub-call control devices in the network policy control system, and a policy server that collectively manages the sub-policy server. 9 ~
11. The network policy control system according to any one of 11. 13. The network policy control system according to claim 9, wherein the sub policy server can be associated with a plurality of sub call control devices. 14. The network policy control system according to claim 9, wherein the sub-call control device and the sub-policy server are provided in the same device. 15. The network policy control system according to claim 9, wherein the sub-call control device and the sub-policy server are provided in the same label switching router. 16. An IP core network comprising a plurality of label switching routers, two terminals accommodated in different label switching routers within the IP core network, and a call for establishing a session between the two terminals. A policy server used in a network policy control system including a control device, which is specified by a combination of a first-stage label switching router, a last-stage label switching router, and a service class in the IP core network, and includes one or more label switch paths. Virtual communication path defining means for defining a virtual communication path; virtual communication path setting means for setting the virtual communication path in the label switching router; and the call control when establishing a session between the two terminals. In response to a resource reservation request from the device, a virtual communication path that accommodates the stream is selected from the virtual communication path definition means based on the addresses and service classes of the source and destination terminals of the stream transmitted in the session, A resource reservation unit that reserves a resource when it is determined that the resource amount of the stream can be accommodated in the remaining resource amount of the selected virtual communication path. 17. The virtual communication path defining means comprises:
The virtual communication path is further provided with a function of determining a line resource amount for each VPN.
6. The policy server according to 6. 18. An IP core network comprising a plurality of label switching routers, two terminals accommodated in different label switching routers within the IP core network, and a call for establishing a session between the two terminals. A label switch in which a required resource amount and a destination network are set for each VPN in a policy server used in a network policy control system that includes a control device and controls transmission of streams via a VPN constructed between the two terminals. A label switch path defining means for defining a path and a label switch path accommodating the stream are selected from the label switch path defining means at the time of establishing a session between the two terminals, and the VPN of the selected label switch path is selected. The amount of line resources allocated to When it is determined that the line resource amount of the stream can be accommodated, label switch path setting means for setting the label switching router to transfer the stream to the label switch path is provided. Policy Server to do.