WO2007048318A1

WO2007048318A1 - A stream classification device, a stream classification method and a base station applying the stream classification device

Info

Publication number: WO2007048318A1
Application number: PCT/CN2006/002712
Authority: WO
Inventors: Liubo Mei
Original assignee: Huawei Technologies Co., Ltd.
Priority date: 2005-10-24
Filing date: 2006-10-16
Publication date: 2007-05-03
Also published as: CN1852241A; CN100417140C

Abstract

A stream classification device comprise a subscriber station identifier SSID searching module and more than one stream classifier corresponding to various SSID, the said SSID searching module is connected to each stream classifier respectively, the said SSID searching module searches the SSID of the high layer protocol data stream received by itself according to SSID classification rule, and transmits the received high layer protocol data stream to the stream classifier corresponding to the SSID; the said each stream classifier corresponding to various SSID, searches the CID of the received high layer protocol data stream according to connection identifier CID classification rule, and outputs the high layer data stream appended with CID field. The invention also comprises a stream classification method and a base station BS applying the stream classification device. The stream classification device and method provided in the invention occupies less memory resource, and reduces the cost.

Description

Flow classification device and method, and base station using the same

Technical field

The present invention relates to a stream classification technique, and more particularly to a stream classification apparatus and method for classifying a higher layer protocol data stream such as an Ethernet or an IP packet, and a base station (BS) employing the stream classification apparatus. Background of the invention

Currently, in the Broadband Wireless Access Standard 802.16 of the World Microwave Access Interoperability Organization (WiMAX), a physical (PHY) layer and a medium access control (MAC) layer are defined, wherein the MAC layer further includes a service identification convergence sublayer ( CS), public part sublayer and security sublayer (CPS&SS).

Specifically, the PHY layer is mainly used to establish physical connections, implement channel baseband coding and decoding, medium-frequency RF modulation and demodulation, and RF subsystem control.

The MAC layer is mainly used to establish logical connections, realize the identification and classification of service flows, the establishment and management of logical connections, bandwidth allocation and scheduling, and data encryption and decryption. The CS is configured to receive data from an upper layer of the MAC layer, and send the converted and processed data to the CPS. The specific processing operations may include association of an upper layer data classification, a service flow identifier (SFID), and a connection identifier (CID). And header compression (PHS), etc.; as the core sublayer of the MAC layer, CPS is used for MAC layer data framing, uplink and downlink bandwidth allocation and scheduling, connection establishment and maintenance, and guaranteed service (QoS) processing; Encryption sublayer, SS is used to encrypt user data.

For CS, CS for Asynchronous Transfer Mode (ATM) is defined in 802.16, and CS for Ethernet or IP packets. The present invention is primarily related to the implementation of the CS. The main function of the package CS defined by 802.16 is through traffic classification, such as Ethernet or IP packets. Such a high-level protocol data flow to the connection identifier (CID) mapping, that is, to find the corresponding CID of each data packet and add it to each data packet, so as to distinguish the upper layer data packet into different connections. To this end, 802.16 defines a comprehensive and complex traffic classification related protocol domain, including: MAC destination address, MAC source address, 802.1p, virtual local area network identifier (VLAN ID), Ethernet type, IP destination address, IP source address, IP protocol type, User Datagram Protocol/Transmission Control Protocol (UDP/TCP) destination port, UDP/TCP source port, IP Differentiated Service Code Point (DSCP) domain, and required to be able to match flows exactly, by mask, by range The classification rule, that is, the multi-domain flow classification function.

The current wireless network access is usually implemented by a base station located on the network side and a subscriber station (SS) located on the user terminal side. Generally, one BS is connected to multiple SSs, where the BS is used to connect multiple SSs. Accessing the network, the SS is used to provide access to the network for multiple user terminals. In the downstream direction from the BS to the subscriber station SS, the traffic classification is done by the BS side. In the uplink direction from SS to BS, the traffic classification is done by the SS side. Commonly, they support 802.16. This paper mainly deals with downstream classification devices and methods from BS to multiple SSs.

1 is a block diagram of a prior art BS 100. The prior art BS 100 includes: a PHY layer device 130, and a MAC layer device 110 including a CS device 115 and a CPS&SS device 114. The CS device 115 includes a downstream classifier (DLC) 156 as a traffic classification device, and the DLC 156 stores a traffic classification rule of the BS 100. Commonly, it uses a three-value content addressed access memory (TCAM) and a recursive traffic classification algorithm. (RFC) or a binary tree based lookup algorithm (Tries) and its corresponding improved algorithm for stream classification of data packets.

The CS device 115 is configured to receive data packets from the upper layer of the MAC layer through the MAC layer upper layer interface AO. The data from the interface AO generally appears as a to-be-served data unit of the external network, and the data is found by the DLC 156 according to the stored traffic classification rule. After the CID of the packet is added to the packet, the packet with the CID field added to the CPS&SS device 114 is transmitted through the interface A1. The CPS&SS device 114 is configured to receive the CID field-added data packet from the CS device 115 through the interface A1, schedule and encrypt according to its CID, and transmit the framed MAC layer data frame to the PHY device 130.

The PHY layer device 130 receives the MAC layer data frame from the MAC layer device 110, performs channel coding and decoding thereof, and performs intermediate radio frequency modulation and demodulation, and then transmits it to the corresponding ss.

Taking BS0, which is a BS connected to two SSs, as an example, the two SSs are: SS1, which is connected with a user terminal whose MAC is "0x000011111111"; SS2 is connected to a user whose MAC is "0x000011111112" The terminal implements a bridging function in the BS0, in which two service flows are configured for the user terminal connected to the SS1, and three service flows are configured for the user terminal connected to the SS2. That is to say, BS0 will forward the packet with the MAC destination address "0x000011111111" to SS1, and the packet with the MAC destination address "0x000011111112" will be forwarded to SS2.

Correspondingly, the traffic classification device located in BS0 is as shown in FIG. 2. FIG. 2 is a structural diagram of a traffic classification device using the prior art BS0. The DLC 156 as the traffic classification device stores a packet for searching for the upper layer from the MAC layer. The CID traffic classification rule is defined according to the 802.16-2004 standard. One possible traffic classification rule is shown in Table 1. Table 1 is the flow classification rule table of DLC 156, and each flow classification rule is listed in Table 1. The rule description, the CID of the rule map, and the SS of the CID connection.

Rule The CID connection rule describes the mapped CID

Serial number of SS

{DMAC=0x000011111111, VLAN ID=0xl,

11 C1D2 SSI

1ρ =7}

{ D AC=0x000011111111 , VLAN ID=0x 1 ,

21 DIP =0x10.11.13.*, SIP =0x10.20.20.20 , CID4 SSI

IP Protocol=6 , TCP SPort= 161 }

{DMAC=0x000011111112, VLAN ID=0x2,

31 CID1 SS2

Lp=6} {DMAC=0x000011111112, VLAN ID=0x2,

41 DIP=0xl0.11.15.*, IP Protocols, CID3 SS2

TCP SPort=80}

{DMAC=0x000011111112, VLAN ID=0x2,

51 DIP=0xl0.11.15.*, SIP=0xl 0.20.20.21 , CID5 SS2

IP Protocol- 17, UDP SPort= 67 }

Assume that DLC 156 receives a total of five data packets, which are: packet 1 matching flow classification rule 11, packet 2 matching flow classification rule 21, packet 3 matching flow classification rule 31, and flow Classification rule 41 matched packet 4, packet 5 matching the flow classification rule 51.

The prior art flow classification method is as follows: After the DLC 156 finds the CID according to the flow classification rule in Table 1, the corresponding CID field is added to the data packet and the data packet with the CID field added is output, which are: CID2 packet 1, BS0 will forward the packet to SS1; add CID4 packet 2, BS0 will forward the packet to SS1; add CID1 packet 3, BS0 will forward the packet to SS2; Add For packet 4 of CID3, BS0 will forward the packet to SS2; packet 5 with CID5 is added, and BS0 will forward the packet to SS2.

In the current wireless network, a BS usually manages multiple SSs, which makes the BS side have to support a large number of traffic classification rules to meet the requirements of multiple SSs. Commonly, if a BS manages 512 SSs, each SS Supporting 16 flow classification rules, the total number of flow classification rules supported by the BS side will reach 512x16 = 8K. In the prior art, the DLC 156 often uses a three-value content addressed access memory (TCAM) and a recursive flow classification algorithm (RFC). Or the binary tree-based search algorithm (Tries) and its corresponding improved algorithm for stream classification, the advantage is that high-speed, large-capacity multi-domain stream classification can be realized, but the disadvantage is that the cost is higher when using TCAM, and it is not conducive to Range matching, and using RFC or Tries and their corresponding changes When entering the algorithm, a balance must be found between the memory resource and the search speed. If the number of streams is small, the algorithm of the single block can be used. If the number of streams is large, a more complicated algorithm must be used. In general, the prior art flow classification apparatus and method can realize high-speed, large-capacity multi-domain flow classification, but occupy a large memory resource and have high cost. Summary of the invention

In view of the above, it is an object of the present invention to provide a stream sorting apparatus that occupies less memory resources and is less expensive.

It is also an object of the present invention to provide a stream classification method that is less expensive to occupy and has a lower cost.

It is a further object of the present invention to provide a BS that employs a stream classification device that is less expensive to store and less expensive.

In order to achieve the first object of the present invention, the present invention provides a stream classification apparatus, which includes a subscriber station identification SSID search module and one or more flow classifiers respectively corresponding to different SSIDs, and the SSID search module respectively and each Flow classifier connection,

The SSID searching module searches for the SSID of the higher layer protocol data stream received by the SSID according to the SSID classification rule, and transmits the received higher layer protocol data stream to the stream classifier corresponding to the SSID according to the obtained SSID;

Each of the stream classifiers corresponding to the different SSIDs searches for the CID of the received higher layer protocol data stream according to the connection identifier CID classification rule, and outputs the upper layer protocol data stream after adding the CID field.

The SSID lookup module includes: a memory for storing an SSID classification rule and a processor for performing an SSID lookup operation.

The flow classifier corresponding to each different SSID includes: a memory for storing a CID classification rule and a processor for performing a CID search operation. The memory is a static random access memory (SRAM) or a dynamic random access memory (DRAM).

The processor is a field programmable gate array FPGA, a network processor NP, or a central processing unit CPU.

In order to achieve the second object of the present invention, the present invention provides a flow classification method, which is applicable to a flow classification device including an SSID search module and one or more flow classifiers respectively corresponding to different SSIDs, the method comprising:

A. The SSID search module receives the upper layer protocol data stream, searches for the SSID of the upper layer protocol data stream, and sends the higher layer protocol data stream to the stream classifier corresponding to the SSID according to the obtained SSID;

B. Each stream classifier receives the upper layer protocol data stream, searches the CID of the upper layer protocol data stream, and adds the corresponding CID field to the upper layer protocol data stream, and outputs the upper layer protocol data stream after adding the CID field.

The one or more flow classifiers respectively corresponding to different SSIDs are: each flow classifier corresponding to each SSID-one; or each flow classifier corresponding to one or more SSIDs, and corresponding to each flow classifier SSIDs do not overlap each other.

The high-level protocol data stream is: an Ethernet packet or an IP packet.

In order to achieve the third object of the present invention, the present invention provides a base station BS including a physical layer device for establishing a physical connection and a medium access control MAC layer device for establishing a logical connection, the MAC layer device including Service Identification Convergence Sublayer CS Equipment and Common Part Sublayer and Security Sublayer CPS&SS Equipment:

The MAC layer device further includes a stream classification device, the device comprising an SSID lookup module and one or more flow classifiers respectively corresponding to different SSIDs, the SSID lookup modules being respectively connected to each flow classifier,

The SSID search module searches for a high-level protocol received by itself according to the SSID classification rule. The SSID of the data stream, and transmitting the received higher layer protocol data stream to the stream classifier corresponding to the SSID according to the obtained SSID;

Each of the stream classifiers corresponding to the different SSIDs searches for the CID of the received higher layer protocol data stream according to the CID classification rule, and outputs the higher layer protocol data stream after adding the CID field to the CPS&SS device.

The one or more flow classifiers corresponding to different SSIDs are located in the CS device.

The SSID search module is located in the CS device.

The flow classifier corresponding to each different SSID includes: a memory for storing a CID classification rule and a processor for performing a CID search operation.

It can be seen that the traffic classification apparatus and method provided by the present invention divides a large number of traffic classification rules in the prior art into multiple DLCs according to a subscriber station identifier (SSID), for a specific data packet, The first stream classification is performed by the SSID search module to obtain the user station identifier (SSID) of the data packet, and the data packet with the SSID field added is sent to the DLC corresponding to the SSID, and then the DLC pair corresponding to the SSID is added. The data packet of the SSID field is subjected to secondary stream classification to obtain the CID of the data packet, and the data packet to which the CID field is added is output. Since the first flow classification only needs to find the SSID of the data packet, the secondary flow classification only needs to find the corresponding CID in a small number of traffic classification rules corresponding to one SSID, so the rule space of the two flow classifications is compared with the prior art. The flow classification rule space is much smaller, which makes the two flow classifications adopt the direct matching method, that is, extracting several domains from the head of the data packet, and comparing each relevant domain of each matching space one by one until it finds Up to the matching rules, the purpose of occupying memory resources is small and the cost is low. N2006/002712 BRIEF DESCRIPTION OF THE DRAWINGS

1 is a structural view of a BS in the prior art;

2 is a structural diagram of a flow classification device using the prior art BS0;

Figure 3 is a structural view of a BS in the present invention;

Fig. 4 is a structural diagram of a stream sorting apparatus using the BS0 of the present invention. Mode for carrying out the invention

The core idea of the present invention is: dividing a large number of traffic classification rules in the prior art into multiple DLCs according to different SSs, where each DLC performs flow classification on only one SS corresponding data packet, or more than one or more The SS corresponding packet performs flow classification.

For example, suppose there are 5 SSs, which are SS1, SS2, SS3, SS4, and SS5. Here, you can set 5 DLCs, corresponding to 5 SSs respectively. You can also set 2 DLCs, DLC1 and SS1, SS2, and SS3. Corresponding, DLC2 corresponds to SS4 and SS5. The actual setting method can be determined according to the actual application needs.

For the received data packet, first find the SSID of the SS corresponding to the data packet, and then send the data packet to the DLC corresponding to the SSID to perform flow classification according to the SSID obtained by the search.

The present invention will be further described in detail below with reference to the accompanying drawings.

3 is a structural diagram of a BS in the present invention, and the BS 300 of the present invention includes: a PHY layer device 130, and a MAC layer device 310 including a CS device 315 and a CPS&SS device 114. Different from the prior art, the stream classification apparatus of the present invention includes: an SSID lookup module 370 and a plurality of DLCs 356 divided according to SSIDs, wherein the SSID lookup module 370 and the plurality of DLCs 356 are connected to each other.

Specifically, the SSID lookup module 370 stores the SSID classification rule of the BS 300, which The data packet from the upper layer of the MAC layer is received through the interface AO, and the SSID of the data packet is found according to the stored SSID classification rule, and the received data packet is sent to the DLC 356 corresponding to the SSID according to the SSID obtained by the search.

Each DLC 356 stores a CID classification rule divided by the BS 300 according to the SSID, and each DLC 356 receives the data packet from the SSID search module 370, finds the CID of the data packet according to the CID classification rule stored by itself, and sets the corresponding CID. After the field is added to the specific data packet, the data packet to which the CID is added is transmitted to the CPS&SS device 114 through the interface A1.

The SSID search module 370 is located between the upper layer interface AO of the MAC layer and the plurality of DLCs 356 divided according to the SSID. The plurality of DLCs 356 according to the SSID are often located in the CS device 315, and the SSID lookup module 370 can be as shown in FIG. 3. It is shown in the CS device 315 and may also be located outside of the CS device 315. If the SSID lookup module is located outside of the CS device, it may further include an interface A2 with the CS device to transmit the data packet to the corresponding DLC.

Typically, the SSID lookup module 370 and each of the plurality of DLCs 356 partitioned according to the SSID include a memory for storing stream classification rules and a processor for performing a lookup operation. In a specific implementation, the memory may be static random access memory (SRAM) or dynamic random access memory (DRAM), and the processor may be a field programmable gate array (FPGA), a network processor (NP), or a central processing unit ( CPU).

Still taking BS0 connecting SS1 and SS2 as an example, the flow classification device located in BS0 in the present invention is as shown in FIG. 4, and FIG. 4 is a structural diagram of a flow classification device using BS0 of the present invention, the flow classification device includes: SSID search The module 370, DLC1 corresponding to SS1, and DLC2 corresponding to SS2, wherein the SSID lookup module 370 is connected to DLC1 and DLC2, respectively.

The SSID search module 370 stores a flow classification rule for searching for an SSID of a data packet from an upper layer of the MAC layer, and the flow classification rule is as shown in Table 2, and Table 2 is an SSID search module. A flow classification rule table for block 370.

Table 2

The DLC1 stores a traffic classification rule for finding the CID of the data packet to be forwarded to the SSI. The flow classification rule is shown in Table 3. Table 3 is the flow classification rule table of the DLC1.

table 3

The DLC2 stores a flow classification rule for finding the CID of the data packet to be forwarded to the SS2. The flow classification rule is shown in Table 4. Table 4 is the flow classification rule table of the DLC2.

Table 4

Obviously, the five traffic classification rules in Table 1 in the prior art are divided according to the SS, wherein the traffic classification rules 11 and 21 applicable to the data packets to be forwarded to the SS1 are divided into the DLC1. Among them, the flow classification rules 31, 41, and 51 applicable to the data packet to be forwarded to SS2 are divided into DLC2.

It is still assumed that the stream classification apparatus of the present invention receives a total of five data packets, which are: packet 1 matching the traffic classification rule 11, and obviously, the packet 1 and the traffic classification rule 12 are further matched with the traffic classification rule 13 ; packet 2 matching the flow classification rule 21, obviously, the packet 2 is matched with the flow classification rule 12 and further with the flow classification rule 23.; the packet 3 matching the flow classification rule 31, obviously, the packet 3 Matching with the traffic classification rule 22 and further with the traffic classification rule 14; the data packet 4 matching the traffic classification rule 41, obviously, the data packet 4 and the traffic classification rule 22 are further matched with the traffic classification rule 24; and the traffic classification rule 51 The matched packet 5, obviously, packet 5 is matched with the traffic classification rule 22 and further with the traffic classification rule 34.

In the above example, a case where a DLC performs traffic classification only for packets belonging to one SS is described. Assume that BS0 is connected to three SSs, including SS1, SS2, and SS3. The traffic classification rules for SS1 and SS2 can also be stored in DLC1, and the traffic classification rules corresponding to SS3 are stored in DCL2. DLC1 performs flow classification on packets belonging to SS1 and SS2; DLC2 performs flow classification on packets belonging to SS3.

The method for classifying a packet of an upper layer MAC packet by using the stream classifying apparatus of the present invention includes the following steps. Before performing the method, the correspondence between each SSID and the corresponding DLC interface needs to be set according to the DLC corresponding to each SSID. The DLC interface here refers to the interface between the DLC and the SSID lookup module. Therefore, in the present invention, as long as the SSID is found, the data packet can be sent to the DLC corresponding to the SSID for processing according to the interface of the DLC corresponding to the SSID.

After receiving the MAC layer upper layer data packet, the SSID search module searches for the SSID of the data packet according to the flow classification rule stored in the SSID for searching, and sends the data packet to the SSID corresponding to the SSID according to the DLC interface corresponding to the SSID. Processing in the DLC. Specifically, to the BSO stream classification device, the SSID lookup module 370 matches the DMAC and VLAN fields of the packets 1 to 5 according to Table 2, and since the DMAC and VLAN fields of the packets 1 and 2 match the flow classification rule 12, the SSID lookup module 370 Finding data packets 1 and 2 corresponding to SSID1, then transmitting data packets 1 and 2 to DLC1 for processing according to the DLC1 interface corresponding to SSID1; since the DMAC and VLAN fields of data packets 3~5 match the traffic classification rule 22 Similarly, the SSID lookup module 370 sends the packets 3~5 to the DLC2 for processing.

B. After receiving the data packets from the SSID lookup module 370, the plurality of DLCs respectively find the CIDs of the data packets according to the respective flow classification rules, respectively add the corresponding CID fields to the data packets and output the data packets with the CID field added. .

Specifically, to the stream classification device of BS0, after receiving the data packets 1 and 2 from the SSID lookup module 370, the DLC1 matches the corresponding fields of the data packets 1 and 2 according to the flow classification rule table 3, since the data packets 1 and 2 are respectively associated with the traffic classification. Rules 31 and 32 match, so DLC1 adds the CID2 field and the CID4 field on packets 1 and 2, respectively, and outputs packets 1 and 2 to which the CID field is added.

Similarly, when DLC2 receives the data packets 3~5 from the SSID lookup module 370, the corresponding fields of the data packets 3-5 are matched according to the flow classification rule table 4, because the data packets 3, 4, and 5 respectively correspond to the flow classification rules. 14, 23, 34 match, so DLC2 adds a CID1 field, a CID3 field, and a CID5 field on packets 3, 4, and 5, respectively, and outputs a packet 3-5 with the CID field added.

Certainly, when there are three SSs in the BS0, including SS1, SS2, and SS3, the traffic classification rules for SS1 and SS2 may also be stored in the DLC1, and the traffic classification rules corresponding to the SS3 may be stored in the DCL2. DLC1 performs flow classification on data packets belonging to SS1 and SS2; DLC2 performs flow classification on data packets belonging to SS3. The specific processing method is the same as the method described above, except that the flow classification is performed on the data packets sent to the three SSs, and the corresponding The SSID is sent to the corresponding DLC for processing, and the specific process will not be described in detail herein.

In the present invention, since the rules are matched by the direct matching method in both the SSID lookup module and the DLC, the rules occupy the SSID lookup module and the size of the memory in the DLC is equal to the sum of the sizes of each rule.

Relative and direct matching method, when using the recursive stream classification algorithm (RFC) for stream classification, the storage space required will be much larger than the storage space required by the direct matching method.

For example, if a BS manages 512 SSs and each SS supports 16 traffic classification rules, the total number of traffic classification rules supported by the BS side will reach 512 X 16 = 8K. Here, the key value of each flow rule is 128 bits.

If RFC is used for traffic classification, considering the drastic changes of the entries and the redundancy switching of the entries, it takes 30 Mbits of memory space when using RFC.

If the method of the present invention is employed, even if it is considered that the SSID lookup module uses the Hash algorithm for matching, the memory control required by the rules in the SSID lookup module and the stream classifier is only 1.256 Mbits. At the same time, the price of mass storage is much larger than the sum of the prices of the small-capacity memories having the same capacity sum.

Therefore, it is obvious that the method provided by the present invention achieves the purpose of less occupation of memory resources and lower cost. In addition, since the rules are assigned to different DLCs for matching, the speed of the flow classification can be handled by the present invention, and the processing speed of the flow classification can be flexibly adjusted according to the rules assigned to the DLC.

The above is only the preferred embodiment of the present invention and is not intended to limit the scope of the present invention.

Claims

Claim

A stream classification apparatus, comprising: a subscriber station identification SSID search module and one or more flow classifiers respectively corresponding to different SSIDs, wherein the SSID search modules are respectively connected to each flow classifier.

Each of the stream classifiers corresponding to different SSIDs searches for the CID of the received higher layer protocol data stream according to the connection identifier CID classification rule, and outputs a higher layer protocol data stream after adding the CID field.

2. The stream classification apparatus according to claim 1, wherein the SSID lookup module comprises: a memory for storing an SSID classification rule and a processor for performing an SSID lookup operation.

3. The stream classification apparatus according to claim 1, wherein each of the stream classifiers corresponding to different SSIDs comprises: a memory for storing a CID classification rule and a processor for performing a CID search operation.

The stream sorting apparatus according to claim 2 or 3, wherein the memory is a static random access memory (SRAM) or a dynamic random access memory (DRAM).

The stream classification device according to claim 2 or 3, wherein the processor is a field programmable gate array FPGA, a network processor NP, or a central processing unit CPU.

A flow classification method, which is applicable to a flow classification device including an SSID search module and one or more flow classifiers respectively corresponding to different SSIDs, wherein the method includes:

A, the SSID search module receives the upper layer protocol data stream, finds the SSID of the upper layer protocol data stream, and sends the higher layer protocol data stream to the stream classifier corresponding to the SSID according to the obtained SSID; B. Each stream classifier receives the upper layer protocol data stream, searches the CID of the upper layer protocol data stream, and adds the corresponding CID field to the upper layer protocol data stream, and outputs the upper layer protocol data stream after adding the CID field.

The flow classification method according to claim 6, wherein the one or more flow classifiers respectively corresponding to different SSIDs are: each flow classifier respectively corresponds to each SSID; or each flow classifier Each of the stream identifiers corresponds to one or more SSIDs, and the SSIDs of the stream classifiers do not overlap each other.

The stream classification method according to claim 6 or 7, wherein the high layer protocol data stream is: an Ethernet packet or an IP packet.

A base station BS, comprising: a physical layer device for establishing a physical connection and a medium access control MAC layer device for establishing a logical connection, the MAC layer device comprising a service identification convergence sublayer CS device and a common part sublayer And security sublayer CPS&SS devices, which are characterized by:

The BS according to claim 9, wherein the one or more stream classifiers corresponding to different SSIDs are located in the CS device.

The BS according to claim 10, wherein the SSID search module Located in the cs device.

The BS according to claim 9, wherein the SSID lookup module includes: a memory for storing an SSID classification rule and a processor for performing an SSID lookup operation.

The BS according to claim 9, wherein each of the stream classifiers corresponding to different SSIDs comprises: a memory for storing CID classification rules and a processor for performing CID search operations.