WO2008141516A1

WO2008141516A1 - Message transmitting method, transmitting device and transmitting system

Info

Publication number: WO2008141516A1
Application number: PCT/CN2007/071234
Authority: WO
Inventors: Dongsheng Yue
Original assignee: Huawei Technologies Co., Ltd.
Priority date: 2007-05-18
Filing date: 2007-12-14
Publication date: 2008-11-27
Also published as: CN101309154A; ES2385507T3; CN101309154B

Abstract

A method for transmitting the message, comprises: receiving the message composed of several of requesting programs provided by several of content serving systems; decomposing the received message into several of sub messages; transmitting the decomposed sub messages to the corresponding content serving system in the said content serving system.

Description

Message transmission method, transmitting device and transmission system

The present application claims priority to Chinese Patent Application No. 200710107959.5, the entire disclosure of which is hereby incorporated by reference. In this application.

Technical field

The embodiments of the present invention relate to the field of mobile communications, and in particular, to a method for transmitting a message, a transmitting device, and a transmission system.

Background technique

The Internet Group Management Protocol (IGMP) snooping (SNOOPING) is a communication device that maintains local multicast forwarding entries by snooping the user's join request or leaving IGMP messages, thereby determining which member ports the multicast stream forwards to. the process of. During this process, the user's message is not modified, and the communication device needs to forward the upstream and downstream IGMP messages intact.

In the application scenario of IGMP SNOOPING (IGMP V3 SNOOPING) in the application environment of IGMP V3, end users can join multiple Internet Service Provider (ISP) programs, and different ISPs use virtual LAN (Virtual). The local area network (VLAN) or IP is used for identification. The user terminal can send a request message containing only one program to request the corresponding program, or can send multiple programs (S, G) at a time (in IGMP V3, use (S, G) identifies a multicast program, where S represents the IP address of the program source, and G represents the request message of the group IP address of the multicast program.

After the terminal user orders the program, the multicast router serves as the querier to send the IGMP V3 general query message. After receiving the general query message, the user terminal may carry multiple programs in one response message, or may only carry the message. a show. For a case where a response message carries multiple programs, according to the standard of IGMP SNOOPING, although the message carries multiple programs, the message will be forwarded to multiple ISPs intact, so each ISP server will A response message containing multiple programs is received. Because the programs in the message belong to different ISPs, different ISPs receive the same message, causing information leakage. At the same time, there may be security risks. For example, if different ISPs use the same (S, G) to identify the program, it may cause the program stream to be misrouted.

Summary of the invention

Embodiments of the present invention provide a packet sending method, a sending device, and a transmission system, to implement The security of the message information.

The embodiment of the invention provides a method for sending a message, including:

Receiving a message comprising a plurality of requested programs, the plurality of requested programs being provided by a plurality of content service systems;

Dividing the received message including multiple requested programs into a plurality of sub-messages;

Transmitting a plurality of sub-messages into a corresponding content service system of the plurality of content service systems.

An embodiment of the present invention provides a packet sending apparatus, including:

a receiving unit, configured to receive a message that includes a plurality of requested programs, where the plurality of requested programs are provided by a plurality of content service systems;

a processing unit, configured to divide the received message that includes the plurality of requested programs into a plurality of sub-messages, and send, by the sending unit, the plurality of sub-texts that are decomposed into the corresponding content in the plurality of content service systems Monthly service system.

An embodiment of the present invention provides a packet transmission system, including: an access point and a border router, where the access point or the border router includes:

a processing unit, configured to divide the received message that includes the plurality of requested programs into a plurality of sub-messages, and send, by the sending unit, the plurality of sub-messages that are decomposed into the corresponding content month of the plurality of content service systems Good service system.

The sending method, the sending device, and the transmitting system of the embodiment of the present invention divide the message into sub-messages according to different content service systems to which the programs included in the message belong, and each sub-report includes only one program corresponding to the content service system. Therefore, each content service system can only receive the sub-messages of the programs provided by the server, and cannot receive the messages of other content service systems, thus ensuring the security of the message information. DRAWINGS

1 is a flowchart of a method for sending a message according to an embodiment of the present invention;

FIG. 2 is a schematic structural diagram of a transmission system of a message according to an embodiment of the present invention.

detailed description

The technical solutions of the embodiments of the present invention are further described in detail below through the accompanying drawings and embodiments. The embodiments of the present invention are directed to solving the problem of compatibility between different types of user terminals, access devices, and access servers in the IGMP V3 SNOOPING model, and ensuring information security for multi-ISP multicast services.

IGMP V3 (corresponding to rfc3376, Internet Group Management Protocol, Version 3) In the SNOOPING mode, if an IGMP V3 response (Report) message carries multiple programs belonging to multiple ISPs, as shown in FIG. A flowchart of a method for sending an embodiment packet, where the method specifically includes the following steps:

Step 101: Receive a message including multiple requested programs, where the multiple requested programs are provided by multiple content service systems;

The content service system may be a server or a service providing network or system. Different programs in the message are marked by (S, G), S represents the IP address of the program source, and G represents the group IP address of the multicast program;

Step 102: Divide the received message including multiple requested programs into multiple sub-messages; program that belongs to the same content service system may be encapsulated in one sub-message for transmission, or each program may be encapsulated into one sub-package. The packet is sent to the content service system according to the content service system to which the program belongs, so the encapsulated message can be executed as follows:

First, determining a plurality of content service providing systems to which the requested program is included in the message; and then encapsulating the information of the requested program belonging to the same content service system in the message into a sub-package; The information of each requesting program in the message is encapsulated into a sub-package;

The plurality of content service providing systems to which the requested program included in the message belongs may be determined by various methods, for example, by using a VLAN in which the content service system to which the program belongs, so that when the program is defined, the content to which the program belongs is specified. The VLAN corresponding to the service system obtains the VLAN of the content service system of the program source of the requested program included in the received message, and finally needs to switch the VLAN where the sub-message is located to the content service. The VLAN where the system is located;

It can also be determined by using the IP address of the content service system of the program source, because in the application environment of the IGMP V3 SSM mapping, the group IP+ source IP address is used to identify the program, and the package message is encapsulated. The basis of the program is the source IP of the program. When the message carries multiple programs, the program with the same source IP is encapsulated in a sub-message, or each program encapsulates a sub-message, and the received report is received. In the text, the IP of the content service system of the program source of the requested program included in the message is obtained, and the interface is used to find the outgoing interface or the pre-configured IP and VLAN correspondence, and the VLAN of the packet is switched, and then sent;

It is also possible to encapsulate the message by using the IP of the content service system of the program source of the program and the VLAN in which the program is located. When the program is first defined, the VLAN corresponding to the content service system to which the program belongs is specified, and multiple identical (S, G) must be deployed in the In different VLANs, that is, (VLAN, G) is unique, so in a multi-ISP environment, each ISP can use the same (S, G) to identify different programs, and receive the user's join message when receiving the message. In the received message, the IP address and the VLAN of the content service system of the program source of the requested program included in the message are obtained, and then the interface or the IP and content of the pre-configured content service system are searched through the routing manner. The VLAN corresponding to the service system belongs to the VLAN corresponding to the content service system.

Step 103: Send the decomposed plurality of sub-messages to a corresponding content service system of the plurality of content service systems.

In this step, the sub-message is sent to the content service system to which the requested program included in the sub-message belongs. The encapsulated message is a sub-message, and each sub-message includes only one or more programs corresponding to the content service system, so each content service system can only receive sub-messages of the programs provided by the server, and The sub-messages of other content service systems are not received, so that the message information is not leaked, thereby ensuring the security of the message information.

The sending device of the packet of the embodiment of the present invention specifically includes: a receiving unit, configured to receive a packet that includes multiple requested programs, where the multiple requested programs are provided by multiple content service systems; and a processing unit, configured to receive the received message The message including the plurality of requested programs is divided into a plurality of sub-messages, and the information of the requested programs belonging to the same content service system in the message may be respectively encapsulated into one sub-message, or each of the packets may be A requesting program information is encapsulated into a sub-unit of a sub-message; and a sending unit is configured to send the decomposed plurality of sub-messages to a corresponding content service system of the plurality of content service systems. A determining unit may be further included for determining a plurality of content services to which the requested program included in the message belongs Provide the system.

Therefore, the sending apparatus of the packet in the embodiment of the present invention encapsulates and sends the packet according to the content service system to which the program belongs, so that the packet is not the original forwarding packet, and the security of the packet information is ensured.

The transmission system of the packet of the embodiment of the present invention includes an access point (Access Node, AN), and the access point includes: a receiving unit, configured to receive a packet that includes multiple requested programs, where the multiple requested programs are multiple The content service system provides: a processing unit, configured to divide the received message including the plurality of requested programs into a plurality of sub-messages, and encapsulate the information of the requested programs belonging to the same content service system in the message into one The sub-message may also encapsulate the information of each requesting program in the packet into a sub-unit of the sub-message; the sending unit, configured to send the decomposed plurality of sub-messages to the plurality of content services The corresponding content service system in the system. A determination unit may be further included for determining a plurality of content service providing systems to which the requested program included in the message belongs.

Therefore, the transmission system of the packet in the embodiment of the present invention uses the AN to encapsulate and send the packet according to the content service system to which the program belongs in the message and the information security system, so it is no longer the original forwarding report. The text ensures the security of the message information.

As shown in FIG. 2, it is a schematic structural diagram of a transmission system of a packet according to an embodiment of the present invention, which specifically includes: AN21, configured to transparently transmit the packet; and a border router 22, the border router 22 includes: a receiving unit, configured to receive, a plurality of requesting programs, wherein the plurality of requested programs are provided by a plurality of content service systems; and the processing unit is configured to divide the received message including the plurality of requested programs into a plurality of sub-messages; Transmitting a plurality of sub-messages into a corresponding content service system of the plurality of content service systems.

Therefore, the transmission system of the message according to the embodiment of the present invention uses the border router to encapsulate and send the message according to the content service system to which the program belongs in the message and the information security system, so it is no longer the original forwarding. The message ensures the security of the message information.

It should be noted that the above embodiments are only for explaining the technical solutions of the embodiments of the present invention, and the present invention is not limited thereto, and the present invention will be described in detail with reference to the preferred embodiments. The technical solutions of the embodiments are modified or equivalent, without departing from the spirit and scope of the technical solutions of the embodiments of the present invention.

Claims

Rights request

A method for sending a message, comprising:

The method of transmitting a message according to claim 1, wherein the requesting program is identified by using an IP address of the program source and a group IP address of the multicast program.

The method for transmitting a message according to claim 1 or 2, wherein the dividing the received message including the plurality of requested programs into the plurality of sub-messages further comprises: determining that the message is included A plurality of content service providing systems to which the requested program belongs.

The method for transmitting a message according to claim 3, wherein the content service providing system to which the determined request program belongs includes:

Obtaining, from the received message, an IP address of the content service system of the program source of the requested program included in the message and/or a virtual local area network identifier;

A content service providing system to which the requested program belongs is determined based on the IP address and/or the virtual local area network identifier in which it is located.

The method for transmitting a message according to claim 4, wherein the dividing the received message into a plurality of sub-messages belonging to different content service systems comprises:

Encapsulating information of the requested program belonging to the same content service system in the message into a sub-package; or

Encapsulating the information of each requesting program in the message into a sub-message.

6. A device for transmitting a message, comprising:

The apparatus for transmitting a message according to claim 6, further comprising: a determining unit, configured to determine a plurality of content service providing systems to which the requested program included in the message belongs.

The apparatus for transmitting a message according to claim 6 or 7, wherein the apparatus is an access point or a border router.

A packet transmission system, comprising an access point and a border router, wherein the access point or the border router comprises:

The message transmission system according to claim 9, wherein the access point or the border router further comprises:

And a determining unit, configured to determine a plurality of content service providing systems to which the requested program included in the message belongs.