WO2008141554A1

WO2008141554A1 - A message transporting method, system and relay device

Info

Publication number: WO2008141554A1
Application number: PCT/CN2008/070720
Authority: WO
Inventors: Yu Zheng; Zhiqiang Li; Shouwen Liu
Original assignee: Huawei Technologies Co., Ltd.
Priority date: 2007-05-18
Filing date: 2008-04-16
Publication date: 2008-11-27
Also published as: CN101309202A

Abstract

A message transporting method, system and a relay device including: receiving uplink message carrying an initial client identifier information; setting up corresponding relation between client ralated information and a substituted client's identifier information according to the uplink message carrying the initial client's identifier information and transmitting the uplink message carrying the substituted client's identifier information to a server, and the substituted client's identifier information being for distinguishing the client in other clients; receiving downlink message carrying the substituted client's identifier information from the server; finding the client related information corresponding to the substituted client's identifier information according to the corresponding relation, and transporting the downlink message according to the client ralated information. Therefore, corresponding Client can be found according to received downlink message when conflict occurs to the initial client's identifier information for identifying Client.

Description

Message transmission method and system, relay device

This application claims priority to Chinese Patent Application No. 200710107096.1, entitled "Methods and Systems for Identifying Users, Relay Devices," filed on May 18, 2007, the entire contents of which are incorporated by reference. In this application.

Technical field

The present invention relates to the field of communications, and in particular, to a message transmission method and system, and a relay device.

Background technique

In order to ensure the security of the client (client) data, some communication systems use the Proxy (proxy) and / or Snooping (monitoring) functions on the Relay (relay) devices (including the DHCP relay devices on L2 and L3). The DHCP (Dynamic Host Configuration Protocol) packets that are exchanged between the client and the server are monitored. When receiving the uplink request message from the client, the relay device can obtain the information about the client, including the original user identification information that can identify the client, and send the request packet to the server. The server carries the DHCP message in the response. The original user identification information; when receiving the DHCP message that the server answers, the relay device can find the user related information of the corresponding client according to the original user identification information carried in the server, so that the client can be determined according to the related information of the user. Location, and the data it has.

Currently, the DHCP protocol stipulates that the hardware type and hardware address can be used to identify the client. For example, in Ethernet, the hardware type and hardware address are MAC addresses. In the uplink DHCP packet, the chaddr field can be used to fill in the MAC address. The chaddr field can be returned intact in the downlink DHCP packet. In addition, in the uplink DHCP message, the MAC address can also be filled in the Client-identifier field, and the Client-identifier field is not returned in the downlink DHCP message.

In the actual application, the user may also use the Transaction ID (XID) field in the DHCP message to identify the user. The XID field is randomly generated by each client and is still intact in the response message replied by the server. Return to the ground.

In the process of implementing the present invention, the inventors have found through research that: when there are multiple clients, the MAC address is likely to conflict; the XID generated by multiple clients is also likely to conflict; in addition, some terminals are considered. The non-standardization achieved by the manufacturer and the complexity of the actual network environment, the possibility that the MAC addresses of the multiple clients or the generated XIDs will be more conflicted, so Relay After receiving the DHCP message from the server, the device cannot find the corresponding client based on the MAC address information and/or XID field carried in the server. Therefore, it cannot be known which client the DHCP message sent by the server should be sent to. The client cannot be obtained. The data that is owned.

Summary of the invention

Embodiments of the present invention provide a message transmission method and system, and a relay device, which are capable of being identified

If the original user ID information of the client conflicts, the corresponding client can be found according to the received downlink packet.

Embodiments of the present invention are implemented by the following technical solutions:

An embodiment of the present invention provides a message transmission method, including:

Receiving an uplink message carrying the original user identification information of the user;

And establishing, according to the uplink packet carrying the original user identifier information of the user, a correspondence between the user-related information of the user and the substitute user identifier information, and sending, to the server, an uplink that carries the substitute user identifier information of the user>3⁄4 The substitute user identification information can distinguish the user from other users;

Receiving a downlink packet from the server, where the downlink packet carries the substitute user identifier information;

Deleting the user-related information corresponding to the substitute user identification information in the downlink packet according to the corresponding relationship, and transmitting the downlink packet according to the user-related information.

An embodiment of the present invention further provides a relay device, where the relay device includes a configuration unit and a positioning unit:

The configuration unit is configured to obtain related information of the user according to the received uplink message carrying the substitute user identification information of the user and the location information of the received uplink message, and establish the substitute user identification information and the related information of the user. Corresponding relationship, and forwarding the uplink packet, where the user's substitute user identifier information can distinguish the user from other users;

a positioning unit, configured to find user related information corresponding to the substitute user identification information by using the corresponding relationship in the configuration unit according to the substitute user identification information carried in the received downlink message, according to the user related information The information is sent in the downlink.

An embodiment of the present invention further provides another relay device, including:

a transmission unit, configured to carry the original usage of the user according to the uplink packet received by the relay device The user identification information is sent with an uplink message carrying the substitute user identification information, where the substitute user identification information can distinguish the user from other users;

The processing unit is configured to send, according to the substitute user identification information carried in the downlink packet received by the relay device, a downlink “3” message carrying the original user identifier information.

An embodiment of the present invention further provides a communication system, including a first relay device, a second relay device, and a server;

In the upstream direction:

The first relay device receives an uplink packet carrying the original user identifier information of the user, determines the substitute user identifier information of the user, and sends an uplink message to the second relay device, where the user The user identifier can be distinguished from the other user by the user identifier information, and the uplink packet sent by the first relay device carries the substitute user identifier information of the user;

The second relay device receives the uplink packet from the first relay device, and obtains related information of the user according to the uplink packet received by the second relay device and the location information of the received uplink packet. Establishing a correspondence between the user-related information and the substitute user identifier information of the corresponding user, and sending an uplink packet carrying the substitute user identifier information to the service;

Receiving, by the server, an uplink packet carrying the substitute user identifier information, and returning the substitute user identifier information in the downlink packet;

In the down direction:

The second relay device receives the downlink packet from the server, and finds corresponding user-related information according to the substitute user identifier information in the downlink packet, and sends the corresponding information to the first relay device according to the user-related information. Send a downlink packet.

The embodiment of the present invention further provides another communication system, including a relay device and a server. The relay device obtains related information of the user according to the received uplink message carrying the original user identification information of the user, and establishes a Determining a correspondence between the user-related information and the substitute user identifier information of the corresponding user, and sending the uplink packet to the server, where the substitute user identifier information of the user can distinguish the user from other users, The sent uplink "^ text carries the substitute user identification information of the user;

Receiving, by the server, an uplink packet from the relay device, and returning the substitute user identifier information in the downlink packet; The relay device receives a downlink message from the server, finds corresponding user-related information according to the substitute user identification information, and sends a downlink message according to the found user-related information.

It can be seen that the specific implementation provided by the foregoing embodiment of the present invention can determine different alternative user identification information for different users, and send the substitute user identification information by using an uplink packet; carrying the replacement in the downlink >3⁄4 text User identification information; according to the substitute user identification information, find related information of the corresponding user. Therefore, in the case that the original user identification information of the client can be identified, the corresponding client can be found according to the received downlink packet.

DRAWINGS

Figure 1 is a flow chart of a first embodiment of the present invention;

Figure 2 is a structural view of a second embodiment of the present invention;

Figure 3 is a structural view of a fourth embodiment of the present invention;

Fig. 4 is a structural view showing a fifth embodiment of the present invention.

detailed description

A first embodiment of the present invention provides a packet transmission method, and an implementation process thereof is shown in FIG. 1 , including:

Step S101: Determine different alternative user identification information for different users, and send the substitute user identification information by using a standard field in the uplink packet, specifically:

After receiving the request packet sent by the client, the device with the Snooping and/or Proxy function records the original user identification information, such as XID1, carried in the packet, and determines an alternate user for the user according to its own needs. Identification information, such as XID11, which distinguishes the user from other users.

After the user identifier information is determined for the user, the field in which the original user identifier information is carried in the uplink text is replaced by the substitute user identifier information; the field where the original user identifier information is located can be downlinked. The message is returned as it is. Step S102: Obtain relevant information of the user according to the uplink packet and the location information of the uplink packet, and establish a correspondence between the user-related information and the substitute user identifier information of the corresponding user, specifically:

A device with Snooping and/or Proxy functions, according to the uplink packet and receiving the packet. The location information obtains information about the user, such as the hardware type and hardware address used in the DHCP protocol, or user identification information that can be used to identify the user in other protocols, or port information, or VLAN (Virtual LAN, virtual The local area network (LAN), the IP address that the user applies for, and the like, may establish a correspondence between the substitute user identification information and the user-related information of the corresponding user.

Step S103, in the downlink packet, carrying the substitute user identifier information, specifically: the field in which the substitute user identifier information (such as the above XID11) is located is the same as the field in which the original user identifier information (such as the above XID1) is located. According to the DHCP protocol, the server does not need to modify any of the fields, and the XID11 is encapsulated into a response message and returned.

Step S104: Find the corresponding user-related information according to the substitute user identifier information carried in the downlink packet, and replace the substitute user identifier information carried in the downlink packet with the original user identifier information that was previously replaced, specifically:

After receiving the downlink response packet, the device with the Snooping and/or Proxy function distinguishes the client corresponding to the substitute user identification information according to the substitute user identification information carried in the packet (such as the above XID11), and finds the record. The data item of the user information replaces the substitute user identification information (such as XID11 above) with the original user identification information (such as XID1 above), that is, the information of the user is determined by the information; A downlink message carrying the original user identification information is transmitted to the user.

The foregoing is a description of the first embodiment of the present invention by using the XID of the DHCP message as an example of the user identification information. However, the embodiment of the present invention is not limited to the XID, and other information that can be used as the user identifier may also be used. Embodiments applicable to the present invention, such as hardware types and hardware addresses used in the DHCP protocol, or user identification information that can be used to identify users, or port information, or VLAN (Virtual LAN, Virtual Local Area Network) that can be used in other protocols. Etc., and this information can be used in any combination.

It can be seen from the above embodiment that it describes the replacement process from the original user identification information to the replacement user identification information in the field where the original user identification information is located, and the replacement process from the replacement user identification information to the original user identification information; The embodiment of the invention is not limited to the alternative method, and the substitute user identifier information may be added to the packet through the reserved standard field in the DHCP packet. When downlinking, the standard field can be returned by the downlink message intact. And determining, according to the substitute user identifier information carried in the downlink packet, user related information corresponding to the substitute user identifier information; deleting the substitute user identifier information carried in the downlink “^ text, and determining the user according to the found user related information. The downlink message carrying the original user identification information is transmitted to the user according to the location of the user.

A second embodiment of the present invention provides a communication system, which is structured as shown in FIG. 2, and includes: a first relay device, a second relay device, and a server. The first relay device includes: a first transmission unit and a first processing unit. The second relay device includes: a positioning unit and a configuration unit.

The first relay device determines different substitute user identification information for different users; and transmits the substitute user identification information determined by the first relay device by using an uplink message.

The first transmission unit determines different alternate user identification information for different users; and replaces the original user identification information with the substitute user identification information in a field in which the original user identification information carried in the uplink>3⁄4 text is located, The field in which the user identification information is located can be returned intact through the downlink message.

The configuration unit of the second relay device obtains the substitute user identification information according to the uplink packet forwarded by the first relay device, and obtains the user according to the uplink packet and the location information of the received uplink packet. The related information is used to establish a correspondence between the user's substitute user identification information and the user-related information of the corresponding user, and forward the uplink packet to the server.

And the server, according to the uplink packet sent by the second relay device, obtains the user identifier information of the user, and carries the substitute user identifier information in the downlink message that is fed back. The server does not perform any modification on the substitute user identification information, and directly encapsulates the substitute user identification information into a downlink packet and returns.

The locating unit of the second relay device finds the corresponding relationship between the substitute user identification information carried in the downlink packet and the substitute user identifier information configured in the configuration unit and the user related information of the corresponding user. The user-related information corresponding to the user identification information is replaced. The second relay device transmits the downlink packet to the first relay device according to the user-related information, and specifically transmits the downlink packet to the first information according to the location information in the user-related information. A relay device. The first processing unit of the first relay device replaces the substitute user identifier information carried in the downlink packet with the original user identifier information that was previously replaced.

The first relay device has a proxy Proxy function and/or a monitoring Snooping function. The specific processing of each unit is the same as that in the method embodiment, and will not be described in detail here.

The above alternative user identification information may be an XID, a hardware type and a hardware address, port information, and the like. A third embodiment of the present invention provides another communication system, the structure of which is still as shown in FIG. 2, including: a first relay device, a second relay device, and a server. The first relay device includes: a second transmission unit and a second processing unit; the second relay device includes: a positioning unit and a configuration unit.

The second transmission unit of the first relay device determines different substitute user identification information for different users; adds the substitute user identification information to a standard field reserved in the uplink packet, and the standard field can The downlink message is returned as it is.

The locating unit of the second relay device finds the corresponding relationship between the substitute user identification information carried in the downlink packet and the substitute user identifier information configured in the configuration unit and the user related information of the corresponding user. The user-related information corresponding to the user identification information is replaced. The second relay device transmits the downlink packet to the first relay device according to the user-related information, and specifically transmits the downlink packet to the first information according to the location information in the user-related information. A relay device.

The second processing unit of the first relay device sends the substitute user identification letter carried in the downlink packet The information is deleted.

The first relay device has a proxy Proxy function and/or a monitoring Snooping function. The specific processing of each unit is the same as that in the method embodiment, and will not be described in detail here. The above alternative user identification information may be XID, hardware type and hardware address, port information, and the like.

In this embodiment, the first relay device may not include the second processing unit, and the substitute user identifier information is still carried in the downlink packet sent to the client.

It can be seen from the foregoing embodiment that the first relay device and the second relay device are in a cascading situation, and the first relay device located in the lower layer replaces the original user identifier in the packet sent by each client below with a unique one. The value, that is, the replacement user ID, is used by the second relay device located at the upper layer. The second relay device of the upper layer uses the replacement user identifier to identify the user. If multiple lower-level devices are connected to the upper-layer device, such as L2 DHCP Relay 1 and L2 DHCP Relay 2 in Figure 2, a specific mechanism needs to be used on each lower-level device to ensure that the replacement user IDs generated by each lower-level device are different. the same.

The fourth embodiment of the present invention provides a third communication system, which is different from the second embodiment and the third embodiment of the present invention in that: the functions of the first relay device and the second relay device are collectively set. On a relay device, the structure of the communication system is as shown in FIG. 3, and the specific processing situation is basically the same as that of the second embodiment of the present invention, and will not be described in detail herein.

A fifth embodiment of the present invention provides a relay device. The structure thereof is as shown in FIG. 4, and includes: an identifier determining unit, a transmitting unit, and a positioning unit. The transmission unit includes a first transmission subunit. The relay device still further includes a first processing unit. The relay device still further includes a configuration unit.

The identifier determining unit determines different alternative user identification information for different users;

The transmitting unit transmits the substitute user identification information determined by the identifier determining unit through the uplink packet, and downlinks the downlink packet carrying the substitute user identifier information; the specific processing situation is as follows:

The first transmission sub-unit, in the field where the original user identification information carried in the uplink packet is located, the original user identification information is replaced by the substitute user identification information, and the field in which the original user identification information is located can be downlinked Returning intact; and transmitting downlink packets carrying alternative user identification information.

The configuration unit obtains a phase of the user according to the uplink packet and the location information of receiving the uplink packet. The information is related to the correspondence between the user-related information and the substitute user identification information of the corresponding user, and the uplink packet is forwarded to the server.

The locating unit obtains the substitute user identifier information returned by the downlink packet, and finds the user related information corresponding to the substitute user identifier information according to the substitute user identifier information carried in the downlink packet and the configuration information of the configuration unit.

The first processing unit is configured to replace the substitute user identification information carried in the downlink packet with the original user identifier information that was previously replaced.

The relay device has a proxy Proxy function and/or a monitoring Snooping function. The above alternative user identification information may be XID, hardware type and hardware address, port information, and the like.

A sixth embodiment of the present invention provides another relay device, and the structure thereof includes: an identifier determining unit, a transmitting unit, and a positioning unit. The transmission unit includes a second transmission subunit. The relay device still further includes a second processing unit. The relay device still further includes a configuration unit.

a second transmission subunit, configured to add the substitute user identification information to a standard field reserved in the uplink >3⁄4 text, and the standard field can be returned by the downlink message intact; and the downlink transmission carries the substitute user identifier The downside of the information is "3⁄4 text.

The configuration unit obtains the substitute user identification information and user related information corresponding to the substitute user identification information according to the uplink packet forwarded by the first relay device, and establishes the substitute user identification information of the user and the corresponding user. The correspondence between the user-related information and forwarding the uplink packet to the server.

The locating unit obtains the substitute user identifier information returned by the downlink packet, and finds the user-related information corresponding to the substitute user identifier information according to the substitute user identifier information carried in the downlink packet and the configuration information of the configuration unit.

The second processing unit deletes the substitute user identification information carried in the downlink packet.

The relay device has a proxy Proxy function and/or a monitoring Snooping function. The above alternative user identification information may be an XID, a hardware type and a hardware address, port information, and the like. In the foregoing embodiment, the second processing unit may not be included, and the substitute user identification information is still carried in the downlink information sent to the client.

The relay device in the above embodiment may be a DHCP relay agent, or any device that passes between the DHCP client and the server, and both the DHCP uplink packet and the downlink packet pass.

It can be seen from the specific implementation of the foregoing embodiment that the existing standard field in the uplink packet is sent to determine different alternative user identification information for different users, thereby having no impact on the processing of the DHCP server and the client. And performing the modification; and carrying the substitute user identifier information in the downlink packet, and the different user client can be distinguished by the replacement original user identifier, so that the problem that the original user identifier conflicts in each client request packet can be solved. The spirit and scope of the Ming. Thus, it is intended that the present invention cover the modifications and variations of the inventions

Claims

Rights request

A message transmission method, characterized in that:

The method according to claim 1, wherein the establishing a correspondence between the user-related information of the user and the substitute user identification information according to the uplink>3⁄4 text carrying the original user identification information of the user Specifically include:

And obtaining the related information of the user according to the uplink message carrying the original user identification information of the user and the location information of the received uplink message, and establishing a correspondence between the user related information and the substitute user identification information of the corresponding user. relationship.

3. The method according to claim 1 or 2, wherein in the uplink "^" carrying the substitute user identification information of the user,

The substitute user identification information of the user is carried in a field of the original user identification information; or

The substitute user identification information is added to a standard field reserved in the uplink message.

The method according to claim 2, wherein the transmitting the downlink according to the user-related information specifically includes:

And determining the location of the user according to the information about the user, and transmitting the downlink message carrying the original user identification information according to the location of the user.

The method according to claim 1 or 4, wherein the method further comprises: replacing the substitute user identification information of the user carried in the downlink message from the server with the original user identification information; Or The user's alternate user ID in the standard field of the downlink message reservation from the server is deleted.

The method of claim 1, wherein the uplink packet and the downlink packet are DHCP packets.

7. The method according to claim 1, wherein the substitute user identification information comprises one or more of the following information:

Port information;

Hardware type and hardware address;

Transmission identifier

Virtual LAN VLAN.

A relay device, comprising: a configuration unit and a positioning unit: a configuration unit, configured to receive the uplink packet according to the received uplink packet carrying the substitute user identification information of the user The location information is obtained by the user, and the correspondence between the substitute user identifier information and the user-related information is established, and the uplink packet is forwarded, where the user's substitute user identifier information can be The user is distinguished from other users;

9. The relay device according to claim 8, wherein the substitute user identification information comprises one or more of the following information:

Port information;

Hardware type and hardware address;

Transmission identifier

Virtual LAN VLAN.

A relay device, characterized in that the relay device comprises:

a transmitting unit, configured to send, according to the original user identifier information of the user that the uplink packet received by the relay device, the uplink text carrying the substitute user identifier information, where the substitute user identifier information can be used by the user and Other user distinctions;

a processing unit, configured to receive, according to the substitute user identifier carried in the downlink packet received by the relay device The identification information is sent with the downlink "3⁄4 text" carrying the original user identification information.

The relay device according to claim 10, wherein the transmission unit replaces the original user identification information with the substitute user identification information of the user in a field where the original user identification information is located, The processing unit replaces the substitute user identification information carried in the downlink "3⁄4 text" received by the relay device with the original user identification information; or the reserved standard field of the uplink message to be sent.

The relay device according to claim 10, wherein the relay device further includes a configuration unit and a positioning unit,

The configuration unit is configured to obtain related information of the user according to the uplink information received by the relay device and the location information of the received uplink message, and establish a correspondence between the substitute user identification information and the user related information. Relationship

The locating unit is configured to find, according to the substitute user identifier information carried in the downlink packet, the user-related information corresponding to the substitute user identifier information by using the corresponding relationship in the configuration unit .

The relay device according to claim 10, wherein the substitute user identification information comprises one or more of the following information:

Port information;

Hardware type and hardware address;

Transmission identifier

Virtual LAN VLAN.

A communication system, comprising: a first relay device, a second relay device, and a server;

In the upstream direction:

Receiving, by the second relay device, an uplink packet from the first relay device, according to the second The uplink message received by the relay device and the location information of the received uplink message obtain related information of the user, establish a correspondence between the user related information and the substitute user identification information of the corresponding user, and send the corresponding relationship between the user information and the service An uplink message carrying the substitute user identification information;

In the down direction:

15. A communication system, comprising: a relay device and a server;

The relay device obtains the related information of the user according to the received uplink message carrying the original user identification information of the user, and establishes a correspondence between the user related information and the substitute user identification information of the corresponding user, and The server sends an uplink packet, where the user's substitute user identifier information can distinguish the user from other users, and the sent uplink text carries the substitute user identifier information of the user;

Receiving, by the server, an uplink packet from the relay device, and returning the substitute user identifier information in the downlink packet;

The relay device receives a downlink message from the server, finds corresponding user-related information according to the substitute user identification information, and sends a downlink message according to the found user-related information.