WO2010063182A1 - Method and system for determining strategy - Google Patents

Method and system for determining strategy Download PDF

Info

Publication number
WO2010063182A1
WO2010063182A1 PCT/CN2009/073462 CN2009073462W WO2010063182A1 WO 2010063182 A1 WO2010063182 A1 WO 2010063182A1 CN 2009073462 W CN2009073462 W CN 2009073462W WO 2010063182 A1 WO2010063182 A1 WO 2010063182A1
Authority
WO
WIPO (PCT)
Prior art keywords
service
execution
policy
statistical analysis
information
Prior art date
Application number
PCT/CN2009/073462
Other languages
French (fr)
Chinese (zh)
Inventor
杨波
Original Assignee
中兴通讯股份有限公司
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 中兴通讯股份有限公司 filed Critical 中兴通讯股份有限公司
Publication of WO2010063182A1 publication Critical patent/WO2010063182A1/en

Links

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L12/00Data switching networks
    • H04L12/54Store-and-forward switching systems 
    • H04L12/56Packet switching systems

Definitions

  • the present invention relates to the field of Internet communication technologies, and in particular, to a method and system for determining a policy.
  • the service identification system controls the service according to the policy input by the administrator. This method cannot be operated according to the actual operation of the network. In the case of realizing flexible and effective control of the business, it may cause unreasonable restrictions on the business and hinder the normal operation of the business.
  • the technical problem to be solved by the present invention is to provide a method and system for determining a policy, dynamically determining an execution strategy, and implementing flexible and reasonable control of the service.
  • a policy determining method of the present invention when performing a policy decision, the service identification system determines an execution policy based on the statistical analysis information.
  • the statistical analysis information may include service statistics information, and the service identification system determines an execution policy for controlling the traffic flow according to the service statistics information.
  • the execution policy of the control traffic may be: The service on the link is limited or blocked. The actual traffic of the service on the control link is within the allowed traffic.
  • the execution policy of the control service traffic may be:
  • the priority service performs rate limiting or blocking, allowing traffic of high-priority services, and controlling the actual traffic of services on the link to be within the allowed traffic.
  • the statistical analysis information may include user characteristic information, and the service identification system determines an execution policy for controlling user traffic according to the user characteristic information.
  • the statistical analysis information may include device status information, and the service identification system determines an execution policy for ensuring normal execution of the service or network load balancing according to the device status information.
  • a policy determining system includes: a policy decision module, a statistical analysis module, and an execution module, wherein:
  • the policy decision module is configured to obtain statistical analysis information from the statistical analysis module, determine an execution strategy according to the statistical analysis information, and send the execution policy to the execution module;
  • the statistical analysis module is configured to obtain raw data from the execution module, perform statistical analysis on the original data, generate statistical analysis information, and provide the statistical analysis information to the policy decision module as a decision basis;
  • the execution module is set to control the business according to the received execution policy and record the original data.
  • the statistical analysis information may include service statistics information, and the policy decision module determines an execution policy for controlling the traffic according to the service statistics.
  • the statistical analysis information may include user characteristic information, and the policy decision module determines an execution strategy for controlling user traffic according to the user characteristic information.
  • the statistical analysis information may include device status information, and the policy decision module determines an execution strategy for ensuring network load balancing according to the device status information.
  • the original data may be information of services and/or traffic generated in the execution of the service.
  • the present invention combines statistical analysis information with a reference strategy to determine an execution strategy when making policy decisions, and comprehensively considers statistical analysis information in policy decisions, so that the determined execution strategy is more reasonable and more effective. And the dynamic control of the business is realized, and the best match between the policy and the network state is achieved.
  • BRIEF abstract 1 is a flow chart of a method for implementing a policy decision according to the present invention
  • FIG. 2 is an architectural diagram of a system for implementing policy decisions according to the present invention.
  • the service identification system on the Internet needs to perform statistical analysis on the original data, generate statistical analysis information, and use the statistical analysis information as a basis for printing the table and generating the charging information.
  • the statistical analysis information is the original generated in the execution of the business.
  • the statistical analysis result of the data has important guiding significance for business control. Therefore, in the present invention, the statistical analysis information is used as reference information for policy decision.
  • the statistical analysis information includes: service statistics information, user feature information, and device status information.
  • the service statistics information includes: statistics based on service traffic, flow direction, and type, statistics of traffic, flow direction, traffic trend, and traffic distribution for specific services. Information, statistics on the rate, number of connections, and number of bytes of service data;
  • user characteristic information includes: identification information of the user terminal, statistical information of the IP address or network segment, and statistics on the actions, interests, and status of the user terminal. ;
  • Device status information includes: Statistics based on physical or logical links.
  • the service identification system is divided into a policy decision module, an execution module, and a statistical analysis module, wherein between the policy decision module and the statistical analysis module and the execution module, and between the statistical analysis module and the execution module are set Communication channel.
  • the policy decision module obtains statistical analysis information from the statistical analysis module, and combines the statistical analysis information with the reference policy input by the administrator (administrator input or statically configured policy) to determine the execution strategy and deliver the execution policy to the execution module.
  • FIG. 1 is a method for determining a policy according to the present invention, comprising the following steps:
  • the statistical analysis module obtains the original data from the execution module, performs statistical analysis on the obtained original data, and generates statistical analysis information;
  • the foregoing original data is information of services and/or traffic generated during service execution, and the service information may be traffic of the service, etc., and the traffic information may be traffic of the execution module.
  • the policy decision module obtains statistical analysis information from the statistical analysis module, according to the statistical analysis The information is combined with a reference strategy to determine an execution strategy;
  • the policy decision module obtains statistical analysis information from the statistical analysis module through an information channel with the statistical analysis module.
  • the reference policy is pre-entered by the administrator into the policy decision module.
  • the policy decision module When the execution policy is determined, the policy decision module combines the obtained service statistics with the reference policy to determine an execution policy for controlling traffic, such as allowing, blocking, or rate limiting. For example, if the traffic of the service on link 1 is within 500M, the actual traffic of the service on link 1 is over 500M, and multiple services are performed on link 1, including The high-priority and low-priority services, according to the above information, the execution policy determined by the policy decision module includes: limiting or blocking the low-priority service on the link 1, allowing the traffic of the high-priority service, and the control chain. The total traffic of the service on Road 1 is within 500M.
  • the policy decision module combines the acquired user feature information with the reference policy to determine an execution policy for controlling user traffic, and restricts or prohibits the user from using certain applications.
  • the reference policy is that the user A can access the site B. If it is found that the user A frequently and maliciously accesses the site B from the user feature information and has caused an attack on the site B, the execution policy determined by the policy decision module includes: Visit Site B again within a certain period of time.
  • the policy decision module determines, according to the obtained device state information, an execution policy for ensuring network load balancing or normal service execution, for example: discovering that link 2 or a device may be faulty or congested from the statistics of the physical or logical link, the policy
  • the execution strategy determined by the decision module includes: The service flow avoids the link 2, and ensures the smooth transmission of the service data.
  • the policy decision module sends the execution policy to the execution module.
  • the execution module After receiving the execution policy, the execution module controls the service according to the requirements of the execution policy, and records the original data of the service execution, and the process proceeds to step 101.
  • FIG. 2 is a system for implementing policy decision according to the present invention, comprising: a policy decision module, a statistical analysis module, and an execution module, where:
  • the policy decision module is configured to obtain statistical analysis information from the statistical analysis module, determine an execution strategy according to the statistical analysis information, and send the execution policy to the execution module;
  • the statistical analysis information includes service statistics information, user feature information, and device state information, and the policy decision module Determining an execution policy for controlling service traffic according to service statistics information; determining, based on user characteristic information, a method of controlling user traffic Line policy; Determine the execution policy to ensure network load balancing or normal service operation based on device status information.
  • the statistical analysis module is configured to obtain raw data generated in the execution of the business from the execution module, perform statistical analysis on the original data, and generate statistical analysis information.
  • the execution module is configured to control the service according to the received execution policy, and record the original data generated in the execution of the service.
  • the present invention combines statistical analysis information with a reference strategy to determine an execution strategy when making policy decisions, and comprehensively considers statistical analysis information in policy decisions, so that the determined execution strategy is more reasonable and more effective. And the dynamic control of the business is realized, and the best match between the policy and the network state is achieved.

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)

Abstract

A method and a system for determining strategy are provided. In said method, when determining a strategy, a service identification system determines an execution strategy according to statistical and analytic information. When determining a strategy with the method, the statistical and analytic information is combined with reference information to determine the execution strategy.

Description

一种策略确定方法及系统  Strategy determination method and system
技术领域 Technical field
本发明涉及互联网通信技术领域, 尤其涉及一种策略确定方法及系统。  The present invention relates to the field of Internet communication technologies, and in particular, to a method and system for determining a policy.
背景技术 Background technique
在互联网逐步向多业务承载网演进的过程中, 不论是监管者、 运营商还 是终端用户都对网络的业务控制能力提出了更高的要求。 为了实现对网络运 营的管理和控制、 对未经许可业务的禁止、 网络安全防护以及网络和业务资 源的管理, 业务识别系统应运而生。  In the process of the Internet gradually evolving into the multi-service bearer network, whether the supervisor, the operator or the end user puts forward higher requirements on the network's service control capability. In order to achieve management and control of network operations, prohibition of unlicensed services, network security protection, and management of network and service resources, a business identification system emerges as the times require.
随着业务识别系统规模的逐步扩大, 对系统的策略决策提出了更高的要 求, 现有技术中, 业务识别系统根据管理员输入的策略对业务进行控制, 这 种方式无法根据网络的实际运行情况, 实现对业务灵活有效的控制, 有可能 造成对业务不合理的限制, 阻碍业务的正常运行。  With the gradual expansion of the size of the service identification system, higher requirements are placed on the policy decision of the system. In the prior art, the service identification system controls the service according to the policy input by the administrator. This method cannot be operated according to the actual operation of the network. In the case of realizing flexible and effective control of the business, it may cause unreasonable restrictions on the business and hinder the normal operation of the business.
发明内容 Summary of the invention
本发明要解决的技术问题是提供一种策略确定方法及系统, 动态地确定 执行策略, 实现对业务灵活、 合理地控制。  The technical problem to be solved by the present invention is to provide a method and system for determining a policy, dynamically determining an execution strategy, and implementing flexible and reasonable control of the service.
为解决上述技术问题, 本发明的一种策略确定方法, 进行策略决策时, 业务识别系统根据统计分析信息确定执行策略。  To solve the above technical problem, a policy determining method of the present invention, when performing a policy decision, the service identification system determines an execution policy based on the statistical analysis information.
进一步地, 统计分析信息可包括业务统计信息, 业务识别系统根据业务 统计信息, 确定控制业务流量的执行策略。  Further, the statistical analysis information may include service statistics information, and the service identification system determines an execution policy for controlling the traffic flow according to the service statistics information.
进一步地, 若规定了一链路上执行的业务的允许流量, 则当业务统计信 息指示的链路上执行的业务的实际流量超过允许流量时, 控制业务流量的执 行策略可以为: 对链路上的业务进行限速或阻断, 控制链路上业务的实际流 量在允许流量以内。  Further, if the allowed traffic of the service performed on the link is specified, when the actual traffic of the service performed on the link indicated by the service statistics exceeds the allowed traffic, the execution policy of the control traffic may be: The service on the link is limited or blocked. The actual traffic of the service on the control link is within the allowed traffic.
进一步地, 当业务统计信息还指示链路上执行的业务包括具有高优先级 和低优先级的多个业务时, 控制业务流量的执行策略可以为: 对链路上的低 优先级业务进行限速或阻断, 允许高优先级业务的通行, 控制链路上业务的 实际流量在允许流量以内。 Further, when the service statistics information indicates that the service performed on the link includes multiple services with high priority and low priority, the execution policy of the control service traffic may be: The priority service performs rate limiting or blocking, allowing traffic of high-priority services, and controlling the actual traffic of services on the link to be within the allowed traffic.
进一步地, 统计分析信息可包括用户特征信息, 业务识别系统根据用户 特征信息, 确定控制用户流量的执行策略。  Further, the statistical analysis information may include user characteristic information, and the service identification system determines an execution policy for controlling user traffic according to the user characteristic information.
进一步地, 统计分析信息可包括设备状态信息, 业务识别系统根据设备 状态信息, 确定保障业务正常执行或网络负荷均衡的执行策略。  Further, the statistical analysis information may include device status information, and the service identification system determines an execution policy for ensuring normal execution of the service or network load balancing according to the device status information.
进一步地, 一种策略确定系统, 该系统包括: 策略决策模块、 统计分析 模块和执行模块, 其中:  Further, a policy determining system includes: a policy decision module, a statistical analysis module, and an execution module, wherein:
策略决策模块设置成从统计分析模块获取统计分析信息, 根据统计分析 信息确定执行策略, 并将执行策略发送给执行模块;  The policy decision module is configured to obtain statistical analysis information from the statistical analysis module, determine an execution strategy according to the statistical analysis information, and send the execution policy to the execution module;
统计分析模块设置成从执行模块获取原始数据, 对原始数据进行统计分 析, 生成统计分析信息, 提供该统计分析信息给策略决策模块作为决策依据; 以及  The statistical analysis module is configured to obtain raw data from the execution module, perform statistical analysis on the original data, generate statistical analysis information, and provide the statistical analysis information to the policy decision module as a decision basis;
执行模块设置成按照接收到的执行策略对业务进行控制, 并记录原始数 据。  The execution module is set to control the business according to the received execution policy and record the original data.
进一步地, 统计分析信息可包括业务统计信息, 策略决策模块根据业务 统计信息, 确定控制业务流量的执行策略。  Further, the statistical analysis information may include service statistics information, and the policy decision module determines an execution policy for controlling the traffic according to the service statistics.
进一步地, 统计分析信息可包括用户特征信息, 策略决策模块根据用户 特征信息, 确定控制用户流量的执行策略。  Further, the statistical analysis information may include user characteristic information, and the policy decision module determines an execution strategy for controlling user traffic according to the user characteristic information.
进一步地, 统计分析信息可包括设备状态信息, 策略决策模块根据设备 状态信息, 确定保障网络负荷均衡的执行策略。  Further, the statistical analysis information may include device status information, and the policy decision module determines an execution strategy for ensuring network load balancing according to the device status information.
进一步地, 原始数据可以为业务执行中产生的业务和 /或流量的信息。 综上所述, 本发明在进行策略决策时, 将统计分析信息与参考策略进行 结合, 确定执行策略, 在策略决策中综合考虑统计分析信息, 使确定的执行 策略更加合理, 实效性更高, 并且实现了对业务的动态控制, 达到了策略与 网络状态的最佳匹配。 附图概述 图 1为本发明实现策略决策的方法的流程图; 以及 Further, the original data may be information of services and/or traffic generated in the execution of the service. In summary, the present invention combines statistical analysis information with a reference strategy to determine an execution strategy when making policy decisions, and comprehensively considers statistical analysis information in policy decisions, so that the determined execution strategy is more reasonable and more effective. And the dynamic control of the business is realized, and the best match between the policy and the network state is achieved. BRIEF abstract 1 is a flow chart of a method for implementing a policy decision according to the present invention;
图 2为本发明实现策略决策的系统的架构图。  2 is an architectural diagram of a system for implementing policy decisions according to the present invention.
本发明的较佳实施方式 Preferred embodiment of the invention
目前, 因特网中业务识别系统需要对原始数据进行统计分析, 生成统计 分析信息, 将统计分析信息作为打印 表和生成计费信息的依据, 然而, 考 虑到统计分析信息是对业务执行中产生的原始数据的统计分析结果, 对业务 控制具有重要的指导意义, 因此, 本发明中将统计分析信息作为策略决策的 参考信息。  At present, the service identification system on the Internet needs to perform statistical analysis on the original data, generate statistical analysis information, and use the statistical analysis information as a basis for printing the table and generating the charging information. However, considering that the statistical analysis information is the original generated in the execution of the business. The statistical analysis result of the data has important guiding significance for business control. Therefore, in the present invention, the statistical analysis information is used as reference information for policy decision.
统计分析信息包括: 业务统计信息、 用户特征信息和设备状态信息; 其 中, 业务统计信息包括: 基于业务流量、 流向和类型的统计信息, 针对具体 业务的流量、 流向、 流量趋势和流量分布的统计信息, 针对业务数据的速率、 连接数、 字节数的统计信息; 用户特征信息包括: 用户终端的标识信息, IP 地址或网段的统计信息, 对用户终端的动作、 兴趣和状态的统计信息; 设备 状态信息包括: 基于物理或逻辑链路的统计信息。  The statistical analysis information includes: service statistics information, user feature information, and device status information. The service statistics information includes: statistics based on service traffic, flow direction, and type, statistics of traffic, flow direction, traffic trend, and traffic distribution for specific services. Information, statistics on the rate, number of connections, and number of bytes of service data; user characteristic information includes: identification information of the user terminal, statistical information of the IP address or network segment, and statistics on the actions, interests, and status of the user terminal. ; Device status information includes: Statistics based on physical or logical links.
本发明中, 将业务识别系统划分为策略决策模块、 执行模块和统计分析 模块, 其中, 在策略决策模块与统计分析模块和执行模块两者之间, 以及统 计分析模块与执行模块之间均设置通信通道。 策略决策模块从统计分析模块 获取统计分析信息, 根据统计分析信息结合管理员输入的参考策略(管理员 输入或静态配置的策略)进行决策, 确定执行策略, 并将执行策略下发给执 行模块。  In the present invention, the service identification system is divided into a policy decision module, an execution module, and a statistical analysis module, wherein between the policy decision module and the statistical analysis module and the execution module, and between the statistical analysis module and the execution module are set Communication channel. The policy decision module obtains statistical analysis information from the statistical analysis module, and combines the statistical analysis information with the reference policy input by the administrator (administrator input or statically configured policy) to determine the execution strategy and deliver the execution policy to the execution module.
下面结合附图对本发明的具体实施方式进行说明:  The specific embodiments of the present invention are described below with reference to the accompanying drawings:
图 1为本发明的策略确定方法, 包括如下步骤:  FIG. 1 is a method for determining a policy according to the present invention, comprising the following steps:
101 : 统计分析模块从执行模块获取原始数据, 对获取到的原始数据进行 统计分析, 生成统计分析信息;  101: The statistical analysis module obtains the original data from the execution module, performs statistical analysis on the obtained original data, and generates statistical analysis information;
上述原始数据是在业务执行中产生的业务和 /或流量的信息, 业务信息可 以是业务的流量等, 流量信息可以是执行模块的流量。  The foregoing original data is information of services and/or traffic generated during service execution, and the service information may be traffic of the service, etc., and the traffic information may be traffic of the execution module.
102: 策略决策模块从统计分析模块获取统计分析信息, 根据该统计分析 信息结合参考策略, 确定执行策略; 102: The policy decision module obtains statistical analysis information from the statistical analysis module, according to the statistical analysis The information is combined with a reference strategy to determine an execution strategy;
策略决策模块通过与统计分析模块之间的信息通道, 从统计分析模块获 取统计分析信息。 参考策略由管理员预先输入到策略决策模块中。  The policy decision module obtains statistical analysis information from the statistical analysis module through an information channel with the statistical analysis module. The reference policy is pre-entered by the administrator into the policy decision module.
确定执行策略时, 策略决策模块将获取的业务统计信息结合参考策略, 确定允许、 阻断或限速等控制业务流量的执行策略。 例如: 参考策略为链路 1 上业务的允许流量为 500M以内, 若从获取到业务统计信息中发现链路 1 上业务的实际流量已超过 500M,且链路 1上执行有多种业务, 包括高优先级 和低优先级的业务, 根据以上信息, 策略决策模块确定的执行策略包括: 对 链路 1上低优先级的业务进行限速或阻断, 允许高优先级业务的通行, 控制 链路 1上业务的总流量在 500M以内。  When the execution policy is determined, the policy decision module combines the obtained service statistics with the reference policy to determine an execution policy for controlling traffic, such as allowing, blocking, or rate limiting. For example, if the traffic of the service on link 1 is within 500M, the actual traffic of the service on link 1 is over 500M, and multiple services are performed on link 1, including The high-priority and low-priority services, according to the above information, the execution policy determined by the policy decision module includes: limiting or blocking the low-priority service on the link 1, allowing the traffic of the high-priority service, and the control chain. The total traffic of the service on Road 1 is within 500M.
策略决策模块将获取的用户特征信息结合参考策略, 确定控制用户流量 的执行策略, 限制或禁止用户使用某些应用。 例如: 参考策略为用户 A可访 问站点 B, 若从用户特征信息中发现用户 A频繁、 恶意访问站点 B, 已造成 对站点 B的攻击, 则策略决策模块确定的执行策略包括: 禁止用户 A在一定 时间内再次访问站点 B。  The policy decision module combines the acquired user feature information with the reference policy to determine an execution policy for controlling user traffic, and restricts or prohibits the user from using certain applications. For example, the reference policy is that the user A can access the site B. If it is found that the user A frequently and maliciously accesses the site B from the user feature information and has caused an attack on the site B, the execution policy determined by the policy decision module includes: Visit Site B again within a certain period of time.
策略决策模块根据获取的设备状态信息, 确定保障网络负载均衡或业务 正常执行的执行策略, 例如: 从物理或逻辑链路的统计信息中发现链路 2或 某设备可能出现故障或拥塞, 则策略决策模块确定的执行策略包括: 业务流 避开链路 2, 保证业务数据传输畅通。  The policy decision module determines, according to the obtained device state information, an execution policy for ensuring network load balancing or normal service execution, for example: discovering that link 2 or a device may be faulty or congested from the statistics of the physical or logical link, the policy The execution strategy determined by the decision module includes: The service flow avoids the link 2, and ensures the smooth transmission of the service data.
103: 策略决策模块将执行策略下发给执行模块;  103: The policy decision module sends the execution policy to the execution module.
104:执行模块接收到执行策略后,按照执行策略的要求对业务进行控制, 并记录业务执行的原始数据, 跳转到步骤 101。  104: After receiving the execution policy, the execution module controls the service according to the requirements of the execution policy, and records the original data of the service execution, and the process proceeds to step 101.
图 2为本发明实现策略决策的系统, 包括: 策略决策模块、 统计分析模 块和执行模块, 其中:  2 is a system for implementing policy decision according to the present invention, comprising: a policy decision module, a statistical analysis module, and an execution module, where:
策略决策模块用于从统计分析模块获取统计分析信息, 根据统计分析信 息确定执行策略, 并将执行策略发送给执行模块; 统计分析信息包括业务统 计信息、 用户特征信息和设备状态信息, 策略决策模块根据业务统计信息, 确定控制业务流量的执行策略; 根据用户特征信息, 确定控制用户流量的执 行策略; 根据设备状态信息, 确定保障网络负荷均衡或业务正常运行的执行 策略。 The policy decision module is configured to obtain statistical analysis information from the statistical analysis module, determine an execution strategy according to the statistical analysis information, and send the execution policy to the execution module; the statistical analysis information includes service statistics information, user feature information, and device state information, and the policy decision module Determining an execution policy for controlling service traffic according to service statistics information; determining, based on user characteristic information, a method of controlling user traffic Line policy; Determine the execution policy to ensure network load balancing or normal service operation based on device status information.
统计分析模块用于从执行模块获取业务执行中产生的原始数据, 对原始 数据进行统计分析, 生成统计分析信息。  The statistical analysis module is configured to obtain raw data generated in the execution of the business from the execution module, perform statistical analysis on the original data, and generate statistical analysis information.
执行模块用于按照接收到的执行策略对业务进行控制, 并记录业务执行 中产生的原始数据。  The execution module is configured to control the service according to the received execution policy, and record the original data generated in the execution of the service.
以上所述仅为本发明的优选实施例而已, 并不用于限制本发明, 对于本 领域的技术人员来说, 本发明可以有各种更改和变化。 凡在本发明的精神和 原则之内, 所作的任何修改、 等同替换、 改进等, 均应包含在本发明的保护 范围之内。  The above description is only the preferred embodiment of the present invention, and is not intended to limit the present invention, and various modifications and changes can be made to the present invention. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and scope of the present invention are intended to be included within the scope of the present invention.
工业实用性 Industrial applicability
综上所述, 本发明在进行策略决策时, 将统计分析信息与参考策略进行 结合, 确定执行策略, 在策略决策中综合考虑统计分析信息, 使确定的执行 策略更加合理, 实效性更高, 并且实现了对业务的动态控制, 达到了策略与 网络状态的最佳匹配。  In summary, the present invention combines statistical analysis information with a reference strategy to determine an execution strategy when making policy decisions, and comprehensively considers statistical analysis information in policy decisions, so that the determined execution strategy is more reasonable and more effective. And the dynamic control of the business is realized, and the best match between the policy and the network state is achieved.

Claims

权 利 要 求 书 Claim
1、 一种策略确定方法, 包括:  1. A strategy determination method, including:
进行策略决策时, 业务识别系统根据统计分析信息确定执行策略。  When making a policy decision, the business identification system determines the execution strategy based on the statistical analysis information.
2、 如权利要求 1所述的方法, 其中:  2. The method of claim 1 wherein:
所述统计分析信息包括业务统计信息, 所述业务识别系统根据所述业务 统计信息, 确定控制业务流量的执行策略。  The statistical analysis information includes service statistics information, and the service identification system determines an execution policy for controlling service traffic according to the service statistics information.
3、 如权利要求 2所述的方法, 其中:  3. The method of claim 2, wherein:
若规定了一链路上执行的业务的允许流量, 则当所述业务统计信息指示 所述链路上执行的业务的实际流量超过所述允许流量时, 所述控制业务流量 的执行策略为: 对所述链路上的业务进行限速或阻断, 控制所述链路上业务 的实际流量在所述允许流量以内。  If the allowed traffic of the service performed on the link is specified, when the service statistics information indicates that the actual traffic of the service performed on the link exceeds the allowed traffic, the execution policy of the control service traffic is: The traffic on the link is limited or blocked, and the actual traffic of the service on the link is controlled to be within the allowed traffic.
4、 如权利要求 3所述的方法, 其中:  4. The method of claim 3, wherein:
当所述业务统计信息还指示所述链路上执行的业务包括具有高优先级和 低优先级的多个业务时, 所述控制业务流量的执行策略为: 对所述链路上的 低优先级业务进行限速或阻断, 允许高优先级业务的通行, 控制所述链路上 业务的实际流量在所述允许流量以内。  When the service statistics information further indicates that the service performed on the link includes multiple services with high priority and low priority, the execution policy of the control service traffic is: low priority on the link The rate-limiting or blocking of the service is allowed, and the traffic of the high-priority service is allowed to be controlled, and the actual traffic of the service on the link is controlled to be within the allowed traffic.
5、 如权利要求 1所述的方法, 其中:  5. The method of claim 1 wherein:
所述统计分析信息包括用户特征信息, 所述业务识别系统根据所述用户 特征信息, 确定控制用户流量的执行策略。  The statistical analysis information includes user feature information, and the service identification system determines an execution policy for controlling user traffic according to the user feature information.
6、 如权利要求 1所述的方法, 其中:  6. The method of claim 1 wherein:
所述统计分析信息包括设备状态信息, 所述业务识别系统根据所述设备 状态信息, 确定保障业务正常执行或网络负荷均衡的执行策略。  The statistical analysis information includes device status information, and the service identification system determines an execution policy for ensuring normal execution of the service or network load balancing according to the device status information.
7、 一种策略确定系统, 包括策略决策模块、 统计分析模块和执行模块, 其中:  7. A policy determination system, comprising a policy decision module, a statistical analysis module, and an execution module, wherein:
所述策略决策模块设置成从所述统计分析模块获取统计分析信息, 根据 所述统计分析信息确定执行策略, 并将所述执行策略发送给所述执行模块; 所述统计分析模块设置成从所述执行模块获取原始数据, 对所述原始数 据进行统计分析, 生成所述统计分析信息, 提供所述统计分析信息给所述策 略决策模块作为决策依据; 以及 The policy decision module is configured to obtain statistical analysis information from the statistical analysis module, determine an execution policy according to the statistical analysis information, and send the execution policy to the execution module; The execution module obtains the original data, and the original number Performing statistical analysis, generating the statistical analysis information, and providing the statistical analysis information to the policy decision module as a decision basis;
所述执行模块设置成按照接收到的所述执行策略对业务进行控制, 并记 录原始数据。  The execution module is configured to control the service in accordance with the received execution policy and to record the original data.
8、 如权利要求 7所述的系统, 其中:  8. The system of claim 7 wherein:
所述统计分析信息包括业务统计信息, 所述策略决策模块根据所述业务 统计信息, 确定控制业务流量的执行策略。  The statistical analysis information includes service statistics information, and the policy decision module determines an execution policy for controlling service traffic according to the service statistics information.
9、 如权利要求 7所述的系统, 其中:  9. The system of claim 7 wherein:
所述统计分析信息包括用户特征信息, 所述策略决策模块根据所述用户 特征信息, 确定控制用户流量的执行策略。  The statistical analysis information includes user feature information, and the policy decision module determines an execution policy for controlling user traffic according to the user feature information.
10、 如权利要求 7所述的系统, 其中:  10. The system of claim 7 wherein:
所述统计分析信息包括设备状态信息, 所述策略决策模块根据所述设备 状态信息, 确定保障网络负荷均衡的执行策略。  The statistical analysis information includes device status information, and the policy decision module determines an execution policy for ensuring network load balancing according to the device status information.
11、 如权利要求 7所述的系统, 其中:  11. The system of claim 7 wherein:
所述原始数据为业务执行中产生的业务和 /或流量的信息。  The raw data is information of services and/or traffic generated during service execution.
PCT/CN2009/073462 2008-12-04 2009-08-24 Method and system for determining strategy WO2010063182A1 (en)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN200810179261.9 2008-12-04
CN 200810179261 CN101753408A (en) 2008-12-04 2008-12-04 Method and system for determining strategy

Publications (1)

Publication Number Publication Date
WO2010063182A1 true WO2010063182A1 (en) 2010-06-10

Family

ID=42232874

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2009/073462 WO2010063182A1 (en) 2008-12-04 2009-08-24 Method and system for determining strategy

Country Status (2)

Country Link
CN (1) CN101753408A (en)
WO (1) WO2010063182A1 (en)

Families Citing this family (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN102984077B (en) * 2012-12-04 2015-09-16 中国联合网络通信集团有限公司 The control method of network congestion and system
CN104283801A (en) * 2013-07-04 2015-01-14 中兴通讯股份有限公司 Method and system for processing service data

Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1780265A (en) * 2004-11-17 2006-05-31 华为技术有限公司 Flow controlling method for message system
CN101115053A (en) * 2007-08-24 2008-01-30 中国科学院计算技术研究所 Credit flow control method

Patent Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1780265A (en) * 2004-11-17 2006-05-31 华为技术有限公司 Flow controlling method for message system
CN101115053A (en) * 2007-08-24 2008-01-30 中国科学院计算技术研究所 Credit flow control method

Also Published As

Publication number Publication date
CN101753408A (en) 2010-06-23

Similar Documents

Publication Publication Date Title
US7478161B2 (en) Network quality of service for qualitative applications
US7710877B2 (en) Communication control system
US8614951B2 (en) Guaranteed bandwidth sharing in a traffic shaping system
JP6104178B2 (en) System and method for group bandwidth management in a communication system network
JP4850917B2 (en) Apparatus for providing a quality of service level in a broadband communication system
Wroclawski RFC2211: Specification of the controlled-load network element service
KR101240143B1 (en) Non-blocking admission control
CN102934403A (en) Controlling data transmission over a network
US20100077226A1 (en) Encryption device and encryption operation method
US20070058645A1 (en) Network controlled customer service gateway for facilitating multimedia services over a common network
US20090059785A1 (en) Policy-based resource management
JP2008523735A (en) Electronic message distribution system having network device
WO2018082035A1 (en) Method, device and system for function scheduling
TW200845660A (en) Recalculating airtime quota in WLAN to use up bandwidth
CN101390361A (en) Dynamic flow control method and system
JP2007517446A (en) Multiple services with policy execution on a common network
JP4878700B2 (en) Method for providing access control for and / or for users accessing the Internet from a terminal via a premises access node and apparatus for implementing such a method
JP3962046B2 (en) Apparatus for processing parameters and / or traffic stream measurements for local billing of resource usage per equipment element in a communication network
US8688077B2 (en) Communication system and method for providing a mobile communications service
CN106921588B (en) Flow control method, device and equipment
WO2010063182A1 (en) Method and system for determining strategy
WO2004045155A1 (en) Network traffic statistics method of ip device
CN106411780A (en) Message control method and device
US20190149513A1 (en) Packet transmission method, apparatus, and system
KR101747032B1 (en) Modular controller in software defined networking environment and operating method thereof

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 09829966

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE

122 Ep: pct application non-entry in european phase

Ref document number: 09829966

Country of ref document: EP

Kind code of ref document: A1