WO2011032450A1 - 网络互通的实现方法和系统 - Google Patents

网络互通的实现方法和系统 Download PDF

Info

Publication number
WO2011032450A1
WO2011032450A1 PCT/CN2010/076207 CN2010076207W WO2011032450A1 WO 2011032450 A1 WO2011032450 A1 WO 2011032450A1 CN 2010076207 W CN2010076207 W CN 2010076207W WO 2011032450 A1 WO2011032450 A1 WO 2011032450A1
Authority
WO
WIPO (PCT)
Prior art keywords
network
data packet
address
internet
identity
Prior art date
Application number
PCT/CN2010/076207
Other languages
English (en)
French (fr)
Inventor
许志军
符涛
吴强
黄兵
Original Assignee
中兴通讯股份有限公司
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 中兴通讯股份有限公司 filed Critical 中兴通讯股份有限公司
Publication of WO2011032450A1 publication Critical patent/WO2011032450A1/zh

Links

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L65/00Network arrangements, protocols or services for supporting real-time applications in data packet communication
    • H04L65/10Architectures or entities
    • H04L65/102Gateways
    • H04L65/1023Media gateways
    • H04L65/1026Media gateways at the edge

Definitions

  • the present invention relates to the field of communications, and more particularly to an implementation method and system for an identity identification network and an Internet interworking of an identity location separation architecture.
  • the Internet has been widely used and has achieved great success. However, due to the shortcomings of the Internet in network architecture and protocol design, there are also many problems in its use.
  • DOS Disk Operating System
  • DNS Domain Name System
  • ICP Internet Content Provider
  • IP Internet Protocol
  • IP does not support mobility.
  • the essential reason is that IP addresses contain dual attributes of identity and location. When it comes to the mobile Internet, the movement of the terminal location causes the IP address to change, otherwise it can't be routed; and the change of the IP address will cause the terminal identity to change, the Transmission Control Protocol/User Data Packet Protocol breaks the reconnection, which is for many applications. It is unacceptable. Therefore, traditional IP support for mobility has fundamental problems. (3) Routing table scalability issues
  • the problem that the routing table is too large not only increases the processing load of the router, but also increases the cost. Moreover, the convergence speed of the backbone network routing protocol is reduced, and the convergence frequency is increased, so that the IP network is more in an unstable state.
  • IP addresses have made it difficult for traditional Internet to follow the Rekhter rule.
  • the identity attribute of an IP address requires that the IP address be assigned based on the organization to which the terminal belongs (rather than the network topology), and this allocation must be stable and cannot be changed frequently; the location attribute of the IP address requires the IP address to be based on the network.
  • the topology is allocated to ensure the scalability of the routing system. In this way, the two attributes of the IP address create conflicts, which eventually leads to the scalability of the Internet routing system.
  • the main body of Internet construction and management is not an educational research unit, but a telecom operator.
  • the traditional Internet does not have the conditions for operation management.
  • the traditional IP network is to "interconnect" each subnet, and it is connected and routed.
  • Each subnet of a traditional IP network is assigned a separate IP address with a gateway and a mask.
  • Each network element has an IP address.
  • Inside a subnet it is generally a shared Layer 2 network.
  • the mapping between IP addresses and MAC addresses is implemented through ARP. Any two hosts inside the network can access each other without going through the gateway. Only access to the external network needs to be implemented through the gateway.
  • an identity network (referred to as ID network) is implemented, which mainly implements user identity and location separation.
  • ID network The location information of the terminal in the identity network depends only on which edge router it is in. As long as the edge router where the terminal is located is found, the terminal can be found according to the identity attribute of the IP address. Therefore, in theory, the terminal that is not on the network segment where the router is located moves here, and does not need to change its identity attribute. Just modify its location attribute to this router.
  • an edge router (called an Access Service Node (ASN) in the identity network) has a point-to-point connection with the terminal;
  • the terminals are isolated from each other and can only communicate with each other through the ASN.
  • the user accesses the ASN to be authenticated.
  • the ASN performs source address verification on the uplink packets of the terminal.
  • the identity identification network implements the separation of the identity and location of the terminal.
  • the specific mechanism is as follows: the IP address of the ASN where the terminal is located is used as the location identifier of the terminal, which is called the route identifier (RID) of the terminal; a new namespace is introduced.
  • RID route identifier
  • the identity of the terminal it becomes the Access Identifier (AID) of the terminal; the terminal only perceives its own AID, and the AID of the communication peer does not perceive the RID information; all upper-layer connections are established based on the AID, that is, TCP/ AID, UDP/AID instead of TCP/IP, UDP/IP; Import mapping server to store mapping information of terminal AID-RID, terminal movement, only need to update AID-RID mapping, without changing its own AID, so terminal moves to service connection No effect.
  • AID Access Identifier
  • the technical problem to be solved by the present invention is to provide an implementation method and system for interworking between an identity identification network and the Internet, so as to realize interworking between the identity identification network and the Internet.
  • the present invention provides a network interworking method, the method comprising: the step of the identity network (ID network) communication end transmitting a data packet to the internet communication end, the ID network communication end sending to the internet communication end
  • the steps of the packet include: The ID network communication end sends an ID data packet to an access service node (ASN) of the ID network, where the source address is an identity identifier of the ID network communication end, and the destination address is used by the Internet communication end to communicate with the ID network.
  • ASN access service node
  • the ASN receives the ID data packet, parses it into an ID encapsulation data packet, and sends it to an interworking gateway (IGW).
  • IGW interworking gateway
  • the outer source address is a location identifier of the ID network communication end
  • the outer layer destination The address is a location identifier used by the Internet communication end to communicate with the ID network
  • the inner layer source address is an identity identifier of the ID network communication end
  • the inner layer destination address is an identity identifier used by the Internet communication end to communicate with the ID network
  • the IGW After receiving the ID encapsulated data packet, the IGW is parsed into an IP data packet, and the source address in the IP data packet is an IP address used by the ID network communication end to communicate with the Internet, and the destination address is an IP address of the Internet communication end. ; as well as
  • the IGW sends the IP data packet to the Internet communication end by routing; thereby implementing the identity identification network to communicate with the Internet.
  • the method further includes the step of the Internet communication terminal transmitting a data packet to the ID network communication end,
  • the step of the Internet communication terminal transmitting the data packet to the ID network communication terminal includes: the IGW receiving an IP data packet sent by the Internet communication terminal, where the source address in the IP data packet is an IP address of the Internet communication terminal The destination address is an IP address used by the ID network communication end to communicate with the Internet;
  • the IGW parses the IP data packet and encapsulates it into an ID encapsulated data packet, and sends the data packet to the
  • the outer source address is a location identifier used by the Internet communication end to communicate with the ID network
  • the outer destination address is a location identifier of the ID network communication end
  • the inner layer source The address is an identity identifier used by the Internet communication end to communicate with the ID network
  • the inner layer destination address is an identity identifier of the ID network communication end
  • the ASN decapsulates the ID encapsulated data packet of the IGW package into an ID data packet, where the source address in the decapsulated ID data packet is an identity identifier used by the Internet communication terminal to communicate with the ID network, and the destination address is the ID of the ID network communication end; and
  • the Internet communication terminal is a terminal or a service server of the Internet
  • the ID network communication terminal is a service server or terminal of the ID network.
  • the identifier of the Internet communication end is an IPv4 address, an IPv6 address, or a long bit containing an IPv4 address of the Internet communication end;
  • the location identifier of the Internet communication end is an IPv4 of the Internet communication terminal in the Internet.
  • the IP address of the ID network communication end is an identity identification AID of the ID network communication end, an exclusive fixed public network IP address, or a shared A public network IP address that is dedicated to interworking.
  • the present invention also provides another method for implementing network interworking, where the identity identification network (ID network) communication end and the Internet communication end realize interworking through the ID data packet conversion device and the interworking data packet conversion device,
  • ID network communication end located in the ID network, having an identity indicating identity, a location identifier indicating location, and an IP address for implementing interworking
  • the Internet communication terminal located on the Internet, having an IP address, and a representation for implementing interworking
  • An identity identifier, a location identifier indicating a location includes:
  • ID data packet transmission step the ID data packet is transmitted between the ID network communication end and the ID data packet conversion device, and the source address and the destination address of the ID data packet are represented by an identity identifier;
  • the ID data packet conversion device performs mutual conversion between the ID data packet and the ID encapsulated data packet, and the outer source address and the destination address of the ID encapsulated data packet are represented by a location identifier, and the inner layer source address And the destination address are indicated by an identity;
  • ID encapsulation packet transmission step ID encapsulation data packet is transmitted between the ID packet conversion device and the interworking packet conversion device;
  • An interworking packet conversion step wherein the interworking packet conversion device performs mutual conversion between an ID encapsulated data packet and an IP data packet, where a source address and a destination address of the IP data packet are represented by an IP address;
  • An IP data packet transmission step wherein the IP data packet is transmitted between the interworking data packet conversion device and an Internet communication terminal; Thereby, the identity identification network and the Internet are interoperable.
  • the Internet communication terminal is a terminal or a service server of the Internet
  • the ID network communication terminal is a service server or terminal of the ID network.
  • the identifier of the Internet communication end is an IPv4 address, an IPv6 address, or a long bit containing an IPv4 address of the Internet communication end;
  • the location identifier of the Internet communication end is an IPv4 of the Internet communication terminal in the Internet.
  • the IP address of the ID network communication end is an identity identification AID of the ID network communication end, an exclusive fixed public network IP address, or a shared A public network IP address that is dedicated to interworking.
  • the present invention also provides an implementation system for network interworking, the system comprising an internet communication end, an interworking gateway (IGW), an access service node (ASN), and an identity (ID) network communication end, wherein ,
  • the ID network communication end is located in the ID network, and is configured to: send an ID data packet to the ASN, where the source address in the ID data packet is an identity identifier of the ID network communication end, and the destination address is used by the Internet communication terminal.
  • the access service node is located in the ID network, and is connected to the ID network communication end, and the access service node is configured to: receive an ID data packet sent by the ID network communication end, and parse the package into an ID encapsulation data packet. And forwarding the ID encapsulation data packet to the IGW, where the outer source address is the location identifier of the ID network communication end, and the outer destination address is used by the internet communication end and the ID a location identifier of the network interworking, the inner layer source address is an identity identifier of the ID network communication end, and the inner layer destination address is an identity identifier used by the internet communication end to communicate with the ID network;
  • the IGW is connected to the ASN, and the IGW is configured to: receive the ID encapsulated data packet, and parse the encapsulated into an IP data packet, where the source address in the IP data packet is the ID network communication end and the Internet interworking IP address, the destination address is an IP address of the Internet communication end; and is further configured to send the IP data packet to the Internet communication end by using the Internet;
  • the internet communication terminal is connected to the IGW through the internet, the internet communication The end is configured to: receive and process an IP data packet sent by the IGW;
  • the Internet communication terminal is further configured to: send an IP data packet to the IGW, where the source address in the sent IP data packet is an IP address of the Internet communication terminal, and the destination address is an IP address of the ID network communication terminal and the Internet interworking Address
  • the IGW is further configured to: receive an IP data packet sent by the Internet communication terminal, and parse the package ID encapsulation data packet, and forward the encapsulated ID encapsulation data packet to the ASN, and the ID encapsulation data of the IGW package
  • the outer source address is a location identifier used by the Internet communication end to communicate with the ID network
  • the outer destination address is a location identifier of the ID network communication end
  • the inner layer source address is used by the Internet communication terminal. ID of the ID network interworking;
  • the inner layer destination address is the identity of the ID network communication end;
  • the ASN is further configured to: receive the ID encapsulated data packet, and parse the encapsulated into an ID data packet, and send the data packet to the corresponding ID network communication end, where the source address is the identity of the Internet communication terminal An identifier, the destination address is an identity of the ID network in the ID network communication end;
  • the ID network communication end is further configured to: receive and process an ID data packet sent by the ASN.
  • the Internet communication terminal is a terminal or a service server of the Internet, and the ID network communication terminal is a service server or terminal of the ID network.
  • the identifier of the Internet communication end is an IPv4 address, an IPv6 address, or a long bit containing an IPv4 address of the Internet communication end;
  • the location identifier of the Internet communication end is an IPv4 of the Internet communication terminal in the Internet.
  • the IP address of the ID network communication end is an identity identification AID of the ID network communication end, an exclusive fixed public network IP address, or a shared A public network IP address that is dedicated to interworking.
  • the present invention also provides another network interworking implementation system, the system comprising:
  • the ID network communication end located in the ID network, has an identity indicating the identity, a location identifier indicating the location, and an IP address for implementing interworking, and is set as: generating and processing the ID data packet, The source address and the destination address in the ID data packet are represented by an identity identifier; and the ID data packet is used to communicate with the ID packet conversion device;
  • the ID packet conversion device is connected to the ID network communication end, and is configured to: implement bidirectional conversion and forwarding of the ID data packet and the ID encapsulation data packet, and the outer source address and the destination address of the ID encapsulation data packet are used.
  • the identifier indicates that the inner source address and the destination address are represented by an identity identifier;
  • the interworking packet conversion device is connected to the ID packet conversion device, and is configured to: implement bidirectional conversion and forwarding of the ID encapsulated data packet and the IP data packet, The source address and the destination address of the IP data packet are represented by an IP address; the IP data packet is used to communicate with the Internet communication terminal; and the Internet communication terminal is located at the Internet, and is connected to the interworking data packet conversion device.
  • the Internet communication terminal is a terminal or a service server of the Internet
  • the ID network communication terminal is a service server or terminal of the ID network.
  • the identifier of the Internet communication end is an IPv4 address, an IPv6 address, or a long bit containing an IPv4 address of the Internet communication end;
  • the location identifier of the Internet communication end is an IPv4 of the Internet communication terminal in the Internet.
  • the IP address of the ID network communication end is an identity identification AID of the ID network communication end, an exclusive fixed public network IP address, or a shared A public network IP address that is dedicated to interworking.
  • the method and system for realizing interworking between the ID network and the existing Internet (Legacy network) of the present invention realizes data of the Legacy network and the ID network by adding an interworking gateway with the bidirectional conversion and forwarding function of the interworking data packet between the ID network and the legacy network.
  • Interoperability which expands the scope of application of the service, and enables interworking between networks that use different identifiers to distinguish communication ends, including:
  • the terminal of the ID network can access various services of the existing network and communicate with the existing network terminal.
  • the ID network service is transplanted from the existing network, it can be accessed by the terminals in the existing network and the ID network.
  • the current network terminal can access the ID network without modification, and can use the existing network service and the service transplanted to the ID network.
  • FIG. 1 is a first schematic diagram of an ID network and a Legacy network interworking architecture according to the present invention
  • FIG. 2 is a second schematic diagram of an ID network and a Legacy network interworking architecture according to the present invention
  • FIG. 3 is a data flow diagram of an application example of an ID network terminal accessing a legacy network service
  • FIG. 4 is a data flow diagram of a Legacy network terminal accessing an ID architecture network service application example
  • FIG. 5 is a schematic diagram of interworking between the ID network and the Legacy network according to the present invention.
  • the interworking between the identity network and the traditional Internet means that the identity network terminal and the terminal of the traditional Internet can communicate with each other.
  • the identity network terminal can access the service provided by the traditional Internet, and the terminal of the traditional Internet can also access the service of the identity network.
  • the main difference between the identity identification network based on the location identity separation architecture (hereinafter referred to as the ID network) and the existing Internet (hereinafter referred to as the Legacy network) is the difference in the format and address of the data packet, and the implementation method of the ID network and the legacy network in the present invention.
  • the main idea is to add an interworking gateway between the identity identification network and the Internet, and the interworking gateway can complete the function of interworking data packet conversion, including address mapping processing, data packet format conversion and data packet forwarding, to realize ID network. Communication between the terminal or service server and the terminal or service server of the Legacy network.
  • the interworking architecture between the ID network and the Legacy network is shown in Figure 1, including:
  • the ID network communication end located in the ID network, has an identity indicating the identity, a location identifier indicating the location, and an IP address for implementing interworking, and is responsible for generating and processing the ID data packet, and using the ID data packet and the access service node ( Access Service Node (ASN) communication; the source and destination address of the ID data packet are represented by an identity; specific functions include:
  • the identifier is further configured to receive and process an ID data packet sent by the ASN, where the source address is an identity identifier of the Internet communication terminal, and the destination address is an identity identifier of the ID network in the ID network communication end; the access service node is located at the ID.
  • the network connected with the ID network communication end, is an access device of the ID network communication end, has an ID data packet conversion function, is responsible for realizing bidirectional conversion and forwarding of the ID data packet and the ID encapsulation data packet, and the outer layer of the ID encapsulation data packet
  • the source and destination addresses are represented by location identifiers, and the inner source and destination identifiers are represented by identities; specific functions include:
  • the outer source address is a location identifier of the ID network communication end
  • the outer destination address is a location identifier used by the Internet communication end to communicate with the ID network
  • the inner layer source address is an identity identifier of the ID network communication end
  • the inner layer The destination address is an identity identifier used by the Internet communication terminal to communicate with the ID network; and is further configured to receive the ID encapsulated data packet, and parse and encapsulate the data packet into an ID network communication end;
  • the IGW is connected to the access service node, and has an interworking data packet conversion function, and is responsible for implementing bidirectional conversion and forwarding of the ID encapsulated data packet and the IP data packet, where the source and destination addresses of the IP data packet are represented by an IP address; Specific features include:
  • the outer source address is a location identifier used by the Internet communication end to communicate with the ID network
  • the outer destination address is a location identifier of the ID network communication end
  • the inner layer source address is the Internet communication.
  • the Internet communication terminal is located on the Internet (not shown), is connected to the IGW, has an IP address, and an identity identifier for representing the interworking, a location identifier indicating the location, and is used for generating and processing the IP data packet. And using the IP data packet to communicate with the IGW; specific functions include:
  • the IGW Connecting to the IGW through the Internet, for receiving and processing an IP data packet sent by the IGW; and for transmitting an IP data packet to the IGW, where the source address is the Internet access
  • the IP address of the trusted end is the IP address of the ID network communication end and the Internet interworking.
  • the IGW In order to implement the conversion of the above interworking data packets, the IGW needs to query the mapping relationship between the AID, RID and IP address stored in the local or mapping server to perform address translation processing during packet conversion, and also needs to forward the converted data packet.
  • a border gateway (BG) connected to the IGW can be added at the boundary between the ID network and the Legacy network, and the BG is used to implement routing and forwarding of IP data packets, and the number of IGWs.
  • the location is configured according to the load sharing required for the intercommunication traffic and distribution. as shown in picture 2.
  • the encoding of the identity of the Legacy network service server or the terminal and the ID network interworking (AID) is determined by the ID network according to the terminal compatibility requirements and the ID network development stage, and may be the service server or the terminal public network IPv4 address in the Legacy network. It may be the service server or the terminal public network IPv6 address in the Legacy network, or the long-bit (more than 32-bit) number containing the service server of the Legacy network or the public network IPv4 address of the terminal.
  • the location identifier (referred to as RID) of the Legacy network service server or the terminal and the ID network interworking is determined according to the ID network development stage, and may be the service server or the terminal public network IPv4 address in the Legacy network, and may be the service server or the terminal public network in the Legacy network.
  • the IPv6 address may also be a long bit (more than 32 bits) containing the service server or the public network IPv4 address of the legacy network, or an address for forwarding the IGW.
  • the simpler method is that the AID, RID, and IP address of the Legacy network service server or terminal are the same, and the identification rule is used, that is, no additional allocation is needed, and the mapping relationship does not need to be saved.
  • the IP address that the ID service server or terminal uses to communicate with the Legacy network may be the ID AID of the ID network service server or the terminal, or may be an exclusive fixed public IP address, or may be shared and dedicated to the interworking public. Network IP address.
  • the service server in the present invention is a variety of computer terminals that can provide service access.
  • the access terminal is the terminal that accesses the service server.
  • the ID network communication end mentioned above is the service server or terminal of the ID network
  • the Internet communication end is the terminal or service server of the Internet.
  • the above interworking architecture can realize the ID network terminal and the Internet terminal, the ID network terminal and the Internet service.
  • the following describes the interworking method of the present invention by taking the network architecture shown in FIG. 2 as an example: Application Example 1
  • the packet processing process when the ID network terminal accesses the service server data stream in the Legacy network includes the following steps:
  • Step A The ID network terminal sends a data packet to the Legacy network, and the destination address is an AID of the service server of the Legacy network and the ID network, and the source address is the AID of the ID network terminal.
  • Step A2 The data packet of the ID network terminal accessing the Legacy network passes through the ASN, and the ASN converts the source address to the source RID, and the destination address is the RID address of the Legacy network service server and the ID network interworking; the inner layer source address is the ID network terminal.
  • AID the destination address is the encapsulated data packet of the AID of the Legacy network service server and the ID network interworking.
  • Step A3 When the data packet in step A2 is forwarded to the IGW through the route (the IGW can be selected according to the load sharing algorithm), the IGW removes the outer layer of the data packet, parses the inner layer AID, and obtains according to the existing mapping relationship. The IP address of the ID terminal and the legacy network and the IP address of the Legacy network service server. If it does not exist, the IP address of the network terminal is assigned to the ID terminal, and the mapping relationship is saved. The IGW reassembles the data packet into an IP address whose destination address is the Legacy network service server, and the source address is a data packet of the IP address of the ID terminal and the Legacy network interworking.
  • Steps A4 to A6 The IGW, the BG, and the Legacy network forward the reassembled uplink data packet in A3 to the corresponding service server according to the route.
  • the ID network terminal accesses the service server data flow in the Legacy network.
  • the processing of the packet when the Legacy network flows to the ID network side includes the following steps:
  • Step B1 to Step B3 The ID network terminal accesses the Legacy network to reply the downlink data packet to the IGW through the Legacy network and the BG;
  • the source address is the IP address of the service server in the Legacy network, and the destination address is the IP address of the ID network terminal and the Legacy network interworking. ;
  • Step B4 After the IGW, the AID and the RID of the Legacy network service server and the ID network terminal are obtained according to the IP address of the data packet; the IGW reassembles the data packet into an RID whose outer source address is the Legacy network service server and the ID network interworking.
  • the destination address is the RID of the ID network terminal; the inner layer source address is the AID of the Legacy network service server and the ID network interworking, and the inner layer destination address is the AID of the ID network access terminal;
  • Step B5 The data packet reconstructed in step B4 is routed to the ASN.
  • Step B6 The ASN removes the outer layer of the data packet, parses the AID of the inner layer, forms an AID whose destination address is the ID network terminal, and the source address is the AID packet of the Legacy network and the ID network interworking, and finds the data packet out. interface.
  • Step B7 According to the outgoing interface, send the data packet to the corresponding ID network terminal.
  • the packet processing process when the Legacy network access ID network downlinks (from the Legacy network to the ID network) in the ID network network includes the following steps:
  • Steps C1 ⁇ C2 Legacy Network Access ID Network Service Server Downstream Packets Pass
  • the Legacy network and the BG reach the IGW;
  • the source address is the IP address of the access terminal of the Legacy network, and the destination address is the IP address of the accessed service server and the ID network in the ID network;
  • Steps C3 to C5 The IGW queries the local mapping table according to the IP address, and obtains the corresponding AID and RID. If there is no corresponding mapping relationship in the local mapping, the mapping plane queries the corresponding mapping relationship.
  • Step C6 The IGW uses the mapping relationship according to the mapping relationship. It is converted into an encapsulated data packet in the ID network, and the outer source address is the RID of the Legacy network terminal and the ID network interworking, and the destination address is the RID of the ID network service server; the inner layer source address is the AID of the Legacy network terminal and the ID network interworking. The inner layer destination address is the AID of the ID network service server;
  • Step C7 When the data packet in the step C6 is forwarded to the ASN by the route, the ASN removes the outer layer of the data packet, parses the inner layer AID, and reorganizes to form an AID whose destination address is the ID network service service and the ID network interworking. The data packet with the address of the Legacy network terminal AID is queried to the outbound interface of the ID network service server.
  • Step C8 According to the outbound interface, the ASN forwards the data packet to the corresponding ID network service server.
  • Application example four
  • the processing of data packets when the service server data stream is uplinked from the ID network terminal to the Legacy network in the Legacy network access ID network includes the following steps:
  • Step D1 the uplink data packet replied by the Legacy network terminal accessing the ID network service server is sent to the ASN;
  • the outer source address is the RID of the service server, and the destination address is the RID of the Legacy network terminal and the ID network interworking;
  • the inner layer source address is The AID of the service server, and the destination address is the AID of the Legacy network terminal and the ID network interworking;
  • Step D3 When the data packet in step D2 is forwarded to the IGW through the route, the IGW removes the outer layer of the data packet, parses the AID of the inner layer, and obtains the interworking between the ID network service server corresponding to the AID and the legacy network according to the mapping. IP address, the IGW converts the data packet into the IP address of the Legacy network terminal, and the source address is the data packet of the IP address of the ID network service server and the Legacy network.
  • Steps D4 ⁇ D6 The IGW, BG, and Legacy networks forward the reassembled uplink data packets in D3 to the access terminals in the corresponding Legacy network according to the route.
  • the process of communicating with the Legacy network terminal by the ID network terminal is similar to the above process, and will not be described here.
  • the ID network communication end and the Internet communication end realize interworking through the ID data packet conversion device and the interworking data packet conversion device, and the ID network communication end is located in the ID network, and has an identity and representation indicating identity.
  • a location identifier of the location and an IP address for implementing interworking the Internet communication terminal, located on the Internet, having an IP address, and an identity identifier for indicating identity and a location identifier indicating the location, as shown in FIG. 5,
  • the implementation method of the identity identification network and the Internet intercommunication of the present invention includes:
  • Step 501 an ID data packet transmission step, where the ID data packet is transmitted between the ID network communication end and the ID data packet conversion device, and the source and destination addresses of the ID data packet are represented by an identity identifier.
  • Step 502 ID data packet conversion step, the ID data packet conversion device performs mutual conversion between the ID data packet and the ID encapsulated data packet, and the outer source and destination addresses of the ID encapsulated data packet are represented by location identifiers, and the inner layer The source and destination are represented by an identity;
  • Step 503 ID encapsulating the data packet transmission step, and the ID encapsulation data packet is transmitted between the ID data packet conversion device and the interworking data packet conversion device;
  • Step 504 The interworking data packet conversion step, the interworking data packet conversion device performs mutual conversion between the ID encapsulation data packet and the IP data packet, where the source and destination addresses of the IP data packet are represented by an IP address;
  • Step 505 IP data packet transmission step, wherein the IP data packet is transmitted between the interworking data packet conversion device and an Internet communication terminal.
  • the flow direction of the data packet determines the sequence of steps 501 to 505. If the data packet is sent from the ID network communication terminal to the Internet communication terminal, steps 501, 502, and 503 are sequentially performed. 504, 505; If the data packet is sent from the Internet communication terminal to the ID network communication terminal, steps 505, 504, 503, 502, and 501 are sequentially performed.
  • the method and system for realizing interworking between the ID network and the existing Internet (Legacy network) of the present invention realizes data of the Legacy network and the ID network by adding an interworking gateway with the bidirectional conversion and forwarding function of the interworking data packet between the ID network and the legacy network.
  • Interoperability which expands the scope of application of the service, and enables interworking between networks that use different identifiers to distinguish communication ends, including:
  • the terminal of the ID network can access various services of the existing network and communicate with the existing network terminal.
  • the service of the ID network if it is transplanted from the existing network, can be accessed by the terminals in the existing network and the ID network;
  • the existing network terminal can access the ID network without modification, and can use the existing network service and the service transplanted to the ID network.

Description

网络互通的实现方法和系统
技术领域
本发明涉及通信领域, 尤其是一种身份位置分离架构的身份标识网络与 互联网互通的实现方法和系统。
背景技术
互联网已经得到了广泛的应用, 取得了巨大的成功。 但由于互联网在网 络架构和协议设计上的缺陷, 使其使用过程中也存在很多问题。
主要有:
(一)安全性问题
1、 对个人用户来说, 主要是病毒、 木马、 网上欺诈、 隐私泄露等;
2、对网络运营商来说,主要是对路由器、域名系统( Domain Name System, DNS )服务器等设备的磁盘操作系统(Disk Operating System, DOS )攻击; 3、 对国家、 政府来说, 主要是谣言泛滥、 诽谤、 非法信息传播等;
4、对网络内容服务商( Internet Content Provider, ICP )来说,主要是 DOS 攻击、 盗版、 业务盗用、 业务仿冒等;
(二)移动性问题
网络互联协议 ( Internet Protocol , IP )设计之初, 针对的是固定不变的电 脑终端, 所以没有考虑对终端移动性的支持。 现在移动互联网已经成为重要 的发展方向, 对终端移动性的支持成为迫在眉睫的问题。
IP不支持移动性, 本质原因在于 IP地址包含了身份和位置双重属性。 到 了移动互联网, 终端位置的移动, 导致 IP地址必须变化, 否则没法路由; 而 IP 地址的变化会导致终端身份的变化, 传输控制协议 /用户数据包协议 断掉重连, 这对于很多应用程序来说是不能接受的。 所以传统的 IP对移动性 的支持存在着根本性的难题。 (三)路由表可扩展性问题
自互联网诞生以来, 骨干网路由器的路由条目数量就呈现迅速递增的态 势。 迄今, 路由表数量已经突破 30万条, 预计到 2020年, 路由表数量将突 破 200万条。
路由表过大的问题, 不仅使路由器的处理负担加重, 成本增加, 而且使 骨干网路由协议的收敛速度降低、 收敛频率增加, 使 IP网络更多地处于不稳 定状态之中。
这个问题也与 IP地址的身份位置双重属性有密切的关系。
关于互联网路由系统的可扩展性存在一个基本的假定: "地址按照拓朴 进行分配, 或者拓朴按照地址进行部署, 二者必选其一"。 这个假定由 Yakov Rekhter提出, 通常被称为 Rekhter 法则 ( Rekhter's Law ) 。
然而, IP地址的双重属性导致了传统互联网难以遵循 Rekhter 法则。 IP 地址的身份属性要求 IP地址基于终端所属的组织机构 (而不是网络拓朴)进 行分配, 而且这种分配要保持一定的稳定性, 不能经常改变; 而 IP地址的位 置属性要求 IP地址基于网络拓朴进行分配, 以便保证路由系统的可扩展性。 这样, IP地址的两种属性就产生了冲突, 最终引发了互联网路由系统的可扩 展问题。
(四)可运营管理的问题
互联网建设和管理的主体, 也已经不是教育科研单位, 而是电信运营商。 而传统的互联网, 并不具备运营管理的条件。
传统的 IP网络, 是把各个子网 "互联" 而成的, 讲究的是连通和路由。 传统 IP网络的每一个子网, 都分配一段独立的 IP地址, 有网关和掩码, 每 个网元都有一个 IP地址。 子网内部, 一般是一个共享式的二层网络, 通过 ARP协议实现 IP地址与 MAC地址的映射。 网络内部的任何两个主机都可以 互相访问, 不用通过网关。 只有访问外网才需要通过网关实现。
这样的网络是无法进行运营管理的。 因为:
对网络的访问没有控制, 任何一个主机, 经过恰当配置之后都可以接入 网络; 终端之间不隔离, 地址可仿冒, 互相可攻击;
既然网络的访问没有控制, 也就无法计费。
为此提出了身份标识网络(简称 ID网络)的实现, 其主要实现用户身份 和位置分离。 在身份标识网络中终端的位置信息只取决于它处于哪个边缘路 由器, 只要找到了终端所在的边缘路由器, 就可以根据 IP地址所具有的身份 属性找到该终端。 因此从理论上说, 非此路由器所在网段的终端移动到这里, 也不用更换其身份属性, 只要把其位置属性修改到这个路由器就可以了。
身份标识网络中保留了运营商 IP网络的优势, 如: 边缘路由器(身份标 识网络中称为接入业务节点 (Access Service Node, 简称 ASN ) )与终端间 有点到点的连接; 同一个 ASN下的终端相互隔离, 只能通过 ASN互通; 用 户接入 ASN需经过身份认证; ASN对终端上行的数据包进行源地址验证。
同时, 身份标识网络实现了终端身份、 位置的分离, 具体机制: 以终端 所在的 ASN的 IP地址作为终端的位置标识, 称为终端的路由识别 ( Routing Identifier, RID ); 引入一个新的命名空间作为终端的身份标识, 成为终端的 身份识别 (Access Identifier, AID ); 终端只感知自身的 AID, 以及通信对端 的 AID,不感知 RID信息;所有的上层连接均基于 AID来建立,即用 TCP/AID、 UDP/AID代替 TCP/IP、 UDP/IP; 引入映射服务器存放终端 AID-RID的映射 信息, 终端移动, 只需要更新 AID-RID的映射, 不用改变自身的 AID, 所以 终端移动对业务连接没有影响。
基于身份标识网络的建设、 推广、 普及需要一段较长的时间, 身份标识 网络与传统互联网在较长的时期内将同时存在。所以两个网络需要进行互通。
发明内容
本发明要解决的技术问题是提供一种身份标识网络与互联网互通的实现 方法和系统, 以实现身份标识网络与互联网的互通。
为解决以上技术问题, 本发明提供了一种网络互通方法, 该方法包括: 身份标识网络(ID网络)通信端向互联网通信端发送数据包的步骤, 所述 ID 网络通信端向互联网通信端发送数据包的步骤包括: 所述 ID网络通信端向 ID网络的接入业务节点 ( ASN )发送 ID数据包 , 所述 ID数据包中源地址为 ID网络通信端的身份标识, 目的地址为互联网通 信端用来与 ID网络互通的身份标识;
所述 ASN接收所述 ID数据包,解析后封装为 ID封装数据包后发送给互 通网关 (IGW ) , 所述 ID封装数据包中, 外层源地址为 ID网络通信端的位 置标识, 外层目的地址为互联网通信端用来与 ID网络互通的位置标识, 内层 源地址为 ID网络通信端的身份标识,内层目的地址为互联网通信端用来与 ID 网络互通的身份标识;
所述 IGW接收所述 ID封装数据包后, 解析后封装为 IP数据包, 所述 IP 数据包中源地址为 ID网络通信端用来与互联网互通的 IP地址, 目的地址为 互联网通信端的 IP地址; 以及
所述 IGW通过路由将所述 IP数据包发送给所述互联网通信端; 从而实现身份标识网络与互联网互通。
所述方法还包括:所述互联网通信端向所述 ID网络通信端发送数据包的 步骤,
所述互联网通信端向所述 ID网络通信端发送数据包的步骤包括: 所述 IGW接收所述互联网通信端发送的 IP数据包, 所述 IP数据包中源 地址为所述互联网通信端的 IP地址, 目的地址为所述 ID网络通信端用来与 互联网互通的 IP地址;
所述 IGW解析所述 IP数据包并封装为 ID封装数据包后发送给所述
ASN, 所述 IGW封装的 ID封装数据包中, 外层源地址为所述互联网通信端 用来与 ID网络互通的位置标识, 外层目的地址为所述 ID网络通信端的位置 标识, 内层源地址为所述互联网通信端用来与 ID网络互通的身份标识, 内层 目的地址为所述 ID网络通信端的身份标识;
所述 ASN解封装所述 IGW封装的 ID封装数据包为 ID数据包, 所解封 的 ID数据包中源地址为所述互联网通信端用来与 ID网络互通的身份标识, 目的地址为所述 ID网络通信端的身份标识; 以及
所述 ASN通过路由将所述 ASN解封的 ID数据包发送给所述 ID网络通 信端。
所述互联网通信端是所述互联网的终端或业务服务器,所述 ID网络通信 端是所述 ID网络的业务服务器或终端。
所述互联网通信端的身份标识是所述互联网通信端在所述互联网的 IPv4 地址、 IPv6地址或含有 IPv4地址的长位; 所述互联网通信端的位置标识是所 述互联网通信端在所述互联网的 IPv4地址、 IPv6地址、 含有 IPv4地址的长 位或所述 IGW的位置标识; 所述 ID网络通信端的 IP地址是所述 ID网络通 信端的身份识别 AID、独享的固定的公网 IP地址或共享的专用于互通的公网 IP地址。
为解决以上技术问题, 本发明还提供了另一种网络互通的实现方法, 身 份标识网络(ID网络)通信端与互联网通信端通过 ID数据包转换设备、 互 通数据包转换设备实现互通, 所述 ID网络通信端, 位于 ID网络, 具有表示 身份的身份标识、 表示位置的位置标识以及用于实现互通的 IP地址; 所述互 联网通信端, 位于互联网, 具有 IP地址, 以及用于实现互通的表示身份的身 份标识、 表示位置的位置标识, 所述方法包括:
ID数据包传输步骤, ID数据包在 ID网络通信端与 ID数据包转换设备间 传输, 所述 ID数据包的源地址和目的地址釆用身份标识表示;
ID数据包转换步骤, ID数据包转换设备进行 ID数据包和 ID封装数据包 之间的相互转换,所述 ID封装数据包的外层源地址和目的地址釆用位置标识 表示, 内层源地址和目的地址釆用身份标识表示;
ID封装数据包传输步骤, ID封装数据包在 ID数据包转换设备与互通数 据包转换设备间传输;
互通数据包转换步骤,所述互通数据包转换设备进行 ID封装数据包与 IP 数据包之间的相互转换, 所述 IP数据包的源地址和目的地址釆用 IP地址表 示; 以及
IP数据包传输步骤,所述 IP数据包在所述互通数据包转换设备与互联网 通信端之间传输; 从而实现身份标识网络与互联网互通。
所述互联网通信端是所述互联网的终端或业务服务器,所述 ID网络通信 端是所述 ID网络的业务服务器或终端。
所述互联网通信端的身份标识是所述互联网通信端在所述互联网的 IPv4 地址、 IPv6地址或含有 IPv4地址的长位; 所述互联网通信端的位置标识是所 述互联网通信端在所述互联网的 IPv4地址、 IPv6地址、 含有 IPv4地址的长 位或所述 IGW的位置标识; 所述 ID网络通信端的 IP地址是所述 ID网络通 信端的身份识别 AID、独享的固定的公网 IP地址或共享的专用于互通的公网 IP地址。
为解决以上技术问题, 本发明还提供了一种网络互通的实现系统, 该系 统包括互联网通信端、 互通网关 (IGW ) 、 接入业务节点 (ASN )及身份标 识(ID ) 网络通信端, 其中,
所述 ID网络通信端, 位于 ID网络, 设置为: 向所述 ASN发送 ID数据 包, 所述 ID数据包中源地址为所述 ID网络通信端的身份标识, 目的地址为 所述互联网通信端用来与 ID网络互通的身份标识;
所述接入业务节点, 位于 ID网络, 与所述 ID网络通信端连接, 所述接 入业务节点设置为: 接收所述 ID网络通信端发送的 ID数据包, 以及解析封 装为 ID封装数据包并将所述 ID封装数据包转发给所述 IGW, 所述 ID封装 数据包中, 外层源地址为所述 ID网络通信端的位置标识, 外层目的地址为所 述互联网通信端用来与 ID网络互通的位置标识, 内层源地址为所述 ID网络 通信端的身份标识,内层目的地址为所述互联网通信端用来与 ID网络互通的 身份标识;
所述 IGW, 与所述 ASN连接, 所述 IGW设置为: 接收所述 ID封装数 据包, 以及解析封装为 IP数据包, 所述 IP数据包中源地址为所述 ID网络通 信端和互联网互通的 IP地址, 目的地址为所述互联网通信端的 IP地址; 还 用于通过所述互联网将所述 IP数据包发送给所述互联网通信端;
所述互联网通信端, 通过所述互联网与所述 IGW连接, 所述互联网通信 端设置为: 接收并处理所述 IGW发送的 IP数据包;
从而实现身份标识网络与互联网互通。
所述互联网通信端还设置为: 向所述 IGW发送 IP数据包, 所发送的 IP 数据包中源地址为所述互联网通信端的 IP地址, 目的地址为所述 ID网络通 信端和互联网互通的 IP地址;
所述 IGW还设置为: 接收所述互联网通信端发送的 IP数据包, 以及解 析封装 ID封装数据包 , 并将所封装的 ID封装数据包转发给所述 ASN, 所述 IGW封装的 ID封装数据包中, 外层源地址为所述互联网通信端用来与 ID网 络互通的位置标识, 外层目的地址为所述 ID网络通信端的位置标识, 内层源 地址为所述互联网通信端用来与 ID网络互通的身份标识; 内层目的地址为所 述 ID网络通信端的身份标识;
所述 ASN还设置为: 接收所述 ID封装数据包, 以及解析封装为 ID数据 包, 并发送给对应的 ID网络通信端, 所封装的 ID数据包中, 源地址为所述 互联网通信端的身份标识, 目的地址为所述 ID网络通信端的在 ID网络的身 份标识;
所述 ID网络通信端还设置为: 接收并处理所述 ASN发送的 ID数据包。 所述互联网通信端是所述互联网的终端或业务服务器,所述 ID网络通信 端是所述 ID网络的业务服务器或终端。
所述互联网通信端的身份标识是所述互联网通信端在所述互联网的 IPv4 地址、 IPv6地址或含有 IPv4地址的长位; 所述互联网通信端的位置标识是所 述互联网通信端在所述互联网的 IPv4地址、 IPv6地址、 含有 IPv4地址的长 位或所述 IGW的位置标识; 所述 ID网络通信端的 IP地址是所述 ID网络通 信端的身份识别 AID、独享的固定的公网 IP地址或共享的专用于互通的公网 IP地址。
为解决以上技术问题, 本发明还提供了另一种网络互通的实现系统, 该 系统包括:
ID网络通信端, 位于 ID网络, 具有表示身份的身份标识、 表示位置的 位置标识以及用于实现互通的 IP地址, 设置为: 生成及处理 ID数据包, 所 述 ID数据包中源地址和目的地址釆用身份标识表示; 釆用所述 ID数据包与 ID数据包转换设备通信;
ID数据包转换设备, 与所述 ID网络通信端连接, 设置为: 实现 ID数据 包和 ID封装数据包的双向转换及转发, 所述 ID封装数据包的外层源地址和 目的地址釆用位置标识表示, 内层源地址和目的地址釆用身份标识表示; 互通数据包转换设备,与所述 ID数据包转换设备连接,设置为: 实现 ID 封装数据包与 IP数据包的双向转换及转发, 所述 IP数据包的源地址和目的 地址釆用 IP地址表示; 釆用所述 IP数据包与所述互联网通信端通信; 以及 互联网通信端, 位于互联网, 与所述互通数据包转换设备连接, 具有 IP 地址以及用于实现互通的表示身份的身份标识、 表示位置的位置标识, 设置 为: 生成及处理所述 IP数据包;
从而实现身份标识网络与互联网互通。
所述互联网通信端是所述互联网的终端或业务服务器,所述 ID网络通信 端是所述 ID网络的业务服务器或终端。
所述互联网通信端的身份标识是所述互联网通信端在所述互联网的 IPv4 地址、 IPv6地址或含有 IPv4地址的长位; 所述互联网通信端的位置标识是所 述互联网通信端在所述互联网的 IPv4地址、 IPv6地址、 含有 IPv4地址的长 位或所述 IGW的位置标识; 所述 ID网络通信端的 IP地址是所述 ID网络通 信端的身份识别 AID、独享的固定的公网 IP地址或共享的专用于互通的公网 IP地址。
本发明 ID网络和现有互联网(Legacy网络)实现互通的方法和系统, 通 过在 ID网络和 Legacy网络之间增设具有互通数据包双向转换转发功能的互 通网关, 实现了 Legacy网络和 ID网络的数据互通, 扩大了业务的适用范围, 使釆用不同标识区分通信端的网络间实现了互通, 具体包括:
ID网络的终端能够访问现网的各种业务, 与现网终端互通;
ID网络的业务, 如果是从现网移植过来的, 能被现网和 ID网络中终端 共同访问; 现网终端可以不加修改,接入 ID网络,能够使用现网业务以及移植到 ID 网络的业务。
附图概述
图 1 为本发明 ID网络和 Legacy网络互通架构的第一示意图;
图 2为本发明 ID网络和 Legacy网络互通架构的第二示意图;
图 3为 ID网络终端访问 Legacy网络业务应用实例的数据流程图; 图 4 为 Legacy网络终端访问 ID架构网络业务应用实例的数据流程图; 图 5为本发明 ID网络和 Legacy网络实现互通的示意图。
本发明的较佳实施方式
身份标识网络与传统互联网的互通, 意指身份标识网络终端与传统互联 网的终端可以相互通信。身份标识网络终端可以访问传统互联网提供的服务, 传统互联网的终端也可以访问身份标识网络的服务。 但目前还没有完善的互 通方案来解决这一问题。
基于位置身份分离架构的身份标识网络(以下简称 ID网)和现有互联网 (以下简称 Legacy网络)的主要差异在于数据包的格式和地址的不同, 本发 明 ID网络与 Legacy网络互通的实现方法的主要思想是, 在身份标识网络和 互联网之间增设互通网关, 由互通网关来完成互通数据包转换的功能, 包括 地址的映射处理、数据包格式的转换及数据包的转发, 以实现 ID网络的终端 或业务服务器与 Legacy网的终端或业务服务器之间的通信。
ID网络与 Legacy网的互通架构如图 1所示, 包括:
ID网络通信端, 位于 ID网络, 具有表示身份的身份标识、 表示位置的 位置标识以及用于实现互通的 IP地址, 负责生成、 处理 ID数据包, 以及釆 用 ID数据包与接入业务节点(Access Service Node, ASN )通信; ID数据包 的源、 目的地址釆用身份标识表示; 具体功能包括:
用于向所述接入业务节点发送 ID数据包, 其中, 源地址为所述 ID网络 通信端的身份标识, 目的地址为所述互联网通信端用来与 ID网络互通的身份 标识; 还用于接收并处理 ASN发送的 ID数据包, 其中源地址为所述互联网 通信端的身份标识,目的地址为所述 ID网络通信端的在 ID网络的身份标识; 接入业务节点, 位于 ID网络, 与所述 ID网络通信端连接, 是 ID网络 通信端的接入设备,具有 ID数据包转换功能, 负责实现 ID数据包和 ID封装 数据包的双向转换及转发, ID封装数据包的外层源、 目的地址釆用位置标识 表示, 内层源、 目的釆用身份标识表示; 具体功能包括:
用于接收 ID网络通信端发送的 ID数据包,以及解析封装为 ID封装数据 包并将所述 ID封装数据包转发给互通网关( Interworking Gateway, 以下简称 IGW ) ; 所述 ID封装数据包中, 外层源地址为所述 ID网络通信端的位置标 识, 外层目的地址为所述互联网通信端用来与 ID网络互通的位置标识, 内层 源地址为所述 ID网络通信端的身份标识,内层目的地址为所述互联网通信端 用来与 ID网络互通的身份标识; 还用于接收所述 ID封装数据包, 以及解析 封装为 ID数据包并发送给所述 ID网络通信端;
IGW, 与所述接入业务节点连接, 具有互通数据包转换功能, 负责实现 ID封装数据包与 IP数据包的双向转换及转发, 所述 IP数据包的源、 目的地 址釆用 IP地址表示; 具体功能包括:
用于接收所述 ID封装数据包, 以及解析封装为 IP数据包并通过所述互 联网将所述 IP数据包发送给所述互联网通信端, IP数据包中源地址为所述 ID 网络通信端和互联网互通的 IP地址, 目的地址为所述互联网通信端的 IP地 址; 还用于接收所述 IP数据包, 以及解析封装 ID封装数据包, 并将所述 ID 封装数据包转发给所述 ASN, 所述 ID封装数据包中, 外层源地址为所述互 联网通信端用来与 ID网络互通的位置标识, 外层目的地址为所述 ID网络通 信端的位置标识,内层源地址为所述互联网通信端用来与 ID网络互通的身份 标识; 内层目的地址为所述 ID网络通信端的身份标识;
所述互联网通信端, 位于互联网 (图未示) , 与 IGW连接, 具有 IP地 址, 以及用于实现互通的表示身份的身份标识、 表示位置的位置标识, 用于 生成及处理所述 IP数据包, 以及釆用所述 IP数据包与 IGW通信; 具体功能 包括:
通过所述互联网与所述 IGW连接, 用于接收并处理所述 IGW发送的 IP 数据包; 还用于向所述 IGW发送 IP数据包, 其中, 源地址为所述互联网通 信端的 IP地址, 目的地址为所述 ID网络通信端和互联网互通的 IP地址。
为了实现以上互通数据包的转换, IGW需要查询本地或映射服务器中保 存的 AID、 RID和 IP地址的映射关系,以进行数据包转换时的地址转换处理, 还需要将转换后的数据包进行转发, 为了减轻 IGW的负担, 具体实现时, 可 以在 ID网和 Legacy网络的边界增设与 IGW连接的边界网关( border gateway, 简称 BG ) , 由 BG来实现 IP数据包的路由和转发, IGW的数量和位置根据 互通的流量和分布所需要的负荷分担进行配置。 如图 2所示。
Legacy网络业务服务器或终端和 ID网络互通的身份标识 (简称 AID )的 编码由 ID网络根据对终端兼容性要求、 ID网络发展阶段而定,可以是 Legacy 网络中业务服务器或终端公网 IPv4地址, 可以是 Legacy网络中业务服务器 或终端公网 IPv6地址, 也可以是含有 Legacy网络中业务服务器或终端公网 IPv4地址的长位(超过 32位)编号。
Legacy网络业务服务器或终端和 ID网络互通的位置标识 (简称 RID )根 据 ID网络发展阶段而定, 可以是 Legacy网络中业务服务器或终端公网 IPv4 地址, 可以是 Legacy网络中业务服务器或终端公网 IPv6地址, 也可以是含 有 Legacy网络中业务服务器或终端公网 IPv4地址的长位(超过 32位 )编号, 也可以是转发 IGW的地址。 比较简单的做法是, Legacy网络业务服务器或终 端的 AID、 RID及 IP地址是相同的, 釆用该标识规则, 即不需要另外分配, 也无需保存该映射关系。
ID业务服务器或终端用来和 Legacy网络互通的 IP地址可以是 ID网业务 服务器或终端的身份识别 AID, 也可以是独享的固定的公网 IP地址, 也可以 是共享的专用于互通的公网 IP地址。 本发明中的业务服务器是可以提供业务访问的各种计算机终端。 访问终 端是访问业务服务器的终端。
以上所说的 ID网络通信端是所述 ID网络的业务服务器或终端, 互联网 通信端是所述互联网的终端或业务服务器,以上互通架构可以实现 ID网络终 端与互联网终端, ID网络终端与互联网业务服务器, 互联网终端与 ID网络 终端, 以及互联网终端与 ID网络业务服务器之间的通信。 以下以图 2所示的网络架构为例, 对本发明互通方法进行详细说明: 应用实例一
如图 3所示, ID网终端访问 Legacy网络中业务服务器数据流上行(从 ID网络端流向 Legacy网络) 时的数据包处理过程包括如下步骤:
步骤 Al : ID网终端发送访问 Legacy网络的数据包,其目的地址为 Legacy 网络的业务服务器和 ID网络互通的 AID, 源地址为 ID网终端的 AID。
步骤 A2: ID网终端访问 Legacy网络的数据包经过 ASN, ASN转换成为 外层源地址为源 RID, 目的地址为 Legacy网络业务服务器和 ID网络互通的 RID地址; 内层源地址为 ID网终端的 AID , 目的地址为 Legacy网络业务服 务器和 ID网络互通的 AID的封装数据包。
步骤 A3: 步骤 A2中的数据包经过路由转发到 IGW (该 IGW可以根据 负荷分担算法选择)时, IGW把该数据包的外层封装去掉, 解析内层的 AID, 根据已存在的映射关系获得 ID终端和 Legacy网络互通的 IP地址以及 Legacy 网络业务月良务器的 IP地址, 如不存在则为 ID终端分配网络互通的 IP地址, 并保存映射关系。 IGW上把数据包重组成为目的地址为 Legacy网络业务服务 器的 IP地址, 源地址为 ID终端和 Legacy网络互通的 IP地址的数据包。
步骤 A4〜步骤 A6: IGW、 BG、 Legacy网络中根据路由转发 A3中重组 后的上行数据包到相应的业务服务器。
应用实例二 如图 3所示, ID网终端访问 Legacy网络中业务服务器数据流下行(从
Legacy网络流向 ID网络端 ) 时的数据包的处理过程包括以下步骤:
步骤 B1〜步骤 B3: ID 网终端访问 Legacy 网络回复下行数据包经过 Legacy网络、 BG到达 IGW; 其源地址为 Legacy网络中业务服务器的 IP地 址, 目的地址为 ID网络终端和 Legacy网络互通的 IP地址;
步骤 B4: 经过 IGW, 根据数据包的 IP地址, 查询得到 Legacy网络业务 服务器及 ID 网络终端的 AID和 RID; IGW将数据包重组为外层源地址为 Legacy网络业务服务器和 ID网络互通的 RID,目的地址为 ID网终端的 RID; 内层源地址为 Legacy网络业务服务器和 ID网络互通的 AID, 内层目的地址 为 ID网络访问终端的 AID; 步骤 B5: 为步骤 B 4中重组的数据包经路由转发到 ASN。
步骤 B6: ASN把该数据包的外层封装去掉, 解析内层的 AID, 形成目的 地址为 ID网络终端的 AID,源地址为 Legacy网络和 ID网络互通的 AID的数 据包, 查找数据包的出接口。
步骤 B7: 根据出接口, 将数据包发向相应的 ID网络终端。
应用实例三
如图 4所示, Legacy网络访问 ID网络中业务服务器数据流下行(从 Legacy 网络流向 ID网络) 时的数据包处理过程包括如下步骤:
步骤 C1 ~ C2: Legacy 网络访问 ID 网业务服务器的下行数据包经过
Legacy网络、 BG到达 IGW; 其源地址为 Legacy网络的访问终端的 IP地址, 目的地址为 ID网中被访问业务服务器和 ID网络互通的 IP地址;
步骤 C3 ~ C5: IGW根据 IP地址查询本地映射表, 获得对应的 AID及 RID如本地映射中不存在相应映射关系,则去映射平面查询相应的映射关系; 步骤 C6: IGW根据映射关系将数据包转换成为 ID网络中的封装数据包, 其外层源地址为 Legacy网络终端和 ID网络互通的 RID, 目的地址为 ID网业 务服务器的 RID; 内层源地址为 Legacy网络终端和 ID网络互通的 AID, 内 层目的地址为 ID网业务服务器的 AID;
步骤 C7: 步骤 C6中的数据包经路由转发到 ASN时, ASN把该数据包 的外层封装去掉, 解析内层的 AID, 重组形成目的地址为 ID网络业务服务和 ID网络互通的 AID, 源地址为 Legacy网络终端 AID的数据包, 查询通往 ID 网络业务服务器出接口。
步骤 C8:根据出接口, ASN将数据包转发到相应的 ID网络业务服务器。 应用实例四
如图 4所示, Legacy网络访问 ID网络中业务服务器数据流上行(从 ID 网络终端流向 Legacy网络) 时的数据包的处理过程包括以下步骤:
步骤 Dl : Legacy网终端访问 ID网络业务服务器回复的上行数据包发向 ASN; 步骤 D2: ASN将上行数据包转换成为 ID网络的封装数据包,发向 IGW; 其外层源地址为业务服务器的 RID, 目的地址为 Legacy网络终端和 ID网络 互通的 RID; 内层源地址为业务服务器的 AID, 目的地址为 Legacy网络终端 和 ID网络互通的 AID;
步骤 D3: 步骤 D2中的数据包经过路由转发到 IGW时, IGW把该数据 包的外层封装去掉, 解析内层的 AID, 根据映射获得和该 AID对应的 ID网 业务服务器和 Legacy网络互通的 IP地址, IGW上把数据包转换成为目的地 址为 Legacy网络终端的 IP地址,源地址为 ID网业务服务器和 Legacy网络互 通的 IP地址的数据包。
步骤 D4 ~ D6: IGW、 BG、 Legacy网络中根据路由转发 D3中重组后的 上行数据包到相应的 Legacy网络中的访问终端。
ID网络终端与 Legacy网络终端进行通信的过程与以上流程类似,在此不 再赘述。
根据以上描述和说明,可以看出, ID网络通信端与互联网通信端通过 ID 数据包转换设备、 互通数据包转换设备实现互通, ID 网络通信端, 位于 ID 网络, 具有表示身份的身份标识、 表示位置的位置标识以及用于实现互通的 IP地址; 所述互联网通信端, 位于互联网, 具有 IP地址, 以及用于实现互通 的表示身份的身份标识、 表示位置的位置标识, 如图 5所示, 本发明身份标 识网络与互联网互通的实现方法包括:
步骤 501 : ID数据包传输步骤, ID数据包在 ID网络通信端与 ID数据包 转换设备间传输, 所述 ID数据包的源、 目的地址釆用身份标识表示;
步骤 502: ID数据包转换步骤, ID数据包转换设备进行 ID数据包和 ID 封装数据包之间的相互转换, 所述 ID封装数据包的外层源、 目的地址釆用位 置标识表示, 内层源、 目的釆用身份标识表示;
步骤 503: ID封装数据包传输步骤, ID封装数据包在 ID数据包转换设 备与互通数据包转换设备间传输;
步骤 504: 互通数据包转换步骤, 所述互通数据包转换设备进行 ID封装 数据包与 IP数据包之间的相互转换, 所述 IP数据包的源、 目的地址釆用 IP 地址表示; 步骤 505: IP数据包传输步骤, 所述 IP数据包在所述互通数据包转换设 备与互联网通信端之间传输。
根据图 3和图 4的流程不难看出, 数据包的流向决定了步骤 501至 505 的先后顺序, 若数据包从 ID网络通信端向互联网通信端发送, 则依次执行步 骤 501、 502、 503、 504、 505; 若数据包从互联网通信端向 ID网络通信端发 送, 则依次执行步骤 505、 504、 503、 502、 501。
以上所述仅为本发明的实施例而已, 并不用于限制本发明, 对于本领域 的技术人员来说, 本发明可以有各种更改和变化。 凡在本发明的精神和原则 之内, 所作的任何修改、 等同替换、 改进等, 均应包含在本发明的权利要求 范围之内。
工业实用性
本发明 ID网络和现有互联网(Legacy网络)实现互通的方法和系统, 通 过在 ID网络和 Legacy网络之间增设具有互通数据包双向转换转发功能的互 通网关, 实现了 Legacy网络和 ID网络的数据互通, 扩大了业务的适用范围, 使釆用不同标识区分通信端的网络间实现了互通, 具体包括:
ID网络的终端能够访问现网的各种业务, 与现网终端互通;
ID网络的业务, 如果是从现网移植过来的, 能被现网和 ID网络中终端 共同访问;
现网终端可以不加修改,接入 ID网络,能够使用现网业务以及移植到 ID 网络的业务。

Claims

权 利 要 求 书
1、 一种网络互通方法, 该方法包括: 身份标识网络(ID 网络)通信端 向互联网通信端发送数据包的步骤,
所述 ID网络通信端向互联网通信端发送数据包的步骤包括:
所述 ID网络通信端向 ID网络的接入业务节点 ( ASN )发送 ID数据包, 所述 ID数据包中源地址为 ID网络通信端的身份标识, 目的地址为互联网通 信端用来与 ID网络互通的身份标识;
所述 ASN接收所述 ID数据包,解析后封装为 ID封装数据包后发送给互 通网关 (IGW ) , 所述 ID封装数据包中, 外层源地址为 ID网络通信端的位 置标识, 外层目的地址为互联网通信端用来与 ID网络互通的位置标识, 内层 源地址为 ID网络通信端的身份标识,内层目的地址为互联网通信端用来与 ID 网络互通的身份标识;
所述 IGW接收所述 ID封装数据包后, 解析后封装为 IP数据包, 所述 IP 数据包中源地址为 ID网络通信端用来与互联网互通的 IP地址, 目的地址为 互联网通信端的 IP地址; 以及
所述 IGW通过路由将所述 IP数据包发送给所述互联网通信端; 从而实现身份标识网络与互联网互通。
2、 如权利要求 1所述的方法, 所述方法还包括: 所述互联网通信端向所 述 ID网络通信端发送数据包的步骤,
所述互联网通信端向所述 ID网络通信端发送数据包的步骤包括: 所述 IGW接收所述互联网通信端发送的 IP数据包, 所述 IP数据包中源 地址为所述互联网通信端的 IP地址, 目的地址为所述 ID网络通信端用来与 互联网互通的 IP地址;
所述 IGW解析所述 IP数据包并封装为 ID封装数据包后发送给所述 ASN, 所述 IGW封装的 ID封装数据包中, 外层源地址为所述互联网通信端 用来与 ID网络互通的位置标识, 外层目的地址为所述 ID网络通信端的位置 标识, 内层源地址为所述互联网通信端用来与 ID网络互通的身份标识, 内层 目的地址为所述 ID网络通信端的身份标识;
所述 ASN解封装所述 IGW封装的 ID封装数据包为 ID数据包, 所解封 的 ID数据包中源地址为所述互联网通信端用来与 ID网络互通的身份标识, 目的地址为所述 ID网络通信端的身份标识; 以及
所述 ASN通过路由将所述 ASN解封的 ID数据包发送给所述 ID网络通 信端。
3、 如权利要求 1或 2所述的方法, 其中, 所述互联网通信端是所述互联 网的终端或业务服务器, 所述 ID网络通信端是所述 ID网络的业务服务器或 终端。
4、 如权利要求 1或 2所述的方法, 其中, 所述互联网通信端的身份标识 是所述互联网通信端在所述互联网的 IPv4地址、 IPv6地址或含有 IPv4地址 的长位; 所述互联网通信端的位置标识是所述互联网通信端在所述互联网的 IPv4地址、 IPv6地址、 含有 IPv4地址的长位或所述 IGW的位置标识; 所述 ID网络通信端的 IP地址是所述 ID网络通信端的身份识别 AID、 独享的固定 的公网 IP地址或共享的专用于互通的公网 IP地址。
5、 一种网络互通的实现方法, 其特征在于, 身份标识网络(ID 网络) 通信端与互联网通信端通过 ID数据包转换设备、互通数据包转换设备实现互 通, 所述 ID网络通信端, 位于 ID网络, 具有表示身份的身份标识、 表示位 置的位置标识以及用于实现互通的 IP地址;所述互联网通信端,位于互联网, 具有 IP地址, 以及用于实现互通的表示身份的身份标识、 表示位置的位置标 识, 所述方法包括:
ID数据包传输步骤, ID数据包在 ID网络通信端与 ID数据包转换设备间 传输, 所述 ID数据包的源地址和目的地址釆用身份标识表示;
ID数据包转换步骤, ID数据包转换设备进行 ID数据包和 ID封装数据包 之间的相互转换,所述 ID封装数据包的外层源地址和目的地址釆用位置标识 表示, 内层源地址和目的地址釆用身份标识表示;
ID封装数据包传输步骤, ID封装数据包在 ID数据包转换设备与互通数 据包转换设备间传输; 互通数据包转换步骤,所述互通数据包转换设备进行 ID封装数据包与 IP 数据包之间的相互转换, 所述 IP数据包的源地址和目的地址釆用 IP地址表 示; 以及
IP数据包传输步骤,所述 IP数据包在所述互通数据包转换设备与互联网 通信端之间传输;
从而实现身份标识网络与互联网互通。
6、 如权利要求 5所述的方法, 其中, 所述互联网通信端是所述互联网的 终端或业务服务器,所述 ID网络通信端是所述 ID网络的业务服务器或终端。
7、 如权利要求 5所述的方法, 其中, 所述互联网通信端的身份标识是所 述互联网通信端在所述互联网的 IPv4地址、 IPv6地址或含有 IPv4地址的长 位; 所述互联网通信端的位置标识是所述互联网通信端在所述互联网的 IPv4 地址、 IPv6地址、 含有 IPv4地址的长位或所述 IGW的位置标识; 所述 ID网 络通信端的 IP地址是所述 ID网络通信端的身份识别(AID )、独享的固定的 公网 IP地址或共享的专用于互通的公网 IP地址。
8、 一种网络互通的实现系统, 该系统包括互联网通信端、 互通网关
( IGW ) 、 接入业务节点 (ASN )及身份标识(ID ) 网络通信端, 其中, 所述 ID网络通信端, 位于 ID网络, 设置为: 向所述 ASN发送 ID数据 包, 所述 ID数据包中源地址为所述 ID网络通信端的身份标识, 目的地址为 所述互联网通信端用来与 ID网络互通的身份标识;
所述接入业务节点, 位于 ID网络, 与所述 ID网络通信端连接, 所述接 入业务节点设置为: 接收所述 ID网络通信端发送的 ID数据包, 以及解析封 装为 ID封装数据包并将所述 ID封装数据包转发给所述 IGW, 所述 ID封装 数据包中外层源地址为所述 ID网络通信端的位置标识,外层目的地址为所述 互联网通信端用来与 ID网络互通的位置标识, 内层源地址为所述 ID网络通 信端的身份标识,内层目的地址为所述互联网通信端用来与 ID网络互通的身 份标识;
所述 IGW, 与所述 ASN连接, 所述 IGW设置为: 接收所述 ID封装数 据包, 以及解析封装为 IP数据包, 所述 IP数据包中源地址为所述 ID网络通 信端和互联网互通的 IP地址, 目的地址为所述互联网通信端的 IP地址; 通 过所述互联网将所述 IP数据包发送给所述互联网通信端;
所述互联网通信端, 通过所述互联网与所述 IGW连接, 所述互联网通信 端设置为: 接收并处理所述 IGW发送的 IP数据包;
从而实现身份标识网络与互联网互通。
9、 如权利要求 8所述的系统, 其中,
所述互联网通信端还设置为: 向所述 IGW发送 IP数据包, 所发送的 IP 数据包中源地址为所述互联网通信端的 IP地址, 目的地址为所述 ID网络通 信端和互联网互通的 IP地址;
所述 IGW还设置为: 接收所述互联网通信端发送的 IP数据包, 以及解 析封装 ID封装数据包 , 并将所封装的 ID封装数据包转发给所述 ASN, 所述 IGW封装的 ID封装数据包中, 外层源地址为所述互联网通信端用来与 ID网 络互通的位置标识, 外层目的地址为所述 ID网络通信端的位置标识, 内层源 地址为所述互联网通信端用来与 ID网络互通的身份标识; 内层目的地址为所 述 ID网络通信端的身份标识;
所述 ASN还设置为: 接收所述 IGW封装的 ID封装数据包, 以及解析封 装为 ID数据包, 并发送给对应的 ID网络通信端, 所封装的 ID数据包中, 源 地址为所述互联网通信端的身份标识,目的地址为所述 ID网络通信端的在 ID 网络的身份标识;
所述 ID网络通信端还设置为: 接收并处理所述 ASN发送的 ID数据包。
10、 如权利要求 8或 9所述的系统, 其中, 所述互联网通信端是所述互 联网的终端或业务服务器, 所述 ID网络通信端是所述 ID网络的业务服务器 或终端。
11、 如权利要求 8或 9所述的系统, 其中, 所述互联网通信端的身份标 识是所述互联网通信端在所述互联网的 IPv4地址、 IPv6地址或含有 IPv4地 址的长位; 所述互联网通信端的位置标识是所述互联网通信端在所述互联网 的 IPv4地址、 IPv6地址、 含有 IPv4地址的长位或所述 IGW的位置标识; 所 述 ID网络通信端的 IP地址是所述 ID网络通信端的身份识别 (AID ) 、 独享 的固定的公网 IP地址或共享的专用于互通的公网 IP地址。
12、 一种网络互通的实现系统, 该系统包括:
身份标识(ID ) 网络通信端, 位于 ID网络, 具有表示身份的身份标识、 表示位置的位置标识以及用于实现互通的 IP地址, 设置为: 生成及处理 ID 数据包,所述 ID数据包中源地址和目的地址釆用身份标识表示;釆用所述 ID 数据包与 ID数据包转换设备通信;
ID数据包转换设备, 与所述 ID网络通信端连接, 设置为: 实现 ID数据 包和 ID封装数据包的双向转换及转发, 所述 ID封装数据包的外层源地址和 目的地址釆用位置标识表示, 内层源地址和目的地址釆用身份标识表示; 互通数据包转换设备,与所述 ID数据包转换设备连接,设置为: 实现 ID 封装数据包与 IP数据包的双向转换及转发, 所述 IP数据包的源地址和目的 地址釆用 IP地址表示; 釆用所述 IP数据包与所述互联网通信端通信; 以及 互联网通信端, 位于互联网, 与所述互通数据包转换设备连接, 具有 IP 地址以及用于实现互通的表示身份的身份标识、 表示位置的位置标识, 设置 为: 生成及处理所述 IP数据包;
从而实现身份标识网络与互联网互通。
13、 如权利要求 12所述的系统, 其中, 所述互联网通信端是所述互联网 的终端或业务服务器, 所述 ID网络通信端是所述 ID网络的业务服务器或终 端。
14、 如权利要求 12所述的系统, 其中, 所述互联网通信端的身份标识是 所述互联网通信端在所述互联网的 IPv4地址、 IPv6地址或含有 IPv4地址的 长位; 所述互联网通信端的位置标识是所述互联网通信端在所述互联网的 IPv4地址、 IPv6地址、 含有 IPv4地址的长位或所述 IGW的位置标识; 所述 ID网络通信端的 IP地址是所述 ID网络通信端的身份识别 (AID ) 、 独享的 固定的公网 IP地址或共享的专用于互通的公网 IP地址。
PCT/CN2010/076207 2009-09-17 2010-08-20 网络互通的实现方法和系统 WO2011032450A1 (zh)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN200910174294.9 2009-09-17
CN200910174294.9A CN102025658B (zh) 2009-09-17 2009-09-17 身份标识网络与互联网互通的实现方法和系统

Publications (1)

Publication Number Publication Date
WO2011032450A1 true WO2011032450A1 (zh) 2011-03-24

Family

ID=43758086

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2010/076207 WO2011032450A1 (zh) 2009-09-17 2010-08-20 网络互通的实现方法和系统

Country Status (2)

Country Link
CN (1) CN102025658B (zh)
WO (1) WO2011032450A1 (zh)

Families Citing this family (11)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN102938885A (zh) * 2011-08-16 2013-02-20 中兴通讯股份有限公司 身份位置分离与传统网络互联互通方法、ilr和asr
CN102957618B (zh) * 2011-08-23 2017-03-29 中兴通讯股份有限公司 基于身份位置分离网络内服务器通讯方法、系统和服务器
CN103095657A (zh) * 2011-11-03 2013-05-08 中兴通讯股份有限公司 一种用户接入方法、接入服务路由器及用户接入系统
WO2015018069A1 (zh) * 2013-08-09 2015-02-12 华为技术有限公司 网络终端获取业务的方法、设备、系统
CN104811379B (zh) * 2015-04-29 2017-12-08 北京北信源软件股份有限公司 用于即时通信服务器互联互通的路由器寻址方法
CN104836734B (zh) * 2015-05-11 2018-04-03 北京北信源软件股份有限公司 一种全新的即时通信路由方法和路由器
CN105072093B (zh) * 2015-07-20 2018-01-09 北京北信源软件股份有限公司 一种用于即时通信系统互联互通的装置和方法
CN108880904B (zh) * 2018-07-05 2020-08-28 中国人民解放军国防科技大学 一种用户和业务属性融合的64个等级服务质量保障方法
CN110677507B (zh) * 2019-08-30 2022-03-11 视联动力信息技术股份有限公司 一种访问视联网终端的方法、系统、设备及存储介质
CN113163028B (zh) * 2021-04-29 2023-01-24 全球能源互联网研究院有限公司 一种业务数据传输方法、装置及系统
CN115361328B (zh) * 2022-07-29 2023-10-20 鹏城实验室 一种身份标识报文寻址和转发方法及相关设备

Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1801764A (zh) * 2006-01-23 2006-07-12 北京交通大学 一种基于身份与位置分离的互联网接入方法
CN101127663A (zh) * 2007-09-13 2008-02-20 北京交通大学 一种移动自组织网络接入一体化网络的系统及方法
JP2008136233A (ja) * 2007-12-27 2008-06-12 Hitachi Ltd データ転送装置、方法及びシステム

Patent Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1801764A (zh) * 2006-01-23 2006-07-12 北京交通大学 一种基于身份与位置分离的互联网接入方法
CN101127663A (zh) * 2007-09-13 2008-02-20 北京交通大学 一种移动自组织网络接入一体化网络的系统及方法
JP2008136233A (ja) * 2007-12-27 2008-06-12 Hitachi Ltd データ転送装置、方法及びシステム

Non-Patent Citations (2)

* Cited by examiner, † Cited by third party
Title
D. LEWIS.: "Interworking LISP with IPv4 and IPv6.", INTERNET-DRAFT, DRAFT-IETF-LISP-INTERWORKING-00, IETF., 26 May 2009 (2009-05-26), pages 5 *
FARINACCI.D.: "Locator/ID Separation Protocol (LISP).", INTERNET-DRAFT, DRAFT-IETF-LISP-04,IETF., 16 September 2009 (2009-09-16) *

Also Published As

Publication number Publication date
CN102025658A (zh) 2011-04-20
CN102025658B (zh) 2014-08-13

Similar Documents

Publication Publication Date Title
WO2011032450A1 (zh) 网络互通的实现方法和系统
US8559448B2 (en) Method and apparatus for communication of data packets between local networks
Atkinson et al. ILNP: mobility, multi-homing, localised addressing and security through naming
WO2011032447A1 (zh) 新网与互联网互通的实现方法、系统及通信端
EP2466806B1 (en) Method and system for implementing network intercommunication
JP2013504959A (ja) バーチャルプライベートネットワークの実現方法及びシステム
WO2011041967A1 (zh) 匿名通信的方法、注册方法、信息收发方法及系统
WO2007109963A1 (fr) Passerelle de réseau privé virtuel et système de réseau ipv6 et système de réalisation de réseau privé virtuel mobile dans un réseau hybride et procédé correspondant
WO2011140843A1 (zh) 一种报文转发的方法、装置及系统
WO2007124679A1 (fr) Procédé et système de communication en réseau
WO2011044808A1 (zh) 一种匿名通信的溯源方法及系统
WO2011124132A1 (zh) 数据通信系统及方法
WO2011032462A1 (zh) 一种数据传输、接收的方法及系统及路由器
WO2011131088A1 (zh) 数据报文处理方法、入口隧道路由器及系统
WO2011131097A1 (zh) 数据报文处理方法、系统及接入服务节点
KR101901341B1 (ko) 사용자 장치의 이동성을 지원하는 네트워크 접속 방법 및 장치
WO2012130128A1 (zh) 一种实现网络标识转换的方法、装置及系统
WO2011107052A2 (zh) 一种防止地址冲突的方法及接入节点
Piscitello et al. The transmission of IP datagrams over the SMDS service
EP2789152A1 (en) Method for providing access of an user end device to a service provided by an application function within a network structure and a network structure
WO2011044807A1 (zh) 一种匿名通信的注册、通信方法及数据报文的收发系统
WO2011082584A1 (zh) 数据报文分类处理的实现方法、网络及终端
WO2011032478A1 (zh) 一种获取终端身份标识的方法、装置及终端
WO2012041168A1 (zh) 用于IPv6网络的网络连接处理方法及其装置
CN102457582B (zh) 一种实现主机设备间通信的方法和网络侧设备

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 10816654

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE

122 Ep: pct application non-entry in european phase

Ref document number: 10816654

Country of ref document: EP

Kind code of ref document: A1