WO2011095078A1

WO2011095078A1 - System and method for obtaining information by deep packet inspection function

Info

Publication number: WO2011095078A1
Application number: PCT/CN2011/070437
Authority: WO
Inventors: 尤建洁; 杨波
Original assignee: 中兴通讯股份有限公司
Priority date: 2010-02-04
Filing date: 2011-01-20
Publication date: 2011-08-11
Also published as: CN102148809B; CN102148809A

Abstract

The present invention discloses a method for obtaining information by the Deep Packet Inspection Function (DPIF). The method includes: the DPIF obtains the information needed for making policy rules from the Resource and Admission Control Function (RACF), wherein the information needed for making policy rules includes the user subscription information and/or the resource availability information. The present invention also discloses a system for obtaining information by the DPIF and a DPIF device. The present invention enables the DPIF to obtain correlative information needed for making policy rules, such as the user subscription information and/or the resource availability information, from the RACF directly, and thereby makes the policy rules made by the DPIF more precise.

Description

System and method for acquiring information by deep packet inspection function

TECHNICAL FIELD The present invention relates to the field of communications, and in particular, to a system and method for obtaining information by a deep packet inspection function.

Background technique

At present, the Next Generation Network (NGN) is a hot research topic in the field of communication standards. It uses IP packet technology as the bearer network technology and integrates fixed communication and mobile communication, so that NGN can provide richer. Multimedia services, such as emerging services with real-time requirements (IP TV, video conferencing, multimedia distance learning, and video on demand, etc.), which require communication networks to provide efficient end-to-end quality of service (Quality of Service, referred to as QoS) support; at the same time, users are increasingly demanding network service quality. Therefore, providing end-to-end QoS is one of the core issues of NGN. International Telecommunication Standardization Sector (International Telecommunication)

The Union-Telecommunications standardization sector (ITU-T) is the telecommunications division of the International Telecommunication Union (ITU), which sets standards for resource admission control. In the latest draft of the Resource and Admission Control Functions (RACF) published by the ITU-T, the functional framework of the RACF is provided. As shown in Figure 1, the RACF consists of two parts, namely the policy decision function. Policy Decision Functional Entity (PD-FE) and Transport Resource Control Functional Entity (TRC-FE), where TRC-FE interacts with the transport function through Rc and performs functions through Rn and transport resources. The Transport Resource Enforcement Functional Entity (TRE-FE for short) interaction, and the PD-FE interacts with the TRC-FE through Rt, interacts with the Customer Premises Network (CPN) through the Rh, and passes the Rw and the policy. The Policy Enforcement Functional Entity (PE-FE) interaction interacts with the Service Layer Functions (SCF) of the service layer through Rs and the network. The Network Attachment Control Functions (NACF) interacts, and the PD-FE interacts with other next-generation networks through the Ri interface. In addition, the PD-FE is independent of the transmission technology and has nothing to do with the SCF. The PD-FE is based on the network policy rules, the service information provided by the SCF, the transport layer subscription information provided by the NACF, and the resource availability decision result provided by the TRC-FE. The final decision on resource acceptance control.

TRC-FE is not related to the business, but is related to transmission technology. The TRC-FE is responsible for collecting and maintaining transport network information and resource status information. Upon receiving the resource request from the PD-FE, the TRC-FE performs resource-based admission control based on QoS, priority requirements, resource availability information, and policy rules related to the transmission. The transport layer consists of a Policy Enforcement Functional Entity (PE-FE) and a Transport Resource Enforcement Functional Entity (TRE-FE). The PE-FE performs the PD-FE delivery policy (referred to as CPN) and the access network, between the access network and the core network, or between different carrier networks, and supports dynamic QoS control, port address translation control, and Network Address Translator (NAT) is the key node that traverses. The TRE-FE implements the transmission resource policy rule delivered by the TRC-FE. Its scope and function and the Rn interface need further study, and are not in the scope of the R2 phase. The service identification and management system, that is, the deep packet inspection function (DPIF) has the functions of user identification, service identification, QoS mark recognition, and content identification, and can realize user terminal identification information, IP address, And information such as service type for traffic management and policy management. As shown in Figure 2, for DPIF, there is a DPI Decision-Functional Entity (DD-FE) at the transmission control layer, and the management policy and QoS policy are executed according to the information collected by the DD-FE; Layers, which have DPI Enforcement-Modular Entity (DE-FE), and enforce the policy rules issued by the DD-FE. Currently, RACF does not support interaction with DPIF. DPIF only considers local when formulating policy rules. Control.

SUMMARY OF THE INVENTION The technical problem to be solved by the present invention is to provide a system and method for acquiring information by using a deep packet inspection function, which can implement DPIF to directly obtain relevant information required for formulating a policy rule from the RACF, thereby further making the policy rules formulated by the DPIF more precise. In order to solve the above problem, the present invention provides a method for acquiring information by a deep packet inspection function, the method comprising: a deep packet inspection function (DPIF) acquiring information required for formulating a policy rule from a resource admission control function (RACF); The information required to develop a policy rule includes user subscription information and/or resource availability information. The step of the DPIF acquiring the user subscription information from the RACF includes: sending, by the DPIF, a request message to the RACF, where the user identification information and the service type are carried, to obtain the user subscription information; and the RACF receives the request message and then the user The corresponding subscription information is returned to the DPIF. The step of the DPIF acquiring the resource availability information from the RACF includes: sending, by the DPIF, a request message to the RACF, where the user identification information, the service type, and the flow description are carried, to obtain the resource availability information; and the RACF receives the request message. The resource availability information is then returned to the DPIF. The step of the DPIF acquiring the user subscription information from the RACF includes: when the RACF acquires new user subscription information or the stored user subscription information changes, the RACF pushes the user subscription information to the DPIF. The step of the DPIF acquiring the user subscription information from the RACF further includes: after receiving the request message, the RACF first checks whether the subscription information corresponding to the user is saved locally, and if not, the RACF and the NACF exchange the user subscription information. Then return to DPIF. In order to solve the above problem, the present invention also provides a system for obtaining information by using a deep packet inspection function. The system includes a deep packet inspection function (DPIF) and a resource admission control function (RACF); wherein: the DPIF is set to: obtain information required to formulate a policy rule from the RACF; wherein the information required to formulate the policy rule includes the user Contract information and/or resource availability information. The DPIF includes a Service Identification and Management Decision Function Entity (DD-FE); the RACF includes a Policy Decision Function Entity (PD-FE); the DPIF is configured to obtain user subscription information from the RACF as follows: DD-FE to RACF Sending a request message, where the user identification information and the service type are carried, to obtain the user subscription information; and the PD-FE returns the subscription information corresponding to the user to the DPIF through the response message after receiving the request message. The DPIF includes a Service Identification and Management Decision Function Entity (DD-FE); the RACF includes a Policy Decision Function Entity (PD-FE); the DPIF is configured to obtain resource availability information from the RACF as follows: DD-FE to RACF Sending a request message, which carries the user identification information, the service type, and the flow description, to obtain the resource availability information; after receiving the request message, the PD-FE interacts with the transmission resource execution function entity (TRC-FE) to obtain the resource availability information, and The obtained resource availability information is returned to the DPIF through a response message. The DPIF is configured to acquire user subscription information from the RACF as follows: When the RACF acquires new user subscription information or the stored user subscription information changes, the RACF pushes the user subscription information to the DPIF. The system further includes a network attach control function (NACF); the PD-FE is further configured to: after receiving the request message from the DD-FE, check whether the subscription information corresponding to the user is saved locally, if not, the PD - FE interacts with NACF to obtain user subscription information. In order to solve the above problems, the present invention also provides a Deep Packet Inspection Function (DPIF) device, which is configured to: acquire information required for formulating a policy rule from a Resource Admission Control Function (RACF); The information required to formulate the policy rules includes user subscription information and/or resource availability information. The DPIF device includes a service identification and management decision function entity (DD-FE): the DPIF device is configured to acquire user subscription information from the RACF as follows: The DD-FE sends a request message to the RACF, where the user identification information is carried and The service type is used to obtain the user subscription information; and the subscription information corresponding to the user returned by the response decision message to the DPIF device after receiving the request message by the PDCF policy decision function entity (PD-FE). The DPIF device includes an identification and management decision function entity (DD-FE); the DPIF device is configured to obtain resource availability information by RACF as follows: DD-FE sends a request message to the RACF, where the user identification information and the service type are carried. And a flow description, to obtain resource availability information; and resource availability information returned by the policy decision function entity (PD-FE) of the RACF after receiving the request message to the DPIF device by using the response message, where the resource availability information is The PD-FE is obtained by interacting with a transmission resource execution function entity (TRC-FE). The DPIF device is configured to acquire user subscription information from the RACF as follows: Receive user subscription information that the RACF pushes to the DPIF when the RACF acquires new user subscription information or the stored user subscription information changes. In summary, the present invention provides a system and method for acquiring information by using a deep packet inspection function, which can implement DPIF to directly obtain relevant information required for formulating a policy rule, such as user subscription information and/or resource availability information, from the RACF. The policy rules developed by DPIF are more elaborate.

BRIEF DESCRIPTION OF THE DRAWINGS FIG. 1 is a schematic diagram of a functional framework of a RACF in the related art; FIG. 2 is a schematic diagram of a functional framework of a DPIF in the related art; FIG. 3 is an interaction diagram of a RACF and a DPIF according to the present invention; FIG. 5 is a schematic diagram of a process of acquiring resource availability information in a system and method for acquiring information by a deep packet inspection function according to an embodiment of the present invention; FIG. Preferred embodiment of the invention

The DPIF needs to use some information saved by the RACF when formulating the policy rules. However, there is no interaction method between the RACF and the DPIF in the prior art. In order to overcome the problem, the present invention proposes a system and method for obtaining information by using the deep packet inspection function. Embodiments of the present invention will be described in detail below with reference to the accompanying drawings. It should be noted that, in the case of no conflict, the features in the embodiments and the embodiments in the present application may be arbitrarily combined with each other. This embodiment provides a system for acquiring information by using a deep packet inspection function, including DPIF and RACF; and may further include NACF; DPIF is set to: obtain information required for formulating a policy rule from the RACF; information required for formulating a policy rule includes user subscription Information and/or resource availability information;

DPIF includes DE-FE and DD-FE; RACF includes PD-FE and TRC-FE;

The DE-FE is set to: perform depth detection, identify the service, and extract its features. The extracted features include: user information, flow description (quintuple), and service type, and DE-FE is also set to report the extracted feature information. Give DD-FE;

The DPIF obtains the user subscription information from the RACF. The DD-FE sends a request message to the RACF, which carries the user identification information and the service type to obtain the user subscription information. After receiving the request message, the PD-FE passes the subscription information corresponding to the user. The response message is returned to DPIF. The user identification information is the username and/or the user's IP address. The PD-FE is further configured to: after receiving the request message from the DD-FE, check whether the subscription information corresponding to the user is saved locally, and if not, the PD-FE and the NACF exchange the user subscription information.

The DPIF obtains the resource availability information from the RACF, and the DD-FE sends a request message to the RACF, which carries the identifier information, the service type, and the flow description to obtain the resource availability information. After receiving the request message, the PD-FE and the TRC-FE The resource availability information is obtained interactively, and the obtained resource availability information is returned to the DPIF through the response message. The user identification information is the username and/or the user's IP address.

The DPIF obtains the user subscription information from the RACF, that is, the RACF obtains new user subscription information or When the stored user subscription information changes, the user subscription information is pushed to the DPIF; after receiving the user subscription information pushed by the RACF, the DD-FE saves the data and sends a response message to the RACF.

The DD-FE is further configured to: formulate a policy rule according to the local feature information, and the obtained user subscription information and/or resource availability information, and send it to the DE-FE for execution.

The embodiment provides a deep packet inspection function (DPIF) device, where the device is configured to: acquire information required for formulating a policy rule from a resource admission control function (RACF); wherein the information required to formulate the policy rule includes the user Contract information and/or resource availability information. The DPIF device includes a service identification and management decision function entity (DD-FE): the DPIF device is configured to acquire user subscription information from the RACF as follows: The DD-FE sends a request message to the RACF, where the user identifier is carried. The information and the service type are used to obtain the user subscription information; and the subscription information corresponding to the user returned by the RACF's policy decision function entity (PD-FE) after receiving the request message and returning the response message to the DPIF device. The DPIF device includes an identification and management decision function entity (DD-FE); the DPIF device is configured to obtain resource availability information by RACF as follows: DD-FE sends a request message to the RACF, where the user identification information is carried, a service type and a flow description, to obtain resource availability information; and resource availability information returned by the policy decision function entity (PD-FE) of the RACF after receiving the request message to the DPIF device by using the response message, where the resource availability information The PD-FE is obtained by interacting with a transmission resource execution function entity (TRC-FE). The DPIF device is configured to obtain user subscription information from the RACF as follows: Receive user subscription information that the RACF pushes to the DPIF when the RACF acquires new user subscription information or the stored user subscription information changes.

The embodiment provides a method for acquiring information by using a deep packet inspection function, and the DPIF obtains information required for formulating a policy rule from the RACF; the information required for formulating the policy rule includes user subscription information and/or Or resource availability information. The method of the present invention is described in detail below with reference to the accompanying drawings. FIG. 4 is a process for acquiring user subscription information in a system and method for acquiring information of a deep packet inspection function according to an embodiment of the present invention. The process includes the following steps: 401. DE-FE execution depth of DPIF Detecting, identifying the service and extracting its characteristics, wherein the characteristics include: user information, flow description (quintuple), and service type information, and the DE-FE reports the extracted feature information to the DD-FE of the DPIF;

After receiving the feature information reported by the DE-FE, the DD-FE sends a request message to the RACF to obtain the user subscription information, where the request message carries the user identification information and the service type and the like; the user identification information may be the user. Name and / or user's IP address.

403. After receiving the request message from the DD-FE, the PD-FE of the RACF checks whether the subscription information corresponding to the user is saved locally. If not, the PD-FE interacts with the NACF to obtain the user subscription information.

404. After receiving the user subscription information from the NACF, the PD-FE sends a response message to the DD-FE, where the response message carries the user subscription information requested by the DD-FE.

405. The DD-FE formulates a policy rule according to the user subscription information and the local feature information, and sends the policy rule to the DE-FE for execution. In this step, the DD-FE considers the obtained user subscription information when formulating the policy rule. Compared with the prior art, only the local feature information is used to formulate the policy rule. The policy rule formulated by the DD-FE in this embodiment is more elaborate.

FIG. 5 is a flowchart showing a process for acquiring resource availability information in a system and method for acquiring information by a deep packet inspection function according to an embodiment of the present invention, where the process includes the following steps:

501. The DEIF of the DPIF performs depth detection, identifies the service, and extracts its characteristics. The characteristics include: user information, flow description (quintuple), and service type, and the DE-FE reports the extracted feature information to DD-FE of DPIF;

502. The DD-FE sends a request message to the RACF to check the current network resource availability information, where the request message carries the user identification information, the service type, and the flow description (quintuple) and the like. The user identification information may be a username and/or a user's IP address.

503. After receiving the request message from the DD-FE, the PD-FE of the RACF interacts with the TRC-FE to obtain resource availability information.

504. The PD-FE sends a response message to the DD-FE, where the response message includes resource availability information of the DD-FE request.

505. The DD-FE formulates a policy rule according to the resource availability information and the local feature information, and sends the policy rule to the DE-FE for execution. In this step, the DD-FE considers the obtained resource availability information when formulating the policy rule. Compared with the prior art, only the local feature information is used to formulate the policy rule, and the policy rule formulated by the DD-FE in this embodiment is more elaborate. The local feature information includes user identity information such as the authentication ID, the obtained IP address, and the special access attribute used by the user, and service traffic characteristic information such as service type, service status, and service traffic bandwidth.

When formulating policy rules, DD-FE can also comprehensively consider user subscription information, resource availability information, and local feature information. The policy rules thus formulated consider only user subscription information and local feature information, or only resource availability information. The policy rules formulated with local feature information are more detailed. One of ordinary skill in the art will appreciate that all or a portion of the above steps may be performed by a program to instruct the associated hardware, such as a read only memory, a magnetic disk, or an optical disk. Alternatively, all or part of the steps of the above embodiments may also be implemented using one or more integrated circuits. Correspondingly, each module unit in the foregoing embodiment may be implemented in the form of hardware, or may be implemented in the form of a software function module. The invention is not limited to any specific form of combination of hardware and software. The above are only the preferred embodiments of the present invention, and are not intended to limit the present invention, and various modifications and changes can be made to the present invention. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and scope of the present invention are intended to be included within the scope of the present invention. INDUSTRIAL APPLICABILITY The present invention provides a system and method for acquiring information by a deep packet inspection function, which can implement DPIF to directly acquire relevant information required for formulating a policy rule, such as user subscription information and/or resource availability information, from the RACF, thereby enabling the DPIF to formulate The rules of the strategy are more elaborate.

Claims

Claim

A method for obtaining information by a deep packet inspection function, the method comprising: a deep packet inspection function (DPIF) obtaining information required to formulate a policy rule from a resource admission control function (RACF); wherein the policy rule is required The information includes user subscription information and/or resource availability information.

The method of claim 1, wherein: the step of the DPIF acquiring the user subscription information from the RACF comprises: sending, by the DPIF, a request message to the RACF, where the user identification information and the service type are carried, to obtain the user subscription information; And the RACF returns the subscription information corresponding to the user to the DPIF after receiving the request message.

3. The method of claim 1, wherein: the step of the DPIF acquiring the resource availability information from the RACF comprises: sending, by the DPIF, a request message to the RACF, where the user identification information, the service type, and the flow description are carried to obtain the resource. Availability information; and the RACF returns resource availability information to the DPIF upon receipt of the request message.

4. The method according to claim 1, wherein: the step of the DPIF acquiring user subscription information from the RACF comprises: when the RACF acquires new user subscription information or the stored user subscription information changes, the RACF pushes the user to the DPIF. Signing information.

The method of claim 2, wherein the step of the DPIF acquiring the user subscription information from the RACF further comprises: after receiving the request message, the RACF first checks whether the subscription information corresponding to the user is saved locally. If not, the RACF and the NACF exchange the user subscription information and return to the DPIF.

6. A system for obtaining information by a deep packet inspection function, comprising a deep packet inspection function (DPIF) and a resource admission control function (RACF); wherein: the DPIF is set to: obtain information required to formulate a policy rule from the RACF; The information required to formulate the policy rules includes user subscription information and/or resource availability information.

7. The system of claim 6, wherein: the DPIF comprises a Service Identification and Management Decision Function Entity (DD-FE); the RACF comprises a Policy Decision Function Entity (PD-FE); the DPIF is set to The method of obtaining the user subscription information from the RACF: the DD-FE sends a request message to the RACF, where the user identification information and the service type are carried, to obtain the user subscription information, and the subscription information corresponding to the user after the PD-FE receives the request message Return to DPIF via a response message.

8. The system of claim 6, wherein: the DPIF comprises a Service Identification and Management Decision Function Entity (DD-FE); the RACF comprises a Policy Decision Function Entity (PD-FE); the DPIF is set to The method obtains the resource availability information from the RACF: The DD-FE sends a request message to the RACF, where the user identification information, the service type, and the flow description are carried to obtain the resource availability information. After receiving the request message, the PD-FE performs the function with the transmission resource. The entity (TRC-FE) interactively obtains resource availability information and returns the obtained resource availability information to the DPIF through a response message.

9. The system of claim 6, wherein: the DPIF is configured to obtain user subscription information from the RACF as follows: When the RACF acquires new user subscription information or the stored user subscription information changes, the RACF DPIF pushes user subscription information.

10. The system of claim 7 wherein: The system further includes a network attach control function (NACF); the PD-FE is further configured to: after receiving the request message from the DD-FE, check whether the subscription information corresponding to the user is saved locally, if not, the PD - FE interacts with NACF to obtain user subscription information.

11. A Deep Packet Inspection Function (DPIF) device, the device being configured to: obtain information required to formulate a policy rule from a resource admission control function (RACF); wherein the information required to formulate a policy rule includes user subscription information And/or resource availability information.

12. The device of claim 11, wherein: the DPIF device comprises a Service Identification and Management Decision Function Entity (DD-FE): the DPIF device is configured to obtain user subscription information from the RACF as follows: DD- The FE sends a request message to the RACF, where the user identification information and the service type are carried to obtain the user subscription information; and the user that receives the request message after receiving the request message by the RACF policy decision function entity (PD-FE) returns to the DPIF device through the response message. Corresponding signing information.

13. The apparatus of claim 11, wherein: the DPIF device comprises an identification and management decision function entity (DD-FE); the DPIF device is configured to obtain resource availability information by RACF as follows: DD-FE direction The RACF sends a request message, where the user identification information, the service type, and the flow description are carried to obtain the resource availability information; and the policy decision function entity (PD-FE) that receives the RACF receives the request message and returns the response message to the DPIF device. The resource availability information, wherein the resource availability information is obtained by the PD-FE interacting with a transmission resource execution function entity (TRC-FE).

14. The apparatus according to claim 11, wherein: the DPIF device is configured to acquire user subscription information from the RACF as follows: receiving when the RACF acquires new user subscription information or the stored user subscription information changes, User subscription information pushed by RACF to DPIF.