WO2011134154A1 - 多用户捆绑网络资源控制的方法及装置 - Google Patents

多用户捆绑网络资源控制的方法及装置 Download PDF

Info

Publication number
WO2011134154A1
WO2011134154A1 PCT/CN2010/072326 CN2010072326W WO2011134154A1 WO 2011134154 A1 WO2011134154 A1 WO 2011134154A1 CN 2010072326 W CN2010072326 W CN 2010072326W WO 2011134154 A1 WO2011134154 A1 WO 2011134154A1
Authority
WO
WIPO (PCT)
Prior art keywords
group
user
policy
gateway device
pcrf
Prior art date
Application number
PCT/CN2010/072326
Other languages
English (en)
French (fr)
Inventor
罗鹏
Original Assignee
华为技术有限公司
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 华为技术有限公司 filed Critical 华为技术有限公司
Priority to PCT/CN2010/072326 priority Critical patent/WO2011134154A1/zh
Priority to CN201080001628.3A priority patent/CN102369701B/zh
Publication of WO2011134154A1 publication Critical patent/WO2011134154A1/zh

Links

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
    • H04L41/08—Configuration management of networks or network elements
    • H04L41/0894—Policy-based network configuration management
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W8/00—Network data management
    • H04W8/02—Processing of mobility data, e.g. registration information at HLR [Home Location Register] or VLR [Visitor Location Register]; Transfer of mobility data, e.g. between HLR, VLR or external networks
    • H04W8/04—Registration at HLR or HSS [Home Subscriber Server]

Definitions

  • the present invention relates to the field of communications, and in particular, to a method and apparatus for controlling multi-user bundled network resources.
  • WCDMA Wideband Code Dimensional Access Multiple Access
  • PDP Packet Data Protocol
  • Embodiments of the present invention provide a method and apparatus for multi-user bundling network resource control, which implements multi-user sharing user resources.
  • a method for multi-user bundling network resource control comprising:
  • the gateway device sends a user policy request message to the policy charging and control rule function PCRF or the authentication authorization statistics AAA server, where the user policy request message includes the user identifier of the user;
  • the gateway device receives a user policy request response message returned by the PCRF or the AAA server, where the user policy request response message includes a group policy and a group gateway of the group to which the user belongs according to the user identifier.
  • the gateway device Determining, by the gateway device, the networking of the group to which the user belongs according to the IP address of the group gateway device
  • the gateway device allocates a user policy to the user according to the group policy and the member policy of the user.
  • a method for multi-user bundling network resource control comprising:
  • the PCRF or the AAA server receives the user policy request message sent by the gateway device, where the user policy request message includes the user identifier of the user;
  • the PCRF or AAA server When the PCRF or AAA server queries the user as a group user according to the user identifier, the PCRF or AAA server determines a group to which the user belongs;
  • the PCRF or AAA server determines that an existing group member in the user group has activated a data link
  • the PCRF or AAA server acquires the group policy of the group, the group gateway device IP address, and the member policy of the user. And carrying the group policy, the group gateway device IP address, and the member policy of the user in the user policy response message are returned to the gateway device.
  • a gateway device comprising:
  • a sending unit configured to send a user policy request message to the PCRF or the AAA server, where the user policy request message includes a user identifier of the user;
  • a receiving unit configured to receive a user policy response message returned by the PCRF or the AAA server, where the user policy response message includes a group policy of the group to which the user belongs according to the user identifier, or a group gateway device IP address obtained by the AAA server according to the user identifier. And a member policy of the user;
  • a determining unit configured to determine, according to the group gateway device IP address received by the receiving unit, a group gateway device of the group to which the user belongs is the gateway device itself;
  • an allocating unit configured to allocate a user policy to the user according to the group policy and a member policy of the user, when the determining unit determines that the group gateway device of the group to which the user belongs is the gateway device itself.
  • a receiving unit configured to receive a user policy request message sent by the gateway device, where the user policy request message includes a user identifier of the user;
  • a determining unit configured to query the user according to the user identifier received by the receiving unit Whether it is a group user, determining a group to which the user belongs; according to the link, acquiring a group policy of the group, a group gateway device IP address, and a member policy of the user;
  • a sending unit configured to carry the group policy of the group acquired by the acquiring unit, the group gateway device IP address, and the member policy of the user in a user policy response message, and return the message to the gateway device.
  • a communication system comprising the aforementioned gateway device and the aforementioned network device.
  • FIG. 1 is a flow chart of a method for controlling multi-user bundling network resource on a gateway device side according to Embodiment 1 of the present invention
  • FIG. 2 is a flowchart of a method for controlling multi-user bundling network resources on a PCRF or AAA server side according to Embodiment 1 of the present invention
  • FIG. 3 is a flowchart of a method for controlling multi-user bundling network resource on a GGSN side according to Embodiment 2 of the present invention
  • FIG. 4 is a flowchart of a method for controlling multi-user bundling network resource on a PCRF side according to Embodiment 2 of the present invention
  • FIG. 6 is a schematic structural diagram of a method for controlling a multi-user bundle network resource in FIG. 3
  • FIG. 6 is a block diagram of a configuration of a gateway device according to Embodiment 4 of the present invention
  • FIG. 7 is a block diagram showing the structure of another gateway device in Embodiment 4 of the present invention.
  • FIG. 8 is a block diagram showing the structure of another gateway device in Embodiment 4 of the present invention.
  • FIG. 9 is a block diagram showing the composition of a network device according to Embodiment 4 of the present invention.
  • FIG. 10 is a block diagram showing the composition of a network system according to Embodiment 4 of the present invention. detailed description
  • An embodiment of the present invention provides a method for controlling multi-user bundling network resource, which is a multi-user bundling network resource control method on the gateway device side. As shown in FIG. 1, the method includes:
  • the gateway device receives a user policy response message returned by the PCRF or the AAA server, where the user policy response message includes a group policy and a group gateway of the group to which the user belongs according to the user identifier determined by the PCRF or the AAA server.
  • the device IP address and the member policy of the user are included in the user policy response message.
  • the embodiment of the present invention may define a group and a group membership in a PCRF or an AAA server, where multiple users sharing the same service package are defined as one group, for example, all members under one family package are a group, and one company package
  • the members of the company are a group; the members in the group share the quota of the same service package, which can be but not limited to traffic, time, bandwidth, etc.; when defining group and group membership, including the group ID and group of the defined group a policy, a group gateway device IP address, a group member list, and a policy of each group member; wherein the group identifier is a group number, and a group can be uniquely defined; the group policy can include group QoS resource information, group quota, and group At least one of the rights, the group quota may be, but not limited to, traffic, time, bandwidth, etc.; the group gateway device IP address is the IP address of the gateway device that the first group member in the group first logs in; the group The member list can use IMSI
  • the gateway device determines, according to the group gateway device IP address, that the group gateway device of the group to which the user belongs is the gateway device itself, the gateway device is configured according to the group policy and the member policy of the user.
  • the user assigns a user policy.
  • the user policy may be but not Limited QoS resource information, members of the quotas and user rights and so on at least a £
  • the QoS resources and quotas allocated to the user may be less than or equal to the QoS resources and quotas shared by the group to which the user belongs, and the guaranteed QoS resources allocated by multiple group members may be specifically implemented according to the following principles:
  • the quota cannot be greater than the QoS resources and guaranteed quotas of the group; the quotas can be, but are not limited to, traffic, time, and bandwidth.
  • the gateway device to which the user belongs is not the gateway device itself, forwarding a PDP context request message sent by the SGSN, so that the gateway device corresponding to the IP address of the group gateway device is based on the PCRF
  • the returned group policy and member policy assign a user policy to the user.
  • the user policy assigned to the user can satisfy both the group policy and the member policy of the user. For example, when the group policy is to allow the user to use the bandwidth of 1M and the traffic is 300K/S, the member policy of the user is to allow only the user to access the HTTP type.
  • the resources allocated by the gateway device for the user are: Allow only access to HTTP type services, and can use 1M bandwidth, 300K/S traffic, etc.; and when the group policy is high-priority, the allowed bandwidth is 2M, the traffic is 300K/S, the bandwidth allowed by the low-priority user is 1M, and the traffic is 100K/S.
  • the member policy of the user is that the user is a high-priority user, and the gateway device allocates the user to the user.
  • the policy is a method in which the bandwidth is 2M and the traffic is 300K/S, and the method provided by the embodiment of the present invention, the gateway device allocates a user policy to the user according to the group policy and the member policy of the user, and implements resource sharing of users in the same group. .
  • the embodiment of the present invention further provides a method for controlling multi-user bundling network resource, which is a multi-user bundling network resource control method on the PCRF or AAA server side. As shown in FIG. 2, the method includes:
  • the PCRF or AAA server receives a user policy request message sent by the gateway device, where the The user policy request message includes a user identifier of the user, and the user identifier may be but is not limited to
  • the PCRF or the AAA server determines, according to the user identifier, that the user is a group user, and determines a group to which the user belongs.
  • the user is assigned a corresponding user policy according to the rules in the prior art, and corresponding processing is performed.
  • the PCRF or AAA server determines that an existing group member in the user group activates a data link
  • the PCRF or AAA server acquires a group policy of the group, a group gateway device IP address, and the user.
  • the member policy, and carrying the group policy, the group gateway device IP address, and the member policy of the user in the user policy response message are returned to the gateway device.
  • a group and a group membership are defined in a PCRF or an AAA server, and when it is determined that an existing group member activates a data link in the user group, the PCRF or AAA server is from itself.
  • the group policy of the group, the group gateway device IP address, and the member policy of the user are obtained from the preset group information.
  • the gateway device that sends the user policy request message is saved as the group gateway device of the group, and the group policy and the group gateway of the group are obtained.
  • the device IP address and the member policy of the user are carried in the user policy response message and returned to the gateway device.
  • the PCRF can record that the members in the group activate the data link and record the IP address of the gateway device that activates the data link.
  • the technical solution provided by the embodiment of the present invention performs packet processing on the user.
  • a user who has belonged to the same group has activated a data link
  • the other member users of the group are activated to the same GGSN, thereby enabling
  • the GGSN allocates user policies to users in the same group to implement resource sharing.
  • the embodiment of the present invention provides a method for controlling multi-user bundling network resources.
  • the gateway device is a GGSN
  • the network element defining the group and group membership is a PCRF.
  • the method for controlling network resource binding by multiple users is illustrated. As shown in FIG. 3, the method includes:
  • the GGSN receives a Create PDP Context Request message sent by the SGSN.
  • the SGSN sends a PDP context request message to the GGSN.
  • the GGSN After receiving the request for creating a PDP context, the GGSN sends a user policy request message to the PCRF, where the message includes the user identifier of the user.
  • the user identifier may be, but not limited to, an IMS I or an MS I SDN.
  • the GGSN may send the message through the CCR request message, but the invention does not limit this.
  • the GGSN receives a user policy response message returned by the PCRF, where the response message includes a group identifier, a group policy, a group GGSN IP address, and the user of the group to which the user belongs according to the identifier of the user. Member strategy.
  • the determining, by the PCFR, the group policy of the group to which the user belongs, the group GGSN IP address, and the member policy of the user may include:
  • the PCRF After receiving the user identifier, the PCRF detects whether the user is a group user according to the user identifier, and if it is a group user, determining whether another group member has activated the data chain in the group to which the user belongs. If the other group member has activated the data link, obtain the IP address of the group GGSN of the group saved by the PCRF, and obtain the group policy of the group and the member policy of the user, if there is no other group After the member activates the data link, the GGSN that sends the request is saved as the group GGSN of the group, and the IP address of the GGSN, and the group policy of the group and the member policy of the user are obtained.
  • the GGSN determines whether the group GGSN of the group to which the user belongs is the GGSN itself according to the group GGSN IP address. If it is determined that the group GGSN of the group to which the user belongs is the GGSN itself, step 305 is performed; If it is determined that the group GGSN of the group to which the user belongs is not the GGSN itself, step 310 is performed.
  • the GGSN searches, according to the group identifier, whether the group is stored in the GGSN. If it is found that the group is stored in the GGSN, step 306 is performed; if the group is not found in the GGSN, step 309 is performed.
  • the GGSN acquires a user of a group member that has been assigned a user policy in the group, and performs step 307.
  • the GGSN according to the group policy returned by the PCRF, the member policy of the user, and
  • the principle is: according to the group policy returned by the PCRF, the member policy of the user, and the allocated user, the principle includes: the QoS resource and the quota allocated to the user may be less than or equal to the QoS shared by the group to which the user belongs. Resources and quotas; Guaranteed QoS resources and quotas allocated by multiple group members cannot be greater than the QoS resources and guaranteed quotas of the group; the quotas can be, but are not limited to, traffic, time, and bandwidth.
  • the GGSN adds the user policy of the user to the group to which the user belongs and stores it in the GGSN, and the user policy allocated to the user is included in the Create PDP Context Response message and sent to the SGSN. Secondary PDP activation process.
  • the GGSN may save the user policy of the user as a reference for allocating user policies to users in other groups.
  • the user policy is allocated to the user according to the group policy returned by the PCRF and the member policy of the user, and step 308 is performed.
  • the QoS resources and quotas allocated to the user may be less than or equal to the QoS resources and quotas shared by the group to which the user belongs; the guaranteed QoS resources and quotas allocated by multiple group members may be specifically implemented according to the following principles: It cannot be greater than the QoS resources and guaranteed quotas of the group; the quotas can be, but are not limited to, traffic, time, and bandwidth.
  • the GGSN forwards the SGSN to a GGSN corresponding to the group GGSN IP address. And sending a PDP context request message, so that the user policy is allocated to the user according to the group policy and the member policy returned by the PCRF by the GGSN corresponding to the group GGSN IP address.
  • the GGSN may forward, to the GGSN corresponding to the group GGSN IP address, a user policy request response message returned by the PCRF or AAA server, so as to be corresponding to the group gateway device IP address by the GGSN.
  • the gateway device allocates a user policy to the user according to the group policy and the member policy returned by the PCRF or the AAA server.
  • the operation performed by the GGSN corresponding to the group GGSN IP address after receiving the CCR policy request message is as described in steps 302 to 309, and details are not described herein again.
  • the GGSN allocates user resources to the user according to the obtained group policy and the member policy of the user, which not only implements the normal service of the user but also satisfies the resource sharing of the group user.
  • the embodiment of the invention further provides a method for controlling multi-user bundling network resources. As shown in FIG. 4, the method includes:
  • the PCRF receives a user policy request message sent by the GGSN, where the user policy message includes a user identifier of the user, and the user identifier may be, but not limited to, an IMSI or an MSI SDN.
  • the PCRF queries whether the user is a group user according to the user identifier. If the user is a group user, step 403 is performed; if the user is not queried, The group of users performs the corresponding operations according to the standards in the prior art.
  • the method for querying whether the user is a group user according to the user identifier may use any one of the following methods, which is not limited by the embodiment of the present invention.
  • the method includes: The PCRF end establishes a group membership relationship with the predefined group, and saves the group membership relationship in the PCRF. After the PCRF receives the user identifier of the user, it searches for whether each group member is found according to the user identifier. There is a user that is consistent with the received user identifier, if yes, the user is determined to be a group user; if not, the user is determined to be a non-group user; second, the user is authenticated at the PCRF end
  • the pre-defined group establishes a group membership, and identifies the user of the group member. After receiving the user identifier, the PCRF searches for the user corresponding to the user identifier. There is a group user identifier. If the group user identifier exists, it is determined that the user is a group user, otherwise the corresponding
  • the PCRF determines, according to a correspondence between the user and the group, the group to which the user belongs, and performs step 404.
  • step 404 Determine whether the group member has activated the data link in the group. If it is determined that the group member has activated the data link in the user group, step 405 is performed; if it is determined that there is no group member in the user group If the data link is activated, step 406 is performed.
  • the determining whether the group member has activated the data link in the group may be determined by determining whether the group GGSN IP address of the group is saved in the group, and if the group has the group GGSN IP address of the group. And determining that the group member has activated the data link in the group, and determining that no group member activates the data link in the group; but the determining method in the embodiment of the present invention is not limited thereto, and The activation identifier is determined to determine that the embodiment of the present invention does not limit this.
  • the group member in the group When the member user in the group performs the data link activation for the first time, after the data is successfully activated, the group member in the group is marked with the data link activated, and the corresponding group GGSN IP is set. The address is saved or identifies that the existing group member has activated the data link, so that there are other member users in the group that need to activate the data link, so that the data links of other users in the group are activated in the same Within a GGSN, thereby enabling multi-user shared bandwidth.
  • the PCRF acquires a group policy of the group, a group GGSN IP address, and a member policy of the user, and carries the group policy, the group GGSN IP address, and the member policy of the user in the user policy response.
  • the message is returned to the GGSN, and the execution of the acquisition user policy is ended.
  • the PCRF saves the GGSN that sends the CCR policy request message as the group GGSN of the group, and obtains the group policy of the group, the group GGSN IP address, and the member policy of the user, and the group is The group policy, the group GGSN IP address, and the member policy of the user are carried in the user policy response message returned to the GGSN. Further, the PCRF records the current sending process, and when the subsequent group of users sends a CCR policy request, the Subsequent users of the previous user use the same GGSN.
  • the PCRF acquires the group policy of the group, the group GGSN IP address, and the member policy of the user, specifically, the group and the group membership are defined in the PCRF.
  • the PCRF or AAA server obtains the group policy of the group, the group GGSN IP address, and the member policy of the user from its own preset group information.
  • the technical solution provided by the embodiment of the present invention performs packet processing on the user.
  • the other member users of the group are activated to the same GGSN, thereby enabling The GGSN allocates user policies to users in the same group to implement resource sharing. Further, since multiple users can share resources such as mobile bandwidth, it is convenient for operators to introduce family packages and enterprise packages, which increases the operator's operating income.
  • the embodiment of the present invention provides a multi-user bundling network resource control method.
  • the gateway device is GGAN, and the network element that defines the group and group membership is the PCRF.
  • a method for bundling network resource control and in the embodiment of the present invention, there are two GGSNs, namely, GGSN_A and GGSN.B, and GGAN.A, which receives the GSGN request message, as shown in FIG. 5, the method includes:
  • the SGSN sends a PDP context request to the GGSIA.
  • the GGSN-A After receiving the request for creating a PDP context, the GGSN-A sends a CCR policy request message to the PCRF, where the message includes a user identifier of the user, where the user identifier may be, but is not limited to, an IMSI or an MSISDN.
  • the PCRF receives a CCR policy request message sent by the GGSIA, where the message includes a user identifier of the user, and the user identifier is used to query whether the user is a group user according to the user identifier. Determining the group to which the user belongs, and determining whether the group member has activated the data link in the group; if it is determined that the group member of the user group has activated the data link, obtaining the group identifier of the group Group policy, group GGSN IP address, and member policy of the user, And performing step 504, where the group GGSN IP address is an IP address of the GGSN serving the activated group member; if it is determined that no group member activates the data link in the user group, saving the GGSIA as the Group GGSN, and obtain the group ID, group policy, group GGSN IP address, and member policy of the user, and perform step 504.
  • the PCRF may use any one of the following methods to query whether the user is a group user according to the user identifier, which is not limited by the embodiment of the present invention.
  • the method includes: first, establishing a group membership with a predefined group at the PCRF end, and saving the group membership in the PCRF, when the PCRF receives the user identifier of the user, Determining, according to the user identifier, a user that is consistent with the received user identifier, if yes, determining that the user is a group user; if not, determining that the user is a non-group user; In the PCRF, the user is associated with the predefined group, and the user of the group member is identified. After receiving the user identifier, the PCRF searches for the user corresponding to the user identifier. A group user identifier exists. If the group user identifier exists, the user is determined to be a group user, otherwise the user is a non-group user.
  • the determining whether the group member has activated the data link in the group may be determined by determining whether the group GGSN IP address of the group is saved in the group, and if the group has the group GGSN IP address of the group. And determining that the group member has activated the data link in the group, and determining that no group member activates the data link in the group; but the determining method in the embodiment of the present invention is not limited thereto, and The activation identifier is determined to determine that the embodiment of the present invention does not limit this.
  • the PCRF obtains the group policy of the group, the group GGSN IP address, and the member policy of the user, specifically, the group and the group membership are defined in the PCRF, and the PCRF or AAA server is preset from itself.
  • the group information, the group GGSN IP address, and the member policy of the user are obtained from the group information.
  • the PCRF returns a CCA response message to the GGSIA, where the CCA response message includes a group identifier, a group policy, a group GGSN IP address, and a user group of the group to which the user belongs. Staff strategy.
  • the 0081 receives the? And returning the CCA response message, and determining whether the group GGSN of the group to which the user belongs is the GGSIA itself according to the group GGSN IP address; if it is determined that the group GGSN of the group to which the user belongs is the GGSIA itself, Then, step 506 is performed; if it is determined that the group GGSN of the group to which the user belongs is not the GGSN-A itself, step 508 is performed.
  • the GGSIA allocates a user policy to the user according to the group policy and the member policy of the user, and performs step 507.
  • the GGSN_A searches whether the group is stored in the GGSIA according to the group identifier; if the GGSIA is found If the group is stored, the user policy of the group member to which the user policy has been assigned is obtained; and the user is added to the group to which the group belongs according to the group policy and the member policy of the user, and the user is added to the group. If the group is not found in the GGSIA, the user policy is assigned to the user according to the group policy and the member policy of the user, and the user is added to the user. The group is stored in the GGSIA.
  • the user policy may include at least one of QoS resources, quotas, and rights, and the quota may be, but not limited to, traffic, time, bandwidth, and the like.
  • the QoS resources and quotas allocated to the user may be less than or equal to the QoS resources and quotas shared by the group to which the user belongs; the guaranteed QoS resources and quotas allocated by multiple group members may be specifically implemented according to the following principles: Cannot be greater than the QoS resources and guaranteed quotas of the group.
  • the GGSIA returns a create PDP context response message to the SGSN, and ends an activation process of the data service, where the creating a PDP context response message includes allocating a user policy for the user.
  • the GGSN-A forwards the PDP context request sent by the SGSN to the GGSN.B, and performs step 509; Further, the GGSN-A may further forward the group identifier, the group policy, the group GGSN IP address, and the member policy of the user to which the obtained user belongs to the GGSN_B, and directly perform step 513.
  • the GGSIB After receiving the request for creating a PDP context, the GGSIB sends a CCR policy request message to the PCRF, where the message includes a user identifier of the user, where the user identifier may be, but not limited to, an IMSI or an MSI SDN. .
  • the PCRF receives a CCR policy request message sent by the GGSIB, where the message includes a user identifier of the user, and the user identifier is used to query whether the user is a group user, and if the user is a group user, Determining the group to which the user belongs, and determining whether the group member has activated the data link in the group; if it is determined that the group member of the user group has activated the data link, obtaining the group identifier of the group
  • the group policy, the group GGSN IP address, and the member policy of the user, and step 511 is performed, where the group GGSN IP address is the IP address of the GGSN serving the activated group member; if it is determined that there is no group in the user group If the member activates the data link, the GGSIB is saved as the group GGSN of the group, and the group identifier, the group policy, the group GGSN IP address, and the member policy of the user are obtained, and step 511 is performed.
  • the PCRF returns a CCA response message to the GGSIB, where the CCA response message includes a group identifier of the group to which the user belongs, a group policy, a group GGSN IP address, and a member policy of the user.
  • the GGSIB receives the CCA response message returned by the PCRF, and determines, according to the group GGSN IP address, whether the group GGSN of the group to which the user belongs is the GGSIB itself; if it is determined that the group GGSN of the group to which the user belongs is The GGSN-B itself performs step 513.
  • the GGSIB allocates a user policy to the user according to the group policy and the member policy of the user, and performs step 514.
  • the GGSN_B searches whether the group is stored in the GGSIB according to the group identifier; if the GGSIB is found, The group is stored in the group, and the assigned user policy in the group is obtained.
  • the user policy is assigned to the user according to the group policy and the member policy of the user, and the user is added to the group to which the user belongs and stored in the GGSIB.
  • the GGSIB returns a Create PDP Context Response message to the SGSN, and ends the activation process of the data service.
  • the Creating a PDP Context Response message includes allocating a user policy for the user.
  • the technical solution provided by the embodiment of the present invention performs packet processing on the user.
  • the other member users of the group are activated to the same GGSN, thereby enabling The GGSN allocates user policies to users in the same group to implement resource sharing. Further, since multiple users can share resources such as mobile bandwidth, it is convenient for operators to introduce family packages and enterprise packages, which increases the operator's operating income.
  • the embodiment of the present invention provides a gateway device.
  • the gateway device may be a GGSN (Gateway GPRS Support Node, GPRS (General Packet Radio Service) support node);
  • GPRS General Packet Radio Service
  • the gateway device may be an ASN-GW (ATM-GW).
  • the gateway device may be SAE GW
  • the SAE GW may be a PDN-GW (Public Data Networks GateWay) or a Serving-GW (Serving Gateway).
  • the gateway device is a corresponding gateway device in the field, which is not limited by the embodiment of the present invention; as shown in FIG. 6, the gateway device includes a sending unit 61, a receiving unit 62, and Determination unit 63 and points Xiji t 64.
  • the sending unit 61 is configured to send a user policy request message to the PCRF or the AAA server, where the message includes the user identifier of the user, where the user identifier may be, but not limited to, IMSI or MSISDN.
  • the receiving unit 62 is configured to receive a user policy response message returned by the PCRF or the AAA server, where the user policy response message includes a group policy of the group to which the user belongs, a group gateway device IP address, and a member policy of the user.
  • the group policy may include group QoS resource information, group quota, and the like, and the group quota may be, but not limited to, traffic, time, and bandwidth; and the group gateway device IP address is the first group member in the group to log in for the first time.
  • the gateway device IP address; the member policy may include member QoS resource information, member quota, etc., the member quota may be, but not limited to, traffic, time, bandwidth, etc., and a special policy may be configured according to a special group member.
  • a security webpage filtering policy is defined for the child group members to prevent access to illegal or unhealthy websites.
  • the group members above the manager define higher QoS.
  • the determining unit 63 is configured to determine, according to the group gateway device IP address received by the receiving unit 62, a group gateway device of the group to which the user belongs as the gateway device itself.
  • the allocating unit 64 is configured to allocate a user policy to the user according to the group policy and the member policy of the user when the determining unit 63 determines that the group gateway device of the group to which the user belongs is the gateway device itself.
  • the group policy and the member policy of the user allocate a user policy to the user, the principle includes: the QoS resource and the quota allocated to the user may be less than or equal to the QoS resource and quota shared by the group to which the user belongs; The guaranteed QoS resources and quotas allocated by the group members are less than or equal to the QoS resources and the guaranteed quotas of the group; in use, the total available QoS resources and quotas of the group members of the group are less than or equal to the maximum QoS resources of the group and quota.
  • the gateway device further includes a forwarding unit 65.
  • the forwarding unit 65 is configured to: when the determining unit 63 determines that the group gateway device of the group to which the user belongs is not the gateway device itself, forward the creation of the SGSN to the gateway device corresponding to the group gateway device IP address a PDP context request message, so that the gateway device corresponding to the group gateway device IP address obtains the group policy and the member policy of the user from a PCRF or an AAA server, and is configured according to the group policy and the member policy of the user.
  • the user assigns a user policy; or is used to determine, at the determining unit 63, that the group gateway device of the group to which the user belongs is not the gateway device itself, and the gateway device forwards to the gateway device corresponding to the group gateway device IP address.
  • the group policy and the member policy returned by the AAA server so that the gateway device corresponding to the group gateway device IP address allocates a user policy to the user according to the group policy and the member policy.
  • the gateway device corresponding to the IP address of the group gateway device has the same module as the gateway device, and after receiving the Create PDP Context Request message sent by the forwarding unit 65, performing the same as the GGSN The operation will not be described here.
  • the gateway device may further include: a searching unit 66, an acquiring unit
  • the searching unit 66 is configured to: when the user policy response message received by the receiving unit 62 further includes the group identifier of the group, determine, by the determining unit 63, the group gateway device of the group to which the user belongs After the gateway device itself is described, the group is stored in the gateway device according to the group identifier.
  • the obtaining unit 67 is configured to search, in the searching unit 66, that the gateway device stores the
  • the member policy of the user is
  • the user assigns a user policy, which may include QoS resources and quotas.
  • the gateway device may further include an adding unit 68.
  • Adding unit 68 for receiving at the receiving unit 64 according to the receiving unit 62 The group policy, the member policy of the user, and the allocated user user policy acquired by the obtaining unit 67 are saved in the gateway device.
  • the gateway device provided by the embodiment of the present invention can allocate a user policy for the user according to the obtained group policy of the group to which the user belongs and the member policy of the user, and realize resource sharing of the users in the same group.
  • the embodiment of the present invention further provides a network device, which may be a PCRF or an AAA server.
  • the network device includes: a receiving unit 71, a determining unit 72, an obtaining unit 73, and a sending unit 74.
  • the receiving unit 71 is configured to receive a user policy request message sent by the gateway device, where the message includes a user identifier of the user, where the user identifier may be, but not limited to, an IMSI or an MS IS; the determining unit 72 is configured to When the user identifier received by the receiving unit 71 queries the user as a group user, the group to which the user belongs is determined. If the determining unit 72 queries the processing that the user responds to.
  • the determining unit 72 may use any one of the following methods to query whether the user is a group user according to the user identifier, which is not limited by the embodiment of the present invention.
  • the method includes: The PCRF or the AAA server establishes a group membership relationship with the predefined group, and saves the group membership in the PCR or AAA server. After the PCRF or AAA server receives the user identifier of the user, according to the Determining, by the user identifier, a user that is consistent with the received user identifier, if yes, determining that the user is a group user; if not, determining that the user is a non-group user; Generating a group membership with a predefined group on the PCRF or AAA server, and identifying the user of the group member.
  • the PCRF or AAA server After receiving the user identifier, the PCRF or AAA server searches for the user. Determining whether the corresponding user has a group user identifier, and if there is a group user identifier, determining that the user is a group user, otherwise the user For non-group users.
  • the obtaining unit 73 After determining that the user is a group user and determining the group to which the user belongs, the obtaining unit 73, For determining that the group member of the group determined by the determining unit 72 has activated the data link, acquiring the group policy of the group, the group gateway device IP address, and the member policy of the user; the sending unit 74, The group policy, the group gateway device IP address, and the member policy of the user acquired by the obtaining unit 73 are carried in the user policy response message and returned to the gateway device.
  • the group and the group membership are defined in the PCRF or the AAA server.
  • the obtaining unit 73 is from the PCRF.
  • the group policy of the group, the group gateway device IP address, and the member policy of the user are obtained from the preset group information.
  • the obtaining unit 73 determines whether the group member has activated the data link in the group, and may determine whether the group gateway device IP address of the group is saved in the group, if the group holds the If the group member IP address of the group is determined, the group member of the group is determined to have activated the data link. Otherwise, it is determined that no group member activates the data link in the group; however, the method for determining the embodiment of the present invention is not limited. The embodiment of the present invention is not limited by the setting of the activation identifier.
  • the network device further includes: a saving unit 75.
  • the saving unit 75 is configured to save the gateway device that sends the user policy request message as the group gateway device of the group when the acquiring unit 73 determines that no group member activates the data link in the user group.
  • the obtaining unit 73 is further configured to: acquire the group policy of the group, the group gateway device IP address, and the member policy of the user; the sending unit 74 is further configured to: use the acquiring unit 73 to obtain the The group policy of the group, the IP address of the group gateway device, and the member policy of the user are carried in the user policy response message and returned to the gateway device.
  • the group identifier of the group may also be acquired and carried in the user policy response message.
  • the transmission is sent to the gateway device by the transmitting unit 74.
  • the network device provided by the embodiment of the present invention may send information about the group policy and the user policy of the user to the gateway device serving the user when the user is a group user, so that the gateway The device allocates user resources for the user, thereby realizing resource sharing of users in the group.
  • the embodiment of the present invention further provides a communication system.
  • the system includes a gateway device 81 and a network device 82.
  • the network device is a PCRF or an AAA server.
  • the gateway device 81 is configured to send a user policy request message to the network device 82, where the user policy request message includes a user identifier of the user.
  • the network device 82 is configured to receive a user policy request message sent by the gateway device 81, where the user policy request message includes a user identifier of the user, and query, according to the user identifier, whether the user is a group user, and if the user is queried For the group user, determine the group to which the user belongs, and determine whether the group member has activated the data link in the group; if it is determined that the group member has activated the data link in the user group, a group policy, a group gateway device IP address, and a member policy of the user, and the group policy, the group gateway device IP address, and the member of the user, the gateway device 81 are further used to receive the a user policy response message returned by the network device 82, where the user policy response message includes a group policy, a group gateway device IP address, and a member policy of the user that the network device 82 obtains according to the user identifier.
  • the gateway device Determining, according to the group gateway device IP address, whether the group gateway device of the group to which the user belongs is the gateway device If it is determined that the group gateway device of the group to which the user belongs is the gateway device itself, according to the technical solution provided by the embodiment of the present invention, the user is grouped, and when the users belonging to the same group have activated the user The data link activates the other member users of the group to the same gateway device, so that the gateway device allocates user resources for the user and implements resource sharing among the users in the group. Since multiple users can share resources such as mobile bandwidth, it is easy for operators to introduce family packages and enterprise packages, which increases the operator's operating income.
  • the group gateway device IP address of the group to which the user belongs in the PCRF or the AAA server is not the gateway device itself, and the PDP context request is forwarded to the gateway device corresponding to the group gateway device IP address. , corresponding to the IP address of the group gateway device
  • the gateway device completes the control of the user policy, and the multiple users share the mobile bandwidth and promote the mobile bandwidth instead of the fixed bandwidth.
  • the group and the group membership are mainly defined on the PCRF end, but the embodiment of the present invention is not limited thereto, and the group and group membership may also be defined as an AAA server, an O&M Serve, or an HLR.
  • the group members are defined in the AAA server and the O&M sever. The situation is similar to the PCRF. Only the interface protocol is different.
  • the group members are defined in the HLR. The related information is to be interacted with the GGSN through the SGSN. The Gn interface and the Gr interface are extended.
  • the present invention can be implemented by means of software plus necessary general hardware, and of course, by hardware, but in many cases, the former is a better implementation. .
  • the technical solution of the present invention which is essential or contributes to the prior art, may be embodied in the form of a software product stored in a readable storage medium, such as a floppy disk of a computer.
  • a hard disk or optical disk or the like includes instructions for causing a computer device (which may be a personal computer, a server, or a network device, etc.) to perform the methods described in various embodiments of the present invention.

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Databases & Information Systems (AREA)
  • Computer Hardware Design (AREA)
  • Computer Security & Cryptography (AREA)
  • Computing Systems (AREA)
  • General Engineering & Computer Science (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)
  • Mobile Radio Communication Systems (AREA)

Abstract

本发明实施例公开了一种多用户捆绑网络资源控制的方法，网关设备向策略计费和控制规则功能PCRF或认证授权统计AAA服务器发送用户策略请求消息，所述用户策略请求消息中包含用户的用户标识；所述网关设备接收所述PCRF或AAA服务器返回的用户策略请求应答消息，所述用户策略请求应答消息中包含所述PCRF或AAA服务器根据所述用户标识获取的用户所属组的组策略、组网关设备IP地址以及所述用户的成员策略；所述网关设备根据所述组网关设备IP地址确定所述用户所属组的组网关设备为所述网关设备本身时，则所述网关设备根据所述组策略和所述用户的成员策略为所述用户分配用户策略。

Description

多用户捆绑网络资源控制的方法及装置 技术领域
本发明涉及通信领域， 尤其涉及一种多用户捆绑网络资源控制的方法及 装置。
背景技术
对于宽带业务的开展来说， 向一个家庭或者一个企业提供共享的宽带链 路是当前成熟的应用模式。 但是与传统固定宽带和 wif i 业务不同， WCDMA ( Wideband Code Divi s ion Mul t iple Acces s , 宽带码分多址接入）从一开 始就是面向个人用户的。 因此 WCDMA等网络架构针对每个个人用户单独创建 PDP ( Packet Da ta Protocol , 分组数据协议）上下文， 分别进行统计和计费， 无法支持对于用户组（也就是家庭或者企业）进行统一控制和计费。 因此， 在 WCDMA等网络架构下， 每个用户使用的带宽是相互独立的， 他们之间无法 实现带宽等用户资源共享。
发明内容
本发明的实施例提供一种多用户捆绑网络资源控制的方法及装置， 实现 多用户共享用户资源。
为达到上述目的， 本发明的实施例釆用如下技术方案：
一种多用户捆绑网络资源控制的方法， 包括：
网关设备向策略计费和控制规则功能 PCRF或认证授权统计 AAA服务器发 送用户策略请求消息， 所述用户策略请求消息中包含用户的用户标识；
所述网关设备接收所述 PCRF 或 AAA服务器返回的用户策略请求应答消 息， 所述用户策略请求应答消息中包含所述 PCRF或 AAA服务器根据所述用户 标识获取的用户所属组的组策略、 组网关设备 IP地址以及所述用户的成员策 略；
所述网关设备根据所述组网关设备 IP 地址确定所述用户所属组的组网 关设备为所述网关设备本身时， 则所述网关设备根据所述组策略和所述用户 的成员策略为所述用户分配用户策略。
一种多用户捆绑网络资源控制的方法， 包括：
PCRF或 AAA服务器接收网关设备发送的用户策略请求消息， 所述用户策 略请求消息中包含用户的用户标识；
所述 PCRF或 AAA服务器根据所述用户标识查询所述用户为组用户时， 所 述 PCRF或 AAA服务器确定所述用户所属的组；
如果所述 PCRF或 AAA服务器确定所述用户组中已有组成员激活过数据链 路时， 所述 PCRF或 AAA服务器获取所述组的组策略、 组网关设备 IP地址以 及所述用户的成员策略， 并将所述组的组策略、 组网关设备 IP地址以及所述 用户的成员策略携带在用户策略应答消息中返回给所述网关设备。
一种网关设备， 包括：
发送单元， 用于向 PCRF或 AAA服务器发送用户策略请求消息， 所述用户 策略请求消息中包含用户的用户标识；
接收单元， 用于接收 PCRF或 AAA服务器返回的用户策略应答消息， 所述 用户策略应答消息中包含所述 PCRF或 AAA服务器根据所述用户标识获取的用 户所属组的组策略、 组网关设备 I P地址以及所述用户的成员策略；
确定单元， 用于根据所述接收单元接收到的所述组网关设备 IP地址确定 所述用户所属组的组网关设备为所述网关设备本身；
分配单元， 用于在所述确定单元确定所述用户所属组的组网关设备为所 述网关设备本身时， 根据所述组策略和所述用户的成员策略为所述用户分配 用户策略。
一种网络设备， 包括：
接收单元， 用于接收网关设备发送的用户策略请求消息， 所述用户策略 请求消息中包含用户的用户标识；
确定单元， 用于根据所述接收单元接收到的所述用户标识查询所述用户 是否为组用户时， 确定所述用户所属的组； 据链路时， 获取所述组的组策略、 组网关设备 IP地址以及所述用户的成员策 略；
发送单元， 用于将所述获取单元获取的所述组的组策略、 组网关设备 IP 地址以及所述用户的成员策略携带在用户策略应答消息中返回给所述网关设 备。
一种通信系统， 包括前述的的网关设备和前述的网络设备。 附图说明
为了更清楚地说明本发明实施例或现有技术中的技术方案， 下面将对实 施例或现有技术描述中所需要使用的附图作简单地介绍， 显而易见地， 下面 描述中的附图仅仅是本发明的一些实施例， 对于本领域普通技术人员来讲， 在不付出创造性劳动的前提下， 还可以根据这些附图获得其他的附图。
图 1为本发明实施例 1 中网关设备侧多用户捆绑网络资源控制的方法流 程图；
图 2为本发明实施例 1中 PCRF或 AAA服务器侧多用户捆绑网络资源控制 的方法流程图；
图 3为本发明实施例 2中 GGSN侧多用户捆绑网络资源控制的方法流程图； 图 4为本发明实施例 2中 PCRF侧多用户捆绑网络资源控制的方法流程图； 图 5为本发明实施例 3中多用户捆绑网络资源控制的方法操作示意图； 图 6为本发明实施例 4中一种网关设备的组成框图；
图 7为本发明实施例 4中另一种网关设备的组成框图；
图 8为本发明实施例 4中另一种网关设备的组成框图；
图 9为本发明实施例 4中一种网络设备的组成框图；
图 10为本发明实施例 4中一种网络系统的组成框图。 具体实施方式
下面将结合本发明实施例中的附图， 对本发明实施例中的技术方案进行 清楚、 完整地描述， 显然， 所描述的实施例仅仅是本发明一部分实施例， 而 不是全部的实施例。 基于本发明中的实施例， 本领域普通技术人员在没有作 出创造性劳动前提下所获得的所有其他实施例 , 都属于本发明保护的范围。
实施例 1
本发明实施例提供一种多用户捆绑网络资源控制的方法， 该方法为网关 设备侧的多用户捆绑网络资源控制的方法， 如图 1所示， 该方法包括：
101、 网关设备向 PCRF ( Policy Charging and Control Rule Function, 策格计费和控制规则功能） 或 AAA ( Authentication Authorization Accounting, 认证授权统计）服务器发送用户策略请求消息， 所述用户策略 请求消息中包含用户的用户标识， 所述用户标识可以为但不局限于 IMSI ( International Mobile Subscriber Identity, 国际移动用户识另1 J码)或 者 MSISDN (Mobile Station international ISDN number, 移动台国际 ISDN 号码）。
其中，在 WCDMA网络中，所述网关设备可以为 GGSN( Gateway GPRS Support Node, 网关 GPRS ( General Packet Radio Service, 通用分组无线业务） 支 持节点）； 在 CDMA网络中可以为 PDSN (Packet Data Serving Node, 分组业 务数据节点 );在 WiMAX( Worldwide Interoperability for Microwave Access, 全球微波互联接入） 网络中， 所述网关设备可以为 ASN_GW (ATM Switching Network GateWay, ATM ( asynchronous transfer mode, 异步传输) 交换网- 网关）；在 SAE ( System Architecture Evolution , 系统框架演进） 中， 所 述网关设备可以为 SAE GW (网关）， 该 SAE GW可以为 PDN-GW (Public Data Networks GateWay, 共用数据网网关）或者 Serving_GW (服务网关）。 在本发 明实施例应用到其他领域时， 该网关设备为该领域对应的网关设备， 本发明 实施例对此不进行限制。 例如， 在 WCDMA网络中， 当用户需要使用数据业务， 发起 PDP激活流程 时， 由 SGSN ( Serving GPRS Suppor t Node , 服务 GPRS支持节点 ) 向 GGSN发 送创建 PDP上下文请求，该 GGSN在接收到所述创建 PDP上下文请求后，向 PCRF 或者 AAA 服务器发送用户策略请求消息， 该用户策略请求消息可以为 CCR ( Credi t Contro l Reques t , 信誉控制手段请求）请求消息。
102、 所述网关设备接收 PCRF或 AAA服务器返回的用户策略应答消息， 所述用户策略应答消息中包含所述 PCRF或 AAA服务器根据所述用户标识确定 的所述用户所属组的组策略、 组网关设备 IP地址以及所述用户的成员策略。
其中， 本发明实施例可以在 PCRF或者 AAA服务器定义组和组成员关系， 其中， 将多个共享同一业务包的用户定义为一个组， 比如一个家庭包下的所 有成员为一个组， 一个公司包下的公司成员为一个组； 组内成员共享同一业 务包的配额， 该配额可以为但不局限于流量、 时间以及带宽等； 在定义组和 组成员关系时， 包括定义组的组标识、 组策略、 组网关设备 IP地址、 组成员 列表以及各组成员的策略； 其中， 所述组标识为组号， 可以唯一的定义一个 组； 所述组策略可以包括组 QoS资源信息、 组配额和组权限中的至少一个等， 所述组配额可以为但不局限于流量、 时间以及带宽等； 所述组网关设备 IP地 址为组中第一个组成员首次登陆的网关设备 IP地址； 所述组成员列表可以用 IMSI或者 MSISDN, 其可以唯一的确定一个组成员； 所述成员策略可以包括成 员 QoS 资源信息、 成员配额和成员权限中的至少一个等， 所述成员配额可以 为但不局限于流量、 时间以及带宽等， 另外还可以根据特殊的组成员配置特 殊的策略， 例如在家庭组中给子女组成员定义安全网页过滤策略， 防止访问 非法或者不健康网站， 还例如在公司组中， 该经理以上级的组成员定义较高 的 QoS等。
103、 所述网关设备根据所述组网关设备 IP地址确定所述用户所属组的 组网关设备为所述网关设备本身时， 所述网关设备根据所述组策略和所述用 户的成员策略为所述用户分配用户策略。 其中， 所述用户策略可以为但不局 限于 QoS资源信息、 成员配额和用户权限中的至少一个等£
其中， 在根据所述组策略和」
略时， 可以根据以下原则具体执行， 该原则包括： 为所述用户分配的 QoS 资 源和配额可以小于或等于所述用户所属组共享的 QoS 资源和配额； 多个组成 员分配的保证 QoS资源和配额不能大于组的 QoS资源和保证配额； 所述配额 可以为但不局限于流量、 时间以及带宽等。
进一步的， 如果确定所属用户所属的组网关设备不是所述网关设备本身， 转发所述 SGSN发送的创建 PDP上下文请求消息， 以便由所述与所述组网关设 备 IP地址对应的网关设备， 根据 PCRF返回的组策略和成员策略为所述用户 分配用户策略。 为用户分配的用户策略可以同时满足组策略和用户的成员策略， 如当组 策略为允许用户使用的带宽为 1M, 流量为 300K/S , 该用户的成员策略为只允 许该用户访问 HTTP类型的业务时， 则网关设备为用户分配的资源为： 仅允许 访问 HTTP类型业务， 可以釆用 1M的带宽、 300K/S的流量等； 又如当组策略 为高优先级的用户允许使用的带宽为 2M, 流量为 300K/S , 低优先级的用户允 许使用的带宽为 1M, 流量为 100K/S , 该用户的成员策略为该用户为高优先级 的用户， 则网关设备为该用户分配的用户策略为带宽为 2M, 流量为 300K/S等 本发明实施例提供的方法， 网关设备根据该组策略和该用户的成员策略 为该用户分配用户策略， 实现了同一个组内的用户的资源共享。
本发明实施例还提供一种多用户捆绑网络资源控制的方法， 该方法为 PCRF或 AAA服务器侧的多用户捆绑网络资源控制的方法， 如图 2所示， 该方 法包括：
201、 PCRF或 AAA服务器接收网关设备发送的用户策略请求消息， 所述用 户策略请求消息中包含用户的用户标识， 所述用户标识可以为但不局限于
IMSI或者 MSISDN。
202、 所述 PCRF或 AAA服务器根据所述用户标识查询所述用户为组用户 时确定所述用户所属的组；
进一步的， 若确定所述用户为非组用户， 则按照现有技术中的规则为用 户分配相应的用户策略， 并进行相应的处理。
203、 如果所述 PCRF或 AAA服务器确定所述用户组中已有组成员激活过 数据链路时， 所述 PCRF或 AAA服务器获取所述组的组策略、 组网关设备 IP 地址以及所述用户的成员策略， 并将所述组的组策略、组网关设备 IP地址以 及所述用户的成员策略携带在用户策略应答消息返回给所述网关设备。
其中，本发明实施例中，在 PCRF或 AAA服务器中定义了组和组成员关系， 在其判定所述用户组中已有组成员激活过数据链路时， 所述 PCRF或 AAA服务 器从其自身预设置的组信息中获取所述组的组策略、 组网关设备 IP地址以及 所述用户的成员策略。
进一步， 若判定所述用户组中没有组成员激活过数据链路， 将所述发送 用户策略请求消息的网关设备保存为所述组的组网关设备， 并获取所述组的 组策略、 组网关设备 IP地址以及所述用户的成员策略， 并将其携带在用户策 略应答消息中返回给所述网关设备。 进一步的， 该 PCRF可以记录该组内的成 员激活了数据链路， 并记录该激活数据链路的网关设备的 IP地址。
本发明实施例提供的技术方案， 将用户进行分组处理， 当属于同一组的 用户中已有用户激活过数据链路， 则将该组的其他成员用户都激活到同一个 GGSN中，从而可以使得 GGSN对同一组组内的用户分配用户策略， 进而实现资 源共享。
实施例 2
本发明实施例提供一种多用户捆绑网络资源控制的方法， 本发明实施例 以 WCDMA网络中，网关设备为 GGSN,定义组和组成员关系的网元为 PCRF为例， 具体阐述为例多用户捆绑网络资源控制的方法， 如图 3所示， 该方法包括：
301、 GGSN接收 SGSN发送的创建 PDP上下文请求消息。 其中， 当用户需 要使用数据业务， 发起 PDP激活时， 由 SGSN向 GGSN发送创建 PDP上下文请 求消息。
302、 所述 GGSN在接收到创建 PDP上下文请求后， 向 PCRF发送用户策略 请求消息， 所述消息中包含用户的用户标识。 其中， 所述用户标识可以为但 不局限于 IMS I或者 MS I SDN。
其中， 所述 GGSN向 PCRF发送用户策略请求消息时， 可以通过 CCR请求 消息发送， 但不发明实施例对此不进行限制。
303、 所述 GGSN接收 PCRF返回的用户策略应答消息， 所述应答消息中包 含所述 PCRF根据所述用户的标识确定的该用户所属组的组标识、 组策略、 组 GGSN IP地址以及所述用户的成员策略。
其中， PCFR根据所述用户的标识确定该用户所属组的组策略、组 GGSN IP 地址以及所述用户的成员策略具体可以包括：
所述 PCRF在接收到所述用户标识后， 根据所述用户标识检测所述用户是 否为组用户， 若为组用户， 则确定所述用户所属组中是否已有其他组成员已 经激活过数据链路， 若已经有其他组成员激活过数据链路， 则获取所述 PCRF 保存的该组的组 GGSN的 IP地址， 并获取所述组的组策略以及所述用户的成 员策略， 若没有其他组成员激活过数据链路， 则将发送请求的 GGSN保存为所 述组的组 GGSN , 并获取所述 GGSN的 IP地址， 以及所述组的组策略和所述用 户的成员策略。
304、 所述 GGSN才艮据所述组 GGSN IP地址确定所述用户所属组的组 GGSN 是否为所述 GGSN本身； 若确定所述用户所属组的组 GGSN为 GGSN本身， 则执 行步骤 305 ; 若确定所述用户所属组的组 GGSN非所述 GGSN本身， 则执行步骤 310。
305、 所述 GGSN根据所述组标识查找所述 GGSN中是否存储有所述组； 若 查找到所述 GGSN中存储有所述组， 则执行步骤 306 ; 若没有查找到所述 GGSN 中存储有所述组， 则执行步骤 309。
306、 所述 GGSN获取所述组中已分配用户策略的组成员的用户， 并执行 步骤 307。
307、 所述 GGSN根据 PCRF返回的所述组策略、 所述用户的成员策略以及
308。
其中， 根据 PCRF返回的所述组策略、 所述用户的成员策略以及已分配用 体执行， 该原则包括： 为所述用户分配的 QoS 资源和配额可以小于或等于所 述用户所属组共享的 QoS资源和配额； 多个组成员分配的保证 QoS资源和配 额不能大于组的 QoS 资源和保证配额； 所述配额可以为但不局限于流量、 时 间以及带宽等。
308、 所述 GGSN将所述用户的用户策略加入到其所属组中并存储到所述 GGSN中， 并将为所述用户分配的用户策略包含在创建 PDP上下文应答消息中 发送给 SGSN, 结束本次 PDP激活过程。
具体的， GGSN可以将该用户的用户策略保存， 作为为其他组内用户分配 用户策略的参考。
309、 所述根据 PCRF返回的所述组策略和所述用户的成员策略为所述用 户分配用户策略， 并执行步骤 308。 时， 可以根据以下原则具体执行， 该原则包括： 为所述用户分配的 QoS 资源 和配额可以小于或等于所述用户所属组共享的 QoS 资源和配额； 多个组成员 分配的保证 QoS资源和配额不能大于组的 QoS资源和保证配额； 所述配额可 以为但不局限于流量、 时间以及带宽等。
310、 所述 GGSN向与所述组 GGSN IP地址对应的 GGSN转发所述 SGSN发 送的创建 PDP上下文请求消息，以便由所述与所述组 GGSN IP地址对应的 GGSN, 根据 PCRF返回的组策略和成员策略为所述用户分配用户策略。
进一步， 该步骤该可以为所述 GGSN向与所述组 GGSN IP地址对应的 GGSN 转发将所述 PCRF或 AAA服务器返回的用户策略请求应答消息， 以便由所述与 所述组网关设备 IP地址对应的网关设备， 根据 PCRF或 AAA服务器返回的组 策略和成员策略为所述用户分配用户策略。
其中， 所述与所述组 GGSN IP地址对应的 GGSN在接收所述 CCR策略请求 消息后， 所执行的操作如步骤 302至步骤 309中所述， 此处将不再赘述。
在本发明实施例中， GGSN根据获取的组策略和用户的成员策略为该用户 分配用户资源， 既实现了用户的正常业务的进行， 又能满足组用户的资源共 享。
本发明实施例还提供一种多用户捆绑网络资源控制的方法， 如图 4所示， 该方法包括：
401、 PCRF接收 GGSN发送的用户策略请求消息， 所述用户策略消息中包 含用户的用户标识， 所述用户标识可以为但不局限于 IMSI或者 MSI SDN。
402、 在接收到用户策略请求消息后， 所述 PCRF根据所述用户标识查询 所述用户是否为组用户； 若查询到所述用户为组用户， 则执行步骤 403; 若查 询到所述用户不是组用户， 则根据现有技术中的标准执行相应的操作。
其中， 所述 PCRF根据所述用户标识查询所述用户是否为组用户可以釆用 以下方法中的任一种， 本发明实施例对此不进行限制， 该方法包括： 第一种， 在所述 PCRF端将用户与预定义的组建立组成员关系， 并将该组成员关系保存 在所述 PCRF中， 当所述 PCRF接收到用户的用户标识后， 根据所述用户标识 查找各组成员中是否存在与该接收到的用户标识一致的用户， 若存在， 则确 定所述用户为组用户； 若不存在， 则确定所述用户为非组用户； 第二种， 在 所述 PCRF端将用户与预定义的组建立组成员关系， 并将组成员的用户进行标 识， 当所述 PCRF接收到所述用户标识后， 查找所述用户标识对应的用户是否 存在组用户标识， 若存在组用户标识， 则确定所述用户为组用户， 否则所述 进行相应的处理。
403、 所述 PCRF根据用户与组的对应关系确定所述用户所属的组， 并执 行步骤 404。
404、 判断所述组中是否已有组成员激活过数据链路； 若判定所述用户组 中已有组成员激活过数据链路， 则执行步骤 405; 若判定所述用户组中没有组 成员激活过数据链路， 则执行步骤 406。
其中， 判断所述组中是否已有组成员激活过数据链路， 可以通过判断所 述组中是否保存有该组的组 GGSN IP地址确定，若该组中保存有该组的组 GGSN IP地址， 则确定所述组中已有组成员激活过数据链路， 否则确定所述组中没 有组成员激活过数据链路； 但本发明实施例的判定方法并不局限于此， 还可 以通过设定激活标识来确定， 本发明实施例对此不进行限制。
其中， 当组中在的成员用户首次进行数据链路激活时， 在将数据成功激 活后， 将在该组中标记该组中已经有组成员激活过数据链路， 并将对应的组 GGSN IP地址保存或标识已有组成员已激活过数据链路， 以便该组中再有其他 的成员用户需要进行数据链路的激活时， 以便将该组中的有其他用户的数据 链路激活在同一个 GGSN内， 从而实现多用户共享带宽。
405、 所述 PCRF获取所述组的组策略、 组 GGSN IP地址以及所述用户的 成员策略， 并将所述组的组策略、 组 GGSN IP地址以及所述用户的成员策略 携带在用户策略应答消息返回给所述 GGSN, 结束本次获取用户策略的执行。
406、 所述 PCRF将所述发送 CCR策略请求消息的 GGSN保存为所述组的组 GGSN, 并获取所述组的组策略、 组 GGSN IP地址以及所述用户的成员策略， 并将所述组的组策略、 组 GGSN IP地址以及所述用户的成员策略携带在用户 策略应答消息返回给所述 GGSN, 进一步的， PCRF记录本次发送过程， 后续同 一组的用户发送 CCR策略请求时， 保证该后续的用户的先前的用户釆用相同 的 GGSN。
在本发明实施例的步骤 405和步骤 406中， 所述 PCRF获取所述组的组策 略、 组 GGSN IP地址以及所述用户的成员策略， 具体为在 PCRF中定义了组和 组成员关系， 所述 PCRF或 AAA服务器从其自身预设置的组信息中获取所述组 的组策略、 组 GGSN IP地址以及所述用户的成员策略。
本发明实施例提供的技术方案， 将用户进行分组处理， 当属于同一组的 用户中已有用户激活过数据链路， 则将该组的其他成员用户都激活到同一个 GGSN中，从而可以使得 GGSN对同一组组内的用户分配用户策略， 进而实现资 源共享。 进一步的， 由于多用户可以共享移动带宽等资源， 便于运营商推出 家庭套餐和企业套餐， 增加了运营商的运营收入。
实施例 3
本发明实施例提供一种多用户捆绑网络资源控制的方法， 本发明实施例 以 WCDMA网络中，网关设备为 GGAN,定义组和组成员关系的网元为 PCRF为例， 具体阐述为例多用户捆绑网络资源控制的方法， 并且本发明实施例中存在两 个 GGSN, 即 GGSN— A和 GGSN.B,接收 GSGN请求消息的为 GGAN.A,如图 5所示， 该方法包括：
501、 用户需要使用数据业务， 发起 PDP激活流程时， 由 SGSN向 GGSIA 发送创建 PDP上下文请求。
502、 所述 GGSN-A接收所述创建 PDP上下文请求后， 向 PCRF发送 CCR策 略请求消息， 所述消息中包含用户的用户标识，所述用户标识可以为但不局限 于 IMSI或者 MSISDN。
503、 所述 PCRF接收 GGSIA发送的 CCR策略请求消息， 所述消息中包含 用户的用户标识， 并根据所述用户标识查询所述用户是否为组用户； 若查询 到所述用户为组用户， 则确定所述用户所属的组， 并判断所述组中是否已有 组成员激活过数据链路； 若判定所述用户组中已有组成员激活过数据链路， 则获取所述组的组标识、 组策略、 组 GGSN IP地址以及所述用户的成员策略， 并执行步骤 504 , 其中组 GGSN IP地址是为已激活的组成员提供服务的 GGSN 的 IP地址；若判定所述用户组中没有组成员激活过数据链路，则将所述 GGSIA 保存为所述组的组 GGSN, 并获取所述组的组标识、 组策略、 组 GGSN IP地址 以及所述用户的成员策略， 并执行步骤 504。 若确定所述用户为非组用户， 则 其中， 所述 PCRF根据所述用户标识查询所述用户是否为组用户可以釆用 以下方法中的任一种， 本发明实施例对此不进行限制， 该方法包括： 第一种， 在所述 PCRF端将用户与预定义的组建立组成员关系， 并将该组成员关系保存 在所述 PCRF中， 当所述 PCRF接收到用户的用户标识后， 根据所述用户标识 查找各组成员中是否存在与该接收到的用户标识一致的用户， 若存在， 则确 定所述用户为组用户； 若不存在， 则确定所述用户为非组用户； 第二种， 在 所述 PCRF端将用户与预定义的组建立组成员关系， 并将组成员的用户进行标 识， 当所述 PCRF接收到所述用户标识后， 查找所述用户标识对应的用户是否 存在组用户标识， 若存在组用户标识， 则确定所述用户为组用户， 否则所述 用户为非组用户。
其中， 判断所述组中是否已有组成员激活过数据链路， 可以通过判断所 述组中是否保存有该组的组 GGSN IP地址确定，若该组中保存有该组的组 GGSN IP地址， 则确定所述组中已有组成员激活过数据链路， 否则确定所述组中没 有组成员激活过数据链路； 但本发明实施例的判定方法并不局限于此， 还可 以通过设定激活标识来确定， 本发明实施例对此不进行限制。
其中， 所述 PCRF获取所述组的组策略、 组 GGSN IP地址以及所述用户的 成员策略， 具体为在 PCRF中定义了组和组成员关系， 所述 PCRF或 AAA服务 器从其自身预设置的组信息中获取所述组的组策略、 组 GGSN IP地址以及所 述用户的成员策略。
504、 所述 PCRF向所述 GGSIA返回 CCA应答消息， 所述 CCA应答消息中 包括所述用户所属组的组标识、 组策略、 组 GGSN IP地址以及所述用户的成 员策略。
505、所述0081 接收所述？0^返回的 CCA应答消息，并才艮据所述组 GGSN IP地址确定所述用户所属组的组 GGSN是否为所述 GGSIA本身； 若确定所述 用户所属组的组 GGSN为所述 GGSIA本身， 则执行步骤 506 ; 若确定所述用户 所属组的组 GGSN非所述 GGSN-A本身， 则执行步骤 508。
506、 所述 GGSIA根据所述组策略和所述用户的成员策略为所述用户分 配用户策略， 并执行步骤 507。
进一步， 在根据所述组策略和所述用户的成员策略为所述用户分配用户 策略之前， 所述 GGSN_A根据所述组标识查找所述 GGSIA中是否存储有所述 组； 若查找到所述 GGSIA中存储有所述组， 则获取所述组中已分配用户策略 的组成员的用户策略； 并根据 PCRF返回的所述组策略、 所述用户的成员策略 述用户加入到其所属组中并存储到所述 GGSIA中；若没有查找到所述 GGSIA 中存储有所述组， 则根据所述组策略和所述用户的成员策略为所述用户分配 用户策略， 并将所述用户加入到其所属组中并存储到所述 GGSIA中。
其中， 所述用户策略可以包括 QoS 资源、 配额和权限中的至少一个， 所 述配额可以为但不局限于流量、 时间以及带宽等。 时， 可以根据以下原则具体执行， 该原则包括： 为所述用户分配的 QoS 资源 和配额可以小于或等于所述用户所属组共享的 QoS 资源和配额； 多个组成员 分配的保证 QoS资源和配额不能大于组的 QoS资源和保证配额。
507、 所述 GGSIA向所述 SGSN返回创建 PDP上下文应答消息， 结束数据 业务的激活流程， 所述创建 PDP上下文应答消息中包括为所述用户分配用户 策略。
508、 所述 GGSN-A向所述 GGSN.B转发所述 SGSN发送的创建 PDP上下文 请求， 执行步骤 509 ; 进一步的， GGSN-A还可以向所述 GGSN_B转发所述获取的用户所属组的组 标识、 组策略、 组 GGSN IP地址以及所述用户的成员策略， 则直接执行步骤 513。
509、 所述 GGSIB在接收到所述创建 PDP上下文请求后， 向所述 PCRF发 送 CCR策略请求消息， 所述消息中包含用户的用户标识， 所述用户标识可以 为但不局限于 IMSI或者 MSI SDN。
510、 所述 PCRF接收 GGSIB发送的 CCR策略请求消息， 所述消息中包含 用户的用户标识， 并根据所述用户标识查询所述用户是否为组用户； 若查询 到所述用户为组用户， 则确定所述用户所属的组， 并判断所述组中是否已有 组成员激活过数据链路； 若判定所述用户组中已有组成员激活过数据链路， 则获取所述组的组标识、 组策略、 组 GGSN IP地址以及所述用户的成员策略， 并执行步骤 511 , 其中组 GGSN IP地址是为已激活的组成员提供服务的 GGSN 的 IP地址；若判定所述用户组中没有组成员激活过数据链路，则将所述 GGSIB 保存为所述组的组 GGSN, 并获取所述组的组标识、 组策略、 组 GGSN IP地址 以及所述用户的成员策略， 并执行步骤 511。
511、 所述 PCRF向所述 GGSIB返回 CCA应答消息， 所述 CCA应答消息中 包括所述用户所属组的组标识、 组策略、 组 GGSN IP地址以及所述用户的成 员策略。
512、所述 GGSIB接收所述 PCRF返回的 CCA应答消息，并根据所述组 GGSN IP地址确定所述用户所属组的组 GGSN是否为所述 GGSIB本身； 若确定所述 用户所属组的组 GGSN为所述 GGSN-B本身， 则执行步骤 513。
513、 所述 GGSIB根据所述组策略和所述用户的成员策略为所述用户分 配用户策略， 执行步骤 514。
进一步， 在根据所述组策略和所述用户的成员策略为所述用户分配用户 策略之前， 所述 GGSN_B根据所述组标识查找所述 GGSIB中是否存储有所述 组； 若查找到所述 GGSIB中存储有所述组， 则获取所述组中已分配用户策略 的组成员的用户策略； 并根据 PCRF返回的所述组策略、 所述用户的成员策略 述用户加入到其所属组中并存储到所述 GGSIB中；若没有查找到所述 GGSIB 中存储有所述组， 则根据所述组策略和所述用户的成员策略为所述用户分配 用户策略， 并将所述用户加入到其所属组中并存储到所述 GGSIB中。
514、 所述 GGSIB向所述 SGSN返回创建 PDP上下文应答消息， 结束数据 业务的激活流程， 所述创建 PDP上下文应答消息中包括为所述用户分配用户 策略。
本发明实施例提供的技术方案， 将用户进行分组处理， 当属于同一组的 用户中已有用户激活过数据链路， 则将该组的其他成员用户都激活到同一个 GGSN中，从而可以使得 GGSN对同一组组内的用户分配用户策略， 进而实现资 源共享。 进一步的， 由于多用户可以共享移动带宽等资源， 便于运营商推出 家庭套餐和企业套餐， 增加了运营商的运营收入。
实施例 4
本发明实施例提供一种网关设备， 在 WCDMA 网络中， 所述网关设备可以 为 GGSN ( Gateway GPRS Support Node, 网关 GPRS ( General Packet Radio Service,通用分组无线业务）支持节点）；在 CDMA网络中可以为 PDSN( Packet Data Serving Node , 分组业务数据节点 ）； 在 WiMAX ( Worldwide Interoperability for Microwave Access, 全球微波互联接入) 网络中 , 所 述网关设备可以为 ASN- GW ( ATM Switching Network GateWay , ATM
( asynchronous transfer mode, 异步传输) 交换网-网关)；在 SAE (System Architecture Evolution , 系统框架演进） 中， 所述网关设备可以为 SAE GW
(网关）， 该 SAE GW可以为 PDN- GW (Public Data Networks GateWay, 共用 数据网网关）或者 Serving-GW (服务网关）。 在本发明实施例应用到其他领域 时， 该网关设备为该领域对应的网关设备， 本发明实施例对此不进行限制； 如图 6所示， 该网关设备包括发送单元 61、 接收单元 62、 确定单元 63和分 西己 t 64。
发送单元 61 , 用于向 PCRF或 AAA服务器发送用户策略请求消息， 所述消 息中包含用户的用户标识， 其中所述用户标识可以为但不局限于 IMSI 或者 MSISDN。
接收单元 62 , 用于接收 PCRF或 AAA服务器返回的用户策略应答消息， 所 述用户策略应答消息中包含所述用户所属组的组策略、 组网关设备 IP地址以 及所述用户的成员策略。
其中所述组策略可以包括组 QoS 资源信息、 组配额等， 所述组配额可以 为但不局限于流量、 时间以及带宽等； 所述组网关设备 IP地址为组中第一个 组成员首次登陆的网关设备 IP地址； 所述成员策略可以包括成员 QoS资源信 息、 成员配额等， 所述成员配额可以为但不局限于流量、 时间以及带宽等， 另外还可以根据特殊的组成员配置特殊的策略， 例如在家庭组中给子女组成 员定义安全网页过滤策略， 防止访问非法或者不健康网站， 还例如在公司组 中， 该经理以上级的组成员定义较高的 QoS等。
确定单元 63 , 用于根据所述接收单元 62接收到的所述组网关设备 IP地 址确定所述用户所属组的组网关设备为所述网关设备本身。 分配单元 64 ,用于在所述确定单元 63确定所述用户所属组的组网关设备 为所述网关设备本身时， 根据所述组策略和所述用户的成员策略为所述用户 分配用户策略。
其中， 所述用户策略可以包括 QoS资源和配额； 在分配单元 64根据 PCRF 或 AAA服务器返回的组策略和成员策略为所述用户分配用户策略时， 所述分 配单元 64可以根据以下原则根据所述组策略和所述用户的成员策略为所述用 户分配用户策略， 所述原则包括： 为所述用户分配的 QoS 资源和配额可以小 于或等于所述用户所属组共享的 QoS资源和配额；多个组成员分配的保证 QoS 资源和配额小于或等于组的 QoS 资源和保证配额； 在使用时， 所述组的组成 员总的可使用的 QoS资源和配额小于或等于所述组的最大 QoS资源和配额。 进一步， 如图 7所示， 该网关设备还包括转发单元 65。 转发单元 65 ,用于在所述确定单元 63确定所述用户所属组的组网关设备 非所述网关设备本身时，向与所述组网关设备 IP地址对应的网关设备转发所 述 SGSN发送的创建 PDP上下文请求消息， 以使所述与所述组网关设备 IP地 址对应的网关设备从 PCRF或 AAA服务器获取所述用户的组策略和成员策略， 并根据所述用户的组策略和成员策略为所述用户分配用户策略； 或者用于在 确定单元 63确定所述用户所属组的组网关设备非所述网关设备本身， 则所述 网关设备向与所述组网关设备 IP 地址对应的网关设备转发将所述 PCRF 或
AAA服务器返回的组策略和成员策略， 以使所述与所述组网关设备 IP地址对 应的网关设备根据所述组策略和成员策略为所述用户分配用户策略。
其中，所述与所述组网关设备 IP地址对应的网关设备具有和所述网关设 备相同的模块， 并在接收到所述转发单元 65发送的创建 PDP上下文请求消息 后， 和所述 GGSN执行相同的操作， 此处将不再赘述。
进一步， 如图 8所示， 该网关设备还可以包括： 查找单元 66、 获取单元
67。
查找单元 66 ,用于在所述接收单元 62接收到的所述用户策略应答消息中 还包括所述组的组标识时， 在所述确定单元 63确定所述用户所属组的组网关 设备为所述网关设备本身后， 根据所述组标识查找所述网关设备中存储有所 述组。
获取单元 67 ,用于在所述查找单元 66查找到所述网关设备中存储有所述
还用于， 根据所述接收单元 62接收到的所述组策略、 所述用户的成员策略以
户分配用户策略， 所述用户策略可以包括 QoS资源和配额。 进一步的， 该网关设备还可以包括添加单元 68 ,
添加单元 68 , 用于在所述分配单元 64根据所述接收单元 62接收到的所 述组策略、 所述用户的成员策略以及所述获取单元 67获取的所述已分配用户 用户策略保存到所述网关设备中。
本发明实施例提供的网关设备， 可以根据获取的用户所属组的组策略和 用户的成员策略， 为该用户分配用户策略， 实现同一组内用户的资源共享。
本发明实施例还提供一种网络设备， 该网络设备可以为 PCRF或者 AAA服 务器， 如图 9所示， 该网络设备包括： 接收单元 71、 确定单元 72、 获取单元 73和发送单元 74。
接收单元 71 , 用于接收网关设备发送的用户策略请求消息， 所述消息中 包含用户的用户标识，其中所述用户标识可以为但不局限于 IMSI或者 MS IS匪； 确定单元 72 ,用于根据所述接收单元 71接收到的所述用户标识查询所述用户 为组用户时， 确定所述用户所属的组。 若所述确定单元 72查询到所述用户为 应的处理。
其中， 所述确定单元 72根据所述用户标识查询所述用户是否为组用户可 以釆用以下方法中的任一种， 本发明实施例对此不进行限制， 该方法包括： 第一种， 在所述 PCRF或 AAA服务器将用户与预定义的组建立组成员关系， 并 将该组成员关系保存在所述 PCR或 AAA服务器中， 当所述 PCRF或 AAA服务器 接收到用户的用户标识后， 根据所述用户标识查找各组成员中是否存在与该 接收到的用户标识一致的用户， 若存在， 则确定所述用户为组用户； 若不存 在， 则确定所述用户为非组用户； 第二种， 在所述 PCRF或 AAA服务器端将用 户与预定义的组建立组成员关系， 并将组成员的用户进行标识， 当所述 PCRF 或 AAA服务器接收到所述用户标识后， 查找所述用户标识对应的用户是否存 在组用户标识， 若存在组用户标识， 则确定所述用户为组用户， 否则所述用 户为非组用户。
在确定所述用户为组用户并将所述用户所属的组确定后， 获取单元 73 , 用于确定所述确定单元 72确定的所述组中已有组成员激活过数据链路时获取 所述组的组策略、组网关设备 IP地址以及所述用户的成员策略；发送单元 74 , 用于将所述获取单元 73获取的所述组的组策略、 组网关设备 IP地址以及所 述用户的成员策略携带在用户策略应答消息中返回给所述网关设备。 其中， 本发明实施例中， 在 PCRF或 AAA服务器中定义了组和组成员关系， 在其判定 所述用户组中已有组成员激活过数据链路时， 所述获取单元 73从所述 PCRF 自身预设置的组信息中获取所述组的组策略、 组网关设备 IP地址以及所述用 户的成员策略。
其中， 所述获取单元 73确定所述组中是否已有组成员激活过数据链路， 可以通过判断所述组中是否保存有该组的组网关设备 IP地址确定， 若该组中 保存有该组的组网关设备 IP地址， 则确定所述组中已有组成员激活过数据链 路， 否则确定所述组中没有组成员激活过数据链路； 但本发明实施例的判定 方法并不局限于此， 还可以通过设定激活标识来确定， 本发明实施例对此不 进行限制。
该网络设备还包括： 保存单元 75。
所述保存单元 75 ,用于在所获取断单元 73确定所述用户组中没有组成员 激活过数据链路时， 将所述发送用户策略请求消息的网关设备保存为所述组 的组网关设备； 所述获取单元 73还用于， 获取所述组的组策略、 组网关设备 IP地址以及所述用户的成员策略； 所述发送单元 74还用于， 将所述获取单元 73获取的所述组的组策略、组网关设备 IP地址以及所述用户的成员策略携带 在用户策略应答消息中返回给所述网关设备。
进一步， 在所述获取单元 73所述组的组策略、 组网关设备 IP地址以及 所述用户的成员策略时， 其还可以获取所述组的组标识， 并将其携带在用户 策略应答消息中通过发送单元 74发送给所述网关设备。
本发明实施例所提供的网络设备， 可以在判断用户为组用户时， 将该用 户的组策略和用户策略等信息发送给为该用户服务的网关设备， 以使该网关 设备为该用户分配用户资源， 从而实现组内用户的资源共享。
本发明实施例还提供一种通信系统， 如图 10所示， 该系统包括网关设备 81和网络设备 82 , 所述网络设备为 PCRF或 AAA服务器。
网关设备 81 , 用于向网络设备 82发送用户策略请求消息， 所述用户策略 请求消息中包含用户的用户标识。
网络设备 82 , 用于接收网关设备 81发送的用户策略请求消息， 所述用户 策略请求消息中包含用户的用户标识； 根据所述用户标识查询所述用户是否 为组用户； 若查询到所述用户为组用户， 则确定所述用户所属的组， 并判断 所述组中是否已有组成员激活过数据链路； 若判定所述用户组中已有组成员 激活过数据链路， 则获取所述组的组策略、 组网关设备 IP地址以及所述用户 的成员策略， 并将所述组的组策略、 组网关设备 IP地址以及所述用户的成员 所述网关设备 81还用于， 接收所述网络设备 82返回的用户策略应答消 息， 所述用户策略应答消息中包含所述网络设备 82根据所述用户标识获取的 用户所属组的组策略、 组网关设备 IP地址以及所述用户的成员策略； 根据所 述组网关设备 IP地址确定所述用户所属组的组网关设备是否为所述网关设备 本身； 若确定所述用户所属组的组网关设备为所述网关设备本身， 则根据所 本发明实施例提供的技术方案， 将用户进行分组处理， 当属于同一组的 用户中已有用户激活过数据链路， 则将该组的其他成员用户都激活到同一个 网关设备中， 从而使网关设备为该用户分配用户资源， 实现组内用户的资源 共享。 由于多用户可以共享移动带宽等资源， 便于运营商推出家庭套餐和企 业套餐， 增加了运营商的运营收入。
进一步， 本发明实施例中在 PCRF或 AAA服务器返回的用户所属组的组网 关设备 IP地址不是所述网关设备本身是，将创建 PDP上下文请求转发到与所 述组网关设备 IP地址对应的网关设备， 由与所述组网关设备 IP地址对应的 网关设备完成所述用户策略的控制， 多用户共享移动带宽， 促进移动带宽代 替固定带宽。
本发明实施例中主要将组和组成员关系定义在 PCRF端， 但本发明实施例 并不局限于此，还可以将组和组成员关系定义 AAA服务器 Server、 O&M Serve r 或者 HLR等， 其中， 组成员定义在 AAA服务器和 O&M s e rver的情况与 PCRF 类似， 仅接口协议不一样； 组成员定义在 HLR , 相关信息要通过 SGSN与 GGSN 交互， 要在 Gn接口和 Gr接口作扩展。
通过以上的实施方式的描述， 所属领域的技术人员可以清楚地了解到本 发明可借助软件加必需的通用硬件的方式来实现， 当然也可以通过硬件， 但 很多情况下前者是更佳的实施方式。 基于这样的理解， 本发明的技术方案本 质上或者说对现有技术做出贡献的部分可以以软件产品的形式体现出来， 该 计算机软件产品存储在可读取的存储介质中， 如计算机的软盘， 硬盘或光盘 等， 包括若干指令用以使得一台计算机设备（可以是个人计算机， 服务器， 或者网络设备等）执行本发明各个实施例所述的方法。 以上所述， 仅为本发明的具体实施方式， 但本发明的保护范围并不局限 于此， 任何熟悉本技术领域的技术人员在本发明揭露的技术范围内， 可轻易 想到变化或替换， 都应涵盖在本发明的保护范围之内。 因此， 本发明的保护 范围应以所述权利要求的保护范围为准。

Claims

权 利 要求 书
1、 一种多用户捆绑网络资源控制的方法， 其特征在于， 包括：
网关设备向策略计费和控制规则功能 PCRF或认证授权统计 AAA服务器发送 用户策略请求消息， 所述用户策略请求消息中包含用户的用户标识；
所述网关设备接收所述 PCRF或 AAA服务器返回的用户策略请求应答消息， 所述用户策略请求应答消息中包含所述 PCRF或 AAA服务器根据所述用户标识获 取的用户所属组的组策略、 组网关设备 IP地址以及所述用户的成员策略；
所述网关设备根据所述组网关设备 IP 地址确定所述用户所属组的组网关 设备为所述网关设备本身时， 则所述网关设备根据所述组策略和所述用户的成 员策略为所述用户分配用户策略。
2、 根据权利要求 1所述的方法， 其特征在于， 该方法还包括：
所述网关设备根据所述组网关设备 IP 地址确定所述用户所属组的组网关 设备非所述网关设备本身，则所述网关设备向与所述组网关设备 IP地址对应的 网关设备转发服务通用分组无线业务支持节点 SGSN发送的创建分组数据协议 PDP 上下文请求， 以使所述与所述组网关设备 IP地址对应的网关设备从 PCRF 或 AAA服务器获取所述用户的组策略和成员策略， 并根据所述用户的组策略和 成员策略为所述用户分配用户策略；
或者
所述网关设备根据所述组网关设备 IP 地址确定所述用户所属组的组网关 设备非所述网关设备本身，则所述网关设备向与所述组网关设备 IP地址对应的 网关设备转发将所述 PCRF或 AAA服务器返回的组策略和成员策略， 以使所述与 所述组网关设备 IP 地址对应的网关设备根据所述组策略和成员策略为所述用 户分配用户策略。
3、 根据权利要求 1所述的方法， 其特征在于， 所述用户策略应答消息中还 包括所述用户所属组的组标识； 所述网关设备根据所述组策略和所述用户的成 员策略为所述用户分配用户策略包括：
所述网关设备根据所述组标识查找所述网关设备中存储有所述组时， 获取 所述组中已分配用户策略的组成员的用户策略；
根据 PCRF返回的所述组策略、 所述用户的成员策略以及已分配用户策略的 组成员的用户策略为所述用户分配用户策略。
4、 根据权利要求 1至 3任一所述的方法， 其特征在于， 在根据 PCRF返回 为所述用户分配用户策略后， 该方法还包括：
将为所述用户分配的用户策略保存到所述网关设备中。
5、 根据权利要求 4所述的方法， 其特征在于， 当所述用户策略包括 QoS资 源和配额； 所述根据所述组策略和所述用户的成员策略为所述用户分配用户策 略包括：
为所述用户分配的 QoS 资源和配额可以小于或等于所述用户所属组共享的 QoS资源和配额；
多个组成员分配的保证 QoS资源和配额小于或等于组的 QoS资源和保证配 额。
6、 一种多用户捆绑网络资源控制的方法， 其特征在于， 包括：
PCRF或 AAA服务器接收网关设备发送的用户策略请求消息， 所述用户策略 请求消息中包含用户的用户标识；
所述 PCRF或 AAA服务器根据所述用户标识查询所述用户为组用户时， 所述 PCRF或 AAA服务器确定所述用户所属的组；
如果所述 PCRF或 AAA服务器确定所述用户组中已有组成员激活过数据链路 时， 所述 PCRF或 AAA服务器获取所述组的组策略、 组网关设备 IP地址以及所 述用户的成员策略， 并将所述组的组策略、 组网关设备 IP地址以及所述用户的
7、 根据权利要求 6所述的方法， 其特征在于， 该方法还包括：
如果所述 PCRF 或 AAA服务器确定所述用户组中没有组成员激活过数据链 路， 则所述 PCRF或 AAA服务器将所述发送用户策略请求消息的网关设备保存为 所述组的组网关设备， 并将获取的所述组的组策略、组网关设备 IP地址以及所 述用户的成员策略发送给所述网关设备。
8、根据权利要求 6或 7所述的方法，其特征在于，该方法还包括：所述 PCRF 或 AAA服务器获取所述组的组标识， 并将所述组标识发送给所述网关设备。
9、 一种网关设备， 其特征在于， 包括：
发送单元， 用于向 PCRF或 AAA服务器发送用户策略请求消息， 所述用户策 略请求消息中包含用户的用户标识；
接收单元， 用于接收 PCRF或 AAA服务器返回的用户策略应答消息， 所述用 户策略应答消息中包含所述 PCRF或 AAA服务器根据所述用户标识获取的用户所 属组的组策略、 组网关设备 IP地址以及所述用户的成员策略；
确定单元， 用于根据所述接收单元接收到的所述组网关设备 IP地址确定所 述用户所属组的组网关设备为所述网关设备本身；
分配单元， 用于在所述确定单元确定所述用户所属组的组网关设备为所述 网关设备本身时， 根据所述组策略和所述用户的成员策略为所述用户分配用户 策略。
10、 根据权利要求 9所述的网关设备， 其特征在于， 所述网关设备还包括： 转发单元， 用于在所述确定单元确定所述用户所属组的组网关设备非所述 网关设备本身时， 向与所述组网关设备 IP地址对应的网关设备转发 SGSN发送 的创建 PDP上下文请求，以使所述与所述组网关设备 IP地址对应的网关设备从 PCRF或 AAA服务器获取所述用户的组策略和成员策略， 并根据所述用户的组策 略和成员策略为所述用户分配用户策略；
或者
用于在所述确定单元确定所述用户所属组的组网关设备非所述网关设备本 身， 则所述网关设备向与所述组网关设备 IP 地址对应的网关设备转发将所述 PCRF 或 AAA服务器返回的组策略和成员策略， 以使所述与所述组网关设备 IP 地址对应的网关设备根据所述组策略和成员策略为所述用户分配用户策略。
11、 根据权利要求 9所述的网关设备， 其特征在于， 所述网关设备还包括： 查找单元， 用于在所述确定单元确定所述用户所属组的组网关设备是向 PCRF发送 CCR策略请求消息的网关设备后， 根据所述组标识查找所述网关设备 中存储有所述组；
获取单元， 用于在所述查找单元查找到所述网关设备中存储有所述组时， 所述分配单元还用于， 根据所述接收单元接收到的所述组策略、 所述用户 为所述用户分配用户策略。
12、 根据权利要求 9至 11任一所述的网关设备， 其特征在于， 所述网关设 备还包括：
添加单元， 用于在所述分配单元根据所述接收单元接收到的所述组策略、 用户策略为所述用户分配用户策略后， 将为所述用户分配的用户策略保存到所 述网关设备中。
13、 一种网络设备， 其特征在于， 包括：
接收单元， 用于接收网关设备发送的用户策略请求消息， 所述用户策略请 求消息中包含用户的用户标识；
确定单元， 用于根据所述接收单元接收到的所述用户标识查询所述用户是 否为组用户时， 确定所述用户所属的组； 链路时， 获取所述组的组策略、 组网关设备 IP地址以及所述用户的成员策略； 发送单元， 用于将所述获取单元获取的所述组的组策略、组网关设备 IP地 址以及所述用户的成员策略携带在用户策略应答消息中返回给所述网关设备。
14、根据权利要求 13所述的网络设备， 其特征在于， 所述网络设备还包括： 链路时， 将所述发送所述用户策略请求消息的网关设备保存为所述组的组网关 设备；
所述获取单元还用于， 获取所述组的组策略、 组网关设备 I P地址以及所述 用户的成员策略；
所述发送单元还用于， 将所述获取单元获取的所述组的组策略、 组网关设 备 IP 地址以及所述用户的成员策略携带在用户策略应答消息返回给所述网关 设备。
15、 一种通信系统， 其特征在于， 包括： 如权利要求 9 ~ 12 任一所述的网 关设备， 和如权利要求 13或 14任一所述的网络设备。
PCT/CN2010/072326 2010-04-29 2010-04-29 多用户捆绑网络资源控制的方法及装置 WO2011134154A1 (zh)

Priority Applications (2)

Application Number Priority Date Filing Date Title
PCT/CN2010/072326 WO2011134154A1 (zh) 2010-04-29 2010-04-29 多用户捆绑网络资源控制的方法及装置
CN201080001628.3A CN102369701B (zh) 2010-04-29 2010-04-29 多用户捆绑网络资源控制的方法及装置

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
PCT/CN2010/072326 WO2011134154A1 (zh) 2010-04-29 2010-04-29 多用户捆绑网络资源控制的方法及装置

Publications (1)

Publication Number Publication Date
WO2011134154A1 true WO2011134154A1 (zh) 2011-11-03

Family

ID=44860767

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2010/072326 WO2011134154A1 (zh) 2010-04-29 2010-04-29 多用户捆绑网络资源控制的方法及装置

Country Status (2)

Country Link
CN (1) CN102369701B (zh)
WO (1) WO2011134154A1 (zh)

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2013123807A1 (zh) * 2012-02-23 2013-08-29 华为技术有限公司 管理地址资源的方法及网关设备
CN104243219A (zh) * 2014-08-01 2014-12-24 苏州阔地网络科技有限公司 一种基于身份业务标识的资源控制架构及应用该架构方法

Families Citing this family (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN108235270B (zh) * 2013-01-22 2021-03-02 华为技术有限公司 一种进行策略决策的方法、计费设备和系统
CN104410993B (zh) * 2014-10-31 2019-04-12 东莞宇龙通信科技有限公司 一种流量监控方法、装置、终端及系统
CN109286908A (zh) * 2017-07-21 2019-01-29 诺基亚通信公司 用于控制通信系统中的资源使用的方法和装置
CN114221906A (zh) * 2021-11-11 2022-03-22 百度在线网络技术（北京）有限公司 流量管控方法、装置、电子设备及存储介质

Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1409823A (zh) * 1999-10-12 2003-04-09 Mci全球通讯公司 Ip通信传输的用户资源策略控制
WO2007057812A1 (en) * 2005-11-17 2007-05-24 Koninklijke Philips Electronics N.V. System for managing access control
CN101005441A (zh) * 2006-01-21 2007-07-25 华为技术有限公司 在无线网络中实现QoS控制的方法及装置
CN101232442A (zh) * 2008-01-09 2008-07-30 中兴通讯股份有限公司 一种策略控制的方法

Patent Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1409823A (zh) * 1999-10-12 2003-04-09 Mci全球通讯公司 Ip通信传输的用户资源策略控制
WO2007057812A1 (en) * 2005-11-17 2007-05-24 Koninklijke Philips Electronics N.V. System for managing access control
CN101005441A (zh) * 2006-01-21 2007-07-25 华为技术有限公司 在无线网络中实现QoS控制的方法及装置
CN101232442A (zh) * 2008-01-09 2008-07-30 中兴通讯股份有限公司 一种策略控制的方法

Cited By (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2013123807A1 (zh) * 2012-02-23 2013-08-29 华为技术有限公司 管理地址资源的方法及网关设备
CN103297254A (zh) * 2012-02-23 2013-09-11 华为技术有限公司 管理地址资源的方法及网关设备
US9591034B2 (en) 2012-02-23 2017-03-07 Huawei Technologies Co., Ltd. Method and gateway device for managing address resource
CN104243219A (zh) * 2014-08-01 2014-12-24 苏州阔地网络科技有限公司 一种基于身份业务标识的资源控制架构及应用该架构方法

Also Published As

Publication number Publication date
CN102369701A (zh) 2012-03-07
CN102369701B (zh) 2014-03-26

Similar Documents

Publication Publication Date Title
US10715680B2 (en) Charging method and device involved in a protocol data unit (PDU) session
US8184575B2 (en) Packet communication network and subscriber-associated-information delivery controller
US9787537B2 (en) Customizable mobile broadband network system and method for customizing mobile broadband network
US8369288B2 (en) Method and apparatus for bearer processing
JP5982690B2 (ja) ネットワークコンバージェンスの方法、デバイス、および通信システム
WO2015143610A1 (zh) 一种nfv系统的业务实现方法及通信单元
WO2011097911A1 (zh) 策略和计费规则功能实体的选择方法、装置及系统
EP3007400B1 (en) Network resource prioritization for mobile terminating services
WO2011134154A1 (zh) 多用户捆绑网络资源控制的方法及装置
WO2017173941A9 (zh) 服务质量QoS策略的处理方法、装置及系统
WO2017148446A1 (zh) 一种网络资源调度方法、设备、系统以及网络节点
WO2016165505A1 (zh) 连接控制方法及装置
WO2011079782A1 (zh) 一种实现策略与计费控制的方法、网关和移动终端
WO2009070394A1 (en) Federated virtual network of communications services
JP2022008852A (ja) 課金方法、装置、及びシステム
WO2019042321A1 (zh) 网络切片子网实例的管理数据隔离的方法和装置
WO2016188128A1 (zh) 一种能力开放方法及系统、能力开放功能实体
WO2022021971A1 (zh) 通信方法、第一策略控制网元及通信系统
WO2013091383A1 (zh) 一种确定mtc-iwf实体的方法及装置
WO2009089776A1 (fr) Procédé et appareil de maintenance des informations de fonction de règle de politique et de facturation
WO2014101161A1 (zh) 通信系统、能力开放网关和开放无线管道能力的方法
WO2016004581A1 (zh) 一种共享网络的用户管理方法、相应的设备和系统
JP6610908B2 (ja) 通信システム
WO2014036970A1 (zh) 应用触发方法及设备、系统
WO2016078325A1 (zh) 数据传送方法及装置

Legal Events

Date Code Title Description
WWE Wipo information: entry into national phase

Ref document number: 201080001628.3

Country of ref document: CN

121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 10850487

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE

122 Ep: pct application non-entry in european phase

Ref document number: 10850487

Country of ref document: EP

Kind code of ref document: A1