WO2013107138A1 - Method and apparatus for wifi terminal to access different service domains - Google Patents

Method and apparatus for wifi terminal to access different service domains Download PDF

Info

Publication number
WO2013107138A1
WO2013107138A1 PCT/CN2012/075854 CN2012075854W WO2013107138A1 WO 2013107138 A1 WO2013107138 A1 WO 2013107138A1 CN 2012075854 W CN2012075854 W CN 2012075854W WO 2013107138 A1 WO2013107138 A1 WO 2013107138A1
Authority
WO
WIPO (PCT)
Prior art keywords
data service
uplink data
wifi terminal
cpe
service
Prior art date
Application number
PCT/CN2012/075854
Other languages
French (fr)
Chinese (zh)
Inventor
孔涛
黄保庆
朱莉
Original Assignee
华为技术有限公司
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 华为技术有限公司 filed Critical 华为技术有限公司
Priority to RU2014133529/07A priority Critical patent/RU2572825C1/en
Publication of WO2013107138A1 publication Critical patent/WO2013107138A1/en

Links

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L41/00Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
    • H04L41/08Configuration management of networks or network elements
    • H04L41/0803Configuration setting
    • H04L41/0806Configuration setting for initial configuration or provisioning, e.g. plug-and-play
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L61/00Network arrangements, protocols or services for addressing or naming
    • H04L61/50Address allocation
    • H04L61/5007Internet protocol [IP] addresses
    • H04L61/5014Internet protocol [IP] addresses using dynamic host configuration protocol [DHCP] or bootstrap protocol [BOOTP]

Definitions

  • the present application claims to be submitted to the Chinese Patent Office on January 18, 2012, and the application number is 201210015987. 5.
  • the invention name is "a method and device for accessing different service domains by a Wifi terminal"
  • the priority of the Chinese Patent Application the entire contents of which is incorporated herein by reference.
  • the present invention relates to the field of communications technologies, and in particular, to a method and apparatus for a WiFi terminal to access different service flows.
  • IPTV Internet Personality Television
  • IMS Internet Protocol Multimedia Subsystem
  • operator-owned services For services such as the Internet that require authentication and/or accounting at the IP (Internet Protocol) layer, LTE/EPC can only perceive LTE CPE and cannot perceive WiFi terminals under LTE CPE. The LTE/EPC cannot authenticate and/or charge the WiFi terminal in the case where the WiFi terminal accesses the service domain in which the IP layer performs authentication and/or accounting.
  • the embodiments of the present invention provide a method and an apparatus for accessing different service domains by a WiFi terminal, which are used to solve the problem that the EPS of the prior art is low in efficiency and the priority scheduling of different service flows initiated by the WiFi terminal cannot be implemented.
  • a tunnel establishing unit configured to communicate with the broadband remote access server BRAS through the EPC according to the first IP address allocated by the EPC, establish a CAPWAP tunnel, and authenticate the WiFi terminal encapsulated by the CAPWAP tunnel with the IP layer And communicating with the billed service domain to the BRAS, and the BRAS is the WiFi terminal by interacting with the service domain that performs authentication and/or charging at the IP layer. Assign a second IP address;
  • FIG. 1 is a flowchart of a method for a WiFi terminal to access different service domains according to an embodiment of the present invention
  • FIG. 2 is a schematic diagram of a network system for a WiFi terminal to access different service domains through an EPS;
  • FIG. 3 is a schematic diagram of a process in which a WiFi terminal requests a BRAS to allocate a second IP address
  • the AC then encapsulates the DHCP OFFER packet in the CAPWAP tunnel and sends it to the CPE.
  • the CPE decapsulates the DHCP OFFER packet encapsulated in the CAPWAP tunnel and sends it to the WiFi terminal.
  • the WiFi terminal After receiving the DHCP OFFER message sent by the BRAS, the WiFi terminal sends a DHCP Request broadcast message to the BRAS.
  • the specific procedure is the same as the process of sending the DHCP Discovery to the BRAS, so that the BRAS assigns the second IP address to the WiFi terminal.
  • the data services supported by the WiFi terminal include: services for charging at the IP layer and services for authentication at the application layer, such as HSI (High Speed Internet) services for charging at the IP layer, operators' own games, and IMS services. And IPTV services are billed at the application layer.
  • the method includes:
  • S10K receives an uplink data service message sent by the WiFi terminal, where the uplink data service message carries a second IP address allocated by the broadband remote access server BRAS to the WiFi terminal.
  • step S103 is performed; if the WiFi terminal initiates The uplink data service is a data service type that performs authentication and/or accounting at the application layer, and then step S104 is performed.
  • S103 Encapsulate the uplink data service by using the CAPWAP tunnel; and seal the CAPWAP tunnel.
  • the packet of the uplink data service is transmitted to the BRAS after being transmitted through the EPC, and the BRAS sends the packet of the uplink data service to the corresponding service domain.
  • the CPE encapsulates the uplink data service sent by the WiFi terminal through the CAPWAP tunnel, and the CPE transparently transmits the packet carrying the uplink data service.
  • the EPC is sent to the AC (the EPC does not process the packet, the EPC is "transparent" with respect to the packet), and the AC accesses the BRAS to send the packet of the uplink data service to the corresponding service. This allows the application system to individually authenticate and/or bill the WiFi terminal.
  • S104 Convert the second IP address of the WiFi terminal that is carried by the packet carrying the uplink data service to the first IP address of the CPE device, where the CPE device is carried.
  • the packet of the uplink data service of an IP address is forwarded to the corresponding service domain by using the EPC direct route.
  • the CPE converts the second IP address of the WiFi terminal carried in the packet carrying the uplink data service into the EPC.
  • the first IP address allocated by the CPE module, and then the CPE module forwards the uplink data service to the corresponding service through the EPC route.
  • the CPE performs intelligent routing according to different data services initiated by the WiFi terminal, for example, the service for authenticating and/or charging at the IP layer, through the CAPWAP tunnel
  • the packet carrying the uplink data service is encapsulated and transmitted to the BRAS after being transparently transmitted to the BRAS, and the BRAS sends the packet of the uplink data service to the corresponding service domain; for authentication and/or accounting at the application layer.
  • the service of the fee, the second IP address of the WiFi terminal carried in the packet carrying the uplink data service is converted into the first IP address of the CPE device, and is directly forwarded by the EPC to the EPC.
  • the embodiment of the invention provides a method and a device for accessing different service domains of a WiFi terminal.
  • the method is applied to an LTE client device CPE, as shown in FIG. 2, FIG. 3 and FIG. 4, FIG. 2 is a network on which the embodiment is based.
  • the LTE mode is used for communication, and the base station is connected to multiple service domains corresponding to the multiple services by using the EPC, so that the WiFi terminal passes the CPE, the base station, and the service by using the foregoing system architecture.
  • the domain communicates.
  • the figure shows two settings for the AP (Access Point, WiFi Access Point) and the CPE of the client device.
  • the CPE can integrate the AP function module. As shown in Figure 2, the AP and CPE can also be separated. device of.
  • the device provided in this embodiment is a function in which the CPE is integrated with an AP.
  • the WiFi terminal In order for the application system to independently charge the WiFi terminal after accessing the Internet, the WiFi terminal needs to pass the BRAS through the EPS network system to access the Internet, so that the BRAS authenticates and bills the Internet data service record accessed by the WiFi terminal to the authentication and accounting server.
  • the communication between the CPE and the BRAS is performed by the AC (Access Controller, WiFi access controller) using the first IP address assigned by the EPC to the CPE, and the CPE communicates with the AC through the CAPWAP tunnel, and then the AC access is performed.
  • the BRAS of course, this embodiment is based on the AC and BRAS are integrated as a BRAS - a physical device.
  • the first IP address is the CPE/AP. After the CPE/AP is powered on, the CPE/AP completes the EPC-to-CPE/AP authentication and PDN establishment according to the 3GPP standard procedure.
  • the EPC is the IP address assigned by the CPE/AP.
  • the WiFi terminal sends a DHCP Discovery (Dynamic Host Configuration Protocol) broadcast packet to the CPE.
  • the CPE After receiving the DHCP Discovery broadcast packet, the CPE encapsulates the packet in the CAPWAP tunnel and sends the packet to the CPE.
  • the CPE forwards the packet encapsulated by the CAPWAP to the AC.
  • the CPE uses the first IP address assigned by the EPC to the CPE in the packet.
  • the AC decapsulates the received packet by CAPWAP tunnel and forwards it to the BRAS.
  • the BRAS After receiving the DHCP Discovery broadcast message sent by the WiFi terminal, the BRAS returns DHCP 0FFER to the AC.
  • the AC then encapsulates the DHCP OFFER packet in the CAPWAP tunnel and sends it to the CPE.
  • the CPE decapsulates the DHCP OFFER packet encapsulated in the CAPWAP tunnel and sends it to the WiFi terminal.
  • the WiFi terminal After receiving the DHCP OFFER message sent by the BRAS, the WiFi terminal sends a DHCP Request broadcast message to the BRAS.
  • the specific procedure is the same as the process of sending the DHCP Discovery to the BRAS, so that the BRAS assigns the second IP address to the WiFi terminal.
  • the data services supported by the WiFi terminal include: services for charging at the IP layer and services for authentication at the application layer, such as HSI (High Speed Internet) services for charging at the IP layer, operators' own games, and IMS services. And IPTV services are billed at the application layer.
  • the method includes:
  • the access control list of the uplink data service specifically includes the quintuple information of the uplink data service, where the quintuple information includes the source address of the terminal that initiates the uplink data service, the destination address of the service domain to be accessed, and the source of the uplink data service. Port, destination port and protocol number to access the service domain.
  • the access control list of the uplink data service can be configured in a pre-planned manner and configured in multiple ways to the CPE, including: CPE's near-end configuration interface, CPE's remote configuration interface TR069/0MA-DM, DHCP Option, Protocol Configurat Ion Opt ion (PCO) extension or CAPWAP remote management protocol.
  • the access control list of the uplink data service may also be dynamically derived from the UL-TFT of the CPE.
  • the specific derivation method is to use the wildcard (*) instead of the source IP address and the source port, and keep the destination IP address, protocol number, and destination port unchanged.
  • the quintuple information in the access control list of the pre-configured uplink data service can also use the wildcard character (*) instead of the source address and the source port, and only the destination address, protocol number, and destination port are pre-configured.
  • the access control list of the uplink data service in the CPE can also be used to classify and identify the priority information of different uplink data services.
  • the CPE determines, according to the destination address in the quintuple information of the uplink data service, a type of the uplink data service initiated by the WiFi terminal.
  • S204 The CPE encapsulates the uplink data service by using the CAPWAP tunnel.
  • the CPE parses the destination address of the service domain to be accessed in the uplink data service message initiated by the WiFi terminal. If the destination address of the data service to be accessed by the WiFi terminal is 1. 10.2.3, the CPE corresponding to the access control list of the uplink data service determines that the data service to be accessed by the WiFi terminal is an HSI service. In this way, the CPE encapsulates the uplink data service through a CAPWAP tunnel.
  • S205 The CPE converts the second IP address of the WiFi terminal carried in the packet carrying the uplink data service to the first IP address of the CPE device.
  • the CPE determines that the data service to be accessed by the WiFi terminal is an IMS service.
  • the IMS service performs charging at the application layer, so that the CPE translates the second IP address of the WiFi terminal carried in the uplink data service packet into the first IP address of the CPE itself.
  • the CPE converts the second IP address of the WiFi terminal carried in the uplink data service packet into an IP address of the corresponding PDN connection.
  • the CPE further includes the priority information of the uplink data service in the access control list, so that the CPE has different priority information corresponding to different data service types.
  • the uplink data service provides different priority scheduling. Specifically, a WFQ (Weighted Fair Queuing) congestion management algorithm can be adopted.
  • step S208 is performed; if the uplink data service initiated by the WiFi terminal is a data service type that is authenticated and/or charged at the application layer, step S209 is performed.
  • the CPE transparently transmits the packet of the uplink data service encapsulated by the CAPWAP tunnel to the BRAS, and the BRAS sends the packet of the uplink data service to the corresponding service domain.
  • the CPE forwards the packet of the uplink data service that carries the first IP address of the CPE device to the corresponding service domain by using the EPC direct route.
  • the CPE Since the CPE will perform data charging at the application layer, it does not need to access the corresponding service domain through the BRAS. Therefore, the data service initiated by the WiFi terminal does not need to be encapsulated by the CAPWAP tunnel, so that the data service, such as IMS and VoIP, which is charged at the application layer, greatly reduces the overhead of the data service packet and improves the EPS.
  • the mapping mechanism enables priority scheduling of different services.
  • the uplink data service initiated by the WiFi terminal is a data service for charging at the IP layer
  • the uplink data service message carrying the second IP address of the WiFi terminal initiated by the WiFi terminal and the uplink data service initiated by the WiFi terminal
  • the CAPWAP packet is encapsulated into a CAPWAP packet and sent to the CPE.
  • the outer source IP address of the CAPWAP packet is the private network address assigned by the CPE to the AP.
  • the CPE After receiving the CAPWAP packet, the CPE translates the outer IP address of the CAPWAP into the first IP address of the CPE, and then transparently transmits the packet to the EPC and then sends the packet to the AC.
  • the AC decapsulates the CAPWAP packet and forwards it to the BRAS.
  • the BRAS allocates an IP address to the WiFi terminal through the BRAS, and the WiFi terminal accesses the service domain in the IP layer authentication and/or charging through the BRAS, so that the application system can separately charge the WiFi terminal;
  • the EPC accesses the application domain charging service domain, and the service domain charges the WiFi terminal at the application layer, thereby implementing the application system to separately charge different services accessed by the WiFi terminal, thereby avoiding the WiFi terminal.
  • the BRAS accesses all the different service domains, the BRAS must deduct the cost of the service that is also charged at the application layer after all the services are charged. This reduces the difficulty of implementing and deploying BRAS and AAA (Authentication, Authorization, Accounting, Authentication, Authorization, and Statistics) servers.
  • AAA Authentication, Authorization, Accounting, Authentication, Authorization, and Statistics
  • the obtaining unit 41 is configured to pre-configure an access control list of the uplink data service, or an access control list for dynamically deriving the uplink data service, where the access control list of the uplink data service includes quintuple information of the uplink data service,
  • the quintuple information includes a source address, a destination address, a source port, a destination port, and a protocol number of the uplink data service.
  • the access control list of the uplink data service obtained by the obtaining unit 41 includes the quintuple information of the uplink data service, where the quintuple information includes the source address of the terminal that initiates the uplink data service, the destination address of the service domain to be accessed, and the initiation Source port of the upstream data service, destination port and protocol number to access the service domain.
  • the tunnel establishing unit 42 is configured to communicate with the broadband remote access server BRAS through the EPC according to the first IP address allocated by the EPC, establish a CAPWAP tunnel, and connect the WiFi terminal encapsulated by the CAPWAP tunnel with the IP address. Transmitting, by the layer, the service domain that performs authentication and/or charging is sent to the BRAS, and the BRAS is used to interact with the service domain that performs authentication and/or charging at the IP layer. WiFi The terminal is assigned a second IP address.
  • the IP layer service processing unit 44 is configured to: if the determining unit determines that the uplink data service initiated by the WiFi terminal is a data service type that is authenticated and/or charged at an IP layer, and adopts the uplink data service
  • the CAPWAP tunnel is encapsulated.
  • the application layer service processing unit 45 is further configured to: if the uplink data service initiated by the WiFi terminal is a data service type that is authenticated and/or charged at the application layer, and the packet carrying the uplink data service is carried by the packet
  • the second IP address of the WiFi terminal is translated to the first IP address of the CPE device.
  • the priority processing unit 46 is configured to perform priority scheduling on the uplink data service initiated by the WiFi terminal according to the type of the uplink data service initiated by the WiFi terminal and the priority information of the uplink data service.
  • the uplink data service access control list obtained by the obtaining unit 41 further includes the priority information of the uplink data service, so that the CPEs correspond to different priorities according to different data service types.
  • the information priority processing unit 46 provides different priority scheduling for different uplink data services, and specifically may adopt a WFQ (Weighted Fair Queuing) congestion management algorithm.
  • the bearer mapping unit 47 is configured to map the uplink data service initiated by the WiFi terminal to the corresponding bearer according to the QoS mechanism of the EPS.
  • the EPC completes the authentication for the CPE/AP according to the 3GPP standard procedure and establishes a PDN connection.
  • the PDN connection corresponds to the default EPS bearer and a dedicated EPS bearer with permanent online demand.
  • the tunnel establishment unit 42 establishes a CAPWAP control channel and a data channel with the AC according to the CAPWAP standard, and the CAPWAP control channel and the data channel are respectively carried on the EPS dedicated bearer corresponding to the CPE/AP, for example, the CAPWAP control channel bearer can be in the EPS dedicated bearer and default. Hosted on.

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Mobile Radio Communication Systems (AREA)

Abstract

The present invention provides a method and apparatus for a WiFi terminal to access different service domains. The method is applied to CPE and comprises: if an uplink data service initiated by a WiFi terminal is of a data service type with authentication and/or charging being performed on an IP layer, encapsulating the uplink data service through a CAPWAP tunnel; after a packet of the uplink data service encapsulated through the CAPWAP tunnel is transparently transmitted through an EPC, sending the packet to a BRAS, and the BRAS sending the packet of the uplink data service to a corresponding service domain; if the uplink data service initiated by the WiFi terminal is of a data service type with authentication and/or charging being performed on an application layer, converting a second IP address of the WiFi terminal carried by a packet bearing the uplink data service into a first IP address of a CPE device; directly routing and forwarding the packet, carrying the first IP address of the CPE device, of the uplink data service to a corresponding service domain through the EPC.

Description

一种 Wifi终端访问不同业务域的方法和装置 本申请要求于 2012年 1月 18日提交中国专利局、 申请号为 201210015987. 5、发明 名称为 "一种 Wifi终端访问不同业务域的方法和装置" 的中国专利申请的优先权, 其 全部内容通过引用结合在本申请中。 技术领域 本发明涉及通信技术领域, 尤其涉及一种 WiFi终端访问不同业务流的方法和装置。 背景技术 随着 LTE ( Long Term Evolution, 长期演进)、 HSPA (High Speed Packet Access , 高速分组接入) 技术的快速发展, 业界出现了采用 HSPA+LTE技术实现宽带无线接入的 需求, 通过 ( Long Term Evolution Advanced, LTE技术的后续演进) CPE (Customer Premise Equipment , 用户端设备) 进行无线宽带接入。 同时 WiFi已成为智能机、 笔记 本、平板电脑等消费电子产品的标准配置。相对于 LTE终端, WiFi终端成本低且更普及。 所以在无线宽带技术领域中, 采用 LTE+WiFi的技术方案则成为一种趋势。  Method and device for accessing different service domains by Wifi terminal The present application claims to be submitted to the Chinese Patent Office on January 18, 2012, and the application number is 201210015987. 5. The invention name is "a method and device for accessing different service domains by a Wifi terminal" The priority of the Chinese Patent Application, the entire contents of which is incorporated herein by reference. The present invention relates to the field of communications technologies, and in particular, to a method and apparatus for a WiFi terminal to access different service flows. BACKGROUND With the rapid development of LTE (Long Term Evolution) and HSPA (High Speed Packet Access) technologies, the demand for broadband wireless access using HSPA+LTE technology has emerged in the industry. Term Evolution Advanced, Subsequent Evolution of LTE Technology) CPE (Customer Premise Equipment) performs wireless broadband access. At the same time, WiFi has become the standard configuration for consumer electronics such as smartphones, notebooks, and tablets. Compared to LTE terminals, WiFi terminals are low cost and more popular. Therefore, in the field of wireless broadband technology, the adoption of the LTE+WiFi technology solution has become a trend.
为了实现 WiFi 终端通过 LTE CPE 接入到网络中需要支持多种数据业务, 如 In order to realize that a WiFi terminal accesses the network through the LTE CPE, it needs to support multiple data services, such as
Internet s IPTV ( Internet Personal ity Television,交互式网络电视)、 IMS ( Internet Protocol Multimedia Subsystem 网络多媒体子系统) 和运营商自营的业务。 对于 Internet等业务需要在 IP ( Internet Protocol , 因特网协议) 层进行认证和 /或计费 的业务, 由于 LTE/EPC只能感知到 LTE CPE, 不能感知到 LTE CPE下的 WiFi终端, 故现 有技术的 LTE/EPC不能在 WiFi终端访问 IP层进行认证和 /或计费的业务域的情况下对 WiFi终端进行认证和 /或计费。 Internet s IPTV (Internet Personality Television), IMS (Internet Protocol Multimedia Subsystem) and operator-owned services. For services such as the Internet that require authentication and/or accounting at the IP (Internet Protocol) layer, LTE/EPC can only perceive LTE CPE and cannot perceive WiFi terminals under LTE CPE. The LTE/EPC cannot authenticate and/or charge the WiFi terminal in the case where the WiFi terminal accesses the service domain in which the IP layer performs authentication and/or accounting.
为了能够在 WiFi终端访问 IP层进行认证和 /或计费的业务域的情况下对 WiFi终端 进行认证和 /或计费, 现有技术提出了一种新的网络架构, WiFi终端的上行数据业务流 通过 CAPWAP隧道封装透过 EPC后, 接入 BRAS (Broadband Remote Access Server, 宽 带远程接入服务器) 的组网方式, 然后经过 BRAS分别接入到相应的业务域。 但是采用 这禾中组网方式, 上行数据业务流通过 CAPWAP (Control And Provisioning of Wireless Access Points Protocol Specification, 无线接入点的控制和配置) 隧道封装, 这样 给除 Internet等在 IP层进行认证和 /或计费的业务以外的其它业务带来了很大的头开 销, 严重影响了 EPS ( Evolved Packet System, 演进型分组系统) 的效率; 且 CAPWAP 隧道的五元组是相同的, WiFi终端的不同上行数据业务流将被映射到相同的 EPS承载, 使得无法实现对 WiFi终端发起的不同业务流进行优先级调度。 发明内容 In order to be able to authenticate and/or charge the WiFi terminal in the case that the WiFi terminal accesses the service domain of the IP layer for authentication and/or accounting, the prior art proposes a new network architecture, the uplink data service of the WiFi terminal. After being encapsulated by the CAPWAP tunnel, the traffic is connected to the BRAS (Broadband Remote Access Server) and then connected to the corresponding service domain through the BRAS. However, in the networking mode, the uplink data service flow is encapsulated by the CAPWAP (Control and Provisioning of Wireless Access Points Protocol Specification), so that the Internet layer and the like are authenticated and/or Or other services other than the billing service bring a large head overhead, which seriously affects the efficiency of EPS (Evolved Packet System); and CAPWAP The quintuple of the tunnel is the same. Different uplink data service flows of the WiFi terminal will be mapped to the same EPS bearer, so that priority scheduling of different service flows initiated by the WiFi terminal cannot be implemented. Summary of the invention
本发明的实施例提供一种 WiFi终端访问不同业务域的方法和装置,用于解决现有技 术存在着的 EPS效率低, 同时无法实现对 WiFi终端发起的不同业务流进行优先级调度的 问题。  The embodiments of the present invention provide a method and an apparatus for accessing different service domains by a WiFi terminal, which are used to solve the problem that the EPS of the prior art is low in efficiency and the priority scheduling of different service flows initiated by the WiFi terminal cannot be implemented.
为解决上述技术问题, 本发明的实施例采用如下技术方案:  In order to solve the above technical problem, the embodiment of the present invention adopts the following technical solutions:
一种用于 WiFi终端接入到不同业务域的方法, 应用于用户端设备 CPE, 所述 CPE与所 述 WiFi终端通过 WiFi方式进行通信, 所述 CPE与基站通过长期演进 LTE方式进行通信, 所 述基站通过演进型分组核心网 EPC与多种业务分别对应的多个业务域相连, 通过上述系 统架构, 使得所述 WiFi终端通过所述 CPE, 所述基站, 所述 EPC与所述业务域进行通信, 其中, 所述方法包括:  A method for a WiFi terminal to access a different service domain is applied to a user equipment CPE, where the CPE communicates with the WiFi terminal through a WiFi mode, and the CPE communicates with the base station through a long-term evolution LTE mode. The base station is connected to a plurality of service domains corresponding to the plurality of services by using the EPC of the evolved packet core network. The system is configured to enable the WiFi terminal to pass the CPE, the base station, the EPC, and the service domain. Communication, wherein the method includes:
所述 CPE根据所述 EPC分配的第一 IP地址通过所述 EPC与宽带远程接入服务器 BRAS进 行通信并建立 CAPWAP隧道,将通过 CAPWAP隧道封装的 WiFi终端与所述在 IP层进行认证和 /或计费的业务域进行通信的报文发送到 BRAS, 并通过所述 WiFi终端与所述在 IP层进行 认证和 /或计费的业务域的交互使得所述 BRAS为所述 WiFi终端分配一个第二 IP地址; 确定所述 WiFi终端发起的上行数据业务的数据业务类型;  The CPE communicates with the broadband remote access server BRAS through the EPC according to the first IP address allocated by the EPC, and establishes a CAPWAP tunnel, and authenticates the WiFi terminal encapsulated by the CAPWAP tunnel with the IP layer and/or Transmitting, by the charging service domain, a message that is communicated to the BRAS, and by the WiFi terminal interacting with the service domain that performs authentication and/or charging at the IP layer, the BRAS allocates a number to the WiFi terminal. a second IP address; determining a data service type of the uplink data service initiated by the WiFi terminal;
若所述 WiFi终端发起的上行数据业务是在 IP层进行认证和 /或计费的数据业务类 型, 将所述上行数据业务通过所述 CAPWAP隧道进行封装; 将通过 CAPWAP隧道封装的上行 数据业务的报文透传过所述 EPC后发送到 BRAS, 所述 BRAS将所述上行数据业务的报文发 送给相应的业务域;  If the uplink data service initiated by the WiFi terminal is a data service type that is authenticated and/or charged at the IP layer, the uplink data service is encapsulated by using the CAPWAP tunnel; and the uplink data service encapsulated by the CAPWAP tunnel is used. The packet is transmitted to the BRAS after being transparently transmitted to the EPC, and the BRAS sends the packet of the uplink data service to the corresponding service domain.
若 WiFi终端发起的上行数据业务是在应用层进行认证和 /或计费的数据业务类型, 则将承载所述上行数据业务的报文携带的所述 WiFi终端的所述第二 IP地址转换为所述 CPE设备的所述第一 IP地址; 将所述携带有所述 CPE设备的第一 IP地址的所述上行数据业 务的报文通过所述 EPC直接路由转发给相应的业务域。  If the uplink data service initiated by the WiFi terminal is a data service type that is authenticated and/or charged at the application layer, converting the second IP address of the WiFi terminal carried in the packet carrying the uplink data service into The first IP address of the CPE device is forwarded to the corresponding service domain by using the EPC direct route to the packet carrying the uplink data service of the first IP address of the CPE device.
一种用于 WiFi终端接入到不同业务域的装置, 其特征在于, 所述 CPE与所述 WiFi终 端通过 WiFi方式进行通信, 所述 CPE与基站通过长期演进 LTE方式进行通信, 所述基站通 过演进型分组核心网 EPC与多种业务分别对应的多个业务域相连, 通过上述系统架构, 使得所述 WiFi终端通过所述 CPE, 所述基站, 所述 EPC与所述业务域进行通信, 所述 CPE 包括: An apparatus for accessing a WiFi terminal to a different service domain, wherein the CPE communicates with the WiFi terminal by using a WiFi mode, and the CPE communicates with the base station by using a long-term evolution LTE mode, where the base station passes The EPC of the evolved packet core network is connected to multiple service domains corresponding to multiple services, and through the above system architecture, And causing the WiFi terminal to communicate with the service domain by using the CPE, the EPC, where the CPE includes:
隧道建立单元,用于根据所述 EPC分配的第一 IP地址通过所述 EPC与宽带远程接入服 务器 BRAS进行通信, 建立 CAPWAP隧道, 将通过 CAPWAP隧道封装的 WiFi终端与所述在 IP层 进行认证和 /或计费的业务域进行通信的报文发送到 BRAS, 并通过所述 WiFi终端与所述 在 IP层进行认证和 /或计费的业务域的交互使得所述 BRAS为所述 WiFi终端分配一个第二 IP地址;  a tunnel establishing unit, configured to communicate with the broadband remote access server BRAS through the EPC according to the first IP address allocated by the EPC, establish a CAPWAP tunnel, and authenticate the WiFi terminal encapsulated by the CAPWAP tunnel with the IP layer And communicating with the billed service domain to the BRAS, and the BRAS is the WiFi terminal by interacting with the service domain that performs authentication and/or charging at the IP layer. Assign a second IP address;
确定单元, 用于确定所述 WiFi终端发起的上行数据业务的数据业务类型;  a determining unit, configured to determine a data service type of the uplink data service initiated by the WiFi terminal;
IP层业务处理单元,用于若所述确定单元确定所述 WiFi终端发起的上行数据业务是 在 IP层进行认证和 /或计费的数据业务类型, 将所述上行数据业务通过所述 CAPWAP隧道 进行封装;  The IP layer service processing unit is configured to: if the determining unit determines that the uplink data service initiated by the WiFi terminal is a data service type that is authenticated and/or charged at an IP layer, and uses the uplink data service to pass the CAPWAP tunnel. Carry out packaging;
应用层业务处理单元,用于若所述确定单元确定 WiFi终端发起的上行数据业务是在 应用层进行认证和 /或计费的数据业务类型, 则将承载所述上行数据业务的报文携带的 所述 WiFi终端的所述第二 IP地址转换为所述 CPE设备的所述第一 IP地址;  The application layer service processing unit is configured to: if the determining unit determines that the uplink data service initiated by the WiFi terminal is a data service type that is authenticated and/or charged at the application layer, carries the packet carrying the uplink data service. Converting the second IP address of the WiFi terminal to the first IP address of the CPE device;
发送单元, 用于将通过 CAPWAP隧道封装的所述上行数据业务的报文透传过所述 EPC 后发送到 BRAS, 所述 BRAS将所述上行数据业务的报文发送给相应的业务域; 或  a sending unit, configured to transparently transmit the packet of the uplink data service encapsulated by the CAPWAP tunnel to the BRAS, and send the packet of the uplink data service to a corresponding service domain; or
用于将所述携带有所述 CPE设备的第一 IP地址的所述上行数据业务的报文通过所述 EPC直接路由转发给相应的业务域。  The packet of the uplink data service carrying the first IP address of the CPE device is directly forwarded to the corresponding service domain by using the EPC.
本发明实施例提供的 WiFi终端接入不同业务域的方法和装置,用户端设备根据 WiFi 端发起的不同数据业务进行智能路由, 如对在 IP层进行认证和 /或计费的业务, 通过所 述 CAPWAP隧道将承载有所述上行数据业务的报文进行封装后透传过所述 EPC后发送到 BRAS, BRAS将所述上行数据业务的报文发送给相应的业务域; 对于在应用层认证和 /或 计费的业务, 则将承载所述上行数据业务的报文携带的所述 WiFi终端的所述第二 IP地址 转换为所述 CPE设备的所述第一 IP地址, 通过所述 EPC直接路由转发给相应的业务域, 这 样 WiFi终端访问在应用层进行认证和 /或计费的业务域, 不需要通过 BRAS, WiFi终端与 业务域间的报文也不需要 CAPWAP隧道封装, 不会增加报文的头开销, 从而可以提高 EPS 的传送效率; 同时通过对不同类型的业务域进行智能路由, 如对于在 IP层或应用层进行 认证和 /或计费的不同类型的业务域的五元组不同,使得 CPE可以将 WiFi终端的不同数据 业务映射到不同的 EPS承载, 实现了不同业务流之间的优先级调度。 附图说明 为了更清楚地说明本发明实施例或现有技术中的技术方案, 下面将对实施例或现有 技术描述中所需要使用的附图作简单地介绍, 显而易见地, 下面描述中的附图仅仅是本 发明的一些实施例, 对于本领域普通技术人员来讲, 在不付出创造性劳动的前提下, 还 可以根据这些附图获得其他的附图。 The method and device for accessing different service domains of the WiFi terminal provided by the embodiment of the present invention, the user equipment performs intelligent routing according to different data services initiated by the WiFi terminal, for example, the service for authenticating and/or charging at the IP layer, The CAPWAP tunnel encapsulates the packet carrying the uplink data service, and then transmits the packet to the BRAS. The BRAS sends the packet of the uplink data service to the corresponding service domain. Transmitting, by the EPC, the second IP address of the WiFi terminal carried by the packet carrying the uplink data service to the first IP address of the CPE device, The direct route is forwarded to the corresponding service domain, so that the WiFi terminal accesses the service domain that is authenticated and/or charged at the application layer, and does not need to pass the BRAS. The packet between the WiFi terminal and the service domain does not need to be encapsulated by the CAPWAP tunnel. Increasing the header overhead of the packet, thereby improving the transmission efficiency of the EPS; and simultaneously performing intelligent routing on different types of service domains, such as authentication and/or authentication at the IP layer or the application layer. The five-tuples of different types of service domains are different, so that the CPE can map different data services of the WiFi terminal to different EPS bearers, and implement priority scheduling between different service flows. BRIEF DESCRIPTION OF THE DRAWINGS In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings to be used in the embodiments or the description of the prior art will be briefly described below, and obviously, in the following description The drawings are only some of the embodiments of the present invention, and those skilled in the art can obtain other drawings based on these drawings without any creative work.
图 1为本发明实施例提供的一种 WiFi终端接入不同业务域的方法流程图; 图 2为 WiFi终端通过 EPS接入到不同业务域的网络系统示意图;  1 is a flowchart of a method for a WiFi terminal to access different service domains according to an embodiment of the present invention; FIG. 2 is a schematic diagram of a network system for a WiFi terminal to access different service domains through an EPS;
图 3为 WiFi终端请求 BRAS分配第二 IP地址的流程示意图;  3 is a schematic diagram of a process in which a WiFi terminal requests a BRAS to allocate a second IP address;
图 4为本发明实施例提供的另一种 WiFi终端接入不同业务域的方法流程图; 图 5为本发明实施例提供的一种用于 WiFi终端接入不同业务与的装置结构框图。 具体实施方式 下面将结合本发明实施例中的附图,对本发明实施例中的技术方案进行清楚、完整 地描述, 显然, 所描述的实施例仅是本发明一部分实施例, 而不是全部的实施例。 基于 本发明中的实施例,本领域普通技术人员在没有做出创造性劳动前提下所获得的所有其 他实施例, 都属于本发明保护的范围。  FIG. 4 is a flowchart of another method for a WiFi terminal to access different service domains according to an embodiment of the present invention; FIG. 5 is a structural block diagram of an apparatus for a WiFi terminal to access different services and services according to an embodiment of the present invention. The technical solutions in the embodiments of the present invention are clearly and completely described in the following with reference to the accompanying drawings in the embodiments of the present invention. It is obvious that the described embodiments are only a part of the embodiments of the present invention, and not all of the embodiments. example. All other embodiments obtained by those skilled in the art based on the embodiments of the present invention without creative efforts are within the scope of the present invention.
实施例一  Embodiment 1
本发明实施例提供了一种 WiFi终端接入不同业务域的方法和装置, 该方法应用于 用户端设备 CPE, 如图 1、 2、 3所示, 图 2为本实施例所基于的网络系统, 其中 WiFi 终端通过 AP附着到 WLAN与所述 CPE通过 WiFi方式进行通信, 所述 CPE与所述基站通 过 LTE方式进行通信、 所述基站通过 EPC与多种业务分别对应的多个业务域相连, 这样 通过上述系统架构, 使得所述 WiFi终端通过所述 CPE, 所述基站, 所述与所述业务域进 行通信。 图中给出了 AP (Access Point , WiFi无线接入点) 和用户端设备 CPE的两种 设置方式, CPE可以集成 AP功能模块, 如图 1中的 CPE/AP, AP和 CPE也可以是两个分 离的设备。 其中本实施例提供的该装置是 CPE集成有 AP的功能。  The embodiment of the present invention provides a method and a device for accessing different service domains of a WiFi terminal, and the method is applied to a client device CPE, as shown in FIG. 1, 2, and 3, and FIG. 2 is a network system based on the embodiment. The WiFi terminal is connected to the WLAN through the AP to communicate with the CPE, and the CPE communicates with the base station by using the LTE mode, and the base station is connected to multiple service domains corresponding to multiple services by using the EPC. In this way, through the foregoing system architecture, the WiFi terminal communicates with the service domain through the CPE and the base station. The figure shows two settings for the AP (Access Point, WiFi Access Point) and the CPE of the client device. The CPE can be integrated with the AP function module. For example, the CPE/AP in Figure 1, the AP and the CPE can also be two. Separate devices. The device provided in this embodiment is a function in which the CPE is integrated with an AP.
为了应用系统能对 WiFi终端访问 Internet后独立计费, WiFi终端通过 EPS网络 系统接入到 Internet需要经过 BRAS,这样 BRAS对 WiFi终端访问的 Internet数据业务 记录上报认证计费服务器进行认证计费。 该 CPE与 BRAS进行通信是通过 AC (Access Control ler, WiFi接入控制器) 采用 EPC为该 CPE分配的第一 IP地址, 该 CPE与 AC 之间通过 CAPWAP隧道与所述 BRAS进行通信的报文, 然后所述 AC接入到 BRAS, 当然 AC 和 BRAS也可以是集成在一起的一个物理设备。 其中第一 IP地址是 CPE在上电后, CPE 按照 3GPP的标准流程完成 EPC对 CPE的认证, 并和 EPC建立 PDN连接后, EPC为 CPE 分配的 IP地址。 In order for the application system to independently charge the WiFi terminal after accessing the Internet, the WiFi terminal needs to pass the BRAS through the EPS network system to access the Internet, so that the BRAS authenticates the Internet data service record accessed by the WiFi terminal to the authentication and accounting server for authentication and charging. The communication between the CPE and the BRAS is a first IP address assigned by the EPC to the CPE through an AC (Access Control Manager), and the CPE communicates with the AC through the CAPWAP tunnel. , then the AC is connected to the BRAS, of course AC And the BRAS can also be a physical device that is integrated. The first IP address is the IP address assigned by the EPC to the CPE after the CPE is authenticated by the CPE according to the 3GPP standard procedure and after the PDN connection is established with the EPC.
BRAS通过上述图 1的系统架构为该 WiFi终端分配第二 IP地址, 具体如图 3所示, 为了便于说明, 本过程中将 BRAS分为 AC和 BRAS分为两个功能模块来说明。 为 WiFi终 端分配第二 IP地址过程如下:  The BRAS allocates a second IP address to the WiFi terminal through the system architecture of FIG. 1 , as shown in FIG. 3 . For convenience of description, the BRAS is divided into two functional modules in the process of dividing the BRAS into AC and BRAS. The process of assigning a second IP address to a WiFi terminal is as follows:
首先 WiFi 终端向 CPE 发送 DHCP Discovery ( Dynamic Host Configuration Protocol , 动态主机设置协议发现) 广播报文; CPE收到 DHCP Discovery广播报文后, 将该报文通过 CAPWAP隧道封装,发送给 CPE。 CPE将通过 CAPWAP封装的报文转发给 AC, CPE在该报文中使用了 EPC为 CPE分配的第一 IP地址。 AC对接收到的报文进行 CAPWAP 隧道解封装, 然后转发给 BRAS。 BRAS在接收到 WiFi终端发送的 DHCP Discovery广播 报文后, 向 AC返回 DHCP 0FFER。 AC再相应的对 DHCP OFFER报文进行 CAPWAP隧道封装, 发送给 CPE, CPE对经过 CAPWAP隧道封装的 DHCP OFFER报文进行解封装后发送给 WiFi 终端。 WiFi终端在接收到 BRAS发送的 DHCP OFFER报文后, 向 BRAS发送 DHCP Request 广播报文, 具体的过程与前述向 BRAS发送 DHCP Discovery过程相同, 从而使得 BRAS 向 WiFi终端分配第二 IP地址。  First, the WiFi terminal sends a DHCP Discovery (Dynamic Host Configuration Protocol) broadcast packet to the CPE. After receiving the DHCP Discovery broadcast packet, the CPE encapsulates the packet in the CAPWAP tunnel and sends the packet to the CPE. The CPE forwards the packet encapsulated by the CAPWAP to the AC. The CPE uses the first IP address assigned by the EPC to the CPE in the packet. The AC decapsulates the received packet by CAPWAP tunnel and forwards it to the BRAS. After receiving the DHCP Discovery broadcast message sent by the WiFi terminal, the BRAS returns DHCP 0FFER to the AC. The AC then encapsulates the DHCP OFFER packet in the CAPWAP tunnel and sends it to the CPE. The CPE decapsulates the DHCP OFFER packet encapsulated in the CAPWAP tunnel and sends it to the WiFi terminal. After receiving the DHCP OFFER message sent by the BRAS, the WiFi terminal sends a DHCP Request broadcast message to the BRAS. The specific procedure is the same as the process of sending the DHCP Discovery to the BRAS, so that the BRAS assigns the second IP address to the WiFi terminal.
其中 WiFi终端支持的数据业务包括:在 IP层进行计费的业务和在应用层进行认证 的业务, 如 HSI (High Speed Internet ) 业务在 IP层进行计费, 运营商自营的游戏、 IMS业务和 IPTV业务在应用层计费。 该方法包括:  The data services supported by the WiFi terminal include: services for charging at the IP layer and services for authentication at the application layer, such as HSI (High Speed Internet) services for charging at the IP layer, operators' own games, and IMS services. And IPTV services are billed at the application layer. The method includes:
S10K 接收所述 WiFi终端发送的上行数据业务消息, 所述上行数据业务消息携带 有宽带远程接入服务器 BRAS分配给所述 WiFi终端的第二 IP地址。  S10K receives an uplink data service message sent by the WiFi terminal, where the uplink data service message carries a second IP address allocated by the broadband remote access server BRAS to the WiFi terminal.
S102、 确定所述 WiFi终端发起的上行数据业务的数据业务类型。  S102. Determine a data service type of the uplink data service initiated by the WiFi terminal.
CPE收到 WiFi终端发送的上行数据业务消息后, 可以根据所述上行数据业务消息 的五元组信息来确定所述 WiFi终端发起的上行数据业务的数据业务类型。 上行数据业 务消息的五元组信息可以是 CPE预配置的,或通过 CPE的 UL-TFT (Uplink Traffic Flow Template, 上行数据业务流模板) 动态派生获取的。  After receiving the uplink data service message sent by the WiFi terminal, the CPE may determine the data service type of the uplink data service initiated by the WiFi terminal according to the quintuple information of the uplink data service message. The quintuple information of the uplink data service message can be pre-configured by the CPE or dynamically derived from the UL-TFT (Uplink Traffic Flow Template) of the CPE.
在确定了所述 WiFi终端发起的上行数据业务消息后,若所述 WiFi终端发起的上行 数据业务是在 IP层进行认证和 /或计费的数据业务类型则执行 S103步骤; 若 WiFi终端 发起的上行数据业务是在应用层进行认证和 /或计费的数据业务类型,则执行 S104步骤。  After the uplink data service message initiated by the WiFi terminal is determined, if the uplink data service initiated by the WiFi terminal is a data service type that is authenticated and/or charged at the IP layer, step S103 is performed; if the WiFi terminal initiates The uplink data service is a data service type that performs authentication and/or accounting at the application layer, and then step S104 is performed.
S103、将所述上行数据业务通过所述 CAPWAP隧道进行封装; 将通过 CAPWAP隧道封 装的上行数据业务的报文透传过所述 EPC后发送到 BRAS, 所述 BRAS将所述上行数据业 务的报文发送给相应的业务域。 S103. Encapsulate the uplink data service by using the CAPWAP tunnel; and seal the CAPWAP tunnel. The packet of the uplink data service is transmitted to the BRAS after being transmitted through the EPC, and the BRAS sends the packet of the uplink data service to the corresponding service domain.
若 WiFi终端发起的上行数据业务是在 IP层进行认证和 /或计费, CPE将 WiFi终端 发送的上行数据业务通过 CAPWAP隧道进行封装后, CPE将承载有所述上行数据业务的报 文透传过所述 EPC后发送给 AC (指 EPC不对报文进行处理, EPC相对于报文来说是 "透 明" 的) , AC接入 BRAS将所述上行数据业务的报文发送给相应的业务。 这样可以使得 应用系统可以单独对 WiFi终端进行认证和 /或计费。  If the uplink data service initiated by the WiFi terminal is authenticated and/or charged at the IP layer, the CPE encapsulates the uplink data service sent by the WiFi terminal through the CAPWAP tunnel, and the CPE transparently transmits the packet carrying the uplink data service. After the EPC is sent to the AC (the EPC does not process the packet, the EPC is "transparent" with respect to the packet), and the AC accesses the BRAS to send the packet of the uplink data service to the corresponding service. This allows the application system to individually authenticate and/or bill the WiFi terminal.
S104、将承载所述上行数据业务的报文携带的所述 WiFi终端的所述第二 IP地址转 换为所述 CPE设备的所述第一 IP地址; 将所述携带有所述 CPE设备的第一 IP地址的所 述上行数据业务的报文通过所述 EPC直接路由转发给相应的业务域。  S104. Convert the second IP address of the WiFi terminal that is carried by the packet carrying the uplink data service to the first IP address of the CPE device, where the CPE device is carried. The packet of the uplink data service of an IP address is forwarded to the corresponding service domain by using the EPC direct route.
若 WiFi终端发起的上行数据业务是在应用层进行认证和 /或计费, CPE将承载所述 上行数据业务的报文携带的所述 WiFi终端的所述第二 IP地址转换为所述 EPC为所述 CPE模块分配的第一 IP地址,然后 CPE模块将承载上行数据业务通过 EPC路由转发给相 应的业务。  If the uplink data service initiated by the WiFi terminal is to be authenticated and/or charged at the application layer, the CPE converts the second IP address of the WiFi terminal carried in the packet carrying the uplink data service into the EPC. The first IP address allocated by the CPE module, and then the CPE module forwards the uplink data service to the corresponding service through the EPC route.
本发明实施例提供的 WiFi终端接入不同业务域的方法, CPE根据 WiFi端发起的不 同数据业务进行智能路由, 如对在 IP层进行认证和 /或计费的业务, 通过所述 CAPWAP 隧道将承载有所述上行数据业务的报文进行封装后透传过所述 EPC后发送到 BRAS, BRAS 将所述上行数据业务的报文发送给相应的业务域; 对于在应用层认证和 /或计费的业务, 则将承载所述上行数据业务的报文携带的所述 WiFi终端的所述第二 IP地址转换为所述 CPE设备的所述第一 IP地址, 通过所述 EPC直接路由转发给相应的业务域, 这样 WiFi 终端访问在应用层进行认证和 /或计费的业务域,不需要通过 BRAS,这样 WiFi终端与业 务域间的报文不需要 CAPWAP隧道封装, 不会增加报文的头开销, 从而可以提高 EPS的 传送效率; 同时 CPE通过对不同类型的业务域进行智能路由, 如对于在 IP层或应用层 进行认证和 /或计费的不同类型的业务域的五元组不同,使得 CPE可以将 WiFi终端的不 同数据业务映射到不同的 EPS承载, 实现了不同业务流之间的优先级调度。 实施例二  The method for accessing different service domains by the WiFi terminal provided by the embodiment of the present invention, the CPE performs intelligent routing according to different data services initiated by the WiFi terminal, for example, the service for authenticating and/or charging at the IP layer, through the CAPWAP tunnel The packet carrying the uplink data service is encapsulated and transmitted to the BRAS after being transparently transmitted to the BRAS, and the BRAS sends the packet of the uplink data service to the corresponding service domain; for authentication and/or accounting at the application layer. The service of the fee, the second IP address of the WiFi terminal carried in the packet carrying the uplink data service is converted into the first IP address of the CPE device, and is directly forwarded by the EPC to the EPC. Corresponding service domain, such that the WiFi terminal accesses the service domain that is authenticated and/or charged at the application layer, and does not need to pass the BRAS, so that the packet between the WiFi terminal and the service domain does not need to be encapsulated by the CAPWAP tunnel, and the packet is not added. Head overhead, which can improve the transmission efficiency of EPS; at the same time, CPE intelligently routes different types of service domains, such as for identification at the IP layer or application layer. The quintuples of different types of service domains are different from each other, so that the CPE can map different data services of the WiFi terminal to different EPS bearers, and implement priority scheduling between different service flows. Embodiment 2
本发明实施例提供了一种 WiFi终端接入不同业务域的方法和装置, 该方法应用于 LTE用户端设备 CPE, 如图 2、 3、 4所示, 图 2为本实施例所基于的网络系统,其中 WiFi 终端通过 AP附着到 WLAN与所述 CPE通过 WiFi方式进行通信, 所述 CPE与所述基站通 过 LTE方式进行通信、 所述基站通过 EPC与多种业务分别对应的多个业务域相连, 这样 通过上述系统架构, 使得所述 WiFi终端通过所述 CPE, 所述基站, 所述与所述业务域进 行通信。 图中给出了 AP (Access Point, WiFi无线接入点) 和用户端设备 CPE的两种 设置方式, CPE可以集成 AP功能模块, 如图 2中的 CPE, AP和 CPE也可以是两个分离的 设备。 其中本实施例提供的该装置是 CPE集成有 AP的功能。 The embodiment of the invention provides a method and a device for accessing different service domains of a WiFi terminal. The method is applied to an LTE client device CPE, as shown in FIG. 2, FIG. 3 and FIG. 4, FIG. 2 is a network on which the embodiment is based. a system in which a WiFi terminal communicates with the CPE through a WiFi mode, and the CPE communicates with the base station. The LTE mode is used for communication, and the base station is connected to multiple service domains corresponding to the multiple services by using the EPC, so that the WiFi terminal passes the CPE, the base station, and the service by using the foregoing system architecture. The domain communicates. The figure shows two settings for the AP (Access Point, WiFi Access Point) and the CPE of the client device. The CPE can integrate the AP function module. As shown in Figure 2, the AP and CPE can also be separated. device of. The device provided in this embodiment is a function in which the CPE is integrated with an AP.
为了应用系统能对 WiFi终端访问 Internet后独立计费, WiFi终端通过 EPS网络 系统接入到 Internet需要经过 BRAS,这样 BRAS对 WiFi终端访问的 Internet数据业务 记录上报认证计费服务器进行认证计费。 该 CPE与 BRAS进行通信是通过 AC (Access Controller, WiFi接入控制器) 采用 EPC为该 CPE分配的第一 IP地址, 该 CPE与 AC 之间通过 CAPWAP隧道后进行通信, 然后所述 AC接入到 BRAS, 当然本实施例是基于 AC 和 BRAS是集成在一起的作为 BRAS—个物理设备。其中第一 IP地址是 CPE/AP在上电后, CPE/AP按照 3GPP的标准流程完成 EPC对 CPE/AP的认证和 PDN的建立, EPC为 CPE/AP 分配的 IP地址。  In order for the application system to independently charge the WiFi terminal after accessing the Internet, the WiFi terminal needs to pass the BRAS through the EPS network system to access the Internet, so that the BRAS authenticates and bills the Internet data service record accessed by the WiFi terminal to the authentication and accounting server. The communication between the CPE and the BRAS is performed by the AC (Access Controller, WiFi access controller) using the first IP address assigned by the EPC to the CPE, and the CPE communicates with the AC through the CAPWAP tunnel, and then the AC access is performed. To the BRAS, of course, this embodiment is based on the AC and BRAS are integrated as a BRAS - a physical device. The first IP address is the CPE/AP. After the CPE/AP is powered on, the CPE/AP completes the EPC-to-CPE/AP authentication and PDN establishment according to the 3GPP standard procedure. The EPC is the IP address assigned by the CPE/AP.
BRAS通过上述图 2的系统架构为该 WiFi终端分配第二 IP地址, 具体如图 3所示, 为了便于说明, 本过程中将 BRAS分为 AC和 BRAS分为两个功能模块来说明。 为 WiFi终 端分配第二 IP地址过程如下:  The BRAS allocates a second IP address to the WiFi terminal through the system architecture of FIG. 2, as shown in FIG. 3. For convenience of description, the BRAS is divided into two functional modules in the process of dividing the BRAS into AC and BRAS. The process of assigning a second IP address to a WiFi terminal is as follows:
首先 WiFi 终端向 CPE 发送 DHCP Discovery ( Dynamic Host Configuration Protocol , 动态主机设置协议发现) 广播报文; CPE收到 DHCP Discovery广播报文后, 将该报文通过 CAPWAP隧道封装,发送给 CPE。 CPE将通过 CAPWAP封装的报文转发给 AC, CPE在该报文中使用了 EPC为 CPE分配的第一 IP地址。 AC对接收到的报文进行 CAPWAP 隧道解封装, 然后转发给 BRAS。 BRAS在接收到 WiFi终端发送的 DHCP Discovery广播 报文后, 向 AC返回 DHCP 0FFER。 AC再相应的对 DHCP OFFER报文进行 CAPWAP隧道封装, 发送给 CPE, CPE对经过 CAPWAP隧道封装的 DHCP OFFER报文进行解封装后发送给 WiFi 终端。 WiFi终端在接收到 BRAS发送的 DHCP OFFER报文后, 向 BRAS发送 DHCP Request 广播报文, 具体的过程与前述向 BRAS发送 DHCP Discovery过程相同, 从而使得 BRAS 向 WiFi终端分配第二 IP地址。  First, the WiFi terminal sends a DHCP Discovery (Dynamic Host Configuration Protocol) broadcast packet to the CPE. After receiving the DHCP Discovery broadcast packet, the CPE encapsulates the packet in the CAPWAP tunnel and sends the packet to the CPE. The CPE forwards the packet encapsulated by the CAPWAP to the AC. The CPE uses the first IP address assigned by the EPC to the CPE in the packet. The AC decapsulates the received packet by CAPWAP tunnel and forwards it to the BRAS. After receiving the DHCP Discovery broadcast message sent by the WiFi terminal, the BRAS returns DHCP 0FFER to the AC. The AC then encapsulates the DHCP OFFER packet in the CAPWAP tunnel and sends it to the CPE. The CPE decapsulates the DHCP OFFER packet encapsulated in the CAPWAP tunnel and sends it to the WiFi terminal. After receiving the DHCP OFFER message sent by the BRAS, the WiFi terminal sends a DHCP Request broadcast message to the BRAS. The specific procedure is the same as the process of sending the DHCP Discovery to the BRAS, so that the BRAS assigns the second IP address to the WiFi terminal.
其中 WiFi终端支持的数据业务包括:在 IP层进行计费的业务和在应用层进行认证 的业务, 如 HSI (High Speed Internet ) 业务在 IP层进行计费, 运营商自营的游戏、 IMS业务和 IPTV业务在应用层计费。 该方法包括:  The data services supported by the WiFi terminal include: services for charging at the IP layer and services for authentication at the application layer, such as HSI (High Speed Internet) services for charging at the IP layer, operators' own games, and IMS services. And IPTV services are billed at the application layer. The method includes:
S20K CPE预配置上行数据业务的访问控制列表, 或动态派生上行数据业务的访问 控制列表。 The S20K CPE pre-configures the access control list of the uplink data service or dynamically accesses the uplink data service. Control list.
上行数据业务的访问控制列表具体包括上行数据业务的五元组信息,所述五元组信 息包括了发起上行数据业务的终端的源地址、 要访问的业务域目的地址、 发起上行数据 业务的源端口、 要访问业务域的目的端口和协议号。  The access control list of the uplink data service specifically includes the quintuple information of the uplink data service, where the quintuple information includes the source address of the terminal that initiates the uplink data service, the destination address of the service domain to be accessed, and the source of the uplink data service. Port, destination port and protocol number to access the service domain.
上行数据业务的访问控制列表可以通过预规划设置, 并通过多种方式配置到 CPE 中, 包括: CPE 的近端配置接口、 CPE 的远端配置接口 TR069/0MA-DM、 DHCP Opt ion, Protocol Configurat ion Opt ion (PCO)扩展或 CAPWAP远程管理协议。 上行数据业务的 访问控制列表也可以是 CPE的 UL-TFT动态派生的, 具体的派生方式为采用通配符 (*) 来代替源 IP地址和源端口, 保留目的 IP地址、 协议号和目的端口不变。 当然预配置的 上行数据业务的访问控制列表中的五元组信息, 也可以使用通配符 (*) 来代替源地址 和源端口, 只预配置目的地址、 协议号和目的端口。  The access control list of the uplink data service can be configured in a pre-planned manner and configured in multiple ways to the CPE, including: CPE's near-end configuration interface, CPE's remote configuration interface TR069/0MA-DM, DHCP Option, Protocol Configurat Ion Opt ion (PCO) extension or CAPWAP remote management protocol. The access control list of the uplink data service may also be dynamically derived from the UL-TFT of the CPE. The specific derivation method is to use the wildcard (*) instead of the source IP address and the source port, and keep the destination IP address, protocol number, and destination port unchanged. . Of course, the quintuple information in the access control list of the pre-configured uplink data service can also use the wildcard character (*) instead of the source address and the source port, and only the destination address, protocol number, and destination port are pre-configured.
进一步的, CPE中的上行数据业务的访问控制列表, 还可以用于对不同上行数据业 务进行分类和标识优先级信息。  Further, the access control list of the uplink data service in the CPE can also be used to classify and identify the priority information of different uplink data services.
5202、 CPE接收所述 WiFi终端发送的上行数据业务消息, 所述上行数据业务消息 携带有宽带远程接入服务器 BRAS分配给所述 WiFi终端的第二 IP地址。  5202. The CPE receives an uplink data service message sent by the WiFi terminal, where the uplink data service message carries a second IP address allocated by the broadband remote access server BRAS to the WiFi terminal.
5203、 CPE 根据所述上行数据业务的五元组信息中的所述目的地址确定所述 WiFi 终端发起的上行数据业务的类型。  S203. The CPE determines, according to the destination address in the quintuple information of the uplink data service, a type of the uplink data service initiated by the WiFi terminal.
确定了所述 WiFi终端发起的上行数据业务的类型后,若所述 WiFi终端发起的上行 数据业务是在 IP层进行认证和 /或计费的数据业务类型, 则执行 S204步骤; 若 WiFi终 端发起的上行数据业务是在应用层进行认证和 /或计费的数据业务类型, 则执行 S205步 骤。  After determining the type of the uplink data service initiated by the WiFi terminal, if the uplink data service initiated by the WiFi terminal is a data service type that is authenticated and/or charged at the IP layer, step S204 is performed; if the WiFi terminal initiates The uplink data service is a data service type that performs authentication and/or accounting at the application layer, and then step S205 is performed.
上行数据业务的访问控制列表中的目的地址信息可以确定所述 WiFi终端要访问的 业务域的数据业务的类型。 WiFi终端可以支持的数据业务包括有: IMS、 IPTV和 HSI、 运营商自营业务等, 但不限于此。 通常运营商规划了不同业务域的目的地址段, 这样根 据 WiFi终端发起的数据业务的目的地址, 上行数据业务的访问控制列表中各个数据业 务的目的地址段, 则可以确定 WiFi终端要访问的业务域类型。例如, IMS业务域的目的 地址为 192. 168. 0. 0-192. 168. 255. 255,若所述 WiFi终端要访问的数据业务的目的地址 为 192. 168. 50. 23,这样则可以确定所述 WiFi终端要访问的数据业务是 IMS业务域。对 于在所述访问控制列表中没有匹配上的业务流,默认为 HSI业务。 WiFi终端可以支持的 数据业务包括 HSI、 IMS , IPTV和运营商自营业务等。 进一步的, 在确定所述 WiFi终端发起的上行数据业务的类型后, CPE还可以根据 预配置的上行数据业务的优先级信息确定所述 WiFi终端发起的上行数据业务的优先级 信息。 The destination address information in the access control list of the uplink data service may determine the type of the data service of the service domain to be accessed by the WiFi terminal. The data services that the WiFi terminal can support include: IMS, IPTV and HSI, carrier self-operated services, etc., but are not limited thereto. Generally, the operator plans the destination address segment of the different service domains. According to the destination address of the data service initiated by the WiFi terminal and the destination address segment of each data service in the access control list of the uplink data service, the service to be accessed by the WiFi terminal can be determined. Domain type. For example, the destination address of the IMS service domain is 192. 168. 0. 0-192. 168. 255. 255, if the destination address of the data service to be accessed by the WiFi terminal is 192. 168. 50. 23, then Determining that the data service to be accessed by the WiFi terminal is an IMS service domain. For a service flow that does not have a match in the access control list, the default is an HSI service. The data services that the WiFi terminal can support include HSI, IMS, IPTV, and carrier proprietary services. Further, after determining the type of the uplink data service initiated by the WiFi terminal, the CPE may further determine the priority information of the uplink data service initiated by the WiFi terminal according to the priority information of the pre-configured uplink data service.
5204、 CPE将所述上行数据业务通过所述 CAPWAP隧道进行封装。  S204: The CPE encapsulates the uplink data service by using the CAPWAP tunnel.
CPE解析出 WiFi终端发起的上行数据业务消息中要访问的业务域的目的地址。 假 若所述 WiFi终端要访问的数据业务的目的地址为 1. 10. 2. 3, 这样 CPE对应上行数据业 务的访问控制列表确定 WiFi终端要访问的数据业务是 HSI业务。 这样 CPE将所述上行 数据业务通过 CAPWAP隧道进行封装。  The CPE parses the destination address of the service domain to be accessed in the uplink data service message initiated by the WiFi terminal. If the destination address of the data service to be accessed by the WiFi terminal is 1. 10.2.3, the CPE corresponding to the access control list of the uplink data service determines that the data service to be accessed by the WiFi terminal is an HSI service. In this way, the CPE encapsulates the uplink data service through a CAPWAP tunnel.
5205、 CPE将承载所述上行数据业务的报文携带的所述 WiFi终端的所述第二 IP地 址转换为所述 CPE设备的所述第一 IP地址。  S205: The CPE converts the second IP address of the WiFi terminal carried in the packet carrying the uplink data service to the first IP address of the CPE device.
若所述 WiFi终端要访问的数据业务的目的地址为 192. 168. 50. 23, 这样 CPE则确 定 WiFi终端要访问的数据业务是 IMS业务。 由于 IMS业务是在应用层进行计费, 这样 CPE将该上行数据业务报文中携带的所述 WiFi终端的第二 IP地址转换为 CPE自身的第 一 IP地址。  If the destination address of the data service to be accessed by the WiFi terminal is 192.168. 50.23, the CPE determines that the data service to be accessed by the WiFi terminal is an IMS service. The IMS service performs charging at the application layer, so that the CPE translates the second IP address of the WiFi terminal carried in the uplink data service packet into the first IP address of the CPE itself.
若 CPE与 EPC之间建立了多条 PDN连接,则 CPE将该上行数据业务报文中携带的所 述 WiFi终端的第二 IP地址转换为相应的 PDN连接的 IP地址。  If a plurality of PDN connections are established between the CPE and the EPC, the CPE converts the second IP address of the WiFi terminal carried in the uplink data service packet into an IP address of the corresponding PDN connection.
5206、 CPE根据所述 WiFi终端发起的上行数据业务或上行数据业务的类型和所述 上行数据业务的优先级信息, 对所述 WiFi终端发起的上行数据业务进行优先级调度。  The CPE performs priority scheduling on the uplink data service initiated by the WiFi terminal according to the type of the uplink data service or the uplink data service and the priority information of the uplink data service initiated by the WiFi terminal.
进一步的, 为了更好的处理多个上行数据业务, CPE在所述访问控制列表中还包括 了上行数据业务的优先级信息, 这样 CPE根据不同的数据业务类型对应不同的优先级信 息对不同的上行数据业务提供不同的优先级调度, 具体的可以采用 WFQ (Weighted Fair Queuing, 加权公平排队)拥塞管理算法。  Further, in order to better process the multiple uplink data services, the CPE further includes the priority information of the uplink data service in the access control list, so that the CPE has different priority information corresponding to different data service types. The uplink data service provides different priority scheduling. Specifically, a WFQ (Weighted Fair Queuing) congestion management algorithm can be adopted.
5207、 CPE将所述 WiFi终端发起的上行数据业务按照 EPS的 QoS机制映射到相应 的承载。  5207. The CPE maps the uplink data service initiated by the WiFi terminal to the corresponding bearer according to the QoS mechanism of the EPS.
在 CPE将所述 WiFi终端发起的上行数据业务按照 EPS的 QoS机制映射到相应的承 载后, 若所述 WiFi终端发起的上行数据业务是在 IP层进行认证和 /或计费的数据业务 类型, 则执行 S208步骤; 若 WiFi终端发起的上行数据业务是在应用层进行认证和 /或 计费的数据业务类型, 则执行 S209步骤。  After the CPE maps the uplink data service initiated by the WiFi terminal to the corresponding bearer according to the QoS mechanism of the EPS, if the uplink data service initiated by the WiFi terminal is a data service type that is authenticated and/or charged at the IP layer, Then, step S208 is performed; if the uplink data service initiated by the WiFi terminal is a data service type that is authenticated and/or charged at the application layer, step S209 is performed.
例如, CPE上电后, EPC对 CPE按照 3GPP标准流程完成认证, 并建立 PDN连接。 该 PDN连接对应缺省 EPS承载和具有永久在线需求的专用 EPS承载。 同时 CPE按照 CAPWAP标准与 AC建立 CAPWAP控制信道和数据信道,分别承载在 CPE 对应的 EPS专用承载上, 如 CAPWAP控制信道承载可以在 EPS专用承载和缺省承载上。 For example, after the CPE is powered on, the EPC completes the authentication for the CPE according to the 3GPP standard procedure and establishes a PDN connection. The PDN connection corresponds to a default EPS bearer and a dedicated EPS bearer with permanent online requirements. At the same time, the CPE establishes a CAPWAP control channel and a data channel with the AC according to the CAPWAP standard, and is respectively carried on the EPS dedicated bearer corresponding to the CPE. For example, the CAPWAP control channel bearer can be on the EPS dedicated bearer and the default bearer.
这样若 WiFi终端发起的上行数据业务是在 IP层进行认证和 /或计费, 这样 CPE将 所述上行数据业务的报文进行 CAPWAP封装。 然后 CPE按照 EPS的 QoS机制所述上行数 据业务的报文映射到相应的 EPS专用承载上。  In this way, if the uplink data service initiated by the WiFi terminal is authenticated and/or charged at the IP layer, the CPE encapsulates the packet of the uplink data service by CAPWAP. Then, the CPE maps the packet of the uplink data service to the corresponding EPS dedicated bearer according to the QoS mechanism of the EPS.
若 WiFi终端发起的上行数据业务是在应用层进行认证和 /或计费, 由于 WiFi终端 发起的上行数据业务不通过 BRAS接入到相应的业务域, CPE则根据 EPS的 QoS机制映射 到相应的承载。如 IMS业务, CPE将该 IMS信令流映射到 QCI=5的 Non_GBR承载上, IMS 媒体语音流映射到 QCI=1的专用 GBR承载, IMS媒体视频流可映射到 QCI=2的专用 GBR 承载上。 这样不同的上行数据业务被映射到不同的承载上, 从而 EPS可以向不同的上行 数据业务提供不同 QoS。  If the uplink data service initiated by the WiFi terminal is authenticated and/or charged at the application layer, the CPE is mapped to the corresponding QoS mechanism according to the QoS mechanism of the EPS because the uplink data service initiated by the WiFi terminal does not access the corresponding service domain through the BRAS. Hosted. For example, the IMS service, the CPE maps the IMS signaling flow to the Non_GBR bearer with QCI=5, the IMS media voice stream is mapped to the dedicated GBR bearer with QCI=1, and the IMS media video stream can be mapped to the dedicated GBR bearer with QCI=2. . Such different uplink data services are mapped to different bearers, so that the EPS can provide different QoS to different uplink data services.
当然, 上述的承载映射只是针对 CPE和 EPC之间建立一个 PDN的情况, 若 CPE与 EPC之间建立多个 PDN的情况下, 针对每一个 PDN, EPC为 CPE分配有多个 IP地址。 例 如, CPE和 EPC之间建立有 3个 PDN连接, 这样 EPC会为 CPE分配有 3个 IP地址。这样 CPE在接收到 WiFi终端发起的上行数据业务消息后,根据该上行数据业务的类型,如该 上行数据业务的类型是在应用层进行计费的 IMS业务, 这样 CPE为 IMS业务选择了第一 条 PDN连接。 相应的, CPE将该上行数据业务消息中携带的所述 WiFi终端的第二 IP地 址转换为 CPE 的第一条 PDN的 IP地址。 然后在第一条 PDN连接上对该上行数据业务按 照 EPS的 QoS机制进行相应的承载映射。  Of course, the foregoing bearer mapping is only for the case where a PDN is established between the CPE and the EPC. If multiple PDNs are established between the CPE and the EPC, the EPC allocates multiple IP addresses for the CPE for each PDN. For example, there are 3 PDN connections between CPE and EPC, so EPC will assign 3 IP addresses to CPE. After the CPE receives the uplink data service message initiated by the WiFi terminal, according to the type of the uplink data service, if the type of the uplink data service is an IMS service that performs charging at the application layer, the CPE selects the first for the IMS service. A PDN connection. Correspondingly, the CPE converts the second IP address of the WiFi terminal carried in the uplink data service message to the IP address of the first PDN of the CPE. Then, on the first PDN connection, the uplink data service is mapped according to the QoS mechanism of the EPS.
S208、 CPE将通过 CAPWAP隧道封装的上行数据业务的报文透传过所述 EPC后发送 到 BRAS, 所述 BRAS将所述上行数据业务的报文发送给相应的业务域。  S208. The CPE transparently transmits the packet of the uplink data service encapsulated by the CAPWAP tunnel to the BRAS, and the BRAS sends the packet of the uplink data service to the corresponding service domain.
在对 WiFi终端发起的上行数据业务进行承载映射后, CPE将通过 CAPWAP隧道封装 的上行数据业务报文通过 EPC发送到 AC。 AC对该上行数据业务报文进行 CAPWAP隧道解 封装, 然后发送到 BRAS接入到 Internet业务。 同时 BRAS对 WiFi终端访问的业务流进 行计费。  After the bearer mapping is performed on the uplink data service initiated by the WiFi terminal, the CPE sends the uplink data service packet encapsulated by the CAPWAP tunnel to the AC through the EPC. The AC performs CAPWAP tunnel decapsulation on the uplink data service packet, and then sends the packet to the BRAS to access the Internet service. At the same time, the BRAS charges the service flow accessed by the WiFi terminal.
S209、 CPE将所述携带有所述 CPE设备的第一 IP地址的所述上行数据业务的报文 通过所述 EPC直接路由转发给相应的业务域。  S209. The CPE forwards the packet of the uplink data service that carries the first IP address of the CPE device to the corresponding service domain by using the EPC direct route.
在对 WiFi终端发起的上行数据业务进行承载映射后, CPE将 WiFi终端发起的数据 业务发送到 EPC, 最终接入到 IMS域。  After performing bearer mapping on the uplink data service initiated by the WiFi terminal, the CPE sends the data service initiated by the WiFi terminal to the EPC, and finally accesses the IMS domain.
由于 CPE将在应用层进行计费的数据业务不需要通过 BRAS接入到相应的业务域, 这样对于 WiFi终端发起的数据业务不需要进行 CAPWAP隧道封装, 这样对于在应用层进 行计费的数据业务如 IMS、 VoIP等业务, 将极大的减少了该数据业务报文的开销, 提高 了 EPS的传送效率; 且由于 CPE/AP将 WiFi终端的第二 IP地址转换为 CPE的第一 IP地 址, 使得 EPC可以感知到 WiFi终端发起的数据业务, 从而可以使得 WiFi终端可以利用 EPS中的 EPS承载映射机制, 从而可以实现不同业务的优先级调度。 Since the CPE will perform data charging at the application layer, it does not need to access the corresponding service domain through the BRAS. Therefore, the data service initiated by the WiFi terminal does not need to be encapsulated by the CAPWAP tunnel, so that the data service, such as IMS and VoIP, which is charged at the application layer, greatly reduces the overhead of the data service packet and improves the EPS. The transmission efficiency; and because the CPE/AP converts the second IP address of the WiFi terminal to the first IP address of the CPE, the EPC can sense the data service initiated by the WiFi terminal, so that the WiFi terminal can utilize the EPS bearer in the EPS. The mapping mechanism enables priority scheduling of different services.
进一步的, 若 AP和 CPE是两个分离的设备, AP和 CPE共同完成了将 WiFi终端发 起的上行数据业务接入到不同的业务域。例如, AP和 CPE之间可以采用以太网接口连接, CPE会通过 DHCP报文向 AP分配私网 IP地址。在这种形式中,上行数据业务的访问控制 列表可以通过 CAPWAP等远程管理协议或 AP的本地管理接口在 AP中进行配置。 AP接收 到 WiFi终端发送的上行数据业务消息后, 根据该上行数据业务的访问控制列表可以确 定 WiFi终端发起的上行数据业务的业务类型。  Further, if the AP and the CPE are two separate devices, the AP and the CPE jointly complete the uplink data service initiated by the WiFi terminal to access different service domains. For example, the AP and the CPE can be connected to each other through an Ethernet interface. The CPE can assign a private IP address to the AP through DHCP packets. In this form, the access control list of the uplink data service can be configured in the AP through a remote management protocol such as CAPWAP or a local management interface of the AP. After receiving the uplink data service message sent by the WiFi terminal, the AP can determine the service type of the uplink data service initiated by the WiFi terminal according to the access control list of the uplink data service.
若 WiFi 终端发起的上行数据业务是在应用层进行计费的数据业务, AP 将携带有 WiFi终端的第二 IP地址的上行数据业务消息和 WiFi终端发起的上行数据业务的业务类 型通过以太网接口封装成报文发送给 CPE, 该报文的源 IP地址是 CPE分配给 AP的私网 IP地址。 CPE在接收到该报文后, 首先将上行数据业务消息中携带的 WiFi终端的第二 IP地址转换成 CPE的第一 IP地址, 同时将该报文中的 AP的私网 IP地址转换成 CPE的 第一 IP地址通过 EPC发送到相应的业务域。  If the uplink data service initiated by the WiFi terminal is the data service for charging at the application layer, the AP carries the uplink data service message of the second IP address of the WiFi terminal and the service type of the uplink data service initiated by the WiFi terminal through the Ethernet interface. The encapsulated packet is sent to the CPE. The source IP address of the packet is the private IP address assigned by the CPE to the AP. After receiving the packet, the CPE first converts the second IP address of the WiFi terminal carried in the uplink data service message into the first IP address of the CPE, and converts the private network IP address of the AP in the packet into a CPE. The first IP address is sent to the corresponding service domain through the EPC.
若 WiFi终端发起的上行数据业务是在 IP层进行计费的数据业务, 将该 WiFi终端 发起的携带有 WiFi终端的第二 IP地址的上行数据业务消息和该 WiFi终端发起的上行 数据业务的业务类型通过 CAPWAP隧道封装成 CAPWAP报文发送给 CPE,该 CAPWAP报文的 外层源 IP地址为 CPE分配给 AP的私网地址。 CPE在收到 CAPWAP报文后, 将 CAPWAP的 外层源 IP地址转换成 CPE的第一 IP地址, 然后将该报文透传过 EPC后发送到 AC。 AC 对该 CAPWAP报文进行解封装, 然后转发给 BRAS。  If the uplink data service initiated by the WiFi terminal is a data service for charging at the IP layer, the uplink data service message carrying the second IP address of the WiFi terminal initiated by the WiFi terminal and the uplink data service initiated by the WiFi terminal The CAPWAP packet is encapsulated into a CAPWAP packet and sent to the CPE. The outer source IP address of the CAPWAP packet is the private network address assigned by the CPE to the AP. After receiving the CAPWAP packet, the CPE translates the outer IP address of the CAPWAP into the first IP address of the CPE, and then transparently transmits the packet to the EPC and then sends the packet to the AC. The AC decapsulates the CAPWAP packet and forwards it to the BRAS.
由于 CPE把 WiFi终端发起的在应用层计费的上行数据业务消息携带的 WiFi终端的 第二 IP地址转换为 CPE的第一 IP地址, 这样 CPE根据该上行数据业务消息中的 CPE的 第一 IP地址, 可以将该 WiFi终端发起的数据业务映射到相应的 EPS承载上; 而对于在 IP层进行计费的数据业务,由于 CAPWAP封装的 WiFi终端发起的数据业务消息携带 WiFi 终端的第二 IP地址, 这样 CPE将该 WiFi终端发起的数据业务映射到另一承载上。 从而 可以在 EPS承载层面实现了不同业务的上行流和下行流之间的优先级调度,保证了不同 上行数据业务流之间的不同 QoS (Quality of System, 服务质量) 等级。 进一步的, 现有技术中为了解决对 WiFi终端单独认证和 /或计费的问题, WiFi终 端必须接入到在应用层进行计费的业务时需要通过 BRAS , 从而无法支持动态的 PCC (Policy Control and Charging, 策略控制和计费) 策略和静态 QoS策略部署的问题。 而本实施例中对于 WiFi终端访问在应用层进行计费的业务, 如 IMS业务, CPE将 WiFi 终端发起的上行数据业务消息中的第二 IP地址转换为 CPE的第一 IP地址, 这样 EPC侧 可以感知。 当 IMS通过 PCRF (Policy and Charging Rules Function, 策略计费规则功 能) 向 P-GW (Packet Data Network Gateway, 分组数据网络网关) 触发专用 EPS承载 建立时, P-GW就可以关联到 CPE的 EPS承载, 从而可以支持动态的 PCC策略和静态 QoS 策略部署。 The CPE converts the second IP address of the WiFi terminal carried in the uplink data service message, which is initiated by the WiFi terminal, to the first IP address of the CPE, so that the CPE is based on the first IP address of the CPE in the uplink data service message. Address, the data service initiated by the WiFi terminal can be mapped to the corresponding EPS bearer; and for the data service that is charged at the IP layer, the data service message initiated by the WiFi terminal encapsulated by the CAPWAP carries the second IP address of the WiFi terminal. So, the CPE maps the data service initiated by the WiFi terminal to another bearer. Therefore, priority scheduling between upstream and downstream flows of different services can be implemented at the EPS bearer layer, and different QoS (Quality of System) levels between different uplink data service flows are guaranteed. Further, in the prior art, in order to solve the problem of separate authentication and/or charging for the WiFi terminal, the WiFi terminal must access the BRAS when accessing the service for charging at the application layer, thereby failing to support the dynamic PCC (Policy Control) And Charging, Policy Control and Accounting) Issues with policy and static QoS policy deployment. In this embodiment, the WiFi terminal accesses the service that performs charging at the application layer, such as the IMS service, and the CPE converts the second IP address in the uplink data service message initiated by the WiFi terminal into the first IP address of the CPE, so that the EPC side Can be perceived. When the IMS triggers the establishment of a dedicated EPS bearer to the P-GW (Packet Data Network Gateway) through the PCRF (Policy and Charging Rules Function), the P-GW can be associated with the EPS bearer of the CPE. To support dynamic PCC policies and static QoS policy deployment.
进一步的, 本实施中通过 BRAS向 WiFi终端分配 IP地址, WiFi终端通过 BRAS接 入到在 IP层认证和 /或计费的业务域, 可以实现应用系统单独对 WiFi终端进行计费; 同时 WiFi终端通过 EPC接入到应用层计费的业务域, 由业务域对 WiFi终端在应用层的 计费, 这样从而实现了应用系统对 WiFi终端访问的不同业务进行单独的计费, 从而避 免了 WiFi终端通过 BRAS接入到所有不同业务域时, BRAS对所有业务进行计费后,还必 须扣除在应用层也计费的业务的费用。 进而降低了 BRAS 和 AAA (Authentication, Authorization, Accounting, 身份验证、 授权和统计) 服务器实现和部署的难度。  Further, in this implementation, the BRAS allocates an IP address to the WiFi terminal through the BRAS, and the WiFi terminal accesses the service domain in the IP layer authentication and/or charging through the BRAS, so that the application system can separately charge the WiFi terminal; The EPC accesses the application domain charging service domain, and the service domain charges the WiFi terminal at the application layer, thereby implementing the application system to separately charge different services accessed by the WiFi terminal, thereby avoiding the WiFi terminal. When the BRAS accesses all the different service domains, the BRAS must deduct the cost of the service that is also charged at the application layer after all the services are charged. This reduces the difficulty of implementing and deploying BRAS and AAA (Authentication, Authorization, Accounting, Authentication, Authorization, and Statistics) servers.
进一步的,本发明实施例提供的 CPE设备不仅可以包括 LTE接口单元与基站通过长 期演进 LTE方式进行通信, 还可以包括 LTE-A (LTE-AdvanCed, LTE 技术的后续演进)接 口单元与基站通过长期演进 LTE-A方式进行通信。 Further, the CPE device provided by the embodiment of the present invention may include not only the LTE interface unit and the base station to communicate through the long-term evolution LTE mode, but also the LTE-A (LTE-Advan C ed, subsequent evolution of the LTE technology) interface unit and the base station. Communication is carried out through the long-term evolution LTE-A mode.
本发明实施例提供的一种 WiFi终端接入不同业务域的方法, 用户端设备根据 WiFi 端发起的不同数据业务进行智能路由, 如对在 IP层进行认证和 /或计费的业务, 通过所 述 CAPWAP 隧道将承载有所述上行数据业务的报文进行封装后透传过所述 EPC 后发送 BRAS, BRAS将所述上行数据业务的报文发送给相应的业务域; 对于在应用层认证和 /或 计费的业务, 则将承载所述上行数据业务的报文携带的所述 WiFi终端的所述第二 IP地 址转换为所述 CPE设备的所述第一 IP地址, 通过所述 EPC直接路由转发给相应的业务 域。这样 WiFi终端访问在应用层进行认证和 /或计费的业务域, 不需要通过 BRAS, 这样 WiFi终端与业务域间的报文不需要 CAPWAP隧道封装, 不会增加报文的头开销, 从而可 以提高 EPS的传送效率; 同时通过对不同类型的业务域进行智能路由, 如对于在 IP层 或应用层进行认证和 /或计费的不同类型的业务域的五元组不同, 使得 CPE可以将 WiFi 终端的不同数据业务映射到不同的 EPS承载, 实现了不同业务流之间的优先级调度; 进 一步的, 可以降低 BRAS和 AAA实现和部署的难度, 同时可以使得 WiFi终端发起的上行 数据业务支持动态 PCC策略和静态 QoS策略部署。 实施例三 The method for accessing different service domains by the WiFi terminal is provided by the embodiment of the present invention. The user equipment performs intelligent routing according to different data services initiated by the WiFi terminal, for example, the service for authenticating and/or charging at the IP layer. The CAPWAP tunnel encapsulates the packet carrying the uplink data service, and then transmits the packet to the corresponding service domain by transmitting the BRAS through the EPC. The BRAS sends the packet of the uplink data service to the corresponding service domain. And the service of the charging, the second IP address of the WiFi terminal carried in the packet carrying the uplink data service is converted into the first IP address of the CPE device, directly through the EPC The route is forwarded to the corresponding service domain. In this way, the WiFi terminal accesses the service domain that is authenticated and/or charged at the application layer, and does not need to pass the BRAS. Therefore, the packet between the WiFi terminal and the service domain does not need to be encapsulated by the CAPWAP tunnel, and the header overhead of the packet is not increased. Improve the transmission efficiency of EPS; At the same time, through intelligent routing of different types of service domains, such as different quintues for different types of service domains that are authenticated and/or billed at the IP layer or application layer, so that CPE can connect WiFi. Different data services of the terminal are mapped to different EPS bearers, and priority scheduling between different service flows is implemented; In one step, the difficulty of implementing and deploying the BRAS and the AAA can be reduced, and the uplink data service initiated by the WiFi terminal can support the dynamic PCC policy and the static QoS policy deployment. Embodiment 3
本发明实施例提供了一种用于 WiFi终端接入不同业务域的装置 40, 如图 2、 3、 5 所示, 图 2为本实施例所基于的网络系统, 其中 WiFi终端通过 AP附着到 WLAN与所述 CPE通过 WiFi方式进行通信,所述 CPE与所述基站通过 LTE方式进行通信、所述基站通 过 EPC与多种业务分别对应的多个业务域相连,这样通过上述系统架构,使得所述 WiFi 终端通过所述 CPE, 所述基站, 所述与所述业务域进行通信。 图中给出了 AP (Access Point , WiFi无线接入点)和用户端设备 CPE的两种设置方式, CPE可以集成 AP功能模 块, 如图 2中的 CPE, AP和 CPE也可以是两个分离的设备。 其中本实施例提供的该装置 40是 CPE集成有 AP的功能。  The embodiment of the present invention provides a device 40 for a WiFi terminal to access different service domains. As shown in FIG. 2, FIG. 3, FIG. 2, FIG. 2 is a network system based on the embodiment, where the WiFi terminal is attached to the AP through the AP. The WLAN communicates with the CPE through the WiFi mode, the CPE communicates with the base station by using an LTE manner, and the base station is connected to multiple service domains corresponding to multiple services through the EPC, so that the system architecture is used to The WiFi terminal communicates with the service domain through the CPE, the base station. The figure shows two settings for the AP (Access Point, WiFi wireless access point) and the CPE of the customer premises equipment. The CPE can integrate the AP function module. As shown in Figure 2, the AP and CPE can also be separated. device of. The device 40 provided in this embodiment is a function in which the CPE is integrated with an AP.
其中为了应用系统能对 WiFi终端访问 Internet后独立计费, WiFi终端通过 EPS 网络系统接入到 Internet需要经过 BRAS,这样 BRAS对 WiFi终端访问的 Internet数据 业务记录上报认证计费服务器进行认证计费。该 CPE与 BRAS进行通信是通过 AC( Access Control ler, WiFi接入控制器) 采用 EPC为该 CPE分配的第一 IP地址, 该 CPE与 AC 之间通过 CAPWAP隧道与所述 BRAS进行通信的报文, 然后所述 AC接入到 BRAS, 当然 AC 和 BRAS也可以是集成在一起的一个物理设备。 其中第一 IP地址是 CPE在上电后, CPE 按照 3GPP的标准流程完成 EPC对 CPE的认证和 PDN的建立, EPC为 CPE分配的 IP地址。  For the application system, the WiFi terminal can be independently charged after accessing the Internet. The WiFi terminal needs to pass the BRAS through the EPS network system, so that the BRAS authenticates and charges the Internet data service record accessed by the WiFi terminal to the authentication and accounting server. The communication between the CPE and the BRAS is performed by the AC (Access Controller, WiFi Access Controller) using the first IP address assigned by the EPC to the CPE, and the CPE communicates with the AC through the CAPWAP tunnel. Then, the AC accesses the BRAS. Of course, the AC and the BRAS can also be one physical device integrated together. The first IP address is the CPE. After the CPE is powered on, the CPE completes the EPC-to-CPE authentication and PDN establishment according to the 3GPP standard procedure. The EPC is the IP address assigned by the CPE.
BRAS通过上述图 2的系统架构为该 WiFi终端分配第二 IP地址, 具体如图 3所示, 为了便于说明, 本过程中 AC和 BRAS是作为两个独立的设备, 在实现过程中 AC和 BRAS 可以是一个物理设备, 同时实现了独立的 AC和 BRAS设备的功能。 为 WiFi终端分配第 二 IP地址过程如下:  The BRAS allocates a second IP address to the WiFi terminal through the system architecture of FIG. 2, as shown in FIG. 3. For convenience of description, AC and BRAS are used as two independent devices in the process, and AC and BRAS are implemented in the process. It can be a physical device and implements the functions of independent AC and BRAS devices. The process of assigning a second IP address to a WiFi terminal is as follows:
首先 WiFi 终端向 CPE 发送 DHCP Discovery ( Dynamic Host Configuration Protocol , 动态主机设置协议发现) 广播报文; CPE收到 DHCP Discovery广播报文后, 将该报文通过 CAPWAP隧道封装,发送给 CPE。 CPE将通过 CAPWAP封装的报文转发给 AC, CPE在该报文中使用了 EPC为 CPE分配的第一 IP地址。 AC对接收到的报文进行 CAPWAP 隧道解封装, 然后转发给 BRAS。 BRAS在接收到 WiFi终端发送的 DHCP Discovery广播 报文后, 向 AC返回 DHCP 0FFER。 AC再相应的对 DHCP OFFER报文进行 CAPWAP隧道封装, 发送给 CPE, CPE对经过 CAPWAP隧道封装的 DHCP OFFER报文进行解封装后发送给 WiFi 终端。 WiFi终端在接收到 BRAS发送的 DHCP OFFER报文后, 向 BRAS发送 DHCP Request 广播报文, 具体的过程与前述向 BRAS发送 DHCP Discovery过程相同, 从而使得 BRAS 向 WiFi终端分配第二 IP地址。 First, the WiFi terminal sends a DHCP Discovery (Dynamic Host Configuration Protocol) broadcast packet to the CPE. After receiving the DHCP Discovery broadcast packet, the CPE encapsulates the packet in the CAPWAP tunnel and sends the packet to the CPE. The CPE forwards the packet encapsulated by the CAPWAP to the AC. The CPE uses the first IP address assigned by the EPC to the CPE in the packet. The AC performs CAPWAP tunnel decapsulation on the received packet and forwards it to the BRAS. After receiving the DHCP Discovery broadcast message sent by the WiFi terminal, the BRAS returns a DHCP 0FFER to the AC. The AC then encapsulates the DHCP OFFER packet in the CAPWAP tunnel and sends it to the CPE. The CPE decapsulates the DHCP OFFER packet encapsulated in the CAPWAP tunnel and sends it to the WiFi. terminal. After receiving the DHCP OFFER message sent by the BRAS, the WiFi terminal sends a DHCP Request broadcast message to the BRAS. The specific procedure is the same as the process of sending the DHCP Discovery to the BRAS, so that the BRAS assigns the second IP address to the WiFi terminal.
其中 WiFi终端支持的数据业务包括:在 IP层进行计费的业务和在应用层进行认证 的业务, 如 HSI (High Speed Internet ) 业务在 IP层进行计费, 运营商自营的游戏、 IMS业务和 IPTV业务在应用层计费。 其中本实施例针对该装置是以 AP和 CPE集成为同 一设备 CPE/AP为例进行说明。 该 CPE包括: 获取单元 41、 隧道建立单元 42、 确定单元 43、 IP层业务处理单元 44、 应用层业务处理单元 45、 优先级处理单元 46、 承载映射单 元 47和发送单元 48。  The data services supported by the WiFi terminal include: services for charging at the IP layer and services for authentication at the application layer, such as HSI (High Speed Internet) services for charging at the IP layer, operators' own games, and IMS services. And IPTV services are billed at the application layer. In this embodiment, the device is described as an example in which the AP and the CPE are integrated into the same device CPE/AP. The CPE includes: an obtaining unit 41, a tunnel establishing unit 42, a determining unit 43, an IP layer service processing unit 44, an application layer service processing unit 45, a priority processing unit 46, a bearer mapping unit 47, and a transmitting unit 48.
所述获取单元 41, 用于预配置上行数据业务的访问控制列表; 或用于动态派生上 行数据业务的访问控制列表; 所述上行数据业务的访问控制列表包括上行数据业务的五 元组信息, 所述五元组信息包括所述上行数据业务的源地址、 目的地址、 源端口、 目的 端口和协议号。  The obtaining unit 41 is configured to pre-configure an access control list of the uplink data service, or an access control list for dynamically deriving the uplink data service, where the access control list of the uplink data service includes quintuple information of the uplink data service, The quintuple information includes a source address, a destination address, a source port, a destination port, and a protocol number of the uplink data service.
获取单元 41获取的上行数据业务的访问控制列表包括了上行数据业务的五元组信 息, 所述五元组信息包括了发起上行数据业务的终端的源地址、 要访问的业务域目的地 址、 发起上行数据业务的源端口、 要访问业务域的目的端口和协议号。  The access control list of the uplink data service obtained by the obtaining unit 41 includes the quintuple information of the uplink data service, where the quintuple information includes the source address of the terminal that initiates the uplink data service, the destination address of the service domain to be accessed, and the initiation Source port of the upstream data service, destination port and protocol number to access the service domain.
上行数据业务的访问控制列表可以通过预规划设置, 并通过多种方案配置到 CPE 中, 包括: CPE 的近端配置接口, CPE 的远端配置接口 TR069/0MA-DM, DHCP Option, Protocol Configuration Option (PCO)扩展, CAPWAP远程管理协议。  The access control list of the uplink data service can be configured in the pre-planning mode and configured in the CPE through various schemes, including: CPE's near-end configuration interface, CPE's remote configuration interface TR069/0MA-DM, DHCP Option, Protocol Configuration Option (PCO) extension, CAPWAP remote management protocol.
上行数据业务的访问控制列表也可以是 CPE的 UL-TFT动态派生的, 具体的派生方 式为用通配符 (*) 来代替源 IP地址和源端口, 保留目的 IP地址、 协议号和目的端口 不变。 当然访问控制列表获取单元 41预配置的上行数据业务的访问控制列表中的五元 组信息, 也可以使用通配符 (*) 来代替源地址和源端口, 只配置目的地址、 协议号和 目的端口。  The access control list of the uplink data service may also be dynamically derived from the UL-TFT of the CPE. The specific derivation method is to replace the source IP address and the source port with a wildcard (*), and keep the destination IP address, protocol number, and destination port unchanged. . Of course, the quintuple information in the access control list of the uplink data service pre-configured by the access control list obtaining unit 41 may also use a wildcard character (*) instead of the source address and the source port, and only the destination address, the protocol number, and the destination port.
进一步的,获取单元 41在预配置上行数据业务的访问控制列表中的五元组信息时, 还可以配置不同业务的优先级信息。  Further, the obtaining unit 41 may also configure priority information of different services when pre-configuring the quintuple information in the access control list of the uplink data service.
所述隧道建立单元 42, 用于根据所述 EPC分配的第一 IP地址通过所述 EPC与宽带 远程接入服务器 BRAS进行通信, 建立 CAPWAP隧道, 将通过 CAPWAP隧道封装的 WiFi终 端与所述在 IP层进行认证和 /或计费的业务域进行通信的报文发送到 BRAS,并通过所述 WiFi终端与所述在 IP层进行认证和 /或计费的业务域的交互使得所述 BRAS为所述 WiFi 终端分配一个第二 IP地址。 The tunnel establishing unit 42 is configured to communicate with the broadband remote access server BRAS through the EPC according to the first IP address allocated by the EPC, establish a CAPWAP tunnel, and connect the WiFi terminal encapsulated by the CAPWAP tunnel with the IP address. Transmitting, by the layer, the service domain that performs authentication and/or charging is sent to the BRAS, and the BRAS is used to interact with the service domain that performs authentication and/or charging at the IP layer. WiFi The terminal is assigned a second IP address.
本实施中的 BRAS是指包括 AC设备功能的 BRAS,这样 CPE和 BRAS之间建立 CAPWAP 隧道,用于对 WiFi终端发起的在 IP层进行认证和 /或计费的业务进行 CAPWAP隧道封装。  The BRAS in this implementation refers to a BRAS that includes the function of the AC device, so that a CAPWAP tunnel is established between the CPE and the BRAS, and is used for CAPWAP tunnel encapsulation of the service initiated by the WiFi terminal to perform authentication and/or accounting at the IP layer.
所述确定单元 43, 用于根据所述上行数据业务的五元组信息中的所述目的地址确 定所述 WiFi终端发起的上行数据业务的类型。  The determining unit 43 is configured to determine, according to the destination address in the quintuple information of the uplink data service, a type of uplink data service initiated by the WiFi terminal.
上行数据业务的访问控制列表中的目的地址信息可以用于确定所述 WiFi终端要访 问的业务域的数据业务的类型。 WiFi终端可以支持的数据业务包括有: IMS、IPTV和 HSI、 运营商自营业务等, 但不限于此。 通常运营商规划了不同业务域的目的地址段, 这样根 据 WiFi终端发起的数据业务的目的地址, 上行数据业务的访问控制列表中各个数据业 务的目的地址段, 确定单元 43则可以确定 WiFi终端要访问的业务域类型。 例如, IMS 业务域的目的地址为 192. 168. 0. 0-192. 168. 255. 255,若所述 WiFi终端要访问的数据业 务的目的地址为 192. 168. 50. 23, 这样确定单元 43则可以确定所述 WiFi终端要访问的 数据业务是 IMS业务域。对于在上行控制列表中没有匹配上的业务流,默认为 HSI业务。  The destination address information in the access control list of the uplink data service may be used to determine the type of data service of the service domain to be accessed by the WiFi terminal. The data services that the WiFi terminal can support include: IMS, IPTV, HSI, carrier self-operated services, etc., but are not limited thereto. Generally, the operator plans the destination address segment of the different service domains, so that the determining unit 43 can determine that the WiFi terminal is to be determined according to the destination address of the data service initiated by the WiFi terminal and the destination address segment of each data service in the access control list of the uplink data service. The type of business domain that is accessed. For example, the destination address of the IMS service domain is 192. 168. 0. 0-192. 168. 255. 255. If the destination address of the data service to be accessed by the WiFi terminal is 192. 168. 50. 23, the unit is determined. 43: It can be determined that the data service to be accessed by the WiFi terminal is an IMS service domain. For traffic flows that do not match in the uplink control list, the default is HSI service.
WiFi终端可以支持的数据业务包括 HSI、 IMS, IPTV和运营商自营业务等。 The data services that the WiFi terminal can support include HSI, IMS, IPTV, and carrier proprietary services.
进一步的,在确定所述 WiFi终端发起的上行数据业务的类型后,确定单元 43还可 以根据预配置的上行数据业务的优先级信息确定所述 WiFi终端发起的上行数据业务的 优先级信息。  Further, after determining the type of the uplink data service initiated by the WiFi terminal, the determining unit 43 may further determine the priority information of the uplink data service initiated by the WiFi terminal according to the priority information of the pre-configured uplink data service.
所述 IP层业务处理单元 44, 用于若所述确定单元确定所述 WiFi终端发起的上行 数据业务是在 IP层进行认证和 /或计费的数据业务类型,将所述上行数据业务通过所述 CAPWAP隧道进行封装。  The IP layer service processing unit 44 is configured to: if the determining unit determines that the uplink data service initiated by the WiFi terminal is a data service type that is authenticated and/or charged at an IP layer, and adopts the uplink data service The CAPWAP tunnel is encapsulated.
例如,确定单元 43解析出 WiFi终端发起的上行数据业务消息中要访问的业务域的 目的地址。 假若所述 WiFi终端要访问的数据业务的目的地址为 1. 10. 2. 3, 这样确定单 元 43对应上行数据业务的访问控制列表确定 WiFi终端要访问的数据业务是 HSI业务。 这样 IP层业务处理单元 44将所述上行数据业务通过 CAPWAP隧道进行封装。  For example, the determining unit 43 parses out the destination address of the service domain to be accessed in the uplink data service message initiated by the WiFi terminal. If the destination address of the data service to be accessed by the WiFi terminal is 1. 10.2.3, the determining unit 44 determines the access control list of the uplink data service to determine that the data service to be accessed by the WiFi terminal is an HSI service. Thus, the IP layer service processing unit 44 encapsulates the uplink data service through a CAPWAP tunnel.
所述应用层业务处理单元 45, 还用于若 WiFi终端发起的上行数据业务是在应用层 进行认证和 /或计费的数据业务类型, 将承载所述上行数据业务的报文携带的所述 WiFi 终端的所述第二 IP地址转换为所述 CPE设备的所述第一 IP地址。  The application layer service processing unit 45 is further configured to: if the uplink data service initiated by the WiFi terminal is a data service type that is authenticated and/or charged at the application layer, and the packet carrying the uplink data service is carried by the packet The second IP address of the WiFi terminal is translated to the first IP address of the CPE device.
若所述 WiFi终端要访问的数据业务的目的地址为 192. 168. 50. 23, 这样确定单元 43则确定 WiFi终端要访问的数据业务是 IMS业务。由于 IMS业务是在应用层进行计费, 这样应用层处理单元 45将该上行数据业务报文中携带的所述 WiFi终端的第二 IP地址 转换为 CPE自身的第一 IP地址。 If the destination address of the data service to be accessed by the WiFi terminal is 192. 168. 50. 23, the determining unit 43 determines that the data service to be accessed by the WiFi terminal is an IMS service. The IMS service performs charging at the application layer, so that the application layer processing unit 45 stores the second IP address of the WiFi terminal carried in the uplink data service packet. Convert to the first IP address of the CPE itself.
优先级处理单元 46, 用于根据所述 WiFi终端发起的上行数据业务的类型和所述上 行数据业务的优先级信息, 对所述 WiFi终端发起的上行数据业务进行优先级调度。  The priority processing unit 46 is configured to perform priority scheduling on the uplink data service initiated by the WiFi terminal according to the type of the uplink data service initiated by the WiFi terminal and the priority information of the uplink data service.
进一步的, 为了更好的处理多个上行数据业务, 获取单元 41获取的上行数据业务 访问控制列表中还包括了上行数据业务的优先级信息, 这样 CPE根据不同的数据业务类 型对应不同的优先级信息优先级处理单元 46对不同的上行数据业务提供不同的优先级 调度, 具体的可以采用 WFQ (Weighted Fair Queuing, 加权公平排队)拥塞管理算法。  Further, in order to better process the multiple uplink data services, the uplink data service access control list obtained by the obtaining unit 41 further includes the priority information of the uplink data service, so that the CPEs correspond to different priorities according to different data service types. The information priority processing unit 46 provides different priority scheduling for different uplink data services, and specifically may adopt a WFQ (Weighted Fair Queuing) congestion management algorithm.
承载映射单元 47, 用于将所述 WiFi终端发起的上行数据业务按照 EPS的 QoS机制 映射到相应的承载。  The bearer mapping unit 47 is configured to map the uplink data service initiated by the WiFi terminal to the corresponding bearer according to the QoS mechanism of the EPS.
例如, CPE/AP上电后, EPC对 CPE/AP按照 3GPP标准流程完成认证, 并建立 PDN 连接。 该 PDN连接对应缺省 EPS承载和具有永久在线需求的专用 EPS承载。  For example, after the CPE/AP is powered on, the EPC completes the authentication for the CPE/AP according to the 3GPP standard procedure and establishes a PDN connection. The PDN connection corresponds to the default EPS bearer and a dedicated EPS bearer with permanent online demand.
同时隧道建立单元 42按照 CAPWAP标准与 AC建立 CAPWAP控制信道和数据信道, CAPWAP控制信道和数据信道分别承载在 CPE/AP对应的 EPS专用承载上,如 CAPWAP控制 信道承载可以在 EPS专用承载和缺省承载上。  At the same time, the tunnel establishment unit 42 establishes a CAPWAP control channel and a data channel with the AC according to the CAPWAP standard, and the CAPWAP control channel and the data channel are respectively carried on the EPS dedicated bearer corresponding to the CPE/AP, for example, the CAPWAP control channel bearer can be in the EPS dedicated bearer and default. Hosted on.
这样若 WiFi终端发起的上行数据业务是在 IP层进行认证和 /或计费,这样 IP层业 务处理单元 44将所述上行数据业务的报文进行 CAPWAP封装。 然后承载映射单元 47按 照 EPS的 QoS机制所述上行数据业务的报文映射到相应的 EPS专用承载上。  In this way, if the uplink data service initiated by the WiFi terminal is authenticated and/or charged at the IP layer, the IP layer service processing unit 44 performs CAPWAP encapsulation on the packet of the uplink data service. Then, the bearer mapping unit 47 maps the packet of the uplink data service to the corresponding EPS dedicated bearer according to the QoS mechanism of the EPS.
若 WiFi终端发起的上行数据业务是在应用层进行认证和 /或计费, 由于 WiFi终端 发起的上行数据业务不通过 BRAS接入到相应的业务域,承载映射单元 47则根据 EPS的 QoS机制将上述的上行数据业务映射到相应的承载。如 IMS业务,承载映射单元 47将该 IMS信令流映射到 QCI=5的 Non-GBR承载上, IMS媒体语音流映射到 QCI=1的专用 GBR 承载, IMS媒体视频流可映射到 QCI=2的专用 GBR承载上。 这样不同的上行数据业务被 映射到不同的承载上, 从而 EPS可以向不同的上行数据业务提供不同 QoS。  If the uplink data service initiated by the WiFi terminal is authenticated and/or charged at the application layer, since the uplink data service initiated by the WiFi terminal does not access the corresponding service domain through the BRAS, the bearer mapping unit 47 according to the EPS QoS mechanism The uplink data service described above is mapped to the corresponding bearer. For example, the IMS service, the bearer mapping unit 47 maps the IMS signaling flow to the Non-GBR bearer with QCI=5, the IMS media voice stream is mapped to the dedicated GBR bearer with QCI=1, and the IMS media video stream can be mapped to QCI=2. The dedicated GBR is carried on. Such different uplink data services are mapped to different bearers, so that the EPS can provide different QoS to different uplink data services.
当然, 上述的承载映射只是针对 CPE和 EPC之间建立一个 PDN的情况, 若 CPE与 EPC之间建立多个 PDN的情况下,针对每一个 PDN, EPC为 CPE为每条 PDN连接分配有一 个 IP地址。 例如, CPE和 EPC之间建立有 3个 PDN连接, 这样 EPC会为 CPE分配有 3 个 IP地址。 这样 CPE在接收到 WiFi终端发起的上行数据业务消息后, 根据该上行数据 业务的类型,如该上行数据业务的类型是在应用层进行计费的 IMS业务,这样 CPE为 IMS 业务选择了第一条 PDN连接。 相应的, CPE将该上行数据业务消息中携带的所述 WiFi 终端的第二 IP地址转换为 CPE 的第一条 PDN的 IP地址。 发送单元 48, 用于将通过 CAPWAP隧道封装的上行数据业务的报文透传过所述 EPC 后发送到 BRAS , 所述 BRAS将所述上行数据业务的报文发送给相应的业务域; 或将所述 携带有所述 CPE设备的第一 IP地址的所述上行数据业务的报文通过所述 EPC直接路由 转发给相应的业务域。 Of course, the foregoing bearer mapping is only for the case of establishing a PDN between the CPE and the EPC. If multiple PDNs are established between the CPE and the EPC, the EPC allocates an IP for each PDN connection for the CPE for each PDN. address. For example, there are three PDN connections established between the CPE and the EPC, so that the EPC will assign three IP addresses to the CPE. After the CPE receives the uplink data service message initiated by the WiFi terminal, according to the type of the uplink data service, if the type of the uplink data service is an IMS service that performs charging at the application layer, the CPE selects the first IMS service. A PDN connection. Correspondingly, the CPE converts the second IP address of the WiFi terminal carried in the uplink data service message into the IP address of the first PDN of the CPE. The sending unit 48 is configured to transparently transmit the packet of the uplink data service encapsulated by the CAPWAP tunnel to the BRAS, and send the packet of the uplink data service to the corresponding service domain; or The packet carrying the uplink data service of the first IP address of the CPE device is directly forwarded to the corresponding service domain by using the EPC direct route.
由于 CPE将在应用层进行计费的数据业务不通过 BRAS接入到相应的业务域, 这样 对于 WiFi终端发起的数据业务不需要进行 CAPWAP隧道封装, 这样对于在应用层进行计 费的数据业务如 IMS、 VoIP等业务,将极大的减少了该数据业务报文的开销,提高了 EPS 的传送效率; 且由于 CPE/AP将 WiFi终端的第二 IP地址转换为 CPE的第一 IP地址, 使 得 EPC可以感知到 WiFi终端发起的数据业务, 从而可以使得 WiFi终端可以利用 EPS的 承载映射机制, 从而可以实现不同业务的优先级调度。  The CPE does not need to perform CAPWAP tunnel encapsulation for the data service initiated by the WiFi terminal, so that the data service that is charged at the application layer does not need to be encapsulated into the corresponding service domain. Services such as IMS and VoIP will greatly reduce the overhead of the data service packet and improve the transmission efficiency of the EPS. And because the CPE/AP converts the second IP address of the WiFi terminal into the first IP address of the CPE, The EPC can sense the data service initiated by the WiFi terminal, so that the WiFi terminal can utilize the bearer mapping mechanism of the EPS, so that priority scheduling of different services can be implemented.
进一步的, 若 AP和 CPE是两个分离的设备, AP和 CPE两个独立的设备可以实现上 述的集成了 AP功能的 CPE的功能。 具体的, AP和 CPE之间可以采用以太网接口连接, CPE会通过 DHCP报文向 AP分配私网 IP地址。在这种形式中,上行数据业务的访问控制 列表可以通过 CAPWAP等远程管理协议或 AP的本地管理接口在 AP中进行远程配置。 AP 接收到 WiFi终端发送的上行数据业务消息后, 根据该上行数据业务的访问控制列表可 以确定 WiFi终端发起的上行数据业务的业务类型。  Further, if the AP and the CPE are two separate devices, the AP and the CPE can implement the functions of the CPE integrated with the AP function. Specifically, the AP and the CPE can be connected to each other through an Ethernet interface. The CPE can assign a private network IP address to the AP through DHCP packets. In this form, the access control list of the uplink data service can be remotely configured in the AP through a remote management protocol such as CAPWAP or a local management interface of the AP. After receiving the uplink data service message sent by the WiFi terminal, the AP can determine the service type of the uplink data service initiated by the WiFi terminal according to the access control list of the uplink data service.
若 WiFi 终端发起的上行数据业务是在应用层进行计费的数据业务, AP 将携带有 WiFi终端的第二 IP地址的上行数据业务消息和 WiFi终端发起的上行数据业务的业务类 型通过以太网接口封装成报文发送给 CPE, 该报文的源 IP地址是 CPE分配给 AP的私网 IP地址。  If the uplink data service initiated by the WiFi terminal is the data service for charging at the application layer, the AP carries the uplink data service message of the second IP address of the WiFi terminal and the service type of the uplink data service initiated by the WiFi terminal through the Ethernet interface. The encapsulated packet is sent to the CPE. The source IP address of the packet is the private IP address assigned by the CPE to the AP.
若 WiFi终端发起的上行数据业务是在 IP层进行计费的数据业务, 将该 WiFi终端 发起的携带有 WiFi终端的第二 IP地址的上行数据业务消息和该 WiFi终端发起的上行 数据业务的数据业务类型通过 CAPWAP隧道封装成 CAPWAP报文发送给 CPE, 该 CAPWAP 报文的外层源 IP地址为 CPE分配给 AP的私网地址。 CPE在收到 CAPWAP报文后, IP层 业务处理单元 44将 CAPWAP的外层源 IP地址转换成 CPE的第一 IP地址,然后将该报文 透传过 EPC后发送到 AC。 AC对该 CAPWAP报文进行解封装, 然后转发给 BRAS。  If the uplink data service initiated by the WiFi terminal is a data service for charging at the IP layer, the uplink data service message carrying the second IP address of the WiFi terminal initiated by the WiFi terminal and the data of the uplink data service initiated by the WiFi terminal The service type is encapsulated into a CAPWAP packet and sent to the CPE through the CAPWAP tunnel. The outer source IP address of the CAPWAP packet is the private network address assigned by the CPE to the AP. After receiving the CAPWAP packet, the IP plane processing unit 44 converts the outer source IP address of the CAPWAP into the first IP address of the CPE, and then transparently transmits the packet to the EPC and then sends the packet to the AC. The AC decapsulates the CAPWAP packet and forwards it to the BRAS.
由于 CPE的应用层处理单元 45把 WiFi终端发起的在应用层计费的上行数据业务消 息携带的 WiFi终端的第二 IP地址转换为 CPE的第一 IP地址, 这样 CPE根据该上行数 据业务消息中的 CPE的第一 IP地址, 可以将该 WiFi终端发起的数据业务映射到相应的 EPS承载上; 而对于在 IP层进行计费的数据业务, 由于 CAPWAP封装的 WiFi终端发起的 数据业务消息携带 WiFi终端的第二 IP地址, 这样 IP层业务处理单元 44将该 WiFi终 端发起的数据业务映射到另一承载上。从而可以在 EPS承载层面实现了不同业务的上行 流和下行流之间的优先级调度,保证了不同上行数据业务流之间的不同 QoS (Quality of System, 服务质量) 等级。 The application layer processing unit 45 of the CPE converts the second IP address of the WiFi terminal carried in the uplink data service message, which is initiated by the WiFi terminal, into the first IP address of the CPE, so that the CPE is in the uplink data service message. The first IP address of the CPE, the data service initiated by the WiFi terminal may be mapped to the corresponding EPS bearer; and the data service for charging at the IP layer is initiated by the WiFi terminal encapsulated by the CAPWAP The data service message carries the second IP address of the WiFi terminal, such that the IP layer service processing unit 44 maps the data service initiated by the WiFi terminal to another bearer. Therefore, priority scheduling between upstream and downstream flows of different services can be implemented at the EPS bearer layer, and different QoS (Quality of System) levels between different uplink data service flows are guaranteed.
进一步的, 现有技术中为了解决对 WiFi终端单独认证和 /或计费的问题, WiFi终 端必须接入到在应用层进行计费的业务时需要通过 BRAS , 从而无法支持动态的 PCC (Policy Control and Charging, 策略控制和计费) 策略和静态 QoS策略部署的问题。 而本实施例中对于 WiFi终端访问在应用层进行计费的业务, 如 IMS业务, 处理单元 44 将 WiFi终端发起的上行数据业务消息中的源地址转换为 CPE的第一 IP地址, 这样 EPC 侧可以感知。 当 IMS通过 PCRF (Policy and Charging Rules Function, 策略计费规则 功能) 向 P-GW (Packet Data Network Gateway, 分组数据网络网关) 触发专用 EPS承 载建立时, P-GW就可以关联到 CPE的 EPS承载, 从而可以支持动态的 PCC策略和静态 QoS策略部署。  Further, in the prior art, in order to solve the problem of separate authentication and/or charging for the WiFi terminal, the WiFi terminal must access the BRAS when accessing the service for charging at the application layer, thereby failing to support the dynamic PCC (Policy Control) And Charging, Policy Control and Accounting) Issues with policy and static QoS policy deployment. In the embodiment, the WiFi terminal accesses the service at the application layer, such as the IMS service, and the processing unit 44 converts the source address in the uplink data service message initiated by the WiFi terminal to the first IP address of the CPE, so that the EPC side Can be perceived. When the IMS triggers the establishment of a dedicated EPS bearer to the P-GW (Packet Data Network Gateway) through the PCRF (Policy and Charging Rules Function), the P-GW can be associated with the EPS bearer of the CPE. Thus, dynamic PCC policies and static QoS policy deployment can be supported.
进一步的,本实施中通过 BRAS向 WiFi终端分配第二 IP地址, WiFi终端通过 BRAS 接入到在 IP层计费的业务域,可以实现应用系统单独对 WiFi终端进行计费; 同时 WiFi 终端通过 EPC接入到应用层计费的业务域, 由业务域在 WiFi终端进行应用层计费, 这 样从而实现了应用系统对 WiFi 终端访问的不同业务预进行单独的计费, 从而避免了 WiFi终端通过 BRAS接入到所有不同业务域时, BRAS对所有业务进行计费后, 还必须 扣除在应用层也计费的业务的费用。 进而也降低了 BRAS 和 AAA (Authentication, Authorization, Accounting, 身份验证、 授权和统计) 服务器实现和部署的难度。  Further, in this implementation, the second IP address is allocated to the WiFi terminal through the BRAS, and the WiFi terminal accesses the service domain that is charged in the IP layer through the BRAS, so that the application system can separately charge the WiFi terminal; and the WiFi terminal passes the EPC. Accessing the application domain charging service domain, the service domain performs application layer charging on the WiFi terminal, thus implementing the application system to perform separate charging for different services accessed by the WiFi terminal, thereby avoiding the WiFi terminal passing the BRAS. When accessing all the different service domains, the BRAS must deduct the cost of the services that are also charged at the application layer after all services are charged. This in turn reduces the difficulty of implementing and deploying BRAS and AAA (Authentication, Authorization, Accounting, Authentication, Authorization, and Statistics) servers.
进一步的,本发明实施例提供的 CPE设备不仅可以包括 LTE接口单元与基站通过长 期演进 LTE方式进行通信, 还可以包括 LTE-A (LTE-AdvanCed, LTE 技术的后续演进)接 口单元与基站通过长期演进 LTE-A方式进行通信。 Further, the CPE device provided by the embodiment of the present invention may include not only the LTE interface unit and the base station to communicate through the long-term evolution LTE mode, but also the LTE-A (LTE-Advan C ed, subsequent evolution of the LTE technology) interface unit and the base station. Communication is carried out through the long-term evolution LTE-A mode.
本发明实施例提供的一种 WiFi终端接入不同业务域的装置, 在确定单元确定 WiFi 终端发起的上行数据业务的类型, 通过 IP 层业务处理单元或应用层业务处理单元对 WiFi端发起的不同数据业务进行智能路由,如对在 IP层进行认证和 /或计费的业务, IP 层业务处理单元通过所述 CAPWAP隧道将承载有所述上行数据业务的报文进行封装后透 传过所述 EPC后发送 BRAS, BRAS将所述上行数据业务的报文发送给相应的业务域; 对 于在应用层认证和 /或计费的业务, 应用层业务处理单元则将承载所述上行数据业务的 报文携带的所述 WiFi终端的所述第二 IP地址转换为所述 CPE设备的所述第一 IP地址, 通过所述 EPC直接路由转发给相应的业务域。这样 WiFi终端访问在应用层进行认证和 / 或计费的业务域, 不需要通过 BRAS, 这样 WiFi 终端与业务域间的报文不需要 CAPWAP 隧道封装, 不会增加报文的头开销, 从而可以提高 EPS的传送效率; 同时通过对不同类 型的业务域进行智能路由, 不同业务域的五元组不同, 使得 CPE可以将 WiFi终端的不 同数据业务映射到不同的 EPS承载, 实现了不同业务流之间的优先级调度。 The device for accessing different service domains by the WiFi terminal is provided by the embodiment of the present invention, and the determining unit determines the type of the uplink data service initiated by the WiFi terminal, and the difference is initiated by the IP layer service processing unit or the application layer service processing unit to the WiFi terminal. The data service performs intelligent routing, such as the service of authenticating and/or charging at the IP layer, and the IP layer service processing unit encapsulates the packet carrying the uplink data service through the CAPWAP tunnel and transparently transmits the packet. After the EPC, the BRAS is sent, and the BRAS sends the packet of the uplink data service to the corresponding service domain. For the service layer authentication and/or accounting, the application layer service processing unit carries the report of the uplink data service. Converting the second IP address of the WiFi terminal carried in the text to the first IP address of the CPE device, Forwarding to the corresponding service domain through the EPC direct route. In this way, the WiFi terminal accesses the service domain that is authenticated and/or charged at the application layer, and does not need to pass the BRAS. Therefore, the packet between the WiFi terminal and the service domain does not need to be encapsulated by the CAPWAP tunnel, and the header overhead of the packet is not increased. Improve the transmission efficiency of EPS. At the same time, intelligent routing of different types of service domains, the quintuple of different service domains is different, so that the CPE can map different data services of the WiFi terminal to different EPS bearers, and realize different service flows. Priority scheduling between.
进一步的, 可以降低 BRAS和 AAA实现和部署的难度, 同时可以使得 WiFi终端发起 的上行数据业务支持动态 PCC策略和静态 QoS策略部署。  Further, the difficulty of implementing and deploying the BRAS and the AAA can be reduced, and the uplink data service initiated by the WiFi terminal can support the dynamic PCC policy and the static QoS policy deployment.
进一步的, CPE还可以通过自身对不同业务域的优先级配置, 实现对 WiFi终端发 起的多个不同业务域进行不同优先级的调度。  Further, the CPE can also perform different priority scheduling for multiple different service domains initiated by the WiFi terminal through its own priority configuration for different service domains.
本领域普通技术人员可以理解:实现上述方法实施例的全部或部分步骤可以通过程 序指令相关的硬件(如各种处理芯片, CPU、 DSP、 FPGA等)来完成, 前述的程序可以存 储于一计算机可读取存储介质中, 该程序在执行时, 执行包括上述方法实施例的步骤; 而前述的存储介质包括: 醒、 應、 磁碟或者光盘等各种可以存储程序代码的介质。 以上所述, 仅为本发明的具体实施方式, 但本发明的保护范围并不局限于此, 任何熟悉 本技术领域的技术人员在本发明揭露的技术范围内, 可轻易想到变化或替换, 都应涵盖 在本发明的保护范围之内。因此,本发明的保护范围应以所述权利要求的保护范围为准。  A person skilled in the art can understand that all or part of the steps of implementing the foregoing method embodiments may be performed by using hardware related to program instructions (such as various processing chips, CPU, DSP, FPGA, etc.), and the foregoing program may be stored in a computer. The readable storage medium, when executed, executes the steps including the foregoing method embodiments; and the foregoing storage medium includes: various media that can store program codes, such as wake-up, response, disk or optical disk. The above is only the specific embodiment of the present invention, but the scope of the present invention is not limited thereto, and any person skilled in the art can easily think of changes or substitutions within the technical scope of the present invention. It should be covered by the scope of the present invention. Therefore, the scope of the invention should be determined by the scope of the appended claims.

Claims

权利要求 Rights request
1、 一种用于 WiFi终端接入到不同业务域的方法, 其特征在于, 应用于用户端设备 CPE, 所述 CPE与所述 WiFi终端通过 WiFi方式进行通信, 所述 CPE与基站通过长期演进 LTE 方式进行通信, 所述基站通过演进型分组核心网 EPC与多种业务分别对应的多个业务域 相连, 通过上述系统架构, 使得所述 WiFi终端通过所述 CPE, 所述基站, 所述 EPC与所述 业务域进行通信, 其中, 所述方法包括:  A method for a WiFi terminal to access a different service domain, wherein the CPE and the WiFi terminal communicate with each other through a WiFi mode, and the CPE and the base station pass a long-term evolution. The LTE mode is used for communication, and the base station is connected to multiple service domains corresponding to the plurality of services through the EPC of the evolved packet core network, and the base station is configured to enable the WiFi terminal to pass the CPE, the base station, and the EPC. Communicating with the service domain, where the method includes:
所述 CPE根据所述 EPC分配的第一 IP地址通过所述 EPC与宽带远程接入服务器 BRAS进 行通信并建立 CAPWAP隧道,将通过 CAPWAP隧道封装的 WiFi终端与所述在 IP层进行认证和 /或计费的业务域进行通信的报文发送到 BRAS, 并通过所述 WiFi终端与所述在 IP层进行 认证和 /或计费的业务域的交互使得所述 BRAS为所述 WiFi终端分配一个第二 IP地址; 确定所述 WiFi终端发起的上行数据业务的数据业务类型;  The CPE communicates with the broadband remote access server BRAS through the EPC according to the first IP address allocated by the EPC, and establishes a CAPWAP tunnel, and authenticates the WiFi terminal encapsulated by the CAPWAP tunnel with the IP layer and/or Transmitting, by the charging service domain, a message that is communicated to the BRAS, and by the WiFi terminal interacting with the service domain that performs authentication and/or charging at the IP layer, the BRAS allocates a number to the WiFi terminal. a second IP address; determining a data service type of the uplink data service initiated by the WiFi terminal;
若所述 WiFi终端发起的上行数据业务是在 IP层进行认证和 /或计费的数据业务类 型, 将所述上行数据业务通过所述 CAPWAP隧道进行封装; 将通过 CAPWAP隧道封装的上行 数据业务的报文透传过所述 EPC后发送到 BRAS, 所述 BRAS将所述上行数据业务的报文发 送给相应的业务域;  If the uplink data service initiated by the WiFi terminal is a data service type that is authenticated and/or charged at the IP layer, the uplink data service is encapsulated by using the CAPWAP tunnel; and the uplink data service encapsulated by the CAPWAP tunnel is used. The packet is transmitted to the BRAS after being transparently transmitted to the EPC, and the BRAS sends the packet of the uplink data service to the corresponding service domain.
若 WiFi终端发起的上行数据业务是在应用层进行认证和 /或计费的数据业务类型, 则将承载所述上行数据业务的报文携带的所述 WiFi终端的所述第二 IP地址转换为所述 If the uplink data service initiated by the WiFi terminal is a data service type that is authenticated and/or charged at the application layer, converting the second IP address of the WiFi terminal carried in the packet carrying the uplink data service into Said
CPE设备的所述第一 IP地址; 将所述携带有所述 CPE设备的第一 IP地址的所述上行数据业 务的报文通过所述 EPC直接路由转发给相应的业务域。 The first IP address of the CPE device is forwarded to the corresponding service domain by using the EPC direct route to the packet carrying the uplink data service of the first IP address of the CPE device.
2、 根据权利要求 1所述的方法, 其特征在于, 在所述确定所述 WiFi终端发起的上行 数据业务的数据业务类型前, 还包括: 预配置上行数据业务的访问控制列表; 或动态派 生上行数据业务的访问控制列表;  The method according to claim 1, wherein before the determining the data service type of the uplink data service initiated by the WiFi terminal, the method further includes: pre-configuring an access control list of the uplink data service; or dynamically deriving An access control list of the uplink data service;
所述上行数据业务的访问控制列表包括上行数据业务的五元组信息,所述五元组信 息包括所述上行数据业务的源地址、 目的地址、 源端口、 目的端口和协议号;  The access control list of the uplink data service includes quintuple information of the uplink data service, where the quintuple information includes a source address, a destination address, a source port, a destination port, and a protocol number of the uplink data service;
所述确定所述 WiFi终端发起的上行数据业务的数据业务类型具体为根据所述上行 数据业务的五元组信息中的所述目的地址确定所述 WiFi终端发起的上行数据业务的类 型。  The determining the data service type of the uplink data service initiated by the WiFi terminal is specifically determining the type of the uplink data service initiated by the WiFi terminal according to the destination address in the quintuple information of the uplink data service.
3、 根据权利要求 2所述的方法, 其特征在于, 在将通过 CAPWAP隧道封装的上行数据 业务的报文透传过所述 EPC后发送到 BRAS前, 还包括:  The method according to claim 2, wherein before the packet of the uplink data service encapsulated by the CAPWAP tunnel is transparently transmitted to the BRAS after being sent to the BRAS, the method further includes:
将所述 WiFi终端发起的上行数据业务按照 EPS的 QoS机制映射到相应的承载。 The uplink data service initiated by the WiFi terminal is mapped to the corresponding bearer according to the QoS mechanism of the EPS.
4、 根据权利要求 2所述的方法, 其特征在于, 在将所述携带有所述 CPE设备的第一 IP地址的所述上行数据业务的报文通过所述 EPC直接路由转发给相应的业务域前, 还包 括: The method according to claim 2, wherein the packet carrying the uplink data service carrying the first IP address of the CPE device is forwarded to the corresponding service through the EPC direct route. Before the domain, it also includes:
将所述 WiFi终端发起的上行数据业务按照 EPS的 QoS机制映射到相应的承载。  The uplink data service initiated by the WiFi terminal is mapped to the corresponding bearer according to the QoS mechanism of the EPS.
5、 根据权利要求 3或 4所述的方法, 其特征在于, 所述将所述 WiFi终端发起的上行 数据业务按照 EPS的 QoS机制映射到相应的承载具体为:  The method according to claim 3 or 4, wherein the mapping the uplink data service initiated by the WiFi terminal to the corresponding bearer according to the QoS mechanism of the EPS is:
若 WiFi终端发起的第一上数据业务分配到 CPE与 EPC之间建立的多条 PDN中某一 PDN 连接上, 将所述 WiFi终端发起的上行数据业务在被分配的 PDN连接上按照 EPS的 QoS机制 映射到相应的承载上。  If the first uplink data service initiated by the WiFi terminal is allocated to a PDN connection among the plurality of PDNs established between the CPE and the EPC, the uplink data service initiated by the WiFi terminal is allocated according to the QoS of the EPS on the allocated PDN connection. The mechanism maps to the corresponding bearer.
6、 根据权利要求 2所述的方法, 其特征在于, 所述预配置的上行数据业务的访问控 制列表还包括: 上行数据业务的优先级信息;  The method according to claim 2, wherein the access control list of the pre-configured uplink data service further includes: priority information of the uplink data service;
根据所述 WiFi终端发起的上行数据业务或上行数据业务的类型和所述上行数据业 务的优先级信息, 对所述 WiFi终端发起的上行数据业务进行优先级调度。  And performing priority scheduling on the uplink data service initiated by the WiFi terminal according to the type of the uplink data service or the uplink data service initiated by the WiFi terminal and the priority information of the uplink data service.
7、 一种用户端设备 CPE, 其特征在于, 所述 CPE与所述 WiFi终端通过 WiFi方式进行 通信, 所述 CPE与基站通过长期演进 LTE方式进行通信, 所述基站通过演进型分组核心网 EPC与多种业务分别对应的多个业务域相连, 通过上述系统架构, 使得所述 WiFi终端通 过所述 CPE, 所述基站, 所述 EPC与所述业务域进行通信, 所述 CPE包括: A user equipment CPE, wherein the CPE communicates with the WiFi terminal through a WiFi mode, and the CPE communicates with the base station by using a long-term evolution LTE mode, and the base station passes the evolved packet core network EPC. The plurality of service domains respectively corresponding to the plurality of services are connected to each other, and the WiFi terminal is configured to communicate with the service domain by using the CPE, the base station, and the EPC, where the CPE includes:
隧道建立单元,用于根据所述 EPC分配的第一 IP地址通过所述 EPC与宽带远程接入服 务器 BRAS进行通信, 建立 CAPWAP隧道, 将通过 CAPWAP隧道封装的 WiFi终端与所述在 IP层 进行认证和 /或计费的业务域进行通信的报文发送到 BRAS, 并通过所述 WiFi终端与所述 在 IP层进行认证和 /或计费的业务域的交互使得所述 BRAS为所述 WiFi终端分配一个第二 IP地址;  a tunnel establishing unit, configured to communicate with the broadband remote access server BRAS through the EPC according to the first IP address allocated by the EPC, establish a CAPWAP tunnel, and authenticate the WiFi terminal encapsulated by the CAPWAP tunnel with the IP layer And communicating with the billed service domain to the BRAS, and the BRAS is the WiFi terminal by interacting with the service domain that performs authentication and/or charging at the IP layer. Assign a second IP address;
确定单元, 用于确定所述 WiFi终端发起的上行数据业务的数据业务类型;  a determining unit, configured to determine a data service type of the uplink data service initiated by the WiFi terminal;
IP层业务处理单元,用于若所述确定单元确定所述 WiFi终端发起的上行数据业务是 在 IP层进行认证和 /或计费的数据业务类型, 将所述上行数据业务通过所述 CAPWAP隧道 进行封装;  The IP layer service processing unit is configured to: if the determining unit determines that the uplink data service initiated by the WiFi terminal is a data service type that is authenticated and/or charged at an IP layer, and uses the uplink data service to pass the CAPWAP tunnel. Carry out packaging;
应用层业务处理单元,用于若所述确定单元确定 WiFi终端发起的上行数据业务是在 应用层进行认证和 /或计费的数据业务类型, 则将承载所述上行数据业务的报文携带的 所述 WiFi终端的所述第二 IP地址转换为所述 CPE设备的所述第一 IP地址; 发送单元, 用于将通过 CAPWAP隧道封装的所述上行数据业务的报文透传过所述 EPC 后发送到 BRAS, 所述 BRAS将所述上行数据业务的报文发送给相应的业务域; 或 The application layer service processing unit is configured to: if the determining unit determines that the uplink data service initiated by the WiFi terminal is a data service type that is authenticated and/or charged at the application layer, carries the packet carrying the uplink data service. Converting the second IP address of the WiFi terminal to the first IP address of the CPE device; a sending unit, configured to transparently transmit the packet of the uplink data service encapsulated by the CAPWAP tunnel to the BRAS, and send the packet of the uplink data service to a corresponding service domain; or
用于将所述携带有所述 CPE设备的第一 IP地址的所述上行数据业务的报文通过所述 EPC直接路由转发给相应的业务域。  The packet of the uplink data service carrying the first IP address of the CPE device is directly forwarded to the corresponding service domain by using the EPC.
8、 根据权利要求 7所述的装置, 其特征在于, 还包括: 获取单元, 用于预配置上行 数据业务的访问控制列表; 或  The device according to claim 7, further comprising: an obtaining unit, configured to pre-configure an access control list of the uplink data service; or
用于动态派生上行数据业务的访问控制列表;  An access control list for dynamically deriving uplink data services;
所述上行数据业务的访问控制列表包括上行数据业务的五元组信息,所述五元组信 息包括所述上行数据业务的源地址、 目的地址、 源端口、 目的端口和协议号;  The access control list of the uplink data service includes quintuple information of the uplink data service, where the quintuple information includes a source address, a destination address, a source port, a destination port, and a protocol number of the uplink data service;
所述确定单元具体用于根据所述上行数据业务的五元组信息中的所述目的地址确 定所述 WiFi终端发起的上行数据业务的类型。  The determining unit is specifically configured to determine, according to the destination address in the quintuple information of the uplink data service, a type of uplink data service initiated by the WiFi terminal.
9、 根据权利要求 8所述的装置, 其特征在于, 还包括: 承载映射单元, 用于将所述 WiFi终端发起的上行数据业务按照 EPS的 QoS机制映射到相应的承载。  The device according to claim 8, further comprising: a bearer mapping unit, configured to map the uplink data service initiated by the WiFi terminal to a corresponding bearer according to an QoS mechanism of the EPS.
10、根据权利要求 9所述的装置, 其特征在于, 所述承载映射单元具体用于: 若 WiFi 终端发起的上行数据业务分配到 CPE与 EPC之间建立的多条 PDN中某一 PDN连接上,将所述 The device according to claim 9, wherein the bearer mapping unit is specifically configured to: if the uplink data service initiated by the WiFi terminal is allocated to a PDN connection among multiple PDNs established between the CPE and the EPC Will be described
WiFi终端发起的上行数据业务在被分配的 PDN连接上按照 EPS的 QoS机制映射到相应的承 载上。 The uplink data service initiated by the WiFi terminal is mapped to the corresponding bearer according to the EPS QoS mechanism on the allocated PDN connection.
11、 根据权利要求 7所述的装置, 其特征在于, 所述获取单元预配置的上行数据业 务的访问控制列表还包括: 上行数据业务的优先级信息;  The device according to claim 7, wherein the access control list of the uplink data service pre-configured by the acquiring unit further includes: priority information of the uplink data service;
所述优先级处理单元,用于根据所述 WiFi终端发起的上行数据业务或上行数据业务 的类型和所述上行数据业务的优先级信息,对所述 WiFi终端发起的上行数据业务进行优 先级调度。  The priority processing unit is configured to perform priority scheduling on the uplink data service initiated by the WiFi terminal according to the type of the uplink data service or the uplink data service initiated by the WiFi terminal and the priority information of the uplink data service. .
PCT/CN2012/075854 2012-01-18 2012-05-22 Method and apparatus for wifi terminal to access different service domains WO2013107138A1 (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
RU2014133529/07A RU2572825C1 (en) 2012-01-18 2012-05-22 METHOD AND APPARATUS FOR Wi-Fi TERMINAL FOR ACCESSING DIFFERENT SERVICE DOMAINS

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN201210015987.5A CN103220650B (en) 2012-01-18 2012-01-18 A kind of method and apparatus of WiFi terminal access different business territory
CN201210015987.5 2012-01-18

Publications (1)

Publication Number Publication Date
WO2013107138A1 true WO2013107138A1 (en) 2013-07-25

Family

ID=48798554

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2012/075854 WO2013107138A1 (en) 2012-01-18 2012-05-22 Method and apparatus for wifi terminal to access different service domains

Country Status (3)

Country Link
CN (1) CN103220650B (en)
RU (1) RU2572825C1 (en)
WO (1) WO2013107138A1 (en)

Cited By (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN110677513A (en) * 2019-10-09 2020-01-10 中盈优创资讯科技有限公司 Method and system for collecting binding domain and domain lower address pool of metropolitan area network private line user
CN114143892A (en) * 2021-11-30 2022-03-04 北京长焜科技有限公司 Double-current convergence method supporting NR and WiFi service dynamic allocation
CN114285696A (en) * 2021-12-08 2022-04-05 中国联合网络通信集团有限公司 Fixed network broadband service scheduling system, method, device and storage medium

Families Citing this family (14)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN103532842B (en) * 2013-10-14 2017-10-13 广州供电局有限公司 The high reliability LTE transmission system of distribution network
CN104883687B (en) * 2014-02-28 2019-02-26 华为技术有限公司 WLAN tunnel establishing method, device and access net system
CN106454929A (en) * 2015-08-13 2017-02-22 中国移动通信集团公司 Business process processing method, apparatus, base station, gateway and terminal
CN107026918B (en) * 2016-01-29 2020-06-09 中国移动通信集团广东有限公司 Web authentication charging method and system based on dynamic host configuration protocol
CN105610634B (en) * 2016-02-24 2019-04-16 普兴移动通讯设备有限公司 Core network data Transmission system and method
CN108243263A (en) * 2016-12-26 2018-07-03 中移(苏州)软件技术有限公司 A kind of cut-in method of mobile hotspot device and mobile hotspot device
CN108260098B (en) * 2016-12-29 2020-10-16 中国移动通信有限公司研究院 Target wireless hotspot traffic charging method, traffic charging system and related devices
CN109150812A (en) * 2017-06-27 2019-01-04 西门子(中国)有限公司 Data transmission method, apparatus and system
CN108737224B (en) * 2017-09-28 2020-06-09 新华三技术有限公司 Message processing method and device based on micro-service architecture
CN109788579B (en) * 2017-11-14 2021-01-22 电信科学技术研究院 PDU session establishment method and device
CN113038542B (en) 2018-01-12 2024-06-18 华为技术有限公司 Communication method and device
CN108737277B (en) * 2018-08-30 2021-02-26 新华三技术有限公司 Message forwarding method and device
CN115499872A (en) * 2021-06-02 2022-12-20 海能达通信股份有限公司 Message interaction method and related device
CN116017791A (en) * 2023-03-24 2023-04-25 新华三技术有限公司 Intranet-extranet isolation method, device, electronic equipment and machine-readable storage medium

Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101577916A (en) * 2009-02-27 2009-11-11 西安西电捷通无线网络通信有限公司 Method for realizing convergence of WAPI and CAPWAP in local MAC mode
CN101621802A (en) * 2009-08-13 2010-01-06 杭州华三通信技术有限公司 Method, system and device for authenticating portal in wireless network
CN101771612A (en) * 2010-01-13 2010-07-07 华为技术有限公司 Tunnel establishing method, equipment and network system

Family Cites Families (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US7889765B2 (en) * 2005-11-30 2011-02-15 Time Warner Cable Inc. Apparatus and methods for utilizing variable rate program streams in a network
US8145532B2 (en) * 2006-06-27 2012-03-27 Microsoft Corporation Connecting devices to a media sharing service

Patent Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101577916A (en) * 2009-02-27 2009-11-11 西安西电捷通无线网络通信有限公司 Method for realizing convergence of WAPI and CAPWAP in local MAC mode
CN101621802A (en) * 2009-08-13 2010-01-06 杭州华三通信技术有限公司 Method, system and device for authenticating portal in wireless network
CN101771612A (en) * 2010-01-13 2010-07-07 华为技术有限公司 Tunnel establishing method, equipment and network system

Cited By (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN110677513A (en) * 2019-10-09 2020-01-10 中盈优创资讯科技有限公司 Method and system for collecting binding domain and domain lower address pool of metropolitan area network private line user
CN110677513B (en) * 2019-10-09 2022-03-08 中盈优创资讯科技有限公司 Method and system for collecting binding domain and domain lower address pool of metropolitan area network private line user
CN114143892A (en) * 2021-11-30 2022-03-04 北京长焜科技有限公司 Double-current convergence method supporting NR and WiFi service dynamic allocation
CN114285696A (en) * 2021-12-08 2022-04-05 中国联合网络通信集团有限公司 Fixed network broadband service scheduling system, method, device and storage medium
CN114285696B (en) * 2021-12-08 2023-05-16 中国联合网络通信集团有限公司 Fixed network broadband service scheduling system, method, device and storage medium

Also Published As

Publication number Publication date
RU2572825C1 (en) 2016-01-20
CN103220650A (en) 2013-07-24
CN103220650B (en) 2016-04-06

Similar Documents

Publication Publication Date Title
WO2013107138A1 (en) Method and apparatus for wifi terminal to access different service domains
CN103348717B (en) Mobile router in EPS
CN103141133B (en) Data message is carried out to the method and apparatus of policy control
JP5903728B2 (en) Method and trusted gateway for WIFI terminal to access packet data PS service domain
JP5982690B2 (en) Network convergence method, device, and communication system
EP2608617A1 (en) System and method for resource management for operator services and internet
WO2011157129A2 (en) Data transmission method, stream distribution node device, user equipment and system
WO2011134329A1 (en) Method and system for transmitting small data packets
WO2007073696A1 (en) A method, apparatus and system for wireless access
WO2011060673A1 (en) Public bearer establishment method, data transmission method and core network side apparatus
WO2015196396A1 (en) Method for establishing network connection, gateway and terminal
WO2011079782A1 (en) Policy and charging control method, gateway and mobile terminal thereof
WO2009052749A1 (en) Method, net element apparatus and network system for establishing the ethernet connection
CN102457847A (en) Fixed network perception user access method and system thereof
WO2014101755A1 (en) Service data shunting method and system
US20110280187A1 (en) Provision of an end-to-end connection from a terminal unit to a network
KR100990796B1 (en) Quality of service control in a wireless local area network
WO2015003348A1 (en) Gre tunnel implementation method, access point and gateway
KR101769344B1 (en) System and method for mapping a port of MP-GW(MPTCP Proxy GateWay) for each service flow in the multi-path environment
WO2012100611A1 (en) Method and system for accessing evolved packet system
JP2014146950A (en) Network communication system
CN113938353A (en) Multi-PDN implementation method between indoor unit and outdoor unit and storage medium
WO2013082987A1 (en) Method and system for performing resource control on local offload data
WO2010091591A1 (en) A method and system for data transmission
EP3982598A1 (en) Method and apparatus for sending and receiving message, and communication system

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 12866242

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE

ENP Entry into the national phase

Ref document number: 2014133529

Country of ref document: RU

Kind code of ref document: A

122 Ep: pct application non-entry in european phase

Ref document number: 12866242

Country of ref document: EP

Kind code of ref document: A1