WO2018049583A1

WO2018049583A1 - User plane sharing method, device and supervising management device based on network slicing

Info

Publication number: WO2018049583A1
Application number: PCT/CN2016/098997
Authority: WO
Inventors: 王岩; 李业兴; 陈中平; 侯义合
Original assignee: 华为技术有限公司
Priority date: 2016-09-14
Filing date: 2016-09-14
Publication date: 2018-03-22

Abstract

The present invention relates to a user plane sharing method, a device and a supervising management device based on network slicing, and is applied to a core network including the supervising management device. The method comprises: the supervising management device acquiring a target configuration policy of a target network slice; when a target control plane network element sends a target rule to a target user plane network element, the supervising management device respectively determining conditions of whether a function set issued based on the target rule is a sub-set of an original user plane sub-function set, whether a frequency issued based on the target rule is less than a target frequency, and whether a bandwidth issued based on the target rule is greater than a target bandwidth, and the supervising management device sending the target rule to the target user plane network element only when the target rule issued by the control plane network element satisfies said related conditions. By means of centralized management by the supervising management device of a target rule issued by a control plane network element, a target network slice is prevented from crossing over and using an unauthorized original user plane sub-function and further from affecting normal operation of other network slices.

Description

User plane sharing method, device and supervision manager based on network slice

Technical field

The embodiments of the present invention relate to the field of communications technologies, and in particular, to a network slice-based user plane sharing method, apparatus, and supervisor manager.

Background technique

In order to enhance the flexibility and scalability of the network, the function items in the EPC (Evolved Packet Core) are decomposed into CP (Control Plane Gateway) and GW-U (Gateway-user plane, User plane gateway). The GW-U is mainly used for processing data packets; the CP is mainly used to define the processing action of the GW-U on the data packet, and the CP sends the processing rule (rule) of the data packet to the GW-U, when the data packet arrives at the GW. When the -U is used, the GW-U processes the data packet according to the forwarding rule sent by the CP, thereby completing the processing and transmission of the user data packet.

As the information market continues to develop in the direction of refinement and verticalization, the core network system also needs to support new diversified use cases. Network operation and maintenance is also extremely complicated due to the gradual improvement of network complexity, resulting in a single network architecture. Under the hood, the difficulty of operation and maintenance and the cost of operation and maintenance become the biggest challenges in dealing with diversified application scenarios. Therefore, in order to reduce the excessive operation difficulty and operation and maintenance cost, it is usually necessary to further abstract the network into network slices, and isolate each network slice from each other so that different network slices can realize their respective under the corresponding application scenarios. The function, which further reduces the overall complexity of the network, so that the operational difficulty and operating cost of the network in a variety of application scenarios will be reduced accordingly.

When the network is sliced under the network frame separated by the CP and the GW-U, each network slice has its own independent CP, and each network slice has one or more GW-Us. In order to reduce the delay, the GW-U in the network slice needs to be moved down. GW-U usually adopts distributed deployment. When a large number of GW-Us need to be deployed at the edge of the network, if the network slice is used exclusively for GW-U, each network slice will cause network edge due to heavy GW-U. Resources are quickly exhausted, which in turn limits the scalability of network slices. Therefore, a method in which a plurality of network slices share a GW-U is generally adopted, so that resources consumed by creating a GW-U can be reduced to improve resource utilization. However, when multiple network slices share GW-U, it is necessary to make each network slice have no influence on each other and are isolated from each other. When creating a network slice, the network slice pre-plans the usage of the GW-U resource. During the network slicing process, once the network slice is not within the pre-planned scope The use of resources in GW-U will seriously affect the normal use of other network slices, and it will not be able to isolate each network slice. Therefore, in order to make each network slice use the resources of the GW-U within a pre-planned range, it is necessary to effectively manage each network slice when using the resources of the GW-U.

In the related art, the Flowvisor is used in the OpenFlow protocol to ensure isolation of network slices when multiple OpenFlow controllers share an OpenFlow switch. Among them, OpenFlow is used in the transmission network and is an interface protocol between the OpenFlow controller and the OpenFlow switch. The OpenFlow controller is the control plane network element, and the OpenFlow switch is the user plane network element. When multiple network slices share an OpenFlow switch, the Flowvisor is deployed between the OpenFlow controller and the OpenFlow switch. By configuring the policy of each slice on the Flowvisor, the Flowvisor configures the relationship between the OpenFlow controller and the OpenFlow switch according to the contents of the Policy. The signaling is managed in a unified manner to isolate the CPU (Central Processing Unit), bandwidth, and topology when the OpenFlow switch is shared, so that the slices do not affect each other when the OpenFlow switch is shared.

However, in the related art, the use of the Flowvisor directly to implement the distributed gateway CP and the shared GW-U under the GW-U separation architecture has the following disadvantages:

Since Flowvisor is used in the OpenFlow protocol, the isolation is mainly the isolation of the underlying physical resources. Currently, OpenFlow only implements basic stateless fast forwarding, and has not implemented DPI, online charging, etc., so Flowvisor does not consider each The atomic function of the network slice user plane is isolated. However, in the network architecture in which the existing core network gateways C and U are separated, the user plane GW-U has functions such as charging, DPI (Deep Packet Inspection, Deep Packet Inspection), etc. in the core network. Each network slice has a specific set of atomic functions, and the atomic function set of each network slice is a subset of the full set of user-side atomic functions. Since the Flowvisor does not isolate the user plane atomic function set of the network slice, it is likely that the network slice uses the user plane atom function outside the specified range, thereby affecting the normal operation of other network slices.

Summary of the invention

To overcome the problems in the related art, the present invention provides a user plane sharing method, apparatus and supervisor manager based on network slicing.

According to a first aspect of the embodiments of the present invention, a network slice-based user plane sharing method is provided, where the method includes:

The supervisor manager obtains a target configuration policy of the target network slice, where the target configuration policy includes a set of user plane atomic functions;

When the target control plane network element sends the target rule to the target user plane network element, the supervisory manager determines whether the function set delivered by the target rule is a subset of the user plane atomic function set;

When the function set delivered by the target rule is a subset of the user plane atomic function set, the supervisor manager sends the target rule to the target user plane network element.

Through the unified management and control of the target rules delivered by the control plane network element, the supervisory network can effectively prevent the target network slice from crossing the boundary using unauthorized user plane atom functions, thereby avoiding affecting the normal operation of other network slices.

With reference to the first aspect, in a first possible implementation manner of the first aspect, the target configuration policy further includes: a target frequency and a target bandwidth; the method further includes:

The supervisory manager determines whether the frequency of the target rule delivery is less than the target frequency;

When the frequency of the target rule is less than the target frequency, the supervisory manager determines whether the bandwidth delivered by the target rule is not greater than the target bandwidth;

When the bandwidth delivered by the target rule is not greater than the target bandwidth, the step of the supervisor manager sending the target rule to the target user plane network element is performed.

The function set, frequency and bandwidth delivered by the supervisory manager to the target rule may be judged at the same time, or may be judged according to a certain judgment order, and the supervisor manager except the function set, the frequency and the target rule In addition to the bandwidth judgment, the supervisory manager can also detect other attribute parameters delivered by the target rule according to the requirements, and then determine whether the requirements are met, so as to prevent the target network slice from crossing the boundary using the unauthorized user plane atom function, thereby causing the impact. The normal operation of other network slices.

With reference to the first aspect, in a second possible implementation manner of the first aspect, the supervisory manager obtains a target configuration policy of the target network slice, including:

The supervisor manager obtains a target feature value of the target network slice;

The supervisor manager obtains a target configuration policy corresponding to the target feature value.

Since the feature value is unique, the feature value can be represented by the IP address of the control plane network element. The supervisor manager finds the configuration policy corresponding to the target feature value in multiple configuration policies, that is, the target Target configuration policy for network slicing.

In conjunction with the first aspect, in a third possible implementation of the first aspect, the supervisory manager is in communication with the slice manager and the management orchestration domain, the method further comprising:

The slice manager obtains network slice creation information;

The slice manager sends a network slice creation instruction to the management orchestration domain according to the network slice creation information;

The management orchestration domain creates a target control plane network element and a target user plane network element according to the network slice creation instruction;

When the slice manager obtains a network slice creation response sent by the management orchestration domain, the slice manager sends a new network slice request including the target configuration policy to the supervision manager.

The management orchestration domain respectively creates a target control plane network element and a target user plane network element according to the network slice creation instruction, that is, instantiates the target user plane network element and the target control plane network element, and further includes if the instantiated network slice network element instruction is included The requirements for the instantiation of the supervisor manager may require the instantiation of the supervisor manager. After the management orchestration domain instantiation is completed, the management orchestration domain sends a network slice creation response to the slice manager, at which time the slice manager sends a new network slice request carrying the target configuration policy of the target network slice to the supervisor manager.

In conjunction with the first aspect, in a fourth possible implementation of the first aspect, the supervisory manager is in communication with the slice manager and the management orchestration domain, the method further includes:

The supervisor manager acquires network slice creation information sent by the slice manager;

The supervisor manager sends a network slice creation instruction to the management orchestration domain according to the network slice creation information;

The management orchestration domain creates a target control plane network element and a target user plane network element according to the step of creating a network slice network element;

And performing the step of the supervisor manager acquiring a target configuration policy of the target network slice when the supervisor manager obtains the network slice creation response sent by the management orchestration domain.

The supervisor manager sends a network slice creation instruction to the management orchestration domain. The management orchestration domain creates a target control plane network element and a target user plane network element according to the network slice creation instruction, that is, instantiates the target user. The face network element and the target control plane network element. In addition, if the instantiation network slice network element instruction includes the requirement for instantiation of the supervisory manager, the supervisor manager may need to be instantiated. After the management orchestration domain instantiation is completed, the management orchestration domain sends a network slice creation response to the supervisory manager, and the management orchestration domain sends a new network slice request carrying the target configuration policy of the target network slice to the supervisory manager, and may also The slice manager sends a new network slice request; so that the supervisor manager extracts the target configuration policy and the feature value of the target slice according to the received new network slice request.

With reference to the first aspect, in a fifth possible implementation manner of the first aspect, the target configuration policy further includes: a correspondence between a real network topology and a virtual network topology, where the supervisor manager Sending the target rule to the target user plane network element, including:

The supervisor manager obtains a virtual IP address in the virtual network topology;

Determining, by the supervisory manager, a real IP address corresponding to the virtual IP address according to a correspondence between the real network topology structure and the virtual network topology structure;

The target configuration policy includes the correspondence between the real network topology of the network slice and the virtual network topology node. The implementation process in the supervisory manager is as follows: after the supervisor manager receives the real network topology sent by the slice manager and the virtual network topology. After the correspondence between the nodes, the supervisor manager virtualizes the control port IP between the network element and the target control plane. The IP address of the port is the IP of the virtual (virtual) target user plane network element. The IP and True of the virtual target user plane network element. The (real) control port IP of the target user plane network element has a one-to-one correspondence or a one-to-many correspondence relationship.

The supervisory manager sends the target rule to the target user plane network element corresponding to the real IP address.

If the IP address of the virtual target user plane network element has a one-to-one correspondence with the control port IP address of the True target user plane network element, when the target control plane network element sends the rule, the target control plane network element is the virtual target user plane network element. The IP is issued, and the supervisor manager can find the corresponding True target user plane network element IP according to the virtual target user plane network element IP; if the one-to-many relationship is received, the supervisory manager receives the rule issued by the target control plane network element. The corresponding True target user plane network element IP is also found according to a certain algorithm, so that the rule is delivered.

In conjunction with the first aspect, in a sixth possible implementation manner of the first aspect, the method further includes:

When the function set in the target rule is not a subset of the user face atomic function set, the supervisor The supervisor manager modifies the target rule according to the target configuration policy, obtains a modified target rule, and sends the modified target rule to the target user plane network element, so that the function set in the modified target rule is a subset of the user plane atomic function set;

Alternatively, the supervisor manager prohibits sending the target rule to the target user plane network element.

When the function set in the target rule is not a subset of the user-side atomic function set, the supervisor manager modifies the target rule according to the target configuration policy, obtains the modified target rule, and sends the modified target rule to the target user plane network element, so that Modify the feature set in the target rule to be a subset of the user face atomic feature set. Alternatively, the supervisor manager prohibits the delivery of the target rule to the target user plane network element.

In a seventh possible implementation manner of the first aspect, the user plane atomic function set includes one or more of the following Combinations: billing, lawful interception, paging, deep packet inspection DPI, protocol security IPsec, network address translation NAT, hypertext transfer protocol HTTP header enhancement and caching.

According to a second aspect of the embodiments of the present invention, a network slice-based user plane sharing apparatus is provided, which is applied to a core network including a supervisory manager, where the apparatus includes:

a target configuration policy obtaining module, configured to acquire a target configuration policy of the target network slice, where the target configuration policy includes a user plane atom function set;

a target rule judging module, configured to determine, when the target control plane network element sends a target rule to the target user plane network element, whether the function set delivered by the target rule is a subset of the user plane atomic function set ;

And a target rule sending module, configured to send the target rule to the target user plane network element when the function set sent by the target rule is a subset of the user plane atomic function set.

Through the target rule judgment module, the target rules issued by the control plane network element are uniformly controlled, which can effectively prevent the target network slice from crossing the boundary using the unauthorized user plane atom function, thereby avoiding affecting the normal operation of other network slices.

With reference to the second aspect, in a first possible implementation manner of the second aspect, the target configuration policy further includes: a target frequency and a target bandwidth; the device further includes:

a frequency judging module, configured to determine whether a frequency of the target rule is less than the target frequency;

a bandwidth determining module, configured to: when the frequency of sending the target rule is less than the target frequency, The supervisory manager determines whether the bandwidth delivered by the target rule is not greater than the target bandwidth.

The target rule judgment module, the frequency judgment module, and the bandwidth judgment module respectively can determine the function set, the frequency, and the bandwidth delivered by the target rule at the same time, or can perform the judgment according to a certain judgment order, except for the target rule. In addition to the function set, frequency and bandwidth judgment, other attribute parameters delivered by the target rule may be detected according to requirements, thereby determining whether the requirements are met, so as to prevent the target network slice from crossing the boundary using unauthorized user plane atoms. Features that in turn affect the normal operation of other network slices.

With reference to the second aspect, in a second possible implementation manner of the second aspect, the target configuration policy acquiring module includes:

The target feature value obtaining submodule is configured to acquire a target feature value of the target network slice.

The target configuration policy sub-module is configured to acquire a target configuration policy corresponding to the target feature value.

Since the feature value is unique, the feature value can be represented by the IP address of the control plane network element. The target configuration policy sub-module searches for a configuration policy corresponding to the target feature value in multiple configuration policies, that is, a target configuration policy for the target network slice.

In conjunction with the second aspect, in a third possible implementation of the second aspect, the supervisory manager is separately connected to the slice manager and the management orchestration domain, and the device further includes:

a first network slice creation information acquisition module, configured to acquire network slice creation information;

a first network slice creation instruction sending module, configured to send a network slice creation instruction to the management orchestration domain according to the network slice creation information;

a first network slice creation module, configured to create a target control plane network element and a target user plane network element according to the network slice creation instruction;

And a new network slice request sending module, configured to send a new network slice request including the target configuration policy to the supervisor manager when the slice manager obtains a network slice creation response sent by the management orchestration domain.

The first network slice creation instruction sending module separately creates a target control plane network element and a target user plane network element according to the network slice creation instruction, that is, instantiating the target user plane network element and the target control plane network element, and if instantiating the network slice The NE instruction includes requirements for the instantiation of the supervisor manager, which may need to be instantiated. After the management orchestration domain is instantiated, manage the orchestration domain The slice manager sends a network slice creation response, at which time the slice manager sends a new network slice request to the supervisor manager that carries the target configuration policy for the target network slice.

With reference to the second aspect, in a fourth possible implementation of the second aspect, the supervisory manager is separately connected to the slice manager and the management orchestration domain, and the device further includes:

a second network slice creation information acquiring module, configured to acquire network slice creation information sent by the slice manager;

a second network slice creation instruction sending module, configured to send a network slice creation instruction to the management orchestration domain according to the network slice creation information;

And a second network slice creation module, configured to create a target control plane network element and a target user plane network element according to the creating a network slice network element instruction.

The second network slice creation instruction sending module sends a network slice creation instruction to the management orchestration domain. The management orchestration domain respectively creates a target control plane network element and a target user plane network element according to the network slice creation instruction, that is, instantiates the target user plane network element and the target control plane network element, and further includes if the instantiated network slice network element instruction is included The requirements for the instantiation of the supervisor manager may require the instantiation of the supervisor manager. After the management orchestration domain instantiation is completed, the management orchestration domain sends a network slice creation response to the supervisory manager, and the management orchestration domain sends a new network slice request carrying the target configuration policy of the target network slice to the supervisory manager, in other embodiments. In addition, the slice manager may send a new network slice request; so that the supervisor manager extracts the target configuration policy and the feature value of the target slice according to the received new network slice request.

With reference to the second aspect, in a fifth possible implementation manner of the second aspect, the target configuration policy further includes: a correspondence between a real network topology and a virtual network topology, where the target rule is delivered Modules, including:

a virtual IP address obtaining submodule, configured to obtain a virtual IP address in the virtual network topology;

a real IP address determining submodule, configured to determine a real IP address corresponding to the virtual IP address according to the correspondence between the real network topology and the virtual network topology;

The target configuration policy includes the correspondence between the real network topology of the network slice and the virtual network topology node. The implementation process in the supervisory manager is as follows: after the supervisor manager receives the real network topology sent by the slice manager and the virtual network topology. After the correspondence between the nodes, the supervisor manager virtualizes the control port IP between the network element and the target control plane. The IP address of the port is a virtual (virtual) target user plane network element. IP, the IP of these Virtual target user plane network elements has a one-to-one correspondence or one-to-many correspondence relationship with the control port IP of the True (real) target user plane network element.

The target rule sending submodule is configured to send the target rule to the target user plane network element corresponding to the real IP address.

If the IP address of the virtual target user plane network element has a one-to-one correspondence with the control port IP address of the True target user plane network element, when the target control plane network element sends the rule, the target control plane network element is the virtual target user plane network element. The IP address is sent, and the real IP address determining sub-module can find the corresponding True target user plane network element IP according to the virtual target user plane network element IP; if it is a one-to-many relationship, the real IP address determining sub-module receives the target control plane network. When the rule is issued by the element, the corresponding target network element IP of the True target is found according to a certain algorithm, so that the rule is delivered.

In conjunction with the second aspect, in a sixth possible implementation manner of the second aspect, the device further includes:

a target rule modification module, configured to modify the target rule according to the target configuration policy when the function set in the target rule is not a subset of the user plane atomic function set, obtain a modified target rule, and modify the target Sending a target rule to the target user plane network element, so that the function set in the modification target rule is a subset of the user plane atomic function set;

Alternatively, the target rule issuance module is disabled, and the target rule is prohibited from being sent to the target user plane network element.

When the function set in the target rule is not a subset of the user face atomic function set, the target rule modification module modifies the target rule according to the target configuration policy, obtains the modified target rule, and sends the modified target rule to the target user plane network element, Makes the function in the modification target rule a subset of the user-side atomic feature set. Or, the target rule issuance module is forbidden to send the target rule to the target user plane network element.

In conjunction with any of the possible implementations of the first to sixth aspects of the second aspect, in the seventh possible implementation of the second aspect, the user plane atomic function set includes one or more of the following Combination: billing, lawful interception, paging, deep packet inspection DPI, protocol security IPsec, network address translation NAT, hypertext transfer protocol HTTP header enhancement and caching.

According to a third aspect of the embodiments of the present invention, a supervisory manager is provided, including: a transceiver and a processor;

The transceiver is configured to acquire a target configuration policy of a target network slice, where the target configuration policy is Including the user plane atomic function set;

The processor is used to:

When the target control plane network element sends the target rule to the target user plane network element, determining whether the function set delivered by the target rule is a subset of the user plane atomic function set;

When the function set delivered by the target rule is a subset of the user plane atomic function set, the target rule is sent to the target user plane network element.

Through the unified control of the target rules delivered by the control plane network element by the processor in the supervisory manager, the target network slice can be effectively prevented from using the unauthorized user plane atomic function, thereby avoiding affecting the normal operation of other network slices.

With reference to the third aspect, in a first possible implementation manner of the third aspect, the target configuration policy further includes: a target frequency and a target bandwidth; the processor is further configured to:

Determining whether the frequency of the target rule delivery is less than the target frequency;

When the frequency of the target rule is less than the target frequency, determining whether the bandwidth delivered by the target rule is not greater than the target bandwidth;

And performing the step of sending the target rule to the target user plane network element when the bandwidth delivered by the target rule is not greater than the target bandwidth.

The function set, frequency and bandwidth delivered by the processor of the supervisory manager to the target rule may be judged at the same time, or may be judged according to a certain judgment order, except for the function set, frequency and bandwidth in the target rule. In addition to the judgment, other attribute parameters delivered by the target rule may be detected according to the requirements, thereby determining whether the requirements are met, so as to prevent the target network slice from crossing the boundary using the unauthorized user plane atom function, thereby affecting other network slices. normal operation.

With reference to the third aspect, in a second possible implementation manner of the third aspect, the monitoring manager obtains a target configuration policy of the target network slice, including:

Obtaining a target feature value of the target network slice;

Obtaining a target configuration policy corresponding to the target feature value.

Since the feature value is unique, the feature value can be represented by the IP address of the control plane network element. The processor may search for a configuration policy corresponding to the target feature value in multiple configuration policies, that is, a target configuration policy for the target network slice.

In conjunction with the third aspect, in a third possible implementation manner of the third aspect, the supervisory manager is separately connected to the slice manager and the management orchestration domain, and the processor is further configured to:

The slice manager obtains network slice creation information;

In conjunction with the third aspect, in a fourth possible implementation of the third aspect, the supervisory manager is separately connected to the slice manager and the management orchestration domain, and the processor is further configured to:

Obtaining network slice creation information sent by the slice manager;

And sending, according to the network slice creation information, a network slice creation instruction to the management orchestration domain;

When the network slice creation response sent by the management orchestration domain is obtained, the step of acquiring the target configuration policy of the target network slice is performed.

The supervisor manager's processor sends a network slice creation instruction to the management orchestration domain. The management orchestration domain respectively creates a target control plane network element and a target user plane network element according to the network slice creation instruction, that is, instantiates the target user plane network element and the target control plane network element, and further includes if the instantiated network slice network element instruction is included The requirements for the instantiation of the supervisor manager may require the instantiation of the supervisor manager. In management After the orchestration domain instantiation is completed, the management orchestration domain sends a network slice creation response to the supervisory manager, where the management orchestration domain sends a new network slice request carrying the target configuration policy of the target network slice to the supervisory manager, in other embodiments, The slice manager may also send a new network slice request; so that the supervisor manager extracts the target configuration policy and the feature value of the target slice according to the received new network slice request.

With reference to the third aspect, in a fifth possible implementation manner of the third aspect, the target configuration policy further includes: a correspondence between a real network topology and a virtual network topology, where the supervisor manager Sending the target rule to the target user plane network element, including:

Obtaining a virtual IP address in the virtual network topology;

Determining a real IP address corresponding to the virtual IP address according to the correspondence between the real network topology and the virtual network topology;

Sending the target rule to the target user plane network element corresponding to the real IP address.

The target configuration policy includes the correspondence between the real network topology of the network slice and the virtual network topology node. The implementation process in the supervisory manager is as follows: after the supervisor manager receives the real network topology sent by the slice manager and the virtual network topology. After the correspondence between the nodes, the supervisor manager virtualizes the control port IP between the network element and the target control plane network. The IP address of the virtual target user plane network element is the IP address of the virtual target user plane network element and the True target user plane. The control port IP of the network element has a one-to-one correspondence or a one-to-many correspondence.

If the IP address of the virtual target user plane network element has a one-to-one correspondence with the control port IP address of the True target user plane network element, when the target control plane network element sends the rule, the target control plane network element is the virtual target user plane network element. The IP is delivered, and the processor can find the corresponding True target user plane network element IP according to the virtual target user plane network element IP; if the one-to-many relationship is received, the supervisory manager receives the rule delivered by the target control plane network element. The corresponding True target user plane network element IP is found according to a certain algorithm, so that the rule is delivered.

In conjunction with the third aspect, in a sixth possible implementation manner of the third aspect, the processor is further configured to:

When the function set in the target rule is not a subset of the user face atomic function set, Modifying the target rule by the target configuration policy, obtaining a modified target rule, and sending the modified target rule to the target user plane network element, so that the function set in the modified target rule is the user plane atom a subset of the feature set;

Alternatively, the target rule is prohibited from being sent to the target user plane network element.

When the function set in the target rule is not a subset of the user plane atomic function set, the processor of the supervisor manager modifies the target rule according to the target configuration policy, obtains the modified target rule, and sends the modified target rule to the target user plane network element. To make the set of functions in the modified target rule a subset of the set of user-side atomic functions. Alternatively, the supervisor manager's processor prohibits the delivery of the target rule to the target user plane network element.

With reference to any of the first to sixth possible implementation manners of the third aspect, in the seventh possible implementation manner of the third aspect, the user plane atomic function set includes one or more of the following Combination: billing, lawful interception, paging, deep packet inspection DPI, protocol security IPsec, network address translation NAT, hypertext transfer protocol HTTP header enhancement and caching.

The technical solutions provided by the embodiments of the present invention may include the following beneficial effects:

The network slice-based user plane sharing method, device and supervisor manager provided by the embodiment of the present invention, the supervisor manager obtains the target network layer's target configuration policy, and the target control plane network element in the target network slice is directed to the target user plane network. When the element sends the target rule, the supervisor manager determines whether the function set delivered by the target rule is a subset of the user face atomic function set, and if so, the supervisor manager sends the target rule to the target user plane network element; otherwise, The supervisory manager modifies the target rule according to the target configuration policy carried in the new network slice request, or prohibits the target rule from being delivered to the target user plane network element. Through the unified management and control of the target rules delivered by the control plane network element, the supervisory network can effectively prevent the target network slice from crossing the boundary using unauthorized user plane atom functions, thereby avoiding affecting the normal operation of other network slices.

The above general description and the following detailed description are intended to be illustrative and not restrictive.

DRAWINGS

The accompanying drawings, which are incorporated in the specification of FIG

FIG. 1 is a schematic diagram of a scenario application according to an exemplary embodiment;

FIG. 2 is a schematic diagram of a scenario application according to an exemplary embodiment;

FIG. 3 is a schematic diagram of a scenario application according to an exemplary embodiment;

FIG. 4 is a schematic diagram of a scenario application according to an exemplary embodiment;

FIG. 5 is a flowchart of a network slice-based user plane sharing method according to an exemplary embodiment;

FIG. 6 is a flowchart of a network slice-based user plane sharing method according to an exemplary embodiment;

FIG. 7 is a flowchart of a network slice-based user plane sharing method according to an exemplary embodiment;

FIG. 8 is a flowchart of step S540 of FIG. 5 according to an exemplary embodiment;

FIG. 9 is a flowchart of a network slice-based user plane sharing method according to an exemplary embodiment;

FIG. 10 is a schematic diagram of a network slice creation process signaling according to an exemplary embodiment;

FIG. 11 is a signaling diagram of a network slice creation process according to an exemplary embodiment;

FIG. 12 is a network slice modification flow signaling diagram according to an exemplary embodiment; FIG.

FIG. 13 is a network slice modification flow signaling diagram according to an exemplary embodiment; FIG.

FIG. 14 is a schematic structural diagram of a network slice-based user plane sharing apparatus according to an exemplary embodiment;

FIG. 15 is a schematic structural diagram of a network slice-based user plane sharing apparatus according to an exemplary embodiment;

FIG. 16 is a schematic structural diagram of a network slice-based user plane sharing apparatus according to an exemplary embodiment;

FIG. 17 is a schematic diagram of the target rule issuing module of FIG. 14 according to an exemplary embodiment; FIG.

FIG. 18 is a schematic structural diagram of a network slice-based user plane sharing apparatus according to an exemplary embodiment;

FIG. 19 is a schematic diagram of the target configuration policy acquisition module of FIG. 14 according to an exemplary embodiment; FIG.

FIG. 20 is a schematic structural diagram of a network slice-based user plane sharing apparatus according to an exemplary embodiment;

FIG. 21 is a schematic structural diagram of a supervisor manager according to an exemplary embodiment.

detailed description

Exemplary embodiments will be described in detail herein, examples of which are illustrated in the accompanying drawings. The following description refers to the same or similar elements in the different figures unless otherwise indicated. The embodiments described in the following exemplary embodiments do not represent all embodiments consistent with the present invention. Instead, they are merely examples of devices and methods consistent with aspects of the invention as detailed in the appended claims.

FIG. 1 is a schematic diagram of a scenario application according to an embodiment of the present invention. As shown in FIG. 1, in the core network, FIG. 1 includes: a control plane network element CP 100, a supervisor manager Upvisor (supervisor manager) 200, a user plane network element GW-U 300, and a slice manager SA (Slicing Administrator, The slice manager 400 and the management orchestration domain MANO (Management and Orchestration) 500. among them,

The network slice created in the core network in the embodiment of the present invention includes a CP 100, an Upvisor 200, and a plurality of GW-Us 300, exemplarily shown in FIG. When creating a network slice, the core network creates a corresponding CP 100 according to the needs of the user, and can use the existing GW-U 300 to share with other network slices or create a new GW-U300. Among them, the creation of a new GW-U 300 can be shared with other network slices. The GW-U 300 is mainly used for processing data packets. The CP 100 is mainly used to define the processing action of the GW-U 300 on data packets.

In the core network, multiple network slices may be included. Each network slice includes one CP 100 and multiple GW-Us 300. The Upvisor 200 has a configuration policy for each network slice, and the CP 100 corresponds to a network slice. When the GW-U 300 delivers the rule, the Upvisor 200 finds a configuration policy that matches the network slice according to the feature value of the network slice, and determines whether the rule delivered by the GW-U 300 satisfies the condition according to the configuration policy, if the condition is met. The GW-U 300 is delivered to the corresponding GW-U 300. Otherwise, the IPS 100 is not required to be sent to the corresponding GW-U 300.

In conjunction with Figure 2, the SA 400 sends a message to the MANO 500 when the SA 400 receives the network slice creation information. Send instantiation network slice network element instructions. Of course, when the Upvisor 200 receives the network slice creation information, the Upvisor 200 sends an instantiated network slice network element instruction to the MANO 500. The network slice creation information includes: single user maximum bandwidth, service delay, total throughput, redundancy, hot migration, busy hour service size, and slice atomic action set. Busy-time service size, including: number of users, number of SRs/releases, number of pages, number of bearers (default + dedicated), bearer activation rate, number of bearers per packet, length of data packets, proportion of uplink and downlink traffic, and topology requirements . The network slice network element instruction is instantiated, including: a specification of the CP 100 to be created, a quantity, location, and capacity specification information of the required GW-U 300. The SA400 includes: a policy execution module Policy Execution 201 and a configuration policy database Policy database 202, and the Policy Execution 201 establishes a communication connection with the CP 100 and the GW-U 300, respectively, and transmits between the CP 100 and the GW-U 300. Information detection; Policy database 202 is mainly used to store data such as Policy. When the GW-U 300 is created, the MANO 500 can create the GW-U 300 of information according to the command, or can designate the existing GW-U 300 and share it with the GW-U 300 of other network slices.

In conjunction with FIG. 1 and FIG. 2, when the corresponding CP 100 and GW-U 300 are created and completed by the MANO 500, the MANO 500 sends a new network element response to the SA 400. When the SA 400 receives the new network element response sent by the MANO 500, the SA 400 sends a new network slice request to the Upvisor 200. The new network slice request carries the feature value of the newly created network slice and the configuration policy policy, and the policy includes the maximum rate of the CP 100 delivery rule, the maximum user bandwidth, and the atomic action set (including: charging, Lawful interception, paging, DPI, IPsec, NAT, HTTP header enhancement and caching, etc.), the correspondence between the real network topology and the virtual network topology (the correspondence is between the IP address of the real network topology and the IP address of the virtual network topology) Correspondence).

When the Upvisor 200 obtains the network slice creation information sent by the SA 400, the network slice creation information carries the feature value of the newly created network slice and the configuration policy Policy, wherein the feature value of the network slice is unique, because each network slice The CP 100 is different. Therefore, the IP value of the CP 100 in the network slice can be used to represent the feature value of the newly created network slice; the policy includes the correspondence between the real network topology of the network slice and the virtual network topology node, and the authorization. The atomic action set, the frequency of communication between the CP 100 and the GW-U 300, and the maximum bandwidth of the user define an indicator of the amount of physical resources used by the slice in the GW-U 300. When the CP 100 sends a rule to the corresponding GW-U 300 in the newly created network slice, the Upvisor 200 establishes a communication connection with the CP 100 and the GW-U 300, respectively. When the Upvisor 200 establishes a connection with the CP 100, the Upvisor 200 reports the virtual topology in the network slice to the CP 100. Wherein, the newly created network slice can be a target network slice corresponding to the target network slice. The configuration policy becomes the target configuration policy, and the CP 100 in the target network slice is referred to as the target CP 100, and the GW-U 300 in the target network slice is referred to as the target GW-U 300.

After the network slice is created, the CP 100 sends a rule rule to the GW-U 300. The Upvisor 200 obtains the corresponding policy according to the network slice feature value in the rule. The Upvisor 200 is configured according to the rule. The policy checks the number of rules issued by the CP 100 to the GW-U 300, including: 1) checking the function set in the rule, and if the function set in the rule is a subset of the user-side atomic function set in the policy, 2) 2) If the frequency of the rule is checked, if the frequency of the rule is less than the frequency specified in the policy, then 3); 3) check the bandwidth sent by the rule, if the bandwidth delivered by the rule is less than Or the bandwidth specified in the policy, the IP address of the port GW-U 300 is controlled according to the purpose of the rule, and the IP of the real user control port GW-U 300 is found, and the rule is sent; if the function set in the rule If the frequency of the user-side atomic function set in the policy is not greater than the frequency specified in the policy, or the bandwidth sent by the rule is greater than the bandwidth specified in the policy, modify the rule or reject the rule. .

The policy includes the mapping between the real network topology of the network slice and the virtual network topology node. The implementation process in the Upvisor 200 is as follows: After the Upvisor 200 receives the correspondence between the real network topology sent by the SA 400 and the virtual network topology node, The Upvisor 200 virtualizes the control port IP between the CP 100 and the CP 100. The IP of the port is the IP of the Virtual GW-U 300. The IP of these Virtual GW-U 300s and the control port IP of the True GW-U 300. There is a one-to-one correspondence or a one-to-many correspondence. If the IP address of the Virtual GW-U 300 has a one-to-one correspondence with the control port IP address of the True GW-U 300, the CP 100 is delivered to the IP of the Virtual GW-U 300 when the CP 100 sends the rule. The Upvisor 200 is based on the virtual. The GW-U 300 IP can find the corresponding True GW-U 300 IP; if it is a one-to-many relationship, the Upvisor 200 must find the corresponding True GW-U 300 IP according to a certain algorithm when receiving the rule issued by the CP 100. Thus complete the release of the rule.

In addition, as shown in FIG. 3, the user plane network element port between the Virtual GW-U and the True GW-U also has a corresponding relationship, and the user plane network element port is used to receive or send data of the user plane network element. If the user plane network elements GW-U1 and GW-U2 are abstracted into one Virtual GW-U, the Virtual GW-U IP corresponds to the True GW-U1 IP and the True GW-U2 IP, and the port number 1/2 may correspond to Ture GW-U1 A/B, port number 3/4 can correspond to the E/F of True GW-U2. Here, only one correspondence is exemplified, and there are other ways. In addition, in order to complete the abstraction of the link, when the data is transmitted between the two GW-Us, the corresponding real GW-U is first found according to the node correspondence relationship of the topology, and the path between the GW-Us is re-planned by the Upvisor. The package completes the transfer of data according to the path planned by Upvisor. As shown in Figure 4, the slice control plane assumes that the data packet is directly transmitted between GW-U1 and GW-U4, but in fact the data packet is transmitted from GW-U1 to GW-U2 first, and then transmitted by GW-U2. GW-U4, the path is re-planned by Upvisor. Among them, 203 in FIG. 3 is Virtual GW-U IP, 601 is Ture GW-U1 IP, and 701 is Ture GW-U2 IP.

It should be noted that, in the embodiment provided by the present invention, the MANO is mainly responsible for the management and arrangement of the entire NFV (Network Function Virtualization) resource, and is mainly used for the control plane network element in the embodiment of the present invention. User plane network element generation;

Slice administrator: It is mainly used for lifecycle management of network fragmentation and its resources, accepting input of business requirements upwards, and managing IaaS (Infrastructure as a Service) resources and VNF resources downwards;

The CP is used to send the rule to the GW-U when the user attaches or creates a new session request.

GW-U: It is used to execute the rule delivered by the CP and complete the forwarding of data.

Upvisor: Located between the CP and GW-U, it is used to isolate the network slices and abstract the user plane network topology.

In order to elaborate the execution flow of the foregoing embodiment, in combination with the foregoing embodiment, in another embodiment provided by the present invention, as shown in FIG. 5, a user plane sharing method based on network slice is provided, and the method is applied to the core. In the network, and the core network includes a supervisor manager Upvisor, the method may include the following steps:

In step S510, the supervisor manager obtains a target configuration policy of the target network slice.

In the embodiment of the present invention, the supervisory manager first obtains a new network slice request sent by the slice manager, and the new network slice request carries the data information such as the feature value and the configuration policy of the target network slice. The purpose of obtaining the target configuration policy of the target network slice can be achieved by extracting the configuration policy in the newly created network slice request. And the target configuration policy includes a maximum rate of the control plane network element delivery rule, a maximum user bandwidth, an atomic action set, a correspondence between the real network topology and the virtual network topology (the corresponding relationship is the IP address of the real network topology and Correspondence between IP addresses of virtual network topologies). The atomic action set includes: accounting, lawful interception, paging, DPI (Deep Packet Inspection), IPsec (Internet Protocol Security), and Network Address Translation (NAT). , HTTP header enhancements and caching, etc. In the embodiment of the present invention, the configuration policy is carried in the newly created network slice request as a target configuration policy, where the target configuration policy includes a user plane atomic function set. The target network slice includes a target control plane network element and a target user plane network element.

The target network slice in the embodiment of the present invention may include a target control plane network element, a supervisor manager, and a plurality of target user plane network elements. The new network slice request carries the feature value of the required target network slice, and the feature value is represented by the IP address of the control plane network element in the embodiment of the present invention, but the embodiment is This is not limited to this. The target control plane network element in the control plane network element may be determined according to the IP address of the control plane network element. It should be noted that, in the embodiment, the supervisor manager may be used as part of the network slice, or the supervisor manager may not be part of the network slice. The main function of the supervisor manager is to control the network element and the user plane in the network slice. The data transmitted between the network elements is checked to determine whether the requirements are met.

In addition, the target user plane network element in the core network may be determined according to the target configuration policy carried in the new network slice request, and the determined target user plane network element may be the existing user plane network element in the shared core network. It may also be a newly generated user plane network element as needed, wherein the newly generated user plane network elements may also be shared by other network slices in the core network.

In step S520, when the target control plane network element sends the target rule to the target user plane network element, the supervisory manager determines whether the function set delivered by the target rule is a subset of the user plane atomic function set.

When the function set delivered by the target rule is a subset of the user plane atomic function set, in step S530, the supervisor manager sends the target rule to the target user plane network element.

When the function set in the target rule is not a subset of the user plane atomic function set, in step S540, the supervisor manager modifies the target rule according to the target configuration policy, obtains the modified target rule, and sends the modified target rule to the target user plane. The network element is such that the function set in the modification target rule is a subset of the user plane atomic function set. Alternatively, the supervisor manager prohibits the delivery of the target rule to the target user plane network element.

A rule (rule) sent by the target control plane network element in the target network slice to the target user plane network element is used as a target rule, and when the target control plane network element in the target network slice sends the target rule to the target user plane network element, The target network slice shares some user plane network elements with other network slices in the core network. In order to prevent the target network slice from crossing the boundary using unauthorized user plane atomic functions, thereby affecting the normal operation of other network slices, the supervisor manager needs to determine the target rule. Whether the delivered feature set is a subset of the user-side atomic feature set ensures that the target network slice does not cross the boundary using the user face feature. Only in the eyes When the function set delivered by the standard rule is a subset of the user face atomic function set, the supervisor manager can allow the target rule to be sent to the target user plane network element. Otherwise, the supervisor manager modifies the target rule according to the target configuration policy, so that the function set in the modified target rule is a subset of the user-side atomic function set. Of course, the supervisor manager can also prohibit the delivery of the target rule to the target user plane network element as needed.

According to the network slice-based user plane sharing method provided by the embodiment of the present invention, the supervisor manager obtains the target configuration policy of the target network slice, and when the target control plane network element in the target network slice sends the target rule to the target user plane network element, The supervisor manager determines whether the function set delivered by the target rule is a subset of the user plane atomic function set, and if so, the supervisor manager sends the target rule to the target user plane network element; otherwise, the supervisor manager performs the network slice according to the network The target configuration policy carried in the information modification is modified to the target rule, or the target rule is prohibited from being delivered to the target user plane network element. Through the unified management and control of the target rules delivered by the control plane network element, the supervisory network can effectively prevent the target network slice from crossing the boundary using unauthorized user plane atom functions, thereby avoiding affecting the normal operation of other network slices.

When the target control plane network element sends the target rule to the target user plane, the supervisor manager detects the target rule in addition to detecting whether the function set delivered by the target rule in the target rule is a subset of the user plane atomic function set. Whether the frequency and the bandwidth of the delivery are in compliance with the requirements, therefore, as a refinement of the method of FIG. 5, in another embodiment provided by the present invention, the target configuration policy further includes a target frequency and a target bandwidth, as shown in FIG. The method can also include the following steps:

In step S550, the supervisory manager determines whether the frequency of the target rule delivery is less than the target frequency.

When the frequency of the target rule is less than the target frequency, in step S560, the supervisory manager determines whether the bandwidth delivered by the target rule is not greater than the target bandwidth.

When the bandwidth delivered by the target rule is not greater than the target bandwidth, step S530 is performed.

In combination with the foregoing embodiment, the function set, the frequency, and the bandwidth that are sent by the supervisory manager to the target rule may be determined at the same time, and may be determined according to other determination orders in the foregoing embodiment, and the embodiment of the present invention is not limited to this. In addition, in addition to the function set, frequency, and bandwidth of the target rule, the supervisory manager can also detect other attribute parameters delivered by the target rule according to requirements, and then determine whether the requirements are met. Prevents the target network slice from crossing the boundary using unauthorized user plane atomic functions, which in turn affects the normal operation of other network slices.

In addition, in conjunction with FIG. 1 and the foregoing embodiments, the supervisor manager and the slice manager and the management editor respectively In a further embodiment of the present invention, before the step S510, as shown in FIG. 7, the method may further include the following steps:

In step S501, the slice manager acquires network slice creation information.

In step S502, the slice manager sends a network slice creation instruction to the management orchestration domain according to the newly created network slice creation information.

The network slice creation information includes: a single user maximum bandwidth, a service delay, a total throughput rate, and the like, and an instantiation of a network slice network element instruction, including: a control plane network to be created, may be combined with the foregoing embodiment and FIG. For the creation specifications of the element, the number of required user plane network elements, and the like, reference may be made to the above embodiments, and details are not described herein.

The management orchestration domain is mainly responsible for the management and orchestration of the entire NFV resource. In the embodiment of the present invention, it is mainly used for generating the control plane network element and the user plane network element; the slice manager is mainly used for the network fragmentation and its resources. Lifecycle management, accepting input from business requirements, and managing IaaS resources and VNF resources downwards.

In step S503, the management orchestration domain creates a target control plane network element and a target user plane network element according to the network slice creation instruction.

In step S504, when the slice manager acquires the network slice creation response sent by the management orchestration domain, the slice manager sends a new network slice request including the target configuration policy to the supervision manager.

As a refinement of the method of FIG. 5, in another embodiment provided by the present invention, the target configuration policy further includes: a correspondence between nodes between the real network topology structure and the virtual network topology structure, as shown in FIG. 8, step S540. It can also include the following steps:

In step S541, the supervisor manager obtains the virtual IP address in the virtual network topology.

In step S542, the supervisory manager determines the real IP address corresponding to the virtual IP address according to the correspondence between the real network topology and the virtual network topology.

In step S543, the supervisor manager sends the target rule to the target user plane network element corresponding to the real IP address.

With reference to the foregoing embodiment and FIG. 3, the target configuration policy includes the correspondence between the real network topology of the network slice and the virtual network topology node, and the implementation process in the supervisor manager is as follows, and the supervisor manager receives the slice manager. After the correspondence between the real network topology and the nodes of the virtual network topology, the supervisor manager virtualizes the control port IP between the target control plane network element, and the port IP is the IP of the virtual (virtual) target user plane network element, and these virtual targets The IP of the user plane network element has a one-to-one correspondence or a one-to-many correspondence relationship with the control port IP of the True (real) target user plane network element. If the IP address of the virtual target user plane network element has a one-to-one correspondence with the control port IP address of the True target user plane network element, when the target control plane network element sends the rule, the target control plane network element is the virtual target user plane network element. The IP is issued, and the supervisor manager can find the corresponding True target user plane network element IP according to the virtual target user plane network element IP; if the one-to-many relationship is received, the supervisory manager receives the rule issued by the target control plane network element. The corresponding True target user plane network element IP is also found according to a certain algorithm, so that the rule is delivered.

In order to further explain how the supervisory manager obtains the target configuration policy corresponding to the newly created target network slice, as a refinement of the method of FIG. 5, in another embodiment provided by the present invention, step S510 may further include the following steps:

In step S511, the supervisory manager acquires the target feature value of the target network slice.

In step S512, the supervisor manager acquires a target configuration policy corresponding to the target feature value.

Since the feature value is unique, the feature value is represented by the IP address of the control plane network element in the embodiment of the present invention. The supervisor manager searches for a configuration policy corresponding to the target feature value in multiple configuration policies, that is, a target configuration policy for the target network slice.

As a refinement of the method of FIG. 5, in another embodiment provided by the present invention, in combination with other embodiments, before step S510, the supervisory manager communicates with the slice manager and the management orchestration domain respectively, as shown in FIG. The method may further comprise the following steps:

In step S505, the supervisor manager acquires network slice creation information transmitted by the slice manager.

In step S506, the supervisor manager sends a network slice creation instruction to the management orchestration domain according to the network slice creation information.

In step S507, the management orchestration domain creates a target control plane according to the instruction of creating a network slice network element. NE and target user plane network element.

When the supervisor manager obtains the network slice creation response sent by the management orchestration domain, step S510 is performed.

In this embodiment, the network manager creation instruction is sent by the supervisor manager to the management orchestration domain. The management orchestration domain respectively creates a target control plane network element and a target user plane network element according to the network slice creation instruction, that is, instantiates the target user plane network element and the target control plane network element, and further includes if the instantiated network slice network element instruction is included The requirements for the instantiation of the supervisor manager may require the instantiation of the supervisor manager. After the management orchestration domain instantiation is completed, the management orchestration domain sends a network slice creation response to the supervisory manager, and the management orchestration domain sends a new network slice request carrying the target configuration policy of the target network slice to the supervisory manager, in other embodiments. In addition, the slice manager may send a new network slice request; so that the supervisor manager extracts the target configuration policy and the feature value of the target slice according to the received new network slice request.

According to the network slice-based user plane sharing method provided by the embodiment of the present invention, the supervisor manager obtains the target configuration policy of the target network slice; when the target control plane network element sends the target rule to the target user plane network element, the supervisory manager separately Determining whether the function set delivered by the target rule is a subset of the user plane atomic function set, whether the frequency of the target rule is less than the target frequency, and whether the bandwidth delivered by the target rule is greater than the target bandwidth, etc., only in the control network When the target rule issued by the element satisfies the relevant conditions, the supervisory manager sends the target rule to the target user plane network element. In this way, the supervisory manager can uniformly control the target rules issued by the control plane network element, which can effectively prevent the target network slice from crossing the boundary and use unauthorized user plane atomic functions, thereby avoiding affecting the normal operation of other network slices. And the target configuration policy further includes the correspondence between the real network topology and the virtual network topology node in the target network slice, so that the target control plane network element cannot directly obtain the network node of the user plane network element, which is beneficial to the security of the user plane network element. .

In order to elaborate the creation of the network slice and the rule checking process for the control plane network element, in another embodiment provided by the present invention, the Slicing administrator determines whether it is necessary to create a new GW-U and a policy, as shown in FIG. The data interaction between the Slicing administrator, MANO, CP, Upvisor, and GW-U may include the following execution processes:

Step 9111, the Slicing administrator receives the network slice creation information.

The network slice creation information includes: single user maximum bandwidth, service delay, total throughput, redundancy, hot migration; busy time service size: number of users, number of SRs/releases, number of pages, number of bearers (default) + Dedicated), bearer activation rate, number of bearers per bearer, packet length, proportion of uplink and downlink traffic, topology requirements, slice atomic action set.

Step 9112: The Slicing administrator sends an instantiation slice network element instruction to the MANO.

The Slicing administrator proposes an instantiation slice network element instruction to the MANO. The instruction includes the specifications of the CP to be created, the number of GW-U locations, and the capacity specification information. The instruction may also include an Upvisor that needs to be instantiated, and the MANO instantiates the control plane. The network element instantiates the user plane GW-U and instantiates the Upvisor if it receives the instantiated Upvisor request.

Step 9113, MANO sends a new network element response to the Slicing administrator.

Step 9114: The Slicing administrator sends a new network slice request to the Upvisor.

The Slicing administrator sends a new slice request Create_Slice_Request<CP IP, max_rate, max_width, action set, <(virtual GW-U IP, port[]), (GW-U IP, port[])>[]> to the Upvisor, carrying the slice The eigenvalues CP IP and the policy, the policy contains the maximum rate of the rule issued by the CP, the maximum user bandwidth, the atomic action set (accounting, lawful interception, paging, DPI, IPsec, NAT, HTTP header enhancement, cache, etc.) Correspondence between the real network topology and the virtual network topology. The correspondence is the correspondence between the real IP address and the virtual IP address.

Step 9115: The GW-U sends a connection establishment request to the Upvisor.

Step 9116: The Upvisor sends a connection establishment request response to the GW-U.

Step 9117: The Upvisor sends a connection establishment request to the CP.

Step 9118: The CP sends a connection establishment response to the Upvisor.

Step 9119: The Upvisor sends a new network slice response to the Slicing administrator.

Step 9120: The CP sends a rule.

Step 9121: The Upvisor checks the rule sent by the CP.

When the CP sends a rule to the Upvisor, the Upvisor finds the corresponding policy based on the slice feature value CP IP in the rule. The rule checks the rule according to the policy. 1) Checks the rate at which the user sends the rule. If the rate of the rule is exceeded, the rate is exceeded. The rate specified in the policy prohibits the delivery of the rule. If the speed is less than the speed specified in the policy, check 2); 2) check the bandwidth of the user in the rule, less than or equal to the bandwidth specified by the policy, and then perform 3 Checking; 3) checking the action set in the rule. If the actions in the rule are in the action set of the policy, the rule is legal, otherwise the rule illegal.

Step 9122: When the Upvisor passes the rule check issued by the CP, the rule is allowed to be sent to the GW-U.

If the check of the rule is legal, the real IP address corresponding to the GW-U IP is found according to the correspondence in the Policy. The IP address is the IP address of the GW-U instantiated by the MANO, and corresponding to each slice control. The virtual IP address of the slice stored in the face, and the corresponding relationship between the virtual IP address and the real IP address is saved in the Upvisor.

Step 9123: When the Upvisor fails to check the rule sent by the CP, the rule is not allowed to be sent to the GW-U.

Step 9124: If the rule check fails, the system sends a rule failure response to the CP.

When a new slice is created in the embodiment of the present invention, the policy and the slice feature value of the slice are configured on the Upvisor, and the policy includes the atomic action set, the correspondence between the real topology and the virtual topology, and the maximum rate and maximum bandwidth of the rule.

When the created network slice starts working, when the Upvisor receives the rule sent by the CP, it first finds the corresponding policy of the slice according to the slice feature value, checks the rule of the slice according to the policy, and rejects the rule that does not comply with the policy. The rule is delivered. For the rule-compliant rule, the corresponding real GW-U IP is found according to the mapping between the virtual topology and the real topology. In this way, the atomic action in the rule issued by the control plane is limited, and the user plane cannot deliver the rule beyond the authorized user plane atomic function set; the Upvisor stores the correspondence between the virtual network topology and the real network topology, Upvisor The corresponding real GW-U IP can be found according to the virtual GW-U IP carried in the rule.

In another embodiment provided by the present invention, the Upvisor determines whether it is necessary to create a new GW-U and a CP, and the Upvisor and the MANO perform the rule checking process of the network slice and the control plane. Interaction, and the Policy rules of the slice are generated by the Upvisor. As shown in FIG. 11, the data interaction between the Slicing administrator, MANO, CP, Upvisor, and GW-U may include the following execution processes:

Step 9211: The operator server obtains network slice requirement information of the purchaser.

The slice purchaser fills in his own requirements through a web interface. The requirements may include single user maximum bandwidth, service delay, total throughput, redundancy, and hot migration. Busy business scale: number of users, number of SRs/releases, and search Number of calls, number of bearers (default + dedicated), bearer activation rate, number of messages per bearer, data Packet length, uplink and downlink traffic ratio, topology requirements, slice atomic action sets and other indicators. Click the Generate Slice button to send a slice request to the carrier's server.

Step 9212: The operator server sends the network slice creation information to the Slicing administrator.

Step 9213: The Slicing administrator sends a new network slice request to the Upvisor.

Both the newly created network slice request and the network slice creation information carry the indicator information in the network slice requirement information.

In step 9214, the Upvisor sends a new network element request to the MANO.

When receiving the new network slice request, the Upvisor determines the new control plane network element and the user plane network element, and sends a new network element request to MANO.

Step 9215: The MANO instantiates the control plane network element and the user plane network element.

After receiving the request for creating a new NE, MANO instantiates the control plane and the user plane NE, sends a new NE response to the Upvisor, and sends the newly generated NE address and interface information to the Upvisor. The Upvisor receives the new MANO. After the slice response, generate the slice's Policy<max_rate, max_width, action set, <(virtual GW-U IP,port[]), (GW-U IP,port[])>[]>>, and the Policy and CP IP The mapping relationship is related. The policy includes the maximum rate of the rule issued by the CP, the maximum user bandwidth, and the atomic action set (billing, lawful interception, paging, DPI, IPsec, NAT, HTTP header enhancement, cache, etc.). Correspondence between the real network topology and the virtual network topology, and the correspondence relationship between the real IP address and the virtual IP address

Step 9216: The MANO sends a new network element response to the Upvisor.

Step 9217: The MANO generates a new network element IP address and interface information, and sends the network element IP address and interface information to the Upvisor.

Step 9218: The Upvisor generates a policy of the network slice.

In step 9219, the Upvisor sends a connection request to the GW-U.

The connection establishment request for this step only occurs between the Upvisor and the newly created GW-U. If no new GW-U is generated, this step does not exist.

In step 9220, the GW-U sends a connection establishment response to the Upvisor.

Step 9221: The Upvisor sends a connection request to the CP.

Step 9222: The CP sends a connection establishment response to the Upvisor.

In step 9223, the Upvisor sends a new network slice response to the Slicing administrator.

Step 9224, the CP issues a rule.

Step 9225: The Upvisor checks the rule sent by the CP.

When the CP sends a rule to the Upvisor, the Upvisor finds the corresponding policy based on the slice feature value CP IP in the rule. The rule checks the rule according to the policy. 1) Checks the rate at which the user sends the rule. If the rate of the rule is exceeded, the rate is exceeded. The rate specified in the policy prohibits the delivery of the rule. If the speed is less than the speed specified in the policy, check 2); 2) check the bandwidth of the user in the rule, less than or equal to the bandwidth specified by the policy, and then perform 3 3) Check the action set in the rule. If the action in the rule is in the action set of the policy, the rule is legal, otherwise the rule is invalid.

Step 9226: When the Upvisor passes the rule check issued by the CP, the rule is allowed to be sent to the GW-U.

Step 9227: When the Upvisor fails to check the rule sent by the CP, the rule is not allowed to be sent to the GW-U.

In step 9228, if the rule check fails, the Upvisor sends a rule failure response to the CP.

In the embodiment of the present invention, after the new profile is received, the Upvisor receives the information representing the sliced traffic model from the slice administrator, and combines the network element information of the existing user plane to plan the user plane network element and the control that need to be instantiated. The surface network element sends a new network element request to the MANO. After receiving the response of the new network element, it establishes a connection with the control plane network element and the user plane network element respectively, and generates a sliced policy. The policy contains an atomic action set, and the real topology and Correspondence of the virtual topology, the maximum rate at which the rule is delivered, and the maximum bandwidth of the user.

When the slice starts working, when the Upvisor receives the rule sent by the CP, it first finds the corresponding policy of the slice according to the slice feature value, and checks the rule of the slice according to the policy. For the rule that does not comply with the policy, the rule is rejected. For the rule-compliant rule, the corresponding real GW-U IP is found according to the correspondence between the virtual topology and the real topology, and the rule is delivered. In this way, for the control surface The atomic action in the issued rule is limited, the user plane can not exceed the radius of its own user plane atomic function; the Upvisor saves the correspondence between the virtual network topology and the real network topology, and the Upvisor can be based on the virtual carried in the rule. The GW-U IP finds the corresponding real GW-U IP.

In another embodiment provided by the present invention, the established network slice may be modified according to requirements, that is, the slice administrator sends a slice modification request to the Upvisor, where the request carries the policy information to be modified; after the modification succeeds, in the CP When the rule is delivered, the Upvisor manages the issued rule according to the modified policy information. As shown in Figure 12, the data interaction between the Slicing administrator, MANO, CP, Upvisor, and GW-U can include the following execution processes. :

Step 9311: The operator server obtains network slice requirement information of the purchaser.

The slice purchaser fills in his own requirements through a web interface. The requirements may include single user maximum bandwidth, service delay, total throughput, redundancy, and hot migration. Busy business scale: number of users, number of SRs/releases, and search Number of calls, number of bearers (default + dedicated), bearer activation rate, number of bearers per bearer, packet length, proportion of uplink and downlink traffic, topology requirements, slice atomic action set. Click the Generate Slice button to send a slice request to the carrier's server.

Step 9312: The operator server sends the network slice modification information to the Slicing administrator.

The slice administrator sends "Update_Slice_GW-U_Source<CP IP, max_rate, max_width, action set, <(virtual GW-U IP,port[]), (GW-U IP,port[])>[]>>" to the Upvisor, The Policy information is based on the new traffic model of the slice.

In step 9313, the Slicing administrator determines whether the user plane NE needs to be expanded or newly created, and whether the network slice policy needs to be modified.

Step 9314: If the user plane network element needs to be expanded or newly created, the Slicing administrator sends a capacity expansion request/new request to the MANO.

Step 9315: If the policy of the network slice needs to be modified, the Slicing administrator sends a modification request to the Upvisor.

In step 9316, the Upvisor sends a connection request to the GW-U.

In step 9317, the GW-U sends a new session response to the Upvisor.

Step 9318: The Upvisor checks the rule sent by the CP.

In step 9319, if the rule is qualified, the Upvisor issues a rule to the GW-U.

In step 9320, if the rule fails, Upvisor prohibits the release of the rule.

Step 9321, the Upvisor sends a rule failure response to the CP.

In the embodiment of the present invention, the slicing administrator sends the modified policy to the Upvisor, and the Upvisor reports the modified network slice policy information to the CP. When the CP sends a rule to the GW-U, the Upvisor uses the modified policy information to the rule. Conduct unified management and control.

In another embodiment of modifying the network slice, the slice administrator sends the slice modification signaling to the Upvisor, and carries the policy information to be modified by the network slice. After the modification succeeds, the Upvisor sends the rule information according to the new policy information. The issued rules are managed. As shown in Figure 13, the data interaction between the Slicing administrator, MANO, CP, Upvisor, and GW-U can include the following execution processes:

Step 9411: The operator server obtains the network slice requirement information of the purchaser.

Step 9412: The operator server sends the network slice modification information to the Slicing administrator.

In step 9413, the Slicing administrator sends a slice modification request to the Upvisor.

In step 9414, the Upvisor determines whether the user plane NE needs to be expanded or newly created, and whether the policy of the network slice needs to be modified.

The Upvisor determines whether it is necessary to create a new NE or to expand a certain NE, or whether to modify the policy of the slice. If the slicing administrator determines that a new NE or a certain NE is to be expanded, Send a new slice/expansion request.

Step 9415: If the user plane NE needs to be expanded or newly created, the Upvisor sends a capacity expansion request/new request to the MANO.

Step 9416: If the policy of the network slice needs to be modified, the Upvisor sends a modification request to the Slicing administrator.

In step 9417, the Upvisor sends a connection request to the GW-U.

In step 9418, the GW-U sends a new session response to the Upvisor.

In step 9419, the Upvisor checks the rule sent by the CP.

For details, refer to the above embodiments, and details are not described herein again.

In step 9420, if the rule is qualified, the Upvisor issues a rule to the GW-U.

Step 9421. If the rule fails, Upvisor prohibits the release of the rule.

Step 9422: The Upvisor sends a rule failure response to the CP.

In the embodiment of the present invention, the slicing administrator sends the performance index of the slice to the Upvisor, and the Upvisor determines whether it needs to create or expand the GW-U according to the received indicator, and generates a new policy; when the CP sends a rule to the GW-U, The Upvisor controls the rule based on the modified policy information.

According to the network slice-based user plane sharing method provided by the embodiment of the present invention, the supervisor manager obtains the target configuration policy of the target network slice; when the target control plane network element sends the target rule to the target user plane network element, the supervisory manager separately Determining whether the function set delivered by the target rule is a subset of the user plane atomic function set, whether the frequency of the target rule is less than the target frequency, and whether the bandwidth delivered by the target rule is greater than the target bandwidth, etc., only in the control network When the target rule issued by the element satisfies the relevant conditions, the supervisory manager sends the target rule to the target user plane network element. In this way, the unified management and control of the target rules issued by the control plane network element can effectively prevent the target network slice from crossing the boundary using the unauthorized user plane atom function, thereby avoiding affecting the normal operation of other network slices. And the target configuration policy further includes the correspondence between the real network topology and the virtual network topology node in the target network slice, so that the target control plane network element cannot directly obtain the network node of the user plane network element, which is beneficial to the security of the user plane network element. . When you need to modify the established network slice, you can also modify the network slice, such as expanding the user plane network element or modifying the configuration policy in the network slice.

Through the description of the above method embodiments, those skilled in the art can clearly understand that the present invention can be implemented by means of software plus a necessary general hardware platform, and of course, can also be through hardware, but in many cases, the former is better. Implementation. Based on such understanding, the technical solution of the present invention, which is essential or contributes to the prior art, may be embodied in the form of a software product stored in a storage medium, including a plurality of instructions for causing a A computer device (which may be a personal computer, server, or network device, etc.) performs all or part of the steps of the methods described in various embodiments of the present invention. The foregoing storage medium includes: a read only memory (ROM), and a random storage Take a variety of media that can store program code, such as memory (RAM), disk, or optical disk.

In addition, as an implementation of the foregoing embodiments, the embodiment of the present invention further provides a user plane sharing device based on a network slice, and the device is applied to a core network including a supervisory manager, as shown in FIG. include:

The target configuration policy obtaining module 10 is configured to acquire a target configuration policy of the target network slice, where the target configuration policy includes a user plane atom function set;

The target rule determining module 20 is configured to determine, when the target control plane network element sends the target rule to the target user plane network element, whether the function set delivered by the target rule is a child of the user plane atomic function set set;

The target rule issuance module 30 is configured to send the target rule to the target user plane network element when the function set sent by the target rule is a subset of the user plane atomic function set.

In another embodiment of the present invention, based on FIG. 14, as shown in FIG. 15, the target configuration policy further includes: a target frequency and a target bandwidth; the device further includes:

The frequency determining module 40 is configured to determine whether the frequency of the target rule delivery is less than the target frequency;

The bandwidth judging module 50 is configured to determine whether the bandwidth delivered by the target rule is not greater than the target bandwidth when the frequency of the target rule is less than the target frequency.

In another embodiment of the present invention, based on FIG. 14, as shown in FIG. 16, the supervisory manager is respectively connected to the slice manager and the management orchestration domain, and the device further includes:

The first network slice creation information obtaining module 60 is configured to acquire network slice creation information.

The first network slice creation instruction sending module 70 is configured to send a network slice creation instruction to the management orchestration domain according to the network slice creation information;

a first network slice creation module 80, configured to create a target control plane network element and a target user plane network element according to the network slice creation instruction;

a first new network slice request sending module 90, configured to send a new network including the target configuration policy to the supervisor manager when the slice manager obtains a network slice creation response sent by the management orchestration domain Slice request.

In still another embodiment of the present invention, based on FIG. 14, as shown in FIG. 17, the target configuration policy is further The method includes: a mapping between a real network topology and a virtual network topology, where the target rule is delivered by the module 30, including:

a virtual IP address obtaining sub-module 31, configured to acquire a virtual IP address in the virtual network topology;

The real IP address determining sub-module 32 is configured to determine a real IP address corresponding to the virtual IP address according to the correspondence between the real network topology and the virtual network topology;

The target rule sending sub-module 33 is configured to send the target rule to the target user plane network element corresponding to the real IP address.

In still another embodiment of the present invention, based on FIG. 14, as shown in FIG. 18, the apparatus further includes:

The target rule modification module 91 is configured to modify the target rule according to the target configuration policy when the function set in the target rule is not a subset of the user plane atom function set, obtain a modification target rule, and obtain the Transmitting a target rule to the target user plane network element, so that the function set in the modification target rule is a subset of the user plane atomic function set;

Alternatively, the target rule issuance module 92 is disabled to send the target rule to the target user plane network element.

In the embodiment of the present invention, the user plane atomic function set includes one or several combinations of the following: charging, lawful interception, paging, deep packet detection DPI, protocol security IPsec, and network address translation. NAT, Hypertext Transfer Protocol HTTP header enhancement and caching.

In another embodiment of the present invention, based on FIG. 14, as shown in FIG. 19, the target configuration policy obtaining module 10 includes:

The target feature value obtaining sub-module 11 is configured to acquire a target feature value of the target network slice.

The target configuration policy sub-module 12 is configured to acquire a target configuration policy corresponding to the target feature value.

In another embodiment of the present invention, based on FIG. 14, as shown in FIG. 20, the supervisor manager is respectively connected to the slice manager and the management orchestration domain, and the device further includes:

a second network slice creation information obtaining module 93, configured to acquire network slice creation information sent by the slice manager;

a second network slice creation instruction sending module 94, configured to create information according to the network slice, to The management orchestration domain sends a network slice creation instruction;

The second network slice creation module 95 is configured to create a target control plane network element and a target user plane network element according to the creating a network slice network element instruction.

With regard to the apparatus in the above embodiments, the specific manner in which the respective modules perform the operations has been described in detail in the embodiment relating to the method, and will not be explained in detail herein.

According to the network slice-based user plane sharing device provided by the embodiment of the present invention, the supervisor manager obtains the target configuration policy of the target network slice; when the target control plane network element sends the target rule to the target user plane network element, the supervisory manager separately Determining whether the function set delivered by the target rule is a subset of the user plane atomic function set, whether the frequency of the target rule is less than the target frequency, and whether the bandwidth delivered by the target rule is greater than the target bandwidth, etc., only in the control network When the target rule issued by the element satisfies the relevant conditions, the supervisory manager sends the target rule to the target user plane network element. In this way, the unified management and control of the target rules issued by the control plane network element can effectively prevent the target network slice from crossing the boundary using the unauthorized user plane atom function, thereby avoiding affecting the normal operation of other network slices. And the target configuration policy further includes the correspondence between the real network topology and the virtual network topology node in the target network slice, so that the target control plane network element cannot directly obtain the network node of the user plane network element, which is beneficial to the security of the user plane network element. . When you need to modify the established network slice, you can also modify the network slice, such as expanding the user plane network element or modifying the configuration policy in the network slice.

In addition, an embodiment of the present invention further provides a supervisor manager, and a hardware structure diagram thereof is shown in FIG. 21. The supervisor manager includes a processor 510, a transceiver 520, a bus 530, and a memory 540. The processor 510 and the transceiver 520 are in communication through a bus 530, and the memory 540 is configured to store the processor 510 executable instructions.

The transceiver 520 is configured to acquire a target configuration policy of the target network slice, where the target configuration policy includes a user plane atomic function set, where the target network slice includes a target control plane network element and a target user plane network element.

The processor 510 is configured to: when the target control plane network element sends the target rule to the target user plane network element, the supervisory manager determines whether the function set delivered by the target rule is the user plane atomic function set The subset manager sends the target rule to the target user plane network element when the function set delivered by the target rule is a subset of the user plane atomic function set.

In an optional implementation manner, the processor 510 is configured to use the frequency of the target rule to be sent. If the frequency of the target rule is less than the target frequency, it is determined whether the bandwidth delivered by the target rule is not greater than the target bandwidth; when the target rule is sent When the bandwidth is not greater than the target bandwidth, the target rule is sent to the target user plane network element.

In an optional implementation manner, the processor 510 is configured to acquire network slice creation information, send a network slice creation instruction to the management orchestration domain according to the network slice creation information, and create according to the network slice creation instruction. The target control plane network element and the target user plane network element; when the network slice creation response is obtained, the new network slice request including the target configuration policy is sent.

In an optional implementation manner, the processor 510 is configured to acquire network slice creation information sent by the slice manager, and send a network slice creation instruction to the management orchestration domain according to the network slice creation information; Creating a network slice network element instruction, creating a target control plane network element and a target user plane network element; obtaining a target configuration policy of the target network slice when the supervisor manager obtains a network slice creation response sent by the management orchestration domain .

In an optional implementation manner, the processor 510 is configured to acquire a target feature value of the target network slice; and acquire a target configuration policy corresponding to the target feature value.

In an optional implementation manner, the processor 510 is configured to obtain a virtual IP address in the virtual network topology, and determine a location according to the correspondence between the real network topology and the virtual network topology. The real IP address corresponding to the virtual IP address is sent to the target user plane network element corresponding to the real IP address.

In an optional implementation manner, the processor 510 is configured to modify, according to the target configuration policy, the target rule to be modified when the function set in the target rule is not a subset of the user plane atomic function set. a target rule, and sending the modification target rule to the target user plane network element, so that the function set in the modification target rule is a subset of the user plane atomic function set; or, prohibiting the target The rule is sent to the target user plane network element.

It will be appreciated that the present invention is applicable to a wide variety of general purpose or special purpose computing system environments or configurations. For example: personal computers, server computers, handheld or portable devices, tablet devices, multiprocessor systems, microprocessor based systems, set-top boxes, programmable consumer electronics devices, network PCs, small computers, mainframe computers, including A distributed computing environment of any of the above systems or devices, and the like.

The invention may be described in the general context of computer-executable instructions executed by a computer, such as a program module. Generally, program modules include performing specific tasks or implementing specific abstract data types. Routines, programs, objects, components, data structures, and more. The invention may also be practiced in distributed computing environments where tasks are performed by remote processing devices that are connected through a communication network. In a distributed computing environment, program modules can be located in both local and remote computer storage media including storage devices.

It should be noted that, in this context, relational terms such as "first" and "second" are used merely to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply these There is any such actual relationship or order between entities or operations. Furthermore, the term "comprises" or "comprises" or "comprises" or any other variations thereof is intended to encompass a non-exclusive inclusion, such that a process, method, article, or device that comprises a plurality of elements includes not only those elements but also Other elements, or elements that are inherent to such a process, method, item, or device. An element that is defined by the phrase "comprising a ..." does not exclude the presence of additional equivalent elements in the process, method, item, or device that comprises the element.

Other embodiments of the invention will be apparent to those skilled in the <RTIgt; The present application is intended to cover any variations, uses, or adaptations of the present invention, which are in accordance with the general principles of the present invention and include common general knowledge or conventional technical means in the art that are not disclosed in the present invention. . The specification and examples are to be considered as illustrative only,

It is to be understood that the invention is not limited to the details of the details of The scope of the invention is limited only by the appended claims.

Claims

A network slice-based user plane sharing method, the method comprising:

The supervisory manager obtains a target configuration policy of the target network slice, where the target configuration policy includes a user plane atomic function set, where the target network slice includes a target control plane network element and a target user plane network element;

When the target control plane network element sends the target rule to the target user plane network element, the supervisory manager determines whether the function set delivered by the target rule is a subset of the user plane atomic function set;

When the function set delivered by the target rule is a subset of the user plane atomic function set, the supervisor manager sends the target rule to the target user plane network element.
The method of claim 1, wherein the target configuration policy further comprises: a target frequency and a target bandwidth; the method further comprising:

The supervisory manager determines whether the frequency of the target rule delivery is less than the target frequency;

When the frequency of the target rule is less than the target frequency, the supervisory manager determines whether the bandwidth delivered by the target rule is not greater than the target bandwidth;

When the bandwidth delivered by the target rule is not greater than the target bandwidth, the step of the supervisor manager sending the target rule to the target user plane network element is performed.
The method according to claim 1, wherein the supervisor manager obtains a target configuration policy of the target network slice, including:

The supervisor manager obtains a target feature value of the target network slice;

The supervisor manager obtains a target configuration policy corresponding to the target feature value.
The method according to claim 1, wherein the supervisory manager is in communication with the slice manager and the management orchestration domain, the method further comprising:

The slice manager obtains network slice creation information;

The slice manager sends a network slice creation instruction to the management orchestration domain according to the network slice creation information;

The management orchestration domain creates a target control plane network element and a target user plane network element according to the network slice creation instruction;

When the slice manager obtains a network slice creation response sent by the management orchestration domain, the slice manager sends a new network slice request including the target configuration policy to the supervision manager.
The method according to claim 1, wherein the supervisory manager is in communication with the slice manager and the management orchestration domain, the method further comprising:

The supervisor manager acquires network slice creation information sent by the slice manager;

The supervisor manager sends a network slice creation instruction to the management orchestration domain according to the network slice creation information;

The management orchestration domain creates a target control plane network element and a target user plane network element according to the step of creating a network slice network element;

And performing the step of the supervisor manager acquiring a target configuration policy of the target network slice when the supervisor manager obtains the network slice creation response sent by the management orchestration domain.
The method according to claim 1, wherein the target configuration policy further comprises: a correspondence between nodes between the real network topology and the virtual network topology, and the supervisor manager sends the target rule to The target user plane network element includes:

The supervisor manager obtains a virtual IP address in the virtual network topology;

Determining, by the supervisory manager, a real IP address corresponding to the virtual IP address according to a correspondence between the real network topology structure and the virtual network topology structure;

The supervisory manager sends the target rule to the target user plane network element corresponding to the real IP address.
The method of claim 1 further comprising:

When the function set in the target rule is not a subset of the user plane atomic function set, the supervisor manager modifies the target rule according to the target configuration policy, obtains a modified target rule, and the modified target rule Sending to the target user plane network element, so that the function set in the modification target rule is a subset of the user plane atomic function set;

Alternatively, the supervisor manager prohibits sending the target rule to the target user plane network element.
The method according to any one of claims 1 to 7, wherein the user plane atomic function set comprises one or several combinations of the following: billing, lawful interception, paging, depth Packet detection DPI, protocol security IPsec, network address translation NAT, hypertext transfer protocol HTTP header enhancement and caching.
A network slice-based user plane sharing device is characterized in that it is applied to a core network including a supervisor manager, and the device includes:

a target configuration policy acquisition module, configured to acquire a target configuration policy of the target network slice, where the target configuration policy includes a user plane atomic function set, where the target network slice includes a target control plane network element and a target user plane network element;

a target rule judging module, configured to determine, when the target control plane network element sends a target rule to the target user plane network element, whether the function set delivered by the target rule is a subset of the user plane atomic function set ;

And a target rule sending module, configured to send the target rule to the target user plane network element when the function set sent by the target rule is a subset of the user plane atomic function set.
The device according to claim 9, wherein the target configuration policy further includes: a target frequency and a target bandwidth; the device further includes:

a frequency judging module, configured to determine whether a frequency of the target rule is less than the target frequency;

The bandwidth judging module is configured to: when the frequency of the target rule is less than the target frequency, the supervisory manager determines whether the bandwidth delivered by the target rule is not greater than the target bandwidth.
The apparatus according to claim 9, wherein the target configuration policy acquisition module comprises:

a target feature value obtaining submodule, configured to acquire a target feature value of the target network slice;

The target configuration policy sub-module is configured to acquire a target configuration policy corresponding to the target feature value.
The device according to claim 9, wherein the supervisory manager is in communication with the slice manager and the management orchestration domain, and the device further comprises:

a first network slice creation information acquisition module, configured to acquire network slice creation information;

a first network slice creation instruction sending module, configured to send a network slice creation instruction to the management orchestration domain according to the network slice creation information;

a first network slice creation module, configured to create a target control according to the network slice creation instruction Face network element and target user plane network element;

And a new network slice request sending module, configured to send a new network slice request including the target configuration policy to the supervisor manager when the slice manager obtains a network slice creation response sent by the management orchestration domain.
The device according to claim 9, wherein the supervisory manager is in communication with the slice manager and the management orchestration domain, and the device further comprises:

a second network slice creation information acquiring module, configured to acquire network slice creation information sent by the slice manager;

a second network slice creation instruction sending module, configured to send a network slice creation instruction to the management orchestration domain according to the network slice creation information;

And a second network slice creation module, configured to create a target control plane network element and a target user plane network element according to the creating a network slice network element instruction.
The apparatus according to claim 9, wherein the target configuration policy further comprises: a correspondence between a node between the real network topology and the virtual network topology, and the target rule delivery module includes:

a virtual IP address obtaining submodule, configured to obtain a virtual IP address in the virtual network topology;

a real IP address determining submodule, configured to determine a real IP address corresponding to the virtual IP address according to the correspondence between the real network topology and the virtual network topology;

The target rule sending submodule is configured to send the target rule to the target user plane network element corresponding to the real IP address.
The device according to claim 9, wherein the device further comprises:

a target rule modification module, configured to modify the target rule according to the target configuration policy when the function set in the target rule is not a subset of the user plane atomic function set, obtain a modified target rule, and modify the target Sending a target rule to the target user plane network element, so that the function set in the modification target rule is a subset of the user plane atomic function set;

Alternatively, the target rule issuance module is disabled, and the target rule is prohibited from being sent to the target user plane network element.
Apparatus according to any one of claims 9 to 15 wherein said user A set of atomic functions, including one or several of the following: billing, lawful interception, paging, deep packet inspection DPI, protocol security IPsec, network address translation NAT, hypertext transfer protocol HTTP header enhancement, and caching .
A supervisory manager, comprising: a transceiver and a processor;

The transceiver is configured to acquire a target configuration policy of a target network slice, where the target configuration policy includes a user plane atomic function set, where the target network slice includes a target control plane network element and a target user plane network element;

The processor is used to:

When the target control plane network element sends the target rule to the target user plane network element, determining whether the function set delivered by the target rule is a subset of the user plane atomic function set;

When the function set delivered by the target rule is a subset of the user plane atomic function set, the target rule is sent to the target user plane network element.
The supervisory manager according to claim 17, wherein the target configuration policy further comprises: a target frequency and a target bandwidth; and the processor is further configured to:

Determining whether the frequency of the target rule delivery is less than the target frequency;

When the frequency of the target rule is less than the target frequency, determining whether the bandwidth delivered by the target rule is not greater than the target bandwidth;

And performing the step of sending the target rule to the target user plane network element when the bandwidth delivered by the target rule is not greater than the target bandwidth.
The supervisory manager according to claim 17, wherein the acquiring a target configuration policy of the target network slice comprises:

Obtaining a target feature value of the target network slice;

Obtaining a target configuration policy corresponding to the target feature value.
The supervisory manager according to claim 17, wherein the supervisor manager is in communication with a slice manager and a management orchestration domain, and the processor is further configured to:

The slice manager obtains network slice creation information;

The slice manager sends a network slice creation instruction to the management orchestration domain according to the network slice creation information;

The management orchestration domain creates a target control plane network element and a target user plane network element according to the network slice creation instruction;

Upon acquiring the network slice creation response sent by the management orchestration domain, the slice manager sends a new network slice request including the target configuration policy to the supervisor manager.
The supervisory manager according to claim 17, wherein the supervisor manager is in communication with a slice manager and a management orchestration domain, and the processor is further configured to:

Obtaining network slice creation information sent by the slice manager;

And sending, according to the network slice creation information, a network slice creation instruction to the management orchestration domain;

Creating a target control plane network element and a target user plane network element according to the creating a network slice network element instruction;

And performing the step of acquiring a target configuration policy of the target network slice when acquiring the network slice creation response sent by the management orchestration domain.
The supervisory manager according to claim 17, wherein the target configuration policy further comprises: a correspondence between nodes between the real network topology and the virtual network topology, and the sending the target rule to the The target user plane network element, including:

Obtaining a virtual IP address in the virtual network topology;

Determining a real IP address corresponding to the virtual IP address according to the correspondence between the real network topology and the virtual network topology;

Sending the target rule to the target user plane network element corresponding to the real IP address.
The supervisory manager according to claim 17, wherein the processor is further configured to:

When the function set in the target rule is not a subset of the user plane atomic function set, modify the target rule according to the target configuration policy, obtain a modification target rule, and send the modification target rule to the target a user plane network element, such that the function set in the modification target rule is a subset of the user plane atom function set;

Alternatively, the target rule is prohibited from being sent to the target user plane network element.
The supervisory manager according to any one of claims 17 to 23, wherein said user plane atomic function set comprises one or more of the following combinations: billing, lawful interception, and locating Call, Depth Message Detection DPI, Protocol Security IPsec, Network Address Translation NAT, Hypertext Transfer Protocol HTTP Header Enhancement and Cache.