WO2020233532A1 - 虚拟网络通信方法、设备及系统 - Google Patents

虚拟网络通信方法、设备及系统 Download PDF

Info

Publication number
WO2020233532A1
WO2020233532A1 PCT/CN2020/090662 CN2020090662W WO2020233532A1 WO 2020233532 A1 WO2020233532 A1 WO 2020233532A1 CN 2020090662 W CN2020090662 W CN 2020090662W WO 2020233532 A1 WO2020233532 A1 WO 2020233532A1
Authority
WO
WIPO (PCT)
Prior art keywords
network element
group
session management
terminal device
user plane
Prior art date
Application number
PCT/CN2020/090662
Other languages
English (en)
French (fr)
Inventor
姚琦
韩文勇
吴问付
朱强华
谢春生
Original Assignee
华为技术有限公司
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 华为技术有限公司 filed Critical 华为技术有限公司
Priority to CN202080035749.3A priority Critical patent/CN114128223A/zh
Priority to EP20810113.9A priority patent/EP3962027B1/en
Publication of WO2020233532A1 publication Critical patent/WO2020233532A1/zh
Priority to US17/526,339 priority patent/US20220078047A1/en

Links

Images

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L12/00—Data switching networks
    • H04L12/28—Data switching networks characterised by path configuration, e.g. LAN [Local Area Networks] or WAN [Wide Area Networks]
    • H04L12/46—Interconnection of networks
    • H04L12/4641—Virtual LANs, VLANs, e.g. virtual private networks [VPN]
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W4/00—Services specially adapted for wireless communication networks; Facilities therefor
    • H04W4/06—Selective distribution of broadcast services, e.g. multimedia broadcast multicast service [MBMS]; Services to user groups; One-way selective calling services
    • H04W4/08—User group management
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L12/00—Data switching networks
    • H04L12/28—Data switching networks characterised by path configuration, e.g. LAN [Local Area Networks] or WAN [Wide Area Networks]
    • H04L12/46—Interconnection of networks
    • H04L12/4633—Interconnection of networks using encapsulation techniques, e.g. tunneling
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W76/00—Connection management
    • H04W76/10—Connection setup

Definitions

  • This application relates to the field of communication, and in particular to virtual network communication methods, equipment and systems.
  • the 5th generation (5G) virtual network (5G virtual network, 5GVN) (also called 5G local area network (5GLAN)) service is a service provided by the current 5G network, mainly used in homes Communications, corporate office, factory manufacturing, car networking, power grid transformation and public security agencies, etc.
  • This service can provide private communication of Internet Protocol (IP) type or non-IP type (such as Ethernet type) for two or more terminal devices in a group of terminal devices.
  • IP Internet Protocol
  • non-IP type such as Ethernet type
  • Office equipment can send IP data packets to each other, and so on. If two terminal devices are not in the same 5GVN group, they cannot communicate with each other.
  • 5GVN services provide point-to-point data transmission between terminal equipment and terminal equipment, which can cover a wide range, such as across countries, across provinces and cities.
  • a 5GVN service provides private communications for devices in the office area of a multinational company, and each office area of a multinational company is located in a different province, city or country.
  • SMF session management function
  • UPF user plane function
  • the embodiments of the present application provide a virtual network communication method, device, and system, which are used to solve the problem of realizing private communication of virtual network services across session management network elements.
  • a virtual network communication method comprising: a group session management network element obtains tunnel information of a first user plane network element serving a first terminal device belonging to a first virtual network group, wherein: The first user plane network element is managed by the first session management network element; the group session management network element sends a first message to the second session management network element, and the first message includes the identification of the first terminal device, the first The identifier of the virtual network group and the tunnel information of the first user plane network element, wherein the identifier of the first terminal device, the identifier of the first virtual network group, and the tunnel information of the first user plane network element are used in the A first forwarding rule is configured on the second user plane network element managed by the second session management network element, and the first forwarding rule is used when the terminal device belonging to the first virtual network group served by the second user plane network element gives the When the first terminal device belonging to the first virtual network group sends the first data packet, the second user plane network element sends the first data packet to the first user plane
  • the group session management network element can configure the first forwarding rule on the second user plane network element through the second session management network element, the first forwarding rule is used to act as the second user plane network element.
  • the serving terminal device belonging to the first virtual network group sends a first data packet to the first terminal device belonging to the first virtual network group
  • the second user plane network element sends the first data packet to the first User plane network element. Therefore, based on this solution, it is possible to achieve private communication of virtual network services across the session management network elements.
  • the method further includes: in the process of establishing the session of the first terminal device belonging to the first virtual network group, the group session management network element receives the first session management network element from the first session management network element. Two messages, the second message includes the identity of the first terminal device and the identity of the first session management network element; the group session management network element stores the identity of the first terminal device and the identity of the first session management network element Identified mapping relationship.
  • the first session management network element may report the identification of the first terminal device to the group session management network element and serve the first terminal device during the establishment of the session by the first terminal device belonging to the first virtual network group The identifier of the first session management network element of the first session management network element, so that the group session management network element can update the stored topology information of the first virtual network group, and realize the unified management of the topology information of the virtual network group.
  • the second message further includes the identifier of the first virtual network group to which the first terminal device belongs and the first user plane serving the first terminal device belonging to the first virtual network group
  • At least one of the tunnel information of the network element; the group session management network element storing the mapping relationship between the identifier of the first terminal device and the identifier of the first session management network element includes: the group session management network element stores the first The mapping relationship between the identifier of the virtual network group and the tunnel information of the first user plane network element, the identifier of the first terminal device and the identifier of the first session management network element.
  • the first session management network element may report to the group session management network element the information of the first user plane network element serving the first terminal device during the establishment of the session by the first terminal device belonging to the first virtual network group. At least one of the tunnel information and the identifier of the first virtual network group, so that the group session management network element can update the stored topology information of the first virtual network group, and realize the unified management of the topology information of the virtual network group.
  • the group session management network element acquiring the tunnel information of the first user plane network element serving the first terminal device belonging to the first virtual network group includes: including the first user plane network element in the mapping relationship
  • the group session management network element obtains and stores the tunnel information of the first user plane network element that is served by the first terminal device belonging to the first virtual network group. That is, the first session management network element may report the tunnel information of the first user plane network element serving the first terminal device to the group session management network element during the session establishment of the first terminal device belonging to the first virtual network group , So that the group session management network element can store the tunnel information of the first user plane network element.
  • the group session management network element can directly obtain the stored tunnel information of the first user plane network element serving the first terminal device belonging to the first virtual network group, Simplified the process of creating forwarding rules.
  • the group session management network element acquiring the tunnel information of the first user plane network element serving the first terminal device belonging to the first virtual network group includes: not including the first user plane network element in the mapping relationship
  • the group session management network element sends a third message to the first session management network element, and the third message is used to request that the first virtual network group belongs to the first virtual network group.
  • the terminal device establishes a tunnel; the group session management network element receives the tunnel information of the first user plane network element serving the first terminal device belonging to the first virtual network group from the first session management network element. That is to say, in this embodiment of the application, the group session management network element may obtain the first user serving the first terminal device belonging to the first virtual network group by requesting the first session management network element to establish a tunnel. Tunnel information of the surface NE.
  • the method further includes: the group session management network element receiving from the second session management network element the second user plane network that serves the second terminal device belonging to the first virtual network group Element tunnel information; the group session management network element sends a fourth message to the first session management network element, the fourth message includes the identity of the second terminal device, the identity of the first virtual network group, and the second user
  • the tunnel information of the network element of the first user plane wherein the identifier of the second terminal device, the identifier of the first virtual network group, and the tunnel information of the second user plane network element are used to configure the second user plane network element
  • a forwarding rule where the second forwarding rule is used when a terminal device belonging to the first virtual network group served by the first user plane network element sends a second data packet to the second terminal device belonging to the first virtual network group ,
  • the first user plane network element sends the second data packet to the second user plane network element.
  • the method before the group session management network element obtains the tunnel information of the first user plane network element, the method further includes: the group session management network element receives the information from the second session management network element The fifth message is used to request the first forwarding rule. That is to say, in the embodiment of the present application, the creation of forwarding rules on the user plane network element can be dynamically triggered after the user plane network element receives the data packet, and there is no need to create forwarding rules during the session establishment process, thereby simplifying the session establishment. The process.
  • a virtual network communication method includes: in a process in which a second terminal device belonging to a first virtual network group establishes a session, the second session management network element sends the second session management network element to the group session management network element.
  • the first user plane network element is managed by the first session management network element;
  • the second session management network element is based on the identity of the first terminal device, the identity of the first virtual network group, and the first user plane network element Configure a first forwarding rule on the second user plane network element managed by the second session management network element, and the first forwarding rule is used when the second user plane network element serves the first virtual network group
  • the terminal device of sends a first data packet to the first terminal device belonging to the first virtual network group the second user plane network element sends the first data packet to the first user plane network element.
  • the group session management network element can configure the first forwarding rule on the second user plane network element through the second session management network element, the first forwarding rule is used to act as the second user plane network element.
  • the serving terminal device belonging to the first virtual network group sends a first data packet to the first terminal device belonging to the first virtual network group
  • the second user plane network element sends the first data packet to the first User plane network element. Therefore, based on this solution, it is possible to achieve private communication of virtual network services across the session management network elements.
  • the method before the second session management network element receives the second message from the group session management network element, the method further includes: the second session management network element receives the second message from the second user plane network The third message of the element, the third message is used to request the first forwarding rule; the second session management network element determines that the first forwarding rule does not exist on the second session management network element; the second session management network element sends the The group session management network element sends a fourth message, where the fourth message is used to request the first forwarding rule.
  • the creation of forwarding rules on the user plane network element can be dynamically triggered after the user plane network element receives the data packet, and there is no need to create forwarding rules during the session establishment process, thereby simplifying the session establishment. The process.
  • the first message further includes an identifier of the first virtual network group to which the second terminal device belongs.
  • the first message further includes tunnel information of the second user plane network element serving the second terminal device belonging to the first virtual network group. That is, the second session management network element may report the tunnel information of the second user plane network element serving the second terminal device to the group session management network element during the session establishment of the second terminal device belonging to the first virtual network group , So that the group session management network element can store the tunnel information of the second user plane network element. Furthermore, when a forwarding rule is created on the user plane network element, the group session management network element can directly obtain the stored tunnel information of the second user plane network element serving the second terminal device belonging to the first virtual network group, Simplified the process of creating forwarding rules.
  • the method before the second session management network element receives the second message from the group session management network element, the method further includes: the second session management network element receives the second message from the group session management network element.
  • This fifth message is used to request the establishment of a tunnel for the second terminal device belonging to the first virtual network group; the second session management network element sends to the group session management network element that it belongs to the first virtual network group. Tunnel information of the second user plane network element served by the second terminal device of the network group.
  • the group session management network element can obtain the tunnel information of the second user plane network element serving the second terminal device belonging to the first virtual network group, and then can send to the second session management network element including The identifier of the first terminal device of the first virtual network group, the identifier of the first virtual network group, and the first user plane network element of the tunnel information of the first terminal device that belongs to the first virtual network group Second message, thereby configuring the first forwarding rule on the second user plane network element.
  • a communication device for implementing the above-mentioned various methods.
  • the communication device may be the group session management network element in the foregoing first aspect, or a device including the foregoing group session management network element.
  • the communication device may be the second session management network element in the above second aspect, or a device including the above second session management network element.
  • the communication device includes a module, unit, or means corresponding to the foregoing method, and the module, unit, or means can be implemented by hardware, software, or hardware execution of corresponding software.
  • the hardware or software includes one or more modules or units corresponding to the above-mentioned functions.
  • a communication device including: a processor and a memory; the memory is used to store computer instructions, and when the processor executes the instructions, the communication device executes the method described in any of the above aspects.
  • the communication device may be the group session management network element in the foregoing first aspect, or a device including the foregoing group session management network element.
  • the communication device may be the second session management network element in the above second aspect, or a device including the above second session management network element.
  • a communication device including: a processor; the processor is configured to couple with a memory, and after reading an instruction in the memory, execute the method according to any of the foregoing aspects according to the instruction.
  • the communication device may be the group session management network element in the foregoing first aspect, or a device including the foregoing group session management network element.
  • the communication device may be the second session management network element in the above second aspect, or a device including the above second session management network element.
  • a computer-readable storage medium stores instructions that, when run on a computer, enable the computer to execute the method described in any of the above aspects.
  • a computer program product containing instructions which when running on a computer, enables the computer to execute the method described in any of the above aspects.
  • a communication device for example, the communication device may be a chip or a chip system
  • the communication device includes a processor for implementing the functions involved in any of the foregoing aspects.
  • the communication device further includes a memory for storing necessary program instructions and data.
  • the communication device is a chip system, it may be composed of chips, or may include chips and other discrete devices.
  • a virtual network communication method comprising: a group session management network element obtains tunnel information of a first user plane network element serving a first terminal device belonging to a first virtual network group, wherein: The first user plane network element is managed by the first session management network element; the group session management network element sends a first message to the second session management network element, and the first message includes the identification of the first terminal device, the first The identifier of the virtual network group and the tunnel information of the first user plane network element; the second session management network element receives the first message from the group session management network element, and according to the identifier of the first terminal device, the first message The identifier of a virtual network group and the tunnel information of the first user plane network element, a first forwarding rule is configured on a second user plane network element managed by the second session management network element, and the first forwarding rule is used when the When a terminal device belonging to the first virtual network group served by a second user plane network element sends a first data packet to the first terminal device belonging
  • the method further includes: in a process in which the first terminal device belonging to the first virtual network group establishes a session, the first session management network element sends a second message to the group session management network element, the The second message includes the identification of the first terminal device and the identification of the first session management network element; the group session management network element receives the second message from the first session management network element, and stores the first terminal device The mapping relationship between the identifier of and the identifier of the first session management network element.
  • the second message further includes the identifier of the first virtual network group to which the first terminal device belongs and the first user plane serving the first terminal device belonging to the first virtual network group
  • At least one of the tunnel information of the network element; the group session management network element storing the mapping relationship between the identifier of the first terminal device and the identifier of the first session management network element includes: the group session management network element stores the first The mapping relationship between the identifier of the virtual network group and the tunnel information of the first user plane network element, the identifier of the first terminal device and the identifier of the first session management network element.
  • the group session management network element acquiring the tunnel information of the first user plane network element serving the first terminal device belonging to the first virtual network group includes: including the first user plane network element in the mapping relationship In the case of the tunnel information of a user plane network element, the group session management network element obtains and stores the tunnel information of the first user plane network element that serves the first terminal device belonging to the first virtual network group.
  • the group session management network element acquiring the tunnel information of the first user plane network element serving the first terminal device belonging to the first virtual network group includes: not including the mapping relationship
  • the group session management network element sends a third message to the first session management network element, and the third message is used to request the first virtual network group belonging to the first virtual network group.
  • the terminal device establishes a tunnel; the group session management network element receives tunnel information of the first user plane network element serving the first terminal device belonging to the first virtual network group from the first session management network element.
  • the method further includes: the second session management network element sending to the group session management network element the second user plane network element that serves the second terminal device belonging to the first virtual network group
  • the tunnel information of the group session management network element receives from the second session management network element the tunnel information of the second user plane network element serving the second terminal device belonging to the first virtual network group; group session management The network element sends a fourth message to the first session management network element, where the fourth message includes the identifier of the second terminal device, the identifier of the first virtual network group, and the tunnel information of the second user plane network element;
  • the session management network element receives the fourth message from the group session management network element, and displays the information in the second terminal device according to the identifier of the second terminal device, the identifier of the first virtual network group, and the tunnel information of the second user plane network element.
  • a second forwarding rule is configured on the first user plane network element, and the second forwarding rule is used when a terminal device belonging to the first virtual network group served by the first user plane network element is assigned to the terminal device belonging to the first virtual network group
  • the first user plane network element sends the second data packet to the second user plane network element.
  • the method further includes: the second session management network element receives a fifth message from the second user plane network element, the fifth message is used to request the first forwarding rule; and the second session management After determining that the first forwarding rule does not exist on the second session management network element, the network element sends a sixth message to the group session management network element, where the sixth message is used to request the first forwarding rule; group session Before acquiring the tunnel information of the first user plane network element, the management network element receives the sixth message from the second session management network element.
  • a virtual network communication method includes: a group session management network element sends a first message to a second session management network element, and the first message is used to request information for a group belonging to a first virtual network group.
  • the second terminal device establishes a tunnel; the second session management network element receives the first message from the group session management network element, and obtains the tunnel information of the second user plane network element serving the second terminal device, and then sends it to The first session management network element sends the tunnel information of the second user plane network element, the identifier of the first virtual network group, and the identifier of the second terminal device, wherein the second user plane network element is controlled by the second session Management network element management; the first session management network element receives the tunnel information of the second user plane network element, the identifier of the first virtual network group and the identifier of the second terminal device from the second session management network element, and According to the identifier of the first virtual network group, the tunnel information of the second user plane network element, and the identifier of the second terminal device, configure the first forwarding on the first user plane network element managed by the first session management network element Rule, the first forwarding rule is used for when the terminal device of the first virtual network group served by the first user plane network element sends a data packet to the
  • a communication system includes: a group session management network element and a second session management network element; the group session management network element is used to obtain information as belonging to the first virtual network group The tunnel information of the first user plane network element served by the first terminal device, where the first user plane network element is managed by the first session management network element; the group session management network element is also used to communicate to the second session
  • the management network element sends a first message, the first message includes the identification of the first terminal device, the identification of the first virtual network group, and the tunnel information of the first user plane network element; the second session management network element uses After receiving the first message from the group session management network element, and according to the identification of the first terminal device, the identification of the first virtual network group, and the tunnel information of the first user plane network element, in the second
  • a first forwarding rule is configured on the second user plane network element managed by the session management network element, and the first forwarding rule is used when a terminal device belonging to the first virtual network group served by the second user plane network element is assigned to the
  • the communication system further includes the first session management network element; the first session management network element is used to establish a session in the first terminal device belonging to the first virtual network group, Send a second message to the group session management network element, where the second message includes the identification of the first terminal device and the identification of the first session management network element; the group session management network element is also used to receive data from the The second message of the first session management network element and the mapping relationship between the identifier of the first terminal device and the identifier of the first session management network element is stored.
  • the second message further includes the identifier of the first virtual network group to which the first terminal device belongs and the first user plane serving the first terminal device belonging to the first virtual network group At least one of the tunnel information of the network element; the group session management network element is also used to store the mapping relationship between the identifier of the first terminal device and the identifier of the first session management network element, including: the group session management The network element is also used to store at least one of the identifier of the first virtual network group and the tunnel information of the first user plane network element, the mapping of the identifier of the first terminal device and the identifier of the first session management network element relationship.
  • the group session management network element is used to obtain tunnel information of the first user plane network element serving the first terminal device belonging to the first virtual network group, including: the group session management The network element is used to obtain the first user-plane network element that is stored and serves the first terminal device belonging to the first virtual network group when the tunnel information of the first user-plane network element is included in the mapping relationship Tunnel information.
  • the group session management network element is used to obtain tunnel information of the first user plane network element serving the first terminal device belonging to the first virtual network group, including: the group session management The network element is used to send a third message to the first session management network element when the mapping relationship does not include the tunnel information of the first user plane network element, and the third message is used to request that the network element belongs to the A first terminal device of a virtual network group establishes a tunnel; the group session management network element is further configured to receive from the first session management network element the first terminal device that belongs to the first virtual network group and serves the first terminal device A tunnel information of a user plane network element.
  • the second session management network element is further configured to send to the group session management network element the second user plane network element that serves the second terminal device belonging to the first virtual network group The tunnel information; the group session management network element is also used to receive the tunnel information of the second user plane network element serving the second terminal device belonging to the first virtual network group from the second session management network element
  • the group session management network element is also used to send a fourth message to the first session management network element, the fourth message including the identification of the second terminal device, the identification of the first virtual network group and the second Tunnel information of the user plane network element;
  • the first session management network element is also used to receive the fourth message from the group session management network element, and according to the identifier of the second terminal device, the first virtual network group
  • the identifier of the second user plane network element and the tunnel information of the second user plane network element configure a second forwarding rule on the first user plane network element.
  • the second forwarding rule is used when the first user plane network element serves the first virtual When the terminal device of the network group sends a second data packet to the second terminal device belonging to the first virtual network group, the first user plane network element sends the second data packet to the second user plane network element.
  • the second session management network element is also used to receive a fifth message from the second user plane network element, and the fifth message is used to request the first forwarding rule;
  • the second session The management network element is further configured to send a sixth message to the group session management network element after determining that the first forwarding rule does not exist on the second session management network element, and the sixth message is used to request the first forwarding Rules;
  • the group session management network element is also used to receive the sixth message from the second session management network element before obtaining the tunnel information of the first user plane network element.
  • a communication system in a twelfth aspect, includes: a group session management network element, a first session management network element, and a second session management network element; the group session management network element is configured to The second session management network element sends a first message, the first message is used to request the establishment of a tunnel for a second terminal device belonging to the first virtual network group; the second session management network element is used to receive session management from the group After obtaining the first message of the network element and the tunnel information of the second user plane network element serving the second terminal device, it sends the tunnel information of the second user plane network element and the The identifier of the first virtual network group and the identifier of the second terminal device, wherein the second user plane network element is managed by the second session management network element; the first session management network element is configured to receive data from the second The tunnel information of the second user plane network element of the session management network element, the identification of the first virtual network group, and the identification of the second terminal device, and according to the identification of the first virtual network group, the second
  • FIG. 1 is a schematic diagram 1 of the architecture of a communication system provided by an embodiment of this application;
  • FIG. 2 is a schematic diagram of the application of the communication system provided by an embodiment of the application in a 5G network;
  • Figure 3 is a schematic diagram of the user plane architecture of the existing 5GVN service
  • FIG. 4 is a schematic diagram of the hardware structure of a communication device provided by an embodiment of the application.
  • FIG. 5 is a schematic diagram 1 of the flow of a virtual network communication method provided by an embodiment of this application.
  • FIG. 6 is a second schematic diagram of the flow of a virtual network communication method provided by an embodiment of this application.
  • FIG. 7 is a schematic structural diagram of a group session management network element provided by an embodiment of this application.
  • FIG. 8 is a schematic structural diagram of a second session management network element provided by an embodiment of this application.
  • At least one item (a) refers to any combination of these items, including any combination of a single item (a) or plural items (a).
  • at least one item (a) of a, b, or c can mean: a, b, c, ab, ac, bc, or abc, where a, b, and c can be single or multiple .
  • words such as “first” and “second” are used to distinguish the same items or similar items with substantially the same function and effect.
  • words such as “first” and “second” do not limit the quantity and order of execution, and words such as “first” and “second” do not limit the difference.
  • words such as “exemplary” or “for example” are used as examples, illustrations, or illustrations. Any embodiment or design solution described as “exemplary” or “for example” in the embodiments of the present application should not be construed as being more preferable or advantageous than other embodiments or design solutions.
  • words such as “exemplary” or “for example” are used to present related concepts in a specific manner to facilitate understanding.
  • the communication system 10 includes a group session management network element, a session management network element 1 communicating with the group session management network element, and a session management network element 2.
  • the user plane network element managed by the session management network element 1, the user plane network element managed by the session management network element 2, 2, the terminal device 1 belonging to the first virtual network group and the user plane served by the user plane network element 1 The terminal device 2 belonging to the first virtual network group served by the network element 2.
  • FIG. 1 only exemplarily shows two session management network elements (ie, session management network element 1 and session management network element 2).
  • session management network element 1 and session management network element 2.
  • session management network element 3 may be other session management network elements communicating with the group session management network element, such as session management network element 3 or session management network element 4, which is not specifically limited in the embodiment of the present application.
  • FIG. 1 is only an example of communication between a session management network element and a user plane network element.
  • the session management network element 1 communicates with the user plane network element 1, and the session management network element 2 Communicate with user plane network element 2.
  • a session management network element may also communicate with multiple user plane network elements.
  • session management network element 1 may also communicate with user plane network element 3 or user plane network element 4; or, session management network element 2 may also communicate with The user plane network element 5 communicates, etc., which are not specifically limited in the embodiment of the present application.
  • FIG. 1 is only an example of taking a user plane network element serving a terminal device belonging to the first virtual network group as an example.
  • user plane network element 1 serving a terminal device belonging to the first virtual network group Device 1
  • user plane network element 2 serves terminal device 2 belonging to the first virtual network group.
  • one user plane network element may serve multiple terminal devices belonging to the first virtual network group.
  • the user plane network element 1 may also serve terminal devices 3 belonging to the first virtual network group.
  • one user plane network element may also serve terminal devices belonging to multiple virtual network groups.
  • the user plane network element 1 may also serve terminal devices belonging to a second virtual network group, which is not specifically limited in the embodiment of the present application.
  • the communication between the various network elements shown in FIG. 1 may be direct communication, or communication through forwarding of other devices, which is not specifically limited in the embodiment of the present application.
  • the session management network element 1 in FIG. 1 may also be called the first session management network element, and the session management network element 2 in FIG. 1 may also be called the second session management network element.
  • User plane network element 1 can also be referred to as a first user plane network element
  • user plane network element 2 in Figure 1 can also be referred to as a second user plane network element
  • terminal device 1 in Figure 1 can also be referred to as The first terminal device, the terminal device 2 in FIG. 1 may also be called the second terminal device; or, conversely, the session management network element 2 in FIG. 1 may also be called the first session management network element, as shown in FIG.
  • the session management network element 1 can also be called the second session management network element.
  • the user plane network element 2 in Figure 1 can also be called the first user plane network element.
  • the user plane network element 1 in Figure 1 can also be called It is called the second user plane network element.
  • the terminal device 2 in FIG. 1 can also be called the first terminal device, and the terminal device 1 in FIG. 1 can also be called the second terminal device. There is no specific limitation.
  • the method for performing virtual network communication based on the communication system shown in FIG. 1 can refer to the subsequent method embodiments, which will not be repeated here.
  • the communication system shown in FIG. 1 may be applied to the current 5G network or other networks in the future, which is not specifically limited in the embodiment of the present application.
  • the network element or entity corresponding to the session management network element 1 in FIG. 1 may be SMF1 in the 5G network architecture.
  • the UPF1 network element in the architecture; the network element or entity corresponding to the user plane network element 2 in Figure 1 can be the UPF2 network element in the 5G network architecture, the network element corresponding to the group session management network element in Figure 1, or
  • the entity may be a group SMF (group SMF, GSMF) in the 5G network architecture.
  • the aforementioned virtual network may be 5GVN.
  • 5GVN can also be called 5GLAN, LAN, LAN-type service, LAN-VN, 5GLAN-type service, 5GLAN-VN, 5GLAN group, or LAN group, etc.
  • GSMF network elements can also be called 5GLAN SMF (5GLAN SMF, LSMF) network elements, 5GVN SMF network elements, 5GLAN path management function (path management function, PMF) network elements, 5GVN PMF network elements, 5GLAN address resolution function (address Resolution function, ARF) network element, 5GVN ARF network element, 5GLAN group control function (group controller/control function, GCF) network element, 5GVN GCF network element, 5GLAN configuration control function (controller/control function, CCF) network element , 5GVN CCF network element, 5GLAN service management function (5GLAN-type service management function, 5LSMF) network element, 5GVN service management function (5GVN-type service management function, 5VSMF) network element, 5GLAN virtual network management function (5GLAN-VN management function) function, 5LVMF) network element, 5GVN management function network element, 5GLAN virtual network controller (5GLAN-VN controller, 5LVC), 5GVN controller, 5GLAN controller, 5GLAN controller, 5G
  • the GSMF network element is used to manage the topology of the 5GVN.
  • the GSMF network element can dynamically add the identity of the SMF network element, the identity of the UPF network element (optional), and the tunnel information of the UPF network element (optional) according to the location where the terminal device accesses the 5GVN.
  • the GSMF network element can dynamically update the identification of the SMF network element, the identification of the UPF network element (optional) or the tunnel information of the UPF network element (optional) according to the movement of the terminal equipment ; Or, the GSMF network element can dynamically update the forwarding rules on the UPF network element in the 5GVN according to the address changes of the terminal equipment in the 5GVN, such as adding new addresses, deleting the old addresses, etc., to ensure that the private communication of 5GVN, namely the terminal Point-to-point data transmission between equipment and terminal equipment; or, when the GSMF network element detects that the SMF network element serving a certain terminal device is different from the SMF network element serving other terminal devices, the GSMF network element negotiates two SMF networks Element to update the forwarding rules on the corresponding UPF network element.
  • a UPF network element provides 5GVN services for terminal devices for the first time, it is necessary to update the forwarding rules on the corresponding UPF network element and establish a tunnel between the UPF network element and other UPF network elements (also It can be called the forwarding path).
  • the tunnel information of the UPF network element includes the next generation network (next generation, N) 19 interface (abbreviated as N19) tunnel information or path information of the UPF network element, where N19 is the UPF network element and the UPF
  • N19 is the UPF network element
  • the name of the interface between network elements may also be other interface names, such as N9 tunnel information, which is not limited in the present invention.
  • the tunnel or forwarding path corresponding to the tunnel information of the UPF network element can adopt the virtual local area network (virtual LAN, VLAN), virtual extended local area network (virtual extensible LAN, VxLAN), general packet radio service (general packet radio service, GPRS) tunnel protocol User plane (GPRS tunneling protocol-user plane, GTP-U), generic routing encapsulation (generic routing encapsulation, GRE) or IP tunneling methods are constructed.
  • the foregoing construction method may be dynamic or pre-configured in the network, which is not specifically limited in the embodiment of the present application. Among them, using different construction methods, the corresponding tunnel information is not the same.
  • the tunnel information when constructing in the VLAN method, can be UPF ID, UPF ID + virtual local area network identification (VLAN ID, VID) or media access control (MAC) + VID; or, for example, when constructing in the VxLAN method, The tunnel information can be UPF ID, UPF ID + VID, IP address + VID, or IP address + port number (port) + VID; or, for example, when the GTP-U method is used for construction, the tunnel information can be UPF ID, UPF ID + tunnel Endpoint identifier (tunnel endpoint identifier, TEID), IP address + TEID, or IP address + port + TEID; or, for example, when GRE is used to construct, the tunnel information can be UPF ID, UPF ID + key, IP address + key, or IP address+port+key; or, when the IP tunnel is used to construct, the tunnel information can be UPF ID, IP address, or IP address+port.
  • VLAN ID virtual local area network identification
  • MAC media access control
  • the UPF ID can be a MAC address or an IP address, or an IP address + port, or an SMF network element or a UPF network element can determine the corresponding MAC address or IP address, or IP address according to the UPF ID +port, here is a unified description, and will not be repeated below.
  • the current 5G network may also include access equipment 1, access equipment 2, access and mobility management function (core access and mobility management function, AMF) network elements, authentication server function (authentication) server function, AUSF) network element, network slice selection function (NSSF) network element, network exposure function (NEF) network element, network exposure function (Repository Function, NRF) network Elements, policy control function (PCF) network elements, unified data management (UDM) network elements, and application function (AF) network elements, etc., which are not specifically limited in the embodiment of this application.
  • the GSMF network elements in the embodiments of this application can be integrated into existing network elements, such as integrated in UDM or unified database (unified data repository, UDR) network elements.
  • UDM unified data repository
  • UDR unified data repository
  • the terminal device 1 accesses the 5G network through the access device 1, and the terminal device 1 communicates with the AMF network element through the N1 interface (N1 for short); the terminal device 2 accesses the 5G network through the access device 2.
  • Terminal 2 communicates with AMF network element through N1; access device 1 or access device 2 communicates with AMF network element through N2 interface (abbreviated as N2); access device 1 communicates with UPF1 network element through N3 interface (abbreviated as N3); Incoming device 2 communicates with UPF2 network element through N3, SMF1 network element communicates with UPF1 network element through N4 interface (abbreviated as N4), SMF2 network element communicates with UPF2 network element through N4, and UPF1 network element communicates with UPF2 through N19 interface (abbreviated as N19)
  • the network element communicates, or the UPF1 network element or the UPF2 network element respectively accesses the data network through the N6 interface (N6 for short).
  • control plane network elements such as network elements or GSMF network elements can also interact with service-oriented interfaces.
  • the servicing interface provided by the AUSF network element can be Nausf; the servicing interface provided by the AMF network element can be Namf; the servicing interface provided by the SMF network element can be Nsmf; the servicing interface provided by the NSSF network element.
  • the service interface provided by NEF network elements can be Nnef
  • the service interface provided by NRF network elements can be Nnrf
  • the service interface provided by PCF network elements can be Npcf
  • the service provided by UDM network elements The service-oriented interface can be Nudm
  • the service-oriented interface provided by the AF network element can be Naf
  • the service-oriented interface provided by the GSMF network element can be Ngsmf.
  • 5G system architecture 5G system architecture
  • FIG. 3 shows a schematic diagram of the user plane architecture of the existing 5GVN service.
  • the terminal device establishes a session with the UPF network element that provides the 5GVN service, thereby accessing the UPF network element that provides the 5GVN service.
  • UPF network elements that provide 5GVN services can communicate with existing LANs in the data network through N6, for example, to communicate with personal computers (PCs) in the LAN; or, UPF network elements that provide 5GVN services can also communicate through
  • the connection between the internal UPF network element and the UPF network element is associated with sessions of different terminal devices to realize private communication, which is not specifically limited in the embodiment of the present application.
  • the terminal device in the embodiment of the present application may be a device used to implement a wireless communication function, such as a terminal or a chip that can be used in a terminal.
  • the terminal may be a user equipment (UE), an access terminal, a terminal unit, a terminal station, a mobile station, a mobile station, a remote station, a remote terminal, and a mobile device in the LTE system, the NR system, or the future evolution of the PLMN. , Wireless communication equipment, terminal agents or terminal devices, etc.
  • the access terminal can be a cellular phone, a cordless phone, a session initiation protocol (SIP) phone, a wireless local loop (WLL) station, a personal digital assistant (PDA), with wireless communication Functional handheld devices, computing devices or other processing devices connected to wireless modems, vehicle-mounted devices or wearable devices, virtual reality (VR) terminal devices, augmented reality (AR) terminal devices, industrial control (industrial) Wireless terminal in control), wireless terminal in self-driving, wireless terminal in remote medical, wireless terminal in smart grid, wireless terminal in transportation safety (transportation safety) Terminal, wireless terminal in smart city, wireless terminal in smart home, etc.
  • the terminal can be mobile or fixed.
  • the access devices involved in the embodiments of this application refer to devices that access the core network, such as base stations, broadband network service gateways (BNG), aggregation switches, and non-third-generation cooperation Partnership project (3rd generation partnership project, 3GPP) access equipment, etc.
  • the base station may include various forms of base stations, such as: macro base stations, micro base stations (also called small stations), relay stations, access points, and so on.
  • the group session management network element or the session management network element 1 or the session management network element 2 in Figure 1 of the embodiment of the present application can be implemented by one device, or can be implemented by multiple devices, or one device. It is a functional module within, which is not specifically limited in the embodiment of this application. It is understandable that the above-mentioned functions may be network elements in hardware devices, software functions running on dedicated hardware, or virtualization functions instantiated on a platform (for example, a cloud platform).
  • FIG. 4 shows a schematic diagram of the hardware structure of a communication device provided by an embodiment of the application.
  • the communication device 400 includes a processor 401, a communication line 402, a memory 403, and at least one communication interface (in FIG. 4, the communication interface 404 is included as an example for illustration).
  • the processor 401 may be a general-purpose central processing unit (central processing unit, CPU), a microprocessor, an application-specific integrated circuit (ASIC), or one or more programs for controlling the execution of the program of this application. integrated circuit.
  • CPU central processing unit
  • ASIC application-specific integrated circuit
  • the communication line 402 may include a path to transmit information between the aforementioned components.
  • Communication interface 404 which uses any device such as a transceiver to communicate with other devices or communication networks, such as Ethernet, radio access network (RAN), wireless local area networks (WLAN), etc. .
  • RAN radio access network
  • WLAN wireless local area networks
  • the memory 403 may be read-only memory (ROM) or other types of static storage devices that can store static information and instructions, random access memory (RAM), or other types that can store information and instructions
  • the dynamic storage device can also be electrically erasable programmable read-only memory (EEPROM), compact disc read-only memory (CD-ROM) or other optical disk storage, optical disc storage (Including compact discs, laser discs, optical discs, digital versatile discs, Blu-ray discs, etc.), magnetic disk storage media or other magnetic storage devices, or can be used to carry or store desired program codes in the form of instructions or data structures and can be used by a computer Any other media accessed, but not limited to this.
  • the memory may exist independently and is connected to the processor through the communication line 402. The memory can also be integrated with the processor.
  • the memory 403 is used to store computer-executed instructions for executing the solution of the present application, and the processor 401 controls the execution.
  • the processor 401 is configured to execute computer execution instructions stored in the memory 403, so as to implement the virtual network communication method provided in the following embodiments of the present application.
  • the computer-executable instructions in the embodiments of the present application may also be referred to as application program code, which is not specifically limited in the embodiments of the present application.
  • the processor 401 may include one or more CPUs, such as CPU0 and CPU1 in FIG. 4.
  • the communication device 400 may include multiple processors, such as the processor 401 and the processor 408 in FIG. 4. Each of these processors can be a single-CPU (single-CPU) processor or a multi-core (multi-CPU) processor.
  • the processor here may refer to one or more devices, circuits, and/or processing cores for processing data (for example, computer program instructions).
  • the communication device 400 may further include an output device 405 and an input device 406.
  • the output device 405 communicates with the processor 401 and can display information in a variety of ways.
  • the output device 405 may be a liquid crystal display (LCD), a light emitting diode (LED) display device, a cathode ray tube (CRT) display device, or a projector (projector) Wait.
  • the input device 406 communicates with the processor 401 and can receive user input in a variety of ways.
  • the input device 406 may be a mouse, a keyboard, a touch screen device, or a sensor device.
  • the aforementioned communication device 400 may be a general-purpose device or a dedicated device.
  • the communication device 400 may be a desktop computer, a portable computer, a network server, a personal digital assistant (PDA), a mobile phone, a tablet computer, a wireless terminal device, an embedded device, or a similar structure in Figure 4 equipment.
  • PDA personal digital assistant
  • the embodiment of the present application does not limit the type of the communication device 400.
  • Session management network element 1 is SMF1 network element
  • session management network element 2 is SMF2 network element
  • user plane network element 1 is UPF1 network element
  • the user plane network element 2 is a UPF2 network element as an example.
  • a virtual network communication method provided in an embodiment of this application, the virtual network communication method includes the following steps:
  • the terminal device 1 sends a session establishment request 1 to the SMF1 network element.
  • the SMF1 network element receives the session establishment request 1 from the terminal device 1.
  • the session establishment request 1 includes the identity of the terminal device 1.
  • the session establishment request 1 may also include the identity of the first 5GVN group to which the terminal device 1 belongs.
  • the session establishment request 1 sent by the terminal device 1 to the SMF1 network element is sent to the SMF1 network element through the AMF network element, which is explained here in a unified manner, and will not be repeated here.
  • the identifier of the terminal device 1 carried in the session establishment request 1 may be, for example, a permanent identifier, such as a subscription permanent identifier (SUPI), a generic public subscription identifier, GPSI ), International Mobile Subscriber Identification Number (IMSI), Mobile Station Integrated Services Digital Network Number (MSISDN), Global Unique Temporary Identifier (GUTI), Data Network
  • the relevant identity identifier for example, a network access identifier (NAI) or a local area network specific user identifier, etc.; or the identifier of the terminal device 1 carried in the session establishment request 1 may also be the address information of the terminal device 1 For example, it can be the fourth version of the Internet Protocol (Internet Protocol version 4, IPv4) address, the sixth version of the Internet Protocol (Internet Protocol version 6, IPv6, IPv6 address, MAC address, or MAC address + VID, etc.). This embodiment of the application does not deal with this Specific restrictions.
  • the identifier of the first 5GVN group is used to identify the first 5GVN group.
  • a 5GVN can correspond to a 5GVN group.
  • the 5GVN group ID is the 5GVN ID; or, there can be multiple groups under a 5GVN.
  • the 5GVN group ID includes the 5GVN ID and the group ID , Here are unified descriptions, and will not be repeated here.
  • the 5GVN group identifier can be a special domain name (such as data network name (DNN)), fully qualified domain name (FQDN), VID, string, internal group Identifier (internal group identifier), external group identifier (external group identifier), or serial number, etc.
  • the 5GVN group logo can also adopt some special formats.
  • the 5GVN group identifier may also include one or more of provider information, operator information, network information, domain information, and other information, which is not specifically limited in the embodiment of the present application.
  • the SMF1 network element selects the UPF1 network element to serve the terminal device 1, and establishes an N3 tunnel between the UPF1 network element and the access device 1.
  • the forwarding rule is established or configured on the UPF1 network element as follows: For the destination address, the terminal device 1 The data packet of the address is sent to the access device 1 through the corresponding N3 tunnel.
  • the related description can refer to the prior art, which will not be repeated here.
  • the SMF1 network element can query the terminal device 1 according to the local configuration or from other network elements (for example, UDM network elements).
  • the identifier of the first 5GVN group to which it belongs is not carried in the above step S501.
  • the SMF1 network element or the UPF1 network element can allocate the tunnel information of the UPF1 network element.
  • the tunnel information of the UPF1 network element please refer to the description in the above embodiment, which will not be repeated here. .
  • the SMF1 network element may also allocate address information for terminal device 1, where the address of terminal device 1
  • the SMF1 network element may also allocate address information for terminal device 1, where the address of terminal device 1
  • the SMF1 network element sends message 1 to the GSMF network element.
  • the GSMF network element receives message 1 from the SMF1 network element.
  • the message 1 includes the identification of the terminal device 1 and the identification of the SMF1 network element.
  • the message 1 may be, for example, a notification message, and the embodiment of the present application does not specifically limit the name of the message 1.
  • the SMF1 network element may send a request message to the GSMF network element.
  • the request message includes the identification of the terminal device 1.
  • the request message is used according to the information of the terminal device 1.
  • the identifier acquires the identifier of the 5GVN group to which the terminal device 1 belongs, and/or is used to acquire the address information of the terminal device 1, which is not specifically limited in the embodiment of the present application.
  • the identity of the terminal device 1 may be the identity of the terminal device 1 in the session establishment request 1 in step S501; or, if the identity of the terminal device 1 in the session establishment request 1 in step S501 is the permanent identity of the terminal device 1.
  • ID, the ID of the terminal device 1 in the message 1 may also be the address information of the terminal device 1 allocated by the SMF1 network element or the UPF1 network element, which is explained here in a unified manner, and will not be repeated in the following.
  • the GSMF network element can determine the identity of the SMF1 network element that sent the message 1 after receiving the message 1, the message 1 may not carry the identity of the SMF1 network element. Unified description, and will not be repeated below.
  • the message 1 may also include the identifier of the first 5GVN group to which the terminal device 1 belongs.
  • the GSMF network element can use the identity of the terminal device 1 in the message 1 and the terminal device pre-stored in the GSMF network element.
  • the mapping relationship between the identifier of the terminal device and the identifier of the 5GVN group to which the terminal device belongs determines the identifier of the first 5GVN group to which the terminal device 1 belongs, which is not specifically limited in the embodiment of the present application.
  • the message 1 may also include the identifier of the UPF1 network element.
  • the message 1 in step S503 may also include the tunnel information of the UPF1 network element.
  • the GSMF network element since the GSMF network element is used to manage the topology of 5GVN, after receiving the message 1, the GSMF network element can store the identity of the terminal device 1, the identity of the SMF1 network element, and the identity of the UPF1 network element.
  • the mapping relationship between the identifier (optional), the tunnel information of the UPF1 network element (optional), and the identifier of the first 5GVN group to which the terminal device 1 belongs may have been stored in the GSMF network element before the terminal device 1 establishes a session. There is no specific limitation.
  • the topology information of the first 5GVN group established by the GSMF network element may be as shown in Table 1.
  • the topology information of the first 5GVN group updated by the GSMF network element may be as shown in Table 2 or Table 3. .
  • the terminal device 3 before the session is established by the terminal device 1, the terminal device 3 already exists to establish the session, and the UPF network element serving the terminal device 1 and the UPF network element serving the terminal device 3 are both UPF1 network elements ( That is, different terminal devices are served by the same UPF network element) as an example for description.
  • Table 3 assumes that before terminal device 1 establishes a session, terminal device 4 has established a session, and the UPF network element serving terminal device 1 is UPF1 network element, and the UPF network element serving terminal device 4 is UPF3 network element, but UPF1
  • the network element and the UPF3 network element are both managed by the SMF1 network element (that is, different terminal devices are served by different UPF network elements managed by the same SMF network element) as an example for description.
  • the communication modes between different terminal devices in the 5GVN corresponding to the above two scenarios can refer to the existing communication modes in the single SMF network element scenario, which will not be repeated here.
  • Tables 1 to 3 are only exemplary table storage forms that give the topology information of the first 5GVN group.
  • the topology information of the first 5GVN group may also be stored on the GSMF network element in other ways, such as corresponding storage in any two columns in Table 1 to Table 3 above.
  • the identifier of the 5GVN group is stored corresponding to the identifier of the SMF network element
  • the identifier of the SMF network element is stored corresponding to the identifier of the UPF network element
  • the identifier of the SMF network element is stored corresponding to the tunnel information of the UPF network element
  • the The identification and the identification of the terminal device are stored correspondingly.
  • the topology information of the first 5GVN group can represent the identity of the terminal device, the identity of the first 5GVN group to which the terminal device 1 belongs, and the identity of the UPF network element serving the terminal device (optional ), the mapping relationship between the tunnel information (optional) of the UPF network element serving the terminal device and the SMF network element identifier of the UPF network element serving the terminal device, which is unified here, and the description is applicable to Other forms provided in the embodiments of this application will not be described in detail below.
  • the terminal device 2 sends a session establishment request 2 to the SMF2 network element.
  • the SMF2 network element receives the session establishment request 2 from the terminal device 2.
  • the session establishment request 2 includes the identification of the terminal device 2.
  • the session establishment request 2 may also include an identifier of the first 5GVN group to which the terminal device 2 belongs.
  • step S504 can refer to the above step S501, which will not be repeated here.
  • SMF2 network element selects UPF2 network element to serve terminal device 2, and establishes an N3 tunnel between UPF2 network element and access device 2, and establishes or configures forwarding rules on UPF2 network element as follows: For the destination address is terminal device 2. The data packet of the address is sent to the access device 2 through the corresponding N3 tunnel.
  • the related description can refer to the prior art, which will not be repeated here.
  • the SMF2 network element can query the first 5GVN group to which the terminal device 2 belongs according to the local configuration or from the UDM network element. logo.
  • the SMF2 network element or the UPF2 network element can allocate the tunnel information of the UPF2 network element.
  • the tunnel information of the UPF2 network element refer to the description in the foregoing embodiment, and will not be repeated here. .
  • the SMF2 network element may also allocate address information for terminal device 2, where the address of terminal device 2
  • the SMF2 network element may also allocate address information for terminal device 2, where the address of terminal device 2
  • the SMF2 network element sends message 2 to the GSMF network element.
  • the GSMF network element receives message 2 from the SMF2 network element.
  • the message 2 includes the identification of the terminal device 2 and the identification of the SMF2 network element.
  • the message 2 may be, for example, a notification message, and the embodiment of the present application does not specifically limit the name of the message 2.
  • the identification of the terminal device 2 may be the identification of the terminal device 2 in the session establishment request 2 in step S504; or, if the identification of the terminal device 2 in the session establishment request 2 in step S504 is the permanent identity of the terminal device 2.
  • ID the ID of the terminal device 2 in the message 2 may also be the address information of the terminal device 2 allocated by the SMF2 network element or the UPF2 network element, which will be explained here in a unified manner, and will not be repeated here.
  • the GSMF network element can determine the identity of the SMF2 network element that sent the message 2 after receiving the message 2, then the message 2 may not carry the identity of the SMF2 network element. Unified description, no more details below.
  • the message 2 may also include the identifier of the first 5GVN group to which the terminal device 2 belongs.
  • the GSMF network element can use the identity of the terminal device 2 in the message 2 and the pre-stored terminal device identity and terminal in the GSMF network element.
  • the mapping relationship of the identities of the 5GVN group to which the device belongs determines the identity of the first 5GVN group to which the terminal device 2 belongs, which is not specifically limited in this embodiment of the application.
  • the message 2 may also include the identifier of the UPF2 network element.
  • the message 2 in step S506 may also include the tunnel information of the UPF2 network element.
  • the GSMF network element since the GSMF network element is used to manage the topology of 5GVN, after receiving the message 2, the GSMF network element can store the identity of the terminal device 2, the identity of the SMF2 network element, and the identity of the UPF2 network element.
  • the mapping relationship between the identifier (optional), the tunnel information of the UPF2 network element (optional), and the identifier of the first 5GVN group to which the terminal device 2 belongs may have been stored in the GSMF network element before the terminal device 2 establishes a session. There is no specific limitation.
  • the topology information of the first 5GVN group managed on the GSMF network element is shown in Table 1, Table 2 or Table 3 respectively, then after the terminal device 2 establishes the session, the GSMF network element updates
  • the topology information of the first 5GVN group may be as shown in Table 4, Table 5 or Table 6, respectively.
  • the GSMF network element in the process of establishing a session for the terminal device 2, if the GSMF network element receives the message 2 from the SMF2 network element, it determines that in the topology information of the first 5GVN group managed on the GSMF network element, If there are SMF network elements different from SMF2 network elements (such as SMF1 network element in the embodiment of this application), UPF network elements that need to be managed by UPF2 network elements and other SMF network elements to serve terminal devices belonging to the first 5GVN group Establish corresponding forwarding rules; or, if the UPF2 network element provides services for the terminal devices belonging to the first 5GVN group for the first time, you can establish UPF2 network elements and other SMF network elements to manage the UPF service for the terminal devices belonging to the first 5GVN group Tunnel between network elements.
  • SMF network elements such as SMF1 network element in the embodiment of this application
  • the following takes as an example the establishment of corresponding forwarding rules on UPF network elements managed by UPF2 network elements and other SMF network elements that serve terminal devices belonging to the first 5GVN group.
  • the virtual network communication method provided in the embodiment of the present application may also include the following Steps S507-S510:
  • the GSMF network element sends message 3 to another SMF network element different from the SMF2 network element corresponding to the terminal device 2 (such as the SMF1 network element in the embodiment of the present application).
  • the SMF1 network element receives the message 3 from the GSMF network element.
  • the message 3 includes the identification of the terminal device 2, the identification of the first 5GVN group to which the terminal device 2 belongs, and the tunnel information of the UPF2 network element serving the terminal device 2.
  • the message 3 may be, for example, a request message or a notification message.
  • the embodiment of the present application does not specifically limit the name of the message 3.
  • the SMF1 network element manages the terminal in the first 5GVN group according to the identity of the terminal device 2, the identity of the first 5GVN group to which the terminal device 2 belongs, and the tunnel information of the UPF2 network element serving the terminal device 2 Configure forwarding rule 1 on the UPF network element served by the device (such as the UPF1 network element in the embodiment of this application), and forwarding rule 1 is used when the UPF1 network element serves the terminal device belonging to the first 5GVN group (such as the above terminal device 1)
  • the UPF1 network element (based on the tunnel information of the UPF2 network element) sends the data packet to the UPF2 network element.
  • the SMF network element different from the SMF2 network element is the SMF1 network element
  • the UPF network element managed by the SMF1 network element to serve the terminal equipment belonging to the first 5GVN group is the UPF1 network element.
  • a forwarding rule similar to forwarding rule 1 is configured on the network element, so that when a data packet is sent to the terminal device 2 belonging to the first 5GVN group, the data packet can be routed from the corresponding UPF network element to the UPF2 network element; or, if the SMF1 network In addition to UPF1 network elements, there are other UPF network elements that are managed by the UPF network elements that serve the terminal devices in the first 5GVN group.
  • the forwarding rule is such that when a data packet is sent to the terminal device 2 belonging to the first 5GVN group, the data packet can be routed from other UPF network elements to the UPF2 network element, which will not be repeated here.
  • the GSMF network element sends a message 4 to the SMF2 network element.
  • the SMF2 network element receives the message 4 from the GSMF network element.
  • the message 4 includes the identity of the terminal device 1, the identity of the first 5GVN group to which the terminal device 1 belongs, and the tunnel information of the UPF1 network element serving the terminal device 1.
  • the message 4 may be, for example, a request message or a notification message.
  • the embodiment of the present application does not specifically limit the name of the message 3.
  • the SMF2 network element configures forwarding rule 2 on the UPF2 network element according to the identity of the terminal device 1, the identity of the first 5GVN group to which the terminal device 1 belongs, and the tunnel information of the UPF1 network element serving the terminal device 1, and forwarding rule 2 is used
  • the terminal device belonging to the first 5GVN group served by the UPF2 network element such as the aforementioned terminal device 2 sends a data packet to the terminal device 1 belonging to the first 5GVN group
  • the UPF2 network element (based on the tunnel information of the UPF1 network element) will The data packet is sent to the UPF1 network element.
  • steps S509-S510 are described by taking the topology information of the first 5GVN group managed on the GSMF network element as an example where only the topology information related to the terminal device 1 and the topology information related to the terminal device 2 exist.
  • the topology information of the first 5GVN group managed on the GSMF network element also includes topology information related to other terminal devices
  • the above message 4 also includes topology information related to other terminal devices, so that the SMF network element 2 can be based on other terminal devices.
  • For the topology information related to the terminal device configure a forwarding rule similar to forwarding rule 2 on the UPF network element, so that when sending data packets to other terminal devices belonging to the first 5GVN group, the data packet can be routed from the UPF2 network element to other UPFs Network element.
  • the above message 4 may also include the identification of the terminal device 4, the identification of the first 5GVN group to which the terminal device 4 belongs, and the terminal
  • the tunnel information of the UPF3 network element served by the device 4 and then the SMF2 network element can be in the UPF2 network according to the identity of the terminal device 4, the identity of the first 5GVN group to which the terminal device 4 belongs, and the tunnel information of the UPF3 network element serving the terminal device 4.
  • the forwarding rule 3 is configured on the element.
  • the forwarding rule 3 is used when the terminal device of the first 5GVN group served by the UPF2 network element (such as the aforementioned terminal device 2) sends a data packet to the terminal device 4 belonging to the first 5GVN group, the UPF2 network The element sends the data packet to the UPF3 network element.
  • the UPF2 network element such as the aforementioned terminal device 2
  • Steps S507-S508 may be executed first, and then steps S509-S510 may be executed first; Steps S509-S510, and then steps S507-S508; it is also possible to perform steps S507-S508 and steps S509-S510 at the same time, which is not specifically limited in the embodiment of the present application.
  • the virtual network communication method may also include the following steps S511-S518:
  • the GSMF network element sends message 5 to the SMF2 network element.
  • the SMF2 network element receives the message 5 from the GSMF network element.
  • the message 5 may include the identity of the first 5GVN group and the identity of the terminal device 2, and is used to request the establishment of a tunnel for the terminal device 2 belonging to the first 5GVN group.
  • the message 5 may be, for example, a request message, and the embodiment of the present application does not specifically limit the name of the message 5.
  • the SMF2 network element obtains tunnel information of the UPF2 network element.
  • the tunnel information of the UPF2 network element may be allocated by the SMF2 network element, or may be allocated by the SMF2 network element requesting the UPF2 network element to be allocated, which is not specifically limited in the embodiment of the present application.
  • the SMF2 network element sends a message 6 to the GSMF network element.
  • the GSMF network element receives the message 6 from the SMF2 network element.
  • the message 6 includes the tunnel information of the UPF2 network element.
  • the tunnel establishment response 1 includes the identity of the terminal device 2 and the identity of the first 5GVN group to which the terminal device 2 belongs.
  • the message 6 may be, for example, a response message, and the name of the message 6 is not specifically limited in the embodiment of the present application.
  • the GSMF network element after the GSMF network element receives the message 6 from the SMF2 network element, it can update the topology information of the first 5GVN group, such as establishing the identity of the terminal device 2, the identity of the SMF2 network element, and the UPF2 network element.
  • the identification of (optional), the mapping relationship of the identification of the first 5GVN group to which the terminal device 2 belongs, and the mapping relationship of the tunnel information of the UPF2 network element are described here in a unified manner, and will not be repeated below.
  • the GSMF network element sends a message 7 to another SMF network element different from the SMF2 network element corresponding to the terminal device 2 (such as the SMF1 network element in the embodiment of the present application).
  • the SMF1 network element receives the message 7 from the GSMF network element.
  • the message 7 includes the identification of the terminal device 2, the identification of the first 5GVN group to which the terminal device 2 belongs, and the tunnel information of the UPF2 network element serving the terminal device 2.
  • the message 7 may be, for example, a request message or a notification message.
  • the embodiment of the present application does not specifically limit the name of the message 5.
  • the SMF1 network element manages the terminal in the first 5GVN group according to the identity of the terminal device 2, the identity of the first 5GVN group to which the terminal device 2 belongs, and the tunnel information of the UPF2 network element serving the terminal device 2 Configure forwarding rule 1 on the UPF network element served by the device (such as the UPF1 network element in the embodiment of this application), and forwarding rule 1 is used when the UPF1 network element serves the terminal device belonging to the first 5GVN group (such as the above terminal device 1)
  • the UPF1 network element sends the data packet to the UPF2 network element.
  • the SMF1 network element can also obtain the tunnel information of the UPF network element (such as the UPF1 network element in the embodiment of this application) managed by the SMF1 network element and serving the terminal devices in the first 5GVN group, and the tunnel information of the UPF network element It may be allocated by the SMF1 network element, or allocated by the UPF network element itself, which is not specifically limited in the embodiment of the present application.
  • the tunnel information of the UPF network element such as the UPF1 network element in the embodiment of this application managed by the SMF1 network element and serving the terminal devices in the first 5GVN group
  • the tunnel information of the UPF network element It may be allocated by the SMF1 network element, or allocated by the UPF network element itself, which is not specifically limited in the embodiment of the present application.
  • the SMF1 network element sends a message 8 to the GSMF network element.
  • the GSMF network element receives the message 8 from the SMF1 network element.
  • the message 8 includes the tunnel information of the UPF1 network element.
  • the message 8 includes the identity of the first 5GVN group and the identity of the terminal device (such as the terminal device 1 in the embodiment of the present application) belonging to the first 5GVN group served by the UPF1 network element.
  • the message 8 may be, for example, a response message, and the embodiment of the present application does not specifically limit the name of the message 8.
  • the GSMF network element can update the topology information of the first 5GVN group, such as establishing the identity of the terminal device 1, the identity of the SMF1 network element, and the identity of the UPF1 network element (optional ), the mapping relationship of the identifier of the first 5GVN group to which the terminal device 1 belongs, and the mapping relationship of the tunnel information of the UPF1 network element are described here in a unified manner, and will not be described in detail below.
  • the GSMF network element sends a message 9 to the SMF2 network element.
  • the SMF2 network element receives the message 9 from the GSMF network element.
  • the message 9 includes the identification of the terminal device 1, the identification of the first 5GVN group to which the terminal device 1 belongs, and the tunnel information of the UPF1 network element serving the terminal device 1.
  • the message 9 may be a request message or a notification message, for example, and the name of the message 9 is not specifically limited in the embodiment of the present application.
  • the element may determine the identity of the terminal device (such as the terminal device 1 in the embodiment of the present application) belonging to the first 5GVN group served by the UPF1 network element.
  • the GSMF network element can determine the identity of the corresponding UPF1 network element according to the tunnel information of the UPF1 network element, and then determine the UPF1 network element service based on the mapping relationship between the UPF network element’s identity, the 5GVN group’s identity, and the terminal device’s identity
  • the identifier of the terminal device (such as the terminal device 1 in the embodiment of the present application) belonging to the first 5GVN group, which is not specifically limited in the embodiment of the present application.
  • the SMF2 network element configures forwarding rule 2 on the UPF2 network element according to the identity of the terminal device 1, the identity of the first 5GVN group to which the terminal device 1 belongs, and the tunnel information of the UPF1 network element serving the terminal device 1.
  • the forwarding rule 2 is used When the terminal device belonging to the first 5GVN group served by the UPF2 network element (such as the aforementioned terminal device 2) sends a data packet to the terminal device 1 belonging to the first 5GVN group, the UPF2 network element sends the data packet to the UPF1 network element.
  • the SMF network element different from the SMF2 network element is the SMF1 network element
  • the UPF network element managed by the SMF1 network element for the terminal equipment belonging to the first 5GVN group is the UPF1 network element.
  • the tunnel establishment response 2 may include the tunnel information of the UPF3 network element and the identification of the terminal device 4 (optional).
  • the above-mentioned message 5 may also include the identification of the terminal device 4, the identification of the first 5GVN group to which the terminal device 4 belongs, and the tunnel information of the UPF3 network element serving the terminal device 4, and the SMF2 network element may be based on the terminal device 4 The ID, the ID of the first 5GVN group to which the terminal device 4 belongs, and the tunnel information of the UPF3 network element serving the terminal device 4.
  • Configure forwarding rule 3 on the UPF2 network element and forwarding rule 3 is used when the UPF2 network element serves the first
  • the terminal device of the 5GVN group such as the aforementioned terminal device 2
  • the UPF2 network element sends the data packet to the UPF3 network element.
  • the second method above is described by taking the example of obtaining the tunnel information of the UPF2 network element first, and then obtaining the tunnel information of the UPF1 network element.
  • the tunnel information of the UPF1 network element may also be obtained first, and then the tunnel information of the UPF2 network element, which is not specifically limited in the embodiment of the present application.
  • the above method 1 and method 2 are both described by setting up corresponding forwarding rules on UPF network elements managed by UPF2 network elements and other SMF network elements to serve terminal devices belonging to the first 5GVN group as an example.
  • the UPF2 network element provides services for the terminal equipment belonging to the first 5GVN group for the first time, only a tunnel between the UPF2 network element and the UPF network element managed by other SMF network elements that serves the terminal equipment belonging to the first 5GVN group can be established.
  • the GSMF network element can only send the tunnel information of the UPF network element and the identity of the first 5GVN group to the corresponding SMF. It is not necessary to send the identity of the terminal equipment that belongs to the first 5GVN group served by the UPF network element. Unified description, no more details below.
  • the SMF1 network element and the SMF2 network element can directly exchange the tunnel information of the UPF1 network element and the tunnel information of the UPF2 network element.
  • the SMF2 network element directly sends the UPF2 network element tunnel information and the corresponding first 5GVN group identifier to the SMF1 network element, without performing the above steps S513-S514.
  • the SMF1 network element directly sends the UPF1 network element tunnel information and the corresponding first 5GVN group identifier to the SMF2 network element, without the need to perform the above steps S516-S517, which are explained here in a unified manner, and will not be repeated here.
  • the identification of the terminal device corresponding to the tunnel information of the UPF1 network element needs to be exchanged.
  • the SMF2 network element directly sends the SMF1
  • the network element sends the tunnel information of the UPF2 network element, the identity of the terminal device 2, and the identity of the first 5GVN group to which the terminal device 2 belongs;
  • the SMF1 network element directly sends the tunnel information of the UPF1 network element and the identity of the terminal device 1 to the SMF2 network element ,
  • the identification of the first 5GVN group to which the terminal device 1 belongs are described here in a unified manner, and will not be described in detail below.
  • the terminal device 1 belonging to the first 5GVN group served by the UPF1 network element managed by the SMF1 network element and the UPF2 network element managed by the SMF2 network element belonging to the first 5GVN can be realized
  • the private communication between the terminal devices 2 of the group can solve the private communication of the 5GVN service across SMF network elements.
  • the actions of the GSMF network element or SMF1 network element or SMF2 network element in the above steps S501 to S518 can be executed by the processor 401 in the communication device 400 shown in FIG. 4 calling the application code stored in the memory 403.
  • the embodiment does not impose any limitation on this.
  • the communication system shown in Fig. 1 is applied to the 5G network shown in Fig. 2.
  • Session management network element 1 is SMF1 network element
  • session management network element 2 is SMF2 network element
  • user plane network element 1 is UPF1
  • the user plane network element 2 is a UPF2 network element.
  • the virtual network communication method includes the following steps:
  • S601-S606 are the same as steps S501-S506 in the embodiment shown in FIG. 5, and related descriptions can refer to the embodiment shown in FIG. 5, which will not be repeated here.
  • the UPF1 network element receives the data packet, and the data packet carries the identifier of the terminal device 2.
  • the identification of the terminal device 2 carried in the data packet may be, for example, that the destination address of the data packet is the IP address of the terminal device 2 or the MAC address of the terminal device.
  • the UPF1 network element may determine the identity of the 5GVN group (assuming the first 5GVN group) to which the terminal device 2 belongs.
  • the UPF1 network element receives the data packet through the N3 uplink tunnel of a certain PDU session of the terminal device 1, so that it can be determined that the 5GVN group to which the terminal device 2 belongs is the first 5GVN group, because the PDU session serves For the first 5GVN group, see steps S501-S503 for details.
  • the data packet itself carries an identifier of the 5GVN group to which the terminal device 2 belongs.
  • the UPF1 network element determines that the forwarding rule corresponding to the terminal device 2 is not stored on the UPF1 network element, the UPF1 network element sends a query request 1 to the SMF1 network element.
  • the SMF1 network element receives the query request 1 from the UPF1 network element.
  • the query request 1 carries the identifier of the first 5GVN group to which the terminal device 2 belongs and the identifier of the terminal device 2, and is used to request a forwarding rule corresponding to the terminal device 2 belonging to the first 5GVN group.
  • the SMF1 network element determines that the forwarding rule corresponding to the terminal device 2 belonging to the first 5GVN group is not stored on the SMF1 network element, the SMF1 network element sends a query request 2 to the GSMF network element.
  • the GSMF network element receives the query request 2 from the SMF1 network element.
  • the query request 2 carries the identity of the first 5GVN group to which the terminal device 2 belongs and the identity of the terminal device 2, and is used to request a forwarding rule corresponding to the terminal device 2 belonging to the first 5GVN group.
  • the GSMF network element can determine that the terminal device 2 corresponds to the SMF2 network element according to the information related to the terminal device 2 reported by the SMF2 network element in step S606, and then the corresponding forwarding can be established on the UPF network element in the embodiment shown in FIG. 5
  • the rule method creates a forwarding rule on the corresponding UPF network element. For related description, refer to the embodiment shown in FIG. 5, which will not be repeated here.
  • the forwarding rule corresponding to the terminal device 2 belonging to the first 5GVN group may be created only on the UPF1 network element, and there is no need to create the forwarding rule on the UPF2 network element.
  • the corresponding forwarding rule can be established on the UPF network element in the embodiment shown in FIG. 5 to create the corresponding forwarding rule on the UPF2 network element, which is unified here. Note, the following will not repeat them.
  • the UPF1 network element sends the received data packet to the UPF2 network element according to the forwarding rule on the UPF1 network element.
  • the terminal device 1 belonging to the first 5GVN group served by the UPF1 network element managed by the SMF1 network element and the UPF2 network element managed by the SMF2 network element belonging to the first 5GVN can be realized
  • the private communication between the terminal devices 2 of the group can solve the private communication of the 5GVN service across SMF network elements.
  • the actions of the GSMF network element or the SMF1 network element or the SMF2 network element in the above steps S601 to S611 can be executed by the processor 401 in the communication device 400 shown in FIG. 4 calling the application code stored in the memory 403.
  • the embodiment does not impose any limitation on this.
  • the methods and/or steps implemented by the group session management network element can also be implemented by the chip system that implements the above group session management network element, and the method implemented by the session management network element And/or steps can also be implemented by a chip system that implements the above-mentioned session management network element.
  • an embodiment of the present application also provides a communication device, which is used to implement the foregoing various methods.
  • the communication device may be the group session management network element in the foregoing method embodiment or a chip system that implements the function of the foregoing group session management network element; or, the communication device may be the session management network element in the foregoing method embodiment or the implementation The above-mentioned session management network element function chip system. It can be understood that, in order to realize the above-mentioned functions, the communication device includes hardware structures and/or software modules corresponding to each function.
  • the present application can be implemented in the form of hardware or a combination of hardware and computer software. Whether a certain function is executed by hardware or computer software-driven hardware depends on the specific application and design constraint conditions of the technical solution. Professionals and technicians can use different methods for each specific application to implement the described functions, but such implementation should not be considered beyond the scope of this application.
  • the embodiments of the present application may divide the communication device into functional modules according to the foregoing method embodiments.
  • each functional module may be divided corresponding to each function, or two or more functions may be integrated into one processing module.
  • the above-mentioned integrated modules can be implemented in the form of hardware or software functional modules. It should be noted that the division of modules in the embodiments of the present application is illustrative, and is only a logical function division, and there may be other division methods in actual implementation.
  • FIG. 7 shows a schematic structural diagram of a group session management network element 70.
  • the group session management network element 70 includes a processing module 701 and a transceiver module 702.
  • the transceiver module 702 may also be referred to as a transceiver unit to implement sending and/or receiving functions, for example, it may be a transceiver circuit, transceiver, transceiver or communication interface.
  • the processing module 701 is configured to obtain tunnel information of a first user plane network element serving the first terminal device belonging to the first virtual network group, where the first user plane network element is managed by the first session management network element;
  • the transceiver module 702 is configured to send a first message to the second session management network element.
  • the first message includes the identifier of the first terminal device, the identifier of the first virtual network group, and the tunnel information of the first user plane network element.
  • the identifier of a terminal device, the identifier of the first virtual network group, and the tunnel information of the first user plane network element are used to configure the first forwarding rule on the second user plane network element managed by the second session management network element, and the first forwarding The rule is used for when the terminal device belonging to the first virtual network group served by the second user plane network element sends a first data packet to the first terminal device belonging to the first virtual network group, the second user plane network element transfers the first data The packet is sent to the first user plane network element.
  • the group session management network element 70 may further include a storage module 703.
  • the transceiver module 702 is further configured to receive a second message from the first session management network element during the session establishment of the first terminal device belonging to the first virtual network group, the second message including the identification of the first terminal device And the identifier of the first session management network element;
  • the storage module 703 is configured to store the mapping relationship between the identifier of the first terminal device and the identifier of the first session management network element.
  • the second message further includes at least one of the identification of the first virtual network group to which the first terminal device belongs and the tunnel information of the first user plane network element serving the first terminal device belonging to the first virtual network group .
  • the storage module 703 is specifically configured to store at least one of the identifier of the first virtual network group and the tunnel information of the first user plane network element, the mapping relationship between the identifier of the first terminal device and the identifier of the first session management network element.
  • the processing module 701 is configured to obtain tunnel information of a first user plane network element serving the first terminal device belonging to the first virtual network group, and includes: a processing module 701, configured to include the first user plane network element in the mapping relationship In the case of the tunnel information of the user plane network element, the stored tunnel information of the first user plane network element served by the first terminal device belonging to the first virtual network group is acquired.
  • the processing module 701 is configured to obtain tunnel information of a first user plane network element serving the first terminal device belonging to the first virtual network group, and includes: a processing module 701, configured to not include the first user plane network element in the mapping relationship In the case of tunnel information of a user plane network element, a third message is sent to the first session management network element through the transceiver module 702, the third message is used to request the establishment of a tunnel for the first terminal device belonging to the first virtual network group; The transceiver module 702 receives the tunnel information of the first user plane network element serving the first terminal device belonging to the first virtual network group from the first session management network element.
  • the transceiver module 702 is further configured to receive tunnel information of a second user plane network element serving the second terminal device belonging to the first virtual network group from the second session management network element; the transceiver module 702 also uses Send a fourth message to the first session management network element, where the fourth message includes the identifier of the second terminal device, the identifier of the first virtual network group, and the tunnel information of the second user plane network element, where the identifier of the second terminal device ,
  • the identifier of the first virtual network group and the tunnel information of the second user plane network element are used to configure the second forwarding rule on the first user plane network element, and the second forwarding rule is used when the service of the first user plane network element belongs to When the terminal device of the first virtual network group sends the second data packet to the second terminal device belonging to the first virtual network group, the first user plane network element sends the second data packet to the second user plane network element.
  • the transceiver module 702 is further configured to receive a fifth message from the second session management network element, where the fifth message is used to request the first forwarding rule.
  • the group session management network element 70 is presented in the form of dividing various functional modules in an integrated manner.
  • the "module” here can refer to a specific ASIC, circuit, processor and memory that executes one or more software or firmware programs, integrated logic circuit, and/or other devices that can provide the above-mentioned functions.
  • the group session management network element 70 may adopt the form of the communication device 400 shown in FIG. 4.
  • the processor 401 in FIG. 4 may invoke the computer execution instructions stored in the memory 403 to cause the group session management network element 70 to execute the virtual network communication method in the foregoing method embodiment.
  • the function/implementation process of the processing module 701 and the transceiver module 702 in FIG. 7 may be implemented by the processor 401 in FIG. 4 calling a computer execution instruction stored in the memory 403.
  • the function/implementation process of the processing module 701 in FIG. 7 may be implemented by the processor 401 in FIG. 4 calling a computer execution instruction stored in the memory 403, and the function/implementation process of the transceiver module 702 in FIG.
  • the communication interface 404 in 4 is implemented.
  • the function/implementation process of the storage module 703 in FIG. 7 can be implemented by the memory 403 in FIG. 4.
  • the group session management network element 70 provided in this embodiment can execute the above-mentioned virtual network communication method, the technical effects that can be obtained can refer to the above-mentioned method embodiment, which will not be repeated here.
  • FIG. 8 shows a schematic structural diagram of a second session management network element 80.
  • the second session management network element 80 includes a processing module 801 and a transceiver module 802.
  • the transceiver module 802 may also be referred to as a transceiver unit to implement sending and/or receiving functions, and may be, for example, a transceiver circuit, transceiver, transceiver, or communication interface.
  • the transceiver module 802 is configured to send a first message to the group session management network element in the process of establishing a session for the second terminal device belonging to the first virtual network group, and the first message includes the identifier of the second terminal device and the first message.
  • the identifier of the session management network element; the transceiver module 802 is also used to receive a second message from the group session management network element, the second message includes the identifier of the first terminal device belonging to the first virtual network group, the first virtual network
  • the processing module 801 uses Configure the first forwarding rule on the second user plane network element managed by the second session management network element according to the identity of the first terminal device, the identity of the first virtual network group, and the tunnel information of the first user plane network element.
  • the forwarding rule is used for when the terminal device belonging to the first virtual network group served by the second user plane network element sends the first data packet to the first terminal device belonging to the first virtual network group, the second user plane network element will be the first The data packet is sent to the first user plane network element.
  • the transceiver module 802 is further configured to receive a third message from the second user plane network element, and the third message is used to request the first forwarding rule; the processing module 801 is also configured to determine that the second session management network element There is no first forwarding rule; the transceiver module 802 is also used to send a fourth message to the group session management network element, and the fourth message is used to request the first forwarding rule.
  • the first message further includes an identifier of the first virtual network group to which the second terminal device belongs.
  • the first message further includes tunnel information of a second user plane network element serving the second terminal device belonging to the first virtual network group.
  • the transceiver module 802 is further configured to receive a fifth message from the group session management network element, where the fifth message is used to request the establishment of a tunnel for the second terminal device belonging to the first virtual network group; the transceiver module 802 also It is used to send the tunnel information of the second user plane network element serving the second terminal device belonging to the first virtual network group to the group session management network element.
  • the second session management network element 80 is presented in the form of dividing various functional modules in an integrated manner.
  • the "module” here can refer to a specific ASIC, circuit, processor and memory that executes one or more software or firmware programs, integrated logic circuit, and/or other devices that can provide the above-mentioned functions.
  • the second session management network element 80 may take the form of the communication device 400 shown in FIG. 4.
  • the processor 401 in FIG. 4 may invoke the computer execution instructions stored in the memory 403 to cause the second session management network element 80 to execute the virtual network communication method in the foregoing method embodiment.
  • the function/implementation process of the processing module 801 and the transceiver module 802 in FIG. 8 can be implemented by the processor 401 in FIG. 4 calling a computer execution instruction stored in the memory 403.
  • the function/implementation process of the processing module 801 in FIG. 8 may be implemented by the processor 401 in FIG. 4 calling computer execution instructions stored in the memory 403, and the function/implementation process of the transceiver module 802 in FIG.
  • the communication interface 404 in 4 is implemented.
  • the second session management network element 80 provided in this embodiment can execute the above-mentioned virtual network communication method, the technical effects that can be obtained can refer to the above-mentioned method embodiment, which will not be repeated here.
  • an embodiment of the present application further provides a communication device (for example, the communication device may be a chip or a chip system), and the communication device includes a processor for implementing the method in any of the foregoing method embodiments.
  • the communication device further includes a memory.
  • the memory is used to store necessary program instructions and data, and the processor can call the program code stored in the memory to instruct the communication device to execute the method in any of the foregoing method embodiments.
  • the memory may not be in the communication device.
  • the communication device is a chip system, it may be composed of a chip, or may include a chip and other discrete devices, which is not specifically limited in the embodiment of the present application.
  • the computer may be implemented in whole or in part by software, hardware, firmware or any combination thereof.
  • a software program it may be implemented in the form of a computer program product in whole or in part.
  • the computer program product includes one or more computer instructions.
  • the computer may be a general-purpose computer, a special-purpose computer, a computer network, or other programmable devices.
  • the computer instructions may be stored in a computer-readable storage medium or transmitted from one computer-readable storage medium to another computer-readable storage medium.
  • the computer instructions may be transmitted from a website, computer, server, or data center.
  • the computer-readable storage medium may be any available medium that can be accessed by a computer, or may include one or more data storage devices such as servers and data centers that can be integrated with the medium.
  • the usable medium may be a magnetic medium (for example, a floppy disk, a hard disk, a magnetic tape), an optical medium (for example, a DVD), or a semiconductor medium (for example, a solid state disk (SSD)).
  • the computer may include the aforementioned device.

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Computer Security & Cryptography (AREA)
  • Multimedia (AREA)
  • Mobile Radio Communication Systems (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)

Abstract

本申请实施例提供虚拟网络通信方法、设备及系统，用于解决跨会话管理网元实现虚拟网络服务的私有通信的问题。方法包括：群组会话管理网元获取为属于第一虚拟网络组的第一终端设备服务的第一用户面网元的隧道信息，其中，第一用户面网元由第一会话管理网元管理；群组会话管理网元向第二会话管理网元发送第一消息，第一消息包括第一终端设备的标识、第一虚拟网络组的标识和第一用户面网元的隧道信息，用于在第二会话管理网元管理的第二用户面网元上配置第一转发规则，第一转发规则用于当第二用户面网元服务的属于第一虚拟网络组的终端设备给属于第一虚拟网络组的第一终端设备发送第一数据包时，第二用户面网元将第一数据包发送给第一用户面网元。

Description

虚拟网络通信方法、设备及系统
本申请要求于2019年05月17日提交国家知识产权局、申请号为201910413600.3、申请名称为“虚拟网络通信方法、设备及系统”的中国专利申请的优先权，其全部内容通过引用结合在本申请中。
技术领域
本申请涉及通信领域，尤其涉及虚拟网络通信方法、设备及系统。
背景技术
第五代(5th generation，5G)虚拟网络(5G virtual network，5GVN)(也可以称之为5G本地局域网(local area network，5GLAN))服务是目前的5G网络提供的一个服务，主要应用于家庭通信，企业办公，工厂制造，车联网，电网改造和公安机关等。该服务能够为一组终端设备中的两个或者多个终端设备提供互联网协议(internet protocol，IP)类型或者非IP类型(如以太类型)的私有通信。比如，工厂中的设备组成一个5GVN组，不同设备之间可以相互发送以太数据包；或者，企业中一个部门中的雇员的办公设备(如手机，计算机或笔记本电脑等)组成一个5GVN组，不同办公设备之间可以互相发送IP数据包，等等。若两个终端设备不在同一个5GVN组内，则相互之间不能够通信。
目前，5GVN服务提供终端设备和终端设备之间的点对点的数据传输，其可以覆盖很广的范围，如跨国家，跨省市。例如，一个5GVN服务为一个跨国企业的办公区中的设备提供私有通信，而跨国企业的每个办公区都位于不同的省市或者国家。现有技术中，若两个终端设备相距较远的，则5G网络需要为这两个终端设备选择不同的会话管理功能(session management function，SMF)网元分别管理它们到5GVN服务的会话，并且会为它们的会话选择不同的用户面功能(user plane function，UPF)网元分别提供数据传输。
然而，如何解决跨会话管理网元实现虚拟网络服务的私有通信，目前并没有相关的解决方案。
发明内容
本申请实施例提供虚拟网络通信方法、设备及系统，用于解决跨会话管理网元实现虚拟网络服务的私有通信的问题。
为达到上述目的，本申请的实施例采用如下技术方案：
第一方面，提供了一种虚拟网络通信方法，该方法包括：群组会话管理网元获取为属于第一虚拟网络组的第一终端设备服务的第一用户面网元的隧道信息，其中，该第一用户面网元由第一会话管理网元管理；群组会话管理网元向第二会话管理网元发送第一消息，该第一消息包括该第一终端设备的标识、该第一虚拟网络组的标识和该第一用户面网元的隧道信息，其中，该第一终端设备的标识、该第一虚拟网络组的标识和该第一用户面网元的隧道信息用于在该第二会话管理网元管理的第二用户面网元上配置第一转发规则，该第一转发规则用于当该第二用户面网元服务的属于该第一虚拟网络组的终端设备给该属于第一虚拟网络组的第一终端设备发送第一数据包时，该第二用户面网元将该第一数据包发送给该第一用户面网元。本申请实施例中，由于群组会话管理网元可以通过第二会话管理 网元在第二用户面网元上配置第一转发规则，该第一转发规则用于当该第二用户面网元服务的属于该第一虚拟网络组的终端设备给该属于第一虚拟网络组的第一终端设备发送第一数据包时，该第二用户面网元将该第一数据包发送给该第一用户面网元。因此基于该方案，可以解决跨会话管理网元实现虚拟网络服务的私有通信。
在一种可能的设计中，该方法还包括：在该属于第一虚拟网络组的第一终端设备建立会话的过程中，该群组会话管理网元接收来自该第一会话管理网元的第二消息，该第二消息包括该第一终端设备的标识和该第一会话管理网元的标识；该群组会话管理网元存储该第一终端设备的标识和该第一会话管理网元的标识的映射关系。也就是说，第一会话管理网元可以在属于第一虚拟网络组的第一终端设备建立会话的过程中，向群组会话管理网元上报第一终端设备的标识和为第一终端设备服务的第一会话管理网元的标识，以使得群组会话管理网元可以更新存储的第一虚拟网络组的拓扑信息，实现虚拟网络组的拓扑信息的统一管理。
在一种可能的设计中，该第二消息还包括该第一终端设备所属的该第一虚拟网络组的标识以及为该属于第一虚拟网络组的第一终端设备服务的该第一用户面网元的隧道信息中的至少一个；群组会话管理网元存储该第一终端设备的标识和该第一会话管理网元的标识的映射关系，包括：群组会话管理网元存储该第一虚拟网络组的标识以及该第一用户面网元的隧道信息中的至少一个、该第一终端设备的标识和该第一会话管理网元的标识的映射关系。也就是说，第一会话管理网元可以在属于第一虚拟网络组的第一终端设备建立会话的过程中，向群组会话管理网元上报服务第一终端设备的第一用户面网元的隧道信息和第一虚拟网络组的标识中的至少一个，以使得群组会话管理网元可以更新存储的第一虚拟网络组的拓扑信息，实现虚拟网络组的拓扑信息的统一管理。
在一种可能的设计中，该群组会话管理网元获取为属于第一虚拟网络组的第一终端设备服务的第一用户面网元的隧道信息，包括：在该映射关系中包括该第一用户面网元的隧道信息的情况下，该群组会话管理网元获取存储的为该属于第一虚拟网络组的第一终端设备服务的该第一用户面网元的隧道信息。即，第一会话管理网元可以在属于第一虚拟网络组的第一终端设备建立会话的过程中，向群组会话管理网元上报服务第一终端设备的第一用户面网元的隧道信息，以使得群组会话管理网元可以存储第一用户面网元的隧道信息。进而，在用户面网元上创建转发规则时，群组会话管理网元可以直接获取存储的为该属于第一虚拟网络组的第一终端设备服务的该第一用户面网元的隧道信息，简化了转发规则的创建流程。
在一种可能的设计中，群组会话管理网元获取为属于第一虚拟网络组的第一终端设备服务的第一用户面网元的隧道信息，包括：在该映射关系中不包括该第一用户面网元的隧道信息的情况下，该群组会话管理网元向该第一会话管理网元发送第三消息，该第三消息用于请求为该属于第一虚拟网络组的第一终端设备建立隧道；群组会话管理网元接收来自该第一会话管理网元的为该属于第一虚拟网络组的第一终端设备服务的该第一用户面网元的隧道信息。也就是说，本申请实施例中，群组会话管理网元可以通过向第一会话管理网元请求建立隧道的方式获取为该属于第一虚拟网络组的第一终端设备服务的该第一用户面网元的隧道信息。
在一种可能的设计中，该方法还包括：群组会话管理网元接收来自该第二会话管理网 元的为属于该第一虚拟网络组的第二终端设备服务的该第二用户面网元的隧道信息；群组会话管理网元向该第一会话管理网元发送第四消息，该第四消息包括该第二终端设备的标识、该第一虚拟网络组的标识和该第二用户面网元的隧道信息，其中，该第二终端设备的标识、该第一虚拟网络组的标识和该第二用户面网元的隧道信息用于在该第一用户面网元上配置第二转发规则，该第二转发规则用于当该第一用户面网元服务的属于该第一虚拟网络组的终端设备给该属于该第一虚拟网络组的第二终端设备发送第二数据包时，该第一用户面网元将该第二数据包发送给该第二用户面网元。基于该方案，可以同时在第一用户面网元和第二用户面网元上配置相应的转发规则，从而可以实现终端设备之间的双向通信。
在一种可能的设计中，在该群组会话管理网元获取该第一用户面网元的隧道信息之前，该方法还包括：群组会话管理网元接收来自该第二会话管理网元的第五消息，该第五消息用于请求该第一转发规则。也就是说，本申请实施例中，可以在用户面网元接收到数据包之后动态触发在该用户面网元上创建转发规则，不需要在会话建立过程中创建转发规则，从而简化了会话建立的流程。
第二方面，提供了一种虚拟网络通信方法，该方法包括：在属于第一虚拟网络组的第二终端设备建立会话的过程中，第二会话管理网元向群组会话管理网元发送第一消息，该第一消息包括该第二终端设备的标识和该第二会话管理网元的标识；第二会话管理网元接收来自该群组会话管理网元的第二消息，该第二消息包括属于该第一虚拟网络组的第一终端设备的标识、该第一虚拟网络组的标识和为该属于该第一虚拟网络组的第一终端设备服务的第一用户面网元的隧道信息，其中，该第一用户面网元由第一会话管理网元管理；第二会话管理网元根据该第一终端设备的标识、该第一虚拟网络组的标识和该第一用户面网元的隧道信息在该第二会话管理网元管理的第二用户面网元上配置第一转发规则，该第一转发规则用于当该第二用户面网元服务的属于该第一虚拟网络组的终端设备给该属于该第一虚拟网络组的第一终端设备发送第一数据包时，该第二用户面网元将该第一数据包发送给该第一用户面网元。本申请实施例中，由于群组会话管理网元可以通过第二会话管理网元在第二用户面网元上配置第一转发规则，该第一转发规则用于当该第二用户面网元服务的属于该第一虚拟网络组的终端设备给该属于第一虚拟网络组的第一终端设备发送第一数据包时，该第二用户面网元将该第一数据包发送给该第一用户面网元。因此基于该方案，可以解决跨会话管理网元实现虚拟网络服务的私有通信。
在一种可能的设计中，在该第二会话管理网元接收来自该群组会话管理网元的第二消息之前，该方法还包括：第二会话管理网元接收来自该第二用户面网元的第三消息，该第三消息用于请求该第一转发规则；第二会话管理网元确定该第二会话管理网元上不存在该第一转发规则；第二会话管理网元向该群组会话管理网元发送第四消息，该第四消息用于请求该第一转发规则。也就是说，本申请实施例中，可以在用户面网元接收到数据包之后动态触发在该用户面网元上创建转发规则，不需要在会话建立过程中创建转发规则，从而简化了会话建立的流程。
在一种可能的设计中，该第一消息还包括该第二终端设备所属的该第一虚拟网络组的标识。
在一种可能的设计中，该第一消息还包括为该属于第一虚拟网络组的第二终端设备服务的该第二用户面网元的隧道信息。即，第二会话管理网元可以在属于第一虚拟网络组的 第二终端设备建立会话的过程中，向群组会话管理网元上报服务第二终端设备的第二用户面网元的隧道信息，以使得群组会话管理网元可以存储第二用户面网元的隧道信息。进而，在用户面网元上创建转发规则时，群组会话管理网元可以直接获取存储的为该属于第一虚拟网络组的第二终端设备服务的该第二用户面网元的隧道信息，简化了转发规则的创建流程。
在一种可能的设计中，在该第二会话管理网元接收来自该群组会话管理网元的第二消息之前，该方法还包括：第二会话管理网元接收来自该群组会话管理网元的第五消息，该第五消息用于请求为该属于第一虚拟网络组的第二终端设备建立隧道；第二会话管理网元向该群组会话管理网元发送为该属于第一虚拟网络组的第二终端设备服务的该第二用户面网元的隧道信息。基于该方案，群组会话管理网元可以获取为该属于第一虚拟网络组的第二终端设备服务的该第二用户面网元的隧道信息，进而可以向第二会话管理网元发送包括属于该第一虚拟网络组的第一终端设备的标识、该第一虚拟网络组的标识和为该属于该第一虚拟网络组的第一终端设备服务的第一用户面网元的隧道信息的第二消息，从而在第二用户面网元上配置第一转发规则。
第三方面，提供了一种通信装置用于实现上述各种方法。该通信装置可以为上述第一方面中的群组会话管理网元，或者包含上述群组会话管理网元的装置。或者，该通信装置可以为上述第二方面中的第二会话管理网元，或者包含上述第二会话管理网元的装置。该通信装置包括实现上述方法相应的模块、单元、或手段(means),该模块、单元、或means可以通过硬件实现，软件实现，或者通过硬件执行相应的软件实现。该硬件或软件包括一个或多个与上述功能相对应的模块或单元。
第四方面，提供了一种通信装置，包括：处理器和存储器；该存储器用于存储计算机指令，当该处理器执行该指令时，以使该通信装置执行上述任一方面所述的方法。该通信装置可以为上述第一方面中的群组会话管理网元，或者包含上述群组会话管理网元的装置。或者，该通信装置可以为上述第二方面中的第二会话管理网元，或者包含上述第二会话管理网元的装置。
第五方面，提供了一种通信装置，包括：处理器；该处理器用于与存储器耦合，并读取存储器中的指令之后，根据该指令执行如上述任一方面所述的方法。该通信装置可以为上述第一方面中的群组会话管理网元，或者包含上述群组会话管理网元的装置。或者，该通信装置可以为上述第二方面中的第二会话管理网元，或者包含上述第二会话管理网元的装置。
第六方面，提供了一种计算机可读存储介质，该计算机可读存储介质中存储有指令，当其在计算机上运行时，使得计算机可以执行上述任一方面所述的方法。
第七方面，提供了一种包含指令的计算机程序产品，当其在计算机上运行时，使得计算机可以执行上述任一方面所述的方法。
第八方面，提供了一种通信装置(例如，该通信装置可以是芯片或芯片系统)，该通信装置包括处理器，用于实现上述任一方面中所涉及的功能。在一种可能的设计中，该通信装置还包括存储器，该存储器，用于保存必要的程序指令和数据。该通信装置是芯片系统时，可以由芯片构成，也可以包含芯片和其他分立器件。
其中，第三方面至第八方面中任一种设计方式所带来的技术效果可参见上述第一方面 或第二方面中不同设计方式所带来的技术效果，此处不再赘述。
第九方面，提供了一种虚拟网络通信方法，该方法包括：群组会话管理网元获取为属于第一虚拟网络组的第一终端设备服务的第一用户面网元的隧道信息，其中，该第一用户面网元由第一会话管理网元管理；群组会话管理网元向第二会话管理网元发送第一消息，该第一消息包括该第一终端设备的标识、该第一虚拟网络组的标识和该第一用户面网元的隧道信息；第二会话管理网元接收来自该群组会话管理网元的该第一消息，并根据该第一终端设备的标识、该第一虚拟网络组的标识和该第一用户面网元的隧道信息，在该第二会话管理网元管理的第二用户面网元上配置第一转发规则，该第一转发规则用于当该第二用户面网元服务的属于该第一虚拟网络组的终端设备给该属于第一虚拟网络组的第一终端设备发送第一数据包时，该第二用户面网元将该第一数据包发送给该第一用户面网元。
在一种可能的设计中，该方法还包括：在属于第一虚拟网络组的第一终端设备建立会话的过程中，第一会话管理网元向群组会话管理网元发送第二消息，该第二消息包括该第一终端设备的标识和该第一会话管理网元的标识；群组会话管理网元接收来自该第一会话管理网元的该第二消息，并存储该第一终端设备的标识和该第一会话管理网元的标识的映射关系。
在一种可能的设计中，该第二消息还包括该第一终端设备所属的该第一虚拟网络组的标识以及为该属于第一虚拟网络组的第一终端设备服务的该第一用户面网元的隧道信息中的至少一个；群组会话管理网元存储该第一终端设备的标识和该第一会话管理网元的标识的映射关系，包括：群组会话管理网元存储该第一虚拟网络组的标识以及该第一用户面网元的隧道信息中的至少一个、该第一终端设备的标识和该第一会话管理网元的标识的映射关系。
在一种可能的设计中，该群组会话管理网元获取为属于第一虚拟网络组的第一终端设备服务的第一用户面网元的隧道信息，包括：在该映射关系中包括该第一用户面网元的隧道信息的情况下，群组会话管理网元获取存储的为该属于第一虚拟网络组的第一终端设备服务的该第一用户面网元的隧道信息。
在一种可能的设计中，该群组会话管理网元获取为属于第一虚拟网络组的第一终端设备服务的第一用户面网元的隧道信息，包括：在该映射关系中不包括该第一用户面网元的隧道信息的情况下，群组会话管理网元向该第一会话管理网元发送第三消息，该第三消息用于请求为该属于第一虚拟网络组的第一终端设备建立隧道；该群组会话管理网元接收来自该第一会话管理网元的为该属于第一虚拟网络组的第一终端设备服务的该第一用户面网元的隧道信息。
在一种可能的设计中，该方法还包括：第二会话管理网元向该群组会话管理网元发送为属于该第一虚拟网络组的第二终端设备服务的该第二用户面网元的隧道信息；群组会话管理网元接收来自该第二会话管理网元的为属于该第一虚拟网络组的第二终端设备服务的该第二用户面网元的隧道信息；群组会话管理网元向该第一会话管理网元发送第四消息，该第四消息包括该第二终端设备的标识、该第一虚拟网络组的标识和该第二用户面网元的隧道信息；第一会话管理网元接收来自该群组会话管理网元的该第四消息，并根据该第二终端设备的标识、该第一虚拟网络组的标识和该第二用户面网元的隧道信息在该第一用户面网元上配置第二转发规则，该第二转发规则用于当该第一用户面网元服务的属于该第一 虚拟网络组的终端设备给该属于该第一虚拟网络组的第二终端设备发送第二数据包时，该第一用户面网元将该第二数据包发送给该第二用户面网元。
在一种可能的设计中，该方法还包括：第二会话管理网元接收来自该第二用户面网元的第五消息，该第五消息用于请求该第一转发规则；第二会话管理网元在确定该第二会话管理网元上不存在该第一转发规则之后，向该群组会话管理网元发送第六消息，该第六消息用于请求该第一转发规则；群组会话管理网元在获取该第一用户面网元的隧道信息之前，接收来自该第二会话管理网元的该第六消息。
其中，第九方面中任一种设计方式所带来的技术效果可参见上述第一方面或第二方面中不同设计方式所带来的技术效果，此处不再赘述。
第十方面，提供了一种虚拟网络通信方法，该方法包括：群组会话管理网元向第二会话管理网元发送第一消息，该第一消息用于请求为属于第一虚拟网络组的第二终端设备建立隧道；第二会话管理网元接收来自该群组会话管理网元的该第一消息，并获取为该第二终端设备服务的第二用户面网元的隧道信息之后，向该第一会话管理网元发送该第二用户面网元的隧道信息、该第一虚拟网络组的标识和该第二终端设备的标识，其中，该第二用户面网元由该第二会话管理网元管理；第一会话管理网元接收来自该第二会话管理网元的该第二用户面网元的隧道信息、该第一虚拟网络组的标识和该第二终端设备的标识，并根据该第一虚拟网络组的标识、该第二用户面网元的隧道信息和该第二终端设备的标识，在该第一会话管理网元管理的第一用户面网元上配置第一转发规则，该第一转发规则用于当该第一用户面网元服务的属于该第一虚拟网络组的终端设备给该第二终端设备发送数据包时，该第一用户面网元将该数据包发送给该第二用户面网元。基于该方案，通过在第一会话管理网元和第二会话管理网元之间直接交换用户面网元的隧道信息，可以简化隧道建立流程以及转发规则的建立流程。
第十一方面，提供了一种通信系统，该通信系统包括：群组会话管理网元和第二会话管理网元；该群组会话管理网元，用于获取为属于第一虚拟网络组的第一终端设备服务的第一用户面网元的隧道信息，其中，该第一用户面网元由第一会话管理网元管理；该群组会话管理网元，还用于向该第二会话管理网元发送第一消息，该第一消息包括该第一终端设备的标识、该第一虚拟网络组的标识和该第一用户面网元的隧道信息；该第二会话管理网元，用于接收来自该群组会话管理网元的该第一消息，并根据该第一终端设备的标识、该第一虚拟网络组的标识和该第一用户面网元的隧道信息，在该第二会话管理网元管理的第二用户面网元上配置第一转发规则，该第一转发规则用于当该第二用户面网元服务的属于该第一虚拟网络组的终端设备给该属于第一虚拟网络组的第一终端设备发送第一数据包时，该第二用户面网元将该第一数据包发送给该第一用户面网元。
在一种可能的设计中，该通信系统还包括该第一会话管理网元；该第一会话管理网元，用于在该属于第一虚拟网络组的第一终端设备建立会话的过程中，向该群组会话管理网元发送第二消息，该第二消息包括该第一终端设备的标识和该第一会话管理网元的标识；该群组会话管理网元，还用于接收来自该第一会话管理网元的该第二消息，并存储该第一终端设备的标识和该第一会话管理网元的标识的映射关系。
在一种可能的设计中，该第二消息还包括该第一终端设备所属的该第一虚拟网络组的标识以及为该属于第一虚拟网络组的第一终端设备服务的该第一用户面网元的隧道信息 中的至少一个；该群组会话管理网元，还用于存储该第一终端设备的标识和该第一会话管理网元的标识的映射关系，包括：该群组会话管理网元，还用于存储该第一虚拟网络组的标识以及该第一用户面网元的隧道信息中的至少一个、该第一终端设备的标识和该第一会话管理网元的标识的映射关系。
在一种可能的设计中，该群组会话管理网元，用于获取为属于第一虚拟网络组的第一终端设备服务的第一用户面网元的隧道信息，包括：该群组会话管理网元，用于在该映射关系中包括该第一用户面网元的隧道信息的情况下，获取存储的为该属于第一虚拟网络组的第一终端设备服务的该第一用户面网元的隧道信息。
在一种可能的设计中，该群组会话管理网元，用于获取为属于第一虚拟网络组的第一终端设备服务的第一用户面网元的隧道信息，包括：该群组会话管理网元，用于在该映射关系中不包括该第一用户面网元的隧道信息的情况下，向该第一会话管理网元发送第三消息，该第三消息用于请求为该属于第一虚拟网络组的第一终端设备建立隧道；该群组会话管理网元，还用于接收来自该第一会话管理网元的为该属于第一虚拟网络组的第一终端设备服务的该第一用户面网元的隧道信息。
在一种可能的设计中，该第二会话管理网元，还用于向该群组会话管理网元发送为属于该第一虚拟网络组的第二终端设备服务的该第二用户面网元的隧道信息；该群组会话管理网元，还用于接收来自该第二会话管理网元的为属于该第一虚拟网络组的第二终端设备服务的该第二用户面网元的隧道信息；该群组会话管理网元，还用于向该第一会话管理网元发送第四消息，该第四消息包括该第二终端设备的标识、该第一虚拟网络组的标识和该第二用户面网元的隧道信息；该第一会话管理网元，还用于接收来自该群组会话管理网元的该第四消息，并根据该第二终端设备的标识、该第一虚拟网络组的标识和该第二用户面网元的隧道信息在该第一用户面网元上配置第二转发规则，该第二转发规则用于当该第一用户面网元服务的属于该第一虚拟网络组的终端设备给该属于该第一虚拟网络组的第二终端设备发送第二数据包时，该第一用户面网元将该第二数据包发送给该第二用户面网元。
在一种可能的设计中，该第二会话管理网元，还用于接收来自该第二用户面网元的第五消息，该第五消息用于请求该第一转发规则；该第二会话管理网元，还用于在确定该第二会话管理网元上不存在该第一转发规则之后，向该群组会话管理网元发送第六消息，该第六消息用于请求该第一转发规则；该群组会话管理网元，还用于在获取该第一用户面网元的隧道信息之前，接收来自该第二会话管理网元的该第六消息。
其中，第十一方面中任一种设计方式所带来的技术效果可参见上述第一方面或第二方面中不同设计方式所带来的技术效果，此处不再赘述。
第十二方面，提供了一种通信系统，该通信系统包括：群组会话管理网元、第一会话管理网元和第二会话管理网元；该群组会话管理网元，用于向该第二会话管理网元发送第一消息，该第一消息用于请求为属于第一虚拟网络组的第二终端设备建立隧道；该第二会话管理网元，用于接收来自该群组会话管理网元的该第一消息，并获取为该第二终端设备服务的第二用户面网元的隧道信息之后，向该第一会话管理网元发送该第二用户面网元的隧道信息、该第一虚拟网络组的标识和该第二终端设备的标识，其中，该第二用户面网元由该第二会话管理网元管理；该第一会话管理网元，用于接收来自该第二会话管理网元的该第二用户面网元的隧道信息、该第一虚拟网络组的标识和该第二终端设备的标识，并根 据该第一虚拟网络组的标识、该第二用户面网元的隧道信息和该第二终端设备的标识，在该第一会话管理网元管理的第一用户面网元上配置第一转发规则，该第一转发规则用于当该第一用户面网元服务的属于该第一虚拟网络组的第一终端设备给该第二终端设备发送数据包时，该第一用户面网元将该数据包发送给该第二用户面网元。
其中，第十二方面所带来的技术效果可参见上述第十方面所带来的技术效果，此处不再赘述。
附图说明
图1为本申请实施例提供的通信系统的架构示意图一；
图2为本申请实施例提供的通信系统在5G网络的应用示意图；
图3为现有的5GVN服务的用户面架构示意图；
图4为本申请实施例提供的通信设备的硬件结构示意图；
图5为本申请实施例提供的虚拟网络通信方法流程示意图一；
图6为本申请实施例提供的虚拟网络通信方法流程示意图二；
图7为本申请实施例提供的群组会话管理网元的结构示意图；
图8为本申请实施例提供的第二会话管理网元的结构示意图。
具体实施方式
下面将结合本申请实施例中的附图，对本申请实施例中的技术方案进行描述。其中，在本申请的描述中，除非另有说明，“/”表示前后关联的对象是一种“或”的关系，例如，A/B可以表示A或B；本申请中的“和/或”仅仅是一种描述关联对象的关联关系，表示可以存在三种关系，例如，A和/或B，可以表示：单独存在A，同时存在A和B，单独存在B这三种情况，其中A,B可以是单数或者复数。并且，在本申请的描述中，除非另有说明，“多个”是指两个或多于两个。“以下至少一项(个)”或其类似表达，是指的这些项中的任意组合，包括单项(个)或复数项(个)的任意组合。例如，a，b，或c中的至少一项(个)，可以表示：a，b，c，a-b，a-c，b-c，或a-b-c，其中a，b，c可以是单个，也可以是多个。另外，为了便于清楚描述本申请实施例的技术方案，在本申请的实施例中，采用了“第一”、“第二”等字样对功能和作用基本相同的相同项或相似项进行区分。本领域技术人员可以理解“第一”、“第二”等字样并不对数量和执行次序进行限定，并且“第一”、“第二”等字样也并不限定一定不同。同时，在本申请实施例中，“示例性的”或者“例如”等词用于表示作例子、例证或说明。本申请实施例中被描述为“示例性的”或者“例如”的任何实施例或设计方案不应被解释为比其它实施例或设计方案更优选或更具优势。确切而言，使用“示例性的”或者“例如”等词旨在以具体方式呈现相关概念，便于理解。
此外，本申请实施例描述的网络架构以及业务场景是为了更加清楚的说明本申请实施例的技术方案，并不构成对于本申请实施例提供的技术方案的限定，本领域普通技术人员可知，随着网络架构的演变和新业务场景的出现，本申请实施例提供的技术方案对于类似的技术问题，同样适用。
如图1所示，为本申请实施例提供的一种通信系统10，该通信系统10包括群组会话管理网元、与群组会话管理网元通信的会话管理网元1和会话管理网元2、由会话管理网元1管理的用户面网元1、由会话管理网元2管理的用户面网元2、用户面网元1服务的属于第一虚拟网络组的终端设备1以及用户面网元2服务的属于第一虚拟网络组的终端设 备2。
需要说明的是，图1中仅是示例性的画出两个会话管理网元(即会话管理网元1和会话管理网元2)。当然，与群组会话管理网元通信的会话管理网元还可能有其它，如会话管理网元3或者会话管理网元4等，本申请实施例对此不作具体限定。
需要说明的是，图1中仅是示例性的以一个会话管理网元与一个用户面网元通信为例进行说明，如会话管理网元1与用户面网元1通信，会话管理网元2与用户面网元2通信。当然，一个会话管理网元还可能与多个用户面网元通信，如会话管理网元1还可以与用户面网元3或者用户面网元4通信；或者，会话管理网元2还可以与用户面网元5通信等，本申请实施例对此不作具体限定。
需要说明的是，图1中仅是示例性的以一个用户面网元服务属于第一虚拟网络组的一个终端设备为例进行说明，如用户面网元1服务属于第一虚拟网络组的终端设备1，用户面网元2服务属于第一虚拟网络组的终端设备2。当然，一个用户面网元可能服务属于第一虚拟网络组的多个终端设备，如用户面网元1还可能服务属于第一虚拟网络组的终端设备3。此外，一个用户面网元也可能服务属于多个虚拟网络组终端设备，如用户面网元1还可能服务属于第二虚拟网络组的终端设备等，本申请实施例对此不作具体限定。
需要说明的是，图1所示的各个网元之间的通信可以是直接通信，也可以是通过其它设备的转发进行通信，本申请实施例对此不作具体限定。
可选的，图1中的会话管理网元1也可以称之为第一会话管理网元，图1中的会话管理网元2也可以称之为第二会话管理网元，图1中的用户面网元1也可以称之为第一用户面网元，图1中的用户面网元2也可以称之为第二用户面网元，图1中的终端设备1也可以称之为第一终端设备，图1中的终端设备2也可以称之为第二终端设备；或者，反之，图1中的会话管理网元2也可以称之为第一会话管理网元，图1中的会话管理网元1也可以称之为第二会话管理网元，图1中的用户面网元2也可以称之为第一用户面网元，图1中的用户面网元1也可以称之为第二用户面网元，图1中的终端设备2也可以称之为第一终端设备，图1中的终端设备1也可以称之为第二终端设备，本申请实施例对此不作具体限定。
其中，基于图1所示的通信系统进行虚拟网络通信的方法可参考后续方法实施例，在此不再赘述。
可选的，图1所示的通信系统可以应用于目前的5G网络或者未来的其他网络，本申请实施例对此不作具体限定。
示例性的，如图2所示，若图1所示的通信系统应用于目前的5G网络，则图1中的会话管理网元1所对应的网元或者实体可以为5G网络架构中的SMF1网元；图1中的会话管理网元2所对应的网元或者实体可以为5G网络架构中的SMF2网元；图1中的用户面网元1所对应的网元或者实体可以为5G网络架构中的UPF1网元；图1中的用户面网元2所对应的网元或者实体可以为5G网络架构中的UPF2网元，图1中的群组会话管理网元所对应的网元或者实体可以为5G网络架构中的群组SMF(group SMF，GSMF)。其中，上述的虚拟网络可以为5GVN。此外，从表达方式上看，5GVN也可以称之为5GLAN，LAN，LAN-类型服务(type service)，LAN-VN，5GLAN-type service，5GLAN-VN，5GLAN组(group)，或者LAN group等；GSMF网元还可以称之为5GLAN SMF(5GLAN SMF， LSMF)网元，5GVN SMF网元，5GLAN路径管理功能(path management function，PMF)网元，5GVN PMF网元，5GLAN地址解析功能(address resolution function，ARF)网元，5GVN ARF网元，5GLAN群组控制功能(group controller/control function，GCF)网元，5GVN GCF网元，5GLAN配置控制功能(configuration controller/control function，CCF)网元，5GVN CCF网元，5GLAN服务管理功能(5GLAN-type service management function，5LSMF)网元，5GVN服务管理功能(5GVN-type service management function，5VSMF)网元，5GLAN虚拟网络管理功能(5GLAN-VN management function，5LVMF)网元，5GVN管理功能网元，5GLAN虚拟网络控制器(5GLAN-VN controller，5LVC)，5GVN控制器，5GLAN控制器(5GLAN controller，5LC)，5GLAN服务控制器(5GLAN-type service controller，5LSC)等，本申请实施例对5GVN以及GSMF网元的名字不作具体限定。
其中，本申请实施例中，GSMF网元用于管理5GVN的拓扑结构。示例性的，GSMF网元能够根据终端设备接入5GVN的位置为5GVN的拓扑结构动态添加SMF网元的标识、UPF网元的标识(可选的)、UPF网元的隧道信息(可选的)、以及终端设备的标识；或者，GSMF网元能够根据终端设备的移动情况动态更新SMF网元的标识、UPF网元的标识(可选的)或UPF网元的隧道信息(可选的)；或者，GSMF网元能够根据终端设备在5GVN中的地址变化，如添加新地址，删除旧地址等，动态更新5GVN中的UPF网元上的转发规则，确保能够满足5GVN的私有通信，即终端设备和终端设备之间的点对点数据传输；或者，GSMF网元在检测到为某个终端设备服务的SMF网元与为其他终端设备的SMF网元不同时，GSMF网元通过协商两个SMF网元来更新对应的UPF网元上的转发规则。可选的，若某个UPF网元首次为终端设备提供5GVN服务，则需要在更新对应的UPF网元上的转发规则的同时，建立该UPF网元与其他UPF网元之间的隧道(也可以称之为转发路径)。
可选的，本申请实施例中，UPF网元的隧道信息包括UPF网元的下一代网络(next generation，N)19接口(简称N19)隧道信息或路径信息，其中N19为UPF网元与UPF网元之间的接口名称，也可以为其他接口名字，比如N9隧道信息，本发明不做限定。该UPF网元的隧道信息对应的隧道或转发路径可以采用虚拟本地局域网(virtual LAN，VLAN)，虚拟扩展局域网(virtual extensible LAN，VxLAN)，通用分组无线业务(general packet radio service，GPRS)隧道协议用户面(GPRS tunneling protocol-user plane，GTP-U)，通用路由封装协议(generic routing encapsulation，GRE)或者IP隧道方式来构建。上述构建方式可以是动态的，也可以在网络中预配置好的，本申请实施例对此不作具体限定。其中，采用不同的构建方式，对应的隧道信息并不相同。例如采用VLAN方式构建时，隧道信息可以是UPF ID、UPF ID+虚拟本地局域网标识(VLAN ID，VID)或者媒体接入控制(media access control，MAC)+VID；或者，例如采用VxLAN方式构建时，隧道信息可以是UPF ID、UPF ID+VID、IP地址+VID、或者IP地址+端口号(port)+VID；或者，例如采用GTP-U方式构建时，隧道信息可以是UPF ID、UPF ID+隧道端点标识(tunnel endpoint identifier，TEID)、IP地址+TEID、或者IP地址+port+TEID；或者，例如采用GRE方式构建时，隧道信息可以是UPF ID、UPF ID+密钥(key)、IP地址+key、或者IP地址+port+key；或者，采用IP隧道方式构建时，隧道信息可以是UPF ID、IP地址、或者IP地址+port。其中，若隧道信息中有UPF ID，UPF ID可以是MAC地址或者IP地址，或者IP地址+port， 或者SMF网元或者UPF网元可以根据UPF ID确定对应的MAC地址或者IP地址，或者IP地址+port，在此统一说明，以下不再赘述。
此外，如图2所示，目前的5G网络还可以包括接入设备1、接入设备2、接入和移动性管理功能(core access and mobility management function，AMF)网元、认证服务器功能(authentication server function，AUSF)网元、网络切片选择功能(network slice selection function，NSSF)网元、网络开放功能(network exposure function，NEF)网元、网络功能存储功能(network exposure function Repository Function，NRF)网元、策略控制功能(policy control function，PCF)网元、统一数据管理(unified data management，UDM)网元以及应用功能(application function，AF)网元等，本申请实施例对此不作具体限定。
可选的，本申请实施例中的GSMF网元可以集成在现在有的网元中，如集成在UDM中或者统一数据库(unified data repository，UDR)网元中，本申请实施例对此不作具体限定。
其中，如图2所示，终端设备1通过接入设备1接入5G网络，终端设备1通过N1接口(简称N1)与AMF网元通信；终端设备2通过接入设备2接入5G网络，终端2通过N1与AMF网元通信；接入设备1或接入设备2通过N2接口(简称N2)与AMF网元通信；接入设备1通过N3接口(简称N3)与UPF1网元通信；接入设备2通过N3与UPF2网元通信，SMF1网元通过N4接口(简称N4)与UPF1网元通信，SMF2网元通过N4与UPF2网元通信，UPF1网元通过N19接口(简称N19)与UPF2网元通信，或者，UPF1网元或UPF2网元分别通过N6接口(简称N6)接入数据网络。此外，图2所示的AUSF网元、AMF网元、SMF网元(包括SMF1网元和SMF2网元)、NSSF网元、NEF网元、NRF网元、PCF网元、UDM网元、AF网元或者GSMF网元等控制面网元也可以采用服务化接口进行交互。比如，AUSF网元对外提供的服务化接口可以为Nausf；AMF网元对外提供的服务化接口可以为Namf；SMF网元对外提供的服务化接口可以为Nsmf；NSSF网元对外提供的服务化接口可以为Nnssf；NEF网元对外提供的服务化接口可以为Nnef；NRF网元对外提供的服务化接口可以为Nnrf；PCF网元对外提供的服务化接口可以为Npcf；UDM网元对外提供的服务化接口可以为Nudm；AF网元对外提供的服务化接口可以为Naf，GSMF网元对外提供的服务化接口可以为Ngsmf。相关描述可以参考23501标准中的5G系统架构(5G system architecture)图，在此不予赘述。
图3所示为现有的5GVN服务的用户面架构示意图。其中，终端设备建立到提供5GVN服务的UPF网元的会话，从而接入到提供5GVN服务的UPF网元。如上所述，提供5GVN服务的UPF网元可以通过N6与数据网络中现存的LAN互通，例如和LAN中的个人计算机(personal computer，PC)通信；或者，提供5GVN服务的UPF网元也可以通过内部UPF网元与UPF网元之间的连接关联不同终端设备的会话，实现私有通信，本申请实施例对此不作具体限定。
可选的，本申请实施例中的终端设备，可以是用于实现无线通信功能的设备，例如终端或者可用于终端中的芯片等。其中，终端可以是LTE系统、NR系统或者未来演进的PLMN中的用户设备(user equipment，UE)、接入终端、终端单元、终端站、移动站、移动台、远方站、远程终端、移动设备、无线通信设备、终端代理或终端装置等。接入终端可以是蜂窝电话、无绳电话、会话启动协议(session initiation protocol，SIP)电话、无线本地环 路(wireless local loop，WLL)站、个人数字处理(personal digital assistant，PDA)、具有无线通信功能的手持设备、计算设备或连接到无线调制解调器的其它处理设备、车载设备或可穿戴设备，虚拟现实(virtual reality，VR)终端设备、增强现实(augmented reality，AR)终端设备、工业控制(industrial control)中的无线终端、无人驾驶(self driving)中的无线终端、远程医疗(remote medical)中的无线终端、智能电网(smart grid)中的无线终端、运输安全(transportation safety)中的无线终端、智慧城市(smart city)中的无线终端、智慧家庭(smart home)中的无线终端等。终端可以是移动的，也可以是固定的。
可选的，本申请实施例中所涉及的接入设备指的是接入核心网的设备，例如可以是基站，宽带网络业务网关(broadband network gateway，BNG)，汇聚交换机，非第三代合作伙伴计划(3rd generation partnership project，3GPP)接入设备等。基站可以包括各种形式的基站，例如：宏基站，微基站(也称为小站)，中继站，接入点等。
可选的，本申请实施例图1中的群组会话管理网元或者会话管理网元1或者会话管理网元2可以由一个设备实现，也可以由多个设备共同实现，还可以是一个设备内的一个功能模块，本申请实施例对此不作具体限定。可以理解的是，上述功能既可以是硬件设备中的网络元件，也可以是在专用硬件上运行的软件功能，或者是平台(例如，云平台)上实例化的虚拟化功能。
例如，本申请实施例图1中的群组会话管理网元或者会话管理网元1或者会话管理网元2可以通过图4中的通信设备来实现。图4所示为本申请实施例提供的通信设备的硬件结构示意图。该通信设备400包括处理器401，通信线路402，存储器403以及至少一个通信接口(图4中仅是示例性的以包括通信接口404为例进行说明)。
处理器401可以是一个通用中央处理器(central processing unit，CPU)，微处理器，特定应用集成电路(application-specific integrated circuit，ASIC)，或一个或多个用于控制本申请方案程序执行的集成电路。
通信线路402可包括一通路，在上述组件之间传送信息。
通信接口404，使用任何收发器一类的装置，用于与其他设备或通信网络通信，如以太网，无线接入网(radio access network，RAN)，无线局域网(wireless local area networks，WLAN)等。
存储器403可以是只读存储器(read-only memory，ROM)或可存储静态信息和指令的其他类型的静态存储设备，随机存取存储器(random access memory，RAM)或者可存储信息和指令的其他类型的动态存储设备，也可以是电可擦可编程只读存储器(electrically erasable programmable read-only memory，EEPROM)、只读光盘(compact disc read-only memory，CD-ROM)或其他光盘存储、光碟存储(包括压缩光碟、激光碟、光碟、数字通用光碟、蓝光光碟等)、磁盘存储介质或者其他磁存储设备、或者能够用于携带或存储具有指令或数据结构形式的期望的程序代码并能够由计算机存取的任何其他介质，但不限于此。存储器可以是独立存在，通过通信线路402与处理器相连接。存储器也可以和处理器集成在一起。
其中，存储器403用于存储执行本申请方案的计算机执行指令，并由处理器401来控制执行。处理器401用于执行存储器403中存储的计算机执行指令，从而实现本申请下述实施例提供的虚拟网络通信方法。
可选的，本申请实施例中的计算机执行指令也可以称之为应用程序代码，本申请实施例对此不作具体限定。
在具体实现中，作为一种实施例，处理器401可以包括一个或多个CPU，例如图4中的CPU0和CPU1。
在具体实现中，作为一种实施例，通信设备400可以包括多个处理器，例如图4中的处理器401和处理器408。这些处理器中的每一个可以是一个单核(single-CPU)处理器，也可以是一个多核(multi-CPU)处理器。这里的处理器可以指一个或多个设备、电路、和/或用于处理数据(例如计算机程序指令)的处理核。
在具体实现中，作为一种实施例，通信设备400还可以包括输出设备405和输入设备406。输出设备405和处理器401通信，可以以多种方式来显示信息。例如，输出设备405可以是液晶显示器(liquid crystal display，LCD)，发光二级管(light emitting diode，LED)显示设备，阴极射线管(cathode ray tube，CRT)显示设备，或投影仪(projector)等。输入设备406和处理器401通信，可以以多种方式接收用户的输入。例如，输入设备406可以是鼠标、键盘、触摸屏设备或传感设备等。
上述的通信设备400可以是一个通用设备或者是一个专用设备。在具体实现中，通信设备400可以是台式机、便携式电脑、网络服务器、掌上电脑(personal digital assistant，PDA)、移动手机、平板电脑、无线终端设备、嵌入式设备或有图4中类似结构的设备。本申请实施例不限定通信设备400的类型。
下面将结合图1至图4对本申请实施例提供的虚拟网络通信方法进行具体阐述。
需要说明的是，本申请下述实施例中各个网元之间的消息名字或消息中各参数的名字等只是一个示例，具体实现中也可以是其他的名字，本申请实施例对此不作具体限定。
首先，以图1所示的通信系统应用于如图2所示的5G网络，会话管理网元1为SMF1网元，会话管理网元2为SMF2网元，用户面网元1为UPF1网元，用户面网元2为UPF2网元为例。则如图5所示，为本申请实施例提供的一种虚拟网络通信方法，该虚拟网络通信方法包括如下步骤：
S501、终端设备1向SMF1网元发送会话建立请求1。SMF1网元接收来自终端设备1的会话建立请求1。
其中，会话建立请求1中包括终端设备1的标识，可选的，该会话建立请求1中还可以包括终端设备1所属的第一5GVN组的标识。
需要说明的是，虽然未示出，但是，终端设备1向SMF1网元发送的会话建立请求1是通过AMF网元发送给SMF1网元的，在此统一说明，以下不再赘述。
可选的，本申请实施例中，会话建立请求1中携带的终端设备1的标识例如可以是永久标识，如签约永久标识(subscription permanent identifier，SUPI)，通用公共标识(generic public subscription identifier，GPSI)，国际移动用户识别码(international mobile subscriber identification number，IMSI)移动台综合业务数字网号码(mobile station integrated services digital network number，MSISDN)，全球唯一临时标识(global unique temporary identifier，GUTI)，数据网络相关的身份标识(例如为网络接入标识(network access identifier，NAI)或者本地局域网特定的用户标识等；或者，会话建立请求1中携带的终端设备1的标识也可以是终端设备1的地址信息，例如可以是第四版互联网协议(internet protocol version4， IPv4)地址，第六版互联网协议(internet protocol version6，Ipv6)IPv6地址，MAC地址，或者MAC地址+VID等，本申请实施例对此不作具体限定。
可选的，本申请实施例中，第一5GVN组的标识用于标识第一5GVN组。其中，一个5GVN可以对应一个5GVN组，该情况下，5GVN组的标识即为5GVN的标识；或者，一个5GVN下可以有多个组，该情况下，5GVN组的标识包括5GVN的标识和组标识，在此统一说明，以下不再赘述。
可选的，从格式上来说，5GVN组的标识可以是特殊的域名(如数据网络名称(data network name，DNN))、全量域名(fully qualified domain name，FQDN)、VID、字符串、内部组标识(internal group identifier)、外部组标识(external group identifier)，也可以是序列号等。此外，5GVN组的标识还可采用一些特殊的格式。例如，5GVN组的标识中还可包括提供商信息、运营商信息、网络信息、域信息等信息中的一个或多个，本申请实施例对此不作具体限定。
S502、SMF1网元选择UPF1网元为终端设备1服务，并建立UPF1网元和接入设备1之间的N3隧道，在UPF1网元上建立或配置转发规则为：对于目的地址为终端设备1的地址的数据包，通过对应的N3隧道发送给接入设备1。相关描述可参考现有技术，在此不予赘述。
需要说明的是，若上述步骤S501中未携带终端设备1所属的第一5GVN组的标识，则此时SMF1网元可以根据本地配置或者从其他网元(比如，UDM网元)查询终端设备1所属的第一5GVN组的标识。
可选的，本申请实施例中，SMF1网元或者UPF1网元可以分配UPF1网元的隧道信息，该UPF1网元的隧道信息的相关描述可参考上述实施例中的描述，在此不再赘述。
可选的，本申请实施例中，若步骤S501中的终端设备1的标识为终端设备1的永久标识，此时SMF1网元也可以为终端设备1分配地址信息，其中，终端设备1的地址信息的相关描述可参考上述步骤S501，在此不再赘述。
S503、SMF1网元向GSMF网元发送消息1。GSMF网元接收来自SMF1网元的消息1。
其中，该消息1包括终端设备1的标识和SMF1网元的标识。
示例性的，该消息1例如可以是一个通知消息，本申请实施例对消息1的名字不作具体限定。
可选的，在SMF1网元向GSMF网元发送消息1之前，SMF1网元可能向GSMF网元发送请求消息，该请求消息中包括终端设备1的标识，该请求消息用于根据终端设备1的标识获取终端设备1所属的5GVN组的标识，和/或，用于获取终端设备1的地址信息，本申请实施例对此不作具体限定。
其中，该终端设备1的标识可以是步骤S501中的会话建立请求1中的终端设备1的标识；或者，若步骤S501中的会话建立请求1中的终端设备1的标识为终端设备1的永久标识，则消息1中的终端设备1的标识也可以是SMF1网元或者UPF1网元分配的终端设备1的地址信息，在此统一说明，以下不再赘述。
需要说明的是，本申请实施例中，若GSMF网元可以在接收到消息1之后确定出发送消息1的SMF1网元的标识，则消息1中也可以不携带SMF1网元的标识，在此统一说明， 以下不再赘述。
可选的，该消息1中还可以包括终端设备1所属的第一5GVN组的标识。当然，作为一个示例，若消息1中不包括终端设备1所属的第一5GVN组的标识，则GSMF网元可以根据消息1中的终端设备1的标识、以及GSMF网元中预先存储的终端设备的标识和终端设备所属的5GVN组的标识的映射关系，确定终端设备1所属的第一5GVN组的标识，本申请实施例对此不作具体限定。
可选的，该消息1中还可以包括UPF1网元的标识。
可选的，若上述步骤S502中SMF1网元或者UPF1网元可以分配UPF1网元的隧道信息，则步骤S503中的消息1中还可以包括UPF1网元的隧道信息。
可选的，本申请实施例中，由于GSMF网元用于管理5GVN的拓扑结构，因此GSMF网元接收到消息1之后，可以存储终端设备1的标识、SMF1网元的标识、UPF1网元的标识(可选的)、UPF1网元的隧道信息(可选的)、以及终端设备1所属的第一5GVN组的标识的映射关系。当然，如上所述，终端设备1的标识和终端设备1所属的第一5GVN组的标识的映射关系可能是在终端设备1建立会话之前已经存储在GSMF网元中的，本申请实施例对此不作具体限定。
示例性的，假设终端设备1为首个向GSMF网元上报第一5GVN组的拓扑信息的终端设备，则GSMF网元建立的第一5GVN组的拓扑信息可以如表一所示。
表一
Figure PCTCN2020090662-appb-000001
或者，示例性的，假设终端设备1不是首个向GSMF网元上报第一5GVN组的拓扑信息的终端设备，则GSMF网元更新的第一5GVN组的拓扑信息可以如二或表三所示。
表二
Figure PCTCN2020090662-appb-000002
表三
Figure PCTCN2020090662-appb-000003
需要说明的是，表二以在终端设备1建立会话之前，已经存在终端设备3建立会话， 且为终端设备1服务的UPF网元与为终端设备3服务的UPF网元均为UPF1网元(即不同的终端设备由相同的UPF网元提供服务)为例进行说明。表三以在终端设备1建立会话之前，已经存在终端设备4建立会话，且为终端设备1服务的UPF网元为UPF1网元，为终端设备4服务的UPF网元为UPF3网元，但是UPF1网元和UPF3网元均由SMF1网元管理(即不同的终端设备由同一SMF网元管理的不同UPF网元提供服务)为例进行说明。上述两个场景对应的5GVN内不同终端设备之间通信的方式可参考现有的单SMF网元场景下的通信方式，在此不予赘述。
需要说明的是，上述表一至表三仅是示例性的给出了第一5GVN组的拓扑信息的一种表格存储形式。当然，第一5GVN组的拓扑信息还可能以其他方式存储在GSMF网元上，如上述表一至表三中的任意两列对应存储。示例性的，5GVN组的标识与SMF网元的标识对应存储、SMF网元的标识和UPF网元的标识对应存储、SMF网元的标识和UPF网元的隧道信息对应存储、UPF网元的标识和终端设备的标识对应存储。其中，不论何种存储方式，第一5GVN组的拓扑信息均可以表征出终端设备的标识、终端设备1所属的第一5GVN组的标识、为终端设备服务的UPF网元的标识(可选的)、为终端设备服务的UPF网元的隧道信息(可选的)、以及管理为终端设备服务的UPF网元的SMF网元的标识之间的映射关系，在此统一说明，该说明适用于本申请实施例提供的其它表格，以下不再赘述。
S504、终端设备2向SMF2网元发送会话建立请求2。SMF2网元接收来自终端设备2的会话建立请求2。
其中，会话建立请求2中包括终端设备2的标识。可选的，该会话建立请求2中还可以包括终端设备2所属的第一5GVN组的标识。
其中，步骤S504的相关描述可参考上述步骤S501，在此不再赘述。
S505、SMF2网元选择UPF2网元为终端设备2服务，并建立UPF2网元和接入设备2之间的N3隧道，在UPF2网元上建立或配置转发规则为：对于目的地址为终端设备2的地址的数据包，通过对应的N3隧道发送给接入设备2。相关描述可参考现有技术，在此不予赘述。
需要说明的是，若上述步骤S504中未携带终端设备2所属的第一5GVN组的标识，则此时SMF2网元可以根据本地配置或者从UDM网元查询终端设备2所属的第一5GVN组的标识。
可选的，本申请实施例中，SMF2网元或者UPF2网元可以分配UPF2网元的隧道信息，该UPF2网元的隧道信息的相关描述可参考上述实施例中的描述，在此不再赘述。
可选的，本申请实施例中，若步骤S504中的终端设备2的标识为终端设备2的永久标识，此时SMF2网元也可以为终端设备2分配地址信息，其中，终端设备2的地址信息的相关描述可参考上述步骤S501，在此不再赘述。
S506、SMF2网元向GSMF网元发送消息2。GSMF网元接收来自SMF2网元的消息2。
其中，该消息2包括终端设备2的标识和SMF2网元的标识。
示例性的，该消息2例如可以是一个通知消息，本申请实施例对消息2的名字不作具体限定。
其中，该终端设备2的标识可以是步骤S504中的会话建立请求2中的终端设备2的 标识；或者，若步骤S504中的会话建立请求2中的终端设备2的标识为终端设备2的永久标识，则消息2中的终端设备2的标识也可以是SMF2网元或UPF2网元分配的终端设备2的地址信息，在此统一说明，以下不再赘述。
需要说明的是，本申请实施例中，若GSMF网元可以在接收到消息2之后确定出发送消息2的SMF2网元的标识，则消息2中也可以不携带SMF2网元的标识，在此统一说明，以下不再赘述。
可选的，该消息2中还可以包括终端设备2所属的第一5GVN组的标识。当然，若消息2中不包括终端设备2所属的第一5GVN组的标识，则GSMF网元可以根据消息2中的终端设备2的标识、以及GSMF网元中预先存储的终端设备的标识和终端设备所属的5GVN组的标识的映射关系，确定终端设备2所属的第一5GVN组的标识，本申请实施例对此不作具体限定。
可选的，该消息2中还可以包括UPF2网元的标识。
可选的，若上述步骤S505中SMF2网元或者UPF2网元可以分配UPF2网元的隧道信息，则步骤S506中的消息2中还可以包括UPF2网元的隧道信息。
可选的，本申请实施例中，由于GSMF网元用于管理5GVN的拓扑结构，因此GSMF网元接收到消息2之后，可以存储终端设备2的标识、SMF2网元的标识、UPF2网元的标识(可选的)、UPF2网元的隧道信息(可选的)、以及终端设备2所属的第一5GVN组的标识的映射关系。当然，如上所述，终端设备2的标识和终端设备2所属的第一5GVN组的标识的映射关系可能是在终端设备2建立会话之前已经存储在GSMF网元中的，本申请实施例对此不作具体限定。
示例性的，假设终端设备2建立会话之前，GSMF网元上管理的第一5GVN组的拓扑信息分别如表一、表二或表三所示，则终端设备2建立会话之后，GSMF网元更新的第一5GVN组的拓扑信息可以分别如表四、表五或表六所示。
表四
Figure PCTCN2020090662-appb-000004
表五
Figure PCTCN2020090662-appb-000005
表六
Figure PCTCN2020090662-appb-000006
可选的，本申请实施例中，在终端设备2建立会话的过程中，若GSMF网元接收来自SMF2网元的消息2之后，确定GSMF网元上管理的第一5GVN组的拓扑信息中，存在与SMF2网元不同的SMF网元(比如本申请实施例中的SMF1网元)，则需要在UPF2网元以及其他SMF网元管理的为属于第一5GVN组的终端设备服务的UPF网元上建立相应的转发规则；或者，若UPF2网元首次为属于第一5GVN组的终端设备提供服务，可以建立UPF2网元与其他SMF网元管理的为属于第一5GVN组的终端设备服务的UPF网元之间的隧道。
下面以在UPF2网元以及其他SMF网元管理的为属于第一5GVN组的终端设备服务的UPF网元上建立相应的转发规则为例进行说明。
一种可能的实现方式(方式一)中，若GSMF网元上管理的第一5GVN组的拓扑信息中包括UPF网元的隧道信息，则本申请实施例提供的虚拟网络通信方法还可以包括如下步骤S507-S510：
S507、GSMF网元向与终端设备2对应的SMF2网元不同的其他SMF网元(如本申请实施例中的SMF1网元)发送消息3。SMF1网元接收来自GSMF网元的消息3。
其中，消息3包括终端设备2的标识、终端设备2所属的第一5GVN组的标识以及为终端设备2服务的UPF2网元的隧道信息。
示例性的，该消息3例如可以是一个请求消息或者通知消息，本申请实施例对消息3的名字不作具体限定。
S508、SMF1网元根据终端设备2的标识、终端设备2所属的第一5GVN组的标识以及为终端设备2服务的UPF2网元的隧道信息在SMF1网元管理的为第一5GVN组内的终端设备服务的UPF网元(如本申请实施例中的UPF1网元)上配置转发规则1，转发规则1用于当UPF1网元服务的属于第一5GVN组的终端设备(如上述终端设备1)给属于第一5GVN组的终端设备2发送数据包时，UPF1网元(基于UPF2网元的隧道信息)将数据包发送给UPF2网元。
需要说明的是，上述步骤S507-S508以与SMF2网元不同的SMF网元为SMF1网元，SMF1网元管理的为属于第一5GVN组的终端设备服务的UPF网元为UPF1网元为例进行说明。当然，若GSMF网元上管理的第一5GVN组的拓扑信息中，还有除SMF1网元之外的其他SMF网元与SMF2网元不同，可以参照上述步骤S507-S508的方式在相应的UPF网元上配置与转发规则1类似的转发规则，以使得给属于第一5GVN组的终端设备2发送数据包时，数据包可以从相应的UPF网元路由到UPF2网元；或者，若SMF1网元管理的 为第一5GVN组内的终端设备服务的UPF网元除了UPF1网元，还有其他UPF网元，也可以参考上述步骤S508的方式在其他UPF网元上配置与转发规则1类似的转发规则，以使得给属于第一5GVN组的终端设备2发送数据包时，数据包可以从其他UPF网元路由到UPF2网元，在此不再赘述。
S509、GSMF网元向SMF2网元发送消息4。SMF2网元接收来自GSMF网元的消息4。
其中，消息4包括终端设备1的标识、终端设备1所属的第一5GVN组的标识以及为终端设备1服务的UPF1网元的隧道信息。
示例性的，该消息4例如可以是一个请求消息或者通知消息，本申请实施例对消息3的名字不作具体限定。
S510、SMF2网元根据终端设备1的标识、终端设备1所属的第一5GVN组的标识以及为终端设备1服务的UPF1网元的隧道信息在UPF2网元上配置转发规则2，转发规则2用于当UPF2网元服务的属于第一5GVN组的终端设备(如上述终端设备2)给属于第一5GVN组的终端设备1发送数据包时，UPF2网元(基于UPF1网元的隧道信息)将数据包发送给UPF1网元。
需要说明的是，上述步骤S509-S510以GSMF网元上管理的第一5GVN组的拓扑信息中，仅存在终端设备1相关的拓扑信息和终端设备2相关的拓扑信息为例进行说明，当然，若GSMF网元上管理的第一5GVN组的拓扑信息中，还包括其他终端设备相关的拓扑信息，则上述消息4中还包括其他终端设备相关的拓扑信息，以使得SMF网元2可以根据其他终端设备相关的拓扑信息，在UPF网元上配置与转发规则2类似的转发规则，以使得给属于第一5GVN组的其他终端设备发送数据包时，数据包可以从UPF2网元路由到其他UPF网元。例如，假设GSMF网元上管理的第一5GVN组的拓扑信息如表六所示，则上述消息4中还可以包括终端设备4的标识、终端设备4所属的第一5GVN组的标识以及为终端设备4服务的UPF3网元的隧道信息，进而SMF2网元可以根据终端设备4的标识、终端设备4所属的第一5GVN组的标识以及为终端设备4服务的UPF3网元的隧道信息在UPF2网元上配置转发规则3，转发规则3用于当UPF2网元服务的属于第一5GVN组的终端设备(如上述终端设备2)给属于第一5GVN组的终端设备4发送数据包时，UPF2网元将数据包发送给UPF3网元。
需要说明的是，本申请实施例中的步骤S507-S508与步骤S509-S510之间没有必然的执行先后顺序，可以是先执行步骤S507-S508，再执行步骤S509-S510；也可以是先执行步骤S509-S510，再执行步骤S507-S508；还可以是同时执行步骤S507-S508与步骤S509-S510，本申请实施例对此不作具体限定。
或者，另一种可能的实现方式(方式二)中，若GSMF网元上管理的第一5GVN组的拓扑信息中不包括UPF网元的隧道信息，则本申请实施例提供的虚拟网络通信方法还可以包括如下步骤S511-S518：
S511、GSMF网元向SMF2网元发送消息5。SMF2网元接收来自GSMF网元的消息5。
其中，该消息5可以包括第一5GVN组的标识和终端设备2的标识，用于请求为属于第一5GVN组的终端设备2建立隧道。
示例性的，该消息5例如可以是一个请求消息，本申请实施例对消息5的名字不作具 体限定。
S512、SMF2网元获取UPF2网元的隧道信息。
其中，本申请实施例中，UPF2网元的隧道信息可以是由SMF2网元分配的，也可以是SMF2网元请求UPF2网元分配的，本申请实施例对此不作具体限定。
S513、SMF2网元向GSMF网元发送消息6。GSMF网元接收来自SMF2网元的消息6。
其中，该消息6中包括UPF2网元的隧道信息。可选的，该隧道建立响应1中包括终端设备2的标识和终端设备2所属的第一5GVN组的标识。
示例性的，该消息6例如可以是一个响应消息，本申请实施例对消息6的名字不作具体限定。
可选的，本申请实施例中，GSMF网元接收来自SMF2网元的消息6之后，可以更新第一5GVN组的拓扑信息，如建立终端设备2的标识、SMF2网元的标识、UPF2网元的标识(可选的)、终端设备2所属的第一5GVN组的标识的映射关系、以及UPF2网元的隧道信息的映射关系，在此统一说明，以下不再赘述。
S514、GSMF网元向与终端设备2对应的SMF2网元不同的其他SMF网元(如本申请实施例中的SMF1网元)发送消息7。SMF1网元接收来自GSMF网元的消息7。
其中，该消息7包括终端设备2的标识、终端设备2所属的第一5GVN组的标识以及为终端设备2服务的UPF2网元的隧道信息。
示例性的，该消息7例如可以是一个请求消息或通知消息，本申请实施例对消息5的名字不作具体限定。
S515、SMF1网元根据终端设备2的标识、终端设备2所属的第一5GVN组的标识以及为终端设备2服务的UPF2网元的隧道信息在SMF1网元管理的为第一5GVN组内的终端设备服务的UPF网元上(如本申请实施例中的UPF1网元)配置转发规则1，转发规则1用于当UPF1网元服务的属于第一5GVN组的终端设备(如上述终端设备1)给属于第一5GVN组的终端设备2发送数据包时，UPF1网元将数据包发送给UPF2网元。
此外，SMF1网元还可以获取SMF1网元管理的为第一5GVN组内的终端设备服务的UPF网元(如本申请实施例中的UPF1网元)的隧道信息，该UPF网元的隧道信息可以是由SMF1网元分配的，也可以是由UPF网元自己分配的，本申请实施例对此不作具体限定。
S516、SMF1网元向GSMF网元发送消息8。GSMF网元接收来自SMF1网元的消息8。
其中，该消息8中包括UPF1网元的隧道信息。可选的，该消息8中包括第一5GVN组的标识、以及UPF1网元服务的属于第一5GVN组的终端设备(如本申请实施例中的终端设备1)的标识。
示例性的，该消息8例如可以是一个响应消息，本申请实施例对消息8的名字不作具体限定。
可选的，GSMF网元接收来自SMF1网元的消息8之后，可以更新第一5GVN组的拓扑信息，如建立终端设备1的标识、SMF1网元的标识、UPF1网元的标识(可选的)、终端设备1所属的第一5GVN组的标识的映射关系、以及UPF1网元的隧道信息的映射关系，在此统一说明，以下不再赘述。
S517、GSMF网元向SMF2网元发送消息9。SMF2网元接收来自GSMF网元的消息9。
其中，消息9包括终端设备1的标识、终端设备1所属的第一5GVN组的标识以及为终端设备1服务的UPF1网元的隧道信息。
示例性的，该消息9例如可以是一个请求消息或者通知消息，本申请实施例对消息9的名字不作具体限定。
可选的，本申请实施例中，若上述隧道建立响应2中不包括UPF1网元服务的属于第一5GVN组的终端设备(如本申请实施例中的终端设备1)的标识，则GSMF网元可以在接收到隧道建立响应2之后，确定UPF1网元服务的属于第一5GVN组的终端设备(如本申请实施例中的终端设备1)的标识。比如，GSMF网元可以根据UPF1网元的隧道信息确定对应的UPF1网元的标识，进而根据UPF网元的标识、5GVN组的标识、以及终端设备的标识的映射关系，确定UPF1网元服务的属于第一5GVN组的终端设备(如本申请实施例中的终端设备1)的标识，本申请实施例对此不作具体限定。
S518、SMF2网元根据终端设备1的标识、终端设备1所属的第一5GVN组的标识以及为终端设备1服务的UPF1网元的隧道信息在UPF2网元上配置转发规则2，转发规则2用于当UPF2网元服务的属于第一5GVN组的终端设备(如上述终端设备2)给属于第一5GVN组的终端设备1发送数据包时，UPF2网元将数据包发送给UPF1网元。
需要说明的是，上述步骤S514-S518以与SMF2网元不同的SMF网元为SMF1网元，SMF1网元管理的为属于第一5GVN组的终端设备服务的UPF网元为UPF1网元为例进行说明。当然，若GSMF网元上管理的第一5GVN组的拓扑信息中，还有除SMF1网元之外的其他SMF网元与SMF2网元不同，可以参照上述步骤S514-S518的方式在相应的UPF网元上配置与转发规则1类似的转发规则以及在UPF2网元上配置与转发规则2类似的转发规则，以使得给属于第一5GVN组的终端设备2发送数据包时，数据包可以从相应的UPF网元路由到UPF2网元，给属于第一5GVN组的其他终端设备发送数据包时，数据包可以从UPF2网元路由到其他UPF网元。例如，假设GSMF网元上管理的第一5GVN组的拓扑信息如表六所示，则上述隧道建立响应2中可以包括UPF3网元的隧道信息以及终端设备4的标识(可选的)。进而，上述消息5中还可以包括终端设备4的标识、终端设备4所属的第一5GVN组的标识以及为终端设备4服务的UPF3网元的隧道信息，进而SMF2网元可以根据终端设备4的标识、终端设备4所属的第一5GVN组的标识以及为终端设备4服务的UPF3网元的隧道信息在UPF2网元上配置转发规则3，转发规则3用于当UPF2网元服务的属于第一5GVN组的终端设备(如上述终端设备2)给属于第一5GVN组的终端设备4发送数据包时，UPF2网元将数据包发送给UPF3网元。
可选的，上述方式二以先获取UPF2网元的隧道信息，再获取UPF1网元的隧道信息为例进行说明。当然，也可以先获取UPF1网元的隧道信息，再获取UPF2网元的隧道信息，本申请实施例对此不作具体限定。
需要说明的是，上述方式一和方式二均是以在UPF2网元以及其他SMF网元管理的为属于第一5GVN组的终端设备服务的UPF网元上建立相应的转发规则为例进行说明。当然，若UPF2网元首次为属于第一5GVN组的终端设备提供服务，可以仅建立UPF2网元与其他SMF网元管理的为属于第一5GVN组的终端设备服务的UPF网元之间的隧道，此 时GSMF网元可以仅向对应的SMF发送UPF网元的隧道信息和第一5GVN组的标识即可，不需要发送UPF网元服务的属于第一5GVN组的终端设备的标识，在此统一说明，以下不再赘述。
可选的，在上述方式二中，假设SMF1网元与SMF2网元之间有接口(假定为Ny接口)，在建立UPF1网元和UPF2网元之间的隧道时，SMF1网元和SMF2网元之间可以直接交换UPF1网元的隧道信息和UPF2网元的隧道信息。比如，在上述步骤S512之后，SMF2网元直接向SMF1网元发送UPF2网元的隧道信息以及对应的第一5GVN组的标识，不需要执行上述步骤S513-S514。类似的，SMF1网元直接向SMF2网元发送UPF1网元的隧道信息以及对应的第一5GVN组的标识，不需要执行上述步骤S516-S517，在此统一说明，以下不再赘述。当然，若需要在UPF1网元和UPF2网元上建立转发规则，则除了交换上述信息之外，还需要交换与UPF1网元的隧道信息对应的终端设备的标识，比如，SMF2网元直接向SMF1网元发送UPF2网元的隧道信息、终端设备2的标识、以及终端设备2所属的第一5GVN组的标识；SMF1网元直接向SMF2网元发送UPF1网元的隧道信息、终端设备1的标识、以及终端设备1所属的第一5GVN组的标识，在此统一说明，以下不再赘述。
基于本申请实施例提供的虚拟网络通信方法，可以实现由SMF1网元管理的UPF1网元服务的属于第一5GVN组的终端设备1与由SMF2网元管理的UPF2网元服务的属于第一5GVN组的终端设备2之间的私有通信，即可以解决跨SMF网元实现5GVN服务的私有通信。
其中，上述步骤S501至S518中的GSMF网元或者SMF1网元或者SMF2网元的动作可以由图4所示的通信设备400中的处理器401调用存储器403中存储的应用程序代码来执行，本实施例对此不作任何限制。
可选的，以图1所示的通信系统应用于如图2所示的5G网络，会话管理网元1为SMF1网元，会话管理网元2为SMF2网元，用户面网元1为UPF1网元，用户面网元2为UPF2网元为例。则如图6所示，为本申请实施例提供的另一种虚拟网络通信方法，该虚拟网络通信方法包括如下步骤：
S601-S606、同图5所示的实施例中的步骤S501-S506，相关描述可参考图5所示的实施例，在此不再赘述。
S607、UPF1网元接收到数据包，数据包中携带终端设备2的标识。
示例性的，数据包中携带终端设备2的标识例如可以是数据包的目的地址为终端设备2的IP地址或者终端设备的MAC地址。
可选的，本申请实施例中，UPF1网元可以确定出终端设备2所属的5GVN组(假设为第一5GVN组)的标识。示例性的，UPF1网元根据数据包是通过终端设备1的某个PDU会话的N3上行隧道接收的，从而可以确定出终端设备2所属的5GVN组为第一5GVN组，因为该PDU会话服务于第一5GVN组，详见步骤S501-S503。或者，示例性的，数据包中本身带有终端设备2所属的5GVN组的标识。
S608、在UPF1网元确定UPF1网元上未存储终端设备2对应的转发规则的情况下，UPF1网元向SMF1网元发送查询请求1。SMF1网元接收来自UPF1网元的查询请求1。
其中，该查询请求1携带终端设备2所属的第一5GVN组的标识和终端设备2的标识， 用于请求与属于第一5GVN组的终端设备2对应的转发规则。
S609、在SMF1网元确定SMF1网元上未存储与属于第一5GVN组的终端设备2对应的转发规则的情况下，SMF1网元向GSMF网元发送查询请求2。GSMF网元接收来自SMF1网元的查询请求2。
其中，该查询请求2携带终端设备2所属的第一5GVN组的标识和终端设备2的标识，用于请求与属于第一5GVN组的终端设备2对应的转发规则。
S610、GSMF网元根据步骤S606中SMF2网元上报的终端设备2相关的信息可以确定终端设备2对应SMF2网元，进而可以采用图5所示的实施例中在UPF网元上建立相应的转发规则的方式在相应的UPF网元上创建转发规则，相关描述可参考图5所示的实施例，在此不再赘述。
需要说明的是，本申请实施例中，在UPF网元之间的隧道已经存在的情况下，可以仅创建单向的转发规则。比如，本申请实施例中，可以仅在UPF1网元上创建与属于第一5GVN组的终端设备2对应的转发规则，不需要在UPF2网元上创建转发规则。当然，若可以获取发送数据包的终端设备的标识，可以采用图5所示的实施例中在UPF网元上建立相应的转发规则的方式在UPF2网元上创建对应的转发规则，在此统一说明，以下不再赘述。
S611、UPF1网元根据UPF1网元上的转发规则将收到的数据包发送给UPF2网元。
基于本申请实施例提供的虚拟网络通信方法，可以实现由SMF1网元管理的UPF1网元服务的属于第一5GVN组的终端设备1与由SMF2网元管理的UPF2网元服务的属于第一5GVN组的终端设备2之间的私有通信，即可以解决跨SMF网元实现5GVN服务的私有通信。
其中，上述步骤S601至S611中的GSMF网元或者SMF1网元或者SMF2网元的动作可以由图4所示的通信设备400中的处理器401调用存储器403中存储的应用程序代码来执行，本实施例对此不作任何限制。
可以理解的是，以上各个实施例中，由群组会话管理网元实现的方法和/或步骤，也可以由实现上述群组会话管理网元的芯片系统实现，由会话管理网元实现的方法和/或步骤，也可以由实现上述会话管理网元的芯片系统实现。
上述主要从各个网元之间交互的角度对本申请实施例提供的方案进行了介绍。相应的，本申请实施例还提供了通信装置，该通信装置用于实现上述各种方法。该通信装置可以为上述方法实施例中的群组会话管理网元或者实现上述群组会话管理网元功能的芯片系统；或者，该通信装置可以为上述方法实施例中的会话管理网元或者实现上述会话管理网元功能的芯片系统。可以理解的是，该通信装置为了实现上述功能，其包含了执行各个功能相应的硬件结构和/或软件模块。本领域技术人员应该很容易意识到，结合本文中所公开的实施例描述的各示例的单元及算法步骤，本申请能够以硬件或硬件和计算机软件的结合形式来实现。某个功能究竟以硬件还是计算机软件驱动硬件的方式来执行，取决于技术方案的特定应用和设计约束条件。专业技术人员可以对每个特定的应用来使用不同方法来实现所描述的功能，但是这种实现不应认为超出本申请的范围。
本申请实施例可以根据上述方法实施例中对通信装置进行功能模块的划分，例如，可以对应各个功能划分各个功能模块，也可以将两个或两个以上的功能集成在一个处理模块中。上述集成的模块既可以采用硬件的形式实现，也可以采用软件功能模块的形式实现。 需要说明的是，本申请实施例中对模块的划分是示意性的，仅仅为一种逻辑功能划分，实际实现时可以有另外的划分方式。
比如，以通信装置为上述方法实施例中的群组会话管理网元为例。图7示出了一种群组会话管理网元70的结构示意图。该群组会话管理网元70包括处理模块701和收发模块702。所述收发模块702，也可以称为收发单元用以实现发送和/或接收功能，例如可以是收发电路，收发机，收发器或者通信接口。
其中，处理模块701，用于获取为属于第一虚拟网络组的第一终端设备服务的第一用户面网元的隧道信息，其中，第一用户面网元由第一会话管理网元管理；收发模块702，用于向第二会话管理网元发送第一消息，第一消息包括第一终端设备的标识、第一虚拟网络组的标识和第一用户面网元的隧道信息，其中，第一终端设备的标识、第一虚拟网络组的标识和第一用户面网元的隧道信息用于在第二会话管理网元管理的第二用户面网元上配置第一转发规则，第一转发规则用于当第二用户面网元服务的属于第一虚拟网络组的终端设备给属于第一虚拟网络组的第一终端设备发送第一数据包时，第二用户面网元将第一数据包发送给第一用户面网元。
可选的，如图7所示，该群组会话管理网元70还可以包括存储模块703。其中，收发模块702，还用于在属于第一虚拟网络组的第一终端设备建立会话的过程中，接收来自第一会话管理网元的第二消息，第二消息包括第一终端设备的标识和第一会话管理网元的标识；存储模块703，用于存储第一终端设备的标识和第一会话管理网元的标识的映射关系。
可选的，第二消息还包括第一终端设备所属的第一虚拟网络组的标识以及为属于第一虚拟网络组的第一终端设备服务的第一用户面网元的隧道信息中的至少一个。存储模块703具体用于：存储第一虚拟网络组的标识以及第一用户面网元的隧道信息中的至少一个、第一终端设备的标识和第一会话管理网元的标识的映射关系。
可选的，处理模块701，用于获取为属于第一虚拟网络组的第一终端设备服务的第一用户面网元的隧道信息，包括：处理模块701，用于在映射关系中包括第一用户面网元的隧道信息的情况下，获取存储的为属于第一虚拟网络组的第一终端设备服务的第一用户面网元的隧道信息。
可选的，处理模块701，用于获取为属于第一虚拟网络组的第一终端设备服务的第一用户面网元的隧道信息，包括：处理模块701，用于在映射关系中不包括第一用户面网元的隧道信息的情况下，通过收发模块702向第一会话管理网元发送第三消息，第三消息用于请求为属于第一虚拟网络组的第一终端设备建立隧道；通过收发模块702接收来自第一会话管理网元的为属于第一虚拟网络组的第一终端设备服务的第一用户面网元的隧道信息。
可选的，收发模块702，还用于接收来自第二会话管理网元的为属于第一虚拟网络组的第二终端设备服务的第二用户面网元的隧道信息；收发模块702，还用于向第一会话管理网元发送第四消息，第四消息包括第二终端设备的标识、第一虚拟网络组的标识和第二用户面网元的隧道信息，其中，第二终端设备的标识、第一虚拟网络组的标识和第二用户面网元的隧道信息用于在第一用户面网元上配置第二转发规则，第二转发规则用于当第一用户面网元服务的属于第一虚拟网络组的终端设备给属于第一虚拟网络组的第二终端设备发送第二数据包时，第一用户面网元将第二数据包发送给第二用户面网元。
可选的，收发模块702，还用于接收来自第二会话管理网元的第五消息，第五消息用于请求第一转发规则。
其中，上述方法实施例涉及的各步骤的所有相关内容均可以援引到对应功能模块的功能描述，在此不再赘述。
在本实施例中，该群组会话管理网元70以采用集成的方式划分各个功能模块的形式来呈现。这里的“模块”可以指特定ASIC，电路，执行一个或多个软件或固件程序的处理器和存储器，集成逻辑电路，和/或其他可以提供上述功能的器件。在一个简单的实施例中，本领域的技术人员可以想到该群组会话管理网元70可以采用图4所示的通信设备400的形式。
比如，图4中的处理器401可以通过调用存储器403中存储的计算机执行指令，使得群组会话管理网元70执行上述方法实施例中的虚拟网络通信方法。
具体的，图7中的处理模块701和收发模块702的功能/实现过程可以通过图4中的处理器401调用存储器403中存储的计算机执行指令来实现。或者，图7中的处理模块701的功能/实现过程可以通过图4中的处理器401调用存储器403中存储的计算机执行指令来实现，图7中的收发模块702的功能/实现过程可以通过图4中的通信接口404来实现。此外，图7中的存储模块703的功能/实现过程可以通过图4中的存储器403来实现。
由于本实施例提供的群组会话管理网元70可执行上述的虚拟网络通信方法，因此其所能获得的技术效果可参考上述方法实施例，在此不再赘述。
比如，以通信装置为上述方法实施例中的第二会话管理网元为例。图8示出了一种第二会话管理网元80的结构示意图。该第二会话管理网元80包括处理模块801和收发模块802。所述收发模块802，也可以称为收发单元用以实现发送和/或接收功能，例如可以是收发电路，收发机，收发器或者通信接口。
其中，收发模块802，用于在属于第一虚拟网络组的第二终端设备建立会话的过程中，向群组会话管理网元发送第一消息，第一消息包括第二终端设备的标识和第二会话管理网元的标识；收发模块802，还用于接收来自群组会话管理网元的第二消息，第二消息包括属于第一虚拟网络组的第一终端设备的标识、第一虚拟网络组的标识和为属于第一虚拟网络组的第一终端设备服务的第一用户面网元的隧道信息，其中，第一用户面网元由第一会话管理网元管理；处理模块801，用于根据第一终端设备的标识、第一虚拟网络组的标识和第一用户面网元的隧道信息在第二会话管理网元管理的第二用户面网元上配置第一转发规则，第一转发规则用于当第二用户面网元服务的属于第一虚拟网络组的终端设备给属于第一虚拟网络组的第一终端设备发送第一数据包时，第二用户面网元将第一数据包发送给第一用户面网元。
可选的，收发模块802，还用于接收来自第二用户面网元的第三消息，第三消息用于请求第一转发规则；处理模块801，还用于确定第二会话管理网元上不存在第一转发规则；收发模块802，还用于向群组会话管理网元发送第四消息，第四消息用于请求第一转发规则。
可选的，第一消息还包括第二终端设备所属的第一虚拟网络组的标识。
可选的，第一消息还包括为属于第一虚拟网络组的第二终端设备服务的第二用户面网元的隧道信息。
可选的，收发模块802，还用于接收来自群组会话管理网元的第五消息，第五消息用于请求为属于第一虚拟网络组的第二终端设备建立隧道；收发模块802，还用于向群组会话管理网元发送为属于第一虚拟网络组的第二终端设备服务的第二用户面网元的隧道信息。
其中，上述方法实施例涉及的各步骤的所有相关内容均可以援引到对应功能模块的功能描述，在此不再赘述。
在本实施例中，该第二会话管理网元80以采用集成的方式划分各个功能模块的形式来呈现。这里的“模块”可以指特定ASIC，电路，执行一个或多个软件或固件程序的处理器和存储器，集成逻辑电路，和/或其他可以提供上述功能的器件。在一个简单的实施例中，本领域的技术人员可以想到该第二会话管理网元80可以采用图4所示的通信设备400的形式。
比如，图4中的处理器401可以通过调用存储器403中存储的计算机执行指令，使得第二会话管理网元80执行上述方法实施例中的虚拟网络通信方法。
具体的，图8中的处理模块801和收发模块802的功能/实现过程可以通过图4中的处理器401调用存储器403中存储的计算机执行指令来实现。或者，图8中的处理模块801的功能/实现过程可以通过图4中的处理器401调用存储器403中存储的计算机执行指令来实现，图8中的收发模块802的功能/实现过程可以通过图4中的通信接口404来实现。
由于本实施例提供的第二会话管理网元80可执行上述的虚拟网络通信方法，因此其所能获得的技术效果可参考上述方法实施例，在此不再赘述。
可选的，本申请实施例还提供了一种通信装置(例如，该通信装置可以是芯片或芯片系统)，该通信装置包括处理器，用于实现上述任一方法实施例中的方法。在一种可能的设计中，该通信装置还包括存储器。该存储器，用于保存必要的程序指令和数据，处理器可以调用存储器中存储的程序代码以指令该通信装置执行上述任一方法实施例中的方法。当然，存储器也可以不在该通信装置中。该通信装置是芯片系统时，可以由芯片构成，也可以包含芯片和其他分立器件，本申请实施例对此不作具体限定。
在上述实施例中，可以全部或部分地通过软件、硬件、固件或者其任意组合来实现。当使用软件程序实现时，可以全部或部分地以计算机程序产品的形式来实现。该计算机程序产品包括一个或多个计算机指令。在计算机上加载和执行计算机程序指令时，全部或部分地产生按照本申请实施例所述的流程或功能。所述计算机可以是通用计算机、专用计算机、计算机网络、或者其他可编程装置。所述计算机指令可以存储在计算机可读存储介质中，或者从一个计算机可读存储介质向另一个计算机可读存储介质传输，例如，所述计算机指令可以从一个网站站点、计算机、服务器或者数据中心通过有线(例如同轴电缆、光纤、数字用户线(digital subscriber line，DSL))或无线(例如红外、无线、微波等)方式向另一个网站站点、计算机、服务器或数据中心进行传输。所述计算机可读存储介质可以是计算机能够存取的任何可用介质或者是包含一个或多个可以用介质集成的服务器、数据中心等数据存储设备。所述可用介质可以是磁性介质(例如，软盘、硬盘、磁带)，光介质(例如，DVD)、或者半导体介质(例如固态硬盘(solid state disk，SSD))等。本申请实施例中,计算机可以包括前面所述的装置。
尽管在此结合各实施例对本申请进行了描述，然而，在实施所要求保护的本申请过程 中，本领域技术人员通过查看所述附图、公开内容、以及所附权利要求书，可理解并实现所述公开实施例的其他变化。在权利要求中，“包括”(comprising)一词不排除其他组成部分或步骤，“一”或“一个”不排除多个的情况。单个处理器或其他单元可以实现权利要求中列举的若干项功能。相互不同的从属权利要求中记载了某些措施，但这并不表示这些措施不能组合起来产生良好的效果。
尽管结合具体特征及其实施例对本申请进行了描述，显而易见的，在不脱离本申请的精神和范围的情况下，可对其进行各种修改和组合。相应地，本说明书和附图仅仅是所附权利要求所界定的本申请的示例性说明，且视为已覆盖本申请范围内的任意和所有修改、变化、组合或等同物。显然，本领域的技术人员可以对本申请进行各种改动和变型而不脱离本申请的精神和范围。这样，倘若本申请的这些修改和变型属于本申请权利要求及其等同技术的范围之内，则本申请也意图包含这些改动和变型在内。

Claims (35)

  1. 一种虚拟网络通信方法，其特征在于，所述方法包括：
    群组会话管理网元获取为属于第一虚拟网络组的第一终端设备服务的第一用户面网元的隧道信息，其中，所述第一用户面网元由第一会话管理网元管理；
    所述群组会话管理网元向第二会话管理网元发送第一消息，所述第一消息包括所述第一终端设备的标识、所述第一虚拟网络组的标识和所述第一用户面网元的隧道信息，其中，所述第一终端设备的标识、所述第一虚拟网络组的标识和所述第一用户面网元的隧道信息用于在所述第二会话管理网元管理的第二用户面网元上配置第一转发规则，所述第一转发规则用于当所述第二用户面网元服务的属于所述第一虚拟网络组的终端设备给所述属于第一虚拟网络组的第一终端设备发送第一数据包时，所述第二用户面网元将所述第一数据包发送给所述第一用户面网元。
  2. 根据权利要求1所述的方法，其特征在于，所述方法还包括：
    在所述属于第一虚拟网络组的第一终端设备建立会话的过程中，所述群组会话管理网元接收来自所述第一会话管理网元的第二消息，所述第二消息包括所述第一终端设备的标识和所述第一会话管理网元的标识；
    所述群组会话管理网元存储所述第一终端设备的标识和所述第一会话管理网元的标识的映射关系。
  3. 根据权利要求2所述的方法，其特征在于，所述第二消息还包括所述第一终端设备所属的所述第一虚拟网络组的标识以及为所述属于第一虚拟网络组的第一终端设备服务的所述第一用户面网元的隧道信息中的至少一个；
    所述群组会话管理网元存储所述第一终端设备的标识和所述第一会话管理网元的标识的映射关系，包括：
    所述群组会话管理网元存储所述第一虚拟网络组的标识以及所述第一用户面网元的隧道信息中的至少一个、所述第一终端设备的标识和所述第一会话管理网元的标识的映射关系。
  4. 根据权利要求3所述的方法，其特征在于，所述群组会话管理网元获取为属于第一虚拟网络组的第一终端设备服务的第一用户面网元的隧道信息，包括：
    在所述映射关系中包括所述第一用户面网元的隧道信息的情况下，所述群组会话管理网元获取存储的为所述属于第一虚拟网络组的第一终端设备服务的所述第一用户面网元的隧道信息。
  5. 根据权利要求3所述的方法，其特征在于，所述群组会话管理网元获取为属于第一虚拟网络组的第一终端设备服务的第一用户面网元的隧道信息，包括：
    在所述映射关系中不包括所述第一用户面网元的隧道信息的情况下，所述群组会话管理网元向所述第一会话管理网元发送第三消息，所述第三消息用于请求为所述属于第一虚拟网络组的第一终端设备建立隧道；
    所述群组会话管理网元接收来自所述第一会话管理网元的为所述属于第一虚拟网络组的第一终端设备服务的所述第一用户面网元的隧道信息。
  6. 根据权利要求5所述的方法，其特征在于，所述方法还包括：
    所述群组会话管理网元接收来自所述第二会话管理网元的为属于所述第一虚拟网 络组的第二终端设备服务的所述第二用户面网元的隧道信息；
    所述群组会话管理网元向所述第一会话管理网元发送第四消息，所述第四消息包括所述第二终端设备的标识、所述第一虚拟网络组的标识和所述第二用户面网元的隧道信息，其中，所述第二终端设备的标识、所述第一虚拟网络组的标识和所述第二用户面网元的隧道信息用于在所述第一用户面网元上配置第二转发规则，所述第二转发规则用于当所述第一用户面网元服务的属于所述第一虚拟网络组的终端设备给所述属于所述第一虚拟网络组的第二终端设备发送第二数据包时，所述第一用户面网元将所述第二数据包发送给所述第二用户面网元。
  7. 根据权利要求1-6任一项所述的方法，其特征在于，在所述群组会话管理网元获取所述第一用户面网元的隧道信息之前，所述方法还包括：
    所述群组会话管理网元接收来自所述第二会话管理网元的第五消息，所述第五消息用于请求所述第一转发规则。
  8. 一种虚拟网络通信方法，其特征在于，所述方法包括：
    在属于第一虚拟网络组的第二终端设备建立会话的过程中，第二会话管理网元向群组会话管理网元发送第一消息，所述第一消息包括所述第二终端设备的标识和所述第二会话管理网元的标识；
    所述第二会话管理网元接收来自所述群组会话管理网元的第二消息，所述第二消息包括属于所述第一虚拟网络组的第一终端设备的标识、所述第一虚拟网络组的标识和为所述属于所述第一虚拟网络组的第一终端设备服务的第一用户面网元的隧道信息，其中，所述第一用户面网元由第一会话管理网元管理；
    所述第二会话管理网元根据所述第一终端设备的标识、所述第一虚拟网络组的标识和所述第一用户面网元的隧道信息在所述第二会话管理网元管理的第二用户面网元上配置第一转发规则，所述第一转发规则用于当所述第二用户面网元服务的属于所述第一虚拟网络组的终端设备给所述属于所述第一虚拟网络组的第一终端设备发送第一数据包时，所述第二用户面网元将所述第一数据包发送给所述第一用户面网元。
  9. 根据权利要求8所述的方法，其特征在于，在所述第二会话管理网元接收来自所述群组会话管理网元的第二消息之前，所述方法还包括：
    所述第二会话管理网元接收来自所述第二用户面网元的第三消息，所述第三消息用于请求所述第一转发规则；
    所述第二会话管理网元确定所述第二会话管理网元上不存在所述第一转发规则；
    所述第二会话管理网元向所述群组会话管理网元发送第四消息，所述第四消息用于请求所述第一转发规则。
  10. 根据权利要求8或9所述的方法，其特征在于，所述第一消息还包括所述第二终端设备所属的所述第一虚拟网络组的标识。
  11. 根据权利要求8-10任一项所述的方法，其特征在于，所述第一消息还包括为所述属于第一虚拟网络组的第二终端设备服务的所述第二用户面网元的隧道信息。
  12. 根据权利要求8-10任一项所述的方法，其特征在于，在所述第二会话管理网元接收来自所述群组会话管理网元的第二消息之前，所述方法还包括：
    所述第二会话管理网元接收来自所述群组会话管理网元的第五消息，所述第五消 息用于请求为所述属于第一虚拟网络组的第二终端设备建立隧道；
    所述第二会话管理网元向所述群组会话管理网元发送为所述属于第一虚拟网络组的第二终端设备服务的所述第二用户面网元的隧道信息。
  13. 一种群组会话管理网元，其特征在于，所述群组会话管理网元包括：处理模块和收发模块；
    所述处理模块，用于获取为属于第一虚拟网络组的第一终端设备服务的第一用户面网元的隧道信息，其中，所述第一用户面网元由第一会话管理网元管理；
    所述收发模块，用于向第二会话管理网元发送第一消息，所述第一消息包括所述第一终端设备的标识、所述第一虚拟网络组的标识和所述第一用户面网元的隧道信息，其中，所述第一终端设备的标识、所述第一虚拟网络组的标识和所述第一用户面网元的隧道信息用于在所述第二会话管理网元管理的第二用户面网元上配置第一转发规则，所述第一转发规则用于当所述第二用户面网元服务的属于所述第一虚拟网络组的终端设备给所述属于第一虚拟网络组的第一终端设备发送第一数据包时，所述第二用户面网元将所述第一数据包发送给所述第一用户面网元。
  14. 根据权利要求13所述的群组会话管理网元，其特征在于，所述群组会话管理网元还包括存储模块；
    所述收发模块，还用于在所述属于第一虚拟网络组的第一终端设备建立会话的过程中，接收来自所述第一会话管理网元的第二消息，所述第二消息包括所述第一终端设备的标识和所述第一会话管理网元的标识；
    所述存储模块，用于存储所述第一终端设备的标识和所述第一会话管理网元的标识的映射关系。
  15. 根据权利要求14所述的群组会话管理网元，其特征在于，所述第二消息还包括所述第一终端设备所属的所述第一虚拟网络组的标识以及为所述属于第一虚拟网络组的第一终端设备服务的所述第一用户面网元的隧道信息中的至少一个；
    所述存储模块具体用于：
    存储所述第一虚拟网络组的标识以及所述第一用户面网元的隧道信息中的至少一个、所述第一终端设备的标识和所述第一会话管理网元的标识的映射关系。
  16. 根据权利要求15所述的群组会话管理网元，其特征在于，所述处理模块，用于获取为属于第一虚拟网络组的第一终端设备服务的第一用户面网元的隧道信息，包括：
    所述处理模块，用于在所述映射关系中包括所述第一用户面网元的隧道信息的情况下，获取存储的为所述属于第一虚拟网络组的第一终端设备服务的所述第一用户面网元的隧道信息。
  17. 根据权利要求15所述的群组会话管理网元，其特征在于，所述处理模块，用于获取为属于第一虚拟网络组的第一终端设备服务的第一用户面网元的隧道信息，包括：
    所述处理模块，用于在所述映射关系中不包括所述第一用户面网元的隧道信息的情况下，通过所述收发模块向所述第一会话管理网元发送第三消息，所述第三消息用于请求为所述属于第一虚拟网络组的第一终端设备建立隧道；通过所述收发模块接收 来自所述第一会话管理网元的为所述属于第一虚拟网络组的第一终端设备服务的所述第一用户面网元的隧道信息。
  18. 根据权利要求17所述的群组会话管理网元，其特征在于，
    所述收发模块，还用于接收来自所述第二会话管理网元的为属于所述第一虚拟网络组的第二终端设备服务的所述第二用户面网元的隧道信息；
    所述收发模块，还用于向所述第一会话管理网元发送第四消息，所述第四消息包括所述第二终端设备的标识、所述第一虚拟网络组的标识和所述第二用户面网元的隧道信息，其中，所述第二终端设备的标识、所述第一虚拟网络组的标识和所述第二用户面网元的隧道信息用于在所述第一用户面网元上配置第二转发规则，所述第二转发规则用于当所述第一用户面网元服务的属于所述第一虚拟网络组的终端设备给所述属于所述第一虚拟网络组的第二终端设备发送第二数据包时，所述第一用户面网元将所述第二数据包发送给所述第二用户面网元。
  19. 根据权利要求13-18任一项所述的群组会话管理网元，其特征在于，
    所述收发模块，还用于接收来自所述第二会话管理网元的第五消息，所述第五消息用于请求所述第一转发规则。
  20. 一种第二会话管理网元，其特征在于，所述第二会话管理网元包括：处理模块和收发模块；
    所述收发模块，用于在属于第一虚拟网络组的第二终端设备建立会话的过程中，向群组会话管理网元发送第一消息，所述第一消息包括所述第二终端设备的标识和所述第二会话管理网元的标识；
    所述收发模块，还用于接收来自所述群组会话管理网元的第二消息，所述第二消息包括属于所述第一虚拟网络组的第一终端设备的标识、所述第一虚拟网络组的标识和为所述属于所述第一虚拟网络组的第一终端设备服务的第一用户面网元的隧道信息，其中，所述第一用户面网元由第一会话管理网元管理；
    所述处理模块，用于根据所述第一终端设备的标识、所述第一虚拟网络组的标识和所述第一用户面网元的隧道信息在所述第二会话管理网元管理的第二用户面网元上配置第一转发规则，所述第一转发规则用于当所述第二用户面网元服务的属于所述第一虚拟网络组的终端设备给所述属于所述第一虚拟网络组的第一终端设备发送第一数据包时，所述第二用户面网元将所述第一数据包发送给所述第一用户面网元。
  21. 根据权利要求20所述的第二会话管理网元，其特征在于，
    所述收发模块，还用于接收来自所述第二用户面网元的第三消息，所述第三消息用于请求所述第一转发规则；
    所述处理模块，还用于确定所述第二会话管理网元上不存在所述第一转发规则；
    所述收发模块，还用于向所述群组会话管理网元发送第四消息，所述第四消息用于请求所述第一转发规则。
  22. 根据权利要求20或21所述的第二会话管理网元，其特征在于，所述第一消息还包括所述第二终端设备所属的所述第一虚拟网络组的标识。
  23. 根据权利要求20-22任一项所述的第二会话管理网元，其特征在于，所述第一消息还包括为所述属于第一虚拟网络组的第二终端设备服务的所述第二用户面网元 的隧道信息。
  24. 根据权利要求20-22任一项所述的第二会话管理网元，其特征在于，
    所述收发模块，还用于接收来自所述群组会话管理网元的第五消息，所述第五消息用于请求为所述属于第一虚拟网络组的第二终端设备建立隧道；
    所述收发模块，还用于向所述群组会话管理网元发送为所述属于第一虚拟网络组的第二终端设备服务的所述第二用户面网元的隧道信息。
  25. 一种通信系统，其特征在于，所述通信系统包括：群组会话管理网元和第二会话管理网元；
    所述群组会话管理网元，用于获取为属于第一虚拟网络组的第一终端设备服务的第一用户面网元的隧道信息，其中，所述第一用户面网元由第一会话管理网元管理；
    所述群组会话管理网元，还用于向所述第二会话管理网元发送第一消息，所述第一消息包括所述第一终端设备的标识、所述第一虚拟网络组的标识和所述第一用户面网元的隧道信息；
    所述第二会话管理网元，用于接收来自所述群组会话管理网元的所述第一消息，并根据所述第一终端设备的标识、所述第一虚拟网络组的标识和所述第一用户面网元的隧道信息，在所述第二会话管理网元管理的第二用户面网元上配置第一转发规则，所述第一转发规则用于当所述第二用户面网元服务的属于所述第一虚拟网络组的终端设备给所述属于第一虚拟网络组的第一终端设备发送第一数据包时，所述第二用户面网元将所述第一数据包发送给所述第一用户面网元。
  26. 根据权利要求25所述的通信系统，其特征在于，所述通信系统还包括所述第一会话管理网元；
    所述第一会话管理网元，用于在所述属于第一虚拟网络组的第一终端设备建立会话的过程中，向所述群组会话管理网元发送第二消息，所述第二消息包括所述第一终端设备的标识和所述第一会话管理网元的标识；
    所述群组会话管理网元，还用于接收来自所述第一会话管理网元的所述第二消息，并存储所述第一终端设备的标识和所述第一会话管理网元的标识的映射关系。
  27. 根据权利要求26所述的通信系统，其特征在于，所述第二消息还包括所述第一终端设备所属的所述第一虚拟网络组的标识以及为所述属于第一虚拟网络组的第一终端设备服务的所述第一用户面网元的隧道信息中的至少一个；
    所述群组会话管理网元，还用于存储所述第一终端设备的标识和所述第一会话管理网元的标识的映射关系，包括：
    所述群组会话管理网元，还用于存储所述第一虚拟网络组的标识以及所述第一用户面网元的隧道信息中的至少一个、所述第一终端设备的标识和所述第一会话管理网元的标识的映射关系。
  28. 根据权利要求27所述的通信系统，其特征在于，所述群组会话管理网元，用于获取为属于第一虚拟网络组的第一终端设备服务的第一用户面网元的隧道信息，包括：
    所述群组会话管理网元，用于在所述映射关系中包括所述第一用户面网元的隧道信息的情况下，获取存储的为所述属于第一虚拟网络组的第一终端设备服务的所述第 一用户面网元的隧道信息。
  29. 根据权利要求27所述的通信系统，其特征在于，所述群组会话管理网元，用于获取为属于第一虚拟网络组的第一终端设备服务的第一用户面网元的隧道信息，包括：
    所述群组会话管理网元，用于在所述映射关系中不包括所述第一用户面网元的隧道信息的情况下，向所述第一会话管理网元发送第三消息，所述第三消息用于请求为所述属于第一虚拟网络组的第一终端设备建立隧道；
    所述群组会话管理网元，还用于接收来自所述第一会话管理网元的为所述属于第一虚拟网络组的第一终端设备服务的所述第一用户面网元的隧道信息。
  30. 根据权利要求29所述的通信系统，其特征在于，
    所述第二会话管理网元，还用于向所述群组会话管理网元发送为属于所述第一虚拟网络组的第二终端设备服务的所述第二用户面网元的隧道信息；
    所述群组会话管理网元，还用于接收来自所述第二会话管理网元的为属于所述第一虚拟网络组的第二终端设备服务的所述第二用户面网元的隧道信息；
    所述群组会话管理网元，还用于向所述第一会话管理网元发送第四消息，所述第四消息包括所述第二终端设备的标识、所述第一虚拟网络组的标识和所述第二用户面网元的隧道信息；
    所述第一会话管理网元，还用于接收来自所述群组会话管理网元的所述第四消息，并根据所述第二终端设备的标识、所述第一虚拟网络组的标识和所述第二用户面网元的隧道信息在所述第一用户面网元上配置第二转发规则，所述第二转发规则用于当所述第一用户面网元服务的属于所述第一虚拟网络组的终端设备给所述属于所述第一虚拟网络组的第二终端设备发送第二数据包时，所述第一用户面网元将所述第二数据包发送给所述第二用户面网元。
  31. 根据权利要求25-30任一项所述的通信系统，其特征在于，
    所述第二会话管理网元，还用于接收来自所述第二用户面网元的第五消息，所述第五消息用于请求所述第一转发规则；
    所述第二会话管理网元，还用于在确定所述第二会话管理网元上不存在所述第一转发规则之后，向所述群组会话管理网元发送第六消息，所述第六消息用于请求所述第一转发规则；
    所述群组会话管理网元，还用于在获取所述第一用户面网元的隧道信息之前，接收来自所述第二会话管理网元的所述第六消息。
  32. 一种通信装置，其特征在于，包括：存储器和处理器；
    所述存储器用于存储计算机执行指令，所述处理器执行所述存储器存储的所述计算机执行指令，以使所述通信装置实现如权利要求1-7中任意一项所述的方法；或者，以使所述通信装置实现如权利要求8-12中任意一项所述的方法。
  33. 一种计算机程序产品，其特征在于，包括指令，当所述指令在计算机上运行时，使得所述计算机执行如权利要求1-7中任意一项所述的方法；或者，使得所述计算机执行如权利要求8-12中任意一项所述的方法。
  34. 一种计算机可读存储介质，其特征在于，包括指令，当其在计算机上运行时， 使得所述计算机执行如权利要求1-7中任意一项所述的方法，或者，使得所述计算机执行如权利要求8-12中任意一项所述的方法。
  35. 一种芯片，其特征在于，包括：处理器和接口，所述处理器通过所述接口与存储器耦合，当所述处理器执行所述存储器中的计算机程序或指令时，使得权利要求1-7中的任一项所述的方法被执行；或者，使得权利要求8-12中的任一项所述的方法被执行。
PCT/CN2020/090662 2019-05-17 2020-05-15 虚拟网络通信方法、设备及系统 WO2020233532A1 (zh)

Priority Applications (3)

Application Number Priority Date Filing Date Title
CN202080035749.3A CN114128223A (zh) 2019-05-17 2020-05-15 虚拟网络通信方法、设备及系统
EP20810113.9A EP3962027B1 (en) 2019-05-17 2020-05-15 Virtual network communication method, device and system
US17/526,339 US20220078047A1 (en) 2019-05-17 2021-11-15 Virtual network communication method, device, and system

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN201910413600.3A CN111953576B (zh) 2019-05-17 2019-05-17 虚拟网络通信方法、设备及系统
CN201910413600.3 2019-05-17

Related Child Applications (1)

Application Number Title Priority Date Filing Date
US17/526,339 Continuation US20220078047A1 (en) 2019-05-17 2021-11-15 Virtual network communication method, device, and system

Publications (1)

Publication Number Publication Date
WO2020233532A1 true WO2020233532A1 (zh) 2020-11-26

Family

ID=73336077

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2020/090662 WO2020233532A1 (zh) 2019-05-17 2020-05-15 虚拟网络通信方法、设备及系统

Country Status (4)

Country Link
US (1) US20220078047A1 (zh)
EP (1) EP3962027B1 (zh)
CN (2) CN111953576B (zh)
WO (1) WO2020233532A1 (zh)

Cited By (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN112583693A (zh) * 2020-12-14 2021-03-30 深圳艾灵网络有限公司 一种虚拟局域网通信方法、设备及存储介质
CN113114617A (zh) * 2021-02-25 2021-07-13 深圳艾灵网络有限公司 一种通信方法、系统及存储介质
CN113938872A (zh) * 2021-09-22 2022-01-14 中国联合网络通信集团有限公司 通信方法、装置、系统及计算机存储介质
CN114585105A (zh) * 2020-11-28 2022-06-03 华为技术有限公司 一种算力感知的会话管理方法及通信装置
WO2022152238A1 (zh) * 2021-01-18 2022-07-21 华为技术有限公司 一种通信方法及通信装置
WO2022247679A1 (zh) * 2021-05-28 2022-12-01 展讯半导体(南京)有限公司 移动通信局域网建立方法及装置

Families Citing this family (18)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN113973050A (zh) * 2020-07-23 2022-01-25 华为技术有限公司 路由配置方法及装置
CN112511403A (zh) * 2020-12-14 2021-03-16 深圳艾灵网络有限公司 一种虚拟局域网通信方法、设备及存储介质
CN112543473B (zh) * 2020-12-29 2022-09-06 中国移动通信集团江苏有限公司 基于网元仿真的测试方法、装置、设备及计算机存储介质
CN113207096B (zh) * 2021-07-05 2021-11-09 中兴通讯股份有限公司 会话管理方法、实体、网络设备和存储介质
CN113225697B (zh) * 2021-07-07 2021-11-09 中兴通讯股份有限公司 群组用户通信方法、装置、网络设备和存储介质
CN113225242B (zh) * 2021-07-07 2021-11-09 中兴通讯股份有限公司 跨区域通信方法、设备和存储介质
CN115843127A (zh) * 2021-09-18 2023-03-24 华为技术有限公司 一种通信方法及装置
WO2023137679A1 (en) * 2022-01-21 2023-07-27 Zte Corporation Method for virtual network transmission, apparatus, and storage medium
CN116567552A (zh) * 2022-01-28 2023-08-08 华为技术有限公司 群组通信的方法和装置
CN116866940A (zh) * 2022-03-27 2023-10-10 华为技术有限公司 卫星通信方法和装置
CN116939512A (zh) * 2022-03-31 2023-10-24 华为技术有限公司 群组通信的方法、装置和系统
CN116939709A (zh) * 2022-03-31 2023-10-24 大唐移动通信设备有限公司 数据传输方法、设备、装置及存储介质
CN114726829B (zh) * 2022-04-02 2023-09-22 中国电信股份有限公司 通信方法、用户面网关及通信系统
CN114827908B (zh) * 2022-04-06 2023-06-30 中国联合网络通信集团有限公司 Vn组通信方法、装置、设备及存储介质
CN114867079B (zh) * 2022-05-23 2024-04-16 中国联合网络通信集团有限公司 一种通信方法、装置及存储介质
CN117459902A (zh) * 2022-07-18 2024-01-26 中国电信股份有限公司 一种数据包传输方法及虚拟网络组
CN117793838A (zh) * 2022-09-21 2024-03-29 中国电信股份有限公司 虚拟网群组拓扑管理方法、nef实体、通信系统和存储介质
CN116390271B (zh) * 2023-03-07 2024-03-15 广州爱浦路网络技术有限公司 基于smf集合的vn组通信方法、系统和存储介质

Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN102946354A (zh) * 2012-11-15 2013-02-27 华为技术有限公司 一种报文转发的方法、装置及网络设备
US20170303259A1 (en) * 2016-04-18 2017-10-19 Electronics And Telecommunications Research Institute Communication method and apparatus using network slicing
CN109218995A (zh) * 2018-10-08 2019-01-15 腾讯科技（深圳）有限公司 通信方法、装置、计算机可读介质及电子设备
CN109314839A (zh) * 2016-05-06 2019-02-05 康维达无线有限责任公司 服务层的业务导向
CN111031080A (zh) * 2018-10-09 2020-04-17 华为技术有限公司 报文传输方法及装置

Family Cites Families (15)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN102333028B (zh) * 2011-06-22 2013-02-13 杭州华三通信技术有限公司 一种分层式二层虚拟专用网发送报文的方法及通信设备
US10567276B2 (en) * 2016-08-05 2020-02-18 Huawei Technologies Co., Ltd. Virtual network pre-configuration in support of service-based traffic forwarding
US10666458B2 (en) * 2016-09-30 2020-05-26 Huawei Technologies Co., Ltd Method and apparatus for data transmission involving tunneling in wireless communication networks
CN108243082B (zh) * 2016-12-26 2020-10-30 大唐移动通信设备有限公司 一种数据传输方法及设备
US10779345B2 (en) * 2017-03-20 2020-09-15 Qualcomm Incorporated User plane relocation techniques in wireless communication systems
CN108811011B (zh) * 2017-05-05 2021-04-09 华为技术有限公司 一种会话管理方法、网络设备和通信系统
WO2019027742A1 (en) * 2017-08-04 2019-02-07 Intel IP Corporation ESTABLISHING DATA TRANSFER TUNNEL BETWEEN TWO USER PLAN FUNCTIONS IN A FIFTH GENERATION
CN112202841B (zh) * 2017-08-29 2022-03-29 华为技术有限公司 数据传输方法、设备及系统
CN109673026B (zh) * 2017-10-16 2023-05-16 华为技术有限公司 数据转发方法、装置和系统
CN109699013B (zh) * 2017-10-24 2020-08-25 华为技术有限公司 一种通信系统、通信方法及其装置
CN109245984B (zh) * 2018-07-13 2021-07-09 华为技术有限公司 一种报文传输方法、一种信息处理方法及其相关设备
US10812377B2 (en) * 2018-10-12 2020-10-20 Cisco Technology, Inc. Methods and apparatus for use in providing transport and data center segmentation in a mobile network
WO2020148062A1 (en) * 2019-01-15 2020-07-23 Telefonaktiebolaget Lm Ericsson (Publ) Methods and apparatuses for supporting a local area network (lan)
US11330667B2 (en) * 2019-05-03 2022-05-10 Ofinno, Llc Group communication signaling overload mitigation
JP7318004B2 (ja) * 2019-05-14 2023-07-31 アップル インコーポレイテッド Ｎｒ非ライセンススペクトル用のチャネルラスタ及び同期信号ラスタ

Patent Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN102946354A (zh) * 2012-11-15 2013-02-27 华为技术有限公司 一种报文转发的方法、装置及网络设备
US20170303259A1 (en) * 2016-04-18 2017-10-19 Electronics And Telecommunications Research Institute Communication method and apparatus using network slicing
CN109314839A (zh) * 2016-05-06 2019-02-05 康维达无线有限责任公司 服务层的业务导向
CN109218995A (zh) * 2018-10-08 2019-01-15 腾讯科技（深圳）有限公司 通信方法、装置、计算机可读介质及电子设备
CN111031080A (zh) * 2018-10-09 2020-04-17 华为技术有限公司 报文传输方法及装置

Non-Patent Citations (2)

* Cited by examiner, † Cited by third party
Title
3GPP: "3rd Generation Partnership Project; Technical Specification Group Services and System Aspects; System Architecture for the 5G System; Stage 2 (Release 16)", 3GPP TS 23.501 V16.0.2, 30 April 2019 (2019-04-30), pages 1 - 317, XP051723245 *
HUAWEI ET AL.: "Support for unicast traffic forwarding within a 5G VN group", 3GPP TSG-SA WG2 MEETING #133, S2-1905682, 7 May 2019 (2019-05-07), XP051721145 *

Cited By (9)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN114585105A (zh) * 2020-11-28 2022-06-03 华为技术有限公司 一种算力感知的会话管理方法及通信装置
CN112583693A (zh) * 2020-12-14 2021-03-30 深圳艾灵网络有限公司 一种虚拟局域网通信方法、设备及存储介质
CN112583693B (zh) * 2020-12-14 2022-06-21 深圳艾灵网络有限公司 一种虚拟局域网通信方法、设备及存储介质
WO2022152238A1 (zh) * 2021-01-18 2022-07-21 华为技术有限公司 一种通信方法及通信装置
CN113114617A (zh) * 2021-02-25 2021-07-13 深圳艾灵网络有限公司 一种通信方法、系统及存储介质
CN113114617B (zh) * 2021-02-25 2022-11-11 深圳艾灵网络有限公司 一种通信方法、系统及存储介质
WO2022247679A1 (zh) * 2021-05-28 2022-12-01 展讯半导体(南京)有限公司 移动通信局域网建立方法及装置
CN113938872A (zh) * 2021-09-22 2022-01-14 中国联合网络通信集团有限公司 通信方法、装置、系统及计算机存储介质
CN113938872B (zh) * 2021-09-22 2023-10-20 中国联合网络通信集团有限公司 通信方法、装置、系统及计算机存储介质

Also Published As

Publication number Publication date
EP3962027B1 (en) 2023-08-16
CN111953576A (zh) 2020-11-17
CN111953576B (zh) 2021-07-09
EP3962027A4 (en) 2022-07-20
EP3962027A1 (en) 2022-03-02
US20220078047A1 (en) 2022-03-10
CN114128223A (zh) 2022-03-01

Similar Documents

Publication Publication Date Title
WO2020233532A1 (zh) 虚拟网络通信方法、设备及系统
JP7252305B2 (ja) データ伝送方法、デバイス、およびシステム
JP7139522B2 (ja) ローカルエリアネットワーク通信方法、装置、およびシステム
WO2020224463A1 (zh) 一种数据分析方法及装置
WO2020119460A1 (zh) 网络切片选择的方法、设备及系统
US20200366642A1 (en) Address Management Method and System, and Device
WO2020063658A1 (zh) 本地局域网通信方法、设备及系统
WO2020253737A1 (zh) 多播通信方法、装置及系统
EP4075867A1 (en) Application instance determination method, device, and system
WO2021136180A1 (zh) 一种业务处理的方法、装置和系统
CN109429214A (zh) 业务会话建立方法、设备及系统
WO2019120073A1 (zh) 数据传输方法、设备及系统
WO2020249032A1 (zh) 通信方法及装置
US20230319147A1 (en) Method for application to access network, apparatus, and system
WO2021134365A1 (zh) 签约改变的处理方法、设备及系统
WO2020253343A1 (zh) 一种管理服务的发现方法及装置
WO2021056482A1 (zh) Ambr的控制方法、设备及系统
WO2024051313A1 (zh) 通信资源管理方法、装置、系统及存储介质

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 20810113

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE

ENP Entry into the national phase

Ref document number: 2020810113

Country of ref document: EP

Effective date: 20211122