WO2021244356A1 - 数据传输方法及装置 - Google Patents

数据传输方法及装置 Download PDF

Info

Publication number
WO2021244356A1
WO2021244356A1 PCT/CN2021/095877 CN2021095877W WO2021244356A1 WO 2021244356 A1 WO2021244356 A1 WO 2021244356A1 CN 2021095877 W CN2021095877 W CN 2021095877W WO 2021244356 A1 WO2021244356 A1 WO 2021244356A1
Authority
WO
WIPO (PCT)
Prior art keywords
network
slice information
downlink message
network slice
vlan
Prior art date
Application number
PCT/CN2021/095877
Other languages
English (en)
French (fr)
Inventor
张正建
刘建华
Original Assignee
中兴通讯股份有限公司
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 中兴通讯股份有限公司 filed Critical 中兴通讯股份有限公司
Publication of WO2021244356A1 publication Critical patent/WO2021244356A1/zh

Links

Images

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L12/00—Data switching networks
    • H04L12/28—Data switching networks characterised by path configuration, e.g. LAN [Local Area Networks] or WAN [Wide Area Networks]
    • H04L12/46—Interconnection of networks
    • H04L12/4641—Virtual LANs, VLANs, e.g. virtual private networks [VPN]
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L12/00—Data switching networks
    • H04L12/28—Data switching networks characterised by path configuration, e.g. LAN [Local Area Networks] or WAN [Wide Area Networks]
    • H04L12/46—Interconnection of networks
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L12/00—Data switching networks
    • H04L12/28—Data switching networks characterised by path configuration, e.g. LAN [Local Area Networks] or WAN [Wide Area Networks]
    • H04L12/46—Interconnection of networks
    • H04L12/4633—Interconnection of networks using encapsulation techniques, e.g. tunneling
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W76/00—Connection management
    • H04W76/10—Connection setup
    • H04W76/11—Allocation or use of connection identifiers
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W76/00—Connection management
    • H04W76/10—Connection setup
    • H04W76/12—Setup of transport tunnels

Definitions

  • the embodiments of the present invention relate to the field of communications, and specifically, to a data transmission method and device.
  • FIG. 1 is an architecture diagram of a 5G system in related technologies.
  • the 5G architecture includes: Access Management Function (AMF), Session Management Function (SMF), User Plane Function (UPF), and Unified Data Management ( UDM), policy control function (PCF), network slice selection function (NSSF), etc.
  • AMF Access Management Function
  • SMF Session Management Function
  • UDM User Plane Function
  • UDM Unified Data Management
  • PCF policy control function
  • NSSF network slice selection function
  • Control plane network elements include AMF, SMF, PCF, etc.; user plane network elements have UPF.
  • SMF is responsible for the management of UPF.
  • FIG. 2 is a schematic diagram of the PFCP protocol stack in related technologies. As shown in Figure 2, 3GPP defines the PFCP protocol stack in the 29.244 protocol.
  • the network slicing instance should be defined in the PLMN, which is an end-to-end logical network, which should include the access network, the bearer network, the core network control plane, and the core network user plane.
  • the network slice is identified by a single network slice selection assistance information (S-NSSAI), and the S-NSSAI includes a slice service type (SST) and a slice distinguisher (SD). Operators deploy multiple network slices to meet the different quality of service requirements of different customers.
  • S-NSSAI single network slice selection assistance information
  • SST slice service type
  • SD slice distinguisher
  • the embodiments of the present invention provide a data transmission method and device to at least solve the problem of low security of data transmission through network slices in related technologies.
  • a data transmission method is provided, which is applied to a user plane function entity UPF, including:
  • sending the downlink message to the bearer network device according to the network slice information includes:
  • the downlink message is sent to the bearer network device, where the downlink message carries the core network VLAN ID, and the bearer network device is used to convert the core network side VLAN ID to an access network device After the side VLAN ID, the downlink message is sent to the access network device.
  • sending the downlink message to the bearer network device according to the network slice information includes:
  • the downlink message carries the core network VXLAN VNI, and the VXLAN header is encapsulated when the downlink message is sent, where the inner source address is the UPF side GTPUIP, the inner layer destination address is GTPUIP on the RAN side, the inner layer source MAC is the UPF side interface MAC, and the inner layer destination MAC is the interface MAC on the core network side of the TN device; the bearer network device is used to decapsulate the VXLAN tunnel, and the The inner source MAC is modified to the RAN side interface MAC of the TN device, and the inner destination MAC is modified to the RAN interface MAC; the VXLAN tunnel is encapsulated, and the downlink message is sent to the access network device.
  • the inner source address is the UPF side GTPUIP
  • the inner layer destination address is GTPUIP on the RAN side
  • the inner layer source MAC is the UPF side interface MAC
  • the inner layer destination MAC is the interface MAC on the core network side of the TN device
  • sending the downlink message to the bearer network device according to the network slice information includes:
  • the downlink message After adding a single network slice selection assistance information SNSSAI extension header to the downlink message, the downlink message is sent to the bearer network device, where the SNSSAI extension header is used to carry the network slice information;
  • the bearer network device is configured to obtain the network slice information from the SNSSAI extension header of the downlink message, and send the downlink message to the access network device according to the network slice information.
  • the method before receiving the downlink message, the method further includes:
  • the bearer network device Receive an uplink packet sent by the bearer network device, where the uplink packet carries VLAN ID, VXLAN VNI or the network slice information, and the uplink packet is that the bearer network device is receiving the connection After the uplink message sent by the network access device is obtained, the network slice information is obtained, and the network slice information is resource-isolated before being sent; the bearer network device is configured to carry information in the uplink message In the case of VLAN ID or VXLAN VNI, obtain the network slice information according to the VLAN ID or the VXLAN VNI;
  • the method before receiving the downlink message, the method further includes:
  • a data transmission method applied to a bearer network device including:
  • receiving the downlink message sent by the UPF includes:
  • the UPF Receive the downlink message carrying the core network virtual extended local area network VXLAN VNI sent by the UPF, where the core network VXLAN VNI is determined by the UPF according to the correspondence between the pre-configured network slice information and the VXLAN VNI VXLAN VNI corresponding to the network slice information, the UPF encapsulates the VXLAN header when sending the downlink message, where the inner source address is the UPF side GTPUIP, the inner destination address is the RAN side GTPUIP, and the inner source MAC is the UPF side Interface MAC, the internal destination MAC is the interface MAC on the core network side of the TN device; or,
  • performing resource isolation on the network slice information and sending the downlink message to the access network device includes:
  • converting the core network side VLAN ID to the access network device side VLAN ID includes:
  • the access network device side VLAN ID corresponding to the network slicing information is determined according to the pre-configured correspondence between the access network device side VLAN ID and the network slicing information.
  • performing resource isolation on the network slice information and sending the downlink message to the access network device includes:
  • performing resource isolation on the network slice information and sending the downlink message to the access network device includes:
  • the method before receiving the downlink message sent by the UPF, the method further includes:
  • the access network device Receiving an uplink packet sent by the access network device, where the uplink packet carries VLAN ID, VXLAN VNI, or the network slice information;
  • the uplink message carries a VLAN ID or VXLAN VNI, determine the network slice information according to the VLAN ID or the VXLAN VNI;
  • a data transmission device applied to a user plane function entity UPF including:
  • the first downlink message receiving module is configured to receive a downlink message, wherein the downlink message carries a user identifier
  • the first determining module is configured to determine the network slice information corresponding to the user identifier according to the pre-stored correspondence between the user identifier and the network slice information;
  • the first sending module is configured to send the downlink message to a bearer network device according to the network slicing information, where the bearer network device is used to isolate the network slicing information from resources, and to separate the downlink The message is sent to the access network device.
  • the first sending module includes:
  • the first determining submodule is configured to determine the core network side VLAN ID corresponding to the network slicing information according to the correspondence between the pre-configured network slicing information and the virtual local area network VLAN ID;
  • the first sending submodule is configured to send the downlink message to the bearer network device, wherein the downlink message carries the core network VLAN ID, and the bearer network device is used to send the core network side After the VLAN ID is converted to the access network device side VLAN ID, the downlink message is sent to the access network device.
  • the first sending module includes:
  • the second determining submodule is configured to determine the core network side VXLAN VNI corresponding to the network slicing information according to the corresponding relationship between the pre-configured network slicing information and the virtual extended local area network VXLAN VNI;
  • the second sending submodule is configured to send the downlink message to the bearer network device, where the downlink message carries the core network VXLAN VNI, and the VXLAN header is encapsulated when the downlink message is sent, where ,
  • the inner source address is GTPUIP on the UPF side
  • the inner destination address is GTPUIP on the RAN side
  • the inner source MAC is the UPF side interface MAC
  • the inner destination MAC is the interface MAC on the core network side of the TN device
  • the bearer network device is used for Decapsulate the VXLAN tunnel, modify the internal source MAC to the TN equipment RAN side interface MAC, and modify the internal destination MAC to the RAN interface MAC
  • encapsulate the VXLAN tunnel and send the downlink message to the access ⁇ Net equipment.
  • the first sending module includes:
  • the third sending submodule is configured to send the downlink message to the bearer network device after adding a single network slice selection assistance information SNSSAI extension header to the downlink message, where the SNSSAI extension header is used to carry The network slicing information; the bearer network device is used to obtain the network slicing information from the SNSSAI extension header of the downlink packet, and send the downlink packet to the access network device according to the network slicing information.
  • the device further includes:
  • the first uplink message receiving module is configured to receive an uplink message sent by the bearer network device, wherein the uplink message carries VLAN ID, VXLAN VNI or the network slice information, and the uplink message is After receiving the uplink message sent by the access network device, the bearer network device obtains the network slice information, and transmits the network slice information after resource isolation; the bearer network device uses In the case where the VLAN ID or VXLAN VNI is carried in the uplink message, acquiring the network slice information according to the VLAN ID or the VXLAN VNI;
  • the second sending module is configured to send the uplink message according to the network slice information.
  • the device further includes:
  • a receiving request module configured to receive a forwarding control protocol PFCP session creation request sent by a session management function entity SMF, wherein the PFCP session creation request carries the network slice information;
  • a storage module configured to store the corresponding relationship between the user identifier and the network slice information, and create a session according to the PFCP session creation request;
  • the third sending module is configured to send a creation completion message to the SMF.
  • a data transmission device applied to bearer network equipment including:
  • the second downlink message receiving module is configured to receive a downlink message sent by the user plane management function UPF, wherein the downlink message carries network slice information, wherein the network slice information is pre-stored by the UPF according to The network slice information corresponding to the user identifier determined by the correspondence between the user identifier and the network slice information;
  • the first isolation module is configured to perform resource isolation on the network slice information and send the downlink message to the access network device.
  • the second downlink message receiving module includes:
  • the first receiving submodule is configured to receive the downlink message carrying the core network virtual local area network VLAN ID sent by the UPF, where the core network VLAN ID is the network slice information and VLAN ID pre-configured by the UPF The VLAN ID corresponding to the network slice information determined by the correspondence relationship; or,
  • the second receiving submodule is configured to receive the downlink message carrying the core network virtual extended local area network VXLAN VNI sent by the UPF, where the core network VXLAN VNI is the UPF according to pre-configured network slice information and VXLAN
  • the VXLAN VNI corresponding to the network slice information determined by the correspondence of the VNI, the UPF encapsulates the VXLAN header when sending the downlink message, where the inner source address is the UPF side GTPUIP, and the inner destination address is the RAN side GTPUIP ,
  • the inner source MAC is the UPF side interface MAC, and the inner destination MAC is the TN device core network side interface MAC; or,
  • the third receiving submodule is configured to receive the downlink message sent by the UPF with a single network slice selection assistance information SNSSAI extension header added, where the SNSSAI extension header is used to carry the network slice information.
  • the first isolation module includes:
  • the conversion sub-module is configured to convert the core network side VLAN ID to the access network device side VLAN ID;
  • the forwarding submodule is configured to forward the downlink message to the access network device according to the VLAN ID on the side of the access network device.
  • the conversion sub-module includes:
  • the first determining unit is configured to determine the network slice information corresponding to the core network side VLAN ID according to the pre-configured correspondence between the core network side VLAN ID and the network slice information;
  • the second determining unit is configured to determine the access network device side VLAN ID corresponding to the network slicing information according to the pre-configured correspondence between the access network device side VLAN ID and the network slicing information.
  • the first isolation module includes:
  • the decapsulation sub-module is set to decapsulate the VXLAN tunnel, and obtain the network slice information
  • the modification sub-module is set to modify the internal source MAC to the RAN side interface MAC of the TN device, and the internal destination MAC to modify the RAN interface MAC;
  • the encapsulation sub-module is configured to encapsulate the VXLAN tunnel and send the downlink message to the access network device.
  • the first isolation module includes:
  • An obtaining submodule configured to obtain the network slice information from the SNSSAI extension header of the downlink message
  • the sending submodule is configured to send the downlink message to the access network device according to the network slice information.
  • the device further includes:
  • the second uplink message receiving module is configured to receive the uplink message sent by the access network device, where the uplink message carries VLAN ID, VXLAN VNI or the network slice information;
  • the second determining module is configured to determine the network slice information according to the VLAN ID or the VXLAN VNI when the uplink message carries the VLAN ID or the VXLAN VNI;
  • the second isolation module is configured to perform resource isolation on the network slice information and send the uplink message to the UPF.
  • a computer-readable storage medium in which a computer program is stored, wherein the computer program is configured to execute any of the above methods when running Steps in the embodiment.
  • an electronic device including a memory and a processor, the memory stores a computer program, and the processor is configured to run the computer program to execute any one of the foregoing Steps in the method embodiment.
  • the network slicing information corresponding to the user identification is determined by the correspondence between the user identification and the network slicing information stored in advance, and the message is transmitted according to the network slicing information, and the network is sliced by the bearer network device in the process of transmitting the message.
  • Information resource isolation can solve the problem of low data security through network slicing in related technologies, and improve the effect of data security.
  • Figure 1 is an architecture diagram of a 5G system in related technologies
  • Figure 2 is a schematic diagram of the PFCP protocol stack in related technologies
  • FIG. 3 is a block diagram of the hardware structure of the mobile terminal of the data transmission method according to the embodiment of the present application.
  • Fig. 4 is a first flowchart of a data transmission method according to an embodiment of the present application.
  • Fig. 5 is a structural diagram of SNSSAI according to an embodiment of the present application.
  • Fig. 6 is a schematic diagram of a GTPU extension header according to an embodiment of the present application.
  • Fig. 7 is a second flowchart of a data transmission method according to an embodiment of the present application.
  • Fig. 8 is a first schematic diagram of indicating UPF user session slice information according to an embodiment of the present application.
  • FIG. 9 is a second schematic diagram of indicating UPF user session slice information according to an embodiment of the present application.
  • FIG. 10 is a third schematic diagram of indicating UPF user session slice information according to an embodiment of the present application.
  • Fig. 11 is a first structural block diagram of a data transmission device according to an embodiment of the present application.
  • Fig. 12 is a second structural block diagram of a data transmission device according to an embodiment of the present application.
  • FIG. 3 is a block diagram of the hardware structure of the mobile terminal of the data transmission method according to the embodiment of the present application.
  • the mobile terminal may include one or more (only one is shown in FIG. 3).
  • the processor 102 (the processor 102 may include, but is not limited to, a processing device such as a microprocessor MCU or a programmable logic device FPGA) and a memory 104 for storing data, wherein the above-mentioned mobile terminal may also include a communication function Transmission equipment 106 and input and output equipment 108.
  • FIG. 3 is only for illustration, and does not limit the structure of the above-mentioned mobile terminal.
  • the mobile terminal may also include more or fewer components than shown in FIG. 3, or have a different configuration from that shown in FIG. 3.
  • the memory 104 may be used to store computer programs, for example, software programs and modules of application software, such as the computer programs corresponding to the data transmission method in the embodiment of the present invention.
  • the processor 102 executes the computer programs stored in the memory 104 by running the computer programs stored in the memory 104. This kind of functional application and data processing realize the above-mentioned method.
  • the memory 104 may include a high-speed random access memory, and may also include a non-volatile memory, such as one or more magnetic storage devices, flash memory, or other non-volatile solid-state memory.
  • the memory 104 may further include a memory remotely provided with respect to the processor 102, and these remote memories may be connected to the mobile terminal through a network. Examples of the aforementioned networks include, but are not limited to, the Internet, corporate intranets, local area networks, mobile communication networks, and combinations thereof.
  • the transmission device 106 is used to receive or send data via a network.
  • the above-mentioned specific examples of the network may include a wireless network provided by a communication provider of a mobile terminal.
  • the transmission device 106 includes a network adapter (Network Interface Controller, NIC for short), which can be connected to other network devices through a base station to communicate with the Internet.
  • the transmission device 106 may be a radio frequency (Radio Frequency, referred to as RF) module, which is used to communicate with the Internet in a wireless manner.
  • RF Radio Frequency
  • FIG. 4 is a flowchart 1 of the data transmission method according to an embodiment of the present application, as shown in FIG. 4, which is applied to the user plane function Entity UPF, the process includes the following steps:
  • Step S402 Receive a downlink message, where the downlink message carries a user identity
  • Step S404 Determine the network slice information corresponding to the user identifier according to the pre-stored correspondence between the user identifier and the network slice information;
  • Step S406 Send the downlink message to a bearer network device according to the network slice information, where the bearer network device is used to isolate the network slice information resources, and send and receive the downlink message.
  • Network access equipment
  • the network slice information corresponding to the user identifier is determined by the correspondence between the user identifier and the network slice information stored in advance, and the message is transmitted according to the network slice information.
  • the bearer network device is used Resource isolation of network slicing information can solve the problem of low security of data transmission through network slicing in related technologies, and improve the effect of data security.
  • the above step S406 may specifically include: determining the core network side VLAN ID corresponding to the network slicing information according to the corresponding relationship between the pre-configured network slicing information and the virtual local area network VLAN ID; The downlink message, wherein the core network VLAN ID is carried in the downlink message, and the bearer network device is used to convert the core network side VLAN ID to the access network device side VLAN ID, and then convert the The downlink message is sent to the access network device. That is, the radio access network equipment (such as RAN), the bearer network equipment (such as TN), and the core network equipment (such as UPF) directly isolate different slice service flows through VLAN.
  • the radio access network equipment such as RAN
  • the bearer network equipment such as TN
  • UPF core network equipment
  • the above step S406 may specifically include: determining the core network side VXLAN VNI corresponding to the network slicing information according to the correspondence between the pre-configured network slicing information and the virtual extended local area network VXLAN VNI; The device sends the downlink message, where the core network VXLAN VNI is carried in the downlink message, and the VXLAN header is encapsulated when the downlink message is sent.
  • the inner source address is GTPUIP on the UPF side, and the inner destination The address is GTPUIP on the RAN side, the inner source MAC is the UPF side interface MAC, and the inner destination MAC is the interface MAC on the core network side of the TN device; the bearer network device is used to decapsulate the VXLAN tunnel and modify the inner source MAC It is the RAN side interface MAC of the TN device, and the inner layer destination MAC is modified to the RAN interface MAC; the VXLAN tunnel is encapsulated, and the downlink message is sent to the access network device.
  • the above step S406 may specifically further include: after adding a single network slice selection assistance information SNSSAI extension header to the downlink message, sending the downlink message to the bearer network device, where all The SNSSAI extension header is used to carry the network slice information; the bearer network device is used to obtain the network slice information from the SNSSAI extension header of the downlink message, and send the downlink message to The access network equipment.
  • Figure 5 is a structural diagram of SNSSAI according to an embodiment of the present application. As shown in Figure 5, when SMF initiates a PFCP session establishment message on the N4 port, in the PFCP Session Establishment Request, the information element of the network slice is added to indicate the slice information of the UPF user . For the newly added field (SNSSAI) of the PFCP Session Establishment Request message, the organization in the message is shown in Table 1.
  • the uplink message sent by the bearer network device before receiving the downlink message, the uplink message sent by the bearer network device is received, wherein the uplink message carries VLAN ID, VXLAN VNI or the network slice information, so The uplink message is sent after the bearer network device receives the uplink message sent by the access network device, obtains the network slice information, and performs resource isolation on the network slice information;
  • the bearer network device is configured to obtain the network slice information according to the VLAN ID or the VXLAN VNI when the uplink message carries the VLAN ID or VXLAN VNI; and send the network slice information according to the network slice information Uplink message.
  • receiving a forwarding control protocol PFCP session creation request sent by a session management function entity SMF wherein the PFCP session creation request carries the network slice information; and storing; The corresponding relationship between the user identifier and the network slice information, and create a session according to the PFCP session creation request; send a creation completion message to the SMF, the SMF indicates the network slice information of the PDU session to the UPF, and the UPF can follow the session
  • the network slice information is mapped to VLAN ID for network isolation.
  • FIG. 6 is a schematic diagram of a GTPU extension header according to an embodiment of the present application. As shown in FIG. The extension header carries user slice information, and the GTPU extension header of the slice information is added.
  • RAN, TN, UPF use VLAN, VXLAN, GTPU extension header and other methods to transfer slice information between the access network, the bearer network, and the core network.
  • RAN, TN, and UPF can isolate service flows of different slices through GTPU extension headers to solve the problem of insufficient VLAN IDs on the core network side when VLAN isolation is used.
  • FIG. 7 is a second flowchart of the data transmission method according to the embodiment of the present application, as shown in FIG. 7, including:
  • Step S702 Receive a downlink message sent by a user plane management function UPF, where the downlink message carries network slicing information, where the network slicing information is the UPF based on the user identification and network slicing information pre-stored The network slice information corresponding to the user identification determined by the corresponding relationship;
  • Step S704 Perform resource isolation on the network slice information, and send the downlink message to the access network device.
  • the network slice information corresponding to the user identifier is determined by the pre-stored correspondence between the user identifier and the network slice information, and the message is transmitted according to the network slice information, and the message is transmitted through the bearer network device.
  • Resource isolation of network slicing information can solve the problem of low security of data transmission through network slicing in related technologies, and improve the effect of data security.
  • step S702 may specifically include:
  • the UPF Receive the downlink message carrying the core network virtual extended local area network VXLAN VNI sent by the UPF, where the core network VXLAN VNI is determined by the UPF according to the correspondence between the pre-configured network slice information and the VXLAN VNI VXLAN VNI corresponding to the network slice information, the UPF encapsulates the VXLAN header when sending the downlink message, where the inner source address is the UPF side GTPUIP, the inner destination address is the RAN side GTPUIP, and the inner source MAC is the UPF side Interface MAC, the internal destination MAC is the interface MAC on the core network side of the TN device; or,
  • step S704 may specifically include:
  • step S704 may specifically further include:
  • step S704 may specifically further include:
  • the uplink message sent by the access network device before receiving the downlink message sent by the UPF, the uplink message sent by the access network device is received, where the uplink message carries VLAN ID, VXLAN VNI or the network slice information;
  • the uplink message carries a VLAN ID or VXLAN VNI
  • the network slice information is determined according to the VLAN ID or the VXLAN VNI; the network slice information is resource-isolated, and the uplink
  • the message is sent to the UPF, and the method for isolating the network slice information is similar to the above method, and will not be repeated here.
  • Fig. 8 is a first schematic diagram of indicating UPF user session slice information according to an embodiment of the present application.
  • the corresponding relationship in Fig. 8 isolates user messages.
  • the specific implementation steps of this embodiment are as follows:
  • Step 1 Configure the corresponding relationship between slice information and VLAN ID on the RAN, TN, and UPF.
  • the TN side needs to configure the corresponding relationship between slice information and VLAN ID on the access side and core side respectively;
  • Step 2 The user goes online to create a PDU session, and the SMF initiates a PFCP session creation request to the UPF, and the message carries the S-NSSAI of the session;
  • Step 3 After the UPF successfully creates the PFCP session, it saves the network slice information of the session and sends a session creation response message to the SMF;
  • Step 4 The terminal initiates the service, and the RAN selects the VLAN ID according to the user's slice information, and encapsulates the VLAN ID when sending user data messages; after the TN receives the message, it modifies the VLAN ID on the access side to the VLAN ID on the core side according to the configuration Forward to UPF;
  • Step 5 When the UPF receives the downlink user message, it selects the VLAN ID according to the user slice information, and encapsulates the VLAN ID when sending the GTPU message to the RAN; the TN receives the message and modifies the core side VLAN ID to the access side according to the configuration The VLAN ID is forwarded to the RAN.
  • VLAN ID has only 12 digits, which is definitely not enough for large-scale networks.
  • the network isolation of different slice service flows can be performed through VXLAN.
  • FIG. 9 is a second schematic diagram of indicating UPF user session slice information according to an embodiment of the present application.
  • SMF indicates the network slice information of the UPF session.
  • RAN, TN, UPF correspond to the configured network slice information and VXLAN VNI The relationship isolates user messages.
  • VXLAN tunnels are established respectively between RAN and TN, TN and UPF, and the specific implementation steps are as follows:
  • Step 1 Configure the corresponding relationship between slice information and VXLAN VNI on the RAN, TN, and UPF.
  • the TN side needs to configure the corresponding relationship between slice information and VXLAN VNI on the access side and the core side respectively;
  • Step 2 The user goes online to create a PDU session, SMF initiates a PFCP session creation request to UPF, and the message carries the S-NSSAI of the session;
  • Step 3 After the UPF successfully creates the PFCP session, it saves the network slice information of the session and sends a session creation response message to the SMF;
  • Step 4 The terminal initiates the service, and the RAN selects VXLAN VNI according to the user's slice information, and encapsulates the VXLAN header when sending user data packets, where the inner source address is GTPUIP on the RAN side, and the inner destination address is GTPUIP on the UPF side; the inner source MAC is the RAN interface MAC, and the inner destination MAC is the interface MAC on the RAN side of the TN equipment;
  • Step 5 TN first decapsulates the VXLAN tunnel upon receiving the packet, and modifies the inner source MAC to the TN device core side interface MAC, and the inner destination MAC to the UPF interface MAC; then TN then encapsulates the VXLAN tunnel and sends the packet to UPF;
  • Step 6 When the UPF receives the downstream user message, it selects VXLAN VNI according to the user's slice information, and encapsulates the VXLAN header (inner source address UPF side GTPUIP, and inner layer destination address is RAN side GTPUIP when sending user data messages.
  • the inner source MAC is the UPF interface MAC
  • the inner destination MAC is the interface MAC on the core side of the TN device.
  • Step 7 TN first decapsulates the VXLAN tunnel upon receiving the packet, and modifies the inner source MAC to the RAN side interface MAC of the TN device, and the inner destination MAC to the RAN interface MAC; then TN then encapsulates the VXLAN tunnel and sends the packet to the RAN.
  • Fig. 10 is a third schematic diagram of indicating UPF user session slice information according to an embodiment of the present application. As shown in Fig. 10, GTPU extension headers are used to transfer slice information between RAN, TN, and UPF. The specific implementation steps are as follows:
  • Step 1 The user goes online to create a PDU session, and the SMF initiates a PFCP session creation request to the UPF, and the message carries the S-NSSAI of the session;
  • Step 2 After the UPF successfully creates the PFCP session, it saves the network slice information of the session, and sends a session creation response message to the SMF;
  • Step 3-4 the terminal initiates the service, and the RAN adds the SNSSAI extension header to the GTPU message and sends it to the UPF; the bearer network device TN that supports slicing obtains the slice information from the GTPU extension header of the message, and selects the appropriate network path to transfer the message Send to UPF;
  • Steps 5-6 When UPF receives the downlink user message, it adds the SNSSAI extension header to the GTPU message and sends it to the RAN; the bearer network device TN that supports slicing obtains slice information from the GTPU extension header of the message, and selects the appropriate one The network path sends the message to the RAN.
  • the method according to the above embodiment can be implemented by means of software plus the necessary general hardware platform, of course, it can also be implemented by hardware, but in many cases the former is Better implementation.
  • the technical solution of the present invention essentially or the part that contributes to the existing technology can be embodied in the form of a software product, and the computer software product is stored in a storage medium (such as ROM/RAM, magnetic disk, The optical disc) includes several instructions to enable a terminal device (which can be a mobile phone, a computer, a server, or a network device, etc.) to execute the method described in each embodiment of the present invention.
  • a data transmission device is also provided, which is used to implement the above-mentioned embodiments and preferred implementations, and the descriptions that have been described will not be repeated.
  • the term "module” can implement a combination of software and/or hardware with predetermined functions.
  • the devices described in the following embodiments are preferably implemented by software, implementation by hardware or a combination of software and hardware is also possible and conceived.
  • Fig. 11 is a structural block diagram 1 of a data transmission device according to an embodiment of the present application. As shown in Fig. 11, the device is applied to a user plane functional entity UPF, including:
  • the first downlink message receiving module 112 is configured to receive a downlink message, wherein the downlink message carries a user identifier
  • the first determining module 114 is configured to determine the network slice information corresponding to the user identifier according to the pre-stored correspondence between the user identifier and the network slice information;
  • the first sending module 116 is configured to send the downlink message to a bearer network device according to the network slicing information, where the bearer network device is used to isolate the network slicing information from resources, and to isolate the network slicing information.
  • the downlink message is sent to the access network device.
  • the first sending module 116 includes:
  • the first determining submodule is configured to determine the core network side VLAN ID corresponding to the network slicing information according to the correspondence between the pre-configured network slicing information and the virtual local area network VLAN ID;
  • the first sending submodule is configured to send the downlink message to the bearer network device, wherein the downlink message carries the core network VLAN ID, and the bearer network device is used to send the core network side After the VLAN ID is converted to the access network device side VLAN ID, the downlink message is sent to the access network device.
  • the first sending module 116 includes:
  • the second determining submodule is configured to determine the core network side VXLAN VNI corresponding to the network slicing information according to the corresponding relationship between the pre-configured network slicing information and the virtual extended local area network VXLAN VNI;
  • the second sending submodule is configured to send the downlink message to the bearer network device, where the downlink message carries the core network VXLAN VNI, and the VXLAN header is encapsulated when the downlink message is sent, where ,
  • the inner source address is GTPUIP on the UPF side
  • the inner destination address is GTPUIP on the RAN side
  • the inner source MAC is the UPF side interface MAC
  • the inner destination MAC is the interface MAC on the core network side of the TN device
  • the bearer network device is used for Decapsulate the VXLAN tunnel, modify the internal source MAC to the TN equipment RAN side interface MAC, and modify the internal destination MAC to the RAN interface MAC
  • encapsulate the VXLAN tunnel and send the downlink message to the access ⁇ Net equipment.
  • the first sending module 116 includes:
  • the third sending submodule is configured to send the downlink message to the bearer network device after adding a single network slice selection assistance information SNSSAI extension header to the downlink message, where the SNSSAI extension header is used to carry The network slicing information; the bearer network device is used to obtain the network slicing information from the SNSSAI extension header of the downlink packet, and send the downlink packet to the access network device according to the network slicing information.
  • the device further includes:
  • the first uplink message receiving module is configured to receive an uplink message sent by the bearer network device, wherein the uplink message carries VLAN ID, VXLAN VNI or the network slice information, and the uplink message is After receiving the uplink message sent by the access network device, the bearer network device obtains the network slice information, and transmits the network slice information after resource isolation; the bearer network device uses In the case where the VLAN ID or VXLAN VNI is carried in the uplink message, acquiring the network slice information according to the VLAN ID or the VXLAN VNI;
  • the second sending module is configured to send the uplink message according to the network slice information.
  • the device further includes:
  • a receiving request module configured to receive a forwarding control protocol PFCP session creation request sent by a session management function entity SMF, wherein the PFCP session creation request carries the network slice information;
  • a storage module configured to store the corresponding relationship between the user identifier and the network slice information, and create a session according to the PFCP session creation request;
  • the third sending module is configured to send a creation completion message to the SMF.
  • each of the above-mentioned modules can be implemented by software or hardware.
  • it can be implemented in the following way, but not limited to this: the above-mentioned modules are all located in the same processor; or, the above-mentioned modules are in any combination The forms are located in different processors.
  • a data transmission device is also provided, which is used to implement the above-mentioned embodiments and preferred implementations, and the descriptions that have been described will not be repeated.
  • the term "module” can implement a combination of software and/or hardware with predetermined functions.
  • the devices described in the following embodiments are preferably implemented by software, implementation by hardware or a combination of software and hardware is also possible and conceived.
  • Fig. 12 is a second structural block diagram of a data transmission device according to an embodiment of the present application. As shown in Fig. 12, the device is applied to bearer network equipment and includes:
  • the second downlink message receiving module 122 is configured to receive a downlink message sent by the user plane management function UPF, wherein the downlink message carries network slice information, wherein the network slice information is based on the UPF in advance Network slice information corresponding to the user ID determined by the correspondence between the stored user ID and the network slice information;
  • the first isolation module 124 is configured to perform resource isolation on the network slice information, and send the downlink message to the access network device.
  • the second downlink message receiving module 122 includes:
  • the first receiving submodule is configured to receive the downlink message carrying the core network virtual local area network VLAN ID sent by the UPF, where the core network VLAN ID is the network slice information and VLAN ID pre-configured by the UPF The VLAN ID corresponding to the network slice information determined by the correspondence relationship; or,
  • the second receiving submodule is configured to receive the downlink message carrying the core network virtual extended local area network VXLAN VNI sent by the UPF, where the core network VXLAN VNI is the UPF according to pre-configured network slice information and VXLAN
  • the VXLAN VNI corresponding to the network slice information determined by the correspondence of the VNI, the UPF encapsulates the VXLAN header when sending the downlink message, where the inner source address is the UPF side GTPUIP, and the inner destination address is the RAN side GTPUIP ,
  • the inner source MAC is the UPF side interface MAC, and the inner destination MAC is the TN device core network side interface MAC; or,
  • the third receiving submodule is configured to receive the downlink message sent by the UPF with a single network slice selection assistance information SNSSAI extension header added, where the SNSSAI extension header is used to carry the network slice information.
  • the first isolation module 124 includes:
  • the conversion sub-module is configured to convert the core network side VLAN ID to the access network device side VLAN ID;
  • the forwarding submodule is configured to forward the downlink message to the access network device according to the VLAN ID on the side of the access network device.
  • the conversion sub-module includes:
  • the first determining unit is configured to determine the network slice information corresponding to the core network side VLAN ID according to the pre-configured correspondence between the core network side VLAN ID and the network slice information;
  • the second determining unit is configured to determine the access network device side VLAN ID corresponding to the network slicing information according to the pre-configured correspondence between the access network device side VLAN ID and the network slicing information.
  • the first isolation module 124 includes:
  • the decapsulation sub-module is set to decapsulate the VXLAN tunnel, and obtain the network slice information
  • the modification sub-module is set to modify the internal source MAC to the RAN side interface MAC of the TN device, and the internal destination MAC to modify the RAN interface MAC;
  • the encapsulation sub-module is configured to encapsulate the VXLAN tunnel and send the downlink message to the access network device.
  • the first isolation module 124 includes:
  • An obtaining submodule configured to obtain the network slice information from the SNSSAI extension header of the downlink message
  • the sending submodule is configured to send the downlink message to the access network device according to the network slice information.
  • the device further includes:
  • the second uplink message receiving module is configured to receive the uplink message sent by the access network device, where the uplink message carries VLAN ID, VXLAN VNI or the network slice information;
  • the second determining module is configured to determine the network slice information according to the VLAN ID or the VXLAN VNI when the uplink message carries the VLAN ID or the VXLAN VNI;
  • the second isolation module is configured to perform resource isolation on the network slice information and send the uplink message to the UPF.
  • each of the above-mentioned modules can be implemented by software or hardware.
  • it can be implemented in the following way, but not limited to this: the above-mentioned modules are all located in the same processor; or, the above-mentioned modules are in any combination The forms are located in different processors.
  • the embodiment of the present invention also provides a computer-readable storage medium in which a computer program is stored, wherein the computer program is configured to execute the steps in any one of the foregoing method embodiments when running.
  • the above-mentioned computer-readable storage medium may include, but is not limited to: U disk, Read-Only Memory (Read-Only Memory, ROM for short), Random Access Memory (Random Access Memory, RAM for short) , Mobile hard drives, magnetic disks or optical discs and other media that can store computer programs.
  • U disk Read-Only Memory
  • ROM Read-Only Memory
  • RAM Random Access Memory
  • Mobile hard drives magnetic disks or optical discs and other media that can store computer programs.
  • An embodiment of the present invention also provides an electronic device including a memory and a processor, the memory stores a computer program, and the processor is configured to run the computer program to execute the steps in any one of the foregoing method embodiments.
  • the aforementioned electronic device may further include a transmission device and an input-output device, wherein the transmission device is connected to the aforementioned processor, and the input-output device is connected to the aforementioned processor.
  • modules or steps of the present invention can be implemented by a general computing device, and they can be concentrated on a single computing device or distributed in a network composed of multiple computing devices. Above, they can be implemented with program codes executable by a computing device, so that they can be stored in a storage device for execution by the computing device, and in some cases, they can be executed in a different order than shown here. Or the described steps, or fabricate them into individual integrated circuit modules respectively, or fabricate multiple modules or steps of them into a single integrated circuit module to achieve. In this way, the present invention is not limited to any specific combination of hardware and software.
  • This embodiment is applied to the field of communications, which can solve the problem of low data transmission security through network slicing in related technologies, and improve the effect of data security.

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Computer Security & Cryptography (AREA)
  • Mobile Radio Communication Systems (AREA)

Abstract

本申请实施例提供了一种数据传输方法及装置，其中，该方法包括：接收下行报文，其中，所述下行报文中携带有用户标识；根据预先存储的用户标识与网络切片信息的对应关系确定所述用户标识对应的网络切片信息；根据所述网络切片信息将所述下行报文发送给承载网设备，其中，所述承载网设备用于在对所述网络切片信息进行资源隔离，并将所述下行报文发送接入网设备，通过预先存储的用户标识与网络切片信息的对应关系确定所述用户标识对应的网络切片信息，并根据网络切片信息传输报文，在传输报文过程中通过承载网设备对网络切片信息进行资源隔离，可以解决相关技术中通过网络切片传输数据安全性低的问题，提高了数据安全性的效果。

Description

数据传输方法及装置 技术领域
本发明实施例涉及通信领域，具体而言，涉及一种数据传输方法及装置。
背景技术
3GPP提出了第5代通信系统(5G)的一些基本原则包括控制平面和用户平面分离、灵活高效的网络切片、使用网络功能虚拟化和软件定义网络等。图1是相关技术中的5G系统的架构图，如图1所示，该5G架构包括：接入管理功能(AMF)，会话管理功能(SMF)，用户面功能(UPF)，统一数据管理(UDM)，策略控制功能(PCF)，网络切片选择功能(NSSF)等。控制面网元包括AMF、SMF、PCF等；用户面网元有UPF。SMF负责管理UPF，SMF和UPF间的参考点是N4口，N4口承载于报文转发控制协议(PFCP)。图2是相关技术中PFCP协议栈的示意图，如图2所示，3GPP在29.244协议中定义了PFCP的协议栈。5G系统架构中，网络切片实例应该定义在PLMN中，是一个端到端的逻辑网络，应该包含接入网络、承载网络、核心网络控制平面和核心网络用户平面。网络切片由单个网络切片选择辅助信息(S-NSSAI)来标识，S-NSSAI包含切片服务类型(SST)和切片区分器(SD)。运营商部署多个网络切片可以满足不同客户的不同服务质量要求。
在UPF支持多切片共享时，管理者不能够从不同网络切片的维度去进行资源管理，通过网络切片传输数据安全性低的问题。
发明内容
本发明实施例提供了一种数据传输方法及装置，以至少解决相关技术中通过网络切片传输数据安全性低的问题。
根据本发明的一个实施例，提供了一种数据传输方法，应用于用户面功能实体UPF，包括：
接收下行报文，其中，所述下行报文中携带有用户标识；
根据预先存储的用户标识与网络切片信息的对应关系确定所述用户标识对应的网络切片信息；
根据所述网络切片信息将所述下行报文发送给承载网设备，其中，所述承载网设备用于在对所述网络切片信息进行资源隔离，并将所述下行报文发送接入网设备。
可选地，根据所述网络切片信息将所述下行报文发送给承载网设备包括：
根据预先配置的网络切片信息和虚拟局域网VLAN ID的对应关系确定所述网络切片信息对应的核心网侧VLAN ID；
向所述承载网设备发送所述下行报文，其中，所述下行报文中携带所述核心网VLAN ID，所述承载网设备用于将所述核心网侧VLAN ID转换为接入网设备侧VLAN ID之后，将所述下行报文发送给所述接入网设备。
可选地，根据所述网络切片信息将所述下行报文发送给承载网设备包括：
根据预先配置的网络切片信息和虚拟扩展局域网VXLAN VNI的对应关系确定所述网络切片信息对应的核心网侧VXLAN VNI；
向所述承载网设备发送所述下行报文，其中，所述下行报文中携带所述核心网VXLAN VNI，在发送所述下行报文时封装VXLAN头，其中，内层源地址为UPF侧GTPUIP，内层目的地址为RAN侧GTPUIP，内层源MAC为UPF侧接口MAC，内层目的MAC为TN设备核心网侧的接口MAC；所述承载网设备用于解封装VXLAN隧道，将所述内层源MAC修改为TN设备RAN侧接口MAC，内层目的MAC修改为RAN接口MAC；封装所述VXLAN隧道，并将所述下行报文发送给所述接入网设备。
可选地，根据所述网络切片信息将所述下行报文发送给承载网设备包括：
在所述下行报文中增加单个网络切片选择辅助信息SNSSAI扩展头之后，向所述承载网设备发送所述下行报文，其中，所述SNSSAI扩展头用于携带所述网络切片信息；所述承载网设备用于从所述下行报文的SNSSAI扩展头中获取所述网络切片信息，根据所述网络切片信息将下行报文发送给所述接入网设备。
可选地，在接收所述下行报文之前，所述方法还包括：
接收所述承载网设备发送的上行报文，其中，所述上行报文中携带有VLAN ID、VXLAN VNI或所述网络切片信息，所述上行报文是所述承载网设备在接收所述接入网设备发送的所述上行报文之后，获取所述网络切片信息，并对所述网络切片信息进行资源隔离之后发送的；所述承载网设备，用于在所述上行报文中携带有VLAN ID或VXLAN VNI的情况下，根据所述VLAN ID或所述VXLAN VNI获取所述网络切片信息；
根据所述网络切片信息发送所述上行报文。
可选地，在接收所述下行报文之前，所述方法还包括：
接收会话管理功能实体SMF发送的转发控制协议PFCP会话创建请求，其中，所述PFCP会话创建请求中携带有所述网络切片信息；
存储所述用户标识与所述网络切片信息的对应关系，并据所述PFCP会话创建请求创建会话；
向所述SMF发送创建完成消息。
根据本发明的另一个实施例，还提供了一种数据传输方法，应用于承载网设备，包括：
接收用户面管理功能UPF发送的下行报文，其中，所述下行报文中携带有网络切片信息，其中，所述网络切片信息是所述UPF根据预先存储的用户标识与网络切片信息的对应关系确定的用户标识对应的网络切片信息；
对所述网络切片信息进行资源隔离，并将所述下行报文发送给接入网设备。
可选地，接收所述UPF发送的所述下行报文包括：
接收所述UPF发送的携带核心网虚拟局域网VLAN ID的所述下行报文，其中，所述核心网VLAN ID是所述UPF根据预先配置的网络切片信息和VLAN ID的对应关系确定的所述网络 切片信息对应的VLAN ID；或者，
接收所述UPF发送的携带核心网虚拟扩展局域网VXLAN VNI的所述下行报文，其中，所述核心网VXLAN VNI是所述UPF根据预先配置的网络切片信息和VXLAN VNI的对应关系确定的所述网络切片信息对应的VXLAN VNI，所述UPF在发送所述下行报文时封装VXLAN头，其中，内层源地址为UPF侧GTPUIP，内层目的地址为RAN侧GTPUIP，内层源MAC为UPF侧接口MAC，内层目的MAC为TN设备核心网侧的接口MAC；或者，
接收所述UPF发送的增加单个网络切片选择辅助信息SNSSAI扩展头的所述下行报文，其中，所述SNSSAI扩展头用于携带所述网络切片信息。
可选地，对所述网络切片信息进行资源隔离，并将所述下行报文发送给所述接入网设备包括：
将所述核心网侧VLAN ID转换为接入网设备侧VLAN ID；
根据所述接入网设备侧VLAN ID将所述下行报文转发给所述接入网设备。
可选地，将所述核心网侧VLAN ID转换为接入网设备侧VLAN ID包括：
根据预先配置的核心网侧VLAN ID与网络切片信息的对应关系确定所述核心网侧VLAN ID对应的网络切片信息；
根据预先配置的接入网设备侧VLAN ID与网络切片信息的对应关系确定所述网络切片信息对应的接入网设备侧VLAN ID。
可选地，对所述网络切片信息进行资源隔离，并将所述下行报文发送给所述接入网设备包括：
解封装VXLAN隧道，并获取所述网络切片信息；
将所述内层源MAC修改为TN设备RAN侧接口MAC，内层目的MAC修改为RAN接口MAC；
封装所述VXLAN隧道，并将所述下行报文发送给所述接入网设备。
可选地，对所述网络切片信息进行资源隔离，并将所述下行报文发送给所述接入网设备包括：
从所述下行报文的SNSSAI扩展头中获取所述网络切片信息；
根据所述网络切片信息将所述下行报文发送给所述接入网设备。
可选地，在接收UPF发送的下行报文之前，所述方法还包括：
接收所述接入网设备发送的上行报文，其中，所述上行报文中携带有VLAN ID、VXLAN VNI或所述网络切片信息；
在所述上行报文中携带有VLAN ID或VXLAN VNI的情况下，根据所述VLAN ID或所述VXLAN VNI确定所述网络切片信息；
对所述网络切片信息进行资源隔离，并将所述上行报文发送给所述UPF。
根据本发明的另一个实施例，还提供了一种数据传输装置，应用于用户面功能实体UPF， 包括：
第一接收下行报文模块，设置为接收下行报文，其中，所述下行报文中携带有用户标识；
第一确定模块，设置为根据预先存储的用户标识与网络切片信息的对应关系确定所述用户标识对应的网络切片信息；
第一发送模块，设置为根据所述网络切片信息将所述下行报文发送给承载网设备，其中，所述承载网设备用于在对所述网络切片信息进行资源隔离，并将所述下行报文发送接入网设备。
可选地，所述第一发送模块包括：
第一确定子模块，设置为根据预先配置的网络切片信息和虚拟局域网VLAN ID的对应关系确定所述网络切片信息对应的核心网侧VLAN ID；
第一发送子模块，设置为向所述承载网设备发送所述下行报文，其中，所述下行报文中携带所述核心网VLAN ID，所述承载网设备用于将所述核心网侧VLAN ID转换为接入网设备侧VLAN ID之后，将所述下行报文发送给所述接入网设备。
可选地，所述第一发送模块包括：
第二确定子模块，设置为根据预先配置的网络切片信息和虚拟扩展局域网VXLAN VNI的对应关系确定所述网络切片信息对应的核心网侧VXLAN VNI；
第二发送子模块，设置为向所述承载网设备发送所述下行报文，其中，所述下行报文中携带所述核心网VXLAN VNI，在发送所述下行报文时封装VXLAN头，其中，内层源地址为UPF侧GTPUIP，内层目的地址为RAN侧GTPUIP，内层源MAC为UPF侧接口MAC，内层目的MAC为TN设备核心网侧的接口MAC；所述承载网设备用于解封装VXLAN隧道，将所述内层源MAC修改为TN设备RAN侧接口MAC，内层目的MAC修改为RAN接口MAC；封装所述VXLAN隧道，并将所述下行报文发送给所述接入网设备。
可选地，所述第一发送模块包括：
第三发送子模块，设置为在所述下行报文中增加单个网络切片选择辅助信息SNSSAI扩展头之后，向所述承载网设备发送所述下行报文，其中，所述SNSSAI扩展头用于携带所述网络切片信息；所述承载网设备用于从所述下行报文的SNSSAI扩展头中获取所述网络切片信息，根据所述网络切片信息将下行报文发送给所述接入网设备。
可选地，所述装置还包括：
第一接收上行报文模块，设置为接收所述承载网设备发送的上行报文，其中，所述上行报文中携带有VLAN ID、VXLAN VNI或所述网络切片信息，所述上行报文是所述承载网设备在接收所述接入网设备发送的所述上行报文之后，获取所述网络切片信息，并对所述网络切片信息进行资源隔离之后发送的；所述承载网设备，用于在所述上行报文中携带有VLAN ID或VXLAN VNI的情况下，根据所述VLAN ID或所述VXLAN VNI获取所述网络切片信息；
第二发送模块，设置为根据所述网络切片信息发送所述上行报文。
可选地，所述装置还包括：
接收请求模块，设置为接收会话管理功能实体SMF发送的转发控制协议PFCP会话创建请求，其中，所述PFCP会话创建请求中携带有所述网络切片信息；
存储模块，设置为存储所述用户标识与所述网络切片信息的对应关系，并据所述PFCP会话创建请求创建会话；
第三发送模块，设置为向所述SMF发送创建完成消息。
根据本发明的另一个实施例，还提供了一种数据传输装置，应用于承载网设备，包括：
第二接收下行报文模块，设置为接收用户面管理功能UPF发送的下行报文，其中，所述下行报文中携带有网络切片信息，其中，所述网络切片信息是所述UPF根据预先存储的用户标识与网络切片信息的对应关系确定的用户标识对应的网络切片信息；
第一隔离模块，设置为对所述网络切片信息进行资源隔离，并将所述下行报文发送给接入网设备。
可选地，所述第二接收下行报文模块包括：
第一接收子模块，设置为接收所述UPF发送的携带核心网虚拟局域网VLAN ID的所述下行报文，其中，所述核心网VLAN ID是所述UPF根据预先配置的网络切片信息和VLAN ID的对应关系确定的所述网络切片信息对应的VLAN ID；或者，
第二接收子模块，设置为接收所述UPF发送的携带核心网虚拟扩展局域网VXLAN VNI的所述下行报文，其中，所述核心网VXLAN VNI是所述UPF根据预先配置的网络切片信息和VXLAN VNI的对应关系确定的所述网络切片信息对应的VXLAN VNI，所述UPF在发送所述下行报文时封装VXLAN头，其中，内层源地址为UPF侧GTPUIP，内层目的地址为RAN侧GTPUIP，内层源MAC为UPF侧接口MAC，内层目的MAC为TN设备核心网侧的接口MAC；或者，
第三接收子模块，设置为接收所述UPF发送的增加单个网络切片选择辅助信息SNSSAI扩展头的所述下行报文，其中，所述SNSSAI扩展头用于携带所述网络切片信息。
可选地，所述第一隔离模块包括：
转换子模块，设置为将所述核心网侧VLAN ID转换为接入网设备侧VLAN ID；
转发子模块，设置为根据所述接入网设备侧VLAN ID将所述下行报文转发给所述接入网设备。
可选地，所述转换子模块包括：
第一确定单元，设置为根据预先配置的核心网侧VLAN ID与网络切片信息的对应关系确定所述核心网侧VLAN ID对应的网络切片信息；
第二确定单元，设置为根据预先配置的接入网设备侧VLAN ID与网络切片信息的对应关系确定所述网络切片信息对应的接入网设备侧VLAN ID。
可选地，所述第一隔离模块包括：
解封装子模块，设置为解封装VXLAN隧道，并获取所述网络切片信息；
修改子模块，设置为将所述内层源MAC修改为TN设备RAN侧接口MAC，内层目的MAC修改为RAN接口MAC；
封装子模块，设置为封装所述VXLAN隧道，并将所述下行报文发送给所述接入网设备。
可选地，所述第一隔离模块包括：
获取子模块，设置为从所述下行报文的SNSSAI扩展头中获取所述网络切片信息；
发送子模块，设置为根据所述网络切片信息将所述下行报文发送给所述接入网设备。
可选地，所述装置还包括：
第二接收上行报文模块，设置为接收所述接入网设备发送的上行报文，其中，所述上行报文中携带有VLAN ID、VXLAN VNI或所述网络切片信息；
第二确定模块，设置为在所述上行报文中携带有VLAN ID或VXLAN VNI的情况下，根据所述VLAN ID或所述VXLAN VNI确定所述网络切片信息；
第二隔离模块，设置为对所述网络切片信息进行资源隔离，并将所述上行报文发送给所述UPF。
根据本发明的又一个实施例，还提供了一种计算机可读存储介质，所述计算机可读存储介质中存储有计算机程序，其中，所述计算机程序被设置为运行时执行上述任一项方法实施例中的步骤。
根据本发明的又一个实施例，还提供了一种电子装置，包括存储器和处理器，所述存储器中存储有计算机程序，所述处理器被设置为运行所述计算机程序以执行上述任一项方法实施例中的步骤。
通过本发明，通过预先存储的用户标识与网络切片信息的对应关系确定所述用户标识对应的网络切片信息，并根据网络切片信息传输报文，在传输报文过程中通过承载网设备对网络切片信息进行资源隔离，可以解决相关技术中通过网络切片传输数据安全性低的问题，提高了数据安全性的效果。
附图说明
图1是相关技术中的5G系统的架构图；
图2是相关技术中PFCP协议栈的示意图；
图3是本申请实施例的数据传输方法的移动终端的硬件结构框图；
图4是根据本申请实施例的数据传输方法的流程图一；
图5是根据本申请实施例的SNSSAI的结构图；
图6是根据本申请实施例的GTPU扩展头的示意图；
图7是根据本申请实施例的数据传输方法的流程图二；
图8为根据本申请实施例的指示UPF用户会话切片信息的示意图一；
图9为根据本申请实施例的指示UPF用户会话切片信息的示意图二；
图10为根据本申请实施例的指示UPF用户会话切片信息的示意图三；
图11是根据本申请实施例的数据传输装置的结构框图一；
图12是根据本申请实施例的数据传输装置的结构框图二。
具体实施方式
下文中将参考附图并结合实施例来详细说明本发明的实施例。
需要说明的是，本发明的说明书和权利要求书及上述附图中的术语“第一”、“第二”等是用于区别类似的对象，而不必用于描述特定的顺序或先后次序。
本申请实施例中所提供的方法实施例可以在移动终端、计算机终端或者类似的运算装置中执行。以运行在移动终端上为例，图3是本申请实施例的数据传输方法的移动终端的硬件结构框图，如图3所示，移动终端可以包括一个或多个(图3中仅示出一个)处理器102(处理器102可以包括但不限于微处理器MCU或可编程逻辑器件FPGA等的处理装置)和用于存储数据的存储器104，其中，上述移动终端还可以包括用于通信功能的传输设备106以及输入输出设备108。本领域普通技术人员可以理解，图3所示的结构仅为示意，其并不对上述移动终端的结构造成限定。例如，移动终端还可包括比图3中所示更多或者更少的组件，或者具有与图3所示不同的配置。
存储器104可用于存储计算机程序，例如，应用软件的软件程序以及模块，如本发明实施例中的数据传输方法对应的计算机程序，处理器102通过运行存储在存储器104内的计算机程序，从而执行各种功能应用以及数据处理，即实现上述的方法。存储器104可包括高速随机存储器，还可包括非易失性存储器，如一个或者多个磁性存储装置、闪存、或者其他非易失性固态存储器。在一些实例中，存储器104可进一步包括相对于处理器102远程设置的存储器，这些远程存储器可以通过网络连接至移动终端。上述网络的实例包括但不限于互联网、企业内部网、局域网、移动通信网及其组合。
传输装置106用于经由一个网络接收或者发送数据。上述的网络具体实例可包括移动终端的通信供应商提供的无线网络。在一个实例中，传输装置106包括一个网络适配器(Network Interface Controller，简称为NIC)，其可通过基站与其他网络设备相连从而可与互联网进行通讯。在一个实例中，传输装置106可以为射频(Radio Frequency，简称为RF)模块，其用于通过无线方式与互联网进行通讯。
在本实施例中提供了一种运行于上述移动终端或网络架构的数据传输方法，图4是根据本申请实施例的数据传输方法的流程图一，如图4所示，应用于用户面功能实体UPF，该流程包括如下步骤：
步骤S402，接收下行报文，其中，所述下行报文中携带有用户标识；
步骤S404，根据预先存储的用户标识与网络切片信息的对应关系确定所述用户标识对应的网络切片信息；
步骤S406，根据所述网络切片信息将所述下行报文发送给承载网设备，其中，所述承载网设备用于在对所述网络切片信息进行资源隔离，并将所述下行报文发送接入网设备。
通过上述步骤S402至S406，通过预先存储的用户标识与网络切片信息的对应关系确定所述用户标识对应的网络切片信息，并根据网络切片信息传输报文，在传输报文过程中通过承载网设备对网络切片信息进行资源隔离，可以解决相关技术中通过网络切片传输数据安全性低的问题，提高了数据安全性的效果。
在一实施例中，上述步骤S406具体可以包括：根据预先配置的网络切片信息和虚拟局域网VLAN ID的对应关系确定所述网络切片信息对应的核心网侧VLAN ID；向所述承载网设备发送所述下行报文，其中，所述下行报文中携带所述核心网VLAN ID，所述承载网设备用于 将所述核心网侧VLAN ID转换为接入网设备侧VLAN ID之后，将所述下行报文发送给所述接入网设备。即在无线接入网设备(如RAN)、承载网设备(如TN)、核心网设备(如UPF)直接通过VLAN进行不同切片业务流的隔离。
在另一实施例中，上述步骤S406具体还可以包括：根据预先配置的网络切片信息和虚拟扩展局域网VXLAN VNI的对应关系确定所述网络切片信息对应的核心网侧VXLAN VNI；向所述承载网设备发送所述下行报文，其中，所述下行报文中携带所述核心网VXLAN VNI，在发送所述下行报文时封装VXLAN头，其中，内层源地址为UPF侧GTPUIP，内层目的地址为RAN侧GTPUIP，内层源MAC为UPF侧接口MAC，内层目的MAC为TN设备核心网侧的接口MAC；所述承载网设备用于解封装VXLAN隧道，将所述内层源MAC修改为TN设备RAN侧接口MAC，内层目的MAC修改为RAN接口MAC；封装所述VXLAN隧道，并将所述下行报文发送给所述接入网设备。在大规模网络中，核心网侧有几十个网元，同时可能对接几千个不同的企业，本身就需要使用很多的VLANID进行部署，留下进行不同切片网络隔离的VLANID已不多。可以通过VXLAN进行不同切片网络隔离，每个切片对应一个VXLAN VNI，能够支持足够多的切片。
在另一实施例中，上述步骤S406具体还可以包括：在所述下行报文中增加单个网络切片选择辅助信息SNSSAI扩展头之后，向所述承载网设备发送所述下行报文，其中，所述SNSSAI扩展头用于携带所述网络切片信息；所述承载网设备用于从所述下行报文的SNSSAI扩展头中获取所述网络切片信息，根据所述网络切片信息将下行报文发送给所述接入网设备。图5是根据本申请实施例的SNSSAI的结构图，如图5所示，当SMF发起N4口的PFCP会话创建消息PFCP Session Establishment Request中，通过增加网络切片的信息元素来指示UPF用户的切片信息。针对PFCP Session Establishment Request消息新增的字段(SNSSAI)，在消息中的组织，如表1所示。
表1
Figure PCTCN2021095877-appb-000001
在一实施例中，在接收所述下行报文之前，接收所述承载网设备发送的上行报文，其中，所述上行报文中携带有VLAN ID、VXLAN VNI或所述网络切片信息，所述上行报文是所述承载网设备在接收所述接入网设备发送的所述上行报文之后，获取所述网络切片信息，并对所述网络切片信息进行资源隔离之后发送的；所述承载网设备，用于在所述上行报文中携带有VLAN ID或VXLAN VNI的情况下，根据所述VLAN ID或所述VXLAN VNI获取所述网络切片信息；根据所述网络切片信息发送所述上行报文。
在另一实施例中，在接收所述下行报文之前，接收会话管理功能实体SMF发送的转发控制协议PFCP会话创建请求，其中，所述PFCP会话创建请求中携带有所述网络切片信息；存储所述用户标识与所述网络切片信息的对应关系，并据所述PFCP会话创建请求创建会话；向所述SMF发送创建完成消息，SMF将PDU会话的网络切片信息指示给UPF，UPF可以根据会话的网络切片信息映射成VLAN ID进行网络隔离。
在RAN、承载网设备和UPF之间传递的上行报文和下行报文均可以是GTPU报文，图6是根据本申请实施例的GTPU扩展头的示意图，如图6所示，可以在GTPU扩展头中携带用户切片信息，增加切片信息的GTPU扩展头。RAN、TN、UPF使用VLAN、VXLAN、GTPU扩展头等方式在接入网、承载网和核心网之间传递切片信息。RAN、TN、UPF可以通过GTPU扩展头隔离不同切片的业务流，解决使用VLAN隔离时核心网侧VLAN ID不足的问题。
本申请实施例，还提供了一种数据传输方法，应用于承载网设备，图7是根据本申请实施例的数据传输方法的流程图二，如图7所示，包括：
步骤S702，接收用户面管理功能UPF发送的下行报文，其中，所述下行报文中携带有网络切片信息，其中，所述网络切片信息是所述UPF根据预先存储的用户标识与网络切片信息的对应关系确定的用户标识对应的网络切片信息；
步骤S704，对所述网络切片信息进行资源隔离，并将所述下行报文发送给接入网设备。
通过上述步骤S702至S706，通过预先存储的用户标识与网络切片信息的对应关系确定所述用户标识对应的网络切片信息，并根据网络切片信息传输报文，在传输报文过程中通过承载网设备对网络切片信息进行资源隔离，可以解决相关技术中通过网络切片传输数据安全性低的问题，提高了数据安全性的效果。
在一实施例中，上述步骤S702具体可以包括：
接收所述UPF发送的携带核心网虚拟局域网VLAN ID的所述下行报文，其中，所述核心网VLAN ID是所述UPF根据预先配置的网络切片信息和VLAN ID的对应关系确定的所述网络切片信息对应的VLAN ID；或者，
接收所述UPF发送的携带核心网虚拟扩展局域网VXLAN VNI的所述下行报文，其中，所述核心网VXLAN VNI是所述UPF根据预先配置的网络切片信息和VXLAN VNI的对应关系确定的所述网络切片信息对应的VXLAN VNI，所述UPF在发送所述下行报文时封装VXLAN头，其中，内层源地址为UPF侧GTPUIP，内层目的地址为RAN侧GTPUIP，内层源MAC为UPF侧接口MAC，内层目的MAC为TN设备核心网侧的接口MAC；或者，
接收所述UPF发送的增加单个网络切片选择辅助信息SNSSAI扩展头的所述下行报文，其中，所述SNSSAI扩展头用于携带所述网络切片信息。
在一实施例中，上述步骤S704具体可以包括：
将所述核心网侧VLAN ID转换为接入网设备侧VLAN ID，进一步的，根据预先配置的核心网侧VLAN ID与网络切片信息的对应关系确定所述核心网侧VLAN ID对应的网络切片信息；根据预先配置的接入网设备侧VLAN ID与网络切片信息的对应关系确定所述网络切片信息对应的接入网设备侧VLAN ID；
根据所述接入网设备侧VLAN ID将所述下行报文转发给所述接入网设备。
在另一实施例中，上述步骤S704具体还可以包括：
解封装VXLAN隧道，并获取所述网络切片信息；
将所述内层源MAC修改为TN设备RAN侧接口MAC，内层目的MAC修改为RAN接口MAC；
封装所述VXLAN隧道，并将所述下行报文发送给所述接入网设备。
在另一实施例中，上述步骤S704具体还可以包括：
从所述下行报文的SNSSAI扩展头中获取所述网络切片信息；
根据所述网络切片信息将所述下行报文发送给所述接入网设备。
本实施例中，在接收UPF发送的下行报文之前，接收所述接入网设备发送的上行报文，其中，所述上行报文中携带有VLAN ID、VXLAN VNI或所述网络切片信息；在所述上行报文中携带有VLAN ID或VXLAN VNI的情况下，根据所述VLAN ID或所述VXLAN VNI确定所述网络切片信息；对所述网络切片信息进行资源隔离，并将所述上行报文发送给所述UPF，对网络切片信息隔离的方式与上述方式类似，在此不再赘述。
图8为根据本申请实施例的指示UPF用户会话切片信息的示意图一，如图8的对应关系对用户报文进行隔离。本实施例具体实施步骤如下：
步骤1、RAN、TN、UPF上分别配置切片信息和VLAN ID对应关系，TN侧需要分别配置接入侧和核心侧的切片信息和VLAN ID对应关系；
步骤2、用户上线创建PDU会话，SMF向UPF发起PFCP会话创建请求，消息中携带会话的S-NSSAI；
步骤3、UPF创建PFCP会话成功后，保存会话的网络切片信息，给SMF发送会话创建应答消息；
步骤4、终端发起业务，RAN根据用户的切片信息选择VLAN ID，在发送用户数据报文时封装VLAN ID；TN收到报文根据配置将接入侧的VLAN ID修改为核心侧的VLAN ID后转发给UPF；
步骤5、UPF收到下行的用户报文时，根据用户切片信息选择VLAN ID，发送GTPU报文给RAN时封装VLAN ID；TN收到报文根据配置将核心侧的VLAN ID修改为接入侧的VLAN ID后转发给RAN。
使用VLAN ID进行网络隔离是最常见的场景，但是也面临一个问题：VLAN ID只有12位，对于大规模的网络来说肯定是不够的。在RAN-TN-CN的GTPU数据传输过程中，可以通过VXLAN进行不同切片业务流的网络隔离。
图9为根据本申请实施例的指示UPF用户会话切片信息的示意图二，如图9所示，SMF指示UPF会话的网络切片信息，RAN、TN、UPF根据配置的网络切片信息和VXLAN VNI的对应关系对用户报文进行隔离。本实施例中RAN和TN、TN和UPF间分别建立VXLAN隧道，具体实施步骤如下：
步骤1、RAN、TN、UPF上分别配置切片信息和VXLAN VNI对应关系，TN侧需要分别配置接入侧和核心侧的切片信息和VXLAN VNI对应关系；
步骤2、用户上线创建PDU会话，SMF向UPF发起PFCP会话创建请求，消息中携带会话 的S-NSSAI；
步骤3、UPF创建PFCP会话成功后，保存会话的网络切片信息，给SMF发送会话创建应答消息；
步骤4、终端发起业务，RAN根据用户的切片信息选择VXLAN VNI，在发送用户数据报文时封装VXLAN头，其中，内层源地址RAN侧GTPUIP，内层目的地址为UPF侧GTPUIP；内层源MAC为RAN接口MAC，内层目的MAC为TN设备RAN侧的接口MAC；
步骤5、TN收到报文首先解封装VXLAN隧道，修改内层源MAC为TN设备核心侧接口MAC，内层目的MAC为UPF接口MAC；然后TN再封装VXLAN隧道将报文发送给UPF；
步骤6、UPF收到下行的用户报文时，根据用户的切片信息选择VXLAN VNI，在发送用户数据报文时封装VXLAN头(内层源地址UPF侧GTPUIP，内层目的地址为RAN侧GTPUIP。内层源MAC为UPF接口MAC，内层目的MAC为TN设备核心侧的接口MAC。)；
步骤7、TN收到报文首先解封装VXLAN隧道，修改内层源MAC为TN设备RAN侧接口MAC，内层目的MAC为RAN接口MAC；然后TN再封装VXLAN隧道将报文发送给RAN。
图10为根据本申请实施例的指示UPF用户会话切片信息的示意图三，如图10所示，RAN、TN和UPF之间采用GTPU扩展头传递切片信息，具体实施步骤如下：
步骤1、用户上线创建PDU会话，SMF向UPF发起PFCP会话创建请求，消息中携带会话的S-NSSAI；
步骤2、UPF创建PFCP会话成功后，保存会话的网络切片信息，给SMF发送会话创建应答消息；
步骤3-4、终端发起业务，RAN在GTPU报文中增加SNSSAI扩展头后发送给UPF；支持切片的承载网设备TN从报文GTPU扩展头中获取切片信息，选择合适的网络路径将报文发送给UPF；
步骤5-6、UPF收到下行的用户报文时，在GTPU报文中增加SNSSAI扩展头后发送给RAN；支持切片的承载网设备TN从报文GTPU扩展头中获取切片信息，选择合适的网络路径将报文发送给RAN。
通过以上的实施方式的描述，本领域的技术人员可以清楚地了解到根据上述实施例的方法可借助软件加必需的通用硬件平台的方式来实现，当然也可以通过硬件，但很多情况下前者是更佳的实施方式。基于这样的理解，本发明的技术方案本质上或者说对现有技术做出贡献的部分可以以软件产品的形式体现出来，该计算机软件产品存储在一个存储介质(如ROM/RAM、磁碟、光盘)中，包括若干指令用以使得一台终端设备(可以是手机，计算机，服务器，或者网络设备等)执行本发明各个实施例所述的方法。
在本实施例中还提供了一种数据传输装置，该装置用于实现上述实施例及优选实施方式，已经进行过说明的不再赘述。如以下所使用的，术语“模块”可以实现预定功能的软件和/或硬件的组合。尽管以下实施例所描述的装置较佳地以软件来实现，但是硬件，或者软件和硬件的组合的实现也是可能并被构想的。
图11是根据本申请实施例的数据传输装置的结构框图一，如图11所示，该装置应用于用户面功能实体UPF，包括：
第一接收下行报文模块112，设置为接收下行报文，其中，所述下行报文中携带有用户标识；
第一确定模块114，设置为根据预先存储的用户标识与网络切片信息的对应关系确定所述用户标识对应的网络切片信息；
第一发送模块116，设置为根据所述网络切片信息将所述下行报文发送给承载网设备，其中，所述承载网设备用于在对所述网络切片信息进行资源隔离，并将所述下行报文发送接入网设备。
可选地，所述第一发送模块116包括：
第一确定子模块，设置为根据预先配置的网络切片信息和虚拟局域网VLAN ID的对应关系确定所述网络切片信息对应的核心网侧VLAN ID；
第一发送子模块，设置为向所述承载网设备发送所述下行报文，其中，所述下行报文中携带所述核心网VLAN ID，所述承载网设备用于将所述核心网侧VLAN ID转换为接入网设备侧VLAN ID之后，将所述下行报文发送给所述接入网设备。
可选地，所述第一发送模块116包括：
第二确定子模块，设置为根据预先配置的网络切片信息和虚拟扩展局域网VXLAN VNI的对应关系确定所述网络切片信息对应的核心网侧VXLAN VNI；
第二发送子模块，设置为向所述承载网设备发送所述下行报文，其中，所述下行报文中携带所述核心网VXLAN VNI，在发送所述下行报文时封装VXLAN头，其中，内层源地址为UPF侧GTPUIP，内层目的地址为RAN侧GTPUIP，内层源MAC为UPF侧接口MAC，内层目的MAC为TN设备核心网侧的接口MAC；所述承载网设备用于解封装VXLAN隧道，将所述内层源MAC修改为TN设备RAN侧接口MAC，内层目的MAC修改为RAN接口MAC；封装所述VXLAN隧道，并将所述下行报文发送给所述接入网设备。
可选地，所述第一发送模块116包括：
第三发送子模块，设置为在所述下行报文中增加单个网络切片选择辅助信息SNSSAI扩展头之后，向所述承载网设备发送所述下行报文，其中，所述SNSSAI扩展头用于携带所述网络切片信息；所述承载网设备用于从所述下行报文的SNSSAI扩展头中获取所述网络切片信息，根据所述网络切片信息将下行报文发送给所述接入网设备。
可选地，所述装置还包括：
第一接收上行报文模块，设置为接收所述承载网设备发送的上行报文，其中，所述上行报文中携带有VLAN ID、VXLAN VNI或所述网络切片信息，所述上行报文是所述承载网设备在 接收所述接入网设备发送的所述上行报文之后，获取所述网络切片信息，并对所述网络切片信息进行资源隔离之后发送的；所述承载网设备，用于在所述上行报文中携带有VLAN ID或VXLAN VNI的情况下，根据所述VLAN ID或所述VXLAN VNI获取所述网络切片信息；
第二发送模块，设置为根据所述网络切片信息发送所述上行报文。
可选地，所述装置还包括：
接收请求模块，设置为接收会话管理功能实体SMF发送的转发控制协议PFCP会话创建请求，其中，所述PFCP会话创建请求中携带有所述网络切片信息；
存储模块，设置为存储所述用户标识与所述网络切片信息的对应关系，并据所述PFCP会话创建请求创建会话；
第三发送模块，设置为向所述SMF发送创建完成消息。
需要说明的是，上述各个模块是可以通过软件或硬件来实现的，对于后者，可以通过以下方式实现，但不限于此：上述模块均位于同一处理器中；或者，上述各个模块以任意组合的形式分别位于不同的处理器中。
在本实施例中还提供了一种数据传输装置，该装置用于实现上述实施例及优选实施方式，已经进行过说明的不再赘述。如以下所使用的，术语“模块”可以实现预定功能的软件和/或硬件的组合。尽管以下实施例所描述的装置较佳地以软件来实现，但是硬件，或者软件和硬件的组合的实现也是可能并被构想的。
图12是根据本申请实施例的数据传输装置的结构框图二，如图12所示，该装置应用于承载网设备，包括：
第二接收下行报文模块122，设置为接收用户面管理功能UPF发送的下行报文，其中，所述下行报文中携带有网络切片信息，其中，所述网络切片信息是所述UPF根据预先存储的用户标识与网络切片信息的对应关系确定的用户标识对应的网络切片信息；
第一隔离模块124，设置为对所述网络切片信息进行资源隔离，并将所述下行报文发送给接入网设备。
可选地，所述第二接收下行报文模块122包括：
第一接收子模块，设置为接收所述UPF发送的携带核心网虚拟局域网VLAN ID的所述下行报文，其中，所述核心网VLAN ID是所述UPF根据预先配置的网络切片信息和VLAN ID的对应关系确定的所述网络切片信息对应的VLAN ID；或者，
第二接收子模块，设置为接收所述UPF发送的携带核心网虚拟扩展局域网VXLAN VNI的所述下行报文，其中，所述核心网VXLAN VNI是所述UPF根据预先配置的网络切片信息和VXLAN VNI的对应关系确定的所述网络切片信息对应的VXLAN VNI，所述UPF在发送所述下行报文时封装VXLAN头，其中，内层源地址为UPF侧GTPUIP，内层目的地址为RAN侧GTPUIP，内层源MAC为UPF侧接口MAC，内层目的MAC为TN设备核心网侧的接口MAC；或者，
第三接收子模块，设置为接收所述UPF发送的增加单个网络切片选择辅助信息SNSSAI扩展头的所述下行报文，其中，所述SNSSAI扩展头用于携带所述网络切片信息。
可选地，所述第一隔离模块124包括：
转换子模块，设置为将所述核心网侧VLAN ID转换为接入网设备侧VLAN ID；
转发子模块，设置为根据所述接入网设备侧VLAN ID将所述下行报文转发给所述接入网设备。
可选地，所述转换子模块包括：
第一确定单元，设置为根据预先配置的核心网侧VLAN ID与网络切片信息的对应关系确定所述核心网侧VLAN ID对应的网络切片信息；
第二确定单元，设置为根据预先配置的接入网设备侧VLAN ID与网络切片信息的对应关系确定所述网络切片信息对应的接入网设备侧VLAN ID。
可选地，所述第一隔离模块124包括：
解封装子模块，设置为解封装VXLAN隧道，并获取所述网络切片信息；
修改子模块，设置为将所述内层源MAC修改为TN设备RAN侧接口MAC，内层目的MAC修改为RAN接口MAC；
封装子模块，设置为封装所述VXLAN隧道，并将所述下行报文发送给所述接入网设备。
可选地，所述第一隔离模块124包括：
获取子模块，设置为从所述下行报文的SNSSAI扩展头中获取所述网络切片信息；
发送子模块，设置为根据所述网络切片信息将所述下行报文发送给所述接入网设备。
可选地，所述装置还包括：
第二接收上行报文模块，设置为接收所述接入网设备发送的上行报文，其中，所述上行报文中携带有VLAN ID、VXLAN VNI或所述网络切片信息；
第二确定模块，设置为在所述上行报文中携带有VLAN ID或VXLAN VNI的情况下，根据所述VLAN ID或所述VXLAN VNI确定所述网络切片信息；
第二隔离模块，设置为对所述网络切片信息进行资源隔离，并将所述上行报文发送给所述UPF。
需要说明的是，上述各个模块是可以通过软件或硬件来实现的，对于后者，可以通过以下方式实现，但不限于此：上述模块均位于同一处理器中；或者，上述各个模块以任意组合的形式分别位于不同的处理器中。
本发明的实施例还提供了一种计算机可读存储介质，该计算机可读存储介质中存储有计算机程序，其中，该计算机程序被设置为运行时执行上述任一项方法实施例中的步骤。
在一个示例性实施例中，上述计算机可读存储介质可以包括但不限于：U盘、只读存储器(Read-Only Memory，简称为ROM)、随机存取存储器(Random Access Memory，简称为RAM)、移动硬盘、磁碟或者光盘等各种可以存储计算机程序的介质。
本发明的实施例还提供了一种电子装置，包括存储器和处理器，该存储器中存储有计算机程序，该处理器被设置为运行计算机程序以执行上述任一项方法实施例中的步骤。
在一个示例性实施例中，上述电子装置还可以包括传输设备以及输入输出设备，其中，该传输设备和上述处理器连接，该输入输出设备和上述处理器连接。
本实施例中的具体示例可以参考上述实施例及示例性实施方式中所描述的示例，本实施例在此不再赘述。
显然，本领域的技术人员应该明白，上述的本发明的各模块或各步骤可以用通用的计算装置来实现，它们可以集中在单个的计算装置上，或者分布在多个计算装置所组成的网络上，它们可以用计算装置可执行的程序代码来实现，从而，可以将它们存储在存储装置中由计算装置来执行，并且在某些情况下，可以以不同于此处的顺序执行所示出或描述的步骤，或者将它们分别制作成各个集成电路模块，或者将它们中的多个模块或步骤制作成单个集成电路模块来实现。这样，本发明不限制于任何特定的硬件和软件结合。
以上所述仅为本发明的优选实施例而已，并不用于限制本发明，对于本领域的技术人员来说，本发明可以有各种更改和变化。凡在本发明的原则之内，所作的任何修改、等同替换、改进等，均应包含在本发明的保护范围之内。
工业实用性
本实施例，应用于通信领域，可以解决相关技术中通过网络切片传输数据安全性低的问题，提高了数据安全性的效果。

Claims (17)

  1. 一种数据传输方法，应用于用户面功能实体UPF，包括：
    接收下行报文，其中，所述下行报文中携带有用户标识；
    根据预先存储的用户标识与网络切片信息的对应关系确定所述用户标识对应的网络切片信息；
    根据所述网络切片信息将所述下行报文发送给承载网设备，其中，所述承载网设备用于在对所述网络切片信息进行资源隔离，并将所述下行报文发送接入网设备。
  2. 根据权利要求1所述的方法，其中，根据所述网络切片信息将所述下行报文发送给承载网设备包括：
    根据预先配置的网络切片信息和虚拟局域网VLAN ID的对应关系确定所述网络切片信息对应的核心网侧VLAN ID；
    向所述承载网设备发送所述下行报文，其中，所述下行报文中携带所述核心网VLAN ID，所述承载网设备用于将所述核心网侧VLAN ID转换为接入网设备侧VLAN ID之后，将所述下行报文发送给所述接入网设备。
  3. 根据权利要求1所述的方法，其中，根据所述网络切片信息将所述下行报文发送给承载网设备包括：
    根据预先配置的网络切片信息和虚拟扩展局域网VXLAN VNI的对应关系确定所述网络切片信息对应的核心网侧VXLAN VNI；
    向所述承载网设备发送所述下行报文，其中，所述下行报文中携带所述核心网VXLAN VNI，在发送所述下行报文时封装VXLAN头，其中，内层源地址为UPF侧GTPUIP，内层目的地址为RAN侧GTPUIP，内层源MAC为UPF侧接口MAC，内层目的MAC为TN设备核心网侧的接口MAC；所述承载网设备用于解封装VXLAN隧道，将所述内层源MAC修改为TN设备RAN侧接口MAC，内层目的MAC修改为RAN接口MAC；封装所述VXLAN隧道，并将所述下行报文发送给所述接入网设备。
  4. 根据权利要求1所述的方法，其中，根据所述网络切片信息将所述下行报文发送给承载网设备包括：
    在所述下行报文中增加单个网络切片选择辅助信息SNSSAI扩展头之后，向所述承载网设备发送所述下行报文，其中，所述SNSSAI扩展头用于携带所述网络切片信息；所述承载网设备用于从所述下行报文的SNSSAI扩展头中获取所述网络切片信息，根据所述网络切片信息将下行报文发送给所述接入网设备。
  5. 根据权利要求1至4中任一项所述的方法，其中，在接收所述下行报文之前，所述方法还包括：
    接收所述承载网设备发送的上行报文，其中，所述上行报文中携带有VLAN ID、VXLAN VNI或所述网络切片信息，所述上行报文是所述承载网设备在接收所述接入网设备发送的所述上行报文之后，获取所述网络切片信息，并对所述网络切片信息进行资源隔离之后发送的；所述承载网设备，用于在所述上行报文中携带有VLAN ID或VXLAN VNI的情况下，根据所述VLAN  ID或所述VXLAN VNI获取所述网络切片信息；
    根据所述网络切片信息发送所述上行报文。
  6. 根据权利要求1至4中任一项所述的方法，其中，在接收所述下行报文之前，所述方法还包括：
    接收会话管理功能实体SMF发送的转发控制协议PFCP会话创建请求，其中，所述PFCP会话创建请求中携带有所述网络切片信息；
    存储所述用户标识与所述网络切片信息的对应关系，并据所述PFCP会话创建请求创建会话；
    向所述SMF发送创建完成消息。
  7. 一种数据传输方法，应用于承载网设备，包括：
    接收用户面管理功能UPF发送的下行报文，其中，所述下行报文中携带有网络切片信息，其中，所述网络切片信息是所述UPF根据预先存储的用户标识与网络切片信息的对应关系确定的用户标识对应的网络切片信息；
    对所述网络切片信息进行资源隔离，并将所述下行报文发送给接入网设备。
  8. 根据权利要求7所述的方法，其中，接收所述UPF发送的所述下行报文包括：
    接收所述UPF发送的携带核心网虚拟局域网VLAN ID的所述下行报文，其中，所述核心网VLAN ID是所述UPF根据预先配置的网络切片信息和VLAN ID的对应关系确定的所述网络切片信息对应的VLAN ID；或者，
    接收所述UPF发送的携带核心网虚拟扩展局域网VXLAN VNI的所述下行报文，其中，所述核心网VXLAN VNI是所述UPF根据预先配置的网络切片信息和VXLAN VNI的对应关系确定的所述网络切片信息对应的VXLAN VNI，所述UPF在发送所述下行报文时封装VXLAN头，其中，内层源地址为UPF侧GTPUIP，内层目的地址为RAN侧GTPUIP，内层源MAC为UPF侧接口MAC，内层目的MAC为TN设备核心网侧的接口MAC；或者，
    接收所述UPF发送的增加单个网络切片选择辅助信息SNSSAI扩展头的所述下行报文，其中，所述SNSSAI扩展头用于携带所述网络切片信息。
  9. 根据权利要求8所述的方法，其中，对所述网络切片信息进行资源隔离，并将所述下行报文发送给所述接入网设备包括：
    将所述核心网侧VLAN ID转换为接入网设备侧VLAN ID；
    根据所述接入网设备侧VLAN ID将所述下行报文转发给所述接入网设备。
  10. 根据权利要求9所述的方法，其中，将所述核心网侧VLAN ID转换为接入网设备侧VLAN ID包括：
    根据预先配置的核心网侧VLAN ID与网络切片信息的对应关系确定所述核心网侧VLAN ID对应的网络切片信息；
    根据预先配置的接入网设备侧VLAN ID与网络切片信息的对应关系确定所述网络切片信 息对应的接入网设备侧VLAN ID。
  11. 根据权利要求8所述的方法，其中，对所述网络切片信息进行资源隔离，并将所述下行报文发送给所述接入网设备包括：
    解封装VXLAN隧道，并获取所述网络切片信息；
    将所述内层源MAC修改为TN设备RAN侧接口MAC，内层目的MAC修改为RAN接口MAC；
    封装所述VXLAN隧道，并将所述下行报文发送给所述接入网设备。
  12. 根据权利要求8所述的方法，其中，对所述网络切片信息进行资源隔离，并将所述下行报文发送给所述接入网设备包括：
    从所述下行报文的SNSSAI扩展头中获取所述网络切片信息；
    根据所述网络切片信息将所述下行报文发送给所述接入网设备。
  13. 根据权利要求7至14中任一项所述的方法，其中，在接收UPF发送的下行报文之前，所述方法还包括：
    接收所述接入网设备发送的上行报文，其中，所述上行报文中携带有VLAN ID、VXLAN VNI或所述网络切片信息；
    在所述上行报文中携带有VLAN ID或VXLAN VNI的情况下，根据所述VLAN ID或所述VXLAN VNI确定所述网络切片信息；
    对所述网络切片信息进行资源隔离，并将所述上行报文发送给所述UPF。
  14. 一种数据传输装置，应用于用户面功能实体UPF，包括：
    第一接收下行报文模块，设置为接收下行报文，其中，所述下行报文中携带有用户标识；
    第一确定模块，设置为根据预先存储的用户标识与网络切片信息的对应关系确定所述用户标识对应的网络切片信息；
    第一发送模块，设置为根据所述网络切片信息将所述下行报文发送给承载网设备，其中，所述承载网设备用于在对所述网络切片信息进行资源隔离，并将所述下行报文发送接入网设备。
  15. 一种数据传输装置，应用于承载网设备，包括：
    第二接收下行报文模块，设置为接收用户面管理功能UPF发送的下行报文，其中，所述下行报文中携带有网络切片信息，其中，所述网络切片信息是所述UPF根据预先存储的用户标识与网络切片信息的对应关系确定的用户标识对应的网络切片信息；
    第一隔离模块，设置为对所述网络切片信息进行资源隔离，并将所述下行报文发送给接入网设备。
  16. 一种计算机可读存储介质，所述计算机可读存储介质中存储有计算机程序，其中，所述计算机程序被设置为运行时执行所述权利要求1至6任一项中所述的方法，或者执行权利要求7至13任一项中所述的方法。
  17. 一种电子装置，包括存储器和处理器，所述存储器中存储有计算机程序，所述处理 器被设置为运行所述计算机程序以执行所述权利要求1至6任一项中所述的方法，或者执行权利要求7至13任一项中所述的方法。
PCT/CN2021/095877 2020-06-02 2021-05-25 数据传输方法及装置 WO2021244356A1 (zh)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN202010493629.XA CN113765762A (zh) 2020-06-02 2020-06-02 数据传输方法及装置
CN202010493629.X 2020-06-02

Publications (1)

Publication Number Publication Date
WO2021244356A1 true WO2021244356A1 (zh) 2021-12-09

Family

ID=78783207

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2021/095877 WO2021244356A1 (zh) 2020-06-02 2021-05-25 数据传输方法及装置

Country Status (2)

Country Link
CN (1) CN113765762A (zh)
WO (1) WO2021244356A1 (zh)

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN114244716A (zh) * 2021-12-20 2022-03-25 中国电信股份有限公司 切片信息的处理方法及装置、存储介质、电子设备
CN114710805A (zh) * 2022-04-11 2022-07-05 中国电信股份有限公司 切片业务数据的交互方法、装置、电子设备和可读介质

Citations (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN108513290A (zh) * 2017-02-27 2018-09-07 华为技术有限公司 一种网络切片的选择方法及装置
CN109660464A (zh) * 2017-10-12 2019-04-19 中兴通讯股份有限公司 一种下行报文处理方法、upf设备和存储介质
US20200029264A1 (en) * 2018-07-20 2020-01-23 Google Llc Network slicing for wlan
CN110945926A (zh) * 2019-10-29 2020-03-31 北京小米移动软件有限公司 连接建立方法及装置、基站、用户设备和核心网设备
CN111031592A (zh) * 2015-09-18 2020-04-17 华为技术有限公司 核心网选择方法、装置及系统
CN111131258A (zh) * 2019-12-26 2020-05-08 中移(成都)信息通信科技有限公司 一种基于5g网络切片的安全专网架构系统

Patent Citations (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN111031592A (zh) * 2015-09-18 2020-04-17 华为技术有限公司 核心网选择方法、装置及系统
CN108513290A (zh) * 2017-02-27 2018-09-07 华为技术有限公司 一种网络切片的选择方法及装置
CN109660464A (zh) * 2017-10-12 2019-04-19 中兴通讯股份有限公司 一种下行报文处理方法、upf设备和存储介质
US20200029264A1 (en) * 2018-07-20 2020-01-23 Google Llc Network slicing for wlan
CN110945926A (zh) * 2019-10-29 2020-03-31 北京小米移动软件有限公司 连接建立方法及装置、基站、用户设备和核心网设备
CN111131258A (zh) * 2019-12-26 2020-05-08 中移(成都)信息通信科技有限公司 一种基于5g网络切片的安全专网架构系统

Non-Patent Citations (2)

* Cited by examiner, † Cited by third party
Title
HUAWEI, HISILICON: ""Network Slice Isolation"", 3GPP TSG SA WG3(SECURITY) MEETING #86BIS, S3-170706, 20 March 2017 (2017-03-20), XP051258396 *
NOKIA, NOKIA SHANGHAI BELL: ""TD proposal for network slice isolation attribute"", 3GPP TSG SA5 MEETING #129E, S5-201382, 15 February 2020 (2020-02-15), XP051855943 *

Cited By (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN114244716A (zh) * 2021-12-20 2022-03-25 中国电信股份有限公司 切片信息的处理方法及装置、存储介质、电子设备
CN114244716B (zh) * 2021-12-20 2024-04-23 中国电信股份有限公司 切片信息的处理方法及装置、存储介质、电子设备
CN114710805A (zh) * 2022-04-11 2022-07-05 中国电信股份有限公司 切片业务数据的交互方法、装置、电子设备和可读介质
CN114710805B (zh) * 2022-04-11 2024-02-06 中国电信股份有限公司 切片业务数据的交互方法、装置、电子设备和可读介质

Also Published As

Publication number Publication date
CN113765762A (zh) 2021-12-07

Similar Documents

Publication Publication Date Title
US11146462B2 (en) Network slice management method, device, and system
US11765686B2 (en) Packet transmission method and apparatus for communicating between terminals of a same 5G LAN group
US11184842B2 (en) Conveying non-access stratum messages over ethernet
EP3836577B1 (en) Session management method and device for user groups
US11528225B2 (en) Communication method, session management device, and system for packet routing by access network devices belonging to a same network instance having different network addresses
CN107872542B (zh) 一种数据传输的方法及网络设备
US11601899B2 (en) Link establishment between a radio equipment controller (REC) and radio equipment (RE) in a fronthaul network
CN114189905B (zh) 一种报文处理方法及相关设备
CN105591971B (zh) 一种QoS的实现方法和装置
JP2021530912A (ja) ネットワークスライス制御方法及び装置、コンピュータ読み取り可能な記憶媒体
CN114124618B (zh) 一种报文传输方法及电子设备
WO2018126896A1 (en) Protocol data unit management
EP3577857B1 (en) Network resource model to support next generation node b
WO2021244356A1 (zh) 数据传输方法及装置
US20210112437A1 (en) User Plane QOS Bearer Control Method for 5G Fixed Access
WO2021174943A1 (zh) 数据转发方法、装置、设备和存储介质
CN110769500A (zh) 一种通信方法及装置
US10764411B2 (en) Stream control transmission protocol SCTP-based communications method and system, and apparatus
WO2022143395A1 (zh) 一种冗余路径创建方法、装置及系统
CN108234092B (zh) 一种信令配置方法、rrc实体以及pdcp实体
WO2022007749A1 (zh) 一种数据传输方法和装置
CN113709015A (zh) 数据传输方法、电子设备及存储介质
WO2021042381A1 (zh) 一种通信方法、装置及系统
CN117221024A (zh) 通信方法、up设备及cp设备
CN110620999A (zh) 用户面数据处理方法及装置

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 21818669

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE

32PN Ep: public notification in the ep bulletin as address of the adressee cannot be established

Free format text: NOTING OF LOSS OF RIGHTS PURSUANT TO RULE 112(1) EPC (EPO FORM 1205 DATED 12/04/2023)

122 Ep: pct application non-entry in european phase

Ref document number: 21818669

Country of ref document: EP

Kind code of ref document: A1