WO2023273953A1

WO2023273953A1 - Multicast group access control method and apparatus, readable storage medium and gateway

Info

Publication number: WO2023273953A1
Application number: PCT/CN2022/100085
Authority: WO
Inventors: 苗润泉
Original assignee: 展讯半导体(南京)有限公司
Priority date: 2021-06-30
Filing date: 2022-06-21
Publication date: 2023-01-05
Also published as: CN115549935A

Abstract

A multicast group access control method and apparatus, a readable storage medium, a gateway, and a method, comprising: receiving a join request from a host, the join request comprising identification information of a multicast group requested to be joined by the host; searching, according to the identification information of the multicast group, a host permission control list, wherein the host permission control list is used for indicating that each host accesses the access permission of each multicast group; and if the host permission control list indicates that the host is authorized for the access permission of the multicast group, sending a multicast join request to a user plane function (UPF). According to the present invention, a user demand for performing finer permission control on different hosts can be satisfied.

Description

Multicast group access control method and device, readable storage medium, gateway

This application claims the priority of the Chinese patent application submitted to the China Patent Office on June 30, 2021, with the application number 202110741950.X, and the title of the invention is "multicast group access control method and device, readable storage medium, and gateway" , the entire contents of which are incorporated in this application by reference.

technical field

The invention relates to the field of communication technology, in particular to a multicast group access control method and device, a readable storage medium, and a gateway.

Background technique

According to the current research progress of the 3rd Generation Partnership Project (3GPP) on indoor enhancement, a new application scenario has been introduced in the communication protocol (such as TR 22.858), that is, some traditional non-3GPP devices pass through the home Gateway RG to access multicast services, such as digital video conversion box (Set Top Box, STB, also known as set-top box).

Among them, the access authority of the multicast service can be based on the subscription of the Residential Gateway (RG), that is, the RG has user-level access authority, and only the multicast service (such as a certain channel) subscribed by the RG can be accessed by the STB. In the research of 3GPP Release 16 (Release16, R16), the STB on the rear side of the RG shares the same access rights as the RG. Specifically, the 5G system supports Internet Protocol TV or Interactive Personal TV (IPTV) ) class of multicast services have been standardized, and the relevant procedures of 5G-RG joining and leaving a multicast group and the details of user access authority control have been determined.

However, in the eighteenth version (Release18, R18) scenario requirements, it is hoped that different STBs can be controlled more finely, and this part is still blank in the prior art.

Contents of the invention

The technical problem solved by the present invention is to provide a multicast group access control method and device, a readable storage medium, and a gateway, which can meet user requirements for more fine-grained authority control on different hosts.

In order to solve the above technical problems, an embodiment of the present invention provides an access control method for a multicast group, including: receiving a join request from a host, where the join request includes identification information of the multicast group that the host requests to join; according to the The identification information of the multicast group searches for a host authority control list, wherein the host authority control list is used to indicate the access authority of each host to each multicast group; if the host authority control list indicates that the host has If the access right of the group is authorized, a multicast join request is sent to UPF.

Optionally, before receiving the join request from the host, the multicast group access control method further includes: receiving an externally input expected access right of each host to each multicast group, and formulating the desired access right according to the expected access right The above-mentioned host permission control list.

Optionally, formulating the host authority control list according to the expected access authority includes: formulating a first version of the host authority control list according to the expected access authority; receiving externally input expected access authority of each host to each multicast group At or after, apply for the gateway access authority, which is used to indicate the access authority of the current gateway device to access each multicast group; for each multicast group, if there is one or more hosts whose expected access authority is higher than For gateway access rights, in the first version of the host rights control list, the gateway access rights are used to replace the expected access rights, so as to obtain the host rights control list.

Optionally, formulating the host authority control list according to the desired access authority includes: applying for gateway access authority, the gateway access authority is used to indicate the access authority of the current gateway device to access each multicast group; using the gateway access authority As the second initial version of the host authority control list; for each multicast group, if there is one or more hosts whose expected access authority is lower than the gateway access authority, then in the second initial version of the host authority control list, the expected The access authority replaces the gateway access authority to obtain the host authority control.

Optionally, the applying for the gateway access right includes: applying to the AF or UDR for the gateway access right.

Optionally, the gateway access authority includes identification information of each multicast group; wherein, the identification information of the multicast group is selected from: multicast address information of the multicast group, and multicast group identification.

Optionally, the access permission is selected from: authorized and fully allowed, authorized and allowed to preview, and unauthorized; wherein, the authorized and fully allowed is higher than the authorized and allowed to preview, and the The authorized and allowed preview is higher than the unauthorized.

Optionally, the multicast group access control method further includes: if the host authority control list indicates that the host's access authority to the multicast group is not authorized, then terminating sending the join request.

Optionally, the multicast group access control method further includes: sending a rejection response to the host.

Optionally, the host authority control list includes identification information of each host and identification information of each multicast group, and satisfies one or more of the following: the identification information of the host is the host name and/or the IP address of the host ; The identification information of the multicast group is the multicast address information and/or the multicast group identifier of the multicast group.

In order to solve the above technical problems, an embodiment of the present invention provides an access control device for a multicast group, including: a receiving module, configured to receive a join request from a host, and the join request includes the identifier of the multicast group that the host requests to join information; a search module, configured to search for a host authority control list according to the identification information of the multicast group, wherein the host authority control list is used to indicate the access authority of each host to access each multicast group; a sending module, used for when When the host permission control list indicates that the host has authorized access to the multicast group, it sends a multicast join request to the UPF.

In order to solve the above technical problem, an embodiment of the present invention provides a readable storage medium on which a computer program is stored, and when the computer program is run by a processor, the steps of the above multicast group access control method are executed.

In order to solve the above technical problems, an embodiment of the present invention provides a gateway, including a memory and a processor, the memory stores a computer program that can run on the processor, and when the processor runs the computer program, it executes Steps of the access control method for the above multicast group.

Compared with the prior art, the technical solutions of the embodiments of the present invention have the following beneficial effects:

In the embodiment of the present invention, by setting the gateway to receive the joining request from the host, and then searching the host authority control list, wherein the host authority control list is used to indicate the access authority of each host to access each multicast group, the gateway can be configured according to The host determines whether to send a multicast join request to the UPF for the access authority of the multicast group. Specifically, the gateway can set the access authority for each host separately by setting the host authority control list, so that in some application scenarios, It is possible to set the user's expected access authority lower than the gateway access authority to meet the user's needs for more fine-grained authority control on different hosts.

Further, before receiving the joining request from the host, it also includes: receiving the expected access authority of each host to each multicast group input from the outside, and formulating the host authority control list according to the expected access authority, so that the user's Expect access rights to further meet user needs for more fine-grained permission control on different hosts.

Further, formulate the first version of the host authority control list, apply for the gateway access authority, and for each multicast group, if there is one or more hosts whose expected access authority is higher than the gateway access authority, then in the first version of the host authority control In the list, the gateway access authority is used to replace the expected access authority to obtain the host authority control list, so that the configuration of the user can be checked and revised by applying for the gateway access authority, especially for those whose expected access authority is lower than the gateway access authority The host, which complies with the contracted access authority, can be directly replaced by the gateway access authority to meet it, and further meet the user's needs for more fine-grained authority control on different hosts.

Further, formulating the host authority control list according to the expected access authority includes: applying for gateway access authority, the gateway access authority is used to indicate the access authority of the current gateway device to access each multicast group; using the gateway access authority as the first The second primary version of the host permission control list; for each multicast group, if there is one or more hosts whose expected access authority is lower than the gateway access authority, then in the second primary version of the host authority control list, adopt the expected access authority Replace the gateway access authority to obtain the host authority control, so that the user configuration can be checked and revised by applying for the gateway access authority, especially for hosts whose expected access authority is lower than the gateway access authority, the gateway access authority can be directly used Substitution is thus satisfied, and further satisfies user requirements for more fine-grained authority control on different hosts.

Further, if the host authority control list indicates that the host's access authority to the multicast group is not authorized, then stop sending the join request, so that the gateway can be used to judge the host authority without sending it to the UPF Judgment is made only to effectively improve the functionality of the gateway.

Description of drawings

FIG. 1 is a schematic diagram of an application scenario in which a host accesses a multicast service through a home gateway RG in the prior art;

FIG. 2 is a data flow diagram of a 5G-RG joining a multicast group transmission process in the prior art;

FIG. 3 is a data flow diagram of a 5G-RG leaving a multicast group through a UPF query or actively sending an IGMP/MLD leave message in the prior art;

Fig. 4 is a flowchart of a multicast group access control method in an embodiment of the present invention;

Fig. 5 is a data flow diagram of another multicast group access control method in an embodiment of the present invention;

Fig. 6 is a schematic structural diagram of an access control device for a multicast group in an embodiment of the present invention.

detailed description

In the existing technology, in the research of 3GPP R16, the STB behind the RG shares the same access rights as the RG, but in the R18 scenario, it is hoped that different STBs can be controlled more finely. However, in the current There is still a blank in the technology.

Referring to FIG. 1 , FIG. 1 is a schematic diagram of an application scenario in which a host accesses a multicast service through a home gateway RG in the prior art.

As shown in Figure 1, each gateway 102 can be associated with a plurality of hosts (taking STB 101 as an example), for example, can be associated with STB 1, STB 2 and STB 3, and the gateway 102 can exchange information with the base station 103, and then Information exchange is performed between the base station 103 and the 5G core network 104 .

Specifically, for example, if a certain STB 101 is placed in a children's bedroom, it is hoped that the STB 101 can only access children's channels in subscribed channels, and if a certain STB 101 is placed in a parent's bedroom, it can access all subscribed channels. channel etc.

Furthermore, in R16, the 5G system supports IPTV multicast services, and the relevant procedures for 5G-RG joining and leaving multicast groups and the details of user access authority control are determined.

Referring to FIG. 2, FIG. 2 is a data flow diagram of a 5G-RG joining multicast group transmission process in the prior art.

In the prior art, 5G home gateway (5G-RG) 21, base station access network (Access Network, (R)AN) 22, access management function (Access Management Function, AMF) 23, user plane data ( User Plane Function, UPF) 24, session management function (Session Management Function, SMF) 25, billing policy function (Payment Capture Function, PCF) 26, user data management (User Data Management, UDM) 27, IPTV multicast group ( IPTV multicast server, IPTV MS) 28 and other modules realize the 5G-RG joining multicast group transmission process.

During the transmission process of 5G-RG joining the multicast group, 5G-RG 21 can send Internet Group Management Protocol (Internet Group Management Protocol, IGMP)/multicast listening discovery to the UPF of the core network through user plane data (UPF) 24 A protocol (Multicast Listener Discover, MLD) join message is used to apply for joining a certain multicast group. UPF24, as a multicast router, judges whether to reject or accept the request according to the N4 interface rules formulated by SMF25. For accepted request, UPF24 interacts with IPTV multicast group (such as IPTV multicast server) 28 through N6 interface, obtains the multicast service from server, and duplicates into multiple copies at UPF24 place, sends to multiple requests broadcast service on 5G-RG21.

For more information about Figure 2, you can refer to the content in the communication protocol, such as TR22.858, etc.

Referring to FIG. 3 , FIG. 3 is a data flow diagram of a 5G-RG leaving a multicast group by querying UPF or actively sending an IGMP/MLD leave message in the prior art.

Specifically, multiple modules such as 5G-RG 31, (R)AN 32, AMF 33, UPF 34, SMF 35, PCF 36, UDM 37, and IPTV multicast group 38 can be used to realize 5G-RG leaving the multicast group.

Among them, step 1.a and step 1.b can be used in combination to enable 5G-RG31 to leave the multicast group through UPF34 query, and step 1.c can also be used alone to enable 5G-RG31 to actively send IGMP/MLD leave messages to leave multicast group.

As shown in the figure, 5G-RG31 can leave the multicast group by querying UPF34 or actively sending IGMP/MLD leave messages. When a multicast group has no members, UPF34 stops forwarding the data of the multicast group.

For more details about Figure 3, you can refer to the content in the communication protocol, such as TR22.858 and so on.

The inventor of the present invention has found through research that, in the prior art, the gateway access authority is the host access authority and cannot be modified. Specifically, when subscribing to a multicast service (such as IPTV) based on a gateway, the traditional non-3GPP devices behind the gateway are invisible to the network side, and it is impossible to implement finer-grained access authority control for each non-3GPP device. Devices behind each gateway share the same access rights. As a result, in some application scenarios, for example, when the user's expected access authority is lower than the gateway access authority, the user's needs cannot be met because special settings cannot be made according to each host.

In order to make the above objects, features and beneficial effects of the present invention more comprehensible, specific embodiments of the present invention will be described in detail below in conjunction with the accompanying drawings.

Referring to FIG. 4, FIG. 4 is a flow chart of a multicast group access control method in an embodiment of the present invention. The access control method of the multicast group may include steps S41 to S43:

Step S41: receiving a join request from the host, where the join request includes identification information of the multicast group that the host requests to join;

Step S42: Searching for a host authority control list according to the identification information of the multicast group, wherein the host authority control list is used to indicate the access authority of each host to each multicast group;

Step S43: If the host authority control list indicates that the access authority of the host to the multicast group is authorized, send a multicast join request to the UPF.

It can be understood that, in a specific implementation, the method may be implemented in the form of a software program, and the software program runs in a processor integrated in a chip or a chip module.

In the specific implementation of step S41, a step in which the gateway receives a join request from the host may be set.

Compared with the prior art, the access authority of the gateway is the access authority of the host, so the gateway does not need to pay extra attention to the access requirements of each host. Set access permissions for each host.

Further, before receiving the joining request from the host in step S41, the access control method for the multicast group may further include: receiving an externally input expected access right of each host to each multicast group, and according to the expected access right Formulate the host authority control list.

Specifically, the user can input desired access rights, for example, for the hosts in children's and teenagers' rooms, it can be set that only part of the rights can be supported. In a non-limiting embodiment, it can be set that only some TV programs can be watched, or the function of surfing the Internet can be restricted.

In a specific implementation manner of the embodiment of the present invention, the desired access rights configured by the user may be directly used as a host permission control list.

It is understandable that in the subsequent steps, UPF or other appropriate modules will judge the join request according to the N4 interface rules, so the gateway will not directly use the expected access rights configured by the user as the host access control list. lead to errors.

In the embodiment of the present invention, by setting the expected access authority of each host receiving external input to access each multicast group before receiving the join request from the host, and formulating the host authority control list according to the expected access authority, it is possible Effectively receive the user's expected access rights, and further meet the user's needs for more fine-grained rights control on different hosts.

In another specific implementation manner of the embodiment of the present invention, the gateway can check and revise the configuration of the user by applying for the gateway access authority.

Furthermore, in a specific implementation manner of the embodiment of the present invention, the step of formulating the host authority control list according to the expected access authority may include: formulating a first primary version of the host authority control list according to the expected access authority; When or after receiving the expected access rights of each host to access each multicast group from the outside, apply for gateway access rights, and the gateway access rights are used to represent the access rights of the current gateway device to access each multicast group; for each multicast broadcast group, if there is one or more hosts whose expected access authority is higher than the gateway access authority, then in the first version of the host authority control list, the gateway access authority is used to replace the expected access authority to obtain the host authority control list.

Specifically, when formulating the host authority control list, you can first determine the desired access authority, and then apply for the gateway access authority, and use the expected access authority as the first version of the host access authority list. The gateway access authority only includes authorized multicast groups list, and different hosts have the same access rights, and then according to user needs, downgrade the access rights of the multicast groups corresponding to different hosts in the first version of the access rights list that need to restrict access.

Furthermore, in another specific implementation manner of the embodiment of the present invention, formulating the host authority control list according to the expected access authority includes: applying for gateway access authority, and the gateway access authority is used to represent the current gateway device access The access authority of each multicast group; adopt the gateway access authority as the second primary host authority control list; for each multicast group, if there is one or more hosts whose expected access authority is lower than the gateway access authority, then in all In the second primary version of the host authority control list, the desired access authority is used to replace the gateway access authority, so as to obtain the host authority control.

Specifically, when formulating the host authority control list, you can first apply for the gateway access authority as the second primary host access authority list. The gateway access authority only includes the authorized multicast group list, and different hosts have the same access authority. Then, according to user requirements, downgrade the access rights of the multicast groups corresponding to different hosts in the access rights list of the first version that need to be restricted from access.

Specifically, for different hosts (such as host names or IP addresses of different STBs, etc.) and different multicast services (such as IP multicast address information or multicast group identification), the authorized administrator of the gateway (such as the owner of the gateway) ) can configure a control list for each host device within the gateway.

Further, the access rights may be selected from: authorized and fully allowed, authorized and allowed to preview, and unauthorized; wherein, the authorized and fully allowed is higher than the authorized and allowed to preview, and the The authorized and allowed preview is higher than the unauthorized.

Referring to Table 1, Table 1 is a host authority control list.

Table 1

As shown in Table 1, detailed restrictions are made on the access rights of each host. The access rights are divided into authorized and fully allowed (Fully allowed), authorized and allowed preview (Preview allowed) and unauthorized (Not allowed ) three categories.

It can be understood that the above-mentioned rights have high and low points. Taking a channel in the IPTV multicast group as an example, authorized and fully allowed can be able to watch the complete program of the channel, authorized and allowed to preview can be Only programs with a preset duration of the channel can be previewed. Unauthorized programs may not be viewed or previewed, for example, displayed as a black screen.

Further, the step of applying for the gateway access right may include: applying to the AF or UDR for the gateway access right.

Specifically, the application function (Application Function, AF) associated with the server can be sent to the network exposure function (Network Exposure Function, NEF) and a control list is established in the unified data repository (Unified Data Repository, UDR). Search the control list in UDR through AF, or directly apply to UDR, and you can know the access rights of the current gateway device to each multicast group. The user-level multicast address information or multicast group identifier can be acquired by the RG from the AF or UDR, or configured by the authorized administrator and stored in the RG.

Further, the gateway access authority may include identification information of each multicast group; wherein, the identification information of the multicast group is selected from: multicast address information of the multicast group, and multicast group identification.

Wherein, the identification information of the multicast group is used to uniquely determine the multicast group, the multicast address information of the multicast group may be an IP address or other appropriate address information, and the multicast group identification may be, for example, Identification information such as multicast group name and channel name.

In the embodiment of the present invention, by setting the access authority of the gateway to include the identification information of each multicast group, detailed restrictions on the access authority of each multicast group (such as each channel) can be implemented.

It should be noted that, for each multicast group, if there is one or more hosts whose expected access authority is higher than the gateway access authority, then in the first version of the host authority control list, the gateway access authority will be used instead of the expected access rights to obtain the host authority control list, which is equivalent to setting the user authority to only decrease but not increase. For configurations where the user has not signed a contract and expects too much, the host authority control list can be modified in advance to be correct. Compared with directly setting the user's Configured as a list, after the user submits the request, the UPF checks and determines whether the user has access rights. The present invention can correct the list in advance, so that when the user submits the request, a more correct list is used to determine the user's access rights.

In the embodiment of the present invention, by formulating the first version of the host authority control list and applying for gateway access authority, for each multicast group, if there is one or more hosts whose expected access authority is higher than the gateway access authority, then in the In the first version of the host authority control list, the gateway access authority is used to replace the expected access authority to obtain the host authority control list, so that the configuration of the user can be checked and revised by applying for the gateway access authority, especially for the expected access authority Hosts with lower access rights than the gateway, which meet the contracted access rights, can be directly replaced by gateway access rights to meet the needs of users who need more fine-grained rights control for different hosts.

In the specific implementation of step S41, the identification information of the multicast group included in the joining request can be used to uniquely determine the multicast group that the host requests to join, for example, it can be the multicast address information and/or multicast group information of the multicast group. broadcast group ID.

As mentioned above, the multicast address information of the multicast group may be an IP address or other appropriate address information, and the multicast group identifier may be identification information such as a multicast group name and a channel name, for example.

In the specific implementation of step S42, the host authority control list may be searched according to the identification information of the multicast group, wherein the host authority control list is used to indicate the access authority of each host to each multicast group.

As mentioned above, in the embodiment of the present invention, the host authority control list can be formulated according to the desired access authority, so the host authority control list can reflect the needs of users.

In the specific implementation of step S43, if the host authority control list indicates that the access authority of the host to the multicast group is authorized, a multicast join request is sent to the UPF.

It should be pointed out that the multicast join request sent to the UPF may directly forward the join request information received from the host, or may be processed request information.

In the embodiment of the present invention, the gateway makes the host authority control list, and the gateway searches the host authority control list and determines the access authority of the host to the multicast group. Compared with the gateway that does not make any discrimination and directly sends the join request to the UPF, Can reduce the discerning pressure of UPF.

Referring to FIG. 5 , FIG. 5 is a data flow diagram of another multicast group access control method in an embodiment of the present invention. Said another multicast group access control method may include steps S51 to S54, and may also include steps S51 to S53 and S55. Each step is described below.

In step S51, the gateway 52 formulates a host authority control list.

In step S52 , the gateway 52 receives a join request from the host 51 .

In step S53, the gateway 52 searches the host authority control list.

In step S54, gateway 52 sends a multicast join request to UPF53.

In specific implementation, for more detailed content about steps S51 to S54, please refer to the description of the steps in FIG. 4 for execution, and details will not be repeated here.

It should be pointed out that after step S53, according to the access authority of the host 51 to the multicast group, step S54 may be executed, that is, if the host authority control list indicates that the host 51 has access rights to the multicast group If the access right is authorized, a multicast join request is sent to UPF53; step S55 can also be executed.

Further, if the host authority control list indicates that the access authority of the host 51 to the multicast group is not authorized, the gateway 52 may stop sending the joining request.

In the embodiment of the present invention, if the host authority control list indicates that the access authority of the host 51 to the multicast group is not authorized, then stop sending the join request, so that the gateway 52 can be used to judge the authority of the host , without sending it to UPF53 for judgment, effectively improving the functionality of the gateway.

In step S55, the gateway 52 sends a rejection response to the host 51.

In the embodiment of the present invention, if the host authority control list indicates that the access authority of the host 51 to the multicast group is not authorized, the gateway 52 may send the host 51 an 51 sends a rejection response, so that the host 51 can be notified in time that the multicast group cannot be accessed, which is beneficial to improving user satisfaction compared with the host 51 trying to access and finding that it cannot access.

Further, the host authority control list includes identification information of each host and identification information of each multicast group, and satisfies one or more of the following: the identification information of the host is the host name and/or the IP address of the host; The identification information of the multicast group is multicast address information and/or multicast group identifier of the multicast group.

Wherein, the identification information of the host is used to uniquely determine the host, and the host name may be identification information such as a host name or a serial number of the host, for example.

The identification information of the multicast group is used to uniquely determine the multicast group, the multicast address information of the multicast group may be an IP address or other appropriate address information, and the multicast group identification may be, for example, a multicast Identification information such as group name and channel name.

Referring to FIG. 6, FIG. 6 is a schematic structural diagram of an access control device for a multicast group in an embodiment of the present invention. The access control device of the multicast group may include:

A receiving module 61, configured to receive a join request from a host, where the join request includes identification information of the multicast group that the host requests to join;

A search module 62, configured to search for a host authority control list according to the identification information of the multicast group, wherein the host authority control list is used to indicate the access authority of each host to access each multicast group;

A sending module 63, configured to send a multicast join request to the UPF when the host authority control list indicates that the host's access authority to the multicast group is authorized.

In a specific implementation, the above means may correspond to a chip with a data processing function in the user equipment; or correspond to a chip module including a chip with a data processing function in the user equipment, or correspond to the user equipment.

For the principle, specific implementation and beneficial effects of the access control device for the multicast group, please refer to the relevant description about the access control method for the multicast group mentioned above, which will not be repeated here.

An embodiment of the present invention also provides a readable storage medium on which a computer program is stored, and the computer program executes the steps of the above method when the computer program is run by a processor. The readable storage medium may be a computer-readable storage medium, for example, may include a non-volatile memory (non-volatile) or a non-transitory (non-transitory) memory, and may also include an optical disk, a mechanical hard disk, a solid-state hard disk, and the like.

Specifically, in the embodiment of the present invention, the processor may be a central processing unit (Central Processing Unit, referred to as CPU), and the processor may also be other general-purpose processors, digital signal processors (digital signal processor, referred to as DSP) ), application specific integrated circuit (ASIC for short), off-the-shelf programmable gate array (field programmable gate array, FPGA for short) or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. A general-purpose processor may be a microprocessor, or the processor may be any conventional processor, or the like.

It should also be understood that the memory in the embodiments of the present application may be a volatile memory or a nonvolatile memory, or may include both volatile and nonvolatile memories. Among them, the non-volatile memory can be read-only memory (read-only memory, referred to as ROM), programmable read-only memory (programmable ROM, referred to as PROM), erasable programmable read-only memory (erasable PROM, referred to as EPROM) , Electrically Erasable Programmable Read-Only Memory (electrically EPROM, referred to as EEPROM) or flash memory. The volatile memory can be random access memory (RAM), which acts as external cache memory. By way of illustration and not limitation, many forms of random access memory (RAM) are available, such as static random access memory (static RAM (SRAM), dynamic random access memory (DRAM), synchronous Dynamic random access memory (synchronous DRAM, referred to as SDRAM), double data rate synchronous dynamic random access memory (double data rate SDRAM, referred to as DDR SDRAM), enhanced synchronous dynamic random access memory (enhanced SDRAM, referred to as ESDRAM), Synchronously connect dynamic random access memory (synchlink DRAM, referred to as SLDRAM) and direct memory bus random access memory (direct rambus RAM, referred to as DR RAM).

An embodiment of the present invention also provides a gateway, including a memory and a processor, the memory stores a computer program that can run on the processor, and the processor executes the steps of the above method when running the computer program .

The gateway includes but is not limited to devices such as evolved home gateways or 5G home gateways.

Regarding each device described in the above embodiments, each module/unit contained in the product may be a software module/unit, or a hardware module/unit, or may be partly a software module/unit and partly a hardware module/unit. . For example, for each device or product applied to or integrated into a chip, each module/unit contained therein may be realized by hardware such as a circuit, or at least some modules/units may be realized by a software program, and the software program Running on the integrated processor inside the chip, the remaining (if any) modules/units can be realized by means of hardware such as circuits; They are all realized by means of hardware such as circuits, and different modules/units can be located in the same component (such as chips, circuit modules, etc.) or different components of the chip module, or at least some modules/units can be realized by means of software programs, The software program runs on the processor integrated in the chip module, and the remaining (if any) modules/units can be realized by hardware such as circuits; /Units can be realized by means of hardware such as circuits, and different modules/units can be located in the same component (such as chips, circuit modules, etc.) or different components in the terminal, or at least some modules/units can be implemented in the form of software programs Realization, the software program runs on the processor integrated in the terminal, and the remaining (if any) modules/units can be implemented by means of hardware such as circuits.

Although the present invention is disclosed above, the present invention is not limited thereto. Any person skilled in the art can make various changes and modifications without departing from the spirit and scope of the present invention, so the protection scope of the present invention should be based on the scope defined in the claims.

Claims

An access control method for a multicast group, comprising:

receiving a join request from a host, where the join request includes identification information of a multicast group that the host requests to join;

Searching for a host authority control list according to the identification information of the multicast group, wherein the host authority control list is used to indicate the access authority of each host to each multicast group;

If the host authority control list indicates that the access authority of the host to the multicast group is authorized, a multicast join request is sent to a user plane function UPF.
The access control method of a multicast group according to claim 1, further comprising: before receiving the join request from the host:

Receiving the expected access rights of each host to each multicast group input from the outside, and formulating the host rights control list according to the expected access rights.
The access control method for a multicast group according to claim 2, wherein formulating the host authority control list according to the desired access authority comprises:

Developing a first version of the host authority control list according to the desired access authority;

When or after receiving the expected access rights of each host to access each multicast group input from the outside, apply for gateway access rights, and the gateway access rights are used to represent the access rights of the current gateway device to access each multicast group;

For each multicast group, if there is one or more hosts whose expected access authority is higher than the gateway access authority, in the first version of the host authority control list, the gateway access authority is used to replace the expected access authority, to obtain The host authority control list.
The access control method for a multicast group according to claim 2, wherein formulating the host authority control list according to the desired access authority comprises:

Applying for gateway access authority, the gateway access authority is used to represent the access authority of the current gateway device to access each multicast group;

Using the gateway access authority as the second primary host authority control list;

For each multicast group, if there is one or more hosts whose expected access authority is lower than the gateway access authority, then in the second primary host authority control list, use the expected access authority to replace the gateway access authority, to obtain the host authority control list.
The access control method of a multicast group according to claim 3 or 4, wherein said applying for gateway access authority comprises:

Apply to the application function AF associated with the server or the unified data repository UDR to obtain the access right to the gateway.
The access control method for a multicast group according to claim 3 or 4, wherein the gateway access authority includes identification information of each multicast group;

Wherein, the identification information of the multicast group is selected from: multicast address information of the multicast group, and multicast group identification.
The access control method of a multicast group according to claim 1, wherein said access authority is selected from:

Authorized with Full Permission, Authorized with Preview Allowed, Unauthorized;

Wherein, the authorized and fully allowed is higher than the authorized and previewed, and the authorized and previewed is higher than the unauthorized.
The access control method of a multicast group according to claim 1, further comprising:

If the host authority control list indicates that the access authority of the host to the multicast group is not authorized, then stop sending the join request.
The access control method of a multicast group according to claim 8, further comprising:

Send a reject response to the host.
The access control method of a multicast group according to claim 1, wherein the host authority control list includes identification information of each host and identification information of each multicast group, and satisfies one or more of the following:

The identification information of the host is the host name and/or the IP address of the host;

The identification information of the multicast group is multicast address information and/or multicast group identifier of the multicast group.
An access control device for a multicast group, characterized in that it includes:

A receiving module, configured to receive a join request from the host, where the join request includes identification information of the multicast group that the host requests to join;

A search module, configured to search for a host authority control list according to the identification information of the multicast group, wherein the host authority control list is used to indicate the access authority of each host to each multicast group;

A sending module, configured to send a multicast join request to the UPF when the host authority control list indicates that the access authority of the host to the multicast group is authorized.
A readable storage medium, on which a computer program is stored, wherein, when the computer program is run by a processor, the steps of the multicast group access control method described in any one of claims 1 to 10 are executed.
A gateway, comprising a memory and a processor, the memory stores a computer program capable of running on the processor, wherein the processor executes any one of claims 1 to 10 when running the computer program. The steps of the access control method for the multicast group described in the item.