CN101006700A

CN101006700A - Packet data filtering

Info

Publication number: CN101006700A
Application number: CN 200580027689
Authority: CN
Inventors: A·C·马亨德兰; R·T-S·苏
Original assignee: Qualcomm Inc
Current assignee: Qualcomm Inc
Priority date: 2004-07-15
Filing date: 2005-07-14
Publication date: 2007-07-25
Also published as: CN101014925B; CN101014925A; TW200627886A; TW200635305A; TWI378694B

Abstract

In a packet data communication system in which communicating nodes assume different modes of communications, and packet data are sent through a monitoring intermediary for data traffic control, the different modes of communications are directly sent to the monitoring intermediary so as to allow the monitoring intermediary to straightforwardly set up data filters for carrying out the data control and monitoring functions.

Description

Packet data filtering

Priority according to 35U.S.C § 119 requirements

The title that present patent application requires on July 15th, 2004 to submit to is the U.S. Provisional Application the 60/588th of " Service BasedBearer Control for Mobile IP Co-located Care of Address ", No. 664 priority, this provisional application has been transferred to its assignee, and it is explicitly recited in this as a reference.

To quoting of co-pending patent application

The code of acting on behalf of that the present invention relates to submit to simultaneously with above-mentioned provisional application is 040727 the title U.S. Patent application for " Bearer Control of Encrypted Data Flows in Packet DataCommunications ", this application has been transferred to its assignee, and it is explicitly recited in this as a reference.

Technical field

The present invention relates generally to block data communication, and more specifically relate to during the block data communication supervision and control grouped data.

Background technology

The worldwide interconnection of network allows visit information quickly, and no matter geographic distance how.Fig. 1 shows the rough schematic view with the global link of the network of Reference numeral 20 expression that is commonly referred to the internet.Many networks that internet 20 comes down to link together with different classification level.Internet 20 is according to IP (Internet Protocol) work by IETF (internet engineering task group) issue.The details of IP can find in the RFC (Request for Comment) 791 that is announced by IETF.

What be connected to internet 20 is various independent networks, depends on network size and is called as LAN (local area network (LAN)) or WAN (wide area network) sometimes.Shown in Fig. 1 is in such network 22,24 and 26 some.

In each network 22,24 and 26, the various device that interconnects and intercom mutually can be arranged.Example has computer, printer and server, only is to enumerate.Each equipment has unique hardware address, is commonly referred to MAC (medium access control) address.The equipment that has MAC Address is called as node sometimes.When node exceeds the network service of itself via internet 20, need to give this node distributing IP address.

The distribution of IP address can be manual or automatic.The manual allocation of IP address can be carried out by for example network manager.More at large, the IP address is distributed automatically.For example, in LAN, the IP address can be distributed by the server (not shown) that is called DHCP (Dynamic Host Control Protocol) server of the LAN inside that is positioned at node.In addition, in the WAN that supports wireless technology, the IP address can automatically and remotely be distributed.

Turn back to Fig. 1 now,, suppose that another node 34 that the node 30 in the network 22 is attempted in network 24 sends packet as an example.Under the situation of foundation IP, each packet all needs to have source address and destination-address.In this case, source address is the address of the node 30 in the network 22.Destination-address is the address of the node 34 in the network 24.When working by this way,

node

30 and 34 just is called as and communicates under the simple IP communication pattern, and wherein in the simple IP communication pattern, two

nodes

30 and 34 all use their its own IP address to meet IP in the exchange of packet simply.

The appearance of wireless technology allows node to leave the network of their initial registration and arrive another network.For example, return with reference to figure 1, node 30 can be a wireless device, such as PDA (personal device assistant), cell phone or mobile computer, rather than for good and all is wiredly connected to network 22.Radio node 30 can navigate to outside the border of its home network 22.Like this, node 30 can roam to external network 26 from its home network 22.In this case, the initial address of distributing to node 30 will no longer be applicable to node 30.Equally, the destination is that the packet of this address of node 30 may not arrive node 30.

The mobile IP (mobile Internet Protocol) that is proposed by IETF proposes in order to solve the node mobility problem.The RFC2002 that announces according to IETF, no matter when node 30 leaves home network 22 and roams in another network, and node 30 all is assigned with " Care-of Address ", is abbreviated as CoA (Care-of Address).

According to RFC2002, two types CoA is arranged, that is, and FA CoA (external agent's Care-of Address (Foreign Agent Care-of Address)) and CCoA (associating Care-of Address (Co-located Care of Address)).

FA CoA comes down to FA (external agent's) address, and this FA is the given server in the external network at node 30 places.FA CoA can be applicable among the IPv4.

CCoA is the independent still temporary transient address of being distributed to node 30 by external network.CCoA can be applicable among IPv4 and the IPv6.

Under any circumstance, no matter when node 30 externally in the field, node 30 all must make home network 22 know the whereabouts of node 30 all the time to its home network 22 registration CoA (no matter being FA CoA or CcoA).After registration, CoA is stored in the routing table of being safeguarded by the given server of the HA that is called home network 22 (local agent) 25.

Describe with several examples.

For the situation of FA CoA, suppose that node 30 roams in the external network 26.One arrives the field boundary of external network 26, and node 30 just receives the announcement message from external network 26, and it is arranged in outside field this announcement message notice node 30.From announcement message, node 30 is learnt the address of the FA36 of external network 26.The HA25 of node 30 in home network 22 registers FA CoA then.

For example, when the node 34 of the node in the external network 26 30 in network 24 sends out packet, under the situation of the address of the node 34 in learning network 24, can directly send packet.That is,, in packet, source address can be arranged to the HoA of node 30, and destination-address can be arranged to the address of the node 34 in the network 24 according to IP.The direction of packet illustrates with the data path shown in Fig. 1 38.

About reverse data traffic, then can not be direct like this.In the reverse data route, when the node in the network 24 34 is attempted node 30 in being in external network 26 now and is sent packets, as mentioned above, according to IP, source address and destination-address the two all must be designated in packet.In this case, source address is the IP address of the node 34 in the network 24.About destination-address, under without any the situation from the update notification of node 30, node 34 is only known the HoA of node 30, and does not know the FA CoA of node 30.Like this, destination-address will be configured to the HoA of node 30.But, because the FA CoA of node 30 is stored in the routing table of the HA25 in the home network 22, so when packet arrives home network 22, the HA 25 of network 22 is packaged together packet that receives and the FA CoA that is stored, and sends it to the node 30 in the external network 26.That is, the packet through encapsulation utilizes FA CoA as destination-address.In case external network 26 receives the packet through encapsulation, FA36 just only removes the FACoA of encapsulation and initial packet is passed to mobile node 30.The route of packet illustrates with data path 40 in Fig. 1.

Should also be noted that the data path such as

path

38 and 40 has passed internet 20 many times in practice., only the path is shown as and passes relevant server, so that Fig. 1 is thickened for clear such as HA25 and FA36.That is,

data path

38 and 40 is shown as shown in fig. 1 logical path.

When working in the above described manner, mobile node 30 is called as and uses FA CoA to communicate with corresponding node 34 under mobile IP tunnel pattern.

About the situation of CCoA, when home network 22 was left in node 30 roamings, node 30 can not asked FA CoA, but from external network request CCoA.If network 26 is the WAN that support wireless technology (such as the cdma2000 standard by TIA/EIA (telecommunications industry association/electronic industries association) issue), then CCoA can be requested and remotely be distributed by external network 26 via the PPP (point-to-point protocol) between for example PDSN (packet data serving node) 41 and the mobile node 30.PDSN 41 is the server in the network 26 basically, the data service in the wireless portion of service and processing network 26.In addition, should also be noted that PDSN 41 can not separate with FA 36, but be integrated into an entity.Yet except the distribution of 26 couples of CCoA of external network, node 30 can be carried out the external agent's of all FA36 as the aforementioned all functions.Equally, mobile node 30 need be to home network 22 registration CCoA.

For example, in order to communicate by letter with the node 34 in the network 24, node 30 sends out the packet with two layer address.In skin, source address is configured to CCoA, and destination-address is configured to HA 25.In internal layer, source address is the HoA of node 30, and destination-address is the address of the node 34 in the external network 24.One receives the packet from roaming node 30, and HA 25 just peels off outer address layer and adopts interior address layer that packet is sent to node 34.The logical path of packet illustrates with data path 42 in Fig. 1.

In reverse data path, that is, when node 34 when node 30 sends packets, packet only has an address layer, this address layer has the source address of being arranged to node 34 and is arranged to the destination-address of the HoA of node 30.One receives packet, HA25 just with packet be packaged together as the CCoA of destination-address with as the address of the HA 25 of source address, and the packet through encapsulation will be sent to node 30.Node 30 is carried out decapsulation independently and is not carried out decapsulation by FA 36.The direction of packet illustrates with data path 44 in Fig. 1.

When working in the above described manner, roaming node 30 is called as uses CCoA to communicate with corresponding node 34 under mobile IP tunnel pattern.

Use CCoA via the advantage that mobile IP tunnel pattern communicates to be, for example when mobile node 30 moved to another external network, mobile node 30 did not need to send any update notification to corresponding node 34.Because mobile node 30 upgrades its whereabouts to home network 22 all the time, so the packet that is sent by corresponding node 34 is sent to HA25 through route all the time, HA25 is sent to the packet reroute the most current position of mobile node 30 then.

Using CCoA to carry out work via mobile IP tunnel pattern, to relate to the data service of quite big degree circuitous, as from the

logical data path

42 and 44 of wriggling Fig. 1 is seen.

Suppose that mobile node 30 roams to geographically near telecommunication network 24 but away from the external network 26 of home network 22.For the mobile node 30 in the external network 26 is communicated by letter with corresponding network 34, need make data service loop wire before near the respective nodes 34 the arrival pass remote home network 22, this will cause the poor efficiency utilization of resource.

Yet according to mobile IP, another kind of communication pattern is available.In order to call this pattern, in case mobile node 30 arrives new outside field, except upgrading its whereabouts to home network 22, mobile node 30 also needs to upgrading its new position such as any corresponding node of respective nodes 34.

When working under this communication pattern, the data service between mobile node 30 and the respective nodes 34 is directly exchange.Particularly, when mobile node 30 sent to corresponding node 34 with packet, source address was configured to the CCoA of mobile node 30, and destination-address is configured to the address of the node 34 in the external network 24.About reverse data traffic, for each packet, respective nodes 34 use its addresses as source address and the CCoA that uses mobile node 30 as its destination-address.The logical path of packet illustrates with

data path

46 and 48 in Fig. 1.When working in the above described manner, mobile node 30 is called as and uses CCoA to communicate with respective nodes 34 under mobile IP optimization security pattern.

Very generally, owing to different reasons need be determined different communication modes with monitor node.For example, when mobile node 30 and respective nodes 34 when carrying out VoIP (voice IP transmission) session, what need to determine is, participant i.e. in this case mobile node 30 and respective nodes 34 is authorized to.If voip conversation is based on charge, then need the data service between the each side be monitored for billing purpose.Undelegated data service is blocked simply or is refused.Data packet format is different under different communication patterns.So far, the supervision of data service is undertaken by following operation: at first check each packet, determine its communication pattern, extract relevant information, and allow or refuse packet and pass through after this setting up suitable standard.Such practical operation is a resource-intensive, says nothing of the additional wait time of adding in the data service.

Therefore, need provide the data service that better is used for block data communication to monitor.

Summary of the invention

Adopt in the packet data communication system of different communication modes at communication node, need efficient and monitoring traffic grouped data accurately.According to example embodiment of the present invention, necessary information is sent directly to and monitors that intermediary (intermediary) is used to carry out the data filter of Data Control and function for monitoring with foundation, rather than checks that each packet derives necessary information and be used for one group of standard that data service monitors to draw.

In example embodiment, the out of Memory that mobile node requires the communication pattern of its selection in together with each packet during initialization signaling is handled sends to and monitors intermediary.Corresponding node adopts similar information to respond in its response signaling is handled.Carry out work according to configuration, supervision intermediary can be relatively fast and sets up data filter efficiently to carry out Data Control and function for monitoring.

For a person skilled in the art, according to the following detailed description of carrying out in conjunction with the accompanying drawings, these and other feature and advantage will be conspicuous, and wherein similar in the accompanying drawings Reference numeral refers to similar part.

Description of drawings

Fig. 1 is the schematic diagram of the global link of network;

Fig. 2 is the schematic diagram that embodiments of the invention are shown;

Fig. 3 illustrates the flow chart that is used for initialization signaling according to an embodiment of the invention and sets up the step of content service;

Fig. 4 is the schematic diagram of the circuit of the mobile node of configuration according to the present invention; And

Fig. 5 is the schematic diagram that monitors the circuit of intermediary according to of the present invention.

Embodiment

Described below providing is that any professional and technical personnel in order to make this area can realize and use the present invention.The details of Chan Shuing is for illustrative purposes in the following description.It should be understood that those of ordinary skill in the art to realize the present invention and do not use these details.In other example, do not elaborate known structure and processing, so that description of the invention can not covered by unnecessary details.Therefore, the present invention not should by shown in embodiment restriction, but to meet and principle disclosed herein and novel feature the wideest corresponding to scope.

According to IMS/MMD (IP Multimedia System/multimedia domain, MMD) standard by third generation partner program (3GPP) and third generation partner program 2 (3GPP2) issue, the embodiment that describes below is practicable.Comprehensive discussion of IMS/MMD can be found in the document of following announcement: title is " 3 ^RdGeneration Partnership Project:TechnicalSpecification Group Services and System Aspects, IP MultimediaSubsystem (IMS), Stage 2, " 3 GPP TS 23.228; Title is " 3 ^RdGenerationPartnership Project:Technical Specification Group Core Netword, End-to-End Quality of Service (QoS) Signaling Flows, " 3 GPP TS 29.208; And title is " IP Multimedia System, Stage 2, " X.S0013-002 and 3GPP2X.P0013-012.

IMS can be applicable in the multiple standards, such as cdma2000, WCDMA (Wideband Code Division Multiple Access (WCDMA)), GPRS (general packet radio service) and various other WAN.

Refer now to Fig. 2, it schematically shows example embodiment of the present invention.Totally with Reference numeral 50 expressions, this system comprises backbone network 52 to whole system, such as Intranet or internet.

For example, as shown in Figure 2, in other network, that be connected to backbone network 52 is HN (home network) 54, FN (external network) 56 and RN (telecommunication network) 58.

In HN 54, have HA (home agent) 62, it is bearing the task of managing the data service in the HN 54, and is bearing inbound (inbound) and the task that departures (outbound) route is controlled to the data service of HN54.If HN 54 supports wireless technology, RAN (radio access network) 55 then is installed usually, and this RAN55 is connected to PDSN (packet data serving node) 64.For example, if RAN55 according to the cdma2000 standard operation, then RAN55 generally comprises BSC (base station controller) and a plurality of BS (base station) at least.PDSN64 comes down to the IAD between backbone network 52 and the RAN 55.

In order to implement various IMS/MMD functions and feature, the service provider has installed different servers in HN54.The example of such server comprises P-CSCF (agent call state session function) 70 and S-CSCF (service call state session function) 72.The functional descriptions of these functions will be described in the back together with the operation of system 50 and describe.

Except above-mentioned node, in HN54, also have other node, but for the sake of clarity it is not illustrated.Such node can be the computer of various scales, printer, and can be to move or non-moving any miscellaneous equipment.

Shown in Fig. 2 is FN56 and the RN58 that is connected to backbone network 52.In addition, for simplicity and be easy to explanation, FN56 and RN58 are illustrated as are similar to HN54 a little.It should be understood that and depend on purposes that FN56 can construct in very different modes with RN58.Therefore, in this case, FN56 especially also comprises FA (external agent) 66, RAN76, PDSN68, P-CSCF71 and PCRF ("Policy and Charging Rules Function) 75.Equally, RN58 especially also comprises PDSN78, P-CSCF80, S-CSCF82 and PCRF84.

It should be noted that in Fig. 2, the FA66 among the FN56 is shown as the entity that separates with PDSN68.Very generally, FA66 and PDSN68 are integrated into a unit.

In system 50, have the MN (mobile node) 60 that initial HA62 in HN54 has registered HoA (home address).MN60 can move to other external network such as FN56, and can be via FN 56 or other access to netwoks backbone network 52 under mobile IP (mobile Internet Protocol).MN60 can be the form of PDA (personal digital assistant), laptop computer or mobile phone for example in practice.

Suppose that MN60 just roams in FN56.In this instantiation, the user who supposes MN60 want with RN58 in operate CN (corresponding node) 90 another user carry out videoconference session.Node 90 can be that move or non-moving.

One arrives the field of FN56, and MN60 just can obtain the address of FA66 by the bulletin of FN56.The HA62 registration FA CoA of MN60 in HN54 makes HA62 can keep the tracking to the position of MN60 then.Replacedly, MN60 can ask CCoA from FA66.Then for same reason, promptly in order to allow HA62 to keep and the contacting of MN60, MN60 is also to HA62 registration CCoA.

Before setting up any communication service, MN60 need experience signaling process.In order to finish this purpose, MN60 is via below the intermediary of describing being sent out invitation message to CN90.Equally, CN90 need handle by response signaling and confirm invitation message.

In this example, MN60 uses the HoA that is initially distributed by the HA62 among the HN54 to come the S-CSCF72 in HN54 to register, with SIP (session initiation protocol) network that is used for visiting the S-CSCF72 that comprises HN54.

The P-CSCF70 of MN60 in HN54 sends the SIP INVITE then.It should be noted that in practical operation, as all other data services, the SIP INVITE at first passed through RAN76, PDSN68, FA66, backbone network 52 and HA62 before arriving P-CSCF70.In addition, as known in the art, the form via the signal of telecommunication of the signal carrier that passes system 50 is adopted in data service.For the sake of clarity, to be similar to above-mentioned mode, data service is illustrated as logical path simply.That is, in the following description, unless lay special stress on, otherwise the logical path of data of description business only.

Should also be noted that replacedly MN60 can send the SIP INVITE to start conference session by the P-CSCF71 in FN56.That is, replacedly, MN60 can not use the P-CSCF70 among the HN54 to be used for the signal transmission, and uses the P-CSCF71 among the FN56.For linking up with succinct of illustrating, in the following description, the SIP network among the HN54 is used to signaling process.

Turn back to Fig. 2, the SIP INVITE comprises the description part that is called SDP (Session Description Protocol), and what this description part was described in fact is the required basic demand of videoconference session of asking for correct execution.For example, being included among the SDP is IP address and the port numbers of MN60, and the codec standard that is used for session.The more important thing is that in this embodiment, SDP comprises the communication pattern that is used for the carrier wave business that MN60 adopts.The carrier wave business is the content stream of the Voice ﹠ Video signal of conference session.

P-CSCF70 among the HN54 is a node of bearing the call session management role.One receives the SIP INVITE, and P-CSCF70 just sends to the SIP INVITE S-CSCF72 among the HN54.S-CSCF72 sends to the SIP INVITE RN58 then and accepts with request.

In case S-CSCF72 agrees the CN90 among session and the RN58 and accepts conference session, P-CSCF70 then just the PCRF74 in HN54 send tactful relevant information, such as the QoS (service quality) and the flow identifier of fees policy, mandate.

Simultaneously, promptly after CN90 accepts, MN60 sends to PDSN68 among the FN56 to set up the carrier wave business with TFT (traffic flow template) together with requested QoS.

The PCRF75 of PDSN68 from FN56 asks identical foregoing tactful relevant information then, promptly is used for QoS, fees policy and the flow identifier of the mandate of conference session.PCRF75 will ask relaying to the PCRF74 among the HN54 then.By any parameter of PCRF75 permission must be with certain approval tactful consistent.Such strategy can be included in predetermined rule under the IMS/MMD standard, the specific agreement between the network, such as between HN54 and the FN56 about the agreement of the processing of carrier wave business, the distinctive strategy of network is such as being unique strategy to FN56 only.If the conference session of request is based on charge, then strategy can comprise some tracing process that is used for billing purpose.Especially, undelegated business will be blocked via the processing that is called packet data filtering that further describes below.Under the IMS/MMD standard, implementation of strategies is known as SBBC (based on the carrier Control of service).

The details of operation of SBBC can be to find in the document of " 3GPP2 MMDService Based Bearer Control Document, Work in Progress, " at 3GPP2 X.S0013-012 title.The description of SDP can be found in the document of " IPMultimedia Call Control Protocol Based on SIP and SDP " at Stage 3:3GPP2-X.S0013-0004 title.

PCRF75 among the FN56 is mounted the strategy that determines that to be used to all are forced.In decision was handled, PCRF75 was placed between the PCRF74 and the PDSN68 among the FN56 among the HN54.In addition, between PDSN68 and PCRF75, be equipped with Ty interface 92.Also be equipped with Tx interface 94 between PCRF74 in HN54 and the P-CSCF70, as shown in Figure 2.Aforesaid Ty and Tx interface are used to the policy control between conference session and the carrier wave business.The details of Ty and Tx interface can find in 3GPP TS23.107 that is announced by 3GPP and the 3GPP2 X.P0013-012 document of being announced by 3GPP2.

Turn back to Fig. 2 now, if the session parameter of declaring in the SIP INVITE of being asked is authorized to, then they will be delivered to PDSN68 from P-CSCF70 via PCRF74 among the HN54 and the PCRF75 among the FN56.

In this embodiment, suppose that CN90 has the CCoA that is distributed by RN58.Therefore, one receives the SIP INVITE, and CN90 just adopts SIP200 OK message to make and returns response.SIP200 OK message is reaffirmed the parameter of initial SIP INVITE basically.In addition, in this embodiment, CN90 comprises in the SDP of SIP200 OK message and will be taked by CN90 to be used for the communication pattern of carrier wave business.SIP200 OK is along the data path identical with the SIP INVITE but flow with opposite order.

MN60 is by back sending the reception that acknowledge message (ACK) is confirmed SIP200 OK message along the path identical with initial SIP INVITE then.

After this carrier wave business is ready, so that set up according to the authorization parameter that proposes in the SIP INVITE by the PDSN68 among the FN56.

Under the IMS/MMD standard, the carrier wave service needed is monitored via SBBC by network and controls.In this example, as previously mentioned, consistent with aforementioned strategy by the commander's of the PCRF75 among the FN56 PDSN68 enforcement SBBC.

Between the SBBC implementation period, allowing each packet it to be screened by needing before.This processing is known as packet data filtering.The mechanism that realizes for the execution filtration treatment is known as filter.Find in the document of the title that the details of packet data filtering can be mentioned hereinbefore for " 3GPP2MMD Service Based Bearer Control Document, Work in Progress, ".

Particularly, standard need be building up in the filter.Especially the source address of each packet and destination-address need be determined.As previously mentioned, in each packet, the form of address be configured in different communication patterns under be different.For example, under the foundation communication pattern of mobile IP tunnel pattern, each packet has two layer address.PDSN68 can check each packet with the different-format of determining the address and configuration so that set up filter.Such inspection and definite the processing relate to considerable resource.In addition, this is the task of relative complex.For example, there are three kinds of communication patterns therefrom to select for MN30.As previously mentioned, they are simple IP pattern, mobile IP tunnel pattern and mobile IP optimization security pattern.This is suitable for too to CN90.That is, CN90 also can take a kind of in three kinds of communication patterns.Therefore, should there be 9 set filters to decide and handle altogether at least for PDSN68.

According to this embodiment, not that request PDSN68 checks packet drawing correct filter set, but directly to the communication pattern of PDSN68 notifying communication node.

Therefore, as previously mentioned, in the SDP of SIP INVITE part, except requested information, such as except source address and destination-address and destination port etc., MN60 also comprises in SDP and will be implemented by MN60 to be used for the communication pattern of requested communication session.

Equally, in SIP200 OK message, except requested information, such as except source address and destination-address and destination port etc., CN90 also comprises the communication pattern that will be used by CN90 in SDP.

PDSN68 learns the communication pattern of communication node MN60 and CN90 respectively at an easy rate in advance from SIP INVITE and SIP200 OK message then.After this, in case the PCRF75 among the FN56 authorizes, just correspondingly set up appropriate filters.Set up the carrier wave business by filter then.PDSN68 is passed through in the packet that only allows to satisfy the standard of filter.On the other hand, inconsistent packet is abandoned simply.

When working in the above described manner, that is, when working under the communication pattern that directly is included among the SDP, PDSN can set up filter quickly and be used for requested videoconference session to implement SBBC.The enforcement of SBBC is continuous, and the session between MN60 and CN90 stops.

The flow chart of Fig. 3 shows above-mentioned processing.

Fig. 4 schematically shows the part according to the hardware implementations of the mobile node device by Reference numeral 120 expression of the present invention.Device 120 can for example be fabricated and be included in the various device, in laptop computer, PDA or cell phone.

Device 120 comprises the central data bus 122 that some circuit are linked together.These circuit comprise CPU (CPU) or controller 124, receiving circuit 126, radiating circuit 128 and memory cell 130.

Reception and radiating

circuit

126 and 128 can be connected to RF (radio frequency) circuit, but not shown in the accompanying drawings.Receiving circuit 126 sent out to data/address bus 122 at the signal that will receive and handles and cushion the signal that receives.On the other hand, radiating circuit 128 was handled gentle data of bringing from data/address bus 122 before will sending out equipment 120 from the data of data/address bus 122.CPU/ controller 124 is carried out the function of the data management of data/address bus 122, and further carries out the function that conventional data is handled, and comprises the command content of execute store unit 130.

Memory cell 130 comprises overall one group of instruction representing with Reference numeral 131.In this embodiment, instruction especially comprises the part such as mobile IP client computer 132 and SIP client computer 134.SIP client computer 134 comprises according to foregoing instruction group of the present invention.Mobile IP client computer 132 comprises be used to the instruction group that allows device 120 to work under IP or mobile IP, such as the instruction group of the various types of addresses that are used to obtain various communication patterns, equally as previously mentioned.

In this embodiment, memory cell 130 is RAM (random access memory) circuit.

Exemplary operation part

132 and 134 is software routines or module.It can be another memory circuitry (not shown) of volatibility or nonvolatile type that memory cell 130 can be connected to.Alternately, memory cell 130 can be made of other circuit types, such as known other circuit types in EEPROM (EEPROM (Electrically Erasable Programmable Read Only Memo)), EPROM (EPROM), ROM (read-only memory), disk, CD and the technical field.

Fig. 5 schematically shows the part according to the hardware implementations of the PDSN device of representing with Reference numeral 140 of the present invention.PDSN device 140 comprises the central data bus 142 that some circuit are linked together.These circuit comprise CPU (CPU) or controller 144, receiving circuit 146, radiating circuit 148 and memory cell 150.

Reception and radiating

circuit

146 and 148 can be connected to the network data bus (not shown) that PDSN device 140 is connected to.The signal that receives from network data bus was handled and cushioned to receiving circuit 146 at the signal that will receive from the network data bus (not shown) before route is sent to internal data bus 142.Radiating circuit 148 was handled gentle data of bringing from data/address bus 142 before will sending out device 140 from the data of data/address bus 142.CPU/ controller 144 is carried out the responsibility of the data management of data/address bus 142, and carries out the function that conventional data is handled, and comprises the command content of execute store unit 150.

Memory circuitry 150 comprises overall one group of instruction representing with Reference numeral 154.In this embodiment, instruction especially comprises the part of PDSN function 156 and SBBC function 158.Memory circuitry can be by aforesaid memory circuitry type constitution, and no longer repeats.

That describe in an embodiment at last, is the MN60 that works under the mobile IP that uses CCoA.As previously mentioned, the MN60 address that can under other communication pattern, work well and adopt other type.For example, MN60 can use CCoA definitely under mobile IP optimization security pattern.And as another example in many possibilities, MN60 can use FA CoA and communicate by letter with CN90 under mobile IP tunnel pattern.In addition, not need as described in an embodiment be two-way to filter.What can expect is to have unidirectional filter.For example, MN60 can comprise in SDP that its communication pattern does not require that with the filter of setting up a direction CN90 provides reciprocal filter.In addition, as mentioned above, node 60 is described to roam to the mobile device of external network.It should be understood that node 60 can suitably be stationary node.In addition, any logical block, circuit and the algorithm steps of describing in conjunction with the embodiments can with hardware, software, firmware or it be in conjunction with realizing.What it should be appreciated by those skilled in the art is, can make the change on these and other form and the details and does not break away from the spirit and scope of the present invention.

Claims

1. one kind is used for by monitoring that intermediary carries out the method for the communication session of grouped data, comprising:

Determine the communication pattern of described communication session;

During described communication session, send the signal that is used for described communication pattern by the described intermediary that monitors; With

During described communication session, use described communication pattern to transmit described grouped data by described supervision intermediary.

2. the method for claim 1, wherein describedly send signal by described supervision intermediary and comprise, in invitation message, prepare to comprise the parameter of described communication pattern and send described invitation message by described supervision intermediary.

3. the method for claim 1, wherein describedly send the signal that is used for described communication session by described supervision intermediary and comprise, response is made in the invitation of described communication session by described supervision intermediary.

4. one kind is used for carrying out the method for the communication session of grouped data in the communication system of being supported by IP (Internet Protocol) by monitoring intermediary, comprising:

Definite communication pattern of from the group that simple IP pattern, mobile IP tunnel pattern and mobile IP optimization security pattern are formed, selecting;

Described communication pattern is included in the signaling message of selecting from the group that SIP INVITE and SIP 200 OK message are formed; With

Send the signal that is used for described communication session by sending described signaling message, so that allow described supervisions intermediary to use the information of described communication pattern to be used for the grouped data supervision with described communication pattern via described supervision intermediary.

5. method that is used for the communication session of grouped data comprises:

Received communication pattern from the signaling message of described communication session; With

Described communication session is implemented a group policy, the information that this group policy need be provided by described communication pattern.

6. method as claimed in claim 5, wherein, described signaling message is that first signaling message and described communication pattern are first communication patterns, described method also comprises reception second communication pattern from second signaling message.

7. method as claimed in claim 6, wherein, described first signaling message is the invitation message of described communication session, and described second signaling message response message that is described invitation message.

8. one kind is used for comprising in the method for being carried out the communication session of grouped data by the communication system of IP (Internet Protocol) support:

The signaling message that reception is selected from the group that SIP INVITE and SIP 200 OK message are formed;

The communication pattern that acquisition is selected from the group that simple IP pattern, mobile IP tunnel pattern and mobile IP optimization security pattern are formed from described signaling message; With

9. one kind is used for by monitoring that intermediary carries out the equipment of the communication session of grouped data, comprising:

The device that is used for the communication pattern of definite described communication session;

Be used for during the described communication session of grouped data, sending the device of the signal that is used for described communication pattern by the described intermediary that monitors; With

Be used for during described communication session, using described communication pattern to transmit the device of described grouped data by the described intermediary that monitors.

10. equipment as claimed in claim 9, wherein, the described device that is used to send signal comprises the device that is used for sending by described supervision intermediary the invitation message with described communication pattern.

11. equipment as claimed in claim 9, wherein, the described device that is used to send signal comprises the device that is used for by described supervision intermediary the invitation of described communication session being made response.

12. one kind is used for carrying out the equipment of the communication session of grouped data in the communication system of being supported by IP (Internet Protocol) by monitoring intermediary, comprises:

Be used for determining the device of the communication pattern selected from the group that simple IP pattern, mobile IP tunnel pattern and mobile IP optimization security pattern are formed;

Be used for described communication pattern is included in device the signaling message that the group formed from SIP INVITE and SIP 200 OK message selects; With

Be used for by monitoring that via described intermediary sends the described signaling message with described communication pattern and sends the signal that is used for described communication session, so that allow the described intermediary that monitors to use the information of described communication pattern to be used for the device that grouped data monitors.

13. an equipment that is used for the communication session of grouped data comprises:

Be used for from the device of the signaling message received communication pattern of described communication session; With

Be used for described communication session is implemented the device of a group policy, the information that this group policy need be provided by described communication pattern.

14. equipment as claimed in claim 13, wherein, described signaling message is that first signaling message and described communication pattern are first communication patterns, and described equipment also comprises the device that is used for receiving from second signaling message second communication pattern.

15. equipment as claimed in claim 14, wherein, described first signaling message is the invitation message of described communication session, and described second signaling message response message that is described invitation message.

16. an equipment that is used for carrying out in the communication system of being supported by IP (Internet Protocol) communication session of grouped data comprises:

Be used for receiving the device of the signaling message that the group formed from SIP INVITE and SIP 200 OK message selects;

Be used for obtaining the device of the communication pattern from the group that simple IP pattern, mobile IP tunnel pattern and mobile IP optimization security pattern are formed, selected from described signaling message; With

17. one kind is used for by monitoring that intermediary carries out the equipment of the communication session of grouped data, comprising:

Memory cell, it has computer-readable instruction, be used for determining described communication session communication pattern, during the described communication session by described supervisions intermediary send be used for the signal of described communication pattern and during described communication session the described communication pattern of use transmit described grouped data by described supervision intermediary; And

Processor circuit, it is connected to described memory cell, is used to handle described computer-readable instruction.

18. equipment as claimed in claim 17, wherein, described memory cell also comprises computer-readable instruction, is used for preparing to comprise the parameter of described communication pattern and sending described invitation message by described supervision intermediary in invitation message.

19. equipment as claimed in claim 17, wherein, described memory cell also comprises computer-readable instruction, is used for the invitation in response to described communication session, sends signal by described supervision intermediary.

20. one kind is used for carrying out the equipment of the communication session of grouped data in the communication system of being supported by IP (Internet Protocol) by monitoring intermediary, comprises:

Memory cell, it has computer-readable instruction, be used for the communication pattern that definite group of being formed from simple IP pattern, mobile IP tunnel pattern and mobile IP optimization security pattern is selected, described communication pattern is included in the signaling message of selecting from the group that SIP INVITE and SIP 200 OK message are formed, and send the signal that is used for described communication session by sending described signaling message with described communication pattern via described supervision intermediary, so that allow described supervisions intermediary to use the information of described communication pattern to be used for the grouped data supervision; And

21. an equipment that is used for the communication session of grouped data comprises:

Memory cell, it has computer-readable instruction, is used for the signaling message received communication pattern from described communication session, and the described communication session of grouped data is implemented a group policy, the information that this group policy need be provided by described communication pattern.

22. equipment as claimed in claim 21, wherein, described signaling message is that first signaling message and described communication pattern are first communication patterns, and described memory cell also comprises the computer-readable instruction that is used for receiving from second signaling message second communication pattern.

23. equipment as claimed in claim 22, wherein, described first signaling message is the invitation message of the described communication session of grouped data, and described second signaling message response message that is described invitation message.

24. an equipment that is used for carrying out in the communication system of being supported by IP (Internet Protocol) block data communication comprises:

Memory cell, it has computer-readable instruction, be used for receiving the signaling message that the group formed from SIP INVITE and SIP 200 OK message is selected, the communication pattern that acquisition is selected from the group that simple IP pattern, mobile IP tunnel pattern and mobile IP optimization security pattern are formed from described signaling message, and the described communication session of grouped data implemented a group policy, the information that this group policy need be provided by described communication pattern; With

25. a signal of telecommunication that transmits via signal carrier in communication system, the described signal of telecommunication comprises the computer-readable instruction that is used to carry out following operation:

Determine the communication pattern of the communication session of grouped data; With

During the described communication session of grouped data, send the signal that is used for described communication pattern by supervision intermediary.

26. a signal of telecommunication that transmits via signal carrier in communication system, the described signal of telecommunication comprises the computer-readable instruction that is used to carry out following operation:

Received communication pattern from the signaling message of the communication session of grouped data; With

Described communication session to grouped data is implemented a group policy, the information that this group policy need be provided by described communication pattern.