CN102801545B - The acquisition methods of configuration information and equipment - Google Patents
The acquisition methods of configuration information and equipment Download PDFInfo
- Publication number
- CN102801545B CN102801545B CN201110137247.4A CN201110137247A CN102801545B CN 102801545 B CN102801545 B CN 102801545B CN 201110137247 A CN201110137247 A CN 201110137247A CN 102801545 B CN102801545 B CN 102801545B
- Authority
- CN
- China
- Prior art keywords
- configuration information
- ike
- load
- attribute
- information server
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
- 238000000034 method Methods 0.000 title claims abstract description 73
- 230000004044 response Effects 0.000 claims abstract description 74
- 239000013256 coordination polymer Substances 0.000 claims 13
- 238000010586 diagram Methods 0.000 description 10
- 238000004891 communication Methods 0.000 description 8
- 230000011664 signaling Effects 0.000 description 7
- 238000004590 computer program Methods 0.000 description 1
- 238000005516 engineering process Methods 0.000 description 1
- 230000007774 longterm Effects 0.000 description 1
- 238000012423 maintenance Methods 0.000 description 1
- 238000012986 modification Methods 0.000 description 1
- 230000004048 modification Effects 0.000 description 1
- 230000003287 optical effect Effects 0.000 description 1
- 238000006467 substitution reaction Methods 0.000 description 1
Landscapes
- Mobile Radio Communication Systems (AREA)
Abstract
The embodiment of the present invention provides a kind of acquisition methods and equipment of configuration information, one method comprises: receive the internet key exchange certification IKE_AUTH request message that base station sends, carry configuration information server address and configuration information attribute in the load of request message, configuration information attribute is used to indicate the configuration information of request; According to configuration information server address and configuration information attribute, to the configuration information server acquisition request configuration information of correspondence; Receive the configuration information that configuration information server sends; Send IKE_AUTH response message to base station, in the load of IKE_AUTH response message, carry configuration information.The acquisition methods of the configuration information that the present embodiment provides and equipment, the acquisition methods of the configuration information that the embodiment of the present invention provides and equipment, eNB is enable to obtain configuration information by SeGW from the server preserving configuration information, configuration information acquisition process is simple, save human resources, ensure the smooth execution of operation flow.
Description
Technical Field
The present invention relates to the field of communications technologies, and in particular, to a method and a device for acquiring configuration information.
Background
In a Long Term Evolution (LTE) system, an evolved node b (eNB) establishes an internet protocol security (IPSec) tunnel with a security gateway (SeGW) located at a boundary of a core network, so that the eNB can securely access to an operator core network through the SeGW. In the process of establishing the IPSec tunnel between the eNB and the SeGW, the eNB needs to acquire some configuration information, for example: the control parameters, default address information, and the like may specifically be an Element Management System (EMS) IP, an Operation Maintenance (OM) IP, a Virtual Local Area Network (VLAN) identifier, and some other information, and the eNB may perform some subsequent operations according to the information.
In the prior art, configuration information required by the eNB is usually configured to the eNB manually, however, this manual configuration method wastes human resources and the configuration process is cumbersome.
Disclosure of Invention
The embodiment of the invention provides a method and equipment for acquiring configuration information, and aims to solve the problems that in the prior art, human resources are wasted and the configuration process is complicated due to the fact that information is manually configured on an eNB.
The embodiment of the invention provides a method for acquiring configuration information, which comprises the following steps:
receiving an internet key exchange authentication IKE _ AUTH request message sent by a base station, wherein the load of the request message carries a configuration information server address and a configuration information attribute, and the configuration information attribute is used for indicating the requested configuration information;
requesting to acquire the configuration information from a corresponding configuration information server according to the address and the attribute of the configuration information server;
receiving the configuration information sent by the configuration information server;
and sending an IKE _ AUTH response message to the base station, wherein the load of the IKE _ AUTH response message carries the configuration information.
The embodiment of the invention also provides another method for acquiring the configuration information, which comprises the following steps:
sending an internet key exchange authentication IKE _ AUTH request message to a security gateway, wherein the load of the request message carries a configuration information server address and a configuration information attribute, and the configuration information attribute is used for indicating the requested configuration information, so that the security gateway requests the configuration information server to acquire the configuration information;
and receiving an IKE _ AUTH response message sent by the security gateway, wherein the configuration information is carried in the load of the IKE _ AUTH response message.
An embodiment of the present invention further provides a security gateway, including:
a first receiving module, configured to receive an internet key exchange authentication IKE _ AUTH request message sent by a base station, where a load of the request message carries a configuration information server address and a configuration information attribute, and the configuration information attribute is used to indicate requested configuration information;
the first sending module is used for requesting to acquire the configuration information from the corresponding configuration information server according to the address of the configuration information server and the attribute of the configuration information;
the second receiving module is used for receiving the configuration information sent by the configuration information server;
and a second sending module, configured to send an IKE _ AUTH response message to the base station, where a load of the IKE _ AUTH response message carries the configuration information.
An embodiment of the present invention further provides a base station, including:
a sending module, configured to send an internet key exchange authentication IKE _ AUTH request message to a security gateway, where a load of the request message carries a configuration information server address and a configuration information attribute, and the configuration information attribute is used to indicate requested configuration information, so that the security gateway requests the configuration information server to obtain the configuration information;
a receiving module, configured to receive an IKE _ AUTH response message sent by the security gateway, where a load of the IKE _ AUTH response message carries the configuration information.
According to the method and the device for acquiring the configuration information, the CP load and/or the VendorID load in the IKEv2 protocol communication signaling between the eNB and the SeGW carry the address information of the configuration server and the requested configuration information, so that the eNB can acquire the configuration information from the server for storing the configuration information through the SeGW, the configuration information acquisition process is simple, human resources are saved, and the smooth execution of a service flow is ensured.
Drawings
In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings needed to be used in the description of the embodiments or the prior art will be briefly introduced below, and it is obvious that the drawings in the following description are some embodiments of the present invention, and for those skilled in the art, other drawings can be obtained according to these drawings without creative efforts.
Fig. 1 is a flowchart of an embodiment of a method for acquiring configuration information according to the present invention;
FIG. 2 is a flowchart of another embodiment of a configuration information obtaining method provided by the present invention;
fig. 3 is a flowchart of another embodiment of a configuration information obtaining method provided by the present invention;
FIG. 4 is a flowchart of a method for obtaining configuration information according to another embodiment of the present invention;
fig. 5 is a flowchart of a third embodiment of a method for acquiring configuration information according to the present invention;
fig. 6 is a flowchart of a fourth embodiment of a method for acquiring configuration information according to the present invention;
FIG. 7 is a schematic structural diagram of one embodiment of a security gateway provided by the present invention;
FIG. 8 is a schematic structural diagram of a security gateway according to another embodiment of the present invention;
fig. 9 is a schematic structural diagram of a base station according to an embodiment of the present invention;
fig. 10 is a schematic structural diagram of a base station according to another embodiment of the present invention;
fig. 11 is a schematic structural diagram of an embodiment of a configuration information server provided in the present invention.
Detailed Description
In order to make the objects, technical solutions and advantages of the embodiments of the present invention clearer, the technical solutions in the embodiments of the present invention will be clearly and completely described below with reference to the drawings in the embodiments of the present invention, and it is obvious that the described embodiments are some, but not all, embodiments of the present invention. All other embodiments, which can be derived by a person skilled in the art from the embodiments given herein without making any creative effort, shall fall within the protection scope of the present invention.
Fig. 1 is a flowchart of an embodiment of a method for acquiring configuration information, as shown in fig. 1, the method includes:
s101, receiving an internet key exchange authentication IKE _ AUTH request message sent by a base station, wherein the load of the request message carries a configuration information server address and a configuration information attribute, and the configuration information attribute is used for indicating the requested configuration information;
s102, requesting to acquire configuration information from a corresponding configuration information server according to the address of the configuration information server and the attribute of the configuration information;
s103, receiving configuration information sent by a configuration information server;
s104, sending an IKE _ AUTH response message to the base station, wherein the load of the IKE _ AUTH response message carries the configuration information.
In this embodiment, the main execution body of the above steps is a security gateway SeGW.
The base station eNB and the SeGW establish an IPSec tunnel through an IKEv2 protocol, in which a Configuration Payload (CP) and a vendor code (VendorID) payload are defined. Where the CP payload may be used to request an IP address. The format of the configuration load CP defined in the IKEv2 protocol is as follows:
the following is the format of the configuration attributes:
the attribute values in the current configuration attribute are as follows:
| attribute type | Value of | Whether a plurality of values | Value is long |
| INTERNAL_IP4_ADDRESS | 1 | Is that | 0 or 4 bytes |
| INTERNAL_IP4_NETMASK | 2 | Whether or not | 0 or 4 bytes |
| INTERNAL_IP4_DNS | 3 | Is that | 0 or 4 bytes |
| INTERNAL_IP4_NBNS | 4 | Is that | 0 or 4 bytes |
| INTERNAL_IP4_DHCP | 6 | Is that | 0 or 4 bytes |
| APPLICATION_VERSION | 7 | Whether or not | 0 or more bytes |
| INTERNAL_IP6_ADDRESS | 8 | Is that | 0 or 17 bytes |
| INTERNAL_IP6_DNS | 10 | Is that | 0 or 16 bytes |
| INTERNAL_IP6_DHCP | 12 | Is that | 0 or 16 bytes |
| INTERNAL_IP4_SUBNET | 13 | Is that | 0 or 8 bytes |
| SUPPORTED_ATTRIBUTES | 14 | Whether or not | Multiple byte of 2 |
| INTERNAL_IP6_SUBNET | 15 | Is that | 17 bytes |
VendorID payload, containing a vendor defined constant. The length of the VendorID is variable, and the VenndorID has uniqueness and can comprise some information which is customized.
In the process of establishing the IPSec tunnel between the eNB and the SeGW, configuration information required by the eNB, for example: control parameters, default address information, etc., which are typically stored centrally on a server of the core network. In the method provided by the embodiment of the present invention, the eNB may acquire the configuration information stored in the server through the SeGW. The server for storing the configuration information according to the embodiment of the present invention is referred to as a configuration information server.
After establishing an IPSec tunnel with the SeGW, the base station may send an internet key exchange authentication (IKE _ AUTH) request message to the SeGW, where a load of the request message carries an address and an attribute of the configuration information server, where the address of the configuration server may be an internet protocol (internet protocol; IP) address, or a Domain Name System (DNS) value. The configuration information attribute is used to indicate which configuration information the base station requests to acquire.
Specifically, the base station may carry both the address and the attribute of the configuration information server in the CP load of the IKE _ AUTH request message and send the same to the SeGW, the SeGW may parse the address of the configuration information server from the CP load after receiving the IKE _ AUTH request message, and request the server to acquire the configuration information according to the address, the configuration information server may fill the configuration information in the request information sent by the SeGW and return the same to the SeGW according to the filling sequence of the pre-configured configuration information after receiving the request sent by the SeGW, and the SeGW may carry the configuration information filled by the configuration information server in the CP load in the IKE _ AUTH response message and send the same to the base station, so that the base station can obtain the required configuration information.
Or, the base station may also carry the address of the configuration information server in the VendorID payload and carry the attribute of the configuration information in the CP payload to send to the SeGW. The SeGW requests configuration information from the server according to the configuration information server address in the VendorID payload. Or, the base station may also carry the address of the configuration information server in the CP load, and carry the attribute of the configuration information in the VendorID load to send to the SeGW; alternatively, the base station may also carry both the address of the configuration information server and the configuration information attributes in the VendorID payload. After receiving the configuration information returned by the configuration information server, the SeGW may fill the received configuration information into the VendorID load according to the type of the configuration information pre-negotiated with the base station and the filling order thereof, and send an IKE _ AUTH response message carrying the filled VendorID load to the base station.
According to the method for acquiring the configuration information, the CP load and/or the VendorID load in the IKEv2 protocol communication signaling between the eNB and the SeGW carry the address information of the configuration server and the requested configuration information, so that the eNB can acquire the configuration information from the server for storing the configuration information through the SeGW, the configuration information acquisition process is simple, human resources are saved, and the smooth execution of the service flow is ensured.
Fig. 2 is a flowchart of another embodiment of a configuration information obtaining method provided by the present invention, as shown in fig. 2, the method includes:
s201, sending an Internet key exchange authentication IKE _ AUTH request message to a security gateway, wherein the load of the request message carries a configuration information server address and a configuration information attribute, and the configuration information attribute is used for indicating requested configuration information so that the security gateway requests the configuration information server to acquire the configuration information;
s202, receiving an IKE _ AUTH response message sent by the security gateway, wherein the configuration information is carried in the load of the IKE _ AUTH response message.
The main execution subject of the above steps is the base station.
After the base station establishes the IPSec tunnel with the SeGW, the base station may send an IKE _ AUTH request message to the SeGW. Specifically, the base station may carry both the address and the attribute of the configuration information server in the CP load of the IKE _ AUTH request message and send the same to the SeGW, the SeGW may parse the address of the configuration information server from the CP load after receiving the IKE _ AUTH request message, and request the server to acquire the configuration information according to the address, the configuration information server may fill the configuration information in the request information sent by the SeGW and return the same to the SeGW according to the filling sequence of the pre-configured configuration information after receiving the request sent by the SeGW, and the SeGW may carry the configuration information filled by the configuration information server in the CP load in the IKE _ AUTH response message and send the same to the base station, so that the base station can obtain the required configuration information.
Or, the base station may also carry the address of the configuration information server in the VendorID payload and carry the attribute of the configuration information in the CP payload to send to the SeGW. The SeGW requests configuration information from the server according to the configuration information server address in the VendorID payload. Or, the base station may also carry the address of the configuration information server in the CP load, and carry the attribute of the configuration information in the VendorID load to send to the SeGW; the base station may also carry both the configuration information server address and the configuration information attributes in the VendorID payload. After receiving the configuration information returned by the configuration information server, the SeGW may fill the received configuration information into the VendorID load according to the type of the configuration information pre-negotiated with the base station and the filling order thereof, and send an IKE _ AUTH response message carrying the filled VendorID load to the base station.
According to the method for acquiring the configuration information, the CP load and/or the VendorID load in the IKEv2 protocol communication signaling between the eNB and the SeGW carry the address information of the configuration server and the requested configuration information, so that the eNB can acquire the configuration information from the server for storing the configuration information through the SeGW, the configuration information acquisition process is simple, human resources are saved, and the smooth execution of the service flow is ensured.
Fig. 3 is a flowchart of another embodiment of a configuration information obtaining method provided by the present invention, as shown in fig. 3, the method includes:
s301, receiving a configuration information acquisition request sent by a security gateway;
s302, returning the configuration information to the security gateway according to the configuration information acquisition request.
The server that stores the configuration information of the execution subject of the above steps is referred to as a configuration information server.
Specifically, the base station sends an IKE _ AUTH request message to the SeGW, the base station may carry both an address and an attribute of the configuration information server in a CP load of the IKE _ AUTH request message and send the IKE _ AUTH request message to the SeGW, the SeGW may parse the address of the configuration information server from the CP load after receiving the IKE _ AUTH request message, and request the server to acquire the configuration information according to the address, the configuration information server may fill the configuration information into the request information sent by the SeGW and return the configuration information to the SeGW according to a filling sequence of the pre-configured configuration information after receiving the request sent by the SeGW, the SeGW may carry the configuration information filled by the configuration information server in the CP load in the IKE _ AUTH response message and send the configuration information to the SeGW, so that the base station can obtain the required configuration information.
Or, the base station may also carry the address of the configuration information server in the VendorID payload and carry the attribute of the configuration information in the CP payload to send to the SeGW. The SeGW requests configuration information from the server according to the configuration information server address in the VendorID payload. Or, the base station may also carry the address of the configuration information server in the CP load, and carry the attribute of the configuration information in the VendorID load to send to the SeGW; the base station may also carry both the configuration information server address and the configuration information attributes in the VendorID payload. After receiving the configuration information returned by the configuration information server, the SeGW may fill the received configuration information into the VendorID load according to the type of the configuration information pre-negotiated with the base station and the filling order thereof, and send an IKE _ AUTH response message carrying the filled VendorID load to the base station.
According to the method for acquiring the configuration information, the CP load and/or the VendorID load in the IKEv2 protocol communication signaling between the eNB and the SeGW carry the address information of the configuration server and the requested configuration information, so that the eNB can acquire the configuration information from the server for storing the configuration information through the SeGW, the configuration information acquisition process is simple, human resources are saved, and the smooth execution of the service flow is ensured.
Fig. 4 is a flowchart of a further embodiment of the method for acquiring configuration information according to the present invention, and as shown in fig. 4, in this embodiment, an eNB carries both an address of a configuration information server and a configuration information attribute in a CP payload of an IKE _ AUTH request message, where the configuration information attribute may be represented by a configuration information (CFG _ INFO) attribute value. Among them, the eNB and the configuration information server may pre-configure the type of configuration information that can be carried in the CFG _ INFO attribute values and the padding order of the configuration information. The security gateway sends the CFG _ INFO attribute value to the configuration information server, the configuration information server fills the configuration information into the CFG _ INFO attribute value according to the filling sequence configured in advance and returns the configuration information to the security gateway, and the security gateway carries the filled CFG _ INFO attribute value in the CP load of the IKE _ AUTH response and returns the CP load to the eNB.
The method specifically comprises the following steps:
s401, eNB sends an Internet key exchange security initialization (IKE _ SA _ INIT) request message to SeGW to request to establish IKE security association;
s402, the SeGW sends an IKE _ SA _ INIT response message to the eNB;
s403, the eNB sends an IKE _ AUTH request message to the SeGW, and the CP load of the request message carries a configuration information SERVER ADDRESS DEST _ SERVER _ ADDRESS and a configuration information CFG _ INFO attribute value;
the configuration information SERVER ADDRESS DEST _ SERVER _ ADDRESS may be a specific IP ADDRESS or a DNS value. The CFG _ INFO attribute value is an attribute value which is configured in advance on the eNB and a server for storing the configuration information, and the eNB and the configuration information server configure the type of the configuration information which can be carried in the CFG _ INFO attribute value and the filling sequence of the configuration information in advance. The eNB may indicate the configuration information requested to be acquired through the CFG _ INFO attribute value, and the eNB may request to acquire all the configuration information or to acquire part of the configuration information through the CFG _ INFO attribute value. The specific manner of indicating the configuration information requested to be acquired by the CFG _ INFO attribute value is not limited, and the eNB and the configuration information server may pre-define the manner of indicating the configuration information required to be acquired in the CFG _ INFO attribute value, for example: an identification may be added to the attribute type in the CFG _ INFO attribute value to indicate the type of configuration information that needs to be retrieved, etc.
Specifically, the CFG _ INFO attribute value and the configuration SERVER ADDRESS DEST _ SERVER _ ADDRESS may be defined as two different configuration attributes: namely, the value of the CFG _ INFO attribute value and the DEST _ SERVER _ ADDRESS attribute may be any of 0, 9, and 16 to 32767, as shown in the following table:
| attribute type | Value of | Whether a plurality of values | Value is long |
| INTERNAL_IP4_ADDRESS | 1 | Is that | 0 or 4 bytes |
| INTERNAL_IP4_NETMASK | 2 | Whether or not | 0 or 4 bytes |
| INTERNAL_IP4_DNS | 3 | Is that | 0 or 4 bytes |
| INTERNAL_IP4_NBNS | 4 | Is that | 0 or 4 bytes |
| INTERNAL_IP4_DHCP | 6 | Is that | 0 or 4 bytes |
| APPLICATION_VERSION | 7 | Whether or not | 0 or more bytes |
| INTERNAL_IP6_ADDRESS | 8 | Is that | 0 or 17 bytes |
| INTERNAL_IP6_DNS | 10 | Is that | 0 or 16 bytes |
| INTERNAL_IP6_DHCP | 12 | Is that | 0 or 16 bytes |
| INTERNAL_IP4_SUBNET | 13 | Is that | 0 or 8 bytes |
| SUPPORTED_ATTRIBUTES | 14 | Whether or not | Multiple byte of 2 |
| INTERNAL_IP6_SUBNET | 15 | Is that | 17 bytes |
| DEST_SERVER_ADDRESS | 16 | Is that | 0 or 4 bytes |
| CFG_INFO | 17 | Is that | 0 or more bytes |
The CFG _ INFO attribute value and DEST _ SERVER _ ADDRESS may also be defined as a configuration attribute ADDRESS _ INFO attribute, where this attribute value includes two parts, namely, the CFG _ INFO attribute value and DEST _ SERVER _ ADDRESS, and the SeGW parses the ADDRESS _ INFO through the CP load to obtain the CFG _ INFO attribute value and DEST _ SERVER _ ADDRESS. Wherein, the value of ADDRESS _ INFO can be any of 0, 9, and 16-32767, as shown in the following table:
| attribute type | Value of | Whether a plurality of values | Value is long |
| INTERNAL_IP4_ADDRESS | 1 | Is that | 0 or 4 bytes |
| INTERNAL_IP4_NETMASK | 2 | Whether or not | 0 or 4 bytes |
| INTERNAL_IP4_DNS | 3 | Is that | 0 or 4 bytes |
| INTERNAL_IP4_NBNS | 4 | Is that | 0 or 4 bytes |
| INTERNAL_IP4_DHCP | 6 | Is that | 0 or 4 bytes |
| APPLICATION_VERSION | 7 | Whether or not | 0 or more bytes |
| INTERNAL_IP6_ADDRESS | 8 | Is that | 0 or 17 bytes |
| INTERNAL_IP6_DNS | 10 | Is that | 0 or 16 bytes |
| INTERNAL_IP6_DHCP | 12 | Is that | 0 or 16 bytes |
| INTERNAL_IP4_SUBNET | 13 | Is that | 0 or 8 bytes |
| SUPPORTED_ATTRIBUTES | 14 | Whether or not | Multiple byte of 2 |
| INTERNAL_IP6_SUBNET | 15 | Is that | 17 bytes |
| ADDRESS_INFO | 16 | Is that | 0 or more bytes |
S404, analyzing the CP load by the SeGW;
wherein, if the CFG _ INFO attribute value and the configuration information SERVER ADDRESS DEST _ SERVER _ ADDRESS are defined as one configuration attribute ADDRESS _ INFO in the CP payload, the SeGW also parses ADDRESS _ INFO, and the SeGW finds the corresponding SERVER according to DEST _ SERVER _ ADDRESS.
S405, the SeGW sends the CFG _ INFO attribute value to a configuration information server;
s406, the configuration information server fills the configuration information requested to be acquired by the eNB into the CFG _ INFO attribute value according to the pre-configured configuration information type and the filling sequence thereof;
it should be noted that, the configuration information server may populate, to the CFG _ INFO attribute value, configuration information that conforms to a preconfigured configuration information type in the configuration information requested to be obtained by the eNB, and in addition, the configuration information server may also populate some other related configuration information to the CFG _ INFO attribute value according to a preconfigured population order according to a self-configuration policy and other conditions.
S407, the configuration information server sends an information response message to the SeGW, wherein the response message contains the attribute value of the CFG _ INFO filled with the configuration information;
s408, the SeGW fills the received CFG _ INFO attribute value after filling into the CP load;
s409, the SeGW sends an IKE _ AUTH response message to the eNB, wherein the response message contains a CP load carrying a filling CFG _ INFO attribute value;
s410, the eNB analyzes the CFG _ INFO attribute value in the CP load.
The eNB-side application may perform other service operations according to the configuration information parsed from the CFG _ INFO attribute value in the CP load.
Fig. 5 is a flowchart of a third embodiment of a method for acquiring configuration information according to the present invention, as shown in fig. 5, in this embodiment, an eNB needs to pre-configure a server address for storing eNB configuration information, the server is a configuration information server, the eNB carries the server address in a CP load of an IKE _ AUTH request message to carry, and carries a configuration information attribute in a VendorID load of an IKE _ AUTH request message to carry, after receiving configuration information returned by the configuration information server, a SeGW fills the configuration information in the VendorID load according to a configuration information type and a filling order thereof negotiated in advance with the eNB, and returns the configuration information to the eNB.
The method specifically comprises the following steps:
s501, the eNB sends an IKE _ SA _ INIT request message to the SeGW to request to establish IKE security association;
s502, the SeGW sends an IKE _ SA _ INIT response message to the eNB;
s503, the eNB sends an IKE _ AUTH request message to the SeGW, wherein the CP load of the request message carries DEST _ SERVER _ ADDRESS, and the VendorID load carries configuration information attribute;
wherein, the eNB and the SeGW may negotiate in advance the type of configuration information that can be carried in the VendorID payload and the filling order of the configuration information thereof.
The value of the DEST _ SERVER _ ADDRESS attribute may be any of 0, 9, and 16-32767, as shown in the following table:
| attribute type | Value of | Whether a plurality of values | Value is long |
| INTERNAL_IP4_ADDRESS | 1 | Is that | 0 or 4 bytes |
| INTERNAL_IP4_NETMASK | 2 | Whether or not | 0 or 4 bytes |
| INTERNAL_IP4_DNS | 3 | Is that | 0 or 4 bytes |
| INTERNAL_IP4_NBNS | 4 | Is that | 0 or 4 bytes |
| INTERNAL_IP4_DHCP | 6 | Is that | 0 or 4 bytes |
| APPLICATION_VERSION | 7 | Whether or not | 0 or more bytes |
| INTERNAL_IP6_ADDRESS | 8 | Is that | 0 or 17 bytes |
| INTERNAL_IP6_DNS | 10 | Is that | 0 or 16 bytes |
| INTERNAL_IP6_DHC | 12 | Is that | 0 or 16 bytes |
| INTERNAL_IP4_SUBNET | 13 | Is that | 0 or 8 bytes |
| SUPPORTED_ATTRIBUTES | 14 | Whether or not | Multiple byte of 2 |
| INTERNAL_IP6_SUBNET | 15 | Is that | 17 bytes |
| DEST_SERVER_ADDRESS | 16 | Is that | 0 or 4 bytes |
S504, the SeGW finds a corresponding configuration information SERVER for storing the eNB configuration information according to DEST _ SERVER _ ADDRESS in the CP load;
s505, the SeGW requests a configuration information server to acquire configuration information;
s506, the configuration information server sends an information response message to the SeGW, wherein the message contains the configuration information requested by the SeGW;
s507, the SeGW fills the configuration information received from the configuration information server into the VendorID load according to the configuration information type and the filling sequence thereof negotiated with the eNB in advance;
it should be noted that the configuration information server may return the configuration information requested to be acquired by the eNB to the SeGW, and in addition, the configuration information server may also return some other related configuration information to the SeGW according to the conditions of its own configuration policy and the like, and after receiving the configuration information returned by the configuration information server, the SeGW may fill the configuration information conforming to the configuration information type negotiated in advance with the eNB into the VendorID load according to the filling sequence negotiated in advance with the eNB and return the configuration information to the eNB.
S508, the SeGW sends an IKE _ AUTH response message to the eNB, where the response message carries the VendorID load filled with the configuration information.
S509, the eNB analyzes the content of the VendorID load to obtain the configuration information, and the application program at the eNB end may perform other service operations according to the analyzed configuration information.
Fig. 6 is a flowchart of a fourth embodiment of the method for acquiring configuration information according to the present invention, as shown in fig. 6, in this embodiment, an eNB needs to pre-configure a server address for storing eNB configuration information, the server is a configuration information server, the eNB carries both the server address and a configuration information attribute in a VendorID load of an IKE _ AUTH request message, and after receiving configuration information returned by the configuration information server, a SeGW fills the configuration information in the VendorID load according to a configuration information type and a filling order thereof pre-negotiated with the eNB, and returns the configuration information to the eNB.
The method specifically comprises the following steps:
s601, the eNB sends an IKE _ SA _ INIT request message to the SeGW to request to establish IKE security association;
s602, the SeGW sends an IKE _ SA _ INIT response message to the eNB;
s603, the eNB sends an IKE _ AUTH request message to the SeGW, wherein a VendorID load of the request message carries a configuration information SERVER ADDRESS DEST _ SERVER _ ADDRESS and also carries a configuration information attribute;
wherein, the eNB and the SeGW may negotiate in advance the type of configuration information that can be carried in the VendorID payload, and the filling order of the configuration information.
S604, the SeGW finds a corresponding configuration information SERVER according to the DEST _ SERVER _ ADDRESS ADDRESS in the VendorID load;
s605, the SeGW requests the configuration information server to acquire the configuration information;
s606, the configuration information server sends an information response message to the SeGW, wherein the response message contains configuration information;
s607, the SeGW fills the configuration information acquired from the configuration information server into the VendorID load according to the configuration information type and the filling sequence thereof negotiated with the eNB in advance;
s608, the SeGW sends the IKE _ AUTH response message to the eNB, where the response message includes a VendorID payload carrying the filled configuration information.
S609, the eNB analyzes the content of the VendorID load to obtain configuration information, and then an application program at the eNB side performs other business operations according to the analyzed configuration information.
It will be understood by those skilled in the art that all or part of the processes of the methods of the embodiments described above can be implemented by a computer program, which can be stored in a computer-readable storage medium, and when executed, can include the processes of the embodiments of the methods described above. The storage medium may be a magnetic disk, an optical disk, a Read-only memory (ROM), a Random Access Memory (RAM), or the like.
Fig. 7 is a schematic structural diagram of an embodiment of a security gateway provided in the present invention, and as shown in fig. 7, the security gateway includes: a first receiving module 11, a first sending module 12, a second receiving module 13 and a second sending module 14; wherein,
a first receiving module 11, configured to receive an internet key exchange authentication IKE _ AUTH request message sent by a base station, where a load of the request message carries a configuration information server address and a configuration information attribute, and the configuration information attribute is used to indicate requested configuration information;
a first sending module 12, configured to request a corresponding configuration information server to obtain the configuration information according to the address of the configuration information server and the attribute of the configuration information;
a second receiving module 13, configured to receive the configuration information sent by the configuration information server;
a second sending module 14, configured to send an IKE _ AUTH response message to the base station, where a load of the IKE _ AUTH response message carries the configuration information.
Fig. 8 is a schematic structural diagram of a security gateway according to another embodiment of the present invention, and as shown in fig. 8, the security gateway includes: a first receiving module 11, a first sending module 12, a second receiving module 13 and a second sending module 14;
on the basis of the first embodiment of the security gateway provided by the present invention, as a preferred implementation, the configuration payload CP payload of the request message received by the first receiving module 11 carries the address of the configuration information server and the configuration information attribute, where the configuration information attribute is represented by a configuration information CFG _ INFO attribute value.
Correspondingly, the first sending module 12 may be specifically configured to:
sending the CFG _ INFO attribute value to the configuration information server, wherein the portable configuration information type and the filling sequence in the CFG _ INFO attribute value are pre-configured by the base station and the configuration information server, so that the configuration information server fills the configuration information to the CFG _ INFO attribute value according to the configuration information type and the filling sequence;
the second receiving module 13 is specifically configured to: receiving a response message sent by the configuration information server, wherein the response message carries the filled CFG _ INFO attribute value;
the second sending module 14 is specifically configured to: and sending an IKE _ AUTH response message to the base station, wherein the CP load of the IKE _ AUTH response message carries the filled CFG _ INFO attribute value.
As another preferred embodiment, the CP load of the request message received by the first receiving module 11 carries a configuration information attribute, and the VendorID load of the request message carries a configuration information server address.
In addition, the CP load of the request message received by the first receiving module 11 carries a configuration information server address, and the VendorID load of the request message carries a configuration information attribute; or, the VendorID load of the request message carries the address of the configuration information server and the attribute of the configuration information.
Further, the security gateway may further include: a negotiation module 15, configured to negotiate the type of configuration information that can be carried in the VendorID payload and the filling order thereof with the base station.
Correspondingly, the second sending module 14 may be specifically configured to: filling the received configuration information into a VendorID load according to the type of the configuration information negotiated by the negotiation module and the filling sequence of the configuration information; and sending an IKE _ AUTH response message to the base station, wherein the IKE _ AUTH response message carries the filled VendorID load.
The security gateway provided in the embodiment of the present invention corresponds to the method for acquiring configuration information provided in the embodiment of the present invention, and is an execution device of the method for acquiring configuration information, and a specific execution process of the security gateway may refer to the method embodiment and is not described again.
The security gateway provided by this embodiment enables the eNB to obtain the configuration information from the server storing the configuration information through the SeGW by using the CP load and/or the VendorID load in the IKEv2 protocol communication signaling between the eNB and the SeGW to carry the address information of the configuration server and the requested configuration information, and thus, the configuration information obtaining process is simple, human resources are saved, and smooth execution of a service flow is ensured.
Fig. 9 is a schematic structural diagram of an embodiment of a base station provided in the present invention, and as shown in fig. 9, the base station includes: a transmitting module 21 and a receiving module 22;
a sending module 21, configured to send an internet key exchange authentication IKE _ AUTH request message to a security gateway, where a load of the request message carries a configuration information server address and a configuration information attribute, and the configuration information attribute is used to indicate requested configuration information, so that the security gateway requests the configuration information server to obtain the configuration information;
a receiving module 22, configured to receive an IKE _ AUTH response message sent by the security gateway, where a payload of the IKE _ AUTH response message carries the configuration information.
Fig. 10 is a schematic structural diagram of a base station according to another embodiment of the present invention, and as shown in fig. 10, the base station includes: a transmitting module 21 and a receiving module 22;
further, the configuration load CP load of the request message sent by the sending module 21 carries the address of the configuration information server and the configuration information attribute, where the configuration information attribute is represented by a configuration information CFG _ INFO attribute value.
The type of configuration information and the padding order thereof that can be carried in the CFG _ INFO attribute value are preconfigured by the base station and the configuration information server, and the CP load of the IKE _ AUTH response message received by the receiving module 22 carries the CFG _ INFO attribute value after the configuration information server pads the requested configuration information according to the type of configuration information and the padding order thereof.
The CP load of the request message received by the receiving module 22 carries the address of the configuration information server, and the VendorID load of the request message carries the attribute of the configuration information; or, the VendorID load of the request message received by the receiving module carries the address of the configuration information server and the attribute of the configuration information.
Further, the base station may further include: a negotiation module 23, configured to negotiate the type of configuration information that can be carried in the VendorID payload and the filling order thereof with the security gateway.
The IKE _ AUTH response message received by the receiving module 22 carries the VendorID payload after the security gateway fills the configuration information according to the type of the configuration information and the filling order thereof.
The base station provided in the embodiment of the present invention corresponds to the method for acquiring configuration information provided in the embodiment of the present invention, and is an execution device of the method for acquiring configuration information, and a specific execution process of the base station may refer to the method embodiment and is not described again.
In the base station provided in this embodiment, the CP load and/or VendorID load in the IKEv2 protocol communication signaling between the eNB and the SeGW carries the address information of the configuration server and the requested configuration information, so that the eNB can obtain the configuration information from the server storing the configuration information through the SeGW to ensure the smooth execution of the service flow.
Fig. 11 is a schematic structural diagram of an embodiment of a configuration information server provided in the present invention, and as shown in fig. 11, the configuration information server includes: a receiving module 31 and a transmitting module 32;
a receiving module 31, configured to receive a request for obtaining configuration information sent by a security gateway;
a sending module 32, configured to return the configuration information to the security gateway according to the request for obtaining configuration information.
The base station sends an IKE _ AUTH request message to the SeGW, the base station can carry the address and the attribute of the configuration information server in the CP load of the IKE _ AUTH request message and send the IKE _ AUTH request message to the SeGW, and after the SeGW receives the IKE _ AUTH request message, the SeGW can analyze the address of the configuration information server from the CP load and request the server to acquire the configuration information according to the address. The SeGW may send a CFG _ INFO attribute value configured in advance by the eNB and the configuration information server to the configuration information server (where the CFG _ INFO attribute value specifies a portable configuration information type and a padding order thereof), that is, the receiving module 31 of the configuration information server receives the CFG _ INFO attribute value sent by the SeGW, the sending module 32 may pad configuration information required by the base station into the CFG _ INFO attribute value according to the portable configuration information type and the padding order thereof specified in the CFG _ INFO attribute value, and send the padded CFG _ INFO attribute value to the SeGW, and the SeGW may carry the padded CFG _ INFO attribute value in a CP load in the IKE _ AUTH response message to the base station, so that the base station can obtain the required configuration information.
Or, the base station may also carry the address of the configuration information server in the VendorID payload and carry the attribute of the configuration information in the CP payload to send to the SeGW. The SeGW requests configuration information from the server according to the configuration information server address in the VendorID payload. Or, the base station may also carry the address of the configuration information server in the CP load, and carry the attribute of the configuration information in the VendorID load to send to the SeGW; the base station may also carry both the configuration information server address and the configuration information attributes in the VendorID payload. The SeGW requests the configuration information server to acquire configuration information, that is, the receiving module 31 of the configuration information server acquires the configuration information acquiring request sent by the SeGW, and the sending module 31 may directly send the configuration information required by the base station to the SeGW. After receiving the configuration information returned by the configuration information server, the SeGW may fill the configuration information into the VendorID load according to the configuration information type and the filling sequence negotiated in advance with the base station, and send an IKE _ AUTH response message carrying the VendorID load filled with the configuration information to the base station.
The configuration information server provided in the embodiment of the present invention corresponds to the method for acquiring configuration information provided in the embodiment of the present invention, and is an execution device of the method for acquiring configuration information, and a specific execution process of the configuration information server may refer to the method embodiment and is not described again.
The configuration information server provided in this embodiment enables the eNB to obtain the configuration information from the server storing the configuration information through the SeGW by using the CP load and/or the VendorID load in the IKEv2 protocol communication signaling between the eNB and the SeGW to carry the address information of the configuration server and the requested configuration information, and the configuration information obtaining process is simple, so that human resources are saved, and smooth execution of a service flow is ensured.
Finally, it should be noted that: the above examples are only intended to illustrate the technical solution of the present invention, but not to limit it; although the present invention has been described in detail with reference to the foregoing embodiments, it will be understood by those of ordinary skill in the art that: the technical solutions described in the foregoing embodiments may still be modified, or some technical features may be equivalently replaced; and such modifications or substitutions do not depart from the spirit and scope of the corresponding technical solutions of the embodiments of the present invention.
Claims (14)
1. A method for acquiring configuration information is characterized by comprising the following steps:
receiving an internet key exchange authentication IKE _ AUTH request message sent by a base station, wherein the load of the request message carries a configuration information server address and a configuration information attribute, and the configuration information attribute is used for indicating the requested configuration information;
requesting to acquire the configuration information from a corresponding configuration information server according to the address and the attribute of the configuration information server;
receiving the configuration information sent by the configuration information server;
sending an IKE _ AUTH response message to the base station, wherein the load of the IKE _ AUTH response message carries the configuration information;
the configuration load CP load of the request message carries the address of the configuration information server and the configuration information attribute, and the configuration information attribute is represented by a configuration information CFG _ INFO attribute value;
the request for obtaining the configuration information from the corresponding configuration information server specifically includes:
and sending the CFG _ INFO attribute value to the configuration information server, wherein the configuration information type and the filling sequence thereof which can be carried in the CFG _ INFO attribute value sent by the configuration information server are pre-configured by the base station and the configuration information server, so that the configuration information server fills the requested configuration information into the CFG _ INFO attribute value sent by the configuration information server according to the configuration information type and the filling sequence thereof.
2. The method according to claim 1, wherein the receiving the configuration information sent by the configuration information server specifically includes:
receiving a response message sent by the configuration information server, wherein the response message carries the filled CFG _ INFO attribute value;
sending an IKE _ AUTH response message to the base station, where a load of the IKE _ AUTH response message carries the configuration information, and specifically:
and sending an IKE _ AUTH response message to the base station, wherein the CP load of the IKE _ AUTH response message carries the CFG _ INFO attribute value after filling.
3. The method according to claim 1 or 2, wherein the configuration information server address and the cfginfo attribute value carried in the CP payload of the request message are defined as two different configuration attributes or as one configuration attribute.
4. The method of claim 1, wherein the configuration information attribute is carried in a CP payload of the request message, and wherein the configuration information server address is carried in a vendor code VendorID payload of the request message.
5. The method of claim 1, wherein the CP payload of the request message carries the configuration information server address, and wherein the VendorID payload of the request message carries the configuration information attribute;
or the VendorID load of the request message carries the address of the configuration information server and the attribute of the configuration information.
6. The method according to claim 5, wherein before the receiving the internet key exchange authentication IKE _ AUTH request message sent by the base station, further comprising:
negotiating with the base station about the type of configuration information that can be carried in the VendorID payload sent to the base station and its padding order.
7. The method according to claim 6, wherein the sending of the IKE _ AUTH response message to the base station is performed such that a payload of the IKE _ AUTH response message carries the configuration information, and specifically:
according to the configuration information type negotiated with the base station and the filling sequence thereof, filling the received configuration information into the VendorID load sent to the base station;
and sending an IKE _ AUTH response message to the base station, wherein the IKE _ AUTH response message carries the filled VendorID load.
8. A method for acquiring configuration information is characterized by comprising the following steps:
sending an internet key exchange authentication IKE _ AUTH request message to a security gateway, wherein the load of the request message carries a configuration information server address and a configuration information attribute, and the configuration information attribute is used for indicating the requested configuration information, so that the security gateway requests the configuration information server to acquire the configuration information;
receiving an IKE _ AUTH response message sent by the security gateway, wherein the configuration information is carried in the load of the IKE _ AUTH response message;
the configuration load CP load of the request message carries the address of the configuration information server and the configuration information attribute, and the configuration information attribute is represented by a configuration information CFG _ INFO attribute value;
the configuration information type and the filling sequence of the portable configuration information in the CFG _ INFO attribute values sent by the configuration information server are pre-configured by the base station and the configuration information server, and the CP load of the IKE _ AUTH response message carries the CFG _ INFO attribute values after the configuration information server fills the requested configuration information according to the configuration information type and the filling sequence of the configuration information server.
9. The method of claim 8, wherein the configuration information attribute is carried in a CP payload of the request message, and wherein the configuration information server address is carried in a vendor code VendorID payload of the request message.
10. The method of claim 8, wherein the CP payload of the request message carries the configuration information server address, and wherein the VendorID payload of the request message carries the configuration information attribute;
or the VendorID load of the request message carries the address of the configuration information server and the attribute of the configuration information.
11. The method according to claim 10, wherein before sending the internet key exchange authentication IKE AUTH request message to the security gateway, further comprising:
negotiating with the security gateway about the type of configuration information that can be carried in the VendorID payload sent to the base station and its order of population.
12. The method according to claim 11, wherein the IKE AUTH response message carries a VendorID payload after the security gateway fills the configuration information received from the configuration information server according to the type of configuration information and the filling order thereof.
13. A security gateway, comprising:
a first receiving module, configured to receive an internet key exchange authentication IKE _ AUTH request message sent by a base station, where a load of the request message carries a configuration information server address and a configuration information attribute, and the configuration information attribute is used to indicate requested configuration information;
the first sending module is used for requesting to acquire the configuration information from the corresponding configuration information server according to the address of the configuration information server and the attribute of the configuration information;
the second receiving module is used for receiving the configuration information sent by the configuration information server;
a second sending module, configured to send an IKE _ AUTH response message to the base station, where a load of the IKE _ AUTH response message carries the configuration information;
the configuration load CP load of the request message received by the first receiving module carries the address of the configuration information server and the configuration information attribute, and the configuration information attribute is represented by a configuration information CFG _ INFO attribute value;
the first sending module is specifically configured to:
sending the CFG _ INFO attribute value to the configuration information server, wherein the portable configuration information type and the filling sequence thereof in the CFG _ INFO attribute value sent by the configuration information server are pre-configured by the base station and the configuration information server, so that the configuration information server fills the requested configuration information into the CFG _ INFO attribute value sent by the configuration information server according to the configuration information type and the filling sequence thereof;
the second receiving module is specifically configured to: receiving a response message sent by the configuration information server, wherein the response message carries the filled CFG _ INFO attribute value;
the second sending module is specifically configured to: and sending an IKE _ AUTH response message to the base station, wherein the CP load of the IKE _ AUTH response message carries the CFG _ INFO attribute value after filling.
14. A base station, comprising:
a sending module, configured to send an internet key exchange authentication IKE _ AUTH request message to a security gateway, where a load of the request message carries a configuration information server address and a configuration information attribute, and the configuration information attribute is used to indicate requested configuration information, so that the security gateway requests the configuration information server to obtain the configuration information;
a receiving module, configured to receive an IKE _ AUTH response message sent by the security gateway, where a load of the IKE _ AUTH response message carries the configuration information;
the CP load of the configuration load of the request message sent by the sending module carries the address of the configuration information server and the attribute of the configuration information, and the attribute of the configuration information is represented by the attribute value of the configuration information CFG _ INFO;
the base station and the configuration information server pre-configure the portable configuration information type and the filling order thereof in the CFG _ INFO attribute value sent by the configuration information server, and the CP load of the IKE _ AUTH response message received by the receiving module carries the CFG _ INFO attribute value after the configuration information server fills the requested configuration information according to the configuration information type and the filling order thereof.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201110137247.4A CN102801545B (en) | 2011-05-25 | 2011-05-25 | The acquisition methods of configuration information and equipment |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201110137247.4A CN102801545B (en) | 2011-05-25 | 2011-05-25 | The acquisition methods of configuration information and equipment |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN102801545A CN102801545A (en) | 2012-11-28 |
| CN102801545B true CN102801545B (en) | 2015-12-09 |
Family
ID=47200519
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201110137247.4A Active CN102801545B (en) | 2011-05-25 | 2011-05-25 | The acquisition methods of configuration information and equipment |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN102801545B (en) |
Families Citing this family (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN107466465B (en) * | 2015-03-25 | 2020-08-11 | 瑞典爱立信有限公司 | Configuring liveness check using internet key exchange messages |
| CN106301822B (en) * | 2015-05-15 | 2020-02-21 | 阿里巴巴集团控股有限公司 | Method, device and system for configuring AP |
Citations (7)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101291249A (en) * | 2008-06-11 | 2008-10-22 | 中兴通讯股份有限公司 | Method for configuring and displaying name of household base station, and name of internal customer group |
| CN101360094A (en) * | 2007-08-03 | 2009-02-04 | 中兴通讯股份有限公司 | Method for server automatic discovery configuring by house base station |
| CN101364910A (en) * | 2007-08-09 | 2009-02-11 | 中兴通讯股份有限公司 | System and method for self-organized network |
| CN101437223A (en) * | 2007-11-16 | 2009-05-20 | 华为技术有限公司 | Access method, system and apparatus for household base station |
| CN101442402A (en) * | 2007-11-20 | 2009-05-27 | 华为技术有限公司 | Method, system and apparatus for authenticating access point equipment |
| CN101588580A (en) * | 2009-06-30 | 2009-11-25 | 华为技术有限公司 | User access control method, home base station gateway and system |
| CA2738372A1 (en) * | 2008-09-24 | 2010-04-01 | Interdigital Patent Holdings, Inc. | Home node-b apparatus and security protocols |
-
2011
- 2011-05-25 CN CN201110137247.4A patent/CN102801545B/en active Active
Patent Citations (7)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101360094A (en) * | 2007-08-03 | 2009-02-04 | 中兴通讯股份有限公司 | Method for server automatic discovery configuring by house base station |
| CN101364910A (en) * | 2007-08-09 | 2009-02-11 | 中兴通讯股份有限公司 | System and method for self-organized network |
| CN101437223A (en) * | 2007-11-16 | 2009-05-20 | 华为技术有限公司 | Access method, system and apparatus for household base station |
| CN101442402A (en) * | 2007-11-20 | 2009-05-27 | 华为技术有限公司 | Method, system and apparatus for authenticating access point equipment |
| CN101291249A (en) * | 2008-06-11 | 2008-10-22 | 中兴通讯股份有限公司 | Method for configuring and displaying name of household base station, and name of internal customer group |
| CA2738372A1 (en) * | 2008-09-24 | 2010-04-01 | Interdigital Patent Holdings, Inc. | Home node-b apparatus and security protocols |
| CN101588580A (en) * | 2009-06-30 | 2009-11-25 | 华为技术有限公司 | User access control method, home base station gateway and system |
Also Published As
| Publication number | Publication date |
|---|---|
| CN102801545A (en) | 2012-11-28 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| RU2719447C1 (en) | Method of configuring key, method of determining security policy and device | |
| US11683087B2 (en) | Cloud based access solution for enterprise deployment | |
| US20200045546A1 (en) | Internet of Things Communication Method, Apparatus, and System | |
| US20160192232A1 (en) | Quality of Service to Over the Top Applications Used with VPN | |
| KR102610951B1 (en) | Methods and apparatus for wireless communication using a security model to support multiple connectivity and service contexts | |
| EP3585095A1 (en) | Method for controlling quality of service, and device, smf, upf, ue, pcf and an therefor | |
| US9967738B2 (en) | Methods and arrangements for enabling data transmission between a mobile device and a static destination address | |
| CN102845123B (en) | Virtual private cloud connection method and tunnel proxy server | |
| CN110324246B (en) | Communication method and device | |
| US11503496B2 (en) | Data processing method and apparatus | |
| US11153207B2 (en) | Data link layer-based communication method, device, and system | |
| EP2894824B1 (en) | Method and device for wireless information transmission | |
| CN111818516A (en) | Authentication method, device and equipment | |
| WO2020238327A1 (en) | Method, apparatus and system for establishing user plane connection | |
| US12132732B2 (en) | Dynamic allocation of network slice-specific credentials | |
| CN110620716B (en) | Data transmission method, related device and system | |
| US20180359799A1 (en) | Multi-connection access point | |
| EP3402159B1 (en) | Communication method, apparatus and system based on stream control transmission protocol (sctp) | |
| US20200374957A1 (en) | Multi-connection access point | |
| CN108377497B (en) | Connection establishment method, device and system | |
| CN102801545B (en) | The acquisition methods of configuration information and equipment | |
| KR20230009480A (en) | Reuse of IP addresses | |
| CN117176373A (en) | Network equipment and communication system | |
| CN111491336B (en) | Method and equipment for configuring QoS and data transmission | |
| CN118695400A (en) | Communication method and communication device |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| C14 | Grant of patent or utility model | ||
| GR01 | Patent grant | ||
| TR01 | Transfer of patent right | ||
| TR01 | Transfer of patent right |
Effective date of registration: 20210427 Address after: Unit 3401, unit a, building 6, Shenye Zhongcheng, No. 8089, Hongli West Road, Donghai community, Xiangmihu street, Futian District, Shenzhen, Guangdong 518040 Patentee after: Honor Device Co.,Ltd. Address before: 518129 Bantian HUAWEI headquarters office building, Longgang District, Guangdong, Shenzhen Patentee before: HUAWEI TECHNOLOGIES Co.,Ltd. |