Data transmission method and device

文档序号：1941412 发布日期：2021-12-07 浏览：17次中文

阅读说明：本技术 数据传输方法及装置 (Data transmission method and device ) 是由张正建刘建华于 2020-06-02 设计创作，主要内容包括：本申请实施例提供了一种数据传输方法及装置,其中,该方法包括：接收下行报文,其中,所述下行报文中携带有用户标识；根据预先存储的用户标识与网络切片信息的对应关系确定所述用户标识对应的网络切片信息；根据所述网络切片信息将所述下行报文发送给承载网设备,其中,所述承载网设备用于在对所述网络切片信息进行资源隔离,并将所述下行报文发送接入网设备,通过预先存储的用户标识与网络切片信息的对应关系确定所述用户标识对应的网络切片信息,并根据网络切片信息传输报文,在传输报文过程中通过承载网设备对网络切片信息进行资源隔离,可以解决相关技术中通过网络切片传输数据安全性低的问题,提高了数据安全性的效果。(The embodiment of the application provides a data transmission method and a data transmission device, wherein the method comprises the following steps: receiving a downlink message, wherein the downlink message carries a user identifier; determining network slice information corresponding to a user identifier according to a pre-stored corresponding relationship between the user identifier and the network slice information; and the bearer network equipment is used for carrying out resource isolation on the network slice information and sending the downlink message to the access network equipment, determining the network slice information corresponding to the user identification through the corresponding relation between the pre-stored user identification and the network slice information, transmitting the message according to the network slice information, and carrying out resource isolation on the network slice information through the bearer network equipment in the message transmission process, so that the problem of low data transmission safety through the network slice in the related technology can be solved, and the effect of data safety is improved.)

1. A data transmission method is applied to a user plane functional entity (UPF), and is characterized by comprising the following steps:

receiving a downlink message, wherein the downlink message carries a user identifier;

determining network slice information corresponding to a user identifier according to a pre-stored corresponding relationship between the user identifier and the network slice information;

and sending the downlink message to a bearer network device according to the network slice information, wherein the bearer network device is used for performing resource isolation on the network slice information and sending the downlink message to an access network device.

2. The method of claim 1, wherein sending the downlink packet to a bearer network device according to the network slice information comprises:

determining a core network side VLAN ID corresponding to the network slice information according to a corresponding relation between the pre-configured network slice information and a virtual local area network VLAN ID;

and sending the downlink message to the bearer network device, wherein the downlink message carries the core network VLAN ID, and the bearer network device is configured to send the downlink message to the access network device after converting the core network side VLAN ID into an access network device side VLAN ID.

3. The method of claim 1, wherein sending the downlink packet to a bearer network device according to the network slice information comprises:

determining a core network side VXLAN VNI corresponding to the network slice information according to a corresponding relation between the pre-configured network slice information and a virtual extensible local area network VXLAN VNI;

sending the downlink message to the bearer network device, wherein the downlink message carries the core network VXLAN VNI, and a VXLAN header is encapsulated when the downlink message is sent, wherein an inner-layer source address is a UPF side GTPUIP, an inner-layer destination address is a RAN side GTPUIP, an inner-layer source MAC is a UPF side interface MAC, and an inner-layer destination MAC is an interface MAC at the core network side of the TN device; the bearing network equipment is used for de-encapsulating the VXLAN tunnel, modifying the inner layer source MAC into a RAN side interface MAC of the TN equipment, and modifying the inner layer target MAC into a RAN interface MAC; and encapsulating the VXLAN tunnel and sending the downlink message to the access network equipment.

4. The method of claim 1, wherein sending the downlink packet to a bearer network device according to the network slice information comprises:

after adding a single SNSSAI extension header of network slice selection auxiliary information to the downlink message, sending the downlink message to the bearer network device, wherein the SNSSAI extension header is used for carrying the network slice information; the bearer network device is configured to obtain the network slice information from the SNSSAI extension header of the downlink packet, and send the downlink packet to the access network device according to the network slice information.

5. The method according to any one of claims 1 to 4, wherein before receiving the downlink packet, the method further comprises:

receiving an uplink message sent by the bearer network device, wherein the uplink message carries a VLAN ID, a VXLAN VNI, or the network slice information, and the uplink message is sent after the bearer network device receives the uplink message sent by the access network device, acquires the network slice information, and performs resource isolation on the network slice information; the bearer network device is configured to obtain the network slice information according to the VLAN ID or the VXLAN VNI when the uplink packet carries the VLAN ID or the VXLAN VNI;

and sending the uplink message according to the network slice information.

6. The method according to any one of claims 1 to 4, wherein before receiving the downlink packet, the method further comprises:

receiving a forwarding control protocol (PFCP) session creation request sent by a Session Management Function (SMF), wherein the PFCP session creation request carries the network slice information;

storing the corresponding relation between the user identification and the network slice information, and creating a session according to the PFCP session creation request;

and sending a creation completion message to the SMF.

7. A data transmission method is applied to bearing network equipment and is characterized by comprising the following steps:

receiving a downlink message sent by a user plane management function (UPF), wherein the downlink message carries network slice information, and the network slice information is network slice information corresponding to a user identifier determined by the UPF according to a pre-stored corresponding relationship between the user identifier and the network slice information;

and performing resource isolation on the network slice information, and sending the downlink message to access network equipment.

8. The method according to claim 7, wherein receiving the downlink packet sent by the UPF comprises:

receiving the downlink message which is sent by the UPF and carries a core network virtual local area network VLAN ID, wherein the core network VLAN ID is the VLAN ID corresponding to the network slice information determined by the UPF according to the corresponding relation between the pre-configured network slice information and the VLAN ID; alternatively, the first and second electrodes may be,

receiving the downlink message which is sent by the UPF and carries a core network virtual extensible local area network (VXLAN) VNI, wherein the core network VXLAN VNI is a VXLAN VNI corresponding to the network slice information determined by the UPF according to the corresponding relation between the pre-configured network slice information and the VXLAN VNI, and the UPF encapsulates a VXLAN header when sending the downlink message, wherein an inner layer source address is a GTPUIP (uplink packet access protocol) on the UPF side, an inner layer destination address is a GTPUIP on the RAN side, an inner layer source MAC is an interface MAC on the UPF side, and an inner layer destination MAC is an interface MAC on the core network side of the TN equipment; alternatively, the first and second electrodes may be,

and receiving the downlink message which is sent by the UPF and added with a single network slice selection auxiliary information SNSSAI extension header, wherein the SNSSAI extension header is used for carrying the network slice information.

9. The method of claim 8, wherein the resource isolating the network slice information and sending the downlink packet to the access network device comprises:

converting the core network side VLAN ID into an access network equipment side VLAN ID;

and forwarding the downlink message to the access network equipment according to the VLAN ID of the access network equipment side.

10. The method of claim 9, wherein converting the core network side VLAN ID to an access network device side VLAN ID comprises:

determining network slice information corresponding to the VLAN ID of the core network side according to a preset corresponding relation between the VLAN ID of the core network side and the network slice information;

and determining the VLAN ID of the access network equipment side corresponding to the network slice information according to the preset corresponding relation between the VLAN ID of the access network equipment side and the network slice information.

11. The method of claim 8, wherein the resource isolating the network slice information and sending the downlink packet to the access network device comprises:

decapsulating the VXLAN tunnel and acquiring the network slice information;

modifying the inner layer source MAC into a TN equipment RAN side interface MAC, and modifying the inner layer destination MAC into a RAN interface MAC;

and encapsulating the VXLAN tunnel and sending the downlink message to the access network equipment.

12. The method of claim 8, wherein the resource isolating the network slice information and sending the downlink packet to the access network device comprises:

acquiring the network slice information from the SNSSAI extension header of the downlink message;

and sending the downlink message to the access network equipment according to the network slice information.

13. The method according to any of claims 7 to 14, wherein before receiving the downlink packet sent by the UPF, the method further comprises:

receiving an uplink message sent by the access network equipment, wherein the uplink message carries a VLAN ID, a VXLAN VNI or the network slice information;

determining the network slice information according to the VLAN ID or VXLANNVNI under the condition that the uplink message carries the VLAN ID or VXLAN VNI;

and performing resource isolation on the network slice information, and sending the uplink message to the UPF.

14. A data transmission device is applied to a user plane function entity (UPF), and is characterized by comprising:

a first downlink message receiving module, configured to receive a downlink message, where the downlink message carries a user identifier;

the first determining module is used for determining the network slice information corresponding to the user identification according to the corresponding relation between the pre-stored user identification and the network slice information;

and the first sending module is used for sending the downlink message to a bearing network device according to the network slice information, wherein the bearing network device is used for performing resource isolation on the network slice information and sending the downlink message to an access network device.

15. A data transmission device is applied to bearing network equipment and is characterized by comprising:

a second downlink message receiving module, configured to receive a downlink message sent by a user plane management function UPF, where the downlink message carries network slice information, and the network slice information is network slice information corresponding to a user identifier determined by the UPF according to a pre-stored correspondence between the user identifier and the network slice information;

and the first isolation module is used for carrying out resource isolation on the network slice information and sending the downlink message to access network equipment.

16. A computer-readable storage medium, in which a computer program is stored, wherein the computer program is arranged to perform the method of any of claims 1 to 6 when executed, or to perform the method of any of claims 7 to 13.

17. An electronic device comprising a memory and a processor, wherein the memory has stored therein a computer program, and wherein the processor is arranged to execute the computer program to perform the method of any of claims 1 to 6, or to perform the method of any of claims 7 to 13.

Technical Field

The embodiment of the invention relates to the field of communication, in particular to a data transmission method and device.

Background

Some basic principles proposed by 3GPP for the 5 th generation communication system (5G) include control plane and user plane separation, flexible and efficient network slicing, use of network function virtualization and software defined networking, etc. Fig. 1 is an architecture diagram of a 5G system in the related art, and as shown in fig. 1, the 5G architecture includes: an Access Management Function (AMF), a Session Management Function (SMF), a User Plane Function (UPF), a Unified Data Management (UDM), a Policy Control Function (PCF), a Network Slice Selection Function (NSSF), etc. The control plane network element comprises AMF, SMF, PCF and the like; the user plane network element has a UPF. The SMF is responsible for managing the UPF, a reference point between the SMF and the UPF is an N4 port, and an N4 port is carried by a message forwarding control protocol (PFCP). Fig. 2 is a diagram of a protocol stack of a PFCP in the related art, and as shown in fig. 2, the protocol stack of the PFCP is defined in 29.244 protocol by 3 GPP. In the 5G system architecture, a network slice example should be defined in the PLMN, and is an end-to-end logical network, and should include an access network, a bearer network, a core network control plane, and a core network user plane. The network slices are identified by a single network slice selection assistance information (S-NSSAI), which contains a Slice Service Type (SST) and a Slice Discriminator (SD). An operator deploys multiple network slices to meet different quality of service requirements of different customers.

When the UPF supports multi-slice sharing, a manager cannot manage resources from the dimensionality of different network slices, and the security of data transmission through the network slices is low.

Disclosure of Invention

The embodiment of the invention provides a data transmission method and a data transmission device, which are used for at least solving the problem of low security of data transmission through network slices in the related technology.

According to an embodiment of the present invention, a data transmission method is provided, which is applied to a user plane functional entity UPF, and includes:

receiving a downlink message, wherein the downlink message carries a user identifier;

determining network slice information corresponding to a user identifier according to a pre-stored corresponding relationship between the user identifier and the network slice information;

Optionally, sending the downlink packet to the bearer network device according to the network slice information includes:

Optionally, before receiving the downlink packet, the method further includes:

and sending the uplink message according to the network slice information.

Optionally, before receiving the downlink packet, the method further includes:

receiving a forwarding control protocol (PFCP) session creation request sent by a Session Management Function (SMF), wherein the PFCP session creation request carries the network slice information;

storing the corresponding relation between the user identification and the network slice information, and creating a session according to the PFCP session creation request;

and sending a creation completion message to the SMF.

According to another embodiment of the present invention, there is also provided a data transmission method applied to a bearer network device, including:

and performing resource isolation on the network slice information, and sending the downlink message to access network equipment.

Optionally, the receiving the downlink packet sent by the UPF includes:

Optionally, the resource isolation of the network slice information and the sending of the downlink packet to the access network device include:

converting the core network side VLAN ID into an access network equipment side VLAN ID;

and forwarding the downlink message to the access network equipment according to the VLAN ID of the access network equipment side.

Optionally, converting the core network side VLAN ID into an access network device side VLAN ID includes:

Optionally, the resource isolation of the network slice information and the sending of the downlink packet to the access network device include:

decapsulating the VXLAN tunnel and acquiring the network slice information;

modifying the inner layer source MAC into a TN equipment RAN side interface MAC, and modifying the inner layer destination MAC into a RAN interface MAC;

and encapsulating the VXLAN tunnel and sending the downlink message to the access network equipment.

Optionally, the resource isolation of the network slice information and the sending of the downlink packet to the access network device include:

acquiring the network slice information from the SNSSAI extension header of the downlink message;

and sending the downlink message to the access network equipment according to the network slice information.

Optionally, before receiving the downlink packet sent by the UPF, the method further includes:

receiving an uplink message sent by the access network equipment, wherein the uplink message carries a VLAN ID, a VXLAN VNI or the network slice information;

determining the network slice information according to the VLAN ID or the VXLAN VNI under the condition that the uplink message carries the VLAN ID or the VXLAN VNI;

and performing resource isolation on the network slice information, and sending the uplink message to the UPF.

According to another embodiment of the present invention, there is also provided a data transmission apparatus applied to a user plane function entity UPF, including:

a first downlink message receiving module, configured to receive a downlink message, where the downlink message carries a user identifier;

Optionally, the first sending module comprises:

the first determining submodule is used for determining a core network side VLAN ID corresponding to the network slice information according to the corresponding relation between the pre-configured network slice information and the VLAN ID;

and the first sending submodule is used for sending the downlink message to the bearer network device, wherein the downlink message carries the core network VLAN ID, and the bearer network device is used for sending the downlink message to the access network device after converting the core network side VLAN ID into an access network device side VLAN ID.

Optionally, the first sending module comprises:

the second determining submodule is used for determining a core network side VXLAN VNI corresponding to the network slice information according to the corresponding relation between the pre-configured network slice information and the virtual extensible local area network VXLAN VNI;

a second sending submodule, configured to send the downlink packet to the bearer network device, where the downlink packet carries the core network VXLAN VNI, and a VXLAN header is encapsulated when the downlink packet is sent, where an inner source address is a GTPUIP on an UPF side, an inner destination address is a GTPUIP on a RAN side, an inner source MAC is an UPF side interface MAC, and an inner destination MAC is an interface MAC on a core network side of the TN device; the bearing network equipment is used for de-encapsulating the VXLAN tunnel, modifying the inner layer source MAC into a RAN side interface MAC of the TN equipment, and modifying the inner layer target MAC into a RAN interface MAC; and encapsulating the VXLAN tunnel and sending the downlink message to the access network equipment.

Optionally, the first sending module comprises:

a third sending submodule, configured to send the downlink packet to the bearer network device after adding a single network slice selection auxiliary information SNSSAI extension header to the downlink packet, where the SNSSAI extension header is used to carry the network slice information; the bearer network device is configured to obtain the network slice information from the SNSSAI extension header of the downlink packet, and send the downlink packet to the access network device according to the network slice information.

Optionally, the apparatus further comprises:

a first uplink message receiving module, configured to receive an uplink message sent by the bearer network device, where the uplink message carries a VLAN ID, a VXLAN VNI, or the network slice information, and the uplink message is sent after the bearer network device receives the uplink message sent by the access network device, acquires the network slice information, and performs resource isolation on the network slice information; the bearer network device is configured to obtain the network slice information according to the VLAN ID or the VXLAN VNI when the uplink packet carries the VLAN ID or the VXLAN VNI;

and the second sending module is used for sending the uplink message according to the network slice information.

Optionally, the apparatus further comprises:

a receiving request module, configured to receive a forwarding control protocol PFCP session creation request sent by a session management function entity SMF, where the PFCP session creation request carries the network slice information;

a storage module, configured to store a correspondence between the user identifier and the network slice information, and create a session according to the PFCP session creation request;

and a third sending module, configured to send a create completion message to the SMF.

According to another embodiment of the present invention, there is also provided a data transmission apparatus, applied to a bearer network device, including:

and the first isolation module is used for carrying out resource isolation on the network slice information and sending the downlink message to access network equipment.

Optionally, the second downlink packet receiving module includes:

the first receiving submodule is used for receiving the downlink message which is sent by the UPF and carries a core network virtual local area network VLAN ID, wherein the core network VLAN ID is the VLAN ID corresponding to the network slice information determined by the UPF according to the corresponding relation between the pre-configured network slice information and the VLAN ID; alternatively, the first and second electrodes may be,

a second receiving submodule, configured to receive the downlink packet sent by the UPF and carrying a core network virtual extensible local area network VXLAN VNI, where the core network VXLAN VNI is a VXLAN VNI corresponding to the network slice information determined by the UPF according to a pre-configured correspondence between the network slice information and the VXLAN VNI, and the UPF encapsulates a VXLAN header when sending the downlink packet, where an inner source address is a GTPUIP on an UPF side, an inner destination address is a GTPUIP on an RAN side, an inner source MAC is an UPF side interface MAC, and an inner destination MAC is an interface MAC on a core network side of the TN device; alternatively, the first and second electrodes may be,

and a third receiving sub-module, configured to receive the downlink packet sent by the UPF and added with a single network slice selection auxiliary information SNSSAI extension header, where the SNSSAI extension header is used to carry the network slice information.

Optionally, the first isolation module comprises:

the conversion submodule is used for converting the core network side VLAN ID into an access network equipment side VLAN ID;

and the forwarding submodule is used for forwarding the downlink message to the access network equipment according to the VLAN ID of the access network equipment side.

Optionally, the conversion sub-module includes:

the first determining unit is used for determining network slice information corresponding to the core network side VLAN ID according to a preset corresponding relation between the core network side VLAN ID and the network slice information;

and the second determining unit is used for determining the VLAN ID of the access network equipment side corresponding to the network slice information according to the preset corresponding relation between the VLAN ID of the access network equipment side and the network slice information.

Optionally, the first isolation module comprises:

the decapsulation submodule is used for decapsulating the VXLAN tunnel and acquiring the network slice information;

the modification submodule is used for modifying the inner layer source MAC into a TN equipment RAN side interface MAC and modifying the inner layer destination MAC into a RAN interface MAC;

and the encapsulation submodule is used for encapsulating the VXLAN tunnel and sending the downlink message to the access network equipment.

Optionally, the first isolation module comprises:

the acquisition submodule is used for acquiring the network slice information from the SNSSAI extended header of the downlink message;

and the sending submodule is used for sending the downlink message to the access network equipment according to the network slice information.

Optionally, the apparatus further comprises:

a second uplink message receiving module, configured to receive an uplink message sent by the access network device, where the uplink message carries a VLAN ID, a VXLAN VNI, or the network slice information;

a second determining module, configured to determine the network slice information according to the VLAN ID or the VXLAN VNI when the uplink packet carries the VLAN ID or the VXLAN VNI;

and the second isolation module is used for carrying out resource isolation on the network slice information and sending the uplink message to the UPF.

According to a further embodiment of the present invention, there is also provided a computer-readable storage medium having a computer program stored thereon, wherein the computer program is arranged to perform the steps of any of the above method embodiments when executed.

According to yet another embodiment of the present invention, there is also provided an electronic device, including a memory in which a computer program is stored and a processor configured to execute the computer program to perform the steps in any of the above method embodiments.

According to the invention, the network slice information corresponding to the user identification is determined through the corresponding relation between the pre-stored user identification and the network slice information, the message is transmitted according to the network slice information, and the network slice information is subjected to resource isolation through the carrying network equipment in the message transmission process, so that the problem of low data transmission safety through the network slice in the related technology can be solved, and the effect of data safety is improved.

Drawings

Fig. 1 is an architecture diagram of a 5G system in the related art;

fig. 2 is a diagram of a PFCP protocol stack in the related art;

fig. 3 is a block diagram of a hardware structure of a mobile terminal of a data transmission method according to an embodiment of the present application;

FIG. 4 is a first flowchart of a data transmission method according to an embodiment of the present application;

FIG. 5 is a block diagram of SNSSAI according to an embodiment of the application;

FIG. 6 is a schematic diagram of a GTPU extension header according to an embodiment of the present application;

FIG. 7 is a second flowchart of a data transmission method according to an embodiment of the present application;

fig. 8 is a first diagram illustrating UPF user session slice information according to an embodiment of the present application;

fig. 9 is a second diagram illustrating UPF user session slice information according to an embodiment of the present application;

fig. 10 is a diagram three illustrating UPF user session slice information according to an embodiment of the present application;

FIG. 11 is a block diagram of a first embodiment of a data transmission device;

fig. 12 is a block diagram of a second structure of the data transmission device according to the embodiment of the present application.

Detailed Description

Hereinafter, embodiments of the present invention will be described in detail with reference to the accompanying drawings in conjunction with the embodiments.

It should be noted that the terms "first," "second," and the like in the description and claims of the present invention and in the drawings described above are used for distinguishing between similar elements and not necessarily for describing a particular sequential or chronological order.

The method embodiments provided in the embodiments of the present application may be executed in a mobile terminal, a computer terminal, or a similar computing device. Taking a mobile terminal as an example, fig. 3 is a hardware structure block diagram of a mobile terminal of the data transmission method according to the embodiment of the present application, and as shown in fig. 3, the mobile terminal may include one or more processors 102 (only one is shown in fig. 3) (the processor 102 may include, but is not limited to, a processing device such as a microprocessor MCU or a programmable logic device FPGA), and a memory 104 for storing data, where the mobile terminal may further include a transmission device 106 for a communication function and an input/output device 108. It will be understood by those skilled in the art that the structure shown in fig. 3 is only an illustration, and does not limit the structure of the mobile terminal. For example, the mobile terminal may also include more or fewer components than shown in FIG. 3, or have a different configuration than shown in FIG. 3.

The memory 104 may be used to store computer programs, for example, software programs and modules of application software, such as computer programs corresponding to the data transmission method in the embodiment of the present invention, and the processor 102 executes various functional applications and data processing by running the computer programs stored in the memory 104, so as to implement the method described above. The memory 104 may include high speed random access memory, and may also include non-volatile memory, such as one or more magnetic storage devices, flash memory, or other non-volatile solid-state memory. In some examples, the memory 104 may further include memory located remotely from the processor 102, which may be connected to the mobile terminal over a network. Examples of such networks include, but are not limited to, the internet, intranets, local area networks, mobile communication networks, and combinations thereof.

The transmission device 106 is used for receiving or transmitting data via a network. Specific examples of the network described above may include a wireless network provided by a communication provider of the mobile terminal. In one example, the transmission device 106 includes a network adapter (NIC), which can be connected to other network devices through a base station so as to communicate with the internet. In one example, the transmission device 106 may be a Radio Frequency (RF) module, which is used for communicating with the internet in a wireless manner.

In this embodiment, a data transmission method operating in the mobile terminal or the network architecture is provided, and fig. 4 is a first flowchart of the data transmission method according to the embodiment of the present application, and as shown in fig. 4, the method is applied to a user plane function entity UPF, and the process includes the following steps:

step S402, receiving a downlink message, wherein the downlink message carries a user identifier;

step S404, determining network slice information corresponding to the user identification according to the corresponding relation between the pre-stored user identification and the network slice information;

step S406, sending the downlink message to a bearer network device according to the network slice information, wherein the bearer network device is configured to perform resource isolation on the network slice information and send the downlink message to an access network device.

Through the steps S402 to S406, the network slice information corresponding to the user identifier is determined according to the correspondence between the pre-stored user identifier and the network slice information, and the message is transmitted according to the network slice information, and the network slice information is resource-isolated by the bearer network device during the message transmission process, so that the problem of low data security through network slice transmission in the related art can be solved, and the effect of data security is improved.

In an embodiment, the step S406 may specifically include: determining a core network side VLAN ID corresponding to the network slice information according to a corresponding relation between the pre-configured network slice information and a virtual local area network VLAN ID; and sending the downlink message to the bearer network device, wherein the downlink message carries the core network VLAN ID, and the bearer network device is configured to send the downlink message to the access network device after converting the core network side VLAN ID into an access network device side VLAN ID. Namely, different slice traffic flows are directly isolated through the VLAN in the radio access network device (such as RAN), the bearer network device (such as TN), and the core network device (such as UPF).

In another embodiment, the step S406 may further include: determining a core network side VXLAN VNI corresponding to the network slice information according to a corresponding relation between the pre-configured network slice information and a virtual extensible local area network VXLAN VNI; sending the downlink message to the bearer network device, wherein the downlink message carries the core network VXLAN VNI, and a VXLAN header is encapsulated when the downlink message is sent, wherein an inner-layer source address is a UPF side GTPUIP, an inner-layer destination address is a RAN side GTPUIP, an inner-layer source MAC is a UPF side interface MAC, and an inner-layer destination MAC is an interface MAC at the core network side of the TN device; the bearing network equipment is used for de-encapsulating the VXLAN tunnel, modifying the inner layer source MAC into a RAN side interface MAC of the TN equipment, and modifying the inner layer target MAC into a RAN interface MAC; and encapsulating the VXLAN tunnel and sending the downlink message to the access network equipment. In a large-scale network, a core network side has tens of network elements, and thousands of different enterprises may be docked at the same time, so that a lot of vlan ids need to be used for deployment, and a small number of vlan ids for isolation of different slice networks are left. Different slice network isolation can be performed through VXLAN, each slice corresponds to a VXLAN VNI, and enough slices can be supported.

In another embodiment, the step S406 may further include: after adding a single SNSSAI extension header of network slice selection auxiliary information to the downlink message, sending the downlink message to the bearer network device, wherein the SNSSAI extension header is used for carrying the network slice information; the bearer network device is configured to obtain the network slice information from the SNSSAI extension header of the downlink packet, and send the downlink packet to the access network device according to the network slice information. Fig. 5 is a structural diagram of SNSSAI according to an embodiment of the present application, and as shown in fig. 5, when an SMF initiates a PFCP Session creation message PFCP Session Establishment Request of port N4, slice information of a UPF user is indicated by adding an information element of a network slice. The new field (SNSSAI) for the PFCP Session update Request message is organized in the message as shown in Table 1.

TABLE 1

In an embodiment, before receiving the downlink message, receiving an uplink message sent by the bearer network device, where the uplink message carries a VLAN ID, a VXLAN VNI, or the network slice information, and the uplink message is sent after the bearer network device receives the uplink message sent by the access network device, acquires the network slice information, and performs resource isolation on the network slice information; the bearer network device is configured to obtain the network slice information according to the VLAN ID or the VXLAN VNI when the uplink packet carries the VLAN ID or the VXLAN VNI; and sending the uplink message according to the network slice information.

In another embodiment, before receiving the downlink packet, a forwarding control protocol (PFCP) session creation request sent by a session management function entity (SMF) is received, where the PFCP session creation request carries the network slice information; storing the corresponding relation between the user identification and the network slice information, and creating a session according to the PFCP session creation request; and sending a creation completion message to the SMF, wherein the SMF indicates the network slice information of the PDU session to the UPF, and the UPF can map the network slice information of the session into the VLAN ID for network isolation.

The uplink message and the downlink message transferred among the RAN, the bearer network device, and the UPF may be GTPU messages, fig. 6 is a schematic diagram of a GTPU extension header according to an embodiment of the present application, and as shown in fig. 6, a GTPU extension header that can carry user slice information and add slice information may be included in the GTPU extension header. RAN, TN, and UPF use VLAN, VXLAN, GTPU extension header, etc. to transfer slice information among access network, bearer network, and core network. RAN, TN, UPF can separate the business flow of different slices through GTPU extension head, solve the problem that the core network side VLAN ID is not enough when using VLAN to separate.

An embodiment of the present application further provides a data transmission method, which is applied to a bearer network device, and fig. 7 is a flowchart of a second method according to the embodiment of the present application, and as shown in fig. 7, the method includes:

step S702, receiving a downlink message sent by a user plane management function (UPF), wherein the downlink message carries network slice information, and the network slice information is network slice information corresponding to a user identifier determined by the UPF according to a pre-stored corresponding relationship between the user identifier and the network slice information;

step S704, perform resource isolation on the network slice information, and send the downlink packet to the access network device.

Through the steps S702 to S706, the network slice information corresponding to the user identifier is determined according to the correspondence between the pre-stored user identifier and the network slice information, and the message is transmitted according to the network slice information, and the network slice information is resource-isolated by the bearer network device during the message transmission process, so that the problem of low data security through network slice transmission in the related art can be solved, and the effect of data security is improved.

In an embodiment, the step S702 may specifically include:

In an embodiment, the step S704 may specifically include:

converting the core network side VLAN ID into an access network equipment side VLAN ID, and further determining network slice information corresponding to the core network side VLAN ID according to a preset corresponding relation between the core network side VLAN ID and the network slice information; determining the VLAN ID of the access network equipment side corresponding to the network slice information according to the preset corresponding relation between the VLAN ID of the access network equipment side and the network slice information;

and forwarding the downlink message to the access network equipment according to the VLAN ID of the access network equipment side.

In another embodiment, the step S704 may further include:

decapsulating the VXLAN tunnel and acquiring the network slice information;

modifying the inner layer source MAC into a TN equipment RAN side interface MAC, and modifying the inner layer destination MAC into a RAN interface MAC;

and encapsulating the VXLAN tunnel and sending the downlink message to the access network equipment.

In another embodiment, the step S704 may further include:

acquiring the network slice information from the SNSSAI extension header of the downlink message;

and sending the downlink message to the access network equipment according to the network slice information.

In this embodiment, before receiving a downlink message sent by a UPF, an uplink message sent by the access network device is received, where the uplink message carries a VLAN ID, a VXLAN VNI, or the network slice information; determining the network slice information according to the VLAN ID or the VXLAN VNI under the condition that the uplink message carries the VLAN ID or the VXLAN VNI; and performing resource isolation on the network slice information, and sending the uplink message to the UPF, wherein the isolation mode of the network slice information is similar to the above mode, and is not repeated here.

Fig. 8 is a first schematic diagram illustrating indication of UPF user session slice information according to an embodiment of the present application, where a user packet is isolated according to the correspondence in fig. 8. The specific implementation steps of the embodiment are as follows:

step 1, configuring corresponding relations between slice information and VLAN ID on RAN, TN and UPF respectively, wherein the TN side needs to configure corresponding relations between slice information and VLAN ID on an access side and a core side respectively;

step 2, a user establishes a PDU session on line, the SMF initiates a PFCP session establishment request to the UPF, and the message carries the S-NSSAI of the session;

step 3, after the UPF successfully establishes the PFCP session, saving the network slice information of the session, and sending a session establishment response message to the SMF;

step 4, the terminal initiates a service, the RAN selects the VLAN ID according to the slice information of the user, and the VLAN ID is packaged when the user data message is sent; the TN receives the message and modifies the VLAN ID of the access side into the VLAN ID of the core side according to the configuration and then forwards the VLAN ID to the UPF;

step 5, when the UPF receives the downlink user message, the VLAN ID is selected according to the user slice information, and the VLAN ID is packaged when the GTPU message is sent to the RAN; and the TN receives the message and modifies the VLAN ID of the core side into the VLAN ID of the access side according to the configuration and then forwards the message to the RAN.

Network isolation using VLAN ID is the most common scenario, but also faces a problem: the VLAN ID is only 12 bits and certainly not enough for large scale networks. In the GTPU data transmission process of RAN-TN-CN, network isolation of different slice service flows can be carried out through VXLAN.

Fig. 9 is a diagram illustrating a second example of indicating session slice information of a UPF user according to the embodiment of the present application, where as shown in fig. 9, an SMF indicates network slice information of a UPF session, and a RAN, a TN, and a UPF isolate a user packet according to a corresponding relationship between configured network slice information and a VXLAN VNI. In this embodiment, VXLAN tunnels are respectively established between the RAN and the TN, and between the TN and the UPF, and the specific implementation steps are as follows:

step 1, configuring corresponding relations between the slice information and VXLAN VNI on RAN, TN and UPF respectively, wherein the TN side needs to configure corresponding relations between the slice information and VXLAN VNI on the access side and the core side respectively;

step 2, a user establishes a PDU session on line, the SMF initiates a PFCP session establishment request to the UPF, and the message carries the S-NSSAI of the session;

step 3, after the UPF successfully establishes the PFCP session, saving the network slice information of the session, and sending a session establishment response message to the SMF;

step 4, the terminal initiates a service, the RAN selects a VXLAN VNI according to the slice information of the user, and a VXLAN head is packaged when a user data message is sent, wherein an inner source address RAN side GTPUIP is used, and an inner destination address is a UPF side GTPUIP; the inner layer source MAC is RAN interface MAC, and the inner layer destination MAC is interface MAC at the RAN side of the TN equipment;

step 5, the TN receives the message and decapsulates the VXLAN tunnel at first, revise the source MAC of inner layer as the core side interface MAC of TN apparatus, the destination MAC of inner layer is UPF interface MAC; then the TN encapsulates the VXLAN tunnel again and sends the message to the UPF;

step 6, when the UPF receives a downlink user message, selecting a VXLAN VNI according to the slice information of the user, and packaging a VXLAN head (an inner source address UPF side GTPUIP, an inner destination address is RAN side GTPUIP, an inner source MAC is an UPF interface MAC, and an inner destination MAC is an interface MAC of a TN equipment core side) when sending a user data message;

step 7, the TN receives the message and decapsulates the VXLAN tunnel at first, revise inner source MAC as RAN side interface MAC of TN apparatus, inner destination MAC is RAN interface MAC; and then the TN encapsulates the VXLAN tunnel again and sends the message to the RAN.

Fig. 10 is a third schematic diagram illustrating UPF user session slice information according to an embodiment of the present application, where as shown in fig. 10, a GTPU extension header is used between a RAN, a TN, and a UPF to transfer slice information, and the specific implementation steps are as follows:

step 1, a user establishes a PDU session on line, SMF initiates a PFCP session establishment request to UPF, and the message carries S-NSSAI of the session;

step 2, after the UPF successfully establishes the PFCP session, saving the network slice information of the session, and sending a session establishment response message to the SMF;

step 3-4, the terminal initiates a service, and the RAN adds an SNSSAI extension header in the GTPU message and then sends the GTPU message to the UPF; the carrier network device TN supporting slicing obtains slicing information from the message GTPU extension header, selects a proper network path and sends the message to UPF;

step 5-6, when the UPF receives the downlink user message, adding SNSSAI extension head in GTPU message and then sending to RAN; and the carrier network equipment TN supporting slicing acquires slice information from the message GTPU extension header, and selects a proper network path to send the message to the RAN.

Through the above description of the embodiments, those skilled in the art can clearly understand that the method according to the above embodiments can be implemented by software plus a necessary general hardware platform, and certainly can also be implemented by hardware, but the former is a better implementation mode in many cases. Based on such understanding, the technical solutions of the present invention may be embodied in the form of a software product, which is stored in a storage medium (e.g., ROM/RAM, magnetic disk, optical disk) and includes instructions for enabling a terminal device (e.g., a mobile phone, a computer, a server, or a network device) to execute the method according to the embodiments of the present invention.

In this embodiment, a data transmission device is further provided, and the data transmission device is used to implement the foregoing embodiments and preferred embodiments, which have already been described and are not described again. As used below, the term "module" may be a combination of software and/or hardware that implements a predetermined function. Although the means described in the embodiments below are preferably implemented in software, an implementation in hardware, or a combination of software and hardware is also possible and contemplated.

Fig. 11 is a first structural block diagram of a data transmission device according to an embodiment of the present application, and as shown in fig. 11, the device is applied to a user plane function entity UPF, and includes:

a first downlink packet receiving module 112, configured to receive a downlink packet, where the downlink packet carries a user identifier;

a first determining module 114, configured to determine, according to a pre-stored correspondence between a user identifier and network slice information, network slice information corresponding to the user identifier;

a first sending module 116, configured to send the downlink packet to a bearer network device according to the network slice information, where the bearer network device is configured to perform resource isolation on the network slice information and send the downlink packet to an access network device.

Optionally, the first sending module 116 includes:

Optionally, the apparatus further comprises:

and the second sending module is used for sending the uplink message according to the network slice information.

Optionally, the apparatus further comprises:

a storage module, configured to store a correspondence between the user identifier and the network slice information, and create a session according to the PFCP session creation request;

and a third sending module, configured to send a create completion message to the SMF.

It should be noted that, the above modules may be implemented by software or hardware, and for the latter, the following may be implemented, but not limited to: the modules are all positioned in the same processor; alternatively, the modules are respectively located in different processors in any combination.

Fig. 12 is a block diagram of a second structure of a data transmission device according to an embodiment of the present application, and as shown in fig. 12, the device is applied to a bearer network device, and includes:

a second downlink message receiving module 122, configured to receive a downlink message sent by a user plane management function UPF, where the downlink message carries network slice information, and the network slice information is network slice information corresponding to a user identifier determined by the UPF according to a pre-stored correspondence between the user identifier and the network slice information;

the first isolating module 124 is configured to perform resource isolation on the network slice information, and send the downlink packet to an access network device.

Optionally, the second downlink packet receiving module 122 includes:

a second receiving submodule, configured to receive the downlink packet sent by the UPF and carrying a core network virtual extensible local area network VXLAN VNI, where the core network VXLAN VNI is a VXLAN VNI corresponding to the network slice information determined by the UPF according to a pre-configured correspondence between network slice information and VXLAN vnni, and the UPF encapsulates a VXLAN header when sending the downlink packet, where an inner source address is a GTPUIP on an UPF side, an inner destination address is a GTPUIP on an RAN side, an inner source MAC is an UPF side interface MAC, and an inner destination MAC is an interface MAC on a core network side of the TN device; alternatively, the first and second electrodes may be,

Optionally, the first isolation module 124 includes:

the conversion submodule is used for converting the core network side VLAN ID into an access network equipment side VLAN ID;

and the forwarding submodule is used for forwarding the downlink message to the access network equipment according to the VLAN ID of the access network equipment side.

Optionally, the conversion sub-module includes:

Optionally, the first isolation module 124 includes:

the decapsulation submodule is used for decapsulating the VXLAN tunnel and acquiring the network slice information;

the modification submodule is used for modifying the inner layer source MAC into a TN equipment RAN side interface MAC and modifying the inner layer destination MAC into a RAN interface MAC;

and the encapsulation submodule is used for encapsulating the VXLAN tunnel and sending the downlink message to the access network equipment.

Optionally, the first isolation module 124 includes:

the acquisition submodule is used for acquiring the network slice information from the SNSSAI extended header of the downlink message;

and the sending submodule is used for sending the downlink message to the access network equipment according to the network slice information.

Optionally, the apparatus further comprises:

a second determining module, configured to determine the network slice information according to the VLAN ID or the VXLAN VNI when the uplink packet carries the VLAN ID or the VXLAN VNI;

and the second isolation module is used for carrying out resource isolation on the network slice information and sending the uplink message to the UPF.

Embodiments of the present invention also provide a computer-readable storage medium having a computer program stored thereon, wherein the computer program is arranged to perform the steps of any of the above-mentioned method embodiments when executed.

In an exemplary embodiment, the computer-readable storage medium may include, but is not limited to: various media capable of storing computer programs, such as a usb disk, a Read-Only Memory (ROM), a Random Access Memory (RAM), a removable hard disk, a magnetic disk, or an optical disk.

Embodiments of the present invention also provide an electronic device comprising a memory having a computer program stored therein and a processor arranged to run the computer program to perform the steps of any of the above method embodiments.

In an exemplary embodiment, the electronic apparatus may further include a transmission device and an input/output device, wherein the transmission device is connected to the processor, and the input/output device is connected to the processor.

For specific examples in this embodiment, reference may be made to the examples described in the above embodiments and exemplary embodiments, and details of this embodiment are not repeated herein.

It will be apparent to those skilled in the art that the various modules or steps of the invention described above may be implemented using a general purpose computing device, they may be centralized on a single computing device or distributed across a network of computing devices, and they may be implemented using program code executable by the computing devices, such that they may be stored in a memory device and executed by the computing device, and in some cases, the steps shown or described may be performed in an order different than that described herein, or they may be separately fabricated into various integrated circuit modules, or multiple ones of them may be fabricated into a single integrated circuit module. Thus, the present invention is not limited to any specific combination of hardware and software.

The above description is only a preferred embodiment of the present invention and is not intended to limit the present invention, and various modifications and changes may be made by those skilled in the art. Any modification, equivalent replacement, or improvement made within the principle of the present invention should be included in the protection scope of the present invention.

24页详细技术资料下载

上一篇：一种医用注射器针头装配设备

下一篇：企业微信监管方法及其系统

Data transmission method and device

相关技术

网友询问留言