CN102377603B - Policy processing method and policy processing devices - Google Patents

Abstract

The invention provides a policy processing method, a policy processing system and devices. The method includes the following steps: a provincial control center receives a first policy synchronization message sent by a central control center; according to the first policy synchronization message, a policy is obtained from a central policy library corresponding to the central control center, and according to the policy, a policy in a provincial policy library corresponding to the provincial control center is synchronously processed; a generated second policy synchronization message is sent to control node units, so that the control node units can obtain the updated policy from the provincial policy library corresponding to the provincial control center according to the second policy synchronization message, and according to the policy, policies in policy sub-libraries corresponding to the control node units are updated.

Description

Policy processing method, system and device

technical field

The present invention relates to the technical communication field, in particular to a policy processing method, system and equipment.

Background technique

Next Generation Broadcasting Network (NGB for short) is an interactive network with unified technical standards, manageable, controllable and credible, and full network bandwidth. The security management and control system based on NGB includes: content service layer (CP), business operation layer (SP), network operation layer (NP) and user terminal layer (USER). It is connected to the service platform, the network operation layer is connected to the bearer network, and the user terminal layer is connected to the user terminal, so that the security management and control system realizes the security protection function for content, business, network and users.

However, with the evolution of triple play, NGB continues to introduce new services, and the types of terminals also increase accordingly, resulting in major changes in the network architecture and transmission system. For example, a hierarchical management mode appears, but the existing The policy management method cannot be applied to this hierarchical management mode, thus reducing the security protection function of the security management and control system for content, business, network and users.

Contents of the invention

The present invention provides a policy processing method, system and equipment, which are used to solve the problem that the policy management method in the prior art cannot be applied to the hierarchical management mode, thereby reducing the security protection function of the security management and control system for content, business, network and users The problem.

A policy processing method provided by the present invention includes:

The provincial management and control center receives the first policy synchronization message sent by the central management and control center;

The provincial management and control center obtains the policy from the central policy database corresponding to the central management and control center according to the first policy synchronization message, and according to the policy, updates the policy in the provincial policy database corresponding to the provincial management and control center The strategy is synchronized;

The provincial management and control center sends the generated second policy synchronization message to the management and control node unit, so that the management and control node unit obtains an update from the provincial policy library corresponding to the provincial management and control center according to the second policy synchronization message The processed policy, and according to the policy, update the policy in the policy sub-base corresponding to the management and control node unit.

The present invention also provides a policy processing method, including:

The central management and control center receives the identification information reported by the provincial management and control center;

The central management and control center analyzes and processes the identification information, and updates the policies in the central policy library corresponding to the central management and control center according to the obtained analysis results;

The central management and control center sends a first policy synchronization message to the provincial management and control center, so that the provincial management and control center can obtain updates from the central policy library corresponding to the central management and control center according to the first policy synchronization message The processed policy, and according to the updated policy, synchronously process the policies in the provincial policy library corresponding to the provincial management and control center;

The central management and control center receives the first policy synchronization response information returned by the provincial management and control center.

The present invention also provides a policy processing method, including:

The management and control node unit receives the second policy synchronization message sent by the provincial management and control center;

The management and control node unit obtains the updated policy from the provincial policy library corresponding to the provincial management and control center according to the second policy synchronization message, and according to the policy, the policy corresponding to the management and control node unit The strategies in the sub-database are synchronized;

The management and control node unit sends a second policy synchronization response message to the provincial management and control center.

The invention provides a provincial management and control center, including:

A transceiver module, configured to receive the first policy synchronization message sent by the central management and control center;

A policy synchronization module, configured to obtain a policy from the central policy library corresponding to the central management and control center according to the first policy synchronization message, and, according to the policy, update the policy in the provincial policy library corresponding to the provincial management and control center The strategy is synchronized;

The transceiver module is further configured to send the generated second policy synchronization message to the management and control node unit, so that the management and control node unit can obtain the corresponding provincial policy library from the provincial management and control center according to the second policy synchronization message. The processed policy is updated, and the policy in the policy sub-base corresponding to the management and control node unit is updated according to the policy.

The invention provides a central management and control center, comprising:

The transceiver module is used to receive the identification information reported by the provincial management and control center;

A policy update module, configured to analyze and process the identification information, and update the policies in the central policy library corresponding to the central management and control center according to the obtained analysis results;

The transceiver module is also used to send a first policy synchronization message to the provincial management and control center, so that the provincial management and control center can retrieve the information from the central policy library corresponding to the central management and control center according to the first policy synchronization message. Acquiring the updated policy, and synchronizing the policies in the provincial policy library corresponding to the provincial management and control center according to the updated policy;

The transceiver module is also used to receive the first policy synchronization response information returned by the provincial management and control center.

The present invention provides a control node unit, including:

A transceiver module, configured to receive the second policy synchronization message sent by the provincial management and control center;

The policy synchronization module is configured to obtain the updated policy from the provincial policy database corresponding to the provincial management and control center according to the second policy synchronization message, and according to the policy, to the corresponding management and control node unit The strategies in the strategy sub-library are processed synchronously;

The transceiver module is further configured to send a second policy synchronization response message to the provincial management and control center.

The strategy processing method, system and equipment of the present invention report the identification information received from the management and control node unit to the central management and control center through the provincial management and control center, so that the central management and control center can analyze the identification information, and according to the obtained analysis results , update the policy in the policy library corresponding to the central management and control center, and then synchronize the updated policy to the policy library corresponding to the provincial management and control center and the policy library corresponding to the control node unit, thus effectively improving security management and control The system's security protection functions for content, business, network and users, and then realize the top-down policy dynamic update and seamless management and control capabilities of the entire policy processing system.

Description of drawings

FIG. 1 is a network deployment architecture diagram of a policy processing system based on various embodiments of the present invention;

Fig. 2 is a flowchart of an embodiment of the policy processing method of the present invention;

FIG. 3 is a schematic structural diagram of another embodiment of the policy processing method of the present invention;

Fig. 4 is a flowchart of another embodiment of the policy processing method of the present invention;

Fig. 5 is a structural schematic diagram of an embodiment of the provincial management and control center of the present invention;

Fig. 6 is a structural schematic diagram of an embodiment of the central management and control center of the present invention;

Fig. 7 is a schematic structural diagram of an embodiment of the management and control node unit of the present invention.

Detailed ways

Fig. 1 is a network deployment architecture diagram of the policy processing system based on various embodiments of the present invention. As shown in Fig. 1, the security policy processing system includes: a central management and control center 11, a provincial management and control center 12 and a management and control node unit 13, wherein , the central management and control center 11 includes a central strategy library corresponding to the central management and control center, the provincial management and control center 12 includes a provincial strategy library corresponding to the provincial management and control center 12, and the management and control node unit 13 includes a 13 corresponds to the strategy sub-library.

Fig. 2 is a flowchart of an embodiment of the policy processing method of the present invention, as shown in Fig. 2, the method of this embodiment includes:

Step 101, the provincial management and control center receives the first policy synchronization message sent by the central management and control center.

Step 102, the provincial management and control center obtains the strategy from the central policy library corresponding to the central management and control center according to the first policy synchronization message, and according to the strategy, executes the policy in the provincial strategy library corresponding to the provincial management and control center Synchronous processing.

In this embodiment, the first policy synchronization message may specifically be a Transmission Control Protocol (Transmission Control Protocol; TCP for short) socket (Socket) message packet. The central policy library corresponding to the central management and control center can be used as a file transfer protocol (File Transfer Protocol; referred to as: FTP)-server (server), and then the first policy synchronization message carries the FTP location of the central policy library, thereby saving The level management and control center can obtain the policy from the central policy repository corresponding to the FTP location of the central policy repository according to the first policy synchronization message.

Step 103, the provincial management and control center sends the generated second policy synchronization message to the management and control node unit, so that the management and control node unit obtains the updated policy from the provincial policy library corresponding to the provincial management and control center according to the second policy synchronization message strategy, and according to the strategy, update the strategy in the strategy sub-base corresponding to the control node unit.

In this embodiment, the second policy synchronization message may also specifically be a TCP Socket message packet. The provincial policy library corresponding to the provincial management and control center can be used as the FTP-server end, and the FTP location of the provincial policy library is carried in the second policy synchronization message, so that the management and control node unit can synchronize the message according to the second policy, Obtain policies from the provincial policy library corresponding to the FTP location of the provincial policy library.

In this embodiment, a specific form of the first policy synchronization message and the second policy synchronization message is shown in Table 1:

Table I

In this embodiment, the provincial management and control center receives the first policy synchronization message sent by the central management and control center, obtains the policy from the central policy database corresponding to the central management and control center, and according to the policy, the corresponding provincial management and control center The policies in the provincial policy library are synchronized. In addition, the provincial management and control center sends the generated second policy synchronization message to the management and control node unit, so that the management and control node unit can synchronize the message from the provincial management and control center according to the second policy synchronization message. The updated policy is obtained from the provincial policy library of the local government, and according to the policy, the policy in the policy sub-base corresponding to the control node unit is updated, thereby effectively improving the security of the security control system for content, business, network and users. function, and then realize the top-down policy dynamic update and seamless management and control capabilities of the entire policy processing system.

Further, in another embodiment of the present invention, on the basis of the above embodiment shown in FIG. 1 , after step 102, it may further include:

The provincial management and control center returns the generated first policy synchronization response message to the central management and control center.

Further, after step 103, it may also include:

The provincial management and control center receives the second policy synchronization response message returned by the management and control node unit.

In this embodiment, the first policy synchronization response message and the second policy synchronization response message may specifically be TCP Socket message packets. Specifically, a specific form of the first policy synchronization response message and the second policy synchronization response message is shown in Table 2:

Table II

Among them, the specific definition of the synchronization processing result can be shown in Table 3:

Table three

Further, the method may also include:

The provincial management and control center receives the identification information reported by the management and control node unit, and reports the identification information to the central management and control center.

In this embodiment, the management and control node unit can collect identification information every predetermined time, and report the identification information to the provincial management and control center, and then the provincial management and control center will report the identification information to the central management and control center, and the central management and control The center analyzes and processes the identification information, and can update the policies in the central policy library according to the analysis results. Wherein, the identification information includes service identification information and user identification information. Specifically, the business identification information may include: business type, business source, business operation area, business priority, terminal type, and business processing status information corresponding to the business type, etc.; user identification information may include: registration area code, user type, user code, family member code, user level, terminal type, and processing status information corresponding to the user type, etc.

Fig. 3 is a schematic structural diagram of another embodiment of the policy processing method of the present invention. As shown in Fig. 3, the method of this embodiment includes:

Step 201, the central management and control center receives the identification information reported by the provincial management and control center.

Wherein, the identification information includes service identification information and user identification information. Specifically, the business identification information may include: business type, business source, business operation area, business priority, terminal type, and business processing status information corresponding to the business type, etc.; user identification information may include: registration area code, user type, user code, family member code, user level, terminal type, and processing status information corresponding to the user type, etc. In addition, in this embodiment, the provincial management and control center can execute the technical solution of the method embodiment shown in FIG. 2 , the principles of which are similar and will not be repeated here.

Step 202, the central management and control center analyzes and processes the identification information, and updates the policy in the central policy database corresponding to the central management and control center according to the obtained analysis result.

Step 203, the central management and control center sends the first policy synchronization message to the provincial management and control center, so that the provincial management and control center can obtain the updated policy from the central policy library corresponding to the central management and control center according to the first policy synchronization message, And according to the updated policy, the policy in the provincial policy library corresponding to the provincial management and control center is synchronously processed.

Step 204, the central management and control center receives the first policy synchronization response message returned by the provincial management and control center.

In this embodiment, the specific form of the first policy synchronization message may be as shown in Table 1 above, and the specific form of the first policy synchronization response message may be as shown in Table 2 and Table 3 above.

In this embodiment, the central management and control center analyzes and processes the received identification information, obtains the analysis result, and updates the policy in the central policy library according to the analysis result, and synchronizes the updated policy to the provincial In the provincial policy database corresponding to the provincial management and control center, the updated policy in the provincial policy database of the provincial management and control center is synchronized to the policy sub-database corresponding to the management and control node unit, thus effectively improving the security management and control system for content, The security guarantee function of business, network and user, and then realize the top-down policy dynamic update and seamless management and control capabilities of the entire policy processing system.

Fig. 4 is a flowchart of another embodiment of the policy processing method of the present invention. As shown in Fig. 4, the method of this embodiment includes:

Step 301, the management and control node unit receives the second policy synchronization message sent by the provincial management and control center.

In this embodiment, the provincial management and control center can implement the technical solution of the method embodiment shown in FIG. 2 , the principles of which are similar and will not be repeated here.

Step 302: According to the second policy synchronization message, the management and control node unit obtains the updated policy from the provincial policy library corresponding to the provincial management and control center, and according to the policy, policies are synchronized.

Step 303, the management and control node unit sends a second policy synchronization response message to the provincial management and control center.

The specific form of the second policy synchronization message may be shown in Table 1 above, and the specific form of the second policy synchronization response message may be shown in Table 2 and Table 3 above.

In this embodiment, the provincial policy library corresponding to the provincial management and control center can be used as the FTP-server end, and the FTP location of the provincial policy library is carried in the second policy synchronization message, so that the management and control node unit can according to the In the second policy synchronization message, the policy is obtained from the provincial policy library corresponding to the FTP location of the provincial policy library.

In this embodiment, the management and control node unit obtains the updated strategy from the provincial strategy database corresponding to the provincial management and control center according to the received second policy synchronization message sent by the provincial management and control center, and according to the strategy, the The policies in the policy sub-database corresponding to the management and control node unit are synchronized, and the second policy synchronization response message is sent to the provincial management and control center, thus effectively improving the security protection function of the security management and control system for content, business, network and users , and then realize the top-down policy dynamic update and seamless management and control capabilities of the entire policy processing system.

Further, in another embodiment of the present invention, on the basis of the embodiment shown in FIG. 4 above, the method may further include:

The management and control node unit collects identification information and reports the identification information to the provincial management and control center.

Wherein, the identification information includes service identification information and user identification information. Specifically, the business identification information may include: business type, business source, business operation area, business priority, terminal type, and business processing status information corresponding to the business type, etc.; user identification information may include: registration area code, user type, user code, family member code, user level, terminal type, and processing status information corresponding to the user type, etc.

Further, the policy includes a truncation policy, a filtering policy and a replacement policy, wherein the priority of the truncating policy is higher than that of the filtering policy and the replacement policy, and the priority of the filtering policy is higher than that of the replacement policy Then the method may also include:

The management and control node unit judges whether the received data packets match according to the truncation class strategy in the strategy sub-library corresponding to the management and control node unit;

When there is a match, the packet is discarded. Finish.

When it does not match, the control node unit judges whether the data packet matches according to the filtering class strategy in the policy sub-library;

When matching, the control node unit deletes the data content of the matching part from the data packet, and sends the processed data packet;

When not matching, the control node unit judges whether the data packet matches according to the replacement class strategy in the strategy sub-library;

When matching, the control node unit replaces the data content of the matching part with the preset data content, and sends the processed data packet;

When there is no match, the control node unit sends the data packet.

Fig. 5 is a schematic structural diagram of an embodiment of the provincial management and control center of the present invention. As shown in Fig. The first strategy synchronization message sent by the central management and control center; the strategy synchronization module 22 is used to obtain the strategy from the central strategy library corresponding to the central management and control center according to the first strategy synchronization message, and according to the strategy, the provincial management and control center The strategies in the corresponding provincial-level strategy library are synchronized; the transceiver module 21 is also used to send the generated second strategy synchronization message to the management and control node unit, so that the management and control node unit can synchronize the message from the provincial level according to the second strategy synchronization message. The updated policy is obtained from the provincial policy database corresponding to the management and control center, and the policy in the policy sub-database corresponding to the management and control node unit is updated according to the policy.

The provincial management and control center in this embodiment can implement the technical solution of the method embodiment shown in FIG. 5 , and its implementation principles are similar, so details are not repeated here.

In this embodiment, the provincial management and control center receives the first policy synchronization message sent by the central management and control center, obtains the policy from the central policy database corresponding to the central management and control center, and according to the policy, the corresponding provincial management and control center The policies in the provincial policy library are synchronized. In addition, the provincial management and control center sends the generated second policy synchronization message to the management and control node unit, so that the management and control node unit can synchronize the message from the provincial management and control center according to the second policy synchronization message. The updated policy is obtained from the provincial policy library of the local government, and according to the policy, the policy in the policy sub-base corresponding to the control node unit is updated, thereby effectively improving the security of the security control system for content, business, network and users. function, and then realize the top-down policy dynamic update and seamless management and control capabilities of the entire policy processing system.

Further, in another embodiment of the present invention, on the basis of the above-mentioned embodiment shown in FIG. 5 , the transceiver module 21 is further configured to return the first policy synchronization response message to the central management and control center.

Further, the transceiving module 21 is also configured to receive the second policy synchronization response message returned by the management and control node unit.

Furthermore, the transceiver module 21 is also used for receiving the identification information reported by the management and control node unit, and reporting the identification information to the central management and control center.

Fig. 6 is a structural diagram of an embodiment of the central management and control center of the present invention. As shown in Fig. 6, the central management and control center of this embodiment includes: a transceiver module 31 and a policy update module 32, wherein the transceiver module 31 is used to receive provincial The identification information reported by the level management and control center; the policy update module 32 is used to analyze and process the identification information, and according to the obtained analysis results, update the strategy in the central policy library corresponding to the central management and control center; the transceiver module 31 also It is used to send the first policy synchronization message to the provincial management and control center, so that the provincial management and control center can obtain the updated policy from the central policy library corresponding to the central management and control center according to the first policy synchronization message, and according to the The updated policy is synchronized with the policies in the provincial policy database corresponding to the provincial management and control center; the transceiver module 31 is also used to receive the first policy synchronization response information returned by the provincial management and control center.

The central management and control center in this embodiment can execute the technical solution of the method embodiment shown in FIG. 3 , the principles of which are similar and will not be repeated here.

In this embodiment, the central management and control center analyzes and processes the received identification information, obtains the analysis result, and updates the policy in the central policy library according to the analysis result, and synchronizes the updated policy to the provincial In the provincial policy database corresponding to the provincial management and control center, the updated policy in the provincial policy database of the provincial management and control center is synchronized to the policy sub-database corresponding to the management and control node unit, thus effectively improving the security management and control system for content, The security guarantee function of business, network and user, and then realize the top-down policy dynamic update and seamless management and control capabilities of the entire policy processing system.

Fig. 7 is a schematic structural diagram of an embodiment of the management and control node unit of the present invention. As shown in Fig. 7, the management and control node unit includes: a transceiver module 41 and a strategy synchronization module 42, wherein the transceiver module 41 is used to receive the information sent by the provincial management and control center. The second strategy synchronization message; the strategy synchronization module 42 is used to obtain the updated strategy from the provincial strategy library corresponding to the provincial management and control center according to the second strategy synchronization message, and according to the strategy, control the corresponding strategy of the node unit The policies in the sub-database are synchronized; the transceiver module 41 is also used to send a second policy synchronization response message to the provincial management and control center.

The management and control node unit of this embodiment can implement the technical solution of the method embodiment shown in FIG. 4 , and its implementation principles are similar, so details will not be repeated here.

In this embodiment, the management and control node unit obtains the updated strategy from the provincial strategy database corresponding to the provincial management and control center according to the received second policy synchronization message sent by the provincial management and control center, and according to the strategy, the The policies in the policy sub-database corresponding to the management and control node unit are synchronized, and the second policy synchronization response message is sent to the provincial management and control center, thus effectively improving the security protection function of the security management and control system for content, business, network and users , and then realize the top-down policy dynamic update and seamless management and control capabilities of the entire policy processing system.

Further, on the basis of another embodiment of the present invention, on the basis of the above-mentioned embodiment shown in FIG. 7, the strategy includes a truncated strategy, a filtering strategy and a replacement strategy, and the control node unit further includes: The truncation class matching module, the filter class matching module and the replacement class matching module, wherein the truncation class matching module is used to judge whether the received data packets match according to the truncation class strategy in the policy sub-library corresponding to the control node unit; the filter class matching When the truncation class matching module judges that the data packet does not match according to the filtering class policy, it judges whether the data packet matches according to the replacement class policy in the policy sub-database; the replacement class matching module is used for the filtering class matching When the module judges that the data packet does not match according to the filtering policy, it judges whether the data packet matches according to the replacement policy in the policy sub-database; when it matches, it sends the data packet.

Further, when the truncation class matching module judges that the data packet matches according to the truncation class policy, the data packet is discarded; or,

When the filtering class matching module determines that the data packet matches according to the filtering class policy, delete the data content of the matching part from the data packet, and send the processed data packet; or,

When the replacement type matching module judges that the data packet matches according to the replacement type policy, it replaces the data content of the matching part with the preset data content, and sends the processed data packet.

The present invention also provides a policy processing system, the system includes a provincial management and control center, a central management and control center and a management and control node unit, wherein the provincial management and control center can execute the technical solution of the method embodiment shown in Figure 2, and the central management and control center can To execute the technical solution of the method embodiment shown in FIG. 3 , the management and control node unit can execute the technical solution of the method embodiment shown in FIG. 4 , and its implementation principles are similar, so details are not repeated here. The entire policy processing system of the present invention realizes top-to-bottom policy dynamic updating and seamless management and control capabilities.

Those of ordinary skill in the art can understand that all or part of the steps for realizing the above-mentioned method embodiments can be completed by hardware related to program instructions, and the aforementioned program can be stored in a computer-readable storage medium. When the program is executed, the It includes the steps of the above method embodiments; and the aforementioned storage medium includes: ROM, RAM, magnetic disk or optical disk and other various media that can store program codes.

Finally, it should be noted that: the above embodiments are only used to illustrate the technical solutions of the present invention, rather than to limit them; although the present invention has been described in detail with reference to the foregoing embodiments, those of ordinary skill in the art should understand that: it can still be Modifications are made to the technical solutions described in the foregoing embodiments, or equivalent replacements are made to some of the technical features; and these modifications or replacements do not make the essence of the corresponding technical solutions depart from the scope of the technical solutions of the embodiments of the present invention.

Claims (5)

1. A policy processing method, characterized in that, comprising: The management and control node unit receives the second policy synchronization message sent by the provincial management and control center; The management and control node unit obtains the updated policy from the provincial policy library corresponding to the provincial management and control center according to the second policy synchronization message, and according to the policy, the policy corresponding to the management and control node unit The strategies in the sub-database are synchronized; The management and control node unit sends a second policy synchronization response message to the provincial management and control center; The management and control node unit collects identification information, and reports the identification information to the provincial management and control center; wherein, the identification information includes service identification information and user identification information; The strategy includes a truncation class strategy, a filter class strategy and a replacement class strategy, and the method also includes: The management and control node unit judges whether the received data packets match according to the truncation policy in the policy sub-library corresponding to the management and control node unit; When the management and control node unit determines that the data packets do not match according to the truncation policy, the management and control node unit determines whether the data packets match according to the filtering policy in the policy sub-library; When the management and control node unit determines that the data packets do not match according to the filtering policy, the management and control node unit determines whether the data packets match according to the replacement policy in the policy sub-database; When the management and control node unit judges that the data packet does not match according to the replacement policy, the management and control node unit sends the data packet. 2. The policy processing method according to claim 1, further comprising: When the management and control node unit determines that the data packet matches according to the truncation policy, the management and control node unit discards the data packet; or, When the management and control node unit determines that the data packet matches according to the filtering policy, the management and control node unit deletes the data content of the matching part from the data packet, and sends the processed data packet; or, When the management and control node unit judges that the data packets match according to the replacement policy, the management and control node unit replaces the data content of the matching part with the preset data content, and sends the processed data packet. 3. A control node unit, characterized in that, comprising: A transceiver module, configured to receive the second policy synchronization message sent by the provincial management and control center; The policy synchronization module is configured to obtain the updated policy from the provincial policy database corresponding to the provincial management and control center according to the second policy synchronization message, and according to the policy, to the corresponding management and control node unit The strategies in the strategy sub-library are processed synchronously; The transceiver module is also used to send a second policy synchronization response message to the provincial control center; The transceiver module is also used to collect identification information and report the identification information to the provincial management and control center, wherein the identification information includes service identification information and user identification information; The strategy includes a truncation strategy, a filter strategy and a replacement strategy, and the control node unit also includes: The truncation class matching module is used to determine whether the received data packets match according to the truncation class strategy in the strategy sub-library corresponding to the control node unit; The filter type matching module is used for determining whether the data packet matches according to the replacement type strategy in the policy sub-library when the truncation type matching module determines that the data packet does not match according to the filter type policy; The replacement class matching module is used for when the filter class matching module judges that the data packet does not match according to the filter class strategy, and judges whether the data packet matches according to the replacement class strategy in the policy sub-library; when When there is no match, the packet is sent. 4. The management and control node unit according to claim 3, wherein, when the truncation class matching module judges that the data packet matches according to the truncation class strategy, the data packet is discarded; or, When the filter type matching module determines that the data packet matches according to the filter type policy, delete the data content of the matching part from the data packet, and send the processed data packet; or, When the replacement type matching module judges that the data packet matches according to the replacement type policy, it replaces the data content of the matching part with the preset data content, and sends the processed data packet. 5. A policy processing system, characterized in that it comprises a provincial management and control center, a central management and control center and the management and control node unit as claimed in claim 3 or 4.