[go: up one dir, main page]

CN103220650B - A kind of method and apparatus of WiFi terminal access different business territory - Google Patents

A kind of method and apparatus of WiFi terminal access different business territory Download PDF

Info

Publication number
CN103220650B
CN103220650B CN201210015987.5A CN201210015987A CN103220650B CN 103220650 B CN103220650 B CN 103220650B CN 201210015987 A CN201210015987 A CN 201210015987A CN 103220650 B CN103220650 B CN 103220650B
Authority
CN
China
Prior art keywords
data service
wifi terminal
cpe
upstream data
address
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Expired - Fee Related
Application number
CN201210015987.5A
Other languages
Chinese (zh)
Other versions
CN103220650A (en
Inventor
孔涛
黄保庆
朱莉
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Huawei Technologies Co Ltd
Original Assignee
Huawei Technologies Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Huawei Technologies Co Ltd filed Critical Huawei Technologies Co Ltd
Priority to CN201210015987.5A priority Critical patent/CN103220650B/en
Priority to RU2014133529/07A priority patent/RU2572825C1/en
Priority to PCT/CN2012/075854 priority patent/WO2013107138A1/en
Publication of CN103220650A publication Critical patent/CN103220650A/en
Application granted granted Critical
Publication of CN103220650B publication Critical patent/CN103220650B/en
Expired - Fee Related legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L41/00Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
    • H04L41/08Configuration management of networks or network elements
    • H04L41/0803Configuration setting
    • H04L41/0806Configuration setting for initial configuration or provisioning, e.g. plug-and-play
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L61/00Network arrangements, protocols or services for addressing or naming
    • H04L61/50Address allocation
    • H04L61/5007Internet protocol [IP] addresses
    • H04L61/5014Internet protocol [IP] addresses using dynamic host configuration protocol [DHCP] or bootstrap protocol [BOOTP]

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Mobile Radio Communication Systems (AREA)

Abstract

本发明提供了一种WiFi终端接入不同业务域的方法和装置,该方法应用于CPE,包括:若WiFi终端发起的上行数据业务是在IP层进行认证和/或计费的数据业务类型,将上行数据业务通过CAPWAP隧道进行封装;将通过CAPWAP隧道封装的上行数据业务的报文透传过EPC后发送到BRAS,BRAS将上行数据业务的报文发送给相应的业务域;若WiFi终端发起的上行数据业务是在应用层进行认证和/或计费的数据业务类型,则将承载上行数据业务的报文携带的WiFi终端的第二IP地址转换为CPE设备的第一IP地址;将携带有CPE设备的第一IP地址的上行数据业务的报文通过EPC直接路由转发给相应的业务域。

The present invention provides a method and device for a WiFi terminal to access different service domains. The method is applied to a CPE, including: if the uplink data service initiated by the WiFi terminal is a data service type that is authenticated and/or billed at the IP layer, Encapsulate the uplink data service through the CAPWAP tunnel; transparently transmit the uplink data service message encapsulated through the CAPWAP tunnel through the EPC and send it to the BRAS, and the BRAS sends the uplink data service message to the corresponding service domain; if the WiFi terminal initiates If the uplink data service is a data service type that is authenticated and/or billed at the application layer, the second IP address of the WiFi terminal carried in the message carrying the uplink data service is converted into the first IP address of the CPE device; The uplink data service message with the first IP address of the CPE device is directly routed and forwarded to the corresponding service domain through the EPC.

Description

一种WiFi终端访问不同业务域的方法和装置A method and device for a WiFi terminal to access different service domains

技术领域 technical field

本发明涉及通信技术领域,尤其涉及一种WiFi终端访问不同业务流的方法和装置。The present invention relates to the field of communication technologies, in particular to a method and a device for a WiFi terminal to access different service flows.

背景技术 Background technique

随着LTE(LongTermEvolution,长期演进)、HSPA(HighSpeedPacketAccess,高速分组接入)技术的快速发展,业界出现了采用HSPA+LTE技术实现宽带无线接入的需求,通过(LongTermEvolutionAdvanced,LTE技术的后续演进)CPE(CustomerPremiseEquipment,用户端设备)进行无线宽带接入。同时WiFi已成为智能机、笔记本、平板电脑等消费电子产品的标准配置。相对于LTE终端,WiFi终端成本低且更普及。所以在无线宽带技术领域中,采用LTE+WiFi的技术方案则成为一种趋势。With the rapid development of LTE (Long Term Evolution, Long Term Evolution) and HSPA (High Speed Packet Access, High Speed Packet Access) technologies, there is a demand in the industry to use HSPA+LTE technology to achieve broadband wireless access. Through (Long Term Evolution Advanced, the follow-up evolution of LTE technology) CPE (CustomerPremiseEquipment, user equipment) performs wireless broadband access. At the same time, WiFi has become the standard configuration of consumer electronics products such as smartphones, notebooks, and tablets. Compared with LTE terminals, WiFi terminals are cheaper and more popular. Therefore, in the field of wireless broadband technology, it becomes a trend to adopt the technical solution of LTE+WiFi.

为了实现WiFi终端通过LTECPE接入到网络中需要支持多种数据业务,如Internet、IPTV(InternetPersonalityTelevision,交互式网络电视)、IMS(InternetProtocolMultimediaSubsystem网络多媒体子系统)和运营商自营的业务。对于Internet等业务需要在IP(InternetProtocol,因特网协议)层进行认证和/或计费的业务,由于LTE/EPC只能感知到LTECPE,不能感知到LTECPE下的WiFi终端,故现有技术的LTE/EPC不能在WiFi终端访问IP层进行认证和/或计费的业务域的情况下对WiFi终端进行认证和/或计费。In order to enable WiFi terminals to access the network through LTECPE, it needs to support multiple data services, such as Internet, IPTV (Internet Personality Television, Interactive Network Television), IMS (Internet Protocol Multimedia Subsystem Network Multimedia Subsystem) and operators' own services. For services such as the Internet that require authentication and/or accounting at the IP (Internet Protocol, Internet Protocol) layer, since LTE/EPC can only perceive LTECPE, it cannot perceive WiFi terminals under LTECPE, so the LTE/EPC of the prior art The EPC cannot perform authentication and/or accounting for the WiFi terminal when the WiFi terminal accesses a service domain where the IP layer performs authentication and/or accounting.

为了能够在WiFi终端访问IP层进行认证和/或计费的业务域的情况下对WiFi终端进行认证和/或计费,现有技术提出了一种新的网络架构,WiFi终端的上行数据业务流通过CAPWAP隧道封装透过EPC后,接入BRAS(BroadbandRemoteAccessServer,宽带远程接入服务器)的组网方式,然后经过BRAS分别接入到相应的业务域。但是采用这种组网方式,上行数据业务流通过CAPWAP(ControlAndProvisioningofWirelessAccessPointsProtocolSpecification,无线接入点的控制和配置)隧道封装,这样给除Internet等在IP层进行认证和/或计费的业务以外的其它业务带来了很大的头开销,严重影响了EPS(EvolvedPacketSystem,演进型分组系统)的效率;且CAPWAP隧道的五元组是相同的,WiFi终端的不同上行数据业务流将被映射到相同的EPS承载,使得无法实现对WiFi终端发起的不同业务流进行优先级调度。In order to be able to perform authentication and/or accounting on WiFi terminals when they access the business domain of IP layer for authentication and/or accounting, the prior art proposes a new network architecture, the uplink data service of WiFi terminals After the flow is encapsulated through the CAPWAP tunnel and passed through the EPC, it is connected to the networking mode of the BRAS (Broadband Remote Access Server, Broadband Remote Access Server), and then connected to the corresponding service domain through the BRAS. However, with this networking method, the uplink data service flow is encapsulated through the CAPWAP (ControlAndProvisioningofWirelessAccessPointsProtocolSpecification, control and configuration of wireless access point) tunnel, so that other services except the Internet and other services that perform authentication and/or accounting at the IP layer It brings a lot of header overhead, which seriously affects the efficiency of EPS (Evolved Packet System, Evolved Packet System); and the five-tuple of CAPWAP tunnel is the same, and the different uplink data service flows of WiFi terminals will be mapped to the same EPS The bearer makes it impossible to implement priority scheduling of different service flows initiated by WiFi terminals.

发明内容 Contents of the invention

本发明的实施例提供一种WiFi终端访问不同业务域的方法和装置,用于解决现有技术存在着的EPS效率低,同时无法实现对WiFi终端发起的不同业务流进行优先级调度的问题。Embodiments of the present invention provide a method and device for a WiFi terminal to access different service domains, which are used to solve the problem of low EPS efficiency and the inability to implement priority scheduling of different service flows initiated by the WiFi terminal in the prior art.

为解决上述技术问题,本发明的实施例采用如下技术方案:In order to solve the above technical problems, embodiments of the present invention adopt the following technical solutions:

一种用于WiFi终端接入到不同业务域的方法,应用于用户端设备CPE,所述CPE与所述WiFi终端通过WiFi方式进行通信,所述CPE与基站通过长期演进LTE方式进行通信,所述基站通过演进型分组核心网EPC与多种业务分别对应的多个业务域相连,通过上述系统架构,使得所述WiFi终端通过所述CPE,所述基站,所述EPC与所述业务域进行通信,其中,所述方法包括:A method for a WiFi terminal to access different service domains, which is applied to a user end equipment (CPE), where the CPE communicates with the WiFi terminal through WiFi, and the CPE communicates with a base station through Long Term Evolution (LTE). The base station is connected to multiple service domains respectively corresponding to various services through the evolved packet core network EPC, and the above system architecture enables the WiFi terminal to communicate with the service domain through the CPE, the base station, and the EPC communicating, wherein the method comprises:

所述CPE根据所述EPC分配的第一IP地址通过所述EPC与宽带远程接入服务器BRAS进行通信并建立CAPWAP隧道,将通过CAPWAP隧道封装的WiFi终端与所述在IP层进行认证和/或计费的业务域进行通信的报文发送到BRAS,并通过所述WiFi终端与所述在IP层进行认证和/或计费的业务域的交互使得所述BRAS为所述WiFi终端分配一个第二IP地址;The CPE communicates with the broadband remote access server BRAS through the EPC according to the first IP address allocated by the EPC and establishes a CAPWAP tunnel, and authenticates and/or authenticates the WiFi terminal encapsulated through the CAPWAP tunnel with the IP layer The charging service domain communicates with the BRAS, and through the interaction between the WiFi terminal and the authentication and/or charging service domain at the IP layer, the BRAS allocates a first Two IP addresses;

确定所述WiFi终端发起的上行数据业务的数据业务类型;Determine the data service type of the uplink data service initiated by the WiFi terminal;

若所述WiFi终端发起的上行数据业务是在IP层进行认证和/或计费的数据业务类型,将所述上行数据业务通过所述CAPWAP隧道进行封装;将通过CAPWAP隧道封装的上行数据业务的报文透传过所述EPC后发送到BRAS,所述BRAS将所述上行数据业务的报文发送给相应的业务域;If the uplink data service initiated by the WiFi terminal is a data service type that is authenticated and/or billed at the IP layer, encapsulate the uplink data service through the CAPWAP tunnel; encapsulate the uplink data service through the CAPWAP tunnel After the message is transparently transmitted through the EPC, it is sent to the BRAS, and the BRAS sends the message of the uplink data service to the corresponding service domain;

若WiFi终端发起的上行数据业务是在应用层进行认证和/或计费的数据业务类型,则将承载所述上行数据业务的报文携带的所述WiFi终端的所述第二IP地址转换为所述CPE设备的所述第一IP地址;将所述携带有所述CPE设备的第一IP地址的所述上行数据业务的报文通过所述EPC直接路由转发给相应的业务域。If the uplink data service initiated by the WiFi terminal is a data service type for authentication and/or accounting at the application layer, converting the second IP address of the WiFi terminal carried in the message carrying the uplink data service to The first IP address of the CPE device; forwarding the packet of the uplink data service carrying the first IP address of the CPE device to the corresponding service domain through the EPC direct routing.

一种用于WiFi终端接入到不同业务域的装置,其特征在于,所述CPE与所述WiFi终端通过WiFi方式进行通信,所述CPE与基站通过长期演进LTE方式进行通信,所述基站通过演进型分组核心网EPC与多种业务分别对应的多个业务域相连,通过上述系统架构,使得所述WiFi终端通过所述CPE,所述基站,所述EPC与所述业务域进行通信,所述CPE包括:A device for accessing different service domains by a WiFi terminal, wherein the CPE communicates with the WiFi terminal via WiFi, the CPE communicates with a base station via Long Term Evolution (LTE), and the base station communicates via The evolved packet core network EPC is connected to multiple service domains respectively corresponding to various services. Through the above system architecture, the WiFi terminal communicates with the service domains through the CPE, the base station, and the EPC. The above CPE includes:

隧道建立单元,用于根据所述EPC分配的第一IP地址通过所述EPC与宽带远程接入服务器BRAS进行通信,建立CAPWAP隧道,将通过CAPWAP隧道封装的WiFi终端与所述在IP层进行认证和/或计费的业务域进行通信的报文发送到BRAS,并通过所述WiFi终端与所述在IP层进行认证和/或计费的业务域的交互使得所述BRAS为所述WiFi终端分配一个第二IP地址;The tunnel establishment unit is used to communicate with the broadband remote access server BRAS through the EPC according to the first IP address allocated by the EPC, establish a CAPWAP tunnel, and authenticate the WiFi terminal encapsulated through the CAPWAP tunnel with the IP layer and/or the service domain for charging is sent to the BRAS, and through the interaction between the WiFi terminal and the service domain for authentication and/or charging at the IP layer, the BRAS is the WiFi terminal assign a second IP address;

确定单元,用于确定所述WiFi终端发起的上行数据业务的数据业务类型;A determining unit, configured to determine the data service type of the uplink data service initiated by the WiFi terminal;

IP层业务处理单元,用于若所述确定单元确定所述WiFi终端发起的上行数据业务是在IP层进行认证和/或计费的数据业务类型,将所述上行数据业务通过所述CAPWAP隧道进行封装;An IP layer service processing unit, configured to pass the uplink data service through the CAPWAP tunnel if the determination unit determines that the uplink data service initiated by the WiFi terminal is a data service type that is authenticated and/or charged at the IP layer for encapsulation;

应用层业务处理单元,用于若所述确定单元确定WiFi终端发起的上行数据业务是在应用层进行认证和/或计费的数据业务类型,则将承载所述上行数据业务的报文携带的所述WiFi终端的所述第二IP地址转换为所述CPE设备的所述第一IP地址;An application layer service processing unit, configured to carry the packet carrying the uplink data service if the determination unit determines that the uplink data service initiated by the WiFi terminal is a data service type that is authenticated and/or billed at the application layer The second IP address of the WiFi terminal is converted to the first IP address of the CPE device;

发送单元,用于将通过CAPWAP隧道封装的所述上行数据业务的报文透传过所述EPC后发送到BRAS,所述BRAS将所述上行数据业务的报文发送给相应的业务域;或A sending unit, configured to transparently transmit the packet of the uplink data service encapsulated through the CAPWAP tunnel through the EPC and send it to the BRAS, and the BRAS sends the packet of the uplink data service to a corresponding service domain; or

用于将所述携带有所述CPE设备的第一IP地址的所述上行数据业务的报文通过所述EPC直接路由转发给相应的业务域。and forwarding the packet of the uplink data service carrying the first IP address of the CPE device to a corresponding service domain through the EPC direct routing.

本发明实施例提供的WiFi终端接入不同业务域的方法和装置,用户端设备根据WiFi端发起的不同数据业务进行智能路由,如对在IP层进行认证和/或计费的业务,通过所述CAPWAP隧道将承载有所述上行数据业务的报文进行封装后透传过所述EPC后发送到BRAS,BRAS将所述上行数据业务的报文发送给相应的业务域;对于在应用层认证和/或计费的业务,则将承载所述上行数据业务的报文携带的所述WiFi终端的所述第二IP地址转换为所述CPE设备的所述第一IP地址,通过所述EPC直接路由转发给相应的业务域,这样WiFi终端访问在应用层进行认证和/或计费的业务域,不需要通过BRAS,WiFi终端与业务域间的报文也不需要CAPWAP隧道封装,不会增加报文的头开销,从而可以提高EPS的传送效率;同时通过对不同类型的业务域进行智能路由,如对于在IP层或应用层进行认证和/或计费的不同类型的业务域的五元组不同,使得CPE可以将WiFi终端的不同数据业务映射到不同的EPS承载,实现了不同业务流之间的优先级调度。In the method and device for accessing different service domains by WiFi terminals provided by the embodiments of the present invention, the user equipment performs intelligent routing according to different data services initiated by the WiFi terminal, such as authentication and/or billing services at the IP layer, through the The CAPWAP tunnel encapsulates the message carrying the uplink data service and sends it to the BRAS after being transparently transmitted through the EPC, and the BRAS sends the message of the uplink data service to the corresponding service domain; and/or billing services, then convert the second IP address of the WiFi terminal carried in the packet carrying the uplink data service to the first IP address of the CPE device, and through the EPC Direct routing and forwarding to the corresponding service domain, so that the WiFi terminal accesses the service domain that is authenticated and/or billed at the application layer without passing through the BRAS, and the packets between the WiFi terminal and the service domain do not need CAPWAP tunnel encapsulation, and will not Increase the header overhead of the message, thereby improving the transmission efficiency of EPS; at the same time, through intelligent routing of different types of business domains, such as five different types of business domains that perform authentication and/or accounting at the IP layer or application layer The tuples are different, so that the CPE can map different data services of the WiFi terminal to different EPS bearers, and realize priority scheduling between different service flows.

附图说明 Description of drawings

为了更清楚地说明本发明实施例或现有技术中的技术方案,下面将对实施例或现有技术描述中所需要使用的附图作简单地介绍,显而易见地,下面描述中的附图仅仅是本发明的一些实施例,对于本领域普通技术人员来讲,在不付出创造性劳动的前提下,还可以根据这些附图获得其他的附图。In order to more clearly illustrate the technical solutions in the embodiments of the present invention or the prior art, the following will briefly introduce the drawings that need to be used in the description of the embodiments or the prior art. Obviously, the accompanying drawings in the following description are only These are some embodiments of the present invention. Those skilled in the art can also obtain other drawings based on these drawings without creative work.

图1为本发明实施例提供的一种WiFi终端接入不同业务域的方法流程图;FIG. 1 is a flowchart of a method for a WiFi terminal to access different service domains according to an embodiment of the present invention;

图2为WiFi终端通过EPS接入到不同业务域的网络系统示意图;FIG. 2 is a schematic diagram of a network system in which a WiFi terminal accesses different service domains through EPS;

图3为WiFi终端请求BRAS分配第二IP地址的流程示意图;Fig. 3 is a schematic flow diagram of a WiFi terminal requesting a BRAS to allocate a second IP address;

图4为本发明实施例提供的另一种WiFi终端接入不同业务域的方法流程图;FIG. 4 is a flow chart of another method for a WiFi terminal to access a different service domain provided by an embodiment of the present invention;

图5为本发明实施例提供的一种用于WiFi终端接入不同业务与的装置结构框图。FIG. 5 is a structural block diagram of an apparatus for a WiFi terminal to access different services provided by an embodiment of the present invention.

具体实施方式 detailed description

下面将结合本发明实施例中的附图,对本发明实施例中的技术方案进行清楚、完整地描述,显然,所描述的实施例仅是本发明一部分实施例,而不是全部的实施例。基于本发明中的实施例,本领域普通技术人员在没有做出创造性劳动前提下所获得的所有其他实施例,都属于本发明保护的范围。The following will clearly and completely describe the technical solutions in the embodiments of the present invention with reference to the accompanying drawings in the embodiments of the present invention. Obviously, the described embodiments are only some of the embodiments of the present invention, not all of them. Based on the embodiments of the present invention, all other embodiments obtained by persons of ordinary skill in the art without making creative efforts belong to the protection scope of the present invention.

实施例一Embodiment one

本发明实施例提供了一种WiFi终端接入不同业务域的方法和装置,该方法应用于用户端设备CPE,如图1、2、3所示,图2为本实施例所基于的网络系统,其中WiFi终端通过AP附着到WLAN与所述CPE通过WiFi方式进行通信,所述CPE与所述基站通过LTE方式进行通信、所述基站通过EPC与多种业务分别对应的多个业务域相连,这样通过上述系统架构,使得所述WiFi终端通过所述CPE,所述基站,所述与所述业务域进行通信。图中给出了AP(AccessPoint,WiFi无线接入点)和用户端设备CPE的两种设置方式,CPE可以集成AP功能模块,如图1中的CPE/AP,AP和CPE也可以是两个分离的设备。其中本实施例提供的该装置是CPE集成有AP的功能。The embodiment of the present invention provides a method and device for a WiFi terminal to access different service domains. The method is applied to the user equipment CPE, as shown in Figures 1, 2, and 3, and Figure 2 is the network system based on this embodiment , wherein the WiFi terminal attaches to the WLAN through the AP and communicates with the CPE through WiFi, the CPE communicates with the base station through LTE, and the base station is connected to multiple service domains corresponding to various services through the EPC, In this way, through the above system architecture, the WiFi terminal communicates with the service domain through the CPE, the base station, and the service domain. The figure shows two setting methods of AP (AccessPoint, WiFi wireless access point) and CPE of user end equipment. CPE can integrate AP functional modules, such as CPE/AP in Figure 1, and AP and CPE can also be two Separate devices. The device provided in this embodiment is a CPE integrated with an AP function.

为了应用系统能对WiFi终端访问Internet后独立计费,WiFi终端通过EPS网络系统接入到Internet需要经过BRAS,这样BRAS对WiFi终端访问的Internet数据业务记录上报认证计费服务器进行认证计费。该CPE与BRAS进行通信是通过AC(AccessController,WiFi接入控制器)采用EPC为该CPE分配的第一IP地址,该CPE与AC之间通过CAPWAP隧道与所述BRAS进行通信的报文,然后所述AC接入到BRAS,当然AC和BRAS也可以是集成在一起的一个物理设备。其中第一IP地址是CPE在上电后,CPE按照3GPP的标准流程完成EPC对CPE的认证,并和EPC建立PDN连接后,EPC为CPE分配的IP地址。In order for the application system to charge independently after the WiFi terminal accesses the Internet, the WiFi terminal accessing the Internet through the EPS network system needs to go through the BRAS. In this way, the BRAS reports the Internet data service records accessed by the WiFi terminal to the authentication and accounting server for authentication and accounting. The CPE communicates with the BRAS by using the AC (AccessController, WiFi access controller) to adopt the first IP address distributed by the EPC for the CPE, and the CPE and the AC communicate with the BRAS through a CAPWAP tunnel, and then The AC is connected to the BRAS, of course, the AC and the BRAS may also be a physical device integrated together. The first IP address is the IP address assigned by the EPC to the CPE after the CPE is powered on, the EPC authenticates the CPE according to the 3GPP standard procedure, and establishes a PDN connection with the EPC.

BRAS通过上述图1的系统架构为该WiFi终端分配第二IP地址,具体如图3所示,为了便于说明,本过程中将BRAS分为AC和BRAS分为两个功能模块来说明。为WiFi终端分配第二IP地址过程如下:The BRAS assigns a second IP address to the WiFi terminal through the system architecture in FIG. 1 above, as shown in FIG. 3 . For ease of description, the BRAS is divided into AC and BRAS into two functional modules in this process for illustration. The process of assigning a second IP address to a WiFi terminal is as follows:

首先WiFi终端向CPE发送DHCPDiscovery(DynamicHostConfigurationProtocol,动态主机设置协议发现)广播报文;CPE收到DHCPDiscovery广播报文后,将该报文通过CAPWAP隧道封装,发送给CPE。CPE将通过CAPWAP封装的报文转发给AC,CPE在该报文中使用了EPC为CPE分配的第一IP地址。AC对接收到的报文进行CAPWAP隧道解封装,然后转发给BRAS。BRAS在接收到WiFi终端发送的DHCPDiscovery广播报文后,向AC返回DHCPOFFER。AC再相应的对DHCPOFFER报文进行CAPWAP隧道封装,发送给CPE,CPE对经过CAPWAP隧道封装的DHCPOFFER报文进行解封装后发送给WiFi终端。WiFi终端在接收到BRAS发送的DHCPOFFER报文后,向BRAS发送DHCPRequest广播报文,具体的过程与前述向BRAS发送DHCPDiscovery过程相同,从而使得BRAS向WiFi终端分配第二IP地址。First, the WiFi terminal sends a DHCPDiscovery (DynamicHostConfigurationProtocol, dynamic host configuration protocol discovery) broadcast message to the CPE; after receiving the DHCPDiscovery broadcast message, the CPE encapsulates the message through a CAPWAP tunnel and sends it to the CPE. The CPE forwards the CAPWAP-encapsulated packet to the AC, and the CPE uses the first IP address allocated by the EPC for the CPE in the packet. The AC decapsulates the received packet through the CAPWAP tunnel, and then forwards it to the BRAS. After receiving the DHCPDiscovery broadcast message sent by the WiFi terminal, the BRAS returns a DHCPOFFER to the AC. The AC performs CAPWAP tunnel encapsulation on the DHCPOFFER message accordingly, and sends it to the CPE, and the CPE decapsulates the DHCPOFFER message encapsulated by the CAPWAP tunnel, and then sends it to the WiFi terminal. After receiving the DHCPOFFER message sent by the BRAS, the WiFi terminal sends a DHCPRequest broadcast message to the BRAS. The specific process is the same as that of sending a DHCPDiscovery message to the BRAS, so that the BRAS allocates a second IP address to the WiFi terminal.

其中WiFi终端支持的数据业务包括:在IP层进行计费的业务和在应用层进行认证的业务,如HSI(HighSpeedInternet)业务在IP层进行计费,运营商自营的游戏、IMS业务和IPTV业务在应用层计费。该方法包括:Among them, the data services supported by WiFi terminals include: services for billing at the IP layer and services for authentication at the application layer, such as HSI (HighSpeedInternet) services that are billed at the IP layer, games operated by operators, IMS services, and IPTV Services are billed at the application layer. The method includes:

S101、接收所述WiFi终端发送的上行数据业务消息,所述上行数据业务消息携带有宽带远程接入服务器BRAS分配给所述WiFi终端的第二IP地址。S101. Receive an uplink data service message sent by the WiFi terminal, where the uplink data service message carries a second IP address assigned to the WiFi terminal by a broadband remote access server BRAS.

S102、确定所述WiFi终端发起的上行数据业务的数据业务类型。S102. Determine the data service type of the uplink data service initiated by the WiFi terminal.

CPE收到WiFi终端发送的上行数据业务消息后,可以根据所述上行数据业务消息的五元组信息来确定所述WiFi终端发起的上行数据业务的数据业务类型。上行数据业务消息的五元组信息可以是CPE预配置的,或通过CPE的UL-TFT(UplinkTrafficFloWTemplate,上行数据业务流模板)动态派生获取的。After receiving the uplink data service message sent by the WiFi terminal, the CPE may determine the data service type of the uplink data service initiated by the WiFi terminal according to the quintuple information of the uplink data service message. The quintuple information of the uplink data service message may be pre-configured by the CPE, or dynamically derived and acquired through a UL-TFT (UplinkTrafficFloWTemplate, uplink traffic flow template) of the CPE.

在确定了所述WiFi终端发起的上行数据业务消息后,若所述WiFi终端发起的上行数据业务是在IP层进行认证和/或计费的数据业务类型则执行S103步骤;若WiFi终端发起的上行数据业务是在应用层进行认证和/或计费的数据业务类型,则执行S104步骤。After determining the uplink data service message initiated by the WiFi terminal, if the uplink data service initiated by the WiFi terminal is a data service type that is authenticated and/or billed at the IP layer, step S103 is performed; if the uplink data service initiated by the WiFi terminal is If the uplink data service is a data service type for authentication and/or charging at the application layer, step S104 is executed.

S103、将所述上行数据业务通过所述CAPWAP隧道进行封装;将通过CAPWAP隧道封装的上行数据业务的报文透传过所述EPC后发送到BRAS,所述BRAS将所述上行数据业务的报文发送给相应的业务域。S103. Encapsulate the uplink data service through the CAPWAP tunnel; transparently transmit the uplink data service packet encapsulated through the CAPWAP tunnel through the EPC and send it to the BRAS, and the BRAS sends the uplink data service packet The text is sent to the corresponding business domain.

若WiFi终端发起的上行数据业务是在IP层进行认证和/或计费,CPE将WiFi终端发送的上行数据业务通过CAPWAP隧道进行封装后,CPE将承载有所述上行数据业务的报文透传过所述EPC后发送给AC(指EPC不对报文进行处理,EPC相对于报文来说是“透明”的),AC接入BRAS将所述上行数据业务的报文发送给相应的业务。这样可以使得应用系统可以单独对WiFi终端进行认证和/或计费。If the uplink data service initiated by the WiFi terminal is authenticated and/or billed at the IP layer, after the CPE encapsulates the uplink data service sent by the WiFi terminal through the CAPWAP tunnel, the CPE transparently transmits the packet carrying the uplink data service After passing through the EPC, it is sent to the AC (meaning that the EPC does not process the message, and the EPC is "transparent" relative to the message), and the AC accesses the BRAS to send the message of the uplink data service to the corresponding service. In this way, the application system can independently authenticate and/or charge the WiFi terminal.

S104、将承载所述上行数据业务的报文携带的所述WiFi终端的所述第二IP地址转换为所述CPE设备的所述第一IP地址;将所述携带有所述CPE设备的第一IP地址的所述上行数据业务的报文通过所述EPC直接路由转发给相应的业务域。S104. Translate the second IP address of the WiFi terminal carried in the packet carrying the uplink data service into the first IP address of the CPE device; convert the second IP address carrying the CPE device The packet of the uplink data service of an IP address is directly routed and forwarded to the corresponding service domain through the EPC.

若WiFi终端发起的上行数据业务是在应用层进行认证和/或计费,CPE将承载所述上行数据业务的报文携带的所述WiFi终端的所述第二IP地址转换为所述EPC为所述CPE模块分配的第一IP地址,然后CPE模块将承载上行数据业务通过EPC路由转发给相应的业务。If the uplink data service initiated by the WiFi terminal is authenticated and/or billed at the application layer, the CPE converts the second IP address of the WiFi terminal carried in the packet carrying the uplink data service into the EPC as The first IP address assigned by the CPE module, and then the CPE module forwards the bearer uplink data service to the corresponding service through the EPC route.

本发明实施例提供的WiFi终端接入不同业务域的方法,CPE根据WiFi端发起的不同数据业务进行智能路由,如对在IP层进行认证和/或计费的业务,通过所述CAPWAP隧道将承载有所述上行数据业务的报文进行封装后透传过所述EPC后发送到BRAS,BRAS将所述上行数据业务的报文发送给相应的业务域;对于在应用层认证和/或计费的业务,则将承载所述上行数据业务的报文携带的所述WiFi终端的所述第二IP地址转换为所述CPE设备的所述第一IP地址,通过所述EPC直接路由转发给相应的业务域,这样WiFi终端访问在应用层进行认证和/或计费的业务域,不需要通过BRAS,这样WiFi终端与业务域间的报文不需要CAPWAP隧道封装,不会增加报文的头开销,从而可以提高EPS的传送效率;同时CPE通过对不同类型的业务域进行智能路由,如对于在IP层或应用层进行认证和/或计费的不同类型的业务域的五元组不同,使得CPE可以将WiFi终端的不同数据业务映射到不同的EPS承载,实现了不同业务流之间的优先级调度。In the method for a WiFi terminal to access different service domains provided by an embodiment of the present invention, the CPE performs intelligent routing according to different data services initiated by the WiFi terminal, such as services that are authenticated and/or billed at the IP layer through the CAPWAP tunnel. The message carrying the uplink data service is encapsulated and sent to the BRAS after being transparently transmitted through the EPC, and the BRAS sends the message of the uplink data service to the corresponding service domain; service, the second IP address of the WiFi terminal carried in the message carrying the uplink data service is converted into the first IP address of the CPE device, and is directly routed and forwarded to the Corresponding service domains, so that WiFi terminals access the service domains that perform authentication and/or accounting at the application layer without going through the BRAS, so that packets between WiFi terminals and service domains do not need CAPWAP tunnel encapsulation, and will not increase the number of packets Head overhead, so as to improve the transmission efficiency of EPS; at the same time, CPE can intelligently route different types of business domains, such as different quintuples for different types of business domains that perform authentication and/or accounting at the IP layer or application layer , so that the CPE can map different data services of the WiFi terminal to different EPS bearers, and realize priority scheduling between different service flows.

实施例二Embodiment two

本发明实施例提供了一种WiFi终端接入不同业务域的方法和装置,该方法应用于LTE用户端设备CPE,如图2、3、4所示,图2为本实施例所基于的网络系统,其中WiFi终端通过AP附着到WLAN与所述CPE通过WiFi方式进行通信,所述CPE与所述基站通过LTE方式进行通信、所述基站通过EPC与多种业务分别对应的多个业务域相连,这样通过上述系统架构,使得所述WiFi终端通过所述CPE,所述基站,所述与所述业务域进行通信。图中给出了AP(AccessPoint,WiFi无线接入点)和用户端设备CPE的两种设置方式,CPE可以集成AP功能模块,如图2中的CPE,AP和CPE也可以是两个分离的设备。其中本实施例提供的该装置是CPE集成有AP的功能。The embodiment of the present invention provides a method and device for a WiFi terminal to access different service domains. The method is applied to the LTE user end equipment CPE, as shown in Figures 2, 3, and 4, and Figure 2 is the network based on this embodiment system, wherein the WiFi terminal attaches to the WLAN through an AP and communicates with the CPE through WiFi, the CPE communicates with the base station through LTE, and the base station is connected to multiple service domains corresponding to various services through EPC In this way, through the above system architecture, the WiFi terminal communicates with the service domain through the CPE, the base station, and the service domain. The figure shows two setting methods of AP (AccessPoint, WiFi wireless access point) and CPE of user end equipment. CPE can integrate AP functional modules, such as the CPE in Figure 2, and the AP and CPE can also be two separate equipment. The device provided in this embodiment is a CPE integrated with an AP function.

为了应用系统能对WiFi终端访问Internet后独立计费,WiFi终端通过EPS网络系统接入到Internet需要经过BRAS,这样BRAS对WiFi终端访问的Internet数据业务记录上报认证计费服务器进行认证计费。该CPE与BRAS进行通信是通过AC(AccessController,WiFi接入控制器)采用EPC为该CPE分配的第一IP地址,该CPE与AC之间通过CAPWAP隧道后进行通信,然后所述AC接入到BRAS,当然本实施例是基于AC和BRAS是集成在一起的作为BRAS一个物理设备。其中第一IP地址是CPE/AP在上电后,CPE/AP按照3GPP的标准流程完成EPC对CPE/AP的认证和PDN的建立,EPC为CPE/AP分配的IP地址。In order for the application system to charge independently after the WiFi terminal accesses the Internet, the WiFi terminal accessing the Internet through the EPS network system needs to go through the BRAS. In this way, the BRAS reports the Internet data service records accessed by the WiFi terminal to the authentication and accounting server for authentication and accounting. The CPE communicates with the BRAS through the AC (AccessController, WiFi access controller) using the first IP address allocated by the EPC for the CPE, and the CPE and the AC communicate through the CAPWAP tunnel, and then the AC accesses the The BRAS, of course, this embodiment is based on the fact that the AC and the BRAS are integrated together as a physical device of the BRAS. The first IP address is the IP address assigned by the EPC to the CPE/AP after the CPE/AP is powered on, and the CPE/AP completes the EPC's authentication of the CPE/AP and the establishment of the PDN according to the 3GPP standard process.

BRAS通过上述图2的系统架构为该WiFi终端分配第二IP地址,具体如图3所示,为了便于说明,本过程中将BRAS分为AC和BRAS分为两个功能模块来说明。为WiFi终端分配第二IP地址过程如下:The BRAS assigns a second IP address to the WiFi terminal through the system architecture in FIG. 2 above, as shown in FIG. 3 . For ease of description, the BRAS is divided into AC and BRAS into two functional modules for illustration. The process of assigning a second IP address to a WiFi terminal is as follows:

首先WiFi终端向CPE发送DHCPDiscovery(DynamicHostConfigurationProtocol,动态主机设置协议发现)广播报文;CPE收到DHCPDiscovery广播报文后,将该报文通过CAPWAP隧道封装,发送给CPE。CPE将通过CAPWAP封装的报文转发给AC,CPE在该报文中使用了EPC为CPE分配的第一IP地址。AC对接收到的报文进行CAPWAP隧道解封装,然后转发给BRAS。BRAS在接收到WiFi终端发送的DHCPDiscovery广播报文后,向AC返回DHCPOFFER。AC再相应的对DHCPOFFER报文进行CAPWAP隧道封装,发送给CPE,CPE对经过CAPWAP隧道封装的DHCPOFFER报文进行解封装后发送给WiFi终端。WiFi终端在接收到BRAS发送的DHCPOFFER报文后,向BRAS发送DHCPRequest广播报文,具体的过程与前述向BRAS发送DHCPDiscovery过程相同,从而使得BRAS向WiFi终端分配第二IP地址。First, the WiFi terminal sends a DHCPDiscovery (DynamicHostConfigurationProtocol, dynamic host configuration protocol discovery) broadcast message to the CPE; after receiving the DHCPDiscovery broadcast message, the CPE encapsulates the message through a CAPWAP tunnel and sends it to the CPE. The CPE forwards the CAPWAP-encapsulated packet to the AC, and the CPE uses the first IP address allocated by the EPC for the CPE in the packet. The AC decapsulates the received packet through the CAPWAP tunnel, and then forwards it to the BRAS. After receiving the DHCPDiscovery broadcast message sent by the WiFi terminal, the BRAS returns a DHCPOFFER to the AC. The AC performs CAPWAP tunnel encapsulation on the DHCPOFFER message accordingly, and sends it to the CPE, and the CPE decapsulates the DHCPOFFER message encapsulated by the CAPWAP tunnel, and then sends it to the WiFi terminal. After receiving the DHCPOFFER message sent by the BRAS, the WiFi terminal sends a DHCPRequest broadcast message to the BRAS. The specific process is the same as that of sending a DHCPDiscovery message to the BRAS, so that the BRAS allocates a second IP address to the WiFi terminal.

其中WiFi终端支持的数据业务包括:在IP层进行计费的业务和在应用层进行认证的业务,如HSI(HighSpeedInternet)业务在IP层进行计费,运营商自营的游戏、IMS业务和IPTV业务在应用层计费。该方法包括:Among them, the data services supported by WiFi terminals include: services for billing at the IP layer and services for authentication at the application layer, such as HSI (HighSpeedInternet) services that are billed at the IP layer, games operated by operators, IMS services, and IPTV Services are billed at the application layer. The method includes:

S201、CPE预配置上行数据业务的访问控制列表,或动态派生上行数据业务的访问控制列表。S201. The CPE pre-configures an access control list for uplink data services, or dynamically derives an access control list for uplink data services.

上行数据业务的访问控制列表具体包括上行数据业务的五元组信息,所述五元组信息包括了发起上行数据业务的终端的源地址、要访问的业务域目的地址、发起上行数据业务的源端口、要访问业务域的目的端口和协议号。The access control list of the uplink data service specifically includes quintuple information of the uplink data service, and the quintuple information includes the source address of the terminal that initiates the uplink data service, the destination address of the service domain to be accessed, and the source address of the uplink data service. Port, destination port and protocol number to access the business domain.

上行数据业务的访问控制列表可以通过预规划设置,并通过多种方式配置到CPE中,包括:CPE的近端配置接口、CPE的远端配置接口TR069/OMA-DM、DHCPOption,ProtocolConfigurationOption(PCO)扩展或CAPWAP远程管理协议。上行数据业务的访问控制列表也可以是CPE的UL-TFT动态派生的,具体的派生方式为采用通配符(*)来代替源IP地址和源端口,保留目的IP地址、协议号和目的端口不变。当然预配置的上行数据业务的访问控制列表中的五元组信息,也可以使用通配符(*)来代替源地址和源端口,只预配置目的地址、协议号和目的端口。The access control list of the uplink data service can be set through pre-planning and configured in the CPE in various ways, including: CPE near-end configuration interface, CPE remote configuration interface TR069/OMA-DM, DHCPOption, ProtocolConfigurationOption (PCO) Extended or CAPWAP remote management protocol. The access control list of the uplink data service can also be dynamically derived by the UL-TFT of the CPE. The specific derivation method is to use wildcards (*) to replace the source IP address and source port, and keep the destination IP address, protocol number and destination port unchanged. . Of course, the quintuple information in the access control list of the pre-configured uplink data service can also use wildcards (*) to replace the source address and source port, and only pre-configure the destination address, protocol number and destination port.

进一步的,CPE中的上行数据业务的访问控制列表,还可以用于对不同上行数据业务进行分类和标识优先级信息。Furthermore, the access control list of the uplink data service in the CPE can also be used to classify different uplink data services and identify priority information.

S202、CPE接收所述WiFi终端发送的上行数据业务消息,所述上行数据业务消息携带有宽带远程接入服务器BRAS分配给所述WiFi终端的第二IP地址。S202. The CPE receives an uplink data service message sent by the WiFi terminal, where the uplink data service message carries a second IP address assigned to the WiFi terminal by the broadband remote access server BRAS.

S203、CPE根据所述上行数据业务的五元组信息中的所述目的地址确定所述WiFi终端发起的上行数据业务的类型。S203. The CPE determines the type of the uplink data service initiated by the WiFi terminal according to the destination address in the 5-tuple information of the uplink data service.

确定了所述WiFi终端发起的上行数据业务的类型后,若所述WiFi终端发起的上行数据业务是在IP层进行认证和/或计费的数据业务类型,则执行S204步骤;若WiFi终端发起的上行数据业务是在应用层进行认证和/或计费的数据业务类型,则执行S205步骤。After determining the type of the uplink data service initiated by the WiFi terminal, if the uplink data service initiated by the WiFi terminal is a data service type for authentication and/or billing at the IP layer, step S204 is performed; if the WiFi terminal initiates If the uplink data service is a data service type that is authenticated and/or charged at the application layer, step S205 is performed.

上行数据业务的访问控制列表中的目的地址信息可以确定所述WiFi终端要访问的业务域的数据业务的类型。WiFi终端可以支持的数据业务包括有:IMS、IPTV和HSI、运营商自营业务等,但不限于此。通常运营商规划了不同业务域的目的地址段,这样根据WiFi终端发起的数据业务的目的地址,上行数据业务的访问控制列表中各个数据业务的目的地址段,则可以确定WiFi终端要访问的业务域类型。例如,IMS业务域的目的地址为192.168.0.0-192.168.255.255,若所述WiFi终端要访问的数据业务的目的地址为192.168.50.23,这样则可以确定所述WiFi终端要访问的数据业务是IMS业务域。对于在所述访问控制列表中没有匹配上的业务流,默认为HSI业务。WiFi终端可以支持的数据业务包括HSI、IMS、IPTV和运营商自营业务等。The destination address information in the access control list of the uplink data service can determine the type of data service in the service domain to be accessed by the WiFi terminal. The data services that the WiFi terminal can support include: IMS, IPTV, HSI, operators' self-operated services, etc., but not limited thereto. Usually the operator plans the destination address segments of different service domains, so that according to the destination address of the data service initiated by the WiFi terminal and the destination address segment of each data service in the access control list of the uplink data service, the service to be accessed by the WiFi terminal can be determined domain type. For example, the destination address of the IMS service domain is 192.168.0.0-192.168.255.255, if the destination address of the data service to be accessed by the WiFi terminal is 192.168.50.23, it can be determined that the data service to be accessed by the WiFi terminal is IMS business domain. For a service flow that does not match in the access control list, it defaults to the HSI service. The data services that WiFi terminals can support include HSI, IMS, IPTV, and operator-operated services.

进一步的,在确定所述WiFi终端发起的上行数据业务的类型后,CPE还可以根据预配置的上行数据业务的优先级信息确定所述WiFi终端发起的上行数据业务的优先级信息。Further, after determining the type of the uplink data service initiated by the WiFi terminal, the CPE may also determine the priority information of the uplink data service initiated by the WiFi terminal according to the preconfigured priority information of the uplink data service.

S204、CPE将所述上行数据业务通过所述CAPWAP隧道进行封装。S204. The CPE encapsulates the uplink data service through the CAPWAP tunnel.

CPE解析出WiFi终端发起的上行数据业务消息中要访问的业务域的目的地址。假若所述WiFi终端要访问的数据业务的目的地址为1.10.2.3,这样CPE对应上行数据业务的访问控制列表确定WiFi终端要访问的数据业务是HSI业务。这样CPE将所述上行数据业务通过CAPWAP隧道进行封装。The CPE parses out the destination address of the service domain to be accessed in the uplink data service message initiated by the WiFi terminal. If the destination address of the data service to be accessed by the WiFi terminal is 1.10.2.3, then the access control list of the CPE corresponding to the uplink data service determines that the data service to be accessed by the WiFi terminal is an HSI service. In this way, the CPE encapsulates the uplink data service through the CAPWAP tunnel.

S205、CPE将承载所述上行数据业务的报文携带的所述WiFi终端的所述第二IP地址转换为所述CPE设备的所述第一IP地址。S205. The CPE converts the second IP address of the WiFi terminal carried in the packet carrying the uplink data service to the first IP address of the CPE device.

若所述WiFi终端要访问的数据业务的目的地址为192.168.50.23,这样CPE则确定WiFi终端要访问的数据业务是IMS业务。由于IMS业务是在应用层进行计费,这样CPE将该上行数据业务报文中携带的所述WiFi终端的第二IP地址转换为CPE自身的第一IP地址。If the destination address of the data service to be accessed by the WiFi terminal is 192.168.50.23, then the CPE determines that the data service to be accessed by the WiFi terminal is an IMS service. Since the IMS service is charged at the application layer, the CPE converts the second IP address of the WiFi terminal carried in the uplink data service message into the first IP address of the CPE itself.

若CPE与EPC之间建立了多条PDN连接,则CPE将该上行数据业务报文中携带的所述WiFi终端的第二IP地址转换为相应的PDN连接的IP地址。If multiple PDN connections are established between the CPE and the EPC, the CPE converts the second IP address of the WiFi terminal carried in the uplink data service message into the corresponding IP address of the PDN connection.

S206、CPE根据所述WiFi终端发起的上行数据业务或上行数据业务的类型和所述上行数据业务的优先级信息,对所述WiFi终端发起的上行数据业务进行优先级调度。S206. The CPE performs priority scheduling on the uplink data service initiated by the WiFi terminal according to the uplink data service initiated by the WiFi terminal or the type of the uplink data service and the priority information of the uplink data service.

进一步的,为了更好的处理多个上行数据业务,CPE在所述访问控制列表中还包括了上行数据业务的优先级信息,这样CPE根据不同的数据业务类型对应不同的优先级信息对不同的上行数据业务提供不同的优先级调度,具体的可以采用WFQ(WeightedFairQueuing,加权公平排队)拥塞管理算法。Further, in order to better handle multiple uplink data services, the CPE also includes priority information of the uplink data services in the access control list, so that the CPE corresponds to different priority information for different data service types according to different data service types. The uplink data service provides different priority scheduling, specifically, a WFQ (Weighted Fair Queuing, weighted fair queuing) congestion management algorithm may be used.

S207、CPE将所述WiFi终端发起的上行数据业务按照EPS的QoS机制映射到相应的承载。S207. The CPE maps the uplink data service initiated by the WiFi terminal to a corresponding bearer according to the QoS mechanism of the EPS.

在CPE将所述WiFi终端发起的上行数据业务按照EPS的QoS机制映射到相应的承载后,若所述WiFi终端发起的上行数据业务是在IP层进行认证和/或计费的数据业务类型,则执行S208步骤;若WiFi终端发起的上行数据业务是在应用层进行认证和/或计费的数据业务类型,则执行S209步骤。After the CPE maps the uplink data service initiated by the WiFi terminal to the corresponding bearer according to the QoS mechanism of the EPS, if the uplink data service initiated by the WiFi terminal is a data service type that is authenticated and/or charged at the IP layer, Then execute step S208; if the uplink data service initiated by the WiFi terminal is a data service type for authentication and/or charging at the application layer, execute step S209.

例如,CPE上电后,EPC对CPE按照3GPP标准流程完成认证,并建立PDN连接。该PDN连接对应缺省EPS承载和具有永久在线需求的专用EPS承载。For example, after the CPE is powered on, the EPC completes the authentication of the CPE according to the 3GPP standard procedure, and establishes a PDN connection. The PDN connection corresponds to a default EPS bearer and a dedicated EPS bearer with a permanent online requirement.

同时CPE按照CAPWAP标准与AC建立CAPWAP控制信道和数据信道,分别承载在CPE对应的EPS专用承载上,如CAPWAP控制信道承载可以在EPS专用承载和缺省承载上。At the same time, the CPE establishes a CAPWAP control channel and a data channel with the AC according to the CAPWAP standard, which are respectively carried on the EPS dedicated bearer corresponding to the CPE. For example, the CAPWAP control channel can be carried on the EPS dedicated bearer and the default bearer.

这样若WiFi终端发起的上行数据业务是在IP层进行认证和/或计费,这样CPE将所述上行数据业务的报文进行CAPWAP封装。然后CPE按照EPS的QoS机制所述上行数据业务的报文映射到相应的EPS专用承载上。In this way, if the uplink data service initiated by the WiFi terminal is authenticated and/or charged at the IP layer, the CPE performs CAPWAP encapsulation on the uplink data service message. Then the CPE maps the uplink data service message to the corresponding EPS dedicated bearer according to the EPS QoS mechanism.

若WiFi终端发起的上行数据业务是在应用层进行认证和/或计费,由于WiFi终端发起的上行数据业务不通过BRAS接入到相应的业务域,CPE则根据EPS的QoS机制映射到相应的承载。如IMS业务,CPE将该IMS信令流映射到QCI=5的Non-GBR承载上,IMS媒体语音流映射到QCI=1的专用GBR承载,IMS媒体视频流可映射到QCI=2的专用GBR承载上。这样不同的上行数据业务被映射到不同的承载上,从而EPS可以向不同的上行数据业务提供不同QoS。If the uplink data service initiated by the WiFi terminal is authenticated and/or billed at the application layer, since the uplink data service initiated by the WiFi terminal does not access the corresponding service domain through the BRAS, the CPE maps to the corresponding service domain according to the QoS mechanism of the EPS. bearer. For IMS services, the CPE maps the IMS signaling stream to a Non-GBR bearer with QCI=5, the IMS media voice stream maps to a dedicated GBR bearer with QCI=1, and the IMS media video stream can be mapped to a dedicated GBR bearer with QCI=2 load on. In this way, different uplink data services are mapped to different bearers, so that the EPS can provide different QoS for different uplink data services.

当然,上述的承载映射只是针对CPE和EPC之间建立一个PDN的情况,若CPE与EPC之间建立多个PDN的情况下,针对每一个PDN,EPC为CPE分配有多个IP地址。例如,CPE和EPC之间建立有3个PDN连接,这样EPC会为CPE分配有3个IP地址。这样CPE在接收到WiFi终端发起的上行数据业务消息后,根据该上行数据业务的类型,如该上行数据业务的类型是在应用层进行计费的IMS业务,这样CPE为IMS业务选择了第一条PDN连接。相应的,CPE将该上行数据业务消息中携带的所述WiFi终端的第二IP地址转换为CPE的第一条PDN的IP地址。然后在第一条PDN连接上对该上行数据业务按照EPS的QoS机制进行相应的承载映射。Of course, the above bearer mapping is only for the case where one PDN is established between the CPE and the EPC. If multiple PDNs are established between the CPE and the EPC, the EPC allocates multiple IP addresses to the CPE for each PDN. For example, if three PDN connections are established between the CPE and the EPC, the EPC will allocate three IP addresses to the CPE. In this way, after the CPE receives the uplink data service message initiated by the WiFi terminal, according to the type of the uplink data service, if the type of the uplink data service is an IMS service that is billed at the application layer, the CPE selects the first IMS service for the IMS service. PDN connection. Correspondingly, the CPE converts the second IP address of the WiFi terminal carried in the uplink data service message into the IP address of the first PDN of the CPE. Then perform corresponding bearer mapping on the first PDN connection for the uplink data service according to the EPS QoS mechanism.

S208、CPE将通过CAPWAP隧道封装的上行数据业务的报文透传过所述EPC后发送到BRAS,所述BRAS将所述上行数据业务的报文发送给相应的业务域。S208. The CPE transparently transmits the packet of the uplink data service encapsulated through the CAPWAP tunnel through the EPC and then sends it to the BRAS, and the BRAS sends the packet of the uplink data service to a corresponding service domain.

在对WiFi终端发起的上行数据业务进行承载映射后,CPE将通过CAPWAP隧道封装的上行数据业务报文通过EPC发送到AC。AC对该上行数据业务报文进行CAPWAP隧道解封装,然后发送到BRAS接入到Internet业务。同时BRAS对WiFi终端访问的业务流进行计费。After performing bearer mapping on the uplink data service initiated by the WiFi terminal, the CPE sends the uplink data service packet encapsulated through the CAPWAP tunnel to the AC through the EPC. The AC decapsulates the uplink data service message through the CAPWAP tunnel, and then sends it to the BRAS to access the Internet service. At the same time, the BRAS charges for the service flow accessed by the WiFi terminal.

S209、CPE将所述携带有所述CPE设备的第一IP地址的所述上行数据业务的报文通过所述EPC直接路由转发给相应的业务域。S209. The CPE directly routes and forwards the packet of the uplink data service carrying the first IP address of the CPE device to a corresponding service domain through the EPC.

在对WiFi终端发起的上行数据业务进行承载映射后,CPE将WiFi终端发起的数据业务发送到EPC,最终接入到IMS域。After performing bearer mapping on the uplink data service initiated by the WiFi terminal, the CPE sends the data service initiated by the WiFi terminal to the EPC, and finally accesses the IMS domain.

由于CPE将在应用层进行计费的数据业务不需要通过BRAS接入到相应的业务域,这样对于WiFi终端发起的数据业务不需要进行CAPWAP隧道封装,这样对于在应用层进行计费的数据业务如IMS、VoIP等业务,将极大的减少了该数据业务报文的开销,提高了EPS的传送效率;且由于CPE/AP将WiFi终端的第二IP地址转换为CPE的第一IP地址,使得EPC可以感知到WiFi终端发起的数据业务,从而可以使得WiFi终端可以利用EPS中的EPS承载映射机制,从而可以实现不同业务的优先级调度。Since the data service charged by the CPE at the application layer does not need to be connected to the corresponding service domain through the BRAS, CAPWAP tunnel encapsulation is not required for the data service initiated by the WiFi terminal. Such as IMS, VoIP and other services will greatly reduce the overhead of the data service message and improve the transmission efficiency of EPS; and because the CPE/AP converts the second IP address of the WiFi terminal to the first IP address of the CPE, The EPC can perceive the data service initiated by the WiFi terminal, so that the WiFi terminal can use the EPS bearer mapping mechanism in the EPS, so as to realize priority scheduling of different services.

进一步的,若AP和CPE是两个分离的设备,AP和CPE共同完成了将WiFi终端发起的上行数据业务接入到不同的业务域。例如,AP和CPE之间可以采用以太网接口连接,CPE会通过DHCP报文向AP分配私网IP地址。在这种形式中,上行数据业务的访问控制列表可以通过CAPWAP等远程管理协议或AP的本地管理接口在AP中进行配置。AP接收到WiFi终端发送的上行数据业务消息后,根据该上行数据业务的访问控制列表可以确定WiFi终端发起的上行数据业务的业务类型。Further, if the AP and the CPE are two separate devices, the AP and the CPE jointly complete the access of the uplink data service initiated by the WiFi terminal to different service domains. For example, an Ethernet interface can be used to connect an AP to a CPE, and the CPE will assign a private network IP address to the AP through a DHCP message. In this form, the access control list of the uplink data service can be configured in the AP through a remote management protocol such as CAPWAP or a local management interface of the AP. After receiving the uplink data service message sent by the WiFi terminal, the AP can determine the service type of the uplink data service initiated by the WiFi terminal according to the access control list of the uplink data service.

若WiFi终端发起的上行数据业务是在应用层进行计费的数据业务,AP将携带有WiFi终端的第二IP地址的上行数据业务消息和WiFi终端发起的上行数据业务的业务类型通过以太网接口封装成报文发送给CPE,该报文的源IP地址是CPE分配给AP的私网IP地址。CPE在接收到该报文后,首先将上行数据业务消息中携带的WiFi终端的第二IP地址转换成CPE的第一IP地址,同时将该报文中的AP的私网IP地址转换成CPE的第一IP地址通过EPC发送到相应的业务域。If the uplink data service initiated by the WiFi terminal is a data service that is billed at the application layer, the AP sends the uplink data service message carrying the second IP address of the WiFi terminal and the service type of the uplink data service initiated by the WiFi terminal through the Ethernet interface. The packet is encapsulated into a message and sent to the CPE. The source IP address of the message is the private network IP address allocated by the CPE to the AP. After receiving the message, the CPE first converts the second IP address of the WiFi terminal carried in the uplink data service message into the first IP address of the CPE, and at the same time converts the private network IP address of the AP in the message into the CPE The first IP address is sent to the corresponding service domain through the EPC.

若WiFi终端发起的上行数据业务是在IP层进行计费的数据业务,将该WiFi终端发起的携带有WiFi终端的第二IP地址的上行数据业务消息和该WiFi终端发起的上行数据业务的业务类型通过CAPWAP隧道封装成CAPWAP报文发送给CPE,该CAPWAP报文的外层源IP地址为CPE分配给AP的私网地址。CPE在收到CAPWAP报文后,将CAPWAP的外层源IP地址转换成CPE的第一IP地址,然后将该报文透传过EPC后发送到AC。AC对该CAPWAP报文进行解封装,然后转发给BRAS。If the uplink data service initiated by the WiFi terminal is a data service that is billed at the IP layer, the uplink data service message that carries the second IP address of the WiFi terminal initiated by the WiFi terminal and the uplink data service initiated by the WiFi terminal The type is encapsulated into a CAPWAP packet through the CAPWAP tunnel and sent to the CPE. The outer source IP address of the CAPWAP packet is the private network address assigned by the CPE to the AP. After receiving the CAPWAP message, the CPE converts the CAPWAP outer source IP address into the first IP address of the CPE, and then transparently transmits the message through the EPC and then sends it to the AC. The AC decapsulates the CAPWAP message, and then forwards it to the BRAS.

由于CPE把WiFi终端发起的在应用层计费的上行数据业务消息携带的WiFi终端的第二IP地址转换为CPE的第一IP地址,这样CPE根据该上行数据业务消息中的CPE的第一IP地址,可以将该WiFi终端发起的数据业务映射到相应的EPS承载上;而对于在IP层进行计费的数据业务,由于CAPWAP封装的WiFi终端发起的数据业务消息携带WiFi终端的第二IP地址,这样CPE将该WiFi终端发起的数据业务映射到另一承载上。从而可以在EPS承载层面实现了不同业务的上行流和下行流之间的优先级调度,保证了不同上行数据业务流之间的不同QoS(QualityofSystem,服务质量)等级。Since the CPE converts the second IP address of the WiFi terminal carried in the uplink data service message initiated by the WiFi terminal and charged at the application layer to the first IP address of the CPE, the CPE then converts the first IP address of the CPE in the uplink data service message Address, the data service initiated by the WiFi terminal can be mapped to the corresponding EPS bearer; and for the data service charged at the IP layer, because the data service message initiated by the WiFi terminal encapsulated by CAPWAP carries the second IP address of the WiFi terminal , so that the CPE maps the data service initiated by the WiFi terminal to another bearer. Therefore, priority scheduling between upstream and downstream flows of different services can be realized at the EPS bearer level, and different QoS (Quality of System, quality of service) levels between different upstream data service flows can be guaranteed.

进一步的,现有技术中为了解决对WiFi终端单独认证和/或计费的问题,WiFi终端必须接入到在应用层进行计费的业务时需要通过BRAS,从而无法支持动态的PCC(PolicyControlandCharging,策略控制和计费)策略和静态QoS策略部署的问题。而本实施例中对于WiFi终端访问在应用层进行计费的业务,如IMS业务,CPE将WiFi终端发起的上行数据业务消息中的第二IP地址转换为CPE的第一IP地址,这样EPC侧可以感知。当IMS通过PCRF(PolicyandChargingRulesFunction,策略计费规则功能)向P-GW(PacketDataNetworkGateway,分组数据网络网关)触发专用EPS承载建立时,P-GW就可以关联到CPE的EPS承载,从而可以支持动态的PCC策略和静态QoS策略部署。Further, in the prior art, in order to solve the problem of separate authentication and/or charging of WiFi terminals, the WiFi terminal must pass through the BRAS when it must access services that are charged at the application layer, so that it cannot support dynamic PCC (Policy Control and Charging, Policy control and billing) policy and static QoS policy deployment issues. However, in this embodiment, for the WiFi terminal to access services that are charged at the application layer, such as IMS services, the CPE converts the second IP address in the uplink data service message initiated by the WiFi terminal to the first IP address of the CPE, so that the EPC side Can perceive. When the IMS triggers the establishment of a dedicated EPS bearer to the P-GW (PacketDataNetworkGateway, packet data network gateway) through the PCRF (PolicyandChargingRulesFunction, policy and charging rule function), the P-GW can associate with the EPS bearer of the CPE, thereby supporting dynamic PCC Policy and static QoS policy deployment.

进一步的,本实施中通过BRAS向WiFi终端分配IP地址,WiFi终端通过BRAS接入到在IP层认证和/或计费的业务域,可以实现应用系统单独对WiFi终端进行计费;同时WiFi终端通过EPC接入到应用层计费的业务域,由业务域对WiFi终端在应用层的计费,这样从而实现了应用系统对WiFi终端访问的不同业务进行单独的计费,从而避免了WiFi终端通过BRAS接入到所有不同业务域时,BRAS对所有业务进行计费后,还必须扣除在应用层也计费的业务的费用。进而降低了BRAS和AAA(Authentication、Authorization、Accounting,身份验证、授权和统计)服务器实现和部署的难度。Further, in this implementation, the BRAS is used to assign IP addresses to the WiFi terminals, and the WiFi terminals are connected to the service domain of authentication and/or accounting at the IP layer through the BRAS, so that the application system can separately charge the WiFi terminals; at the same time, the WiFi terminals Through the EPC access to the service domain of the application layer billing, the service domain charges the WiFi terminal at the application layer, thus realizing the separate billing of the different services accessed by the WiFi terminal by the application system, thereby avoiding the need for the WiFi terminal When accessing all different service domains through the BRAS, after the BRAS charges all the services, it must also deduct the charges for the services that are also charged at the application layer. This further reduces the difficulty of implementing and deploying BRAS and AAA (Authentication, Authorization, Accounting, identity verification, authorization, and statistics) servers.

进一步的,本发明实施例提供的CPE设备不仅可以包括LTE接口单元与基站通过长期演进LTE方式进行通信,还可以包括LTE-A(LTE-Advanced,LTE技术的后续演进)接口单元与基站通过长期演进LTE-A方式进行通信。Further, the CPE equipment provided by the embodiment of the present invention can not only include an LTE interface unit to communicate with the base station through the long-term evolution LTE method, but also include an LTE-A (LTE-Advanced, subsequent evolution of LTE technology) interface unit to communicate with the base station through the long-term evolution Evolved LTE-A mode for communication.

本发明实施例提供的一种WiFi终端接入不同业务域的方法,用户端设备根据WiFi端发起的不同数据业务进行智能路由,如对在IP层进行认证和/或计费的业务,通过所述CAPWAP隧道将承载有所述上行数据业务的报文进行封装后透传过所述EPC后发送BRAS,BRAS将所述上行数据业务的报文发送给相应的业务域;对于在应用层认证和/或计费的业务,则将承载所述上行数据业务的报文携带的所述WiFi终端的所述第二IP地址转换为所述CPE设备的所述第一IP地址,通过所述EPC直接路由转发给相应的业务域。这样WiFi终端访问在应用层进行认证和/或计费的业务域,不需要通过BRAS,这样WiFi终端与业务域间的报文不需要CAPWAP隧道封装,不会增加报文的头开销,从而可以提高EPS的传送效率;同时通过对不同类型的业务域进行智能路由,如对于在IP层或应用层进行认证和/或计费的不同类型的业务域的五元组不同,使得CPE可以将WiFi终端的不同数据业务映射到不同的EPS承载,实现了不同业务流之间的优先级调度;进一步的,可以降低BRAS和AAA实现和部署的难度,同时可以使得WiFi终端发起的上行数据业务支持动态PCC策略和静态QoS策略部署。The embodiment of the present invention provides a method for a WiFi terminal to access different service domains. The user terminal device performs intelligent routing according to different data services initiated by the WiFi terminal, such as authentication and/or billing services at the IP layer, through the The CAPWAP tunnel encapsulates the message carrying the uplink data service and transmits it transparently through the EPC and then sends it to the BRAS, and the BRAS sends the message of the uplink data service to the corresponding service domain; For/or billing services, convert the second IP address of the WiFi terminal carried in the packet carrying the uplink data service to the first IP address of the CPE device, and directly use the EPC to The route is forwarded to the corresponding business domain. In this way, the WiFi terminal does not need to pass through the BRAS when accessing the service domain that performs authentication and/or accounting at the application layer. In this way, the packets between the WiFi terminal and the service domain do not need CAPWAP tunnel encapsulation, and the overhead of the packet header will not be increased. Improve the transmission efficiency of EPS; at the same time, through intelligent routing for different types of business domains, such as different five-tuples for different types of business domains that perform authentication and/or accounting at the IP layer or application layer, the CPE can transmit WiFi Different data services of the terminal are mapped to different EPS bearers, realizing priority scheduling between different service flows; further, it can reduce the difficulty of implementing and deploying BRAS and AAA, and at the same time, it can support dynamic uplink data services initiated by WiFi terminals PCC policy and static QoS policy deployment.

实施例三Embodiment three

本发明实施例提供了一种用于WiFi终端接入不同业务域的装置40,如图2、3、5所示,图2为本实施例所基于的网络系统,其中WiFi终端通过AP附着到WLAN与所述CPE通过WiFi方式进行通信,所述CPE与所述基站通过LTE方式进行通信、所述基站通过EPC与多种业务分别对应的多个业务域相连,这样通过上述系统架构,使得所述WiFi终端通过所述CPE,所述基站,所述与所述业务域进行通信。图中给出了AP(AccessPoint,WiFi无线接入点)和用户端设备CPE的两种设置方式,CPE可以集成AP功能模块,如图2中的CPE,AP和CPE也可以是两个分离的设备。其中本实施例提供的该装置40是CPE集成有AP的功能。The embodiment of the present invention provides a device 40 for WiFi terminals to access different service domains, as shown in Figures 2, 3 and 5, Figure 2 is the network system based on this embodiment, in which the WiFi terminals are attached to The WLAN communicates with the CPE through WiFi, the CPE communicates with the base station through LTE, and the base station is connected to multiple service domains corresponding to various services through the EPC. In this way, through the above-mentioned system architecture, all The WiFi terminal communicates with the service domain through the CPE, the base station, and the service domain. The figure shows two setting methods of AP (AccessPoint, WiFi wireless access point) and CPE of user end equipment. CPE can integrate AP functional modules, such as the CPE in Figure 2, and the AP and CPE can also be two separate equipment. The device 40 provided in this embodiment is a CPE integrated with an AP function.

其中为了应用系统能对WiFi终端访问Internet后独立计费,WiFi终端通过EPS网络系统接入到Internet需要经过BRAS,这样BRAS对WiFi终端访问的Internet数据业务记录上报认证计费服务器进行认证计费。该CPE与BRAS进行通信是通过AC(AccessController,WiFi接入控制器)采用EPC为该CPE分配的第一IP地址,该CPE与AC之间通过CAPWAP隧道与所述BRAS进行通信的报文,然后所述AC接入到BRAS,当然AC和BRAS也可以是集成在一起的一个物理设备。其中第一IP地址是CPE在上电后,CPE按照3GPP的标准流程完成EPC对CPE的认证和PDN的建立,EPC为CPE分配的IP地址。In order for the application system to charge independently after the WiFi terminal accesses the Internet, the WiFi terminal accessing the Internet through the EPS network system needs to go through the BRAS. In this way, the BRAS reports the Internet data service records accessed by the WiFi terminal to the authentication and accounting server for authentication and accounting. The CPE communicates with the BRAS by using the AC (AccessController, WiFi access controller) to adopt the first IP address distributed by the EPC for the CPE, and the CPE and the AC communicate with the BRAS through a CAPWAP tunnel, and then The AC is connected to the BRAS, of course, the AC and the BRAS may also be a physical device integrated together. The first IP address is the IP address assigned by the EPC to the CPE after the CPE is powered on, the CPE completes the EPC's authentication of the CPE and the establishment of the PDN according to the 3GPP standard process.

BRAS通过上述图2的系统架构为该WiFi终端分配第二IP地址,具体如图3所示,为了便于说明,本过程中AC和BRAS是作为两个独立的设备,在实现过程中AC和BRAS可以是一个物理设备,同时实现了独立的AC和BRAS设备的功能。为WiFi终端分配第二IP地址过程如下:The BRAS assigns a second IP address to the WiFi terminal through the system architecture in Figure 2 above, as shown in Figure 3. For the sake of illustration, the AC and the BRAS are used as two independent devices in this process. In the implementation process, the AC and the BRAS It can be a physical device, which realizes the functions of independent AC and BRAS devices at the same time. The process of assigning a second IP address to a WiFi terminal is as follows:

首先WiFi终端向CPE发送DHCPDiscovery(DynamicHostConfigurationProtocol,动态主机设置协议发现)广播报文;CPE收到DHCPDiscovery广播报文后,将该报文通过CAPWAP隧道封装,发送给CPE。CPE将通过CAPWAP封装的报文转发给AC,CPE在该报文中使用了EPC为CPE分配的第一IP地址。AC对接收到的报文进行CAPWAP隧道解封装,然后转发给BRAS。BRAS在接收到WiFi终端发送的DHCPDiscovery广播报文后,向AC返回DHCPOFFER。AC再相应的对DHCPOFFER报文进行CAPWAP隧道封装,发送给CPE,CPE对经过CAPWAP隧道封装的DHCPOFFER报文进行解封装后发送给WiFi终端。WiFi终端在接收到BRAS发送的DHCPOFFER报文后,向BRAS发送DHCPRequest广播报文,具体的过程与前述向BRAS发送DHCPDiscovery过程相同,从而使得BRAS向WiFi终端分配第二IP地址。First, the WiFi terminal sends a DHCPDiscovery (DynamicHostConfigurationProtocol, dynamic host configuration protocol discovery) broadcast message to the CPE; after receiving the DHCPDiscovery broadcast message, the CPE encapsulates the message through a CAPWAP tunnel and sends it to the CPE. The CPE forwards the CAPWAP-encapsulated packet to the AC, and the CPE uses the first IP address allocated by the EPC for the CPE in the packet. The AC decapsulates the received packet through the CAPWAP tunnel, and then forwards it to the BRAS. After receiving the DHCPDiscovery broadcast message sent by the WiFi terminal, the BRAS returns a DHCPOFFER to the AC. The AC performs CAPWAP tunnel encapsulation on the DHCPOFFER message accordingly, and sends it to the CPE, and the CPE decapsulates the DHCPOFFER message encapsulated by the CAPWAP tunnel, and then sends it to the WiFi terminal. After receiving the DHCPOFFER message sent by the BRAS, the WiFi terminal sends a DHCPRequest broadcast message to the BRAS. The specific process is the same as that of sending a DHCPDiscovery message to the BRAS, so that the BRAS allocates a second IP address to the WiFi terminal.

其中WiFi终端支持的数据业务包括:在IP层进行计费的业务和在应用层进行认证的业务,如HSI(HighSpeedInternet)业务在IP层进行计费,运营商自营的游戏、IMS业务和IPTV业务在应用层计费。其中本实施例针对该装置是以AP和CPE集成为同一设备CPE/AP为例进行说明。该CPE包括:获取单元41、隧道建立单元42、确定单元43、IP层业务处理单元44、应用层业务处理单元45、优先级处理单元46、承载映射单元47和发送单元48。Among them, the data services supported by WiFi terminals include: services for billing at the IP layer and services for authentication at the application layer, such as HSI (HighSpeedInternet) services that are billed at the IP layer, games operated by operators, IMS services, and IPTV Services are billed at the application layer. In this embodiment, the apparatus is described by taking the integration of the AP and the CPE into the same device CPE/AP as an example. The CPE includes: an acquisition unit 41 , a tunnel establishment unit 42 , a determination unit 43 , an IP layer service processing unit 44 , an application layer service processing unit 45 , a priority processing unit 46 , a bearer mapping unit 47 and a sending unit 48 .

所述获取单元41,用于预配置上行数据业务的访问控制列表;或用于动态派生上行数据业务的访问控制列表;所述上行数据业务的访问控制列表包括上行数据业务的五元组信息,所述五元组信息包括所述上行数据业务的源地址、目的地址、源端口、目的端口和协议号。The acquiring unit 41 is configured to preconfigure an access control list for uplink data services; or for dynamically deriving an access control list for uplink data services; the access control list for uplink data services includes five-tuple information for uplink data services, The five-tuple information includes the source address, destination address, source port, destination port and protocol number of the uplink data service.

获取单元41获取的上行数据业务的访问控制列表包括了上行数据业务的五元组信息,所述五元组信息包括了发起上行数据业务的终端的源地址、要访问的业务域目的地址、发起上行数据业务的源端口、要访问业务域的目的端口和协议号。The access control list of the uplink data service obtained by the obtaining unit 41 includes five-tuple information of the uplink data service, and the five-tuple information includes the source address of the terminal that initiates the uplink data service, the destination address of the service domain to be accessed, the originating The source port of the uplink data service, the destination port and protocol number of the service domain to be accessed.

上行数据业务的访问控制列表可以通过预规划设置,并通过多种方案配置到CPE中,包括:CPE的近端配置接口,CPE的远端配置接口TR069/OMA-DM,DHCPOption,ProtocolConfigurationOption(PCO)扩展,CAPWAP远程管理协议。The access control list of the uplink data service can be set through pre-planning and configured in the CPE through various schemes, including: CPE near-end configuration interface, CPE remote configuration interface TR069/OMA-DM, DHCPOption, ProtocolConfigurationOption (PCO) Extension, CAPWAP remote management protocol.

上行数据业务的访问控制列表也可以是CPE的UL-TFT动态派生的,具体的派生方式为用通配符(*)来代替源IP地址和源端口,保留目的IP地址、协议号和目的端口不变。当然访问控制列表获取单元41预配置的上行数据业务的访问控制列表中的五元组信息,也可以使用通配符(*)来代替源地址和源端口,只配置目的地址、协议号和目的端口。The access control list of the uplink data service can also be dynamically derived by the UL-TFT of the CPE. The specific derivation method is to use wildcards (*) to replace the source IP address and source port, and keep the destination IP address, protocol number and destination port unchanged. . Of course, the quintuple information in the access control list of the uplink data service preconfigured by the access control list acquisition unit 41 can also use wildcards (*) to replace the source address and source port, and only configure the destination address, protocol number and destination port.

进一步的,获取单元41在预配置上行数据业务的访问控制列表中的五元组信息时,还可以配置不同业务的优先级信息。Further, when the acquiring unit 41 preconfigures the quintuple information in the access control list of the uplink data service, it may also configure priority information of different services.

所述隧道建立单元42,用于根据所述EPC分配的第一IP地址通过所述EPC与宽带远程接入服务器BRAS进行通信,建立CAPWAP隧道,将通过CAPWAP隧道封装的WiFi终端与所述在IP层进行认证和/或计费的业务域进行通信的报文发送到BRAS,并通过所述WiFi终端与所述在IP层进行认证和/或计费的业务域的交互使得所述BRAS为所述WiFi终端分配一个第二IP地址。The tunnel establishment unit 42 is configured to communicate with the broadband remote access server BRAS through the EPC according to the first IP address allocated by the EPC, establish a CAPWAP tunnel, and connect the WiFi terminal encapsulated through the CAPWAP tunnel to the IP address The message for communicating with the service domain that performs authentication and/or accounting at the IP layer is sent to the BRAS, and through the interaction between the WiFi terminal and the service domain that performs authentication and/or accounting at the IP layer, the BRAS is The WiFi terminal is assigned a second IP address.

本实施中的BRAS是指包括AC设备功能的BRAS,这样CPE和BRAS之间建立CAPWAP隧道,用于对WiFi终端发起的在IP层进行认证和/或计费的业务进行CAPWAP隧道封装。The BRAS in this implementation refers to the BRAS including the AC device function. In this way, a CAPWAP tunnel is established between the CPE and the BRAS to perform CAPWAP tunnel encapsulation on services initiated by WiFi terminals for authentication and/or accounting at the IP layer.

所述确定单元43,用于根据所述上行数据业务的五元组信息中的所述目的地址确定所述WiFi终端发起的上行数据业务的类型。The determining unit 43 is configured to determine the type of the uplink data service initiated by the WiFi terminal according to the destination address in the 5-tuple information of the uplink data service.

上行数据业务的访问控制列表中的目的地址信息可以用于确定所述WiFi终端要访问的业务域的数据业务的类型。WiFi终端可以支持的数据业务包括有:IMS、IPTV和HSI、运营商自营业务等,但不限于此。通常运营商规划了不同业务域的目的地址段,这样根据WiFi终端发起的数据业务的目的地址,上行数据业务的访问控制列表中各个数据业务的目的地址段,确定单元43则可以确定WiFi终端要访问的业务域类型。例如,IMS业务域的目的地址为192.168.0.0-192.168.255.255,若所述WiFi终端要访问的数据业务的目的地址为192.168.50.23,这样确定单元43则可以确定所述WiFi终端要访问的数据业务是IMS业务域。对于在上行控制列表中没有匹配上的业务流,默认为HSI业务。WiFi终端可以支持的数据业务包括HSI、IMS、IPTV和运营商自营业务等。The destination address information in the access control list of the uplink data service can be used to determine the type of data service in the service domain to be accessed by the WiFi terminal. The data services that the WiFi terminal can support include: IMS, IPTV, HSI, operators' self-operated services, etc., but not limited thereto. Usually the operator plans the destination address segments of different service domains, so according to the destination address of the data service initiated by the WiFi terminal, and the destination address segment of each data service in the access control list of the uplink data service, the determination unit 43 can determine that the WiFi terminal needs to The type of business domain being accessed. For example, the destination address of the IMS service domain is 192.168.0.0-192.168.255.255, if the destination address of the data service to be accessed by the WiFi terminal is 192.168.50.23, then the determination unit 43 can determine the data to be accessed by the WiFi terminal. The service is an IMS service domain. For service flows that do not match in the uplink control list, the default is HSI service. The data services that WiFi terminals can support include HSI, IMS, IPTV, and operator-operated services.

进一步的,在确定所述WiFi终端发起的上行数据业务的类型后,确定单元43还可以根据预配置的上行数据业务的优先级信息确定所述WiFi终端发起的上行数据业务的优先级信息。Further, after determining the type of the uplink data service initiated by the WiFi terminal, the determining unit 43 may also determine the priority information of the uplink data service initiated by the WiFi terminal according to the preconfigured priority information of the uplink data service.

所述IP层业务处理单元44,用于若所述确定单元确定所述WiFi终端发起的上行数据业务是在IP层进行认证和/或计费的数据业务类型,将所述上行数据业务通过所述CAPWAP隧道进行封装。The IP layer service processing unit 44 is configured to, if the determining unit determines that the uplink data service initiated by the WiFi terminal is a data service type for authentication and/or charging at the IP layer, pass the uplink data service through the The above CAPWAP tunnel is encapsulated.

例如,确定单元43解析出WiFi终端发起的上行数据业务消息中要访问的业务域的目的地址。假若所述WiFi终端要访问的数据业务的目的地址为1.10.2.3,这样确定单元43对应上行数据业务的访问控制列表确定WiFi终端要访问的数据业务是HSI业务。这样IP层业务处理单元44将所述上行数据业务通过CAPWAP隧道进行封装。For example, the determining unit 43 parses out the destination address of the service domain to be accessed in the uplink data service message initiated by the WiFi terminal. If the destination address of the data service to be accessed by the WiFi terminal is 1.10.2.3, then the determination unit 43 determines that the data service to be accessed by the WiFi terminal is an HSI service corresponding to the access control list of the uplink data service. In this way, the IP layer service processing unit 44 encapsulates the uplink data service through the CAPWAP tunnel.

所述应用层业务处理单元45,还用于若WiFi终端发起的上行数据业务是在应用层进行认证和/或计费的数据业务类型,将承载所述上行数据业务的报文携带的所述WiFi终端的所述第二IP地址转换为所述CPE设备的所述第一IP地址。The application layer service processing unit 45 is further configured to: if the uplink data service initiated by the WiFi terminal is a data service type that is authenticated and/or billed at the application layer, the packet carrying the uplink data service carries the The second IP address of the WiFi terminal is converted into the first IP address of the CPE device.

若所述WiFi终端要访问的数据业务的目的地址为192.168.50.23,这样确定单元43则确定WiFi终端要访问的数据业务是IMS业务。由于IMS业务是在应用层进行计费,这样应用层处理单元45将该上行数据业务报文中携带的所述WiFi终端的第二IP地址转换为CPE自身的第一IP地址。If the destination address of the data service to be accessed by the WiFi terminal is 192.168.50.23, then the determining unit 43 determines that the data service to be accessed by the WiFi terminal is an IMS service. Since the IMS service is charged at the application layer, the application layer processing unit 45 converts the second IP address of the WiFi terminal carried in the uplink data service message into the first IP address of the CPE itself.

优先级处理单元46,用于根据所述WiFi终端发起的上行数据业务的类型和所述上行数据业务的优先级信息,对所述WiFi终端发起的上行数据业务进行优先级调度。The priority processing unit 46 is configured to perform priority scheduling on the uplink data service initiated by the WiFi terminal according to the type of the uplink data service initiated by the WiFi terminal and the priority information of the uplink data service.

进一步的,为了更好的处理多个上行数据业务,获取单元41获取的上行数据业务访问控制列表中还包括了上行数据业务的优先级信息,这样CPE根据不同的数据业务类型对应不同的优先级信息优先级处理单元46对不同的上行数据业务提供不同的优先级调度,具体的可以采用WFQ(WeightedFairQueuing,加权公平排队)拥塞管理算法。Further, in order to better handle multiple uplink data services, the uplink data service access control list acquired by the acquisition unit 41 also includes the priority information of the uplink data services, so that the CPE corresponds to different priority levels according to different data service types The information priority processing unit 46 provides different priority scheduling for different uplink data services, specifically, a WFQ (Weighted Fair Queuing, weighted fair queuing) congestion management algorithm may be used.

承载映射单元47,用于将所述WiFi终端发起的上行数据业务按照EPS的QoS机制映射到相应的承载。The bearer mapping unit 47 is configured to map the uplink data service initiated by the WiFi terminal to a corresponding bearer according to the EPS QoS mechanism.

例如,CPE/AP上电后,EPC对CPE/AP按照3GPP标准流程完成认证,并建立PDN连接。该PDN连接对应缺省EPS承载和具有永久在线需求的专用EPS承载。For example, after the CPE/AP is powered on, the EPC completes the authentication of the CPE/AP according to the 3GPP standard procedure, and establishes a PDN connection. The PDN connection corresponds to a default EPS bearer and a dedicated EPS bearer with a permanent online requirement.

同时隧道建立单元42按照CAPWAP标准与AC建立CAPWAP控制信道和数据信道,CAPWAP控制信道和数据信道分别承载在CPE/AP对应的EPS专用承载上,如CAPWAP控制信道承载可以在EPS专用承载和缺省承载上。At the same time, the tunnel establishment unit 42 establishes a CAPWAP control channel and a data channel with the AC according to the CAPWAP standard. The CAPWAP control channel and the data channel are respectively carried on the EPS dedicated bearer corresponding to the CPE/AP. For example, the CAPWAP control channel can be carried on the EPS dedicated bearer and the default load on.

这样若WiFi终端发起的上行数据业务是在IP层进行认证和/或计费,这样IP层业务处理单元44将所述上行数据业务的报文进行CAPWAP封装。然后承载映射单元47按照EPS的QoS机制所述上行数据业务的报文映射到相应的EPS专用承载上。In this way, if the uplink data service initiated by the WiFi terminal is authenticated and/or billed at the IP layer, the IP layer service processing unit 44 performs CAPWAP encapsulation on the uplink data service message. Then the bearer mapping unit 47 maps the uplink data service packets to corresponding EPS dedicated bearers according to the EPS QoS mechanism.

若WiFi终端发起的上行数据业务是在应用层进行认证和/或计费,由于WiFi终端发起的上行数据业务不通过BRAS接入到相应的业务域,承载映射单元47则根据EPS的QoS机制将上述的上行数据业务映射到相应的承载。如IMS业务,承载映射单元47将该IMS信令流映射到QCI=5的Non-GBR承载上,IMS媒体语音流映射到QCI=1的专用GBR承载,IMS媒体视频流可映射到QCI=2的专用GBR承载上。这样不同的上行数据业务被映射到不同的承载上,从而EPS可以向不同的上行数据业务提供不同QoS。If the uplink data service initiated by the WiFi terminal is authenticated and/or billed at the application layer, since the uplink data service initiated by the WiFi terminal does not access the corresponding service domain through the BRAS, the bearer mapping unit 47 will The above-mentioned uplink data services are mapped to corresponding bearers. For example, the IMS service, the bearer mapping unit 47 maps the IMS signaling stream to a Non-GBR bearer with QCI=5, the IMS media voice stream is mapped to a dedicated GBR bearer with QCI=1, and the IMS media video stream can be mapped to a QCI=2 on the dedicated GBR bearer. In this way, different uplink data services are mapped to different bearers, so that the EPS can provide different QoS for different uplink data services.

当然,上述的承载映射只是针对CPE和EPC之间建立一个PDN的情况,若CPE与EPC之间建立多个PDN的情况下,针对每一个PDN,EPC为CPE为每条PDN连接分配有一个IP地址。例如,CPE和EPC之间建立有3个PDN连接,这样EPC会为CPE分配有3个IP地址。这样CPE在接收到WiFi终端发起的上行数据业务消息后,根据该上行数据业务的类型,如该上行数据业务的类型是在应用层进行计费的IMS业务,这样CPE为IMS业务选择了第一条PDN连接。相应的,CPE将该上行数据业务消息中携带的所述WiFi终端的第二IP地址转换为CPE的第一条PDN的IP地址。Of course, the above bearer mapping is only for the establishment of one PDN between the CPE and the EPC. If multiple PDNs are established between the CPE and the EPC, for each PDN, the EPC allocates an IP address for each PDN connection for the CPE. address. For example, if three PDN connections are established between the CPE and the EPC, the EPC will allocate three IP addresses to the CPE. In this way, after the CPE receives the uplink data service message initiated by the WiFi terminal, according to the type of the uplink data service, if the type of the uplink data service is an IMS service that is billed at the application layer, the CPE selects the first IMS service for the IMS service. PDN connection. Correspondingly, the CPE converts the second IP address of the WiFi terminal carried in the uplink data service message into the IP address of the first PDN of the CPE.

发送单元48,用于将通过CAPWAP隧道封装的上行数据业务的报文透传过所述EPC后发送到BRAS,所述BRAS将所述上行数据业务的报文发送给相应的业务域;或将所述携带有所述CPE设备的第一IP地址的所述上行数据业务的报文通过所述EPC直接路由转发给相应的业务域。The sending unit 48 is configured to transparently transmit the message of the uplink data service encapsulated through the CAPWAP tunnel through the EPC and then send it to the BRAS, and the BRAS sends the message of the uplink data service to the corresponding service domain; or The packet of the uplink data service carrying the first IP address of the CPE device is directly routed and forwarded to a corresponding service domain through the EPC.

由于CPE将在应用层进行计费的数据业务不通过BRAS接入到相应的业务域,这样对于WiFi终端发起的数据业务不需要进行CAPWAP隧道封装,这样对于在应用层进行计费的数据业务如IMS、VoIP等业务,将极大的减少了该数据业务报文的开销,提高了EPS的传送效率;且由于CPE/AP将WiFi终端的第二IP地址转换为CPE的第一IP地址,使得EPC可以感知到WiFi终端发起的数据业务,从而可以使得WiFi终端可以利用EPS的承载映射机制,从而可以实现不同业务的优先级调度。Since the CPE does not access the data service charged at the application layer to the corresponding service domain through the BRAS, the data service initiated by the WiFi terminal does not need to be encapsulated in a CAPWAP tunnel. IMS, VoIP and other services will greatly reduce the overhead of the data service message and improve the transmission efficiency of EPS; and because the CPE/AP converts the second IP address of the WiFi terminal to the first IP address of the CPE, making The EPC can perceive the data service initiated by the WiFi terminal, so that the WiFi terminal can use the bearer mapping mechanism of the EPS, so as to realize the priority scheduling of different services.

进一步的,若AP和CPE是两个分离的设备,AP和CPE两个独立的设备可以实现上述的集成了AP功能的CPE的功能。具体的,AP和CPE之间可以采用以太网接口连接,CPE会通过DHCP报文向AP分配私网IP地址。在这种形式中,上行数据业务的访问控制列表可以通过CAPWAP等远程管理协议或AP的本地管理接口在AP中进行远程配置。AP接收到WiFi终端发送的上行数据业务消息后,根据该上行数据业务的访问控制列表可以确定WiFi终端发起的上行数据业务的业务类型。Further, if the AP and the CPE are two separate devices, the two independent devices of the AP and the CPE can implement the above functions of the CPE integrated with the AP function. Specifically, an Ethernet interface can be used to connect the AP and the CPE, and the CPE will assign a private network IP address to the AP through a DHCP message. In this form, the access control list of the uplink data service can be remotely configured in the AP through a remote management protocol such as CAPWAP or a local management interface of the AP. After receiving the uplink data service message sent by the WiFi terminal, the AP can determine the service type of the uplink data service initiated by the WiFi terminal according to the access control list of the uplink data service.

若WiFi终端发起的上行数据业务是在应用层进行计费的数据业务,AP将携带有WiFi终端的第二IP地址的上行数据业务消息和WiFi终端发起的上行数据业务的业务类型通过以太网接口封装成报文发送给CPE,该报文的源IP地址是CPE分配给AP的私网IP地址。If the uplink data service initiated by the WiFi terminal is a data service that is billed at the application layer, the AP sends the uplink data service message carrying the second IP address of the WiFi terminal and the service type of the uplink data service initiated by the WiFi terminal through the Ethernet interface. The packet is encapsulated into a message and sent to the CPE. The source IP address of the message is the private network IP address allocated by the CPE to the AP.

若WiFi终端发起的上行数据业务是在IP层进行计费的数据业务,将该WiFi终端发起的携带有WiFi终端的第二IP地址的上行数据业务消息和该WiFi终端发起的上行数据业务的数据业务类型通过CAPWAP隧道封装成CAPWAP报文发送给CPE,该CAPWAP报文的外层源IP地址为CPE分配给AP的私网地址。CPE在收到CAPWAP报文后,IP层业务处理单元44将CAPWAP的外层源IP地址转换成CPE的第一IP地址,然后将该报文透传过EPC后发送到AC。AC对该CAPWAP报文进行解封装,然后转发给BRAS。If the uplink data service initiated by the WiFi terminal is a data service that is billed at the IP layer, the uplink data service message initiated by the WiFi terminal and carrying the second IP address of the WiFi terminal and the data of the uplink data service initiated by the WiFi terminal The service type is encapsulated into a CAPWAP packet through the CAPWAP tunnel and sent to the CPE. The outer source IP address of the CAPWAP packet is the private network address assigned by the CPE to the AP. After the CPE receives the CAPWAP message, the IP layer service processing unit 44 converts the outer source IP address of the CAPWAP into the first IP address of the CPE, and then transparently transmits the message through the EPC and sends it to the AC. The AC decapsulates the CAPWAP message, and then forwards it to the BRAS.

由于CPE的应用层处理单元45把WiFi终端发起的在应用层计费的上行数据业务消息携带的WiFi终端的第二IP地址转换为CPE的第一IP地址,这样CPE根据该上行数据业务消息中的CPE的第一IP地址,可以将该WiFi终端发起的数据业务映射到相应的EPS承载上;而对于在IP层进行计费的数据业务,由于CAPWAP封装的WiFi终端发起的数据业务消息携带WiFi终端的第二IP地址,这样IP层业务处理单元44将该WiFi终端发起的数据业务映射到另一承载上。从而可以在EPS承载层面实现了不同业务的上行流和下行流之间的优先级调度,保证了不同上行数据业务流之间的不同QoS(QualityofSystem,服务质量)等级。Since the application layer processing unit 45 of the CPE converts the second IP address of the WiFi terminal carried in the uplink data service message initiated by the WiFi terminal into the first IP address of the CPE, according to the uplink data service message in the uplink data service message The first IP address of the CPE can map the data service initiated by the WiFi terminal to the corresponding EPS bearer; and for the data service charged at the IP layer, since the data service message initiated by the WiFi terminal encapsulated in CAPWAP carries the WiFi The second IP address of the terminal, so that the IP layer service processing unit 44 maps the data service initiated by the WiFi terminal to another bearer. Therefore, priority scheduling between upstream and downstream flows of different services can be realized at the EPS bearer level, and different QoS (Quality of System, quality of service) levels between different upstream data service flows can be guaranteed.

进一步的,现有技术中为了解决对WiFi终端单独认证和/或计费的问题,WiFi终端必须接入到在应用层进行计费的业务时需要通过BRAS,从而无法支持动态的PCC(PolicyControlandCharging,策略控制和计费)策略和静态QoS策略部署的问题。而本实施例中对于WiFi终端访问在应用层进行计费的业务,如IMS业务,处理单元44将WiFi终端发起的上行数据业务消息中的源地址转换为CPE的第一IP地址,这样EPC侧可以感知。当IMS通过PCRF(PolicyandChargingRulesFunction,策略计费规则功能)向P-GW(PacketDataNetworkGateway,分组数据网络网关)触发专用EPS承载建立时,P-GW就可以关联到CPE的EPS承载,从而可以支持动态的PCC策略和静态QoS策略部署。Further, in the prior art, in order to solve the problem of separate authentication and/or charging of WiFi terminals, the WiFi terminal must pass through the BRAS when it must access services that are charged at the application layer, so that it cannot support dynamic PCC (Policy Control and Charging, Policy control and billing) policy and static QoS policy deployment issues. However, in this embodiment, for WiFi terminal access to services that are charged at the application layer, such as IMS services, the processing unit 44 converts the source address in the uplink data service message initiated by the WiFi terminal into the first IP address of the CPE, so that the EPC side Can perceive. When the IMS triggers the establishment of a dedicated EPS bearer to the P-GW (PacketDataNetworkGateway, packet data network gateway) through the PCRF (PolicyandChargingRulesFunction, policy and charging rule function), the P-GW can associate with the EPS bearer of the CPE, thereby supporting dynamic PCC Policy and static QoS policy deployment.

进一步的,本实施中通过BRAS向WiFi终端分配第二IP地址,WiFi终端通过BRAS接入到在IP层计费的业务域,可以实现应用系统单独对WiFi终端进行计费;同时WiFi终端通过EPC接入到应用层计费的业务域,由业务域在WiFi终端进行应用层计费,这样从而实现了应用系统对WiFi终端访问的不同业务预进行单独的计费,从而避免了WiFi终端通过BRAS接入到所有不同业务域时,BRAS对所有业务进行计费后,还必须扣除在应用层也计费的业务的费用。进而也降低了BRAS和AAA(Authentication、Authorization、Accounting,身份验证、授权和统计)服务器实现和部署的难度。Further, in this implementation, the second IP address is assigned to the WiFi terminal through the BRAS, and the WiFi terminal accesses the service domain charged at the IP layer through the BRAS, so that the application system can separately charge the WiFi terminal; at the same time, the WiFi terminal passes the EPC Access to the service domain of application layer billing, and the service domain performs application layer billing on the WiFi terminal, so that the application system can pre-charge different services accessed by the WiFi terminal separately, thereby preventing the WiFi terminal from passing through the BRAS When accessing to all different service domains, after the BRAS charges all the services, it must also deduct the service charges that are also charged at the application layer. Furthermore, it also reduces the difficulty of implementing and deploying BRAS and AAA (Authentication, Authorization, Accounting, identity verification, authorization and statistics) servers.

进一步的,本发明实施例提供的CPE设备不仅可以包括LTE接口单元与基站通过长期演进LTE方式进行通信,还可以包括LTE-A(LTE-Advanced,LTE技术的后续演进)接口单元与基站通过长期演进LTE-A方式进行通信。Further, the CPE equipment provided by the embodiment of the present invention can not only include an LTE interface unit to communicate with the base station through the long-term evolution LTE method, but also include an LTE-A (LTE-Advanced, subsequent evolution of LTE technology) interface unit to communicate with the base station through the long-term evolution Evolved LTE-A mode for communication.

本发明实施例提供的一种WiFi终端接入不同业务域的装置,在确定单元确定WiFi终端发起的上行数据业务的类型,通过IP层业务处理单元或应用层业务处理单元对WiFi端发起的不同数据业务进行智能路由,如对在IP层进行认证和/或计费的业务,IP层业务处理单元通过所述CAPWAP隧道将承载有所述上行数据业务的报文进行封装后透传过所述EPC后发送BRAS,BRAS将所述上行数据业务的报文发送给相应的业务域;对于在应用层认证和/或计费的业务,应用层业务处理单元则将承载所述上行数据业务的报文携带的所述WiFi终端的所述第二IP地址转换为所述CPE设备的所述第一IP地址,通过所述EPC直接路由转发给相应的业务域。这样WiFi终端访问在应用层进行认证和/或计费的业务域,不需要通过BRAS,这样WiFi终端与业务域间的报文不需要CAPWAP隧道封装,不会增加报文的头开销,从而可以提高EPS的传送效率;同时通过对不同类型的业务域进行智能路由,不同业务域的五元组不同,使得CPE可以将WiFi终端的不同数据业务映射到不同的EPS承载,实现了不同业务流之间的优先级调度。The embodiment of the present invention provides a device for a WiFi terminal to access different service domains. The determination unit determines the type of uplink data service initiated by the WiFi terminal, and the IP layer service processing unit or application layer service processing unit determines the different types of uplink data services initiated by the WiFi terminal. Intelligent routing of data services, such as authentication and/or accounting services at the IP layer, the IP layer service processing unit encapsulates the message carrying the uplink data service through the CAPWAP tunnel and transparently transmits it through the After the EPC, the BRAS is sent, and the BRAS sends the message of the uplink data service to the corresponding service domain; for the service of authentication and/or charging at the application layer, the application layer service processing unit will carry the message of the uplink data service The second IP address of the WiFi terminal carried in the document is converted into the first IP address of the CPE device, and is directly routed and forwarded to the corresponding service domain through the EPC. In this way, the WiFi terminal does not need to pass through the BRAS when accessing the service domain that performs authentication and/or accounting at the application layer. In this way, the packets between the WiFi terminal and the service domain do not need CAPWAP tunnel encapsulation, and the header overhead of the message will not be increased. Improve the transmission efficiency of EPS; at the same time, through intelligent routing for different types of service domains, the quintuples of different service domains are different, so that the CPE can map different data services of WiFi terminals to different EPS bearers, and realize the connection between different service flows. Priority scheduling among them.

进一步的,可以降低BRAS和AAA实现和部署的难度,同时可以使得WiFi终端发起的上行数据业务支持动态PCC策略和静态QoS策略部署。Furthermore, it can reduce the difficulty of implementing and deploying BRAS and AAA, and at the same time, it can enable the uplink data service initiated by the WiFi terminal to support dynamic PCC policy and static QoS policy deployment.

进一步的,CPE还可以通过自身对不同业务域的优先级配置,实现对WiFi终端发起的多个不同业务域进行不同优先级的调度。Furthermore, the CPE can also implement scheduling with different priorities for multiple different service domains initiated by the WiFi terminal through its own priority configuration for different service domains.

本领域普通技术人员可以理解实现上述方法实施例的全部或部分步骤可以通过程序指令相关的硬件(如各种处理芯片,CPU、DSP、FPGA等)来完成,前述的程序可以存储于一计算机可读取存储介质中,该程序在执行时,执行包括上述方法实施例的步骤而前述的存储介质包括ROM、RAM、磁碟或者光盘等各种可以存储程序代码的介质。Those of ordinary skill in the art can understand that all or part of the steps for realizing the above-mentioned method embodiments can be completed by hardware related to program instructions (such as various processing chips, CPU, DSP, FPGA, etc.), and the aforementioned programs can be stored in a computer. Reading the storage medium, when the program is executed, executes the steps of the above-mentioned method embodiments, and the aforementioned storage medium includes ROM, RAM, magnetic disk or optical disk and other media that can store program codes.

以上所述,仅为本发明的具体实施方式,但本发明的保护范围并不局限于此,任何熟悉本技术领域的技术人员在本发明揭露的技术范围内,可轻易想到变化或替换,都应涵盖在本发明的保护范围之内。因此,本发明的保护范围应以所述权利要求的保护范围为准。The above is only a specific embodiment of the present invention, but the scope of protection of the present invention is not limited thereto. Anyone skilled in the art can easily think of changes or substitutions within the technical scope disclosed in the present invention. Should be covered within the protection scope of the present invention. Therefore, the protection scope of the present invention should be determined by the protection scope of the claims.

Claims (11)

1. one kind is linked into the method in different business territory for WiFi terminal, it is characterized in that, be applied to ustomer premises access equipment CPE, described CPE is communicated by WiFi mode with described WiFi terminal, described CPE is communicated by Long Term Evolution LTE mode with base station, described base station is connected by multiple business domains that Evolved Packet Core EPC is corresponding respectively with multiple business, by above-mentioned WiFi mode, LTE mode, make described WiFi terminal by described CPE, described base station, described EPC communicates with described business domains, and wherein, described method comprises:
Undertaken communicating and setting up CAPWAP tunnel by described EPC and Broadband Remote Access Server BRAS in the IP address that described CPE distributes according to described EPC, the message that the WiFi terminal encapsulated by CAPWAP tunnel and the business domains of carrying out certification and/or charging at IP layer carry out communicating is sent to BRAS, and is that described WiFi terminal distributes a 2nd IP address by described WiFi terminal and the described BRAS that makes alternately carrying out the business domains of certification and/or charging at IP layer;
Determine the data traffic types of the upstream data service that described WiFi terminal is initiated;
If the upstream data service that described WiFi terminal is initiated is the data traffic types carrying out certification and/or charging at IP layer, described upstream data service is encapsulated by described CAPWAP tunnel; Be sent to BRAS after the message transmission of the upstream data service encapsulated by CAPWAP tunnel is crossed described EPC, the message of described upstream data service is sent to corresponding business domains by described BRAS;
If the upstream data service that WiFi terminal is initiated is the data traffic types carrying out certification and/or charging in application layer, then the described 2nd IP address transition of the described WiFi terminal of being carried by the message of the described upstream data service of carrying is a described IP address of described cpe device; The message of the described upstream data service carrying an IP address of described cpe device is transmitted to corresponding business domains by described EPC direct routing.
2. method according to claim 1, is characterized in that, described determine the data traffic types of the upstream data service that described WiFi terminal is initiated before, also comprise: the Access Control List (ACL) of pre-configured upstream data service; Or dynamically derive from the Access Control List (ACL) of upstream data service;
The Access Control List (ACL) of described upstream data service comprises the five-tuple information of upstream data service, and described five-tuple information comprises the source address of described upstream data service, destination address, source port, destination interface and protocol number;
Describedly determine that the data traffic types of the upstream data service that described WiFi terminal is initiated is specially the type determining the upstream data service that described WiFi terminal is initiated according to the described destination address in the five-tuple information of described upstream data service.
3. method according to claim 2, is characterized in that, before being sent to BRAS, also comprises after the message transmission of the upstream data service encapsulated by CAPWAP tunnel is crossed described EPC:
The upstream data service of described WiFi terminal being initiated is mapped to corresponding carrying according to the QoS mechanism of EPS.
4. method according to claim 2, is characterized in that, before the described message carrying the described upstream data service of an IP address of described cpe device is transmitted to corresponding business domains by described EPC direct routing, also comprises:
The upstream data service of described WiFi terminal being initiated is mapped to corresponding carrying according to the QoS mechanism of EPS.
5. the method according to claim 3 or 4, is characterized in that, described upstream data service of described WiFi terminal being initiated is mapped to corresponding carrying according to the QoS mechanism of EPS and is specially:
If the upstream data service that WiFi terminal is initiated is assigned in many PDN set up between CPE and EPC in a certain PDN connection, the upstream data service of described WiFi terminal being initiated is mapped in corresponding carrying according to the QoS mechanism of EPS in the PDN connection be assigned with.
6. method according to claim 2, is characterized in that, the Access Control List (ACL) of described pre-configured upstream data service also comprises: the precedence information of upstream data service;
The precedence information of the upstream data service of initiating according to described WiFi terminal or the type of upstream data service and described upstream data service, carries out priority scheduling to the upstream data service that described WiFi terminal is initiated.
7. a ustomer premises access equipment CPE, it is characterized in that, described CPE is communicated by WiFi mode with WiFi terminal, described CPE is communicated by Long Term Evolution LTE mode with base station, and described base station is connected by multiple business domains that Evolved Packet Core EPC is corresponding respectively with multiple business, the WiFi mode passed through, LTE mode, make described WiFi terminal by described CPE, described base station, described EPC communicates with described business domains, and described CPE comprises:
Unit is set up in tunnel, an IP address for distributing according to described EPC is communicated with Broadband Remote Access Server BRAS by described EPC, set up CAPWAP tunnel, the message that the WiFi terminal encapsulated by CAPWAP tunnel and the business domains of carrying out certification and/or charging at IP layer carry out communicating is sent to BRAS, and is that described WiFi terminal distributes a 2nd IP address by described WiFi terminal and the described BRAS that makes alternately carrying out the business domains of certification and/or charging at IP layer;
Determining unit, for determining the data traffic types of the upstream data service that described WiFi terminal is initiated;
IP layer service processing unit, if determine that the upstream data service that described WiFi terminal is initiated is the data traffic types carrying out certification and/or charging at IP layer for described determining unit, is encapsulated described upstream data service by described CAPWAP tunnel;
Application layer Service Processing Unit, if the upstream data service of initiating for described determining unit determination WiFi terminal is the data traffic types carrying out certification and/or charging in application layer, then the described 2nd IP address transition of the described WiFi terminal of being carried by the message of the described upstream data service of carrying is a described IP address of described cpe device;
Transmitting element, after the message transmission of the described upstream data service encapsulated by CAPWAP tunnel is crossed described EPC, be sent to BRAS, the message of described upstream data service is sent to corresponding business domains by described BRAS; Or
Message for the described upstream data service of the IP address by carrying described cpe device is transmitted to corresponding business domains by described EPC direct routing.
8. CPE according to claim 7, is characterized in that, also comprises: acquiring unit, for the Access Control List (ACL) of pre-configured upstream data service; Or
For dynamically deriving from the Access Control List (ACL) of upstream data service;
The Access Control List (ACL) of described upstream data service comprises the five-tuple information of upstream data service, and described five-tuple information comprises the source address of described upstream data service, destination address, source port, destination interface and protocol number;
Described determining unit is specifically for determining the type of the upstream data service that described WiFi terminal is initiated according to the described destination address in the five-tuple information of described upstream data service.
9. CPE according to claim 8, is characterized in that, also comprises: carrying map unit, is mapped to corresponding carrying for the upstream data service of described WiFi terminal being initiated according to the QoS mechanism of EPS.
10. CPE according to claim 9, it is characterized in that, described carrying map unit specifically for: if the upstream data service that WiFi terminal is initiated is assigned in many PDN set up between CPE and EPC in a certain PDN connections, the upstream data service of described WiFi terminal being initiated is mapped to according to the QoS mechanism of EPS and carries accordingly in PDN connections be assigned with.
11. CPE according to claim 8, is characterized in that, the Access Control List (ACL) of the upstream data service that described acquiring unit is pre-configured also comprises: the precedence information of upstream data service;
Described CPE also comprises: processed unit, for the upstream data service of initiating according to described WiFi terminal or the type of upstream data service and the precedence information of described upstream data service, priority scheduling is carried out to the upstream data service that described WiFi terminal is initiated.
CN201210015987.5A 2012-01-18 2012-01-18 A kind of method and apparatus of WiFi terminal access different business territory Expired - Fee Related CN103220650B (en)

Priority Applications (3)

Application Number Priority Date Filing Date Title
CN201210015987.5A CN103220650B (en) 2012-01-18 2012-01-18 A kind of method and apparatus of WiFi terminal access different business territory
RU2014133529/07A RU2572825C1 (en) 2012-01-18 2012-05-22 METHOD AND APPARATUS FOR Wi-Fi TERMINAL FOR ACCESSING DIFFERENT SERVICE DOMAINS
PCT/CN2012/075854 WO2013107138A1 (en) 2012-01-18 2012-05-22 Method and apparatus for wifi terminal to access different service domains

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201210015987.5A CN103220650B (en) 2012-01-18 2012-01-18 A kind of method and apparatus of WiFi terminal access different business territory

Publications (2)

Publication Number Publication Date
CN103220650A CN103220650A (en) 2013-07-24
CN103220650B true CN103220650B (en) 2016-04-06

Family

ID=48798554

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201210015987.5A Expired - Fee Related CN103220650B (en) 2012-01-18 2012-01-18 A kind of method and apparatus of WiFi terminal access different business territory

Country Status (3)

Country Link
CN (1) CN103220650B (en)
RU (1) RU2572825C1 (en)
WO (1) WO2013107138A1 (en)

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US11516862B2 (en) 2018-01-12 2022-11-29 Huawei Technologies Co., Ltd. Communication method and apparatus

Families Citing this family (17)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN103532842B (en) * 2013-10-14 2017-10-13 广州供电局有限公司 The high reliability LTE transmission system of distribution network
CN104883687B (en) * 2014-02-28 2019-02-26 华为技术有限公司 Wireless local area network tunnel establishment method, device and access network system
CN106454929A (en) * 2015-08-13 2017-02-22 中国移动通信集团公司 Business process processing method, apparatus, base station, gateway and terminal
CN107026918B (en) * 2016-01-29 2020-06-09 中国移动通信集团广东有限公司 Web authentication charging method and system based on dynamic host configuration protocol
CN105610634B (en) * 2016-02-24 2019-04-16 普兴移动通讯设备有限公司 Core network data Transmission system and method
CN108243263A (en) * 2016-12-26 2018-07-03 中移(苏州)软件技术有限公司 Access method of mobile hotspot device and mobile hotspot device
CN108260098B (en) * 2016-12-29 2020-10-16 中国移动通信有限公司研究院 Target wireless hotspot traffic charging method, traffic charging system and related devices
CN109150812A (en) * 2017-06-27 2019-01-04 西门子(中国)有限公司 Data transmission method, apparatus and system
CN108737224B (en) * 2017-09-28 2020-06-09 新华三技术有限公司 Message processing method and device based on micro-service architecture
CN109788579B (en) * 2017-11-14 2021-01-22 电信科学技术研究院 PDU session establishment method and device
CN108737277B (en) * 2018-08-30 2021-02-26 新华三技术有限公司 Message forwarding method and device
CN110677513B (en) * 2019-10-09 2022-03-08 中盈优创资讯科技有限公司 Method and system for collecting binding domain and domain lower address pool of metropolitan area network private line user
CN115499872B (en) * 2021-06-02 2025-12-16 海能达通信股份有限公司 Message interaction method and related device
CN114143892B (en) * 2021-11-30 2024-06-18 北京长焜科技有限公司 Double-flow convergence method supporting dynamic allocation of NR and WiFi services
CN114285696B (en) * 2021-12-08 2023-05-16 中国联合网络通信集团有限公司 Fixed network broadband service scheduling system, method, device and storage medium
CN114449113B (en) * 2022-01-12 2025-04-11 西安广和通无线通信有限公司 Data dialing method, device, computer equipment and computer readable storage medium
CN116017791A (en) * 2023-03-24 2023-04-25 新华三技术有限公司 Intranet-extranet isolation method, device, electronic equipment and machine-readable storage medium

Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101577916A (en) * 2009-02-27 2009-11-11 西安西电捷通无线网络通信有限公司 Method for realizing convergence of WAPI and CAPWAP in local MAC mode
CN101621802A (en) * 2009-08-13 2010-01-06 杭州华三通信技术有限公司 Method, system and device for authenticating portal in wireless network
CN101771612A (en) * 2010-01-13 2010-07-07 华为技术有限公司 Tunnel establishing method, equipment and network system

Family Cites Families (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US7889765B2 (en) * 2005-11-30 2011-02-15 Time Warner Cable Inc. Apparatus and methods for utilizing variable rate program streams in a network
US8145532B2 (en) * 2006-06-27 2012-03-27 Microsoft Corporation Connecting devices to a media sharing service

Patent Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101577916A (en) * 2009-02-27 2009-11-11 西安西电捷通无线网络通信有限公司 Method for realizing convergence of WAPI and CAPWAP in local MAC mode
CN101621802A (en) * 2009-08-13 2010-01-06 杭州华三通信技术有限公司 Method, system and device for authenticating portal in wireless network
CN101771612A (en) * 2010-01-13 2010-07-07 华为技术有限公司 Tunnel establishing method, equipment and network system

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US11516862B2 (en) 2018-01-12 2022-11-29 Huawei Technologies Co., Ltd. Communication method and apparatus
US11856627B2 (en) 2018-01-12 2023-12-26 Huawei Technologies Co., Ltd. Communication method and apparatus

Also Published As

Publication number Publication date
CN103220650A (en) 2013-07-24
RU2572825C1 (en) 2016-01-20
WO2013107138A1 (en) 2013-07-25

Similar Documents

Publication Publication Date Title
CN103220650B (en) A kind of method and apparatus of WiFi terminal access different business territory
EP2608617B1 (en) System and method for resource management for operator services and internet
EP2608457B1 (en) System and method for resource management for operator services and internet
CN103141133B (en) Data message is carried out to the method and apparatus of policy control
US9137171B2 (en) System and method for resource management for operator services and internet
US20210014733A1 (en) A method for charging offload traffic
JP5903728B2 (en) Method and trusted gateway for WIFI terminal to access packet data PS service domain
US20150350912A1 (en) Residential service delivery based on unique residential apn
JP5982690B2 (en) Network convergence method, device, and communication system
WO2011157129A2 (en) Data transmission method, stream distribution node device, user equipment and system
CN101414940B (en) Method for establishing Ethernet business, net element equipment and network system
CN103167562B (en) Realize the method for WLAN terminal End-to-end QoS control, Apparatus and system
WO2017166936A1 (en) Method and device for implementing address management, and aaa server and sdn controller
CN103906055B (en) Business datum shunt method and system
CN102802206B (en) A kind of WLAN shunt method and shunting network element
CN109644161B (en) MP-GW port mapping method and system divided by service flow in multipath environment
JP6137848B2 (en) Network communication system
US20250202862A1 (en) Broadband network gateway (bng) as dynamic host configuration protocol (dhcp) server
EP3982598B1 (en) Method and apparatus for sending and receiving message, and communication system
CN105188052B (en) A kind of method, system and the wireless access point of access network
US12273318B2 (en) Broadband network gateway (BNG) as dynamic host configuration protocol (DHCP) server
JP5624112B2 (en) Quality of service control in wireless local area networks
CN101415032A (en) Three-layer private wire access method, apparatus and system
WO2016078348A1 (en) Data transmission method and device
WO2013190430A1 (en) Routing data over a non-3rd generation partnership project trusted network

Legal Events

Date Code Title Description
C06 Publication
PB01 Publication
C10 Entry into substantive examination
SE01 Entry into force of request for substantive examination
C14 Grant of patent or utility model
GR01 Patent grant
CF01 Termination of patent right due to non-payment of annual fee

Granted publication date: 20160406

CF01 Termination of patent right due to non-payment of annual fee