CN105656745B

CN105656745B - Method and device for updating data in Virtual Private Network (VPN) group

Info

Publication number: CN105656745B
Application number: CN201410638139.9A
Authority: CN
Inventors: 孔振岗
Original assignee: ZTE Corp
Current assignee: ZTE Corp
Priority date: 2014-11-12
Filing date: 2014-11-12
Publication date: 2020-03-31
Anticipated expiration: 2034-11-12
Also published as: WO2016074491A1; CN105656745A

Abstract

The invention provides a method and a device for updating data in a Virtual Private Network (VPN) group, wherein the method comprises the following steps: acquiring the object type of the current operation of the account; and executing an updating operation corresponding to the object type on all service control points SCP according to the object type, wherein the updating operation is used for updating the data of the object indicated by the object type. The invention solves the problem that the data migration between SCPs is difficult to realize between different service control points SCPs when the virtual private network service of a VPN group is realized by a prepaid service platform in the related technology, does not need to perform the migration on the framework of the VPN, and also improves the user experience.

Description

Method and device for updating data in Virtual Private Network (VPN) group

Technical Field

The invention relates to the field of communication, in particular to a method and a device for updating data in a Virtual Private Network (VPN) group.

Background

Among the intelligent network services currently provided by various operators, the prepaid service and the vpn service are two main services. In the past, users of virtual private network services are all postpaid users, in recent years, prepaid services develop rapidly, the number of users is more and more, and accordingly the demand of adding prepaid users into virtual private networks is more and more.

There are several solutions to fulfill this need, one of which is implemented on a prepaid service platform. Because the user amount of the prepaid Service is generally large, the prepaid Service platform generally has a plurality of sets of Service Control Points (SCPs), and the user data is generally divided according to the city and stored in different SCPs. In a Virtual Private Network (VPN) service, users belong to a certain group, and when there are users in multiple cities in the group and the cities involved belong to different SCPs in a prepaid service platform, when the prepaid service platform implements the Virtual Private Network service of the group, there is a conflict in the division of user data. If the prepaid service changes to divide the user data according to the group, the adjustment of the user data is involved, and the subscription information of the user on a Home Location Register (HLR for short) also needs to be adjusted synchronously; on the other hand, the prepaid subscribers who open the vpn service only occupy a small part of the entire prepaid subscribers, which inevitably causes a situation that some subscribers divide data according to the city and the other subscribers divide data according to the group, and the data is relatively disordered. When a user newly joins a group, data may need to be migrated between SCPs.

Aiming at the problem that data migration between SCPs is difficult to realize between different service control points SCPs when a prepayment service platform realizes the virtual private network service of a VPN group in the related technology, an effective solution is not provided at present.

Disclosure of Invention

The invention mainly aims to provide a method and a device for updating data in a Virtual Private Network (VPN) group, which at least solve the problem that data migration between SCPs is difficult to realize between different Service Control Points (SCPs) when a prepayment service platform realizes the VPN service of the VPN group in the related technology.

According to an aspect of the present invention, there is provided a method for updating data in a VPN group, including: acquiring the object type of the current operation of the account; and executing an updating operation corresponding to the object type on all service control points SCPs according to the object type, wherein the updating operation is used for updating the data of the object indicated by the object type.

Further, the object types include: a VPN group or a VPN user.

Further, when the object type indicates the VPN group, performing, on all service control points SCP, an update operation corresponding to the object type according to the object type includes: and updating the data of the VPN group on all service control points SCPs.

Further, when the operation object indicates the VPN user, executing, on all service control points SCP, an update operation corresponding to the object type according to the object type includes: acquiring a first number segment to which the VPN user belongs; updating the data of the VPN user on the SCP corresponding to the first number segment; and updating the data of the VPN user on other SCPs, wherein the other SCPs are the SCPs except the SCP corresponding to the first number segment in all the SCPs.

Further, the operation object includes a prepaid subscriber, and the method further includes: when the operation object is the prepaid user, acquiring a second number segment to which the prepaid user belongs; and updating the data of the prepaid subscriber on the SCP corresponding to the second number section.

According to another aspect of the present invention, there is provided an apparatus for updating data in a VPN group, including: the first acquisition module is used for acquiring the object type of the current operation of the account; and the first updating module is used for executing an updating operation corresponding to the object type on all service control points SCPs according to the object type, wherein the updating operation is used for updating the data of the object indicated by the object type.

Further, the object types include: a VPN group or a VPN user.

Further, when the object type indicates the VPN group, the first updating module is further configured to update data of the VPN group on all service control points SCP.

Further, when the operation object indicates the VPN user, the first updating module includes: the acquiring unit is used for acquiring a first number segment to which the VPN user belongs; the first updating unit is used for updating the data of the VPN user on the SCP corresponding to the first number segment; and the second updating unit is used for updating the data of the VPN user on other SCPs, wherein the other SCPs are the SCPs except the SCP corresponding to the first number segment in all the SCPs.

Further, the operation object includes a prepaid subscriber, and the apparatus further includes: a second obtaining module, configured to obtain a second number segment to which the prepaid subscriber belongs when the operation object is the prepaid subscriber; and the second updating module is used for updating the data of the prepaid subscriber on the SCP corresponding to the second number segment.

By adopting the method and the device, the problem that data migration between SCPs is difficult to realize between different service control points SCPs when the virtual private network service of a VPN group is realized by a prepaid service platform in the related technology is solved by adopting a mode of executing the updating operation corresponding to the object type on all the service control points SCPs according to the object type of the current account operation, the framework of the VPN does not need to be improved, and the user experience is also improved.

Drawings

The accompanying drawings, which are included to provide a further understanding of the invention and are incorporated in and constitute a part of this application, illustrate embodiment(s) of the invention and together with the description serve to explain the invention without limiting the invention. In the drawings:

fig. 1 is a flowchart of a method for updating data in a VPN group according to an embodiment of the present invention;

fig. 2 is a block diagram of a configuration of an apparatus for updating data in a VPN group according to an embodiment of the present invention;

fig. 3 is a block diagram of an alternative structure of a device for updating data in a VPN group according to an embodiment of the present invention;

fig. 4 is a block diagram of an alternative structure of a device for updating data in a VPN group according to an embodiment of the present invention;

FIG. 5 is a block diagram of a system networking according to an alternative embodiment of the invention;

FIG. 6 is a normal overhead workflow diagram according to an alternative implementation of the present invention;

FIG. 7 is an overhead workflow diagram in the event of an exception according to an alternative embodiment of the invention;

fig. 8 is a business flow diagram of making a VPN call across SCPs in accordance with an alternative embodiment of the invention.

Detailed Description

The invention will be described in detail hereinafter with reference to the accompanying drawings in conjunction with embodiments. It should be noted that the embodiments and features of the embodiments in the present application may be combined with each other without conflict.

In this embodiment, a method for updating data in a virtual private network VPN group is provided, and fig. 1 is a flowchart of a method for updating data in a VPN group according to an embodiment of the present invention, as shown in fig. 1, the flowchart includes the following steps:

step S102: acquiring the object type of the current operation of the account;

step S104: according to the object type, updating operation corresponding to the object type is executed on all service control points SCP;

wherein the update operation is used to update the data of the object indicated by the object type.

By the embodiment, the method for executing the updating operation corresponding to the object type on all the service control points SCPs according to the object type of the current account opening operation solves the problem that data migration between SCPs is difficult to realize between different service control points SCPs when the virtual private network service of a VPN group is realized by a prepaid service platform in the related technology, does not need to perform the update on the VPN architecture, and also improves the user experience.

There are various objects of the overhead operation involved in this embodiment, and in an optional implementation manner of this embodiment, the object type may be: a VPN group or a VPN user.

In an optional implementation manner of this embodiment, when the object type is a VPN group or a VPN user, performing an update operation corresponding to the object type on all service control points SCP may be implemented by:

the first method is as follows: in this embodiment, when the object type indicates that it is a VPN group, the data of the VPN group is updated at all service control points SCP.

The second method comprises the following steps: when the operation object indication is a VPN user, acquiring a first number segment to which the VPN user belongs; updating data of the VPN user on an SCP corresponding to the first number segment; and updating the data of the VPN user on other SCPs, wherein the other SCPs are the SCPs except the SCP corresponding to the first number segment in all the SCPs.

In another optional implementation manner of this embodiment, the operation object may also be a prepaid subscriber, and when the operation object is a prepaid subscriber, the update operation may be implemented in a following manner, where the following steps are included:

step S11: acquiring a second number section to which the prepaid user belongs;

step S12: and updating the data of the prepaid subscriber on the SCP corresponding to the second number section.

In this embodiment, a device for updating data in a VPN group is further provided, where the device is used to implement the foregoing embodiments and optional embodiments, and details are not repeated for what has been described. As used below, the term "module" may be a combination of software and/or hardware that implements a predetermined function. Although the means described in the embodiments below are preferably implemented in software, an implementation in hardware, or a combination of software and hardware is also possible and contemplated.

Fig. 2 is a block diagram of a data updating apparatus in a VPN group according to an embodiment of the present invention, and as shown in fig. 2, the apparatus includes: a first obtaining module 22, configured to obtain an object type of a current operation of an account; the first updating module 24 is coupled to the first obtaining module 22, and is configured to perform, on all service control points SCP, an updating operation corresponding to the object type according to the object type, where the updating operation is used to update data of the object indicated by the object type.

Optionally, when the object type indicates a VPN group, the first updating module is further configured to update data of the VPN group on all service control points SCP.

Fig. 3 is a block diagram showing an alternative configuration of a data updating apparatus in a VPN group according to an embodiment of the present invention, where, when an operation target is a VPN user, as shown in fig. 3, the first updating module 24 includes: an obtaining unit 32, configured to obtain a first number segment to which a VPN user belongs; the first updating unit 34 is coupled to the obtaining unit 32, and is configured to update the data of the VPN user on the SCP corresponding to the first number segment; the second updating unit 36 is coupled to the first updating unit 34, and is configured to update the data of the VPN subscriber on other SCPs, where the other SCPs are all the SCPs except the SCP corresponding to the first number segment.

Fig. 4 is a block diagram of an alternative structure of an apparatus for updating data in a VPN group according to an embodiment of the present invention, where an operation object includes a prepaid subscriber, and as shown in fig. 4, the apparatus further includes: a second obtaining module 42, configured to obtain a second number segment to which the prepaid user belongs when the operation object is the prepaid user; a second update module 44 is coupled to the second retrieving module 42 for updating the data of the prepaid subscriber at the corresponding SCP with the second number.

For a better understanding of the present invention, reference will now be made to an alternative embodiment thereof.

In the optional embodiment, a data synchronization sub-module is added in the account opening and canceling module, the account opening and canceling module can identify that the object of the account opening and canceling operation is a pure prepaid user, a VPN group or a user, when the operation object is the pure prepaid user, the original flow is kept unchanged, and the user data on the corresponding SCP is updated according to the user number segment; for the purchase and sales account of the pure prepaid user, the purchase and sales account module of the prepaid service platform updates the user data on the SCP to which the user belongs according to the principle of dividing data by the user city, which can be understood as the corresponding relation between the user number segment and the SCP under the general condition.

When the operation object is a VPN group, the group data is updated on all SCPs by the opening and closing module through the data synchronization submodule; when the operation object is a VPN user, the account opening and canceling module updates user data on a corresponding SCP according to the number segment to which the user belongs, and then updates the user data on other SCPs through the data synchronization sub-module.

By adopting the optional embodiment, the synchronous operation of the newly added data synchronization submodule is adopted, and all SCPs store the information of the VPN group and the users in full quantity, so that the user subscription data on the HLR does not need to be updated after the pure prepaid user joins the VPN; the user calls the intelligent service which still triggers the original attributive SCP, and because the SCP has the full amount of VPN information at the moment, the service can normally carry out long-short number translation and other judgment of VPN service flow; furthermore, peripheral network elements such as an accounting network, an HLR and the like do not need to be modified, whether a user joins in a VPN or not does not need to be concerned, and the problem that a VPN group in the related technology is difficult to perform data migration across multiple SCPs can be solved only by performing data division according to a user city.

The alternative embodiments are illustrated in the figures and described in detail below with reference to the accompanying drawings.

Fig. 5 is a block diagram of a system networking according to an alternative embodiment of the present invention, as shown in fig. 5, the system networking includes: a Mobile Switching Center (MSC for short) for implementing functions of triggering, call connection, voice channel Switching, etc. of an intelligent service;

the HLR maintains the intelligent service subscription information of the user, and the MSC determines the home SCP of the user according to the subscription information on the HLR, so that the call of the user is triggered to the home SCP.

In the optional embodiment of the invention, the system mainly faces to the end user to accept the request of account opening and account cancellation of the user, the request of account opening and account cancellation is sent to the service platform through the account opening interface protocol, which is generally MML protocol or SOAP protocol, and the result of account opening and account cancellation of the service platform is fed back to the user, meanwhile, the intelligent service signing information of the user on the HLR can be updated by the accounting after the account opening is successful.

A Service Management Point (SMP for short) is used to provide functions of access Management, Service Management (such as loading, unloading, activating, and deactivating services), Service data Management, and the like.

All SCPs in FIG. 5 are managed by SMP, prepaid subscriber information is divided into different SCPs according to the number segment to which the subscriber belongs, and a VPN group or subscriber information has a whole data stored in all SCPs. The SCP is the core of the intelligent network service, storing user data and service logic. The SCP has the main functions of starting different service logics according to call events reported by the MSC or SSP and sending call control instructions according to the service logics, thereby realizing various intelligent calls.

The Interface processing module (Interface Message Processor abbreviated as IMP) is used for providing an account opening Interface for outside, receiving an account opening instruction sent by the tent system under normal conditions, and feeding back a result to the tent system after completing an account opening operation on a Service Control Point (SCP). The data synchronization module is a submodule of the data synchronization module, and the function of the data synchronization module is to realize the synchronization of the VPN group on all SCPs for acquiring the user data.

Example one

FIG. 6 is a flowchart of normal overhead operations, as shown in FIG. 6, including the steps of:

step S601: the tent initiates an account opening and closing operation, and an account opening and closing instruction is sent to the IMP;

step S602: the IMP judges the type of the overhead object: prepayment, VPN;

step S603: the method comprises the steps that a prepaid user opens and sells an account, an IMP determines that a home SCP of the user is an SCP1 according to a user number segment, and user data on an SCP1 are updated;

step S604: VPN account opening, IMP updates user data on all SCPs (preferentially updating the home SCP);

step S605: SCP returns successful result of opening and canceling to IMP;

step S606: the IMP returns a successful account opening result to the tent;

step S607: the tent updates the intelligent service subscription information of the user on the HLR;

wherein, only the prepaid account needs to update the HLR subscription information.

Example two

FIG. 7 is a flow diagram of an overhead work flow in an exception condition according to an alternative embodiment of the invention, as shown in FIG. 7, including the steps of:

step S701: the tent initiates an account opening and closing operation, and an account opening and closing instruction is sent to the IMP;

step S702: the IMP judges that the object of the account opening and closing is VPN;

step S703: the IMP updates the user data on the user home SCP (SCP 1);

step S704: SCP1 returns an account opening failure;

step S705: the IMP returns an account opening failure result to the tent;

step S706: SCP1 returns success of the account opening;

step S707: the IMP continues to update other SCPs, i.e. user data on SCPn;

step S708: SCPn returns an overhead failure;

step S709: the IMP retries to open an account at SCPn, and the retry number is available;

step S710: the retry of the SCPn overhead account is successful;

step S711: SCPn retries N times and still fails and the IMP records the failure log.

Step S712: the IMP returns the successful account opening to the tent.

It should be noted that fig. 7 relates to VPN overhead and does not relate to HLR subscription data update. In addition, theoretically, the attribution SCP can be successful in account of the account, other SCPs, namely SCPn account, also should be successful, the possibility that the repeated retries still fail is very small, and at the moment, a failure log is recorded and is to be processed manually. For the user benefit priority, the result returned to the tent is subject to the execution result of the SCP to which the user belongs.

EXAMPLE III

Fig. 8 is a service flow diagram of a cross-SCP VPN call according to an alternative embodiment of the present invention, and as shown in fig. 8, it is assumed that A, B all are prepaid subscribers with VPN opened, and belong to the same VPN group, where a subscriber belongs to SCPa, B subscriber belongs to SCPb, MSCa is an MSC in a roaming place, MSCb is an MSC in a roaming place, and an a short number dials B, and the flow includes the following steps:

step S801: the short number of the user A is dialed to a user B in the group, and the MSCa inquires subscription information of the user A from the HLR;

step S802: HLR returns A user signing information, MSCa obtains SCPa of attribution SCP of A user according to signing information;

step S803: MSCa reports IDP message to SCPa to trigger A user calling flow;

step S804: SCPa inquires the corresponding called long number according to the short number, and judges the calling type of the network and the network, because the SCPa has a full amount of VPN group and user data, even if the B user is the attributive SCPb, the result can be inquired normally; SCPa issues a continuing instruction to MSCa, and the continuing number is a called long number;

step S805: MSCa inquires the subscription information of B user from HLR;

step S806: HLR returns the subscription information of the B user, MSCa learns that the attributive SCP of the B user is SCPb according to the subscription information;

step S807: MSCa reports IDP message to SCPb to trigger the called flow of B user;

step S808: SCPb judges the calling type of the network and the network according to the calling and called numbers, indicates MSCa to continue the calling, and indicates MSCa to set the called number to display the long number or the short number of the A user according to the setting of the B user;

step S809: A. and the user B successfully establishes the speech path and normally calls.

The above description is only an alternative embodiment of the present invention, and is not intended to limit the present invention, and various modifications and variations of the present invention may occur to those skilled in the art. Any modification, equivalent replacement, or improvement made within the spirit and principle of the present invention should be included in the protection scope of the present invention.

Claims

1. A method for updating data in a Virtual Private Network (VPN) group is characterized by comprising the following steps:

obtaining an object type of a current overhead account operation, wherein the object type comprises: a VPN group or VPN user;

executing an updating operation corresponding to the object type on all service control points SCPs according to the object type, wherein the updating operation is used for updating the data of the object indicated by the object type;

when the operation object type indicates the VPN user, the updating operation corresponding to the object type is executed on all service control points SCPs according to the object type, and the updating operation comprises the following steps:

acquiring a first number segment to which the VPN user belongs;

updating the data of the VPN user on the SCP corresponding to the first number segment;

and updating the data of the VPN user on other SCPs, wherein the other SCPs are the SCPs except the SCP corresponding to the first number segment in all the SCPs.

2. The method according to claim 1, wherein when the object type indicates the VPN clique, performing an update operation corresponding to the object type on all service control points SCP according to the object type comprises:

and updating the data of the VPN group on all service control points SCPs.

3. The method of claim 1, wherein the operational object comprises a prepaid subscriber, the method further comprising:

when the operation object is the prepaid user, acquiring a second number segment to which the prepaid user belongs;

and updating the data of the prepaid subscriber on the SCP corresponding to the second number section.

4. An apparatus for updating data in a Virtual Private Network (VPN) group, comprising:

a first obtaining module, configured to obtain an object type of a current overhead account operation, where the object type includes: a VPN group or VPN user;

a first updating module, configured to execute, on all service control points SCP, an updating operation corresponding to the object type according to the object type, where the updating operation is used to update data of an object indicated by the object type;

when the operation object type indicates the VPN user, the first updating module includes:

the acquiring unit is used for acquiring a first number segment to which the VPN user belongs;

the first updating unit is used for updating the data of the VPN user on the SCP corresponding to the first number segment;

and the second updating unit is used for updating the data of the VPN user on other SCPs, wherein the other SCPs are the SCPs except the SCP corresponding to the first number segment in all the SCPs.

5. The apparatus of claim 4, wherein when the object type indicates the VPN clique, the first updating module is further configured to update data of the VPN clique at all service control points SCPs.

6. The apparatus of claim 4, wherein the operation object comprises a prepaid subscriber, the apparatus further comprising:

a second obtaining module, configured to obtain a second number segment to which the prepaid subscriber belongs when the operation object is the prepaid subscriber;

and the second updating module is used for updating the data of the prepaid subscriber on the SCP corresponding to the second number segment.