CN101296169A - Method, system and equipment for establishing user session bearer service - Google Patents

Abstract

The invention discloses a method and system for establishing a user session bearer service, a policy control and charging rule functional entity, a policy and charging execution entity, including: the policy and charging execution entity receives a session bearer service establishment request of a user equipment Afterwards, send a credit control request message carrying the user identifier to the policy control and charging rule functional entity; after the policy control and charging rule functional entity queries the user information according to the user identifier; judges and generates routing policy information according to the queried user information, Feedback the credit control response message carrying the routing policy information to the policy and charging enforcement entity; the policy and charging enforcement entity establishes the session bearer service according to the routing policy information, and executes the user service data flow according to the routing policy. The invention overcomes the problem that the policy control and charging rule functional entity cannot forward the message to be forwarded to a new address other than the original destination address of the message.

Description

Method, system and equipment for establishing user session bearer service

technical field

The invention relates to the field of communication, in particular to a method and system for establishing a user session bearer service, a policy control and charging rule functional entity, a policy and charging execution entity.

Background technique

Figure 1 is a schematic diagram of the PCC (Policy Charging Control, policy and charging control) architecture defined by 3GPP in TS 23.203. As shown in the figure, the functions of each functional entity in PCC are as follows:

PCRF (Policy Control and Charging Rules Function, policy control and charging rules functional entity): This functional entity obtains from the SPR (Subscription Profile Repository, user subscription data database) functional entity according to the restrictions on user access to the network and operator policies. The user's subscription data and the user's current business information obtained from AF (Application Function, application layer functional entity) determine the corresponding policy, and provide the policy to PCEF (Policy and Charging Enforcement Function, policy and charging execution entity) ), these policies are enforced by the PCEF. Policies include detection rules for service data flows (complete a certain service, such as a set of IP flows for voice), gating or not, QoS (Quality of Service) corresponding to service data flows, and flow-based charging rules, etc.

PCEF: This entity implements policies delivered or specified by PCRF, specifically, it performs detection and measurement of service data flows, ensures the QoS of service data flows, processes user plane traffic, and triggers session management on the control plane, etc.;

SPR: This functional entity provides user subscription data to PCRF;

AF: This functional entity dynamically provides the session information of the application layer to the PCRF, and the PCRF dynamically generates or modifies the corresponding rules according to the information.

The reference points between functional entities are described as follows:

RX reference point: This reference point is used for AF to deliver application layer related information, including but not limited to IP filters, used to identify bandwidth information required by service data flows, applications, or media. This reference point is defined by IETF Diameter protocol;

GX reference point: This reference point enables the PCRF to dynamically control the PCC rules implemented on the PCEF. This reference point implements the following functions: establish, maintain, and terminate IP-CAN (IP Connectivity Access Network, IP connectivity access network) sessions; PCEF requests PCC rules from PCRF; PCRF provides PCC rules to PCEF; negotiates IP-CAN bearer establishment mode. This reference point uses the Diameter protocol defined by IETF;

Sp reference point: used for PCRF to request user subscription information from SPR, and the subscription information is used to determine IP-CAN transport layer strategy. This interface is currently a private interface (customized by equipment manufacturers, not publicized);

In order to understand the IP-CAN session process more easily, a few terms are first explained:

IP-CAN: When the user roams in the access network (when the location changes), the continuity of the IP service can still be preserved (that is, the service is not interrupted). The access network with this nature is called IP-CAN, such as GPRS (General Packet Radio Service , general packet radio service) network, I-WLAN (wireless local area network and 3GPP network interworking system) network, etc.;

IP-CAN bearer: IP-CAN bearer, IP transmission path with clear rate, delay and bit error rate (this path refers to between the access network and PCEF), for GPRS, IP-CAN bearer corresponds to PDP (Packet Data Protocol, packet data protocol) context;

IP-CAN session: IP-CAN session refers to the connection relationship between UE (User Equipment, user equipment) and PDN (Packet Data Network, packet data network, such as internet) identification, which is passed through the IP address of UE and the identity of the UE. As long as the UE is assigned an IP address and can be identified by the IP network, IP-CAN exists. An IP-CAN session may contain one or more IP-CAN bearers.

Figure 2 is a schematic diagram of the process of establishing an IP-CAN session. As shown in the figure, the establishment of an IP-CAN session includes the following processes:

Step 201, PCEF receives the IP-CAN session setup request message initiated by UE (assigning an IP address visible in the PDN network), the specific message format is related to the access network type, and for GPRS, the first PDP context is established;

Step 202, PCEF notifies PCRF that the IP-CAN session is established, and PCEF creates a new DCC (Diameter Credit Control) session, and sends a CCR (Credit Control Request, Credit-Control-Request) message to PCRF, including UE identification and IP address. If PCRF implements IP-CAN bearer and rule binding, PCEF will also report the IP-CAN bearer identifier (generally, when UE establishes an IP-CAN session, it will establish a default IP-CAN bearer to transmit control layer signaling) ;

Step 203, PCRF stores the information in the CCR message;

Step 204, if the PCRF needs information related to user subscription, then request to the SPR;

Step 205, the SPR returns user subscription information, including information such as the service the user currently subscribes to, the charging mode, etc.;

Step 206, PCRF generates new PCC rules;

Step 207, the PCRF stores the PCC rules, and if the PCRF executes IP-CAN bearer and rule binding, it also needs to record the binding relationship between the PCC rules and the IP-CAN bearer identifier;

Step 208, PCRF returns PCC rules to PCEF through CCA (Credit-Control-Answer) message, if PCRF executes IP-CAN bearer and rule binding, then indicates the binding of PCC rule and IP-CAN bearer identification Relationship (that is, execute the corresponding rules on that IP-CAN bearer);

Step 209, PCEF installs the rules, and opens or closes the corresponding service data flow according to the rules to ensure the corresponding QoS. If the PCEF implements IP-CAN bearer and rule binding, then the PCEF selects an appropriate IP-CAN bearer according to the rules. , otherwise the PCEF executes the rules on the corresponding IP-CAN bearer according to the binding relationship between the PCRF PCC rule and the IP-CAN bearer identifier;

Step 210, the PCEF returns an IP-CAN session establishment response message to the UE;

Figure 3 is a schematic diagram of the IP-CAN bearer establishment process initiated by the UE. As shown in the figure, the UE initiates the IP-CAN bearer establishment including the following steps:

Step 301, after the AF receives a trigger event (such as the multimedia call control signaling initiated by the UE), it needs to establish a new Diameter session and provide service information to the PCRF;

Step 302, AF extracts required service information (such as IP flow address information, port number, media type, etc.) from the trigger event;

Step 303, AF sends AAR (Approval and/or Authorization Request, AA-Request) message to PCRF, including business information;

Step 304, PCRF saves the received service information;

Step 305, if the PCRF does not have user subscription information at this time, request the user subscription information to the SPR;

Step 306, the SPR returns the user's subscription information, including the service currently signed by the user;

Step 307, the PCRF associates the AF session with a corresponding IP-CAN session according to the received service information and the information previously received from the PCEF (such as when the IP-CAN session is established);

Step 308, PCRF returns AAA message to AF;

Step 309, the PCEF receives the IP-CAN session message initiated by the UE, requesting to establish a new IP-CAN bearer, for GPRS, to establish a second PDP context;

Step 310, PCEF notifies PCRF that the IP-CAN session needs to be modified, sends a CCR message to PCRF, and requests PCC rules for the IP-CAN bearer, if PCRF performs IP-CAN bearer and rule binding, then PCEF also reports the new IP -CAN bearer identification;

Step 311, PCRF stores the information in the CCR message, and utilizes the information received from PCEF and the service information received from AF in step 303 to associate the IP-CAN session with a specific AF session (one IP-CAN session can be associated with multiple AF sessions are associated), generate and save new PCC rules (according to business information and user subscription, operator configuration and other information);

Step 312, PCRF returns a CCA message to PCEF with new PCC rules, if PCRF executes IP-CAN bearer and rule binding, it indicates that PCC rules are executed on the newly established IP-CAN bearer;

Step 313, PCEF installs the rules, and opens or closes the corresponding service data flow according to the rules to ensure the corresponding QoS and charging statistics;

Step 314, if the user is charging online and the OCS (Online Charging System, online charging system) connection is normally available, then the PCEF can request the information charging keyword information from the OCS;

Step 315, the OCS returns the credit control information to the PCEF.

Step 316, the PCEF returns an IP-AN session response message to the UE;

Figure 4 is a schematic diagram of the binding relationship among IP-CAN sessions, IP-CAN bearers, PCC rules, and IP flows. Through the above-mentioned IP-CAN session establishment process and IP-CAN bearer establishment process, an IP-CAN bearer is actually formed on the PCEF. The binding relationship between IP-CAN session, IP-CAN bearer, PCC rule and IP flow is shown in the figure.

After the UE allocates an addressable IP address in the PDN, the UE establishes an IP-CAN session. In order to meet different QoS requirements, IP-CAN bearers with different QoS requirements can be established in the same IP-CAN session. There can be multiple IP streams in an IP-CAN bearer (for example, users can download files on different servers at the same time), PCEF is based on PCC rules (PCC rules include IP five-tuples, namely IP source, destination address, source port number, destination Port numbers and protocols are used to identify IP flows. Each PCC rule can contain one or more IP flows, which are called Service Data Flows.

The inventor noticed during the invention process that in the mechanism provided by the existing PCC, PCRF defines the PCC rules of charging rules, QoS control, and gating information, and then filters the IP quintuples of the service data flow through the Gx interface The rules and corresponding rule parameters are passed to the PCEF, and the PCEF can perform charging, QoS control, and gate control according to the rules of the service data flow. However, the PCRF cannot forward the packet to be forwarded to a new address that is not the original destination address of the packet.

The inventor noticed that in some special application scenarios, for example, when a user downloads data from a certain website, it is necessary to first forward the downloaded message to an external device for content filtering; or, when the user sends an email, it needs to Use an external device to filter mail for antivirus or antispam. At this time, due to the need to redirect the user's message according to the requirements, it needs to rely on two aspects of data, one is the user's subscription data, and the user will request to provide the corresponding message filtering function when signing up; the other is On the one hand, through network monitoring or parameters provided by the firewall, for example, if it is found that the information downloaded from a certain website always contains illegal or virus information, then the network management control system (or other channels) will notify PCRF that the information provided by this website needs to be updated. filter. Or, another example is that when monitoring finds that a certain user always sends spam, the PCRF is notified to filter the user's mail for spam. At this time, it will be necessary for PCRF to provide the corresponding redirection destination address for the user IP bearer according to the relevant information of the user, combined with the networking and network management monitoring, but this cannot be realized through configuration in the PCEF.

Contents of the invention

The embodiment of the present invention provides a user session bearer service establishment method, system, policy control and charging rule functional entity, policy and charging execution entity, to solve the problem of enabling PCRF to forward the message that needs to be forwarded to a non-message originator. New address issue for destination address.

An embodiment of the present invention provides a method for establishing a user session bearer service, including the following steps:

After the PCEF receives the session bearer service establishment request from the UE, it sends a credit control request message carrying the user identifier to the PCRF;

After the PCRF receives the credit control request message, it queries the user information according to the user identifier;

After the PCRF judges and generates routing policy information according to the queried user information, it feeds back a credit control response message to the PCEF, and the credit control response message carries the routing policy information;

The PCEF establishes a session bearer service according to the routing policy information, and executes the user service data flow according to the routing policy in the routing policy information.

The embodiment of the present invention also provides a user session bearer service establishment system, including PCRF, PCEF, and also includes:

The request module is connected to the PCEF, and is used for sending a credit control request message carrying the user identifier to the PCRF after the PCEF receives the UE's session bearer service establishment request;

A query module, connected to the PCRF, for querying user information according to the user identifier after receiving the credit control request message sent by the request module;

A policy module, connected to the PCRF, for judging and generating routing policy information according to the inquired user information;

A feedback module, connected to the PCRF, configured to feed back a credit control response message to the PCEF, where the credit control response message carries the routing policy information;

The execution module is connected to the PCEF, and is used to establish a session bearer service according to the routing policy information, and execute the user service data flow according to the routing policy in the routing policy information.

The embodiment of the present invention further provides a policy control and charging rule functional entity PCRF, including:

A query module, configured to query user information according to the user identifier after receiving the credit control request message sent by the PCEF;

A policy module, configured to judge and generate routing policy information according to the queried user information;

A feedback module, configured to feed back a credit control response message to the PCEF, where the credit control response message carries the routing policy information, and the PCEF establishes a session bearer service according to the routing policy information, and processes the user service data flow according to the specified Routing policy execution in the routing policy information described above.

The embodiment of the present invention also provides a policy and charging enforcement entity PCEF, including:

The requesting module is configured to send a credit control request message carrying the user identifier to the PCRF after the PCEF receives the session bearer service establishment request of the UE, and the credit control message is used to trigger the PCRF to feed back a credit control response carrying routing policy information information;

An execution module, configured to establish a session bearer service according to the routing policy information, and execute the user service data flow according to the routing policy in the routing policy information.

The beneficial effects of the embodiments of the present invention are as follows:

Because in the embodiment of the present invention, after the PCRF receives the credit control request message carrying the user identifier, it queries the user information according to the user identifier; then the PCRF judges and generates a routing strategy to redetermine the redirection address according to the inquired user information, and The new address is fed back to the PCEF; the PCEF then establishes the session bearer service according to the new address, so that the PCRF no longer uses the original destination address requested by the session service bearer, but establishes the session service bearer to the new address, which overcomes the inability of the PCRF to transfer the The message that needs to be forwarded is forwarded to a new address that is not the original destination address of the message.

Description of drawings

Fig. 1 is a schematic diagram of the PCC architecture defined in TS 23.203 by 3GPP described in the background technology;

Fig. 2 is a schematic diagram of the IP-CAN session establishment process described in the background technology;

FIG. 3 is a schematic diagram of the IP-CAN bearer establishment process initiated by the UE described in the background art;

Fig. 4 is a schematic diagram of the binding relationship between the IP-CAN session, the IP-CAN bearer, the PCC rule and the IP flow described in the background technology;

FIG. 5 is a schematic diagram of the implementation process of the method for establishing a user session bearer service in an embodiment of the present invention;

FIG. 6 is a schematic diagram of the implementation process of Embodiment 1 of the present invention;

Fig. 7 is a schematic diagram of the implementation process of Embodiment 2 of the present invention;

FIG. 8 is a schematic structural diagram of a system for establishing a user session bearer service in an embodiment of the present invention;

FIG. 9 is a schematic structural diagram of a policy control and charging rule functional entity in an embodiment of the present invention;

Fig. 10 is a schematic diagram of the structure of the policy and charging enforcement entity in the embodiment of the present invention.

Detailed ways

Specific embodiments of the present invention will be described below in conjunction with the accompanying drawings.

An embodiment of the present invention provides a method for establishing a user session bearer service. FIG. 5 is a schematic diagram of the implementation process of the method for establishing a user session bearer service. As shown in the figure, the sending may include the following steps:

Step 501, after PCEF receives the UE's session bearer service establishment request, it sends a credit control request message carrying the user identifier to PCRF;

Step 502: After receiving the credit control request message, the PCRF queries user information according to the user identifier;

Step 503, PCRF judges according to the user information of the query and generates routing policy information;

Step 504, the PCRF feeds back a credit control response message to the PCEF, and the credit control response message carries the routing policy information;

Step 505, the PCEF establishes the session bearer service according to the routing policy information, and executes the routing policy in the routing policy information for the user service data flow.

During implementation, in step 502, after receiving the credit control request message, the PCRF may query the user information in the SPR and/or the network management system.

The queried user information includes user subscription information and/or network performance.

User signing information is the signing information of one or a combination of the content filtering function, anti-spam filtering function, and anti-virus filtering function required by the user when signing up; the network performance is based on content filtering equipment, anti-spam filtering equipment, anti-virus filtering The load performance of one of the devices or its combination in the network.

PCRF can be customized according to user subscription information or operators, and will provide services provided by users with functions such as content filtering, anti-spam filtering, and anti-virus filtering. In this way, PCRF can select an appropriate filtering device address based on the user's subscription information, combined with the network distribution of content filtering, anti-spam filtering, and anti-virus filtering devices, and according to the principle of load balancing, and send the functional requirements and device address information to PCRF. According to the functional requirements, the PCRF can forward the message to the corresponding device address. Further, the user may be prompted to perform operations on the service flow.

When the PCRF makes a judgment based on the queried user information and generates a routing policy, the PCRF can first select an optional user service data flow redirection address, and then determine the user service in the optional user service data flow redirection address by polling. The data flow redirection address may be specifically polling available devices in the network, and when the feedback from the device that can be processed is obtained, the device address is used as the address of the user service data flow redirection address.

In a preferred implementation, PCRF can also obtain user service data flow redirection address and user service data flow redirection processing type information when making a judgment based on queried user information and generating routing policy information, and process user service data flow redirection The type information is fed back to PCEF. The PCEF feeds back the user service data flow redirection processing type information to the user.

The user service data flow redirection processing type information may be the subscription information for establishing the session bearer service for content filtering, anti-spam filtering, anti-virus filtering or a combination thereof, so that the user can know that the packet will be What has been done can improve the user's service experience and right to know.

In step 504, the PCRF may use the Diameter RAR or CCA message to feed back the routing policy information to the PCEF through the Gx interface.

Through the Gx interface between the PCRF and the PCEF, the user service data flow redirection processing type and redirection address information can be transmitted to the PCEF. For example, PCRF can send user service data flow redirection processing type and redirection address information to PCEF through Diameter RAR or CCA message, and the specific implementation is as follows:

Redirect-Information::=<AVP Header:xxxx>

[Filter_Type]

[Redirect-Server]

Among them, xxxx is the AVP (Attribute Value Pairs) code of Bearer-Priority;

Filter_Type The type of AVP is an enumeration type, and the value is defined as follows:

FILTER_CONTENT (1) content filtering type

FILTER_SPAM (2) Anti-spam filtering type

FILTER_VIRUS (3) Antivirus filter type

Redirect-Server AVP is an AVP defined in RFC4006.

The specific implementation of the user service processing flow is described below with an embodiment in which the service data flow is forwarded.

Embodiment one

What is described in this embodiment is that the service subscribed by the user needs to filter the content of the downlink message, and forwarding the message is formulated according to the subscription information of the user to perform content filtering. That is, when a user establishes an IP access session, the PCRF obtains the subscription information from the SPR, and the user's downlink packets determined in the subscription information need to perform content filtering. Address forwarding, which sends the filtering type and redirection address information of the service flow to the PCEF for processing.

Figure 6 is a schematic diagram of the implementation process of Embodiment 1, as shown in the figure, including the following steps:

Step 601, the user initiates an IP access session establishment request to the PCEF.

Step 602, PCEF sends a credit control request message to PCRF.

Step 603, PCRF acquires user information from SPR. The content of the user's subscription is information downloaded from a certain IP address, which needs to be filtered.

Step 604, PCRF judges and generates routing policy information, obtains a device address through polling according to user subscription information and external content filtering device configuration information, and includes the filtering type and device address in the policy information.

Step 605, the PCRF sends a credit control reply message to the PCEF, and the message carries policy information. Policy information includes service filtering type and redirection address information (Redirect-Information).

In step 606, the PCEF records the filtering processing type and redirection address information (Redirect-Information) of the received service, and performs a redirection operation on the user-related data flow passing through the PCEF.

Step 607, the PCEF sends an IP access session establishment response message to the user terminal.

Step 608 , when the user initiates a service that needs to filter downlink packets, the PCEF matches the control rule and prompts the user that the downlink service flow of this URL needs to be forwarded to the content filtering device for content filtering. The PCEF forwards the user packets to the content filtering device according to the requirements.

It can be seen from the above implementation that the embodiment provides a new business model for operation. Through the control of redirection information, a simplified method is provided for the expansion of business functions. It can conveniently realize the function of controlling and managing various business flows, simplifies the deployment of services, and under the premise of ensuring the security of the equipment, it not only enhances the equipment functions, but also ensures the stability of the system.

Embodiment two

This embodiment describes that: according to the monitoring, it is found that a certain user often sends spam emails, and the network management system notifies PCRF that the user's uplink email messages need to be filtered against spam emails. When the user establishes an IP access session, the PCRF obtains the subscription information from the SPR, and the PCRF obtains the corresponding PCC rules and filtering policies according to the relevant information, and sends them to the PCEF for processing.

Figure 7 is a schematic diagram of the implementation process of Embodiment 2, as shown in the figure, including the following steps:

Step 701 , the network management system notifies the PCRF of the service information of a certain user, and requires that the user's uplink mail messages be filtered for spam, and the PCRF binds the information to the bearer of the user and stores it.

Step 702, the user initiates an IP access session establishment request to the PCEF.

Step 703, PCEF sends a credit control request message to PCRF.

Step 704, PCRF judges and generates routing policy information, PCRF judges according to the service type and combined with the policy information that spam filtering should be performed on the user's uplink mail, and then obtains a device address by polling according to the configuration information of the spam filtering device , constituting the filtered redirect information.

Step 705, the PCRF sends a credit control reply message to the PCEF, and the message carries routing policy information. Routing policy information includes spam filtering type and redirection address information (Redirect-Information) information.

In step 706, the PCEF stores the received routing policy rules, and performs a redirection operation on user-related data flows passing through the PCEF.

Step 707, the PCEF sends an IP access session establishment response message to the user terminal.

Step 708, when the user initiates the service of sending emails, the PCEF matches the PCC rule, prompting that the emails sent by the user will be forwarded to the spam filtering device for filtering, and the PCEF forwards the user message to the anti-spam filtering device according to the requirements .

It can be seen from the above implementation that the embodiment provides a new business model for operation. Through the control of redirection information, a simplified method is provided for the expansion of business functions. It can conveniently realize the function of controlling and managing various business flows, simplifies the deployment of services, and under the premise of ensuring the security of the equipment, it not only enhances the equipment functions, but also ensures the stability of the system.

The embodiment of the present invention also provides a system for establishing a user session bearer service. The specific implementation of the system will be described below with reference to the accompanying drawings.

Figure 8 is a schematic structural diagram of the system for establishing user session bearer services. As shown in the figure, the system includes PCRF, PCEF, request module, query module, policy module, feedback module, and execution module. The structural relationship of each module is:

The query module, the policy module and the feedback module are connected to the PCRF, and the request module and the forwarding module are connected to the PCEF.

The signal connection relationship in the work of each module is:

After the PCEF receives the establishment of the session bearer service of the UE, the request module sends a credit control request message carrying the user identification to the PCRF after the PCEF receives the UE's session bearer service establishment request; After the credit control request message, the user information is queried according to the user identification; the policy module judges and generates routing policy information according to the queried user information; the feedback module feeds back the credit control response message to the PCEF, and the credit control response message carries the route Policy information; the execution module establishes a session bearer service according to the routing policy information, and executes the user service data flow according to the routing policy in the routing policy information.

It may further include a policy formulation module connected to the PCRF, configured to set the routing policy according to user subscription information and/or network performance.

User subscription information is the subscription information of one or a combination of the content filtering function, anti-spam filtering function, and anti-virus filtering function required by the user when signing up; and/or, the network performance is determined according to the content filtering device, anti-spam filtering device , the load performance of one of the antivirus filtering devices or their combination in the network.

The routing policy information includes the redirection address of the user service data flow, and the policy module may include a selection unit and a polling unit, wherein:

A selection unit, configured to select an optional user service data flow redirection address in the routing policy information;

A polling unit, configured to determine a user service data flow redirection address among the optional user service data flow redirection addresses by polling.

In order to better improve user service experience, the policy module may further include a redirection purpose query unit, which is used to query user service data flow redirection processing type information according to the user information; the feedback module is further used to use the user service Data flow redirection processing type information is fed back to PCEF.

The system may further include a prompting module, which is used to feed back the user's service data flow redirection processing type information to the user.

In practice, the query module can be connected with SPR and network management system; after receiving the credit control request message, it can query user information in SPR and/or network management system according to the user identification.

The embodiment of the present invention also provides a policy control and charging rule functional entity. The specific implementation manner of PCRF will be described below with reference to the accompanying drawings.

Figure 9 is a schematic structural diagram of the policy control and charging rule functional entity, as shown in the figure, the PCRF includes:

A query module, configured to query user information according to the user identifier after receiving the credit control request message sent by the PCEF;

A policy module, configured to judge and generate routing policy information according to the queried user information;

A feedback module, configured to feed back a credit control response message to the PCEF, where the credit control response message carries the routing policy information, and the PCEF establishes a session bearer service according to the routing policy information, and processes the user service data flow according to the specified Routing policy execution in the routing policy information described above.

The PCRF may further include a policy formulation module, configured to set the routing policy according to user subscription information and/or network performance.

User signing information is the signing information of one or a combination of the content filtering function, anti-spam filtering function, and anti-virus filtering function required by the user when signing up;

The network performance is based on the load performance of one of the content filtering device, the anti-spam filtering device, the anti-virus filtering device or a combination thereof in the network.

The routing policy information includes the redirection address of the user service data flow, and the policy module may include a selection unit and a polling unit, wherein:

A selection unit, configured to select an optional user service data flow redirection address in the routing policy information;

A polling unit, configured to determine a user service data flow redirection address among the optional user service data flow redirection addresses by polling.

The policy module may further include a redirection purpose query unit, which is used to query the user service data flow redirection processing type information according to the queried user information; the feedback module is further used to feed back the user service data flow redirection processing type information to PCEF.

In practice, the inquiry module is connected with SPR and/or the network management system, and after receiving the credit control request message, searches the user information in the SPR and/or the network management system according to the user identification.

The embodiment of the present invention also provides a policy and charging enforcement entity. The specific implementation of the PCEF will be described below with reference to the accompanying drawings.

Figure 10 is a schematic diagram of the structure of the policy and charging enforcement entity. As shown in the figure, the PCEF includes:

The requesting module, after the PCEF receives the UE's session bearer service establishment request, sends a credit control request message carrying the user identifier to the PCRF, and the credit control message is used to trigger the PCRF to feed back a credit control response message carrying routing policy information;

The execution module establishes the session bearer service according to the routing policy information, and executes the user service data flow according to the routing policy in the routing policy information.

In order to improve the user's service experience, it may further include a prompting module, which is used to feed back the user's service data flow redirection processing type information fed back by the PCRF to the user.

As can be seen from the above embodiments, the embodiment of the present invention aims at changing the original destination of the message, redirecting it to an external device to establish a user session bearer service, so as to perform content filtering, anti-spam filtering, and anti-virus filtering For security purposes, PCRF can define services as whether content filtering, anti-spam filtering, and anti-virus filtering are required based on user subscription data or operator-defined policies.

At the same time, PCRF can select the device according to the configuration of the filtering device, and pass the filtering type to be performed on the service flow and the service address information of the redirected user session to the PCEF through the Gx interface with the PCEF, so that The bearer layer entity PCEF can perform corresponding differentiated processing on the user service flow according to the filtering type and redirection address issued by the Gx interface.

Obviously, those skilled in the art can make various changes and modifications to the present invention without departing from the spirit and scope of the present invention. Thus, if these modifications and variations of the present invention fall within the scope of the claims of the present invention and their equivalent technologies, the present invention also intends to include these modifications and variations.

Claims (25)

1. A user session bearer service establishment method, characterized in that, comprising the steps of: After the policy and charging enforcement entity receives the session bearer service establishment request of the user equipment, it sends a credit control request message carrying the user identifier to the policy control and charging rule functional entity; After receiving the credit control request message, the policy control and charging rule functional entity queries user information according to the user identifier; After the policy control and charging rule functional entity makes judgments based on the queried user information and generates routing policy information, it feeds back a credit control response message to the policy and charging execution entity, and the credit control response message carries the routing policy information; The policy and charging enforcement entity establishes a session bearer service according to the routing policy information, and executes the user service data flow according to the routing policy in the routing policy information. 2. The method according to claim 1, wherein the queried user information includes user subscription information and/or network performance. 3. The method according to claim 2, wherein the user subscription information is the subscription information of one of the content filtering function, anti-spam filtering function, anti-virus filtering function or a combination thereof required to be provided when the user signs up; And/or, the network performance is according to the load performance in the network of one of the content filtering device, the anti-spam filtering device, the anti-virus filtering device or a combination thereof. 4. The method according to claim 1, wherein the routing policy information includes user service data flow redirection addresses, and the policy control and charging rule functional entity makes a judgment based on the queried user information and generates a routing policy After information, further include the following steps: The policy control and charging rule functional entity determines the user service data flow redirection address after polling the optional user service data flow redirection address in the routing policy information; The policy and charging enforcement entity establishes a session bearer service according to the user service data flow redirection address. 5. The method according to claim 4, wherein the routing policy information further includes user service data flow redirection processing type, After the policy control and charging rule functional entity judges according to the queried user information and obtains the user service data flow redirection address and the user service data flow redirection processing type information, the user service data flow redirection processing Type information is fed back to policy and charging enforcement entities. 6. The method according to claim 5, further comprising the steps of: The policy and charging enforcement entity establishes a session bearer service according to the routing policy information, and executes a corresponding routing policy on the user service data flow according to the user service data flow redirection processing type. 7. The method according to claim 6, further comprising the steps of: The policy and charging enforcement entity feeds back the user service data flow redirection processing type information to the user equipment. 8. The method according to claim 5, 6 or 7, wherein the user service data flow redirection processing type includes one of content filtering device, anti-spam filtering device, anti-virus filtering device or a combination thereof. 9. The method according to claim 1, characterized in that, after receiving the credit control request message, the policy control and charging rule functional entity searches the user subscription data database and/or the network management system according to the user identification User Info. 10. The method according to claim 1, wherein the policy control and charging rule functional entity feeds back the user service data flow redirection address to the policy and charging enforcement through the Gx interface using a credit control response message entity. 11. A user session bearer service establishment system, characterized in that it includes a policy control and charging rule functional entity, a policy and charging enforcement entity, and it is characterized in that it also includes: The request module is connected to the policy and charging enforcement entity, and is used to send a credit control request carrying the user identification to the policy control and charging rule functional entity after the policy and charging enforcement entity receives the session bearer service establishment request of the user equipment information; The query module is connected to the policy control and charging rule functional entity, and is used to query user information according to the user identification after receiving the credit control request message sent by the request module; The policy module is connected to the policy control and charging rule functional entity, and is used to judge and generate routing policy information according to the queried user information; The feedback module is connected to the policy control and charging rule functional entity, and is used to feed back a credit control response message to the policy and charging enforcement entity, and the credit control response message carries the routing policy information; The execution module is connected to the policy and charging execution entity, and is used to establish a session bearer service according to the routing policy information, and execute the user service data flow according to the routing policy in the routing policy information. 12. The system according to claim 11, further comprising a policy formulation module, connected to the policy control and charging rule functional entity, for setting the routing policy according to user subscription information and/or network performance. 13. The system according to claim 12, wherein the user subscription information is the subscription information of one of the content filtering function, anti-spam filtering function, anti-virus filtering function or a combination thereof required to be provided when the user signs up; And/or, the network performance is according to the load performance in the network of one of the content filtering device, the anti-spam filtering device, the anti-virus filtering device or a combination thereof. 14. The system according to claim 11, wherein the routing policy information includes user business data flow redirection addresses, and the policy module includes a selection unit and a polling unit, wherein: A selection unit, configured to select an optional user service data flow redirection address in the routing policy information; A polling unit, configured to determine a user service data flow redirection address among the optional user service data flow redirection addresses by polling. 15. The system according to claim 11, wherein the policy module further includes a redirection purpose query unit, configured to query user service data flow redirection processing type information according to the queried user information; The feedback module is further configured to feed back the user service data flow redirection processing type information to the policy and charging enforcement entity. 16. The system according to claim 15, further comprising a prompting module, configured to feed back the user service data flow redirection processing type information to the user. 17. The system according to claim 11, characterized in that the query module is connected to the user subscription data database and/or the network management system; after receiving the credit control request message, the query module finds the user subscription information according to the user identification. Query user information in the data database and/or network management system. 18. A policy control and charging rule functional entity, characterized by comprising: A query module, configured to query user information according to the user identifier after receiving the credit control request message sent by the policy and charging enforcement entity; A policy module, configured to judge and generate routing policy information according to the queried user information; A feedback module, configured to feed back a credit control response message to the policy and charging enforcement entity, where the credit control response message carries the routing policy information, and the routing policy information is used to make the policy and charging enforcement entity according to The routing policy information establishes a session bearer service, and executes the user service data flow according to the routing policy in the routing policy information. 19. The policy control and charging rule functional entity according to claim 18, further comprising a policy formulation module, configured to set the routing policy according to user subscription information and/or network performance. 20. The policy control and charging rule functional entity according to claim 19, wherein the user subscription information is one of the content filtering function, anti-spam filtering function, and anti-virus filtering function required to be provided when the user signs up or the signing information of its combination; And/or, the network performance is according to the load performance in the network of one of the content filtering device, the anti-spam filtering device, the anti-virus filtering device or a combination thereof. 21. The policy control and charging rule functional entity according to claim 18, wherein the routing policy information includes user service data flow redirection addresses, and the policy module includes a selection unit and a polling unit, wherein: A selection unit, configured to select an optional user service data flow redirection address in the routing policy information; A polling unit, configured to determine a user service data flow redirection address among the optional user service data flow redirection addresses by polling. 22. The policy control and charging rule functional entity according to claim 18, wherein the policy module further includes a redirection purpose query unit, which is used to query user service data flow redirection based on the queried user information processing type information; The feedback module is further configured to feed back the user service data flow redirection processing type information to the policy and charging enforcement entity. 23. The policy control and charging rule functional entity according to claim 18, wherein the query module is connected to the user subscription data database and/or the network management system, and after receiving the credit control request message, according to the user Identify and query user information in the user subscription data database and/or network management system. 24. A policy and charging enforcement entity, comprising: The request module is configured to send a credit control request message carrying a user identifier to the policy control and charging rule functional entity after the policy and charging enforcement entity receives the session bearer service establishment request of the user equipment, and the credit control message is used for triggering the policy control and charging rule functional entity to feed back a credit control response message carrying routing policy information; An execution module, configured to establish a session bearer service according to the routing policy information, and execute the user service data flow according to the routing policy in the routing policy information. 25. The policy and charging enforcement entity according to claim 24, further comprising a prompting module, configured to feed back user service data flow redirection processing type information fed back by the policy control and charging rule functional entity user.

Images