CN110166414B

CN110166414B - Communication method, device and system

Info

Publication number: CN110166414B
Application number: CN201810153171.6A
Authority: CN
Inventors: 朱强华; 吴问付; 李汉成; 姚琦
Original assignee: Huawei Technologies Co Ltd
Current assignee: Huawei Technologies Co Ltd
Priority date: 2018-02-14
Filing date: 2018-02-14
Publication date: 2021-10-26
Anticipated expiration: 2038-02-14
Also published as: CN110166414A; WO2019157968A1

Abstract

Embodiments of the present application provide a communication method, device, and system, wherein the method may include the following steps: a session management network element obtains Ethernet frame structure information available for an Ethernet session; the session management network element obtains Ethernet frame structure information available for an Ethernet session; The structure information generates a filtering rule, and the filtering rule includes the Ethernet frame structure information available for the Ethernet session; the session management network element sends the filtering rule to the user plane function network element. By adopting the embodiments of the present application, the problem in the prior art that only Ethernet data packets with illegal MAC addresses can be filtered can be solved.

Description

Communication method, device and system

Technical Field

The embodiment of the application relates to the technical field of communication, in particular to a communication method, device and system.

Background

Fifth generation mobile communications (5)^thGeneration, 5G) system can support three session types, Internet Protocol (IP) session, ethernet session, and unstructured session.

The process of establishing the ethernet session may include: 1, a terminal (e.g., a User Equipment (UE)) requests an ethernet session establishment to a network, and the UE sends the ethernet session establishment request to a Session Management Function (SMF) through an access and mobility management function (AMF); 2, the SMF obtains a list of available Media Access Control (MAC) addresses from a data network-authentication authorization and accounting (DN-AAA); 3, the SMF provides a quality of service (QoS) rule (rule) for the UE according to the MAC address and the ethernet frame structure of the UE, and provides a forwarding rule (forwarding rule) for a User Plane Function (UPF); 4, the SMF sets a filtering rule (filtering rule) for the UPF according to the available MAC address list; and 5, discarding the Ethernet data packet of the non-legal MAC address by the UPF according to the filtering rule, and binding the MAC address of the UE with a proper Protocol Data Unit (PDU) session under the condition of receiving the MAC address sent by the UE to forward data.

Currently, regardless of the type of packet, an ethernet session is established according to the above procedure. However, if the ethernet session is established according to the above process, only ethernet packets with non-legal MAC addresses can be filtered, and different types of packets cannot be filtered.

Disclosure of Invention

The technical problem to be solved by the embodiments of the present application is to provide a communication method, apparatus and system, which solve the problem that in the prior art, only ethernet packets with non-legal MAC addresses can be filtered.

A first aspect of an embodiment of the present application provides a communication apparatus, including:

a session management network element acquires the available Ethernet frame structure information of an Ethernet session;

the session management network element generates a filtering rule according to the Ethernet frame structure information available for the Ethernet session, wherein the filtering rule comprises the Ethernet frame structure information available for the Ethernet session;

and the session management network element sends the filtering rule to the user plane function network element.

In a first aspect, the session management network element generates a filtering rule according to the obtained ethernet frame structure information available for the ethernet session, and sends the filtering rule to the user plane function network element, so that the user plane function network element can perform targeted filtering according to the ethernet frame structure information included in the filtering rule.

With reference to the first aspect, in a possible implementation manner, the ethernet frame structure information includes at least one of an ethernet protocol type and a Virtual Local Area Network (VLAN) tag. The ethernet protocol type is used to identify which type of ethernet protocol or protocol of the ethernet protocol encapsulation is. The ethernet protocol type may be an ethernet protocol type defined by 802.3, or an ethernet protocol type defined by 802.1 q. The protocol encapsulated by the ethernet protocol may be an IP protocol, an address resolution protocol, a reverse address resolution protocol, a multi-protocol label conversion protocol, etc. The VLAN tag may include at least one of a VLAN identification, a priority code point, and a drop eligibility indication. Different Ethernet protocol types or protocols encapsulated by the Ethernet protocol are distinguished through Ethernet frame structure information, so that the SMF generates a filtering rule to realize targeted filtering.

With reference to the first aspect, in a possible implementation manner, the session management network element may generate the forwarding rule while or after generating the filtering rule, and send the forwarding rule to the user plane function network element. The session management network element may generate the forwarding rule according to the ethernet frame structure information available for the ethernet session, or may generate the forwarding rule according to the ethernet filter available for the ethernet session and the ethernet frame structure information available for the ethernet session. The forwarding rule can be used for forwarding processing of the user plane functional network element.

With reference to the first aspect, in one possible implementation manner, the forwarding rule includes path forwarding information available for the ethernet session and ethernet frame structure information available for the ethernet session, or includes path forwarding information available for the ethernet session and ethernet filter available for the ethernet session, or includes path forwarding information available for the ethernet session, ethernet filter available for the ethernet session and ethernet frame structure information available for the ethernet session. The forwarding rule is used for the policy control network element to forward the data packet to a path matched with the Ethernet frame structure information of the data packet, so that the targeted forwarding is realized according to the Ethernet frame structure information of the data packet.

The path forwarding information available for the ethernet session includes at least one of forwarding path information between the user plane function network element and another user plane function network element, forwarding path information between the user plane function network element and the access network, and forwarding path information between the user plane function network element and the data network.

Wherein, the forwarding path information between the user plane function network element and another user function network element may include N9 tunnel information. The forwarding path information between the user plane function network element and the access network may include at least one of a tunnel identifier, an IP address of the access network, and a tunnel endpoint identifier. The forwarding path information between the user plane function network element and the data network may comprise at least one of a data network access identification, a data network name, a network address translation identification/address, N6 tunnel information.

With reference to the first aspect, in a possible implementation manner, the session management network element may obtain, by the policy control network element, ethernet frame structure information available for the ethernet session, and specifically, the session management network element sends, to the policy control network element, ethernet frame structure information available for the ethernet session, and receives, from the policy control network element, the ethernet frame structure information available for the ethernet session, where the ethernet frame structure information available for the ethernet session includes the ethernet frame structure information available for the ethernet session after adjustment.

The first ethernet frame structure information available for the ethernet session in the ethernet session establishment request received by the session management network element may be ethernet frame structure information supported by the terminal; the second ethernet frame structure information available for the ethernet session in the subscription information received by the session management network element may be the ethernet frame structure information subscribed by the terminal; the third ethernet frame structure information available for the ethernet session in the authentication authorization response received by the session management network element may be ethernet frame structure information supported by the data network; may be fourth ethernet frame structure information available for the ethernet session in the event report received by the session management network element, and the fourth ethernet frame structure information available for the ethernet session may be ethernet frame structure information available for the terminal; but also ethernet frame structure information available to the terminal encapsulated by an ethernet filter received by the session management network element, etc.

With reference to the first aspect, in a possible implementation manner, the session management unit may obtain, by receiving the ethernet session establishment request, ethernet frame structure information available for the ethernet session, where the ethernet session establishment request includes first ethernet frame structure information available for the ethernet session, and the first ethernet frame structure information available for the ethernet session may be ethernet frame structure information supported by the terminal, that is, the session management network element determines the ethernet frame structure information supported by the terminal included in the ethernet session establishment request as the ethernet frame structure information available for the ethernet session.

With reference to the first aspect, in a possible implementation manner, the session management network element may obtain, by using subscription information of the data management network element, ethernet frame structure information available for the ethernet session, where the subscription information is subscription information of the terminal and includes second ethernet frame structure information available for the ethernet session, and the second ethernet frame structure information available for the ethernet session may be ethernet frame structure information signed by the terminal, that is, the session management network element determines the ethernet frame structure information signed by the terminal as the ethernet frame structure information available for the ethernet session.

With reference to the first aspect, in a possible implementation manner, the session management network element may obtain, through an authentication authorization response of the authentication authorization network element, the ethernet frame structure information available for the ethernet session, where the authentication authorization response includes third ethernet frame structure information available for the ethernet session, and the third ethernet frame structure information available for the ethernet session may be ethernet frame structure information supported by the data network, that is, the session management network element determines the ethernet frame structure information supported by the data network by the terminal as the ethernet frame structure information available for the ethernet session.

With reference to the first aspect, in a possible implementation manner, the session management network element may obtain, by an event report of the user plane function network element, ethernet frame structure information available for the ethernet session, where the event report includes fourth ethernet frame structure information available for the ethernet session, and the fourth ethernet frame structure information available for the ethernet session may be ethernet frame structure information available for the terminal, and the session management network element determines the ethernet frame structure information available for the terminal as the ethernet frame structure information available for the ethernet session.

With reference to the first aspect, in a possible implementation manner, when obtaining available ethernet frame structure information of an ethernet session through an event report of a user plane function network element, a session management network element first receives an authentication authorization response from an authentication authorization network element, where the authentication authorization response includes an available Media Access Control (MAC) list and a profile index; then sending the available MAC address list and the configuration file index to a policy control network element so that the policy control network element generates an event trigger, wherein the event trigger comprises an MAC address in the available MAC address list or available Ethernet frame structure information of a terminal; and then sending the event trigger to the user plane function network element so that the user plane function network element sends an event report to the session management network element, wherein the event report comprises the available Ethernet frame structure information of the terminal, so that the session management network element determines the available Ethernet frame structure information of the terminal as the available Ethernet frame structure information of the Ethernet session, and the purpose of acquiring the available Ethernet frame structure information of the Ethernet session through the user plane function network element is achieved.

With reference to the first aspect, in a possible implementation manner, a session management network element may obtain available ethernet frame structure information of an ethernet session through a terminal, and specifically, the session management network element first receives an authentication authorization response from an authentication authorization network element, where the authentication authorization response includes an available MAC address list and a configuration file index; then sending the available MAC address list and the configuration file index to a policy control network element so that the policy control network element generates an event terminal routing strategy, wherein the terminal routing strategy comprises available Ethernet frame structure information of a terminal; and then the session management network element receives an Ethernet session modification request from the terminal, wherein the Ethernet session modification request comprises an Ethernet filter, the Ethernet filter encapsulates the Ethernet frame structure information available for the terminal, the session management network element can determine the Ethernet frame structure information available for the terminal encapsulated by the Ethernet filter as the Ethernet frame structure information available for the Ethernet session, or send the Ethernet filter to the policy control network element, the policy control network element adjusts the Ethernet frame structure information available for the terminal, and the adjusted Ethernet frame structure information available for the terminal fed back by the policy control network element determines the Ethernet frame structure information available for the Ethernet session.

A second aspect of an embodiment of the present application provides a session management network element, where the session management network element has a function of implementing the method provided in the first aspect. The functions may be implemented by hardware, or by hardware executing corresponding software. The hardware or software includes one or more units corresponding to the above functions.

In one possible implementation, the session management network element includes: a processing unit and a transceiver unit; a transceiver unit, configured to acquire ethernet frame structure information available for an ethernet session; the processing unit is used for generating a filtering rule according to the Ethernet frame structure information available for the Ethernet session, and the filtering rule comprises the Ethernet frame structure information available for the Ethernet session; and the transceiver module is also used for sending the filtering rule to the user plane functional network element.

In one possible implementation, the session management network element includes: a processor, a transceiver and a memory, wherein the transceiver is used for receiving and transmitting information, the memory stores computer execution instructions, the processor is connected with the memory and the transceiver through a bus, and the processor executes the computer execution instructions stored in the memory to make the session management network element execute the following operations: acquiring available Ethernet frame structure information of an Ethernet session; the device comprises a filter module, a first module and a second module, wherein the filter module is used for generating a filter rule according to the Ethernet frame structure information available for the Ethernet session, and the filter rule comprises the Ethernet frame structure information available for the Ethernet session; and sending the filtering rule to the user plane function network element.

Based on the same inventive concept, as the principle and the beneficial effects of the session management network element for solving the problems can refer to the method described in the first aspect and the beneficial effects brought by the method, the implementation of the session management network element can refer to the implementation of the method, and repeated details are not repeated.

A third aspect of the embodiments of the present application provides a computer-readable storage medium, having stored therein instructions, which, when executed on a computer, cause the computer to perform the method of the first aspect.

A fourth aspect of the embodiments of the present application provides a computer program product containing instructions, which when run on a computer, causes the computer to perform the method according to the first aspect.

A fifth aspect of the embodiments of the present application provides a communication method, including:

the method comprises the steps that a policy control network element receives Ethernet frame structure information which is initially available for an Ethernet session from a session management network element;

the strategy control network element adjusts the Ethernet frame structure information available for the Ethernet session initially to obtain the Ethernet frame structure information available for the Ethernet session, wherein the Ethernet frame structure information available for the Ethernet session comprises the adjusted Ethernet frame structure information available for the Ethernet session initially;

and the policy control network element sends the Ethernet frame structure information available for the Ethernet session to the session management network element.

In a fifth aspect, the policy control network element may adjust the initially available ethernet frame structure information of the ethernet session to meet the network or application requirements, and send the adjusted initially available ethernet frame structure information of the ethernet session to the session management network element, thereby facilitating the session management network element to generate a filtering rule meeting the network or application requirements.

With reference to the fifth aspect, in a possible implementation manner, when obtaining the ethernet frame structure information available for the ethernet session, the policy control network element generates an ethernet filter available for the ethernet session according to the ethernet frame structure information available for the ethernet session, and sends the ethernet filter available for the ethernet session to the session management network element, so that the session management network element generates the forwarding rule.

With reference to the fifth aspect, in a possible implementation manner, the policy control network element adjusts initially available ethernet frame structure information of the ethernet session according to the policy information to obtain available ethernet frame structure information of the ethernet session, where the policy information includes ethernet frame structure information allowed by local configuration or application, that is, the policy control network element deletes, according to the policy information, ethernet frame structure information that is unmatched with the policy information in the initially available ethernet frame structure information of the ethernet session, so that the available ethernet frame structure information of the ethernet session meets the local configuration or application requirement.

With reference to the fifth aspect, in a possible implementation manner, the policy control network element receives the configuration file index from the session management network element, and determines the policy information according to the configuration file index, that is, searches the policy information corresponding to the configuration file index. The policy control network element determines policy information for adjusting the initially available ethernet frame structure information of the ethernet session in accordance with the policy information.

With reference to the fifth aspect, in a possible implementation manner, the available MAC address list and the profile index from the session management network element are received, an event trigger is generated according to the available MAC address list and the profile index, the event trigger includes a MAC address in the available MAC address list of the terminal or available ethernet frame structure information of the terminal, and the event trigger is sent to the session management network element.

With reference to the fifth aspect, in a possible implementation manner, the policy control network element receives an available MAC address list and a profile index from the session management network element; and generating a terminal routing strategy according to the available MAC address list and the configuration file index, wherein the terminal routing strategy is used for triggering the terminal to modify the Ethernet session, and the strategy control network element can send the terminal routing strategy to the terminal through the access management network element.

A sixth aspect of the present embodiment provides a policy control network element, where the policy control network element has a function of implementing the method provided in the fifth aspect. The functions may be implemented by hardware, or by hardware executing corresponding software. The hardware or software includes one or more units corresponding to the above functions.

In one possible implementation manner, the policy control network element includes: a processing unit and a transceiver unit; a receiving and sending unit, configured to receive ethernet frame structure information initially available for an ethernet session from a session management network element; the processing unit is used for adjusting the initially available Ethernet frame structure information of the Ethernet session to obtain the available Ethernet frame structure information of the Ethernet session, wherein the available Ethernet frame structure information of the Ethernet session comprises the adjusted initially available Ethernet frame structure information of the Ethernet session; and the transceiver unit is further configured to send ethernet frame structure information available for the ethernet session to the session management network element.

In one possible implementation manner, the policy control network element includes: a processor, a transceiver and a memory, wherein the transceiver is used for receiving and transmitting information, the memory stores computer execution instructions, the processor is connected with the memory and the transceiver through a bus, and the processor executes the computer execution instructions stored in the memory to make the policy control network element execute the following operations: receiving Ethernet frame structure information which is initially available for the Ethernet session from a session management network element; adjusting the initially available Ethernet frame structure information of the Ethernet session to obtain the available Ethernet frame structure information of the Ethernet session, wherein the available Ethernet frame structure information of the Ethernet session comprises the adjusted initially available Ethernet frame structure information of the Ethernet session; and sending the Ethernet frame structure information available for the Ethernet session to a session management network element.

Based on the same inventive concept, as the principle and the beneficial effects of the policy control network element for solving the problems can refer to the method and the beneficial effects brought by the method in the fifth aspect, the implementation of the policy control network element can refer to the implementation of the method, and repeated details are not repeated.

A seventh aspect of embodiments of the present application provides a computer-readable storage medium, having stored therein instructions, which, when executed on a computer, cause the computer to perform the method of the fifth aspect.

An eighth aspect of the embodiments of the present application provides a computer program product containing instructions, which when run on a computer, causes the computer to perform the method according to the fifth aspect.

A ninth aspect of the present application provides a communication method, including:

the user plane function network element receives a filtering rule from the session management network element, wherein the filtering rule comprises available Ethernet frame structure information of the Ethernet session;

the user plane functional network element transmits the data packet under the condition that the Ethernet frame structure information of the data packet is matched with the Ethernet frame structure information available for the Ethernet session;

or, the user plane functional network element discards the data packet when the ethernet frame structure of the data packet does not match the ethernet frame structure information available for the ethernet session.

In a ninth aspect, the user plane functional network element may perform a local filtering on the data packet in combination with the filtering rule and the ethernet frame structure information of the data packet.

With reference to the ninth aspect, in a possible implementation manner, the user plane function network element further receives a forwarding rule from the session management network element, where the forwarding rule includes path forwarding information available for the ethernet session and ethernet frame structure information available for the adjusted ethernet session; or, the path forwarding information available for the ethernet session and the ethernet filter available for the adjusted ethernet session are included; or include path forwarding information available for the ethernet session, ethernet filters available for the ethernet session, and ethernet frame structure information available for the adjusted ethernet session. The user plane functional network element can forward the data packet in a targeted manner according to the forwarding rule.

With reference to the ninth aspect, in a possible implementation manner, the user plane function network element performs targeted forwarding on the data packet according to a forwarding rule when the ethernet frame structure information of the data packet matches with the ethernet frame structure information available for the ethernet session.

With reference to the ninth aspect, in a possible implementation manner, in a case that the user plane function network element receives an event trigger, where the event trigger includes a media access control address of the terminal or ethernet frame structure information available to the terminal, an event report is sent to the session management network element, where the event report includes the ethernet frame structure information available to the terminal, so that the session management network element determines the ethernet frame structure information available to the terminal as the ethernet frame structure information available to the ethernet session.

A tenth aspect of the present embodiment provides a user plane functional network element, where the user plane functional network element has a function of implementing the method provided in the ninth aspect. The functions may be implemented by hardware, or by hardware executing corresponding software. The hardware or software includes one or more units corresponding to the above functions.

In one possible implementation manner, the user plane function network element includes: a processing unit and a transceiver unit; a transceiver unit, configured to receive a filtering rule from a session management network element, where the filtering rule includes ethernet frame structure information available for an ethernet session; the processing unit is used for forwarding the data packet under the condition that the Ethernet frame structure information of the data packet is matched with the Ethernet frame structure information available for the Ethernet session;

or, the processing unit is used for discarding the data packet when the Ethernet frame structure of the data packet does not match with the Ethernet frame structure information available for the Ethernet session.

In one possible implementation manner, the user plane function network element includes: a processor, a transceiver and a memory, wherein the transceiver is used for receiving and transmitting information, the memory stores computer execution instructions, the processor is connected with the memory and the transceiver through a bus, and the processor executes the computer execution instructions stored in the memory to make the user plane function network element execute the following operations: receiving a filtering rule from a session management network element, wherein the filtering rule comprises Ethernet frame structure information available for Ethernet session; under the condition that the Ethernet frame structure information of the data packet is matched with the Ethernet frame structure information available for the Ethernet session, forwarding the data packet; or, in case the ethernet frame structure of the packet does not match the ethernet frame structure information available for the ethernet session, the packet is discarded.

Based on the same inventive concept, as the principle and the beneficial effects of the user plane functional network element for solving the problems can refer to the method and the beneficial effects brought by the method described in the ninth aspect, the implementation of the policy control network element can refer to the implementation of the method, and repeated details are not repeated.

An eleventh aspect of embodiments of the present application provides a computer-readable storage medium having stored therein instructions, which, when executed on a computer, cause the computer to perform the method of the ninth aspect.

A twelfth aspect of embodiments of the present application provides a computer program product comprising instructions that, when run on a computer, cause the computer to perform the method of the ninth aspect described above.

A thirteenth aspect of embodiments of the present application provides a communication method, including:

the terminal receives a terminal routing strategy from the strategy control network element;

the terminal detects whether the Ethernet frame structure information of the data packet meets a terminal routing strategy;

and the terminal triggers the modification of the Ethernet session under the condition that the Ethernet frame structure information of the data packet is detected to meet the routing strategy of the terminal.

The terminal routing strategy comprises a non-IP descriptor, and the non-IP descriptor is used for indicating the Ethernet frame structure information available for the terminal. When a terminal is about to send an uplink data packet, whether the Ethernet frame structure information of the uplink data packet is matched with the Ethernet frame structure information indicated by the non-IP descriptor is detected, and under the condition of matching, the Ethernet frame structure information of the uplink data packet is determined to meet a terminal routing strategy.

The terminal triggers the ethernet session modification, i.e. the terminal sends an ethernet filter to the session management network element, which encapsulates the ethernet frame structure information available to the terminal. The terminal may send the ethernet filter to the session management element through the access management element.

In a thirteenth aspect, the terminal triggers an ethernet session modification according to the terminal routing policy, and the session management network element acquires the ethernet frame structure information available to the terminal by carrying an ethernet filter in the ethernet session modification request.

A fourteenth aspect of an embodiment of the present application provides a terminal, where the terminal has a function of implementing the method provided in the thirteenth aspect. The functions may be implemented by hardware, or by hardware executing corresponding software. The hardware or software includes one or more units corresponding to the above functions.

In one possible implementation, the terminal includes: a processing unit and a transceiver unit; a receiving and sending unit, which is used for receiving a terminal routing strategy from a strategy control network element; the processing unit is used for detecting whether the Ethernet frame structure information of the data packet meets the terminal routing strategy; and the transceiving unit is further used for triggering modification of the Ethernet session when the processing unit detects that the Ethernet frame structure information of the data packet meets the terminal routing policy.

In one possible implementation, the terminal includes: a processor, a transceiver and a memory, wherein the transceiver is used for receiving and transmitting information, the memory stores computer execution instructions, the processor is connected with the memory and the transceiver through a bus, and the processor executes the computer execution instructions stored in the memory to make the user plane function network element execute the following operations: receiving a terminal routing strategy from a strategy control network element; detecting whether the Ethernet frame structure information of the data packet meets a terminal routing strategy; and triggering Ethernet session modification under the condition that the Ethernet frame structure information of the data packet is detected to meet the terminal routing strategy.

Based on the same inventive concept, as the principle and the beneficial effects of the terminal for solving the problems can refer to the method and the beneficial effects brought by the method in the thirteenth aspect, the implementation of the terminal can refer to the implementation of the method, and repeated details are not repeated.

A fifteenth aspect of embodiments of the present application provides a computer-readable storage medium having stored therein instructions, which, when executed on a computer, cause the computer to perform the method of the thirteenth aspect.

A sixteenth aspect of embodiments of the present application provides a computer program product comprising instructions that, when run on a computer, cause the computer to perform the method of the thirteenth aspect.

A seventeenth aspect of an embodiment of the present application provides a communication system, including:

a session management network element acquires the available Ethernet frame structure information of an Ethernet session; generating a filtering rule according to the Ethernet frame structure information available for the Ethernet session, wherein the filtering rule comprises the Ethernet frame structure information available for the Ethernet session; sending the filtering rule to a user plane function network element;

and the user plane function network element receives the filtering rule.

In a seventeenth aspect, the session management network element sends the generated filtering rule carrying the ethernet frame structure information available for the ethernet session to the user plane functional network element, so that the user plane functional network element performs targeted filtering processing according to the filtering rule.

With reference to the seventeenth aspect, in a possible implementation manner, the user plane functional network element performs forwarding processing on the data packet when the ethernet frame structure information of the data packet matches with the ethernet frame structure information available for the ethernet session; or, the user plane functional network element discards the data packet under the condition that the ethernet frame structure of the data packet is not matched with the ethernet frame structure information available for the ethernet session, thereby implementing the targeted filtering processing of the user plane functional network element according to the ethernet frame structure information of the data packet.

With reference to the seventeenth aspect, in a possible implementation manner, the session management network element generates a forwarding rule and sends the forwarding rule to the user plane functional network element, and the user plane functional network element receives the forwarding rule and performs forwarding processing according to the forwarding rule.

The forwarding rule comprises available path forwarding information of the Ethernet session and the adjusted available Ethernet frame structure information of the Ethernet session; or, the path forwarding information available for the ethernet session and the ethernet filter available for the adjusted ethernet session are included; or include path forwarding information available for the ethernet session, ethernet filters available for the ethernet session, and ethernet frame structure information available for the adjusted ethernet session.

With reference to the seventeenth aspect, in a possible implementation manner, the session management network element sends ethernet frame structure information initially available for the ethernet session to the policy control network element, and the policy control network element adjusts the ethernet frame structure information initially available for the ethernet session under the condition that the policy control network element receives the ethernet frame structure information initially available for the ethernet session, so as to obtain the ethernet frame structure information available for the ethernet session, thereby implementing dynamic adjustment of the ethernet frame structure information by the policy control network element.

An eighteenth aspect of embodiments of the present application provides a communication system, including a session management network element and a user plane function network element,

the session management network element is used for acquiring the available Ethernet frame structure information of the Ethernet session; generating a filtering rule according to the Ethernet frame structure information available for the Ethernet session, wherein the filtering rule comprises the Ethernet frame structure information available for the Ethernet session; sending a filtering rule to a user plane function network element;

and the user plane function network element is used for receiving the filtering rule.

In the eighteenth aspect, the session management network element sends the generated filtering rule carrying the ethernet frame structure information available for the ethernet session to the user plane functional network element, so that the user plane functional network element performs targeted filtering processing according to the filtering rule.

In the system provided by the fourteenth aspect of the embodiment of the present application, the session management network element is configured to execute the method provided by the first aspect, and the user plane function network element is configured to execute the method provided by the ninth aspect.

With reference to the fourteenth aspect, in a possible implementation manner, the system further includes a policy control network element, where the policy control network element is configured to execute the method provided in the fifth aspect.

With reference to the fourteenth aspect, in a possible implementation manner, the system further includes a terminal, and the terminal is configured to execute the method provided in the thirteenth aspect.

Drawings

In order to more clearly illustrate the technical solutions in the embodiments or the background art of the present application, the drawings required to be used in the embodiments or the background art of the present application will be described below.

FIG. 1 is a schematic diagram of a network architecture to which embodiments of the present application are applied;

fig. 2 is a schematic network architecture of a fifth generation mobile communication system;

fig. 3 is a flowchart illustrating a communication method according to an embodiment of the present application;

fig. 4 is a flowchart illustrating a communication method according to a second embodiment of the present application;

fig. 5 is a flowchart illustrating a communication method according to a third embodiment of the present application;

fig. 6 is a schematic flowchart of a communication method according to a fourth embodiment of the present application;

fig. 7 is a schematic logical structure diagram of a communication device according to an embodiment of the present application;

fig. 8 is a simplified block diagram of a communication device according to an embodiment of the present disclosure.

Detailed Description

Please refer to fig. 1, which is a schematic diagram of a network architecture to which the embodiment of the present application is applied, where the network architecture includes a session management network element 101, a user plane function network element 102, and may further include a policy control network element 103, a data management network element 104, an authentication authorization network element 105, or an access management network element 106.

The session management network element 101 belongs to a core network control plane network element, is responsible for session management of a terminal, and can manage three types of sessions, i.e., an IP session, an ethernet session, and an unstructured session. The session management network element 101 may be an SMF in a 5G system, or may be a network element responsible for session management in a future communication system. In this embodiment, the session management network element 101 may obtain the available ethernet frame structure information of the ethernet session, generate the filtering rule, and communicate with the user plane function network element 102, for example, the session management network element 101 sends the filtering rule to the user plane function network element 102. The session management network element 101 may obtain the ethernet frame structure information available for the ethernet session in several ways: a, acquiring the available Ethernet frame structure information of the Ethernet session by receiving the Ethernet session establishment request from the access network management network element 106, wherein the Ethernet session establishment request can carry the Ethernet frame structure information supported by the terminal; b, acquiring ethernet frame structure information available for the ethernet session by receiving subscription information from the terminal of the data management network element 104, where the subscription information includes ethernet frame structure information subscribed by the terminal; c, acquiring the ethernet frame structure information available for the ethernet session by receiving an authentication authorization response from the authentication authorization network element 105, wherein the authentication authorization response includes the ethernet frame structure information supported by the data network. The session management network element 101 may also generate a forwarding rule, send the forwarding rule to the user plane function network element 102, and so on.

The user plane functional network element 102 belongs to a core network user plane functional network element and is responsible for performing packet forwarding according to the routing rule of the session management network element. The user plane function network element 102 may be a UPF in a 5G system, or may be a network element responsible for packet forwarding in a future communication system. In this embodiment, the user plane function network element 102 may communicate with the session management network element 101, for example, the user plane function network element 102 may receive the filtering rule from the session management network element 101. The user plane function network element 102 may also perform filtering processing on the data packet according to the filtering rule, may also receive a forwarding rule from the session management network element 101, and perform forwarding processing on the data packet according to the forwarding rule, and the like.

The policy control network element 103 belongs to a core network control plane network element and is responsible for user policy management, such as a charging policy. The policy control network element 103 may be a PCF in a 5G system, or may be a network element responsible for policy management in a future communication system. In this embodiment, the policy control network element 103 may communicate with the session management network element 101, for example, the policy control network element 103 may receive the ethernet frame structure information from the session management network element 101. The policy control network element 103 may also send the adjusted ethernet frame structure information to the session management network element 101. The policy control network element 103 is also in communication with the access management network element 106, e.g. a message may be sent to the terminal via the access management network element 106, etc.

The data management network element 104 belongs to a core network control plane network element and is responsible for managing user subscription information. The data management network element 104 may be a UDM in a 5G system, or may be a network element in a future communication system that is responsible for managing user subscription information. In this embodiment, the data management network element 104 may communicate with the session management network element 101. For example, the data management network element 104 may provide the session management network element 101 with the ethernet frame structure information for the terminal subscription.

The authentication and authorization network element 105 is responsible for secure authentication, authorization, etc. of users, e.g. of users of social applications on terminals. The authentication and authorization network element 105 may be a DN-AAA, that is, the authentication and authorization network element 105 is one of the data networks in the 5G system, and may also be a network element in the data network in the future communication system that is responsible for authorizing the user authentication. In this embodiment, the authentication and authorization network element 105 may communicate with the session management network element 101. For example, the authentication authorization network element 105 provides the session management network element 101 with ethernet frame structure information supported by the data network, a list of available Media Access Control (MAC) addresses, a profile index, and the like.

The access management network element 106 belongs to a core network control plane network element and is responsible for access management and mobility management of the terminal. The access management network element 106 may be an access and mobility management function (AMF) in a 5G system, or may be a network element responsible for access and mobility management in a future communication system. In this embodiment, the access management network element 106 may communicate with the session management network element 101, the policy control network element 103, and the terminal. For example, the access management network element 106 may receive an ethernet session establishment request from the terminal and send the ethernet session establishment request to the session management network element 101; receiving an ethernet session modification request from a terminal and sending the ethernet session modification request to the session management network element 101; a request for transmitting a non-access stratum (NAS) transport message from the policy control network element 103 may be received and a non-access stratum transport message or the like may be sent to the terminal. It is to be understood that the access management network element 106 corresponds to a transfer station between the terminal and the session management network element 101, and corresponds to a transfer station between the terminal and the policy control network element 103. It should be noted that an access network also exists between the access management network element 106 and the terminal, and the access network enables the terminal to access the network.

A terminal (terminal), which may be a UE, a Mobile Station (MS), a Mobile Terminal (MT), or the like, is a device that provides voice and/or data connectivity to a user, such as a handheld device with a wireless connection function, a vehicle-mounted device, or the like. Currently, some examples of terminals are: a mobile phone (mobile phone), a tablet computer, a notebook computer, a palm top computer, a Mobile Internet Device (MID), a wearable device, a Virtual Reality (VR) device, an Augmented Reality (AR) device, a wireless terminal in industrial control (industrial control), a wireless terminal in self driving (self driving), a wireless terminal in remote surgery (remote medical supply), a wireless terminal in smart grid (smart grid), a wireless terminal in transportation safety (smart security), a wireless terminal in city (smart city), a wireless terminal in home (smart home), and the like.

Referring to fig. 2, the network architecture diagram of the 5G system includes AN authentication server function (AUSF), Unified Data Management (UDM), access and mobility management (AMF), Session Management Function (SMF), Policy Control Function (PCF), Application Function (AF), terminal, Access Network (AN), User Plane Function (UPF), and data network (data network, DN). The access network may be a Radio Access Network (RAN).

The interface between the terminal and the AMF is AN N1 interface, (R) the interface between the AN and the AMF is AN N2 interface, (R) the interface between the AN and the UPF is AN N3 interface, the interface between the UPF and the SMF is AN N4 interface, the interface between the PCF and the AF is AN N5 interface, the interface between the UPF and the DN is AN N6 interface, the interface between the SMF and the PCF is AN N7 interface, the interface between the AMF and the UDM is AN N8 interface, the interface between the UPF and the UPF is AN N9 interface, the interface between the UDM and the SMF is AN N10 interface, the interface between the SMF and the AMF is AN N11 interface, the interface between the AMF and the AUSF is AN N12 interface, the interface between the AUSF and the UDM is AN N13 interface, the interface between the AMF and the AMF is AN N14 interface, and the interface between the AMF and the PCF is AN N15 interface.

The terminal is an entrance for interaction between a mobile user and a network, and can provide basic computing capacity and storage capacity, display a service window for the user and accept operation input of the user. The terminal establishes a signal connection, data connection, with the (R) AN, thereby transmitting control signals and traffic data to the mobile network.

The (R) AN is similar to a base station in a traditional network, is deployed at a position close to terminal equipment, provides a network access function for authorized users in a specific area, and can transmit user data by using transmission tunnels with different qualities according to the level of the users, the service requirements and the like. The (R) AN can manage the resources of the AN, reasonably utilize the resources, provide access service for the terminal according to the requirement and forward the control signal and the user data between the terminal and the core network.

The core network is responsible for maintaining subscription data of the mobile network, managing network elements of the mobile network, and providing functions of session management, mobility management, policy management, security authentication and the like for the terminal. When the terminal is attached, providing network access authentication for the terminal; when a terminal has a service request, network resources are allocated to the terminal; updating network resources for the terminal when the terminal moves; when the terminal is idle, a fast recovery mechanism is provided for the terminal; when the terminal is detached, releasing network resources for the terminal; when the terminal has service data, providing a data routing function for the terminal, such as forwarding uplink data to a data network; or receives downlink data from the data network, forwards it to the (R) AN, and then sends it to the terminal. The core network includes UPF, AUSF, AMF, SMF, UDM, PCF and AF. The core network user plane comprises UPF, and the core network control plane comprises AUSF, AMF, SMF, UDM, PCF and AF.

And the UPF executes user data packet forwarding according to the routing rule of the SMF. AUSF, responsible for the security authentication of the terminal. And the AMF is responsible for access management and mobility management of the terminal. And the SMF is responsible for session management of the terminal. And the UDM is responsible for user subscription information management. And the PCF is responsible for user policy management. And AF, responsible for user application management.

The data network is a data network for providing service for users, and generally, the client is located at a terminal, and the server is located at the data network. The data network may be a private network, such as a local area network, an external network that is not controlled by an operator, such as the Internet (Internet), or a private network that is co-deployed by an operator, such as for configuring an IP multimedia network subsystem (IMS) service.

In this embodiment, each network element in the network architecture shown in fig. 1 may be introduced by taking a corresponding network element in the network architecture shown in fig. 2 as an example, that is, the session management network element 101 takes an SMF as an example, the user plane function network element 102 takes an UPF as an example, the policy control network element 103 takes a PCF as an example, the data management network element 104 takes an UDM as an example, the authentication and authorization network element 105 takes a DN-AAA as an example, and the access management network element 106 takes an AMF as an example.

In view of the disadvantage that ethernet frame structures are not distinguished in the current ethernet session establishment process, and only ethernet packets with non-legal MAC addresses can be filtered, embodiments of the present application provide a communication method, apparatus, and system, which solve the problem in the prior art that only ethernet packets with non-legal MAC addresses can be filtered, and implement targeted filtering according to the ethernet frame structures of the data packets.

The communication method provided by the embodiment of the present application is described in detail below, taking a network architecture under a 5G system as an example.

Referring to fig. 3, a flow chart of a communication method according to an embodiment of the present application is shown, where the method includes, but is not limited to, the following steps:

in step S301, the SMF acquires ethernet frame structure information available for the ethernet session.

The ethernet frame structure information available for the ethernet session is used to describe the ethernet frame structure information available for the ethernet session requested to be established by the terminal, that is, to describe which type of ethernet frame structure can be used for the ethernet session requested to be established by the terminal. The name of the ethernet frame structure information available for the ethernet session does not constitute a limitation to the embodiment of the present application, and the ethernet frame structure information supported by the ethernet session or the ethernet frame structure information associated with the ethernet session may also be used to describe the ethernet frame structure information available for the ethernet session requested to be established by the terminal.

Currently, six types of ethernet frame structures/ethernet protocols and protocols that can be encapsulated by multiple ethernet protocols are defined in the standard, and the embodiments of the present application use ethernet frame structure information to distinguish the six types of ethernet frame structures/ethernet protocols from the encapsulated protocols. The ethernet frame structure information may include at least one of an ethernet protocol type (type) and a Virtual Local Area Network (VLAN) tag (tag).

Wherein the ethernet protocol type is used to identify which type of ethernet protocol or ethernet protocol encapsulated protocol. The ethernet protocol may be an ethernet protocol type defined by 802.3, or an ethernet protocol type defined by 802.1 q. If the ethernet protocol type is the ethernet protocol type defined by 802.1q, the ethernet frame structure information needs to include the VLAN tag, and if the ethernet protocol type is the ethernet protocol type defined by 802.3, the ethernet frame structure information does not include the VLAN tag. The protocol encapsulated by the ethernet protocol may be an IP (IPv4, IPv6) protocol, an Address Resolution Protocol (ARP), a Reverse Address Resolution Protocol (RARP), a multi-protocol label switching (MPLS) protocol, or the like.

The VLAN tag may include, among other things, a VLAN identification (VLAN ID, VID) that identifies which VLAN the VID is. The VLAN tag may further include at least one of a Priority Code Point (PCP) and a Drop Eligibility Indicator (DEI).

In one example, the SMF may obtain the ethernet frame structure information available for the ethernet session in four ways:

in a first manner, in step S301a, the SMF receives an ethernet session establishment request, and acquires ethernet frame structure information available for the ethernet session through the ethernet session establishment request.

The SMF may receive an ethernet session establishment request from the terminal through the AMF, the ethernet session establishment including first ethernet frame structure information available for the ethernet session. The first ethernet frame structure information available for the ethernet session may be ethernet frame structure information supported by the terminal, and the ethernet frame structure information supported by the terminal may be read from the UE MAC capability carried in the ethernet session establishment request. The SMF determines first ethernet frame structure information available for the ethernet session as ethernet frame structure information available for the ethernet session.

In the second mode, in step S301b, the SMF receives the subscription information from the UDM, and acquires the ethernet frame structure information available for the ethernet session through the subscription information.

And the SMF sends a signing information acquisition request to the UDM, and the UDM feeds back signing information to the SMF under the condition of receiving the signing information acquisition request, wherein the signing information is signing information of the terminal and comprises second Ethernet frame structure information available for Ethernet session. Wherein, the second ethernet frame structure information available for the ethernet session may be the ethernet frame structure information subscribed by the terminal. The SMF determines second ethernet frame structure information available for the ethernet session as ethernet frame structure information available for the ethernet session.

In a third mode, in step S301c, the SMF receives an authentication authorization response from the DN-AAA, and obtains the ethernet frame structure information available for the ethernet session through the authentication authorization response.

The SMF sends an authentication and authorization request to the DN-AAA, and the DN-AAA feeds back an authentication and authorization response to the SMF under the condition of receiving the authentication and authorization request, wherein the authentication and authorization response comprises third Ethernet frame structure information available for the Ethernet session. The third Ethernet frame structure information available for the Ethernet session may be Ethernet frame structure information supported by the data network, and the Ethernet frame structure information supported by the data network may be represented by supported Ethernet protocol information. The SMF determines third ethernet frame structure information available for the ethernet session as ethernet frame structure information available for the ethernet session.

In step S301d, the SMF receives the event report from the UPF, and obtains the ethernet frame structure information available for the ethernet session through the event report.

Wherein, the event report includes fourth ethernet frame structure information available for the ethernet session, the fourth ethernet frame structure information available for the ethernet session may be ethernet frame structure information available for the terminal, and the SMF determines the ethernet frame structure information available for the terminal as the ethernet frame structure information available for the ethernet session. This mode will be described in detail by the embodiment shown in fig. 5.

In step S302, the SMF generates a filtering rule according to the ethernet frame structure information available for the ethernet session, where the filtering rule includes the ethernet frame structure information available for the ethernet session.

When the SMF acquires the available ethernet frame structure information of the ethernet session, a filtering rule (filtering rule) is generated according to the available ethernet frame structure information of the ethernet session, that is, the available ethernet frame structure information of the ethernet session is carried in the filtering rule.

In step S303, the SMF sends the filtering rules to the UPF. Accordingly, the UPF receives the filter rules from the SMF.

After the SMF generates the filtering rules, the SMF may send the filtering rules to the UPF via a N4 message so that the UPF may filter the packets according to the filtering rules.

The UPF, upon receiving the filter rules, may feed back an N4 message to the SMF, the N4 message indicating that the UPF received the filter rules. The SMF may send an ethernet session establishment response to the terminal through the AMF upon receiving the N4 message fed back by the UPF, where the ethernet session establishment response is used to inform the terminal that the ethernet session establishment is completed, and the terminal may send uplink data or receive downlink data.

In step S304, the UPF performs filtering processing on the data packet according to the ethernet frame structure information available for the ethernet session.

And the UPF matches the Ethernet frame structure information of the data packet with the Ethernet frame structure information available for the Ethernet session and included in the filtering rule under the condition that the filtering rule and the data packet are received, namely, judges whether the Ethernet frame structure information of the data packet is the same as the Ethernet frame structure information available for the Ethernet session and included in the filtering rule or judges whether the Ethernet frame structure information of the data packet is contained in the Ethernet frame structure information available for the Ethernet session and included in the filtering rule.

And under the condition that the Ethernet frame structure information of the data packet is matched with the Ethernet frame structure information available for the Ethernet session, the UPF forwards the data packet. In the event that the ethernet frame structure information of the packet does not match the ethernet frame structure information available for the ethernet session, the UPF discards the packet.

The data packet may be an uplink data packet or a downlink data packet. It can be understood that, by carrying the filtering rule of the ethernet frame structure information available for the ethernet session, the filtering of the upstream data packet and the downstream data packet can be specifically realized according to the ethernet frame structure information of the data packet.

In the embodiment shown in fig. 3, a filtering rule is generated by the SMF, the filtering rule including ethernet frame structure information available for the ethernet session, and the filtering rule is sent to the UPF, so that the UPF can filter the data packet according to the filtering rule.

In one example, after step S302, the method further includes:

in step S302', the SMF generates a forwarding rule according to the ethernet frame structure information available for the ethernet session.

Wherein, the forwarding rule is used for the UPF to determine the forwarding path of the data packet. The forwarding rules may include ethernet frame structure information available for the ethernet session and path forwarding information available for the ethernet session, or include ethernet filters available for the ethernet session and path forwarding information available for the ethernet session, or include ethernet frame structure information available for the ethernet session, ethernet filters available for the ethernet session and path forwarding information available for the ethernet session.

In one example, the SMF may generate the forwarding rule according to the ethernet frame structure information available for the ethernet session, i.e., carry the ethernet frame structure information available for the ethernet session in the forwarding rule. The forwarding rules include, in addition to the ethernet frame structure information available for the ethernet session, path forwarding information available for the ethernet session.

In one example, the SMF may generate the forwarding rule based on ethernet frame structure information available for the ethernet session and an ethernet filter available for the ethernet session. In this example, the forwarding rule may include ethernet frame structure information available for the ethernet session and path forwarding information available for the ethernet session, or include an ethernet filter available for the ethernet session and path forwarding information available for the ethernet session, or include ethernet frame structure information available for the ethernet session, an ethernet filter available for the ethernet session and path forwarding information available for the ethernet session.

Wherein, the ethernet filter available for the ethernet session is used to describe the ethernet filter available for the ethernet session requested to be established by the terminal. The Ethernet Filters may also be referred to as Ethernet Packet Filters (Ethernet Packet Filters). The ethernet filter available for the ethernet session may be obtained by the SMF from the PCF, may also be obtained by the SMF from the terminal, or may also be obtained by the SMF in other manners.

Wherein, the ether filter can include: source MAC address/destination MAC address, ethernet protocol type defined by 802.3, VID in client VLAN tag/server VLAN tag defined by 802.1q, PCP/DEI in client VLAN tag/server VLAN tag defined by 802.1q, packet filtering direction, etc.

At least one of ethernet frame structure information available for the ethernet session and an ethernet filter available for the ethernet session in the forwarding rule is used for the UPF to select path forwarding information available for the ethernet session, and for the UPF to determine to whom to send the packet. It will be appreciated that one type of ethernet frame structure information available for an ethernet session may correspond to one type of path forwarding information available for the ethernet session, or one type of ethernet filter available for the ethernet session may correspond to one type of path forwarding information available for the ethernet session. In other words, the forwarding rule includes a correspondence between ethernet frame structure information available for the ethernet session and path forwarding information available for the ethernet session, or includes a correspondence between an ethernet filter available for the ethernet session and path forwarding information available for the ethernet session.

Wherein the path forwarding information available for the Ethernet session includes at least one of forwarding path information between the UPF and another UPF, forwarding path information between the UPF and the (R) AN, and forwarding path information between the UPF and the data network. Forwarding path information between a UPF and another UPF may include N9 tunnel information. The forwarding path information between the UPF and the (R) AN may include at least one of a tunnel identification (tunnel ID), AN IP address of the (R) AN, and a tunnel end point identification (TEID). The forwarding path information between the UPF and the data network includes at least one of a Data Network Access Identifier (DNAI), a Data Network Name (DNN), a Network Address Translation (NAT) identifier/address, and N6 tunnel information.

It should be noted that step S302 'may be executed simultaneously with step S302, or step S302 may be executed first and then step S302' is executed.

Step S303', the SMF sends the forwarding rule to the UPF. Accordingly, the UPF receives forwarding rules from the SMF.

It should be noted that step S303' may be executed simultaneously with step S303, that is, the SMF may send the filtering rule and the forwarding rule to the UPF simultaneously through the N4 message.

And step S304', the UPF forwards the data packet according to the forwarding rule.

And the UPF performs forwarding processing on the data packet according to the forwarding rule under the condition that the forwarding rule is received, namely the UPF determines a forwarding path matched with the Ethernet frame structure information of the data packet according to the forwarding rule and forwards the data packet to the forwarding path, thereby realizing the targeted forwarding of the data packet.

The UPF can forward the data packet satisfying the filtering rule according to the forwarding rule, that is, step S304' is performed after step S304, and can realize targeted forwarding according to the ethernet frame structure.

In this example, targeted packet forwarding may be implemented on the basis of targeted filtering.

Referring to fig. 4, a flow chart of a communication method according to the second embodiment of the present application is shown, where the method includes, but is not limited to, the following steps:

in step S401, the SMF obtains ethernet frame structure information initially available for the ethernet session.

The SMF may acquire the ethernet frame structure information initially available for the ethernet session in the above four manners, that is, the ethernet frame structure information initially available for the ethernet session may include at least one of the first ethernet frame structure information available for the ethernet session in the above first manner, the second ethernet frame structure information available for the ethernet session in the above second manner, the third ethernet frame structure information available for the ethernet session in the above third manner, and the ethernet frame structure information available for the terminal in the above fourth manner.

In the embodiment shown in fig. 4, the ethernet frame structure information initially available for the ethernet session is used to describe the ethernet frame structure information originally acquired by the SMF, i.e., the ethernet frame structure information without PCF dynamic adjustment. In addition to acquiring the ethernet frame structure information initially available for the ethernet session through the above four ways, the SMF may also acquire the ethernet frame structure information initially available for the ethernet session through receiving an ethernet filter from the terminal, where the ethernet filter encapsulates the ethernet frame structure information available for the terminal. The SMF may also obtain the ethernet frame structure information initially available for the ethernet session by other means. In the embodiment shown in fig. 4, the ethernet frame structure information available for an ethernet session is used to describe the ethernet frame structure information dynamically adjusted by the PCF.

It should be noted that, in the embodiment shown in fig. 3, the ethernet frame structure information obtained by the above four ways is referred to as ethernet frame structure information available for the ethernet session, while in the embodiment shown in fig. 4, the ethernet frame structure information obtained by the above four ways is referred to as ethernet frame structure information initially available for the ethernet session, but the names are different.

In step S402, the SMF sends ethernet frame structure information initially available for the ethernet session to the PCF. Accordingly, the PCF receives ethernet frame structure information from the SMF that is initially available for the ethernet session.

In one example, the SMF may send ethernet frame structure information initially available for the ethernet session to the PCF via Npcf _ SMPolicyControl _ Get, i.e., the ethernet frame structure information initially available for the ethernet session may be carried in Npcf _ SMPolicyControl _ Get. The Npcf _ SMPolicyControl _ Get may also include a profile index (profile index) that may be used by the PCF to determine policy information.

It is understood that the policy information in the embodiment of the present application is an adjustment policy of the ethernet frame structure information, which is used for the PCF to adjust the ethernet frame structure information initially available for the ethernet session. The policy information may include locally configured ethernet frame structure information or application-allowed ethernet frame structure information.

The locally configured ethernet frame structure information may be ethernet frame structure information supported by the 5G system, or ethernet frame structure information selected by the 5G system as a default, or ethernet frame structure information configured on the PCF by the data network. It is understood that the ethernet frame structure information configured on the PCF by the data network is the ethernet frame structure information that can be used by the terminal when communicating with the data network. The ethernet frame structure information allowed by the application may be the ethernet frame structure information allowed by the terminal and configured by the AF on the PCF.

In step S403, the PCF adjusts the initially available ethernet frame structure information of the ethernet session to obtain the available ethernet frame structure information of the ethernet session. The ethernet frame structure information available for the ethernet session includes the ethernet frame structure information initially available for the adjusted ethernet session.

In one example, the PCF may adjust the initially available ethernet frame structure information for the ethernet session based on the determined policy information to obtain the available ethernet frame structure information for the ethernet session. The ethernet frame structure information available for the ethernet session includes the ethernet frame structure information initially available for the adjusted ethernet session. For example, the policy information includes ethernet frame structure information allowed by the application, the ethernet frame structure information allowed by the application includes type1, type 2, type 3, VLAN tag 1, VLAN tag 2 and VLAN tag 3, the ethernet frame structure information initially available for the ethernet session is second ethernet frame structure information available for the ethernet session, the second ethernet frame structure information available for the ethernet session includes type1, type4, VLAN tag 1 and VLAN tag4, and then the PCF deletes the ethernet frame structure information other than the ethernet frame structure information allowed by the application, i.e., deletes type4 and VLAN tag4, and obtains the ethernet frame structure information available for the ethernet session, i.e., the ethernet frame structure information available for the ethernet session includes type1 and VLAN tag 1. It will be appreciated that the ethernet frame structure information available for the ethernet session matches the ethernet frame structure information included in the policy information. In other words, the adjustment in step S403 means that the deletion of the policy information from the ethernet frame structure information initially available for the ethernet session does not include the ethernet frame structure information.

The PCF determines policy information based on the profile index sent by the SMF to the PCF, which receives the profile index from the DN-AAA. It can be understood that in the process of transmitting the profile index, the SMF is equivalent to a transfer station between the DN-AAA and the PCF, and the transmission of the profile index instead of the transmission of the profile can save resources and load. The PCF and the DN-AAA may have previously entered into an agreement or contract that includes a policy for each of a plurality of profiles. It will be appreciated that the PCF and DN-AAA are able to learn the policy corresponding to each profile. The configuration file index is used for identifying the configuration file, and the PCF can search the strategy corresponding to the configuration file index under the condition of knowing the configuration file index.

At step S404, the PCF sends ethernet frame structure information available for the ethernet session to the SMF.

The PCF, after obtaining the ethernet frame structure information available for the ethernet session, sends the ethernet frame structure information available for the ethernet session to the SMF. The PCF may send ethernet frame structure information available for the ethernet session to the SMF via a Policy and Charging Control (PCC) rule, i.e. the ethernet frame structure information available for the ethernet session is carried in the PCC rule.

In step S405, the SMF generates a filtering rule according to the ethernet frame structure information available for the ethernet session, where the filtering rule includes the ethernet frame structure information available for the ethernet session.

In step S406, the SMF sends the filtering rules to the UPF. Accordingly, the UPF receives the filter rules from the SMF.

In step S407, the UPF performs filtering processing on the data packet according to the ethernet frame structure information available for the ethernet session.

The specific implementation process of steps S405 to S407 can refer to the specific description of steps S302 to S304 in the embodiment shown in fig. 3, and is not described herein again.

The difference between the embodiment shown in fig. 4 and the embodiment shown in fig. 3 is that in the embodiment shown in fig. 4, when acquiring the initially available ethernet frame structure information of the ethernet session in the four manners, the SMF sends the ethernet frame structure information to the PCF, and the PCF performs adjustment, and the SMF generates the filtering rule according to the initially available ethernet frame structure information of the ethernet session after adjustment, so that the filtering rule conforms to the 5G system requirement or the application requirement.

In one example, after step S403, the method further includes:

in step S403', the PCF generates an ethernet filter available for the ethernet session according to the ethernet frame structure information available for the ethernet session.

The PCF encapsulates the Ethernet frame structure information available for the Ethernet session in the Ethernet filter to obtain the Ethernet filter available for the Ethernet session. Because the ethernet frame structure information available for the ethernet session is adjusted according to the policy information, the PCF generates an ethernet filter available for the ethernet session according to the ethernet frame structure information available for the ethernet session, and conforms to the requirements of a 5G system or application requirements.

At step S404', the PCF sends an ethernet filter available for the ethernet session to the SMF.

The PCF may send the ethernet filter available for the ethernet session to the SMF simultaneously with the ethernet frame structure information available for the ethernet session, i.e., step S04 and step S404' may be performed simultaneously. The ethernet filters available for the ethernet session may be carried in the PCC rules concurrently with the ethernet frame structure information available for the ethernet session.

In step S405', the SMF generates a forwarding rule according to the ethernet frame structure information available for the ethernet session.

It should be noted that step S405 'may be executed simultaneously with step S405, or step S405 may be executed first and then step S405'.

At step S406', the SMF sends the forwarding rule to the UPF. Accordingly, the UPF receives forwarding rules from the SMF.

It should be noted that step S406' may be executed simultaneously with step S406, that is, the SMF may send the filtering rule and the forwarding rule to the UPF simultaneously through the N4 message.

Step 407', the UPF performs forwarding processing on the data packet according to the forwarding rule.

For a specific implementation process of steps S405 '-S407', reference may be made to the detailed description of steps S302 '-S304', and details are not repeated herein.

Referring to fig. 5, a flow chart of a communication method provided in the third embodiment of the present application is shown, where the method may include, but is not limited to, the following steps:

in step S501, the SMF sends an authentication and authorization request to the DN-AAA. Accordingly, the PCF receives an authentication authorization request from the DN-AAA.

In step S502, the PCF sends an authentication and authorization response to the DN-AAA, wherein the authentication and authorization response comprises a configuration file index and an available MAC address list. Accordingly, the SMF receives an authentication authorization response from the PCF.

Wherein, the available MAC address list is a MAC address list available for the ethernet session.

In step S503, the SMF sends the profile index and the list of available MAC addresses to the PCF. Accordingly, the PCF receives the profile index and the list of available MAC addresses from the SMF.

The SMF may send the profile index and the available MAC address list to the PCF via the Npcf _ SMPolicyControl _ Get, i.e. the profile index and the available MAC address list are carried in the Npcf _ SMPolicyControl _ Get.

In step S504, the PCF generates an event trigger according to the profile index and the list of available MAC addresses.

Under the condition of receiving the configuration file index and the available MAC address list, the PCF determines the strategy information according to the configuration file index and determines the Ethernet frame structure information corresponding to each MAC address according to the available MAC address list, namely determines a plurality of Ethernet frame structure information. And then the PCF determines the Ethernet frame structure information available for the MAC address of the terminal according to the strategy information and the plurality of pieces of Ethernet frame structure information, namely determines the Ethernet frame structure information available for the terminal. In other words, the PCF screens out the ethernet frame structure information matching the policy information from the plurality of ethernet frame structure information according to the policy information and determines it as the ethernet frame structure information available to the terminal, i.e. deletes the ethernet frame structure information not matching the policy information from the plurality of available ethernet frame structure information.

The PCF, after determining the ethernet frame structure information available to the terminal, generates an event trigger (event trigger) comprising a MAC address from the list of available MAC addresses or the ethernet frame structure information available to the terminal.

In step S505, the PCF sends an event trigger to the SMF. Accordingly, the SMF receives an event trigger from the PCF.

The PCF may send an event trigger to the SMF through the Nsmf _ EventExposure _ describe, where the event trigger is carried in the Nsmf _ EventExposure _ describe, that is, a MAC address in an available MAC address list or ethernet frame structure information available to the terminal is carried in the Nsmf _ EventExposure _ describe.

In step S506, the SMF sends an event trigger to the UPF. Accordingly, the UPF receives event triggers from the SMF.

The SMF may send event triggers to the UPF via an N4 message, i.e., the event triggers are carried in an N4 message. The UPF, upon receiving an event trigger, may feed back an N4 message to the SMF, the fed back N4 message indicating that the UPF received the event trigger.

The SMF may send an ethernet session establishment response to the terminal through the AMF upon receiving the N4 message fed back by the UPF, where the ethernet session establishment response is used to inform the terminal that the ethernet session establishment is completed, and the terminal may send uplink data or receive downlink data.

In step S507, the UPF detects whether the ethernet frame structure information of the packet satisfies the event trigger.

And under the condition that the UPF receives the data packet, detecting whether the Ethernet frame structure information of the data packet meets an event trigger, namely judging whether the Ethernet frame structure information of the data packet is matched with the Ethernet frame structure information available to the terminal and included by the event trigger.

In one example, the UPF may determine whether the MAC address of the packet matches the MAC address of the terminal included in the event trigger, in case the packet is received.

In step S508, the UPF sends an event report to the SMF when the ethernet frame structure information of the packet satisfies the event trigger. Accordingly, the SMF receives event reports from the UPF. The event report includes the ethernet frame structure information available to the terminal.

In one example, the event report may also include the MAC address of the terminal. The MAC address of the terminal is the MAC address of the terminal that initiated the ethernet session establishment request, and the ethernet frame structure information available to the terminal is the ethernet frame structure information available to the terminal that initiated the ethernet session establishment request.

In step S509, the SMF sends ethernet frame structure information available for the ethernet session initiation to the PCF. Accordingly, the PCF receives ethernet frame structure information from the SMF that is initially available for the ethernet session.

The ethernet frame structure information initially available for the ethernet session is the ethernet frame structure information available for the terminal obtained from the event report.

Step S510, the PCF adjusts the initially available ethernet frame structure information of the ethernet session to obtain the available ethernet frame structure information of the ethernet session.

The ethernet frame structure information available for the ethernet session includes the ethernet frame structure information initially available for the adjusted ethernet session, that is, the ethernet frame structure information available for the adjusted terminal. The PCF may adjust the ethernet frame structure information initially available for the ethernet session based on the policy information.

In the case that the ethernet frame structure information initially available for the ethernet session does not include the VLAN tag, the PCF may add the VLAN tag corresponding to the ethernet frame structure information initially available for the ethernet session to the ethernet frame structure information to obtain the ethernet frame structure information available for the ethernet session, such that the ethernet frame structure information available for the ethernet session includes the ethernet protocol type and the VLAN tag. In other words, the adjustment in step S510 refers to adding the VLAN tag.

In step S511, the PCF sends ethernet frame structure information available for the ethernet session to the SMF. Accordingly, the SMF receives ethernet frame structure information available for the ethernet session from the PCF.

Step S509-step S511 are optional steps, that is, the PCF may dynamically adjust the initially available ethernet frame structure information of the ethernet session, or may not adjust the initially available ethernet frame structure information of the ethernet session.

In step S512, the SMF generates a filtering rule according to the ethernet frame structure information available for the ethernet session.

Under the condition of PCF dynamic adjustment, the SMF generates a filtering rule according to the Ethernet frame structure information available for the Ethernet session; in the case of PCF not dynamically adjusted, the SMF generates the filtering rules based on the ethernet frame structure information initially available for the ethernet session.

In step S513, the SMF sends the filtering rule to the UPF. Accordingly, the UPF receives the filter rules from the SMF.

In step S514, the UPF performs filtering processing on the data packet according to the ethernet frame structure information available for the ethernet session.

The specific implementation process of step S513 and step S514 can refer to the specific description of step S303 and step S304 in the embodiment shown in fig. 3, and is not described herein again.

In the embodiment shown in fig. 5, the SMF obtains the ethernet frame structure information available to the terminal from the UPF, and may generate the filtering rule according to the ethernet frame structure information available to the terminal, or may generate the filtering rule according to the adjusted ethernet frame structure information available to the terminal, so that the UPF may discard the data packet that does not match the ethernet frame structure information available to the terminal.

On the basis of the embodiment shown in fig. 5, a relevant process of generating a forwarding rule by the SMF may also be added, and on the basis of implementing the targeted filtering, the targeted packet forwarding is implemented.

Referring to fig. 6, a flowchart of a communication method according to a fourth embodiment of the present application is shown, where the method may include, but is not limited to, the following steps:

in step S601, the SMF sends an authentication and authorization request to the DN-AAA. Accordingly, the PCF receives an authentication authorization request from the DN-AAA.

In step S602, the PCF sends an authentication and authorization response to the DN-AAA, where the authentication and authorization response includes a profile index and a list of available MAC addresses. Accordingly, the SMF receives an authentication authorization response from the DN-AAA.

In step S603, the SMF sends the profile index and the list of available MAC addresses to the PCF. Accordingly, the PCF receives the profile index and the list of available MAC addresses from the SMF.

The specific implementation process of step S601-step S603 can refer to the specific description of step S501-step S503 in the embodiment shown in fig. 5, and is not described herein again.

Step S604, the PCF generates a terminal routing policy (URSP) according to the profile index and the list of available MAC addresses.

Under the condition of receiving the configuration file index and the available MAC address list, the PCF determines the strategy information according to the configuration file index and determines the Ethernet frame structure information corresponding to each MAC address according to the available MAC address list, namely determines a plurality of Ethernet frame structure information. And then the PCF determines the Ethernet frame structure information available for the MAC address of the terminal according to the strategy information and the plurality of pieces of Ethernet frame structure information, namely determines the Ethernet frame structure information available for the terminal. In other words, the PCF screens out the ethernet frame structure information matching the policy information from the plurality of available ethernet frame structure information according to the policy information and determines it as the ethernet frame structure information available to the terminal, i.e. deletes the ethernet frame structure information not matching the policy information from the plurality of available ethernet frame structure information.

The PCF generates the URSP after determining the ethernet frame structure information available to the terminal.

Wherein, the URSP comprises a non-IP descriptor (non-IP descriptor) and a routing strategy. The non-IP descriptor is used to indicate ethernet frame structure information available to the terminal and may also indicate the MAC address of the terminal. The routing policy is used to trigger the terminal to initiate an ethernet session modification request. In other words, the URSP is used to trigger the terminal to initiate an ethernet session modification request, and may also carry ethernet frame structure information available to the terminal.

In step S605, the PCF transmits the URSP to the terminal. Accordingly, the terminal receives the URSP from the PCF.

PCF can send URSP to terminal through AMF, that is PCF sends message carrying URSP to AMF, AMF sends message carrying URSP to terminal under condition of receiving message carrying URSP. The message carrying the URSP sent by the PCF to the AMF may be an N1N2 transport message, where the N1N2 transport message is used to request the AMF to send a non-access stratum transport (NAS transport) message carrying the URSP to the terminal, and the message carrying the URSP sent by the AMF to the terminal may be a non-access stratum transport message when the AMF receives the N1N2 transport message.

After step S605, the SMF may send an N4 message to the UPF, where the N4 message does not carry the ethernet frame structure information initially available for the ethernet session or the ethernet frame structure information available for the ethernet session according to the embodiment of the present application. The UPF feeds back an N4 message to the SMF, and the SMF sends an Ethernet session establishment response to the terminal through the AMF under the condition of receiving the N4 message fed back by the UPF.

In step S606, the terminal sends an ethernet session modification request to the SMF. Accordingly, the SMF receives an ethernet session modification request from the terminal.

The method comprises the steps that a terminal detects whether Ethernet frame structure information of a data packet to be sent is matched with available Ethernet frame structure information of the terminal carried by the URSP or not under the condition that the terminal receives the URSP, and an Ethernet session modification request is sent to an SMF through an AMF under the condition that the Ethernet frame structure information of the data packet to be sent is matched with the available Ethernet frame structure information of the terminal carried by the URSP. The ethersession modification request is for requesting the SMF to modify ethersession related parameter information, e.g., to modify a parameter of the QoS flow.

The ethernet session modification request includes an ethernet filter, which is an ethernet filter supported by the terminal. The ethernet filter encapsulates ethernet frame structure information available to the terminal.

In step S607, the SMF sends the ethernet filter to the PCF. Accordingly, the PCF receives the ethernet filter from the SMF.

Step S608, the PCF obtains the available ethernet frame structure information of the ethernet session according to the available ethernet frame structure information of the adjustment terminal.

The PCF decapsulates the ethernet filter, in case it receives the ethernet filter, to obtain the ethernet frame structure information available to the terminal. And under the condition of acquiring the Ethernet frame structure information available to the terminal, adjusting the Ethernet frame structure information available to the terminal to acquire the Ethernet frame structure information available to the Ethernet session. The PCF may adjust the ethernet frame structure information available to the terminal based on the policy information.

Wherein the ethernet frame structure information available for the ethernet session includes the adjusted ethernet frame structure information available for the terminal.

Under the condition that the available Ethernet frame structure information of the terminal does not include the VLAN tag, the PCF can add the VLAN tag corresponding to the available Ethernet frame structure information of the terminal into the Ethernet frame structure information to obtain the available Ethernet frame structure information of the Ethernet session, so that the available Ethernet frame structure information of the Ethernet session comprises the Ethernet protocol type and the VLAN tag. In other words, the adjustment in step S608 refers to adding the VLAN tag.

In step S609, the PCF sends ethernet frame structure information available for the ethernet session to the SMF. Accordingly, the SMF receives ethernet frame structure information available for the ethernet session from the PCF.

Step S607-step S609 are optional steps, i.e. the PCF may dynamically adjust the ethernet frame structure information available to the terminal, or may not adjust the ethernet frame structure information available to the terminal.

In step S610, the SMF generates a filtering rule according to the ethernet frame structure information available for the ethernet session.

In step S611, the SMF sends the filtering rule to the UPF. Accordingly, the UPF receives the filter rules from the SMF.

After sending the filtering rules to the UPF, the SMF may send an ethernet session modification command to the terminal so that the terminal modifies the ethernet session.

Step S612, the UPF performs filtering processing on the data packet according to the ethernet frame structure information available for the ethernet session.

In the embodiment shown in fig. 6, the SMF obtains the ethernet frame structure information available to the terminal from the ethernet filter sent by the terminal, and may generate the filtering rule according to the ethernet frame structure information available to the terminal, or may generate the filtering rule according to the adjusted ethernet frame structure information available to the terminal, so that the UPF may discard the data packet that does not match the ethernet frame structure information available to the terminal.

On the basis of the embodiment shown in fig. 6, a relevant process of generating a forwarding rule by the SMF may also be added, and on the basis of implementing the targeted filtering, the targeted packet forwarding is implemented.

The method of the embodiments of the present application is set forth above in detail and the apparatus of the embodiments of the present application is provided below.

Referring to fig. 7, which is a schematic diagram of a logical structure of a communication device according to an embodiment of the present disclosure, the communication device 70 may include a transceiver 701 and a processing unit 702. The communication device 70 may be a session management network element 101 (e.g., SMF) or a policy control network element 103 (e.g., PCF). The communication device 70 may also be a user plane function network element 102 (e.g., UPF). The communication device 70 may also be a device that integrates the session management network element 101 and the user plane function network element 102, a device that integrates the session management network element 101, the policy control network element 103, the user plane function network element 102 and other network elements, and other network elements may be access management network elements.

In a possible implementation manner, if the communication device 70 is the session management network element 101, the transceiver 701 is configured to perform step S301 and step S303 in the embodiment shown in fig. 3, and the processing unit 702 is configured to perform step S302 in the embodiment shown in fig. 3. The transceiver unit 701 is further configured to execute step S301 ', step S303', step S401, step S402, step S404 ', step S406, and step S406' in the embodiment shown in fig. 3, step S501, step S502, step S503, step S505, step S506, step S508, step S509, step S511, and step S513 in the embodiment shown in fig. 5, and step S601, step S602, step S603, step S606, step S607, step S609, and step S611 in the embodiment shown in fig. 6. The processing unit 702 is further configured to execute step S302 'in the embodiment shown in fig. 3, step S405 and step S405' in the embodiment shown in fig. 4, step S512 in the embodiment shown in fig. 5, and step S610 in the embodiment shown in fig. 6.

In a possible implementation manner, if the communication device 70 is a user plane function network element 102, the transceiver 701 is configured to execute step S303 in the embodiment shown in fig. 3, step S406 in the embodiment shown in fig. 4, step S513 in the embodiment shown in fig. 5, and step S611 in the embodiment shown in fig. 6; the processing unit 702 is configured to execute step S304 in the embodiment shown in fig. 3, step S407 in the embodiment shown in fig. 4, step S514 in the embodiment shown in fig. 5, and step S612 in the embodiment shown in fig. 6. The transceiving unit 701 is further configured to perform step S303 'in the embodiment shown in fig. 3, step S406' in the embodiment shown in fig. 4, and step S506 and step S508 in the embodiment shown in fig. 5. The processing unit 702 is further adapted to perform step S406 'in the embodiment shown in fig. 3, step S407' in the embodiment shown in fig. 4, and step S507 in the embodiment shown in fig. 5.

In a possible implementation manner, if the communication device 70 is the policy control network element 103, the transceiver 701 is configured to perform step S402 and step S404 in the embodiment shown in fig. 4, and the processing unit 702 is configured to perform step S403 in the embodiment shown in fig. 4. The transceiving unit 701 is further configured to perform step S404' in the embodiment shown in fig. 4, steps S503, S505, S509, and S511 in the embodiment shown in fig. 5, and steps S603, S605, S607, and S609 in the embodiment shown in fig. 6. The processing unit 702 is further configured to perform step S403' in the embodiment shown in fig. 4, step S504 and step S510 in the embodiment shown in fig. 5, and step S604 and step S608 in the embodiment shown in fig. 6.

Referring to fig. 8, which is a simplified schematic diagram of an entity structure of a communication device according to an embodiment of the present application, the communication device 80 includes a transceiver 801, a processor 802, and a memory 803. The transceiver 801, the processor 802 and the memory 803 may be interconnected by a bus 804, or may be connected in other ways. The communication device 80 may be a session management network element 101 (e.g., SMF) or a policy control network element 103 (e.g., PCF). The communication device 80 may also be a user plane function network element 102 (e.g., UPF). The communication device 80 may also be a device that integrates the session management network element 101 and the user plane function network element 102, a device that integrates the session management network element 101, the policy control network element 103, the user plane function network element 102 and other network elements, and other network elements may be access management network elements and the like.

The related functions implemented by the transceiving unit 701 shown in fig. 7 may be implemented by the transceiver 801. The relevant functions performed by the processing unit 702 shown in fig. 7 may be implemented by the processor 802.

The memory 803 includes, but is not limited to, a Random Access Memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM), or a portable read-only memory (CD-ROM), and the memory 803 is used for related instructions and data.

The transceiver 801 is used for transmitting data and/or signaling and for receiving data and/or signaling.

In a possible implementation manner, if the communication device 80 is the session management network element 101, the transceiver 801 is configured to execute step S301 and step S303 in the embodiment shown in fig. 3, and is further configured to execute step S301 ', step S303' in the embodiment shown in fig. 3, step S401, step S402, step S404 ', step S406, and step S406' in the embodiment shown in fig. 4, step S501, step S502, step S503, step S505, step S506, step S508, step S509, step S511, and step S513 in the embodiment shown in fig. 5, and step S601, step S602, step S603, step S606, step S607, step S609, and step S611 in the embodiment shown in fig. 6.

In a possible implementation manner, if the communication device 80 is the user plane function network element 102, the transceiver 801 is configured to execute step S303 in the embodiment shown in fig. 3, step S406 in the embodiment shown in fig. 4, step S513 in the embodiment shown in fig. 5, and step S611 in the embodiment shown in fig. 6. The transceiver 801 is further configured to perform the step S303 'in the embodiment shown in fig. 3, the step S406' in the embodiment shown in fig. 4, and the step S506 and the step S508 in the embodiment shown in fig. 5.

In a possible implementation manner, if the communication device 80 is the policy control network element 103, the transceiver 801 is configured to execute the steps S402 and S404 in the embodiment shown in fig. 4, and is further configured to execute the step S404' in the embodiment shown in fig. 4, the steps S503, S505, S509, and S511 in the embodiment shown in fig. 5, and the steps S603, S605, S607, and S609 in the embodiment shown in fig. 6.

The processor 802 may include one or more processors, such as one or more Central Processing Units (CPUs), and in the case that the processor 802 is a CPU, the CPU may be a single-core CPU or a multi-core CPU.

In a possible implementation manner, if the communication device 80 is the session management network element 101, the processor 802 is configured to execute step S302 in the embodiment shown in fig. 3, and is further configured to execute step S302 'in the embodiment shown in fig. 3, step S405 and step S405' in the embodiment shown in fig. 4, step S512 in the embodiment shown in fig. 5, and step S610 in the embodiment shown in fig. 6.

In a possible implementation manner, if the communication device 80 is the user plane function network element 102, the processor 802 is configured to execute step S304 in the embodiment shown in fig. 3, step S407 in the embodiment shown in fig. 4, step S514 in the embodiment shown in fig. 5, and step S612 in the embodiment shown in fig. 6. The processor 802 is further configured to perform step S406 'in the embodiment shown in fig. 3, step S407' in the embodiment shown in fig. 4, and step S507 in the embodiment shown in fig. 5.

In a possible implementation manner, if the communication device 80 is the policy control network element 103, the processor 802 is configured to execute step S403 in the embodiment shown in fig. 4, and is further configured to execute step S403' in the embodiment shown in fig. 4, step S504 and step S510 in the embodiment shown in fig. 5, and step S604 and step S608 in the embodiment shown in fig. 6.

The memory 803 is used to store program codes and data for the communication device 80.

It will be appreciated that fig. 8 only shows a simplified design of the first communication device. In practical applications, the first communication device may further include necessary other elements, including but not limited to any number of transceivers, processors, controllers, memories, communication units, etc., respectively, and all devices that can implement the present application are within the protection scope of the present application.

The embodiment of the present application further provides a communication system, which includes a session management network element (SMF) and a policy control network element (PCF), and further includes a user plane function network element (UPF), an access management network element (AMF), an authentication authorization network element (DN-AAA), a data management network element (UDM), and a terminal.

One of ordinary skill in the art will appreciate that all or part of the processes in the methods of the above embodiments may be implemented by hardware related to instructions of a computer program, which may be stored in a computer-readable storage medium, and when executed, may include the processes of the above method embodiments. And the aforementioned storage medium includes: various media capable of storing program codes, such as ROM or RAM, magnetic or optical disks, etc. Accordingly, a further embodiment of the present application provides a computer-readable storage medium having stored therein instructions, which, when executed on a computer, cause the computer to perform the method of the above aspects.

Yet another embodiment of the present application provides a computer program product containing instructions which, when run on a computer, cause the computer to perform the method of the above aspects.

Those of ordinary skill in the art would appreciate that the various illustrative elements and algorithm steps described in connection with the embodiments disclosed herein may be implemented as electronic hardware or combinations of computer software and electronic hardware. Whether such functionality is implemented as hardware or software depends upon the particular application and design constraints imposed on the implementation. Skilled artisans may implement the described functionality in varying ways for each particular application, but such implementation decisions should not be interpreted as causing a departure from the scope of the present application.

It is clear to those skilled in the art that, for convenience and brevity of description, the specific working processes of the above-described systems, apparatuses and units may refer to the corresponding processes in the foregoing method embodiments, and are not described herein again.

In the several embodiments provided in the present application, it should be understood that the disclosed system, apparatus and method may be implemented in other ways. For example, the above-described apparatus embodiments are merely illustrative, and for example, the division of the units is only one logical division, and other divisions may be realized in practice, for example, a plurality of units or components may be combined or integrated into another system, or some features may be omitted, or not executed. In addition, the shown or discussed mutual coupling or direct coupling or communication connection may be an indirect coupling or communication connection through some interfaces, devices or units, and may be in an electrical, mechanical or other form.

The units described as separate parts may or may not be physically separate, and parts displayed as units may or may not be physical units, may be located in one place, or may be distributed on a plurality of network units. Some or all of the units can be selected according to actual needs to achieve the purpose of the solution of the embodiment.

In addition, functional units in the embodiments of the present application may be integrated into one processing module, or each unit may exist alone physically, or two or more units are integrated into one unit.

In the above embodiments, the implementation may be wholly or partially realized by software, hardware, firmware, or any combination thereof. When implemented in software, may be implemented in whole or in part in the form of a computer program product. The computer program product includes one or more computer instructions. When loaded and executed on a computer, cause the processes or functions described in accordance with the embodiments of the invention to occur, in whole or in part. The computer may be a general purpose computer, a special purpose computer, a network of computers, or other programmable device. The computer instructions may be stored in or transmitted over a computer-readable storage medium. The computer instructions may be transmitted from one website, computer, server, or data center to another website, computer, server, or data center by wire (e.g., coaxial cable, fiber optic, Digital Subscriber Line (DSL)), or wirelessly (e.g., infrared, wireless, microwave, etc.). The computer-readable storage medium can be any available medium that can be accessed by a computer or a data storage device, such as a server, a data center, etc., that incorporates one or more of the available media. The usable medium may be a magnetic medium (e.g., floppy disk, hard disk, magnetic tape), an optical medium (e.g., DVD), or a semiconductor medium (e.g., Solid State Disk (SSD)), among others.

Claims

1. a communication method, is characterized in that, comprises:

The session management network element obtains the initially available Ethernet frame structure information of the Ethernet session; the initially available Ethernet frame structure information of the Ethernet session includes the initially available third Ethernet frame structure information of the Ethernet session carried in the authentication and authorization response of the authentication and authorization network element and the user At least one of the fourth Ethernet frame structure information that is initially available for the Ethernet session carried in the event report of the plane function network element; the Ethernet frame structure information includes the Ethernet protocol type, and the Ethernet protocol type includes the Ethernet protocol type defined by 802.3 or The Ethernet protocol type defined by 802.1q; if the Ethernet protocol type is the Ethernet protocol type defined by 802.1q, the Ethernet frame structure information also includes a virtual local area network VLAN tag;

The session management network element generates a filtering rule according to the initially available Ethernet frame structure information of the Ethernet session;

The session management network element sends the filtering rule to the user plane function network element.

2. The method according to claim 1, wherein the method further comprises:

The session management network element generates a forwarding rule according to the initially available Ethernet frame structure information of the Ethernet session;

The session management network element sends the forwarding rule to the user plane function network element.

3. The method according to claim 2, wherein the forwarding rule comprises the available path forwarding information of the Ethernet session and the Ethernet frame structure information of the Ethernet session, or comprises the available path forwarding information of the Ethernet session and the available path forwarding information of the Ethernet session. The Ethernet filter, or the forwarding information of the path available for the Ethernet session, the available Ethernet filter for the Ethernet session, and the Ethernet frame structure information of the Ethernet session; wherein, the Ethernet frame structure information of the Ethernet session includes the Ethernet session that is initially available for the Ethernet session. The frame structure information or the available Ethernet frame structure information of the Ethernet session, the available Ethernet frame structure information of the Ethernet session is the received adjusted Ethernet frame structure information of the Ethernet session initially available from the policy control network element.

The method according to claim 3, wherein the forwarding information of the path available for the Ethernet session comprises forwarding path information between the user plane function network element and another user plane function network element, the user plane function network element, and the user plane function network element. at least one of the forwarding path information between the plane function network element and the access network and the forwarding path information between the user plane function network element and the data network.

5. The method according to any one of claims 1-4, wherein the method further comprises:

The session management network element sends the initially available Ethernet frame structure information of the Ethernet session to the policy control network element;

The session management network element receives the Ethernet frame structure information available for the Ethernet session from the policy control network element, where the Ethernet frame structure information available for the Ethernet session includes the adjusted Ethernet frame structure information that is initially available for the Ethernet session;

The session management network element generates a filtering rule according to the initially available Ethernet frame structure information of the Ethernet session, including:

The session management network element generates a filter rule according to the available Ethernet frame structure information of the Ethernet session, where the filter rule includes the available Ethernet frame structure information of the Ethernet session.

6. The method according to claim 5, wherein the method further comprises:

The session management network element receives an Ethernet session modification request, where the Ethernet session modification request includes an Ethernet filter, and the Ethernet filter includes the Ethernet frame structure information initially available for the Ethernet session;

The session management network element sends the initially available Ethernet frame structure information of the Ethernet session to the policy control network element, including:

The session management network element sends the Ethernet filter to the policy control network element, where the Ethernet filter includes the Ethernet frame structure information that is initially available for the Ethernet session.

7. The method according to any one of claims 1-4, wherein the session management network element obtains the initially available Ethernet frame structure information of the Ethernet session, comprising:

The session management network element receives an authentication and authorization response from the authentication and authorization network element, where the authentication and authorization response includes information about the third Ethernet frame structure that is initially available for the Ethernet session;

Or, the session management network element receives an event report from the user plane function network element, where the event report includes information about a fourth Ethernet frame structure that is initially available for an Ethernet session.

8. The method according to claim 7, wherein the initially available Ethernet frame structure information of the Ethernet session comprises the available fourth Ethernet frame structure information of the Ethernet session carried by the event report of the user plane function network element;

The method also includes:

The session management network element receives an authentication and authorization response from the authentication and authorization network element, where the authentication and authorization response includes a list of available media access control MAC addresses and a configuration file index;

The session management network element sends the available MAC address list and the configuration file index to the policy control network element;

The session management network element receives an event trigger from the policy control network element, where the event trigger includes the MAC address in the available MAC address list or the Ethernet frame structure information available to the terminal;

The session management network element sends the event trigger to the user plane function network element.

9. A communication method, comprising:

The policy control network element receives the initially available Ethernet frame structure information of the Ethernet session from the session management network element; the Ethernet frame structure information includes the Ethernet protocol type, and the Ethernet protocol type includes the Ethernet protocol type defined by 802.3 or the Ethernet protocol defined by 802.1q. Protocol type; if the Ethernet protocol type is the Ethernet protocol type defined by 802.1q, the Ethernet frame structure information also includes a virtual local area network VLAN tag;

The policy control network element adjusts the initially available Ethernet frame structure information of the Ethernet session to obtain the Ethernet frame structure information available for the Ethernet session, and the Ethernet frame structure information available for the Ethernet session includes the adjusted initially available Ethernet frame structure information. Ethernet frame structure information;

The policy control network element sends the Ethernet frame structure information available for the Ethernet session to the session management network element.

10. The method according to claim 9, wherein the method further comprises:

The policy control network element generates an available Ethernet filter for the Ethernet session according to the available Ethernet frame structure information for the Ethernet session;

The policy control network element sends the available Ethernet filter for the Ethernet session to the session management network element.

11. The method according to claim 9 or 10, wherein the policy control network element adjusts the initially available Ethernet frame structure information of the Ethernet session to obtain the available Ethernet frame structure information for the Ethernet session, comprising:

The policy control network element adjusts the initially available Ethernet frame structure information of the Ethernet session according to the policy information, and obtains the available Ethernet frame structure information of the Ethernet session, where the policy information includes the Ethernet frame structure information allowed by local configuration or application.

12. The method of claim 11, wherein the method further comprises:

The policy control network element receives the configuration file index from the session management network element;

The policy control network element determines the policy information according to the configuration file index.

13. The method according to claim 9 or 10, wherein the method further comprises:

The policy control network element receives the available MAC address list and configuration file index from the session management network element;

The policy control network element generates an event trigger according to the configuration file index and the available MAC address list, where the event trigger includes the available MAC address list MAC address or the Ethernet frame structure information available to the terminal;

The policy control network element sends the event trigger to the session management network element.

14. The method according to claim 9 or 10, wherein the method further comprises:

The policy control network element generates a terminal routing policy URSP according to the configuration file index and the available MAC address list, where the URSP is used to trigger the terminal to modify the Ethernet session;

The policy control network element sends the URSP to the terminal.

15. A session management network element, comprising a transceiver unit and a processing unit,

The transceiver unit is configured to obtain the initially available Ethernet frame structure information of the Ethernet session; the initially available Ethernet frame structure information of the Ethernet session includes the third Ethernet frame structure initially available for the Ethernet session carried in the authentication and authorization response of the authentication and authorization network element. information and at least one of the fourth Ethernet frame structure information initially available for the Ethernet session carried in the event report of the user plane function network element; the Ethernet frame structure information includes the Ethernet protocol type, and the Ethernet protocol type includes the Ethernet protocol defined by 802.3. Protocol type or the Ethernet protocol type defined by 802.1q; if the Ethernet protocol type is the Ethernet protocol type defined by 802.1q, the Ethernet frame structure information also includes a virtual local area network VLAN tag;

The processing unit is configured to generate a filtering rule according to the initially available Ethernet frame structure information of the Ethernet session;

The transceiver unit is further configured to send the filtering rule to the user plane function network element.

16. The session management network element according to claim 15, wherein,

The processing unit is further configured to generate a forwarding rule according to the initially available Ethernet frame structure information of the Ethernet session;

The transceiver unit is further configured to send the forwarding rule to the user plane functional network element.

17. The session management network element according to claim 16, wherein the forwarding rule comprises the available path forwarding information of the Ethernet session and the Ethernet frame structure information of the Ethernet session, or comprises the available path forwarding information of the Ethernet session and the Ethernet frame structure information. The ether filter available for the session, or including the path forwarding information available for the ether session, the ether filter available for the ether session, and the ether frame structure information of the ether session; wherein, the ether frame structure information of the ether session includes the ether session initial The available Ethernet frame structure information or the available Ethernet frame structure information of the Ethernet session, the available Ethernet frame structure information of the Ethernet session is the received adjusted Ethernet frame structure information of the Ethernet session initially available from the policy control network element.

18 . The session management network element according to claim 17 , wherein the path forwarding information available for the Ethernet session comprises forwarding path information between the user plane function network element and another user plane function network element, 18 . At least one of the forwarding path information between the user plane functional network element and the access network and the forwarding path information between the user plane functional network element and the data network.

19. The session management network element according to any one of claims 15-18, wherein,

The transceiver unit is further configured to send the initially available Ethernet frame structure information of the Ethernet session to the policy control network element; receive the available Ethernet frame structure information of the Ethernet session from the policy control network element, the available Ethernet frame structure The structure information includes the adjusted Ethernet frame structure information that is initially available for the Ethernet session;

The processing unit generates a filtering rule according to the initially available Ethernet frame structure information of the Ethernet session, and is specifically used for:

A filter rule is generated according to the available Ethernet frame structure information of the Ethernet session, where the filter rule includes the available Ethernet frame structure information of the Ethernet session.

20. The session management network element according to claim 19, wherein,

The transceiver unit is further configured to receive an Ethernet session modification request, where the Ethernet session modification request includes an Ethernet filter, and the Ethernet filter includes initial available Ethernet frame structure information for the Ethernet session;

The transceiver unit is configured to send the Ethernet frame structure information that is initially available for the Ethernet session to the policy control network element, and is specifically configured to send the Ethernet filter to the policy control network element, where the Ethernet filter includes the initial Ethernet session. Available Ethernet frame structure information.

21. The session management network element according to any one of claims 15-18, wherein,

The transceiver unit is used to obtain the initially available Ethernet frame structure information of the Ethernet session, and is specifically configured to receive an authentication and authorization response from an authentication and authorization network element, where the authentication and authorization response includes the third Ethernet frame structure information that is initially available for the Ethernet session; Or, receive an event report from the user plane function network element, where the event report includes information about the structure of the fourth Ethernet frame that is initially available for the Ethernet session.

22 . The session management network element according to claim 21 , wherein the initially available Ethernet frame structure information of the Ethernet session comprises the fourth Ethernet frame available for the Ethernet session carried in the event report of the user plane function network element. 22 . structural information;

The transceiver unit is further configured to receive an authentication and authorization response from the authentication and authorization network element, where the authentication and authorization response includes an available media access control MAC address list and a configuration file index;

The transceiver unit is further configured to send the available MAC address list and the configuration file index to the policy control network element;

The transceiver unit is further configured to receive an event trigger from the policy control network element, where the event trigger includes the MAC address in the available MAC address list or the Ethernet frame structure information available to the terminal;

The transceiver unit is further configured to send the event trigger to the user plane functional network element.

23. A policy control network element, comprising: a transceiver unit and a processing unit,

The transceiver unit is configured to receive the Ethernet frame structure information initially available for the Ethernet session from the session management network element; the Ethernet frame structure information includes the Ethernet protocol type, and the Ethernet protocol type includes the Ethernet protocol type defined by 802.3 or 802.1q The Ethernet protocol type of definition; If the Ethernet protocol type is the Ethernet protocol type defined by 802.1q, the Ethernet frame structure information also includes a virtual local area network VLAN tag;

The processing unit is configured to adjust the initially available Ethernet frame structure information of the Ethernet session, and obtain the available Ethernet frame structure information of the Ethernet session, where the available Ethernet frame structure information of the Ethernet session includes the adjusted initial available Ethernet session. Ethernet frame structure information;

The transceiver unit is further configured to send the Ethernet frame structure information available for the Ethernet session to the session management network element.

24. The policy control network element according to claim 23, wherein the policy control network element further comprises:

25. The policy control network element according to claim 23 or 24, wherein,

The transceiver unit is further configured to receive the available MAC address list and configuration file index from the session management network element;

The processing unit is further configured to generate an event trigger according to the configuration file index and the available MAC address list, where the event trigger includes the MAC address of the terminal or the available Ethernet frame structure information of the terminal;

The transceiver unit is further configured to send the event trigger to the session management network element.

26. The policy control network element according to claim 23 or 24, wherein,

The processing unit is further configured to generate a terminal routing policy URSP according to the configuration file index and the available MAC address list, where the URSP is used to trigger the terminal to modify the Ethernet session;

The transceiver unit is further configured to send the URSP to the terminal.

27. A communication system, wherein the communication system comprises a session management network element and a user plane function network element;

The session management network element is used for acquiring the Ethernet frame structure information initially available for the Ethernet session; generating a filtering rule according to the Ethernet frame structure information initially available for the Ethernet session; sending the filtering rule to the user plane function network element; wherein, The initially available Ethernet frame structure information of the Ethernet session includes the third Ethernet frame structure information that is initially available for the Ethernet session carried in the authentication and authorization response of the authentication and authorization network element, and the third Ethernet frame structure information that is initially available for the Ethernet session carried in the event report of the user plane function network element. At least one of four Ethernet frame structure information; the Ethernet frame structure information includes the Ethernet protocol type, and the Ethernet protocol type includes the Ethernet protocol type defined by 802.3 or the Ethernet protocol type defined by 802.1q; if the Ethernet protocol type is The Ethernet protocol type defined by 802.1q, the Ethernet frame structure information also includes a virtual local area network VLAN tag;

The user plane function network element is configured to receive the filtering rule.

28. The system according to claim 27, wherein the system further comprises the policy control network element according to any one of claims 23-26.

29. A computer-readable storage medium, wherein instructions are stored in the computer-readable storage medium, and when the instructions are executed on a computer, the computer is made to perform the execution of any one of claims 1-14. Methods.