CN101212319A - Method and system for counting traffic in mobile communication - Google Patents

Abstract

Translated fromChinese

本发明提供了一种移动通信中统计流量的方法，该方法在独立深度包检测设备中建立上下文用户表，该表为映射关系，包括业务流模板、分组数据协议上下文类型及用户的信息；该方法还包括步骤：在远程认证拨号用户服务消息中附着可以区分主分组数据协议上下文和次分组数据协议上下文及不同次分组数据协议上下文的业务流模板信息；独立深度包检测根据收到的远程认证拨号用户服务消息及其中的业务流模板信息对上下文用户表项进行操作；独立深度包检测对经过其的数据包进行深度检测并提取业务流模板信息，通过在上下文用户表中查找该数据包的检测信息及其业务流模板信息来确定该数据包的类型并进行统计。本发明还提供一种移动通信中统计流量的系统。利用本发明，可以实现在相同分组数据协议连接内对不同分组数据协议上下文类型的数据包进行统计，从而可实现对不同内容无线增值业务分别计费。

The invention provides a method for counting traffic in mobile communication. The method establishes a context user table in an independent deep packet detection device, and the table is a mapping relationship, including service flow template, packet data protocol context type and user information; The method also includes the steps of: attaching service flow template information capable of distinguishing primary packet data protocol contexts, secondary packet data protocol contexts, and different secondary packet data protocol contexts in the remote authentication dial-up user service message; independent deep packet inspection according to the received remote authentication The dial-up user service message and the business flow template information in it operate on the context user table item; the independent deep packet inspection performs deep inspection on the data packet passing through it and extracts the business flow template information, and searches the data packet in the context user table The detection information and its service flow template information are used to determine the type of the data packet and make statistics. The invention also provides a system for counting traffic in mobile communication. The present invention can realize statistics of data packets of different packet data protocol context types in the same packet data protocol connection, thereby realizing separate charging for different content wireless value-added services.

Description

Translated fromChinese

移动通信中统计流量的方法和系统Method and system for counting traffic in mobile communication

技术领域technical field

本发明涉及移动通信领域中的计费技术，特别涉及一种移动通信中统计流量的方法和系统。The invention relates to charging technology in the field of mobile communication, in particular to a method and system for counting traffic in mobile communication.

背景技术Background technique

随着移动通信技术的不断发展，用户可以使用的无线增值业务不断增多，例如，用户可以使用话音业务、视频业务、在线游戏和股票等业务，并且在未来的移动通信中，还会引入更多种的无线增值业务。无线增值业务在移动通信网络中可以采用分组数据协议(Packet Data Protocol，PDP)，通过在建立的分组数据协议连接上传递数据包(Packet)的方式进行实现。With the continuous development of mobile communication technology, the number of wireless value-added services that users can use is increasing. For example, users can use services such as voice services, video services, online games, and stocks, and more will be introduced in future mobile communications. wireless value-added services. The wireless value-added service can adopt the packet data protocol (Packet Data Protocol, PDP) in the mobile communication network, and realize it by transferring the data packet (Packet) on the established packet data protocol connection.

不同无线增值业务的区别包括以下两点：The differences between different wireless value-added services include the following two points:

1、不同无线增值业务的内容所连接的服务器有可能不同。如在线游戏需要连接游戏内容服务提供商的服务器，而股票查询信息需要连接股票内容服务提供商的服务器。1. The servers connected to the content of different wireless value-added services may be different. For example, online games need to connect to the server of the game content service provider, and stock query information needs to connect to the server of the stock content service provider.

2、不同无线增值业务的内容所需要的服务质量(Quality of Service，QoS)也不同。服务质量包括响应时间、延迟等要求。例如视频业务和在线游戏等实时的业务，其需要的服务质量较高，即需要更小的数据包延迟、更短的响应时间等；而一些非实时的业务，需要的服务质量相对较低。2. The quality of service (Quality of Service, QoS) required by the content of different wireless value-added services is also different. Quality of service includes requirements such as response time, latency, etc. For example, real-time services such as video services and online games require high service quality, that is, smaller packet delays and shorter response times; while some non-real-time services require relatively low service quality.

根据无线增值业务内容的区别，数据包可以分为主分组数据协议上下文(Primary PDP Context)和次分组数据协议上下文(Secondary PDP Context)。According to the difference of wireless value-added service content, data packets can be divided into primary packet data protocol context (Primary PDP Context) and secondary packet data protocol context (Secondary PDP Context).

用户需要使用无线业务时，即移动通信网络需要进行包交换的连接时，激活主分组数据协议上下文，不论用户要进行交换的数据包是首次激活的主分组数据协议上下文类型还是再次激活的次分组数据协议上下文，这些数据包都使用一条相同的连接，即为使用同一分组数据协议上下文(PDPContext)。具体地，同一分组数据协议的互联网协议(Internet Protocol，IP)地址相同，而互联网协议地址保存在数据包的包头(header)部分，次分组数据协议上下文使用与主分组数据协议上下文相同的包头信息，但是次分组数据协议上下文的服务质量与主分组数据协议上下文的质量不同。例如，用户已建立了一条激活的分组数据协议上下文，且该分组数据协议上下文为主分组数据协议上下文，某一时刻，该用户使用新的业务，需要建立次分组数据协议上下文，此时，该次分组数据协议上下文重复使用已有的分组数据协议上下文的互联网协议地址。或者是，用户在已经建立了次分组数据协议上下文时，可以根据需要建立新的次分组数据协议上下文的情况。上述情况中的互联网协议地址都是相同的。When the user needs to use wireless services, that is, when the mobile communication network needs to perform a packet-switched connection, the primary packet data protocol context is activated, regardless of whether the data packet to be exchanged by the user is the primary packet data protocol context type activated for the first time or the secondary packet activated again Data protocol context, these data packets all use the same connection, that is, use the same packet data protocol context (PDPContext). Specifically, the Internet Protocol (IP) address of the same packet data protocol is the same, and the IP address is stored in the header (header) part of the data packet, and the secondary packet data protocol context uses the same packet header information as the primary packet data protocol context , but the QoS of the secondary PDP context is different from that of the primary PDP context. For example, the user has established an activated packet data protocol context, and the packet data protocol context is the primary packet data protocol context. At a certain moment, the user uses a new service and needs to establish a secondary packet data protocol context. The secondary PDP context reuses the Internet Protocol address of the existing PDP context. Or, when the user has already established the secondary packet data protocol context, the user can establish a new secondary packet data protocol context as required. The Internet Protocol addresses in the above cases are all the same.

在用户使用无线增值业务时，运营商需对用户进行基于内容的计费，即根据用户使用的无线增值业务，对用户使用的流量进行计费。现有网络中采用深度包检测(Deep Packet Inspection，DPI)设备对通过网关通用分组无线服务支持节点(Gateway General Packet Radio Service Support Node，GGSN)的数据包的流量进行统计，之后，运营商根据对不同无线增值业务内容规定的资费，采用配额服务器(Quota Server)对这些流量形成的基本计费信息进行计费。深度包检测设备可以是网关通用分组无线服务支持节点中的一个模块，也可以是一个单独的设备。作为单独设备的深度包检测设备称为独立深度包检测设备(Independent DPI，I-DPI)。这种独立深度包检测设备提供统一的接口，以应用于不同设备提供商提供的网关通用分组无线服务支持节点。When a user uses a wireless value-added service, the operator needs to perform content-based charging for the user, that is, charge the traffic used by the user according to the wireless value-added service used by the user. In the existing network, deep packet inspection (Deep Packet Inspection, DPI) equipment is used to collect statistics on the flow of data packets passing through the Gateway General Packet Radio Service Support Node (GGSN), and then the operator For the charges stipulated by different wireless value-added service contents, the quota server (Quota Server) is used to charge the basic billing information formed by these flows. The deep packet inspection device can be a module in the gateway general packet radio service support node, or it can be a separate device. A deep packet inspection device that is a separate device is called an independent deep packet inspection device (Independent DPI, I-DPI). This independent deep packet inspection device provides a unified interface to be applied to gateway general packet radio service support nodes provided by different equipment providers.

现有技术中的一种独立深度包检测设备为一种内容服务网关(ContentServices Gateway，CSG)，可以实现基于内容的统计。图1示出了该内容服务网关基于内容进行统计的原理。当用户使用无线业务时，随着分组数据协议上下文的激活(Active)、更新和去激活(Deactive)，生成计费开始、计费更新和计费停止信息，网关通用分组无线服务支持节点将计费开始、计费更新和计费停止信息以远程认证拨号用户服务(Remote Authentication Dial In UserService，RADIUS)消息的形式通过认证、授权、计费服务器(Authentication，Authorization，Accounting，AAA Server)发送到内容服务网关。内容服务网关中建立有已知用户表(Know User Table，KUT)，该表为一个映射表，包含互联网协议地址和用户身份(Identity，ID)的对应关系信息，内容服务网关可以根据发来的远程认证拨号用户服务消息对KUT表项进行创建、更新和删除操作。之后，网关通用分组无线服务支持节点与互联网(Internet)之间的数据包经过内容服务网关的过程中，内容服务网关可以根据已知用户表中的对应关系根据不同的数据包的互联网协议地址得知该数据包分别对应于哪个用户，从而实现对该用户产生的流量进行统计。An independent deep packet inspection device in the prior art is a Content Services Gateway (ContentServices Gateway, CSG), which can implement content-based statistics. FIG. 1 shows the principle of the content service gateway performing statistics based on content. When the user uses the wireless service, along with the activation (Active), update and deactivation (Deactive) of the packet data protocol context, the charging start, charging update and charging stop information are generated, and the GGPRS support node will calculate Billing start, billing update and billing stop information are sent to content through authentication, authorization, accounting server (Authentication, Authorization, Accounting, AAA Server) in the form of Remote Authentication Dial In User Service (RADIUS) message service gateway. A known user table (Know User Table, KUT) is established in the content service gateway, which is a mapping table, including the corresponding relationship information between the Internet protocol address and the user identity (Identity, ID), and the content service gateway can Remote authentication dial-up user service messages create, update and delete KUT entries. Afterwards, during the process of the data packet between the gateway GPRS support node and the Internet (Internet) passing through the content service gateway, the content service gateway can obtain the IP addresses of different data packets according to the corresponding relationship in the known user table. Know which user the data packet corresponds to, so as to realize the statistics of the traffic generated by the user.

但是，内容服务网关只能通过分组数据协议上下文的互联网协议地址得到对应的用户，从而对该用户产生的流量进行统计，而同一用户的主分组数据协议上下文和次分组数据协议上下文的互联网协议地址相同，则内容服务网关在进行统计时，会将以上两者都统计为主分组数据协议上下文。这样，当需要对不同的分组数据协议上下文分开统计时，包括对主分组数据协议上下文和次分组数据协议上下文分开统计，或对多个次分组数据协议上下文分开统计，现有技术的方法和设备难以实现要求，进而难以实现基于不同内容的计费。However, the content service gateway can only obtain the corresponding user through the IP address of the packet data protocol context, so as to collect statistics on the traffic generated by the user, while the IP addresses of the primary packet data protocol context and the secondary packet data protocol context of the same user If they are the same, the content service gateway will count both of them as the primary packet data protocol context when performing statistics. In this way, when separate statistics are required for different packet data protocol contexts, including separate statistics for the primary packet data protocol context and the secondary packet data protocol context, or separate statistics for multiple secondary packet data protocol contexts, methods and devices in the prior art It is difficult to realize the requirements, and then it is difficult to realize charging based on different contents.

发明内容Contents of the invention

本发明的目的是提供一种移动通信中统计流量的方法和系统，以克服现有技术中不能对不同的分组数据协议上下文分开统计，进而难以实现基于不同内容计费的缺点。The purpose of the present invention is to provide a method and system for counting traffic in mobile communication, so as to overcome the disadvantages in the prior art that different packet data protocol contexts cannot be counted separately, and then it is difficult to realize charging based on different contents.

为了解决上述技术问题，根据本发明的一个方面，本发明提供了一种移动通信中统计流量的方法，在独立深度包检测设备中建立上下文用户表，该表为映射关系，该映射关系包括业务流模板、分组数据协议上下文类型及用户的信息，并包括步骤：In order to solve the above-mentioned technical problems, according to one aspect of the present invention, the present invention provides a method for counting traffic in mobile communication, and establishes a context user table in an independent deep packet inspection device, the table is a mapping relationship, and the mapping relationship includes business Flow template, packet data protocol context type and user information, including steps:

A.在用户服务消息(例如远程认证拨号用户服务消息)中附着可以区分分组数据协议上下文类型的业务流模板信息；A. Attach the service flow template information that can distinguish the packet data protocol context type in the user service message (such as the remote authentication dial-up user service message);

B.独立深度包检测设备根据所收到的远程认证拨号用户服务消息及其中的业务流模板信息内容对上下文用户表项进行操作；B. The independent deep packet inspection device operates the context user entry according to the received remote authentication dial-up user service message and the business flow template information content therein;

C.独立深度包检测设备对经过其的数据包进行深度检测并提取业务流模板信息，通过在上下文用户表中查找该数据包的检测信息及其业务流模板信息来确定该数据包的类型并进行统计。C. The independent deep packet detection device performs deep detection on the data packets passing through it and extracts the business flow template information, and determines the type of the data packet by looking up the detection information of the data packet and its business flow template information in the context user table and Make statistics.

所述步骤A可以包括：Said step A may comprise:

分组数据协议激活、更新或去激活过程中，在相应地计费开始、计费更新和计费停止的远程认证拨号用户服务消息中附着可以区分主分组数据协议上下文和次分组数据协议上下文及区分不同次分组数据协议上下文类型的业务流模板信息。During the activation, update or deactivation of the packet data protocol, it is possible to distinguish between the primary packet data protocol context and the secondary packet data protocol context and distinguish Service flow template information of different packet data protocol context types.

所述步骤B可以包括：Said step B may comprise:

独立深度包检测设备根据收到的远程认证拨号用户服务消息及其中的业务流模板信息内容相应地创建、更新和删除上下文用户表中的表项。The independent deep packet inspection device correspondingly creates, updates and deletes entries in the context user table according to the received remote authentication dial-up user service message and the information content of the business flow template in it.

所述步骤C可以包括：Said step C may comprise:

C1.独立深度包检测设备对经过其的数据包进行深度检测并提取业务流模板信息；C1. The independent deep packet inspection device performs deep inspection on the data packets passing through it and extracts the business flow template information;

C2.通过在上下文用户表中查找该数据包的检测信息及其业务流模板信息来确定该数据包对应的用户和对应分组数据协议上下文的类型并统计。C2. Determine the user corresponding to the data packet and the type of the corresponding packet data protocol context by looking up the detection information of the data packet and its service flow template information in the context user table and make statistics.

所述步骤C2可以包括：Said step C2 may comprise:

通过在上下文用户表中查找该数据包的检测信息确定该数据包对应的用户，通过业务流模板信息确定对应的分组数据协议上下文的类型；Determine the user corresponding to the data packet by searching the detection information of the data packet in the context user table, and determine the type of the corresponding packet data protocol context through the service flow template information;

统计不同用户不同分组数据协议上下文类型的数据流量。Collect statistics on the data traffic of different packet data protocol context types for different users.

所述步骤C2还可以包括：The step C2 may also include:

通过在上下文用户表中查找该数据包的检测信息确定该数据包对应的用户，通过业务流模板信息确定对应的次分组数据协议上下文的类型；Determine the user corresponding to the data packet by searching the detection information of the data packet in the context user table, and determine the type of the corresponding secondary packet data protocol context through the service flow template information;

统计不同用户不同次分组数据协议上下文类型的数据流量。Collect statistics on data traffic of different packet data protocol context types for different users.

所述方法之后可以进一步包括：The method may further include afterwards:

对不同用户的不同和分组数据协议上下文类型，和/或不同的次分组数据协议上下文类型的数据流量分别计费。The data traffic of different primary packet data protocol context types and/or different secondary packet data protocol context types of different users are charged separately.

根据本发明的另一个方面，本发明还公开了一种移动通信中统计流量的系统，包括网关通用分组无线服务支持节点和独立深度包检测设备，其中：According to another aspect of the present invention, the present invention also discloses a system for counting traffic in mobile communications, including a gateway general packet radio service support node and an independent deep packet inspection device, wherein:

网关通用分组无线服务支持节点用于在用户服务消息(例如远程认证拨号用户服务消息)中附着可以区分分组数据协议上下文类型的业务流模板信息，并将该信息发送到独立深度包检测设备；The gateway general packet radio service support node is used to attach service flow template information that can distinguish packet data protocol context types in user service messages (such as remote authentication dial-up user service messages), and send the information to an independent deep packet inspection device;

独立深度包检测设备用于根据接收的远程认证拨号用户服务消息及其业务流模板信息对自身创建的上下文用户表进行操作，并对经过的数据包通过查找上下文用户表进行类型区分和统计。The independent deep packet inspection device is used to operate the context user table created by itself according to the received remote authentication dial-up user service message and its business flow template information, and to distinguish and count the types of passing data packets by looking up the context user table.

所述网关通用分组无线服务支持节点可具有业务流模板信息附着单元，用于在分组数据协议激活、更新或去激活过程中，在相应地计费开始、计费更新和计费停止的远程认证拨号用户服务消息中附着可以区分分组数据协议上下文类型的业务流模板信息。The gateway general packet radio service support node may have a service flow template information attachment unit, which is used for remote authentication of corresponding charging start, charging update and charging stop during the activation, update or deactivation process of the packet data protocol The service flow template information that can distinguish the packet data protocol context type is attached to the dial-up user service message.

所述独立深度包检测设备可具有分组数据协议会话管理单元、业务流模板单元、上下文用户表单元以及检测和统计单元，其中，The independent deep packet inspection device may have a packet data protocol session management unit, a service flow template unit, a context user table unit, and a detection and statistics unit, wherein,

分组数据协议会话管理单元，用于接收包含业务流模板信息的远程认证拨号用户服务消息，并提取该消息中的业务流模板信息；A packet data protocol session management unit, configured to receive a remote authentication dial-up user service message containing service flow template information, and extract the service flow template information in the message;

上下文用户表单元，该单元建有上下文用户表，该表为映射关系，该映射关系由包括业务流模板、分组协议上下文类型及用户的信息构成；A context user table unit, which has a context user table, which is a mapping relationship, and the mapping relationship is composed of information including business flow templates, packet protocol context types, and users;

业务流模板单元，用于提取接收到的远程认证拨号用户服务消息中的业务流模板信息，并根据接收的远程认证拨号用户服务消息及提取的业务流模板信息，在上下文用户表中相应地创建、更新或删除表项；The business flow template unit is used to extract the business flow template information in the received remote authentication dial-up user service message, and create correspondingly in the context user table according to the received remote authentication dial-up user service message and the extracted business flow template information , update or delete entries;

检测和统计单元，用于对经过其的数据包进行深度检测，得到该数据包的信息及其业务流模板信息，通过在上下文用户表中查找该数据包的检测信息及其业务流模板信息来确定该数据包的类型并统计其流量。The detection and statistics unit is used to perform in-depth detection on the data packets passing through it, obtain the information of the data packet and its business flow template information, and find the detection information of the data packet and its business flow template information in the context user table Determine the type of the packet and count its traffic.

由以上本发明提供的技术方案可见，本发明在独立深度包检测设备中建立上下文用户表，并扩展网关通用分组无线服务支持节点发给独立深度包检测设备的远程认证拨号用户服务消息，将该消息增加区分具有相同互联网协议地址的不同分组数据协议上下文的业务流模板，独立深度包检测设备在收到该扩展的远程认证拨号用户服务消息时，根据远程认证拨号用户服务中业务流模板内容和其它信息创建、更新或删除该上下文用户表中的表项，之后，网关通用分组无线服务支持节点对经过的数据包根据该上下文用户表确定其分组数据协议上下文类型并对其进行统计。It can be seen from the technical solution provided by the present invention above that the present invention establishes a context user table in the independent deep packet inspection device, and expands the remote authentication dial-up user service message sent by the gateway general packet wireless service support node to the independent deep packet inspection device, and the The message adds a business flow template that distinguishes different packet data protocol contexts with the same Internet protocol address. When the independent deep packet inspection device receives the extended remote authentication dial-up user service message, it Other information creates, updates or deletes entries in the context user table. Afterwards, the GGPRS support node determines the packet data protocol context type of the passing data packets according to the context user table and counts them.

因此，利用本发明，可以实现对相同的分组数据协议连接内的不同分组数据协议上下文类型的数据包进行统计，甚至是对不同次分组数据协议上下文类型的数据进行统计，从而可以实现对不同内容无线增值业务分别计费。Therefore, by utilizing the present invention, it is possible to perform statistics on data packets of different packet data protocol context types in the same packet data protocol connection, or even to perform statistics on data of different packet data protocol context types, so that different content Wireless value-added services are billed separately.

附图说明Description of drawings

图1为现有技术中的一种基于统计的原理图；Fig. 1 is a kind of schematic diagram based on statistics in the prior art;

图2为本发明方法一个实施例的流程；Fig. 2 is the flow process of an embodiment of the inventive method;

图3为本发明分组数据协议激活过程中的一个实施例的信令流程；FIG. 3 is a signaling flow of an embodiment in the packet data protocol activation process of the present invention;

图4为本发明分组数据协议更新过程中的一个实施例的信令流程；FIG. 4 is a signaling flow of an embodiment in the packet data protocol update process of the present invention;

图5为本发明分组数据协议去激活过程中的一个实施例的信令流程；FIG. 5 is a signaling flow of an embodiment in the packet data protocol deactivation process of the present invention;

图6为本发明系统的一个实施例的框架图。Figure 6 is a block diagram of one embodiment of the system of the present invention.

具体实施方式Detailed ways

本发明的核心是在独立深度包检测设备中建立上下文用户表(ContextUser Table，CUT)，并扩展网关通用分组无线服务支持节点发给独立深度包检测设备的远程认证拨号用户服务消息，将该消息增加区分具有相同互联网协议地址的不同分组数据协议上下文的业务流模板(Traffic Flow Template，TFT)信息，独立深度包检测设备在收到该扩展的远程认证拨号用户服务消息时，根据远程认证拨号用户服务中业务流模板内容和其它信息创建、更新或删除该上下文用户表中的表项。之后，网关通用分组无线服务支持节点对经过的数据包根据该上下文用户表确定其分组数据协议上下文类型并对其进行统计。具体实施时，在独立深度包检测设备中建立上下文用户表(ContextUser Table，CUT)，并将能区分具有相同互联网协议地址的不同分组数据协议上下文的业务流模板信息附着在网关通用分组无线服务支持节点发给独立深度包检测设备的远程认证拨号用户服务消息中，独立深度包检测设备利用收到的计费开始、计费更新和计费停止时的该远程认证拨号用户服务消息时，分别在上下文用户表中创建、更新和删除与业务流模板内容对应的表项，以使数据包在经过网关通用分组无线服务支持节点时根据该上下文用户表确定其分组数据协议上下文类型，并对其进行统计。The core of the present invention is to set up a context user table (ContextUser Table, CUT) in the independent deep packet detection device, and expand the remote authentication dial-up user service message sent by the gateway general packet radio service support node to the independent deep packet detection device, and the message Increase the traffic flow template (Traffic Flow Template, TFT) information that distinguishes different packet data protocol contexts with the same Internet protocol address. When the independent deep packet inspection device receives the extended remote authentication dial-up user service message, it Create, update or delete entries in the context user table based on the content of the business flow template and other information in the service. Afterwards, the GGPRS support node determines the packet data protocol context type of the passing data packets according to the context user table and makes statistics on them. During specific implementation, a context user table (ContextUser Table, CUT) is established in an independent deep packet inspection device, and the service flow template information capable of distinguishing different packet data protocol contexts with the same Internet protocol address is attached to the gateway general packet radio service support In the remote authentication dial-up user service message sent by the node to the independent deep packet inspection device, when the independent deep packet inspection device uses the received remote authentication dial-up user service message at the time of accounting start, accounting update and accounting stop, respectively in Create, update and delete table items corresponding to the content of the service flow template in the context user table, so that when the data packet passes through the gateway general packet radio service support node, the packet data protocol context type is determined according to the context user table, and its statistics.

为了使本领域技术人员更好地理解本发明方案，下面结合附图和实施方式对本发明作进一步的详细说明。In order to enable those skilled in the art to better understand the solution of the present invention, the present invention will be further described in detail below in conjunction with the accompanying drawings and embodiments.

本领域技术人员知道，现有技术中，在创建分组数据协议上下文时，可以包含有业务流模板信息，由服务通用分组无线服务支持节点(Serving GPRSSupport Node，SGSN)发送包含该业务流模板的分组数据协议上下文到网关通用分组无线服务支持节点。在第三代合作伙伴项目(The 3rd GenerationPartnership Project，3GPP)的技术规范(Technical Specification，TS)29.060(GPRS Tunneling Protocol across Gn and Gp Interfaces)中规定，创建分组数据协议上下文时，需要的信息元(Information Elements)如下表所示：Those skilled in the art know that in the prior art, when a packet data protocol context is created, it may include service flow template information, and the serving general packet radio service support node (Serving GPRSSupport Node, SGSN) sends a packet containing the service flow template Data Protocol Context to Gateway GPRS Support Node. In the Technical Specification (TS) 29.060 (GPRS Tunneling Protocol across Gn and Gp Interfaces) of the 3rd Generation Partnership Project (The 3rd Generation Partnership Project, 3GPP), it is stipulated that when creating a packet data protocol context, the required information element ( Information Elements) as shown in the following table:

  信息元information element  现有的需求情况Existing demand situation  国际移动用户识别号International Mobile Subscriber Identification Number  条件性的Conditional  隧道端点标识数据ITunnel endpoint identification data I  必须的 necessary  隧道端点标识控制平面Tunnel endpoint identification control plane  条件性的Conditional  网络服务接入点标识Network service access point identification  必须的 necessary

  链接的网络服务接入点标识Linked network service access point identifier  条件性的Conditional  终端用户地址End user address  条件性的Conditional  接入点名access point name  条件性的Conditional  用于信令的服务通用分组无线服务支持节点地址Service general packet radio service support node address for signaling  必须的 necessary  用于用户流量的服务通用分组无线服务支持节点地址Service general packet radio service support node address for user traffic  必须的 necessary  移动台综合业务数字网Mobile Station Integrated Services Digital Network  条件性的Conditional  服务质量架构Quality of Service Architecture  必须的 necessary  业务流模板Business Flow Template  条件性的Conditional  ......  可选的optional

表1.创建分组数据协议上下文时的所需信息元Table 1. Required information elements when creating a packet data protocol context

其中，第一列为信息元，第二列为需求情况。“条件性的”意为在一定条件下该行的信息元是需要的，“必须的”意为任何条件下该行的信息元都是需要的。Among them, the first column is the information element, and the second column is the demand situation. "Conditional" means that the information element of this row is required under certain conditions, and "required" means that the information element of this row is required under any condition.

从表中可见，业务流模板是在一定条件下才需要的。其需要的条件分为，当多于一个的上下文分组数据协议，且这些上下文分组数据协议具有相同的互联网协议地址时，这些上下文分组数据协议须共有一个业务流模板。或者，每个上下文分组数据协议须有一个业务流模板。具体地，如果不需要区分主分组数据协议上下文和次分组数据协议上下文时，所有的分组数据协议上下文包含相同的业务流模板，当需要区分具有相同地址的不同分组数据协议上下文时，每个上下文分组数据协议有一个业务流模板。结合本发明的目的，本发明在下面以每个分组数据协议上下文有一个业务流模板的情况为例进行说明。It can be seen from the table that the business flow template is only needed under certain conditions. The required conditions are as follows: when there are more than one contextual packet data protocols, and these contextual packet data protocols have the same Internet protocol address, these contextual packet data protocols must share a service flow template. Alternatively, there shall be one traffic flow template per context packet data protocol. Specifically, if there is no need to distinguish between the primary packet data protocol context and the secondary packet data protocol context, all packet data protocol contexts contain the same service flow template, and when it is necessary to distinguish different packet data protocol contexts with the same address, each context The packet data protocol has a traffic flow template. In conjunction with the purpose of the present invention, the present invention will be described below by taking the case where each packet data protocol context has a service flow template as an example.

业务流模板中的信息包括：The information in the business flow template includes:

源地址和子网掩码source address and subnet mask协议编号(Protocol Number)/下一包头(Next Header)Protocol Number/Next Header目的端口范围(Destination Port Range)Destination Port Range互联网协议加密参数目录(IP Sec Security Parameter Index，SPI)Internet Protocol Encryption Parameter Index (IP Sec Security Parameter Index, SPI)服务类型(Type of Service，Tos)/业务等级(Traffic Class)和掩码(Mask)Service Type (Type of Service, Tos)/Business Class (Traffic Class) and Mask (Mask)流量标签(Flow Label)Flow Label

表2.业务流模板信息内容表Table 2. Business flow template information content table

不同的上下文分组数据协议的业务流模板不同。该业务流模板用于使网关通用分组无线服务支持节点对经过其的具有相同互联网协议地址的分组数据协议上下文可以区分出数据包的净荷和服务质量等级信息。更重要的是，利用业务流模板中的端口范围、服务类型(TOS)和流量标签(Flow Label)等信息可以区分主分组数据协议上下文和次分组数据协议上下文，还可以区分不同的次分组数据协议上下文。Different context packet data protocols have different service flow templates. The service flow template is used to enable the gateway general packet radio service support node to distinguish the payload and quality of service level information of the data packet from the packet data protocol context passing through it with the same Internet protocol address. More importantly, using information such as the port range, type of service (TOS) and flow label (Flow Label) in the business flow template can distinguish between the primary packet data protocol context and the secondary packet data protocol context, and can also distinguish different secondary packet data protocol context.

本发明就是在分组数据协议上下文激活、更新和去激活的过程中，对网关通用分组无线服务支持节点发给独立深度包检测设备的计费开始、计费更新、计费停止的远程认证拨号用户服务消息进行扩展，即是在其中增加业务流模板信息。In the process of activation, update and deactivation of the packet data protocol context, the present invention is for the remote authentication dial-up user of the charging start, charging update and charging stop sent by the gateway general packet wireless service support node to the independent deep packet inspection device To extend the service message is to add business flow template information in it.

本发明利用业务流模板信息，不需要对现有的数据交换域(PacketSwitched)的协议进行过大的修改，易于实现，而且易于与现有的网络设备进行连接。The invention utilizes the service flow template information, does not need to modify the protocol of the existing data exchange domain (PacketSwitched) too much, is easy to realize, and is easy to connect with the existing network equipment.

本发明还在独立深度包检测设备中创建一个上下文用户表(Context UserTable，CUT)，该上下文用户表是一个映射表，是将远程认证拨号用户服务消息中包括的业务流模板的信息与用户和分组数据协议上下文类型作映射。具体地，由远程认证拨号用户服务消息包头中的互联网协议地址得到该数据包对应的用户。由远程认证拨号用户服务消息中的业务流模板信息得到该数据包对应的分组数据协议上下文类型。例如，由业务流模板信息的区别可以区分出主分组数据协议上下文和次分组数据协议上下文类型，还可以区分出不同的次分组数据协议上下文类型。例如，某用户在分组数据协议上下文激活时，其类型是次分组数据协议上下文类型，在网关通用分组无线服务支持节点发送到独立深度包检测设备的计费开始的远程认证拨号用户服务消息中增加业务流模板信息，独立深度包检测设备收到该远程认证拨号用户服务消息后，得到该远程认证拨号用户服务消息中的互联网协议地址对应的用户和该业务流模板中的信息对应的为次分组数据协议上下文类型的映射关系。这样的映射关系表提供了判断分组数据协议上下文类型的标准和手段。The present invention also creates a context user table (Context UserTable, CUT) in the independent depth packet detection device, and this context user table is a mapping table, is to combine the information of the service flow template included in the remote authentication dial-up user service message with the user and Packet data protocol context type for mapping. Specifically, the user corresponding to the data packet is obtained from the IP address in the packet header of the remote authentication dial-up user service message. The packet data protocol context type corresponding to the data packet is obtained from the service flow template information in the remote authentication dial-up user service message. For example, the primary packet data protocol context and the secondary packet data protocol context type can be distinguished based on the difference of the service flow template information, and different secondary packet data protocol context types can also be distinguished. For example, when a user is activated in the packet data protocol context, its type is the secondary packet data protocol context type, which is added in the remote authentication dial-up user service message sent by the gateway general packet radio service support node to the independent deep packet inspection device for accounting start Business flow template information, after the independent deep packet inspection device receives the remote authentication dial-up user service message, it obtains the user corresponding to the Internet Protocol address in the remote authentication dial-up user service message and the information in the business flow template corresponding to the secondary group The mapping relationship of data protocol context types. Such a mapping relationship table provides standards and means for judging the context type of the packet data protocol.

以下介绍本发明方法的一个实施例的执行过程。图2示出了该实施例的流程。The execution process of an embodiment of the method of the present invention is introduced below. Fig. 2 shows the flow of this embodiment.

步骤201：在分组数据协议上下文激活、更新和去激活的过程中，在计费开始、计费更新和计费停止的远程认证拨号用户服务消息内附着业务流模板信息。Step 201: During the process of activating, updating and deactivating the packet data protocol context, attach the service flow template information to the remote authentication dial-up user service messages of charging start, charging update and charging stop.

当用户使用无线增值业务时，启动基于包交换的连接，包括分组数据协议上下文激活、更新和去激活。SGSN将分组数据协议上下文激活、更新和去激活的消息发到网关通用分组无线服务支持节点，网关通用分组无线服务支持节点发送与之相关的计费开始、计费更新和计费停止的远程认证拨号用户服务消息，经由认证、授权、计费服务器到达独立深度包检测设备。本发明即是在这些远程认证拨号用户服务消息中增加业务流模板信息。该业务流模板信息包含表明该分组数据协议上下文类型的信息，例如端口范围、服务类型和流量标签等信息。When the user uses the wireless value-added service, the connection based on packet switching is started, including activation, update and deactivation of the packet data protocol context. SGSN sends the packet data protocol context activation, update and deactivation messages to the GGPRS support node, and the GGPRS support node sends related remote authentication of charging start, charging update and charging stop The dial-up user service message reaches the independent deep packet inspection device through the authentication, authorization, and accounting servers. The present invention adds business flow template information in these remote authentication dial-up user service messages. The service flow template information includes information indicating the context type of the packet data protocol, such as port range, service type, flow label and other information.

步骤202：独立深度包检测设备在收到远程认证拨号用户服务消息后，根据远程认证拨号用户服务消息及业务流模板信息相应地创建、更新和删除上下文用户表中的表项。Step 202: After receiving the remote authentication dial-up user service message, the independent deep packet inspection device correspondingly creates, updates and deletes entries in the context user table according to the remote authentication dial-up user service message and business flow template information.

可以根据每一个远程认证拨号用户服务消息得到一个上下文用户表的表项。而且，远程认证拨号用户服务消息可以为计费开始、计费更新和计费停止类型，则根据这些类型，可以对上下文用户表中的表项相应地进行创建、更新和删除。An entry of a context user table can be obtained according to each remote authentication dial-up user service message. Moreover, the remote authentication dial-up user service message can be of the accounting start, accounting update and accounting stop types, and according to these types, the entries in the context user table can be created, updated and deleted accordingly.

步骤203：独立深度包检测设备对经过其的数据包进行深度检测，并将数据包深度检测的结果进行业务流模板信息的提取，根据检测结果及提取到的业务流模板信息在上下文用户表进行查找，确定该数据包对应的用户和分组数据协议上下文类型，并进行流量统计。Step 203: The independent deep packet inspection device performs in-depth inspection on the data packets passing through it, and extracts the service flow template information from the result of the data packet in-depth inspection. Find and determine the user and packet data protocol context type corresponding to the data packet, and perform traffic statistics.

用户的数据包的传送时可由网关通用分组无线服务支持节点通过独立深度包检测设备到互联网之间传送的。这种情况下，这些数据包的连接，即分组数据协议上下文中都包含了业务流模板信息。这样，这些数据包在经过独立深度包检测设备时，独立深度包检测设备可以对其进行深度检测，得到其业务流模板信息，之后在上下文用户表中查询，确定该数据包是哪个用户的哪种分组数据协议上下文类型，即区分出该数据包是次分组数据协议上下文还是次分组数据协议上下文类型。进一步，还可以确定该数据包是哪个用户的哪种次分组数据协议上下文。When the user's data packet is transmitted, it can be transmitted between the gateway general packet radio service support node and the Internet through an independent deep packet inspection device. In this case, the connection of these data packets, that is, the context of the packet data protocol includes the service flow template information. In this way, when these data packets pass through the independent deep packet inspection device, the independent deep packet inspection device can perform in-depth inspection on them to obtain the business flow template information, and then query in the context user table to determine which user the data packet belongs to. A packet data protocol context type, that is, to distinguish whether the data packet is a secondary packet data protocol context or a secondary packet data protocol context type. Further, it can also be determined which sub-packet data protocol context of which user the data packet belongs to.

确定数据包的分组数据协议上下文类型后，独立深度包检测设备还可以对用户的不同分组数据协议上下文的数据包流量进行统计。After determining the packet data protocol context type of the data packet, the independent deep packet inspection device can also collect statistics on the packet traffic of different packet data protocol contexts of the user.

上述步骤之后，独立深度包检测设备将这些统计的不同分组数据协议上下文的流量发送到配额服务器，配额服务器对其分别进行计费，再将每个用户的各种分组数据协议上下文的费用进行计算后得到总费用。After the above steps, the independent deep packet inspection device sends the statistical traffic of different packet data protocol contexts to the quota server, and the quota server charges them separately, and then calculates the cost of each user's various packet data protocol contexts Then get the total cost.

其中，步骤1中的分组数据协议激活、更新和去激活过程中由网关通用分组无线服务支持节点发送到独立深度包检测设备的相应地计费开始、计费更新和计费停止消息，其信令流程分别如下所述。Wherein, during the packet data protocol activation, update and deactivation process in step 1, the corresponding accounting start, accounting update and accounting stop messages sent by the gateway general packet radio service support node to the independent deep packet inspection device, its information The order process is as follows.

1.分组数据协议激活过程。1. Packet data protocol activation process.

图3示出了这个过程的信令流程的一个例子。Figure 3 shows an example of the signaling flow of this process.

301：网关通用分组无线服务支持节点收到发来的创建分组数据协议上下文请求(Create PDP Context Request)；301: The gateway GPRS support node receives the packet data protocol context creation request (Create PDP Context Request);

302：网关通用分组无线服务支持节点发送接入请求(Access Request)到认证、授权、计费服务器；302: The gateway GPRS support node sends an access request (Access Request) to the authentication, authorization, and accounting server;

该步是网关通用分组无线服务支持节点请求认证、授权、计费服务器对该分组数据协议上下文进行认证；This step is that the gateway GPRS support node requests the authentication, authorization, and accounting server to authenticate the packet data protocol context;

303：认证、授权、计费服务器返回接入允许(Access Accept)消息到网关通用分组无线服务支持节点；303: the authentication, authorization, and accounting server returns an Access Accept (Access Accept) message to the gateway GPRS support node;

该步是认证、授权、计费服务器通过了对分组数据协议上下文的认证，返回认证通过消息；This step is that the authentication, authorization, and accounting server have passed the authentication of the packet data protocol context, and return an authentication pass message;

304：网关通用分组无线服务支持节点发送信用控制请求(Credit ControlRequest，CCR)初始化(Initial)消息到配额服务器；304: The gateway GPRS support node sends a Credit Control Request (CCR) initialization (Initial) message to the quota server;

该步是网关通用分组无线服务支持节点从配额服务器请求可供用户使用的信用额度。In this step, the gateway GPRS support node requests the credit limit available to the user from the quota server.

305：配额服务器返回信用控制应答(Credit Control Answer，CCA)初始化(Initial)消息到网关通用分组无线服务支持节点；305: The quota server returns a Credit Control Answer (CCA) initialization (Initial) message to the GGPRS support node;

该步是配额服务器向网关通用分组无线服务支持节点返回可供用户使用的信用额度。In this step, the quota server returns the credit limit available to the user to the GGPRS support node.

306：网关通用分组无线服务支持节点发送包含业务流模板信息的计费开始(Accounting Start)请求的远程认证拨号用户服务消息，经由认证、授权、计费服务器到达独立深度包检测设备；306: The gateway GPRS support node sends the remote authentication dial-up user service message containing the accounting start (Accounting Start) request of the business flow template information, and reaches the independent deep packet inspection device via the authentication, authorization, and accounting servers;

307：独立深度包检测设备返回计费开始响应(Accounting Start Response)消息，经过认证、授权、计费服务器到达网关通用分组无线服务支持节点；307: The independent deep packet inspection device returns an Accounting Start Response (Accounting Start Response) message, and the authentication, authorization, and accounting server arrives at the GGPRS support node;

以上两步完成了在计费创建时将可以区分分组数据协议上下文类型的业务流模板信息发送到独立深度包检测设备。这样，独立深度包检测设备可以根据收到的这些业务流模板信息和远程认证拨号用户服务消息中的其它信息，如互联网协议地址等信息，在后续的步骤202中创建关于该用户和该用户的分组数据协议上下文类型信息的表项；The above two steps complete the sending of the service flow template information that can distinguish the packet data protocol context type to the independent deep packet inspection device when the billing is created. In this way, the independent deep packet inspection device can create information about the user and the user in the subsequent step 202 according to the received service flow template information and other information in the remote authentication dial-up user service message, such as Internet protocol address and other information. An entry of packet data protocol context type information;

308：网关通用分组无线服务支持节点发送加载配额请求(Push QuotaRequest)消息到独立深度包检测设备；308: The gateway GPRS support node sends a Push QuotaRequest (Push QuotaRequest) message to the independent deep packet inspection device;

309：独立深度包检测设备返回加载配额响应(Push Quota Response)消息到网关通用分组无线服务支持节点；309: The independent deep packet inspection device returns a Push Quota Response (Push Quota Response) message to the GGPRS support node;

310：网关通用分组无线服务支持节点返回创建分组数据协议上下文响应消息到SGSN。310: The gateway GPRS support node returns a packet data protocol context creation response message to the SGSN.

2.分组数据协议更新过程。2. Packet data protocol update process.

图4示出了这个过程的信令流程的一个例子。Figure 4 shows an example of the signaling flow of this process.

401：网关通用分组无线服务支持节点发送包含业务流模板信息的计费更新(Accounting Update)请求的远程认证拨号用户服务消息，经由认证、授权、计费服务器到达独立深度包检测设备；401: The gateway GPRS support node sends a remote authentication dial-up user service message containing an accounting update (Accounting Update) request for business flow template information, and reaches the independent deep packet inspection device via the authentication, authorization, and accounting server;

402：独立深度包检测设备发送更新配额请求(Update Quota Request)消息到配额服务器；402: The independent deep packet inspection device sends an update quota request (Update Quota Request) message to the quota server;

403：配额服务器返回更新配额响应(Update Quota Response)消息到独立深度包检测设备；403: The quota server returns an Update Quota Response (Update Quota Response) message to the independent deep packet inspection device;

404：独立深度包检测设备返回响应计费更新的消息，经过认证、授权、计费服务器到达网关通用分组无线服务支持节点；404: The independent deep packet inspection device returns a message in response to the accounting update, and the authentication, authorization, and accounting server arrives at the gateway general packet wireless service support node;

采用以上步骤，完成了在计费更新时将可以区分分组数据协议上下文类型的业务流模板信息发送到独立深度包检测设备；这样，独立深度包检测设备可以根据所收到的这些业务流模板信息以及远程认证拨号用户服务消息中的其它信息(如互联网协议地址等信息)在后续的步骤202中更新关于该用户和该用户的分组数据协议上下文类型信息的表项。By adopting the above steps, the service flow template information that can distinguish the packet data protocol context type is sent to the independent deep packet inspection device when charging is updated; in this way, the independent deep packet inspection device can use the received service flow template information As well as other information in the remote authentication dial-up user service message (such as Internet protocol address and other information) in the subsequent step 202, the entry about the user and the packet data protocol context type information of the user is updated.

3.分组数据协议去激活过程。3. Packet data protocol deactivation process.

图5示出了这个过程的信令流程的一个例子。Figure 5 shows an example of the signaling flow of this process.

501：网关通用分组无线服务支持节点收到发来的删除分组数据协议上下文请求；501: The gateway GPRS support node receives the request to delete the packet data protocol context;

502：网关通用分组无线服务支持节点发送包含业务流模板信息的计费停止请求(Accounting Stop Request)的远程认证拨号用户服务消息，经由认证、授权、计费服务器到达独立深度包检测设备；502: The gateway general packet radio service support node sends the remote authentication dial-up user service message containing the accounting stop request (Accounting Stop Request) of the business flow template information, and reaches the independent deep packet inspection device through the authentication, authorization, and accounting servers;

503：独立深度包检测设备发送服务停止(Service Stop)消息，经由认证、授权、计费服务器到达网关通用分组无线服务支持节点；503: The independent deep packet inspection device sends a service stop (Service Stop) message, and reaches the gateway general packet wireless service support node via the authentication, authorization, and accounting servers;

504：网关通用分组无线服务支持节点返回确认(Acknowledge，Ack)消息到独立深度包检测设备；504: The gateway GPRS support node returns an acknowledgment (Acknowledge, Ack) message to the independent deep packet inspection device;

505：独立深度包检测设备返回计费停止响应消息，经过认证、授权、计费服务器到达网关通用分组无线服务支持节点；505: The independent deep packet inspection device returns an accounting stop response message, and the authentication, authorization, and accounting server arrives at the GGPRS support node;

以上完成了在计费停止时将可以区分分组数据协议上下文类型的业务流模板信息发送到独立深度包检测设备；这样，独立深度包检测设备可以根据所收到的这些业务流模板信息和远程认证拨号用户服务消息中的其它信息(如互联网协议地址等信息)在后续的步骤202中删除关于该用户和该用户的分组数据协议上下文类型信息的表项；The above completes sending the service flow template information that can distinguish the packet data protocol context type to the independent deep packet inspection device when the billing is stopped; in this way, the independent deep packet inspection device can use the received service flow template information and remote authentication Other information (such as information such as Internet protocol address) in the dial-up user service message deletes the entry about this user and the packet data protocol context type information of this user in subsequent step 202;

506：网关通用分组无线服务支持节点发送信用控制请求结束(CCR Final)消息到配额服务器；506: The gateway GPRS support node sends a credit control request end (CCR Final) message to the quota server;

507：配额服务器返回信用控制应答结束(CCA Final)消息到网关通用分组无线服务支持节点；507: The quota server returns a credit control response end (CCA Final) message to the gateway GPRS support node;

508：网关通用分组无线服务支持节点返回删除分组数据协议上下文的相应消息。508: The gateway GPRS support node returns a corresponding message for deleting the packet data protocol context.

以下介绍本发明的系统。The system of the present invention is described below.

图6示出了本发明系统的一个实施例。Figure 6 shows an embodiment of the system of the present invention.

该系统包括，网关通用分组无线服务支持节点61，认证、授权、计费服务器62，独立深度包检测设备63，配额服务器64。该系统可与互联网(Internet)相连。The system includes a gatewayGPRS support node 61 , an authentication, authorization, andaccounting server 62 , an independent deeppacket inspection device 63 , and aquota server 64 . The system can be connected to the Internet (Internet).

其中，in,

网关通用分组无线服务支持节点与认证、授权、计费服务器和独立深度包检测设备相连，用于在分组数据协议激活、更新和去激活过程中，在相应地计费开始、计费更新和计费停止的远程认证拨号用户服务消息中附着可以区分分组数据协议上下文类型的业务流模板信息，并将该信息通过认证、授权、计费服务器发送到独立深度包检测设备；还用于将用户的数据包通过独立深度包检测设备与互联网之间进行传递。具体地，该网关通用分组无线服务支持节点可包括业务流模板信息附着单元611：The gateway general packet radio service support node is connected with authentication, authorization, accounting server and independent deep packet inspection equipment, and is used for corresponding accounting start, accounting update and accounting The service message of the remote authentication dial-up user whose fee is stopped is attached with the service flow template information that can distinguish the context type of the packet data protocol, and the information is sent to the independent deep packet inspection device through the authentication, authorization, and accounting server; it is also used to send the user's Data packets are passed between the independent deep packet inspection device and the Internet. Specifically, the gateway general packet radio service support node may include a service flow template information attachment unit 611:

业务流模板信息附着单元611，用于在分组数据协议激活、更新和去激活过程中，在相应地计费开始、计费更新和计费停止的远程认证拨号用户服务消息中附着可以区分分组数据协议上下文类型的业务流模板信息。The service flow templateinformation attaching unit 611 is used to attach distinguishable packet data to the remote authentication dial-up user service messages corresponding to charging start, charging update and charging stop in the process of packet data protocol activation, update and deactivation Business flow template information of the protocol context type.

认证、授权、计费服务器与网关通用分组无线服务支持节点和独立深度包检测设备相连，用于对消息进行计费保密认证。The authentication, authorization, and accounting servers are connected with the gateway general packet wireless service support node and the independent deep packet inspection equipment, and are used for performing accounting confidentiality authentication on messages.

独立深度包检测设备与认证、授权、计费服务器、配额服务器和互联网相连，用于接收远程认证拨号用户服务消息并对自身创建的上下文用户表进行操作，以及对经过的数据包通过查找上下文用户表进行类型区分和统计。具体地，该独立深度包检测设备可包括分组数据协议会话管理单元(PDPSession Management)、业务流模板单元、上下文用户表单元以及检测和统计单元。其中：The independent deep packet inspection device is connected with the authentication, authorization, accounting server, quota server and the Internet, and is used to receive the remote authentication dial-up user service message and operate the context user table created by itself, and search the context user for the passed data packet The table performs type distinction and statistics. Specifically, the independent deep packet inspection device may include a packet data protocol session management unit (PDPSession Management), a service flow template unit, a context user table unit, and a detection and statistics unit. in:

分组数据协议会话管理单元631，用于接收包含业务流模板信息的远程认证拨号用户服务消息，并提取该消息中的业务流模板信息；该远程认证拨号用户服务消息可以是分组数据协议激活、更新和去激活过程中的计费开始、计费更新和计费停止对应的消息；The packet data protocolsession management unit 631 is used to receive the remote authentication dial-up user service message containing the service flow template information, and extract the service flow template information in the message; the remote authentication dial-up user service message can be packet data protocol activation, update Messages corresponding to accounting start, accounting update and accounting stop in the deactivation process;

业务流模板单元632，用于提取接收到的远程认证拨号用户服务消息中的业务流模板信息，并根据接收的远程认证拨号用户服务消息及提取的业务流模板信息，在上下文用户表中相应地创建、更新和删除表项；The serviceflow template unit 632 is configured to extract the service flow template information in the received remote authentication dial-up user service message, and correspondingly display the service flow template information in the context user table according to the received remote authentication dial-up user service message and the extracted service flow template information. Create, update and delete entries;

上下文用户表单元633，该单元上载有上下文用户表，该表为映射关系，该映射关系包括业务流模板业务流模板、分组数据协议上下文类型及用户的信息；Contextuser table unit 633, which is loaded with a context user table, which is a mapping relationship, and the mapping relationship includes service flow template service flow template, packet data protocol context type and user information;

检测和统计单元634，用于对经过其的数据包进行深度检测，得到该数据包的信息及其业务流模板信息，通过在上下文用户表中查找该数据包的检测信息及其业务流模板信息来确定该数据包的类型并进行统计；具体地，可以通过深度检测信息得到该数据包对应的用户，通过提取的业务流模板信息得到该数据包的分组数据协议上下文类型，如是主分组数据协议上下文还是次分组数据协议上下文，或者是哪一种次分组数据协议上下文，之后，对用户的不同类型的数据分别进行流量统计。The detection andstatistics unit 634 is used to perform in-depth detection on the data packets passing through it, and obtain the information of the data packet and its business flow template information, by searching the detection information of the data packet and its business flow template information in the context user table To determine the type of the data packet and make statistics; specifically, the user corresponding to the data packet can be obtained through the in-depth detection information, and the packet data protocol context type of the data packet can be obtained through the extracted business flow template information, such as the main packet data protocol The context is also the context of the sub-packet data protocol, or what kind of sub-packet data protocol context it is. After that, traffic statistics are performed on different types of data of the user.

配额服务器，与独立深度包检测设备相连，用于对用户流量进行配额管理，并根据独立深度包检测设备发来的流量统计数据对用户进行计费。The quota server is connected with the independent deep packet inspection device, and is used for quota management of user traffic, and bills users according to the traffic statistics data sent by the independent deep packet inspection device.

利用本系统对数据包进行统计的过程与前面描述的方法类似，在此就不再赘述。The process of using this system to count data packets is similar to the method described above, and will not be repeated here.

由以上实施例可见，在本发明的方案中，在独立深度包检测设备中建立上下文用户表，并扩展网关通用分组无线服务支持节点发给独立深度包检测设备的远程认证拨号用户服务消息，将该消息增加区分具有相同互联网协议地址的不同分组数据协议上下文的业务流模板，独立深度包检测设备在收到该扩展的远程认证拨号用户服务消息时，根据远程认证拨号用户服务消息中业务流模板内容和其它信息创建、更新或删除该上下文用户表中的表项，之后，网关通用分组无线服务支持节点对经过的数据包根据该上下文用户表确定其分组数据协议上下文类型并对其进行统计。因此，利用本发明，可以实现对不同分组数据协议上下文类型的数据进行统计，以及对不同次分组数据协议上下文类型的数据进行统计，从而可以实现对不同类型无线增值业务分别计费。As can be seen from the above embodiments, in the solution of the present invention, the context user table is established in the independent deep packet inspection device, and the remote authentication dial-up user service message sent by the gateway general packet radio service support node to the independent deep packet inspection device is extended. This message adds a business flow template that distinguishes different packet data protocol contexts with the same Internet protocol address. When the independent deep packet inspection device receives the extended remote authentication dial-up user service message, it The contents and other information create, update or delete entries in the context user table, and then, the gateway GPRS support node determines the packet data protocol context type of the passing data packets according to the context user table and counts them. Therefore, by using the present invention, the data of different packet data protocol context types can be counted, and the data of different packet data protocol context types can be counted, so that different types of wireless value-added services can be charged separately.

当然，利用本发明的方法和系统，可以包含现有技术中内容服务网关的功能，即不对分组数据协议上下文进行区分而实现对数据的同一形式的统计。Of course, the method and system of the present invention can include the function of the content service gateway in the prior art, that is, realize statistics of data in the same form without distinguishing the packet data protocol context.

Claims (10)

1. the method for statistic flow in the mobile communication, it is characterized in that, set up the context subscriber's meter in independent deep packet inspection device, this table is mapping relations, these mapping relations comprise traffic flow template, block data protocol context type and user's information, and comprise step:

A. in remote authentication dial-in user service message, adhere to the traffic flow template information that to distinguish the block data protocol context type;

B. independent deep packet inspection device is operated context user list item according to remote authentication dial-in user service message of receiving and traffic flow template information content wherein;

C. independent deep packet inspection device is to carrying out depth detection and extract traffic flow template information through its packet, and detection information by searching this packet in the context subscriber's meter and traffic flow template information thereof are determined the type of this packet and added up.

2. the method for claim 1 is characterized in that, described steps A comprises:

In packet data protocol activation, renewal or the deactivation process, in the beginning of correspondingly chargeing, the charge renewal and the remote authentication dial-in user service message that stops of chargeing, adhere to and to distinguish main block data protocol context and inferior block data protocol context and distinguish the not traffic flow template information of homogeneous block data protocol context type.

3. the method for claim 1 is characterized in that, described step B comprises:

The list item in the context subscriber's meter is correspondingly created, upgrades and deleted to remote authentication dial-in user service message that independent deep packet inspection device basis is received and traffic flow template information content wherein.

4. the method for claim 1 is characterized in that, described step C comprises:

C1. independent deep packet inspection device is carried out depth detection and is extracted traffic flow template information the packet through it;

C2. determine the user of this packet correspondence and the type of block data protocol context by the detection information and the traffic flow template information thereof of in the context subscriber's meter, searching this packet, and add up.

5. method as claimed in claim 4 is characterized in that, described step C2 comprises:

Determine the user of this packet correspondence by the detection information of in the context subscriber's meter, searching this packet, determine the type of corresponding block data protocol context by traffic flow template information;

The data traffic of statistics different user different grouping data protocol contexts type.

6. method as claimed in claim 4 is characterized in that, described step C2 comprises:

Determine the user of this packet correspondence by the detection information of in the context subscriber's meter, searching this packet, determine the type of corresponding inferior block data protocol context by traffic flow template information;

The statistics different user is the data traffic of homogeneous block data protocol context type not.

7. as each described method in the claim 1 to 6, it is characterized in that, further comprise after the described method:

Data traffic to the different block data protocol context type of different user and/or different inferior block data protocol context type is chargeed respectively.

8. the system of statistic flow in the mobile communication is characterized in that, comprises gateway general packet wireless service support node and independent deep packet inspection device, wherein:

Gateway general packet wireless service support node is used for adhering to the traffic flow template information that can distinguish the block data protocol context type in remote authentication dial-in user service message, and this information is sent to independent deep packet inspection device;

Independent deep packet inspection device is used for according to remote authentication dial-in user service message that receives and traffic flow template information thereof the context subscriber's meter of self creating being operated, and the packet of process is carried out type classification and statistics by searching the context subscriber's meter.

9. system as claimed in claim 8, it is characterized in that, described gateway general packet wireless service support node has the traffic flow template information adhesion unit, be used in packet data protocol activation, renewal or deactivation process, in the beginning of correspondingly chargeing, the charge renewal and the remote authentication dial-in user service message that stops of chargeing, adhere to the traffic flow template information that to distinguish the block data protocol context type.

10. system as claimed in claim 8 or 9 is characterized in that described independent deep packet inspection device has the packet data protocol session management unit, the traffic flow template unit, and context subscriber's meter unit and detection and statistic unit, wherein,

The packet data protocol session management unit is used to receive the remote authentication dial-in user service message that comprises traffic flow template information, and extracts the traffic flow template information in this message;

Context subscriber's meter unit, this unit has the context subscriber's meter, and this table is mapping relations, and these mapping relations are made of the information that comprises traffic flow template traffic flow template, packet protocol context type and user;

The traffic flow template unit, be used for extracting the traffic flow template information of the remote authentication dial-in user service message that receives, and according to the remote authentication dial-in user service message that receives and the traffic flow template information of extraction, in the context subscriber's meter, correspondingly create, renewal or remove entries;

Detect and statistic unit, be used for the packet through it is carried out depth detection, obtain the information and the traffic flow template information thereof of this packet, determine the type of this packet and add up its flow by the detection information and the traffic flow template information thereof of in the context subscriber's meter, searching this packet.

Images