WO2011157137A2

WO2011157137A2 - Policy control method, apparatus and communication system

Info

Publication number: WO2011157137A2
Application number: PCT/CN2011/075030
Authority: WO
Inventors: 夏旭
Original assignee: 华为技术有限公司
Priority date: 2011-05-31
Filing date: 2011-05-31
Publication date: 2011-12-22
Also published as: CN102918804A; WO2011157137A3; CN102918804B

Abstract

Embodiments of the present invention provide a policy control method, apparatus and communication system, and an independently deployed deep packet inspection apparatus, wherein the method includes: the independently deployed deep packet inspection apparatus receives a query request message transmitted by a policy and charging rules function apparatus for instructing inspection for specific data application services, executes inspection for the specific data application services of users and performs a policy control for the inspected specific data application services according to the obtained service control policy. The communication system provided by the embodiments of the present invention includes the independently deployed deep packet inspection apparatus. In the technical solution of the present invention, an independently deployed deep packet inspection apparatus performs an inspection for specific data application services, the deep packet inspection apparatus can be set by an operator, and thus the service control for users performed by the operator can be enhanced.

Description

Policy control method, device and communication system

Technical field

The embodiments of the present invention relate to the field of communications technologies, and in particular, to a policy control method, apparatus, and communication system. Background technique

With the rapid development of wireless data services, various services including voice are running on IP networks, and service provision will face the issue of Quality of Service (QoS). Different users have different QoS requirements for the same service. Users can sign different service-level agreements (SLAs) according to their actual needs, and choose the appropriate charging method. Therefore, QoS becomes The necessary elements involved in each billing level.

When the QoS changes, you need to select the corresponding charging method in time to achieve true dynamic and accurate charging. For operators, they want to maintain their dominant position in the value chain, avoid being piped, and urgently need to be able to perceive various services in the network. Through content awareness and in-depth packet inspection technology, business flow and content can be realized. Identification.

In the 3GPP protocol standard, when the user terminal establishes the bearer of the IP Connectivity Accsess Netwrok (hereinafter referred to as IP-CAN), the message carries the QoS parameter information, and the network side receives the IP-CAN bearer setup message. The QoS that can be used is determined according to the user subscription information and the device capability, and the negotiated QoS is sent to the user terminal. If the user terminal does not have QoS parameter information in the IP-CAN bearer setup message, the network side uses the default QoS parameter or the user subscribed QoS parameter.

For the traffic statistics and control functions in the communication process, the prior art is on the physical device and the billing execution function (Policy and Charging Enforcement) Function, hereinafter referred to as: PCEF), for example, PCEF can be configured on the Gateway GPRS Support Node (GGSN) or Packet Data Network Gateway (PDN-GW), but the normal PCEF cannot perform depth detection. The service cannot be perceived. When the user's charging/traffic threshold is reached, the PCEF triggers the process of QoS reduction or session termination. For some specific services, especially data application services, for example, point to point (Point to Point, hereinafter referred to as: P2P) Skype and BT downloads, network video on demand VoD, online games, FTP file download, MSN and QQ instant messaging tools, operators may be at the billing/flow threshold when performing policy control If this is achieved, the user is also allowed to continue to access or use these services, which may be referred to as a specific data application service. Summary of the invention

The embodiments of the present invention provide a policy control method, device, and communication system, which are used to implement policy control of a specific data application service of a user to a user without affecting the performance of the PCEF.

The embodiment of the invention provides a policy control method, including:

The independently deployed deep packet detecting device receives a query request message sent by the policy and charging rule function device to perform specific data application service detection;

The independently deployed deep packet detecting device performs service detection for the specific data application of the user; the independently deployed deep packet detecting device performs policy control on the detected specific data application service according to the obtained service control policy. An embodiment of the present invention provides another policy control method, including:

Receiving a user arrears event sent by the policy and charging execution function device;

After determining that the arrears user applies the service subscription user for the specific data, sending a query request message indicating the specific data application service detection to the independently deployed deep packet detecting device; receiving the independently deployed deep packet detecting device After the detected response message is returned, And transmitting, to the policy and charging execution function device, an indication message that allows the user of the arrears to use the specific data application service, wherein the detection response message includes an indication that the arrears user is using a specific data application service. An embodiment of the present invention provides another policy control method, including:

After receiving the detection response message returned by the independently deployed deep packet detecting device indicating that the user is performing the specific data application service, transmitting the quintuple information including the specific data application service to the policy and charging execution function device and the specific a notification message for the billing and policy rules of the data application service;

Receiving at least one of charging information, gating information, and quality of service control information for the specific data application service generated by the policy and charging execution function device;

At least one of the billing information, the gate information, and the quality of service control information is forwarded to the independently deployed deep packet detecting device. An embodiment of the present invention provides another policy control method, including:

Receiving, by the policy and charging rule function device, the quintuple information including the specific data application service and the notification message of the charging and policy rule for the specific data application service; the quintuple information of the service according to the specific data application Performing specific data application service detection to perform traffic release on the specific data application service, and transmitting charging information generated by the charging and policy rules for the specific data application service to the policy and charging rule function device, and gating At least one of information and quality of service control information. An embodiment of the present invention provides another policy control method, including:

And sending, to the independently deployed deep packet detecting device, a query request message indicating that the specific data application service is detected, where the query request message carries a charging and policy rule for the specific data application service;

Receiving, by the independently deployed deep packet detecting device, a detection response message including a flow granularity-based charging identifier, where the flow granularity-based charging identifier is for the detected specific The billing information of the data application service, where the flow granularity-based charging identifier is generated by the independently deployed deep packet detecting device according to the charging and policy rules;

The traffic granularity-based charging identifier is converted into a charging granularity-based charging identifier, and then sent to the bearer binding and event reporting function entity for charging billing check when roaming.

The embodiment of the present invention further provides an independently deployed deep packet detecting apparatus, including: a first receiving module, configured to receive a query request message sent by a policy and charging rule function device to perform specific data application service detection;

The policy control module is configured to perform policy control on the detected specific data application service according to the obtained service control policy.

The embodiment of the present invention further provides a policy and charging rule function device, including: a second receiving module, configured to receive a user arrears event sent by the policy and charging execution function device;

a first query request sending module, configured to send a query request message indicating that the specific data application service is detected to the independently deployed deep packet detecting device after determining that the arrears user applies the service subscription user for the specific data;

The indication message sending module is configured to, after receiving the detection response message returned by the independently deployed deep packet detecting device, send an indication to the policy and charging execution function device that the user who is in arrears is allowed to use the specific data application service a message, where the detection response message includes an indication that the arrears user is using a specific data application service.

The embodiment of the present invention further provides another policy and charging rule function device, including: a notification message sending module, configured to: after receiving the independently deployed deep packet detecting device, indicating that the user is performing detection of a specific data application service After the response message, sending, to the policy and charging execution function device, the quintuple information including the specific data application service and the notification message of the charging and policy rules of the specific data application service;

a third receiving module, configured to receive at least one of charging information, gating information, and quality of service control information generated by the policy and charging execution function device for the specific data application service Item

And a forwarding module, configured to forward at least one of the charging information, the gating information, and the service quality control information to the independently deployed deep packet detecting device.

The embodiment of the present invention further provides a policy and charging execution function device, including: a fourth receiving module, configured to receive quintuple information including a specific data application service sent by a policy and charging rule function device, and the specific a notification message of the charging and policy rules of the data application service; a policy processing module, configured to perform specific data application service detection according to the quintuple information of the specific data application service, to perform traffic release on the specific data application service, and And transmitting, to the policy and charging rule function device, at least one of charging information, gating information, and quality of service control information generated according to the charging and policy rules for the specific data application service.

The embodiment of the present invention further provides another policy and charging rule function device, including: a second query request sending module, configured to send, to the independently deployed deep packet detecting device, a query request message indicating that the specific data application service is detected. The query request message carries a charging and policy rule for the specific data application service;

The detection response receiving module is configured to receive the detection response message that is included in the depth-of-description detection device that is independently deployed, and includes a flow granularity-based charging identifier, where the flow granularity-based charging identifier is used for the detected specific data application. The billing information of the service is generated by the independently deployed deep packet detecting device according to the charging and policy rules;

The charging identifier conversion module is configured to convert the flow granularity-based charging identifier into a charging identifier based on the load granularity and then send the charging binding to the bearer binding and event reporting function entity for performing charging bill checking.

The embodiment of the invention further provides a communication system, comprising the above-mentioned policy and charging rule function device, policy and charging execution function device, and independently deployed deep message detecting device.

The policy control method, the device, and the communication system provided by the foregoing embodiments of the present invention, wherein the deep packet detection device is independently deployed in the communication system, and the independently deployed deep packet detection device detects the specific data application service, and can Without prejudice to the performance of PCEF, The detection of the specific data application service is performed, and then the corresponding control strategy is formulated according to the detection result, so that the operator controls the policy of the specific data application service of the user. The above-mentioned deep packet detecting device can be set by an operator to strengthen the operator's control over the services performed by the user. DRAWINGS

In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, a brief description of the drawings used in the embodiments or the prior art description will be briefly described below. Obviously, the drawings in the following description It is a certain embodiment of the present invention, and other drawings can be obtained from those skilled in the art without any inventive labor.

1 is a schematic flowchart of Embodiment 1 of a policy control method according to the present invention;

2 is a schematic flowchart of Embodiment 2 of a policy control method according to the present invention;

3 is a schematic flowchart of Embodiment 3 of a policy control method according to the present invention;

4 is a schematic flowchart of Embodiment 4 of a policy control method according to the present invention;

5 is a schematic structural diagram of Embodiment 1 of an apparatus for detecting a deep packet, which is an independent deployment of the present invention; FIG. 6 is a schematic structural diagram of Embodiment 1 of a policy and charging rule function apparatus according to the present invention; FIG. 8 is a schematic structural diagram of Embodiment 1 of a policy and charging execution function device according to the present invention; FIG. 9 is a schematic structural diagram of Embodiment 3 of a policy and charging rule function device according to the present invention. detailed description

The technical solutions in the embodiments of the present invention are clearly and completely described in the following with reference to the accompanying drawings in the embodiments of the present invention. It is a partial embodiment of the invention, and not all of the embodiments. All other embodiments obtained by a person of ordinary skill in the art based on the embodiments of the present invention without creative efforts are within the scope of the present invention.

In the prior art, PCEF cannot perform depth detection and cannot sense specific data applications. The embodiment of the present invention provides a technical solution for performing policy control on a specific data application service by using a Deep Packet Inference (DP I ) device that is independently deployed, and the present invention implements The example also provides an implementation scheme for a specific data application service of the entire system based on the independently deployed deep message detecting device. The deep packet detection and the normal packet detection only analyze the IP source address, the destination address, the source port, the destination port, and the protocol type of the IP packet, and the DPI also adds application layer analysis to identify various applications and contents thereof. That is, the detection of the protocol type of the protocol is HTTP, WAP 2.0, RSTP or FTP, and the detection of the Uniform Resource Loca tor (URL) information, and further detection Policy control for specific businesses to.

FIG. 1 is a schematic flowchart of Embodiment 1 of a policy control method according to the present invention. As shown in FIG. 1, the method includes:

Step 101: The independently deployed deep packet detecting device receives the query request message sent by the PCRF to perform specific data application service detection, that is, whether a certain user is using a specific data application service;

Step 102: The independently deployed deep packet detecting device performs service detection for the specific data of the user. In this embodiment, the deep packet detecting device is independently deployed in the communication system, and the service used by the user is deeply detected, and the user is used. Type of business, that is, whether a specific data application service is being used;

Step 103: The independently deployed deep packet detecting device performs policy control on the detected specific data application service according to the obtained service control policy.

In this step, based on the foregoing step 102, the service control policy is performed according to the obtained service control policy. The foregoing service control policy may be directly sent by the PCRF, or may be performed by the independently deployed deep packet detection device according to the PCRF. Generated by the policy and charging rules (Po li cy Charg ing Cont ro l , hereinafter referred to as PCC). The deep packet detecting apparatus independently deployed in this embodiment can perform policy control on a specific data application service, mainly performing charging control, and can also perform gating and quality of service control. Technology of the present invention Specifically, the deep packet detecting device in the solution may be a traffic detection function entity (hereinafter referred to as TDF) specified in the 3GPP protocol.

The policy control method for the specific data application service provided by the foregoing embodiment of the present invention, wherein the deep packet detection device is independently deployed in the communication system, and the independently deployed deep packet detection device detects the specific data application service, and can Under the premise of not affecting the performance of the PCEF, the detection of the specific data application service is performed, and then the corresponding control strategy is formulated according to the detection result, so that the operator's policy control of the specific data application service of the user is realized. The above-mentioned deep packet detecting device can be set by the operator to strengthen the operator's control over the services performed by the user.

Further, in the embodiment of the present invention, the deep packet detecting device may perform detection according to a certain detection rule when performing special data application detection, and the foregoing detection rule may be preset in the deep packet detecting device. The in-depth deep packet detecting device performs the specific data application service detection according to the preset detection rule of the system; or carries the detection rule in the query request message, and then the independently deployed deep packet detecting device according to the query request message Carrying detection rules for specific data application service detection.

In addition, in the foregoing embodiment of the present invention, the deep packet detecting apparatus may perform policy control on the detected specific data application service according to the obtained service control policy, which may specifically include:

Receiving at least one of charging information, gating information, and quality of service control information generated by the policy and charging execution function device forwarded by the policy and charging rule function device;

Charging, gating or quality of service management is performed on the detected specific data application service according to at least one of the received charging information, the gate information and the quality of service control information.

Or receiving a policy and charging rule sent by the policy and charging rule function device, and generating at least one item of the charging information, the gate information, and the service quality control information according to the policy and the charging rule; At least one of billing information, gating information, and quality of service control information performs billing, gating, or quality of service management for the detected specific data application service.

The following is a specific embodiment of the present invention, in which the PCEF receives the online The out-of-credit event triggered by the Online Charging System (hereinafter referred to as OCS) is reported to the PCRF, and then the PCRF determines the arrears of the user to sign the service for the specific data application. After the user sends the query request message indicating the specific data application service detection to the independently deployed deep packet detection device (TDF in this embodiment), the PCRF can be determined according to the user subscription information or the operator local policy. Whether the user applies a service subscription user for a specific data. In addition, after receiving the detection response information that the user is using the specific data application service, the PCRF sends an indication message to the PCEF that allows the user who is in arrears to use the specific data application service. FIG. 2 is a schematic flowchart of a specific embodiment of the present invention. As shown in FIG. 2, the following steps may be included:

Step 201: The online charging system (hereinafter referred to as OCS) finds that the user has arrears, triggers the user session termination request to terminate the service that the user is using, that is, sends the user arrears event to the PCEF (out-of-credit) Event);

Step 202: After receiving the out-of-credit event delivered by the 0CS, the PCEF reports the user's arrears event to the PCRF, and the specific information may be sent through a Credit Control Request (CCR) message;

Step 203: The PCRF queries the user subscription information or the operator local policy, and determines whether the user subscribes to use the specific data application service. The specific data application service may be: the user can also use the service in arrears, or the user is in the class. The traffic usage of the service is not counted in the monthly traffic);

Step 204: If the user has a subscription, the PCRF queries the TDF by using a query request message for the customized service, where the query request message may be an existing Reauthorization Request (RAR) message, and the message is in the message. May include detection rules for applying traffic to specific data;

Step 205: The TDF receives the query request message from the PCRF, and the TDF may perform deep packet inspection on the current service flow of the user according to the detection rule that is scheduled by the operator or the detection rule carried in the request message, and determine whether the user is currently Use specific data to apply business, the same Obtain gating information for other services, such as forbidden access or redirection;

Step 206: The PCRF receives a detection response message from the TDF, where the detection response message may be an existing re-authentication response (RAA), and the message may include indicating whether the user is Use of specific data to apply business information, as well as gating information for other services;

Step 207: The PCRF controls the PCEF to perform corresponding processing according to the content carried in the detection response message returned by the TDF. For example, if the detection response message indicates that the user is performing a specific data application service, the PCEF controls the PCEF to ignore the user arrears event reported by the 0CS. Passing the quintuple information (5 - tup le ) of the specific data application service to the PCEF, so that the PCEF allows the specific data application service that meets the above quintuple information to pass;

Step 208: The PCEF returns a response message to the 0CS, and determines that the user arrears event has been processed;

Step 209: The PCEF ensures that the specific data application service flow of the user continues to be used; or the specific data application service initiated by the user in the case of arrears is not affected.

FIG. 3 is a schematic flowchart of another embodiment of the present invention. In this embodiment,

The PCRF sends a quintuple information including a specific data application service to the PCEF and a notification message of the charging and policy rules of the specific data application service. After receiving the notification message, the PCEF applies the five-yuan of the specific data according to the specific data. The group information detects a specific data application service to perform traffic release, and when detecting that the user uses the specific data application service, generates and sends to the PCRF the charging information generated according to the charging and policy rule for the specific data application service. And at least one of the gating information and the quality of service control information, after receiving the at least one of the foregoing charging information, the gating information and the quality of service control information, the PCRF sends the TDF to the independently deployed TDF, the independently deployed TDF Perform business processing based on at least one of the above information. Specifically, the steps shown in Figure 3 are included:

Step 301: The PCRF detects the user subscription information, and determines whether the user activates the specific data application service or subscribes to use the specific data application service. Step 302: The PCRF subscribes to the TDF with the DP I function to query whether the user is using the specific data application service. When the TDF detects that the user uses the specific data application service, the TDF can report the usage information to the PCRF. Specifically, the PCRF can be based on the current Some RAR messages send a query request message for a specific data application service to the TDF, and receive a detection response message from the TDF through the RAA message;

Step 303: The PCRF notifies the PCEF of the quintuple information of the specific data application service, where the PCEF may be set in the packet data network gateway (PDN-GW), and simultaneously delivers a PCC rule for the quintuple information, the PCC rule. The service can be used normally in the case of arrears, or the usage traffic is not counted in the monthly traffic; in this embodiment, the specific data application service can be represented by the quintuple information, and the PCEF can be based on five The tuple information detects and identifies the specific data application service, and the PCEF implements the release of the service flow for the specific data application, and the TDF performs the policy control on the specific data application service, and the PCEF implements the policy control for the non-specific data application service; There is also a case where when a specific data application service cannot be represented by the quintuple information, since the PCEF cannot identify the specific data application service, the TDF may need to perform the service for the non-specific data application service and the specific data application service. Policy control

In step 304, the PCEF detects the specific data application service that the user is using according to the quintuple information sent by the PCRF, excluding the specific data application service, and executing the PCC rule for the non-specific data application service, and the PCC rule in the embodiment of the present invention. The information includes the charging rule and the policy information, where the policy information includes the gating information and the QoS information for each service. Step 305: The PCEF generates a control policy for the specific data application service, which is specifically included in the PCC rule. Charging rules and policy information, etc. generate charging information (for example, charging ID) for the foregoing service, and acquire gating information for specific data application services and other service flows in the PCC rules, for example, prohibiting access to other services or Orientation, application service release for specific data, etc., and also obtaining QoS control information for a specific data application service in the PCC rule, and carrying the obtained charging information, gate control information or QoS control information in the detection sent to the PCRF In the response message; Step 306: The PCRF receives a detection response message from the PCEF, where the message includes whether the user uses a specific data application service, and at least one of the foregoing charging information, gating information, or QoS control information;

Step 307: The PCRF sends at least one of the corresponding charging information, the gate information, or the QoS control information to the TDF according to the content carried in the detection response message sent by the PCEF, and the TDF charges the service according to the charging information. And performing QoS control on the service according to the QoS control information, and performing gating processing on the service according to the gating information, for example, prohibiting access or redirection of other services, and releasing the service to the specific data application service;

Step 308: The PCRF sends a response message to the PCEF, and notifies that the charging information, the gate information, or the QoS control information is sent to the TDF. Specifically, the response message may be a credit control response (CCA). Message.

FIG. 4 is a schematic flowchart of still another embodiment of the present invention. In the specific embodiment, the PCRF sends a query request message indicating that the specific data application service is detected to the TDF, and the message carries the PCC rule for the service. And performing service detection by the independently deployed TDF, and after detecting that the user uses the specific data application service, acquiring charging information, gating information, and QoS control information according to the PCC rule. Specifically, the foregoing charging information may be Based on the flow granularity-based charging ID, the TDF may further notify the PCRF based on the flow granularity-based charging ID, and the PCRF converts the flow granularity-based charging ID into a charging granularity-based charging ID, which may be sent by the PCRF. For the bearer binding and the event reporting function entity (BBERF), the charging bill check is performed when roaming, as shown in FIG. 4, including the following steps. :

Step 401: The PCRF detects the user subscription information, and determines whether the user opens a specific data application service or signs a specific data application service.

Step 402: If the user can use the specific data application service, query the specific data application service to the independently deployed TDF, and perform specific data application service detection by the TDF. Once the user is detected to use the specific data application service, the TDF needs to use the user. Specific data application industry The information is sent to the PCRF. The PCRF sends the Application Detection and Control (ADC) rule to the independently deployed TDF. The ADC rule is a type of PCC rule.

Step 403: After the TDF detects that the user is performing a specific data application service, the PCRF notifies the PCEF of the quintuple information of the specific data application service that can be used by the user, and simultaneously sends a PCC rule for the quintuple information (also It is the PCC rule for the specific data application service. For example, the service corresponding to the quintuple information can be used normally in the case of arrears, or the usage traffic is not counted in the monthly traffic;

Step 404: The TDF detects that the user generates a control policy after using the specific data application service, and specifically includes generating charging information according to an ADC rule sent by the PCRF (for example, a flow granularity-based charging ID), gating information, and QoS control information; performing charging processing according to the charging ID, performing gating on the specific data application service according to the gating information, or performing Q 0 S control on the specific data application service according to the QoS control information;

Step 405, the TDF carries the flow granularity-based charging ID generated in step 404 in the response message and sends it to the PCRF;

Step 406: After receiving the response message, the PCRF matches the traffic granularity-based charging ID reported by the TDF to the charging ID based on the bearer granularity, and generates a specific, PCEF-executed for the specific data application service. The PCC rules of the specific data application service, including the PCEF canceling the charging of the specific data application service used by the user, not calculating the service traffic, and the like;

Step 407: The PCRF sends the PCC rule for the specific data application service generated in the step 406 to the PCEF, so that the PCEF does not perform policy control on the specific data application service, but is executed by the independently deployed TDF.

Step 408: The PCRF sends the charging ID based on the bearer granularity of the specific data application service to the BBERF (the function may be set in the serving gateway serving-GW) to perform the bill check in the roaming situation.

Corresponding to the foregoing method embodiments, the embodiment of the present invention further provides a depth of independent deployment. FIG. 5 is a schematic structural diagram of Embodiment 1 of an apparatus for detecting a deep packet that is independently deployed according to the present invention. As shown in FIG. 5, the apparatus includes a first receiving module 11, a first detecting module 12, and a policy control module 13. The first receiving module 11 is configured to receive a query request message sent by the policy and charging rule function device to perform specific data application service detection; the first detecting module 12 is configured to perform specific data application service detection on the user; The module 13 is configured to perform policy control on the detected specific data application service according to the obtained service control policy.

The deep packet detecting device provided in the foregoing embodiment of the present invention is independently deployed, and the independently deployed deep packet detecting device detects the specific data application service, and can execute the specific data application without affecting the performance of the PCEF. The detection of the service, and then the corresponding control strategy is formulated according to the detection result, so as to implement the policy control of the operator's specific data application service to the user. The above-mentioned deep packet detecting device can be set by an operator to strengthen the operator's control over the services performed by the user.

In the foregoing embodiment, the detecting, by the first detecting module 12, the detecting of the specific data application service may include two cases, that is, performing specific data application service detection according to the detection rule carried in the query request message; The preset detection rules perform specific data application service detection.

In addition, the foregoing deep packet detecting apparatus may further include a first sending module 14 configured to: when the first detecting module detects that the user is performing a specific data application service, to the policy and charging rule. The functional device returns a detection response message indicating that the user is performing a particular data application service.

In addition, corresponding to the foregoing method embodiment shown in FIG. 4, in order to implement the single-check in the roaming scenario, the first sending module in the independently deployed deep packet detecting device is further used for the policy and charging rule function. The device returns a detection response message including a flow granularity-based charging identifier, to be matched by the policy and charging rule function device to the charging identifier based on the bearer granularity, and then sent to the serving gateway.

Corresponding to the method embodiment shown in FIG. 3 above, in a specific embodiment, the strategy The control module 13 may specifically perform policy control according to at least one of the charging information, the gate control information, and the service quality control information generated by the policy and the charging execution function device, that is, first, the policy and the charging rule function device forwarded by the policy. And at least one of charging information, gating information and quality of service control information generated by the charging execution function device; and then detecting the at least one of the received charging information, the gating information and the quality of service control information The specific data application service to the billing, gating or quality of service management.

Or corresponding to the foregoing embodiment shown in FIG. 4, the independently deployed deep packet detecting device generates policy information, and the policy control module 13 first receives the policy and charging rules sent by the policy and charging rule function device, and according to The policy and charging rule generates at least one of charging information, gating information, and quality of service control information; and then performing at least one of the generated charging information, the gating information, and the quality of service control information. The specific data detected service is used for billing, gating or quality of service management.

The embodiment of the present invention further provides a policy and charging rule function device, corresponding to the embodiment shown in FIG. 2, as shown in FIG. 6, the policy and charging rule function device includes a second receiving module 21, The first query request sending module 22 and the indication message sending module 23, wherein the second receiving module 21 is configured to receive a user arrears event sent by the policy and charging execution function device; the first query request sending module 22 is configured to determine the arrears After the user subscribes to the user for the specific data, the user sends a query request message indicating the specific data application service detection to the independently deployed deep packet detecting device. The indication message sending module 23 is configured to receive the independently deployed deep report. After the detection response message returned by the text detecting device, the policy and charging execution function device sends an indication message for allowing the user of the arrears to use the specific data application service, where the detection response message includes the user who is in arrears An indication of the application of a particular data application.

In addition, corresponding to the method embodiment shown in FIG. 3, another method and charging rule function device may be included. As shown in FIG. 7, the device includes a notification message sending module 31, a third receiving module 32, and forwarding. The module 33, wherein the notification message sending module 31 is configured to: after receiving the detection response message returned by the independently deployed deep packet detecting device, indicating that the user is performing a specific data application service, Sending, to the policy and charging execution function device, the quintuple information including the specific data application service and the notification message of the charging and policy rules of the specific data application service; the third receiving module 32 is configured to receive the policy and the charging execution function. At least one of charging information, gating information, and quality of service control information generated by the device for the specific data application service; the forwarding module 33 is configured to forward the charging information to the independently deployed deep packet detecting device, At least one of the gate information and the quality of service control information.

Corresponding to the policy and charging rule function device in the embodiment shown in FIG. 7, the embodiment of the present invention further provides another policy and charging execution function device. As shown in FIG. 8, the device includes a fourth receiving module 41 and a policy processing module 42, wherein the fourth receiving module 41 is configured to receive, by the policy and charging rule function device, a quintuple information including a specific data application service and a notification message of a charging and policy rule of the specific data application service; The policy processing module 42 is configured to perform specific data application service detection according to the quintuple information of the specific data application service to perform traffic release on the specific data application service, and send the policy and charging rule function device according to the target At least one of charging information, gate information, and quality of service control information generated by the charging and policy rules of the specific data application service.

The embodiment of the present invention further provides a policy and charging rule function device, which is specifically applicable to the technical solution of the method embodiment shown in FIG. 4 . Specifically, as shown in FIG. 9 , the device includes a second query request sending module. The detection response receiving module 52 and the charging identifier conversion module 53 are configured to send, to the independently deployed deep packet detecting device, a query request message indicating that the specific data application service is detected, the query. The request message carries a charging and policy rule for the specific data application service. The detection response receiving module 52 is configured to receive the detection response message that includes the flow granularity-based charging identifier returned by the independently deployed deep packet detecting device. The flow granularity-based charging identifier is charging information for applying the detected specific data, and the flow granularity-based charging identifier is independently deployed by the deep packet detecting device according to the charging and policy rule. The charging identifier conversion module 53 is configured to convert the flow granularity-based charging identifier into a bearer granularity. After charging identifier sent to the bearer binding and event reporting function entity for billing when roaming, then a single check. It should be noted that: the device embodiments corresponding to the foregoing FIG. 5-9, unless otherwise specified, the modules included in each device are hardware.

The embodiment of the present invention further provides a communication system, which includes a PCRF, a PCEF, and an independently deployed deep packet detecting device, wherein the deep packet detecting device may be the deep packet detecting in the embodiment shown in FIG. The device, wherein the PCRF may be any of the PCRFs in the embodiment shown in Fig. 6, Fig. 7, or Fig. 9, and wherein the PCEF may be the PCEF in the embodiment shown in Fig. 8.

The policy control method, the device, and the communication system provided by the foregoing embodiments of the present invention, wherein the deep packet detecting device is independently deployed in the communication system, and the deep data detecting device can perform specific data application service detection, or is applied to a specific data. Business conducts policy control. The technical solution provided by the foregoing embodiment of the present invention can solve the dynamic policy control requirement of the data application that the operator participates in, and implement data participating in the application-free functional entity (hereinafter referred to as AF). Application policy control such as QoS, billing, and gating. It can also implement policy control for applications such as Skype and BT download using P2P technology, network video on demand VoD, online games, FTP file download, MSN and QQ instant communication, and realize QoS guarantee for these data applications. Fees and effective controls ensure linkage with PCEF functionality.

A person skilled in the art can understand that all or part of the steps of implementing the above method embodiments may be completed by using hardware related to program instructions, and the foregoing program may be stored in a computer readable storage medium, and the program is executed when executed. The foregoing steps include the steps of the foregoing method embodiments; and the foregoing storage medium includes: a medium that can store program codes, such as a ROM, a RAM, a magnetic disk, or an optical disk. It should be noted that the above embodiments are only for explaining the technical solutions of the present invention, and are not intended to be limiting; although the present invention has been described in detail with reference to the foregoing embodiments, it will be understood by those skilled in the art that: The technical solutions described in the foregoing embodiments are modified, or some of the technical features are equivalently replaced. The modifications and substitutions do not depart from the spirit and scope of the technical solutions of the embodiments of the present invention.

Claims

Claim

A method for controlling a policy, comprising:

The independently deployed deep packet detecting device performs specific data application service detection; the independently deployed deep packet detecting device performs policy control on the detected specific data application service according to the obtained service control policy.

2. The policy control method according to claim 1, wherein the performing the specific data application service detection by the independently deployed deep packet detecting device comprises:

When the query request message carries the detection rule, the independently deployed deep packet detecting device performs specific data application service detection according to the check rule carried in the query request message; or

The independently deployed deep packet detecting device performs specific data application service detection according to a preset detection rule.

The policy control method according to claim 1, wherein the independently configured deep packet detecting device performs policy control on the detected specific data application service according to the obtained service control policy, including:

The independently deployed deep packet detecting device performs charging control on the detected specific data application service according to the obtained service control policy.

The policy control method according to claim 2 or 3, further comprising: the independently deployed deep packet detecting device, when detecting that the user is performing a specific data application service, to the policy and meter The fee rule function device returns a detection response message indicating that the user is performing a specific data application service.

The policy control method according to claim 4, wherein the independently deployed deep packet detecting device performs policy control on the detected specific data application service according to the obtained service control policy, including: The independently deployed deep packet detecting device receives at least one of charging information, gating information, and quality of service control information generated by the policy and charging execution function device forwarded by the policy and charging rule function device;

The independently deployed deep packet detecting device performs corresponding policy control on the detected specific data application service according to at least one of the received charging information, the gate information, and the quality of service control information.

The policy control method according to claim 4, wherein the independently configured deep packet detecting device performs policy control on the detected specific data application service according to the obtained service control policy, including:

The independently deployed deep packet detecting device receives the policy and charging rules sent by the policy and charging rule function device, and generates charging information, gating information, and service quality control information according to the policy and charging rules. At least one of them;

The independently deployed deep packet detecting device performs corresponding policy control on the detected specific data application service according to at least one of the generated charging information, the gating information, and the quality of service control information.

The policy control method according to claim 6, wherein the charging information is a flow granularity-based charging identifier, and the method further includes:

Returning, to the policy and charging rule function device, a detection response message including the flow granularity-based charging identifier, where the policy and charging rule function device converts the flow granularity-based charging identifier into a bearer granularity The charging identifier is sent to the bearer binding and event reporting function entity for checking the charging bill when roaming.

8. A policy control method, characterized in that:

After determining that the arrears user applies the service subscription user for the specific data, sending a query request message indicating the specific data application service detection to the independently deployed deep packet detecting device; receiving the independently deployed deep packet detecting device After the detected response message is returned, And transmitting, to the policy and charging execution function device, an indication message that allows the user of the arrears to use the specific data application service, wherein the detection response message includes an indication that the arrears user is using a specific data application service.

9. A policy control method, characterized in that:

After receiving the detection response message returned by the independently deployed deep packet detecting device indicating that the user is performing the specific data application service, transmitting the quintuple information including the specific data application service to the policy and charging execution function device. a notification message for charging and policy rules of a specific data application service;

At least one of the billing information, the gate information, and the quality of service control information is forwarded to the independently deployed deep packet detecting device.

A policy control method, comprising: receiving, by a policy and charging rule function device, quintuple information including a specific data application service, and notification of charging and policy rules for the specific data application service Transmitting a specific data application service detection according to the quintuple information of the specific data application service to perform traffic release on the specific data application service, and sending the specific data according to the policy and charging rule function device according to the specific data At least one of charging information, gating information, and quality of service control information generated by the charging and policy rules of the application service.

1 1. A policy control method, which is characterized in that:

And receiving, by the independently deployed deep packet detecting device, a detection response message that includes a flow granularity-based charging identifier, where the flow granularity-based charging identifier is charging information for the detected specific data application service, where The flow granularity based charging identifier is independently deployed by the The deep packet detecting device generates according to the charging and policy rules;

An apparatus for detecting an in-depth packet that is independently deployed, comprising: a first receiving module, configured to receive a query request message sent by a policy and a charging rule function device to perform a specific data application service detection;

The first detecting module is configured to perform service detection for a specific data application to the user, and the policy control module is configured to perform policy control on the detected specific data application service according to the obtained service control policy.

The device of claim 12, wherein the device further comprises:

And a first sending module, configured to: when the first detecting module detects that the user is performing a specific data application service, return a detection response message indicating that the user is performing a specific data application service to the policy and charging rule function device.

The apparatus of claim 13, wherein the first sending module is further configured to return, to the policy and charging rule function device, a charging identifier including a flow granularity. Detection response message.

15. A policy and charging rule function device, comprising:

a second receiving module, configured to receive a user arrears event sent by the policy and charging execution function device;

And an indication message sending module, configured to send, to the policy and charging execution function device, the user who allows the arrears to use the specific data application service after receiving the detection response message returned by the independently deployed deep packet detecting device Indicating message, wherein the detection response message packet The user who includes the arrears is using an indication of a particular data application service.

16. A policy and charging rule function device, comprising:

The notification message sending module is configured to send, after receiving the detection response message returned by the independently deployed deep packet detecting device that the user is performing the specific data application service, to the policy and charging execution function device, including the specific data application service The tuple information and the notification message of the charging and policy rules of the specific data application service;

a third receiving module, configured to receive at least one of charging information, gating information, and quality of service control information generated by the policy and charging execution function device for the specific data application service;

17. A policy and charging execution function device, comprising:

a fourth receiving module, configured to receive, by the policy and charging rule function device, a quintuple information including a specific data application service and a notification message of a charging and policy rule of the specific data application service;

a policy processing module, configured to perform specific data application service detection according to the quintuple information of the specific data application service, perform traffic release on the specific data application service, and send the basis to the policy and charging rule function device At least one of charging information, gating information, and quality of service control information generated by charging and policy rules for a specific data application service.

18. A policy and charging rule function device, comprising:

a second query request sending module, configured to send, to the independently deployed deep packet detecting device, a query request message indicating that the specific data application service is detected, where the query request message carries a charging and a policy for the specific data application service Rule

The detection response receiving module is configured to receive the detection response message that is included in the depth-of-description detection device that is independently deployed, and includes a flow granularity-based charging identifier, where the flow granularity-based charging identifier is used for the detected specific data application. Billing information of the service, the flow granularity based charging The identifier is generated by the independently deployed deep packet detecting device according to the charging and policy rule; the charging identifier conversion module is configured to convert the traffic granularity-based charging identifier into a charging identifier based on the bearer granularity The billing bill check is sent to the bearer binding and event reporting function entity for roaming.

A communication system, comprising: the policy and charging rule function device of claim 15, 16 or 18, the policy and charging execution function device of claim 17, and claim 1 The independently deployed deep packet detecting device of 1 3 or 14.