WO2020259290A1 - Method and apparatus for managing user group - Google Patents

Abstract

Provided are a method and apparatus for managing a user group. A user group and a user group identifier have an association relationship, and the user group identifier and a configuration parameter (i.e., a function control parameter) have an association relationship; therefore, an association relationship is established between the user group and the configuration parameter by means of the user group identifier. Since the user group and the configuration parameter are mutually independent pieces of information, the modification of the user group does not affect the use of the configuration parameter. For example, when a user group, the identifier type of which is an MSISDN prefix, is added and supported by a network element, the configuration parameter can be used, without being modified, when the network element executes a service process for a user in the user group corresponding to the MSISDN prefix. Therefore, the method and the apparatus can reduce development costs and improve development efficiency, and are particularly applicable to a network slice in a 5G communication system.

Description

Method and device for managing user groups

This application claims the priority of a Chinese patent application filed with the Chinese Patent Office on June 28, 2019, with application number 201910571710.2, and the application title is "Method and Apparatus for Managing User Groups", the entire content of which is incorporated into this application by reference .

Technical field

This application relates to the field of communications, and in particular to a method and device for managing user groups.

Background technique

The network elements in the mobile communication network need to provide differentiated functions to meet the different needs of hundreds of operators around the world. For example: the subscribed bandwidth of flood-in users is changed to 5Mbps; enterprise users choose a specific gateway; public safety service personnel paging in the registered area, and the paging is retransmitted 3 times; ordinary personnel first paging through the nearest base station and paging If the call is unsuccessful, paging in the registered area twice, etc. It should be noted that the network element realizes the above-mentioned differentiation by configuring different function control parameters.

The network element distinguishes different users through user identification parameters. In the prior art, different functions have different function control parameters and corresponding user identification parameters. When the process of executing a function reaches the control point, the network element needs to look up the table to match the user identification parameters and obtain the corresponding function control. parameter. When operators need to add user identification parameters for a certain function, technicians need to develop a new set of complete solutions. For example, function A supports user identification parameters based on the international mobile subscriber identification number (IMSI) prefix. When it is necessary to add a mobile subscriber international subscriber identification number (mobile subscriber international ISDN number, MSISDN) prefix as the user identification Technical personnel need to develop function A that supports the MSISDN prefix, so that the network element supports the matching of new user identification parameters and the acquisition of function control parameters corresponding to the new user identification parameters; for example, function B supports MSISDN prefix as User identification parameters. When it is necessary to add user identification parameters based on IMSI prefixes, technicians need to develop function B to support IMSI prefixes, so that the network element supports the matching of new user identification parameters and corresponds to the new user identification parameters The function B controls the acquisition of parameters, which increases the development cost and also affects the commercial time for operators' customized requirements.

Summary of the invention

The present application provides a method and device for managing user groups. By decoupling the relationship between user identification parameters and function control parameters, the development cost of specific functions and the commercial time required by operators for customization are reduced.

In a first aspect, a method for managing a user group is provided, including: obtaining a first user ID of a user; matching a first user group to which the user belongs according to the first user ID, and obtaining a corresponding first user group The first user group identifier; when the user's business process is executed, the first configuration parameter is determined according to the first user group identifier; the business process action is controlled according to the first configuration parameter.

There is an association relationship between the user group and the user group identifier, and there is an association relationship between the user group identifier and the configuration parameter (ie, function control parameter). Therefore, the user group and the configuration parameter establish an association relationship through the user group identifier. Since the user group and the configuration parameters are independent information, the modification of the user group will not affect the use of the configuration parameters. For example, when the network element newly supports a user group whose identification type is the MSISDN prefix, the first configuration parameter can be used when the network element executes the service process of the user in the user group corresponding to the MSISDN prefix without changing.

It can be seen that, compared with the existing technology in which the user identification parameter changes in each function require a new development of a complete set of software solutions, the network element using the above method only needs to be developed once when the user identification changes, and can be applied The configuration parameters for all functions can reduce development costs and improve development efficiency. In addition, since the user group and configuration parameters in the above method are mutually independent information, the user group and configuration parameters can be flexibly combined, and a user group can be associated with multiple configuration parameters to provide a user with different service requirements, thus being able to respond flexibly Different network scenarios are especially suitable for network slicing in 5G communication systems.

Optionally, before the matching the first user group to which the user belongs according to the first user ID, and obtaining the first user group ID corresponding to the first user group, the method further includes: creating the first user group A user group, the first user group includes the first user group identifier and a first matching rule, the first matching rule is used to match the first user identifier and the first user group; The first configuration parameter associated with the first user group.

Optionally, the adding the first configuration parameter associated with the first user group includes: associating the first configuration parameter with the first user group through the first user group identifier.

The above solution can be interpreted as: the network element stores the association relationship between the first user group identifier and the first configuration parameter, and the network element stores the association relationship between the first user group identifier and the first user group.

Optionally, the first matching rule includes a first matching record and an identification type.

Optionally, the matching the first user group to which the user belongs according to the first user ID to obtain the first user group ID corresponding to the first user group includes: according to the ID type in a plurality of matching rules , Determining at least one matching rule that is the same as the identification type of the first user identification from the plurality of matching rules, the at least one matching rule includes at least one matching record; according to the first user identification, from the A first matching record that matches the first user ID is determined in at least one matching record; the first user group ID is obtained according to the first user group corresponding to the first matching record.

Optionally, the first matching rule further includes a priority parameter, and the priority parameter is used to indicate the priority of the first matching record in the first matching rule, and the method further includes: acquiring the user The second user identification; according to the identification types in the multiple matching rules, determine from the multiple matching rules at least one matching rule that is the same as the identification type of the second user identification, the at least one matching rule Including at least one matching record; according to the second user identifier, from at least one matching record included in at least one matching rule that is the same as the identifier type of the second user identifier, the second user identifier that matches the second user identifier is determined Match records;

The obtaining the first user group identifier according to the first user group corresponding to the first matching record includes: when the priority corresponding to the first matching record is higher than the priority corresponding to the second matching record At the time of level, the first user group identifier is obtained according to the first user group corresponding to the first matching record.

Since the second user ID and the first user ID correspond to the same user (for example, the same signaling includes the first user ID and the second user ID), the user groups corresponding to different user IDs may be different. Therefore, the network element determines the first user ID. After the two matching records, one matching record needs to be selected from the two matching records to avoid possible errors when performing subsequent steps (for example, the control actions corresponding to the two user groups are contradictory).

Optionally, the configuration parameter associated with the first user group includes a priority parameter, and the priority parameter is used to indicate the priority of the configuration parameter associated with the first user group, and the method further includes: obtaining all The second user identifier of the user; according to the identifier types in the multiple matching rules, at least one matching rule that is the same as the identifier type of the second user identifier is determined from the multiple matching rules, and the at least one The matching rule includes at least one matching record; according to the second user identifier, it is determined from at least one matching record included in at least one matching rule that is the same as the identifier type of the second user identifier that matches the second user identifier A second matching record; obtaining a second user group identifier according to the second user group corresponding to the second matching record; determining a second configuration parameter according to the second user group identifier when executing the business process of the user;

The controlling the service flow action according to the first configuration parameter includes: when the first priority of the first configuration parameter is higher than the second priority of the second configuration parameter, according to the first configuration parameter Control business process actions.

The above solution can avoid errors that may occur when performing subsequent steps. For example, the control actions corresponding to the two configuration parameters are contradictory, leading to errors in execution.

Optionally, before the creation of the first user group, the method further includes: receiving the first user group; and receiving the first configuration parameter associated with the first user group.

Optionally, the first user group is a default user group, wherein the default user group can match any user, and users matched to the first user group cannot be matched to those outside the first user group Other user groups.

In some possible scenarios, except for some special users who need to provide differentiated function control parameters, the function control parameters of other users can be the same, so that the network element can match the user ID of other users to the default user group. Ensure that other users' functions are normal. The default user group can reduce the number of user group records on the network element and reduce configuration complexity.

In the second aspect, a device for managing user groups is provided. The device may be a network element or a chip. The device may include a processing unit and a communication unit. When the device is a network element, the processing unit may be a processor, and the communication unit may be a transceiver; the network element may also include a storage unit, and the storage unit may be a memory; the storage unit is used to store instructions, and the processing unit executes the The instructions stored in the storage unit enable the network element to execute the method described in the first aspect. When the device is a chip, the processing unit may be a processor, and the communication unit may be an input/output interface, a pin or a circuit, etc.; the processing unit executes the instructions stored in the storage unit so that the chip executes the first aspect In the method, the storage unit may be a storage unit (for example, a register, a cache, etc.) in the chip, or a storage unit (for example, a read-only memory, a random access memory, etc.) located outside the chip.

In a third aspect, the present application provides a computer-readable storage medium in which a computer program is stored. When the computer program is executed by a processor, the processor executes the method described in the first aspect.

In a fourth aspect, the present application provides a computer program product, the computer program product comprising: computer program code, when the computer program code is executed by a processor, the processor executes the method described in the first aspect.

Description of the drawings

Figure 1 is a schematic diagram of a communication system suitable for the present application;

Figure 2 is a schematic diagram of a method for managing user groups provided by the present application;

Figure 3 is a schematic diagram of another method for managing user groups provided by the present application;

Fig. 4 is a schematic diagram of a device for managing user groups provided by the present application.

Detailed ways

The technical solution in this application will be described below in conjunction with the drawings.

First, the application scenario of this application is introduced. Fig. 1 is a schematic diagram of a communication system suitable for this application.

The communication system 100 includes a network element 110 and a terminal device 120. The terminal device 120 can communicate with the network device 110. For example, the terminal device 120 may communicate with the network element 110 through radio waves, and may also communicate with the network element 110 through optical fibers or cables.

In this application, the terminal device 120 may include various handheld devices with wireless communication functions, vehicle-mounted devices, wearable devices, computing devices, or other processing devices connected to a wireless modem, for example, the third-generation partnership project (3 ^rd Generation partnership project, 3GPP) defined user equipment (user equipment, UE), mobile station (mobile station, MS), soft terminal, home gateway, set-top box, etc.

Network element 110 may conform to specifications 3GPP access network device or the core network device, e.g., the fifth generation (5 ^th generation, 5G) communication system, a base station (GNB) or access and mobility management function (access and mobility management function, AMF). The network element 110 may also be a non-3GPP (non-3GPP) network device, such as an access gateway (AGF). The network element 110 may also be a relay station, an access point, a vehicle-mounted device, a wearable device, and other types of devices.

The communication system 100 is only an example, and the communication system applicable to the present application is not limited to this.

Operators need to provide differentiated functions for different users. Different differentiated functions have different function control parameters and corresponding user identification parameters. When the network element 110 executes a user-related business process and reaches the control point of a certain function, the network element can perform user identification parameter matching based on the user's identity lookup table, and obtain corresponding function control parameters. However, there are many different types of user IDs in the network. For example, a mobile phone number is a user ID, and an IMSI is also a user ID. When the operator expects to add a new type of user ID to the user identification parameters of a certain function Yes, the network element 110 needs to develop a new type of user identity that supports the above-mentioned functions, which increases the development cost and also affects the commercial time of the operator's customization requirements. Next, the user group-based management method provided by this application will be introduced. For the sake of brevity, the network elements and terminal devices below are no longer accompanied by reference signs.

Figure 2 shows a method of managing user groups of the present application. The method 100 may be executed by a network element, and the method includes:

S110: Acquire a first user identifier of the user.

The first user identification is information identifying the user, and the network element may identify the user based on the first user identification. This application does not limit the specific content of the first user identification. For example, the identification type of the first user identification includes at least one of the following types:

International mobile subscriber identification number (international mobile subscriber identification number, IMSI);

User permanent identity (subscription permanent identifier, SUPI);

Mobile International Subscriber ID (mobile subscriber international ISDN number, MSISDN);

General public user identification (generic public subscription identifier, GPSI);

Type allocation code of international mobile equipment identity (international mobile equipment identity type allocation code, IMEI TAC);

Subscription group ID (subscribe group ID);

User usage type (UE usage type);

Data network name (data network name, DNN);

Access point name (access point name, APN);

Network slice selection assistance information (network slice selection assistance information, NSSAI);

Tracking area identity (tracking area identity, TAI);

Routing area identity (RAI).

Optionally, the network element may obtain the first user identification from a signaling message related to the user, or may obtain the first user identification from other messages.

After the network element obtains the first user ID, it can perform the following steps to determine the user group to which the user belongs.

S120: Match the first user group to which the user belongs according to the first user ID, and obtain the first user group ID corresponding to the first user group.

There may be one or more user groups on the network element. The user group includes but is not limited to the user group identifier, the user group name and matching rules, and the matching rule includes but is not limited to the identifier type and matching records. One user group can contain one or more matching rules.

The identification type in the matching rule includes at least one of the following types:

IMSI prefix or IMSI number segment;

SUPI prefix or SUPI number segment;

MSISDN prefix or MSISDN number segment;

GPSI prefix or GPSI number segment;

IMEI TAC;

Subscription group identification prefix or subscription group identification number segment or subscription group identification list;

User use type prefix or user use type number segment or user use type list;

DNN prefix or DNN list;

APN prefix or APN list;

NSSAI;

TAI prefix or TAI number segment or TAI list;

RAI prefix or RAI number segment or RAI list.

Optionally, the network element may determine at least one matching record from the multiple matching rules according to the identification type in the multiple matching rules, where the type of the matching rule to which the at least one matching record belongs is the same as the identification of the first user ID The same type; then match the first user ID with the at least one matching record, and determine the first matching record that matches the first user ID; then, according to the first matching record corresponding to the The first user group obtains the first user group identifier.

It should be noted that the corresponding relationship between the identification type of the first user identification and the identification type in the matching rule is:

IMSI corresponds to IMSI prefix or IMSI number segment;

SUPI corresponds to SUPI prefix or SUPI number segment;

MSISDN corresponds to MSISDN prefix or MSISDN number segment;

GPSI corresponds to GPSI prefix or GPSI number segment;

IMEI TAC corresponds to IMEI TAC;

The contracted group ID corresponds to the contracted group ID prefix or the contracted group ID number segment or the contracted group ID list;

User usage type corresponds to user usage type prefix or user usage type number segment or user usage type list;

DNN corresponds to DNN prefix or DNN list;

APN corresponds to the APN prefix or APN list;

TAI corresponds to the TAI prefix or TAI number segment or TAI list;

RAI corresponds to RAI prefix or RAI number segment or RAI list.

Table 1 shows one form of user groups, and this application does not limit the specific forms of all user groups including the first user group.

Table 1

In Table 1, the identification type and matching record in a record can be referred to as a matching rule, for example, "IMSI prefix" and "1234567" are the first matching rule. The number "1" in the first column is the first user group ID. The user group name can be filled with different names according to the requirements of the operator, for example, very important person (VIP) customers or ordinary customers; optionally, the user group name can also be empty. Optionally, each user group can also contain more information.

As an optional example, the identity type of the first user identity acquired by the network element is IMSI, and the content of the first user identity is 12345674007788. Then the network element selects at least one matching record whose identification type is the IMSI prefix from the three user groups in Table 1, that is, matching record 1234567; subsequently, the network element matches the first user identification with at least one matching record, and determines the matching record 1234567 Is the first matching record matching the first user ID; subsequently, the first user group ID is obtained according to the first user group corresponding to the first matching record, that is, the record of the first matching record 1234567 is determined User group ID 1 is the first user group ID

Each user group in Table 1 may be configured by the technician in the network element, that is, the network element may receive and store the user group input by the technician. The user group can be a file, part of the records in the file, or a table, etc., configured on the network element.

Optionally, the first user group is a default user group, where the default user group can match any user identifier. When the first user identifier cannot be matched to other user groups except the first user group, the network element may match the first user identifier to the first user group to obtain the first user group identifier.

In some possible scenarios, except for some special users who need to provide differentiated function control parameters, the function control parameters of other users can be the same, so that the network element can match the user ID of other users to the default user group. Ensure that other users' functions are normal. The default user group can reduce the number of user group records on the network element and reduce configuration complexity.

The above-mentioned solution is a scenario where the network element obtains a user identity (ie, the first user identity). In some cases, the same user can have multiple user identities at the same time, such as mobile phone number, IMSI and IMEI at the same time. The network element may obtain multiple user identities of the same user at the same time (or within a short period of time). The processing method after the network element obtains multiple user identities will be described below.

If the network element obtains multiple user identities, the method 100 further includes:

Acquiring the second user ID of the user;

Determining at least one matching rule that is the same as the identification type of the second user identifier from the multiple matching rules according to the identification types in the multiple matching rules, the at least one matching rule includes at least one matching record;

According to the second user identification, the second matching record is determined from at least one matching record included in at least one matching rule of the same type as the second user identification.

In this application, terms such as "first" and "second" only refer to two different individuals of the same type of object, and there are no other limitations other than that. For example, the second user ID and the first user ID represent two different user IDs, and there are no other restrictions.

The method for the network element to determine the second matching record matching the second user ID according to the second user ID is the same as the method for determining the first matching record matching the first user ID according to the first user ID. Repeat it again.

Since the second user ID and the first user ID correspond to the same user (for example, the same signaling includes the first user ID and the second user ID), the user groups corresponding to different user IDs may be different. Therefore, the network element determines the first user ID. After the two matching records, one matching record needs to be selected from the two matching records to avoid possible errors when performing subsequent steps (for example, the control actions corresponding to the two user groups are contradictory). Alternatively, the network element may not make a selection at this time, and make a selection when the subsequent steps are executed. The solution will be described in detail below.

If the network element needs to make a selection after determining the second matching record, the network element can select the target user group from the user groups corresponding to the multiple matching records according to the priority of the multiple matching records. For this reason, the matching rule also Contains a priority parameter, which is used to indicate the priority of the matching record in the matching rule.

For example, when the priority corresponding to the first matching record is higher than the priority corresponding to the second matching record, the user group corresponding to the first matching record is determined as the target user group, and the first user group corresponding to the first matching record is obtained The first user group ID.

After the network element determines the first user group identifier, the first user group identifier may be stored in the user context. Subsequently, the following steps can be performed.

S130: When executing the user's business process, determine the first configuration parameter according to the first user group identifier.

For example, in the user's session establishment process, after receiving the session establishment request, the network element determines the configuration parameters selected by the gateway according to the user's first user group identifier, such as selecting a designated gateway.

Or, in the user attachment process, after receiving the user's attachment request, the user's encryption strategy is determined according to the user's first user ID.

Alternatively, in the subscription data update process, the size of the quality of service parameter QoS is determined according to the first user identification of the user.

S140: Control the business process action according to the first configuration parameter.

When the network element executes the user's business process, it needs to determine the action corresponding to the business process according to the configuration parameters, so as to control the business process action.

In this application, there is an association relationship between the user group identifier and the configuration parameter. After the network element determines the first user group identifier, the first configuration parameter can be determined according to the first user group identifier.

Table 2 shows an example of configuration parameters.

Table 2

User group ID Encryption Algorithm Integrity protection algorithm bandwidth 1 EEA1 EIA1 1Gbps 2 EEA2 EIA2 2.5Gbps 3 EEA3 EIA3 2Gbps

In Table 2, the encryption algorithm, the integrity protection algorithm, and the bandwidth are all configuration parameters, and the configuration parameters applicable to this application may also include other parameters. This application does not limit the number and specific content of configuration parameters. Optionally, it may be received by the network element through the communication interface, for example, the configuration parameter may be input by a technician. The configuration parameter can be a file, or part of the records in the file, or a table, etc., to be configured on the network element.

When executing the user's business process, the network element can read the first user group identifier "1" from the user context, and determine from Table 2 that the first configuration parameter is EEA1 encryption algorithm, EIA1 integrity according to the first user group identifier Protection algorithm and 1Gbps bandwidth. Subsequently, based on the EEA1 encryption algorithm, EIA1 integrity protection algorithm and 1Gbps bandwidth control user business process actions.

Optionally, after the network element determines the second matching record, the method 100 further includes:

Obtaining the second user group identifier according to the second user group corresponding to the second matching record;

When the user's business process is executed, the second configuration parameter is determined according to the second user group identifier.

Among them, S140 includes:

When the priority of the first configuration parameter is higher than the priority of the second configuration parameter, control the business process action according to the first configuration parameter. To this end, the configuration parameters also include a priority parameter, which is used to indicate the priority of the configuration parameter.

The second configuration parameter is, for example, the configuration parameter corresponding to the user group identifier "2" in Table 2. The network element may determine the priority of each configuration parameter according to the priority parameters in Table 2 (not shown in Table 2).

The above solution can avoid errors that may occur when performing subsequent steps. For example, the control actions corresponding to the two configuration parameters are contradictory, leading to errors in execution.

In S140, the action of the network element to control the service flow may be to generate egress signaling, and send the egress signaling to other devices or modules, so as to implement specific functions of the user. The network element may also not generate egress signaling and execute the business process locally.

Fig. 3 shows a possible flow of the network element provided in this application when executing the method 100.

The operation and maintenance management station can pre-configure the user group management database including Table 1 and the function management database including Table 2 for the network elements. The network element executes S110 and obtains ingress signaling through the user signaling processing unit. The ingress signaling includes the first user identifier of the user, and the user signaling processing unit may send the first user identifier to the function execution unit. The network element executes S120 through the function execution unit, performs matching processing on the user group management database, determines the first user group corresponding to the first user identifier, and obtains the first user group identifier. Subsequently, the network element executes S130 through the function execution unit, and searches the function management database for the first configuration parameter corresponding to the first user group identifier. After obtaining the first configuration parameter, the network element executes S140, and the function execution unit may send the first configuration parameter to the user signaling processing unit, or the function execution unit may generate a corresponding configuration command according to the first configuration parameter and send it to the user information. Command the processing unit so that the user signaling processing unit generates egress signaling according to the first configuration parameter or configuration command.

It can be seen from the above embodiments that there is an association relationship between the user group and the user group identifier, and there is an association relationship between the user group identifier and the configuration parameter. Therefore, the user group and the configuration parameter establish an association relationship through the user group identifier. Since the user group and the configuration parameters are independent information, the modification of the user group will not affect the use of the configuration parameters.

For example, when the network element newly supports a user group whose identification type is the MSISDN prefix, the first configuration parameter can be used when the network element executes the service process of the user in the user group corresponding to the MSISDN prefix without changing.

It can be seen that, compared to the existing technology where the user identification parameter changes in each function require a new development of a complete set of software solutions, the network element of the application method 100 only needs to be developed once when the user identification changes, and then it can be applied. For all configuration parameters, it can reduce development costs and improve development efficiency. In addition, because the user group and configuration parameters in the method 100 are mutually independent information, the user group and configuration parameters can be flexibly combined, and a user group can be associated with multiple configuration parameters to provide a user with different service requirements, thus being able to respond flexibly Different network scenarios are especially suitable for network slicing in 5G communication systems. Network slicing in a 5G communication system is essentially that operators provide multiple virtual networks, and each virtual network provides different service requirements, such as delay, bandwidth, security, and reliability, to flexibly respond to different network applications Scenes. Through the user group management method of the present invention, different configuration spaces are supported through different user groups, different service requirements are provided differentially, the network slicing function is realized, and the operation, maintenance and deployment cost of the network slicing can be saved.

In the following, another example of the application of the method 100 in a 5G communication system is given.

Operators A, B and C have the following three requirements:

Operator A: Users whose IMSI prefix is 12345, select the session management unit (session management function, SMF) 10.10.10.10.

Operator B: Users whose IMEI TAC is 12345678, and the encryption algorithm selects Snow 3G.

Operator C: APN network identifier (Network Identifier, NI) is a user of 5gnet, and the session bandwidth is 2Gbps.

Step 1.1, the network element creates a user group and defines the matching rules of the user group.

Among them, the user group is identified by the user group identifier, and the matching rule includes the identification type and the matching record. The network element stores the user group and its corresponding matching rule in the user group management database.

For the scenario of this embodiment, the network element creates user group A, user group B, and user group C, which are identified by user group identifiers 1, 2 and 3.

Matching rules corresponding to user group A: user group type: IMSI prefix, user group record: 12345.

Matching rules corresponding to user group B: user group type: IMEITAC, user group record: 12345678.

Matching rules corresponding to user group C: user group type: APNNI, user group record: 5gnet.

Step 1.2: The network element adds configuration parameters associated with the user group. The network element stores the configuration parameters of the user group in the function management database. The configuration parameters are used to provide feature differentiation capabilities.

table 3

User group ID Configuration parameter 1 SMF: 10.10.10.10 2 SNOW 3G 3 2Gbps

It should be noted that the operation and maintenance management station can pre-configure the user group list and configuration parameters associated with the user group to the network element. The network element performs step 1.1 and step 1.2 according to the user group list and the configuration parameters associated with the user group. The user group rule list contains one or more user group rules, including but not limited to user group identification, user group name, identification type, and matching records.

For example, the user group list is shown in Table 4, and the configuration parameters associated with the user group are shown in Table 5.

Table 4

User group ID User group name Logo type Match record 1 User Group A IMSI prefix 12345 2 User Group B IMEI TAC 12345678 3 User Group C APNNI 5gnet

table 5

User group ID Encryption Algorithm SMF bandwidth 1 To 10.10.10.10 To 2 SNOW 3G To To 3 To To 2Gbps

The user group list or the configuration parameters associated with the user group can be a file, part of the records in the file, or a table, etc., configured to the network element.

Step 1.3, the network element matches the user group to which the user belongs, and stores the matched user group identifier in the user context.

The network element obtains the user ID of the user, and matches the user ID with matching records of the same ID type according to the type of the user ID. If the matching is successful, the user group ID of the corresponding user group is obtained; if the matching fails, the default user is obtained The user group ID of the group.

For example, if the user ID corresponding to the user acquired by the network element is "IMSI, 12345674007788", the network element selects at least one matching record whose user group type is IMSI prefix from Table 4 to match the IMSI, and IMSI 12345674007788 can match the IMSI prefix 12345 Therefore, it is determined that the user group ID corresponding to the above-mentioned user ID is "1".

The default user group can be a record that can match any user ID. When the user ID cannot match any user group except the default user group, the user ID is considered to belong to the default user group.

Step 1.4: When executing the business process of a specific user, the function execution unit of the network element obtains the configuration parameters associated with the user group according to the user group identifier of the user group to which the user belongs, and controls the business process actions according to the configuration parameters.

For example, in the process of establishing a packet data unit (PDU) session, the network element needs to select the user’s SMF, determine the configuration parameters associated with the user group according to the user group identifier "1" of the user group to which the user belongs, and select the Internet The protocol (Internet protocol, IP) address is SMF with 10.10.10.10.

In addition, because the user has multiple identities at the same time, such as IMSI, MSISDN, IMEI, etc., different identities of the same user may be matched to different matching records at the same time. For this reason, the configuration parameters associated with the matching rules or user groups also include priority, correspondingly:

-The network element selects the user group ID corresponding to the matching record with the highest priority according to the priority corresponding to the multiple matching records on the matching, and controls the business process action according to its associated configuration parameter value; or

-The network element obtains configuration parameters associated with multiple user groups according to the user group identifiers corresponding to different matching records on the matching, and controls the business process actions according to the priority in the configuration parameters and the configuration parameter value with the highest priority.

The example of the method for managing user groups provided by this application is described in detail above. It can be understood that, in order to realize the above-mentioned functions, the apparatus for managing user groups includes hardware structures and/or software modules corresponding to various functions. Those skilled in the art should easily realize that in combination with the units and algorithm steps of the examples described in the embodiments disclosed herein, the present application can be implemented in the form of hardware or a combination of hardware and computer software. Whether a certain function is executed by hardware or computer software-driven hardware depends on the specific application and design constraint conditions of the technical solution. Professionals and technicians can use different methods for each specific application to implement the described functions, but such implementation should not be considered beyond the scope of this application.

This application may divide the device for managing user groups into functional units according to the foregoing method examples. For example, each function may be divided into each functional unit, or two or more functions may be integrated into one processing unit. The above-mentioned integrated unit can be implemented in the form of hardware or software functional unit. It should be noted that the division of units in this application is illustrative, and is only a logical function division, and there may be other division methods in actual implementation.

Fig. 4 shows a schematic structural diagram of an apparatus for managing user groups provided by this application. The apparatus 400 for managing user groups can be used to implement the methods described in the foregoing method embodiments. The apparatus 400 for managing user groups may be a chip or a network device.

The device 400 includes one or more processors 401, and the one or more processors 401 can support the device 400 for managing user groups to implement the method in the method embodiment corresponding to FIG. 2. The processor 401 may be a general-purpose processor or a special-purpose processor. For example, the processor 401 may be a central processing unit (CPU). The CPU can be used to control the device 400 (for example, a network device), execute a software program, and process data of the software program. The device 400 may further include a communication unit 405 to implement signal input (reception) and output (transmission).

For example, the apparatus 400 may be a chip, and the communication unit 405 may be an input and/or output circuit of the chip, or the communication unit 405 may be a communication interface of the chip, and the chip may be used as a terminal device or a network device or other wireless communication equipment made of.

The device 400 may include one or more memories 402, on which a program 404 is stored, and the program 404 can be run by the processor 401 to generate an instruction 403 so that the processor 401 executes the method described in the foregoing method embodiment according to the instruction 403. Optionally, the memory 402 may also store data. Optionally, the processor 401 may also read data stored in the memory 402 (for example, the content in the table described above). The data may be stored at the same storage address as the program 404, and the data may also be stored in the same storage address as the program 404. 404 is stored in a different storage address.

The processor 401 and the memory 402 may be provided separately or integrated together, for example, integrated on a single board or a system on chip (SOC).

The device 400 may also include an antenna 406. The communication unit 405 is used to implement the transceiver function of the device 400 through the antenna 406.

In a possible design, the processor 401 is configured to obtain the first user identification of the user through the communication unit 405;

The processor 401 is further configured to: match a first user group to which the user belongs according to the first user ID, and obtain a first user group ID corresponding to the first user group;

When executing the user's business process, determine the first configuration parameter according to the first user group identifier;

Control business process actions according to the first configuration parameter.

Optionally, the processor 401 is further configured to:

Create the first user group, the first user group includes the first user group identifier and a first matching rule, and the first matching rule is used to match the first user identifier and the first user group ；

Adding the first configuration parameter associated with the first user group.

Optionally, the processor 401 is specifically configured to:

Associating the first configuration parameter with the first user group through the first user group identifier.

Optionally, the processor 401 is specifically configured to:

Determining at least one matching rule that is the same as the identification type of the first user identifier from the multiple matching rules according to the identification types in the multiple matching rules, the at least one matching rule includes at least one matching record;

Determine, from the at least one matching record, a first matching record matching the first user identifier according to the first user identifier;

Obtaining the first user group identifier according to the first user group corresponding to the first matching record.

Optionally, the first matching rule further includes a priority parameter, where the priority parameter is used to indicate the priority of the first matching record in the first matching rule, and the processor 401 is further configured to:

Acquiring the second user identifier of the user through the communication unit;

Determining at least one matching rule that is the same as the identification type of the second user identifier from the plurality of matching rules according to the identification type in the plurality of matching rules, the at least one matching rule includes at least one matching record;

Determining, according to the second user ID, a second matching record matching the second user ID from at least one matching record included in at least one matching rule having the same ID type as the second user ID;

The processor 401 is specifically configured to:

When the priority corresponding to the first matching record is higher than the priority corresponding to the second matching record, obtaining the first user group identifier according to the first user group corresponding to the first matching record.

Optionally, the configuration parameter associated with the first user group includes a priority parameter, and the priority parameter is used to indicate the priority of the configuration parameter associated with the first user group, and the processor 401 is further configured to :

Acquiring the second user identifier of the user through the communication unit;

Determining at least one matching rule that is the same as the identification type of the second user identifier from the plurality of matching rules according to the identification type in the plurality of matching rules, the at least one matching rule includes at least one matching record;

Determining, according to the second user ID, a second matching record matching the second user ID from at least one matching record included in at least one matching rule having the same ID type as the second user ID;

Obtaining a second user group identifier according to the second user group corresponding to the second matching record;

When executing the user's business process, determine a second configuration parameter according to the second user group identifier;

The processor 401 is specifically configured to:

When the first priority of the first configuration parameter is higher than the second priority of the second configuration parameter, control the service flow action according to the first configuration parameter.

Optionally, the communication unit 405 is further configured to:

Receiving the first user group;

Receiving the first configuration parameter associated with the first user group.

For the specific manner in which the processor 401 executes the foregoing steps, reference may be made to the relevant description in the foregoing method embodiment.

It should be understood that each step of the foregoing method embodiment may be completed by a logic circuit in the form of hardware or instructions in the form of software in the processor 401. The processor 401 may be a CPU, a digital signal processor (digital signal processor, DSP), an application specific integrated circuit (ASIC), a field programmable gate array (field programmable gate array, FPGA) or other programmable logic devices , For example, discrete gates, transistor logic devices, or discrete hardware components.

This application also provides a computer program product, which, when executed by the processor 401, implements the communication method described in any method embodiment in this application.

The computer program product may be stored in the memory 402, for example, a program 404, and the program 404 is finally converted into an executable object file that can be executed by the processor 401 through processing processes such as preprocessing, compilation, assembly, and linking.

This application also provides a computer-readable storage medium on which a computer program is stored, and when the computer program is executed by a computer, the communication method described in any method embodiment in this application is implemented. The computer program can be a high-level language program or an executable target program.

The computer-readable storage medium is, for example, the memory 402. The memory 402 may be a volatile memory or a non-volatile memory, or the memory 402 may include both a volatile memory and a non-volatile memory. Among them, the non-volatile memory can be read-only memory (ROM), programmable read-only memory (programmable ROM, PROM), erasable programmable read-only memory (erasable PROM, EPROM), and electronic Erase programmable read-only memory (electrically EPROM, EEPROM) or flash memory. The volatile memory may be random access memory (RAM), which is used as an external cache. By way of exemplary but not restrictive description, many forms of RAM are available, such as static random access memory (static RAM, SRAM), dynamic random access memory (dynamic RAM, DRAM), synchronous dynamic random access memory (synchronous DRAM, SDRAM), double data rate synchronous dynamic random access memory (double data rate SDRAM, DDR SDRAM), enhanced synchronous dynamic random access memory (enhanced SDRAM, ESDRAM), synchronous connection dynamic random access memory (synchlink DRAM, SLDRAM) ) And direct memory bus random access memory (direct rambus RAM, DR RAM).

Those skilled in the art can clearly understand that, for the convenience and conciseness of description, the specific working process of the above-described system, device, and unit may refer to the corresponding process in the foregoing method embodiment, which will not be repeated here.

In the several embodiments provided in this application, the disclosed system, device, and method may be implemented in other ways. For example, some features of the method embodiments described above may be ignored or not implemented. The device embodiments described above are merely illustrative. The division of units is only a logical function division. In actual implementation, there may be other division methods, and multiple units or components may be combined or integrated into another system. In addition, the coupling between the units or the coupling between the components may be direct coupling or indirect coupling, and the foregoing coupling includes electrical, mechanical, or other forms of connection.

It should be understood that in the various embodiments of the present application, the size of the sequence number of each process does not mean the order of execution. The execution order of each process should be determined by its function and internal logic, and should not correspond to the embodiments of the present application. The implementation process constitutes any limitation.

In addition, the terms "system" and "network" in this article are often used interchangeably in this article. The term "and/or" in this article is only an association relationship describing associated objects, which means that there can be three types of relationships. For example, A and/or B can mean that there is A alone, and both A and B exist. There are three cases of B. In addition, the character "/" in this text generally indicates that the associated objects before and after are in an "or" relationship.

In short, the above descriptions are only preferred embodiments of the technical solutions of the present application, and are not used to limit the protection scope of the present application. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of this application shall be included in the protection scope of this application.

Claims (21)

A method for managing user groups, characterized in that it includes: Obtain the first user ID of the user; Match the first user group to which the user belongs according to the first user ID, and obtain the first user group ID corresponding to the first user group; When executing the user's business process, determine the first configuration parameter according to the first user group identifier; Control business process actions according to the first configuration parameter. The method according to claim 1, wherein before the first user group to which the user belongs is matched according to the first user ID, and the first user group ID corresponding to the first user group is obtained, all The method also includes: Create the first user group, the first user group includes the first user group identifier and a first matching rule, and the first matching rule is used to match the first user identifier and the first user group ； Adding the first configuration parameter associated with the first user group. The method according to claim 2, wherein the adding the first configuration parameter associated with the first user group comprises: Associating the first configuration parameter with the first user group through the first user group identifier. The method according to claim 2 or 3, wherein the first matching rule includes a first matching record and an identification type. The method according to any one of claims 1 to 4, wherein the first user group to which the user belongs is matched according to the first user identifier, and the first user group corresponding to the first user group is obtained. User group ID, including: Determining at least one matching rule that is the same as the identification type of the first user identifier from the multiple matching rules according to the identification types in the multiple matching rules, the at least one matching rule includes at least one matching record; Determine, from the at least one matching record, a first matching record matching the first user identifier according to the first user identifier; Obtaining the first user group identifier according to the first user group corresponding to the first matching record. The method according to claim 5, wherein the first matching rule further comprises a priority parameter, and the priority parameter is used to indicate the priority of the first matching record in the first matching rule, so The method also includes: Acquiring the second user ID of the user; Determining at least one matching rule that is the same as the identification type of the second user identifier from the plurality of matching rules according to the identification type in the plurality of matching rules, the at least one matching rule includes at least one matching record; Determining, according to the second user ID, a second matching record matching the second user ID from at least one matching record included in at least one matching rule having the same ID type as the second user ID; The obtaining the first user group identifier according to the first user group corresponding to the first matching record includes: When the priority corresponding to the first matching record is higher than the priority corresponding to the second matching record, obtaining the first user group identifier according to the first user group corresponding to the first matching record. The method according to claim 5, wherein the configuration parameter associated with the first user group includes a priority parameter, and the priority parameter is used to indicate the priority of the configuration parameter associated with the first user group , The method further includes: Acquiring the second user ID of the user; Determining at least one matching rule that is the same as the identification type of the second user identifier from the plurality of matching rules according to the identification type in the plurality of matching rules, the at least one matching rule includes at least one matching record; Determining, according to the second user ID, a second matching record matching the second user ID from at least one matching record included in at least one matching rule having the same ID type as the second user ID; Obtaining a second user group identifier according to the second user group corresponding to the second matching record; When executing the user's business process, determine a second configuration parameter according to the second user group identifier; The controlling business process actions according to the first configuration parameter includes: When the first priority of the first configuration parameter is higher than the second priority of the second configuration parameter, control the service flow action according to the first configuration parameter. The method according to any one of claims 2 to 7, wherein before said creating said first user group, said method further comprises: Receiving the first user group; Receiving the first configuration parameter associated with the first user group. The method according to any one of claims 1 to 8, wherein the first user group is a default user group, and wherein the default user group can match any user and match the first user group. Users of the user group cannot be matched to other user groups except the first user group. The method according to any one of claims 1 to 9, wherein the identification type in the first matching rule includes at least one of the following types: International Mobile Subscriber Identity Code IMSI prefix or IMSI number segment; The user permanently identifies the SUPI prefix or SUPI number segment; Mobile station international subscriber identification code MSISDN prefix or MSISDN number segment; General public user identification GPSI prefix or GPSI number segment; Type allocation code IMEI TAC of International Mobile Equipment Identity; Subscription group identification prefix or subscription group identification number segment or subscription group identification list; User use type prefix or user use type number segment or user use type list; Data network name DNN prefix or DNN list; Access point name APN prefix or APN list; Network slice selection auxiliary information NSSAI; Tracking area identification TAI prefix or TAI number segment or TAI list; The routing area identifies the RAI prefix or RAI number segment or RAI list. A device for managing user groups, characterized by comprising a communication unit and a processing unit, the processing unit being used for: Acquiring the first user identification of the user through the communication unit; Match the first user group to which the user belongs according to the first user ID, and obtain the first user group ID corresponding to the first user group; When executing the user's business process, determine the first configuration parameter according to the first user group identifier; Control business process actions according to the first configuration parameter. The device according to claim 11, wherein the processing unit is further configured to: Create the first user group, the first user group includes the first user group identifier and a first matching rule, and the first matching rule is used to match the first user identifier and the first user group ； Adding the first configuration parameter associated with the first user group. The device according to claim 12, wherein the processing unit is specifically configured to: Associating the first configuration parameter with the first user group through the first user group identifier. The device according to claim 12 or 13, wherein the first matching rule comprises a first matching record and an identification type. The device according to any one of claims 11 to 14, wherein the processing unit is specifically configured to: Determining at least one matching rule that is the same as the identification type of the first user identifier from the multiple matching rules according to the identification types in the multiple matching rules, the at least one matching rule includes at least one matching record; Determine, from the at least one matching record, a first matching record matching the first user identifier according to the first user identifier; Obtaining the first user group identifier according to the first user group corresponding to the first matching record. The device according to claim 15, wherein the first matching rule further comprises a priority parameter, and the priority parameter is used to indicate the priority of the first matching record in the first matching rule, so The processing unit is also used for: Acquiring the second user identifier of the user through the communication unit; Determining at least one matching rule that is the same as the identification type of the second user identifier from the plurality of matching rules according to the identification type in the plurality of matching rules, the at least one matching rule includes at least one matching record; Determining, according to the second user ID, a second matching record matching the second user ID from at least one matching record included in at least one matching rule having the same ID type as the second user ID; The processing unit is specifically used for: When the priority corresponding to the first matching record is higher than the priority corresponding to the second matching record, obtaining the first user group identifier according to the first user group corresponding to the first matching record. The apparatus according to claim 15, wherein the configuration parameter associated with the first user group includes a priority parameter, and the priority parameter is used to indicate the priority of the configuration parameter associated with the first user group , The processing unit is further used for: Acquiring the second user identifier of the user through the communication unit; Determining at least one matching rule that is the same as the identification type of the second user identifier from the plurality of matching rules according to the identification type in the plurality of matching rules, the at least one matching rule includes at least one matching record; Determining, according to the second user ID, a second matching record matching the second user ID from at least one matching record included in at least one matching rule having the same ID type as the second user ID; Obtaining a second user group identifier according to the second user group corresponding to the second matching record; When executing the user's business process, determine a second configuration parameter according to the second user group identifier; The processing unit is specifically used for: When the first priority of the first configuration parameter is higher than the second priority of the second configuration parameter, control the service flow action according to the first configuration parameter. The device according to any one of claims 12 to 17, wherein the communication unit is further configured to: Receiving the first user group; Receiving the first configuration parameter associated with the first user group. The device according to any one of claims 11 to 18, wherein the first user group is a default user group, wherein the default user group can match any user and match the first user group. Users of the user group cannot be matched to other user groups except the first user group. The device according to any one of claims 11 to 19, wherein the identification type in the first matching rule includes at least one of the following types: International Mobile Subscriber Identity Code IMSI prefix or IMSI number segment; The user permanently identifies the SUPI prefix or SUPI number segment; Mobile station international subscriber identification code MSISDN prefix or MSISDN number segment; General public user identification GPSI prefix or GPSI number segment; Type allocation code IMEI TAC of International Mobile Equipment Identity; Subscription group identification prefix or subscription group identification number segment or subscription group identification list; User use type prefix or user use type number segment or user use type list; Data network name DNN prefix or DNN list; Access point name APN prefix or APN list; Network slice selection auxiliary information NSSAI; Tracking area identification TAI prefix or TAI number segment or TAI list; The routing area identifies the RAI prefix or RAI number segment or RAI list. A computer-readable storage medium, characterized in that a computer program is stored in the computer-readable storage medium, and when the computer program is executed by a processor, the processor executes any one of claims 1 to 10 The method described.

Images