Method for enabling control of data packet flows belonging to different access technologies

Patent metadata

Field	Value
Publication number	US-2016135074-A1
Application number	US-201314900701-A
Country	US
Kind code	A1
Filing date	Jul 12, 2013
Priority date	Jul 12, 2013
Publication date	May 12, 2016
Grant date	—

Abstract

The present invention relates to embodiments of nodes and methods in a node in a data telecommunication network. The method and embodiments thereof enables control of data packet traffic belonging to different access technologies to be sent with the same Quality of Service class over an aggregated encrypted Internet Security tunnel, IPsec tunnel. The received data packets are encrypted and encapsulated as payload in an IP data packet to be sent over an aggregated encrypted IPsec tunnel, which header is marked with an access technology index comprising a code for the identified access technology of the one or more received data packets encrypted and encapsulated as payload in the IPsec tunnel and a hash identifier code enabling enhanced scheduling and routing.

First claim

1 . Method for enabling control of data packet flows belonging to different access technologies to be sent with the same Quality of Service class over an aggregated encrypted Internet Protocol security tunnel, IPsec tunnel, the method comprising:
receiving data packet flows; identifying which access technology each received data packet belongs to; encrypting and encapsulating one or more data received packets as payload in an IP data packet to be sent over an aggregated encrypted IPsec tunnel; and marking a header of the IPsec tunnel with an access technology index comprising a code for the identified access technology of the one or more received data packets encrypted and encapsulated as payload in the IPsec tunnel; sending the IP data packets via the aggregated encrypted IPsec tunnel.

2 . The method according to claim 1 , wherein the radio access technology index is marked by inserting in the IPsec header configured according to an encapsulation security payload protocol.

3 . The method according to claim 2 , wherein the IPsec header is configured according to the encapsulation security payload protocol which comprises a Security Parameters Index field in which the access technology index is inserted.

4 . The method according to claim 1 , wherein the radio access technology index is marked in the IPsec header configured according to an authentication header protocol.

5 . The method according to claim 4 , wherein the IPsec header is configured according to the authentication header protocol comprising a reserved field and a Security Parameters Index field, the access technology index being inserted in one of said fields.

6 . The method according to claim 1 , wherein the marking involves:
inserting in the access technology index a hash identifier code.

7 - 12 . (canceled)

13 . A method for scheduling and/or routing or switching of IPsec tunnels in a node of an access network or transport network of a data telecommunication network, the node comprising a scheduler, routing or switching functionality, the method comprising:
receiving one or more IPsec tunnels comprising IP data packets, each IPsec tunnel being marked in the header with an access technology index indicating the access technology from which a data packet originated and a hash identifier code to be used in the calculation of a hash code; scheduling and routing/switching the IP data packets by means of the access technology index indicated in the IPsec tunnel header.

14 . The method according to claim 13 , wherein the scheduling is hierarchical based on the access technology code in the access technology index.

15 . The method according to claim 14 , wherein the scheduling of the IPsec tunnels is hierarchical based on the indicated Quality of Service in the IPsec tunnel header.

16 . The method according to claim 13 , wherein the method involves reading the access technology index marked in a field of an IPsec header, e.g. an authentication header or encapsulation security payload header.

17 . The method according to claim 13 , wherein the method involves using the access technology index for load balancing between different path routes to a destination address.

18 . The method according to claim 13 , wherein said access technology index comprises an access technology code indicating either one of a number of fixed access technologies or radio access technologies.

19 . A node in an access network or transport network of a data telecommunication network, the node comprising:
a routing and/or switching device adapted to receive one or more IPsec tunnels comprising IP data packets, each IPsec tunnel being marked in the header with an access technology index indicating the access technology from which a data packet originated and a hash identifier code for calculating a hash code; a scheduler configured to schedule the one or more IPsec tunnels comprising IP data packets; and a controller configured to control the scheduler and the routing and/or switching device based on the access technology index indicated in the IPsec tunnel header.

20 . The node according to claim 19 , wherein the node comprises a hierarchical scheduler for performing the scheduling based on the access technology code in the access technology index.

21 . The node according to claim 20 , wherein the hierarcical scheduler is configured to schedule IPsec tunnels hierarchically based on the indicated Quality of Service in the IPsec tunnel header.

22 . The node according to claim 21 , wherein the controller is configured to retrieve the access technology index marked in a field of an IPsec header, e.g. an authentication header or encapsulation security payload header.

23 . The node according to claim 19 , wherein the controller is configured to use the access technology index for load balancing between different path routes to a destination address.

24 . The node according to claim 19 , wherein said access technology index comprises an access technology code indicating either one of a number of fixed access technologies or radio access technologies.

25 . A node for enabling control of data packet flow belonging to different access technologies to be sent with the same Quality of Service class over an aggregated encrypted Internet Protocol security tunnel, IPsec tunnel, said node comprises a processor and memory, said memory containing instructions executable by said processor whereby said node is operative to:
receive data packet flow; identify which access technology each received data packet belongs to; encrypt and encapsulate one or more data received packets as payload in an IP data packet to be sent over an aggregated encrypted IPsec tunnel; and mark a header of the IPsec tunnel with an access technology index comprising a code for the identified access technology of the one or more received data packets encrypted and encapsulated as payload in the IPsec tunnel; send the IP data packets via the aggregated encrypted IPsec tunnel.

26 . The node according to claim 25 , wherein the radio access technology index is marked by inserting in the IPsec header configured according to an encapsulation security payload protocol.

27 . The node according to claim 26 , wherein the IPsec header is configured according to the encapsulation security payload protocol which comprises a Security Parameters Index field in which the access technology index is inserted.

28 . The node according to claim 25 , wherein the radio access technology index is marked in the IPsec header configured according to an authentication header protocol.

29 . The node according to claim 28 , wherein the IPsec header is configured according to the authentication header protocol comprising a reserved field and a Security Parameters Index field, the access technology index being inserted in one of said fields.

30 . The node according to claim 25 , wherein the node involves:
inserting in the access technology index a hash identifier code.

31 - 36 . (canceled)

Assignees

• Ericsson Telefon Ab L M

Inventors

• Welin Annikki
• Hallström Lars
• Kölhi Hohan
• Thyni Tomas

Classifications

• H04L63/164

  at the network layer · CPC title

• H04W28/10

  Flow control {between communication endpoints} · CPC title

• H04L63/0428

  wherein the data content is protected, e.g. by encrypting or encapsulating the payload · CPC title

• H04W28/0268 Primary

  using specific QoS parameters for wireless networks, e.g. QoS class identifier [QCI] or guaranteed bit rate [GBR] (negotiating SLA or negotiating QoS H04W28/24) · CPC title

• H04L63/0272

  Virtual private networks · CPC title