Method nodes and computer program for enabling of data traffic separation

Patent metadata

Field	Value
Publication number	US-2016337238-A1
Application number	US-201415112065-A
Country	US
Kind code	A1
Filing date	Jan 20, 2014
Priority date	Jan 20, 2014
Publication date	Nov 17, 2016
Grant date	—

Abstract

A method, unit and computer program performed by a packet separation unit in a communications network for enabling of data traffic separation comprising: obtaining a traffic rule set from a rule manager, determining a complementary rule related to the traffic rule set, arranging the rules in an hierarchical order such that a received data packet will be evaluated with the rule with the most likeliness to comply with a received data packet, receiving the data packet, directing the data packet to a local shared environment.

First claim

1 . A method performed by a packet separation unit in a communications network for enabling of data traffic separation, the method comprising:
obtaining a traffic rule set comprising at least one rule from a rule manager; determining a complementary rule related to the traffic rule set; arranging the rules in an hierarchical order such that a received data packet will first be evaluated with the rule with the most likeliness to comply with the received data packet; receiving the data packet;
evaluating the received data packet according to the hierarchical order of the rules arranged in the hierarchical order; and
directing the data packet in dependence on the evaluation of the received data packet.

2 . The method according to claim 1 , wherein,
the complimentary rule is based on a hashed data structure.

3 . The method according to claim 1 , further comprising:
evaluating the data packet relative to the complimentary rule and when the evaluation indicates non-compliance,
evaluating the data packet relative to the traffic rule set and when the evaluation data indicates compliance,
directing the data packet to the local shared environment.

4 . The method according to claim 1 , wherein:
compliance data is associated with the data packet which indicates the complying traffic rule set.

5 . The method according to claim 1 , wherein
evaluation of the data packet is performed based on at least one of: pattern matching, protocol, destination address, source address, destination port, source port, or user equipment ID.

6 . The method according to claim 1 , wherein either
the traffic rule set is common for data packets from a group of user equipments or, the traffic rule set is individual for a data packet from a particular user equipment.

7 . The method according to claim 1 , wherein
the data packet is directed via a tunnel to the local shared environment.

8 . A method performed by a controller in a communications network for enabling of data traffic separation, the method comprising:
receiving a data packet via a communication interface; evaluating the data packet with a traffic rule set in a packet separation unit and, when the data packet complies with the traffic rule:
directing the data packet via the communication interface to a local shared environment.

9 . The method according to claim 8 , wherein,
the complimentary rule is based on a hashed data structure.

10 . The method according to claim 8 , further comprising
receiving a data packet; evaluating the data packet relative to the complimentary rule and when the evaluation indicates non-compliance,
evaluating the data packet relative to the traffic rule set and when the evaluation data indicates compliance,
directing the data packet to the local shared environment.

11 . The method according to claim 8 , wherein
compliance data is associated with the data packet which indicates the complying traffic rule set.

12 . A method performed by a system in a communications network for enabling of data traffic separation, the method comprising:
obtaining a service deployment instruction by a resource manager; generating a traffic rule set based on the service deployment instruction by the resource manager; transmitting the traffic rule set to a rule manager from the resource manager; deploying the traffic rule set in a packet separation unit by the rule manager; and generating a virtual machine in a local shared environment for reception of data packets complying with the traffic rule set by the resource manager, thereby enabling of data traffic separation to a local shared environment.

13 . The method according to claim 12 , wherein
the rule manager verifies a new traffic rule consistency with the traffic rule set.

14 . The method according to claim 12 , wherein
a data packet is received by a traffic router unit in the local shared environment, wherein the traffic router unit routes a received data packed based on compliance data associated with the data packet to a virtual machine related to the compliance data.

15 . A packet separation unit in a communications network for enabling of data traffic separation comprising:
a processor; memory containing instructions that, when executed by the processor, cause the packet separation unit to:
obtain a traffic rule set comprising at least one rule from a rule manager;
determine a complementary rule related to the traffic rule set;
arrange the rules in an hierarchical order such that a received data packet will first be evaluated with the rule with the most likeliness to comply with a received data packet;
receive the data packet;
evaluate the received data packet according to the hierarchical order of the rules arranged in the hierarchical order; and
direct the data packet in dependence on the evaluation of the received data packet.

16 . The packet separation unit according to claim 15 , wherein,
the complimentary rule is based on a hashed data structure.

17 . The packet separation unit according to claim 15 , adapted to:
evaluate the data packet relative to the complimentary rule and when the evaluation indicates non-compliance,
evaluate the data packet relative to the traffic rule set and when the evaluation data indicates compliance,
direct the data packet to the local shared environment.

18 . The packet separation unit according to claim 15 , wherein
compliance data is associated with the data packet which indicates the complying traffic rule set.

19 . The packet separation unit according to any of claim 15 , wherein
evaluation of a data packet is performed based on at least one of: pattern matching, destination address, source address, destination port, source port, or user equipment ID.

20 . The packet separation unit according to claim 15 , wherein
the traffic rule set is common for data packets from a group of user equipments or, the traffic rule set is individual for a data packet from a particular user equipment.

21 . The packet separation unit according to claim 15 , wherein
the data packet is directed via a tunnel to the local shared environment.

22 . (canceled)

23 . A controller in a communications network for enabling of data traffic separation comprising:
a processor; memory containing instructions that, when executed by the processor, cause the packet separation unit to:
receive a data packet via a communication interface,
evaluate the data packet with a traffic rule set in a packet separation unit and, when the data packet complies with the traffic rule:
direct the data packet via the communication interface to a local shared environment.

24 . The controller according to claim 23 , wherein,
the complimentary rule is based on a hashed data structure.

25 . The controller according to claim 23 , adapted to:
receive a data packet; evaluate the data packet relative to the complimentary rule and when the evaluation indicates non-compliance,
evaluate the data packet relative to the traffic rule set and when the evaluation data indicates compliance,
direct the data packet to the local shared environment.

26 . (canceled)

27 . A system in a communications network for enabling of data traffic separation comprising: processing means adapted to:
a processor; memory containing instructions that, when executed by the proce

Assignees

• ERICSSON TELEFON AB L M (publ)

Inventors

• Hellkvist Stefan
• Halén Joacim
• Mångs Jan-Erik

Classifications

• H04L41/12 Primary

  Discovery or management of network topologies · CPC title

• H04L12/4633

  Interconnection of networks using encapsulation techniques, e.g. tunneling · CPC title

• H04L45/7453 Primary

  using hashing · CPC title

• H04L41/342

  between virtual entities, e.g. orchestrators, SDN or NFV entities · CPC title

• H04L45/54

  Organization of routing tables · CPC title