Method nodes and computer program for enabling of data traffic separation

Patent metadata

Field	Value
Publication number	US-9942147-B2
Application number	US-201415112065-A
Country	US
Kind code	B2
Filing date	Jan 20, 2014
Priority date	Jan 20, 2014
Publication date	Apr 10, 2018
Grant date	Apr 10, 2018

Abstract

A method, unit and computer program performed by a packet separation unit in a communications network for enabling of data traffic separation comprising: obtaining a traffic rule set from a rule manager, determining a complementary rule related to the traffic rule set, arranging the rules in an hierarchical order such that a received data packet will be evaluated with the rule with the most likeliness to comply with a received data packet, receiving the data packet, directing the data packet to a local shared environment.

First claim

The invention claimed is:

1. A method performed by a packet separation unit in a communications network for enabling of data traffic separation, the method comprising:
obtaining a traffic rule set comprising at least one rule from a rule manager;
determining a complementary rule related to the traffic rule set;
arranging rules of the traffic rule set and the complementary rule in an hierarchical order such that a rule of the rules of the traffic rule set and the complementary rule with the most likeliness to comply with a received data packet, based on statistics of data packet compliance with individual rules, is first in the hierarchical order;
receiving the data packet;
evaluating the received data packet according to the hierarchical order so that the data packet is evaluated with the rule with the most likeliness to comply with the received data packet first; and
based on the evaluation that the received data packet complies with a rule of the traffic rule set, directing the data packet to a local shared environment situated in a vicinity of an access network of the communications network.

2. The method according to claim 1 , wherein the complimentary rule is based on a hashed data structure.

3. The method according to claim 1 , wherein the evaluation of the data packet is performed based on at least one of: pattern matching, protocol, destination address, source address, destination port, source port, or user equipment ID.

4. The method according to claim 1 , wherein either:
the traffic rule set is common for data packets from a group of user equipments or,
the traffic rule set is individual for a data packet from a particular user equipment.

5. The method according to claim 1 , wherein the data packet is directed via a tunnel to the local shared environment.

6. The method according to claim 1 , wherein based on the evaluation that the received data packet complies with the complementary rule, directing the data packet to a network core.

7. A method performed by a controller in a communications network for enabling of data traffic separation, the method comprising:
receiving a data packet via a communication interface;
evaluating the data packet in a packet separation unit, wherein the packet separations unit performs an obtaining step, a determining step and an arranging step prior to evaluating the data packet as follows:
obtaining a traffic rule set comprising at least one rule from a rule manager;
determining a complementary rule related to the traffic rule set;
arranging rules of the traffic rule set and the complementary rule in an hierarchical order such that a rule of the rules of the traffic rule set and the complementary rule with the most likeliness to comply with a received data packet, based on statistics of data packet compliance with individual rules, is first in the hierarchical order;
evaluating the received data packet according to the hierarchical order so that the data packet is evaluated with the rule with the most likeliness to comply with the received data packet first; and
based on the evaluation that the data packet complies with a rule of the traffic rule set, directing the data packet to a local shared environment situated in a vicinity of an access network of the communications network.

8. The method according to claim 7 , wherein the complimentary rule is based on a hashed data structure.

9. A method performed by a system in a communications network for enabling of data traffic separation, the method comprising:
obtaining a service deployment instruction by a resource manager;
generating a traffic rule set based on the service deployment instruction by the resource manager;
transmitting the traffic rule set to a rule manager from the resource manager;
deploying the traffic rule set in a packet separation unit by the rule manager, wherein the packet separation unit performs the following steps:
obtaining the traffic rule set comprising at least one rule from the rule manager;
determining a complementary rule related to the traffic rule set;
arranging rules of the traffic rule set and the complementary rule in an hierarchical order such that a rule of the rules of the traffic rule set and the complementary rule with the most likeliness to comply with a received data packet, based on statistics of data packet compliance with individual rules, is first in the hierarchical order;
receiving the data packet;
evaluating the received data packet according to the hierarchical order so that the data packet is evaluated with the rule with the most likeliness to comply with the received data packet first; and
based on the evaluation that the received data packet complies with a rule of the traffic rule set, directing the data packet to a local shared environment situated in a vicinity of an access network of the communications network; and

generating a virtual machine in the local shared environment for reception of the data packet.

10. The method according to claim 9 , wherein the rule manager verifies a new traffic rule consistency with the traffic rule set.

11. The method according to claim 9 , wherein:
the data packet is received by a traffic router unit in the local shared environment, and wherein
the traffic router unit routes the received data packed based on compliance data associated with the data packet to the virtual machine related to the compliance data.

12. A packet separation unit in a communications network for enabling of data traffic separation, the packet separation unit comprising:
a processor;
memory containing instructions that, when executed by the processor, cause the packet separation unit to:
obtain a traffic rule set comprising at least one rule from a rule manager;
determine a complementary rule related to the traffic rule set;
arrange rules of the traffic rule set and the complementary rule in an hierarchical order such that a rule of the rules of the traffic rule set and the complementary rule with the most likeliness to comply with a received data packet, based on statistics of data packet compliance with individual rules, is first in the hierarchical order;
receive the data packet;
evaluate the received data packet according to the hierarchical order so that the data packet is evaluated with the rule with the most likeliness to comply with the received data packet first; and
based on the evaluation that the received data packet complies with a rule of the traffic rule set, directing the data packet to a local shared environment situated in a vicinity of an access network of the communications network.

13. The packet separation unit according to claim 12 , wherein the complimentary rule is based on a hashed data structure.

14. The packet separation unit according to claim 12 , wherein the evaluation of the data packet is performed based on at least one of: pattern matching, destination address, source address, destination port, source port, or user equipment ID.

15. The packet separation unit according to claim 12 , wherein:
the traffic rule set is common for data packets from a group of user equipments or,
the traffic rule set is individual for a data packet from a particular user equipment.

16. The packet separation unit according to claim 12 , wherein the data packet is directed via a tunnel to the local shared environment.

17. The packet separation unit according to claim 12 , wherein based on the evaluation that the received data packet complies with the complementary rule, directing the data packet to a network core.

18. A controller in a communi

Assignees

• Ericsson Telefon Ab L M

Inventors

• Hellkvist Stefan
• Halén Joacim
• Mångs Jan-Erik

Classifications

• H04L45/7453 Primary

  using hashing · CPC title

• H04L41/12 Primary

  Discovery or management of network topologies · CPC title

• H04L41/0823

  characterised by the purposes of a change of settings, e.g. optimising configuration for enhancing reliability (for optimising operational conditions of wireless networks H04W24/02) · CPC title

• H04L12/4633

  Interconnection of networks using encapsulation techniques, e.g. tunneling · CPC title

• H04L41/342

  between virtual entities, e.g. orchestrators, SDN or NFV entities · CPC title