42 results about "GPRS Tunnelling Protocol" patented technology

A mobile application gateway configured to interconnect mobile communication devices on a cellular network with an enterprise network is provided. The mobile application gateway includes a voice and data signaling gateway configured to provide routing functionalities, service functionalities and admission control. A gateway GPRS support node (GGSN) is configured to establish a secure data session between one or more of the mobile communication devices and the enterprise network by establishing a GPRS tunneling protocol (GTP) tunnel between a carrier-hosted serving GPRS support node (SGSN) and the GGSN.

The invention discloses a method for transmitting GTP data packets of a GPRS tunneling protocol, which comprises the following steps: multiplexing a plurality of the G-PDU packets together on a sending endpoint of a GTP tunnel, and sending the G-PDU packets to a receiving endpoint of the GTP tunnel after packing the together multiplexed G-PDU packets through the transmission path protocol. With the technical proposal of the invention, the transmission efficiency can be improved, and the transmission bandwidth can be saved, simultaneously, the number of the transferred data packets in the transmission network further can be reduced, and the load of the transmission network can be reduced, and simultaneously, the invention further discloses a GTP tunnel endpoint device.

A mobile application gateway configured to interconnect mobile communication devices on a cellular network with an enterprise network is provided. The mobile application gateway includes a voice and data signaling gateway configured to provide routing functionalities, service functionalities and admission control. A gateway GPRS support node (GGSN) is configured to establish a secure data session between one or more of the mobile communication devices and the enterprise network by establishing a GPRS tunneling protocol (GTP) tunnel between a carrier-hosted serving GPRS support node (SGSN) and the GGSN.

A mobile application gateway configured to interconnect mobile communication devices on a cellular network with an enterprise network is provided. The mobile application gateway includes a voice and data signaling gateway configured to provide routing functionalities, service functionalities and admission control. A gateway GPRS support node (GGSN) is configured to establish a secure data session between one or more of the mobile communication devices and the enterprise network by establishing a GPRS tunneling protocol (GTP) tunnel between a carrier-hosted serving GPRS support node (SGSN) and the GGSN.

The invention provides a device capable of conducting business hardware acceleration. The device comprises a logic hardware acceleration module and a central processing unit (CPU). The logic hardware acceleration module is configured to receive down data message from a core network and stores the down data message into an internal memory of the CPU. The CPU is configured to obtain the down data message from the internal memory and conduct CPRS tunnel protocol user face portion (GTPU) protocol processing and message data converge protocol (PDCP) on the down data message. The logic hardware acceleration module is further configured to execute radio link control (RLC) processing on the data message subjected to the PDCP processing to generate an RLC protocol data unit (PDU), execute frame protocol (FP) framing processing on the RLCPDU and packaging processing to generate Ethernet message and transmit the down Ethernet message. By means of the business hardware acceleration scheme, the device can greatly reduce CPU load, reduces user face message processing delay and improves processing performance and processing capacity of the whole business.

A telecommunications system is arranged to provide a facility for communicating data to and from a mobile node using an internet protocol. The system includes a first home access network, which includes a home gateway node, a second visited access network, which includes a visited serving gateway node, and a wireless access gateway operable to communicate data to and from the mobile node using the internet protocol. The mobile node is operable to communicate a binding update message to the visited serving gateway node of the second visited access network via the wireless access gateway using the internet protocol. The binding update message includes a unique identifier of the mobile node, and a request for an internet protocol address for the mobile node as if the mobile node were attached to the first home access network (home IP address). In one example the unique identifier is an International Mobile Subscriber Identity (IMSI) number or the like. The visited serving gateway node of the second visited access network is operable, in response to the binding update message, to identify from the unique identifier of the mobile node the first home access network of the mobile node and to communicate the request for a home internet protocol address to the home gateway node. The home gateway node of the first home network is responsive to the request to allocate a home internet protocol address to the mobile node.Embodiments of the present invention provide a mobile node with roaming facilities as afforded by a 3GPP network, although the mobile node may have attached to a non-3GPP network, by arranging for the visited serving gateway node to connect to a home network of the mobile node, using for example a GPRS Tunnelling Protocol.

The invention provides a method and a system for processing user detail lists by software heartbeat mechanism signaling access probe. The system comprises a data acquisition probe unit, a data preprocessing unit, a distributed computing unit, a GP unit, a real-time data warehouse unit and a detail list storage and inquiry unit. A GPRS (general packet radio service) tunneling protocol and a packaged application protocol depth are detected and recognized to acquire user information in real time by adopting a data acquisition probe for negative feedback of thickness tracking through a heartbeat mechanism; the user information is tracked in real time to calculate KPI (key performance indicator); specialized analysis service data in a PS (packet switched) domain and a CS (circuit switched) domain are tracked in real time, and real-time Counter data are stored and managed after summarization; data of the detail lists are subjected to distributed storage and parallel query. Compared with the prior art, the method and the system have the advantages that data timeliness and 'per service per user' analysis grading are guaranteed on the basis of probe data sources.

The invention provides a method for detecting falsified GPRS tunnelling protocol (GTP) data, which comprises that: a signaling monitoring system acquires signaling message data of IuPs, Gb, Gr, Gn and Gp interfaces, analyzes the signaling message information, and judges whether the signaling message data is the falsified GPRS tunnelling protocol (GTP) data according to the analysis result. By monitoring the IuPs, Gb, Gr, Gn and Gp interfaces, the method identifies the falsified GTP data in a network of the operation region, discovers behaviors of malicious attacks, provides a reliable means for detection in the field of GRPS security, and fills up the blank in the field.

Network efficiency is improved by building and maintaining path integrity tables in nodes of a network. The tables include path integrity information for paths associated with the nodes. A path is defined by a source address, a destination address and a port or version number. Once a node is made aware of a path, either by handling network message traffic associated with the path or through manual entry, the node maintains path status information with information provided by normal network message traffic, or absent the normal network message traffic, by transmitting Echo Request messages and processing information related to Echo Response messages or the lack thereof. Information related to paths that are disabled for longer than a disabled path duration limit is deleted from the tables. A Gratuitous GTP Echo Response message can notify other nodes of an administrative state change in a node.

The invention discloses a user plane transmission channel establishing method for a multicast broadcasting multimedia service, which comprises the following steps: a multicast broadcasting multimedia service gateway obtains a tunnel endpoint identification TEID and an IP multicast address, and establishes a GPRS tunnel protocol user plane transmission channel based on the TEID; and an evolution base station obtains the TEID and the IP multicast address, and establishes the GPRS tunnel protocol user plane transmission channel based on the TEID. A SAE / LTE evolution network is also disclosed at the same time and comprises the multicast broadcasting multimedia service gateway, a multicast coordination entity and the evolution base station. By using the user plane transmission channel establishing method, the processing of a user plane data packet can be simplified, and the processing load of the system can be reduced.

Provided are a system and method for preventing the intrusion of an abnormal GPRS tunneling protocol (GTP) packet. The system includes: a system management unit including a monitoring unit which monitors a state of the system and a mode changing unit which changes an operation mode of the system based on the state of the system; a packet capture unit including a packet management unit which stores information about a GTP packet based on the operation mode of the system and a detection result checking unit which determines whether to drop the GTP packet; and a packet detection unit including a packet parsing unit which parses the information about the GTP packet and a packet analysis unit which analyzes the parsed information about the GTP packet, wherein the operation mode of the system is an intrusion prevention system (IPS) mode or a bypass mode.

A traffic hub used in mobile communications for data offloading, diversion and security. The traffic hub includes an Evolved Packet Data Gateway (ePDG) module configured to transmit and receive data packets for a mobile device in Roaming Untrusted Wi-Fi network for secured access to an Evolved Packet Core (EPC) network, a Trusted WLAN Access Gateway (TWAG) module configured to transmit and receive the data packets for a mobile device in Roaming Trusted Wi-Fi network for secured access to the EPC network and a General Packet Radio Service (GPRS) Tunneling Protocol (GTP) Proxy (GProxy) module, the GProxy module being the core module of the traffic hub configured to enforce policy rules on the data packets prior to exchanging the data packets with logically selected Peer Gateway General Packet Radio Service (GPRS) Serving Node (GGSN) / Packet Data Network (PDN) Gateway (PGW) and ePDG / TWAG nodes. The GProxy also operates as a GTP-aware firewall to protect Home GGSN / PGW nodes from malicious traffic.

A method for monitoring GPRS Tunneling Protocol (GTP) sessions in a mobile communication network having a monitoring module. The method includes the steps of monitoring, by the monitoring module, a plurality of subscriber GTP sessions, and storing recovery parameters related to the subscriber GTP sessions and subscribers associated therewith in records in a database in the monitoring module, wherein the recovery parameters are associated with initial session data for each subscriber GTP session. Upon an outage in monitoring, the method restarts the monitoring module to determine restart parameters associated with existing subscriber GTP sessions and subscribers associated therewith in the records in the database wherein the restart parameters are associated with subsequent session data for each subscriber GTP session. Before attempting to process any packets, the method associates the subsequent session data with the initial session data based upon comparing the recovery parameters with the restart parameters.

An apparatus is configured to perform a method for mobility management. The method includes establishing a first Packet Data Network (PDN) connection between a user equipment (UE) and a first Packet Data Network Gateway (PGW) associated with a first group of Serving Gateways (SGW) within a first geographical area; establishing communication with a handover destination SGW associated with a second PGW, the second PGW associated with a second group of SGWs within a second geographical area; and upon a determination that the UE moves from the first geographical area to the second geographical area, establishing a General Packet Radio Service (GPRS) Tunneling Protocol (GTP) tunnel connection between the first PGW and the handover destination SGW, and updating the first PDN connection to use the GTP tunnel connection between the first PGW and the handover destination SGW.

An example method is provided and may include retrieving by a user equipment (UE) an access point (AP) Media Access Control (MAC) address for an AP to which the UE is connected; reporting location information for the UE to an evolved Packet Data Gateway over an SWu interface using Internet Key Exchange version 2 (IKEv2) protocol, wherein the location information includes, at least in part, a UE location in GPS coordinates, a service set identifier, the retrieved AP MAC address and cell identity information for the UE; and populating a location database with the location information. The method can include embedding the location information in an identity initiator (Idi) of an IKE Authentication Request (IKE_AUTH_REQ) message using a Network Access Identifier (NAI) and communicating the location information from the ePDG to a PGW over an S2b interface using a private extension information element of GPRS Tunneling Protocol version 2 (GTPv2).

The present invention addresses method, apparatus and computer program product for providing an enhanced GPRS Tunnel Protocol Tunnel Endpoint Identifier. There is proposed an extension for GTPv1-U TEID-U values by using extended TEID-U range across Gn / Gp interfaces (tunnel setup with GTPv1-C).There is another proposal for extending both GTPv2 TEID-C values and also linked GTPv1-U TEID-U values by using extended TEID ranges across GTP-based S5 / S8 and S2b / S2a interfaces (tunnel setup with GTPv2), by using extended TEID-U range across GTP-based S1-U interface (tunnel setup via S11) and / or by using extended TEID-U range across GTP-based S4-U, or S12 interfaces (tunnel setup via S4-C).

The invention provides a method and a device for allocating tunnel end point identifiers. When a GPRS tunnel protocol (GTP) node establishes a GTP control plane (GTP-C) tunnel, a tunnel end point identifier (TEID) of the GTP-C tunnel is allocated, and an opposite end node of the GTP node is informed. When the GTP node establishes a GTP user plan (GTP-U) tunnel, the TEID value of the GTP-C tunnel is taken as an input parameter, and the TEID value of the GTP-U tunnel is obtained according to a preset function. The opposite end node of the GTP node takes the TEID value of the GTP-C tunnel of the GTP node as the input parameter, and the TEID value of the GTP-U tunnel of the GTP node is obtained according to the preset function. The invention dose not need to transmit the TEID of the GTP-U tunnel to the opposite end node through GTP-C messages, thereby reducing the message length of tunnel establishment and the time for transmission and processing.

The invention provides a device capable of conducting business hardware acceleration. The device comprises a logic hardware acceleration module and a central processing unit (CPU). The logic hardware acceleration module is configured to receive down data message from a core network and stores the down data message into an internal memory of the CPU. The CPU is configured to obtain the down data message from the internal memory and conduct CPRS tunnel protocol user face portion (GTPU) protocol processing and message data converge protocol (PDCP) on the down data message. The logic hardware acceleration module is further configured to execute radio link control (RLC) processing on the data message subjected to the PDCP processing to generate an RLC protocol data unit (PDU), execute frame protocol (FP) framing processing on the RLCPDU and packaging processing to generate Ethernet message and transmit the down Ethernet message. By means of the business hardware acceleration scheme, the device can greatly reduce CPU load, reduces user face message processing delay and improves processing performance and processing capacity of the whole business.

An apparatus and method for tracing a reserved resource of a GTP-U user message trafficked between SGSN (Serving GPRS Support Node) and GGSN (GPRS Gateway Serving Node)sets a tracing function for the reserved resource of a GTP-U using a TEID for a subscriber to be traced, and outputs information for the reserved resource by detecting the GTP-U having the tracing function set therein. The present invention effectively manages packet troubles generated from the SGSN and an attack of DDOS through the GTP-U on Internet by isolating the interface generating the corresponding attack. As a result, the system is prevented from lowering managing performance by automatically stopping GTP-U tracing through a tracing function duration and a trace critical value.

The invention discloses a transmission processing method, device and system for user data. The method comprises the steps that: a mobile anchor point sends first GPRS (General Packet Radio Service) tunneling protocol information to an auxiliary base station, wherein the first GPRS tunneling protocol information is GPRS tunneling protocol information which is allocated for the auxiliary base station by the mobile anchor point and is transmitted and borne by an S1; and / or, the mobile anchor point sends second GPRS tunneling protocol information to a main base station, wherein the second GPRS tunneling protocol information is GPRS tunneling protocol information which is allocated for a service gateway by the mobile anchor point and is transmitted and borne by the S1. The transmission processing method, device and system disclosed by the invention solve the technical problems of a signaling load of a core network and a large time delay in the SeNB management process in a dual-link architecture adopted in the prior art.

Provided are a data forwarding method and a mobile anchor point. The method applied to the mobile anchor point between a master evolved Node B (MeNB) and a slave evolved Node B (SeNB) comprises that when an interactive message between the MeNB and the SeNB passes through the mobile anchor point, the mobile anchor point allocates GPRS tunnel protocol information, and informs the MeNB or the SeNB of the allocated GPRS tunnel protocol information.

Through maintaining information of route state of tunnel protocol GTP in general packet radio service (GPRS) between SGSN and other GPRS supported nodes GSN, when user initiates activation of flow (INTER-SGSN RAU) for route area updating between flow of packet data protocol (PDP) and SGSN, the method uses maintained information of route state to carry out operation of filtering GSN, which initiating flows try to use, and to deletes part of defective GSN. Thus, the method initiates flows to current available GSN directly. Filtering out part of defective GSN, the invention raises success ratio of flow.

A mobile application gateway configured to interconnect mobile communication devices on a cellular network with an enterprise network is provided. The mobile application gateway includes a voice and data signaling gateway configured to provide routing functionalities, service functionalities and admission control. A gateway GPRS support node (GGSN) is configured to establish a secure data session between one or more of the mobile communication devices and the enterprise network by establishing a GPRS tunneling protocol (GTP) tunnel between a carrier-hosted serving GPRS support node (SGSN) and the GGSN.

The present disclosure provides systems and methods for location reporting in an untrusted network environment. An example method is provided and may include: retrieving, by a user equipment (UE), an AP media access control (MAC) address of an access point (AP) to which the UE is connected; using an Internet key exchange version 2 (IKEv2) protocol reports the location information of the UE to the evolved packet data gateway through the SWu interface, wherein the location information at least partially includes: the UE location in GPS coordinates, the service set identifier, the retrieved AP MAC address, and the cell identification information; and populate the location database with the location information. The method may include using a Network Access Identifier (NAI) to embed the UE's location information into an ID Initiator (Idi) of an IKE Authentication Request (IKE_AUTH_REQ) message and using a proprietary extension of GPRS Tunneling Protocol Version 2 (GTPv2) The information element transmits the location information of the UE from the ePDG to the PGW through the S2b interface.

The invention discloses a method for sending and receiving messages. The method for sending the messages comprises the following steps: embedding a second type GPRS tunneling protocol message into a message body of a first type GPRS tunneling protocol message to be sent; and sending the first type GPRS tunneling protocol message which is embedded with the second type GPRS tunneling protocol message. The method for receiving the messages comprises the following steps: receiving the first type GPRS tunneling protocol message; and analyzing the received first type GPRS tunneling protocol messageto obtain the second type GPRS tunneling protocol message which is embedded in the message body of the first type GPRS tunneling protocol message. Correspondingly, the invention also discloses a device for sending and receiving the messages. The problem that under some communications scenes, different types of messages are sent by using different GTP messages respectively so as to cause adverse effect on a communication process is solved.

A method, network, and device for measuring and analyzing packet-switched traffic in a packet-switched radio telecommunication network. When cell-level location information for a mobile station (1) changes due to a handover, the location information is transmitted toward a packet core network (9) by adding the information to userplane packet headers such as a GPRS Tunneling Protocol (GTP) header (26). The measurement device measures the cell-level location information at a level (15b) in the network where the information from a plurality of mobile stations (1) is aggregated, together with PDP context information prior to analyzing information for the entire network.

The invention provides a method and a device for allocating tunnel end point identifiers. When a GPRS tunnel protocol (GTP) node establishes a GTP control plane (GTP-C) tunnel, a tunnel end point identifier (TEID) of the GTP-C tunnel is allocated, and an opposite end node of the GTP node is informed. When the GTP node establishes a GTP user plan (GTP-U) tunnel, the TEID value of the GTP-C tunnel is taken as an input parameter, and the TEID value of the GTP-U tunnel is obtained according to a preset function. The opposite end node of the GTP node takes the TEID value of the GTP-C tunnel of theGTP node as the input parameter, and the TEID value of the GTP-U tunnel of the GTP node is obtained according to the preset function. The invention dose not need to transmit the TEID of the GTP-U tunnel to the opposite end node through GTP-C messages, thereby reducing the message length of tunnel establishment and the time for transmission and processing.