Collection of subscriber information for data breakout in a mobile data network
View Patent ↗A method and system supports subscriber based IP data breakout at the edge of a mobile data network without monitoring the use of security keys or breaking into ciphered message exchanges. The system employs a first service mechanism operating at the edge of the mobile data network a second service mechanism operating at the core on the S11 interface. The second service mechanism at the core collects subscriber related data, subscriber identifiers and tunnel identifiers and sends this data to the first service mechanism. The second service mechanism at the core collects subscriber related data, subscriber identifiers and tunnel identifiers and sends this data to the first service mechanism. The first service mechanism uses the tunnel identifiers received from the second service mechanism to identify sessions and tunnels carrying subscriber dependent data packets (S1-U packets) in order to perform subscriber-based IP data breakout, offloading and optimization.
1. A method for processing data packets in a mobile data network that includes a radio access network coupled to a core network, the method comprising the steps of:
a plurality of antennas sending and receiving network messages between user equipment and a plurality of basestations in the radio access network, each basestation communicating with a corresponding one of the plurality of antennas;
providing a first service mechanism in the radio access network and a second service mechanism in the core network;
establishing breakout authorization criteria on the second service mechanism;
the second service mechanism in the core network performs the steps of:
monitoring network messages in the core network to determine traffic that meets the breakout authorization criteria; and
sending a message to the first service mechanism with subscriber information for network messages that meet the breakout authorization criteria;
the first service mechanism in the radio access network that performs the following steps for subscriber sessions authorized with subscriber information from the second service mechanism:
applying packet inspection to determine what messages in the radio access network meet breakout conditions; and
breaking out internet protocol (IP) traffic flows that meet the breakout conditions to be serviced by the first service mechanism;
communicating between the first service mechanism and the second service mechanism on an overlay network;
the first service mechanism snooping an interface to fetch and store subscriber session identifiers;
the second service mechanism providing to the first mechanism subscriber identification (ID) data and tunnel identifiers; and
the first service mechanism using the provided subscriber ID data and tunnel identifiers to identify tunnel endpoints to support breakout and optimization at the first service mechanism.
2. The method of claim 1 wherein the step of the first service mechanism snooping an interface to fetch and store subscriber identifiers further comprises the first service mechanism snooping an S1 interface to fetch and store subscriber S1 interface application protocol (S1AP) identifiers.
3. The method of claim 2 wherein the first service mechanism snoops an Attach Request message from the user equipment to determine the S1 AP identifiers.
4. The method of claim 2 wherein the second service mechanism fetches the subscriber ID data and a first tunnel identifier from a Create Session Request message and Create Session Response message.
5. The method of claim 4 wherein first service mechanism identifies a second tunnel endpoints by first identifying an mobility management entity to user equipment S1AP identifier (MME-UE-S1AP-ID) using the subscriber ID data and tunnel identifiers from the Create Session Request message, and then using the MME-UE-S1AP-ID to identify an InitialContextSetup Response and retrieve the second tunnel endpoint identifier (eNodeB-GTP-TEID).
6. The method of claim 5 wherein the first service mechanism performs flow based breakout using the first and second tunnel endpoint identifiers.
7. The method of claim 6 wherein the first service mechanism sends a message to the second service mechanism on the overlay network to inform the second service mechanism of the breakout of an IP data flow of a subscriber session.
8. A method for processing data packets in a mobile data network that includes a radio access network coupled to a core network, the method comprising the steps of:
a plurality of antennas sending and receiving network messages between user equipment and a plurality of basestations in the radio access network, each basestation communicating with a corresponding one of the plurality of antennas;
providing a first service mechanism in the radio access network and a second service mechanism in the core network;
establishing breakout authorization criteria on the second service mechanism;
the second service mechanism in the core network performs the steps of:
monitoring network messages in the core network to determine traffic that meets the breakout authorization criteria; and
sending a message to the first service mechanism with subscriber information for network messages that meet the breakout authorization criteria;
the first service mechanism in the radio access network that performs the following steps for subscriber sessions authorized with subscriber information from the second service mechanism:
applying packet inspection to determine what messages in the radio access network meet breakout conditions; and
breaking out internet protocol (IP) traffic flows that meet the breakout conditions to be serviced by the first service mechanism;
communicating between the first service mechanism and the second service mechanism on an overlay network;
the first service mechanism snooping an Attach Request message from the user equipment on an S1 interface to fetch and store subscriber S1 interface application protocol (S1AP) identifiers;
the second service mechanism fetching subscriber identification (ID) data and a first tunnel identifier from a Create Session Request message and Create Session Response message and providing to the first mechanism the subscriber ID data and the first tunnel identifier; and
the first service mechanism using the provided subscriber ID data and tunnel identifiers to identify tunnel endpoints to support breakout and optimization at the first service mechanism.
9. The method of claim 8 wherein first service mechanism identifies a second tunnel endpoints by first identifying an mobility management entity to user equipment S1AP identifier (MME-UE-S1AP-ID) using the subscriber ID data and tunnel identifiers from the Create Session Request message, and then using the MME-UE-S1AP-ID to identify an InitialContextSetup Response and retrieve the second tunnel endpoint identifier (eNodeB-GTP-TEID).
10. The method of claim 8 wherein the first service mechanism performs flow based breakout using the first and second tunnel endpoint identifiers.
11. The method of claim 8 wherein the first service mechanism sends a message to the second service mechanism on the overlay network to inform the second service mechanism of the breakout of an IP data flow of a subscriber session.