CN118802462A - Abnormal status notification method, device, equipment and readable storage medium - Google Patents

Abstract

An embodiment of the present application provides an abnormal status notification method, apparatus, device and readable storage medium, the method comprising: receiving first information from a first gateway, the first information being used to indicate that a second function is in an abnormal state; determining, based on the first information, that the second function is unreachable, and selecting a third function; wherein the second function establishes a connection with the first function through the first gateway, or the second function is directly connected to the first function, the third function establishes a connection with the first function through the first gateway or the second gateway, or the third function is directly connected to the first function, and the second function and the third function are located in an edge network.

Description

Abnormal status notification method, device, equipment and readable storage medium

Technical Field

The embodiments of the present application relate to the field of communication technology, and specifically to an abnormal state notification method, device, equipment and readable storage medium.

Background Art

Referring to FIG. 1 , the process of the existing signaling security gateway is as follows:

Step 1: User Plane Function (UPF) 1 sends abnormal signaling, initiates a spoofing attack, etc.

Step 2: The signaling security gateway identifies the attack and determines that there is a security attack on UPF1;

Step 3: The signaling security gateway discards the session signaling related to UPF1 (including signaling sent from Session Management Function (SMF) 1 to UPF1 and from UPF1 to SMF1);

Step 4: For the signaling sent by SMF1 to UPF1, if SMF1 cannot receive a response, it will resend the signaling (generally, it will be resent at intervals according to the configuration and for a certain number of times);

Step 5: After the signaling retransmission fails, SMF1 will switch according to the path priority and switch to the path of Signaling Security Gateway 2; or, if Signaling Security Gateway 2 fails at this time, it will switch to the direct connection path. However, no matter how it switches, it cannot block the communication with UPF1, which poses a security risk.

For edge UPF and edge UPF+, the existing technical solution only provides security protection by discarding the abnormal signaling after the signaling security gateway identifies the abnormal signaling, and will not actively notify the SMF. Under the signaling retransmission and priority path configuration, it will still continue to communicate with UPF1, which poses a security risk. Moreover, since UPF1 is already an attacker, the N4 session signaling cannot be processed normally, and the business cannot be continued.

Summary of the invention

The embodiments of the present application aim to provide an abnormal status notification method, apparatus, device and readable storage medium to solve the problem that the communication between SMF and abnormal UPF cannot be blocked, SMF is at risk of being attacked, and multiple rounds of signaling retransmission not only wastes time but also fails to connect the N4 session.

In a first aspect, an abnormal state notification method is applied to a first function, including:

receiving first information from the first gateway, wherein the first information is used to indicate that the second function is in an abnormal state;

According to the first information, determining that the second function is unreachable, and selecting a third function;

The second function establishes a connection with the first function through the first gateway, or the second function is directly connected to the first function, the third function establishes a connection with the first function through the first gateway or the second gateway, or the third function is directly connected to the first function, and the second function and the third function are located in an edge network.

Optionally, receiving first information from a first gateway includes:

A first message constructed by the first gateway is received, where the first message carries the first information.

Optionally, receiving first information from a first signaling security gateway includes:

Sending a second message to the first signaling security gateway;

A third message sent by the first gateway to respond to the second message is received, wherein the third message carries the first information.

Optionally, the first information includes at least one of the following: an abnormal state identifier, a virtual IP address of the second function on the local end, and a real IP address of the second function.

In a second aspect, a method for notifying an abnormal state is provided, which is applied to a first gateway and includes:

Sending first information to the first function, where the first information is used to indicate that the second function is in an abnormal state;

Among them, the first information is used to determine that the second function is unreachable and select a third function, the second function establishes a connection with the first function through the first gateway, or the second function is directly connected to the first function, the third function establishes a connection with the first function through the first gateway or the second gateway, or the third function is directly connected to the first function.

Optionally, sending the first information to the first function includes:

A first message constructed by the first gateway is sent to the first function, where the first message carries the first information.

Optionally, sending the first information to the first function includes:

receiving a second message sent by the first function;

A third message is sent to the first function to respond to the second message, wherein the third message carries the first information.

Optionally, the first information includes at least one of the following: an abnormal state identifier, a virtual IP address of the second function on the local end, and a real IP address of the second function.

Optionally, the method further includes:

Sending second information to the second gateway, where the second information is used to indicate that the second function is in an abnormal state.

In a third aspect, an abnormal state notification device is provided, which is applied to the first function, including:

A first receiving module, configured to receive first information from a first gateway, wherein the first information is used to indicate that the second function is in an abnormal state;

A first processing module, configured to determine, based on the first information, that the second function is unreachable, and select a third function;

The second function establishes a connection with the first function through the first gateway, or the second function is directly connected to the first function, the third function establishes a connection with the first function through the first gateway or the second gateway, or the third function is directly connected to the first function, and the second function and the third function are located in an edge network.

In a fourth aspect, an abnormal state notification device is provided, which is applied to a first gateway, including:

A first sending module, used for sending first information to the first function, wherein the first information is used for indicating that the second function is in an abnormal state;

Among them, the first information is used to determine that the second function is unreachable and select a third function, the second function establishes a connection with the first function through the first gateway, or the second function is directly connected to the first function, the third function establishes a connection with the first function through the first gateway or the second gateway, or the third function is directly connected to the first function.

In a fifth aspect, a communication device is provided, comprising a processor, a memory, and a program or instruction stored in the memory and executable on the processor, wherein the program or instruction, when executed by the processor, implements the steps of the method described in the first aspect or the second aspect.

In a sixth aspect, a readable storage medium is provided, on which a program or instruction is stored. When the program or instruction is executed by a processor, the steps of the method described in the first aspect or the second aspect are implemented.

In the present application, the first function receives first information from the first gateway, and the first information is used to indicate that the second function is in an abnormal state; then the first function determines that the second function is unreachable based on the first information, and selects the third function, that is, when it is determined that the second function in the abnormal state is no longer reachable, the first function matches the path to the second function in the abnormal state configured locally by the first function, and no longer performs path switching. When there is business, the network element switching is directly performed to select the third function, blocking the communication between the first function and the second function in the abnormal state, reducing the risk of the first function being attacked, and at the same time being able to reduce multiple rounds of signaling retransmissions between the first function and the second function in the abnormal state, avoiding wasting time, and by selecting the third function, the N4 session can be continued.

BRIEF DESCRIPTION OF THE DRAWINGS

Various other advantages and benefits will become apparent to those of ordinary skill in the art by reading the detailed description of the preferred embodiments below. The accompanying drawings are only for the purpose of illustrating the preferred embodiments and are not to be considered as limiting the present application. Also, the same reference symbols are used throughout the accompanying drawings to represent the same components. In the accompanying drawings:

FIG1 is a schematic diagram of signaling security gateway processing in the prior art;

FIG2 is a schematic diagram of an edge private network;

FIG3 is a schematic diagram of a signaling security gateway;

Figure 4 is a schematic diagram of FullMesh networking;

FIG5 is a schematic diagram of path priority between SMF and UPF;

FIG6 is a schematic diagram of the signaling security gateway cross-network element error correction function;

7 is a schematic diagram of a primary signaling security gateway and a standby signaling security gateway;

FIG8 is a schematic diagram of one of the abnormal state notification methods provided in an embodiment of the present application;

FIG9 is a second schematic diagram of the abnormal state notification method provided in an embodiment of the present application;

FIG10 is a third schematic diagram of the abnormal state notification method provided in an embodiment of the present application;

FIG11 is a schematic diagram of an abnormal state notification device according to an embodiment of the present application;

FIG12 is a second schematic diagram of an abnormal state notification device provided in an embodiment of the present application;

FIG13 is a schematic diagram of a communication device provided in an embodiment of the present application.

DETAILED DESCRIPTION

The following will be combined with the drawings in the embodiments of the present application to clearly and completely describe the technical solutions in the embodiments of the present application. Obviously, the described embodiments are part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of this application.

The term "comprise" and any variation thereof in the specification and claims of the present application are intended to cover non-exclusive inclusions, for example, a process, method, system, product or device comprising a series of steps or units need not be limited to those steps or units clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or devices. In addition, the use of "and/or" in the specification and claims to indicate at least one of the connected objects, such as A and/or B, means that A alone, B alone, and A and B exist in three cases.

In the embodiments of the present application, words such as "exemplary" or "for example" are used to indicate examples, illustrations or descriptions. Any embodiment or design described as "exemplary" or "for example" in the embodiments of the present application should not be interpreted as being more preferred or more advantageous than other embodiments or designs. Specifically, the use of words such as "exemplary" or "for example" is intended to present related concepts in a specific way.

In order to facilitate understanding of the embodiments of the present application, the following related technical points are first introduced:

1. Introduction to signaling security gateway.

As shown in Figure 2, since the edge private network (including edge UPF, edge UPF+, edge customized core network, etc.) is deployed in an untrusted area, in order to prevent the edge network from being attacked and launching attacks on the central network through the interface, thereby affecting the services of the entire network, it is necessary to deploy a signaling security gateway at the boundary between the large network and the private network to achieve security isolation and message protection.

The signaling security gateway can achieve topology hiding and implement the signaling proxy function for the N4 interface, converting only the IP layer address and the Fully Qualified Session Endpoint Identifier (F-SEID) information element of the Packet Forwarding Control Protocol (PFCP) message, as shown in Figure 3.

The schematic diagram of 3SMF*2 signaling security gateway*4UPF FullMesh network is shown in Figure 4.

For edge UPF and UPF+, the signaling security gateway mainly provides security protection for the N4 interface; when deployed in the existing network, a pair of signaling security gateways will be deployed to improve reliability in consideration of disaster recovery; at the same time, in order to ensure that the service is not affected when both signaling security gateways fail, the fault bypass function is enabled, that is, when both the primary and backup signaling security gateways fail, SMF supports the selection of a direct path to complete session service processing. The path priority between SMF and UPF is shown in Figure 5. SMF needs to configure the IP addresses of signaling security gateway 1, signaling security gateway 2, and UPF, and distinguish their priorities to facilitate the management of the transmission path on the same coupling.

2. About the cross-network element error correction function

As shown in Figure 6, for edge UPF and edge UPF+, cross-network element error correction is a value-added function of the signaling security gateway. Since the signaling of SMF and UPF needs to be proxy forwarded to achieve topology hiding and thus improve the security of the edge network, the signaling security gateway has a global perspective and can be used as a convergence point to conduct a comprehensive analysis of the signaling and perceive the abnormal behavior of some UPF network elements (such as counterfeit UPF messages, etc.). Currently, only the node-level signaling between SMF and UPF is perceived and processed, including heartbeat, coupling establishment, node reporting, etc.

Since signaling security gateways are usually deployed in pairs in actual applications, there are functional requirements for SMF and UPF when applying this function. It is necessary to ensure that the main signaling security gateway can aggregate all coupled node-level messages, that is, SMF needs to support carrying a marker bit in the heartbeat message to indicate that the edge UPF chooses to use the same signaling security gateway as the signaling concentration point when actively sending node-level messages; the edge UPF actively sends the node-level message uplink path according to the SMF instruction. As shown in Figure 7, after a security attack on UPF1 occurs, the main signaling security gateway (signaling security gateway 01) can identify it, while the backup security gateway (signaling security gateway 02) does not have the identification capability.

Referring to FIG. 8 , an embodiment of the present application provides an abnormal state notification method, which is applied to a first function, the first function including but not limited to SMF, and the specific steps include:

Step 801: receiving first information from a first gateway, where the first information is used to indicate that a second function is in an abnormal state;

Optionally, the first gateway may be a first signaling security gateway (or a primary signaling security gateway).

Step 802: According to the first information, determine that the second function is unreachable, and select a third function;

Among them, the second function establishes a connection with the first function through the first gateway, or the second function is directly connected to the first function, the third function establishes a connection with the first function through the first gateway or the second gateway, or the third function is directly connected to the first function, and the second function and the third function are located in the edge network (edge private network).

Optionally, the second gateway may be a second signaling security gateway (or a backup signaling security gateway).

In step 802, the first function performs specific field identification and determines that the second function is unreachable: based on the first information, the first function can determine that the opposite network element (i.e., the second function) is unreachable, rather than the path being unreachable; the opposite network element (i.e., the second function) performs IP address matching based on the local configuration of the first function, including the virtual IP address of the second function and the real IP address of the second function; at this point, the first function will no longer perform path switching on the same network element, thereby avoiding the retransmission mechanism.

Optionally, the second function can be the first UPF, or the first UPF+, or the first edge customized core network element; the third function can be the second UPF, or the second UPF+, or the second edge customized core network element.

For example, based on the first information, the SMF determines that the first UPF (or the first UPF+ or the first edge customized core network element) is unreachable, and triggers reselection of the second UPF (or the second UPF+ or the second edge customized core network element).

In one implementation of the present application, receiving first information from a first gateway includes:

A first message constructed by the first gateway is received, where the first message carries the first information.

Optionally, the first message may be a heartbeat message. In the prior art, the signaling security gateway does not construct a heartbeat message, but only forwards the heartbeat message sent by the UPF or SMF.

In one implementation of the present application, receiving first information from a first signaling security gateway includes:

Sending a second message to the first signaling security gateway;

A third message sent by the first gateway to respond to the second message is received, wherein the third message carries the first information.

Optionally, the second message may be a node-level message, such as a heartbeat message, a coupling establishment message, etc. sent by the first function.

In one embodiment of the present application, the first information includes at least one of the following:

(1) Abnormal status identification;

(2) The virtual IP address of the second function on the local end;

For example, the virtual IP address of the abnormal UPF on the local end;

(3) The real IP address of the second function.

For example, the real IP address of the abnormal UPF;

It is understandable that if the fault bypass function is turned on, the real address of the second function will be configured on the first function.

When deploying a signaling security gateway on the edge network, if the edge UPF or UPF+ initiates abnormal behaviors such as counterfeit attacks, the signaling security gateway only discards the abnormal signaling. Under the existing mechanism, it will cause multiple rounds of retransmission, which will not only waste interaction time and cause service interruption, but also fail to block security risks. In this proposal, after identifying the abnormality of the edge UPF or UPF+, the signaling security gateway initiates a security event notification to the SMF involved. The SMF can determine that a specific UPF network element (logically a specific peer network element) is unreachable based on the carried fields, so it does not retransmit under three paths with the abnormal network element based on the local configuration, avoids continued interaction with the non-secure UPF, improves network security, and triggers the SMF to reselect available UPF network elements, shortening service processing time.

In this application, when the cross-network element error correction function takes effect, in addition to discarding the relevant signaling, an abnormal state information synchronization process is added from the first gateway to the first function and the gateway, relying on the first function's recognition of specific fields, judging that the second function in the abnormal state is unreachable, matching the first function's locally configured path to the second function in the abnormal state, no longer performing path switching, and directly performing network element switching to select the third function when there is business. Blocking the communication between the first function and the second function in the abnormal state reduces the risk of the first function being attacked, and at the same time can reduce multiple rounds of signaling retransmissions between the first function and the second function in the abnormal state, avoiding wasting time, and the N4 session can be continued by selecting the third function.

Referring to FIG. 9 , an embodiment of the present application provides an abnormal state notification method, which is applied to a first gateway, and the specific steps include:

Step 901: Sending first information to a first function, where the first information is used to indicate that the second function is in an abnormal state;

Wherein, the first information is used to determine that the second function is unreachable and select a third function;

Among them, the second function establishes a connection with the first function through the first gateway, or the second function is directly connected to the first function, and the third function establishes a connection with the first function through the first gateway or the second gateway, or the third function is directly connected to the first function.

In one implementation of the present application, sending first information to the first function includes:

A first message constructed by the first gateway is sent to the first function, where the first message carries the first information.

Optionally, the first message may be a heartbeat message. In the prior art, the signaling security gateway does not construct a heartbeat message, but only forwards the heartbeat message sent by the UPF or SMF.

In one implementation of the present application, sending first information to the first function includes:

receiving a second message sent by the first function;

A third message is sent to the first function to respond to the second message, wherein the third message carries the first information.

Optionally, the second message may be a node-level message, such as a heartbeat message, a coupling establishment message, etc. sent by the first function.

In one embodiment of the present application, the method further includes:

Sending second information to the second gateway, where the second information is used to indicate that the second function is in an abnormal state, or instructing the second gateway to discard signaling when receiving signaling sent by the second function in an abnormal state.

For example, the first gateway is the main gateway, and the second gateway is the backup gateway. The first gateway synchronizes the security status information between the gateways by sending the second information to the second gateway. This can prevent the second function from sending abnormal signaling to other backup gateways such as the second network element, which the backup security network element cannot recognize. When the second function returns to normal (such as after detection, no counterfeit attacks are launched, and there is no abnormality in the signaling), the first gateway supports the synchronization of abnormal status recovery to the second gateway, and the second gateway marks the previous abnormal function as normal.

Optionally, the second information includes at least one of the following: a real IP address of the second function and an abnormal status identifier.

In one embodiment of the present application, the first information includes at least one of the following:

(1) Abnormal status identification;

(2) The virtual IP address of the second function on the local end;

For example, the virtual IP address of the abnormal UPF on the local end;

(3) The real IP address of the second function.

For example, the real IP address of the abnormal UPF;

It is understandable that if the fault bypass function is turned on, the real address of the second function will be configured on the first function.

In this application, when the cross-network element error correction function takes effect, in addition to discarding the relevant signaling, an abnormal state information synchronization process is added from the first gateway to the first function and the gateway, relying on the first function's recognition of specific fields, judging that the second function in the abnormal state is unreachable, matching the first function's locally configured path to the second function in the abnormal state, no longer performing path switching, and directly performing network element switching to select the third function when there is business. Blocking the communication between the first function and the second function in the abnormal state reduces the risk of the first function being attacked, and at the same time can reduce multiple rounds of signaling retransmissions between the first function and the second function in the abnormal state, avoiding wasting time, and the N4 session can be continued by selecting the third function.

Referring to Figure 10, the specific steps are as follows:

Step 1001: UPF1 sends abnormal signaling and launches security attacks such as spoofing attacks;

Step 1002: Signaling security gateway 1 performs attack identification and determines that there is a security attack on UPF1;

Step 1003: the signaling security gateway 1 discards the session signaling related to UPF1, including the signaling sent from SMF1 to UPF1 and from UPF1 to SMF1;

Step 1004: The signaling security gateway 1 notifies the SMF of the abnormal status;

After identifying a security event such as a phishing attack launched by UPF1, signaling security gateway 1 may perform one of the following:

(1) Active notification: The heartbeat message sent to the SMF contains abnormal status information, including the abnormal status identifier (used to indicate an unsafe state), the virtual IP address of the abnormal UPF on the local end, and the real IP address of the abnormal UPF (if the fault bypass function is enabled, the real address of the UPF will be configured on the SMF); under normal circumstances, the signaling security gateway will not construct a heartbeat message, but will only proxy the heartbeat message sent by the UPF or SMF.

(2) Response notification: For node-level messages being received (including heartbeat messages sent by SMF, connection establishment, etc.), it supports feedback of failure in the response message, carrying the abnormal status identifier and the virtual IP address of the abnormal UPF at this end and the real IP address of the abnormal UPF.

Step 1005: Synchronize security status information between signaling security gateways: The active signaling security gateway synchronizes status with the standby signaling security gateway, including the real IP address of the abnormal UPF and the abnormal status identifier. This step is to prevent the abnormal UPF from sending abnormal signaling to other signaling security gateways, which the standby security network element cannot recognize. When the abnormal UPF returns to normal (such as after detection, no counterfeit attacks are launched, and there is no abnormality in the signaling), the active signaling security network element supports synchronization of abnormal status recovery to the standby signaling security gateway, and the standby security network element marks the previous abnormal UPF as normal.

Step 1006: SMF identifies specific fields and determines that the abnormal UPF is unreachable: Based on the abnormal status identifier in the peer message, SMF can determine that the peer network element is unreachable, rather than the path is unreachable; the peer network element performs IP address matching based on the SMF local configuration, including the virtual IP address of the abnormal UPF and the real IP address of the abnormal UPF; at this point, SMF will no longer switch the path of the same network element, thereby avoiding the retransmission mechanism;

7) SMF performs UPF network element switching: After SMF has determined that the abnormal UPF is unreachable, subsequent N4 interface sessions will be processed according to the switched network element, including the new N4 coupling selecting other UPFs in normal status; subsequent signaling of the original coupling will be offline and SMF will reselect UPF and continue to process the N4 session.

Referring to FIG. 11 , an embodiment of the present application provides an abnormal state notification device, which is applied to a first function. The device 1100 includes:

A first receiving module 1101 is used to receive first information from a first gateway, where the first information is used to indicate that the second function is in an abnormal state;

A first processing module 1102, configured to determine, based on the first information, that the second function is unreachable, and select a third function;

Among them, the second function establishes a connection with the first function through the first gateway, or the second function is directly connected to the first function, the third function establishes a connection with the first function through the first gateway or the second gateway, or the third function is directly connected to the first function, and the second function and the third function are located in the edge network (edge private network).

In one implementation of the present application, the first receiving module 1001 includes:

The first receiving unit is configured to receive a first message constructed by the first gateway, where the first message carries the first information.

In one implementation of the present application, the first receiving module 1001 includes:

A first sending unit, configured to send a second message to the first signaling security gateway;

The second receiving unit is configured to receive a third message sent by the first gateway in response to the second message, wherein the third message carries the first information.

In one embodiment of the present application, the first information includes at least one of the following:

(1) Abnormal status identification;

(2) The virtual IP address of the second function on the local end;

For example, the virtual IP address of the abnormal UPF on the local end;

(3) The real IP address of the second function.

For example, the real IP address of the abnormal UPF;

It is understandable that if the fault bypass function is turned on, the real address of the second function will be configured on the first function.

The device provided in the embodiment of the present application can implement each process implemented by the method embodiment shown in Figure 8 and achieve the same technical effect. To avoid repetition, it will not be repeated here.

Referring to FIG. 12 , an embodiment of the present application provides an abnormal state notification device, which is applied to a first gateway. The device 1200 includes:

A first sending module 1201 is used to send first information to the first function, where the first information is used to indicate that the second function is in an abnormal state;

Among them, the first information is used to determine that the second function is unreachable and select a third function, the second function establishes a connection with the first function through the first gateway, or the second function is directly connected to the first function, the third function establishes a connection with the first function through the first gateway or the second gateway, or the third function is directly connected to the first function.

In one implementation of the present application, the first sending module 1201 includes:

The second sending unit is configured to send a first message constructed by the first gateway to the first function, wherein the first message carries the first information.

In one implementation of the present application, the first sending module 1201 includes:

A second receiving unit, configured to receive a second message sent by the first function;

A third sending unit is used to send a third message for responding to the second message to the first function, and the third message carries the first information.

In one implementation manner of the present application, the first information includes at least one of the following: an abnormal state identifier, a virtual IP address of the abnormal UPF at the local end, and a real IP address of the abnormal UPF.

In one embodiment of the present application, the device further comprises:

The second sending module is used to send second information to the second gateway, where the second information is used to indicate that the second function is in an abnormal state.

In one embodiment of the present application, the first information includes at least one of the following:

(1) Abnormal status identification;

(2) The virtual IP address of the second function on the local end;

For example, the virtual IP address of the abnormal UPF on the local end;

(3) The real IP address of the second function.

For example, the real IP address of the abnormal UPF;

It is understandable that if the fault bypass function is turned on, the real address of the second function will be configured on the first function.

The device provided in the embodiment of the present application can implement each process implemented by the method embodiment shown in Figure 9 and achieve the same technical effect. To avoid repetition, it will not be repeated here.

As shown in FIG13, the embodiment of the present application further provides a communication device 1300, including a processor 1301, a memory 1302, and a program or instruction stored in the memory 1302 and executable on the processor 1301, wherein the program or instruction is executed by the processor 1301 to implement each process of the method embodiment shown in FIG8 or FIG9, and can achieve the same technical effect. To avoid repetition, it will not be described here.

An embodiment of the present application also provides a readable storage medium, on which a program or instruction is stored. When the program or instruction is executed by a processor, the various processes of the method embodiment shown in Figure 8 or Figure 9 above are implemented, and the same technical effect can be achieved. To avoid repetition, it will not be repeated here.

The processor is the processor in the terminal described in the above embodiment. The readable storage medium includes a computer readable storage medium, such as a computer read-only memory (ROM), a random access memory (RAM), a magnetic disk or an optical disk.

The steps of the method or algorithm described in conjunction with the contents disclosed in this application can be implemented in hardware or by executing software instructions in a processor. The software instructions can be composed of corresponding software modules, and the software modules can be stored in RAM, flash memory, ROM, EPROM, EEPROM, registers, hard disks, mobile hard disks, read-only optical disks, or any other form of storage medium known in the art. An exemplary storage medium is coupled to the processor so that the processor can read information from the storage medium and write information to the storage medium. Of course, the storage medium can also be a component of the processor. The processor and the storage medium can be carried in an ASIC. In addition, the ASIC can be carried in a core network interface device. Of course, the processor and the storage medium can also exist in the core network interface device as discrete components.

Those skilled in the art should be aware that in one or more of the above examples, the functions described in this application can be implemented using hardware, software, firmware, or any combination thereof. When implemented using software, these functions can be stored in a computer-readable medium or transmitted as one or more instructions or codes on a computer-readable medium. Computer-readable media include computer storage media and communication media, wherein communication media include any media that facilitates the transmission of a computer program from one place to another. The storage medium can be any available medium that a general or special-purpose computer can access.

The specific implementation methods described above further illustrate the purpose, technical solutions and beneficial effects of the present application in detail. It should be understood that the above description is only the specific implementation methods of the present application and is not intended to limit the scope of protection of the present application. Any modifications, equivalent substitutions, improvements, etc. made on the basis of the technical solutions of the present application should be included in the scope of protection of the present application.

Those skilled in the art will appreciate that the embodiments of the present application may be provided as methods, systems, or computer program products. Therefore, the embodiments of the present application may adopt the form of complete hardware embodiments, complete software embodiments, or embodiments in combination with software and hardware. Moreover, the embodiments of the present application may adopt the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) that contain computer-usable program code.

The present application embodiment is described with reference to the flowchart and/or block diagram of the method, device (system) and computer program product according to the present application embodiment. It should be understood that each flow process and/or box in the flow chart and/or block diagram and the combination of the flow chart and/or box in the flow chart and/or block diagram can be realized by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processing machine or other programmable data processing device to produce a machine, so that the instructions executed by the processor of the computer or other programmable data processing device produce a device for realizing the function specified in one flow chart or multiple flows and/or one box or multiple boxes of the block chart.

These computer program instructions may also be stored in a computer-readable memory that can direct a computer or other programmable data processing device to work in a specific manner, so that the instructions stored in the computer-readable memory produce a manufactured product including an instruction device that implements the functions specified in one or more processes in the flowchart and/or one or more boxes in the block diagram.

These computer program instructions may also be loaded onto a computer or other programmable data processing device so that a series of operational steps are executed on the computer or other programmable device to produce a computer-implemented process, whereby the instructions executed on the computer or other programmable device provide steps for implementing the functions specified in one or more processes in the flowchart and/or one or more boxes in the block diagram.

Obviously, those skilled in the art can make various changes and modifications to the embodiments of the present application without departing from the spirit and scope of the present application. Thus, if these modifications and variations of the embodiments of the present application fall within the scope of the claims of the present application and their equivalents, the present application is also intended to include these modifications and variations.

Claims (13)

1. An abnormal state notification method applied to a first function, comprising:

receiving first information from a first gateway, wherein the first information is used for indicating that a second function is in an abnormal state;

according to the first information, determining that the second function is not reachable, and selecting a third function;

The second function establishes connection with the first function through the first gateway, or the second function is directly connected with the first function; the third function establishes connection with the first function through the first gateway or the second gateway, or the third function is directly connected with the first function, and the second function and the third function are located in an edge network.

2. The method of claim 1, wherein receiving the first information from the first gateway comprises:

And receiving a first message constructed by the first gateway, wherein the first message carries the first information.

3. The method of claim 1, wherein receiving the first information from the first signaling security gateway comprises:

Sending a second message to the first signaling security gateway;

And receiving a third message which is sent by the first gateway and is used for responding to the second message, wherein the third message carries the first information.

4. The method of claim 1, wherein the first information comprises at least one of: the abnormal state identification, the virtual IP address of the second function at the home terminal and the real IP address of the second function.

5. An abnormal state notification method applied to a first gateway is characterized by comprising the following steps:

sending first information to a first function, wherein the first information is used for indicating that a second function is in an abnormal state;

The first information is used for determining that the second function is unreachable and selecting a third function, the second function is connected with the first function through the first gateway, or the second function is directly connected with the first function, and the third function is connected with the first function through the first gateway or the second gateway, or the third function is directly connected with the first function.

6. The method of claim 5, wherein sending the first information to the first function comprises:

And sending a first message constructed by the first gateway to a first function, wherein the first message carries the first information.

7. The method of claim 5, wherein sending the first information to the first function comprises:

receiving a second message sent by the first function;

And sending a third message for responding to the second message to the first function, wherein the third message carries the first information.

8. The method of claim 5, wherein the first information comprises at least one of: the abnormal state identification, the virtual IP address of the second function at the home terminal and the real IP address of the second function.

9. The method of claim 5, wherein the method further comprises:

and sending second information to the second gateway, wherein the second information is used for indicating that the second function is in an abnormal state.

10. An abnormal state notification apparatus applied to a first function, comprising:

the first receiving module is used for receiving first information from the first gateway, wherein the first information is used for indicating that the second function is in an abnormal state;

The first processing module is used for determining that the second function is not reachable according to the first information and selecting a third function;

The second function is connected with the first function through the first gateway, or the second function is directly connected with the first function, the third function is connected with the first function through the first gateway or the second gateway, or the third function is directly connected with the first function, and the second function and the third function are located in an edge network.

11. An abnormal state notification apparatus applied to a first gateway, comprising:

The first sending module is used for sending first information to the first function, wherein the first information is used for indicating that the second function is in an abnormal state;

The first information is used for determining that the second function is unreachable and selecting a third function, the second function is connected with the first function through the first gateway, or the second function is directly connected with the first function, and the third function is connected with the first function through the first gateway or the second gateway, or the third function is directly connected with the first function.

12. A communication device comprising a processor, a memory and a program or instruction stored on the memory and executable on the processor, which program or instruction when executed by the processor implements the steps of the method according to any of claims 1 to 9.

13. A readable storage medium, characterized in that it stores thereon a program or instructions which, when executed by a processor, implement the steps of the method according to any of claims 1 to 9.