MESSAGE SENDING METHOD, MESSAGE SENDING DEVICE AND MESSAGE TRANSMISSION SYSTEM

Abstract

A message sending method is disclosed includes: receiving a message containing a plurality of requested programs, the plurality of requested programs being provided by a plurality of content service systems; separating the received message containing the plurality of requested programs into a plurality of sub-messages; and sending the separated plurality of sub-messages to corresponding ones of the plurality of content service systems. The invention also relates to a message sending device and a message transmission system.

Description

FIELD OF THE INVENTION

The present invention relates to the data communication field, and more particularly to a message sending method, a message sending device and a message transmission system.

BACKGROUND OF THE INVENTION

Internet Group Management Protocol (IGMP) SNOOPING refers to a procedure in which a communication device maintains local multicast forwarding list items by snooping IGMP Join messages or IGMP Leave messages from users so as to determine which member ports a multicast stream is to be forwarded to. During this procedure, the messages of the users are not modified and the communication device should forward uplink and downlink IGMP messages as they were.

• • In an application scenario of using IGMP SNOOPING in IGMP V3 application context (IGMP V3 SNOOPING), an end user may add sequentially programs of a plurality of Internet Service Providers (ISPs). The ISPs are identified by a Virtual Local Area Network (VLAN) or IP, and a terminal of the user may send a request message containing only one program for requesting the program, and may also send at a time a request message containing the respective (S, G)s of a plurality of programs (in the IGMP V3, each of the multicast programs is identified with an (S, G) in which S indicates an IP address of a source of the program and G indicates a group IP address of the multicast programs).

After the end user orders the program(s) and a multicast router acting as a query device sends a general query message of the IGMP V3, the user terminal can carry a plurality of programs or only one program in a response message upon receipt of the general query message. In the case that a plurality of programs is carried in the response message, as a standard implementation of IGMP SNOOPING, the message will be forwarded to the plurality of ISPs as it was although it carries the plurality of programs. Accordingly, a server of each of the ISPs may receive the response message containing the plurality of programs. The programs in the message belong to different ISPs, and therefore the different ISPs receive the same message, resulting in information leakage. Meanwhile, there may be a hidden security risk. For instance, a program stream may be forwarded in error if the different ISPs identify a program with the same (S, G).

SUMMARY OF THE INVENTION

Embodiments of the invention provide a message sending method, a message sending device and a message transmission system for the purpose of security of message information.

An embodiment of the invention provides a message sending method that includes receiving a message containing a plurality of requested programs, the plurality of requested programs being provided by a plurality of content service systems, separating the received message containing the plurality of requested programs into a plurality of sub-messages, and sending the plurality of sub-messages to corresponding ones of the plurality of content service systems.

An embodiment of the invention provides a message sending device includes a receiving unit adapted to receive a message containing a plurality of requested programs, the plurality of requested programs being provided by a plurality of content service systems, a processing unit adapted to separate the received message containing the plurality of requested programs into a plurality of sub-messages, and a sending unit adapted to send the separated plurality of sub-messages to corresponding ones of the plurality of content service systems.

An embodiment of the invention provides a message transmission system including an access node and an edge router where the access node or the edge router includes a receiving unit adapted to receive a message containing a plurality of requested programs, the plurality of requested programs being provided by a plurality of content service systems, a processing unit adapted to separate the received message containing the plurality of requested programs into a plurality of sub-messages, and a sending unit adapted to send the separated plurality of sub-messages to corresponding ones of the plurality of content service systems.

The message sending method, message sending device and message transmission system according to the embodiments of the invention separate the message into sub-messages according to the different content service systems to which the programs contained in the message belong, each of the sub-messages containing program(s) provided by only one corresponding content service system. Therefore, each of the content service systems can only receive the sub-message of the program(s) provided by the server of its own but can not receive any sub-message of other content service systems so that the security of message information can be guaranteed.

BRIEF DESCRIPTION OF THE DRAWINGS

FIG. 1 is a flow chart of a message sending method according to an embodiment of the invention;

FIG. 2 is a schematic structure diagram of a message transmission system according to an embodiment of the invention;

FIG. 3 is a schematic diagram illustrating the structure of a message sending device according to an embodiment of the invention; and

FIG. 4 is a schematic diagram illustrating the structure of an Access Node (AN) according to an embodiment of the invention.

EMBODIMENTS OF THE INVENTION

The technical solutions of the invention are described in further detail in combination with the drawings and embodiments.

The embodiments of the invention are intended to solve the problem in compatibility of different types of user terminals, access devices and access servers for providing multi-ISP multicast services in the IGMP V3 SPOOPING model while guaranteeing information security.

In the IGMP V3 (corresponding to rfc3376, Internet Group Management Protocol, Version 3) SNOOPING mode, if an IGMP V3 response message (Report) carries a plurality of programs belonging to a plurality of ISPs, then as illustrated in FIG. 1 which illustrates a flow chart of a message sending method according to an embodiment of the invention, the method particularly includes the following processes.

In Block 101, a message containing a plurality of requested programs is received. The plurality of programs is provided by a plurality of content service systems.

The content service systems may be a server, and may also be a service provider network or system. The different programs in the message are identified with their respective (S, G)s in which S indicates an IP address of a source of the program and G indicates a group IP address of the multicast programs.

In Block 102, the received message containing the plurality of requested programs is separated into a plurality of sub-messages.

The programs belonging to the same content service system may be encapsulated into a sub-message for transmission, and each program may also be encapsulated into a sub-message for transmission. According to the content service system to which the programs belong, the messages into which the programs belonging to the content service system are encapsulated are sent to the content service system. Thus, message encapsulation can be implemented as follows.

Firstly, a plurality of content service systems to which the requested programs contained in the message respectively belong is determined.

Then, the information of the requested programs in the message, which belong to the same content service system, is encapsulated respectively into a sub-message; or information of each requested programs in the message is encapsulated into a sub-message.

The plurality of content service systems to which the requested programs contained in the message respectively belong may be determined in various manners. For instance, they can be determined from respective VLANs where the content service systems to which the programs respectively belong are located. In this way, a VLAN corresponding to a content service system to which a program belongs is specified when the program is defined, the VLAN where the content service system of the source of a requested program contained in the message is obtained from the received message, and finally a VLAN where a sub-message is located is changed into the VLAN where the content service system is located.

Alternatively, the plurality of content service systems may also be determined from respective IPs allocated to the content service systems of the sources of the programs. In an application context of IGMP V3 SSM Mapping, a program is identified with an (S, G). Message encapsulation is implemented depending on the source IP of a program. In the case that a message carries a plurality of programs, the programs with the same source IP are encapsulated into a sub-message, or each program is encapsulated into a sub-message. The IP allocated to the content service system of the source of a requested program contained in the received message is obtained from the message. An interface is found through routing or the VLAN of the message is changed according to a pre-configured IP-and-VLAN correspondence relationship. Then the message is sent.

Message encapsulation may also be implemented by use of an IP of a content service system of a source of a program and a VLAN where the content service system is located. A VLAN corresponding to a content service system to which a program belongs is specified when the program is defined, in order to ensure that a plurality of identical (S, G)s are deployed in different VLANs. In other words, the (VLAN, G) is unique. In this way, in a multi-ISP context, respective ISPs can identify different programs with the same (S, G). Upon receipt of a join message from a user, an ISP obtains from the message an IP of a content service system of a source of a requested program contained in the message and a VLAN where the content service system is located, and finds an interface through routing or changes a VLAN of the user request message into the VLAN corresponding to the content service system through a pre-configured correspondence relationship between the respective IPs of the content service systems and the VLANs to which the content service systems respectively belong.

In Block 103, the separated plurality of sub-messages is sent to the corresponding ones of the plurality of content service systems.

In this process, each of the sub-messages is sent to the content service system to which the requested program(s) contained in the sub-message belongs.

In the sending method according to the embodiment of the invention, the message is encapsulated into sub-messages according to the different content service systems to which the programs contained in the message respectively belong, and each of the sub-messages contains one or more programs provided by only one corresponding content service system. Therefore, each of the content service systems can only receive the sub-messages of the program(s) provided by the server of its own but can not receive any sub-message of other content service systems, so that message information will not be leaked and thereby the security thereof may be guaranteed.

Referring to FIG. 3, a message sending device 300 according to an embodiment of the invention includes a receiving unit 301 adapted to receive a message containing a plurality of requested programs, the plurality of requested programs being provided by a plurality of content service systems; a processing unit 302 adapted to separate the received message containing the plurality of requested programs into a plurality of sub-messages by encapsulating information of the requested programs in the message, which belong to the same content service system, respectively into a sub-message or by encapsulating information of each requested program in the message into a sub-element of a sub-message; and a sending unit 303 adapted to send the separated plurality of sub-messages to corresponding ones of the plurality of content service systems. The message sending device 300 may further include a determining unit 304 adapted to determine a plurality of content service systems to which the requested programs contained in the message respectively belong.

Therefore the message sending device 300 according to the embodiment of the invention encapsulates and sends the message according to the content service systems to which the programs in the message respectively belong, instead of forwarding the message as it was, thereby guaranteeing the security of message information.

A message transmission system according to an embodiment of the invention includes an Access Node (AN). Referring to FIG. 4, an AN 400 according to an embodiment of the invention includes a receiving unit 401 adapted to receive a message containing a plurality of requested programs, the plurality of requested programs being provided by a plurality of content service systems; a processing unit 402 adapted to separate the received message containing the plurality of requested programs into a plurality of sub-messages by encapsulating information of the requested programs in the message, which belong to the same content service system, respectively into a sub-message or by encapsulating information of each requested program in the message into a sub-element of a sub-message; and a sending unit 403 adapted to send the separated plurality of sub-messages to corresponding ones of the plurality of content service systems. The access node 400 may further include a determining unit 404 adapted to determine a plurality of content service systems to which the requested programs contained in the message respectively belong.

Therefore the message transmission system according to the embodiment of the invention encapsulates and sends the message with the AN 400 according to the content service systems to which the programs in the message respectively belong in view of application and information security, instead of forwarding the message as it was, thereby guaranteeing the security of message information.

FIG. 2 is a schematic structure diagram of a message transmission system according to an embodiment of the invention. The message transmission system includes an AN 21 (i.e., an embodiment of a message sending device) adapted to transmit the message transparently and an edge router 22 (i.e., another embodiment of a message sending device). The edge router 22 includes a receiving unit adapted to receive a message containing a plurality of requested programs, the plurality of requested programs being provided by a plurality of content service systems; a processing unit adapted to separate the received message containing the plurality of requested programs into a plurality of sub-messages; and a sending unit adapted to send the separated plurality of sub-messages to corresponding ones of the plurality of content service systems.

Therefore the message transmission system according to the embodiment of the invention encapsulates and sends the message with the edge router according to the content service systems to which the programs in the message respectively belong in view of application and information security, instead of forwarding the message as it was, thereby guaranteeing the security of message information.

It shall be noted that the above embodiments are merely illustrative of the technical solutions of the embodiments of the invention but not restrictive. Although the invention has been detailed with reference to the exemplary embodiments, those ordinarily skilled in the art shall appreciate that modifications or equivalent substitutions may be made to the technical solutions of the embodiments of the invention without departing the principle and scope of the invention as defined in the appended claims.

Claims

1. A message sending method, comprising: receiving a message containing a plurality of requested programs, the plurality of requested programs being provided by a plurality of content service systems;separating the received message containing the plurality of requested programs into a plurality of sub-messages; andsending the plurality of sub-messages to corresponding ones of the plurality of content service systems.

2. The method according to claim 1, wherein each of the plurality of requested programs is identified with an IP address of a source of the program and a group IP address of the multicast programs.

3. The method according to claim 1 further comprising determining the plurality of content service systems to which the requested programs contained in the message respectively belong before separating the received message containing the plurality of requested programs into a plurality of sub-messages.

4. The method according to claim 3, wherein the determining of the content service systems to which the requested programs respectively belong comprises: obtaining from the received message at least one of an IP address of a content service system of a source of each of the requested programs contained in the message and an identifier of a virtual local area network where the content service system is located; anddetermining the content service systems to which the requested programs respectively belong according to at least one of the IP addresses and the identifiers of the virtual local area networks respectively.

5. The method according to claim 4, wherein the separating of the received message into the plurality of sub-messages comprises: encapsulating information of the requested programs in the message, which belong to the same content service system, respectively into a sub-message; orencapsulating information of each of the requested programs in the message into a sub-message.

6. The method according to claim 2 further comprising determining the plurality of content service systems to which the requested programs contained in the message respectively belong before separating the received message containing the plurality of requested programs into the plurality of sub-messages.

7. A message sending device, comprising: a receiving unit adapted to receive a message containing a plurality of requested programs, the plurality of requested programs being provided by a plurality of content service systems;a processing unit adapted to separate the received message containing the plurality of requested programs into a plurality of sub-messages; anda sending unit adapted to send the separated plurality of sub-messages to corresponding ones of the plurality of content service systems.

8. The device according to claim 7, further comprising: a determining unit adapted to determine the plurality of content service systems to which the requested programs contained in the message respectively belong.

9. The device according to claim 7, wherein the device is an access node or an edge router.

10. The device according to claim 8, wherein the device is an access node or an edge router.

11. A message transmission system, comprising an access node and an edge router, wherein the access node or the edge router comprises: a receiving unit adapted to receive a message containing a plurality of requested programs, the plurality of requested programs being provided by a plurality of content service systems;a processing unit adapted to separate the received message containing the plurality of requested programs into a plurality of sub-messages; anda sending unit adapted to send the separated plurality of sub-messages to corresponding ones of the plurality of content service systems.

12. The system according to claim 11, wherein at least one of the access node and the edge router further comprises: a determining unit adapted to determine the plurality of content service systems to which the requested programs contained in the message respectively belong.