Method and devices for installing packet filters in a data transmission

Abstract

A method is described for associating a data packet (DP) with a packet bearer (PB) in a user equipment (UE 1 ) of a communication network. The data packet is sent in a data flow from an application function of the user equipment, the packet bearer (PB) is established with the user equipment to transmit the data packet (DP) over the communication network towards a further entity, and the user equipment is adapted to establish different packet bearers. The method comprises the steps of identifying the flow with the data packet in a control entity of the communication network, determining the packet bearer for association with said flow from the different packet bearers in a policy function of the control entity, determining a routing level identification of the further entity, instructing the user equipment to install a packet filter based on the routing level identification, wherein the packet filter associates data packets comprising the routing level identification of the further entity with the determined packet bearer, providing the routing level identification to the application function, including the routing level identification into the data packet, and forwarding the data packet (DP) on the determined packet bearer (PB). A corresponding network, control entity, monitoring entity and computer program are also described.

1 . A user equipment of a communication network, the user equipment comprising:
 at least one processor; and   a non-transitory computer-readable storage medium, coupled to the at least one processor, the non-transitory computer-readable storage medium further including computer-readable instructions, when executed by the at least one processor, the computer-readable instructions are configured to:
 associate a data packet with a packet bearer, 
 send the data packet from an application function in a data flow, 
 establish the packet bearer to transmit the data packet over the communication network towards a further entity, 
 establish different packet bearers, 
 receive an instruction from the communication network to install a packet filter based on a routing level identification of the further entity, wherein the packet filter associates data packets of the flow comprising the routing level identification of the further entity with a determined packet bearer from the different packet bearers, 
 provide the routing level identification to the application function, 
 include the routing level identification into the data packet, and 
 forward the data packet on the determined packet bearer. 
   
     
     
         2 . The user equipment according to  claim 1 , wherein the routing level of the further identity is determined and the computer-readable instructions, when executed, are further configured to:
 receive instructions to install the packet filter from a monitoring entity.   
     
     
         3 . The user equipment according to  claim 1 , wherein the computer-readable instructions, when executed, are further configured to:
 execute the application function, and   send the data packet on the determined packet bearer.   
     
     
         4 . The user equipment according to  claim 1 , wherein data packet is an internet protocol (IP) data packet. 
     
     
         5 . The user equipment according to  claim 1 , wherein the routing level identification is at least one of a destination address and a destination port number. 
     
     
         6 . The user equipment according to  claim 1 , wherein the packet bearer is established before installing the packet filter and the packet filter is installed in a modification procedure of the packet bearer. 
     
     
         7 . The user equipment according to  claim 1 , wherein the packet filter associates the data packet with the packet bearer based on at least one further parameter. 
     
     
         8 . A control entity, comprising:
 at least one processor;   a non-transitory computer-readable storage medium, coupled to the at least one processor, the non-transitory computer-readable storage medium further including computer-readable instructions, when executed by the at least one processor, the computer-readable instructions are configured to:
 receive a data flow with a data packet or information related to the data flow, 
 identifying the data flow, further including
 determine a packet bearer for association with the data flow from different packet bearers, and 
 determine a routing level identification of a further entity, and 
 
 instruct a user equipment to install a packet filter based on the routing level identification, wherein the packet filter associates data packets comprising the routing level identification with a further entity with the determined packet bearer. 
   
     
     
         9 . A monitoring entity, comprising:
 at least one processor;   a non-transitory computer-readable storage medium, coupled to the at least one processor, the non-transitory computer-readable storage medium further including computer-readable instructions, when executed by the at least one processor, are configured to:
 receive an initiation message comprising a session level identification of a further entity, the initiation message initiating an establishment of a communication session between an user equipment and the further entity, 
 receive a reply message to the initiation message, 
 monitor the initiation message and the reply message, 
 determine a routing level identification of the further entity from the initiation message or from the reply message, 
 forward the initiation message towards the further entity using the session level identification, 
 forward the reply message to the user equipment, 
 forward the determined routing level identification to a control entity to instruct the user equipment to install a packet filter based on the routing level identification, wherein the packet filter associates data packets comprising the routing level identification of the further entity with a packet bearer established with the user equipment to transmit a data packet over the communication network towards the further entity.