Mobile service routing in a network environment

• US 9,860,790 B2
• Filed: 06/23/2015
• Issued: 01/02/2018
• Est. Priority Date: 05/03/2011
• Status: Expired due to Fees

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Inventors: Khan, Muhammad A., Shatzkamer, Kevin D., McBean, Kirk
• Primary Examiner(s): PATEL, CHANDRAHAS B
• Application Number:
  US14/746,919
• Publication Number:
  US 20150312801A1
• Time in Patent Office: 924 Days
• CPC Class Codes: H04L 45/22 Alternate routing
• CPC Class Codes: H04L 45/308 Route determination based on user's profile, e.g. premium users
• CPC Class Codes: H04L 61/5007 Internet protocol [IP] addresses
• CPC Class Codes: H04L 63/0227 Filtering policies mail message filtering H04L51/212
• CPC Class Codes: H04L 67/63 Routing a service request depending on the request content or context
• CPC Class Codes: H04W 12/121 Wireless intrusion detection systems [WIDS]; Wireless intrusion prevention systems [WIPS]
• CPC Class Codes: H04W 28/10 Flow control between communication endpoints
• CPC Class Codes: H04W 40/00 Communication routing or communication path finding
• CPC Class Codes: H04W 40/34 Modification of an existing route
• CPC Class Codes: H04W 76/12 Setup of transport tunnels
• CPC Class Codes: H04W 8/18 Processing of user or subscriber data, e.g. subscribed services, user preferences or user profiles; Transfer of user or subscriber data

Abstract

A data flow is received from a mobile network relating to a mobile subscriber. Subscriber data is received for the subscriber identifying a service path corresponding to the subscriber and at least one service policy corresponding to the subscriber, the service path including a set of network service nodes in a plurality of network service nodes. Packets of the data flow are routed according to the service path, the packets corresponding to a request for a resource. At least one packet is appended with service header data identifying the service policy. Each service node performs at least one service based on received request data, each service node in the set of service nodes performing a service defined in a service subscription of the subscriber. At least one particular service node in the set of network service nodes performs a particular service based at least in part on the service policy.

Claims

1. A computer-implemented method comprising:

receiving a first data flow associated with a first subscriber and a second data flow associated with a second subscriber in a mobile network;

retrieving first subscriber data for the first subscriber and second subscriber data for the second subscriber, wherein the first subscriber data identifies a first service path, a first service policy associated with the first subscriber, and accounting date data corresponding to a service subscription of the first subscriber and the second subscriber data identifies a second service path and a second service policy associated with the second subscriber;

assigning a shared Internet protocol (IP) address to the first subscriber and the second subscriber;

generating a first IP-address-independent-identifier corresponding to the first subscriber and a second IP-address-independent-identifier corresponding to the second subscriber;

initiating routing of at least one packet of the first data flow over a network according to the first service path, the at least one packet including first service header data identifying, at least in part, the first service policy, the first service path, and the accounting date data; and

initiating routing of at least one packet of the second data flow over the network according to the second service path, the at least one packet including second service header data identifying, at least in part, the second service policy and the second service path.

2. The computer-implemented method of claim 1, wherein the first service path identifies one or more first service nodes to receive the first data flow associated with the first subscriber and wherein the second service path identifies one or more second service nodes to receive the second data flow associated with the second subscriber.

3. The computer-implemented method of claim 2, wherein the first service nodes and the second service nodes are different for the first data flow and the second data flow.

4. The computer-implemented method of claim 2, wherein the first service nodes and the second service nodes are the same for the first data flow and the second data flow.

5. The computer-implemented method of claim 4, further comprising:

appending the first service header data for one or more packets of the first data flow to include the first IP-address-independent-identifier for the first subscriber; and

appending the second service header data for one or more packets of the second data flow to include the second IP-address-independent-identifier for the second subscriber.

6. The computer-implemented method of claim 5, wherein the appending is performed for one of an initial packet or a last packet of the first data flow and for one of an initial packet or a last packet of the second data flow based on all the first and the second service nodes being stateful.

7. The computer-implemented method of claim 5, wherein the appending is performed for all packets of the first data flow and for all packets of the second data flow based on any of the first and the second service nodes being non-stateful.

8. The computer-implemented method of claim 1, wherein the second subscriber data includes accounting date data corresponding to a service subscription of the second subscriber and the second service header data further includes the accounting date data.

9. One or more non-transitory media that includes code for execution and when executed by a processor is operable to perform operations comprising:

receiving a first data flow associated with a first subscriber and a second data flow associated with a second subscriber in a mobile network;

retrieving first subscriber data for the first subscriber and second subscriber data for the second subscriber, wherein the first subscriber data identifies a first service path, a first service policy associated with the first subscriber, and accounting date data corresponding to a service subscription of the first subscriber and the second subscriber data identifies a second service path and a second service policy associated with the second subscriber;

assigning a shared Internet protocol (IP) address to the first subscriber and the second subscriber;

generating a first IP-address-independent-identifier corresponding to the first subscriber and a second IP-address-independent-identifier corresponding to the second subscriber;

initiating routing of at least one packet of the first data flow over a network according to the first service path, the at least one packet including first service header data identifying, at least in part, the first service policy, the first service path, and the accounting date data; and

initiating routing of at least one packet of the second data flow over the network according to the second service path, the at least one packet including second service header data identifying, at least in part, the second service policy and the second service path.

10. The media of claim 9, wherein the second subscriber data includes accounting date data corresponding to a service subscription of the second subscriber and the second service header data further includes the accounting date data.

11. The media of claim 9, wherein the first service path identifies one or more first service nodes to receive the first data flow associated with the first subscriber and wherein the second service path identifies one or more second service nodes to receive the second data flow associated with the second subscriber.

12. The media of claim 11, the operations further comprising:

appending the first service header data for one or more packets of the first data flow to include the first IP-address-independent-identifier for the first subscriber; and

appending the second service header data for one or more packets of the second data flow to include the second IP-address-independent-identifier for the second subscriber based on the one or more first service nodes being the same as the one or more second service nodes.

13. The media of claim 12, wherein the appending is performed for one of an initial packet or a last packet of the first data flow and for one of an initial packet or a last packet of the second data flow based on all the first and the second service nodes being stateful.

14. The media of claim 12, wherein the appending is performed for all packets of the first data flow and for all packets of the second data flow based on any of the first and the second service nodes being non-stateful.

15. A system comprising:

a policy control engine including at least one processor device and at least one memory element, the policy control engine adapted, when executed by the at least one processor device to;

assign an Internet protocol (IP) address to a first subscriber upon receiving an indication of a first data flow for the first subscriber; and

assign the IP address to a second subscriber upon receiving an indication of a second data flow for the second subscriber;

a routing module including at least one processor device and at least one memory element, the routing module adapted, when executed by the at least one processor device to;

retrieve first subscriber data for the first subscriber and second subscriber data for the second subscriber, wherein the first subscriber data identifies a first service path, a first service policy associated with the first subscriber, and accounting date data corresponding to a service subscription of the first subscriber and the second subscriber data identifies a second service path and a second service policy associated with the second subscriber;

generate a first IP-address-independent-identifier corresponding to the first subscriber and a second IP-address-independent-identifier corresponding to the second subscriber;

initiate routing of at least one packet of the first data flow over a network according to the first service path, the at least one packet including first service header data identifying, at least in part, the first service policy, the first service path, and the accounting date data; and

initiate routing of at least one packet of the second data flow over the network according to the second service path, the at least one packet including second service header data identifying, at least in part, the second service policy and the second service path.

16. The system of claim 15, wherein the first service path identifies one or more first service nodes to receive the first data flow associated with the first subscriber and wherein the second service path identifies one or more second service nodes to receive the second data flow associated with the second subscriber.

17. The system of claim 16, wherein the first service nodes and the second service nodes are different for the first data flow and the second data flow.

18. The system of claim 16, wherein the first service nodes and the second service nodes are the same for the first data flow and the second data flow.

19. The system of claim 16, wherein the routing module is further adapted, when executed by the processor to:

append the first service header data for one or more packets of the first data flow to include the first IP-address-independent-identifier for the first subscriber; and

append the second service header data for one or more packets of the second data flow to include the second IP-address-independent-identifier for the second subscriber based on the one or more first service nodes being the same as the one or more second service nodes.

20. The system of claim 15, wherein the second subscriber data includes accounting date data corresponding to a service subscription of the second subscriber and the second service header data further includes the accounting date data.