# US 10,454,880 B2 · IP packet processing method and apparatus, and network system

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 10,454,880 B2
- Document ID: US10454880B2
- Status: Granted
- Kind: B2
- Application number: 14/721,839
- Filed: 2015-05-26
- Published: 2015-10-08
- Granted: 2019-10-22
- Earliest claimed: 2012-11-26
- Assignees: Huawei Technologies Co., Ltd.
- Applicants: Huawei Technologies Co., Ltd.
- Inventors: Yinliang Hu; Guang Chen; Jian Chen
- Web page: https://patentgrep.com/patent/US10454880B2

## CPC

- H04L 61/5007: Internet protocol [IP] addresses
- H04L 12/4625: {Single bridge functionality, e.g. connection of two networks over a single bridge}
- H04L 47/2441: relying on flow classification, e.g. using integrated services [IntServ]
- H04L 63/0272: {Virtual private networks}
- H04L 67/10: in which an application is distributed across nodes in the network (software deployment G06F8/60; multiprogramming arrangements G06F9/46)
- H04L 63/164: {at the network layer}
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)

## Abstract

Embodiments of the present invention provide an IP packet processing method and apparatus, and a network system. The method includes: allocating, by an operator service gateway, an IP address to a first intranet of an enterprise; and processing, by the operator service gateway according to the IP address, an interactive service packet between the first intranet and a second intranet of the enterprise. In the technical solutions of the present invention, an operator service gateway allocates an IP address to a first intranet of an enterprise, and the operator service gateway processes, according to the IP address, an interactive service packet between the first intranet and a second intranet of the enterprise, thereby reducing deployment complexity of an enterprise internal network, reducing difficulties and costs in management and maintenance of the enterprise internal network, and reducing investment costs for updating hardware devices in the enterprise internal network.

## Claims

### Claim 1

An internet protocol (IP) packet processing method, comprising:
allocating, by an operator service gateway, a public IP address for a first intranet;
performing, by the operator service gateway, an IP security (IPSec) negotiation, based on the public IP address, with a device corresponding to a second intranet;
sending an internal address assigned for user equipment in the first intranet to the first intranet;
receiving, by the operator service gateway, a first service packet comprising the internal IP address;
performing, by the operator service gateway, IPSec encapsulation on the first service packet, wherein the first service packet that is IPSec-encapsulated comprises the public IP address; and
sending, by the operator service gateway, the first service packet that is IPSec-encapsulated to the device corresponding to the second intranet.

### Claim 2 (depends on 1)

The method according to claim 1, wherein after sending the first service packet that is IPSec-encapsulated to the device corresponding to the second intranet, the method further comprises:
receiving, by the operator service gateway, a second service packet that comprises a public IP address of the second intranet;
performing, by the operator service gateway, IPSec decapsulation on the second service packet; and
sending, by the operator service gateway, the second service packet that is IPSec-decapsulated to the operator access device.

### Claim 3

An operator service gateway, comprising:
a processor;
memory coupled to the processor, the memory comprising instructions that, when executed by the processor, cause the operator service gateway to:
allocate a public internet protocol (IP) address for a first intranet of an enterprise;
perform an IP security (IPSec) negotiation, based on the public IP address, with a device corresponding to a second intranet;
send an internal address assigned for user equipment in the first intranet to the first intranet;
receive a first service packet, wherein the first service packet comprises the internal IP address;
perform IPSec encapsulation on the first service packet, wherein the first service packet that is IPSec-encapsulated comprises the public IP address; and
send the first service packet that is IPSec-encapsulated to the device corresponding to the second intranet or a router corresponding to the second intranet.

### Claim 4 (depends on 3)

The operator service gateway according to claim 3, wherein the memory further comprises instructions that, when executed by the processor, cause the operator service gateway to:
after sending the first service packet that is IPSec-encapsulated to the device corresponding to the second intranet, receive a second service packet that comprises a public IP address of the second intranet;
perform IPSec decapsulation on the second service packet; and
send the second service packet that is IPSec-decapsulated to the operator access device.