User equipment access method, Apparatus and systemTechnical field
The present invention relates to the communications field, in particular to a kind of user equipment access method, Apparatus and system.
Background technology
In order to keep 3-G (Generation Three mobile communication system) in the strong competitiveness of moving communicating field, its network performance must be improved and reduce networking and operation cost.Therefore, third generation partner program (3rdGenerationPartnershipProject, referred to as 3GPP) standardization effort group just endeavouring research core network system evolution---the packet-based core networks (EvolvedPacketCore of evolution of future generation at present, referred to as EPC), object can provide higher transmission rate for user, shorter propagation delay time.EPC system supports the access of the universal land radio access web (EvolvedUniversalTerrestrialRadioAccessNetwork, referred to as E-UTRAN) of evolution; EPC system supports the access of Non-3GPP Access Network, such as, and WLAN (wireless local area network) (WirelessLocalAreaNetwork, referred to as WLAN) Access Network.
Fig. 1 is the system architecture diagram of the grouping system (EvolvedPacketSystem, referred to as EPS) of evolution.As shown in Figure 1, under subscriber equipment (UserEquipment, referred to as UE) is in non-roaming situation, UE can access the schematic diagram of EPC by E-UTRAN by mistrustful Non-3GPP Access Network access EPC and UE.
Network element shown in Fig. 1 also comprises: mobile management unit (MobilityManagementEntity, referred to as MME), gateway (ServingGateway, referred to as S-GW), grouped data network gateway (PacketDataNetworkGateWay, referred to as P-GW), home subscriber server (HomeSubscriberServer, referred to as HSS), 3GPP authentication and authorization charging server (3GPPAAA server), the packet data gateway (EvolvedPacketDataGateway, referred to as ePDG) of evolution.Wherein, MME is responsible for the chain of command related works such as mobile management, the process of Non-Access Stratum (Non-AccessStratum, referred to as NAS) signaling, the contextual management of mobile management of user; S-GW is the accessing gateway equipment be connected with E-UTRAN, forwarding data between E-UTRAN and P-GW; P-GW is the borde gateway of the IP operation that 3GPPEPS and public land mobile network (HomePublicLandMobileNetwork, referred to as HPLMN) provide, be responsible for IP operation access, between EPS and IP operation net forwarding data.
Mistrustful non-3 GPP access network (UntrustedNon3GPPAccess): there is not trusting relationship between 3GPP network and this non-3 GPP access system, first non-3 GPP access system must access the ePDG of 3GPP network, then by S2b interface access P-GW.At this moment set up a secure tunnel between UE and ePDG, ensure the safe transmission of data between UE and 3GPP network.Wherein, S2b interface uses proxy mobile IP protocol sixth version (ProxyMobileInternetProtocolversion6, referred to as PMIPv6) or GPRS Tunnel Protocol (GPRSTunnelProtocol, referred to as GTP).
Session initiation Protocol (SessionInitiationProtocol, SIP) can be used for setting up, the calling between the user of change and termination IP based network.
In FIG, use NAS agreement between UE and MME, be mainly used to mobile management and the session management of supporting UE, wherein, session management comprises: set up and maintain the IP connection between UE to PGW.
Fig. 2 is the chain of command protocol stack schematic diagram in correlation technique between UE and ePDG.Wherein, L2/L1 is data link layer and physical layer, IPv4/v6 is IP layer, the internet cipher key change second edition (InternetKeyExchangeVersion2, referred to as IKEv2) to be used between UE and ePDG arranging key and set up IP safety (IPsecurity, referred to as IPSec) tunnel.
Fig. 3 is the flow chart of UE by mistrustful non-3 GPP access network access EPC.As shown in Figure 3, this flow process mainly comprises following process:
Set up Security Association between step S302:ePDG and UE, carry out safety certification between EPC network and UE simultaneously;
After step S304:ePDG completes the certification to UE, initiate PDN connection establishment request message to PGW.
Wherein, when S2b uses PMIPv6, this message is agent binding update, and PGW sends agent binding and confirms after receiving this message, be wherein included as the address that this UE distributes; When S2b uses GTP, this message, for setting up session request, sends after PGW receives this message and sets up session reply, wherein comprise the address that this UE distributes.
Step S306:ePDG sends the IP address that the above-mentioned PGW of IKEv2 message informing UE distributes, and completes the foundation of ipsec tunnel.
When UE accesses 3GPP network, for some Packet Data Network (packetdatanetwork, referred to as PDN), UE needs the external authentication carried out in this PDN network, and now UE needs authentication information (such as, usemame/password etc.), by protocol configuration option (protocolconfigurationoption, referred to as PCO) issue PGW, PGW and outside PDN carries out certification to this user afterwards, and authentication result is returned to UE.
But, in correlation technique, due to the limitation of IKEv2 agreement, in some cases, subscriber equipment cannot adopt IKEv2 agreement to access to the packet data gateway of evolution, thus the information that part 3GPP network is needed cannot be obtained by IKEv2 agreement, causes partial function to realize.
Such as: when UE accesses 3GPP network by Fig. 2 mode, in step 301, external authentication information cannot be sent to ePDG by UE, so PGW cannot get external authentication information, causes the certification cannot carrying out outside PDN network to user.
Such as, when UE accesses EPC at E-UTRAN and WLAN simultaneously, if keep UE to use same IP address to access same outside PDN network, user cannot wish to issue ePDG in the IP of WLAN access (IPflow) information that flows, so network cannot realize the migration of flowing by current IKEv2 agreement.
Summary of the invention
The information needed for part 3GPP network in correlation technique cannot be obtained by IKEv2 agreement, the problem that partial function cannot realize and propose the present invention, for this reason, main purpose of the present invention is the user equipment access method and the system that provide a kind of improvement, to solve the problem one of at least.
According to an aspect of the present invention, a kind of user equipment access method is provided.
User equipment access method according to the present invention comprises: increase protocol stack in the packet data gateway side of user equipment side and evolution; Subscriber equipment adopts the packet data gateway ePDG of the agreement access evolution of the protocol stack increased.
According to a further aspect in the invention, a kind of subscriber equipment access device is provided.
Subscriber equipment access device according to the present invention comprises: arrange module, for increasing protocol stack in the packet data gateway ePDG side of user equipment side and evolution; Access module, the agreement for the protocol stack adopting increase makes user's equipment access ePDG.
According to another aspect of the invention, a kind of subscriber equipment connecting system is provided.
Subscriber equipment connecting system according to the present invention comprises: subscriber equipment, and for adopting the packet data gateway ePDG of the agreement access evolution of the protocol stack of increase, wherein, the protocol stack of increase is distributed in the packet data gateway side of user equipment side and evolution; EPDG, for connecting with subscriber equipment.
By the present invention, in existing protocol stack, increase protocol stack, subscriber equipment adopts the agreement access ePDG of the protocol stack increased.Solve the information that in correlation technique, part 3GPP network needs to be obtained by IKEv2 agreement, the problem that partial function cannot realize, and then subscriber equipment can be made to adopt the agreement of the protocol stack increased to access ePDG smoothly, thus the information making part 3GPP network need can be obtained by the agreement of the protocol stack increased, and realizes the function that cannot realize in correlation technique.
Accompanying drawing explanation
Accompanying drawing described herein is used to provide a further understanding of the present invention, and form a application's part, schematic description and description of the present invention, for explaining the present invention, does not form inappropriate limitation of the present invention.In the accompanying drawings:
Fig. 1 is the system architecture diagram of the grouping system of evolution.
Fig. 2 is the chain of command protocol stack schematic diagram in correlation technique between UE and ePDG;
Fig. 3 is the flow chart of UE by mistrustful non-3 GPP access network access EPC;
Fig. 4 is the flow chart of the user equipment access method according to the embodiment of the present invention;
Fig. 5 is the schematic diagram of protocol stack according to the preferred embodiment of the invention;
Fig. 6 is the flow chart of the user equipment access method according to example one of the present invention;
Fig. 7 is the flow chart of the user equipment access method according to example two of the present invention;
Fig. 8 is the structured flowchart of the subscriber equipment access device according to the embodiment of the present invention;
Fig. 9 is the structured flowchart of the subscriber equipment connecting system according to the embodiment of the present invention.
Embodiment
It should be noted that, when not conflicting, the embodiment in the application and the feature in embodiment can combine mutually.Below with reference to the accompanying drawings and describe the present invention in detail in conjunction with the embodiments.
Fig. 4 is the flow chart of the user equipment access method according to the embodiment of the present invention.As shown in Figure 4, this user equipment access method comprises:
Step S402: increase protocol stack in the packet data gateway side of user equipment side and evolution;
Step S404: subscriber equipment adopts the packet data gateway (ePDG) of the agreement access evolution of the protocol stack increased.
In correlation technique, due to the limitation of existing protocol, the information (such as, external authentication information and stream migration information) that part 3GPP network needs cannot be obtained by existing protocol, causes partial function to realize.Adopt said method, subscriber equipment can be made by the agreement access ePDG of the protocol stack of above-mentioned increase, and the information that part 3GPP network is needed is obtained by the agreement of the protocol stack increased, and realizes the function that cannot realize in correlation technique.
Preferably, the protocol stack of above-mentioned increase can be positioned on the IPsec protocol stack consulted based on the internet cipher key change second edition (IKEv2).Specifically can see Fig. 5.
Preferably, before execution above-mentioned steps S404, following process can also be comprised:
(1) Security Association set up by ePDG and subscriber equipment;
(2) ePDG sends connection establishment request to after the certification of subscriber equipment to packet data gateway PGW;
(3) ePDG receives the connection establishment response coming from PGW, and wherein, connection establishment response carries the address of promising user equipment allocation;
(4) ePDG is by address above mentioned notifying user equipment.
Preferably, the agreement of the protocol stack of above-mentioned increase can be: network attached storage (NetworkAttachedStorage, referred to as NAS), session initiation protocol (SessionInitiationProtocol, referred to as SIP), DynamicHost arranges agreement (DynamicHostConfigurationProtocol, referred to as DHCP), domain name system (DomainNameSystem, referred to as DNS), wide area network management agreement (TechnicalReport069, referred to as TR069), peer-peer protocol (Point-to-PointProtocol, referred to as PPP) or RSVP (ResourceReSerVationProtocol, referred to as RSVP).
Preferably, above-mentioned steps S404 may further include following process:
(1) subscriber equipment adopts the agreement of the protocol stack increased that access request is sent to ePDG;
(2) subscriber equipment receives the success response coming from ePDG.
In preferred implementation process, if the protocol stack of above-mentioned increase is Session Initiation Protocol stack, access request is SIP registration request, and success response is response of succeeding in registration.
In preferred implementation process, if when the protocol stack of above-mentioned increase is NAS protocol stack, access request is attachment request, and success response is that response is received in attachment.
Preferably, after execution above-mentioned steps S404, subscriber equipment can adopt the agreement of the protocol stack of increase to send message to ePDG, and wherein, this message carries authentication information and/or IP stream information.
Wherein, when UE has needed outside PDN network authentication, subscriber equipment has needed to send authentication information to ePDG, and such as, authentication information can comprise the information such as usemame/password.
Wherein, when UE has needed stream migration, subscriber equipment can send stream migration information to ePDG, stream migration information is the information that UE wishes the IP stream in the transmission of WLAN side, such as, data flow template (trafficflowtemplate, referred to as TFT) information, this Template Information can comprise the information such as source address, destination address, source port number, destination port number and protocol type.
Preferably, when the protocol stack of above-mentioned increase is Session Initiation Protocol stack, above-mentioned message is invitation message or option message.
Preferably, when the protocol stack of above-mentioned increase is NAS protocol stack, message is request bearing resource amendment message.
Preferably, send after message to ePDG at subscriber equipment, following process can also be comprised:
(1) authentication information and/or IP stream information are sent to PGW by ePDG;
(2) ePDG receives the authentication result and/or the stream migration result that come from PGW;
(3) authentication result and/or stream migration result are sent to subscriber equipment by ePDG.
Preferably, when the protocol stack of above-mentioned increase is Session Initiation Protocol stack, authentication information and/or IP stream information can be carried in agent binding update or amendment carrying order; Authentication result and/or stream migration result can be carried at agent binding and to confirm or more in new bearer request; Authentication result and/or stream migration result can be carried in the response message that ePDG sends to subscriber equipment.
Preferably, when the protocol stack of above-mentioned increase is NAS protocol stack, authentication information and/or IP stream information can be carried in agent binding update or amendment carrying order; Authentication result and/or stream migration result can be carried at agent binding and to confirm or more in new bearer request; Authentication result and/or stream migration result can be carried in the session management request that ePDG sends to subscriber equipment.
Example below in conjunction with Fig. 6 and Fig. 7 describes above-mentioned preferred implementation process.
Fig. 6 is the flow chart according to example one of the present invention.In this example, after UE completes IKEv2 protocol stack flow process, start Session Initiation Protocol stack, to carry out outside PDN network authentication or stream migration.Wherein, when performing stream migration, UE establishes a PDN at 3GPP network (as E-UTRAN) and connects, and wishes the connection being also established to same PDN network at WLAN, and uses identical IP address.As shown in Figure 6, comprise the following steps according to the method for the user access network of the embodiment of the present invention:
Step S602, when UE has needed outside PDN network authentication, this step is identical with step S302;
When UE has needed stream migration, in this step, UE sends stream migration and is indicated to ePDG;
Step S604, when UE has needed outside PDN network authentication, this step is identical with step S304;
When UE has needed stream migration, in this step, ePDG needs the stream migration instruction of being sent by UE to send to PGW; And PGW needs the stream migration instruction according to receiving, will be that ePDG is issued in the IP address that UE distributes at E-UTRAN;
Step S606, this step is identical with step S306;
Step S608, UE initiate SIP registration request to ePDG;
Step S610, ePDG reply 200OK to UE, complete the registration of UE;
Step S612, UE send to ePDG and invite (INVITE) message or option (OPTION) message.
Wherein, when UE has needed outside PDN network authentication, above-mentioned invitation message has comprised authentication information, such as, and usemame/password etc.;
Wherein, when UE has needed stream migration, above-mentioned invitation packet wishes the information of the IP stream in the transmission of WLAN side containing UE, such as, data flow template (trafficflowtemplate, referred to as TFT), wherein comprise source address, destination address, source port number, destination port number and protocol type etc.;
Step S614, when S2b uses PMIPv6, ePDG sends agent binding update to PGW; When S2b uses GTP, ePDG sends amendment carrying order to PGW; The information that in step S612, UE sends is comprised in above-mentioned message;
Step S616, when PGW have received the external authentication information that UE sends, the strategy of this PDN network performing authentication that PGW configures according to self, mutual with the certification network element in outside PDN network, complete external authentication;
When PGW receives the stream migration information (such as, TFT) that UE sends, PGW needs to initiate IP stream migration corresponding for this TFT to non-3 GPP access (WLAN) side;
According to the agreement that S2b uses, PGW replys ePDG: agent binding update (PMIPv6) or amendment carrying request (GTP), wherein carries certification access and/or stream migration information (TFT that PGW confirms);
In preferred implementation process, when S2b uses GTP, ePDG replys more new bearer to PGW and replys, and confirms that bearer update completes;
The information received in step S616 is issued UE by 200OK by step S618, ePDG, completes external authentication and/or stream migration.
Fig. 7 is the flow chart according to the inventive method example two.In this example, after UE completes IKEv2 protocol stack flow process, start NAS protocol stack, to carry out outside PDN network authentication or stream migration.Wherein during stream migration, UE establishes a PDN at 3GPP network (as E-UTRAN) and connects, and wishes the connection being also established to same PDN network at WLAN, and uses identical IP address.As shown in Figure 7, comprise the following steps according to the method for the user access network of the embodiment of the present invention:
Step S702-S706 and step S602-S606 are substantially identical;
Step S708, UE start NAS protocol stack, initiate attachment request;
Step S710, ePDG reply attachment and receive to UE, complete UE registration;
Step S712, UE send request bearing resource amendment to ePDG.
Wherein, when UE has needed outside PDN network authentication, wherein authentication information has been comprised, as usemame/password etc.;
Wherein, when UE has needed stream migration, wherein comprise the information that UE wishes the IP stream in the transmission of WLAN side, such as TFT (trafficflowtemplate, data flow template), wherein comprise source address, destination address, source port number, destination port number and protocol type etc.;
Step S714-step S716 is identical with step S614-step S616;
Step S718, ePDG send session management request to UE, wherein comprise the information received in step S716;
Step S720, UE send session management to ePDG and reply, and acknowledge receipt of session management request;
Step S722, ePDG send more new bearer to PGW and reply, and confirm that bearer update completes.
It should be noted that protocol stack that Fig. 6 and Fig. 7 respectively describes above-mentioned increase be Session Initiation Protocol stack and NAS protocol stack time, the preferred implementation of subscriber equipment access ePDG.When the protocol stack of above-mentioned increase is the protocol stacks such as DHCP, DNS, PPP, flow process and the above-mentioned flow process of subscriber equipment access ePDG are substantially similar, repeat no more herein.
Fig. 8 is the structured flowchart of the subscriber equipment access device according to the embodiment of the present invention.As shown in Figure 8, this subscriber equipment access device comprises: arrange module 80 and access module 82.
Module 80 is set, for increasing protocol stack in user equipment side and ePDG side;
Access module 82, the agreement for the protocol stack adopting above-mentioned increase makes user's equipment access ePDG.
Adopt said apparatus, subscriber equipment can be made by the agreement access ePDG of the protocol stack of above-mentioned increase, and the information that part 3GPP network is needed is obtained by the agreement of the protocol stack increased, and realizes the function that cannot realize in correlation technique.
Preferably, the agreement of the protocol stack of above-mentioned increase includes but not limited to: NAS, SIP, DHCP, DNS, TR069, PPP or RSVP.
Preferably, the protocol stack of above-mentioned increase can be arranged on the IPsec protocol stack consulted based on the internet cipher key change second edition (IKEv2).Specifically can see Fig. 5.
The protocol stack of above-mentioned increase be NAS protocol stack or Session Initiation Protocol stack time, the preferred working method of above-mentioned access module 82 specifically can see Fig. 6 and Fig. 7.It should be noted that preferred working method and the above-mentioned preferred working method of above-mentioned access module 82 are substantially similar, repeat no more when the protocol stack of above-mentioned increase is the protocol stacks such as DHCP, DNS, PPP herein.
Fig. 9 is the structured flowchart of the subscriber equipment connecting system according to the embodiment of the present invention.As shown in Figure 9, this subscriber equipment connecting system can comprise: subscriber equipment 90 and ePDG92.
Subscriber equipment 90, for adopting the packet data gateway ePDG of the agreement access evolution of the protocol stack of increase, wherein, the protocol stack of increase is distributed in the packet data gateway side of user equipment side and evolution;
EPDG92, for connecting with subscriber equipment.
Preferably, the agreement of the protocol stack of above-mentioned increase includes but not limited to: NAS, SIP, DHCP, DNS, TR069, PPP or RSVP.
Preferably, the protocol stack of above-mentioned increase can be arranged on the IPsec protocol stack consulted based on the internet cipher key change second edition (IKEv2).Specifically can see Fig. 5.
Preferably, subscriber equipment 90, access request is sent to ePDG by the agreement also for the protocol stack adopting increase, receives the success response coming from ePDG.
Preferably, subscriber equipment 90, the agreement also for the protocol stack adopting increase sends message to ePDG, and wherein, message carries authentication information and/or IP stream information.
Preferably, ePDG92, also for authentication information and/or IP stream information are sent to PGW, receives the authentication result and/or the stream migration result that come from PGW, authentication result and/or stream migration result is sent to subscriber equipment.
The preferred implementation that above-mentioned subscriber equipment 90 and ePDG92 be combined with each other specifically see the description of Fig. 6 and Fig. 7, can repeat no more herein.
It should be noted that protocol stack that Fig. 6 and Fig. 7 respectively describes above-mentioned increase be Session Initiation Protocol stack and NAS protocol stack time, subscriber equipment 90 accesses the preferred implementation of ePDG92.When the protocol stack of above-mentioned increase is the protocol stacks such as DHCP, DNS, PPP, subscriber equipment 90 access the preferred implementation of ePDG92 and above-mentioned preferred implementation substantially similar, repeat no more herein.
In sum, pass through the above embodiment of the present invention, subscriber equipment can be made by the agreement access ePDG of the protocol stack of above-mentioned increase, and the information that part 3GPP network is needed is obtained by the agreement of the protocol stack increased, and realizes the function that cannot realize in correlation technique.
Obviously, those skilled in the art should be understood that, above-mentioned of the present invention each module or each step can realize with general calculation element, they can concentrate on single calculation element, or be distributed on network that multiple calculation element forms, alternatively, they can realize with the executable program code of calculation element, thus, they can be stored and be performed by calculation element in the storage device, or they are made into each integrated circuit modules respectively, or the multiple module in them or step are made into single integrated circuit module to realize.Like this, the present invention is not restricted to any specific hardware and software combination.
The foregoing is only the preferred embodiments of the present invention, be not limited to the present invention, for a person skilled in the art, the present invention can have various modifications and variations.Within the spirit and principles in the present invention all, any amendment done, equivalent replacement, improvement etc., all should be included within protection scope of the present invention.