CN102892110A - Method and system for keeping consistency of user identifications of terminal in different networks - Google Patents

Abstract

The invention discloses a method and a system for keeping consistency of user identifications of a terminal in different networks, wherein the method comprises the steps of: presetting an internet protocol (IP) mapping relation chart by an authentication server of a core network; sending an identification request message to a terminal by the authentication server; receiving an identification response message of the terminal by the authentication server; analyzing the identification response message by the authentication server, and acquiring the international mobile subscriber identity (IMSI) or user name of the terminal; depending on the IMSI or the user name, finding an IP address which corresponds to the IMSI or the user name in the IP mapping relation chart which is preset by the authentication server; and sending the IP address which corresponds to the IMSI or the user name to the terminal by the authentication server. With addition of an IP mapping relation chart in the authentication equipment of the core network, a unified management of the IP address of the terminal is realized while different networks are accessed to, thereby guaranteeing the consistency of the user identifications of the user in the different networks.

Description

The conforming method and system of a kind of terminal user ID in heterogeneous networks

Technical field

The present invention relates to the wireless network communication technique field, particularly the conforming method and system of a kind of terminal user ID in heterogeneous networks.

Background technology

Home eNodeB (Home NodeB) claim again Femto, is a kind of low transmitting power, cover among a small circle, and take the fixed broadband access network as backhaul, main household base station device towards family's Client application.Transmitting power of equipment little (maximum power 20mW), volume are little, work in the mandate frequency range, covering radius is generally 5-20 rice, its Main Function is for higher service rate being provided to the user and reducing needed expense when using high rate services, simultaneously, remedy the deficiency that existing distributed cellular radio communication system covers.

Along with popularizing and mobile Internet flourish of intelligent terminal, the user is continuing to increase the demand of wireless bandwidth.The user data traffic that increases rapidly is so that the 3G carrier network can't bear the heavy load, and the method that traditional grand net is built dilatation does not catch up with the growth of data traffic far away.In order to solve the current problem that faces, in recent years, dispose the mode of 3G network by Femto and more and more accepted by operator.Because quite a high proportion of 3G data service is finished indoor, therefore can carry out the indoor degree of depth by the Femto Home eNodeB and cover, solved to a certain extent the problem that the grand station of 3G and chamber subsystem capacity can't satisfy data volume grow.

The characteristics such as on the other hand, the WLAN technology is as a kind of flexibly wide-band wireless IP access way in recent years, and is high by its access rate, and framework is easy to use, and system cost is cheap have obtained the clearly approval of industry.For the volatile growth of data service, and more and more higher bandwidth demand, traditional 3G network is difficult to satisfy, and WLAN supports the user with higher speed accessing data service with the advantage of its distinctive high bandwidth.Secondly, use WLAN as the access of data service, the data service that can shunt traditional 3G network alleviates network burden.Can be used as the strong of 3G network replenishes.

Find that by 3G and WLAN contrast WLAN provides the data service of higher rate by the mode that focus covers for the user, but can not well support ambulant demand; And 3G network is realized covering continuously by cellular cell, can be good at supporting mobility, and is aspect the speed of data service, more much lower than wlan network.Therefore, WLAN and 3G network are merged, realize the mutual supplement with each other's advantages of WLAN and 3G network, become the trend of future wireless network development.

In the prior art; can not realize the unified management of IP address when heterogeneous networks accessed; can not guarantee the Internet user can obtain with phone number one to one fixed ip address as its unified sign and called number in the IP territory, thereby can not guarantee the consistency of terminal user ID in heterogeneous networks.

Summary of the invention

The invention provides the conforming method and system of a kind of terminal user ID in heterogeneous networks, by in the core net authenticating device, increasing IP mapping relations table, realize the unified management of IP address of terminal when accessing by heterogeneous networks, guaranteed the consistency of terminal user ID in heterogeneous networks.

The invention provides the conforming method of a kind of terminal user ID in heterogeneous networks, the method comprises:

The certificate server of core net sets in advance IP mapping relations table, described IP mapping relations table comprises international mobile subscriber identification code IMSI, user name and IP address, and described IMSI and described user name, described IMSI and described IP address are respectively one-to-one relationship;

Described certificate server sends identification request message to terminal, and described identification request message is the request message of terminal access;

The identification response message of described certificate server receiving terminal, described identification response message are the access response message that terminal is returned;

Described certificate server is resolved described identification response message, obtains described IMSI or the described user name of described terminal;

Described certificate server is searched the IP address corresponding with described IMSI or described user name according to described IMSI or described user name in the described IP mapping relations table that sets in advance;

Described certificate server sends to described terminal with described IMSI or the corresponding IP address of described user name.

Wherein, the method also comprises: described certificate server has set in advance the authentication mode of user's name and password, and the cell-phone number of described user terminal by name is used for determining user identity, and described password is for being used for the accidental validation password of authenticating users.

Wherein, the identification response message of described certificate server receiving terminal comprises: when terminal was supported the EAP authentication, described certificate server received the EAP authentication response message of described terminal; When terminal is not supported described EAP authentication, the cell-phone number as authentication response message that described certificate server receiving terminal sends.

Wherein, after the cell-phone number that described certificate server receiving terminal sends, also comprise: described certificate server sends the accidental validation password of the legitimacy that is used for authentication of users to described terminal, and described terminal is returned described accidental validation password.

The present invention also provides a kind of terminal user ID in heterogeneous networks conforming system, comprising:

Certificate server is used for setting in advance IP mapping relations table, and described IP mapping relations table comprises international mobile subscriber identification code IMSI, user name and IP address, and described IMSI and described user name, described IMSI and described IP address are respectively one-to-one relationship; Described certificate server also is used for sending identification request message, described identification request message is the request message of terminal access, the identification response message of receiving terminal, described identification response message is the access response message that terminal is returned, resolve described authentication response message, obtain described IMSI or the described user name of described terminal, and in the described IP mapping relations table that sets in advance, search the IP address corresponding with described IMSI or described user name according to described IMSI or described user name, obtain described IP address, send described IP address to terminal;

Terminal is used for receiving the identification request message that described certificate server sends, and described identification request message is the request message of terminal access, and returns identification response message, and described identification response message is the access response message that described terminal is returned.

Wherein, described certificate server comprises:

Map unit is used for setting up IP mapping relations table, and described IP mapping relations table comprises international mobile subscriber identification code IMSI, user name and IP address, and described IMSI and described user name, described IMSI and described IP address are respectively one-to-one relationship;

Transmitting element is used for sending identification request message to terminal, and described transmitting element also is used for sending the IP address to described terminal;

Receiving element, the identification response message for receiving terminal specifically comprises: when terminal is supported the EAP authentication, receive the EAP authentication response message of described terminal; When terminal is not supported described EAP authentication, the cell-phone number as identification response message that receiving terminal sends;

Resolution unit is used for resolving described identification response message;

Acquiring unit is for described IMSI or the described user name of obtaining the described terminal that obtains after the parsing;

Search the unit, be used for searching the IP address corresponding with described IMSI or described user name according to described IMSI or described user name at the described IP mapping relations table that sets in advance.

Wherein, described certificate server also comprises:

Second acquisition unit is used for obtaining the described IP address corresponding with described IMSI or described user name that the unit obtains of searching;

The second receiving element is used for the accidental validation password that receiving terminal returns.

Wherein, described certificate server also comprises:

Setting unit, for the authentication mode that sets in advance user's name and password, the cell-phone number of described user terminal by name is used for determining user identity, described password is the accidental validation password for authenticating users;

Authentication unit is used for returning described accidental validation password according to terminal, verifies the legitimacy of described terminal.

Compared with prior art, the embodiment of the invention has the following advantages: by increase IP mapping relations table in the core net authenticating device, realize the unified management of IP address of terminal when accessing by heterogeneous networks, guaranteed the consistency of terminal user ID in heterogeneous networks.

Description of drawings

In order to be illustrated more clearly in the embodiment of the invention or technical scheme of the prior art, the below will do to introduce simply to the accompanying drawing of required use in embodiment or the description of the Prior Art, apparently, accompanying drawing in the following describes only is some embodiments of the present invention, for those of ordinary skills, under the prerequisite of not paying creative work, can also obtain according to these accompanying drawings other accompanying drawing.

Fig. 1: the flow chart that is a kind of terminal of the present invention conforming method of user ID in heterogeneous networks;

Fig. 2: the structure chart that is a kind of terminal of the present invention conforming system of user ID in heterogeneous networks;

Embodiment

Below in conjunction with the accompanying drawing in the embodiment of the invention, the technical scheme in the embodiment of the invention is clearly and completely described, obvious described embodiment is the present invention's part embodiment, rather than whole embodiment.Based on the embodiment among the present invention, those of ordinary skills belong to the scope of protection of the invention not making the every other embodiment that obtains under the creative work prerequisite.

The invention provides the conforming method of a kind of terminal user ID in heterogeneous networks, shown in Fig. 1, may further comprise the steps:

Step S101, the certificate server of core net sets in advance IP mapping relations table, described IP mapping relations table comprises international mobile subscriber identification code IMSI, user name and IP address, and described IMSI and described user name, described IMSI and described IP address are respectively one-to-one relationship;

This programme is supported by increasing IP mapping relations tables (IP address pool) at the 3GPP of core-network side AAA Server certificate server.Each of IP mapping relations table comprises IMSI, three clauses and subclauses of user name and IP address, user name can be user's cell-phone number, because corresponding unique cell-phone number of each IMSI, therefore for the terminal by authentication, no matter pass through IMSI or cell-phone number, all can in IP mapping relations table, find network and be the fixed ip address of this terminal distribution;

Step S102, described certificate server send identification request message to terminal, and described identification request message is the request message of terminal access;

Certificate server sends identification request message to terminal, for the WLAN terminal of supporting the EAP-SIM/AKA authentication, can send EAP-SIM/AKA authentication authentication request message, for the WLAN terminal of not supporting the EAP-SIM/AKA authentication, user's name and pin mode authentication.

Step S103, the identification response message of described certificate server receiving terminal, described identification response message are the access response message that terminal is returned;

Step S104, described certificate server is resolved described identification response message, obtains described IMSI or the described user name of described terminal;

Described IMSI or described user name are carried in the Frame of described identification response message;

Step S105, described certificate server is searched the IP address corresponding with described IMSI or described user name according to described IMSI or described user name in the described IP mapping relations table that sets in advance;

Step S106, described certificate server sends to described terminal with described IMSI or the corresponding IP address of described user name.

Distribute fixedly IP by IP mapping relations table, guarantee the Internet user can obtain with phone number one to one fixed ip address identify and called number at the unified of IP territory as it.

For the WLAN terminal of supporting the EAP-SIM/AKA authentication, because the network access Identifier (NAI) of EAP-SIM/AKA authentication carries IMSI, we need to obtain IMSI and the MAC Address of WLAN terminal in the process of EAP authentication, set up the mapping relations of IMSI and MAC Address, and obtain the IP address that core net is this terminal distribution.After the WLAN terminal was finished authentication, when initiating DHCP request distributing IP address, the HNB side was searched corresponding MAC Address, and the IP that this address is corresponding distributes to WLAN UE with the form of DHCP agreement.

Terminal is by WLAN access 3G core net, at first finishes relatedly with AP, is successfully associated rear initiation authentication request, finishes authentication.Behind the authentication success, DHCP Server is terminal distribution IP address, and terminal is finished access process.

For the WLAN terminal of not supporting the EAP-SIM/AKA authentication, without the IMSI sign, user's name and pin mode authenticate in the authentication information.User name is used for determining user identity, and password is used for the legitimacy of authentication of users.Guarantee that the uniformity strategy of user ID is by realizing in the transformation of 3GPP AAA Server side this moment.User name uses cell-phone number as the affirmation of user identity, WLAN UE association is afterwards by IP address of AC preassignment, after finishing identifying procedure by the short message password that issues and 3GPP AAA Server, 3GPP AAA Server is according to the user name that reports in the verification process, the cell-phone number that is the user obtains corresponding IMSI, obtain corresponding fixed ip address according to IMSI, an attribute by identifying procedure is with the IP address notification WLAN UE that obtains.After WLAN UE gets access to the IP address of secondary distribution, use new IP address to begin access process.

Authenticated user information is as follows:

When WLAN UE passes through 3G UMTS core network access, use IMSI to finish identifying procedure.When WLAN UE request activated the pdp context, core net can find the fixed ip address that distributes into this IMSI according to the IMSI of mobile phone in the IP address pool of 3GPP AAA Server, be handed down to mobile phone by the pdp activation process.When WLAN UE is linked into core net PS territory business by wlan network, authenticate take cell-phone number as user name, with the short message password that issues as authentication password, 3GPP AAA Server determines the legitimacy of user identity by verified users name and short message password, in corresponding IP address pool, find core net by the cell-phone number as user name and be the fixed ip address of this user assignment, the authentication by after be handed down to WLAN UE, finish the distribution of terminal fixed ip address.Because IMSI and the cell-phone number (terminal user name) with sim card terminal is corresponding one by one, therefore no matter when finishing access process by 3G UMTS network or WLAN access network, core net all can be fixing IP address of this terminal distribution, when having guaranteed that terminal accesses by different network systems, the unification of identifying procedure and user ID.

Wherein, the method also comprises: described certificate server has set in advance the authentication mode of user's name and password, and the cell-phone number of described user terminal by name is used for determining user identity, and described password is for being used for the accidental validation password of authenticating users.

Wherein, the identification response message of described certificate server receiving terminal comprises: when terminal was supported the EAP authentication, described certificate server received the EAP authentication response message of described terminal; When terminal is not supported described EAP authentication, the cell-phone number as authentication response message that described certificate server receiving terminal sends.

The present invention is by increasing IP mapping relations table in the core net authenticating device; realized the unified management of IP address when accessing by heterogeneous networks; with the unique IMSI of each terminal and fixedly cell-phone number as the sign of user access network; realized that the user is in the authentication of heterogeneous networks and the unification of sign; and distribute fixedly IP according to IP mapping relations table, guarantee the Internet user can obtain with phone number one to one fixed ip address identify and called number at the unified of IP territory as it.

Wherein, after the cell-phone number that described certificate server receiving terminal sends, also comprise: described certificate server sends the accidental validation password of the legitimacy that is used for authentication of users to described terminal, and described terminal is returned described accidental validation password.

In addition, the present invention also provides a kind of terminal user ID in heterogeneous networks conforming system, and as shown in Figure 2, this system comprises:

Certificate server 102, be used for setting in advance IP mapping relations table, described IP mapping relations table comprises international mobile subscriber identification code IMSI, user name and IP address, and described IMSI and described user name, described IMSI and described IP address are respectively one-to-one relationship; Described certificate server also is used for sending identification request message, described identification request message is the request message of terminal access, the identification response message of receiving terminal, described identification response message is the access response message that terminal is returned, resolve described authentication response message, obtain described IMSI or the described user name of described terminal, and in the described IP mapping relations table that sets in advance, search the IP address corresponding with described IMSI or described user name according to described IMSI or described user name, obtain described IP address, send described IP address to terminal;

Terminal 101 is used for receiving the identification request message that described certificate server sends, and described identification request message is the request message of terminal access, and returns identification response message, and described identification response message is the access response message that described terminal is returned.

The 3GPP AAA Server certificate server of core-network side increases IP mapping relations tables (IP address pool) and supports.Each of IP mapping relations table comprises IMSI, three clauses and subclauses of user name and IP address, user name can be user's cell-phone number, because corresponding unique cell-phone number of each IMSI, therefore for the terminal by authentication, no matter pass through IMSI or cell-phone number, all can in IP mapping relations table, find network and be the fixed ip address of this terminal distribution;

Wherein, described certificate server comprises:

Map unit 1021 is used for setting up IP mapping relations table, and described IP mapping relations table comprises international mobile subscriber identification code IMSI, user name and IP address, and described IMSI and described user name, described IMSI and described IP address are respectively one-to-one relationship;

Transmittingelement 1022 is used for sending identification request message to terminal, and described transmitting element also is used for sending the IP address to described terminal;

Receivingelement 1023, the identification response message for receiving terminal specifically comprises: when terminal is supported the EAP authentication, receive the EAP authentication response message of described terminal; When terminal is not supported described EAP authentication, the cell-phone number as identification response message that receiving terminal sends;

Resolution unit 1024 is used for resolving described identification response message;

Acquiringunit 1025 is for described IMSI or the described user name of obtaining the described terminal that obtains after the parsing;

Search unit 1026, be used for searching the IP address corresponding with described IMSI or described user name according to described IMSI or described user name at the described IP mapping relations table that sets in advance.

Wherein, described certificate server also comprises:

Second acquisition unit 1027 is used for obtaining the described IP address corresponding with described IMSI or described user name that the unit obtains of searching;

Thesecond receiving element 1028 is used for the accidental validation password that receiving terminal returns.

Wherein, described certificate server also comprises:

Settingunit 102A, for the authentication mode that sets in advance user's name and password, the cell-phone number of described user terminal by name is used for determining user identity, described password is the accidental validation password for authenticating users;

Authentication unit 1029 is used for returning described accidental validation password according to terminal, verifies the legitimacy of described terminal, guarantees user's legal access.

The beneficial effect that the technical scheme of the embodiment of the invention is brought is as follows: by increase IP mapping relations table in the core net authenticating device, realize the unified management of IP address of terminal when accessing by heterogeneous networks, guaranteed the consistency of terminal user ID in heterogeneous networks.

Through the above description of the embodiments, those skilled in the art can be well understood to the present invention and can realize by hardware, also can realize by the mode that software adds necessary general hardware platform.Based on such understanding, technical scheme of the present invention can embody with the form of software product, it (can be CD-ROM that this software product can be stored in a non-volatile memory medium, USB flash disk, portable hard drive etc.) in, comprise some instructions with so that computer equipment (can be personal computer, server, the perhaps network equipment etc.) carry out the described method of each embodiment of the present invention.

It will be appreciated by those skilled in the art that accompanying drawing is the schematic diagram of a preferred embodiment, the unit in the accompanying drawing or flow process might not be that enforcement the present invention is necessary.

It will be appreciated by those skilled in the art that the unit in the system can be distributed in the device of embodiment according to the embodiment description among the embodiment, also can carry out respective change and be arranged in the one or more devices that are different from present embodiment.A unit can be merged in the unit of above-described embodiment, also can further split into a plurality of subelements.

The invention described above embodiment sequence number does not represent the quality of embodiment just to description.

Above embodiment is only non-limiting in order to technical scheme of the present invention to be described, only with reference to preferred embodiment the present invention is had been described in detail.Those of ordinary skill in the art should be appreciated that and can make amendment or be equal to replacement technical scheme of the present invention, and do not break away from the spirit and scope of technical solution of the present invention, all should be encompassed in the middle of the claim scope of the present invention.

Claims (8)

1. the conforming method of terminal user ID in heterogeneous networks is characterized in that, comprising:

The certificate server of core net sets in advance IP mapping relations table, described IP mapping relations table comprises international mobile subscriber identification code IMSI, user name and IP address, and described IMSI and described user name, described IMSI and described IP address are respectively one-to-one relationship;

Described certificate server sends identification request message to terminal, and described identification request message is the request message of terminal access;

The identification response message of described certificate server receiving terminal, described identification response message are the access response message that terminal is returned;

Described certificate server is resolved described identification response message, obtains described IMSI or the described user name of described terminal;

Described certificate server is searched the IP address corresponding with described IMSI or described user name according to described IMSI or described user name in the described IP mapping relations table that sets in advance;

Described certificate server sends to described terminal with described IMSI or the corresponding IP address of described user name.

2. method according to claim 1, it is characterized in that, the method also comprises: described certificate server has set in advance the authentication mode of user's name and password, the cell-phone number of described user terminal by name, be used for determining user identity, described password is for being used for the accidental validation password of authenticating users.

3. method according to claim 2 is characterized in that, the identification response message of described certificate server receiving terminal comprises: when terminal was supported the EAP authentication, described certificate server received the EAP authentication response message of described terminal; When terminal is not supported described EAP authentication, the cell-phone number as authentication response message that described certificate server receiving terminal sends.

4. method according to claim 3, it is characterized in that, after the cell-phone number that described certificate server receiving terminal sends, also comprise: described certificate server sends the accidental validation password of the legitimacy that is used for authentication of users to described terminal, and described terminal is returned described accidental validation password.

5. the conforming system of terminal user ID in heterogeneous networks is characterized in that, comprising:

Certificate server is used for setting in advance IP mapping relations table, and described IP mapping relations table comprises international mobile subscriber identification code IMSI, user name and IP address, and described IMSI and described user name, described IMSI and described IP address are respectively one-to-one relationship; Described certificate server also is used for sending identification request message, described identification request message is the request message of terminal access, the identification response message of receiving terminal, described identification response message is the access response message that terminal is returned, resolve described authentication response message, obtain described IMSI or the described user name of described terminal, and in the described IP mapping relations table that sets in advance, search the IP address corresponding with described IMSI or described user name according to described IMSI or described user name, obtain described IP address, send described IP address to terminal;

Terminal is used for receiving the identification request message that described certificate server sends, and described identification request message is the request message of terminal access, and returns identification response message, and described identification response message is the access response message that described terminal is returned.

6. system according to claim 5 is characterized in that, described certificate server comprises:

Map unit is used for setting up IP mapping relations table, and described IP mapping relations table comprises international mobile subscriber identification code IMSI, user name and IP address, and described IMSI and described user name, described IMSI and described IP address are respectively one-to-one relationship;

Transmitting element is used for sending identification request message to terminal, and described transmitting element also is used for sending the IP address to described terminal;

Receiving element, the identification response message for receiving terminal specifically comprises: when terminal is supported the EAP authentication, receive the EAP authentication response message of described terminal; When terminal is not supported described EAP authentication, the cell-phone number as identification response message that receiving terminal sends;

Resolution unit is used for resolving described identification response message;

Acquiring unit is for described IMSI or the described user name of obtaining the described terminal that obtains after the parsing;

Search the unit, be used for searching the IP address corresponding with described IMSI or described user name according to described IMSI or described user name at the described IP mapping relations table that sets in advance.

7. system according to claim 5 is characterized in that, described certificate server also comprises:

Second acquisition unit is used for obtaining the described IP address corresponding with described IMSI or described user name that the unit obtains of searching;

The second receiving element is used for the accidental validation password that receiving terminal returns.

8. system according to claim 5 is characterized in that, described certificate server also comprises:

Setting unit, for the authentication mode that sets in advance user's name and password, the cell-phone number of described user terminal by name is used for determining user identity, described password is the accidental validation password for authenticating users;

Authentication unit is used for returning described accidental validation password according to terminal, verifies the legitimacy of described terminal.

Images