CN102308622B - Method, device and system for interworking between WiFi network and WiMAX network - Google Patents

Method, device and system for interworking between WiFi network and WiMAX network Download PDF

Info

Publication number
CN102308622B
CN102308622B CN201080001608.6A CN201080001608A CN102308622B CN 102308622 B CN102308622 B CN 102308622B CN 201080001608 A CN201080001608 A CN 201080001608A CN 102308622 B CN102308622 B CN 102308622B
Authority
CN
China
Prior art keywords
user terminal
wifi
wimax
aaa
home agent
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
CN201080001608.6A
Other languages
Chinese (zh)
Other versions
CN102308622A (en
Inventor
熊志伟
倪慧
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Huawei Technologies Co Ltd
Original Assignee
Huawei Technologies Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Huawei Technologies Co Ltd filed Critical Huawei Technologies Co Ltd
Publication of CN102308622A publication Critical patent/CN102308622A/en
Application granted granted Critical
Publication of CN102308622B publication Critical patent/CN102308622B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04WWIRELESS COMMUNICATION NETWORKS
    • H04W36/00Hand-off or reselection arrangements
    • H04W36/0005Control or signalling for completing the hand-off
    • H04W36/0011Control or signalling for completing the hand-off for data sessions of end-to-end connection
    • H04W36/0033Control or signalling for completing the hand-off for data sessions of end-to-end connection with transfer of context information
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04WWIRELESS COMMUNICATION NETWORKS
    • H04W36/00Hand-off or reselection arrangements
    • H04W36/14Reselecting a network or an air interface
    • H04W36/144Reselecting a network or an air interface over a different radio air interface technology
    • H04W36/1446Reselecting a network or an air interface over a different radio air interface technology wherein at least one of the networks is unlicensed

Abstract

The present invention discloses a method, a device and a system for interworking between a WiFi network and a WiMAX network, and relates to the field of communications. By the present invention, a user terminal can keep session continuity when the user terminal hands off between a WiFi network which does not support an Extensible Authentication Protocol (EAP) and a WiMAX network which supports anEAP. The method includes: after a user terminal passes the WiFi authentication, a request message for allocating home address to the user terminal is transmitted; after the user terminal is checked for passing the WiFi authentication, WiMAX obtains a WiMAX side user ID of the user terminal, and allocates the home agent to the user terminal according to the user ID, then the home agent allocates the home address to the user terminal. The present invention is used in the process that a user terminal accesses the WiMAX core network though an EAP non-supported WiFi access network.

Description

The method of WiFi network and WiMAX network interworking, Apparatus and system
Technical field
The present invention relates to the communications field, relate in particular to method, the Apparatus and system of a kind of WiFi network and WiMAX network interworking.
Background technology
Based on IEEE802.11(Institute of Electrical and Electronic Engineers, the WiFi(Wireless Fidelity of wireless access technology IEEE), Wireless Fidelity) network, because its high rate data transmission and disposing easily, at present in the hotel, community, campus and enterprise's extensive use.But owing to there are reasons such as coverage is little, deployment quantity is many, complex management in the access point of WiFi network, the WiFi network is relatively poor relatively to the mobility support of terminal.Equally, WiMAX(Worldwide Interoperability for Microwave Access based on the wireless access technology of IEEE802.16, micro-wave access global inter communication) network, expansion as the WiMAX access technology, have advantages such as high bandwidth, wide covering, can be subjected to paying close attention to widely for the user provides the high-speed data transmission ability, disposed in many countries, area.Mobile WiMAX network has increased the support to terminal mobility, makes portable terminal switch between the different radio access point and can keep business continuance when roaming, thereby satisfy the demand of commercial mobile communication business.
The present WiFi Radio Access Network of disposing, except eating dishes without rice or wine the coupling part the ieee standard definition, network side is reason such as various and standard progress owing to implementation, the network overwhelming majority of having disposed is ununified in the implementation of network side, especially implementation is varied aspect fail safe, add up according to investigations, in the WiFi network of having disposed at present, there is 95% network to use non-EAP(Extensible Authentication Protocol, Extensible Authentication Protocol) authentication mode, as the mode of username and password, and the authentication mode of 5% the WiFi network support EAP of only having an appointment.But used IETF(Internet Engineering Task Force in the present WiMAX network, Internet engineering duty group) Ding Yi EAP authentication mode, therefore user terminal can't be implemented in the WiMAX network of supporting EAP and when not supporting to switch between the WiFi access network of EAP, keep the continuity of user conversation.If the WiFi Access Network that upgrading has been disposed makes its EAP authentication mode of supporting WiMAX, and is for operator, of a high price.
Summary of the invention
Embodiments of the invention provide method, the Apparatus and system of a kind of WiFi network and WiMAX network interworking, when user terminal is switched, can keep the continuity of session between the WiMAX network of the WiFi network of not supporting the EAP authentication mode and support EAP authentication mode.
For achieving the above object, embodiments of the invention adopt following technical scheme:
The method of a kind of WiFi network and WiMAX network interworking comprises:
Micro-wave access global inter communication authentication, authorization and accounting server WiMAX AAA receives the home agent request message that obtains the user terminal hometown-agent-address that interworking function entity WIF sends, and comprises in the described home agent request message that user terminal is in the user ID of Wireless Fidelity WiFi side or in the user ID of WiMAX side;
After the Certificate Authority success of Wireless Fidelity authentication, authorization and accounting server WiFi AAA to described user terminal, described WiMAX AAA in the user ID of WiFi side or in the user ID of WiMAX side, is that described user terminal distributes home agent according to described user terminal;
Described WiMAX AAA is carried at the address of the home agent of described distribution and sends to described WIF in the home agent response message, so that described WIF obtains the home address of described user terminal from described home agent according to the address of described home agent.
The method of a kind of WiFi network and WiMAX network interworking comprises:
After user terminal uses the signatory certificate of WiFi to carry out authentication to WiFi AAA, receive the home address request message that obtains home address that described user terminal sends, comprise in the described home address request message that described user terminal is in the user ID of WiFi side;
Judge whether described user terminal has passed through the authentication of described WiFi AAA, if, then send the home agent request message that obtains the user terminal hometown-agent-address to described WIF, comprise in the described home agent request message that user terminal is in the user ID of WiFi side or in the user ID of WiMAX side, so that described WIF transmits described home agent request message to described WiMAX AAA.。
A kind of WiMAX AAA comprises:
Home agent request message receiving element, be used for to receive the home agent request message that obtains the user terminal hometown-agent-address that interworking function entity WIF sends, comprise in the described home agent request message that user terminal is in the user ID of WiFi side or in the user ID of WiMAX side;
The hometown-agent-address allocation units, be used for after the Certificate Authority success of WiFi AAA to described user terminal, the described user terminal that receives according to described home agent request message receiving element is that described user terminal distributes home agent in the user ID of WiFi side or in the user ID of WiMAX side;
Home agent response message transmitting element is carried at the home agent response message for the address that with described hometown-agent-address allocation units is the home agent of described user terminal distribution and sends to described WIF.
A kind of WiFi Access Network comprises:
Home address request message receiving element, be used for after user terminal uses the signatory certificate of WiFi also to authorize to WiFi AAA execution authentication, receive the home address request message that obtains home address that described user terminal sends, comprise in the described home address request message that WiMAX network identity and described user terminal are in the user ID of WiFi side;
Judging unit is used for judging whether described user terminal has passed through the authentication of described WiFi AAA;
Home agent request message transmitting element, be used for when described judging unit judges that described user terminal has passed through the authentication of described WiFi AAA, send the home agent request message that obtains the user terminal hometown-agent-address to described WIF, comprise in the described home agent request message that user terminal is in the user ID of WiFi side or in the user ID of WiMAX side.
The system of a kind of network and WiMAX network interworking comprises:
Interworking function entity WIF, be used for receiving the home agent request message that obtains the user terminal hometown-agent-address that the WiFi Access Network sends, and described home agent request message sent to WiMAX AAA, comprise user terminal in the described home agent request message in the user ID of WiFi side or in the user ID of WiMAX side;
WiMAX AAA, be used for receiving the described home agent request message that WIF sends, and after WiFi AAA is to the success of the Certificate Authority of described user terminal, be that described user terminal distributes home agent according to described user terminal in the user ID of WiFi side or in the user ID of WiMAX side; The address of the home agent of described distribution is carried at sends to described WIF in the home agent response message;
Described WIF also is used for, and receives the home agent response message that described WiMAX AAA sends, and obtains the home address of described user terminal from described home agent according to the address of described home agent.
After adopting the technical scheme of the embodiment of the invention, when user terminal when not supporting the WiFi network insertion of EAP authentication mode, the user after signatory certificate obtains the mandate of WiFi AAA success identity by WiFi, described user terminal sends the request message that request distributes home address by interworking function entity to WiMAX AAA, WiMAX AAA is according to the user ID of described user terminal in the WiMAX side, be that described user terminal distributes the address of a home agent, and be that described user distributes a home address by this home agent; Because when user terminal passes through to support the WiMAX network insertion of EAP authentication mode, described WiMAX AAA is equally according to the user ID of described user terminal in the WiMAX side, for described user terminal distributes same home address, therefore the intercommunication that has realized not supporting the WiFi network of EAP authentication mode and supported the WiMAX network of EAP authentication mode, when user terminal is switched, can keep the continuity of session between the WiMAX network of the WiFi network of not supporting the EAP authentication mode and support EAP authentication mode.
Description of drawings
In order to be illustrated more clearly in the embodiment of the invention or technical scheme of the prior art, to do to introduce simply to the accompanying drawing of required use in embodiment or the description of the Prior Art below, apparently, accompanying drawing in describing below only is some embodiments of the present invention, for those of ordinary skills, under the prerequisite of not paying creative work, can also obtain other accompanying drawing according to these accompanying drawings.
Fig. 1 is the flow chart of the method for the WiFi network of WiMAX AAA side in the embodiment of the invention 1 and WiMAX network interworking;
Fig. 2 is the flow chart of the method for the WiFi network of interworking function entity side in the embodiment of the invention 1 and WiMAX network interworking;
Fig. 3 is the flow chart of the method for the WiFi network of WiFi Access Network side in the embodiment of the invention 1 and WiMAX network interworking;
Fig. 4 is WiFi network and WiMAX network intercommunication method interaction diagrams in the embodiment of the invention 2;
Fig. 5 is WiFi network and WiMAX network intercommunication method interaction diagrams in the embodiment of the invention 3;
Fig. 6 is WiFi network and WiMAX network intercommunication method interaction diagrams in the embodiment of the invention 4;
Fig. 7 is the composition frame chart of a kind of WiMAX AAA in the embodiment of the invention 5;
Fig. 8 is the composition frame chart of another kind of WiMAX AAA in the embodiment of the invention 5;
Fig. 9 is the composition frame chart of interworking function entity in the embodiment of the invention 5;
Figure 10 is the composition frame chart of a kind of WiFi Access Network in the embodiment of the invention 5;
Figure 11 is the composition frame chart of another kind of WiFi Access Network in the embodiment of the invention 5;
Figure 12 is the composition frame chart of WiFi network and WiMAX network interworking system in the embodiment of the invention 5.
Embodiment
Below in conjunction with the accompanying drawing in the embodiment of the invention, the technical scheme in the embodiment of the invention is clearly and completely described, obviously, described embodiment only is the present invention's part embodiment, rather than whole embodiment.Based on the embodiment among the present invention, those of ordinary skills belong to the scope of protection of the invention not making the every other embodiment that obtains under the creative work prerequisite.
Embodiment 1
The embodiment of the invention provides the method for a kind of WiFi network and WiMAX network interworking, this method is WiMAX AAA(Authentication Authorization Accounting, authentication, authorization and accounting server) method of side, as shown in Figure 1, this method comprises:
101, WiMAX AAA receives interworking function entity (WIF, WiMAX Interworking Function) the home agent request message that obtains the user terminal hometown-agent-address of Fa Songing comprises in the described home agent request message that user terminal is in the user ID of WiFi side or in the user ID of WiMAX side.
102, after WiFi AAA is to the success of the Certificate Authority of described user terminal, described WiMAX AAA in the user ID of WiFi side or in the user ID of WiMAX side, is that described user terminal distributes home agent according to described user terminal.
Wherein, described WiMAX AAA is that described user terminal distributes home agent according to described user terminal in the user ID of WiFi side or in the user ID of WiMAX side, can comprise: if comprise described user terminal in the user ID of WiMAX side in the described home agent request message, be that described user terminal distributes home agent according to described user terminal in the user ID of WiMAX side directly then; If comprise that described user terminal is in the user ID of WiFi side in the described home agent request message, then according to the signatory incidence relation of described user terminal at WiFi network and WiMAX network, obtain described user terminal at the terminal user identification of WiMAX side, and be that described user terminal distributes home agent according to the described user terminal that obtains in the user ID of WiMAX side.
103, described WiMAX AAA is carried at the address of the home agent of described distribution and sends to described WIF in the home agent response message, so that described WIF obtains the home address of described user terminal from described home agent according to the address of described home agent.
The embodiment of the invention also provides the method for a kind of WiFi network and WiMAX network interworking, and this method is the method for WIF side, and as shown in Figure 2, this method comprises:
201, WIF receives the home agent request message that obtains the user terminal hometown-agent-address that the WiFi Access Network sends, and described home agent request message sent to WiMAX AAA, comprise user terminal in the described home agent request message in the user ID of WiFi side or in the user ID of WiMAX side.
202, described WIF receives the home agent response message that described WiMAX AAA sends, and comprising described WiMAX AAA in the described home agent response message is the address of the home agent of described terminal use distribution at user ID or the described user terminal of WiFi side in the user ID of WiMAX side according to described user terminal.
203, described WIF obtains the home address of described user terminal from described home agent according to the address of described home agent.
Wherein, described WIF obtains the home address of described user terminal from described home agent according to the address of described home agent, can comprise: described WIF is according to the address of described home agent, send the MIP login request message that is used for mobile IP registration to described home agent, and receive the MIP registration reply message that described home agent sends, comprise in the described MIP registration reply message that described home agent is the home address that described user terminal distributes.
The embodiment of the invention also provides the method for a kind of WiFi network and WiMAX network interworking, and this method is WiFi AN(Access Network, Access Network) method of side, as shown in Figure 3, this method comprises:
301, after user terminal uses the signatory certificate of WiFi to carry out authentication to WiFi AAA, receive the home address request message that obtains home address that described user terminal sends, comprise in the described home address request message that described user terminal is in the user ID of WiFi side.
302, judge whether described user terminal has passed through the authentication of described WiFi AAA, if, then send the home agent request message that obtains the user terminal hometown-agent-address to described WIF, comprise in the described home agent request message that user terminal is in the user ID of WiFi side or in the user ID of WiMAX side, so that described WIF transmits described home agent request message to described WiMAX AAA.
In the embodiment of the invention, when user terminal when not supporting the WiFi network insertion of EAP authentication mode, the user after signatory certificate obtains WiFi AAA and carries out the authentication success Certificate Authority by WiFi, described user terminal sends the request message that request distributes home address by interworking function entity to WiMAX AAA, WiMAX AAA is according to the user ID of described user terminal in the WiMAX side, be that described user terminal distributes the address of a home agent, and be that described user distributes a home address by this home agent; Because when user terminal passes through to support the WiMAX network insertion of EAP authentication mode, described WiMAX AAA is equally according to the user ID of described user terminal in the WiMAX side, for described user terminal distributes same home address, therefore the intercommunication that has realized not supporting the WiFi network of EAP authentication mode and supported the WiMAX network of EAP authentication mode, when user terminal is switched, can keep the continuity of session between the WiMAX network of the WiFi network of not supporting the EAP authentication mode and support EAP authentication mode.
Embodiment 2
The embodiment of the invention provides the method for a kind of WiFi network and WiMAX network interworking, and as shown in Figure 4, this method comprises:
401, user terminal and WiFi Access Network (WiFi Access Network, WiFi AN) are set up contact.When user terminal networks by the WiFi network, at first need user terminal and WiFi AN to set up and contact.
402, described user terminal and WiFi AN set up contact after, described user terminal sends the authentication request message by described WiFi AN to WiFi AAA, the signatory certificate of WiFi that comprises described user terminal in the described authentication request message is so that described WiFi AAA is according to the authentication of the signatory certificate realization of described WiFi to described user terminal.After WiFi AAA is successful to described user end certification according to the signatory certificate of described WiFi, is that described user terminal distributes an authorization token, and described authorization token is sent to described user terminal.
Wherein, described authorization token is sent to described user terminal and can send to described user terminal by the authentication request response; Also can described authorization token be sent to described user terminal by newly-built a piece of news, shown in step 1e among Fig. 4; Can also described authorization token be sent to described user terminal by other information, the embodiment of the invention does not limit this.Described authorization token is that WiFi AAA distributes to described user terminal, WiFi AAA can judge whether this user terminal has passed through the authentication of WiFi network according to user ID and this token of WiFi side, it can be an encrypted secret key, also can be a random number.
Alternatively shown in 1c, the 1d of dotted line among Fig. 4, behind described subscriber terminal authority authentication success, WiFi AAA can be notified to WiMAX AAA in the authenticating result of WiFi network by notification message with user terminal, comprise in the described notification message that described user terminal is in the user ID of WiFi side, after described WiMAX AAA received described notification message, echo reply was given WiFi AAA.
Further, if signatory incidence relation is arranged in the WiFi network, then can comprise the signatory incidence relation information of described user terminal and the authorization token information that WiFi AAA distributes to terminal in the notification message; If not signatory incidence relation then can comprise the authorization token information that terminal is distributed to terminal at user totem information and the WiFi AAA of WiFi side in the WiFi network in the notification message.
403, user terminal sends the home address request message that obtains described user terminal home address by behind the WiFi Certificate Authority to described WiFi AN, comprises in the described home address request message that access sign and WiFi AAA distribute to the authorization token of terminal.Described home address request message can for but be not limited to DHCP(Dynamic Host Configuration Protocol, DHCP) request message.
Wherein, described access sign comprises user terminal at the user totem information of WiFi side and will insert WiMAX network of network identification information that it can be a parameter of the combination of two kinds of information, also can be two independent parameter.
404, after WiFi AN received described home address request message, the WiMAX network identification information according in the described access sign was transmitted to WIF with described home address request message.
Wherein, described WiMAX network identification information is that WiFi AN can be forwarded to the identification information of correct WIF with the home address request message according to this identification information, and it can be the domain name of a WiMAX network, also can be the identifier of a WiMAX network.
405, after WIF receives described home address request message, transmission is obtained the home agent request message of hometown-agent-address of user terminal to WiMAX AAA, request distributes home agent for described user terminal, the authorization token that described address obtains the user ID of carrying the WiFi side in the message and WiFi AAA distributes to terminal.
406, described WiMAX AAA receives the described home agent request message that described WIF sends, and detect the whether authentication by WiFi AAA of described user terminal, if described user terminal by the authentication of WiFi AAA, then obtains described user terminal in the user ID of WiMAX side according to described user terminal in the user ID of WiFi side; And be that described user terminal distributes home agent according to the described described user terminal that obtains in the user ID of WiMAX side.Wherein, described WiMAX AAA is that described user terminal distributes in the process of home agent, if this user terminal is the new user terminal that inserts, then give home agent of its new distribution, if the switching of user terminal then will distribute a home agent of distributing to described user terminal originally for described user terminal.
Wherein, whether the described user terminal of described detection can adopt following method by the authentication of WiFi AAA, specifically comprise: if whether detecting described user terminal by before the authentication of WiFi AAA, WiMAX AAA has obtained described user terminal by the authorization token of authentication from WiFi AAA, then inquires about the authentication whether described user terminal has passed through WiFi AAA according to the described authorization token that obtains from WiFi AAA; If whether detecting described user terminal by before the authentication of WiFi AAA, WiMAX AAA does not obtain the described user terminal authorization token by authentication from WiFi AAA, then send the authentication inquiry request message to described WiFi AAA, comprise in the described authentication inquiry request message that described user terminal is at user ID and the authorization token of WiFi side, in order to whether inquire about described user terminal by the authentication of WiFi AAA by described WiFi AAA according to the described authorization token that obtains from WiFi AAA, described WiMAX AAA obtains the testing result of described WiFi AAA.Wherein, describedly inquire about the whether authentication by WiFi AAA of described user terminal according to the described authorization token that obtains from WiFi AAA, be specifically as follows, the authorization token that comprises in the described home agent request message and the authorization token that obtains from WiFi AAA are compared, if both unanimities show that then described user terminal has passed through the authentication of WiFi AAA.
Wherein, describedly obtain described user terminal according to user terminal in the user ID of WiFi side and comprise in the user ID of WiMAX side: according to the signatory incidence relation of described user terminal at WiFi network and WiMAX network, and described user terminal obtains described user terminal in the user ID of WiMAX side in the user ID of WiFi side.Because described signatory incidence relation can be stored in WiMAX AAA, also can be stored in WiFi AAA, therefore according to the signatory incidence relation of described user terminal at WiFi network and WiMAX network, and described user terminal is in the user ID of WiFi side, obtain described user terminal before the user ID of WiMAX side, need obtain described signatory incidence relation earlier; Obtaining described signatory incidence relation specifically comprises:
If store signatory incidence relation among the described WiMAX AAA, then directly from described WiMAX AAA self, extract described signatory incidence relation, the signatory incidence relation of storing among the wherein said WiMAX AAA, it can be directly storage, can obtain from described WiFi AAA, the embodiment of the invention does not limit this yet; If do not store signatory incidence relation among the described WiMAX AAA, then described WiMAX AAA sends the authentication query requests to described WiFi AAA and requires to obtain described signatory incidence relation.
407, the address of the described WiMAX AAA home agent that will distribute for described user terminal is carried at and sends to described WIF in the home agent response message.
408, WIF initiates to be used for the MIP registration of mobile IP registration to described home agent, and obtains the home address of described user terminal.Be after WIF obtains the hometown-agent-address of described user terminal, address according to described home agent sends the MIP login request message that is used for mobile IP registration to described home agent, described home agent receives after the MIP login request message to described user terminal distributes home address, and will be carried in the described MIP registration reply message for the home address that described user terminal distributes and send to described WIF.
Wherein, if the process that described user terminal inserts is the process of switching but not inserts for the first time, then described home agent can be according to the user ID of described user terminal in the WiMAX side, the home address that uses when distributing a described user terminal to insert for the first time for described user terminal.
409, after obtaining the home address of described user terminal, i.e. after MIP registration was finished, the home address that WIF will distribute to terminal by dhcp message sent to portable terminal.
In the embodiment of the invention, when user terminal when not supporting the WiFi network insertion of EAP authentication mode, the user after signatory certificate obtains WiFi AAA successful execution Certificate Authority by WiFi, described user terminal sends the request message that request distributes home address by interworking function entity to WiMAX AAA, WiMAX AAA is according to the user ID of described user terminal in the WiMAX side, be that described user terminal distributes the address of a home agent, and be that described user distributes a home address by this home agent; Because when user terminal passes through to support the WiMAX network insertion of EAP authentication mode, described WiMAX AAA is equally according to the user ID of described user terminal in the WiMAX side, for described user terminal distributes same home address, therefore the intercommunication that has realized not supporting the WiFi network of EAP authentication mode and supported the WiMAX network of EAP authentication mode, when user terminal is switched, can keep the continuity of session between the WiMAX network of the WiFi network of not supporting the EAP authentication mode and support EAP authentication mode.
Embodiment 3
The embodiment of the invention provides the method for a kind of WiFi network and WiMAX network interworking, and as shown in Figure 5, this method comprises:
501, user terminal and WiFi Access Network (WiFi Access Network, WiFi AN) are set up contact.When user terminal networks by the WiFi network, at first need user terminal and WiFi AN to set up and contact.
502, described user terminal and WiFi AN set up contact after, described user terminal sends the authentication request message by described WiFi AN to WiFi AAA, the signatory certificate of WiFi that comprises described user terminal in the described authentication request message is so that described WiFi AAA is according to the authentication of the signatory certificate realization of described WiFi to described user terminal.After WiFi AAA is successful to described user end certification according to the signatory certificate of described WiFi, described user terminal is sent to described user terminal in the user ID of WiFi side.
Optionally, behind described subscriber terminal authority authentication success, if signatory incidence relation is arranged in the WiFi network, then WiFi AAA is with the result of described user end certification, and described signatory incidence relation is notified to WiMAX AAA, shown in the step 1c among Fig. 5,1d.
503, described user terminal sends the home address request message that obtains described user terminal home address by after the WiFi aaa authentication mandate to described WiFi AN, comprises in the described home address request message inserting sign.Described home address request message can for but be not limited to DHCP(Dynamic Host Configuration Protocol, DHCP) request message.Described access sign comprises user terminal at the user totem information of WiFi side and will insert WiMAX network of network identification information that it can be a parameter of the combination of two kinds of information, also can be two independent parameter.
504, after described WiFi AN receives described home address request message, whether check described user terminal by the authentication of WiFi AAA, if detect described user terminal by the authentication of WiFi AAA, then execution in step 505.
Wherein, described WiFi AN checks whether described user terminal has passed through the authentication of WiFi AAA, can identify in the WiFi side by detecting the described user who comprises in the described home address request message, after passing through the authentication of WiFi AAA at described user terminal, the described user who is sent to described WiFi AN by described WiFi AAA is WiFi side sign consistent realization the whether, if the described user who comprises in the described home address request message identifies in the WiFi side, with consistent in WiFi side sign to the described user that described WiFi AN sends by described WiFi AAA, show that then described user terminal has passed through the authentication of WiFi AAA.
505, described WiFi AN sends to WIF according to the WiMAX network identification information in the access sign of carrying in the home address request message with described home address request message, carries the user ID of WiFi side in the described home address request message.
506, after described WIF receives described home address request message, send the home agent request message that obtains the user terminal hometown-agent-address to described WiMAX AAA, carry user terminal in the user ID of WiFi side in the described home agent request message.
507, after described WiMAX AAA receives described home agent request message, obtain described user terminal in the user ID of WiMAX side according to described user terminal in the user ID of WiFi side; And according to the user ID of the described user terminal that obtains in the WiMAX side, for described user terminal distributes home agent.
Wherein, described WiMAX AAA is that described user terminal distributes in the process of home agent, if this user terminal is the new user terminal that inserts, then give home agent of its new distribution, if the switching of user terminal, side will be distributed a home agent of distributing to described user terminal originally for described user terminal.
Wherein, describedly obtain described user terminal according to user terminal in the user ID of WiFi side and comprise in the user ID of WiMAX side: according to the signatory incidence relation of described user terminal at WiFi network and WiMAX network, and described user terminal obtains described user terminal in the user ID of WiMAX side in the user ID of WiFi side.Because described signatory incidence relation can be stored in WiMAX AAA, also can be stored in WiFi AAA, therefore according to the signatory incidence relation of described user terminal at WiFi network and WiMAX network, and described user terminal is in the user ID of WiFi side, obtain described user terminal before the user ID of WiMAX side, need obtain described signatory incidence relation earlier; Obtaining described signatory incidence relation specifically comprises:
If store signatory incidence relation among the described WiMAX AAA, then directly from described WiMAX AAA, extract described signatory incidence relation, the signatory incidence relation of storing among the wherein said WiMAX AAA, it can be directly storage, can obtain from described WiFi AAA, the embodiment of the invention does not limit this yet; If do not store signatory incidence relation among the described WiMAX AAA, then described WiMAX AAA sends the authentication query requests to described WiFi AAA and requires to obtain described signatory incidence relation.
508, the address of the described WiMAX AAA home agent that will distribute for described user terminal is carried at and sends to described WIF in the home agent response message.
509, WIF initiates to register and obtain for the MIP of mobile IP registration the home address of described user terminal to described home agent.Be after WIF obtains the hometown-agent-address of described user terminal, address according to described home agent sends the MIP login request message that is used for mobile IP registration to described home agent, described home agent receives after the MIP login request message to described user terminal distributes home address, and will be carried at for the home address that described user terminal distributes in the MIP registration respective response message and send to described WIF.
Wherein, if the process that described user terminal inserts is the process of switching but not inserts for the first time, then described home agent can be according to the user ID of described user terminal in the WiMAX side, the home address that uses when distributing a described user terminal to insert for the first time for described user terminal.
510, after obtaining the home address of described user terminal, i.e. after MIP registration was finished, the home address that WIF will distribute to terminal by dhcp message sent to portable terminal.
In the embodiment of the invention, when user terminal when not supporting the WiFi network insertion of EAP authentication mode, the user after signatory certificate obtains the mandate of WiFi AAA success identity by WiFi; Behind authentication success, described user terminal sends the request message that request distributes home address by interworking function entity to WiMAX AAA, WiMAX AAA is according to the user ID of described user terminal in the WiMAX side, be that described user terminal distributes a hometown-agent-address, and be that described user distributes a home address by this home agent; Because when user terminal passes through to support the WiMAX network insertion of EAP authentication mode, described WiMAX AAA is equally according to the user ID of described user terminal in the WiMAX side, for described user terminal distributes same home address, therefore the intercommunication that has realized not supporting the WiFi network of EAP authentication mode and supported the WiMAX network of EAP authentication mode, when user terminal is switched, can keep the continuity of session between the WiMAX network of the WiFi network of not supporting the EAP authentication mode and support EAP authentication mode.
And, in the embodiment of the invention, before WiFi AN sends the home address request message to WIF, WiFi AN detects the authentication whether user terminal that sends the home address request message has passed through WiFi AAA, after user terminal passes through the authentication of WiFi AAA, send the home address request message to described WIF, WiFi AAA and WiMAX AAA need not use token mechanism to prevent the user terminal personation, are that user terminal distributes the process of home address to oversimplify thereby make the WiMAX network.
Embodiment 4
The embodiment of the invention provides the method for a kind of WiFi network and WiMAX network interworking, and as shown in Figure 6, this method comprises:
601, user terminal and WiFi Access Network (WiFi Access Network, WiFi AN) are set up contact.When user terminal networks by the WiFi network, at first need user terminal and WiFi AN to set up and contact.
602, described user terminal and WiFi AN set up contact after, described user terminal sends the authentication request message by described WiFi AN to WiFi AAA, the signatory certificate of WiFi that comprises described user terminal in the described authentication request message is so that described WiFi AAA is according to the authentication of the signatory certificate realization of described WiFi to described user terminal.WiFi AAA according to the signatory certificate of described WiFi to described user end certification success after, the result by WiFi AAA authentication sends to described user terminal with described user terminal.
And, after described user terminal passes through WiFi AAA authentication, WiFi AAA obtains signatory incidence relation, and described signatory incidence relation sent to WiFi AN, shown in the step 1e among Fig. 6, so that WiFi AN obtains described user terminal in the user ID of WiMAX side according to described signatory incidence relation.Because described signatory incidence relation can be stored in WiMAX AAA, also can be stored in WiFi AAA, therefore if store signatory incidence relation among the described WiFi AAA, then directly from described WiFi AAA, extract described signatory incidence relation; If do not store signatory incidence relation among the described WiFi AAA, then described WiFi AAA requires to obtain described signatory incidence relation to described WiMAX AAA transmission authentication query requests, specifically shown in the step 1c among Fig. 6,1d.
603, described user terminal is by after the WiFi aaa authentication mandate, send the home address request message that obtains described user terminal home address to described WiFi AN, described home address request message carries the WiMAX network identification information, carries the user totem information of WiMAX side alternatively.
604, after WiFi AN receives home address request message breath, whether check this user by the authentication of WiFi AAA, if detect described user terminal by the authentication of WiFi AAA, then execution in step 605.
Wherein, described WiFi AN checks whether described user terminal has passed through the authentication of WiFi AAA, can identify in the WiFi side by detecting the described user who comprises in the described home address request message, after passing through the authentication of WiFi AAA at described user terminal, the described user who is sent to described WiFi AN by described WiFi AAA is WiFi side sign consistent realization the whether, if the described user who comprises in the described home address request message identifies in the WiFi side, with consistent in WiFi side sign to the described user that described WiFi AN sends by described WiFi AAA, show that then described user terminal has passed through the authentication of WiFi AAA.
605, described WiFi AN obtains described user terminal in the user ID of WiMAX side according to the described signatory incidence relation that receives in step 602.
606, described WiFi AN sends the home address request message that obtains the user terminal home address to described WIF, comprises in the described home address request message that described user terminal is in the user ID of WiMAX side.
607, after described WIF receives described home address request message, home agent request message to described WiMAX AAA transmission acquisition request user terminal hometown-agent-address carries user terminal in the user ID of WiMAX side in the described home agent request message.
608, after described WiMAX AAA received described home agent request message, the described user terminal that obtains according to described address was that described user terminal distributes home agent in the user ID of WiMAX side.Wherein, described WiMAX AAA is that described user terminal distributes in the process of home agent, if this user terminal is the new user terminal that inserts, then give home agent of its new distribution, if the switching of user terminal, side will be distributed a home agent of distributing to described user terminal originally for described user terminal.
609, the address of the described WiMAX AAA home agent that will distribute for described user terminal is carried at and sends to described WIF in the home agent response message.
610, WIF initiates to register and obtain for the MIP of mobile IP registration the home address of described user terminal to described home agent.Be after WIF obtains the hometown-agent-address of described user terminal, address according to described home agent sends the MIP login request message that is used for mobile IP registration to described home agent, described home agent receives after the MIP login request message to described user terminal distributes home address, and will be carried at for the home address that described user terminal distributes and send to described WIF in the MIP registration reply message.
Wherein, if the process that described user terminal inserts is the process of switching but not inserts for the first time, then described home agent can be according to the user ID of described user terminal in the WiMAX side, the home address that uses when distributing a described user terminal to insert for the first time for described user terminal.
611, after obtaining the home address of described user terminal, i.e. after MIP registration was finished, the home address that WIF will distribute to terminal by dhcp message sent to user terminal.
In the embodiment of the invention, when user terminal when not supporting the WiFi network insertion of EAP authentication mode, the user after signatory certificate obtains the mandate of WiFi AAA success identity by WiFi, described user terminal sends the request message that request distributes home address by interworking function entity to WiMAX AAA, WiMAX AAA is according to the user ID of described user terminal in the WiMAX side, be that described user terminal distributes the address of a home agent, and be that described user distributes a home address by this home agent; Because when user terminal passes through to support the WiMAX network insertion of EAP authentication mode, described WiMAX AAA is equally according to the user ID of described user terminal in the WiMAX side, for described user terminal distributes same home address, therefore the intercommunication that has realized not supporting the WiFi network of EAP authentication mode and supported the WiMAX network of EAP authentication mode, when user terminal is switched, can keep the continuity of session between the WiMAX network of the WiFi network of not supporting the EAP authentication mode and support EAP authentication mode.
And, in the embodiment of the invention, before the home address request message that obtains the user terminal home address that WiFi AN will receive sends to WIF, detect the authentication whether user terminal that sends the home address request message has passed through WiFi AAA, behind the authentication that detects by WiFi AAA, according to the signatory incidence relation that obtains, obtain user terminal in the user ID of WiMAX side and send to WiMAX AAA, when making described WiMAX AAA receive the request of obtaining the user terminal hometown-agent-address, directly the user ID according to described WiMAX side is that user terminal distributes corresponding home agent, avoided described WiMAX AAA and to obtain the user ID of WiMAX side to the authentication of the user terminal that distributes home agent, making WiMAX AAA is that user terminal distributes the process of home address further to oversimplify.
Embodiment 5
The embodiment of the invention provides a kind of WiMAX AAA, and as shown in Figure 7, this WiMAX AAA comprises: home agent request message receiving element 71, hometown-agent-address allocation units 72 and home agent response message transmitting element 73.
Home agent request message receiving element 71, be used for to receive the home agent request message that obtains the user terminal hometown-agent-address that interworking function entity WIF sends, comprise in the described home agent request message that user terminal is in the user ID of WiFi side or in the user ID of WiMAX side.
Hometown-agent-address allocation units 72, be used for the described user terminal that receives according to described home agent request message receiving element 71 in the user ID of WiFi side or in the user ID of WiMAX side, for described user terminal distributes home agent, so that described WIF obtains the home address of described user terminal from described home agent according to the address of described home agent.
Home agent response message transmitting element 73 is used for that the address that described hometown-agent-address allocation units 72 are the home agent of described user terminal distribution is carried at the home agent response message and sends to described WIF.
As shown in Figure 8, described hometown-agent-address allocation units 72 comprise: hometown-agent-address distribution module 721 and identifier acquisition module 722.
Hometown-agent-address distribution module 721, being used for when the home agent request message that described home agent request message receiving element 71 receives comprises the user ID of described user terminal in the WiMAX side, is that described user terminal distributes home agent according to described user terminal in the user ID of WiMAX side;
Identifier acquisition module 722, be used for when the described home agent request message that described home agent request message receiving element 71 receives comprises the user ID of described user terminal in the WiFi side, according to the signatory incidence relation of described user terminal at WiFi network and WiMAX network, obtain described user terminal at the terminal user identification of WiMAX side; Described hometown-agent-address distribution module 721 also is used for, and the user terminal that obtains according to described identifier acquisition module 722 is that described user terminal distributes home agent in the user ID of WiMAX side.
As shown in Figure 8, this WiMAX AAA also comprises: signatory incidence relation acquiring unit 74 and authentication detecting unit 75
Signatory incidence relation acquiring unit 74, be used in described identifier acquisition module 722 according to the signatory incidence relation of user terminal at WiFi network and WiMAX network, obtain described user terminal before the user ID of WiMAX side, obtain user terminal at the signatory incidence relation of WiFi network and WiMAX network.Wherein, because described signatory incidence relation can be stored in WiMAX AAA, also can be stored in WiFi AAA, therefore described signatory incidence relation acquiring unit 74 is when obtaining described signatory incidence relation, can comprise: as described signatory incidence relation storage WiMAX AAA, then described signatory incidence relation acquiring unit 74 is used for obtaining the described signatory incidence relation of described WiMAX AAA self storage; When described about incidence relation is stored in WiFi AAA, after WiFi AAA was to described subscriber terminal authority authentication success, described signatory incidence relation acquiring unit 74 was used for receiving that described WiFi AAA sends to described subscriber terminal authority authentication result and described signatory incidence relation; Described signatory incidence relation acquiring unit 74 also is used for sending the authentication query requests to described WiFi AAA, and receives the described signatory incidence relation that described WiFi AAA returns according to described authentication query requests.
Authentication detecting unit 75, be used for when the described home agent request message that described home agent request message receiving element 71 receives comprises the authorization token of user terminal at the user ID of WiFi side and user terminal, described authentication detecting unit 75 detects the whether authentication by WiFi AAA of described user terminal according to described user terminal at the authorization token of the user ID of WiFi side and described user terminal; Wherein, when whether the described user terminal of described authentication detecting unit 75 detections has passed through the authentication of WiFi AAA, if whether detecting described user terminal by before the authentication of WiFi AAA, WiMAX AAA has obtained described user terminal by the authorization token of authentication from WiFi AAA, and then described detecting unit 75 is inquired about the authentication whether described user terminal has passed through WiFi AAA according to the described authorization token that obtains from WiFi AAA; If whether detecting described user terminal by before the authentication of WiFi AAA, WiMAX AAA does not obtain the described user terminal authorization token by authentication from WiFi AAA, then described detecting unit 75 sends the authentication inquiry request message to described WiFi AAA, comprise described user terminal in the described authentication inquiry request message at user ID and the authorization token of WiFi side, in order to inquire about the authentication whether described user terminal has passed through WiFi AAA by described WiFi AAA according to the described authorization token that obtains from WiFi AAA.Wherein, describedly inquire about the whether authentication by WiFi AAA of described user terminal according to the described authorization token that obtains from WiFi AAA, be specifically as follows, the authorization token that comprises in the described home agent request message and the authorization token that obtains from WiFi AAA are compared, if both unanimities show that then described user terminal has passed through the authentication of WiFi AAA.
The embodiment of the invention also provides a kind of WIF, and as shown in Figure 9, this WIF comprises: first receiving element 81, first transmitting element 82, second receiving element 83 and acquiring unit 84.
First receiving element 81 be used for to receive the home agent request message that obtains the user terminal hometown-agent-address that the WiFi Access Network sends, and comprises user terminal in the described home agent request message in the user ID of WiFi side or in the user ID of WiMAX side.
First transmitting element 82 is used for described home agent request message is sent to WiMAX AAA.
Second receiving element 83, be used for receiving the home agent response message that described WiMAX AAA sends, comprising described WiMAX AAA in the described home agent response message is the address of the home agent of described terminal use's distribution according to described user terminal in the user ID of WiMAX side.
Acquiring unit 84, the address that is used for the described home agent that receives according to described second receiving element 83 obtains the home address of described user terminal from described home agent.Wherein, the address of the described home agent that described acquiring unit 84 receives according to described second receiving element 83 from described home agent obtain described user terminal home address can for: the address according to described home agent sends the MIP login request message that is used for mobile IP registration to described home agent, and receives in the described MIP registration reply message of MIP registration reply message that described home agent sends and comprise that described home agent is the home address that described user terminal distributes.
Further, after obtaining the home address of described user terminal, described home address is sent to described user terminal.
The embodiment of the invention also provides a kind of WiFi Access Network, and as shown in figure 10, this WiFi Access Network comprises: home address request message receiving element 91, judging unit 92 and home agent request message transmitting element 93.
Home address request message receiving element 91, be used for after user terminal uses the signatory certificate of WiFi also to authorize to WiFi AAA execution authentication, receive the home address request message that obtains home address that described user terminal sends, comprise in the described home address request message that WiMAX network identity and described user terminal are in the user ID of WiFi side.
Judging unit 92 is used for judging whether described user terminal has passed through the authentication of described WiFi AAA; Wherein, judging unit 92 judges whether described user terminal has passed through the authentication of WiFi AAA, can identify in the WiFi side by detecting the described user who comprises in the described home address request message, after passing through the authentication of WiFi AAA at described user terminal, the described user who is sent to described WiFi AN by described WiFi AAA is WiFi side sign consistent realization the whether, identify in the WiFi side if be checked through the described user who comprises in the described home address request message, with consistent in WiFi side sign to the described user that described WiFi AN sends by described WiFi AAA, show that then described user terminal has passed through the authentication of WiFi AAA.
Home agent request message transmitting element 93, be used for when described judging unit 92 judges that described user terminal has passed through the authentication of described WiFi AAA, send the home agent request message that obtains the user terminal hometown-agent-address to described WIF, so that described WIF transmits described home agent request message to described WiMAX AAA, comprise in the described home agent request message that user terminal is in the user ID of WiFi side or in the user ID of WiMAX side.
Further, described home agent request message transmitting element 93 also is used for, comprise that in the described home address request message that local address request receiving element 91 receives described user terminal is when the authorization token of the user ID of WiFi side and described user terminal, described user terminal is carried in the described home agent request message at the authorization token of the user ID of WiFi side and described user terminal sends to described WIF, so that described WIF transmits described home agent request message to described WiMAX AAA.
Further, as shown in figure 11, this WiFi Access Network also comprises signatory incidence relation detecting unit 94 and sign acquiring unit 95.
Signatory incidence relation detecting unit 94, be used for judging that at described judging unit 92 described user terminal by after the authentication of described WiFi AAA, detects described WiFi Access Network and self whether stores described user terminal at the signatory incidence relation of WiFi network and WiMAX network.
Sign acquiring unit 95, be used for when described signatory incidence relation detecting unit 94 detects described WiFi Access Network and has described signatory incidence relation, user ID according to described WiFi side, and described user terminal obtains described user terminal in the user ID of WiMAX side at the signatory incidence relation of WiFi network and WiMAX network.Described home agent request message transmitting element 93 is used for described user terminal that described sign acquiring unit 95 is obtained and is carried at the home agent request message that obtains the user terminal hometown-agent-address in the user ID of WiMAX side and sends to WIF, so that described WIF transmits described home agent request message to described WiMAX AAA.
Described home agent request message transmitting element 93 also is used for, detect 94 when not having described signatory incidence relation in the described WiFi Access Network at described signatory incidence relation detecting unit, described user terminal is carried in the home agent request message that obtains described user terminal hometown-agent-address in the user ID of WiFi side sends to WIF, so that described WIF transmits described home agent request message to described WiMAX AAA.
The embodiment of the invention also provides the system of a kind of WiFi network and WiMAX network interworking, and as shown in figure 12, this system comprises: interworking function entity 1001 and WiMAX AAA1002.
Interworking function entity WIF1001, be used for receiving the home agent request message that obtains the user terminal hometown-agent-address that the WiFi Access Network sends, and described home agent request message sent to WiMAX AAA1002, comprise user terminal in the described home agent request message in the user ID of WiFi side or in the user ID of WiMAX side.
WiMAX AAA1002, be used for receiving the described home agent request message that WIF1001 sends, and after WiFi AAA is to the success of the Certificate Authority of described user terminal, be that described user terminal distributes home agent according to described user terminal in the user ID of WiFi side or in the user ID of WiMAX side; The address of the home agent of described distribution is carried at sends to described WIF1001 in the home agent response message.
Described WIF1001 also is used for, and receives the home agent response message that described WiMAX AAA1002 sends, and obtains the home address of described user terminal from described home agent according to the address of described home agent.
In the embodiment of the invention, when user terminal when not supporting the WiFi network insertion of EAP authentication mode, the user after signatory certificate obtains the mandate of WiFi AAA success identity by WiFi, described user terminal sends the request message that request distributes home address by interworking function entity to WiMAX AAA, WiMAX AAA is according to the user ID of described user terminal in the WiMAX side, be that described user terminal distributes the address of a home agent, and be that described user distributes a home address by this home agent; Because when user terminal passes through to support the WiMAX network insertion of EAP authentication mode, described WiMAX AAA is equally according to the user ID of described user terminal in the WiMAX side, for described user terminal distributes same home address, therefore the intercommunication that has realized not supporting the WiFi network of EAP authentication mode and supported the WiMAX network of EAP authentication mode, when user terminal is switched, can keep the continuity of session between the WiMAX network of the WiFi network of not supporting the EAP authentication mode and support EAP authentication mode; And the intercommunication of above-mentioned two kinds of networks realizes by distribute a home address for user terminal, does not increase the extra cost of operator.
And, in the embodiment of the invention, before WiFi AN sends the home address request message to WIF, WiFi AN detects the authentication whether user terminal that sends the home address request message has passed through WiFi AAA, after user terminal passes through the authentication of WiFi AAA, send the home address request message to described WIF, WiFi AAA and WiMAX AAA need not use token mechanism to prevent the user terminal personation, are that user terminal distributes the process of home address to oversimplify thereby make the WiMAX network.
Further, in the embodiment of the invention, detect user terminal by behind the authentication of WiFi AAA at WiFi AN, according to the signatory incidence relation that obtains, obtain user terminal in the user ID of WiMAX side and send to WiMAX AAA, when making described WiMAX AAA receive the request of obtaining the user terminal hometown-agent-address, directly the user ID according to described WiMAX side is that user terminal distributes corresponding home agent, avoided described WiMAX AAA need obtain the user ID of WiMAX side to the user terminal that distributes home agent, making WiMAX AAA is that user terminal distributes the process of home address further to oversimplify.
Through the above description of the embodiments, the those skilled in the art can be well understood to the present invention and can realize by the mode that software adds essential common hardware, can certainly pass through hardware, but the former is better execution mode under a lot of situation.Based on such understanding, the part that technical scheme of the present invention contributes to prior art in essence in other words can embody with the form of software product, this computer software product is stored in the storage medium that can read, floppy disk as computer, hard disk or CD etc., comprise some instructions with so that computer equipment (can be personal computer, server, the perhaps network equipment etc.) carry out the described method of each embodiment of the present invention.
The above; only be the specific embodiment of the present invention, but protection scope of the present invention is not limited thereto, anyly is familiar with those skilled in the art in the technical scope that the present invention discloses; can expect easily changing or replacing, all should be encompassed within protection scope of the present invention.Therefore, protection scope of the present invention should be as the criterion with the protection range of described claim.

Claims (20)

1. the method for a WiFi network and WiMAX network interworking is characterized in that, comprising:
Micro-wave access global inter communication authentication, authorization and accounting server WiMAX AAA receives the home agent request message that obtains the user terminal hometown-agent-address that interworking function entity WIF sends, and comprises in the described home agent request message that user terminal is in the user ID of Wireless Fidelity WiFi side or in the user ID of WiMAX side;
After the Certificate Authority success of Wireless Fidelity authentication, authorization and accounting server WiFi AAA to described user terminal, described WiMAX AAA in the user ID of WiFi side or in the user ID of WiMAX side, is that described user terminal distributes home agent according to described user terminal;
Described WiMAX AAA is carried at the address of the home agent of described distribution and sends to described WIF in the home agent response message, so that described WIF obtains the home address of described user terminal from described home agent according to the address of described home agent.
2. method according to claim 1 is characterized in that, described is that described user terminal distributes home agent to comprise according to described user terminal in the user ID of WiFi side or in the user ID of WiMAX side:
If comprise described user terminal in the user ID of WiMAX side in the described home agent request message, be that described user terminal distributes home agent according to described user terminal in the user ID of WiMAX side directly then;
If comprise that described user terminal is in the user ID of WiFi side in the described home agent request message, then according to the signatory incidence relation of described user terminal at WiFi network and WiMAX network, obtain described user terminal in the user ID of WiMAX side, and be that described user terminal distributes home agent according to the described user terminal that obtains in the user ID of WiMAX side.
3. method according to claim 2 is characterized in that, is obtaining described user terminal according to user terminal before the user ID of WiMAX side at the signatory incidence relation of WiFi network and WiMAX network, and this method also comprises:
Obtain user terminal at the signatory incidence relation of WiFi network and WiMAX network.
4. method according to claim 3 is characterized in that, the described user terminal that obtains comprises at the signatory incidence relation of WiFi network and WiMAX network:
Obtain the described signatory incidence relation of described WiMAX AAA self storage; Or
After WiFi AAA is to described subscriber terminal authority authentication success, described WiMAX AAA receive that described WiFi AAA sends to described subscriber terminal authority authentication result and described signatory incidence relation; Or
Described WiMAX AAA sends the authentication query requests to described WiFi AAA, and receives the described signatory incidence relation that described WiFi AAA returns according to described authentication query requests.
5. method according to claim 1 is characterized in that, described WIF comprises from the home address that described home agent obtains described user terminal according to the address of described home agent:
Described WIF receives the address of the home agent that described WiMAX AAA sends, and according to the address of described home agent, sends the MIP login request message that is used for mobile IP registration to described home agent;
Described WIF receives the MIP registration reply message that described home agent sends, and comprises in the described MIP registration reply message that described home agent is the home address that described user terminal distributes.
6. method according to claim 1 or 5 is characterized in that, described WIF according to the address of described home agent after described home agent obtains the home address of described user terminal, this method also comprises:
Described WIF sends to described user terminal with described home address.
7. according to the arbitrary described method of claim 1-5, it is characterized in that receive at WiMAX AAA before the home agent request message that obtains the user terminal hometown-agent-address of interworking function entity WIF transmission, this method also comprises:
After the Certificate Authority success of WiFi AAA to described user terminal, WiFi Access Network WiFi AN receives the described home address request message that described user terminal sends;
WiFi AN judges whether described user terminal has passed through the authentication of described WiFi AAA, if, then send the home agent request message to described WIF, comprise in the described home agent request message that user terminal is in the user ID of WiFi side or in the user ID of WiMAX side, so that described WIF transmits described home agent request message to described WiMAX AAA.
8. method according to claim 7 is characterized in that, described WiFi AN judges whether described user terminal has passed through the authentication of described WiFi AAA, if then send the home agent request message to described WIF and comprise:
Described WiFi AN judges whether described user terminal has passed through the authentication of described WiFi AAA, if then detect himself whether to store described user terminal at the signatory incidence relation of WiFi network and WiMAX network;
Store described signatory incidence relation among the described WiFi AN if detect, then according to the user ID of described WiFi side, and user terminal is at the signatory incidence relation of WiFi network and WiMAX network, obtain described user terminal in the user ID of WiMAX side, and described user terminal is carried in the described home agent request message in the user ID of WiMAX side sends to interworking function entity WIF, in order to by described WIF described home agent request message is transmitted to WiMAX AAA;
Do not store described signatory incidence relation among the described WiFi AN if detect, described user terminal is carried in the described home agent request message in the user ID of WiFi side sends to WIF, in order to by described WIF described home agent request message is transmitted to WiMAX AAA.
9. according to the arbitrary described method of claim 1-5, it is characterized in that, when comprising the authorization token of user terminal at the user ID of WiFi side and user terminal in the described home agent request message, after described WiMAX AAA received the home agent request message that obtains the user terminal hometown-agent-address of interworking function entity WIF transmission, this method also comprised:
Described WiMAX AAA detects the authentication whether described user terminal has passed through WiFi AAA according to described user terminal in the user ID of WiFi side and the authorization token of described user terminal.
10. method according to claim 9, it is characterized in that described WiMAX AAA detects described user terminal according to described user terminal at the authorization token of the user ID of WiFi side and described user terminal and whether comprises by the authentication of WiFi AAA:
If described WiFi AAA is when successful to described user end certification mandate, authorization token and the described user terminal of described user terminal are sent to described WiMAX AAA in the user ID of WiFi side, then described WiMAX AAA is with the authorization token of the described user terminal in the described home agent request message and the described user terminal user ID in the WiFi side, compare in the user ID of WiFi side with authorization token and the described user terminal of the described user terminal that obtains from WiFi AAA, detect the authentication whether described user terminal has passed through WiFi AAA;
If described WiFi AAA is when successful to described user end certification mandate, authorization token and the described user terminal with described user terminal do not send to described WiMAX AAA in the user ID of WiFi side, then described WiMAX AAA sends the authentication inquiry request message to described WiFi AAA, comprise in the described authentication inquiry request message that the authorization token of the described user terminal in the described home agent request message and described user terminal are in the user ID of WiFi side, so that described WiFi AAA is according to the authorization token of the described user terminal in the described home agent request message and the described user terminal user ID in the WiFi side, whether detect described user terminal by the authentication of WiFi AAA, described WiMAX AAA obtains the testing result of described WiFi AAA.
11. the method for a WiFi network and WiMAX network interworking is characterized in that, comprising:
After user terminal uses the signatory certificate of WiFi to carry out authentication to WiFi AAA, receive the home address request message that obtains home address that described user terminal sends, comprise in the described home address request message that described user terminal is in the user ID of WiFi side;
Judge whether described user terminal has passed through the authentication of described WiFi AAA, if, then send the home agent request message that obtains the user terminal hometown-agent-address to described WIF, comprise in the described home agent request message that user terminal is in the user ID of WiFi side or in the user ID of WiMAX side, so that described WIF transmits described home agent request message to described WiMAX AAA.
12. a WiMAX AAA is characterized in that, comprising:
Home agent request message receiving element, be used for to receive the home agent request message that obtains the user terminal hometown-agent-address that interworking function entity WIF sends, comprise in the described home agent request message that user terminal is in the user ID of WiFi side or in the user ID of WiMAX side;
The hometown-agent-address allocation units, be used for after the Certificate Authority success of WiFi AAA to described user terminal, the described user terminal that receives according to described home agent request message receiving element is that described user terminal distributes home agent in the user ID of WiFi side or in the user ID of WiMAX side;
Home agent response message transmitting element, be carried at the home agent response message for the address that with described hometown-agent-address allocation units is the home agent of described user terminal distribution and send to described WIF, so that described WIF obtains the home address of described user terminal from described home agent according to the address of described home agent.
13. WiMAX AAA according to claim 12 is characterized in that, described hometown-agent-address allocation units comprise:
The hometown-agent-address distribution module, being used for when the home agent request message that described home agent request message receiving element receives comprises the user ID of described user terminal in the WiMAX side, is that described user terminal distributes home agent according to described user terminal in the user ID of WiMAX side directly;
Identifier acquisition module, be used for when the described home agent request message that described home agent request message receiving element receives comprises the user ID of described user terminal in the WiFi side, obtaining described user terminal in the user ID of WiMAX side according to described user terminal at the signatory incidence relation of WiFi network and WiMAX network;
Described hometown-agent-address distribution module also is used for, and the user terminal that obtains according to described identifier acquisition module is that described user terminal distributes home agent in the user ID of WiMAX side.
14. WiMAX AAA according to claim 13 is characterized in that, this WiMAX AAA also comprises:
Signatory incidence relation acquiring unit, be used for obtaining described user terminal the user ID of WiMAX side before according to user terminal at the signatory incidence relation of WiFi network and WiMAX network in described identifier acquisition module, obtain user terminal at the signatory incidence relation of WiFi network and WiMAX network.
15. WiMAX AAA according to claim 14 is characterized in that,
Described signatory incidence relation acquiring unit specifically is used for obtaining the described signatory incidence relation of described WiMAX AAA self storage; Or
Described signatory incidence relation acquiring unit specifically is used for after WiFi AAA is to described subscriber terminal authority authentication success, receive that described WiFi AAA sends to described subscriber terminal authority authentication result and described signatory incidence relation; Or
Described signatory incidence relation acquiring unit specifically is used for sending the authentication query requests to described WiFi AAA, and receives the described signatory incidence relation that described WiFi AAA returns according to described authentication query requests.
16. WiMAX AAA according to claim 12 is characterized in that, this WiMAX AAA also comprises:
The authentication detecting unit, be used for when described home agent request message that described home agent request message receiving element receives comprises the authorization token of user terminal at the user ID of WiFi side and user terminal, detecting the authentication whether described user terminal has passed through WiFi AAA according to described user terminal in the user ID of WiFi side and the authorization token of described user terminal.
17. a WiFi Access Network is characterized in that, comprising:
Home address request message receiving element, be used for after user terminal uses the signatory certificate of WiFi also to authorize to WiFi AAA execution authentication, receive the home address request message that obtains home address that described user terminal sends, comprise in the described home address request message that described user terminal is in the user ID of WiFi side;
Judging unit is used for judging whether described user terminal has passed through the authentication of described WiFi AAA;
Home agent request message transmitting element, be used for when described judging unit judges that described user terminal has passed through the authentication of described WiFi AAA, send the home agent request message obtain the user terminal hometown-agent-address to WIF, comprise in the described home agent request message that user terminal is in the user ID of WiFi side or in the user ID of WiMAX side.
18. according to the described WiFi Access Network of claim 17, it is characterized in that, also comprise:
Signatory incidence relation detecting unit, be used for judging that at described judging unit described user terminal by after the authentication of described WiFi AAA, detects described WiFi Access Network and self whether stores described user terminal at the signatory incidence relation of WiFi network and WiMAX network;
The sign acquiring unit, be used for when described signatory incidence relation detecting unit detects described WiFi Access Network and has described signatory incidence relation, user ID according to described WiFi side, and described user terminal obtains described user terminal in the user ID of WiMAX side at the signatory incidence relation of WiFi network and WiMAX network;
Described home agent request message transmitting element is used for described user terminal that described sign acquiring unit is obtained and is carried at the home agent request message that obtains the user terminal hometown-agent-address in the user ID of WiMAX side and sends to WIF;
Described home agent request message transmitting element also is used for, detect when not having described signatory incidence relation in the described WiFi Access Network at described signatory incidence relation detecting unit, described user terminal is carried in the home agent request message that obtains described user terminal hometown-agent-address in the user ID of WiFi side sends to WIF.
19. WiFi Access Network according to claim 17 is characterized in that,
Described home agent request message transmitting element also is used for, comprise that in described home address request message described user terminal is when the authorization token of the user ID of WiFi side and described user terminal, described user terminal is carried in the described home agent request message at the authorization token of the user ID of WiFi side and described user terminal sends to described WIF, so that described WIF transmits described home agent request message to described WiMAX AAA.
20. the system of a network and WiMAX network interworking is characterized in that, comprising:
Interworking function entity WIF, be used for receiving the home agent request message that obtains the user terminal hometown-agent-address that the WiFi Access Network sends, and described home agent request message sent to WiMAX AAA, comprise user terminal in the described home agent request message in the user ID of WiFi side or in the user ID of WiMAX side;
WiMAX AAA, be used for receiving the described home agent request message that WIF sends, and after WiFi AAA is to the success of the Certificate Authority of described user terminal, be that described user terminal distributes home agent according to described user terminal in the user ID of WiFi side or in the user ID of WiMAX side; The address of the home agent of described distribution is carried at sends to described WIF in the home agent response message;
Described WIF also is used for, and receives the home agent response message that described WiMAX AAA sends, and obtains the home address of described user terminal from described home agent according to the address of described home agent.
CN201080001608.6A 2010-04-26 2010-04-26 Method, device and system for interworking between WiFi network and WiMAX network Active CN102308622B (en)

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
PCT/CN2010/072180 WO2011134134A1 (en) 2010-04-26 2010-04-26 METHOD, DEVICE AND SYSTEM FOR INTERWORKING BETWEEN WiFi NETWORK AND WiMAX NETWORK

Publications (2)

Publication Number Publication Date
CN102308622A CN102308622A (en) 2012-01-04
CN102308622B true CN102308622B (en) 2013-10-02

Family

ID=44860748

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201080001608.6A Active CN102308622B (en) 2010-04-26 2010-04-26 Method, device and system for interworking between WiFi network and WiMAX network

Country Status (2)

Country Link
CN (1) CN102308622B (en)
WO (1) WO2011134134A1 (en)

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US9922185B2 (en) 2012-12-26 2018-03-20 Disney Enterprises, Inc. Linking token detection at a single computing platform with a user identification to effectuate modifications in virtual space instances presented via multiple computing platforms

Families Citing this family (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN103813330A (en) 2012-11-15 2014-05-21 中兴通讯股份有限公司 Communication terminal and system and authority management method
EP2749329A1 (en) * 2012-12-26 2014-07-02 Disney Enterprises, Inc. Linking token detection at a single computing platform with a user identification to unlock content and/or effectuate modifications in virtual space instances presented via multiple computing platforms
CN105100056A (en) * 2015-06-05 2015-11-25 北京奇虎科技有限公司 Application data processing method and system

Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101447978A (en) * 2008-02-20 2009-06-03 中兴通讯股份有限公司 Method for acquiring correct HA-RK Context by accessing AAA server in WiMAX network
CN101516092A (en) * 2009-03-31 2009-08-26 华为技术有限公司 Authentication method and authentication device for WiMAX network
CN101662757A (en) * 2009-06-30 2010-03-03 华为技术有限公司 Method, femto gateway and system for controlling subscriber access

Family Cites Families (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101075870B (en) * 2006-05-16 2010-08-25 华为技术有限公司 Method for generating and distributing movable IP Key

Patent Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101447978A (en) * 2008-02-20 2009-06-03 中兴通讯股份有限公司 Method for acquiring correct HA-RK Context by accessing AAA server in WiMAX network
CN101516092A (en) * 2009-03-31 2009-08-26 华为技术有限公司 Authentication method and authentication device for WiMAX network
CN101662757A (en) * 2009-06-30 2010-03-03 华为技术有限公司 Method, femto gateway and system for controlling subscriber access

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US9922185B2 (en) 2012-12-26 2018-03-20 Disney Enterprises, Inc. Linking token detection at a single computing platform with a user identification to effectuate modifications in virtual space instances presented via multiple computing platforms

Also Published As

Publication number Publication date
WO2011134134A1 (en) 2011-11-03
CN102308622A (en) 2012-01-04

Similar Documents

Publication Publication Date Title
CN106851632B (en) A kind of method and device of smart machine access WLAN
US8189567B2 (en) Method and nodes for registering a terminal
US20080294891A1 (en) Method for Authenticating a Mobile Node in a Communication Network
EP2950499B1 (en) 802.1x access session keepalive method, device, and system
US9246872B2 (en) Methods and arrangements for enabling data transmission between a mobile device and a static destination address
WO2002065803A1 (en) Method, network access element and mobile node for service advertising and user authorization in a telecommunication system
JP2006351009A (en) Communication method through untrusted access station
CN102006646A (en) Switching method and equipment
US20110055409A1 (en) Method For Network Connection
JP5044690B2 (en) Dynamic Foreign Agent-Home Agent Security Association Assignment for IP Mobility System
CN101848513A (en) Method for switching WiFi access network to WiMAX access network and related equipment
CN102421098A (en) User authentication method, device and system
CN102421097A (en) User authorization method, device and system
EP2561696B1 (en) Method and apparatus for machine communication
CN102215486B (en) Network access method, system, network authentication method, equipment and terminal
US8453211B2 (en) Method of obtaining proxy call session control function address while roaming
CN102308622B (en) Method, device and system for interworking between WiFi network and WiMAX network
JP2014238664A (en) Terminal authentication method and terminal authentication system in network
CN101330453A (en) Method for obtaining hometown proxy address for wireless network
Korhonen et al. Diameter proxy mobile IPv6: mobile access gateway and local mobility anchor interaction with diameter server
CN101232369B (en) Method and system for distributing cryptographic key in dynamic state host computer collocation protocol
WO2009155863A1 (en) Method and system for supporting mobility security in the next generation network
CN101635632B (en) Method, system and device for authentication and configuration
KR20050122935A (en) Method and system for providing wireless lan service using wireless communication network
CN102883265A (en) Method, equipment and system for sending and receiving position information of access user

Legal Events

Date Code Title Description
C06 Publication
PB01 Publication
C10 Entry into substantive examination
SE01 Entry into force of request for substantive examination
C14 Grant of patent or utility model
GR01 Patent grant