CN103533666B

CN103533666B - Packet data network connects method for building up and device

Info

Publication number: CN103533666B
Application number: CN201210319622.1A
Authority: CN
Inventors: 刘国燕; 周星月; 朱春晖
Original assignee: ZTE Corp
Current assignee: ZTE Corp
Priority date: 2012-07-02
Filing date: 2012-08-31
Publication date: 2019-06-11
Anticipated expiration: 2032-08-31
Also published as: CN103533666A

Abstract

The invention discloses packet data network connection method for building up and device, one of method includes: that UE passes through one of following message to non-3 GPP access network trusty transmission PDN connection identifier: EAP authentication authorization messages, dhcp message, route request information, IEEE 802.11u message；UE obtains the corresponding IP address of PDN connection identifier.Through the invention, user experience is improved.

Description

Packet data network connects method for building up and device

Technical field

The present invention relates to the communications fields, in particular to packet data network (Packet Data Network, abbreviation For PDN) connection method for building up and device.

Background technique

Third generation partner program (3rd Generation Partnership Project's, referred to as 3GPP) drills Into grouping system (Evolved Packet System, referred to as EPS) by the Universal Terrestrial Radio Access Network of evolution (Evolved Universal Terrestrial Radio Access Network, referred to as E-UTRAN), mobile management list Member (Mobility Management Entity, referred to as MME), gateway (Serving Gateway, referred to as S- GW), grouped data network gateway (Packet Data Network Gateway, referred to as PDN GW) and home subscriber service Device (Home Subscriber Server, referred to as HSS) composition.

EPS supports the intercommunication (as shown in Figure 1) with non-3 GPP system, wherein the intercommunication with non-3 GPP system passes through S2a/ B/c interface realizes that PDN GW is as the anchor point between 3GPP and non-3 GPP system.In the system architecture diagram of EPS, non-3 GPP system Access is divided into trustless non-3 GPP access and trusted non-3 GPP access；Wherein, trustless non-3 GPP access need by The packet data gateway (Evolved Packet Data Gateway, referred to as ePDG) of evolution is connected with PDN GW, ePDG with Interface between PDN GW is S2b；Trusted non-3 GPP access can directly be connect by S2a interface with PDN GW, and S2a interface uses PMIP agreement carries out information exchange；In addition, S2c interface provides user equipment (UserEquipment, referred to as UE) and PDN The relevant control in user face and mobility support between GW, the mobility management protocol supported are the movement for supporting double stacks IPv6 (Moblie IPv6 Support for Dual Stack Hosts and Routers, referred to as DSMIPv6), can For trustless non-3 gpp and trusted non-3 GPP access.

Wireless LAN (Wireless Local Area Network, referred to as WLAN) can be used as non-3 gpp system The packet-based core networks (Evolved Packet Core, referred to as EPC) of system access evolution, this is related to many operator's concerns Fixed network mobile fusion interconnection and interflow problem.

Currently, more and more operators wish WLAN as non-3 GPP access trusty, therefore, UE is connect by S2a The research of the interconnection and interflow problem of mouth access EPC is taken seriously, and has had relevant scheme.But do not have in relevant scheme How offer UE, which passes through non-3 GPP access network trusty, is accessed, and PDN connection process is established.

Summary of the invention

For accessing in relevant scheme that how offer UE does not pass through non-3 GPP access network trusty, PDN company is established The problem of connecing, the present invention provides PDN connection method for building up and devices, at least to solve the problems, such as this.

According to an aspect of the invention, there is provided a kind of PDN connection method for building up, comprising: user equipment (UE) by with One of lower message sends PDN connection identifier: the authentication protocol of extension to non-third generation affiliate 3GPP access net trusty Protocol DHCP messages, route request information, Institute of Electrical and Electric Engineers are arranged in EAP authentication authorization messages, DynamicHost IEEE802.11u message；The UE obtains the corresponding Internet IP address of the PDN connection identifier.

Preferably, the PDN connection identifier includes following one: Transaction Identifier (xid), client connection identifier (client id), interface identifier (interferce id).

Preferably, non-3 GPP access network trusty includes: wireless lan (wlan).

According to another aspect of the invention, a kind of PDN connection method for building up is provided, comprising: the non-third generation trusty Affiliate 3GPP access net receives the PDN connection identifier that user equipment (UE) is sent by one of following message: the certification of extension Agreement EAP authentication authorization messages, DynamicHost setting Protocol DHCP messages, route request information, Electrical and Electronic engineer association It can IEEE 802.11u message；The non-3 GPP access network trusty is corresponding to the UE distribution PDN connection identifier First Internet IP address, and first IP address is sent to the UE；Or the non-3 GPP access Netcom trusty It crosses 3GPP core net and obtains corresponding second IP address of the PDN connection identifier, second IP address is sent to the UE.

Preferably, PDN connection identifier includes following one: xid, client connection identifier (client id), interface identifier (interferce id).

Preferably, the non-3 GPP access network trusty includes: wireless lan (wlan).

In accordance with a further aspect of the present invention, a kind of PDN connection method for building up is provided, comprising: user equipment (UE) reception can One of the following message that the non-3 GPP access network of trust is sent, wherein the message carries the PDN connection pair of promising UE distribution The Virtual Local Area Network mark answered: authentication protocol EAP authentication authorization messages, the DynamicHost setting protocol DHCP of extension disappear Breath, advertising of route message, Institute of Electrical and Electric Engineers IEEE 802.11u message；The UE using the VLAN identify into The transmission of row signaling and/or data.

Preferably, it includes: that the UE will be described that the UE, which is identified using the VLAN and carried out the transmission of signaling and/or data, VLAN is identified to be bound with the PDN information of the UE, carries out the signaling and/or institute using the VLAN mark after the binding State the transmission of data.

Preferably, the PDN information includes at least one of: MAC address, international mobile subscriber are known Other code IMSI information, access point name APN information, general data transfer platform/proxy mobile internet protocol GTP/PMIP meeting Words mark.

Preferably, the signaling includes at least one of: dhcp message, route request information, advertising of route message.

Preferably, non-3 GPP access network trusty includes: wireless lan (wlan).

According to another aspect of the invention, a kind of PDN connection method for building up is provided, comprising: non-3 gpp trusty connects Network the corresponding VLAN mark of PDN connection distributed to UE；The non-3 GPP access network trusty passes through one of following message VLAN mark is sent to the UE: authentication protocol EAP authentication authorization messages, the DynamicHost setting protocol DHCP of extension Message, advertising of route message, Institute of Electrical and Electric Engineers IEEE 802.11u message；The non-3 GPP access trusty Net carries out the transmission of signaling and/or data using VLAN mark.

Preferably, the non-3 GPP access network trusty carries out the biography of signaling and/or data using VLAN mark Defeated includes: that the non-3 GPP access network trusty binds VLAN mark and the PDN information of the UE, uses institute VLAN mark after stating binding carries out the transmission of the signaling and/or the data.

Preferably, the PDN information includes at least one of: MAC address, international mobile subscriber are known Other code IMSI information, access point name APN information, GPRS network tunnel protocol/Proxy Mobile Internet association Discuss GTP/PMIP session identification.

Preferably, the non-3 GPP access network trusty is according to MAC address and access point name APN Information judges whether there is and the associated VLAN id information of the APN information under the MAC Address；If it is judged that being It is then to establish a first PDN connection；If it is judged that being no, and determine under the MAC Address in addition to the APN Other APN exist with the associated VLAN ID of other APN, then establish a 2nd PDN connection；It is described trusty non- It is that the first PDN connection or the 2nd PDN connection distribute a VLAN ID that 3GPP, which accesses net,.

Preferably, the non-3 GPP access network trusty includes: wireless lan (wlan).

According to an aspect of the invention, there is provided device is established in a kind of PDN connection, it is applied to UE, comprising: first sends Module, for sending PDN connection identifier to non-third generation affiliate 3GPP access net trusty by one of following message: The authentication protocol EAP authentication authorization messages of extension, DynamicHost setting Protocol DHCP messages, route request information, electrical and electricity Sub- Association of Engineers IEEE 802.11u message；First obtains module, for obtaining the corresponding Yin Te of the PDN connection identifier Net IP address.

According to another aspect of the invention, it provides a kind of PDN connection and establishes device, connect applied to non-3 gpp trusty It networks, comprising: the first receiving module, the PDN connection identifier sent for receiving user equipment (UE) by one of following message:

The authentication protocol EAP authentication authorization messages of extension, DynamicHost setting Protocol DHCP messages, route request information, Institute of Electrical and Electric Engineers IEEE 802.11u message；

First distribution module, for distributing PDN connection identifier corresponding first Internet IP address to the UE；The Two sending modules, for first IP address to be sent to the UE；Second obtains module, for being obtained by 3GPP core net Take corresponding second IP address of the PDN connection identifier；Third sending module, it is described for second IP address to be sent to UE。

In accordance with a further aspect of the present invention, it provides a kind of PDN connection and establishes device, comprising: the second receiving module is used for Receive one of the following message that non-3 GPP access network trusty is sent, wherein the message carries the PDN of promising UE distribution Connect corresponding Virtual Local Area Network mark: the authentication protocol EAP authentication authorization messages of extension, DynamicHost setting agreement Dhcp message, advertising of route message, Institute of Electrical and Electric Engineers IEEE 802.11u message；First processing module is used for The transmission for carrying out signaling and/or data is identified using the VLAN.

Preferably, the first processing module includes: the first binding module, for identifying the VLAN with the UE's PDN information is bound；First transmission module, for using the VLAN mark after the binding to carry out the signaling and/or institute State the transmission of data.

According to another aspect of the invention, it provides a kind of PDN connection and establishes device, connect applied to non-3 gpp trusty It networks, comprising: the second distribution module, the corresponding VLAN mark of PDN connection for being distributed to user equipment (UE)；4th sends mould Block, for VLAN mark to be sent to the UE by one of following message: the authentication protocol EAP authentication authorization of extension disappears Protocol DHCP messages, advertising of route message, Institute of Electrical and Electric Engineers IEEE802.11u message are arranged in breath, DynamicHost； Second processing module, for using the VLAN mark to carry out the transmission of signaling and/or data.

Preferably, second distribution module includes: judgment module, for according to MAC address and connecing Access point title APN information judges whether there is and the associated VLAN id information of the APN information under the MAC Address；The One establishes module, is when being, then to establish a first PDN connection for the judgment module；Second establishes module, for described The judging result of judgment module is no, and determine other APN under the MAC Address in addition to the APN exist with this its When the associated VLAN ID of his APN, then a 2nd PDN connection is established；Third distribution module, for being the first PDN connection Or the 2nd PDN connection distributes a VLAN ID.

Preferably, the Second processing module includes: the second binding module, for identifying the VLAN with the UE's PDN information is bound；

Second transmission module, for using the mark of the VLAN after the binding to carry out the signaling and/or the data Transmission.

Through the invention, UE is used to send PDN connection identifier in a manner of obtaining the IP address of PDN connection to network side, It solves in relevant scheme without providing how UE is accessed by non-3 GPP network trusty, establishes additional PDN connection The problem of, UE is realized by WLAN etc. and establishes PDN connection, has achieved the effect that improve network performance.

Detailed description of the invention

The drawings described herein are used to provide a further understanding of the present invention, constitutes part of this application, this hair Bright illustrative embodiments and their description are used to explain the present invention, and are not constituted improper limitations of the present invention.In the accompanying drawings:

Fig. 1 is the network structure of the 3GPP network and non-3 GPP network intercommunication according to the relevant technologies；

Fig. 2 is the first pass figure of PDN connection method for building up according to an embodiment of the present invention；

Fig. 3 is the second flow chart of PDN connection method for building up according to an embodiment of the present invention；

Fig. 4 is the third flow chart of PDN connection method for building up according to an embodiment of the present invention；

Fig. 5 is the 4th flow chart of PDN connection method for building up according to an embodiment of the present invention；

Fig. 6 is the first structure block diagram that device is established in PDN connection according to an embodiment of the present invention；

Fig. 7 is the second structural block diagram that device is established in PDN connection according to an embodiment of the present invention；

Fig. 8 is the third structural block diagram that device is established in PDN connection according to an embodiment of the present invention；

Fig. 9 is the preferred third structural block diagram that device is established in PDN connection according to an embodiment of the present invention；

Figure 10 is the 4th structural block diagram that device is established in PDN connection according to an embodiment of the present invention；

Figure 11 is preferred 4th structural block diagram that device is established in PDN connection according to an embodiment of the present invention；

Figure 12 is UE first passage non-3 GPP access 3GPP core net according to an embodiment of the present invention, is disappeared by EAP authentication The process of breath transmitting APN；

Figure 13 is that UE according to an embodiment of the present invention establishes additional PDN connection, passes through EAP authentication message transmission APN's Process；

Figure 14 is UE first passage non-3 GPP access 3GPP core net according to an embodiment of the present invention, is routed by DHCP/ The process of solicitation message transmitting APN；

Figure 15 is that UE according to an embodiment of the present invention establishes additional PDN connection, routes solicitation message transmitting by DHCP/ The flow chart of APN；

Figure 16 is that UE according to an embodiment of the present invention establishes a plurality of PDN connection, and every EAP carried out when PDN connection that establishes recognizes Demonstrate,prove the flow chart of authorization；

Figure 17 is according to an embodiment of the present invention by WLAN access EPC, establishes the flow chart one of the method for PDN；

Figure 18 is according to an embodiment of the present invention by WLAN access EPC, establishes the flowchart 2 of the method for PDN；And

Figure 19 is the flow chart of the method according to an embodiment of the present invention for establishing PDN.

Specific embodiment

Hereinafter, the present invention will be described in detail with reference to the accompanying drawings and in combination with Examples.It should be noted that not conflicting In the case of, the features in the embodiments and the embodiments of the present application can be combined with each other.

This preferred embodiment provides a kind of PDN connection method for building up, and Fig. 2 is PDN connection according to an embodiment of the present invention The first pass figure of method for building up, as shown in Fig. 2, this method includes the following steps, namely S202 to step S204.

Step S202:UE accesses net to 3GPP trusty by one of following message and sends PDN connection identifier: extension Protocol DHCP messages, route request information, Electrical and Electronic engineering are arranged in authentication protocol EAP authentication authorization messages, DynamicHost Shi Xiehui IEEE 802.11u message.

Step S204:UE obtains the corresponding IP address of PDN connection identifier.

Through the above steps, UE can be by sending PDN connection identifier to non-3 GPP access network trusty, and obtaining should The corresponding IP address of PDN connection, that is, realize the connection of PDN, is established to realize UE by non-3 GPP access trusty PDN connection, improves user experience.

Preferably, non-3 GPP access network trusty includes: wireless lan (wlan).

This preferred embodiment provides a kind of PDN connection method for building up, and Fig. 3 is PDN connection according to an embodiment of the present invention The second flow chart of method for building up, as shown in figure 3, this method includes the following steps, namely S302 to step S304.

Step S302: non-3 GPP access network trusty receives the PDN connection identifier that UE is sent by one of following message:

The authentication protocol EAP authentication authorization messages of extension, DynamicHost setting Protocol DHCP messages, route request information, Institute of Electrical and Electric Engineers IEEE 802.11u message.

Step S304: non-3 GPP access network trusty distributes the PDN connection identifier corresponding first IP to the UE Address, and first IP address is sent to the UE；Or the non-3 GPP access network trusty passes through 3GPP core net Corresponding second IP address of the PDN connection identifier is obtained, second IP address is sent to the UE.

Through the above steps, non-3 GPP access network trusty receives the PDN connection identifier that UE is sent, and is connected according to the PDN It connects mark and establishes PDN connection, and the corresponding IP address of PDN connection is sent to UE, so that the available PDN connection pair of UE The IP address answered, that is, realize the connection of PDN, establishes PDN connection by non-3 GPP access trusty to realize UE, mentions High user experience.

Preferably, PDN connection identifier includes following one: xid, client connection identifier client id, interface identifier interferce id。

Preferably, non-3 GPP access network trusty includes: WLAN.

This preferred embodiment provides a kind of PDN connection method for building up, and Fig. 4 is PDN connection according to an embodiment of the present invention The third flow chart of method for building up, as shown in figure 4, this method includes the following steps, namely S402 to step S404.

Step S402:UE receives one of the following message that non-3 GPP access network trusty is sent, wherein the message is taken The corresponding VLAN mark of PDN connection with promising UE distribution: authentication protocol (EAP) route certificate authority information, the dynamic of extension are main Protocol DHCP messages, advertising of route message, Institute of Electrical and Electric Engineers IEEE 802.11u message are arranged in machine.

Step S404:UE carries out the transmission of signaling and/or data using VLAN mark.

Through the above steps, UE obtains the corresponding VLAN of PDN connection that non-3 GPP access network trusty is UE distribution Mark identifies the transmission for carrying out signaling and/data using the VLAN, realizes UE and is built by non-3 GPP access network trusty Vertical PDN connection, improves the performance of access net.

When implementing, the transmission of signaling and/or data can be realized by following steps: UE is by VLAN mark with UE's PDN information is bound, and the transmission of signaling and/or data is carried out using the VLAN mark after the binding.

Preferably, which includes at least one of: the address media access control (MAC), IMSI information, access Point title (APN) information, general data transfer platform/proxy mobile internet protocol (GTP/PMIP) session identification.

Preferably, which includes at least one of: DHCP request message, route request information, advertising of route message.

Preferably, non-3 GPP access network trusty includes: WLAN.

This preferred embodiment provides a kind of PDN connection method for building up, and Fig. 5 is PDN connection according to an embodiment of the present invention 4th flow chart of method for building up, as shown in figure 5, this method includes the following steps, namely S502 to step S504.

Step S502: 3GPP access net trusty is identified to the corresponding Virtual Local Area Network of UE distribution PDN connection.

Step S504: VLAN mark is sent to UE by one of following message by non-3 GPP access network trusty:

Authentication protocol (EAP) route certificate authority information of extension, DynamicHost setting agreement (DHCP) message, advertising of route disappear Breath, Institute of Electrical and Electric Engineers IEEE 802.11u message.

Step S506: non-3 GPP access network trusty carries out the transmission of signaling and/or data using VLAN mark.

Through the above steps, 3GPP access net trusty gives UE distribution VLAN mark, and VLAN mark is sent to UE uses the VLAN so that UE obtains the corresponding VLAN mark of PDN connection that non-3 GPP access network trusty is UE distribution Mark carries out the transmission of signaling and/data, realizes UE by non-3 GPP access network trusty and establishes PDN connection, improves User experience.

When implementing, the transmission of signaling and/or data can be realized by following steps: by the PDN of VLAN mark and UE Information is bound, and the transmission of signaling and/or data is carried out using the VLAN mark after binding.

Preferably, which includes at least one of: MAC address, IMSI information, access point Title APN information, general data transfer platform/proxy mobile internet protocol (GTP/PMIP) session identification.

Preferably, non-3 GPP access network trusty includes: wireless lan (wlan).

It can be distributed in the following way to UE as preferably embodiment, the non-3 GPP access network trusty VLAN mark: non-3 GPP access network trusty judges whether there is and looking under MAC Address according to MAC Address and APN information Look for the associated VLAN id information of APN information；If it is judged that be it is yes, then, if with the presence of VLAN ID, newly A the first PDN connection is built in foundation；If it is judged that be it is no, if without associated VLAN ID exist if, still, and Determine that the lower other APN that there are other in addition to APN of the MAC Address exist with the associated VLAN ID's of other APN Words, then establish a 2nd PDN connection；This when of non-3 GPP access network trusty, non-3 GPP access trusty The PDN connection that net can create for the first PDN connection or the 2nd PDN connection distributes a VLANID.

It should be noted that step shown in the flowchart of the accompanying drawings can be in such as a group of computer-executable instructions It is executed in computer system, although also, logical order is shown in flow charts, and it in some cases, can be with not The sequence being same as herein executes shown or described step.

In another embodiment, it additionally provides a kind of PDN connection and establishes software, the software is for executing above-mentioned implementation Technical solution described in example and preferred embodiment.

In another embodiment, a kind of storage medium is additionally provided, above-mentioned PDN connection is stored in the storage medium Software is established, which includes but is not limited to: CD, floppy disk, hard disk, scratch pad memory etc..

The embodiment of the invention also provides a kind of PDN connections to establish device, can be applied to UE, which establishes dress It sets and can be used to implement above-mentioned PDN connection method for building up and preferred embodiment, carried out explanation, and repeated no more, under The module being related in device is established in face of the PDN connection to be illustrated.As used below, term " module " may be implemented The combination of the software and/or hardware of predetermined function.Although system and method described in following embodiment are preferably come with software It realizes, but the realization of the combination of hardware or software and hardware is also that may and be contemplated.

Fig. 6 is the first structure block diagram that device is established in PDN connection according to an embodiment of the present invention, as shown in fig. 6, the device It include: the first sending module 62, first obtains module 64, and above structure is described in detail below.

First sending module 62, for being accessed by one of following message to non-third generation affiliate 3GPP trusty Net sends PDN connection identifier: authentication protocol EAP authentication authorization messages, the DynamicHost setting Protocol DHCP messages, routing of extension Request message, Institute of Electrical and Electric Engineers IEEE 802.11u message；First obtains module 64, for obtaining PDN connection Identify corresponding IP address.

The embodiment of the invention also provides a kind of PDN connections to establish device, can be applied to non-3 GPP access trusty Net, which, which establishes device, can be used to implement above-mentioned PDN connection method for building up and preferred embodiment, carry out Illustrate, repeat no more, the module being related in device is established to the PDN connection below and is illustrated.As used below, The combination of the software and/or hardware of predetermined function may be implemented in term " module ".Although system described in following embodiment and Method is preferably realized with software, but the realization of the combination of hardware or software and hardware is also that may and be contemplated.

Fig. 7 is the second structure chart that device is established in PDN connection according to an embodiment of the present invention, as shown in fig. 7, the device packet Include: the first receiving module 72, the first distribution module 74, the second sending module 76, second obtains module 78, third sending module 79, above structure is described in detail below.

The PDN connection identifier sent for receiving user equipment (UE) by one of following message: first receiving module 72 expands Authentication protocol (EAP) route certificate authority information of exhibition, DynamicHost setting agreement (DHCP) message, route request information, it is electrical and Electronic Engineering Association (IEEE) 802.11u message；

First distribution module 74, for distributing PDN connection identifier corresponding first Internet IP address to the UE； Second sending module 76 is connected to the first distribution module 74, and the first IP address for distributing the first distribution module 74 is sent To the UE；

Second obtains module 78, for obtaining corresponding second IP address of the PDN connection identifier by 3GPP core net； Third sending module 79 is connected to the second acquisition module 78, the 2nd IP for getting the second acquisition module 78 Location is sent to the UE.

Fig. 8 is the third structure chart that device is established in PDN connection according to an embodiment of the present invention, as shown in figure 8, the device packet Include: the second receiving module 82, first processing module 84 are below described in detail above structure.

Second obtains module 82, is disappeared for receiving non-3 GPP access network trusty by what one of following signaling was sent Breath, wherein the message carries the corresponding VLAN mark of PDN connection of promising UE distribution: the authentication protocol EAP authentication of extension is awarded Weigh message, Protocol DHCP messages, advertising of route message, Institute of Electrical and Electric Engineers IEEE 802.11u are arranged in DynamicHost Message；First processing module 84, for establishing PDN connection according to VLAN mark.

Fig. 9 is the preferred third structural block diagram that device is established in PDN connection according to an embodiment of the present invention, as shown in figure 9, The first processing module 84 includes: the first binding module 842 and the first transmission module 844, is carried out below to above structure detailed Description.

First binding module 842, for binding VLAN mark and the PDN information of the UE；First transmission Module 844 is connected to the first binding module 842, carries out signaling for the VLAN mark after using the first binding module 842 to bind And/or the transmission of data.

Figure 10 is the 4th structure chart that device is established in PDN connection according to an embodiment of the present invention, as shown in Figure 10, the device It include: the second distribution module 92, the 4th sending module 94, Second processing module 96 is below described in detail above structure.

Second distribution module 92, for being identified to the corresponding VLAN of user equipment (UE) distribution PDN connection；Second distribution module 94, it is connected to the second distribution module 92, the VLAN mark hair for distributing the second distribution module 92 by one of following message Give UE: authentication protocol EAP authentication authorization messages, DynamicHost the setting Protocol DHCP messages, advertising of route message, electricity of extension Gas and Electronic Engineering Association's IEEE 802.11u message；Second processing module 96 is connected to the second distribution module 94, for making The VLAN mark sent with the 4th sending module 94 carries out the transmission of signaling and/or data.

Figure 11 is the 4th structure chart that device is established in PDN connection according to an embodiment of the present invention, and as shown in figure 11, this second Processing module 96 includes: the second binding module 962, and the second transmission module 964, the second distribution module 92 includes: judgment module 922, first establishes module 924, and second establishes module 926, and third distribution module 928 below retouches above structure in detail It states.

Judgment module 922, for judging whether there is and the APN under the MAC Address according to MAC Address and APN information The VLAN id information of information association；First establishes module 924, is connected to judgment module 922, the judgement for judgment module 922 It as a result is when being, then to establish a first PDN connection；Second establishes module 926, judgment module 922 is connected to, for judging mould The judging result of block 922 is no, and determines that other APN under the MAC Address in addition to the APN exist and other APN When associated VLAN ID, then a 2nd PDN connection is established；Third distribution module 928 is connected to first and establishes 924 He of module Second establishes module 926, for distributing a VLAN ID for the first PDN connection or the 2nd PDN connection.

Second processing module 96 includes: the second binding module 962, for believing VLAN mark and the PDN of the UE Breath is bound；Second transmission module 964 is connected to the second binding module 962, for being bound using the second binding module 962 VLAN mark afterwards carries out the transmission of signaling and/or data.

It is illustrated below in conjunction with preferred embodiment, preferred embodiment below combines above-described embodiment and preferred implementation Mode.

Preferred embodiment one

This preferred embodiment provides two kinds and establishes additional PDN connection method.

Method one: UE sends PDN connection identifier to the non-3 GPP access network of trust, and network is according to receiving PDN connection identifier It carries out establishing PDN connection, distributes the IP address of PDN connection.

Preferably, the non-3 GPP access network in this method can be WLAN.

Preferably, the UE in this method can be by EAP authentication authorization messages, dhcp message, router request message, or Person 802.11u message sends PDN connection identifier to network.

Method two: non-3 GPP access network trusty is identified to UE transmitting VLAN.

Preferably, the non-3 GPP access network in which can be WLAN.

Preferably, the non-3 GPP access network trusty in this method can be disappeared by EAP authentication message or DHCP Breath or advertising of route message transmit information to UE.

It is established additional when guaranteeing that UE can access 3GPP core network by WLAN trusty by the above method PDN connection.

For the UE for needing support more PDN connections, needed support between UE and non-3 GPP access network trusty The isolation of different PDN connections, such as: VLAN.Following preferred embodiment two to six is described in detail.

Preferred embodiment two

In the preferred embodiment, when UE first passage non-3 GPP access EPC trusty, UE by EAP authentication message, APN information is passed into non-3 GPP access network trusty.Then, non-3 GPP access network trusty can distribute VLAN mark, And pass to UE.Figure 12 is the flow chart of UE first passage non-3 GPP access 3GPP core net, and as shown in figure 12, this method includes Following steps S1002 is to step 1044.

The distinctive process of non-3 gpp is executed between step S1002:UE and non-3 GPP access network trusty.

Step S1004:UE sends 802.1x EAPOL-Start message to non-3 GPP access network trusty.

Step S1006: non-3 GPP access network trusty can reply EAP-REQ/ to UE as EAP authentication person Identity message, request UE mark；

After step S 1008:UE receives EAP-REQ/Identity message, can send EAP-RSP/Identity message to Non-3 GPP access network trusty, APN is carried in message, and APN is optional information.

Other message of step S1010-S1020:UE execution EAP authentication process.Wherein, non-3 GPP access network trusty After receiving EAP-RSP/Identity message, APN information is obtained, and distribute a VLAN ID, it is local to save MAC Address, APN Incidence relation between information, VLAN ID；(it is specifically as follows in the EAP message that non-3 GPP access network trusty replys UE EAP-RES/AKA '-Identity perhaps EAP-RES/AKA '-Challenge or EAP authentication success message.) in, it can take Band VLAN ID.Its from obtain IMSI from AAA after, also IMSI and VLAN ID is bound.

Preferably, VLAN ID can be distributed in the following way in the present embodiment: according to MAC Address and APN information, Associated VLAN id information is searched, if creating a PDN connection with the presence of VLAN ID；If do not closed If the VLAN ID of connection exists, still, there are if the associated VLAN ID of other APN, then create a PDN to connect under the MAC It connects；This when, non-3 GPP access network trusty can distribute a VLANID for newly-built PDN connection.

Step S1022: if it is foundation meeting between EAP authentication message trigger non-3 GPP access network trusty and PDN GW If words, then after non-3 GPP access network trusty receives the successful message of EAP authentication, creation session can be sent to PDN GW Request or agent binding update messages include APN in the message.If UE does not carry APN, carrying is default at this APN.

The operation of IP-CAN session establishment is executed between step S1024:PDN GW and PCRF.

Step S1026:PDN GW updates the address PDN GW by AAAServer, to HSS.

Step S1028:PDN GW sends creation conversational response to non-3 GPP access network trusty or agent binding is true Recognize message.

It should be noted that being built if it is between EAP authentication message trigger non-3 GPP access network trusty and PDN GW If vertical session, step S1022-S1028 just exists.

Step S1030: non-3 GPP access network trusty sends EAP authentication success message to UE.Wherein, if in step If not carrying VLAN ID in 205-210, then in this step, VLAN ID may be carried to UE.

Following dhcp message or routing solicits/route request information, can be all sent to by the VLAN trusty Non-3 GPP access network, VLAN mark is to obtain in EAP authentication process.It is identified by VLAN, non-3 gpp trusty connects Networking can find associated APN information, and then distribute IP address for the associated APN of UE, and by IP address and VLAN identify into Row association.It is described in detail below:

Step S1032:UE may send to non-3 GPP access network trusty and solicit (DHCPv6)/DHCP discovery (DHCPv4) message, request distribution IP address.

Step S1034: it is triggered if it is dhcp message and establishes session between non-3 GPP access network and PDN GW trusty If, then after non-3 GPP access network trusty receives DHCP request message, can to PDN GW send creation session request or Person's agent binding update messages include APN in the message；This when, non-3 GPP access network trusty can identify VLAN It is associated with GTP/PMIP session identification.Other are referring to step S1024-S1028.

It triggers if it is dhcp message if establishing session between non-3 GPP access network and PDN GW trusty, just executes Step S1034.

Step S1036: non-3 GPP access network trusty replys notice (DHCPv6)/DHCP to UE and provides message It (DHCPv4), may include UE IP address in message.

Step S1038:UE sends request (DHCPv6)/DHCP request (DHCPv4) to non-3 GPP access network trusty, Non-3 GPP access network trusty is replied to UE replies (DHCPv6)/DHCP confirmation (DHCPv4), in the message comprising UE IP Location, and IP address and VLAN mark are associated.

Step S1040:UE may send route request information to non-3 GPP access network trusty；

Step S1042: it triggers if it is route request information and is established between non-3 GPP access network and PDN GW trusty If session, then after non-3 GPP access network trusty receives route request information, creation session can be sent to PDN GW and is asked It asks or agent binding update messages, includes APN in the message；Other are referring to step S1024-S1028.

It is triggered if it is route request information if establishing session between non-3 GPP access network and PDN GW trusty, step Rapid S1042 just exists.

Step S1044: non-3 GPP access network trusty replys routing confirmation message to UE, may include UE in message IP address, and IP address and VLAN mark are associated.

It should be understood that UE is when receiving the IP address that non-3 GPP access network trusty returns, UE is local also can be into The association of row MAC Address, APN, IP address and VLAN mark etc..

Subsequent, UE can select a VLAN mark, encapsulated message, and send according to the characteristic of specific business；It is trusty When non-3 GPP access network receives the uplink message of UE transmission, it can decapsulate, and identified according to VLAN, find associated GTP/PMIP Session is packaged forwarding；When non-3 GPP access network trusty receives the downlink message of PDN GW transmission, it can decapsulate, and According to GTP/PMIP session identification, associated VLAN mark is found, forwarding is packaged.

When 3GPP network is UMTS, it is identical that GGSN, which replaces the function of PDN GW, Yao Zengqiang in the embodiment, 's.

In above-described embodiment, if UE does not carry APN to non-3 GPP access network trusty in EAP authentication message, and If network decision UE is service distributing, then non-3 GPP access network trusty is that UE distributes VLAN ID, and passes through EAP authentication Response message returns to UE.This when, step S1022-S1028, S1034, S1042 in above-described embodiment are not executed, He is performed both by step, and difference is: non-3 GPP access network trusty is locally UE distribution IP address.

Preferred embodiment three

In the embodiment, UE by non-3 GPP access EPC trusty after, when UE is again by EAP authentication message, Establish additional PDN connection；Non-3 GPP access network trusty can distribute VLAN mark, and pass to UE.Then, trusty Non-3 GPP access network sends the information in the creation tunnel GTP/PMIP to PDN GW, includes the relevant information of PDN connection in information.Tool Body can be found in process as shown in figure 13, which includes the following steps S1102 to step S1138.

Step S1102:UE is initially accessed 3GPP EPC network by non-3 gpp.

Step S1104:UE sends 802.1xEAPOL-Start message to non-3 GPP access network trusty.

Step S1106: non-3 GPP access network trusty can reply EAP-REQ/ to UE as EAP authentication person Identity message, request UE mark；

After step S1108:UE receives EAP-REQ/Identity message, EAP-RSP/Identity message can be sent to can The non-3 GPP access network of trust carries APN in message；After non-3 GPP access network trusty receives message, according to MAC Address and APN information searches associated VLAN ID session, if with the presence of the corresponding session of VLAN ID, then it is assumed that the APN Under, mono- PDN connection of Yao Xinjian；If existed without VLAN ID, still, there are other APN under the MAC Address are associated If VLAN ID, then it is assumed that the UE will ask the PDN connection looked for novelty to be established；This when, non-3 GPP access network trusty can divide It is local to save MAC Address, APN information, the incidence relation between VLAN ID and IMSI with a VLAN ID；Then, trusted Non-3 GPP access network EAP-REQ/Identity message is transmitted to 3GPPAAA.

Other processes of EAP re-authentication between step S1110-S1114:UE and 3GPP, wherein in non-3 gpp trusty The EAP message that access net replys UE (is specifically as follows EAP RSP/AKA '-Reauthentication or EAP-RSP/ AKA '-Notification or EAP authentication success message) in, VLAN ID can be carried.Then, for EAP authentication process Other Message Processings belong to the prior art, and details are not described herein.

Alternatively, also executing complete EAP authentication process, detailed process is referring to step when establishing additional PDN connection procedure Rapid S1004-S1020, wherein the judgement that above-mentioned PDN connection is established is referring to step S1108, and the transmitting of VLAN ID is referring to step S1004-S1020。

Step S1116: if it is foundation meeting between EAP authentication message trigger non-3 GPP access network trusty and PDN GW If words, then after non-3 GPP access network trusty receives the successful message of EAP authentication, built according to the needs of step S1108 The judgement of additional PDN connection is stood, creation session request or agent binding update messages can be sent to PDN GW.Wherein, such as One APN of fruit is only supported if establishing a PDN connection, then includes APN in the message；But if identical APN, establish more It then include APN and PDN connection identifier in the message if a PDN connection, wherein non-3 GPP access network trusty can be local Generate a PDN connection identifier.

The operation of IP-CAN session establishment is executed between step S1118:PDN GW and PCRF.

Step S1120:PDN GW updates the address PDN GW by AAA Server, to HSS.

Step S1122:PDN GW sends creation conversational response to non-3 GPP access network trusty or agent binding is true Recognize message.

If establishing session between EAP authentication message trigger non-3 GPP access network trusty and PDN GW, step Rapid S1116-S1122 just exists.

Step S1124: non-3 GPP access network trusty sends EAP authentication success message to UE.Wherein, if in step If not carrying VLAN ID in S1110-S1114, then in this step, VLAN ID may be carried to UE.

Following dhcp message or routing solicits/route request information, can be all sent to by the VLAN trusty Non-3 GPP access network, VLAN mark is to obtain in EAP authentication process.It is identified by VLAN, non-3 gpp trusty connects Networking can find associated APN information, and then distribute IP address for the associated APN of UE, and by IP address and VLAN identify into Row association.Description specific as follows:

Step S1126:UE may send to non-3 GPP access network trusty and solicit (DHCPv6)/DHCP discovery (DHCPv4) message；

Step S1128: it is triggered if it is dhcp message and establishes session between non-3 GPP access network and PDN GW trusty If, then after non-3 GPP access network trusty receives dhcp message, need to establish additional PDN according to step S1108 The judgement of connection can send creation session request or agent binding update messages to PDN GW.Wherein, if an APN only It then include APN in the message if a PDN connection is established in support；But if identical APN, multiple PDN connections are established Words then include APN and PDN connection identifier in the message, wherein non-3 GPP access network trusty can locally generate a PDN Connection identifier；Other processes are referring to step S1116-S1122.

It is triggered if it is dhcp message if establishing session between non-3 GPP access network and PDN GW trusty, step S1328 just exists.

Step S1130: non-3 GPP access network trusty replys notice (DHCPv6)/DHCP to UE and provides message It (DHCPv4), may include UE IP address in message.

Step S1132:UE sends request (DHCPv6)/DHCP request (DHCPv4) to non-3 GPP access network trusty, Non-3 GPP access network trusty is replied to UE replies (DHCPv6)/DHCP confirmation (DHCPv4), in the message comprising UE IP Location.

Step S1134:UE may send route request information to non-3 GPP access network trusty；

Step S1136: it triggers if it is route request information and is established between non-3 GPP access network and PDN GW trusty If session, then after non-3 GPP access network trusty receives route request information, need to establish volume according to step S1108 The judgement of outer PDN connection can send creation session request or agent binding update messages to PDN GW.Wherein, if one A APN is only supported if establishing a PDN connection, then includes APN in the message；But if identical APN, establish multiple PDN It then include APN and PDN connection identifier in the message, wherein non-3 GPP access network trusty can locally generate one if connection A PDN connection identifier；Other processes are referring to step S1116-S1122.

It is triggered if it is route request information if establishing session between non-3 GPP access network and PDN GW trusty, step Rapid S1136 is just executed.

Step S1138: non-3 GPP access network trusty replys routing confirmation message to UE, may include UE in message IP address.

Illustrate: UE when receiving the IP address that non-3 GPP access network trusty returns, it is local also will do it MAC Address, The association of APN, IP address and VLAN mark etc..

In above-described embodiment, if UE is if PDN connection before is all access EPC, subsequent, UE can recognize in EAP APN is not carried in card message to non-3 GPP access network trusty, it can be service distributing to network decision, trusty non- It is that UE distributes VLAN ID, and returns to UE by EAP authentication response message that 3GPP, which accesses net,.This when, in above-described embodiment Step S1116-S1122, S1128, S1136 do not execute, other steps are performed both by, and difference is: non-3 gpp trusty connects Networking local is that UE distributes IP address.

Preferred embodiment four

In the embodiment, when UE first passage non-3 GPP access EPC trusty, UE passes through dhcp message or routing sign Message is sought, APN information is passed into non-3 GPP access network trusty, then, non-3 GPP access network trusty can distribute VLAN mark, and pass to UE.For details, reference can be made to process as shown in figure 14, which includes the following steps S1202 to step S1224。

The distinctive process of non-3 gpp is executed between step S1202:UE and non-3 GPP access network trusty.

Step S1204:UE completes EAP authentication process.In the process, non-3 GPP access network trusty will do it UE MAC The association of address and IMSI.

Step S1206:UE may send to non-3 GPP access network trusty and solicit (DHCPv6)/DHCP discovery (DHCPv4) message includes APN information in the message, to request distribution IP address.

Step S1208: non-3 GPP access network trusty, which receives, solicits (DHCPv6)/DHCP discovery (DHCPv4) message Afterwards, APN information is obtained, and distributes a VLAN ID, it is local to save MAC Address, APN information, between VLAN ID and IMSI Incidence relation；Non-3 GPP access network trusty can send creation session request or agent binding update messages to PDN GW, It include APN in the message；This when, non-3 GPP access network trusty can by VLAN identify and GTP/PMIP session identification into Row association.

The operation of IP-CAN session establishment is executed between step S1210:PDN GW and PCRF.

Step S1212:PDN GW updates the address PDN GW by AAA Server, to HSS.

Step S1214:PDN GW sends creation conversational response to non-3 GPP access network trusty or agent binding is true Recognize message.

Step S1216: non-3 GPP access network trusty replys notice (DHCPv6)/DHCP to UE and provides message It (DHCPv4), may include UE IP address in message.

Step S1218:UE sends request (DHCPv6)/DHCP request (DHCPv4) to non-3 GPP access network trusty, Non-3 GPP access network trusty is replied to UE replies (DHCPv6)/DHCP confirmation (DHCPv4), in the message comprising UE IP Location and VLAN mark.IP address and VLAN mark are associated by non-3 GPP access network trusty.

Step S1220:UE may send route request information to non-3 GPP access network trusty；

Step S1222: it triggers if it is route request information and is established between non-3 GPP access network and PDN GW trusty If session, then after non-3 GPP access network trusty receives route request information, APN information is obtained, and distribute one VLANID, it is local to save MAC Address, APN information, the incidence relation between VLAN ID and IMSI；Non-3 GPP access trusty Net can send creation session request or agent binding update messages to PDN GW, include APN in the message；It this when, can The non-3 GPP access network of trust can identify VLAN and GTP/PMIP session identification is associated.Other processes are referring to step S1210-S1214。

Step S1224: non-3 GPP access network trusty replys routing confirmation message to UE, may include UE in message IP address and VLAN mark.IP address and VLAN mark are associated by non-3 GPP access network trusty.

In above-described embodiment, if UE does not carry APN to non-3 GPP access network trusty in dhcp message, and network If decision UE is service distributing, then non-3 GPP access network trusty is that UE distributes VLAN ID, and passes through dhcp response message Return to UE.This when, step S1208-S1214, S1222 in above-described embodiment do not execute, other steps are performed both by, area Be not: non-3 GPP access network trusty is locally UE distribution IP address.

Preferred embodiment five

In the embodiment, UE by non-3 GPP access EPC trusty after, UE is again by dhcp message or road By solicitation message, additional PDN connection is established；Non-3 GPP access network trusty can distribute VLAN mark, and pass to UE.So Afterwards, non-3 GPP access network trusty sends the information in the creation tunnel GTP/PMIP to PDN GW, includes PDN connection in information Relevant information.For details, reference can be made to flow chart as shown in figure 15, which includes the following steps S1302 to step S1322.

Step S1302:UE is initially accessed 3GPP EPC network by non-3 gpp.

Step S1304:UE may send to non-3 GPP access network trusty and solicit (DHCPv6)/DHCP discovery (DHCPv4) message includes APN information in the message, to request distribution IP address.

Step S1306: non-3 GPP access network trusty, which receives, solicits (DHCPv6)/DHCP discovery (DHCPv4) message Afterwards, according to MAC Address and APN information, associated VLAN ID is searched, if with the presence of VLAN ID, then it is assumed that should Under APN, mono- PDN connection of Yao Xinjian；If existed without associated VLAN ID, still, there are other APN under the MAC Address If associated session, then it is assumed that the UE will ask the PDN connection looked for novelty to be established；This when, non-3 GPP access network trusty A VLAN ID can be distributed, it is local to save MAC Address, APN information, the incidence relation between VLAN ID and IMSI；Then, may be used The non-3 GPP access network of trust can send creation session request or agent binding update messages to PDN GW, include in the message APN；This when, non-3 GPP access network trusty can identify VLAN and GTP/PMIP session identification is associated.

The operation of IP-CAN session establishment is executed between step S1308:PDN GW and PCRF.

Step S1310:PDN GW updates the address PDN GW by AAA Server, to HSS.

Step S1312:PDN GW sends creation conversational response to non-3 GPP access network trusty or agent binding is true Recognize message.

Step S1314: non-3 GPP access network trusty replys notice (DHCPv6)/DHCP to UE and provides message It (DHCPv4), may include UE IP address in message.

Step S1316:UE sends request (DHCPv6)/DHCP request (DHCPv4) to non-3 GPP access network trusty, Non-3 GPP access network trusty is replied to UE replies (DHCPv6)/DHCP confirmation (DHCPv4), in the message comprising UE IP Location and VLAN mark.IP address and VLAN mark are associated by non-3 GPP access network trusty.

Step S1318:UE may send route request information to non-3 GPP access network trusty；

Step S1320: it triggers if it is route request information and is established between non-3 GPP access network and PDN GW trusty If session, then after non-3 GPP access network trusty receives route request information, APN information is obtained, and distribute one VLAN ID, it is local to save MAC Address, APN information, the incidence relation between VLAN ID and IMSI；Non-3 gpp trusty connects Creation session request or agent binding update messages can be sent to PDN GW by networking, and include APN in the message；This when, Non-3 GPP access network trusty can identify VLAN and GTP/PMIP session identification is associated.Other processes are referring to step S1308-S1312。

Preferably, VLAN ID can be distributed in the following way in the present embodiment: according to MAC Address and APN information, Associated VLAN id information is searched, if creating a PDN connection with the presence of VLAN ID；If do not closed If the VLAN ID of connection exists, still, there are if the associated VLAN ID of other APN, then create a PDN to connect under the MAC It connects；This when, non-3 GPP access network trusty can distribute a VLAN ID for newly-built PDN connection.

Step S1322: non-3 GPP access network trusty replys routing confirmation message to UE, may include UE in message IP address and VLAN mark.IP address and VLAN mark are associated by non-3 GPP access network trusty.

In above-described embodiment, if UE is if PDN connection before is all access EPC, subsequent, UE is in dhcp message APN is not carried to non-3 GPP access network trusty, and network decision UE is service distributing, then non-3 gpp trusty connects Network is that UE distributes VLAN ID, and returns to UE by dhcp response message.This when, the step in above-described embodiment S1306-S1312, S1320 are not executed, other steps are performed both by, and difference is: non-3 GPP access network trusty is locally UE Distribute IP address.

Embodiment six

In the embodiment, when UE is by trusted WLAN(TWAN) access EPC, subsequent request IP address is used The IA ID that the xid/client id that DHCPv4 process uses is used as PDN connection identifier or DHCPv6 process is as PDN Connection identifier is sent to TWAN included in EAP message.For details, reference can be made to process as shown in figure 16, which includes following step Rapid S1402 to step S1444.

The distinctive process of non-3 gpp is executed between the step S1402:UE and WLAN of trust access net.

Step S1404:UE accesses net to TWAN and sends 802.1x EAPOL-Start message.

Step S1406:TWAN can reply EAP-REQ/Identity message, request UE mark as EAP authentication person to UE Know；

After step S1408:UE receives EAP-REQ/Identity message, can send EAP-RSP/Identity message to TWAN carries the APN of request in message, requests the PDN connection identifier established, used herein is that subsequent DHCPv4 process uses Xid/client id as PDN connection identifier, DHCPv4 can be requested the address IPv4 of distribution by such side UE and network side It connects and associates with PDN；

Other message of step S1410-S1420:UE execution EAP authentication process.Wherein, TWAN receives EAP-RSP/ It is local to save MAC Address, APN information, the incidence relation between PDN connection identifier after Identity message；UE is replied in TWAN EAP message (being specifically as follows EAP-RES/AKA '-Identity, perhaps EAP-RES/AKA '-Challenge or EAP recognize Demonstrate,prove success message.) in, PDN connection identifier can be carried.

Step S1422: if establishing session between EAP authentication message trigger TWAN and PDN GW, then TWAN connects After networking receives the successful message of EAP authentication, creation session request or agent binding update messages can be sent to PDN GW, APN and PDN connection identifier information comprising request in the message, local xid/client id can be mapped to by TWAN here GTP sessions carry mark or PMIP binding between PGW update the PDN connection identifier in association.

The operation of IP-CAN session establishment is executed between step S1424:PDN GW and PCRF.

Step S1426:PDN GW updates the address PDN GW by AAA Server, to HSS.

Step S1428:PDN GW sends creation conversational response or proxy binding acknowledgment messages to TWAN.

GTP/PMIP session is established if it is between EAP authentication message trigger TWAN and PDN GW, then step S1422- S1428 just exists.

Step S1430:TWAN sends EAP authentication success message to UE.Wherein, if do not had in step S1412-S1418 Have and carry PDN connection identifier, then in this step, network carries PDN connection identifier and confirms to UE.

Step S1432:UE sends DHCPv4 to TWAN and finds message, and request distributes IP address, carries in the message Xid/client id is the PDN connection identifier of EAP authentication authorization and network validation.

Step S1434: if establishing session between DHCPv4 message trigger TWAN and PDN GW, then TWAN is received After DHCPv4 message, creation session request or agent binding update messages can be sent to PDN GW, includes request in message APN and PDN connection identifier information, local xid/client id can be mapped to the GTP meeting between PGW by TWAN here It talks about load identification or PMIP binding updates the PDN connection identifier in being associated with；At this point, TWAN can be by PDN connection identifier and GTP/ PMIP session identification is associated.Other are referring to step S1424-S1428.

Session is established if it is between DHCPv4 message trigger TWAN and PDN GW, just executes step S1434.

Step S1436:TWAN is associated with corresponding PDN connection according to the xid/client id in DHCPv4 message, returns to UE Multiple DHCPv4 distributes the address UE IPv4.

Step S1438:UE sends DHCPv4 request message to TWAN, and TWAN sends DHCPv4 confirmation message to UE, this disappears Include UE IP address in breath, and IP address and PDN connection identifier are associated.

Step S1440:UE be establish another PDN connection establish request message to TWAN initiation EAP authentication authorization flow, With S1404-S1430 step, UE request at this time is APN-2, and PDN connection identifier, it is two, one that connection identifier is practical at this time It is the xid/client id of corresponding DHCPv4 process, one is the IA ID in corresponding DHCPv6 process, the two marks can reflect It is mapped to the PDN connection identifier of identical GTP sessions carry ID or PMIP association binding between subsequent TWAN and PGW.

Step S1442:UE initiates DHCPv4 process to TWAN, obtains the address IPv4 of new PDN connection, wherein DHCPv4 Xid/client id in message is the PDN connection identifier that EAP is carried in 620 steps.

Step S1444:UE initiates DHCPv6 process to TWAN, obtains the IPv6 prefix of new PDN connection, wherein DHCPv6 IA ID in message is the PDN connection identifier that EAP is carried in 620 steps.

Illustrate: when receiving the IP address of TWAN return, local MAC Address, APN, IP address and the PDN of also will do it connects UE Connect the association of mark.

Preferred embodiment seven

In the present embodiment, when UE is by trusted WLAN(TWAN) access EPC, PDN connection identifier is corresponding to UE's Interface id is sent to TWAN included in EAP message, or is divided interface id by TWAN in EAP process Dispensing UE, UE use this interface id as link local address, carry out the address that RS/RA is interacted as with TWAN, In the present embodiment, a precondition is that UE has a corresponding link local address for each PDN connection. For details, reference can be made to process as shown in figure 17, which includes the following steps S1502 to step S1534.

Step S1502-S1506: with step S1402-S1406.

Step S1508-S1530: the same S1408-S1430 of basic procedure processing, unlike, UE receives EAP-REQ/ After Identity message, EAP-RSP/Identity message can be sent to TWAN, the APN of request is carried in message, request is established PDN connection identifier, used herein is that the link local address that the RS/RA of subsequent allocations IPv6 prefix is used interchangeably includes For interfaceid as PDN connection identifier, such side UE and network side can be by the IPv6 prefixes and PDN of RS/RA cross allocation Connection associates；Another way, UE do not send interface id, but are that UE distributes interface by network side Id can be handed down to UE in the downlink EAP message of step S1512 or S1530 network to UE.

Step S1532-S1534:UE sends route request information RS to TWAN and requests IPv6 prefix, wherein the source of RS message The interface id of address link local address connects mark with the PDN of network convention for UE in front S1508-S1530 step Know, correspondingly, TWAN is also the link local address in the RA message destination address sent to UE；Another situation, if Interface id is distributed by network side, then UE can not send RS.

Illustrate: UE is local also to will do it MAC Address, APN, IP address and PDN when receiving the IPv6 prefix of TWAN return The association of connection identifier.

Preferred embodiment eight

In the preferred embodiment, when UE is by trusted WLAN(TWAN) access EPC, PDN connection identifier corresponds to UE Interface id, TWAN is sent to included in EAP message, or in EAP process by TWAN by interface id UE is distributed to, UE uses this interface id as link local address, carries out the ground that RS/RA is interacted as with TWAN Location, in the present embodiment, a precondition is, UE for each PDN connection with having a corresponding link local Location.For details, reference can be made to process as shown in figure 18, which includes the following steps S1602 to step S1634.

Step S1602- step S1606: with step S1502-S1506.

Step S1608-S1630: the same S1508-S1530 of basic procedure processing, unlike, UE receives EAP-REQ/ After Identity message, EAP-RSP/Identity message can be sent to TWAN, the APN of request is carried in message, request is established PDN connection identifier, used herein is that the link local address that the RS/RA of subsequent allocations IPv6 prefix is used interchangeably includes Interface id as PDN connection identifier, such side UE and network side can by the IPv6 prefix of RS/RA cross allocation and PDN connection associates；Another way, UE do not send interface id, but are that UE distributes interface by network side Id can be handed down to UE in the downlink EAP message of step S1612 or S1630 network to UE；

Step S1632-S1634:UE sends route request information RS to TWAN and requests IPv6 prefix, wherein the source of RS message The interface id of address link local address connects mark with the PDN of network convention for UE in front S1608-S1630 step Know, correspondingly, TWAN is also the link local address in the RA message destination address sent to UE；Another situation, if Interface id is distributed by network side, then UE can not send RS.

GAS-ANQP recovery request/recovery is carried out between step S1628-S1630:UE and non-3 GPP access network trusty Response interaction, completes the transmitting of other information.

Preferred embodiment nine

In the preferred embodiment, it UE first passage non-3 GPP access EPC trusty or has completed to be initially accessed When, APN information is passed to non-3 GPP access network trusty by 802.11u message by UE.Then, non-3 gpp trusty Access net can distribute VLAN mark, and pass to UE by GAS-ANQP response message.The process of this preferred embodiment such as Figure 19 It is shown.

Step 1801a, the processing of 1802-1804:UE first passage non-3 GPP access trusty, referring specifically to embodiment Nine associated description.

Step 1801b:UE has been completed through non-3 GPP access trusty.

Step 1805-1806:UE and non-3 GPP access network trusty carry out GAS-ANQP initial request/initial communication and hand over Mutually, UE may carry APN information in GAS-ANQP initial request message；Then, non-3 GPP access network trusty can be to UE VLAN id information can be carried, also tie up IMSI and VLANID within the message by returning to GAS-ANQP initial communication message It is fixed.

Following dhcp message or routing solicits/route request information, can be all sent to by the VLAN trusty Non-3 GPP access network, VLAN mark is to obtain in step 1806.It is identified by VLAN, non-3 GPP access network trusty The information such as associated APN can be found, and then distribute IP address for the associated APN of UE, and IP address and VLAN mark are carried out Association.It is described in detail below:

Step 1807-1816: with step S1032-S1044.

GAS-ANQP recovery request/recovery is carried out between step S1817-S1818:UE and non-3 GPP access network trusty Response interaction, completes the transmitting of other information.

In above-described embodiment, if if UE does not carry APN to non-3 GPP access network trusty in 802.11u message Or PDN connection before all be access EPC if, it is subsequent, UE can not carried in 802.11u response message APN to Non-3 GPP access network trusty, it can be service distributing to network decision, and non-3 GPP access network trusty is UE distribution VLAN ID, and UE is returned to by 802.11u response message.This when, step S1808-S1811 in above-described embodiment, S1815 is not executed, other steps are performed both by, and difference is: non-3 GPP access network trusty is locally UE distribution IP address.

It should be noted that being described by taking WLAN as an example in above preferred embodiment, for above preferred embodiment In scheme equally use other kinds of non-3 GPP access network trusty, it is not limited here.

Through the foregoing embodiment, PDN connection method and device are provided, PDN connection identifier is sent to network side using UE Or APN mark has obtained the mode of IP address, solves in relevant scheme without how providing UE by WLAN access, builds The problem of standing additional PDN connection realizes UE by WLAN etc. and establishes PDN connection, has achieved the effect that improve network performance. It should be noted that these technical effects are not possessed by above-mentioned all embodiments, some have the technical effect that certain What preferred embodiment could obtain.

Obviously, those skilled in the art should be understood that each module of the above invention or each step can be with general Computing device realize that they can be concentrated on a single computing device, or be distributed in multiple computing devices and formed Network on, optionally, they can be realized with the program code that computing device can perform, so as to be stored in It is performed by computing device in storage device, perhaps they are fabricated to each integrated circuit modules or will be in them Multiple modules or step be fabricated to single integrated circuit module to realize.In this way, the present invention is not limited to any specific hard Part and software combine.

The foregoing is only a preferred embodiment of the present invention, is not intended to restrict the invention, for the skill of this field For art personnel, the invention may be variously modified and varied.All within the spirits and principles of the present invention, made any to repair Change, equivalent replacement, improvement etc., should all be included in the protection scope of the present invention.

Claims

1. a kind of packet data network PDN connection method for building up, characterized by comprising:

User equipment (UE) receives one of the following message that non-3 GPP access network trusty is sent, wherein the message carries It is identified for the corresponding virtual LAN VLAN of PDN connection of UE distribution:

It is the authentication protocol EAP authentication authorization messages of extension, DynamicHost setting Protocol DHCP messages, advertising of route message, electrical With Electronic Engineering Association's IEEE 802.11u message；

The UE carries out the transmission of signaling and/or data using VLAN mark.

2. the method according to claim 1, wherein the UE using the VLAN mark carry out signaling and/or The transmission of data includes:

The UE identifies the VLAN and the PDN information of the UE is bound, using the VLAN after the binding identify into The transmission of the row signaling and/or the data.

3. according to the method described in claim 2, it is characterized in that, the PDN information includes at least one of: media access Control MAC Address, international mobile subscriber identity IMSI information, access point name APN information, general data transfer platform/generation Manage mobile Internet Protocol GTP/PMIP session identification.

4. the method according to claim 1, wherein the signaling includes at least one of: dhcp message, road By request message, advertising of route message.

5. method according to claim 1 to 4, which is characterized in that the non-3 GPP access network trusty It include: WLAN WLAN.

6. a kind of packet data network PDN connection method for building up, characterized by comprising:

Non- third generation affiliate 3GPP access net trusty gives user equipment (UE) distribution PDN connection corresponding virtual LAN VLAN mark；

VLAN mark is sent to the UE by one of following message by non-3 GPP access network trusty:

The non-3 GPP access network trusty carries out the transmission of signaling and/or data using VLAN mark.

7. according to the method described in claim 6, it is characterized in that, the non-3 GPP access network trusty uses the VLAN Mark carries out signaling and/or the transmission of data includes:

The VLAN is identified and is bound with the PDN information of the UE by the non-3 GPP access network trusty, using described VLAN mark after binding carries out the transmission of the signaling and/or the data.

8. the method according to the description of claim 7 is characterized in that the PDN information includes at least one of: media access Control MAC Address, international mobile subscriber identity IMSI information, access point name APN information, GPRS network Tunnel protocol/proxy mobile internet protocol GTP/PMIP session identification.

9. the method according to the description of claim 7 is characterized in that the signaling includes at least one of: dhcp message, road By request message, advertising of route message.

10. according to the method described in claim 6, it is characterized in that, non-3 GPP access network trusty is to user equipment (UE) point Include: with VLAN mark

According to MAC address and access point name APN information, judgement is the non-3 GPP access network trusty It is no to exist and the associated VLAN id information of the APN information under the MAC Address；

If it is judged that be it is yes, then establish a first PDN connection；

If it is judged that being no, and determine that other APN under the MAC Address in addition to the APN exist and other APN Associated VLAN ID then establishes a 2nd PDN connection；

The non-3 GPP access network trusty is that the first PDN connection or the 2nd PDN connection distribute a VLANID.

11. the method according to any one of claim 6 to 10, which is characterized in that the non-3 GPP access trusty Net includes: WLAN WLAN.

12. device is established in a kind of packet data network PDN connection, it is applied to user equipment (UE), characterized by comprising:

Second receiving module, for receiving one of the following message that non-3 GPP access network trusty is sent, wherein the message Carry the corresponding virtual LAN VLAN mark of PDN connection of promising UE distribution:

First processing module, for using the VLAN mark to carry out the transmission of signaling and/or data.

13. device according to claim 12, which is characterized in that the first processing module includes:

First binding module, for binding VLAN mark and the PDN information of the UE；

First transmission module, for using the mark of the VLAN after the binding to carry out the transmission of the signaling and/or the data.

14. device is established in a kind of packet data network PDN connection, it is applied to non-third generation affiliate 3GPP access trusty Net, characterized by comprising:

Second distribution module, for being identified to the corresponding virtual LAN VLAN of user equipment (UE) distribution PDN connection；

4th sending module, for VLAN mark to be sent to the UE by one of following message:

Second processing module, for using the VLAN mark to carry out the transmission of signaling and/or data.

15. device according to claim 14, which is characterized in that second distribution module includes:

Judgment module judges whether there is and institute for according to MAC address and access point name APN information State the associated VLAN id information of the APN information under MAC Address；

First establishes module, and the judging result for the judgment module is when being, then to establish a first PDN connection；

Second establishes module, and the judging result for the judgment module is no, and determines under the MAC Address except described When other APN except APN have VLAN ID associated with other APN, then a 2nd PDN connection is established；

Third distribution module, for distributing a VLAN ID for the first PDN connection or the 2nd PDN connection.

16. device according to claim 14, which is characterized in that the Second processing module includes:

Second binding module, for binding VLAN mark and the PDN information of the UE；

Second transmission module, for using the mark of the VLAN after the binding to carry out the transmission of the signaling and/or the data.