WO2013107136A1

WO2013107136A1 - Terminal access authentication method and customer premise equipment

Info

Publication number: WO2013107136A1
Application number: PCT/CN2012/075783
Authority: WO
Inventors: 黄保庆; 孔涛; 朱莉
Original assignee: 华为技术有限公司
Priority date: 2012-01-19
Filing date: 2012-05-19
Publication date: 2013-07-25
Also published as: RU2013106254A; CN102572830B; CN102572830A; RU2556468C2

Abstract

Embodiments of the present invention provide a terminal access authentication method and customer premise equipment (CPE). The method comprises: a CPE sending, according to an IP address of each access controller (AC) in a server of a WLAN, a discovery request to each AC; if the CPE receives a discovery response which is corresponding to the discovery request and returned by any one of the ACs, the CPE establishing a CAPWAP tunnel with any one of the ACs; and the CPE enabling a terminal connected to the CPE to access the WLAN through the CAPWAP tunnel and enabling the server of the WLAN to authenticate the terminal accessing the WLAN through the CAPWAP tunnel. This method solves the problem that a terminal accessing through WiFi or an Ethernet port is separately authenticated in a WLAN based on an LTE-EPC network.

Description

Method for terminal access card and user terminal

Technical field

The embodiments of the present invention relate to communication technologies, and in particular, to a terminal access authentication method and a user equipment.

Background technique

In the communication system, Customer Premise Equipment (CPE) includes a home gateway, an access point (AP), a modem, a router, a data card, and the like. With the development of home broadband services, CPE has become more and more widely used in home networks.

The current wireless local area network (WLAN) needs to be deployed based on the resources of the Long Term Evolution-Evolved Packet Core (LTE-EPC network). For this reason, the existing terminal can directly access the LTE-EPC network. However, when the terminal accesses the WLAN network, it needs to pass the LTE-EPC network, that is, the interaction information between the LTE-EPC network transparent transmission terminal and the WLAN network.

However, the LTE CPE in the prior art has a built-in WiFi AP and an Ethernet port, and supports a smart phone and a personal computer (PC) to access the LTE-EPC network through a WiFi interface or a PC through an Ethernet port. . According to the 3GPP standard, the LTE-EPC network can only perceive the LTE CPE, and the LTE CPE is used as the unit to charge, and cannot access the WiFi terminal that accesses the LTE CPE, so that the WiFi terminal cannot be separately authenticated, and then the LTE-EPC network is accessed. The WLAN network cannot perform separate authentication, accounting, or Quality of Service (QoS) management for WiFi terminals. Summary of the invention

The embodiment of the invention provides a terminal access authentication method and a client device, which are used to solve the problem that the WLAN network relying on the LTE-EPC network cannot separately authenticate the terminal connected to the CPE in the prior art.

The present invention provides a method for terminal access authentication, including: The client device CPE sends a discovery request to each AC according to an Internet Protocol (IP) address of each access controller AC in the server of the wireless local area network WLAN network;

If the CPE receives a discovery response corresponding to the discovery request returned by any of the ACs, the CPE establishes a control and configuration of the wireless access point with any of the ACs (Control and Provisioning of Wireless Access Points, referred to as CAP WAP) l3⁄4 Road;

The CPE accesses the terminal connected to the CPE to the WLAN network by using the CAP WAP tunnel, and causes the server of the WLAN network to access the terminal accessing the WLAN network by using the CAP WAP tunnel. Certification.

The present invention provides a client device, including:

a sending unit, configured to send a discovery request to each AC according to an IP address of each access controller AC in a server of the WLAN WLAN network;

a receiving unit, configured to receive a discovery response corresponding to the discovery request returned by any one of the ACs;

An establishing unit, configured to establish, by the receiving unit, a control response and a configuration CAPWAP tunnel of the wireless access point with any of the ACs after receiving the discovery response corresponding to the discovery request returned by any of the ACs ;

An access unit, configured to access a terminal connected to the user equipment to the WLAN network by using the CAPWAP tunnel, and enable the server of the WLAN network to authenticate the terminal accessing the WLAN network by using the CAPWAP tunnel.

According to the foregoing technical solution, the terminal access authentication method and the user equipment in the embodiment of the present invention, the CPE is based on the CAPWAP protocol and the CAPWAP tunnel established by the AC in the server of the WLAN network, and the CAPWAP tunnel can enable the terminal connected to the CPE. The WLAN network, in turn, enables the server in the WLAN network to authenticate the terminal accessing the WLAN network by using the CAPWAP tunnel, and solves the problem that the WLAN network accessing the LTE-EPC network in the prior art cannot separately authenticate the terminal connected to the CPE. DRAWINGS In order to more clearly illustrate the technical solution of the present invention, a brief description of the drawings to be used in the embodiments will be briefly described below. It is obvious that the following drawings are only drawings of some embodiments of the present invention, which are common in the art. For the skilled person, other drawings which can also realize the technical solution of the present invention can also be obtained according to the drawings without any creative labor.

1 is a scenario diagram of a terminal connected to a WLAN network according to the present invention;

2 is a scenario diagram of a terminal connected to a WLAN network according to an embodiment of the present invention;

FIG. 3 is a schematic flowchart of a method for access authentication of a terminal according to an embodiment of the present invention; FIG. 4 is a schematic flowchart of a method for access authentication of a terminal according to another embodiment of the present invention; FIG. FIG. 6 is a schematic flowchart of a method for terminal access authentication according to another embodiment of the present invention; FIG. 7 is a schematic diagram of a terminal access authentication method according to another embodiment of the present invention; FIG. 8 is a schematic flowchart of a method for access authentication of a terminal according to another embodiment of the present invention; FIG. 9 is a schematic structural diagram of a user equipment according to another embodiment of the present invention;

FIG. 10 is a schematic structural diagram of a user equipment according to another embodiment of the present invention. detailed description

The technical solutions of the present invention will be clearly and completely described in the following with reference to the accompanying drawings in the embodiments of the present invention. It will be apparent that the various embodiments described below are merely exemplary embodiments of the invention. Based on the following various embodiments of the present invention, those skilled in the art can obtain other technical features that can solve the technical problems of the present invention and achieve the technical effects of the present invention by equivalently transforming some or even all of the technical features without creative work. The various embodiments of the invention are apparent from the scope of the invention as disclosed.

In order to enable a person skilled in the art to better understand the technical solutions provided by the embodiments of the present invention, some simple introductions are made to the prior art solutions, as shown in FIG. 1 , in a solution of the prior art, in the LTE CPE 11 The built-in AP, and the LTE CPE 11 with built-in APs are also provided with an Ethernet port, and thus various terminals can be directly connected to the LTE CPE 11, for example, a personal computer (Person Computer, PC for short) 10 is accessed through WiFi. The network, or PC 10, accesses the network through an Ethernet port.

At this time, the LTE-EPC network 12 only perceives the LTE CPE, and can only perform charging in units of LTE CPE, and cannot sense terminals connected behind the LTE CPE. Therefore, the WLAN network relying on the LTE-EPC network cannot perform separate authentication, charging, and QoS management on the terminal connected to the LTE CPE 11. In view of this, The embodiment of the invention provides a method for terminal access authentication, which is used to implement separate authentication for a terminal connected to a CPE to a WLAN network accessing an LTE-EPC network.

FIG. 2 is a schematic diagram of a scenario in which a terminal is connected to a WLAN network according to an embodiment of the present invention. As shown in FIG. 2, a thin AP may be integrated into the CPE 21 in the embodiment of the present invention, or a fat AP may be directly connected; The LTE-EPC network 22 can be connected to the LTE-EPC network 22 or connected to the WLAN network 23. The terminal 20 can access the LTE-EPC network 22 or connect to the WLAN network 23 through the Ethernet interface.

In particular, the CPE 21 in the embodiment of the present invention establishes a CAPWAP tunnel between the CPE 21 and the WLAN network accessing the LTE-EPC network, and the CPE 21 forwards the terminal connected to the CPE to the WLAN network server through the CAPWAP tunnel. The information is such that the terminal 20 connected to the CPE can access the WLAN network, and through the CAPWAP tunnel, the server of the WLAN network can perform authentication, charging, and QoS management on the terminal connected to the CPE.

It should be noted that the CPE 21 shown in FIG. 2 may have a built-in thin AP, or the CPE may be externally connected with a fat.

AP.

In other application scenarios, the terminal can also connect to the CPE through the Ethernet port.

It can be understood that the thin AP described in this embodiment only carries the bridge forwarding function, and the functions of terminal access, AP uplink, authentication, routing, AP management, security protocol, and QoS are all remotely connected by AC and/or broadband. The bearer (Broadband Remote Access Server, BRAS for short) is completed.

The fat AP completely carries the function of 802.11, that is, the message based on the 802.11 protocol can be directly terminated at the fat AP. It can be understood that each fat AP can be independently managed as a separate network entity on the network, including terminal access, authentication, data forwarding, AP management, security protocols, routing, and QoS.

In an embodiment of the present invention, the method for accessing the terminal in the embodiment is as follows.

The CPE connects the terminal connected to the CPE to the WLAN network of the LTE-EPC network through the CAPWAP tunnel, and enables the server of the WLAN network to authenticate the terminal accessing the WLAN network through the CAPWAP tunnel.

For example, the foregoing CAPWAP tunnel may be a CAPWAP tunnel established by the CPE with the server of the WLAN network after the LTE-EPC network attach procedure is completed.

It can be seen that, in the terminal access authentication method of the embodiment, the CAPWAP tunnel established by the CPE based on the CAPWAP protocol can enable the terminal connected to the CPE to access the WLAN network, thereby enabling the WLAN network to The server authenticates the terminal accessing the WLAN network by using the CAPWAP tunnel, and solves the problem that the WLAN network cannot separately authenticate the terminal connected to the CPE in the prior art.

FIG. 3 is a schematic flowchart of a method for access authentication of a terminal according to an embodiment of the present invention. As shown in FIG. 3, a method for accessing authentication of a terminal in this embodiment is as follows.

301, CPE according to each access controller in the server of the WLAN network (Access

The IP address of the Controller (AC) is sent to each AC to send discovery requests.

It should be noted that there are multiple ways to obtain the IP address of the AC, such as: domain name system (DNS) resolution, dynamic host configuration protocol (DHCP) option, static configuration IP address. , broadcasting, etc.

For example, the manner in which the IP address list information is obtained includes:

The CPE obtains the IP address of each AC in the server of the WLAN network from the Packet Data Network (PDN) gateway of the LTE-EPC network, where the LTE-EPC network is a network connected to the WLAN network (WLAN network access) To the LTE-EPC network, or the WLAN network depends on the LTE-EPC network). Or

The CPE obtains the domain name information of each AC in the server of the WLAN network from the PDN gateway of the LTE-EPC network, and sends a domain name resolution request including the domain name information of each AC to the DNS of the LTE-EPC network according to the domain name information of each AC, and receives The IP address list returned by the DNS according to the domain name resolution request. The IP address list contains the IP addresses of the respective ACs.

In this embodiment, the number of ACs is multiple. Correspondingly, the IP address list also includes multiple IP addresses, and each IP address corresponds to an AC.

302. If the CPE receives the discovery response corresponding to the discovery request returned by any AC in the AC, the CPE establishes a CAPWAP tunnel with any AC.

In this embodiment, the establishing a CAPWAP tunnel with the AC in the step 302 may include a CAPWAP control plane channel and a CAPWAP data plane channel. When the CPE is connected to a terminal, the CPE interacts with the AC through the CAPWAP control plane channel to establish an association between the CPE and the AC for the terminal. The CAPWAP data plane channel is used to enable the terminal to interact with the WLAN network.

303. The CPE accesses the CPE terminal to the WLAN network through the CAPWAP tunnel, and enables the server of the WLAN network to authenticate the terminal accessing the WLAN network through the CAPWAP tunnel.

Specifically, corresponding to the foregoing step 302, one of the ACs is not received at the CPE. The discovery response corresponding to the discovery request returned by the one or more ACs, after the interval preset time (for example, 10s, 5s, 15s, etc.), re-sends the discovery request to the AC that does not return the discovery response.

For example, the interval preset time in this embodiment may be an interval of 2s, 3s, l is, 20s, 30s, or the like. The terminal connected to the CPE may be a PC connected to the CPE through an external fat AP, a terminal connected to the CPE through an Ethernet port on the CPE, or a WiFi terminal accessed through a WiFi connection.

In the actual use process, after the foregoing step 302, and before the foregoing step 303, the terminal access authentication method further includes the step 304 not shown in FIG. 3 as follows.

The CPE receives the AP version information of the AP based on the CAPWAP tunnel, and the CPE sends a request for updating the version information of the AP to the AC, so that the CPE receives the AP version information and the version information of the AP set in the CPE. Establish the version of the AC update AP of the tunnel.

The CPE in this embodiment stores version information of the AP, such as a built-in thin AP or an external fat.

AP.

For example, the tunnel-established AC sends the version information of the AP that is required to establish the tunnel to the CPE through the CAPWAP control plane channel established by the foregoing, and the AP built in the CPE or the external AP determines whether the upgrade is needed.

Of course, in other embodiments, the CPE in step 304 is configured to receive configuration information corresponding to the AP version information, so that the CPE can view the internally set AP, while receiving the foregoing AP version information. The version information and configuration information are consistent with the version information and configuration information of the received AP.

It should be noted that the configuration information of the place carries the service set identifier (Service Set)

Identifier (abbreviated as SSID) configuration information, so that the WLAN network can better authenticate the accessed terminal.

It should be understood that, after the CPE and the AC establish a CANWAP tunnel, the information of the interaction, such as the AP version information and the configuration information, may refer to the relevant provisions in the CAPWAP protocol, which is not described in detail in this embodiment.

According to the foregoing embodiment, the method for obtaining the CAPWAP tunnel between the CPE and the AC is initiated by the CPE, and the CPE actively initiates a discovery request to the AC by using the IP address of the AC in the process of attaching the CPE to the LTE-EPC network. When the terminal accesses the WLAN network, the CAPWAP tunnel can interact with the AC that establishes the tunnel, thereby implementing the function of separately authenticating the terminal accessed by the WiFi access or the Ethernet interface in the WLAN network, and solving the prior art. Medium WLAN network cannot connect The CPE terminal performs the problems of separate authentication, separate charging, and QoS management.

The following is an example of how to obtain the IP address list information in the terminal access authentication method.

In an application scenario, the IP address list of the AC in the server of the WLAN network is preset in the CPE, and the IP address list includes the IP addresses of the ACs.

In another application scenario, the domain name information of the AC in the server of the WLAN network is preset in the CPE, and the CPE obtains the IP address list according to the domain name information as follows:

501. The CPE sends a domain name resolution request including the domain name information to the DNS of the LTE-EPC network according to the domain name information of the preset AC.

502. The DNS resolves the domain name information according to the domain name resolution request, and returns a list of IP addresses formed by the IP address corresponding to the domain name information of the AC.

In one case, the DNS in the foregoing step S01 can be used as a network element in the LTE-EPC network. In other cases, when deploying LTE-EPC networks and WLAN networks, DNS can also exist as a separate resolution server according to the deployment requirements of operators. At this time, in step S01, the CPE sends a domain name resolution request including the domain name information to the DNS according to the domain name information of the preset AC, to obtain an IP address list composed of the IP addresses corresponding to the domain name information of the AC.

In the third application scenario, the CPE obtains an AC IP address list from the PDN gateway by using a protocol configuration option (PCO) in the process of attaching to the LTE-EPC network.

Specifically, the CPE sends a request for obtaining an IP address of all ACs to the PDN gateway, and receives a list of IP addresses including IP addresses of all ACs returned by the PDN gateway according to the request for obtaining the IP address of the AC.

That is, the CPE obtains a list of IP addresses consisting of AC IP addresses from the PDN gateway of the LTE-EPC network.

In the fourth application scenario, the CPE sends a request for obtaining the domain name information of the AC to the PDN gateway, and receives the domain name information of the AC returned by the PDN gateway according to the request for acquiring the domain name information of the AC.

At this time, the CPE uses the extended protocol configuration item (Protocol) in the process of attaching to the LTE-EPC network.

Configuration Option ( PCO ) obtains the domain name information of the AC from the PDN gateway.

The CPE sends a domain name resolution request including the domain name information to the DNS of the LTE-EPC network according to the domain name information of the AC, and receives the IP address list returned by the DNS according to the domain name resolution request. The IP address in the IP address list is corresponding to the domain name information of the AC. IP address. In the fifth application scenario, the method for obtaining the IP address list of the AC is as follows: When the CPE is attached to the LTE-EPC network, the PDN gateway of the LTE-EPC network does not allocate an IP address, and the default bearer of the CPE is established. The Dynamic Host Configuration Protocol (DHCP) process obtains the IP address, default gateway, and DNS parameters of the CPE from the PDN gateway of the LTE-EPC network, and obtains the IP address list of the AC through option 43.

The method of obtaining the IP address list information of the AC is as follows: If the DHCP process in the first mode supports the option 15 option, and the option 15 is carried in the packet with the IP address of the CPE, the CPE will carry the option according to the option 15 The host name list of the AC obtains the IP address of the AC in the list from the DNS, and obtains a list of IP addresses of all ACs.

It should be noted that, in the foregoing LTE-EPC network, the IP address and the default gateway are allocated to the CPE as the standard flow of the existing DHCP allocation, and the option 43 and the option l5 are the information carried in the response message sent by the DHCP server to the CPE.

FIG. 4 is a schematic flowchart of a method for access authentication of a terminal according to another embodiment of the present invention. As shown in FIG. 4, the method for accessing authentication of a terminal in this embodiment is as follows.

401. The CPE sends a discovery request to each AC according to an IP address of each AC in the server of the WLAN network.

402. If the CPE receives the discovery response corresponding to the discovery request returned by any AC in the AC, the CPE establishes a CAP WAP tunnel with any AC.

403. The CPE receives the DHCP Discovery message (Dynamic Host Setup Protocol Discovery message), and sends the DHCP Discovery message to the AC that has established a tunnel with the CPE through the CAPWAP tunnel.

The DHCP Discovery message is sent by the terminal connected to the CPE to request access to the WLAN network. The DHCP Discovery message contains the Media Access Control (MAC) information of the terminal.

For example, the CPE encapsulates the DHCP Disco very message by using the CAPWAP protocol and sends it to the AC through the CAPWAP tunnel.

404. The CPE receives the DHCP offer message (dynamic host setting protocol providing message) corresponding to the DHCP Discovery message sent by the AC that establishes the tunnel through the CAPWAP tunnel, and the DHCP offer message carries the IP address corresponding to the MAC information allocated by the AC that establishes the tunnel. .

405. The CPE forwards the DHCP offer message to the terminal, so that the terminal is based on the AC point of establishing the tunnel. The assigned IP address is connected to the WLAN network, and the server of the WLAN network authenticates the terminal accessing the WLAN network through the CAPWAP tunnel.

In a practical application, before the CPE in step 403 sends the DHCP Discovery message to the AC that establishes the tunnel through the CAPWAP tunnel, the method for the terminal access authentication further includes the steps 406 and 407 which are not shown in FIG. 4 as follows.

406. The CPE obtains the MAC information of the terminal from the DHCP Discovery message sent by the terminal connected to the CPE, and sends an Association message (association message) to the AC that establishes the tunnel through the CAPWAP tunnel, where the Association message includes the MAC information of the terminal.

Specifically, the foregoing steps are used to indicate that the CPE receives a new terminal, and initiates an association step with the AC for the new terminal, so that the AC adds information related to the terminal.

407. After receiving the Association response message corresponding to the Association message returned by the AC that establishes the tunnel through the CAPWAP tunnel, the CPE establishes an association with the AC that establishes the tunnel according to the MAC information of the terminal.

In particular, in an actual application, after receiving the Association response message sent by the AC, the CPE also receives the configuration information of the added terminal message element sent by the AC, so that the CPE configures according to the configuration information of the place. For example, the CPE receives the AC sending station configuration Request message (terminal configuration request message), and sends a station configuration response message (terminal configuration response message) to the AC according to the station configuration Request message.

The station configuration request cancellation, the station configuration response, the association message, and the association response message are all specified in the CAPWAP protocol. This embodiment is only an example, and the information exchanged between the CPE and the AC is established. The content can refer to the provisions of the CAP WAP protocol.

In other embodiments, if the CPE receives multiple DHCP Discovery messages including the same MAC information sent by the terminal connected to the CPE, the CPE passes any one of the DHCP Discovery messages including the same MAC information through the CAPWAP tunnel. Send to the AC that established the tunnel and discard other messages in multiple DHCP Discovery messages.

Preferably, the CPE selects a Media Access Control (MAC) address of the first DHCP Discovery message in the DHCP Discovery message that includes the same MAC information to initiate the foregoing association process, and other DHCP Discovery messages are discarded. , does not trigger the associated flow Cheng.

In addition, if any port of the CPE receives multiple DHCP Discovery messages within a pre-configured detection time (such as 5s, 10s, 15s, 20s, 30s, etc.), and each DHCP Discovery message included in multiple DHCP Discovery messages is included. If the MAC information is different, multiple DHCP Discovery messages received from the port are discarded.

For example, a specific port of the CPE continuously receives 50 DHCP Discovery messages within 10s, or a specific port of the CPE receives 30 DHCP Discovery messages within 5s, and the MAC information included in the DHCP Discovery messages are different. The CPE can be considered as a network attacker to attack the network, and then the specific port receives the DHCP Discovery message during the detection time, and does not initiate the foregoing association process. The CPE suppresses the abnormality to prevent the terminal from attacking the network by replacing different MAC information. The specific port at this location is any port set in the CPE to connect to the WLAN network, such as an Ethernet port, or a port connected to a fat AP.

In the actual operation scenario, the CPE can identify the network to which the terminal accessing the CPE needs to connect from the working mode of the preset port.

Of course, there may also be a case where the same terminal connects to the WLAN network through different CPEs. At this time, the WLAN network processes the terminal as follows.

The AC that establishes the tunnel receives the Association message sent by another CPE through the CAPWAP tunnel, and determines, according to the MAC information in the Association message, that the terminal connecting another CPE and the terminal connected to the CPE are the same terminal, the CPE receives the AC that establishes the tunnel. The station configuration update message (status configuration update message) sent by the CAPWAP tunnel carries the delete station information element (delete status information element), and deletes the information related to the terminal according to the delete station information element. The problem of separately authenticating the terminals connected to the CPE enables the WLAN network to perform separate charging and QoS management for the terminals connected to the CPE.

FIG. 5 is a schematic diagram of a process for a terminal to disconnect a WLAN network in a method for access authentication of a terminal according to another embodiment of the present invention. As shown in FIG. 5, the process for a terminal to disconnect a WLAN network in this embodiment is as follows: Said.

501. After the connection between the terminal and the WLAN network is disconnected, the CPE sends through the CAPWAP tunnel. A Disassociation message (de-association message) is sent to the AC that establishes the channel, and the Disassociation message is used to remove the association between the AC that establishes the tunnel and the CPE.

Generally, the Disassociation message includes the MAC information of the terminal.

502. The CPE receives the response message corresponding to the Disassociation message sent by the AC through the CAPWAP tunnel, and the configuration information of the deleted terminal message element sent by the AC, and deletes the information related to the terminal according to the configuration information of the deleted terminal message element.

For example, deleting the configuration information of the terminal message element may be that the CPE receives the configuration information carried in the station configuration Request message sent by the AC.

In particular, before the step 501, the terminal access authentication method further includes:

If the CPE does not receive a connection within the set time (such as lmin, 5min, 10min, 50min)

The message sent by the terminal of the CPE including the service data determines that the connection between the terminal and the WLAN network is disconnected; or

The CPE checks that the state of the terminal connected to the specific port of the CPE is disconnected, and determines that the connection between the terminal and the WLAN network is disconnected, and then the CPE performs the process of disconnecting the WLAN network by the terminal.

Generally, a CPE can set a service time to determine the service data or the service data flow setting time (such as 8 min, 15 min, etc.), and the service data sent by the terminal is not received or the service data flow is zero. If the terminal is offline or disconnected, the CPE needs to initiate a de-association process for the terminal to the AC.

In other embodiments, if the terminal actively disconnects from the WLAN network and initiates the release process of the DHCP process of the WLAN network, the CPE also needs to initiate a de-association process for the terminal to the AC.

In addition, after the PC is powered off, the PC directly connects to the CPE Ethernet port in the disconnected state, and the CPE can sense the port status. When the CPE senses that the port status of the port is disconnected and does not recover within one minute, a de-association process for the PC is initiated.

It should be noted that the foregoing CAPWAP tunnel includes: CAPWAP control plane channel and

The CAPWAP data plane channel; the CPE sends the DHCP Discovery message to the AC through the CAPWAP data plane channel; the CPE receives the DHCP offer message sent by the AC through the CAPWAP data plane channel.

The aforementioned Association message, Association response message, station configuration Request The message, station configuration response message, etc. are all sent through the CAPWAP control plane channel. It can be understood that the interaction information that the CPE associates with the AC is transmitted through the CAPWAP control plane channel. The information that the terminal interacts with the WLAN network after the CPE is associated with the AC is transmitted through the CAPWAP data plane channel.

It can be seen from the foregoing embodiment that when the terminal connected to the CPE accesses the WLAN network,

The terminal corresponding to the AC refined management and operation can perform separate authentication, charging, and QoS management for the terminal. In addition, the above CPE can reduce the operator's investment cost. Further, the LTE-EPC network is used for Backhaul transmission. It is conducive to operators in the underdeveloped areas of the fixed network to conduct business and reduce investment costs, and has low dependence on terminals.

FIG. 6 is a schematic flowchart of a method for access authentication of a terminal according to an embodiment of the present invention. As shown in FIG. 6, the method for access authentication of a terminal in this embodiment is as follows.

The CPE in this embodiment is integrated with a CAPWAP protocol stack, and the CPE is connected to a home AP. Generally, the home AP is a fat AP, and the 802.11 air interface will terminate the 802.11 message on the fat AP side.

For example, the RJ45 port of the CPE is a port that connects to a normal AP in the home. At this time, the WiFi terminal connects to the CPE through a normal AP at home.

601. After the CPE establishes a CAP WAP tunnel with the AC, the CPE receives the DHCP Discovery message sent by the WiFi terminal through the AP, where the DHCP Discovery message includes the MAC information of the WiFi terminal, where it is used to indicate that a new WiFi terminal is pre-accessed to the WLAN network. .

602. The CPE obtains the MAC information of the WiFi terminal from the DHCP Discovery message, encapsulates the MAC information of the WiFi terminal, and sends an Association message to the AC that establishes the tunnel through the control plane channel of the CAPWAP tunnel, where the Association message includes the encapsulated WiFi terminal. The MAC information is used to inform the AC that there is a new WiFi terminal access, and at the same time, the CPE establishes an association with the established tunnel for the WiFi terminal.

603. The CPE receives the Association response message corresponding to the Association message returned by the AC that establishes the tunnel through the control plane channel of the CAPWAP tunnel, and establishes an association with the AC that establishes the tunnel according to the MAC information of the WiFi terminal.

604. After the CPE and the AC establish an association, the CPE sends the foregoing DHCP Discovery message including the MAC information of the WiFi terminal to the AC through the data plane channel of the CAPWAP tunnel.

605. The CPE receives the AC and sends the DHCP through the data plane channel of the CAPWAP tunnel. A DHCP offer message corresponding to the Discovery message, where the DHCP offer message carries an IP address corresponding to the MAC information allocated by the AC that establishes the tunnel.

606. The CPE forwards the DHCP offer message to the terminal, so that the terminal accesses the WLAN network based on the IP address allocated by the AC that establishes the tunnel, thereby implementing authentication of the WiFi terminal by the server of the WLAN network.

According to the foregoing embodiment, the method for accessing the authentication in the terminal establishes a CAPWAP tunnel between the CPE and the AC, and the CPE enables the terminal accessing the CPE to access the WLAN network through the CAPWAP tunnel, which enables the server of the WLAN network to pass the CAPWAP tunnel pair. The terminal performs authentication, which solves the problem that the WLAN network in the prior art cannot separately authenticate the terminal connected to the CPE.

According to another aspect of the present invention, the present invention further provides a method for terminal access authentication, the method comprising: connecting a terminal of a CPE to a CAP WAP channel established between a CPE and an AC to implement the terminal in relying on LTE-EPC Authentication in the network's WLAN network.

For example, FIG. 7 is a schematic flowchart of a method for access authentication of a terminal according to an embodiment of the present invention. As shown in FIG. 7, the method for access authentication of a terminal in this embodiment is as follows.

The authentication listed in this embodiment is WEB authentication. WEB authentication is the most common authentication method for WiFi terminals. Username/Password is used for authentication, authorization, and accounting.

After the WiFi terminal shown in FIG. 6 is connected to the WLAN network, FIG. 7 illustrates the WEB authentication process for the WiFi terminal.

The following AC, Broadband Remote Access Server (BRAS), Portal Server, Authentication, Authorization, and Accounting Server (Authentication, Authorization, Accounting, AAA Server) are all servers in the WLAN network. .

701. After the WiFi terminal accesses the WLAN network, the WiFi terminal sends an HTTP packet for access authentication to the CPE.

702. After receiving the HTTP packet sent by the WiFi terminal, the CPE re-encapsulates the HTTP packet according to the CAPWAP protocol, and sends the re-encapsulated HTTP packet to the AC through the CAPWAP data plane channel.

703. After receiving the HTTP packet sent by the CPE, the AC decapsulates the encapsulated HTTP packet, and forwards the decapsulated HTTP packet to the BRAS. The BRAS redirects the HTTP packet to the Portal Server.

(Portal server).

704. After receiving the HTTP packet, the Portal server passes the CAPWAP data plane channel to the CPE. Push the WEB authentication interface.

705. After receiving the WEB authentication interface sent by the Portal Server, the CPE forwards the WEB authentication interface to the WiFi terminal, so that the WiFi terminal side presents the WEB authentication interface, and then receives the Ussrnams and Password input by the user.

706. The CPE receives the user name, password, and the like sent by the WiFi terminal, and sends the information to the Portal Server through the CAPWAP data plane channel.

Specifically, the CPE sends the encapsulated user name and password to the Portal Server through the CAPWAP data plane channel.

707. After receiving the information such as the username and password, the Portal Server decapsulates and submits an authentication request to the BRAS.

708. After receiving the authentication request sent by the Portal server, the BRAS initiates an Access Request authentication message to the AAA server according to the authentication request.

709. After receiving the Access Request authentication message, the AAA server authenticates the user name and password of the WiFi terminal. If the authentication of the AAA server passes, the Access accept message is sent to the BRAS.

Otherwise, an error message is returned.

710. The BRAS receives the Access accept message sent by the AAA server, and returns a response message corresponding to the Access accept message to the AAA server, and returns a response message of the authentication to the Portal Server according to the Access Accept message.

711. After receiving the response message, the Portal server sends a successful authentication interface to the CPE through the CAPWAP data plane channel. The CPE forwards the successfully authenticated interface to the WiFi terminal, so that the WiFi terminal triggers the heartbeat handshake message, and then the WiFi terminal. The normal service of the WLAN network is performed, and the WLAN network initiates charging for the WiFi terminal.

FIG. 8 is a schematic flowchart of a method for access authentication of a terminal according to an embodiment of the present invention. As shown in FIG. 8, the method for access authentication of a terminal in this embodiment is as follows.

After the WiFi terminal shown in FIG. 7 completes the WEB authentication, FIG. 8 illustrates the charging process for the WiFi terminal.

801. After the WiFi terminal completes the WEB authentication of the WLAN network, the BRAS initiates an Account Request Start message (accounting request start message) for the WiFi terminal to the AAA server, and prompts the AAA server to start charging for the WiFi terminal. 802. The AAA server returns a charging start response message to the BRAS.

803. The uplink traffic of the WiFi terminal accessing the WLAN network service is sent by the CPE to the BRAS through the CAPWAP data plane channel;

The downlink traffic sent by the BRAS is sent to the CPE through the CAPWAP data plane channel, so that the CPE forwards the downlink traffic to the WiFi terminal.

804. The BRAS monitors the user's use of the network, and sends an Account Request interim message (accounting request intermediate message) to the AAA server in real time.

805. The AAA server updates the CDR record according to the charging policy, and returns an Account Response interim response message to confirm that the charging is normal. If the partial billing condition is met, the AAA generates an intermediate bill, and the AAA provides the bill to the CBS system, and the CBS system Complete user expense accounting.

The foregoing CDR is generated by the cooperation of BRAS+AAA+CBS, and the billing system of the WiFi terminal is output by the operator's charging system.

806. After the WiFi terminal actively goes offline or the access side (ie, the WLAN network side) detects that the WiFi terminal times out, the AAA initiates an Account Request Stop message (accounting stop request message).

807. The AAA closes the CDR file and returns an Account Response Stop message (the charging stop response message).

In summary, the CPE performs WLAN network access authentication and accounting services (such as Internet services) at each IP address of the access terminal. The CPE uses the CAPWAP tunnel encapsulation, and the EPC routes to the AC/BRAS for WEB authentication. Into the Internet and the service domain, the AAA Server performs IP layer authentication and accounting, and implements corresponding QoS management.

According to another aspect of the present invention, the present invention further provides a client device. As shown in FIG. 9, the client device includes a sending unit 91, a receiving unit 92, an establishing unit 93, and an access unit 94. The sending unit 92 is configured to send a discovery request to each AC according to an IP address of each AC in the server of the WLAN network; the receiving unit 92 is configured to receive a discovery response corresponding to the discovery request returned by any AC in each AC; the establishing unit 93 is configured to: After receiving the discovery response corresponding to the discovery request returned by any AC in each AC, the receiving unit 92 establishes a CAPWAP tunnel with any AC; the access unit 94 is configured to connect the terminal connected to the user equipment to the WLAN through the CAPWAP tunnel. The network, and the server of the WLAN network authenticates the terminal accessing the WLAN network through the CAPWAP tunnel.

The user equipment in this embodiment can implement the WLAN relying on the LTE-EPC network. The problem of the network separately authenticating the terminals connected to the CPE.

In a practical application, the foregoing sending unit 91 is further configured to: when the receiving unit 92 does not receive the discovery response corresponding to the discovery request returned by one or more ACs in each AC, after the preset time interval, the device does not return to the discovery. The responding AC sends a discovery request.

In a scenario, the foregoing user equipment further includes: an address obtaining unit, where the address obtaining unit is used to obtain a WLAN network server from a Packet Data Network (PDN) gateway of the LTE-EPC network. The IP address of each AC, where the LTE-EPC network is connected to the WLAN network (the WLAN network accesses the LTE-EPC network, or the WLAN network depends on the LTE_EPC network); or

The address obtaining unit is configured to obtain the domain name information of each AC in the server of the WLAN network from the PDN gateway of the LTE-EPC network, and send the domain name including the domain name information of each AC to the DNS of the LTE-EPC network according to the domain name information of each AC. Parsing the request, and receiving a list of IP addresses returned by the DNS according to the domain name resolution request, where the IP address list contains the IP addresses of the respective ACs.

Of course, in other embodiments, the foregoing IP address list may also be preset in the CPE. Generally, a thin AP or an external fat AP is built in the CPE, and the version information of the AP is stored in the CPE. At this time, after the CPE and the AC establish a tunnel, the receiving unit 92 is further configured to receive the AP version information that is sent by the AC based on the CAPWAP tunnel.

Correspondingly, the sending unit 91 is further configured to: when the AP version information received by the receiving unit 92 is inconsistent with the version information of the AP set in the user equipment, initiate a request to update the version information of the AP to the AC, so as to establish the AC of the tunnel. Update the version of the AP.

In the actual use, as shown in FIG. 10, the foregoing access unit 94 specifically includes: a message forwarding unit 941, a message receiving unit 942, and a message sending unit 943; wherein the message forwarding unit 941 is configured to receive a DHCP Discovery message, and The DHCP Discovery message is sent to the AC that establishes the tunnel through the CAPWAP tunnel. The DHCP Discovery message is sent by the terminal connected to the user equipment, and is used to request access to the WLAN network. The DHCP Discovery message includes the MAC information of the terminal.

The message receiving unit 942 is configured to receive a DHCP offer message corresponding to the DHCP Discovery message sent by the AC that establishes the tunnel through the CAPWAP tunnel, where the DHCP offer message carries an IP address corresponding to the MAC information allocated by the AC establishing the tunnel;

The message sending unit 943 is configured to forward the DHCP offer message to the terminal, so that the terminal is established based on the The AC assigned by the AC of the tunnel accesses the WLAN network.

Further, the access unit 94 further includes: an association message sending unit 944 and an association unit 945; wherein the association message sending unit 944 is configured to obtain the MAC information of the terminal from the DHCP Discovery message sent by the terminal connected to the user equipment, and pass the The CAPWAP tunnel sends an association association message to the AC that establishes the tunnel. The Association message includes the MAC information of the terminal.

The association unit 945 is configured to establish an association for the terminal with the AC that establishes the tunnel according to the MAC information of the terminal after receiving the Association response message corresponding to the Association message returned by the AC that establishes the tunnel through the CAPWAP tunnel.

In particular, the foregoing message forwarding unit 941 is further configured to: when receiving a plurality of DHCP Discovery messages including the same MAC information sent by the terminal connected to the user equipment, perform DHCP Discovery of any one of the multiple DHCP Discovery messages (for example, A DHCP Discovery message is sent to the AC that established the tunnel through the CAPWAP tunnel, and other messages in multiple DHCP Discovery messages are discarded.

In addition, the message forwarding unit 941 is further configured to detect that any port of the user equipment receives multiple DHCP Discovery messages within a pre-configured detection time, and each of the multiple DHCP Discovery messages includes different MAC information. Then discard multiple DHCP Discovery messages.

The foregoing message forwarding unit 941 is further configured to: when the AC that establishes the tunnel receives the Association message sent by another client device through the CAPWAP tunnel, and determines, according to the MAC information in the Association message, the terminal and the connection that connects another client device. When the terminal of the user equipment is the same terminal, the station configuration update message sent by the AC that establishes the tunnel through the CAPWAP tunnel is carried, and the station configuration update message carries the delete station information element, and the terminal station information element is deleted according to the delete station information element. information.

In an actual operation, the client device further includes: an association removal unit (not shown), where the association removal unit is configured to send a Disassociation to the tunnel-established AC through the CAPWAP tunnel after the connection between the terminal and the WLAN network is disconnected. The message, the Disassociation message is used to remove the association between the AC that establishes the tunnel and the CPE.

Further, the association removal unit is configured to receive the response message corresponding to the Disassociation message sent by the AC through the CAPWAP tunnel and the configuration information of the Delete Terminal message element sent by the AC, and delete the information related to the terminal according to the configuration information of the deleted terminal message element. When the terminal that sends the service data includes the service data, it determines that the connection between the terminal and the WLAN network is disconnected; or, if the status of the terminal connected to the specific port of the user equipment is disconnected, the terminal and the terminal are determined. The connection of the WLAN network is broken.

It can be seen from the foregoing embodiment that the UE device in this embodiment uses the sending unit, the receiving unit, and the establishing unit to enable the CPE to establish a CAPWAP tunnel with the AC in the server of the WLAN network based on the CAPWAP protocol, and further, to enable the connection through the access unit. The CPE terminal accesses the WLAN network through the CAPWAP tunnel, and the server in the WLAN network that relies on the LTE-EPC network authenticates the terminal accessing the WLAN network by using the CAPWAP tunnel, thereby solving the problem that the WLAN network cannot be connected in the prior art. The problem of separate authentication of the terminal of the CPE.

In the several embodiments provided herein, it should be understood that the disclosed systems, devices, and methods may be implemented in other ways. For example, the device embodiments described above are merely illustrative.

The units described as separate components may or may not be physically separate, and the components displayed as the units may or may not be physical units, that is, may be located in one place, or may be distributed to multiple network units. Some or all of the units may be selected according to actual needs to achieve the objectives of the solution of the embodiment.

In addition, each functional unit in each embodiment of the present invention may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit. The above integrated unit can be implemented in the form of hardware or in the form of a software functional unit.

The integrated unit, if implemented in the form of a software functional unit and sold or used as a standalone product, may be stored in a computer readable storage medium. Based on such understanding, the technical solution of the present invention may contribute to the prior art or all or part of the technical solution may be embodied in the form of a software product stored in a storage medium. A number of instructions are included to cause a computer device (which may be a personal computer, server, or network device, etc.) to perform all or part of the steps of the methods described in various embodiments of the present invention. The foregoing storage medium includes: a U disk, a mobile hard disk, a read-only memory (ROM), a random access memory (RAM), a magnetic disk or an optical disk, and the like, which can store program codes. . Finally, it should be noted that the above embodiments are only for explaining the technical solutions of the present invention, and are not intended to be limiting; although the present invention has been described in detail with reference to the foregoing embodiments, those skilled in the art will understand that The technical solutions described in the foregoing embodiments are modified, or some of the technical features are equivalently replaced. The modifications and substitutions do not depart from the spirit and scope of the technical solutions of the embodiments of the present invention.

Claims

Rights request

A method for terminal access authentication, which is characterized by comprising:

The client device sends a discovery request to each of the ACs according to the IP address of each access controller AC in the server of the wireless local area network WLAN network;

If the CPE receives a discovery response corresponding to the discovery request returned by any of the ACs, the CPE establishes a control and configuration CAPWAP tunnel with the any AC; The CPE accesses the terminal connected to the CPE to the WLAN network through the CAPWAP tunnel, and enables the server of the WLAN network to authenticate the terminal accessing the WLAN network by using the CAPWAP tunnel.

2. The method according to claim 1, further comprising: if the CPE does not receive a discovery response corresponding to the discovery request returned by one or more ACs in the respective ACs, at intervals After the preset time, the discovery request is resent to the AC that does not return a discovery response.

The method according to claim 1, wherein before the CPE sends a discovery request to each AC according to an IP address of each AC in a server of the WLAN network, the method further includes: the CPE from a long-term The packet data network of the LTE-EPC network of the evolved packet core network obtains the IP address of each AC in the server of the WLAN network, and the LTE-EPC network is a network connected to the WLAN network; or

The CPE obtains the domain name information of each AC in the server of the WLAN network from the PDN gateway of the LTE-EPC network, and sends the domain name system DNS to the LTE-EPC network according to the domain name information of each AC. The domain name resolution request of the domain name information, and receiving the IP address list returned by the DNS according to the domain name resolution request, where the IP address list includes the IP addresses of the respective ACs.

The method according to any one of claims 1 to 3, wherein after the CPE establishes a CAPWAP tunnel with the any AC, and the CPE connects to the CPE through the CAPWAP tunnel, Before the terminal accesses the WLAN network, the method further includes:

The CPE receives the AP version information of the wireless access point sent by the AC that establishes the tunnel based on the CAPWAP tunnel;

If the AP version information received by the CPE is inconsistent with the version information of the AP set in the CPE, the CPE initiates a request for updating the version information of the AP to the AC, so that the AC update of the tunnel is established. The version of the AP.

The method according to claim 1, wherein the CPE accesses the terminal connected to the CPE to the WLAN network by using the CAPWAP tunnel, and specifically includes:

The CPE receives a dynamic host setup protocol discovery DHCP D i scovery message, and sends the DHCP Di scovery message to the tunnel-established AC through the CAPWAP tunnel, where the DHCP Di s covery message is connected by the CPE Transmitted by the terminal, for requesting access to the WLAN network, the DHCP D i scovery message includes media access control MAC information of the terminal; and the CPE receives the AC that establishes the tunnel and sends the ACL through the CAPWAP tunnel. a DHCP offer message corresponding to the DHCP Di scovery message, where the DHCP offer message carries an IP address corresponding to the MAC information allocated by the AC establishing the tunnel;

The CPE forwards the DHCP offer message to the terminal, so that the terminal accesses the WLAN network based on the IP address allocated by the AC establishing the tunnel.

6. The method according to claim 5, wherein the DHCP is performed at the CPE

Before the sending of the Di scovery message to the AC that establishes the tunnel by using the CAPWAP tunnel, the method further includes: obtaining, by the CPE, the DHCP Di scovery message sent by the terminal connected to the CPE. The MAC information of the terminal, and the associated Association message is sent to the AC that establishes the tunnel by using the CAPWAP tunnel, where the Association message includes the MAC information of the terminal;

After receiving the Association response message corresponding to the Association message returned by the AC that establishes the tunnel through the CAPWAP tunnel, the CPE establishes, according to the MAC information of the terminal, the AC that establishes the tunnel, The association of the terminal.

The method according to claim 5 or 6, further comprising:

If the CPE receives a plurality of DHCP Discovery messages including the same MAC information sent by the terminal connected to the CPE, the CPE sends any one of the multiple DHCP Discovery messages through the CAPWAP tunnel. Go to the AC that establishes the tunnel, and discard other messages in the multiple DHCP Discovery messages.

8. The method according to claim 5 or 6, further comprising:

If any port of the CPE receives multiple DHCP Discovery messages within a pre-configured detection time, and each of the multiple DHCP Discovery messages includes different MAC information, discarding the multiple DHCP Discovery message.

9. The method according to claim 6, further comprising:

After the connection between the terminal and the WLAN network is disconnected, the CPE sends a de-association Disassociation message to the AC that establishes the tunnel by using the CAPWAP tunnel, where the Disassociation message is used to remove the AC that establishes the tunnel. Association with the CPE established with the CPE;

The CPE receives the response message corresponding to the Di s association message sent by the AC through the CAPWAP tunnel, and the configuration information of the deleted terminal message element sent by the AC, and deletes according to the configuration information of the deleted terminal message element. Information related to the terminal.

A client device, comprising:

An access unit, configured to access a terminal connected to the user equipment to the WLAN network by using the CAPWAP tunnel, and enable a server of the WL AN network to access a terminal accessing the WL AN network by using the CAPWAP tunnel Certification.

1 1. The client device according to claim 10, characterized in that:

The sending unit is further configured to: after the receiving unit does not receive the discovery response corresponding to the discovery request returned by one or more ACs in the respective ACs, after the interval preset time, re-send to the The AC that did not return a discovery response sent a discovery request.

The user equipment according to claim 10, further comprising: an address obtaining unit, configured to obtain a WLAN network from a packet data network PDN gateway of a long-term evolution type packet core network LTE-EPC network An IP address of each AC in the server, where the LTE-EPC network is a network connected to the WLAN network; or

The domain name information of each AC in the server of the WLAN network is obtained from the PDN gateway of the LTE-EPC network, and the domain name system DNS of the LTE-EPC network is sent according to the domain name information of each AC. Domain name resolution request for domain name information, and receiving the DNS according to the A list of IP addresses returned by the domain name resolution request, the IP address list including the IP addresses of the respective ACs.

The user equipment according to any one of claims 10 to 12, wherein the receiving unit is further configured to receive, by the AC that establishes the tunnel, the AP version information of the wireless access point that is sent by the CAPWAP tunnel. ;

The sending unit is further configured to: when the AP version information received by the receiving unit is inconsistent with the version information of the AP set in the user equipment, initiate a request for updating the version information of the AP to the AC, The AC that establishes the tunnel updates the version of the AP.

The user equipment according to claim 10, wherein the access unit specifically includes:

a message forwarding unit, configured to receive a dynamic host setup protocol discovery DHCP Di scovery message, and send the DHCP Di scovery message to the tunnel establishing AC by using the CAPWAP tunnel, where the DHCP Di scovery message is connected by the Transmitted by the terminal of the user equipment, configured to request access to the WLAN network, where the DHCP Di scovery message includes media access control MAC information of the terminal;

a message receiving unit, configured to receive a DHCP offer message corresponding to the DHCP Di scovery message sent by the AC that establishes the tunnel through the CAPWAP tunnel, where the DHCP offer message carries the AC allocation of the tunnel establishment The IP address corresponding to the MAC information;

And a message sending unit, configured to forward the DHCP offer message to the terminal, so that the terminal accesses the WLAN network based on an IP address allocated by the AC that establishes the tunnel.

The user equipment according to claim 14, wherein the access unit further includes: An association message sending unit, configured to obtain MAC information of the terminal from a DHCP Discovery message sent by a terminal connected to the user equipment, and send an association association message to the established AC through the CAPWAP tunnel, Association The message includes the MAC information of the terminal;

An association unit, configured to: after receiving the Association response message corresponding to the Association message returned by the AC that establishes the tunnel through the CAPWAP tunnel, establish, according to the MAC information of the terminal, the AC that establishes the tunnel The association of the terminal.

16. The client device according to claim 14 or 15, wherein

The message forwarding unit is further configured to: when receiving a plurality of DHCP Discovery messages including the same MAC information sent by the terminal connected to the user equipment, pass the DHCP Discovery message of any one of the multiple DHCP Discovery messages The CAPWAP tunnel is sent to the AC that establishes the tunnel, and the other messages in the multiple DHCP Discovery messages are discarded.

17. The client device according to claim 14 or 15, wherein

The message forwarding unit is further configured to: when any port of the user equipment receives a plurality of DHCP Discovery messages within a pre-configured detection time, and each of the plurality of DHCP Discovery messages includes When the MAC information is different, the multiple DHCP Discovery messages are discarded.

The user equipment according to claim 15, further comprising: an association removal unit, configured to establish the CAPWAP tunnel to the terminal after the connection between the terminal and the WLAN network is disconnected The AC of the tunnel is sent to associate with a Disassociation message, where the D isass oc iati on message is used to remove the association between the AC that establishes the tunnel and the CPE. And receiving, by the CAPWAP tunnel, the response message corresponding to the Disassociation message and the configuration information of the deleted terminal message element sent by the AC, deleting, according to the configuration information of the deleted terminal message element, Terminal related information.