CN102448185A

CN102448185A - Remote access method and equipment

Info

Publication number: CN102448185A
Application number: CN2010105041527A
Authority: CN
Inventors: 孙滔; 邓辉
Original assignee: China Mobile Communications Group Co Ltd
Current assignee: China Mobile Communications Group Co Ltd
Priority date: 2010-09-30
Filing date: 2010-09-30
Publication date: 2012-05-09
Anticipated expiration: 2030-09-30
Also published as: CN102448185B

Abstract

The invention discloses a remote access method and equipment in order to solve the abuse exists in a remote access scheme in the prior art and promote safety and stability for remote access. The remote access method comprises the following steps of: receiving a connection establishment request that a remote internet protocol started by UE (User Equipment) is accessed to RIPA, wherein the connection establishment request carries relevant information of an accessed PDN (Public Data Network); according to subscription information of the UE, affirming that a RIPA connection is allowed to be established between the UE and the accessed PDN, and selecting a local gateway arranged in the accessed PDN as a PDN gateway; according to the relevant information of the accessed PDN, confirming address information of the local gateway, based on the address information, establishing the UE, and accessing the RIPA connection of PDN resources through the local gateway.

Description

Long-range cut-in method and equipment

Technical field

The present invention relates to moving communicating field, relate in particular to a kind of long-range cut-in method and equipment.

Background technology

In current mobile communication application; UE (User Equipment; Subscriber equipment) is linked into PDN (Public Data Network through the core net in the mobile radio communication; Public data network) network, for example enterprise or family lan are visited the IP device of PDN network internal or the demand of application service and are grown with each passing day.This access way is referred to as long-range access.

In the prior art, long-range access scheme is general to adopt following technology to realize:

One, middle transition technology

Such implementation method is not directly to visit the PDN Internet resources end to end, but through third party device, for example the PDN Internet resources is uploaded to intermediate server, and UE visits this intermediate server but not the equipment of PDN network internal uses the PDN Internet resources;

Two, VPN (Virtual Private Network, Virtual Private Network) technology

VPN technologies are to be widely used in IP (Internet Protocol; Internet protocol) a kind of remote-access technology of network; Set up a connection interim, safety through a common network (normally internet), promptly pass safe, the stable dedicated tunnel of common network.When being applied to mobile radio communication, need between UE and PDN network, pass the safe and reliable transmission that core net and the special-purpose vpn tunneling of extra increase one deck in the mobile radio communication ensure data.

First kind of long-range access scheme of the prior art needs the additional configuration third party device, increased access cost, be not truly UE to the direct access of PDN network, to access rights with in have certain restriction.

Second kind of long-range access scheme of the prior art has typical VPN defective, and for example software VPN is unstable, and efficient is low; And hardware VPN cost is high, need set up extra dedicated tunnel, realize complicated, set up and the cost safeguarded all very high, and this scheme has certain restriction to certain applications, needs other technologies support like multicast.And the Virtual Private Network product of different vendor and solution is compatible relatively poor.

In addition, existing long-range access scheme access control major part is carried out by the PDN network, has brought very big potential safety hazard for the PDN network and the burden of controlling cost.

Summary of the invention

The present invention provides a kind of long-range cut-in method and equipment, in order to solve the drawback that prior art medium-long range access scheme exists, promotes the fail safe and the stability of long-range access.

The embodiment of the invention provides a kind of long-range cut-in method, comprising:

Receive the remote internet agreement access RIPA connection foundation request that user equipment (UE) is initiated, wherein carry by the relevant information of visit common data network PDN network;

CAMEL-Subscription-Information according to UE; When confirming said UE and being allowed to set up RIPA between the visit PDN network to be connected; Select said local gateway of being affixed one's name to as PDN Gateway by visit PDN network internal, and according to the address information of being confirmed said local gateway by the relevant information of visit PDN network;

Set up the RIPA connection of UE based on said address information through said local gateway visit PDN Internet resources.

The embodiment of the invention provides a kind of equipment of the core network, comprising:

Receiving element is used to receive the remote internet agreement access RIPA connection foundation request that user equipment (UE) is initiated, and wherein carries by the relevant information of visit common data network PDN network;

Authenticating unit is used for the CAMEL-Subscription-Information according to UE, judges said UE and whether is allowed to set up RIPA between the visit PDN network to be connected, and export judged result;

Confirm the unit, be used in the judged result of authenticating unit output when being, selects said by the local gateway of visit PDN network internal administration as PDN Gateway, the relevant information of visiting the PDN network according to quilt is confirmed the address information of said local gateway;

Set up the unit, be used for setting up the RIPA connection of UE through said local gateway visit PDN Internet resources based on said address information control.

The embodiment of the invention provides a kind of subscriber equipment, comprising:

Dispensing unit is used to dispose the relevant information of specific common data network PDN network;

Transmitting element; When being used for to visit this specific PDN network; Initiate remote internet agreement access RIPA and connect the request of foundation, wherein carry by the relevant information of visit PDN network, said RIPA is through visited the access way of PDN Internet resources by the local gateway of visit PDN network internal administration.

Be received in after user equipment (UE) is moved the request message of initiation;

Receive after the described request message; Confirm said UE and be that local internet protocol inserts LIPA and connects and satisfy when converting the remote internet agreement into and inserting the trigger condition of RIPA connection by the type that the PDN between the visit common data network PDN network is connected; According to the CAMEL-Subscription-Information of UE, judge whether said PDN connection allows to set up RIPA and connect;

Judge said PDN and connect when allowing to set up the RIPA connection, the type that said PDN is connected is revised as the RIPA connection through the local gateway visit PDN Internet resources of being affixed one's name to by visit PDN network internal from the LIPA connection.

Receiving element is used to be received in after user equipment (UE) is moved the request message of initiation;

Judging unit; Be used to receive after the described request message; Confirm said UE and be that local internet protocol inserts LIPA and connects and satisfy when converting the remote internet agreement into and inserting the trigger condition of RIPA connection by the type that the PDN between the visit common data network PDN network is connected; According to the CAMEL-Subscription-Information of UE, judge whether said PDN connection allows to set up RIPA and connect;

Performance element is used to judge said PDN and connects when allowing to set up the RIPA connection, and control is revised as the RIPA connection through the local gateway visit PDN Internet resources of being visited PDN network internal administration with the type that said PDN connects from the LIPA connection.

First kind of long-range cut-in method that the embodiment of the invention provides and equipment of the core network and subscriber equipment; The RIPA that receives the UE initiation connects after the request of foundation; CAMEL-Subscription-Information according to UE carries out authentication; Authentication allows UE directly to be linked into local gateway through core net through the back and visits the PDN Internet resources, has replaced in the existing long-range access scheme being linked into through the gateway device in the core net VPN dedicated tunnel scheme of PDN network again, has saved VPN dedicated tunnel expense; Be utilized in the local gateway visit PDN Internet resources of disposing in the PDN network, promoted fail safe; Before RIPA is connected to by visit PDN network, increase authorizing procedure, the UE of lack of competence is refused long-range access, reduced by the load of visit PDN network.

Long-range cut-in method and equipment of the core network that the embodiment of the invention two provides; Under the scene that UE is moved; Receive after the request message, connect and the satisfied trigger condition that converts the RIPA connection into if the type that PDN connects is LIPA, then the CAMEL-Subscription-Information according to UE carries out authentication; Authentication allows UE directly to be linked into local gateway through core net through the back and visits the PDN Internet resources; The VPN dedicated tunnel scheme that has replaced in the existing long-range access scheme being linked into the PDN network again through the gateway device in the core net has been saved VPN dedicated tunnel expense, is utilized in the local gateway visit PDN Internet resources of disposing in the PDN network, has promoted fail safe; After UE shifts out by visit PDN network, can support the continuity of transfer of data; Before RIPA is connected to by visit PDN network, increase authorizing procedure, the UE of lack of competence is refused long-range access, reduced by the load of visit PDN network.

Other features and advantages of the present invention will be set forth in specification subsequently, and, partly from specification, become obvious, perhaps understand through embodiment of the present invention.The object of the invention can be realized through the structure that in the specification of being write, claims and accompanying drawing, is particularly pointed out and obtained with other advantages.

Description of drawings

Fig. 1 is the sketch map of long-range access scheme under the LTE network architecture among the embodiment one;

Fig. 2 is the sketch map of long-range access scheme under the UMTS network architecture among the embodiment one;

Fig. 3 is embodiment one a medium-long range cut-in method flow chart;

Fig. 4 is for setting up the signaling process figure that RIPA connects through LTE server net among the embodiment one;

Fig. 5 is the structural representation of equipment of the core network among the embodiment one;

Fig. 6 is the sketch map of long-range access scheme under the LTE network architecture among the embodiment two;

Fig. 7 is embodiment two medium-long range cut-in method flow charts;

Fig. 8 converts the signaling process figure that RIPA connects into for LIPA in the LTE network among the embodiment two connects;

Fig. 9 is the structural representation of equipment of the core network among the embodiment two.

Embodiment

In order to remedy the deficiency of prior art medium-long range access scheme; The embodiment of the invention provides a kind of method through the long-range access PDN of mobile radio communication network; Utilization is deployed in by the local gateway in the visit PDN network; Through local gateway remote access PDN Internet resources, thereby promote the fail safe and the stability of long-range access.In the present specification, will be through being called RIPA (Remote IP Access, remote I P inserts) by the access way of the local gateway visit PDN Internet resources of visit PDN network internal administration.

Below in conjunction with Figure of description the preferred embodiments of the present invention are described; Be to be understood that; Preferred embodiment described herein only is used for explanation and explains the present invention; And be not used in qualification the present invention, and under the situation of not conflicting, embodiment and the characteristic among the embodiment among the present invention can make up each other.

At first introduce local gateway; Local gateway is deployed in the PDN network (for example enterprise or family lan); The purpose that local gateway is introduced is: let UE need not to pass through the core net of mobile radio communication and directly visit the PDN network through the base station equipment in the PDN network; In the PDN network, local gateway can merge setting with base station equipment, also can independently be provided with.

Below RIPA connects and convert two application scenarioss of RIPA connection into by LIPA (Local IP Access, local IP inserts) connection to setting up respectively, from aspects such as SNA and practical implementation flow processs the present invention is set forth in detail.LIPA is meant the access way that directly is not linked into the PDN network through the core net in the mobile radio communication.Wherein embodiment one introduces and sets up the application scenarios that RIPA connects, and embodiment two introduces by LIPA and connects the application scenarios that converts the RIPA connection into.

Embodiment one

In the present embodiment, mobile radio communication is the example introducing system network architecture with LTE (Long Term Evolution, long evolving system) network, PDN network with enterprise or family lan and realizes principle.

As shown in Figure 1; Core net in the LTE network comprises MME (Mobile Management Entity; Mobility Management Entity), SGW (Serving Gateway, gateway), PGW network elements such as (PDN Gateway, public data network gateways); Comprise a plurality of HeNB (the evolved Node B of family) in enterprise or the family lan; And disposed the L-GW (local gateway) that merges setting or independent setting with HeNB, UE is outside in enterprise or family lan, through long-range enterprise or the family lan of being linked into of core net.

See also Fig. 1; The data route of prior art medium-long range access scheme is shown in dotted line, and UE at first inserts the base station equipment eNodeB of place network, SGW in core net and PGW; Be linked into enterprise or family lan at last; The foundation of this data route also need utilize VPN technologies to set up a dedicated tunnel except outside existing mobile communication network technology such as GTP (GPRS Tunnel Protocol, the GPRS Tunnel Protocol) tunnel.

The RIPA connection that the embodiment of the invention proposes is to utilize the L-GW of enterprise or family lan deployed to visit the Internet resources of enterprise or family lan; The data route is shown in solid line; UE at first inserts the base station equipment eNodeB of place network; Through the SGW in the core net, connect with the L-GW that is visited in enterprise or the family lan, pass through the Internet resources of L-GW direct inter access enterprise or family lan then.The foundation of data route only need be adopted mobile communication fidonetFido (for example GTP, PMIP etc.) between SGW and the L-GW, and L-GW is to being belonged to internal network between the Internet resources of visit money enterprise or family lan.

If mobile radio communication is UMTS (Universal Mobile Telecommunications System, a UMTS) network, SNA is similar basically with the LTE network with the realization principle.

As shown in Figure 2, the core net in the UMTS network comprises SGSN (Service GPRS Support Node, Serving GPRS Support Node; GPRS), GGSN (Gateway GPRS Support Node GPRS:; Gateway GPRS Support Node) network element such as; SGSN in the UMTS network possesses the function of MME and SGW in the LTE network simultaneously, and the GGSN in the UMTS network is corresponding to the PGW in the LTE network.Comprise one or more HNB (home node-b) in enterprise or the family lan; And disposed with HNB and merged the L-GGSN (local gateway) that is provided with or independently is provided with; UE is outside in enterprise or family lan, through long-range enterprise or the family lan of being linked into of core net.

See also Fig. 2; The data route of prior art medium-long range access scheme is shown in dotted line, and UE at first inserts the base station equipment NodeB of place network, SGSN in core net and GGSN; Be linked into enterprise or family lan at last; The foundation of this data route also need utilize VPN technologies to set up a dedicated tunnel except adopting outside the for example GTP of the prior art (GPRSTunnel Protocol, GPRS Tunnel Protocol).

The RIPA connection that the embodiment of the invention proposes is to utilize the L-GGSN of enterprise or family lan deployed to visit the Internet resources of enterprise or family lan; The data route is shown in solid line; UE at first inserts the base station equipment NodeB of place network; Through the SGSN in the core net, connect with the L-GGSN that is visited in enterprise or the family lan, pass through the Internet resources of L-GGSN direct inter access enterprise or family lan then.The foundation of data route only need be adopted mobile communication fidonetFido (for example GTP, PMIP etc.) between SGSN and the L-GGSN, and L-GGSN is to being belonged to internal network between the Internet resources of visit money enterprise or family lan.

Based on the said system network architecture and the introduction that realizes principle, present embodiment provides a kind of long-range cut-in method, and is as shown in Figure 3, comprising:

S301, UE initiate RIPA and connect the request of foundation, wherein carry by the relevant information of visit PDN network;

It possibly be Attach Request (attach request) message of initiating in the UE attaching process that the RIPA that UE initiates connects the request of foundation, or PDN Connectivity Request (PDN connects the request of foundation) message of initiating in the process is set up in the PDN connection.In the practical implementation, can adopt following mode to show and ask to set up the RIPA connection:

A kind of preferred mode is: the APN (APN) that the PDN that uses in Attach Request message or the PDN Connectivity Request message connects is for being used for the specific APN that RIPA connects; For example can in certain field of the network identifier that APN forms, be used for the RIPA connection by this APN of sign.

Another kind of preferred mode is: in Attach Request message or PDN Connectivity Request message, increase the RIPA sign, the type that said RIPA sign is used to indicate PDN to connect is that RIPA connects.

RIPA connects the relevant information of being visited the PDN network of carrying in the request of foundation, can include but not limited to following information:

1, with the relevant FQDN (Fully Qualified Domain Name, fully qualified domain name) of local gateway that is affixed one's name to by visit PDN network internal;

For example comprise by the FQDN of the geographical location information of visit PDN network or local gateway; FQDN can also can be described as a kind of perfect representation form of host name from expressing the main frame position in logic exactly;

2, visited the CSG ID or the domain-name information of PDN network;

3, visited the address information of the local gateway of PDN network internal administration, be generally the IP address.

RIPA connects the relevant information of being visited the PDN network of carrying in the request of foundation, can be included in the specific APN information, promptly in APN forms, directly comprises above-mentioned by the relevant information of visit PDN network;

APN forms and to comprise network identifier and Operator ID, for example can be in certain field of the Operator ID that APN forms sign by the address information of the title of visit PDN network, CSG ID, local gateway, or the FQDN relevant etc. with local gateway.

RIPA connects the relevant information of being visited the PDN network of carrying in the request of foundation, also can be used as the parameter in Attach Request message or the PDN Connectivity Request message; Need in related news, increase information field (VisitedNetworkInfo), this information field can adopt following form, and is as shown in table 1:

Table 1

Need to prove that the relevant information of being visited the PDN network can provide by the last client-side program of installing of UE or by the application layer procedure such as Web service of visit PDN network, and needn't provide through UE itself.

S302, equipment of the core network receive the RIPA that UE initiates and connect the request of foundation, carry out authentication according to the CAMEL-Subscription-Information of UE, judge promptly whether UE is allowed to set up RIPA between the PDN network and be connected with being visited; If; Then carry out S303,, then do not set up RIPA and connect if not;

In the LTE network, described equipment of the core network specifically is meant MME; In the UMTS network, described equipment of the core network specifically is meant SGSN, is that example describes with the LTE network in this step:

HSS (Home Subscriber Server; Home subscriber server) CAMEL-Subscription-Information of storage UE in; Need in the CAMEL-Subscription-Information of UE, to increase following RIPA information and allow to set up the APN tabulation that RIPA connects, can also add RIPA License Info (RIPA permissions) to support the setting up authentication that RIPA connects, for example can in each CSG ID clauses and subclauses, add; Whether the APN that sign PDN connects allows RIPA, and wherein RIPA permissions is optional add-ins.

Concrete modification is as shown in table 2:

Table 2

In the practical implementation, MME connects the corresponding RIPA information, the same HSS of value of also need storing to each movable PDN.Specifically as shown in table 3.

Table 3

MME is according to the subscription information of UE; Judge UE and whether allowed to set up RIPA between the visit PDN network when being connected; A kind of common scheme is: according to the CAMEL-Subscription-Information of UE, judge whether the APN of the PDN connection of using in the RIPA connection foundation request allows to set up the RIPA connection; If permission is then confirmed UE and is allowed to set up RIPA between the visit PDN network to be connected.The particular content that specifically comprises according to the CAMEL-Subscription-Information of UE can be divided into following two kinds of implementations again:

Mode one

If the CAMEL-Subscription-Information of UE comprises the APN of sign PDN connection and whether allows RIPA License Info and the CSG subscription information of RIPA; Then:

Judge according to the RIPA License Info whether the APN that PDN connects allows RIPA;

When being, further judge according to the CSG subscription information target CS G ID of UE allows to set up in the APN tabulation that RIPA connects whether comprise the APN that said PDN connects in judged result;

If comprise, the APN that then judges the PDN connection allows to set up RIPA and connects, otherwise the APN that judges the PDN connection does not allow to set up RIPA and connects.

Mode two

If the CAMEL-Subscription-Information of UE does not comprise the APN of sign PDN connection and whether allows the RIPA License Info (RIPA permissions) of RIPA, but comprises the LIPA License Info and the CSG subscription information of the LIPA connection type of the APN permission that sign PDN connects; Then:

Judge according to the LIPA License Info whether the LIPA connection type is the LIPA-conditional type;

When being, further judge according to the CSG subscription information CSG ID of UE present access subzone allows to set up in the APN tabulation that LIPA connects whether comprise the APN that said PDN connects in judged result;

For not the time, further judge that according to the CSG subscription information target CS G ID of UE allows to set up the APN that whether comprises said PDN connection in the APN tabulation that RIPA connects in judged result;

MME is according to the subscription information of UE; Judge UE and whether allowed to set up RIPA between the visit PDN network when being connected; Another kind of available solutions is: increase relevant field in the CAMEL-Subscription-Information of the UE that in HSS, stores and " allow to set up the relevant information of the PDN network that RIPA connects "; In the practical implementation, judge the relevant information that allows to set up the PDN network that RIPA connects in the CAMEL-Subscription-Information of UE whether comprise RIPA connect carry in the request of foundation by the relevant information of visit PDN network; If comprise, then confirm UE and allowed to set up RIPA between the visit PDN network to be connected.

S303, selection are visited the local gateway of PDN network internal administration as PDN Gateway; According to the address information of whether being determined local gateway by the relevant information of visit PDN network; If carry out S304, if there is not above-mentioned relevant information; Or inquiry is not then set up RIPA and is connected less than the address information of local gateway;

Be that example describes still in this step with the LTE network.After the MME authentication is passed through, will connect, select by the L-GW of visit PDN network as PDN Gateway for UE sets up RIPA;

The mode of carrying of relevant information sees also S301, confirms that the method for the address information of said local gateway includes but not limited to:

1) if relevant information comprises and visited the relevant FQDN of local gateway that the PDN network internal is affixed one's name to; Then basis and the relevant FQDN of local gateway that is affixed one's name to by visit PDN network internal are carried out inquiry of the domain name in DNS (domain name resolution server), obtain the address information of said local gateway;

2) if relevant information comprises the CSG ID or the domain-name information of being visited the PDN network; Then construct and visited the relevant FQDN of local gateway that the PDN network internal is affixed one's name to according to the CSG ID (closed subscriber group identity) or the domain-name information of quilt visit PDN network; According to the FQDN that constructs, in domain name resolution server DNS, carry out inquiry of the domain name, obtain the address information of said local gateway;

For example be: CSG ID+APN through visiting the CSG ID of PDN network, can constructing FQDN.

3) if relevant information comprises the address information of the local gateway of being affixed one's name to by visit PDN network internal; Then from directly being extracted the address information of said local gateway the relevant information of visit PDN network.

For mode 1), 2); Equipment of the core network can be inquired about the address information (IP address) of local gateway according to FQDN in DNS; Need this moment by visit PDN network relevant information to be offered mobile operator in advance, for example logical DNS upgrades, and also can be configured in the equipment of the core network through network management system.

S304, set up the RIPA of UE through said local gateway visit PDN Internet resources based on said address information and connect.

Wherein, it is as shown in Figure 4 to set up the signaling process that RIPA connects through LTE server net.At the A point; MME will be based on the PDN Connectivity Request message of UE transmission in the step 1; Carry out judgement, authentication and L-GW selection course that RIPA connects the request of foundation; Follow-up address information based on L-GW (local gateway) is set up the RIPA connection of UE through L-GW visit PDN Internet resources, specifically comprises following signaling process:

Step 2, MME send Create Session Request (establishment conversation request) to SGW;

Step 3, SGW transmit Create Session Request to L-GW;

Step 4, L-GW return Create Session Response (establishment conversational response) to SGW;

So far, downlink data can transmit, and will be buffered among the SGW;

Step 5, SGW return Create Session Response to MME;

Step 6, MME send Bearer Setup Request/PDN Connectivity Accept (carrying foundation request/PDN connection foundation accepts) message to eNodeB;

Step 7, eNodeB send RRC Connection Reconfiguration (RRC connects replacement) message to UE;

Step 8, UE return RRC Connection Reconfiguration Complete (RRC connects the completion of resetting) message to eNodeB;

Step 9, eNodeB return Bearer Setup Response (carry and set up response) to MME, and radio bearer is set up;

Step 10, UE send Direct Transfer message to eNodeB, and indication PDN connects foundation to be accomplished;

Step 11, eNodeB send PDN Connectivity Complete (PDN connects completion) message to MME, and indication PDN connects foundation to be accomplished;

So far, upstream data can transmit;

After step 12, MME receive PDN Connectivity Complete message, send Modify Bearer Request (revising the request of carrying) to SGW;

If the Handover sign is arranged, then execution in step 12.a and 12.b among the Modify Bearer Request;

Step 13, SGW return Modify Bearer Response (revise and carry response) to MME.

Based on same technical conceive, present embodiment provides a kind of equipment of the core network, because the principle that this equipment is dealt with problems is similar with the long-range cut-in method that embodiment one provides, so the enforcement of this equipment can repeat part and repeat no more referring to the enforcement of method.In the LTE network, described equipment of the core network specifically is meant MME; In the UMTS network, described equipment of the core network specifically is meant SGSN.

As shown in Figure 5, a kind of possibility structure of equipment of the core network comprises:

Receiving element 501 is used to receive the RIPA connection foundation request that UE initiates, and wherein carries by the relevant information of visit PDN network;

Authenticating unit 502 is used for the CAMEL-Subscription-Information according to UE, judges said UE and whether is allowed to set up RIPA between the visit PDN network to be connected, and export judged result;

Confirm unit 503, be used in the judged result of authenticating unit 502 output when being, selects said by the local gateway of visit PDN network internal administration as PDN Gateway, the relevant information of visiting the PDN network according to quilt is confirmed the address information of said local gateway;

Set up unit 504, be used for setting up the RIPA connection of UE through said local gateway visit PDN Internet resources based on said address information control.

Wherein, authenticating unit 502 specifically is used for the CAMEL-Subscription-Information according to UE, judges whether the APN of the PDN connection of using in the RIPA connection foundation request allows to set up the RIPA connection; If allow, then export judged result for being.

Perhaps, authenticating unit 502, the relevant information that the CAMEL-Subscription-Information that specifically is used for judging UE allows to set up the PDN network that RIPA connects whether comprise RIPA connect carry in the request of foundation by the relevant information of visit PDN network; If comprise, then to confirm UE and allowed to set up RIPA between the visit PDN network to be connected, the CAMEL-Subscription-Information of said UE comprises the relevant information of the PDN network that allows to set up the RIPA connection.

In the practical implementation,

Confirm unit 503; Specifically be used for basis and the relevant FQDN of local gateway that is affixed one's name to by visit PDN network internal; In domain name resolution server DNS, carry out inquiry of the domain name; Obtain the address information of said local gateway, said relevant information comprises and the relevant FQDN of local gateway that is affixed one's name to by visit PDN network internal;

Perhaps,

Confirm unit 503; Specifically be used for the relevant FQDN of local gateway according to the CSG ID that is visited the PDN network or domain-name information structure and quilt visit PDN network internal administration; According to the FQDN that constructs; In DNS, carry out inquiry of the domain name, obtain the address information of said local gateway, said relevant information comprises by the CSG ID or the domain-name information of visit PDN network;

Perhaps,

Confirm unit 503, specifically be used for that said relevant information comprises by the address information of the local gateway of visit PDN network internal administration from directly extracted the address information of said local gateway by the relevant information of visit PDN network.

The embodiment of the invention also provides a kind of subscriber equipment, comprising:

Dispensing unit is used to dispose the relevant information of specific PDN network;

Transmitting element; When being used for to visit this specific PDN network; Initiate the RIPA connection and set up request, wherein carry by the relevant information of visit PDN network, said RIPA is for passing through by the access way of the local gateway visit PDN Internet resources of visit PDN network internal administration.

The long-range cut-in method that the embodiment of the invention one provides and equipment of the core network and subscriber equipment; The RIPA that receives the UE initiation connects after the request of foundation; CAMEL-Subscription-Information according to UE carries out authentication; Authentication allows UE directly to be linked into local gateway through core net through the back and visits the PDN Internet resources; Replaced having the VPN dedicated tunnel scheme that the gateway device that passes through in the long-range access scheme in the core net is linked into the PDN network again now, overcome the shortcoming of existing long-range access scheme, promoted the fail safe and the stability of long-range access.

Embodiment two

Suppose that UE is at enterprise or the inner Internet resources that use LIPA connected reference enterprise or family lan of family lan; And UE moves to enterprise or family lan when outside from enterprise or family lan inside, possibly still have and continue its network resources demand of visit (this application scenarios need keep professional continuity).Can the LIPA of UE be connected after the MME authentication and convert RIPA connection carrying out remote access into.Application scenarios is as shown in Figure 6, and UE is inner in enterprise or family lan, directly connects L-GW through HeNB, accessing network resources, and the data route is shown in dotted line; UE moves to after enterprise or the family lan outside, and UE is not under the coverage of L-GW and source base station equipment HeNB, and the target BS equipment of current access is eNB or other HeNB; If UE possess with enterprise or family lan between RIPA be connected authority; Then convert the LIPA connection into RIPA and connect, after inserting target BS equipment, arrive the SGW of core net, again to the L-GW that is deployed in enterprise or family lan; With accessing network resources, the data route is shown in solid line.

Based on the said system network architecture and the introduction that realizes principle, present embodiment provides a kind of long-range cut-in method, and is as shown in Figure 7, comprising:

S701, equipment of the core network are received in after UE is moved, the request message of initiation;

In the practical implementation, described request message can be following concrete signaling message:

1) after the UE under connection status is moved, the Handover Required (handoff request) that the source base station equipment that UE inserts is initiated;

In the UMTS network, described source base station equipment specifically can be for NodeB (Node B is a macro base station), also can be HNB (home node-b is a Home eNodeB); In the LTE network, described source base station equipment specifically can be for eNodeB (evolved Node B is a macro base station), also can be HeNB.

2) after the UE under idle condition is moved, the Service Request (service request) that UE initiates.

3) in the LTE network, after the UE under idle condition is moved, the Tracking Area Update procedure (tracing section updating flow process) that UE initiates; In the UMTS network, after the UE under idle condition is moved, the Routing Area Update procedure (Routing Area Update flow process) that UE initiates.

If the target BS equipment of the current access of UE is Home eNodeB H (e) NB, according to the CSG ID that carries present access subzone in the conventional signaling process described request message.

S702, receive after the request message, equipment of the core network is judged UE and whether the type that is connected by the PDN between the visit PDN network is that LIPA connects and satisfies the trigger condition that converts the RIPA connection into, if then carry out S703; If not, then carry out flow according to prior art, if need not to carry out the conversion of connection type, then carry out according to existing corresponding flow process (operation flow, switching flow or TAU flow process);

In the practical implementation; MME can store the type identification that is used to identify the type that PDN connects in the PDP connection context; Type identification comprises LIPA, SIPTO (Selected IP Traffic Offload; Selectivity flow unloading), RIPA and CN (operators ' Core Network, to operator's core net flow); MME receives request message (TAU, Service Request or Handover Required) afterwards; Judge whether the type identification that PDN connects in this PDN connection context is the LIPA sign, and the type that said LIPA sign is used to indicate said PDN to connect is that LIPA connects; If confirm that then said UE is that LIPA connects with the type that is connected by the PDN between the visit PDN network.

Confirm that the type that PDN connects is after LIPA connects, further judge whether to satisfy converting the trigger condition that RIPA connects into, determination methods is following:

Method one

According to the positional information of present access subzone, judge whether present access subzone is within the coverage of being visited the PDN network of storage in advance; If not, then confirm to satisfy converting the trigger condition that RIPA connects into.

Method two

It is the scene proposition of enterprise or family lan by visit PDN network that this method is directed against said, judges whether the tracking area or the route district at present access subzone or present access subzone place is in the macro base station coverage; If then confirm to satisfy converting the trigger condition that RIPA connects into.

Method three

It is the scene proposition of enterprise or family lan by visit PDN network that this method is directed against said, judges then whether the CSG ID of present access subzone is identical with a last CSG ID who self stores; If inequality, and carry the CSG ID of present access subzone in the described request message, the CSG ID that then further judges present access subzone allows to set up in the APN tabulation that LIPA connects whether comprise the APN that said PDN connects; Do not convert the trigger condition that RIPA connects into if, confirm to satisfy.

Method four

It is the scene proposition of enterprise or family lan by visit PDN network that this method is directed against said, if the target BS equipment of the current access of UE is Home eNodeB, carries the CSG ID of present access subzone in the described request message; Judge that then said PDN connects the corresponding CSG ID that whether is comprised the present access subzone that carries in the described request message among each CSG ID of visit PDN network; If do not comprise, then confirm to satisfy converting the trigger condition that RIPA connects into.

Method five

Judge whether the said address information by the local gateway of visit PDN network internal administration of self storing is identical with the address, base station of present access subzone, and said local gateway and the base station equipment of being visited in the PDN network merge setting; If inequality, then confirm to satisfy converting the trigger condition that RIPA connects into.

S703, equipment of the core network are according to the CAMEL-Subscription-Information of UE; Judge whether said PDN connection allows to set up RIPA and connect, if then carry out S704; If not; Then carry out flow,, then carry out according to existing corresponding flow process (operation flow, switching flow or TAU flow process) if need not to carry out the conversion of connection type according to prior art;

The execution mode of this step can be referring to the embodiment of S302, and brief account is following:

A kind of common scheme is: according to the CAMEL-Subscription-Information of UE, judge whether the APN that said PDN connects allows to set up the RIPA connection; If allow, then judge the PDN connection and allow to set up the RIPA connection, otherwise, judge the PDN connection and do not allow to set up the RIPA connection.The particular content that specifically comprises according to the CAMEL-Subscription-Information of UE can be divided into following two kinds of implementations again:

Mode one

Mode two

If the CAMEL-Subscription-Information of UE does not comprise the APN of sign PDN connection and whether allows the RIPA License Info of RIPA, but comprises the LIPA License Info and the CSG subscription information of the LIPA connection type of the APN permission that sign PDN connects; Then:

Another kind of available solutions is: the CAMEL-Subscription-Information of said UE comprises the relevant information that allows to set up the PDN network that RIPA connects; In the practical implementation, judge whether the relevant information that allows to set up the PDN network that RIPA connects in the CAMEL-Subscription-Information of UE comprises said by the relevant information of visit PDN network; If comprise, then judge said PDN connection and allow to set up the RIPA connection, otherwise, judge the PDN connection and do not allow to set up the RIPA connection.

The type that S704, equipment of the core network connect said PDN connects the RIPA that is revised as the local gateway visit PDN Internet resources of affixing one's name to through quilt visit PDN network internal from LIPA and connects;

In the practical implementation, if request message is Handover Required, the type that then PDN is connected connects when being revised as RIPA and connecting from LIPA, needs the special context of deletion LIPA join dependency; If request message is TAU, the special context that can before downlink data arrives, delete the LIPA join dependency voluntarily because of old process is so this step need not execution.

For Handover Required, need to guarantee:

1) equipment of the core network is when target BS device forwards related context, the special context of not carrying the LIPA join dependency;

The special context of 2) before downlink data arrives, deleting LIPA join dependency in the local gateway.

Preferable; If MME has stored the type identification that is used to identify the type that PDN connects in the PDP connection context; Then the type of PDN connection is revised as after the RIPA connection; Said equipment of the core network will be revised as the RIPA sign for said PDN connects the type identification of storing, and the type that said RIPA sign is used to indicate said PDN to connect is that RIPA connects;

Connection type is revised successfully, and the special context (this step is optional) of deletion LIPA join dependency, can accomplish the flow of request message according to old process.Afterwards, up-downgoing data can be transmitted according to the data route that RIPA connects.

In the LTE network, it is as shown in Figure 8 that LIPA connects the signaling process that converts the RIPA connection into, wherein only describes to relevant signaling, comprising:

In the step 2; The Handover Required that source HeNB is sent; The conversion of MME affirmation needs execution connection type (the LIPA connection converts RIPA into and connects) afterwards; L-GW and target HeNB are merged the situation that is provided with or independently is provided with; MME need filter out the special context of the LIPA join dependencys such as TEID in direct-connected tunnel between message address and the L-GW and the target HeNB of TEID, L-GW of the routing optimality associated tunnel (like the S5 tunnel) that possibly comprise in the step 2, and the special context of LIPA join dependency possibly include but not limited to above-mentioned information.

In the step 3, MME is transmitted to the special context that no longer comprises the LIPA join dependency among the Handover Request of target HeNB.

In the step 5,6, when L-GW independently disposes, direct-connected tunnel DTunnel is arranged between L-GW and the source HeNB, need to break off this direct-connected tunnel DTunnel;

MME needs to add the indication sign that discharges this direct-connected tunnel in sending to the Modify Bearer Request of SGW; SGW also adds this indication sign in sending to the Modify Bearer Request of L-GW; Promptly through MME, SGW and L-GW, notice L-GW discharges the special context of LIPA join dependency.

In the

step

7,8; Break off the direct-connected tunnel DTunnel between L-GW and the source HeNB; L-GW initiates Delete Session Request or Modify Bearer Request to source HeNB; Breaking off direct-connected tunnel DTunnel,, downlink data is corresponded to it in S5 carrying so deleted the related news of direct-connected tunnel DTunnel between address information and L-GW and the source HeNB of source HeNB among the L-GW.

As shown in Figure 9, a kind of possibility structure of equipment of the core network comprises:

Receiving element 901 is used to be received in after UE is moved the request message of initiation;

Judging unit 902; Be used to receive after the described request message; Confirm said UE and be that LIPA connects and when satisfying the trigger condition that converts the RIPA connection into by the type that the PDN between the visit common data network PDN network is connected; According to the CAMEL-Subscription-Information of UE, judge whether said PDN connection allows to set up RIPA and connect;

Performance element 903 is used to judge said PDN and connects when allowing to set up the RIPA connection, and control is revised as the RIPA connection through the local gateway visit PDN Internet resources of being visited PDN network internal administration with the type that said PDN connects from the LIPA connection.

Long-range cut-in method and equipment of the core network that the embodiment of the invention two provides; Under the scene that UE is moved; Receive after the request message, connect and the satisfied trigger condition that converts the RIPA connection into if the type that PDN connects is LIPA, then the CAMEL-Subscription-Information according to UE carries out authentication; Authentication allows UE directly to be linked into local gateway through core net through the back and visits the PDN Internet resources; Replaced having the VPN dedicated tunnel scheme that the gateway device that passes through in the long-range access scheme in the core net is linked into the PDN network again now, overcome the shortcoming of existing long-range access scheme, promoted the fail safe and the stability of long-range access.Under the scene that UE is moved, if shift out in the prior art by visit PDN network, LIPA connects and will be disconnected, and need rebuild if having again, and the long-range cut-in method and the equipment of the core network that utilize embodiment two to provide can be supported the continuity of transfer of data.

The long-range access scheme that the embodiment of the invention provides than long-range access scheme of the prior art, has following beneficial effect:

Saved UE to by the expense of VPN dedicated tunnel between the visit PDN network, reused the core net GTP tunnel, realized simple;

Be utilized in the local gateway visit PDN Internet resources of disposing in the PDN network, promoted fail safe;

Before RIPA is connected to by visit PDN network, increase authorizing procedure, the UE of lack of competence is refused long-range access, further reduced by the load of visit PDN network.

Obviously, those skilled in the art can carry out various changes and modification to the present invention and not break away from the spirit and scope of the present invention.Like this, belong within the scope of claim of the present invention and equivalent technologies thereof if of the present invention these are revised with modification, then the present invention also is intended to comprise these changes and modification interior.

Claims

1. a long-range cut-in method is characterized in that, comprising:

2. the method for claim 1 is characterized in that, said RIPA connects the request of foundation and comprises that attach request Attach Request message or PDN connect foundation request PDN Connectivity Request message; And

The APN APN that the PDN that uses in said Attach Request message or the PDN Connectivity Request message connects is used for the specific APN that RIPA connects; Perhaps, carry the RIPA sign in said Attach Request message or the PDN Connectivity Request message, the type that said RIPA sign is used to indicate PDN to connect is that RIPA connects.

3. the method for claim 1 is characterized in that, said relevant information comprises and the relevant fully qualified domain name FQDN of local gateway that is affixed one's name to by visit PDN network internal; And

Said according to the address information of being confirmed said local gateway by the relevant information of visit PDN network, specifically comprise:

According to visiting the relevant FQDN of local gateway that the PDN network internal is affixed one's name to quilt, in domain name resolution server DNS, carry out inquiry of the domain name, obtain the address information of said local gateway.

4. the method for claim 1 is characterized in that, said relevant information comprises by the CSG ID or the domain-name information of visit PDN network; And

The relevant fully qualified domain name FQDN of local gateway according to the closed subscriber group identity CSG ID that is visited the PDN network or domain-name information structure and quilt visit PDN network internal administration;

According to the FQDN that constructs, in domain name resolution server DNS, carry out inquiry of the domain name, obtain the address information of said local gateway.

5. the method for claim 1 is characterized in that, said relevant information comprises by the address information of the local gateway of visit PDN network internal administration; And

From directly being extracted the address information of said local gateway the relevant information of visit PDN network.

6. the method for claim 1 is characterized in that, said CAMEL-Subscription-Information according to UE is confirmed UE and allowed to set up the RIPA step of connecting between the visit PDN network, specifically comprises:

According to the CAMEL-Subscription-Information of UE, judge whether the APN of the PDN connection of using in the RIPA connection foundation request allows to set up the RIPA connection;

If permission is then confirmed UE and is allowed to set up RIPA between the visit PDN network to be connected.

7. method as claimed in claim 6 is characterized in that, the CAMEL-Subscription-Information of said UE comprises whether the APN of sign PDN connection allows RIPA License Info and the closed user group CSG subscription information of RIPA; And

Said CAMEL-Subscription-Information according to UE, judge that whether the APN that PDN connects allows to set up the RIPA connection, specifically comprises:

8. method as claimed in claim 6 is characterized in that, the CAMEL-Subscription-Information of said UE comprises the LIPA License Info and the CSG subscription information of the LIPA connection type of the APN permission that sign PDN connects; And

9. the method for claim 1 is characterized in that, the CAMEL-Subscription-Information of said UE comprises the relevant information that allows to set up the PDN network that RIPA connects;

Said CAMEL-Subscription-Information according to UE is confirmed UE and is allowed to set up the RIPA step of connecting between the visit PDN network, specifically comprises:

Judge the relevant information that allows to set up the PDN network that RIPA connects in the CAMEL-Subscription-Information of UE whether comprise RIPA connect carry in the request of foundation by the relevant information of visit PDN network;

If comprise, then confirm UE and allowed to set up RIPA between the visit PDN network to be connected.

10. according to claim 1 or claim 2 method is characterized in that, also comprises:

If according to the CAMEL-Subscription-Information of UE, confirm said UE and do not allowed to set up RIPA between the visit PDN network to be connected, perhaps,, then do not set up the RIPA connection according to the address information of not determined said local gateway by the relevant information of visit PDN network.

11. an equipment of the core network is characterized in that, comprising:

12. equipment as claimed in claim 11 is characterized in that,

Said authenticating unit specifically is used for the CAMEL-Subscription-Information according to UE, judges whether the APN of the PDN connection of using in the RIPA connection foundation request allows to set up the RIPA connection; If allow, then export judged result for being.

13. equipment as claimed in claim 11 is characterized in that

The relevant information that said authenticating unit, the CAMEL-Subscription-Information that specifically is used for judging UE allow to set up the PDN network that RIPA connects whether comprise RIPA connect carry in the request of foundation by the relevant information of visit PDN network; If comprise, then to confirm UE and allowed to set up RIPA between the visit PDN network to be connected, the CAMEL-Subscription-Information of said UE comprises the relevant information of the PDN network that allows to set up the RIPA connection.

14. equipment as claimed in claim 11 is characterized in that,

Said definite unit; Specifically be used for basis and the relevant fully qualified domain name FQDN of local gateway that is affixed one's name to by visit PDN network internal; In domain name resolution server DNS, carry out inquiry of the domain name; Obtain the address information of said local gateway, said relevant information comprises and the relevant FQDN of local gateway that is affixed one's name to by visit PDN network internal;

Perhaps,

Said definite unit; Specifically be used for the relevant FQDN of local gateway according to the closed subscriber group identity CSG ID that is visited the PDN network or domain-name information structure and quilt visit PDN network internal administration; According to the FQDN that constructs; In domain name resolution server DNS, carry out inquiry of the domain name, obtain the address information of said local gateway, said relevant information comprises by the CSG ID or the domain-name information of visit PDN network;

Perhaps,

Said definite unit specifically is used for from directly extracted the address information of said local gateway by the relevant information of visit PDN network, and said relevant information comprises by the address information of the local gateway of visit PDN network internal administration.

15. equipment as claimed in claim 11 is characterized in that, said equipment of the core network comprises the Mobility Management Entity MME in the long evolving system LTE network; The perhaps service universal grouping wireless business supporting node SGSN in the UMTS UMTS network.

16. a subscriber equipment is characterized in that, comprising:

17. a long-range cut-in method is characterized in that, comprising:

18. method as claimed in claim 17 is characterized in that, storage in advance is used to identify the type identification of the type that PDN connects; And

Said affirmation UE is that LIPA connects with the type that is connected by the PDN between the visit PDN network, specifically comprises:

Whether the type identification of judging the said PDN connection of storage in advance is the LIPA sign, and the type that said LIPA sign is used to indicate said PDN to connect is that LIPA connects;

If confirm that then said UE is that LIPA connects with the type that is connected by the PDN between the visit PDN network.

19. method as claimed in claim 18 is characterized in that, said method also comprises:

The type that said PDN connects is revised as after the RIPA connection, will be revised as the RIPA sign for said PDN connects the type identification of storing, and it is that RIPA connects that said RIPA sign is used to indicate the type of said PDN connection.

20. method as claimed in claim 17 is characterized in that, confirms to satisfy the step of the trigger condition that converts the RIPA connection into, specifically comprises:

According to the positional information of present access subzone, judge whether present access subzone is within the coverage of being visited the PDN network of storage in advance;

If not, then confirm to satisfy converting the trigger condition that RIPA connects into.

21. method as claimed in claim 17 is characterized in that, said is enterprise or family lan by visit PDN network; And

Confirm to satisfy the step of the trigger condition that converts the RIPA connection into, specifically comprise:

Judge whether present access subzone is in the macro base station coverage;

If then confirm to satisfy converting the trigger condition that RIPA connects into.

22. method as claimed in claim 17 is characterized in that, said is enterprise or family lan by visit PDN network; And

Whether the CSG ID that judges present access subzone is identical with a last CSG ID who self stores;

If inequality, and carry the CSG ID of present access subzone in the described request message, the CSG ID that then further judges present access subzone allows to set up in the APN tabulation that LIPA connects whether comprise the APN that said PDN connects;

Do not convert the trigger condition that RIPA connects into if, confirm to satisfy.

23. method as claimed in claim 17 is characterized in that, said is enterprise or family lan by visit PDN network; If the target BS equipment of the current access of UE is Home eNodeB, carry the CSG ID of present access subzone in the described request message; And

Judge that said PDN connects the corresponding CSG ID that whether is comprised the present access subzone that carries in the described request message among each CSG ID of visit PDN network;

If do not comprise, then confirm to satisfy converting the trigger condition that RIPA connects into.

24. method as claimed in claim 17 is characterized in that, confirm to satisfy convert into trigger condition that RIPA connects step, specifically comprise:

Judge whether the said address information by the local gateway of visit PDN network internal administration of self storing is identical with the address, base station of present access subzone, and said local gateway and the base station equipment of being visited in the PDN network merge setting;

If inequality, then confirm to satisfy converting the trigger condition that RIPA connects into.

25. method as claimed in claim 17 is characterized in that, said CAMEL-Subscription-Information according to UE judges whether said PDN connection allows to set up RIPA and connect, and specifically comprises:

According to the CAMEL-Subscription-Information of UE, judge whether the APN that said PDN connects allows to set up the RIPA connection;

If allow, then judge the PDN connection and allow to set up the RIPA connection, otherwise, judge the PDN connection and do not allow to set up the RIPA connection.

26. method as claimed in claim 25 is characterized in that, the CAMEL-Subscription-Information of said UE comprises whether the APN of sign PDN connection allows RIPA License Info and the CSG subscription information of RIPA; And

According to the CAMEL-Subscription-Information of UE, judge that whether the APN that said PDN connects allows to set up the RIPA step of connecting, specifically comprises:

27. method as claimed in claim 25 is characterized in that, the CAMEL-Subscription-Information of said UE comprises the LIPA License Info and the CSG subscription information of the LIPA connection type of the APN permission that sign PDN connects; And

According to the CAMEL-Subscription-Information of UE, confirm that the APN that PDN connects allows to set up the RIPA step of connecting, specifically comprises:

28. method as claimed in claim 17 is characterized in that, the CAMEL-Subscription-Information of said UE comprises the relevant information that allows to set up the PDN network that RIPA connects;

Said CAMEL-Subscription-Information according to UE, judge whether said PDN connection allows to set up RIPA and connect, and specifically comprises:

Judge whether the relevant information that allows to set up the PDN network that RIPA connects in the CAMEL-Subscription-Information of UE comprises said by the relevant information of visit PDN network;

If comprise, then judge said PDN connection and allow to set up the RIPA connection, otherwise, judge the PDN connection and do not allow to set up the RIPA connection.

29., it is characterized in that described request message comprises like the arbitrary described method of claim 17 to 28: after the UE under connection status is moved, the handoff request Handover Required that the source base station equipment that UE inserts is initiated; Perhaps, after the UE under idle condition is moved, the service request Service Request that UE initiates; Perhaps, after the UE under idle condition is moved, tracing section updating flow process Tracking Area Update procedure or Routing Area Update flow process Routing Area Update procedure that UE initiates.

30. an equipment of the core network is characterized in that, comprising:

31. equipment as claimed in claim 30 is characterized in that, said equipment of the core network comprises the Mobility Management Entity MME in the long evolving system LTE network; The perhaps service universal grouping wireless business supporting node SGSN in the UMTS UMTS network.