CN103533666A

CN103533666A - Packet data network connection establishment methods and devices

Info

Publication number: CN103533666A
Application number: CN201210319622.1A
Authority: CN
Inventors: 刘国燕; 周星月; 朱春晖
Original assignee: ZTE Corp
Current assignee: ZTE Corp
Priority date: 2012-07-02
Filing date: 2012-08-31
Publication date: 2014-01-22
Anticipated expiration: 2032-08-31
Also published as: CN103533666B

Abstract

The invention discloses packet data network connection establishment methods and devices, wherein one of the methods includes the steps that: User equipment (UE) sends a PDN connection identification to a trusty non 3GPP access network through one of the following messages: an EAP authentication authorization message, a DHCP message, a route request message and an IEEE 802.11u message; and the UE obtains an IP address corresponding to the PDN connection identification. By adopting the invention, the user experience is improved.

Description

Packet data network connects method for building up and device

Technical field

The present invention relates to the communications field, in particular to packet data network (Packet Data Network, referred to as PDN), connect method for building up and device.

Background technology

Third generation partner program (3rd Generation Partnership Project, referred to as 3GPP) grouping system (the Evolved Packet System of evolution, referred to as EPS) by Universal Terrestrial Radio Access Network (the Evolved Universal Terrestrial Radio Access Network of evolution, referred to as E-UTRAN), mobile management unit (Mobility Management Entity, referred to as MME), gateway (Serving Gateway, referred to as S-GW), grouped data network gateway (Packet Data Network Gateway, referred to as PDN GW) and home subscriber server (Home Subscriber Server, referred to as HSS) form.

EPS supports the intercommunication (as shown in Figure 1) with non-3 GPP system, and wherein, by S2a/b/c Interface realization, PDN GW is as the anchor point between 3GPP and non-3 GPP system with the intercommunication of non-3 GPP system.In the system architecture diagram of EPS, non-3 GPP system access is divided into trustless non-3GPP access and the non-3GPP access of trusted; Wherein, trustless non-3GPP access needs to be connected with PDN GW through the packet data gateway (Evolved Packet Data Gateway, referred to as ePDG) of evolution, and the interface between ePDG and PDN GW is S2b; The non-3GPP access of trusted can directly be connected with PDN GW by S2a interface, and S2a interface adopts PMIP agreement to carry out information interaction; In addition, S2c interface provides subscriber equipment (UserEquipment, referred to as UE) control and the mobility support relevant to user's face between PDN GW, the mobility management protocol of its support is for supporting mobile IP v 6 (the Moblie IPv6 Support for Dual Stack Hosts and Routers of two stacks, referred to as DSMIPv6), it can be used for trustless non-3GPP and the non-3GPP access of trusted.

WLAN (Wireless Local Area Network, referred to as WLAN) can be used as packet-based core networks (the Evolved Packet Core of non-3 GPP system access evolution, referred to as EPC), this relates to the interconnection and interflow problem of the fixed network mobile fusion of a lot of operators concern.

At present, increasing operator wishes that WLAN is as non-3GPP access trusty, and therefore, UE is taken seriously by the research of the interconnection and interflow problem of S2a interface access EPC, and has had relevant scheme.But, in relevant scheme, do not provide UE how by non-3 GPP access network trusty, to access, set up PDN and connect flow process.

Summary of the invention

For not providing UE how to access by non-3 GPP access network trusty in relevant scheme, set up the problem that PDN connects, the invention provides PDN and connect method for building up and device, at least to address this problem.

According to an aspect of the present invention, provide a kind of PDN to connect method for building up, having comprised: user equipment (UE) has sent PDN connection identifier by one of following message to non-third generation affiliate 3GPP Access Network trusty: the authentication protocol EAP route certificate authority information of expansion, DynamicHost arrange protocol DHCP message, route request information, Institute of Electrical and Electric Engineers IEEE802.11u message; Described UE obtains the Internet IP address that described PDN connection identifier is corresponding.

Preferably, described PDN connection identifier comprises one of following: Transaction Identifier (xid), client connection identifier (client id), interface identifier (interferce id).

Preferably, non-3 GPP access network trusty comprises: wireless lan (wlan).

According to another aspect of the invention, provide a kind of PDN to connect method for building up, having comprised: non-third generation affiliate 3GPP Access Network trusty has received the PDN connection identifier that user equipment (UE) sends by one of following message: the authentication protocol EAP route certificate authority information of expansion, DynamicHost arrange protocol DHCP message, route request information, Institute of Electrical and Electric Engineers IEEE 802.11u message; Described non-3 GPP access network trusty distributes the first Internet IP address that described PDN connection identifier is corresponding to described UE, and a described IP address is sent to described UE; Or described non-3 GPP access network trusty obtains by 3GPP core net the 2nd IP address that described PDN connection identifier is corresponding, described the 2nd IP address is sent to described UE.

Preferably, PDN connection identifier comprises one of following: xid, client connection identifier (client id), interface identifier (interferce id).

Preferably, described non-3 GPP access network trusty comprises: wireless lan (wlan).

In accordance with a further aspect of the present invention, provide a kind of PDN to connect method for building up, comprise: user equipment (UE) receives one of following message of non-3 GPP access network transmission trusty, wherein, described message is carried the PDN that promising this UE distributes and is connected corresponding Virtual Local Area Network sign: the authentication protocol EAP route certificate authority information of expansion, DynamicHost arrange protocol DHCP message, advertising of route message, Institute of Electrical and Electric Engineers IEEE 802.11u message; Described UE is used described VLAN sign to carry out the transmission of signaling and/or data.

Preferably, the transmission that described UE is used described VLAN sign to carry out signaling and/or data comprises: described UE binds described VLAN sign with the PDN information of described UE, uses the VLAN sign after described binding to carry out the transmission of described signaling and/or described data.

Preferably, described PDN information comprise following one of at least: media access control MAC address, international mobile subscriber identity IMSI information, APN APN information, conventional data transmission platform/proxy mobile internet protocol GTP/PMIP session identification.

Preferably, described signaling comprise following one of at least: dhcp message, route request information, advertising of route message.

Preferably, non-3 GPP access network trusty comprises: wireless lan (wlan).

According to another aspect of the invention, provide a kind of PDN to connect method for building up, having comprised: the PDN that non-3 GPP access network trusty distributes to UE has connected corresponding VLAN sign; Described non-3 GPP access network trusty sends to described UE by one of following message by described VLAN sign: the authentication protocol EAP route certificate authority information of expansion, DynamicHost arrange protocol DHCP message, advertising of route message, Institute of Electrical and Electric Engineers IEEE 802.11u message; Described non-3 GPP access network trusty is used described VLAN sign to carry out the transmission of signaling and/or data.

Preferably, the transmission that described non-3 GPP access network trusty is used described VLAN sign to carry out signaling and/or data comprises: described non-3 GPP access network trusty is bound described VLAN sign with the PDN information of described UE, uses the VLAN sign after described binding to carry out the transmission of described signaling and/or described data.

Preferably, described PDN information comprise following one of at least: media access control MAC address, international mobile subscriber identity IMSI information, APN APN information, GPRS network tunnel protocol/proxy mobile internet protocol GTP/PMIP session identification.

Preferably, described non-3 GPP access network trusty, according to media access control MAC address and APN APN information, judges whether the VLAN id information of the described APN information association under existence and described MAC Address; If judgment result is that to be, set up a PDN and connect; If the determination result is NO, and determine other APN existence VLAN ID associated with these other APN except described APN under described MAC Address, set up the 2nd PDN and connect; Described non-3 GPP access network trusty is that a described PDN connects or described the 2nd PDN connects a VLAN ID of distribution.

According to an aspect of the present invention, provide a kind of PDN to connect apparatus for establishing, be applied to UE, comprise: the first sending module, for sending PDN connection identifier by one of following message to non-third generation affiliate 3GPP Access Network trusty: the authentication protocol EAP route certificate authority information of expansion, DynamicHost arrange protocol DHCP message, route request information, Institute of Electrical and Electric Engineers IEEE 802.11u message; The first acquisition module, for obtain described PDN connection identifier corresponding Internet IP address.

According to another aspect of the invention, provide a kind of PDN to connect apparatus for establishing, be applied to non-3 GPP access network trusty, having comprised: the first receiver module, the PDN connection identifier sending by one of following message for receiving user equipment (UE):

Authentication protocol EAP route certificate authority information, the DynamicHost of expansion arrange protocol DHCP message, route request information, Institute of Electrical and Electric Engineers IEEE 802.11u message;

The first distribution module, for distributing the first Internet IP address that described PDN connection identifier is corresponding to described UE; The second sending module, for sending to described UE by a described IP address; The second acquisition module, for obtaining the 2nd IP address that described PDN connection identifier is corresponding by 3GPP core net; The 3rd sending module, for sending to described UE by described the 2nd IP address.

In accordance with a further aspect of the present invention, provide a kind of PDN to connect apparatus for establishing, comprise: the second receiver module, for receiving one of following message of non-3 GPP access network transmission trusty, wherein, described message is carried the PDN that promising this UE distributes and is connected corresponding Virtual Local Area Network sign: the authentication protocol EAP route certificate authority information of expansion, DynamicHost arrange protocol DHCP message, advertising of route message, Institute of Electrical and Electric Engineers IEEE 802.11u message; The first processing module, for being used described VLAN sign to carry out the transmission of signaling and/or data.

Preferably, described the first processing module comprises: the first binding module, for described VLAN sign is bound with the PDN information of described UE; The first transport module, for being used the VLAN sign after described binding to carry out the transmission of described signaling and/or described data.

According to another aspect of the invention, provide a kind of PDN to connect apparatus for establishing, be applied to non-3 GPP access network trusty, having comprised: the second distribution module, has connected corresponding VLAN sign for the PDN distributing to user equipment (UE); The 4th sending module, for sending to described UE by one of following message by described VLAN sign: the authentication protocol EAP route certificate authority information of expansion, DynamicHost arrange protocol DHCP message, advertising of route message, Institute of Electrical and Electric Engineers IEEE802.11u message; The second processing module, for being used described VLAN sign to carry out the transmission of signaling and/or data.

Preferably, described the second distribution module comprises: judge module, for according to media access control MAC address and APN APN information, judges whether the VLAN id information of the described APN information association under existence and described MAC Address; First sets up module, for described judge module, when being, setting up a PDN and connects; Second sets up module, and for described judge module, the determination result is NO, and when determining under described MAC Address other APN except described APN and having the VLAN ID associated with these other APN, sets up a 2nd PDN connection; The 3rd distribution module, is used to a described PDN to connect or described the 2nd PDN connects a VLAN ID of distribution.

Preferably, described the second processing module comprises: the second binding module, for described VLAN sign is bound with the PDN information of described UE;

The second transport module, for being used the VLAN sign after described binding to carry out the transmission of described signaling and/or described data.

By the present invention, adopt UE to send PDN connection identifier to obtain the mode of the IP address of PDN connection to network side, having solved in relevant scheme does not provide UE how by non-3GPP network insertion trusty, set up the problem that extra PDN connects, realize UE and by WLAN etc., set up PDN and connect, reached the effect that improves network performance.

Accompanying drawing explanation

Accompanying drawing described herein is used to provide a further understanding of the present invention, forms the application's a part, and schematic description and description of the present invention is used for explaining the present invention, does not form inappropriate limitation of the present invention.In the accompanying drawings:

Fig. 1 is according to the network structure of the 3GPP network of correlation technique and non-3GPP network interworking;

Fig. 2 connects the first pass figure of method for building up according to the PDN of the embodiment of the present invention;

Fig. 3 connects the second flow chart of method for building up according to the PDN of the embodiment of the present invention;

Fig. 4 connects the 3rd flow chart of method for building up according to the PDN of the embodiment of the present invention;

Fig. 5 connects the 4th flow chart of method for building up according to the PDN of the embodiment of the present invention;

Fig. 6 connects the first structured flowchart of apparatus for establishing according to the PDN of the embodiment of the present invention;

Fig. 7 connects the second structured flowchart of apparatus for establishing according to the PDN of the embodiment of the present invention;

Fig. 8 connects the 3rd structured flowchart of apparatus for establishing according to the PDN of the embodiment of the present invention;

Fig. 9 connects preferred the 3rd structured flowchart of apparatus for establishing according to the PDN of the embodiment of the present invention;

Figure 10 connects the 4th structured flowchart of apparatus for establishing according to the PDN of the embodiment of the present invention;

Figure 11 connects preferred the 4th structured flowchart of apparatus for establishing according to the PDN of the embodiment of the present invention;

Figure 12 is according to the non-3GPP access of the UE first passage of embodiment of the present invention 3GPP core net, transmits the flow process of APN by EAP authentication message;

Figure 13 sets up extra PDN according to the UE of the embodiment of the present invention to connect, and transmits the flow process of APN by EAP authentication message;

Figure 14 is according to the non-3GPP access of the UE first passage of embodiment of the present invention 3GPP core net, transmits the flow process of APN by DHCP/ route solicitation message;

Figure 15 sets up extra PDN according to the UE of the embodiment of the present invention to connect, and transmits the flow chart of APN by DHCP/ route solicitation message;

Figure 16 sets up many PDN according to the UE of the embodiment of the present invention to connect, the flow chart of the EAP Certificate Authority that every PDN of foundation carries out while connecting;

Figure 17 be according to the embodiment of the present invention by WLAN, access EPC, set up the flow chart one of the method for PDN;

Figure 18 be according to the embodiment of the present invention by WLAN, access EPC, set up the flowchart 2 of the method for PDN; And

Figure 19 is according to the flow chart of the method for setting up PDN of the embodiment of the present invention.

Embodiment

Hereinafter with reference to accompanying drawing, also describe the present invention in detail in conjunction with the embodiments.It should be noted that, in the situation that not conflicting, embodiment and the feature in embodiment in the application can combine mutually.

This preferred embodiment provides a kind of PDN to connect method for building up, and Fig. 2 connects the first pass figure of method for building up according to the PDN of the embodiment of the present invention, and as shown in Figure 2, the method comprises that following step S202 is to step S204.

Step S202:UE sends PDN connection identifier by one of following message to 3GPP Access Network trusty: the authentication protocol EAP route certificate authority information of expansion, DynamicHost arrange protocol DHCP message, route request information, Institute of Electrical and Electric Engineers IEEE 802.11u message.

Step S204:UE obtains the IP address that this PDN connection identifier is corresponding.

Pass through above-mentioned steps, UE can obtain this PDN and connect corresponding IP address by sending PDN connection identifier to non-3 GPP access network trusty, has realized the connection of PDN, thereby realized UE, by non-3GPP access trusty, set up PDN and connect, improved user experience.

Preferably, non-3 GPP access network trusty comprises: wireless lan (wlan).

This preferred embodiment provides a kind of PDN to connect method for building up, and Fig. 3 connects the second flow chart of method for building up according to the PDN of the embodiment of the present invention, and as shown in Figure 3, the method comprises that following step S302 is to step S304.

Step S302: non-3 GPP access network trusty receives the PDN connection identifier that UE sends by one of following message:

Authentication protocol EAP route certificate authority information, the DynamicHost of expansion arrange protocol DHCP message, route request information, Institute of Electrical and Electric Engineers IEEE 802.11u message.

Step S304: non-3 GPP access network trusty distributes the IP address that described PDN connection identifier is corresponding to described UE, and a described IP address is sent to described UE; Or described non-3 GPP access network trusty obtains by 3GPP core net the 2nd IP address that described PDN connection identifier is corresponding, described the 2nd IP address is sent to described UE.

Pass through above-mentioned steps, non-3 GPP access network trusty receives the PDN connection identifier that UE sends, according to this PDN connection identifier, setting up PDN connects, and this PDN is connected to corresponding IP address send to UE, make UE can obtain this PDN and connect corresponding IP address, realize the connection of PDN, thereby realized UE, by non-3GPP access trusty, set up PDN and connect, improved user experience.

Preferably, PDN connection identifier comprises one of following: xid, client connection identifier client id, interface identifier interferce id.

Preferably, non-3 GPP access network trusty comprises: WLAN.

This preferred embodiment provides a kind of PDN to connect method for building up, and Fig. 4 connects the 3rd flow chart of method for building up according to the PDN of the embodiment of the present invention, and as shown in Figure 4, the method comprises that following step S402 is to step S404.

Step S402:UE receives one of following message of non-3 GPP access network transmission trusty, wherein, described message is carried the PDN that promising this UE distributes and is connected corresponding VLAN sign: the authentication protocol of expansion (EAP) route certificate authority information, DynamicHost arrange protocol DHCP message, advertising of route message, Institute of Electrical and Electric Engineers IEEE 802.11u message.

Step S404:UE is used VLAN sign to carry out the transmission of signaling and/or data.

Pass through above-mentioned steps, UE obtains the PDN that non-3 GPP access network trusty is this UE distribution and connects corresponding VLAN sign, use this VLAN sign carry out signaling and/transmission of data, realized UE by non-3 GPP access network trusty set up PDN and connect, improved the performance of Access Network.

When implementing, can realize by following steps the transmission of signaling and/or data: UE VLAN sign and the PDN information of UE are bound, use the VLAN sign after described binding to carry out the transmission of signaling and/or data.

Preferably, this PDN information comprise following one of at least: media access control (MAC) address, IMSI information, APN (APN) information, conventional data transmission platform/proxy mobile internet protocol (GTP/PMIP) session identification.

Preferably, this signaling comprise following one of at least: DHCP request message, route request information, advertising of route message.

Preferably, non-3 GPP access network trusty comprises: WLAN.

This preferred embodiment provides a kind of PDN to connect method for building up, and Fig. 5 connects the 4th flow chart of method for building up according to the PDN of the embodiment of the present invention, and as shown in Figure 5, the method comprises that following step S502 is to step S504.

Step S502: 3GPP Access Network trusty distributes PDN to connect corresponding Virtual Local Area Network sign to UE.

Step S504: non-3 GPP access network trusty sends to UE by one of following message by VLAN sign:

Authentication protocol (EAP) route certificate authority information, the DynamicHost of expansion arrange agreement (DHCP) message, advertising of route message, Institute of Electrical and Electric Engineers IEEE 802.11u message.

Step S506: non-3 GPP access network trusty is used this VLAN sign to carry out the transmission of signaling and/or data.

Pass through above-mentioned steps, 3GPP Access Network trusty distributes VLAN sign to UE, described VLAN sign is sent to UE, make UE obtain the PDN that non-3 GPP access network trusty is this UE distribution and connect corresponding VLAN sign, use this VLAN sign carry out signaling and/transmission of data, realized UE by non-3 GPP access network trusty set up PDN and connect, improved user experience.

When implementing, can realize by following steps the transmission of signaling and/or data: VLAN sign and the PDN information of UE are bound, use the VLAN sign after binding to carry out the transmission of signaling and/or data.

Preferably, this PDN information comprise following one of at least: media access control MAC address, IMSI information, APN APN information, conventional data transmission platform/proxy mobile internet protocol (GTP/PMIP) session identification.

Preferably, non-3 GPP access network trusty comprises: wireless lan (wlan).

As an execution mode preferably, this non-3 GPP access network trusty can distribute VLAN sign to UE in the following way: non-3 GPP access network trusty, according to MAC Address and APN information, judges whether the VLAN id information of searching APN information association under existence and MAC Address; If judgment result is that to be,, if there has been VLAN ID to exist, newly builds a PDN and connect; If the determination result is NO, if do not have related VLAN ID to exist, still, and determine the lower words that exist other other APN except APN to have the VLAN ID associated with these other APN of this MAC Address,, newly-builtly set up the 2nd PDN and connect; Non-3 GPP access network trusty this time, non-3 GPP access network trusty can connect or the 2nd PDN connects newly-built PDN and connects and distribute a VLANID for a PDN.

It should be noted that, in the step shown in the flow chart of accompanying drawing, can in the computer system such as one group of computer executable instructions, carry out, and, although there is shown logical order in flow process, but in some cases, can carry out shown or described step with the order being different from herein.

In another embodiment, also provide a kind of PDN to connect and set up software, the technical scheme that this software is described for carrying out above-described embodiment and preferred embodiment.

In another embodiment, also provide a kind of storage medium, stored above-mentioned PDN connection and set up software in this storage medium, this storage medium includes but not limited to: CD, floppy disk, hard disk, scratch pad memory etc.

The embodiment of the present invention also provides a kind of PDN to connect apparatus for establishing, can be applied to UE, this PDN connects apparatus for establishing can connect method for building up and preferred implementation for realizing above-mentioned PDN, carried out explanation, repeat no more, this PDN is connected to the module relating in apparatus for establishing below and describe.As used below, the combination of software and/or the hardware of predetermined function can be realized in term " module ".Although the described system and method for following examples is preferably realized with software, hardware, or the realization of the combination of software and hardware also may and be conceived.

Fig. 6 connects the first structured flowchart of apparatus for establishing according to the PDN of the embodiment of the present invention, as shown in Figure 6, this device comprises: the first sending module 62, the first acquisition modules 64, are described in detail said structure below.

The first sending module 62, for sending PDN connection identifier by one of following message to non-third generation affiliate 3GPP Access Network trusty: the authentication protocol EAP route certificate authority information of expansion, DynamicHost arrange protocol DHCP message, route request information, Institute of Electrical and Electric Engineers IEEE 802.11u message; The first acquisition module 64, for obtain PDN connection identifier corresponding IP address.

The embodiment of the present invention also provides a kind of PDN to connect apparatus for establishing, can be applied to non-3 GPP access network trusty, this PDN connects apparatus for establishing can connect method for building up and preferred implementation for realizing above-mentioned PDN, carried out explanation, repeat no more, this PDN is connected to the module relating in apparatus for establishing below and describe.As used below, the combination of software and/or the hardware of predetermined function can be realized in term " module ".Although the described system and method for following examples is preferably realized with software, hardware, or the realization of the combination of software and hardware also may and be conceived.

Fig. 7 connects the second structure chart of apparatus for establishing according to the PDN of the embodiment of the present invention, as shown in Figure 7, this device comprises: the first receiver module 72, the first distribution module 74, the second sending module 76, the second acquisition modules 78, the 3rd sending module 79, is described in detail said structure below.

The first receiver module 72, the PDN connection identifier sending by one of following message for receiving user equipment (UE): the authentication protocol of expansion (EAP) route certificate authority information, DynamicHost arrange agreement (DHCP) message, route request information, Institute of Electrical and Electric Engineers (IEEE) 802.11u message;

The first distribution module 74, for distributing the first Internet IP address that described PDN connection identifier is corresponding to described UE; The second sending module 76, is connected to the first distribution module 74, for the IP address that the first distribution module 74 is distributed, sends to described UE;

The second acquisition module 78, for obtaining the 2nd IP address that described PDN connection identifier is corresponding by 3GPP core net; The 3rd sending module 79, is connected to the second acquisition module 78, for described the 2nd IP address that the second acquisition module 78 is got, sends to described UE.

Fig. 8 connects the 3rd structure chart of apparatus for establishing according to the PDN of the embodiment of the present invention, as shown in Figure 8, this device comprises: the second receiver module 82, the first processing modules 84, are described in detail said structure below.

The second acquisition module 82, the message sending by one of following signaling for receiving non-3 GPP access network trusty, wherein, this message is carried the PDN that promising this UE distributes and is connected corresponding VLAN sign: the authentication protocol EAP route certificate authority information of expansion, DynamicHost arrange protocol DHCP message, advertising of route message, Institute of Electrical and Electric Engineers IEEE 802.11u message; The first processing module 84, connects for setting up PDN according to described VLAN sign.

Fig. 9 connects preferred the 3rd structured flowchart of apparatus for establishing according to the PDN of the embodiment of the present invention, as shown in Figure 9, this first processing module 84 comprises: the first binding module 842 and the first transport module 844, be described in detail said structure below.

The first binding module 842, for binding described VLAN sign with the PDN information of described UE; The first transport module 844, is connected to the first binding module 842, for using the VLAN sign after the first binding module 842 bindings to carry out the transmission of signaling and/or data.

Figure 10 connects the 4th structure chart of apparatus for establishing according to the PDN of the embodiment of the present invention, as shown in figure 10, this device comprises: the second distribution module 92, the four sending module 94, the second processing modules 96, are described in detail said structure below.

The second distribution module 92, for distributing PDN to connect corresponding VLAN sign to user equipment (UE); The second distribution module 94, be connected to the second distribution module 92, for the VLAN sign of the second distribution module 92 being distributed by one of following message, send to UE: the authentication protocol EAP route certificate authority information of expansion, DynamicHost arrange protocol DHCP message, advertising of route message, Institute of Electrical and Electric Engineers IEEE 802.11u message; The second processing module 96, is connected to the second distribution module 94, for the VLAN sign of using the 4th sending module 94 to send, carries out the transmission of signaling and/or data.

Figure 11 connects the 4th structure chart of apparatus for establishing according to the PDN of the embodiment of the present invention, as shown in figure 11, this second processing module 96 comprises: the second binding module 962, the second transport module 964, the second distribution module 92 comprises: judge module 922, the first is set up module 924, the second and set up module 926, the 3rd distribution module 928, is described in detail said structure below.

Judge module 922, for according to MAC Address and APN information, judges whether the VLAN id information of this APN information association under existence and this MAC Address; First sets up module 924, is connected to judge module 922, while for judgment result is that of judge module 922 being, setting up a PDN and connects; Second sets up module 926, is connected to judge module 922, and for judge module 922, the determination result is NO, and when determining under this MAC Address other APN except described APN and having the VLAN ID associated with these other APN, sets up a 2nd PDN connection; The 3rd distribution module 928, is connected to first and sets up module 924 and second and set up module 926, is used to a described PDN to connect or described the 2nd PDN connects and distributes a VLAN ID.

The second processing module 96 comprises: the second binding module 962, for described VLAN sign is bound with the PDN information of described UE; The second transport module 964, is connected to the second binding module 962, for using the VLAN sign after the second binding module 962 bindings to carry out the transmission of signaling and/or data.

Below in conjunction with preferred embodiment, describe, following preferred embodiment combines above-described embodiment and preferred implementation.

Preferred embodiment one

This preferred embodiment provides two kinds to set up extra PDN method of attachment.

Method one: UE sends PDN connection identifier to the non-3 GPP access network of trusting, and the network based PDN of receiving connection identifier is set up PDN and connected, the IP address of distributing PDN to connect.

Preferably, the non-3 GPP access network in the method can be WLAN.

Preferably, the UE in the method can pass through EAP route certificate authority information, dhcp message, and router request message, or 802.11u message sends PDN connection identifier to network.

Method two: non-3 GPP access network trusty transmits VLAN sign to UE.

Preferably, the non-3 GPP access network in which can be WLAN.

Preferably, the non-3 GPP access network trusty in the method can pass through EAP authentication message, or dhcp message, or advertising of route message, to UE transmission of information.

By said method, while guaranteeing that UE can access 3GPP core network by WLAN trusty, set up extra PDN and connect.

For the UE that need to support that many PDN connect, between UE and non-3 GPP access network trusty, need to support the isolation of different PDN connections, such as: VLAN.Preferred embodiment two to six below has been described in detail.

Preferred embodiment two

In this preferred embodiment, during UE first passage non-3GPP access EPC trusty, UE, by EAP authentication message, passes to non-3 GPP access network trusty by APN information.Then, non-3 GPP access network trusty can distribute VLAN sign, and passes to UE.Figure 12 is the flow chart of the non-3GPP access of UE first passage 3GPP core net, and as shown in figure 12, the method comprises the steps that S1002 is to step 1044.

Between step S1002:UE and non-3 GPP access network trusty, carry out the distinctive flow process of non-3GPP.

Step S1004:UE sends 802.1x EAPOL-Start message to non-3 GPP access network trusty.

Step S1006: non-3 GPP access network trusty, as EAP authenticator, can be replied EAP-REQ/Identity message to UE, request UE sign;

Step S 1008:UE receives after EAP-REQ/Identity message, can send EAP-RSP/Identity message to non-3 GPP access network trusty, carries APN in message, and APN is optional information.

Step S1010-S1020:UE carries out other message of EAP identifying procedure.Wherein, non-3 GPP access network trusty is received after EAP-RSP/Identity message, obtains APN information, and distributes a VLAN ID, the local incidence relation of preserving between MAC Address, APN information, VLAN ID; The EAP message of replying UE at non-3 GPP access network trusty (is specifically as follows EAP-RES/AKA '-Identity or EAP-RES/AKA '-Challenge, or EAP authentication success message.) in, can carry VLAN ID.At it, from after AAA has obtained IMSI, also IMSI and VLAN ID are bound.

Preferably, can distribute in the following way VLAN ID in the present embodiment: according to MAC Address and APN information, search associated VLAN id information, if there has been VLAN ID to exist, a newly-built PDN connects; If do not have related VLAN ID to exist, still, under this MAC, there is the VLAN ID of other APN associations, a newly-built PDN connects; In this time, non-3 GPP access network trusty can distribute a VLANID for newly-built PDN connects.

Step S1022: if EAP authentication message triggers the words of setting up session between non-3 GPP access network trusty and PDN GW, after non-3 GPP access network trusty is received the message of EAP authentication success, can send and create session request or agent binding update messages to PDN GW, in this message, comprise APN.If UE does not carry APN, default APN is carried at this place.

Between step S1024:PDN GW and PCRF, carry out the operation of IP-CAN session establishment.

Step S1026:PDN GW, by AAAServer, upgrades PDN GW address to HSS.

Step S1028:PDN GW sends and creates conversational response or proxy binding acknowledgment messages to non-3 GPP access network trusty.

It should be noted that, if EAP authentication message triggers between non-3 GPP access network trusty and PDN GW, set up session, step S1022-S1028 just exists.

Step S1030: non-3 GPP access network trusty sends EAP authentication success message to UE.Wherein, if do not carry VLAN ID in step 205-210,, in this step, may carry VLAN ID to UE.

Solicit/route request information of dhcp message or route below, all can send to non-3 GPP access network trusty by this VLAN, and VLAN sign is obtained in EAP identifying procedure.By VLAN, identify, non-3 GPP access network trusty can find associated APN information, and then is the APN distributing IP address of UE association, and IP address is carried out associated with VLAN sign.Specifically describe as follows:

Step S1032:UE may send and solicit (DHCPv6)/DHCP discovery (DHCPv4) message, request distributing IP address to non-3 GPP access network trusty.

Step S1034: if dhcp message triggers the words of setting up session between non-3 GPP access network trusty and PDN GW, after non-3 GPP access network trusty is received DHCP request message, can send and create session request or agent binding update messages to PDN GW, in this message, comprise APN; In this time, non-3 GPP access network trusty can carry out associated with GTP/PMIP session identification by VLAN sign.Other are referring to step S1024-S1028.

If dhcp message triggers between non-3 GPP access network trusty and PDN GW, set up session, just perform step S1034.

Step S1036: non-3 GPP access network trusty is replied notice (DHCPv6)/DHCP to UE and given information (DHCPv4), may comprise UE IP address in message.

Step S1038:UE sends request (DHCPv6)/DHCP request (DHCPv4) to non-3 GPP access network trusty, non-3 GPP access network trusty is replied and is answered (DHCPv6)/DHCP confirmation (DHCPv4) to UE, in this message, comprise UE IP address, and IP address is carried out associated with VLAN sign.

Step S1040:UE may send route request information to non-3 GPP access network trusty;

Step S1042: if route request information triggers the words of setting up session between non-3 GPP access network trusty and PDN GW, after non-3 GPP access network trusty is received route request information, can send and create session request or agent binding update messages to PDN GW, in this message, comprise APN; Other are referring to step S1024-S1028.

If route request information triggers between non-3 GPP access network trusty and PDN GW, set up session, step S1042 just exists.

Step S1044: non-3 GPP access network trusty is replied route acknowledge message to UE, may comprise UE IP address in message, and IP address is carried out associated with VLAN sign.

It should be noted that: UE is when receiving the IP address that non-3 GPP access network trusty returns, and the associated of MAC Address, APN, IP address and VLAN sign etc. also can be carried out in UE this locality.

Follow-up, UE can select a VLAN sign according to the characteristic of concrete business, encapsulated message, and send; When non-3 GPP access network trusty is received the uplink message of UE transmission, meeting decapsulation, and according to VLAN sign, find associated GTP/PMIP session, carry out encapsulate forwarded; When non-3 GPP access network trusty is received the downlink message of PDN GW transmission, meeting decapsulation, and according to GTP/PMIP session identification, find associated VLAN sign, carry out encapsulate forwarded.

When 3GPP network is UMTS, GGSN replaces the PDN GW in this embodiment, and the function that strengthen is identical.

In above-described embodiment, if UE does not carry APN to non-3 GPP access network trusty in EAP authentication message, and network decision UE is service distributing, non-3 GPP access network trusty is that UE distributes VLAN ID, and returns to UE by EAP authentication response message.In this time, the step S1022-S1028 in above-described embodiment, S1034, S1042 do not carry out, and other steps are all carried out, and difference is: non-3 GPP access network trusty is local is UE distributing IP address.

Preferred embodiment three

In this embodiment, UE, by after non-3GPP access EPC trusty, when UE is again by EAP authentication message, sets up extra PDN and connects; Non-3 GPP access network trusty can distribute VLAN sign, and passes to UE.Then, non-3 GPP access network trusty sends the information that creates GTP/PMIP tunnel to PDN GW, comprise the relevant information that PDN connects in information.Specifically can be referring to flow process as shown in figure 13, this flow process comprises the following steps S1102 to step S1138.

Step S1102:UE initially accesses 3GPP EPC network by non-3GPP.

Step S1104:UE sends 802.1xEAPOL-Start message to non-3 GPP access network trusty.

Step S1106: non-3 GPP access network trusty, as EAP authenticator, can be replied EAP-REQ/Identity message to UE, request UE sign;

Step S1108:UE receives after EAP-REQ/Identity message, can send EAP-RSP/Identity message to non-3 GPP access network trusty, carries APN in message; Non-3 GPP access network trusty is received after message, according to MAC Address and APN information, searches associated VLAN ID session, if there has been the corresponding session of VLAN ID to exist, thinks under this APN, a newly-built PDN to connect; If there is no VLAN ID, still, there is the VLAN ID of other APN associations under this MAC Address, think that this UE will ask the PDN looking for novelty to connect and set up; In this time, non-3 GPP access network trusty can distribute a VLAN ID, the local incidence relation of preserving between MAC Address, APN information, VLAN ID and IMSI; Then, non-3 GPP access network trusty is transmitted to 3GPPAAA by EAP-REQ/Identity message.

Other flow processs of EAP re-authentication between step S1110-S1114:UE and 3GPP, wherein, the EAP message of replying UE at non-3 GPP access network trusty (is specifically as follows EAP RSP/AKA '-Reauthentication or EAP-RSP/AKA '-Notification, or EAP authentication success message), can carry VLAN ID.Then, for other Message Processing of EAP identifying procedure, belong to prior art, do not repeat them here.

Or, when setting up extra PDN connection procedure, the also EAP identifying procedure of complete, idiographic flow is referring to step S1004-S1020, and wherein, above-mentioned PDN connects the judgement of setting up referring to step S1108, and the transmission of VLAN ID is referring to step S1004-S1020.

Step S1116: if EAP authentication message triggers the words of setting up session between non-3 GPP access network trusty and PDN GW, after non-3 GPP access network trusty is received the message of EAP authentication success, according to the needs of step S1108, set up the judgement that extra PDN connects, can send and create session request or agent binding update messages to PDN GW.Wherein, if an APN only supports to set up a PDN, connect, in this message, comprise APN; But, if identical APN sets up a plurality of PDN and connects, in this message, comprise APN and PDN connection identifier, wherein, non-3 GPP access network trusty can locally generate a PDN connection identifier.

Between step S1118:PDN GW and PCRF, carry out the operation of IP-CAN session establishment.

Step S1120:PDN GW, by AAA Server, upgrades PDN GW address to HSS.

Step S1122:PDN GW sends and creates conversational response or proxy binding acknowledgment messages to non-3 GPP access network trusty.

If EAP authentication message triggers between non-3 GPP access network trusty and PDN GW, set up session, step S1116-S1122 just exists.

Step S1124: non-3 GPP access network trusty sends EAP authentication success message to UE.Wherein, if do not carry VLAN ID in step S1110-S1114,, in this step, may carry VLAN ID to UE.

Solicit/route request information of dhcp message or route below, all can send to non-3 GPP access network trusty by this VLAN, and VLAN sign is obtained in EAP identifying procedure.By VLAN, identify, non-3 GPP access network trusty can find associated APN information, and then is the APN distributing IP address of UE association, and IP address is carried out associated with VLAN sign.Description specific as follows:

Step S1126:UE may send and solicit (DHCPv6)/DHCP discovery (DHCPv4) message to non-3 GPP access network trusty;

Step S1128: if dhcp message triggers the words of setting up session between non-3 GPP access network trusty and PDN GW, after non-3 GPP access network trusty is received dhcp message, according to the needs of step S1108, set up the judgement that extra PDN connects, can send and create session request or agent binding update messages to PDN GW.Wherein, if an APN only supports to set up a PDN, connect, in this message, comprise APN; But, if identical APN sets up a plurality of PDN and connects, in this message, comprise APN and PDN connection identifier, wherein, non-3 GPP access network trusty can locally generate a PDN connection identifier; Other flow processs are referring to step S1116-S1122.

If dhcp message triggers between non-3 GPP access network trusty and PDN GW, set up session, step S1328 just exists.

Step S1130: non-3 GPP access network trusty is replied notice (DHCPv6)/DHCP to UE and given information (DHCPv4), may comprise UE IP address in message.

Step S1132:UE sends request (DHCPv6)/DHCP request (DHCPv4) to non-3 GPP access network trusty, and non-3 GPP access network trusty is replied and answered (DHCPv6)/DHCP confirmation (DHCPv4) to UE, comprises UE IP address in this message.

Step S1134:UE may send route request information to non-3 GPP access network trusty;

Step S1136: if route request information triggers the words of setting up session between non-3 GPP access network trusty and PDN GW, after non-3 GPP access network trusty is received route request information, according to the needs of step S1108, set up the judgement that extra PDN connects, can send and create session request or agent binding update messages to PDN GW.Wherein, if an APN only supports to set up a PDN, connect, in this message, comprise APN; But, if identical APN sets up a plurality of PDN and connects, in this message, comprise APN and PDN connection identifier, wherein, non-3 GPP access network trusty can locally generate a PDN connection identifier; Other flow processs are referring to step S1116-S1122.

If route request information triggers between non-3 GPP access network trusty and PDN GW, set up session, step S1136 just carries out.

Step S1138: non-3 GPP access network trusty is replied route acknowledge message to UE, may comprise UE IP address in message.

Illustrate: UE is when receiving the IP address that non-3 GPP access network trusty returns, and the associated of MAC Address, APN, IP address and VLAN sign etc. also can be carried out in this locality.

In above-described embodiment, if UE is access EPC in PDN connection before, follow-up, UE can not carry APN to non-3 GPP access network trusty in EAP authentication message, it can be service distributing for network decision, non-3 GPP access network trusty is that UE distributes VLAN ID, and returns to UE by EAP authentication response message.In this time, the step S1116-S1122 in above-described embodiment, S1128, S1136 do not carry out, and other steps are all carried out, and difference is: non-3 GPP access network trusty is local is UE distributing IP address.

Preferred embodiment four

In this embodiment, during UE first passage non-3GPP access EPC trusty, UE is by dhcp message or route solicitation message, APN information is passed to non-3 GPP access network trusty, then, non-3 GPP access network trusty can distribute VLAN sign, and passes to UE.Specifically can be referring to flow process as shown in figure 14, this flow process comprises the following steps S1202 to step S1224.

Between step S1202:UE and non-3 GPP access network trusty, carry out the distinctive flow process of non-3GPP.

Step S1204:UE completes EAP identifying procedure.In this flow process, non-3 GPP access network trusty can carry out the associated of UE MAC Address and IMSI.

Step S1206:UE may send and solicit (DHCPv6)/DHCP discovery (DHCPv4) message to non-3 GPP access network trusty, comprises APN information, to ask distributing IP address in this message.

Step S1208: non-3 GPP access network trusty receives that soliciting (DHCPv6)/DHCP finds after (DHCPv4) message, obtain APN information, and distributing a VLAN ID, the incidence relation between MAC Address, APN information, VLAN ID and IMSI is preserved in this locality; Non-3 GPP access network trusty can send and create session request or agent binding update messages to PDN GW, in this message, comprises APN; In this time, non-3 GPP access network trusty can carry out associated with GTP/PMIP session identification by VLAN sign.

Between step S1210:PDN GW and PCRF, carry out the operation of IP-CAN session establishment.

Step S1212:PDN GW, by AAA Server, upgrades PDN GW address to HSS.

Step S1214:PDN GW sends and creates conversational response or proxy binding acknowledgment messages to non-3 GPP access network trusty.

Step S1216: non-3 GPP access network trusty is replied notice (DHCPv6)/DHCP to UE and given information (DHCPv4), may comprise UE IP address in message.

Step S1218:UE sends request (DHCPv6)/DHCP request (DHCPv4) to non-3 GPP access network trusty, non-3 GPP access network trusty is replied and is answered (DHCPv6)/DHCP confirmation (DHCPv4) to UE, comprises UE IP address and VLAN sign in this message.Non-3 GPP access network trusty carries out associated by IP address with VLAN sign.

Step S1220:UE may send route request information to non-3 GPP access network trusty;

Step S1222: if route request information triggers the words of setting up session between non-3 GPP access network trusty and PDN GW, after non-3 GPP access network trusty is received route request information, obtain APN information, and distributing a VLANID, the incidence relation between MAC Address, APN information, VLAN ID and IMSI is preserved in this locality; Non-3 GPP access network trusty can send and create session request or agent binding update messages to PDN GW, in this message, comprises APN; In this time, non-3 GPP access network trusty can carry out associated with GTP/PMIP session identification by VLAN sign.Other flow processs are referring to step S1210-S1214.

Step S1224: non-3 GPP access network trusty is replied route acknowledge message to UE, may comprise UE IP address and VLAN sign in message.Non-3 GPP access network trusty carries out associated by IP address with VLAN sign.

In above-described embodiment, if UE does not carry APN in dhcp message, do not give non-3 GPP access network trusty, and network decision UE is service distributing, non-3 GPP access network trusty is that UE distributes VLAN ID, and returns to UE by dhcp response message.In this time, step S1208-S1214, S1222 in above-described embodiment do not carry out, and other steps are all carried out, and difference is: non-3 GPP access network trusty is local is UE distributing IP address.

Preferred embodiment five

In this embodiment, UE is by after non-3GPP access EPC trusty, and UE, again by dhcp message or route solicitation message, sets up extra PDN and connects; Non-3 GPP access network trusty can distribute VLAN sign, and passes to UE.Then, non-3 GPP access network trusty sends the information that creates GTP/PMIP tunnel to PDN GW, comprise the relevant information that PDN connects in information.Specifically can be referring to flow chart as shown in figure 15, this flow process comprises the following steps S1302 to step S1322.

Step S1302:UE initially accesses 3GPP EPC network by non-3GPP.

Step S1304:UE may send and solicit (DHCPv6)/DHCP discovery (DHCPv4) message to non-3 GPP access network trusty, comprises APN information, to ask distributing IP address in this message.

Step S1306: non-3 GPP access network trusty receives that soliciting (DHCPv6)/DHCP finds after (DHCPv4) message, according to MAC Address and APN information, search associated VLAN ID, if there has been VLAN ID to exist, think under this APN, a newly-built PDN to connect; If do not have related VLAN ID to exist, still, there is the session of other APN associations under this MAC Address, think that this UE will ask the PDN looking for novelty to connect and set up; In this time, non-3 GPP access network trusty can distribute a VLAN ID, the local incidence relation of preserving between MAC Address, APN information, VLAN ID and IMSI; Then, non-3 GPP access network trusty can send and create session request or agent binding update messages to PDN GW, in this message, comprises APN; In this time, non-3 GPP access network trusty can carry out associated with GTP/PMIP session identification by VLAN sign.

Between step S1308:PDN GW and PCRF, carry out the operation of IP-CAN session establishment.

Step S1310:PDN GW, by AAA Server, upgrades PDN GW address to HSS.

Step S1312:PDN GW sends and creates conversational response or proxy binding acknowledgment messages to non-3 GPP access network trusty.

Step S1314: non-3 GPP access network trusty is replied notice (DHCPv6)/DHCP to UE and given information (DHCPv4), may comprise UE IP address in message.

Step S1316:UE sends request (DHCPv6)/DHCP request (DHCPv4) to non-3 GPP access network trusty, non-3 GPP access network trusty is replied and is answered (DHCPv6)/DHCP confirmation (DHCPv4) to UE, comprises UE IP address and VLAN sign in this message.Non-3 GPP access network trusty carries out associated by IP address with VLAN sign.

Step S1318:UE may send route request information to non-3 GPP access network trusty;

Step S1320: if route request information triggers the words of setting up session between non-3 GPP access network trusty and PDN GW, after non-3 GPP access network trusty is received route request information, obtain APN information, and distributing a VLAN ID, the incidence relation between MAC Address, APN information, VLAN ID and IMSI is preserved in this locality; Non-3 GPP access network trusty can send and create session request or agent binding update messages to PDN GW, in this message, comprises APN; In this time, non-3 GPP access network trusty can carry out associated with GTP/PMIP session identification by VLAN sign.Other flow processs are referring to step S1308-S1312.

Preferably, can distribute in the following way VLAN ID in the present embodiment: according to MAC Address and APN information, search associated VLAN id information, if there has been VLAN ID to exist, a newly-built PDN connects; If do not have related VLAN ID to exist, still, under this MAC, there is the VLAN ID of other APN associations, a newly-built PDN connects; In this time, non-3 GPP access network trusty can distribute a VLAN ID for newly-built PDN connects.

Step S1322: non-3 GPP access network trusty is replied route acknowledge message to UE, may comprise UE IP address and VLAN sign in message.Non-3 GPP access network trusty carries out associated by IP address with VLAN sign.

In above-described embodiment, if UE is access EPC in PDN connection before, follow-up, UE does not carry APN to non-3 GPP access network trusty in dhcp message, and the words that network decision UE is service distributing, non-3 GPP access network trusty is that UE distributes VLAN ID, and returns to UE by dhcp response message.In this time, step S1306-S1312, S1320 in above-described embodiment do not carry out, and other steps are all carried out, and difference is: non-3 GPP access network trusty is local is UE distributing IP address.

Embodiment six

In this embodiment, UE is by trusted WLAN(TWAN) during access EPC, the IA ID that the xid/client id that the DHCPv4 flow process that subsequent request IP address is used is used is used as PDN connection identifier or DHCPv6 flow process, as PDN connection identifier, is included in EAP message and sends to TWAN.Specifically can be referring to flow process as shown in figure 16, this flow process comprises the following steps S1402 to step S1444.

Between the WLAN Access Network of step S1402:UE and trust, carry out the distinctive flow process of non-3GPP.

Step S1404:UE sends 802.1x EAPOL-Start message to TWAN Access Network.

Step S1406:TWAN, as EAP authenticator, can reply EAP-REQ/Identity message to UE, request UE sign;

Step S1408:UE receives after EAP-REQ/Identity message, can send EAP-RSP/Identity message to TWAN, in message, carry the APN of request, the PDN connection identifier that request is set up, used herein be the xid/client id that uses of follow-up DHCPv4 flow process as PDN connection identifier, UE side can be connected the IPv4 address of DHCPv4 request distribution to associate with PDN with network side like this;

Step S1410-S1420:UE carries out other message of EAP identifying procedure.Wherein, TWAN receives after EAP-RSP/Identity message, the local incidence relation of preserving between MAC Address, APN information, PDN connection identifier; The EAP message of replying UE at TWAN (is specifically as follows EAP-RES/AKA '-Identity or EAP-RES/AKA '-Challenge, or EAP authentication success message.) in, can carry PDN connection identifier.

Step S1422: if EAP authentication message triggers the words of setting up session between TWAN and PDN GW, after TWAN Access Network is received the message of EAP authentication success, can send and create session request or agent binding update messages to PDN GW, the APN and the PDN connection identifier information that in this message, comprise request, here TWAN local xid/client id can be mapped to and PGW between GTP sessions carry sign or the PDN connection identifier in the association of PMIP Binding Update.

Between step S1424:PDN GW and PCRF, carry out the operation of IP-CAN session establishment.

Step S1426:PDN GW, by AAA Server, upgrades PDN GW address to HSS.

Step S1428:PDN GW sends and creates conversational response or proxy binding acknowledgment messages to TWAN.

If EAP authentication message triggers between TWAN and PDN GW, set up GTP/PMIP session, step S1422-S1428 just exists so.

Step S1430:TWAN sends EAP authentication success message to UE.Wherein, if do not carry PDN connection identifier in step S1412-S1418,, in this step, network carries PDN connection identifier and confirms to UE.

Step S1432:UE sends DHCPv4 to TWAN and finds message, request distributing IP address, and the xid/client id carrying in this message is the PDN connection identifier of EAP Certificate Authority and network validation.

Step S1434: if set up the words of session between DHCPv4 message trigger TWAN and PDN GW, after TWAN receives DHCPv4 message, can send and create session request or agent binding update messages to PDN GW, the APN and the PDN connection identifier information that in message, comprise request, here TWAN local xid/client id can be mapped to and PGW between GTP sessions carry sign or the PDN connection identifier in the association of PMIP Binding Update; Now, TWAN can carry out associated with GTP/PMIP session identification by PDN connection identifier.Other are referring to step S1424-S1428.

If set up session between DHCPv4 message trigger TWAN and PDN GW, just perform step S1434.

Step S1436:TWAN connects according to the associated corresponding PDN of the xid/client id in DHCPv4 message, replys DHCPv4 distribute UE IPv4 address to UE.

Step S1438:UE sends DHCPv4 request message to TWAN, and TWAN sends DHCPv4 acknowledge message to UE, comprises UE IP address, and IP address is carried out associated with PDN connection identifier in this message.

Step S1440:UE sets up request message to TWAN initiation EAP Certificate Authority flow process for setting up another PDN connection, with S1404-S1430 step, that now UE asks is APN-2, PDN connection identifier, now connection identifier is actual is two, one is the xid/client id of corresponding DHCPv4 flow process, and one is the IA ID in corresponding DHCPv6 flow process, and these two signs can be mapped to the PDN connection identifier of GTP sessions carry ID identical between follow-up TWAN and PGW or the associated binding of PMIP.

Step S1442:UE initiates DHCPv4 flow process to TWAN, obtains the IPv4 address that new PDN connects, and wherein the xid/client id in DHCPv4 message is the PDN connection identifier that in 620 steps, EAP carries.

Step S1444:UE initiates DHCPv6 flow process to TWAN, obtains the IPv6 prefix that new PDN connects, and wherein the IA ID in DHCPv6 message is the PDN connection identifier that in 620 steps, EAP carries.

Illustrate: UE is when receiving the IP address that TWAN returns, and the local MAC Address, APN, IP address of also can carrying out is associated with PDN connection identifier.

Preferred embodiment seven

In the present embodiment, UE is by trusted WLAN(TWAN) during access EPC, PDN connection identifier is corresponding to the interface id of UE, be included in EAP message and send to TWAN, or by TWAN, interface id is distributed to UE in EAP flow process, UE is used this interface id as link local address, as carrying out the mutual address of RS/RA with TWAN, in the present embodiment, have a precondition to be, UE connects and has a corresponding link local address for each PDN.Specifically can be referring to flow process as shown in figure 17, this flow chart comprises the following steps S1502 to step S1534.

Step S1502-S1506: with step S1402-S1406.

Step S1508-S1530: basic procedure is processed same S1408-S1430, different is, UE receives after EAP-REQ/Identity message, can send EAP-RSP/Identity message to TWAN, in message, carry the APN of request, the PDN connection identifier that request is set up, used herein be the interfaceid that comprises of the mutual link local address using of RS/RA of subsequent allocations IPv6 prefix as PDN connection identifier, UE side can be connected the IPv6 prefix of RS/RA cross allocation to associate with PDN with network side like this; Another kind of mode, UE does not send interface id, but is that UE distributes interface id by network side, can in the descending EAP message of UE, be handed down to UE at step S1512 or S1530 network.

Step S1532-S1534:UE sends route request information RS request IPv6 prefix to TWAN, wherein the interface id of the source address link local address of RS message is the PDN connection identifier of UE and network convention in S1508-S1530 step above, accordingly, TWAN is also this link local address at the RA message destination address sending to UE; Another kind of situation, if interface id is distributed by network side, UE can not send RS so.

Illustrate: UE is when receiving the IPv6 prefix that TWAN returns, and the local MAC Address, APN, IP address of also can carrying out is associated with PDN connection identifier.

Preferred embodiment eight

In this preferred embodiment, UE is by trusted WLAN(TWAN) during access EPC, PDN connection identifier is corresponding to the interface id of UE, be included in EAP message and send to TWAN, or by TWAN, interface id is distributed to UE in EAP flow process, UE is used this interface id as link local address, as carrying out the mutual address of RS/RA with TWAN, in the present embodiment, have a precondition to be, UE connects and has a corresponding link local address for each PDN.Specifically can be referring to flow process as shown in figure 18, this flow process comprises the following steps S1602 to step S1634.

Step S1602-step S1606: with step S1502-S1506.

Step S1608-S1630: basic procedure is processed same S1508-S1530, different is, UE receives after EAP-REQ/Identity message, can send EAP-RSP/Identity message to TWAN, in message, carry the APN of request, the PDN connection identifier that request is set up, used herein be the interface id that comprises of the mutual link local address using of RS/RA of subsequent allocations IPv6 prefix as PDN connection identifier, UE side can be connected the IPv6 prefix of RS/RA cross allocation to associate with PDN with network side like this; Another kind of mode, UE does not send interface id, but is that UE distributes interface id by network side, can in the descending EAP message of UE, be handed down to UE at step S1612 or S1630 network;

Step S1632-S1634:UE sends route request information RS request IPv6 prefix to TWAN, wherein the interface id of the source address link local address of RS message is the PDN connection identifier of UE and network convention in S1608-S1630 step above, accordingly, TWAN is also this link local address at the RA message destination address sending to UE; Another kind of situation, if interface id is distributed by network side, UE can not send RS so.

Between step S1628-S1630:UE and non-3 GPP access network trusty, carry out GAS-ANQP recovery request/recovery response mutual, complete the transmission of other information.

Preferred embodiment nine

In this preferred embodiment, when UE first passage non-3GPP trusty accesses EPC or completed initial access, UE, by 802.11u message, passes to non-3 GPP access network trusty by APN information.Then, non-3 GPP access network trusty can distribute VLAN sign, and passes to UE by GAS-ANQP response message.The flow process of this preferred embodiment as shown in figure 19.

The processing of step 1801a, 1802-1804:UE first passage non-3GPP access trusty, specifically referring to the associated description of embodiment nine.

Step 1801b:UE has completed by non-3GPP trusty and has accessed.

It is mutual that step 1805-1806:UE and non-3 GPP access network trusty carry out GAS-ANQP initial request/initial communication, and UE may carry APN information in GAS-ANQP initial request message; Then, non-3 GPP access network trusty can return to GAS-ANQP initial communication message to UE, in this message, can carry VLAN id information, also IMSI and VLANID is bound.

Solicit/route request information of dhcp message or route below, all can send to non-3 GPP access network trusty by this VLAN, and VLAN sign is obtained in step 1806.By VLAN, identify, non-3 GPP access network trusty can find the associated information such as APN, and then is the APN distributing IP address of UE association, and IP address is carried out associated with VLAN sign.Specifically describe as follows:

Step 1807-1816: with step S1032-S1044.

Between step S1817-S1818:UE and non-3 GPP access network trusty, carry out GAS-ANQP recovery request/recovery response mutual, complete the transmission of other information.

In above-described embodiment, if be all access EPC if UE does not carry in 802.11u message that APN gives non-3 GPP access network trusty or connect at PDN before, follow-up, UE can not carry APN to non-3 GPP access network trusty in 802.11u response message, it can be service distributing for network decision, non-3 GPP access network trusty is that UE distributes VLAN ID, and returns to UE by 802.11u response message.In this time, step S1808-S1811, S1815 in above-described embodiment do not carry out, and other steps are all carried out, and difference is: non-3 GPP access network trusty is local is UE distributing IP address.

It should be noted that, in above preferred embodiment, take WLAN as example is described, for the scheme in above preferred embodiment, use equally the non-3 GPP access network trusty of other types, at this, do not limit.

Pass through above-described embodiment, PDN method of attachment and device are provided, adopt UE to obtain the mode of IP address to network side transmission PDN connection identifier or APN sign, having solved in relevant scheme does not provide UE how by WLAN, to access, set up the problem that extra PDN connects, realize UE and by WLAN etc., set up PDN and connect, reached the effect that improves network performance.It should be noted that, these technique effects are not that above-mentioned all execution modes have, and some technique effect is that some preferred implementation just can obtain.

Obviously, those skilled in the art should be understood that, above-mentioned each module of the present invention or each step can realize with general calculation element, they can concentrate on single calculation element, or be distributed on the network that a plurality of calculation elements form, alternatively, they can be realized with the executable program code of calculation element, thereby they can be stored in storage device and be carried out by calculation element, or they are made into respectively to each integrated circuit modules, or a plurality of modules in them or step are made into single integrated circuit module to be realized.Like this, the present invention is not restricted to any specific hardware and software combination.

The foregoing is only the preferred embodiments of the present invention, be not limited to the present invention, for a person skilled in the art, the present invention can have various modifications and variations.Within the spirit and principles in the present invention all, any modification of doing, be equal to replacement, improvement etc., within all should being included in protection scope of the present invention.

Claims

1. packet data network PDN connects a method for building up, it is characterized in that comprising:

User equipment (UE) sends PDN connection identifier by one of following message to non-third generation affiliate 3GPP Access Network trusty:

Described UE obtains the Internet IP address that described PDN connection identifier is corresponding.

2. method according to claim 1 and 2, is characterized in that, it is one of following that described PDN connection identifier comprises: Transaction Identifier xid, client connection identifier client id, interface identifier interferce id.

3. method according to claim 1 and 2, is characterized in that,

Described non-3 GPP access network trusty comprises: WLAN (wireless local area network) WLAN.

4. packet data network PDN connects a method for building up, it is characterized in that comprising:

Non-third generation affiliate 3GPP Access Network trusty receives the PDN connection identifier that user equipment (UE) sends by one of following message:

Described non-3 GPP access network trusty distributes the first Internet IP address that described PDN connection identifier is corresponding to described UE, and a described IP address is sent to described UE; Or described non-3 GPP access network trusty obtains by 3GPP core net the 2nd IP address that described PDN connection identifier is corresponding, described the 2nd IP address is sent to described UE.

5. method according to claim 4, is characterized in that, it is one of following that PDN connection identifier comprises: Transaction Identifier xid, client connection identifier client id, interface identifier interferce id.

6. according to the method described in claim 4 or 5, it is characterized in that,

7. packet data network PDN connects a method for building up, it is characterized in that comprising:

User equipment (UE) receives one of following message of non-3 GPP access network transmission trusty, and wherein, the PDN that described message is carried promising this UE distribution connects corresponding virtual LAN VLAN sign:

Authentication protocol EAP route certificate authority information, the DynamicHost of expansion arrange protocol DHCP message, advertising of route message, Institute of Electrical and Electric Engineers IEEE 802.11u message;

Described UE is used described VLAN sign to carry out the transmission of signaling and/or data.

8. method according to claim 7, is characterized in that, the transmission that described UE is used described VLAN sign to carry out signaling and/or data comprises:

Described UE binds described VLAN sign with the PDN information of described UE, use the VLAN sign after described binding to carry out the transmission of described signaling and/or described data.

9. method according to claim 8, it is characterized in that, described PDN information comprise following one of at least: media access control MAC address, international mobile subscriber identity IMSI information, APN APN information, conventional data transmission platform/proxy mobile internet protocol GTP/PMIP session identification.

10. method according to claim 7, is characterized in that, described signaling comprise following one of at least: dhcp message, route request information, advertising of route message.

11. according to the method described in any one in claim 7 to 10, it is characterized in that,

12. 1 kinds of packet data network PDN connect method for building up, it is characterized in that comprising:

Non-third generation affiliate 3GPP Access Network trusty distributes PDN to connect corresponding virtual LAN VLAN sign to user equipment (UE);

Described non-3 GPP access network trusty sends to described UE by one of following message by described VLAN sign:

Described non-3 GPP access network trusty is used described VLAN sign to carry out the transmission of signaling and/or data.

13. methods according to claim 12, is characterized in that, the transmission that described non-3 GPP access network trusty is used described VLAN sign to carry out signaling and/or data comprises:

Described non-3 GPP access network trusty is bound described VLAN sign with the PDN information of described UE, use the VLAN sign after described binding to carry out the transmission of described signaling and/or described data.

14. methods according to claim 13, it is characterized in that, described PDN information comprise following one of at least: media access control MAC address, international mobile subscriber identity IMSI information, APN APN information, GPRS network tunnel protocol/proxy mobile internet protocol GTP/PMIP session identification.

15. methods according to claim 13, is characterized in that, described signaling comprise following one of at least: dhcp message, route request information, advertising of route message.

16. methods according to claim 12, is characterized in that, non-3 GPP access network trusty distributes VLAN sign to comprise to user equipment (UE):

Described non-3 GPP access network trusty, according to media access control MAC address and APN APN information, judges whether the VLAN id information of the described APN information association under existence and described MAC Address;

If judgment result is that to be, set up a PDN and connect;

If the determination result is NO, and determine other APN existence VLAN ID associated with these other APN except described APN under described MAC Address, set up the 2nd PDN and connect;

Described non-3 GPP access network trusty is that a described PDN connects or described the 2nd PDN connects a VLANID of distribution.

17. according to claim 12 to the method described in any one in 16, it is characterized in that,

18. 1 kinds of packet data network PDN connect apparatus for establishing, are applied to user equipment (UE), it is characterized in that comprising:

The first sending module, for sending PDN connection identifier by one of following message to non-third generation affiliate 3GPP Access Network trusty:

The first acquisition module, for obtain described PDN connection identifier corresponding Internet IP address.

19. 1 kinds of packet data network PDN connect apparatus for establishing, are applied to non-third generation affiliate 3GPP Access Network trusty, it is characterized in that comprising:

The first receiver module, the PDN connection identifier sending by one of following message for receiving user equipment (UE):

The first distribution module, for distributing the first Internet IP address that described PDN connection identifier is corresponding to described UE;

The second sending module, for sending to described UE by a described IP address;

The second acquisition module, for obtaining the 2nd IP address that described PDN connection identifier is corresponding by 3GPP core net;

The 3rd sending module, for sending to described UE by described the 2nd IP address.

20. 1 kinds of packet data network PDN connect apparatus for establishing, are applied to user equipment (UE), it is characterized in that comprising:

The second receiver module, for receiving one of following message of non-3 GPP access network transmission trusty, wherein, the PDN that described message is carried promising this UE distribution connects corresponding virtual LAN VLAN sign:

The first processing module, for being used described VLAN sign to carry out the transmission of signaling and/or data.

21. devices according to claim 20, is characterized in that, described the first processing module comprises:

The first binding module, for binding described VLAN sign with the PDN information of described UE;

The first transport module, for being used the VLAN sign after described binding to carry out the transmission of described signaling and/or described data.

22. 1 kinds of packet data network PDN connect apparatus for establishing, are applied to non-third generation affiliate 3GPP Access Network trusty, it is characterized in that comprising:

The second distribution module, for distributing PDN to connect corresponding virtual LAN VLAN sign to user equipment (UE);

The 4th sending module, for described VLAN sign being sent to described UE by one of following message:

The second processing module, for being used described VLAN sign to carry out the transmission of signaling and/or data.

23. devices according to claim 22, is characterized in that, described the second distribution module comprises:

Judge module, for according to media access control MAC address and APN APN information, judges whether the VLAN id information of the described APN information association under existence and described MAC Address;

First sets up module, while for judgment result is that of described judge module being, setting up a PDN and connects;

Second sets up module, and for described judge module, the determination result is NO, and when determining under described MAC Address other APN except described APN and having the VLAN ID associated with these other APN, sets up a 2nd PDN connection;

The 3rd distribution module, is used to a described PDN to connect or described the 2nd PDN connects a VLAN ID of distribution.

24. devices according to claim 22, is characterized in that, described the second processing module comprises:

The second binding module, for binding described VLAN sign with the PDN information of described UE;