CN108668274B - Method and device for realizing VoLTE IMS registration - Google Patents

Method and device for realizing VoLTE IMS registration Download PDF

Info

Publication number
CN108668274B
CN108668274B CN201710198394.XA CN201710198394A CN108668274B CN 108668274 B CN108668274 B CN 108668274B CN 201710198394 A CN201710198394 A CN 201710198394A CN 108668274 B CN108668274 B CN 108668274B
Authority
CN
China
Prior art keywords
network side
authentication
authentication parameter
registration
ims
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
CN201710198394.XA
Other languages
Chinese (zh)
Other versions
CN108668274A (en
Inventor
安凯
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
China Mobile Communications Group Co Ltd
China Mobile Group Beijing Co Ltd
Original Assignee
China Mobile Communications Group Co Ltd
China Mobile Group Beijing Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by China Mobile Communications Group Co Ltd, China Mobile Group Beijing Co Ltd filed Critical China Mobile Communications Group Co Ltd
Priority to CN201710198394.XA priority Critical patent/CN108668274B/en
Publication of CN108668274A publication Critical patent/CN108668274A/en
Application granted granted Critical
Publication of CN108668274B publication Critical patent/CN108668274B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/06—Authentication
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L65/00—Network arrangements, protocols or services for supporting real-time applications in data packet communication
    • H04L65/10—Architectures or entities
    • H04L65/1016—IP multimedia subsystem [IMS]
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L65/00—Network arrangements, protocols or services for supporting real-time applications in data packet communication
    • H04L65/1066—Session management
    • H04L65/1073—Registration or de-registration
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W60/00—Affiliation to network, e.g. registration; Terminating affiliation with the network, e.g. de-registration

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Multimedia (AREA)
  • Computer Security & Cryptography (AREA)
  • Business, Economics & Management (AREA)
  • General Business, Economics & Management (AREA)
  • Mobile Radio Communication Systems (AREA)

Abstract

The application relates to the technical field of mobile communication, in particular to a method and a device for realizing VoLTE IMS registration, which are used for solving the problem of low success rate of VoLTE IMS registration in the prior art. The method for realizing VoLTE IMS registration provided by the embodiment of the application comprises the following steps: the method comprises the steps that in the process of requesting to attach to an EPC network side, User Equipment (UE) determines a first authentication parameter for initiating authentication to an IP Multimedia Subsystem (IMS) network side; after the IMS network is successfully attached to the EPC network, sending a registration request message carrying the first authentication parameter to an IMS network side; and receiving a registration success message sent by the IMS network side, wherein the registration success message is sent to the UE by the IMS network side after the first authentication parameter is determined to be consistent with the second authentication parameter obtained from the EPC network side.

Description

Method and device for realizing VoLTE IMS registration
Technical Field
The invention relates to the technical field of mobile communication, in particular to a method and a device for realizing VoLTE IMS registration.
Background
Registration is the process of a User Equipment (UE) requesting authorization to use a service from a subscription network. Once the UE is successfully registered, the user can initiate and receive sessions for services.
Currently, a process of initiating registration to a network side by a UE supporting Voice over LTE (VoLTE) over long term evolution bearer is divided into two phases. First, the UE needs to attach to a 4G Core (EPC), and then complete registration of an IP Multimedia Subsystem (IMS) network. When the UE completes registration of the IMS network, it needs to initiate two registration processes: the process that the UE initiates registration to the IMS network for the first time is to acquire authentication parameters from the IMS network, and after acquiring the authentication parameters responded by the IMS network, the UE initiates registration to the IMS network again, wherein the process that the UE initiates registration to the IMS network for the second time is actually the process that the acquired authentication parameters are utilized to initiate authentication to the IMS network. Specifically, the UE calculates an authentication result according to an authentication parameter (i.e., an authentication quintuple) returned by the IMS network during the first registration, and sends the authentication result to the IMS network via the second registration request, and the IMS network performs authentication by comparing the authentication result received from the UE side with an expected authentication result calculated by itself according to the authentication parameter.
However, in the present phase, when a UE registers with an IMS network, it often becomes problematic to initiate registration with the IMS network a second time. For example, under the condition of poor network quality, the IMS network cannot successfully feed back the authentication parameters to the UE, and the UE cannot initiate the second registration process, so that the IMS network fails to authenticate the UE, and the user cannot use services related to VoLTE, such as high-definition voice services.
It can be seen that there is a need for a solution that can improve the success rate of VoLTE IMS registration.
Disclosure of Invention
The embodiment of the application provides a method and a device for realizing VoLTE IMS registration, which are used for solving the problem of low success rate of VoLTE IMS registration in the prior art.
The embodiment of the application provides a method for realizing VoLTE IMS registration, which comprises the following steps:
the method comprises the steps that in the process of requesting to attach to an EPC network side, User Equipment (UE) determines a first authentication parameter for initiating authentication to an IP Multimedia Subsystem (IMS) network side;
after the IMS network is successfully attached to the EPC network, sending a registration request message carrying the first authentication parameter to an IMS network side;
and receiving a registration success message sent by the IMS network side, wherein the registration success message is sent to the UE by the IMS network side after the first authentication parameter is determined to be consistent with the second authentication parameter obtained from the EPC network side.
Optionally, the determining a first authentication parameter for initiating authentication to the IMS network side includes:
after sending an attach request message to the EPC network side, receiving an authentication request carrying a quadruplet authentication vector sent by the EPC network side; and the number of the first and second electrodes,
calculating a response number according to the quadruple authentication vector;
and determining the response number as a first authentication parameter for initiating authentication to the IMS network side.
Another embodiment of the present application provides a method for implementing VoLTE IMS registration, including:
an IP Multimedia Subsystem (IMS) network side receives a registration request message sent by User Equipment (UE) after the UE is successfully attached to a 4G core network (EPC), wherein the registration request message carries a first authentication parameter for initiating authentication to the IMS network side, and the first authentication parameter is determined in the process that the UE requests to attach to the EPC;
acquiring a second authentication parameter for verifying the first authentication parameter from the EPC network side of the 4G core network;
judging whether the first authentication parameter is consistent with the second authentication parameter;
if the registration information is consistent with the registration information, a registration success message is sent to the UE; otherwise, sending a registration failure message to the UE.
Optionally, the obtaining, from the EPC network side, a second authentication parameter for verifying the first authentication parameter includes:
sending a Multimedia Authentication Request (MAR) message to an EPC network side, wherein the MAR message is used for requesting to acquire authentication information used for verifying the first authentication parameter;
and receiving a multimedia authentication response (MAA) message which is sent by the EPC network side and carries a second authentication parameter.
Optionally, the second authentication parameter obtained from the EPC network side is a response number received and stored from the UE side by the EPC network side in a process that the UE requests to attach to the EPC network side.
The embodiment of the application provides a device for realizing VoLTE IMS registration, which comprises:
the determining module is used for determining a first authentication parameter for initiating authentication to an IP Multimedia Subsystem (IMS) network side in the process of requesting to attach to the EPC network side;
a sending module, configured to send a registration request message carrying the first authentication parameter to an IMS network side after the first authentication parameter is successfully attached to the EPC network;
a receiving module, configured to receive a registration success message sent by the IMS network side, where the registration success message is sent to the UE by the IMS network side after determining that the first authentication parameter is consistent with the second authentication parameter obtained from the EPC network side.
Optionally, the determining module is specifically configured to:
after sending an attach request message to the EPC network side, receiving an authentication request carrying a quadruplet authentication vector sent by the EPC network side; and the number of the first and second electrodes,
calculating a response number according to the quadruple authentication vector;
and determining the response number as a first authentication parameter for initiating authentication to the IMS network side.
Another embodiment of the present application provides an apparatus for implementing VoLTE IMS registration, including:
a receiving module, configured to receive a registration request message sent by a user equipment UE after the UE successfully attaches to an EPC network in a 4G core network, where the registration request message carries a first authentication parameter for initiating authentication to an IMS network side, where the first authentication parameter is determined in a process of requesting the UE to attach to the EPC network;
the acquisition module is used for acquiring a second authentication parameter for verifying the first authentication parameter from the EPC network side of the 4G core network;
the processing module is used for judging whether the first authentication parameter is consistent with the second authentication parameter; if the registration information is consistent with the registration information, a registration success message is sent to the UE; otherwise, sending a registration failure message to the UE.
Optionally, the obtaining module is specifically configured to:
sending a Multimedia Authentication Request (MAR) message to an EPC network side, wherein the MAR message is used for requesting to acquire authentication information used for verifying the first authentication parameter;
and receiving a multimedia authentication response (MAA) message which is sent by the EPC network side and carries a second authentication parameter.
Optionally, the second authentication parameter acquired by the acquiring module from the EPC network side is a response number received and stored by the EPC network side from the UE side in a process that the UE requests to attach to the EPC network side.
In the embodiment of the application, in the process of requesting to attach to the EPC network side, the UE may determine a first authentication parameter for initiating authentication to the IMS network side, and after successfully attaching to the EPC network, may initiate registration to the IMS network side using the determined first authentication parameter, and after subsequently determining that the first authentication parameter is consistent with a second authentication parameter acquired from the EPC network side, the UE may receive a registration success message fed back by the IMS network side. Therefore, when the UE initiates registration to the IMS network side, the UE can directly initiate a registration request carrying authentication information to the IMS network side by using the first authentication parameter determined in the process of requesting to attach the EPC network side. Correspondingly, the IMS network side may also verify the first authentication parameter by using the second authentication parameter acquired from the EPC network side, and determine whether the UE is successfully registered to the IMS network side. Based on the mode, the UE does not need to initiate a flow of requesting to acquire the authentication parameters to the IMS network side, and can complete registration only by performing a registration process with the IMS network side once, so that the problem that the UE fails in authentication on the UE by the IMS network due to the fact that the UE cannot acquire the authentication parameters from the IMS network can be effectively avoided, and the success rate of VoLTE IMS registration is effectively improved.
Drawings
Fig. 1 is a flowchart of a method for implementing VoLTE IMS registration according to an embodiment of the present application;
fig. 2 is a flowchart of a method for implementing VoLTE IMS registration according to a second embodiment of the present application;
fig. 3 is a flowchart of a method for attaching a UE to an EPC network and registering in an IMS network according to a third embodiment of the present application;
fig. 4 is a schematic structural diagram of an apparatus for implementing VoLTE IMS registration according to a fourth embodiment of the present application;
fig. 5 is a schematic structural diagram of an apparatus for implementing VoLTE IMS registration according to a fifth embodiment of the present application.
Detailed Description
In the embodiment of the application, in the process of requesting to attach to the EPC network side, the UE may determine a first authentication parameter for initiating authentication to the IMS network side, and after successfully attaching to the EPC network, may initiate registration to the IMS network side using the determined first authentication parameter, and after subsequently determining that the first authentication parameter is consistent with a second authentication parameter acquired from the EPC network side, the UE may receive a registration success message fed back by the IMS network side. Therefore, when the UE initiates registration to the IMS network side, the UE can directly initiate a registration request carrying authentication information to the IMS network side by using the first authentication parameter determined in the process of requesting to attach the EPC network side. Correspondingly, the IMS network side may also verify the first authentication parameter by using the second authentication parameter acquired from the EPC network side, and determine whether the UE is successfully registered to the IMS network side. Based on the mode, the UE does not need to initiate a flow of requesting to acquire the authentication parameters to the IMS network side, and can complete registration only by performing a registration process with the IMS network side once, so that the problem that the UE fails in authentication on the UE by the IMS network due to the fact that the UE cannot acquire the authentication parameters from the IMS network can be effectively avoided, and the success rate of VoLTE IMS registration is effectively improved.
The embodiments of the present application will be described in further detail with reference to the drawings attached hereto.
Example one
As shown in fig. 1, a flowchart of a method for implementing VoLTE IMS registration provided in an embodiment of the present application includes the following steps:
s101: the method comprises the steps that in the process that UE requests to attach to an EPC network side, a first authentication parameter used for initiating authentication to the IMS network side is determined;
specifically, the first authentication parameter for initiating authentication to the IMS network side may be determined according to the following method: after sending an attach request message to the EPC network side, receiving an authentication request carrying a quadruplet authentication vector sent by the EPC network side, calculating a response number according to the quadruplet authentication vector, and determining the response number as a first authentication parameter for initiating authentication to the IMS network side.
S102: and after the IMS network is successfully attached to the EPC network, sending a registration request message carrying the first authentication parameter to the IMS network side.
Here, the UE may directly use the response number (i.e., RES) calculated in the process of attaching the EPC network as the first authentication parameter for initiating authentication to the IMS network side, so as to directly initiate a registration request message carrying the first authentication parameter to the IMS network side, without first requesting the IMS network side to obtain the authentication parameter and calculating an authentication result based on the authentication parameter fed back by the IMS network side. In addition, in the present application, after the first authentication parameter is determined, the first authentication parameter may be configured as an arbitrary or non-repetitive random number value (nonce value) that is used only once, and the nonce value including the response number may be carried in the registration request message and sent to the IMS network side device.
S103: and receiving a registration success message sent by the IMS network side, wherein the registration success message is sent to the UE by the IMS network side after the first authentication parameter is determined to be consistent with the second authentication parameter obtained from the EPC network side.
Example two
As shown in fig. 2, a flowchart of a method for implementing VoLTE IMS registration according to a second embodiment of the present application includes the following steps:
s201: the IMS network side receives a registration request message sent by the UE after the UE is successfully attached to the EPC network, wherein the registration request message carries a first authentication parameter used for initiating authentication to the IMS network side, and the first authentication parameter is determined in the process that the UE requests to attach to the EPC network.
S202: and acquiring a second authentication parameter for verifying the first authentication parameter from the EPC network side.
Specifically, the IMS network side may send a multimedia authentication request MAR message to the EPC network side for requesting to acquire authentication information for verifying the first authentication parameter, and may subsequently receive a multimedia authentication response MAA message carrying a second authentication parameter, which is sent by the EPC network side.
The second authentication parameter obtained from the EPC network side may be a response number received and stored from the UE side by the EPC network side in a process that the UE requests to attach to the EPC network side. For a specific procedure of receiving and storing the response number from the UE side by the EPC network side, reference may be made to an implementation procedure given in the third embodiment of the present application.
S203: and judging whether the first authentication parameter is consistent with the second authentication parameter, if so, executing S204, otherwise, executing S205.
S204: and sending a registration success message to the UE.
S205: and sending a registration failure message to the UE.
EXAMPLE III
Referring to fig. 3, in order to better illustrate the solution proposed in the embodiment of the present application, in the third embodiment of the present application, a detailed description will be given of a procedure of attaching a UE to an EPC network and registering the UE in an IMS network.
The UE attaches to the EPC network:
s301: the UE sends an Attach Request (Attach Request) message to a Mobile Management Entity (MME) through an eNodeB, where the Attach Request message carries user identity information, such as an International Mobile Subscriber Identity (IMSI) and information about a capability of a user accessing a core network, an Attach type, and the like.
S302: if the MME does not have an Authentication set locally, the MME sends an Authentication Information Request (AIR) message to a Home Subscriber Server (HSS) to Request Authentication data.
S303: the HSS returns an Authentication Information Answer (AIA) message to the MME, where the AIA message carries a quadruple Authentication vector of the user.
The quadruplet authentication vector includes an Expected Response (XRES), a Random Challenge (RAND), an authentication flag (AUTN), and an authentication key (Kasme).
S304: after receiving the AIA message, the MME sends an Authentication Request (Authentication Request) message to the UE, and initiates an Authentication Request to the UE.
The authentication request message carries a quadruple authentication vector, such as RAND, of the user that is obtained before.
S305: after the UE successfully authenticates the EPC network, it may calculate a Response number (RES) according to the RAND, and return the RES to the MME by carrying the RES in an Authentication Response message.
S306: after determining that XRES in the authentication vector is the same as RES returned by the UE, the MME sends a Location Update Request (ULR) message to the HSS, to acquire user information. Wherein, the ULR message carries RES returned by the UE.
S307: the HSS stores the RES in the ULR message locally, and sends a Location Update Answer (ULA) message to the MME, that is, returns subscription Data to the MME, where the subscription Data specifically includes an Access Point Name (APN), one or more Packet Data Network (PDN) subscription contexts, and the like.
It should be noted that, in the phase that the UE attaches to the EPC network, the difference between the present application and the prior art procedure is that the MME may send the RES calculated by the UE to the HSS, and accordingly, the HSS may be stored locally after receiving the RES, so that after the UE initiates the IMS registration procedure, the HSS may provide the IMS network side with the second authentication parameter for authenticating the UE.
S308: and the MME initiates a Create Session Request (Create Session Request) message to a Packet Data Network gateway (P-GW) according to the subscription Data.
S309: the P-GW sends a Credit Control Request (CCR) message to a Policy and Charging Rules Function (PCRF).
S310, PCRF sends a Credit Control Answer (CCA) message to P-GW.
S311: the P-GW, after receiving the CCA message, sends a Create Session Response (Create Session Response) message to the MME to indicate that the MME has successfully created a Session for the UE.
S312: the MME sends an Attach response (Attach Accept) message to the UE.
S313: the UE sends a packet data network connection setup Request (PDN Connectivity Request) message to the MME.
S314, the MME initiates a Create Session Request (Create Session Request) message to the packet data network gateway P-GW.
S315: the P-GW sends a Credit Control Request (CCR) message to the PCRF unit.
S316, PCRF unit sends message of Credit Control Answer (CCA) to P-GW.
S317: after receiving the CCA message, the P-GW sends a Create Session Response (Create Session Response) message to the MME, where the Create Session Response message carries IP address information of a Session Border Controller (SBC)/Proxy-Call Session Control Function (P-CSCF).
S318: and the MME carries the IP address information of the SBC/P-CSCF in a packet data network connection establishment Response (PDN Connectivity Response) message and sends the message to the UE.
To this end, the UE has successfully attached to the EPC network. Subsequently, a registration procedure may be initiated to the IMS network side. In the application, since the UE has already completed the authentication of the EPC network in the EPC attachment procedure, and the IMS network is a service network carried behind the EPC network, the UE can ensure the security of the accessed network after completing the authentication of the EPC network accessed at the bottom layer, so that it is not necessary to authenticate the IMS network at the upper layer.
Based on this, in the scheme provided by the application, the UE only needs to perform one-way authentication on the UE by the IMS network side in the process that the IMS network side completes registration. In addition, the method and the device do not need to initiate two registration processes, namely, the registration process of requesting the IMS network side for obtaining the authentication parameters for the first time is omitted.
Specifically, a flowchart of a method for implementing VoLTE IMS registration in the present application may refer to the following flow shown in fig. 3:
s319: and after receiving the IP address information of the SBC/P-CSCF sent by the MME, the UE initiates a registration request message to the P-CSCF through IMS signaling default bearer.
The registration request message includes Identity information of the UE, such as an IP Multimedia Private Identity (IMPI) and a corresponding IP Multimedia Public Identity (IMPU).
In addition, it should be noted that the registration request message also carries a first authentication parameter for initiating authentication to the IMS network side. In specific implementation, the UE may directly utilize the response number, i.e. RES, calculated in the process of attaching to the EPC network, and use the response number as a first authentication parameter for initiating authentication to the IMS network side, thereby directly initiating a registration request message carrying the first authentication parameter to the IMS network side, without first requesting the IMS network side to obtain the authentication parameter and calculating an authentication result based on the authentication parameter fed back by the IMS network side. In addition, in the present application, after the first authentication parameter is determined, the first authentication parameter may be configured as an arbitrary or non-repetitive random number value (nonce value) that is used only once, and the nonce value including the response number may be carried in the registration request message and sent to the P-CSCF.
S320: the P-CSCF forwards the received registration request message carrying the first authentication parameter to an inquiry-Call Session Control Function (I-CSCF).
S321: after receiving the registration Request message, the I-CSCF sends a User-Authorization-Request (UAR) message to the HSS on the network side, where the UAR message is used to Request to acquire address information of a Serving-Call Session Control Function (S-CSCF), so as to forward the registration Request message carrying the first authentication parameter to the S-CSCF.
S322: HSS sends User-Authorization-Answer (UAA) message carrying address information of S-CSCF to I-CSCF.
S323: and after the I-CSCF acquires the address information of the S-CSCF, forwarding the registration request message carrying the first authentication parameter to the S-CSCF.
S324: after receiving the registration Request message carrying the first authentication parameter forwarded by the I-CSCF, the S-CSCF sends a Multimedia-authentication-Request (MAR) message to the HSS, where the MAR message is used to query the HSS for the authentication information of the user.
S325: the HSS returns the RES calculated by the UE stored in step S307 to the S-CSCF with the RES carried in a Multimedia-authentication-response (MAA) message.
S326: and the S-CSCF determines the RES acquired by the HSS as a second authentication parameter, compares the first authentication parameter contained in the registration request message sent by the UE with the second authentication parameter, if the first authentication parameter and the second authentication parameter are the same, the UE is considered to pass the authentication, and the step S326 is continuously executed, otherwise, the UE fails the authentication, and returns a message of failed authentication to the UE.
If the first authentication parameter (RES) in the IMS registration request message sent by the UE is configured as a nonce value, the S-CSCF may resolve the RES included in the nonce value and compare the resolved RES with the RES acquired from the HSS.
S327: the S-CSCF sends a Server-Assignment-Request (SAR) message to the HSS requesting to download user subscription data, such as Initial Filter Criteria (iFC) and the like, to the HSS.
S328: the HSS feeds back the subscription data of the user to the S-CSCF through a Server-Assignment-Answer (SAA) message.
S329: and after the S-CSCF successfully downloads the subscription data of the user, the S-CSCF returns a registration success message 200OK to the UE.
By this point, the UE has completed the registration procedure on the IMS network side. Therefore, when the UE initiates registration to the IMS network side, the UE can directly initiate a registration request carrying authentication information to the IMS network side by using the first authentication parameter determined in the process of requesting to attach the EPC network side. Correspondingly, the IMS network side may also verify the first authentication parameter by using the second authentication parameter acquired from the EPC network side, and determine whether the UE is successfully registered to the IMS network side. Based on the mode, the UE does not need to initiate a flow of requesting to acquire the authentication parameters to the IMS network side, and can complete registration only by performing a registration process with the IMS network side once, so that the problem that the UE fails in authentication on the UE by the IMS network due to the fact that the UE cannot acquire the authentication parameters from the IMS network can be effectively avoided, and the success rate of VoLTE IMS registration is effectively improved.
In addition, if the existing flow is adopted, after the UE is successfully attached to the EPC network, it often occurs that a lawless person forges a signaling for initiating a registration request by using an open source software such as Session Initiation Protocol (SIP) installed in the terminal device, and forces the terminal device to initiate a first registration flow, that is, requests an authentication parameter to the IMS network side, and performs registration and authentication of the IMS network by using the authentication parameter returned by the IMS network side, to initiate a fraudulent call in the IMS domain, thereby causing a loss to the user. In the application, when the UE initiates registration to the IMS network side, the RES calculated by the UE in the EPC authentication process must be used, where the RES is calculated by hardware of the terminal device and cannot be obtained by using the SIP origination software, so that even if the SIP origination software forges a signaling for initiating a registration request, the SIP origination software cannot acquire a correct authentication parameter for initiating registration to the IMS network, and cannot complete registration to the IMS network side, thereby fundamentally eliminating the possibility of initiating a fraudulent call by using the SIP origination software, and ensuring security of a service.
Based on the same application concept, the embodiment of the present application further provides a device for implementing VoLTE IMS registration corresponding to the method for implementing VoLTE IMS registration, and as the principle of the device for solving the problem is similar to the method for implementing VoLTE IMS registration in the embodiment of the present application, the implementation of the device may refer to the implementation of the method, and repeated details are not repeated.
Example four
As shown in fig. 4, a schematic structural diagram of an apparatus for implementing VoLTE IMS registration according to a fourth embodiment of the present application includes:
a determining module 41, configured to determine, in a process of requesting to attach to an EPC network side, a first authentication parameter for initiating authentication to an IP multimedia subsystem IMS network side;
a sending module 42, configured to send a registration request message carrying the first authentication parameter to the IMS network side after the successful attachment to the EPC network;
the receiving module 43 is configured to receive a registration success message sent by the IMS network side, where the registration success message is sent to the UE after the IMS network side determines that the first authentication parameter is consistent with the second authentication parameter obtained from the EPC network side.
Optionally, the determining module 41 is specifically configured to:
after an attach request message is sent to an EPC network side, an authentication request which is sent by the EPC network side and carries a quadruplet authentication vector is received; and the number of the first and second electrodes,
calculating response number according to the quadruple authentication vector;
and determining the response number as a first authentication parameter for initiating authentication to the IMS network side.
EXAMPLE five
As shown in fig. 5, a schematic structural diagram of an apparatus for implementing VoLTE IMS registration according to a fifth embodiment of the present application includes:
a receiving module 51, configured to receive a registration request message sent after a user equipment UE successfully attaches to an EPC network of a 4G core network, where the registration request message carries a first authentication parameter for initiating authentication to an IMS network side, where the first authentication parameter is determined in a process of requesting the UE to attach to the EPC network;
an obtaining module 52, configured to obtain a second authentication parameter for verifying the first authentication parameter from the EPC network side of the 4G core network;
the processing module 53 is configured to determine whether the first authentication parameter is consistent with the second authentication parameter; if the registration information is consistent with the registration information, a registration success message is sent to the UE; otherwise, sending a registration failure message to the UE.
Optionally, the obtaining module 52 is specifically configured to:
sending a Multimedia Authentication Request (MAR) message to an EPC network side, wherein the MAR message is used for requesting to acquire authentication information used for verifying the first authentication parameter;
and receiving a multimedia authentication response (MAA) message which is sent by the EPC network side and carries the second authentication parameters.
Optionally, the second authentication parameter acquired by the acquiring module 52 from the EPC network side is a response number received and stored by the EPC network side from the UE side in a process that the UE requests to attach to the EPC network side.
As will be appreciated by one skilled in the art, embodiments of the present invention may be provided as a method, system, or computer program product. Accordingly, the present invention may take the form of an entirely hardware embodiment, an entirely software embodiment or an embodiment combining software and hardware aspects. Furthermore, the present invention may take the form of a computer program product embodied on one or more computer-usable storage media (including, but not limited to, disk storage, CD-ROM, optical storage, and the like) having computer-usable program code embodied therein.
The present invention is described with reference to flowchart illustrations and/or block diagrams of methods, apparatus (systems), and computer program products according to embodiments of the invention. It will be understood that each flow and/or block of the flow diagrams and/or block diagrams, and combinations of flows and/or blocks in the flow diagrams and/or block diagrams, can be implemented by computer program instructions. These computer program instructions may be provided to a processor of a general purpose computer, special purpose computer, embedded processor, or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, create means for implementing the functions specified in the flowchart flow or flows and/or block diagram block or blocks.
These computer program instructions may also be stored in a computer-readable memory that can direct a computer or other programmable data processing apparatus to function in a particular manner, such that the instructions stored in the computer-readable memory produce an article of manufacture including instruction means which implement the function specified in the flowchart flow or flows and/or block diagram block or blocks.
These computer program instructions may also be loaded onto a computer or other programmable data processing apparatus to cause a series of operational steps to be performed on the computer or other programmable apparatus to produce a computer implemented process such that the instructions which execute on the computer or other programmable apparatus provide steps for implementing the functions specified in the flowchart flow or flows and/or block diagram block or blocks.
While preferred embodiments of the present invention have been described, additional variations and modifications in those embodiments may occur to those skilled in the art once they learn of the basic inventive concepts. Therefore, it is intended that the appended claims be interpreted as including preferred embodiments and all such alterations and modifications as fall within the scope of the invention.
It will be apparent to those skilled in the art that various changes and modifications may be made in the present invention without departing from the spirit and scope of the invention. Thus, if such modifications and variations of the present invention fall within the scope of the claims of the present invention and their equivalents, the present invention is also intended to include such modifications and variations.

Claims (10)

1. A method for implementing VoLTE IMS registration, the method comprising:
the method comprises the steps that in the process of requesting to attach to an EPC network side, User Equipment (UE) determines a first authentication parameter for initiating authentication to an IP Multimedia Subsystem (IMS) network side;
after the IMS network is successfully attached to the EPC network, sending a registration request message carrying the first authentication parameter to an IMS network side;
and receiving a registration success message sent by the IMS network side, wherein the registration success message is sent to the UE by the IMS network side after the first authentication parameter is determined to be consistent with the second authentication parameter obtained from the EPC network side.
2. The method of claim 1, wherein the determining a first authentication parameter for initiating authentication to an IMS network side comprises:
after sending an attach request message to the EPC network side, receiving an authentication request carrying a quadruplet authentication vector sent by the EPC network side; and the number of the first and second electrodes,
calculating a response number according to the quadruple authentication vector;
and determining the response number as a first authentication parameter for initiating authentication to the IMS network side.
3. A method for implementing VoLTE IMS registration, the method comprising:
an IP Multimedia Subsystem (IMS) network side receives a registration request message sent by User Equipment (UE) after the UE is successfully attached to a 4G core network (EPC), wherein the registration request message carries a first authentication parameter for initiating authentication to the IMS network side, and the first authentication parameter is determined in the process that the UE requests to attach to the EPC;
acquiring a second authentication parameter for verifying the first authentication parameter from the EPC network side of the 4G core network;
judging whether the first authentication parameter is consistent with the second authentication parameter;
if the registration information is consistent with the registration information, a registration success message is sent to the UE; otherwise, sending a registration failure message to the UE.
4. The method of claim 3, wherein the obtaining the second authentication parameter for verifying the first authentication parameter from the EPC network side comprises:
sending a Multimedia Authentication Request (MAR) message to an EPC network side, wherein the MAR message is used for requesting to acquire authentication information used for verifying the first authentication parameter;
and receiving a multimedia authentication response (MAA) message which is sent by the EPC network side and carries a second authentication parameter.
5. The method of claim 4, wherein the second authentication parameter obtained from the EPC network side is a response number received and saved by the EPC network side from the UE side in a process of the UE requesting to attach to the EPC network side.
6. An apparatus for implementing VoLTE IMS registration, the apparatus comprising:
the determining module is used for determining a first authentication parameter for initiating authentication to an IP Multimedia Subsystem (IMS) network side in the process of requesting to attach to the EPC network side;
a sending module, configured to send a registration request message carrying the first authentication parameter to an IMS network side after the first authentication parameter is successfully attached to the EPC network;
and the receiving module is used for receiving a registration success message sent by the IMS network side, wherein the registration success message is sent to the UE by the IMS network side after the first authentication parameter is determined to be consistent with the second authentication parameter acquired from the EPC network side.
7. The apparatus of claim 6, wherein the determination module is specifically configured to:
after sending an attach request message to the EPC network side, receiving an authentication request carrying a quadruplet authentication vector sent by the EPC network side; and the number of the first and second electrodes,
calculating a response number according to the quadruple authentication vector;
and determining the response number as a first authentication parameter for initiating authentication to the IMS network side.
8. An apparatus for implementing VoLTE IMS registration, the apparatus comprising:
a receiving module, configured to receive a registration request message sent by a user equipment UE after the UE successfully attaches to an EPC network in a 4G core network, where the registration request message carries a first authentication parameter for initiating authentication to an IMS network side, where the first authentication parameter is determined in a process of requesting the UE to attach to the EPC network;
the acquisition module is used for acquiring a second authentication parameter for verifying the first authentication parameter from the EPC network side of the 4G core network;
the processing module is used for judging whether the first authentication parameter is consistent with the second authentication parameter; if the registration information is consistent with the registration information, a registration success message is sent to the UE; otherwise, sending a registration failure message to the UE.
9. The apparatus of claim 8, wherein the acquisition module is specifically configured to:
sending a Multimedia Authentication Request (MAR) message to an EPC network side, wherein the MAR message is used for requesting to acquire authentication information used for verifying the first authentication parameter;
and receiving a multimedia authentication response (MAA) message which is sent by the EPC network side and carries a second authentication parameter.
10. The apparatus of claim 9, wherein the second authentication parameter obtained by the obtaining module from an EPC network side is a response number received and saved by the EPC network side from the UE side in a process of the UE requesting to attach to the EPC network side.
CN201710198394.XA 2017-03-29 2017-03-29 Method and device for realizing VoLTE IMS registration Active CN108668274B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN201710198394.XA CN108668274B (en) 2017-03-29 2017-03-29 Method and device for realizing VoLTE IMS registration

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201710198394.XA CN108668274B (en) 2017-03-29 2017-03-29 Method and device for realizing VoLTE IMS registration

Publications (2)

Publication Number Publication Date
CN108668274A CN108668274A (en) 2018-10-16
CN108668274B true CN108668274B (en) 2021-04-02

Family

ID=63786329

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201710198394.XA Active CN108668274B (en) 2017-03-29 2017-03-29 Method and device for realizing VoLTE IMS registration

Country Status (1)

Country Link
CN (1) CN108668274B (en)

Families Citing this family (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN112953718B (en) * 2019-11-26 2024-05-28 中国移动通信集团安徽有限公司 Authentication method and device for IMS network user and call session control function entity
CN113038507B (en) * 2019-11-28 2023-05-19 华为技术有限公司 IMS registration duration management system and terminal equipment

Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101106457A (en) * 2006-07-10 2008-01-16 华为技术有限公司 Method for identifying authentication mode of user terminal in IP multimedia subsystem network
WO2016167553A1 (en) * 2015-04-02 2016-10-20 Samsung Electronics Co., Ltd. Method for performing multiple authentications within service registration procedure
CN106341814A (en) * 2015-07-08 2017-01-18 中兴通讯股份有限公司 Voice service registration method and device

Family Cites Families (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
DE602006011282D1 (en) * 2005-07-05 2010-02-04 Huawei Tech Co Ltd AUTHENTICATION PROCEDURE FOR THE IP MULTIMEDIA SUBSYSTEM
US9032483B2 (en) * 2007-03-30 2015-05-12 Alcatel Lucent Authenticating a communication device and a user of the communication device in an IMS network
CN101478753B (en) * 2009-01-16 2010-12-08 中兴通讯股份有限公司 Security management method and system for IMS network access by WAPI terminal
EP3005766A4 (en) * 2013-05-31 2017-01-25 Mitel Mobility Inc. System and method for visiting subscriber server in ims core networks

Patent Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101106457A (en) * 2006-07-10 2008-01-16 华为技术有限公司 Method for identifying authentication mode of user terminal in IP multimedia subsystem network
WO2016167553A1 (en) * 2015-04-02 2016-10-20 Samsung Electronics Co., Ltd. Method for performing multiple authentications within service registration procedure
CN106341814A (en) * 2015-07-08 2017-01-18 中兴通讯股份有限公司 Voice service registration method and device

Also Published As

Publication number Publication date
CN108668274A (en) 2018-10-16

Similar Documents

Publication Publication Date Title
US20200178336A1 (en) Proxy call session control function failure recovering method, apparatus and system
EP2642723B1 (en) Apparatus and method for authenticating a user when accessing to multimedia services
GB2560134B (en) Method and apparatus for binding of a user-based public identity to a shared device in an internet protocol multimedia subsystem based communication system
EP2737678B1 (en) Methods and apparatus for supporting the implementation of ims service continuity
US20150181033A1 (en) Call-back to a ue that has made an emergency call via a visited ims network
US10694484B2 (en) Communication system for supporting inbound roamer user equipment
WO2017092229A1 (en) Multiservice-based ims registration method and ims registration system
US10033723B2 (en) Methods, devices, and computer readable storage devices for authenticating devices having non-SIM based clients
CN109962878B (en) Registration method and device of IMS (IP multimedia subsystem) user
EP3261375B1 (en) Access to local services by unauthenticated users
EP3210355A1 (en) Authentication of browser-based services via operator network
CN107070950B (en) Method, device and computer readable storage medium for IMS registration control
JP6734570B2 (en) Communications system
CN101997828B (en) Method, device and network for network re-registration of Internet protocol multimedia subsystem (IMS)
CN114667751A (en) Method for supporting authentication of user equipment
CN108668274B (en) Method and device for realizing VoLTE IMS registration
WO2017153858A1 (en) Systems and methods for using gba for services used by multiple functions on the same device
JP2018537015A5 (en)
WO2011029348A1 (en) Method and system for service access of user in access gateway control function entity
CN109982319B (en) User authentication method, device, system, node, server and storage medium
CN106792627B (en) Method and system for realizing multi-device communication
KR101088321B1 (en) Methods for provisioning mobile stations and wireless communications with mobile stations located within femtocells
CN103905405A (en) IMS user registration method and device and related equipment
EP2448212A1 (en) Communication method, apparatus and system for internet protocol (ip) multimedia subsystem (ims) centralized services
WO2016165672A1 (en) Voice service registration method and device

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
GR01 Patent grant
GR01 Patent grant