CN108738018B

CN108738018B - Method, terminal and system for processing authentication information

Info

Publication number: CN108738018B
Application number: CN201710272744.2A
Authority: CN
Inventors: 丁晓磊
Original assignee: ZTE Corp
Current assignee: ZTE Corp
Priority date: 2017-04-24
Filing date: 2017-04-24
Publication date: 2022-08-19
Anticipated expiration: 2037-04-24
Also published as: CN108738018A; WO2018196503A1

Abstract

The invention discloses a method for processing authentication information, when point-to-point protocol PPP dialing is carried out, a mobile terminal compares a second access point name APN and second user authentication information obtained during PPP dialing with a first APN and first user authentication information used during mobile network registration; when the first APN and the second APN are the same and the first user authentication information and the second user authentication information are different, the mobile terminal initiates a request for releasing a first Packet Data Network (PDN) connection to a mobile network; and after the mobile network releases the first PDN connection, the mobile terminal establishes a second PDN connection with the mobile network by using the second APN and the second user authentication information. The invention also discloses a mobile terminal and a system for processing the authentication information.

Description

Method, terminal and system for processing authentication information

Technical Field

The invention relates to a PPP dialing technology in the communication field, in particular to a method and a terminal for processing authentication information.

Background

Point-to-Point Protocol (PPP) dialing, also called network Up Networking (DUN), also called Remote Access Service (RAS) dialing in a Windows system is a method for establishing a PPP link between a Terminal device (TE) and a Mobile Terminal (MT) by using a PPP Protocol to realize dialing. The terminal device here may be a general personal computer, and may also be a device with an embedded Linux system built therein, such as a tablet computer, a home wireless router, and the like, and is usually connected to the internet and the like through a non-mobile technology. The mobile terminal may be a mobile phone. For PPP dialing, the terminal device needs to initiate actively, then the terminal device and the mobile terminal complete the related interaction action, and trigger the mobile terminal and the mobile network to complete the signaling interaction until the dialing is completed.

In the PPP dialing process, the mobile terminal in the mobile Network usually uses the existing Access Point Name (APN) and the user authentication parameter stored therein to complete the attach process, and establish a Packet Data Network (PDN) connection with the mobile Network. After the PDN connection is established, the mobile network actually allocates information such as a relevant resource, an Internet Protocol (IP) address, a Domain Name System (DNS) address, and the like to the mobile terminal. Then, after receiving PPP dialing request of terminal equipment, if finding that the APN designated by the dialing is the same as the APN used when the APN is attached (attach), the mobile terminal does not initiate the establishment of PDN connection again, but uses the existing PDN connection, namely the PDN connection established when the PDN connection is attached; if the APN of the two times is the same, but the user authentication parameters are different, the mobile terminal still uses the PDN connection established during the attachment, and the corresponding IP address and the DNS address are distributed to the terminal equipment to complete the dialing process.

In this case, the user authentication parameters sent by the terminal equipment to the mobile terminal during the dialing process are not used by the mobile terminal to establish the PDN connection. This may result in that the user authentication parameters set on the terminal device side may not be used, that is, incorrect user authentication parameters may be actually used.

For this problem, this may not be influenced in most networks, but in some networks of operators, due to strict checking of the user authentication parameters, the mobile terminal may be required to establish a PDN connection using the user authentication parameters, such as a user name, a password, and an authentication mode, corresponding to a current Subscriber Identity Module (SIM) card, so as to ensure that the user normally surfs the internet, otherwise, the network may not be accessed, and the like.

Disclosure of Invention

In view of this, embodiments of the present invention are intended to provide a method, a mobile terminal and a system for processing authentication information, which enable the mobile terminal to use correct user authentication parameters.

In order to achieve the above purpose, the technical solution of the embodiment of the present invention is realized as follows:

the embodiment of the invention provides an authentication information processing method, which comprises the following steps:

when PPP dialing is carried out, the mobile terminal compares a second access point name APN and second user authentication information which are obtained during PPP dialing with a first APN and first user authentication information which are used when a mobile network is registered;

when the first APN is determined to be the same as the second APN and the first user authentication information is determined to be different from the second user authentication information, the mobile terminal initiates a request for releasing the first PDN connection to a mobile network;

and after the mobile network releases the first PDN connection, the mobile terminal establishes a second PDN connection with the mobile network by using the second APN and the second user authentication information.

In the above technical solution, before the mobile terminal compares the second APN and the second user authentication information obtained during PPP dialing with the first APN and the first user authentication information used during mobile network registration, the method further includes:

the mobile terminal receives a PPP dialing request initiated by terminal equipment and carries out information interaction with the terminal equipment;

and the mobile terminal acquires the second APN and the second user authentication information transferred by the terminal equipment according to the information received in the information interaction process with the terminal equipment.

In the above technical solution, after the mobile terminal establishes a second PDN connection with the mobile network using the second APN and the second user authentication information, the method further includes:

the mobile terminal acquires the IP address configuration information of the second PDN connection from the mobile network;

and the mobile terminal constructs an IP control protocol IPCP response of PPP dialing according to the IP address configuration information of the second PDN connection, and sends the IP address configuration information of the second PDN connection to the terminal equipment through the IPCP response.

In the above technical solution, the method further includes:

when the first APN and the second APN are determined to be the same and the first user authentication information and the second user authentication information are the same, the mobile terminal keeps the first PDN connection established with a mobile network;

the mobile terminal acquires IP address configuration information of the first PDN connection from a mobile network;

and constructing IPCP response of PPP dialing according to the IP address configuration information of the first PDN connection, and sending the IP address configuration information of the first PDN connection to the terminal equipment by the mobile terminal through the IPCP response.

In the above technical solution, the method further includes:

when the first APN and the second APN are different, the mobile terminal uses the second APN and second user authentication information to establish a third PDN connection with a mobile network;

the mobile terminal acquires IP address configuration information of the third PDN connection from a mobile network;

and constructing an IPCP response of PPP dialing according to the IP address configuration information of the third PDN connection, and sending the IP address configuration information of the third PDN connection to terminal equipment through the IPCP response.

The embodiment of the invention also provides a mobile terminal for processing the authentication information, which comprises: the device comprises a judging module, a determining module and a connecting module; wherein,

the judging module is used for comparing the second APN and the second user authentication information acquired during PPP dialing with the first APN and the first user authentication information used during mobile network registration when the PPP dialing is carried out;

the determining module is configured to initiate a request for releasing a first PDN connection to a mobile network when it is determined that the first APN and the second APN are the same and the first user authentication information and the second user authentication information are different;

and the connection module is used for establishing a second PDN connection with the mobile network by using the second APN and the second user authentication information after the mobile network releases the first PDN connection.

In the above technical solution, the mobile terminal further includes: a communication module and an acquisition module; wherein,

the communication module is used for receiving a PPP dialing request initiated by the terminal equipment and carrying out information interaction with the terminal equipment;

the acquisition module is used for acquiring the second APN and the second user authentication information transferred by the terminal equipment according to the information received in the information interaction process with the terminal equipment.

In the above technical solution, the obtaining module is further configured to: acquiring IP address configuration information of the second PDN connection from a mobile network;

and the communication module is further configured to construct an IP control protocol IPCP response of PPP dialing according to the IP address configuration information of the second PDN connection, and send the IP address configuration information of the second PDN connection to the terminal device through the IPCP response.

In the above technical solution, the determining module is further configured to:

when the first APN and the second APN are determined to be the same and the first user authentication information and the second user authentication information are the same, maintaining the first PDN connection established with a mobile network;

the obtaining module is further configured to obtain IP address configuration information of the first PDN connection from a mobile network;

and the communication module is further configured to construct an IPCP response of PPP dialing according to the IP address configuration information of the first PDN connection, and send the IP address configuration information of the first PDN connection to the terminal device through the IPCP response.

In the above technical solution, the determining module is further configured to: determining that the first APN and the second APN are different;

the connection module is further configured to establish a third PDN connection with the mobile network using the second APN and the second user authentication information;

the obtaining module is further configured to obtain IP address configuration information of the third PDN connection from a mobile network;

and the communication module is further configured to construct an IPCP response of PPP dialing according to the IP address configuration information of the third PDN connection, and send the IP address configuration information of the third PDN connection to the terminal device through the IPCP response.

The embodiment of the invention also provides a system for processing the authentication information, which comprises: a terminal device, a mobile terminal and a mobile network; wherein,

the terminal equipment is used for initiating a PPP dialing request to the mobile terminal; sending the second APN and the second user authentication information during PPP dialing to the mobile terminal; requesting IP address configuration information from the mobile terminal;

the mobile terminal is used for comparing a second APN and second user authentication information acquired during PPP dialing with a first APN and first user authentication information used during network registration when the mobile terminal is used for PPP dialing; when the first APN is determined to be the same as the second APN and the first user authentication information is determined to be different from the second user authentication information, initiating a request for releasing a first PDN connection to a mobile network; after the mobile network releases the first PDN connection, a second PDN connection is established with the mobile network by using the second APN and the second user authentication information;

the mobile network is used for receiving a first PDN connection releasing request initiated by a mobile terminal; releasing the first PDN connection established with the mobile terminal according to the first PDN connection request; and establishing a second PDN connection with the mobile terminal by using the second APN and the second user authentication information.

In the above technical solution, the mobile terminal is further configured to: acquiring IP address configuration information of the second PDN connection from a mobile network; and constructing an IP control protocol IPCP response of PPP dialing according to the IP address configuration information of the second PDN connection, and sending the IP address configuration information of the second PDN connection to the terminal equipment through the IPCP response.

And the mobile network is further configured to send the IP address configuration information of the second PDN connection to the mobile terminal.

An embodiment of the present invention further provides a mobile terminal, including:

a communication interface for communicating with other devices;

a storage medium for storing a computer program;

a processor, connected to the communication interface and the storage medium, respectively, for executing at least the following steps by the computer program:

when PPP dialing is carried out, comparing second APN and second user authentication information obtained during PPP dialing with first APN and first user authentication information used when a mobile network is registered;

when the first APN is determined to be the same as the second APN and the first user authentication information is determined to be different from the second user authentication information, initiating a request for releasing a first PDN connection to a mobile network;

and after the mobile network releases the first PDN connection, establishing a second PDN connection with the mobile network by using the second APN and the second user authentication information.

An embodiment of the present invention further provides a computer storage medium, where the computer storage mechanism stores a computer program, and the computer program is used for a processor to execute any one of the following methods:

Receiving a PPP dialing request initiated by terminal equipment, and carrying out information interaction with the terminal equipment;

and acquiring a second APN and second user authentication information transmitted by the terminal equipment according to information received in the information interaction process with the terminal equipment.

Acquiring IP address configuration information of the second PDN connection from a mobile network;

and constructing an IP control protocol IPCP response of PPP dialing according to the IP address configuration information of the second PDN connection, and sending the IP address configuration information of the second PDN connection to the terminal equipment through the IPCP response.

acquiring IP address configuration information of the first PDN connection from a mobile network;

and constructing IPCP response of PPP dialing according to the IP address configuration information of the first PDN connection, and sending the IP address configuration information of the first PDN connection to terminal equipment through the IPCP response.

When the first APN and the second APN are different, establishing a third PDN connection with a mobile network by using the second APN and second user authentication information;

acquiring IP address configuration information of the third PDN connection from a mobile network;

In the method, the mobile terminal and the system for processing authentication information provided in the embodiments of the present invention, when performing PPP dialing, if the mobile terminal determines that the second APN obtained during PPP dialing is the same as the first APN during mobile network registration, the mobile terminal still establishes a first PDN connection with the mobile network, but when the second user authentication information is different from the first user authentication information, and the first PDN established between the mobile terminal and the mobile network uses wrong user authentication information, which may cause a problem of failing to access the network, therefore, the mobile terminal requests to release the first PDN connection, and re-uses correct user authentication information to establish a PDN connection, that is, the mobile terminal establishes a second PDN connection with the mobile network using the second APN and the second user authentication information, and establishes a PDN connection using correct user authentication information such as a username, a password, an authentication method, and the like, even if the checking of the user authentication parameters is strict, the normal internet access of the user can be ensured, and the accuracy and the success rate of PPP dialing are improved.

Drawings

Fig. 1 is a schematic diagram of an interaction process among a terminal device, a mobile terminal and a mobile network in a PPP dialing process in a 2G/3G network;

fig. 2 is a schematic diagram of an interaction process among a terminal device, a mobile terminal and a mobile network in a PPP dialing process in a 4G network;

FIG. 3 is a schematic diagram of a basic flow chart of an authentication information processing method according to an embodiment of the present invention;

FIG. 4 is a flowchart illustrating a specific implementation of the authentication information processing method according to the embodiment of the present invention;

fig. 5 is a schematic diagram illustrating an interaction process among a terminal device, a mobile terminal, and a mobile network in a PPP dialing process according to an embodiment of the present invention;

FIG. 6 is a schematic diagram of a mobile terminal assembly structure for processing authentication information according to an embodiment of the present invention;

FIG. 7 is a schematic diagram of the structure of an authentication information processing system according to an embodiment of the present invention;

fig. 8 is a schematic structural diagram of a mobile terminal according to an embodiment of the present invention.

Detailed Description

In the embodiment of the invention, when point-to-point PPP dialing is carried out, a mobile terminal firstly judges whether a second APN and second user authentication information acquired during PPP dialing are the same as a first APN and first user authentication information used during mobile network registration; if the first APN is the same as the second APN but the first user authentication information is different from the second user authentication information, the mobile terminal initiates a request for releasing the current first PDN connection to a mobile network to request for releasing the current PDN connection; and after the mobile network releases the first PDN connection, the mobile terminal uses the second APN and the second user authentication information to reestablish the PDN connection, namely to establish a second PDN connection.

It should be noted that, during PPP dialing, the main purpose of signaling interaction between the mobile terminal and the mobile network is to establish a logical path for data transmission and activate an interconnection protocol between the mobile networks, so as to ensure that data can be transmitted to the gateway node of the mobile network in the form of an IP packet. The activation of Packet Data Protocol (PDP) context is embodied in The second Generation communication technology and The third Generation communication technology (The 2nd Generation communication system/The 3rd Generation communication system, 2G/3G), and The establishment of PDN connection is embodied in The fourth Generation communication technology (The 4th Generation communication system, 4G).

The process of activating PDP context and establishing PDN connection is that the mobile terminal sends a series of relevant parameters to the mobile network, then the mobile network completes the registration of user information and the distribution of relevant resources, and sends the information such as IP address, DNS address and the like distributed by the network to the mobile terminal through signaling response. After the signaling interaction, the mobile terminal and the mobile network have a logical channel, which is an active PDP context under 2G/3G and a PDN connection under 4G. In the process of establishing the PDN connection, parameters sent to a mobile network by the mobile terminal comprise APN and user authentication information. Fig. 1 and fig. 2 respectively show the interaction process among the mobile terminal, the terminal device and the mobile network in the PPP dialing process under the 2G/3G and 4G networks.

So that the manner in which the features and advantages of the invention can be understood in detail, a more particular description of the invention, briefly summarized above, may be had by reference to embodiments, some of which are illustrated in the appended drawings.

In the embodiment of the present invention, a basic flow of the authentication information processing method is shown in fig. 3, and includes the following steps:

s301, when point-to-point protocol PPP dialing is carried out, the mobile terminal compares a second access point name APN and second user authentication information which are obtained during PPP dialing with a first APN and first user authentication information which are used during mobile network registration;

s302, when determining that the first APN is the same as the second APN and the first user authentication information is different from the second user authentication information, the mobile terminal initiates a request for releasing a first Packet Data Network (PDN) connection to a mobile network;

s303, after the mobile network releases the first PDN connection, the mobile terminal uses the second APN and the second user authentication information to establish a second PDN connection with the mobile network.

The basic flow of the above authentication information processing method will be described in detail below.

Before the step S301, the mobile terminal receives a PPP dialing request initiated by a terminal device, and performs information interaction with the terminal device; and the mobile terminal acquires the second APN and the second user authentication information transferred by the terminal equipment according to the information received in the information interaction process with the terminal equipment. The terminal device may be a general personal computer, or may be a device with an embedded Linux system, such as a tablet computer, a home wireless router, or the like. The mobile terminal may be a mobile phone. For convenience of explanation, a Personal Computer (PC) may be used to represent the terminal device.

The terminal device PC initiates a PPP dialing request to the mobile terminal, and the PC can set the APN for PPP dialing into the mobile terminal through a modem command language AT command, for example, the PC can use a standard AT command "+ CGDCONT" specified in the communication protocol 3GPP TS 27.007 to complete this operation. When the PC issues the AT command to set the APN, in addition to specifying the APN in the parameters, a Content Identification (CID) parameter needs to be given, where the CID parameter is a positive integer and is used to indicate to which file in the mobile terminal the APN issued is to be stored, that is, to indicate the index number of the file. And then, after receiving a PPP dialing request initiated by the PC, the mobile terminal reads the APN from the corresponding file according to the CID for the PPP dialing process.

The PC may also set user authentication information to a file (profile) in the mobile terminal by means of an AT command or the like, and also may need to specify an index number of the file by a CID parameter.

It should be noted that although the PC may set the user authentication information to a file in the mobile terminal by means of an AT command or the like, this is not a necessary operation before PPP dialing, and if the PC does not perform this operation, the user authentication parameter in the mobile terminal may be some indeterminate value. In the PPP dialing process, the PC sends the user authentication information set or input on the PC by the user to the mobile terminal through the PPP authentication protocol, and the mobile terminal should use the set of user authentication parameters to complete the dialing process, wherein the user authentication parameters comprise the user name, the password, the authentication mode and the like of the current user, namely the user authentication information.

The mobile terminal receives a PPP dialing request initiated by a terminal device, and the process of performing information interaction with the terminal device may include the following steps:

(1) the PC sends an AT command ATD 99# to the mobile terminal, which returns a connection response (CONNECT). Where "# 99" is a dial string, and may be in the form of "# 99 × N #", where N is a positive integer for specifying a CID used for PPP dialing, and if the dial string is "# 99", the CID takes a default value of 1. As described above, according to the CID, the mobile terminal can read information such as APN in the corresponding file stored therein.

(2) PPP link configuration: the PC and the mobile terminal complete PPP link configuration through PPP link configuration Request (PPP LCP Config Request) and PPP link configuration confirmation (PPP LCP Config Ack) signaling interaction.

(3) PPP authentication: the PC sends the user authentication parameters input by the user during dialing or configured in advance to the mobile terminal through a PPP authentication Request (PPP Auth Request), and the mobile terminal returns a PPP authentication acknowledgement (PPP Auth Ack) response after receiving the PPP authentication Request. This user authentication parameter is the user authentication information to be used for dialing, i.e. the second user authentication information.

S301, when point-to-point protocol PPP dialing is carried out, the mobile terminal compares a second APN and second user authentication information which are obtained during PPP dialing with a first APN and first user authentication information which are used during mobile network registration;

and the mobile terminal receives a PPP dial IP control protocol Request (PPP IPCP Request) initiated by the PC, and acquires a second APN and second user authentication information transmitted by the PC. The second APN can be set in the mobile terminal through an AT command by a PC, and the mobile terminal can read APN information in a corresponding file stored in the mobile terminal; the second user authentication information may be sent to the mobile terminal by the PC through a PPP authentication request.

S302, when the first APN and the second APN are the same and the first user authentication information and the second user authentication information are different, the mobile terminal initiates a request for releasing a first Packet Data Network (PDN) connection to a mobile network;

and after the mobile terminal acquires the second APN and the second user authentication information, comparing the second APN and the second user authentication information with the first APN and the first user authentication information used by the mobile terminal for registering the mobile network. And after the mobile terminal is started, an attachment request is initiated to the mobile network by using the first APN and the first user authentication information, and a first PDN connection is established with the mobile network.

When the mobile terminal judges that the first APN is the same as the second APN and the first user authentication information is different from the second user authentication information, the mobile terminal initiates a request for releasing the current first PDN connection to a mobile network; this means that, when the mobile terminal establishes a PDN connection during the attach procedure to the mobile network, although the APN for PPP dialing is used, since the user authentication information used is different from the user authentication information to be used during PPP dialing, there may be a problem in accessing the internet based on the PDN connection at this time. Therefore, the mobile terminal initiates a detach request (detach request) to the mobile network, requesting to release the current first PDN connection.

S303, after the mobile network releases the first PDN connection, the mobile terminal uses the second APN and the second user authentication information to establish a second PDN connection with the mobile network;

after receiving a detach accept response sent by the mobile network, the mobile terminal re-initiates an attach request (attach request) to the mobile network, and establishes a second PDN connection using a second APN and second user authentication information acquired during PPP dialing. At this time, the mobile terminal establishes a PDN connection (PDN connection setup) with the mobile network using the correct APN and user authentication information.

After the mobile terminal establishes a second PDN connection by using the second APN and second user authentication information, the mobile network sends an attach accept response (attach accept) to the mobile terminal, and the mobile terminal acquires IP address configuration information of the second PDN connection from the attach accept response; and constructing an IP control protocol IPCP response of PPP dialing according to the IP address configuration information of the second PDN connection, and sending the IP address configuration information of the second PDN connection to the terminal equipment by the mobile terminal through the IPCP response. The IP address configuration information includes an IP address, a DNS address, and the like.

Further, when it is determined that the first APN and the second APN are the same and the first user authentication information and the second user authentication information are the same, that is, at this time, the mobile terminal establishes a PDN connection with the mobile network using the correct APN and the user authentication information, and the mobile terminal maintains the first PDN connection established with the mobile network; then, the mobile terminal directly obtains the IP address configuration information of the first PDN connection from a mobile network; and constructing IPCP response of PPP dialing according to the IP address configuration information of the first PDN connection, and sending the IP address configuration information of the first PDN connection to the terminal equipment by the mobile terminal through the IPCP response.

Optionally, when it is determined that the first APN and the second APN are different, that is, the mobile terminal establishes a PDN connection with the mobile network using the APN that is wrong at this time, no matter whether the user authentication information is the same or not, the mobile terminal makes a mistake when using the APN at this time to surf the internet, so that the mobile terminal establishes a third PDN connection with the mobile network using the second APN and the second user authentication information; after the third PDN connection is established, the mobile terminal acquires IP address configuration information of the third PDN connection from a mobile network; then, the mobile terminal constructs an IPCP response of PPP dialing according to the IP address configuration information of the third PDN connection, and sends the IP address configuration information of the third PDN connection to the terminal equipment through the IPCP response.

After the PC receives the IP address configuration information sent by the mobile terminal, the PC completes the address configuration and the PPP dialing.

The specific implementation flow of the authentication information processing method of the embodiment of the invention is shown in fig. 4, and comprises the following steps:

s401: the mobile terminal is started to register a network, a first PDN connection PDN1 is established, and APN and user authentication information are recorded as APN1 and auth _ info1 respectively;

after the mobile terminal is powered on, the mobile terminal will automatically register the network, and the mobile terminal will complete the attachment process when registering the mobile network. In the attach process of the mobile terminal in the 4G network, the PDN connection needs to be established using the APN and the user authentication parameters, which is different from 2G/3G. In the 2G/3G network, the mobile terminal does not need to use the information when registering the network, but needs to activate the PDP context with the network only when the PPP is dialed, and then sends the information such as the APN and the user authentication parameter to the network.

Because the registration network is a spontaneous behavior of the mobile terminal, in the 4G network, the mobile terminal usually uses the existing APN and the user authentication parameter stored inside to initiate an attach request to the mobile network, and after receiving the attach request, the mobile network establishes a PDN connection with the mobile terminal. After the PDN connection is established, the mobile network actually allocates information such as relevant resources, an IP address, a DNS address, and the like to the mobile terminal, that is, IP address configuration information, and sends an attach accept response to the mobile terminal. At this time, the established PDN connection may be referred to as a first PDN connection, and may be denoted as PDN1, the used user authentication parameters are user authentication information, the APN and the user authentication information may be denoted as APN1 and auth _ info1, respectively, and the IP address configuration information allocated by the mobile network may be denoted as IP _ info 1.

S402: the mobile terminal acquires the APN transferred by the PC and records as APN 2;

the PPP dialing is started, the mobile terminal receives an ATD command sent by the PC, which can be ATD 99#, the mobile terminal analyzes the CID according to the dialing character string in the command, reads the corresponding APN stored in the mobile terminal according to the CID, which can be recorded as APN2, the APN is the APN to be used during the PPP dialing, and then the mobile terminal returns a connection response.

S403: the mobile terminal receives user authentication information sent by a PC, and the user authentication information is recorded as auth _ info 2;

the mobile terminal receives a PPP authentication request sent by the PC, which carries user authentication information, and obtains user authentication information for PPP dialing, which includes a user name, a password, an authentication mode, and other information, and may be recorded as auth _ info2, which is user authentication information to be used when PPP dialing.

S404: the mobile terminal judges whether the current registered network is a 4G network;

if the currently registered network is a 4G network, S405 is executed;

otherwise, S411 is performed.

S405: the mobile terminal determines apn1 and apn2 to be the same;

if the APN at registration is the same as the APN obtained at PPP dialing, that is, APN1 is APN2, then S406 is executed;

if the APN at the time of registration is different from the APN acquired at the time of PPP dialing, that is, APN1 ≠ APN2, then S413 is executed.

S406: the mobile terminal determines whether auth _ info1 is the same as auth _ info 2;

if the user authentication information during registration is different from the user authentication information acquired during PPP dialing, that is, auth _ info1 ≠ auth _ info2, then S407 is executed;

if the user authentication information at the time of registration is the same as the user authentication information acquired at the time of PPP dialing, that is, auth _ info1 is equal to auth _ info2, S410 is performed.

In the above steps S405 and S406, it is determined whether apn1 is the same as apn2, and auth _ info1 is the same as auth _ info2, respectively, for the purpose of determining whether such a situation occurs: when the mobile terminal establishes PDN connection in the attaching process, the used APN (APN1) is the APN (APN2) used in PPP dialing, namely APN1 is APN2, and the user authentication information (auth _ info1) used in the attaching process is different from the user authentication information (auth _ info2) used in PPP dialing. If this happens, a problem may arise with accessing the network using the PDN connection established at the time of attachment (i.e., PDN1), and therefore the mobile terminal is required to release this PDN connection and reestablish the PDN using the same APN and user authentication information as the PPP dial (auth info 2). In the implementation process of this embodiment, steps S405 and S406 have no specific precedence requirement.

S407: the mobile terminal initiates an attachment release request;

the mobile terminal initiates an attach release request to the mobile network, i.e. requests to release the current PDN connection.

S408: the mobile terminal reestablishes PDN connection, which is recorded as PDN 3;

the mobile terminal re-initiates the attach procedure to the mobile network using apn2 and auth _ info2, re-establishing the PDN connection, denoted PDN 3.

S409: the mobile terminal constructs an IPCP Ack by using the IP address configuration information of the pdn 3;

the mobile terminal constructs an IPCP Ack by using the IP address and DNS address of the pdn3, that is, fills the IP address and DNS address of the pdn3 into corresponding fields in the IPCP Ack, and then executes step S415;

s410: the mobile terminal constructs an IPCP Ack by using the IP address configuration information of the pdn 1;

the mobile terminal constructs an IPCP Ack by using the IP address and DNS address of the pdn1, that is, fills the IP address and DNS address of the pdn1 into corresponding fields in the IPCP Ack, and then performs step S415;

s411: the mobile terminal activates a PDP context, designated PDP1, using apn2 and auth _ info 2;

s412: the mobile terminal constructs an IPCP Ack by using the IP address configuration information of pdp 1;

the mobile terminal constructs an IPCP Ack by using the IP address and DNS address of pdp1, that is, fills the IP address and DNS address of pdp1 in the corresponding fields of the IPCP Ack, and then executes step S415;

s413: newly establishing PDN connection by the mobile terminal, and marking as PDN 2;

the mobile terminal uses apn2 and auth _ info2 to establish a newly established PDN connection, denoted PDN 2.

S414: the mobile terminal constructs an IPCP Ack by using the IP address configuration information of the pdn 2;

the mobile terminal constructs an IPCP Ack by using the IP address and DNS address of the pdn2, that is, the IP address and DNS address of the pdn2 are filled in the corresponding fields of the IPCP Ack.

S415: and the mobile terminal sends the constructed IPCP Ack response to the PC.

S416: PPP dialing is finished;

the PC resolves the received IPCP Ack to obtain an IP address and a DNS address, completes configuration and completes PPP dialing.

A flow chart of an interaction process of PPP dialing according to an embodiment of the present invention is shown in fig. 5, and a detailed description is given below of the PPP dialing interaction process according to an embodiment of the present invention.

S501: starting up and registering;

after the mobile terminal is started, an attachment request is initiated to a mobile network by using built-in existing user authentication information and APN information, and PDN connection is established with the mobile terminal. After the PDN connection is established, the mobile network actually allocates information such as a relevant resource, an IP address, a DNS address, and the like to the mobile terminal, that is, IP address configuration information, which may be denoted as IP _ info1, and returns an attach accept response to the mobile terminal. The APN and user authentication information used at this time may be noted as APN1 and auth _ info1, respectively.

S502: starting dialing;

the mobile terminal receives the command ATD 99# or ATD 99N # issued by the PC, analyzes to obtain the CID designated by PPP dialing according to the dialing character string, reads the corresponding APN, namely the APN used for dialing, and records as APN2, and then the mobile terminal returns a connection response.

S503: PPP link configuration;

the PC and the mobile terminal complete PPP link configuration through PPP link configuration request and PPP link configuration confirmation signaling interaction.

S504: PPP authentication;

the PC sends the user authentication parameters input by the user during dialing or configured in advance to the mobile terminal through the PPP authentication request, and the mobile terminal returns a PPP authentication confirmation response after receiving the PPP authentication request. This user authentication parameter is the user authentication information to be used for dialing, i.e. the second user authentication information, and can be denoted as auth _ info 2.

S505: a request address;

PC initiates PPP dial IP control protocol request to mobile terminal, requests IP address configuration, mobile terminal judges whether such condition is satisfied: the APN used during power-on registration is the same as the APN specified by the PC through the PPP dial string, and the user authentication parameter used during registration is different from the user authentication parameter obtained in step S504, that is, APN1 ═ APN2 and auth _ info1 ≠ auth _ info 2.

S506: releasing the attachment;

if the condition in step S505 is satisfied, it means that, when the mobile terminal establishes a PDN connection with the mobile network, although the APN for PPP dialing is used, since the used user authentication information is different from the user authentication information used for PPP dialing, a problem may occur in accessing the network by using the PDN connection at this time, and therefore, the mobile terminal initiates an attach release request to the mobile network. After receiving the request for releasing the attachment, the mobile network releases the PDN connection established with the mobile terminal at present and returns a response for receiving the attachment release to the mobile terminal.

S507: re-attaching;

the mobile terminal uses the user authentication parameters and APN (access point name) which are issued by the PC during PPP dialing, namely auth _ info2 and anp2, to initiate an attachment request to the network, and then reestablish PDN connection with the mobile network; the mobile network allocates IP address configuration information (IP _ info2) to the mobile terminal and sends an attach accept response to the mobile network.

S508: responding to the address;

the mobile terminal re-attaches the acquired IP address configuration information such as the IP address, the DNS address and the like, determines a response through a PPP IP control protocol and transmits the response to the PC, and then the PC completes the address configuration and the PPP dialing.

The embodiment of the present invention further provides a mobile terminal for processing authentication information, where the structure of the mobile terminal is shown in fig. 6, and the mobile terminal includes: a judging module 601, a determining module 602 and a connecting module 603; wherein,

the judging module 601 is configured to compare the second APN and the second user authentication information obtained during PPP dialing with the first APN and the first user authentication information used when registering the mobile network when performing PPP dialing;

the determining module 602 is configured to initiate a request for releasing a first PDN connection to a mobile network when it is determined that the first APN and the second APN are the same and the first user authentication information and the second user authentication information are different;

the connection module 603 is configured to establish a second PDN connection with the mobile network using the second APN and the second user authentication information after the mobile network releases the first PDN connection.

Further, the mobile terminal further includes: a communication module 604 and an acquisition module 605;

the communication module 604 is configured to receive a PPP dialing request initiated by a terminal device, and perform information interaction with the terminal device;

the obtaining module 605 obtains the second APN and the second user authentication information transferred by the terminal device according to the information received in the information interaction process with the terminal device.

Further, the obtaining module 605 is further configured to obtain IP address configuration information of the second PDN connection from a mobile network;

the communication module 604 is further configured to construct an IP control protocol IPCP response of PPP dialing according to the IP address configuration information of the second PDN connection, and send the IP address configuration information of the second PDN connection to the terminal device through the IPCP response.

Further, the determining module 602 is further configured to, when it is determined that the first APN and the second APN are the same and the first user authentication information and the second user authentication information are the same, maintain the first PDN connection established with a mobile network;

the obtaining module 605 is further configured to obtain IP address configuration information of the first PDN connection from a mobile network;

the communication module 604 is further configured to construct an IPCP response of PPP dialing according to the IP address configuration information of the first PDN connection, and send the IP address configuration information of the first PDN connection to the terminal device through the IPCP response.

Optionally, the determining module 602 is further configured to determine that the first APN and the second APN are different;

the connection module 603 is further configured to establish a third PDN connection with the mobile network using the second APN and the second user authentication information;

the obtaining module 605 is further configured to obtain IP address configuration information of the third PDN connection from a mobile network;

the communication module 604 is further configured to construct an IPCP response of PPP dialing according to the IP address configuration information of the third PDN connection, and send the IP address configuration information of the third PDN connection to the terminal device through the IPCP response.

Specifically, when the mobile terminal is powered on, the mobile terminal automatically registers the mobile network. The connection module 603 uses the currently stored APN and user authentication parameters to complete the establishment of the PDN connection in the attach procedure. At this time, the established PDN connection may be referred to as a first PDN connection, and may be denoted as PDN1, the used user authentication parameters are user authentication information, and the APN and the user authentication information may be denoted as APN1 and auth _ info1, respectively.

When PPP dialing starts, the communication module 604 of the mobile terminal receives an ATD command issued by the PC, and the obtaining module 605 analyzes the CID according to the dialing character string therein, and reads the corresponding APN stored in the mobile terminal according to the CID, which may be recorded as APN2, and is the APN to be used during PPP dialing. Then, the communication module 604 receives the PPP authentication request sent by the PC, which carries the user authentication information, and the obtaining module 605 obtains the user authentication information for PPP dialing, which includes the user name, the password, and the authentication mode, and may be recorded as auth _ info2, which is the user authentication information to be used when PPP dialing.

The judging module 601 judges whether a second APN and second user authentication information acquired during PPP dialing are the same as a first APN and first user authentication information used during mobile network registration, and initiates a request for releasing a first PDN connection to the mobile network when the determining module 602 determines that the first APN and the second APN are the same and the first user authentication information and the second user authentication information are different; after the mobile network releases the first PDN connection, the connection module 603 establishes a second PDN connection using the second APN and the second user authentication information. The obtaining module 605 obtains the IP address configuration information of the second PDN connection from the mobile network, and the communication module 604 sends the IP address configuration information of the second PDN connection to the terminal device.

When the determining module 602 determines that the first APN and the second APN are the same and the first user authentication information and the second user authentication information are the same, the originally established first PDN connection is maintained, the obtaining module 605 obtains the IP address configuration information of the first PDN connection from the mobile network, and the communication module 604 sends the IP address configuration information of the first PDN connection to the terminal device.

When the determining module 602 determines that the first APN and the second APN are different, the connecting module 603 establishes a third PDN connection with the mobile network by using the second APN and the second user authentication information; the obtaining module 605 obtains the IP address configuration information of the third PDN connection from the mobile network, and the communication module 604 sends the IP address configuration information of the third PDN connection to the terminal device.

An embodiment of the present invention further provides a system for processing authentication information, where a structure of the system is shown in fig. 7, and the system includes: terminal equipment 701, a mobile terminal 702, and a mobile network 703; wherein,

the terminal device 701 is configured to initiate a PPP dialing request to the mobile terminal 702; sending the second APN and the second user authentication information during PPP dialing to the mobile terminal; requesting IP address configuration information from the mobile terminal 702;

the mobile terminal 702 is configured to compare, when performing PPP dialing, the second APN and the second user authentication information obtained during PPP dialing with the first APN and the first user authentication information used when registering a network; when determining that the first APN and the second APN are the same and the first user authentication information and the second user authentication information are different, initiating a request for releasing a first PDN connection to a mobile network 703; after the mobile network releases the first PDN connection, a second PDN connection is established with the mobile network by using the second APN and the second user authentication information;

the mobile network 703 is configured to receive a request for releasing the first PDN connection, where the request is initiated by the mobile terminal 702; releasing the first PDN connection established with the mobile terminal according to the first PDN connection request; a second PDN connection is established with mobile terminal 702 using the second APN and the second user authentication information.

Further, the mobile terminal 702 is further configured to acquire IP address configuration information of the second PDN connection from the mobile network 703; and constructing an IP control protocol IPCP response of PPP dialing according to the IP address configuration information of the second PDN connection, and sending the IP address configuration information of the second PDN connection to the terminal device 701 through the IPCP response.

The mobile network 703 is further configured to send the IP address configuration information of the second PDN connection to the mobile terminal 702.

Specifically, after the mobile terminal 702 is powered on, an attach request is initiated to the mobile network 703 by using a built-in existing first APN and first user authentication information, and a first PDN connection is established with the mobile network 703. The terminal device 701 initiates a PPP dialing request to the mobile terminal 702, and sends the second APN and the second user authentication information to the mobile terminal 702 in the process of information interaction with the mobile terminal 702. Further, the terminal apparatus 701 requests an IP address from the mobile terminal 702. After receiving the IP address request sent by the terminal device 701, the mobile terminal 702 obtains the second APN and the second user authentication information sent by the terminal device 701, compares the first APN and the first user authentication information with the second APN and the second user authentication information, and when the first APN and the second APN are the same and the first user authentication information is different from the second user authentication information, the mobile terminal 702 sends a request for releasing the first PDN connection to the mobile network 703, and the mobile network 703 accepts the request for releasing the first PDN connection and releases the first PDN connection with the mobile terminal 702. Then, the mobile terminal 702 establishes a second PDN connection with the mobile network 703 using the second APN and the second user authentication information. After the second PDN connection is established, the mobile terminal 702 requests an IP address from the mobile network 703, the mobile network 703 sends the IP address configuration of the second PDN to the mobile terminal 702, and the mobile terminal 702 sends the IP address configuration to the terminal device 701 through the IP address response information. The terminal device 701 obtains information such as an IP address and a DNS address, completes address configuration, and completes PPP dialing.

The embodiment of the present invention further provides a mobile terminal, and a composition structure of the system is shown in fig. 8, including: a communication interface 801, a storage medium 802, and a processor 803; wherein,

the communication interface 801 is used for communicating with other devices; the communication interface can be divided into a serial interface and a parallel interface, and the common communication interfaces are standard communication interfaces RS-232, RS-485, RS-422 and the like.

The storage medium 802 for storing a computer program; the storage medium may be classified into a random access Memory (ram) medium and a read-only Memory (rom) medium, and the storage medium may be a Compact Flash (CF) card, a Secure Digital Memory (SD) card, a Smart Media (SM) card, a Memory stick, or other application entity having a function of storing data.

The processor 803 is connected to the communication interface and the storage medium, respectively, and configured to perform at least the following steps by the computer program:

when PPP dialing is carried out, comparing the second APN and the second user authentication information which are obtained during the PPP dialing with the first APN and the first user authentication information which are used when a mobile network is registered;

when the first APN is determined to be the same as the second APN and the first user authentication information is determined to be different from the second user authentication information, initiating a request for releasing the current first PDN connection to a mobile network;

The processor 803 may further execute receiving a PPP dialing request initiated by a terminal device, and perform information interaction with the terminal device; acquiring a second APN and second user authentication information transmitted by the terminal equipment according to information received in the information interaction process with the terminal equipment; after establishing a second PDN connection with a mobile network by using the second APN and second user authentication information, acquiring IP address configuration information of the second PDN connection from the mobile network; and constructing an IP control protocol IPCP response of PPP dialing according to the IP address configuration information of the second PDN connection, and sending the IP address configuration information of the second PDN connection to the terminal equipment by the mobile terminal through the IPCP response.

Further, the processor 803 may further perform maintaining the first PDN connection established with the mobile network when it is determined that the first APN and the second APN are the same and the first user authentication information and the second user authentication information are the same; acquiring IP address configuration information of the first PDN connection from a mobile network; and constructing an IPCP response of PPP dialing according to the IP address configuration information of the first PDN connection, and sending the IP address configuration information of the first PDN connection to terminal equipment through the IPCP response. When the first APN and the second APN are determined to be different, establishing a third PDN connection with a mobile network by using the second APN and second user authentication information; acquiring IP address configuration information of the third PDN connection from a mobile network; and constructing an IPCP response of PPP dialing according to the IP address configuration information of the third PDN connection, and sending the IP address configuration information of the third PDN connection to terminal equipment through the IPCP response.

It should be noted that, the communication interface, the storage medium and the processor all have many application entities, which are only used for illustration and do not limit the protection scope of the present invention.

An embodiment of the present invention further provides a computer storage medium, where a computer program is stored in the computer storage mechanism, and the computer program is used for a processor to execute the following method:

when the first APN and the second APN are the same and the first user authentication information and the second user authentication information are different, initiating a request for releasing the current first PDN connection to a mobile network;

Before comparing the second APN and the second user authentication information acquired during PPP dialing with the first APN and the first user authentication information used during mobile network registration, receiving a PPP dialing request initiated by terminal equipment, and performing information interaction with the terminal equipment; acquiring a second APN and second user authentication information transmitted by the terminal equipment according to information received in the information interaction process with the terminal equipment;

after establishing a second PDN connection with a mobile network by using the second APN and second user authentication information, acquiring IP address configuration information of the second PDN connection from the mobile network; and constructing an IP control protocol IPCP response of PPP dialing according to the IP address configuration information of the second PDN connection, and sending the IP address configuration information of the second PDN connection to the terminal equipment by the mobile terminal through the IPCP response.

Further, when it is determined that the first APN is the same as the second APN and the first user authentication information is the same as the second user authentication information, maintaining the first PDN connection established with the mobile network; acquiring IP address configuration information of the first PDN connection from a mobile network; and constructing IPCP response of PPP dialing according to the IP address configuration information of the first PDN connection, and sending the IP address configuration information of the first PDN connection to terminal equipment through the IPCP response.

When the first APN and the second APN are determined to be different, establishing a third PDN connection with a mobile network by using the second APN and second user authentication information; acquiring IP address configuration information of the third PDN connection from a mobile network; and constructing an IPCP response of PPP dialing according to the IP address configuration information of the third PDN connection, and sending the IP address configuration information of the third PDN connection to terminal equipment through the IPCP response.

The determining module 601, the determining module 602, the connecting module 603 and the communication module 604 may be implemented by a Central Processing Unit (CPU), a microprocessor Unit (MPU), a Digital Signal Processor (DSP), a Field Programmable Gate Array (FPGA), etc. located in the mobile terminal.

The above description is only a preferred embodiment of the present invention, and is not intended to limit the scope of the present invention.

Claims

1. A method for processing authentication information, the method comprising:

when point-to-point protocol (PPP) dialing is carried out, the mobile terminal compares a second Access Point Name (APN) and second user authentication information acquired during PPP dialing with a first APN and first user authentication information used during mobile network registration;

when the first APN is determined to be the same as the second APN and the first user authentication information is determined to be different from the second user authentication information, the mobile terminal initiates a request for releasing a first Packet Data Network (PDN) connection to a mobile network;

2. The method of claim 1, wherein before the mobile terminal compares the second APN and the second user authentication information obtained during PPP dialing with the first APN and the first user authentication information used during registration with the mobile network, the method further comprises:

3. The method of claim 1, wherein after the mobile terminal establishes a second PDN connection with a mobile network using the second APN and second user authentication information, the method further comprises:

4. The method of claim 1, further comprising:

5. The method of claim 1, further comprising:

6. A mobile terminal for authenticating information processing, the mobile terminal comprising: the device comprises a judging module, a determining module and a connecting module; wherein,

the judging module is used for comparing a second access point name APN and second user authentication information acquired during PPP dialing with a first APN and first user authentication information used during mobile network registration when point-to-point protocol PPP dialing is carried out;

the determining module is configured to initiate a request for releasing a first packet data network PDN connection to a mobile network when it is determined that the first APN and the second APN are the same and the first user authentication information and the second user authentication information are different;

7. The mobile terminal of claim 6, further comprising: a communication module and an acquisition module; wherein,

8. The mobile terminal of claim 7, wherein the obtaining module is further configured to: acquiring IP address configuration information of the second PDN connection from a mobile network;

9. The mobile terminal of claim 7, wherein the determining module is further configured to:

when the first APN is determined to be the same as the second APN and the first user authentication information is determined to be the same as the second user authentication information, keeping the first PDN connection established with a mobile network;

10. The mobile terminal of claim 7, wherein the determining module is further configured to: determining that the first APN and the second APN are different;

11. A system for authenticating information processing, the system comprising: a terminal device, a mobile terminal and a mobile network; wherein,

the terminal equipment is used for initiating a point-to-point protocol PPP dialing request to the mobile terminal; sending the APN and the authentication information of the second user to the mobile terminal when the PPP dialing is carried out; requesting IP address configuration information from the mobile terminal;

the mobile terminal is used for comparing the second APN and the second user authentication information acquired during PPP dialing with the first APN and the first user authentication information used during network registration when the PPP dialing is carried out; when the first APN and the second APN are the same and the first user authentication information and the second user authentication information are different, initiating a request for releasing a first Packet Data Network (PDN) connection to a mobile network; after the mobile network releases the first PDN connection, establishing a second PDN connection with the mobile network by using the second APN and second user authentication information;

12. The system of claim 11, wherein the mobile terminal is further configured to: acquiring IP address configuration information of the second PDN connection from a mobile network; constructing an IP control protocol IPCP response of PPP dialing according to the IP address configuration information of the second PDN connection, and sending the IP address configuration information of the second PDN connection to terminal equipment through the IPCP response;

13. A mobile terminal, comprising:

a communication interface for communicating with other devices;

a storage medium for storing a computer program;

a processor, connected to the communication interface and the storage medium, respectively, and configured to perform at least the following steps by the computer program:

when point-to-point protocol PPP dialing is carried out, comparing a second access point name APN and second user authentication information which are obtained during the PPP dialing with a first APN and first user authentication information which are used during the mobile network registration;

when the first APN and the second APN are the same and the first user authentication information and the second user authentication information are different, initiating a request for releasing a first Packet Data Network (PDN) connection to a mobile network;

14. A computer storage medium, characterized in that it stores a computer program, which is operative to cause a processor to perform the method of any of claims 1 to 5.