CN109982277B

CN109982277B - Service authorization method, device and readable medium

Info

Publication number: CN109982277B
Application number: CN201711464198.9A
Authority: CN
Inventors: 谭朝丽; 来志远
Original assignee: China Mobile Communications Group Co Ltd; China Mobile Group Beijing Co Ltd
Current assignee: China Mobile Communications Group Co Ltd; China Mobile Group Beijing Co Ltd
Priority date: 2017-12-28
Filing date: 2017-12-28
Publication date: 2021-04-13
Anticipated expiration: 2037-12-28
Also published as: CN109982277A

Abstract

A service authorization method and device are used for realizing the enabling and control of a core network to third-party application. The method comprises the following steps: the MEC server receives a service request message sent by user equipment; the MEC server sends the service request message to the P-GW; the P-GW adds the mobile station integrated service digital network number of the user equipment in the service request message and then sends the service request message to an authentication charging platform; the authentication charging platform performs service authorization of the third party application on the MSISDN number according to the application identifier, and then obtains an access address of a server of the third party application by searching a first management list; the authentication charging platform sends a service authorization message to the P-GW; the P-GW sends the service authorization message to the MEC server; and the MEC server sends a service authorization message to the server of the third-party application, and the server of the third-party application sends a service response message to the user equipment to provide corresponding service for the user equipment.

Description

Service authorization method, device and readable medium

Technical Field

The present invention relates to the field of communications technologies, and in particular, to a method and an apparatus for service authorization.

Background

Mobile Edge Computing (MEC) is a technology that sinks data processing and data Computing to the network Edge side, and implements fast Computing of the network Edge side, thereby implementing fast service response of applications.

At present, when the MEC is used to process the related service of the third party application, the following scheme is generally adopted: and receiving a service request aiming at the third-party application sent by the user equipment by the MEC server, sending the service request to a server of the third-party application, and responding to the service request by the third-party application server. In the above scheme, since the service request is not reported to the core network, the core network cannot authenticate or charge the service request initiated by the user equipment, but the MEC server processes the service request in the above "full open" manner, so that the control capability of the core network on the related service applied by the third party is weakened, which is not beneficial to the core network to implement enabling and controlling the third party application.

Therefore, in the application of MEC, a service authorization scheme is urgently needed, so as to implement the enabling and controlling of the core network to the third party application.

Disclosure of Invention

The embodiment of the invention provides a service authorization method and a service authorization device, which are used for realizing the enabling and control of a core network on third-party application.

In a first aspect, an embodiment of the present invention provides a service authorization method, where the method includes:

the method comprises the steps that a packet data network gateway P-GW receives a service request message sent by a mobile edge computing MEC server, the service request message is used for indicating user equipment to request a server of a third party application to provide corresponding service, and the service request message comprises an access address of an authentication charging platform and an application identifier of the third party application.

The P-GW adds MSISDN number of the mobile station integrated service digital network of the user equipment in the service request message.

And the P-GW sends the service request message added with the MSISDN number to the authentication charging platform according to the access address of the authentication charging platform.

The P-GW receives a service authorization message sent by the authentication charging platform, wherein the service authorization message comprises a redirection address and enabling information, the redirection address comprises an access address of a server of a third party application and an MSISDN number of user equipment, and the enabling information is used for enabling the MEC server.

And the P-GW sends the service authorization message to the MEC server, so that the MEC server sends the service authorization message to the server of the third party application to indicate the server of the third party application to send a service response message to the user equipment, and provide corresponding service.

In a second aspect, an embodiment of the present invention provides a service authorization method, where the method includes:

the authentication charging platform receives a service request message sent by the P-GW, wherein the service request message is used for indicating the user equipment to request a server of the third party application to provide corresponding service, and the service request message comprises an access address of the authentication charging platform, an application identifier of the third party application and an MSISDN number of the user equipment.

And the authentication charging platform performs the service authorization of the third party application on the MSISDN number according to the application identifier.

And the authentication charging platform searches a first management list according to the application identifier, indexes the access address of the server of the third-party application, and the first management list is used for indicating the corresponding relation between the application identifier and the access address of the server of the third-party application.

And the authentication charging platform sends a service authorization message to the P-GW, wherein the service authorization message comprises a redirection address and enabling information, the redirection address comprises an access address of a server of the third party application and an MSISDN number of the user equipment, and the enabling information is used for enabling the MEC server.

Optionally, before the authenticating and charging platform performs service authorization of the third party application on the MSISDN number according to the application identifier, the method further includes: and the authentication charging platform receives the MSISDN number and the application identifier sent by the docking platform of the third-party application, and is used for indicating that the user equipment corresponding to the MSISDN number can obtain service authorization when using the third-party application corresponding to the application identifier.

Optionally, the method further comprises: and the authentication charging platform searches a second management list according to the application identifier, and indexes the second management list to obtain the charging principle of the third-party application, wherein the second management list is used for indicating the corresponding relation between the application identifier and the charging principle of the third-party application. And the authentication charging platform charges according to the charging principle.

Optionally, after the authentication charging platform performs charging according to the charging principle, the method further includes: and the authentication charging platform generates a charging data ticket. And the authentication charging platform sends a charging data bill to a Customer Relationship Management (CRM) entity or a Business Operation Support System (BOSS).

In a third aspect, an embodiment of the present invention provides a service authorization method, where the method includes:

the MEC server receives a service request message sent by the user equipment, wherein the service request message is used for indicating the user equipment to request a server of the third party application to provide corresponding service, and the service request message comprises an access address of the authentication charging platform and an application identifier of the third party application.

And the MEC server sends the service request message to the P-GW according to the access address of the authentication charging platform.

The MEC server receives a service authorization message sent by the P-GW, wherein the service authorization message comprises a redirection address and enabling information, the redirection address comprises an access address of a server of a third party application and an MSISDN number of user equipment, and the enabling information is used for enabling the MEC server.

And the MEC server sends a service authorization message to the server of the third party application to indicate the server of the third party application to send a service response message to the user equipment so as to provide corresponding service.

In a fourth aspect, an embodiment of the present invention provides a service authorization apparatus, where the apparatus includes:

and the receiving unit is used for receiving a service request message sent by the mobile edge computing MEC server, wherein the service request message is used for indicating the user equipment to request the server of the third party application to provide corresponding service, and the service request message contains an access address of the authentication charging platform and an application identifier of the third party application.

And the processing unit is used for adding the MSISDN number of the mobile station integrated service digital network of the user equipment in the service request message.

And the processing unit is also used for sending the service request message added with the MSISDN number to the authentication charging platform according to the access address of the authentication charging platform.

The receiving unit is further configured to receive a service authorization message sent by the authentication and charging platform, where the service authorization message includes a redirection address and enabling information, the redirection address includes an access address of a server of the third party application and an MSISDN number of the user equipment, and the enabling information is used to enable the MEC server.

And the sending unit is used for sending the service authorization message to the MEC server, so that the MEC server sends the service authorization message to the server of the third-party application to indicate the server of the third-party application to send a service response message to the user equipment, and corresponding service is provided.

In a fifth aspect, an embodiment of the present invention provides a service authorization apparatus, where the apparatus includes:

a receiving unit, configured to receive a service request message sent by the P-GW, where the service request message is used to instruct a user equipment to request a server of a third-party application to provide a corresponding service, and the service request message includes an access address of an authentication and charging platform, an application identifier of the third-party application, and an MSISDN number of the user equipment.

And the processing unit is used for performing service authorization of the third party application on the MSISDN number according to the application identifier.

The processing unit is further configured to search the first management list according to the application identifier, and obtain an access address of the server of the third-party application through indexing, where the first management list is used to indicate a correspondence between the application identifier and the access address of the server of the third-party application.

And the sending unit is used for sending a service authorization message to the P-GW, wherein the service authorization message comprises a redirection address and enabling information, the redirection address comprises an access address of a server of the third-party application and an MSISDN number of the user equipment, and the enabling information is used for enabling the MEC server.

Optionally, the receiving unit is further configured to: before the processing unit performs service authorization of the third-party application on the MSISDN number according to the application identifier, the processing unit receives the MSISDN number and the application identifier sent by the docking platform of the third-party application, so as to indicate that the user equipment corresponding to the MSISDN number can obtain the service authorization when using the third-party application corresponding to the application identifier.

Optionally, the processing unit is further configured to: and searching a second management list according to the application identifier, and indexing to obtain the charging principle of the third-party application, wherein the second management list is used for indicating the corresponding relation between the application identifier and the charging principle of the third-party application. And charging according to the charging principle.

Optionally, the processing unit is further configured to: after charging according to the charging principle, generating a charging data ticket; the sending unit is further configured to: and sending the charging data ticket to the CRM entity or the BOSS.

In a sixth aspect, an embodiment of the present invention provides a service authorization apparatus, where the apparatus includes:

and the receiving unit is used for receiving a service request message sent by the user equipment, wherein the service request message is used for indicating the user equipment to request a server of the third-party application to provide corresponding service, and the service request message contains an access address of the authentication charging platform and an application identifier of the third-party application.

And the sending unit is used for sending the service request message to the P-GW according to the access address of the authentication charging platform.

The receiving unit is further configured to receive a service authorization message sent by the P-GW, where the service authorization message includes a redirection address and enabling information, the redirection address includes an access address of a server of the third party application and an MSISDN number of the user equipment, and the enabling information is used to enable the MEC server.

And the sending unit is further used for sending a service authorization message to the server of the third-party application so as to instruct the server of the third-party application to send a service response message to the user equipment, and providing corresponding services.

In a seventh aspect, a communications apparatus is provided that includes a processor, a memory, and a transceiver; and the processor is used for reading the program in the memory and executing the steps of any one of the methods.

In an eighth aspect, a computer storage medium is provided that stores computer-executable instructions for causing a computer to perform the steps of any of the methods described above.

In the service authorization method and apparatus provided in the embodiment of the present invention, the MEC server reports a service request message sent by the user equipment to the P-GW, the P-GW adds the MSISDN number of the user equipment to the service request message and sends the MSISDN number to the authentication charging platform, and the authentication charging platform performs service authorization according to the application identifier and the MSISDN number included in the service request message. And the authentication charging platform sends the service authorization message to the MEC server through the P-GW, and then the MEC server indicates a server of the third party application to provide related services for the user equipment. By adopting the service authorization method and the service authorization device provided by the embodiment of the invention, the core network can realize the enabling and control of the third-party application, and the core network can manage the third-party application conveniently.

In the method, the device and the medium for transmitting and receiving multiple synchronization channels provided by the embodiments of the present invention, a system bandwidth supports multiple synchronization channels in a frequency domain, and at a network side, the UE is notified that each synchronization channel occupies frequency domain position information.

Additional features and advantages of the invention will be set forth in the description which follows, and in part will be obvious from the description, or may be learned by practice of the invention. The objectives and other advantages of the invention will be realized and attained by the structure particularly pointed out in the written description and claims hereof as well as the appended drawings.

Drawings

Fig. 1 is a schematic flow chart of a service authorization method according to an embodiment of the present invention;

fig. 2 is a schematic flow chart of another service authorization method according to an embodiment of the present invention;

fig. 3 is a schematic structural diagram of a first service authorization apparatus according to an embodiment of the present invention;

fig. 4 is a schematic structural diagram of a second service authorization apparatus according to an embodiment of the present invention;

fig. 5 is a schematic structural diagram of a third service authorization apparatus according to an embodiment of the present invention;

fig. 6 is a schematic structural diagram of a fourth service authorization apparatus according to an embodiment of the present invention;

fig. 7 is a schematic structural diagram of a fifth service authorization apparatus according to an embodiment of the present invention;

fig. 8 is a schematic structural diagram of a sixth service authorization apparatus according to an embodiment of the present invention.

Detailed Description

The preferred embodiments of the present invention will be described below with reference to the accompanying drawings of the specification, it being understood that the preferred embodiments described herein are merely for illustrating and explaining the present invention, and are not intended to limit the present invention, and that the embodiments and features of the embodiments in the present invention may be combined with each other without conflict.

As shown in fig. 1, which is a schematic flow chart of a service authorization method provided in an embodiment of the present invention, the method may include the following steps:

s101: and the MEC server receives a service request message sent by the user equipment.

The service request message is used for indicating the user equipment to request the server of the third party application to provide corresponding service, and the service request message contains the access address of the authentication and charging platform and the application identifier of the third party application.

In the embodiment of the present invention, the type of the third-party application may be various. That is, the third-party application may provide various types of corresponding services for the user device, such as a language call service, a web browsing service, a video viewing service, an electronic tour guide explanation service, and the like.

In S101, the service request message includes an access address of the authentication and charging platform. That is, after receiving the service request message, the MEC server does not directly route the service request message to a server of a third party application, but sends the service request message to a Packet Data Network GateWay (P-GW), and the P-GW sends the service request message to the authentication charging platform after processing.

S102: and the MEC server sends the service request message to the P-GW according to the access address of the authentication charging platform.

In the embodiment of the invention, the MEC server sends the service request message to the P-GW after receiving the service request message, so that the core network can process and control the service request message conveniently.

As described above, in the prior art, for a service request of a third-party application initiated by a user, an MEC server may route a service request message to a server of the third-party application in a "full open" manner. In the embodiment of the invention, the message routing mode is changed. Therefore, before performing S101, relevant parameters may be configured in the network in advance. For example, configuring the network routing link parameter of the MEC server, configuring the network routing link parameter of the third party application, and configuring the interface parameter of the authentication charging platform. Therefore, the network elements (MEC server, authentication charging platform, P-GW, server of third party application) in the network carry out message routing according to the configured network routing link parameter, and enable the relevant interface of the authentication charging platform.

S103: the P-GW adds a Mobile Station Integrated Services Digital Network (MSISDN) number of the user equipment in the service request message.

Because the MEC server cannot acquire the MSISDN number of the user equipment, the service request message sent by the MEC server to the P-GW does not include the MSISDN number of the user equipment. When the authentication and charging platform authenticates and charges the third-party application, whether the user equipment is authorized to use the third-party application or not can be judged according to the MSISDN number of the user equipment, and the corresponding service is charged. Therefore, in the embodiment of the present invention, the P-GW adds the MSISDN number of the user equipment to the service request message, so that the authentication and charging platform performs corresponding authentication and charging processing.

It should be noted that, in the embodiment of the present invention, the MSISDN number of the user equipment may be a local number or a trans-provincial number. That is, the service authorization method shown in fig. 1 is applicable to the service authorization process of the provincial number.

S104: and the P-GW sends the service request message added with the MSISDN number to the authentication charging platform according to the access address of the authentication charging platform.

At this time, the service request message includes an access address of the authentication and charging platform, an application identifier of the third party application, and an MSISDN number of the user equipment.

In this embodiment of the present invention, the operation of adding the MSISDN number to the service request message by the P-GW may also be referred to as "header enhancement".

S105: and the authentication charging platform performs the service authorization of the third party application on the MSISDN number according to the application identifier.

Before the authentication and charging platform performs the service authorization of the third party application on the MSISDN number according to the application identifier, if a certain user subscribes to the related service of the third party application, the docking platform of the third party application may send the MSISDN number corresponding to the user and the application identifier of the third party application to the authentication and charging platform, so as to indicate that the user equipment corresponding to the MSISDN number may obtain the service authorization when using the third party application corresponding to the application identifier.

After receiving the MSISDN number and the application identifier, the authentication charging platform may add the MSISDN number to a white list of the third party application corresponding to the application identifier. Then, after receiving the service request message, the authentication charging platform may determine whether the MSISDN number is in the white list of the third party application through the application identifier of the third party application and the MSISDN number of the user equipment in the service request message, and if so, may perform service authorization of the third party application on the MSISDN number.

Illustratively, after receiving the MSISDN number and the application identifier sent by the docking platform of the third party application, the authentication charging platform may form a service subscription relationship and an enabling relationship according to a binding form of the third party application + the MSISDN number. And after receiving the service request message carrying the third party application plus the MSISDN number, the authentication charging platform can authorize the service.

S106: and the authentication charging platform searches the first management list according to the application identifier, and indexes the first management list to obtain the access address of the server of the third-party application.

The first management list is used for indicating the corresponding relation between the application identification and the access address of the server of the third-party application.

In a specific implementation, a specific form of the first management list may be as shown in table 1.

TABLE 1

Application mode	Access address of third party application	Application identification
			APP	IP address: 192.168.1.26	Identification of application A
Public number	URL identification for application B	Identification of application B
			Web site application	URL identification for application C	Identification of application C

Exemplarily, if the third-party application is the application a, after the first management list shown in table 1 is searched according to the identifier of the application a, the access address of the server of the third-party application, that is, the IP address of the APP of the third-party application, may be indexed, and the server of the third-party application may be accessed according to the IP address of the APP.

For example, if the third-party application is application B, after the first management list shown in table 1 is searched according to the identifier of application B, the access address of the server of the third-party application, that is, the Uniform Resource Locator (URL) identifier of the third-party application, may be indexed, and the server of the third-party application may be accessed according to the URL identifier of the third-party application.

It should be noted that, in the first management list, the entry of the application identifier may also be replaced by an application name, as long as the entry may be used to distinguish different third-party applications, and the specific content of the entry is not limited in the embodiment of the present invention.

Since the authentication and charging platform has already performed service authorization on the third-party application, the authentication and charging platform can carry the access address of the server of the third-party application in the service authorization message sent to the P-GW, so that the MEC server notifies the server of the third-party application according to the access address of the server of the third-party application: and providing related services for the user equipment.

S107: and the authentication charging platform sends a service authorization message to the P-GW.

The service authorization message sent by the authentication charging platform to the P-GW contains a redirection (http redirect) address and enabling information. The redirection address comprises an access address of a server of the third party application and an MSISDN number of the user equipment, and the enabling information is used for enabling the MEC server.

And the authentication charging platform sends a service authorization message to the P-GW, and the user equipment can obtain authorization for using the third-party application on behalf of the user equipment.

S108: and the P-GW sends the service authorization message to the MEC server.

S109: and the MEC server sends a service authorization message to the server of the third party application to indicate the server of the third party application to send a service response message to the user equipment so as to provide corresponding service.

After acquiring the enabling information in the service authorization message, the MEC server can acquire that the user equipment can obtain the authorization for using the third-party application; then, the MEC server may send the service authorization message to the server of the third party application according to the access address of the server of the third party application in the redirection address in the service authorization message, so as to instruct the server of the third party application to send a service response message to the user equipment (corresponding to the MSISDN number in the redirection address), and provide a corresponding service.

S110: and the server of the third party application sends a service response message to the user equipment, so that the corresponding service is provided for the user equipment.

In addition, in the embodiment of the present invention, the redirection address carried in the service authorization message sent by the authentication charging platform to the P-GW may further include a verification code, where the verification code may be sent by the docking platform of the third party application when the MSISDN number corresponding to the user and the application identifier of the third party application are sent to the authentication charging platform after the user subscribes to the related service of the third party application. Then, the server of the third party application can check the verification code after receiving the service authorization message carrying the verification code, and if the verification code carried in the service authorization message is the verification code which is sent to the authentication charging platform by the docking platform of the third party application, the verification code is proved to be checked to be correct, and the server of the third party application can send a service response message to the user equipment.

Optionally, in the service authorization method shown in fig. 1, after the user equipment obtains the service authorization, the authentication charging platform may further search the second management list according to the application identifier, obtain a charging principle of the third party application by indexing, and then perform charging according to the charging principle. The second management list is used for indicating the corresponding relation between the application identification and the charging principle of the third party application.

In the embodiment of the present invention, the charging principle applied by the third party may be various, for example, charging according to the duration of use, charging according to the frequency (number) of use, and the like.

In particular, a specific form of the second management list may be as shown in table 2.

TABLE 2

For example, if the third-party application is application a, after looking up the second management list shown in table 2 according to the identifier of application a, the charging principle of the third-party application can be obtained by indexing, that is, charging according to X element when the usage duration is 1, and charging according to Y element when the usage duration is 2.

For example, if the third-party application is application B, after looking up the second management list shown in table 2 according to the identifier of application B, the charging rule of the third-party application can be obtained by indexing, that is, charging according to X-element when the usage frequency is 1, and charging according to Y-element when the usage frequency is 2.

It should be noted that, in the second management list, the entry of the application identifier may also be replaced by an application name, as long as the entry may be used to distinguish different third-party applications, and the specific content of the entry is not limited in the embodiment of the present invention.

In this embodiment of the present invention, the second management list may be used for charging, and may also affect the process of performing, by the authentication and charging platform, S105, service authorization of the third party application. For example, if the payment method for the third-party application is prepaid, and the authentication and charging platform indexes the charging principle of the third-party application according to the second management list, it is found that the fee paid by the user equipment is not enough to support the service according to the charging principle, then the authentication and charging platform may not perform service authorization on the user equipment.

In addition, after the authentication charging platform charges according to the charging principle, the authentication charging platform can generate a charging data ticket; then, the authentication and charging platform sends a charging data ticket to a Customer Relationship Management (CRM) entity or a Business Operation Support System (BOSS).

The business authorization method provided by the embodiment of the invention can be applied to individual clients and enterprise clients. If the user initiating the service request is an enterprise client, after receiving the charging data ticket, the CRM entity or the BOSS may perform related management on the enterprise client according to the enterprise client number, including but not limited to interface management, reconciliation management, application range enabling management, and the like. For example, an enterprise customer management table entry as shown in table 3 below may be stored in the authentication billing platform.

TABLE 3

As can be seen from table 3, enterprise billing or enterprise split billing can be used for the enterprise client. After receiving the charging data ticket, the authentication charging platform can charge the third party application according to the service mode of the enterprise client, so that the enterprise client is charged with the related fee according to the final charging result.

The scheme for sending the charging data call ticket to the CRM entity or the BOSS is different from the traditional service ordering scheme in that: the traditional scheme can only initiate service subscription by a mobile phone terminal, the service subscription is carried out according to the day and the month, the service subscription can be triggered when the service is initiated according to a service triggering mode by adopting the scheme, and meanwhile, the real-time response of a CRM entity or a BOSS to a charging result is realized.

In the embodiment of the invention, the authentication charging platform is a network element newly added in a core network. As can be seen from the above description of the service authorization method shown in fig. 1, the authentication and charging platform can complete authentication and charging for third party applications. Because the authentication charging platform needs to interact with the docking platform of the third party application and the P-GW, the authentication charging platform needs to include at least two extension interfaces: a first Interface (Interface1) with a docking platform for a third party application for cooperating with the third party application, and a second Interface (Interface2) with a P-GW for enabling the MEC server.

The authentication charging platform also stores a first management list and a second management list. The first management list is used for the authentication charging platform to carry out the service authorization of the third party application; the second management list is used for authenticating the charging platform to charge the third-party application.

Besides, the authentication charging platform may also store a third management list in addition to two items, namely, the first management list and the second management list. And when the authentication charging platform supports the service access of a plurality of MEC servers and a plurality of clients, the third management list enables the authentication charging platform to complete the management of the plurality of MEC servers and the plurality of clients.

Illustratively, the third management list may be as shown in table 4 below.

TABLE 4

MEC server description	Identification
		Capital airport	1001
Daxing airport	1002
		Harmony and palace	2001
Imperial palace	2002
		Changping future science and technology city	3001
Tanjin scientific park	3002
		Three-mile sports ground	4001

If an enterprise client performs service collaboration under a plurality of MEC servers aiming at a third-party application, the authentication charging platform can determine that the service is managed by the MEC server by inquiring the third management list, and further send a service authorization message to the MEC server.

For example, the third-party application provides an electronic tour guide explanation service for both the grace and the palace and the Imperial palace, so that the MEC server can carry the identifier of the MEC server in a service request message when forwarding the service request message sent by the user to the P-GW, and after receiving the service request message sent by the P-GW, the authentication charging platform determines to which MEC server the service authorization message is sent according to the identifier of the MEC server if the service is to be authorized.

By adopting the service authorization method shown in fig. 1, the MEC server reports a service request message sent by the user equipment to the P-GW, the P-GW adds the MSISDN number of the user equipment to the service request message and then sends the service request message to the authentication charging platform, and the authentication charging platform performs service authorization according to the application identifier and the MSISDN number included in the service request message. And the authentication charging platform sends the service authorization message to the MEC server through the P-GW, and then the MEC server indicates a server of the third party application to provide related services for the user equipment. By adopting the scheme, the core network can realize the enabling and control of the third-party application by the edge computing network element, and the core network can conveniently manage the third-party application.

Based on the same inventive concept, the embodiment of the present invention further provides a service authorization method, which can be regarded as a specific example of the method shown in fig. 1. Referring to fig. 2, the method specifically includes the following steps:

1. after the customer orders the relevant service through the docking platform of the third party application, the docking platform of the third party application sends the MSISDN number corresponding to the customer and the application identifier of the third party application to the authentication charging platform, and the MSISDN number enters the white list of the third party application.

2. The user uses the service by scanning the two-dimensional code, namely, the service request message is sent to the MEC server.

3. And the MEC server sends the service request message to the P-GW.

4. And the P-GW adds the MSISDN number of the user equipment in the service request message and then sends the service request message to the authentication charging platform.

5. And the authentication charging platform acquires that the MSISDN number can be authorized by inquiring the white list, and then performs service authorization on the MSISDN number. And searching the first management list according to the application identifier, and indexing to obtain the access address of the server of the third-party application.

6. And the authentication charging platform sends a service authorization message to the P-GW.

The service authorization message contains a redirection address and enabling information. The redirection address comprises an access address of a server of the third party application and an MSISDN number of the user equipment, and the enabling information is used for enabling the MEC server.

7. And the P-GW sends the service authorization message to the MEC server.

8. And the MEC server sends the service authorization message to a server of the third-party application.

9. And the server of the third party application sends a service response message to the user equipment through the MEC server to provide corresponding service for the user.

It should be noted that the method shown in fig. 2 can be regarded as a specific example of the method shown in fig. 1. The implementation of the method shown in fig. 2, which is not described in detail, can be referred to the relevant description of the method shown in fig. 1.

Based on the same inventive concept, embodiments of the present invention further provide a service authorization apparatus, where the service authorization apparatus may be used to perform operations performed by the P-GW in the service authorization method shown in fig. 1. As the principle of the service authorization apparatus for solving the problem is similar to the service authorization method shown in fig. 1, the implementation of the service authorization apparatus may refer to the implementation of the method, and repeated details are not repeated.

Referring to fig. 3, the service authorization apparatus includes:

a receiving unit 301, configured to receive a service request message sent by a mobile edge computing MEC server, where the service request message is used to instruct a user equipment to request a server of a third-party application to provide a corresponding service, and the service request message includes an access address of an authentication and charging platform and an application identifier of the third-party application;

a processing unit 302, configured to add an MSISDN number of a mobile station integrated service digital network of the user equipment to the service request message;

the processing unit 302 is further configured to send the service request message to which the MSISDN number is added to the authentication charging platform according to the access address of the authentication charging platform;

the receiving unit 301 is further configured to receive a service authorization message sent by the authentication and charging platform, where the service authorization message includes a redirection address and enabling information, the redirection address includes an access address of a server of the third party application and an MSISDN number of the user equipment, and the enabling information is used to enable the MEC server;

a sending unit 303, configured to send the service authorization message to the MEC server, so that the MEC server sends the service authorization message to the server of the third party application to instruct the server of the third party application to send a service response message to the user equipment, and provide a corresponding service.

For convenience of description, the above parts are separately described as modules (or units) according to functional division. Of course, the functionality of the various modules (or units) may be implemented in the same or in multiple pieces of software or hardware in practicing the invention.

Based on the same technical concept, an embodiment of the present application further provides a service authorization apparatus, where the service authorization apparatus may be used to execute operations executed by the P-GW in the service authorization method shown in fig. 1, and may be the same apparatus as the service authorization apparatus shown in fig. 3.

Referring to fig. 4, a schematic structural diagram of a service authorization apparatus provided in an embodiment of the present invention is shown in fig. 4, where the service authorization apparatus may include: a processor 401, a memory 402, a transceiver 403, and a bus interface.

The processor 401 is responsible for managing the bus architecture and general processing, and the memory 402 may store data used by the processor 401 in performing operations. The transceiver 403 is used for receiving and transmitting data under the control of the processor 401.

The bus architecture may include any number of interconnected buses and bridges, with one or more processors, represented by processor 401, and various circuits, represented by memory 402, being linked together. The bus architecture may also link together various other circuits such as peripherals, voltage regulators, power management circuits, and the like, which are well known in the art, and therefore, will not be described any further herein. The bus interface provides an interface. The processor 401 is responsible for managing the bus architecture and general processing, and the memory 402 may store data used by the processor 401 in performing operations.

The process disclosed in the embodiment of the present invention may be applied to the processor 401, or implemented by the processor 401. In implementation, the steps of the signal processing flow may be implemented by integrated logic circuits of hardware or instructions in the form of software in the processor 401. The processor 401 may be a general purpose processor, a digital signal processor, an application specific integrated circuit, a field programmable gate array or other programmable logic device, discrete gate or transistor logic, discrete hardware components, or the like that may implement or perform the methods, steps, and logic blocks disclosed in embodiments of the present invention. A general purpose processor may be a microprocessor or any conventional processor or the like. The steps of a method disclosed in connection with the embodiments of the present invention may be directly implemented by a hardware processor, or may be implemented by a combination of hardware and software modules in the processor. The software module may be located in ram, flash memory, rom, prom, or eprom, registers, etc. storage media as is well known in the art. The storage medium is located in the memory 402, and the processor 401 reads the information in the memory 402 and completes the steps of the signal processing flow in combination with the hardware thereof.

Specifically, the processor 401 is configured to read a program in a memory, and perform an operation performed by the P-GW in the service authorization method shown in fig. 1.

Based on the same inventive concept, embodiments of the present invention further provide a service authorization apparatus, where the service authorization apparatus may be used to perform operations performed by the authentication and charging platform in the service authorization method shown in fig. 1. As the principle of the service authorization apparatus for solving the problem is similar to the service authorization method shown in fig. 1, the implementation of the service authorization apparatus may refer to the implementation of the method, and repeated details are not repeated.

Referring to fig. 5, the service authorization apparatus includes:

a receiving unit 501, configured to receive a service request message sent by a P-GW, where the service request message is used to instruct a user equipment to request a server of a third-party application to provide a corresponding service, and the service request message includes an access address of an authentication and charging platform, an application identifier of the third-party application, and an MSISDN number of the user equipment;

a processing unit 502, configured to perform service authorization of a third party application on the MSISDN number according to the application identifier;

the processing unit 502 is further configured to search a first management list according to the application identifier, and obtain an access address of the server of the third-party application by indexing, where the first management list is used to indicate a corresponding relationship between the application identifier and the access address of the server of the third-party application;

a sending unit 503, configured to send a service authorization message to the P-GW, where the service authorization message includes a redirection address and enabling information, the redirection address includes an access address of a server of the third party application and an MSISDN number of the user equipment, and the enabling information is used to enable the MEC server.

Optionally, the receiving unit 501 is further configured to:

before the processing unit 502 performs the service authorization of the third party application on the MSISDN number according to the application identifier, the MSISDN number and the application identifier sent by the docking platform of the third party application are received to indicate that the user equipment corresponding to the MSISDN number can obtain the service authorization when using the third party application corresponding to the application identifier.

Optionally, the processing unit 502 is further configured to:

searching a second management list according to the application identifier, and indexing to obtain a charging principle of the third-party application, wherein the second management list is used for indicating a corresponding relation between the application identifier and the charging principle of the third-party application;

and charging according to the charging principle.

Optionally, the processing unit 502 is further configured to:

after charging according to the charging principle, generating a charging data ticket;

the sending unit 503 is further configured to:

and sending the charging data ticket to the CRM entity or the BOSS.

Based on the same technical concept, the embodiment of the present application further provides a service authorization apparatus, which may be the same as the service authorization apparatus shown in fig. 5 and may be used to perform operations performed by the authentication and charging platform in the service authorization method shown in fig. 1.

Referring to fig. 6, a schematic structural diagram of a service authorization apparatus provided in an embodiment of the present invention is shown in fig. 6, where the service authorization apparatus may include: a processor 601, a memory 602, a transceiver 603, and a bus interface.

The processor 601 is responsible for managing the bus architecture and general processing, and the memory 602 may store data used by the processor 601 in performing operations. The transceiver 603 is used for receiving and transmitting data under the control of the processor 601.

The bus architecture may include any number of interconnected buses and bridges, with one or more processors, represented by processor 601, and various circuits of memory, represented by memory 602, being linked together. The bus architecture may also link together various other circuits such as peripherals, voltage regulators, power management circuits, and the like, which are well known in the art, and therefore, will not be described any further herein. The bus interface provides an interface. The processor 601 is responsible for managing the bus architecture and general processing, and the memory 602 may store data used by the processor 601 in performing operations.

The process disclosed by the embodiment of the invention can be applied to the processor 601 or implemented by the processor 601. In implementation, the steps of the signal processing flow may be implemented by integrated logic circuits of hardware or instructions in the form of software in the processor 601. The processor 601 may be a general purpose processor, a digital signal processor, an application specific integrated circuit, a field programmable gate array or other programmable logic device, discrete gate or transistor logic, discrete hardware components, or the like that implement or perform the methods, steps, and logic blocks disclosed in embodiments of the present invention. A general purpose processor may be a microprocessor or any conventional processor or the like. The steps of a method disclosed in connection with the embodiments of the present invention may be directly implemented by a hardware processor, or may be implemented by a combination of hardware and software modules in the processor. The software module may be located in ram, flash memory, rom, prom, or eprom, registers, etc. storage media as is well known in the art. The storage medium is located in the memory 602, and the processor 601 reads the information in the memory 602 and completes the steps of the signal processing flow in combination with the hardware thereof.

Specifically, the processor 601 is configured to read a program in a memory, and perform the operations performed by the authentication and accounting platform in the service authorization method shown in fig. 1.

Based on the same inventive concept, embodiments of the present invention further provide a service authorization apparatus, respectively, where the service authorization apparatus may be used to execute operations executed by the MEC server in the service authorization method shown in fig. 1. As the principle of the service authorization apparatus for solving the problem is similar to the service authorization method shown in fig. 1, the implementation of the service authorization apparatus may refer to the implementation of the method, and repeated details are not repeated.

Referring to fig. 7, the service authorization apparatus includes:

a receiving unit 701, configured to receive a service request message sent by a user equipment, where the service request message is used to instruct the user equipment to request a server of a third-party application to provide a corresponding service, and the service request message includes an access address of an MEC server and an application identifier of the third-party application;

a sending unit 702, configured to send a service request message to the P-GW according to an access address of the MEC server;

the receiving unit 701 is further configured to receive a service authorization message sent by the P-GW, where the service authorization message includes a redirection address and enabling information, the redirection address includes an access address of a server of a third party application and an MSISDN number of a user equipment, and the enabling information is used to enable the MEC server;

the sending unit 702 is further configured to send a service authorization message to the server of the third party application, so as to instruct the server of the third party application to send a service response message to the user equipment, and provide a corresponding service.

Based on the same technical concept, the embodiment of the present application further provides a service authorization apparatus, which may be used to execute the operation executed by the MEC server in the service authorization method shown in fig. 1, and may be the same apparatus as the service authorization apparatus shown in fig. 7.

Referring to fig. 8, a schematic structural diagram of a service authorization apparatus provided in an embodiment of the present invention is shown in fig. 8, where the service authorization apparatus may include: a processor 801, a memory 802, a transceiver 803, and a bus interface.

The processor 801 is responsible for managing the bus architecture and general processing, and the memory 802 may store data used by the processor 801 in performing operations. The transceiver 803 is used for receiving and transmitting data under the control of the processor 801.

The bus architecture may include any number of interconnected buses and bridges, with one or more processors, represented by the processor 801, and various circuits, represented by the memory 802, being linked together. The bus architecture may also link together various other circuits such as peripherals, voltage regulators, power management circuits, and the like, which are well known in the art, and therefore, will not be described any further herein. The bus interface provides an interface. The processor 801 is responsible for managing the bus architecture and general processing, and the memory 802 may store data used by the processor 801 in performing operations.

The processes disclosed in the embodiments of the present invention can be applied to the processor 801 or implemented by the processor 801. In implementation, the steps of the signal processing flow may be implemented by integrated logic circuits of hardware or instructions in the form of software in the processor 801. The processor 801 may be a general purpose processor, a digital signal processor, an application specific integrated circuit, a field programmable gate array or other programmable logic device, discrete gate or transistor logic, discrete hardware components, or the like that implement or perform the methods, steps, and logic blocks disclosed in embodiments of the present invention. A general purpose processor may be a microprocessor or any conventional processor or the like. The steps of a method disclosed in connection with the embodiments of the present invention may be directly implemented by a hardware processor, or may be implemented by a combination of hardware and software modules in the processor. The software module may be located in ram, flash memory, rom, prom, or eprom, registers, etc. storage media as is well known in the art. The storage medium is located in the memory 802, and the processor 801 reads the information in the memory 802, and completes the steps of the signal processing flow in combination with the hardware thereof.

Specifically, the processor 801 is configured to read a program in the memory, and perform the operations performed by the MEC server in the service authorization method shown in fig. 1.

As will be appreciated by one skilled in the art, embodiments of the present invention may be provided as a method, system, or computer program product. Accordingly, the present invention may take the form of an entirely hardware embodiment, an entirely software embodiment or an embodiment combining software and hardware aspects. Furthermore, the present invention may take the form of a computer program product embodied on one or more computer-usable storage media (including, but not limited to, disk storage, CD-ROM, optical storage, and the like) having computer-usable program code embodied therein.

The present invention is described with reference to flowchart illustrations and/or block diagrams of methods, apparatus (systems), and computer program products according to embodiments of the invention. It will be understood that each flow and/or block of the flow diagrams and/or block diagrams, and combinations of flows and/or blocks in the flow diagrams and/or block diagrams, can be implemented by computer program instructions. These computer program instructions may be provided to a processor of a general purpose computer, special purpose computer, embedded processor, or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, create means for implementing the functions specified in the flowchart flow or flows and/or block diagram block or blocks.

These computer program instructions may also be stored in a computer-readable memory that can direct a computer or other programmable data processing apparatus to function in a particular manner, such that the instructions stored in the computer-readable memory produce an article of manufacture including instruction means which implement the function specified in the flowchart flow or flows and/or block diagram block or blocks.

These computer program instructions may also be loaded onto a computer or other programmable data processing apparatus to cause a series of operational steps to be performed on the computer or other programmable apparatus to produce a computer implemented process such that the instructions which execute on the computer or other programmable apparatus provide steps for implementing the functions specified in the flowchart flow or flows and/or block diagram block or blocks.

While preferred embodiments of the present invention have been described, additional variations and modifications in those embodiments may occur to those skilled in the art once they learn of the basic inventive concepts. Therefore, it is intended that the appended claims be interpreted as including preferred embodiments and all such alterations and modifications as fall within the scope of the invention.

It will be apparent to those skilled in the art that various changes and modifications may be made in the present invention without departing from the spirit and scope of the invention. Thus, if such modifications and variations of the present invention fall within the scope of the claims of the present invention and their equivalents, the present invention is also intended to include such modifications and variations.

Claims

1. A method for service authorization, comprising:

a packet data network gateway P-GW receives a service request message sent by a mobile edge computing MEC server, wherein the service request message is used for indicating user equipment to request a server of a third party application to provide corresponding service, and the service request message comprises an access address of an authentication charging platform and an application identifier of the third party application;

the P-GW adds the MSISDN number of the mobile station integrated service digital network of the user equipment in the service request message;

the P-GW sends the service request message added with the MSISDN number to the authentication charging platform according to the access address of the authentication charging platform;

the P-GW receives a service authorization message sent by the authentication charging platform, wherein the service authorization message comprises a redirection address and enabling information, the redirection address comprises an access address of a server of the third party application and an MSISDN number of the user equipment, and the enabling information is used for enabling the MEC server;

and the P-GW sends the service authorization message to the MEC server, so that the MEC server sends the service authorization message to a server of the third party application to indicate the server of the third party application to send a service response message to the user equipment, and corresponding service is provided.

2. A method for service authorization, comprising:

an authentication charging platform receives a service request message sent by a P-GW, wherein the service request message is used for indicating user equipment to request a server of third party application to provide corresponding service through an MEC server, and the service request message comprises an access address of the authentication charging platform, an application identifier of the third party application and an MSISDN number of the user equipment;

the authentication charging platform carries out the service authorization of the third party application on the MSISDN number according to the application identification;

the authentication charging platform searches a first management list according to the application identifier, and indexes the access address of the server of the third-party application, wherein the first management list is used for indicating the corresponding relation between the application identifier and the access address of the server of the third-party application;

the authentication charging platform sends a service authorization message to the P-GW, wherein the service authorization message comprises a redirection address and enabling information, the redirection address comprises an access address of a server of the third-party application and an MSISDN number of the user equipment, and the enabling information is used for enabling the MEC server to send the service authorization message to the server of the third-party application according to the access address of the server of the third-party application in the redirection address in the service authorization message.

3. The method of claim 2, wherein before the authenticating and charging platform performs the service authorization of the third party application on the MSISDN number according to the application identifier, the method further comprises:

and the authentication charging platform receives the MSISDN number and the application identifier sent by the docking platform of the third-party application, so as to indicate that the user equipment corresponding to the MSISDN number can obtain service authorization when using the third-party application corresponding to the application identifier.

4. The method of claim 2 or 3, further comprising:

the authentication charging platform searches a second management list according to the application identifier, and indexes the second management list to obtain the charging principle of the third party application, wherein the second management list is used for indicating the corresponding relation between the application identifier and the charging principle of the third party application;

and the authentication charging platform charges according to the charging principle.

5. The method as claimed in claim 4, wherein after the authentication charging platform charges according to the charging principle, further comprising:

the authentication charging platform generates a charging data ticket;

and the authentication charging platform sends the charging data bill to a Customer Relationship Management (CRM) entity or a Business Operation Support System (BOSS).

6. A method for service authorization, comprising:

the method comprises the steps that an MEC server receives a service request message sent by user equipment, wherein the service request message is used for indicating the user equipment to request a server of a third party application to provide corresponding service, and the service request message comprises an access address of an authentication charging platform and an application identifier of the third party application;

the MEC server sends the service request message to a P-GW according to the access address of the authentication charging platform;

the MEC server receives a service authorization message sent by the P-GW, wherein the service authorization message comprises a redirection address and enabling information, the redirection address comprises an access address of a server of the third party application and an MSISDN number of the user equipment, the enabling information is used for enabling the MEC server, and the service authorization message is obtained by the P-GW sending the service request message to the authentication charging platform according to the access address of the authentication charging platform and authorized by the authentication charging platform;

and the MEC server sends the service authorization message to the server of the third-party application to indicate the server of the third-party application to send a service response message to the user equipment so as to provide corresponding service.

7. A service authorization apparatus, comprising:

a receiving unit, configured to receive a service request message sent by a mobile edge computing MEC server, where the service request message is used to instruct a user equipment to request a server of a third-party application to provide a corresponding service, and the service request message includes an access address of an authentication and charging platform and an application identifier of the third-party application;

a processing unit, configured to add an MSISDN number of a mobile station integrated services digital network of the user equipment to the service request message;

the processing unit is further configured to send the service request message to which the MSISDN number is added to the authentication charging platform according to the access address of the authentication charging platform;

the receiving unit is further configured to receive a service authorization message sent by the authentication and charging platform, where the service authorization message includes a redirection address and enabling information, the redirection address includes an access address of a server of the third party application and an MSISDN number of the user equipment, and the enabling information is used to enable the MEC server;

a sending unit, configured to send the service authorization message to the MEC server, so that the MEC server instructs the server of the third-party application to send a service response message to the user equipment by sending the service authorization message to the server of the third-party application, and provides a corresponding service.

8. A service authorization device applied to an authentication charging platform comprises:

a receiving unit, configured to receive a service request message sent by a P-GW, where the service request message is used to instruct a user equipment to request a server of a third-party application to provide a corresponding service through an MEC server, and the service request message includes an access address of the authentication and charging platform, an application identifier of the third-party application, and an MSISDN number of the user equipment;

the processing unit is used for performing service authorization of the third party application on the MSISDN number according to the application identifier;

the processing unit is further configured to search a first management list according to the application identifier, and index to obtain an access address of the server of the third-party application, where the first management list is used to indicate a correspondence between the application identifier and the access address of the server of the third-party application;

a sending unit, configured to send a service authorization message to the P-GW, where the service authorization message includes a redirection address and enabling information, the redirection address includes an access address of a server of the third-party application and an MSISDN number of the user equipment, and the enabling information is used to enable the MEC server to send the service authorization message to the server of the third-party application according to the access address of the server of the third-party application in the redirection address in the service authorization message.

9. The apparatus of claim 8, wherein the receiving unit is further configured to:

before the processing unit performs service authorization of the third-party application on the MSISDN number according to the application identifier, receiving the MSISDN number and the application identifier sent by the docking platform of the third-party application, so as to indicate that the user equipment corresponding to the MSISDN number can obtain service authorization when using the third-party application corresponding to the application identifier.

10. The apparatus as recited in claim 8 or 9, said processing unit to further:

and charging according to the charging principle.

11. The apparatus as recited in claim 10, said processing unit to further:

the sending unit is further configured to:

and sending the charging data ticket to a CRM entity or a BOSS.

12. A service authorization device applied to an MEC server includes:

a receiving unit, configured to receive a service request message sent by a user equipment, where the service request message is used to instruct the user equipment to request a server of a third-party application to provide a corresponding service, and the service request message includes an access address of an authentication and charging platform and an application identifier of the third-party application;

a sending unit, configured to send the service request message to a P-GW according to an access address of the authentication charging platform;

the receiving unit is further configured to receive a service authorization message sent by the P-GW, where the service authorization message includes a redirection address and enabling information, the redirection address includes an access address of a server of the third-party application and an MSISDN number of the user equipment, and the enabling information is used to enable the MEC server;

the sending unit is further configured to send the service authorization message to the server of the third-party application to instruct the server of the third-party application to send a service response message to the user equipment to provide a corresponding service, where the service authorization message is obtained by the P-GW sending the service request message to the authentication and charging platform according to the access address of the authentication and charging platform and being authorized by the authentication and charging platform.

13. A computing device comprising at least one processing unit and at least one memory unit, wherein the memory unit stores a computer program that, when executed by the processing unit, causes the processing unit to perform the steps of the method of any of claims 1 to 6.

14. A computer-readable medium, in which a computer program is stored which is executable by a computing device, the program, when run on the computing device, causing the computing device to perform the steps of the method of any one of claims 1 to 6.