CN1395388A - Method for authenticating group broadcast service - Google Patents

Method for authenticating group broadcast service Download PDF

Info

Publication number
CN1395388A
CN1395388A CN 01114891 CN01114891A CN1395388A CN 1395388 A CN1395388 A CN 1395388A CN 01114891 CN01114891 CN 01114891 CN 01114891 A CN01114891 A CN 01114891A CN 1395388 A CN1395388 A CN 1395388A
Authority
CN
China
Prior art keywords
user
multicast
network
authentication
address
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Granted
Application number
CN 01114891
Other languages
Chinese (zh)
Other versions
CN1252961C (en
Inventor
严超
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
ZTE Corp
Original Assignee
ZTE Corp
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by ZTE Corp filed Critical ZTE Corp
Priority to CN 01114891 priority Critical patent/CN1252961C/en
Publication of CN1395388A publication Critical patent/CN1395388A/en
Application granted granted Critical
Publication of CN1252961C publication Critical patent/CN1252961C/en
Anticipated expiration legal-status Critical
Expired - Lifetime legal-status Critical Current

Links

Images

Abstract

The invented method for authenticating the multicast request includes following steps: (1) the authentication for logging the user on. (2) The network device records the user's related information, combining with the operation attributes (whether the multicast is opened) to generate one recorder. (3) The user obtains the genetic networked service through network (4). The user send out the request package of applying for joining a multicast group. (5) With the request package being received, the network device picks up the user's relevant information. (6) Base on the user's information, the network device searches the recorders. If the user is a legal user of the multicast group, the authentication is passed. Otherwise, the user is refused admittance.

Description

A kind of method that multicast service is authenticated
The present invention relates to data communication field, relate in particular to the method that in the broadband access system multicast service is authenticated, the present invention provides a kind of method of knowing user's legal identity of debating as the precondition of the charging of value-added service in the broadband network.
At present, in data communication field, broadband technology has obtained application more and more widely.When a plurality of users apply for that simultaneously certain online service is (as video, audio service) time, corresponding server sends the datagram of same content will for each user, at this time, can identify the user that all have same requirements with a multicast address, server only need send datagram to this virtual multicast address, sends to corresponding multicast user automatically by the node on the network, and does not need all to send out a identical datagram for respectively each user.This process is called multicast, can save the bandwidth resources of network greatly.
Along with the continuous expansion of broadband application scope and the rapid increase of number of broadband customers, multicast has become a kind of important means that operator attracts the user.With regard to present circumstances, multicast just as a kind of Additional Services, is refused nobody under many circumstances, responds to every plea, and the user is not charged.Can foretell that along with enriching of multicast content, multicast service must be charged from now on, and the prerequisite of charge is will multicast to be authenticated earlier, on the basis of authentication, could carry out next step possible multiple charging way flexibly.
Because present multicast service opens for free, so, do not retrieve the various documents of relevant multicast authentication as yet.
The objective of the invention is provides a kind of method of authentication for the multicast service of generally carrying out at present, so that can charge according to authentication result team multicast service from now on.It can combine with multicast authentication with to access authentication of user simultaneously, makes operator more simple to user's management.Certainly, this combination to this method not necessarily.To achieve these goals, the present invention proposes a kind of method that multicast is authenticated, step is as follows:
Step 1, user's logging in network, whether network equipment decision allows the user to use Internet resources;
Step 2, if network allow this user to use Internet resources, network equipment recording user relevant information, and
Be associated with this user configured service attribute (whether opening), generate a record as multicast service;
If network allows this user to use Internet resources, then enter step 7;
Step 3, user obtain general business of networking by network;
Step 4, user send the request package that application adds certain multicast group;
Step 5, the network equipment receive this request package and extraction user related information wherein;
Step 6, the network equipment are searched record with this user profile, if show that this user is a legal multicast user, it are added multicast group, and authentication is passed through; Otherwise, enter step 7;
Step 7, refuse this user and add multicast group.
So just realized authentication to user multicast service.
The present invention proposes a kind of method that multicast service is authenticated, no matter which kind of access way the user adopts to realize authentication to multicast service.Its maximum characteristics are the authentication of multicast and access user's association attributes to be associated, make operator's leading subscriber very easily.Adopt this method to accomplish: (1) user enjoys business of networking but does not have the multicast service function; (2) user enjoys business of networking and has multicast service simultaneously; (3) user only enjoys the multicast service function.Make operator very flexible, and can be implemented on the basis of authentication the user is chargeed the opening of value-added service.
Below in conjunction with drawings and Examples the present invention is further described:
Fig. 1 is a kind of typical networking diagram of broadband access network;
Fig. 2 is the flow chart of the method for the invention;
Fig. 3 is the flow chart of the embodiment of the invention.
Read for convenience and understanding, below english abbreviation be explained as follows:
AAA authenticates, authorizes charging
IGMP inter-network igmpinternet
Application adds the request package of networking group in the IGMP JOIN inter-network igmpinternet
The PPP point to point protocol
Transmit PPP on the PPPoE Ethernet
Shown in Figure 1 is a kind of typical networking diagram that the present invention uses, and the authentication method to multicast service of the present invention is mainly used in the broadband access network, also can be applied on any one data network node with subscriber management function.
Present broadband access network mainly consists of the following components: local side apparatus, ustomer premises access equipment.Local side apparatus is connected by optical fiber or cable with ustomer premises access equipment, and access device (as computer) is linked on the ustomer premises access equipment by cable.In technical scheme of the present invention, local side apparatus and ustomer premises access equipment have all played corresponding effect.Local side apparatus is mainly realized the management to the user, as handling the calling of PPPOE, finishes authentication to the broadband user with aaa server, or by DHCP dynamic assignment IP address.Simultaneously local side apparatus and ustomer premises access equipment are realized multicast service to the user by the IP mode together, and ustomer premises access equipment also might be brought some unique informations of user up by certain mode, assists local side apparatus that user multicast service is authenticated.
Local side apparatus among Fig. 1 generally is the access device (as BAS Broadband Access Server) that has three layer functions, can discern user identity, all are inserted the user carry out the authentication and the charging of access network, equipment generally provides PPPOE termination function, DHCP distributing IP address, aaa protocol entity, IGMP protocol entity etc.; Ustomer premises access equipment generally is made up of Layer 2 switch, isolates must realize by office's side apparatus alternately between the user between the user.
In order to realize authentication to multicast service, local side apparatus by in the request package of extracting the user and asking to add multicast group some can the identifying user identity data (as user's MAC Address, the IP address, if can bring the port information of user side equipment up with certain form, also can be the port information of user side equipment), some attributes that need when itself and broadband user are surfed the Net are (as MAC Address, the IP address, if can bring the port information of user side equipment up with certain form, also can be the port information of user side equipment) bind the authentication that realizes the multicast user, judge that the request of which adding multicast is legal? which is illegal.
Fig. 2 is the flow chart of the method for the invention.In the method for the invention, when the user adopts different access way access networks, can carry out re-authentication to the user who proposes the multicast service requirement according to operator or service provider's requirement, and can take the charge mode different with common business of networking.
The present invention comes down to method a kind of and that the access way user combines for the method for multicast authentication.
Among Fig. 2, at first be an address allocation procedure and a verification process that the user is inserted.The address allocation procedure had here both comprised user's static configuration fixed ip address, had also comprised other all dynamic address allocation processes such as DHCP, PPPOE; Equally, the mode of authentication also can be various, as combine with aaa server, application layer authentication etc.;
After authentification of user passed through, access network had had user's relevant information, and had known user's legitimacy from database;
After the user asks to add the request package arrival of multicast group, just can carry out the authentication of multicast according to the user's information that is comprised in the request package.
Use method of the present invention, can also realize making the user only to enjoy the multicast service function, be that user's network equipment permission equipment when the initial log network inserts, but do not give this user open any business, only open multicast service after this user passes through multicast authentication, this moment, the user can only enjoy the multicast service function.
In Fig. 3 embodiment of the invention, user's access way is the access way based on PPPOE.
The present invention does not have special requirement to hardware, mainly says the step of embodiment of the invention realization here:
Automatically obtain an IP address by the Dynamic Host Configuration Protocol server on the access server when 1, the user starts shooting.Dynamic Host Configuration Protocol server gets up user's MAC Address and IP address binding simultaneously, and it is invalid that initial setting changes binding;
2, user's desire is used the Internet resources of broadband access network, must initiate PPPOE and call out, and user profile is delivered to the PPPOE processing entities of BAS Broadband Access Server by Ethernet switch;
3, the PPPOE processing entities of BAS Broadband Access Server and the RADIUSClient entity on the BAS Broadband Access Server carry out giving RADIUS Client entity with user profile alternately, and RADIUSClient and radius server are finished the authentication to the user together;
4, after authentication was passed through, BAS Broadband Access Server allowed the user to insert, and business such as online can be provided.The binding relationship of setting up in the MAC Address of the subscriber's main station that obtains when BAS Broadband Access Server is called out PPPOE simultaneously and the step 1 mates, and binding relationship is changed to effectively.Exist two IP addresses on the client computer this moment, and one is used for the PPPOE online by the PPPOE acquisition, and another is used for the access of IP mode.
5, the user sends the request package that application adds certain multicast group if the adding multicast services at first starts client multicast program.Request package is generally IGMP JOIN bag, with the form encapsulation of IP bag.
6, BAS Broadband Access Server recognizes IGMP JOIN bag, and whether its IP address of verification exist with the MAC Address binding relationship, if do not exist, then refuses; Otherwise local side adds multicast group with it, and subscriber's main station obtains multicast services by the packaged type of IPOE like this, and has realized the authentication of multicast services.
Understand method of the present invention for the ease of concrete, below just the user adopt the situation of PPPOE access way and IPOE access way to be described respectively respectively.
(1) (the PPPOE mode of saying has here comprised that all are with PPPOE calling login to the PPPOE mode
The mode of network)
(2)
The user calls out by after authentication and the logging in network by PPPOE, access network is noted user's relevant information (if can bring the port information of user side equipment up with certain form as user account number, SessionID, user's MAC Address, IP address, also can be the port information of user side equipment);
Whether the user has the multicast service function generally by network management configuration, and relevant with the user, can be relevant with user's account number, and user's MAC Address be correlated with, or relevant with the port information of user side equipment under the user;
When the user will add certain multicast group, should send the request package that application adds certain multicast group; Request package is generally IGMP JOIN bag, with the form encapsulation of IP bag.
Access network recognizes IGMP JOIN bag, extracts the data (can be IP address, MAC Address, if can bring the port information of ustomer premises access equipment up with certain form, also can be the port information of ustomer premises access equipment) of identifying user identity wherein
Access network compares the user profile that the data of identifying user identity and access network keep, and belongs to validated user, just confirms that its multicast service can open, and just with its adding multicast group, otherwise refuses.
So just realized the user is obtained the authentication of multicast service.
(3) (the IPOE mode of saying has here comprised packet fixed ip address, DHCP to the IPOE mode
Dynamic assignment IP address obtains IP address, logging in network mode)
When the user adopted fixed ip address, generally by the associating information of network management configuration with attribute of user (as whether having multicast service) and some identifying user identity, this was referred to as binding; (,, also can be the port information of user side equipment) if can the port information of user side equipment be brought up with certain form as user's MAC Address, IP address etc.
If the user dynamically obtains the IP address by the DHCP mode, after the IP address obtains, we bind the attribute of user (as whether having multicast service) and the information of some identifying user identity (as user's MAC Address, IP address etc., if can bring the port information of user side equipment up with certain form, also can be the port information of user side equipment), the configuration of this user property is also generally undertaken by webmaster;
When the user will add certain multicast group, can send the request package that application adds certain multicast group; Request package is generally IGMP JOIN bag, with the form encapsulation of IP bag;
Access network recognizes IGMP JOIN bag, extracts the data of identifying user identity wherein, (can be IP address, MAC Address, if can bring the port information of user side equipment up with certain form, also can be the port information of user side equipment)
Access network device compares the user profile that the data of identifying user identity and access network keep, and confirms that its multicast service can open, and just with its adding multicast group, otherwise refuses.
So just realized the user is obtained the authentication of multicast service.
Because at present popular access way is two kinds of PPPOE and IPOE, can not use other access waies but do not get rid of.When the user uses other modes to insert, the method that can adopt the present invention to propose equally, the associating information that relevant user information and user are added multicast group gets up to realize the authentication to the multicast user.

Claims (4)

1, a kind of method that multicast is authenticated is characterized in that: comprise that step is as follows:
Step 1, user's logging in network, whether network equipment decision allows the user to use Internet resources;
Step 2, if network allow this user to use Internet resources, network equipment recording user relevant information, and
Be associated with this user configured service attribute (whether opening), generate a record as multicast service;
If network allows this user to use Internet resources, then enter step 7;
Step 3, user obtain general business of networking by network;
Step 4, user send the request package that application adds certain multicast group;
Step 5, the network equipment receive this request package and extraction user related information wherein;
Step 6, the network equipment are searched record with this user profile, if show that this user is a legal multicast user, it are added multicast group, and authentication is passed through; Otherwise, enter step 7;
Step 7, refuse this user and add multicast group.
2, the method that multicast is authenticated as claimed in claim 1, it is characterized in that: the user calls out by after authentication and the logging in network by PPPOE, access network is with the following relevant information of recording user: user account number, SessionID, user's MAC Address, IP address also can be the port informations of user side equipment.
3, the method that multicast is authenticated as claimed in claim 1 or 2 is characterized in that: in the described step 4, the user is sent the IGMP JOIN bag that the request package of applying for certain multicast group of adding is packaged into the form of IP bag.
4, the method that multicast is authenticated as claimed in claim 1 or 2 is characterized in that: the user related information that described step 5 is extracted wherein comprises: extracting user's IP address, MAC Address, can also be the port information that extracts ustomer premises access equipment.
CN 01114891 2001-07-09 2001-07-09 Method for authenticating group broadcast service Expired - Lifetime CN1252961C (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN 01114891 CN1252961C (en) 2001-07-09 2001-07-09 Method for authenticating group broadcast service

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN 01114891 CN1252961C (en) 2001-07-09 2001-07-09 Method for authenticating group broadcast service

Publications (2)

Publication Number Publication Date
CN1395388A true CN1395388A (en) 2003-02-05
CN1252961C CN1252961C (en) 2006-04-19

Family

ID=4661496

Family Applications (1)

Application Number Title Priority Date Filing Date
CN 01114891 Expired - Lifetime CN1252961C (en) 2001-07-09 2001-07-09 Method for authenticating group broadcast service

Country Status (1)

Country Link
CN (1) CN1252961C (en)

Cited By (22)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2004114619A1 (en) * 2003-06-26 2004-12-29 Huawei Technologies Co., Ltd A method and system for controlling the multicast source
WO2007131431A1 (en) * 2006-05-09 2007-11-22 Huawei Technologies Co. Ltd. A method, device, base station and multicast system for realizing the multicast service
CN100355299C (en) * 2004-11-16 2007-12-12 华为技术有限公司 Method for receiving multicast service
CN100362812C (en) * 2005-10-28 2008-01-16 华为技术有限公司 Managing method for user multicast power
WO2008052475A1 (en) * 2006-10-27 2008-05-08 Huawei Technologies Co., Ltd. A method, system and device for multicast authenticating
CN100393034C (en) * 2004-04-30 2008-06-04 北京航空航天大学 A source authentication method applied in multicast communication system
WO2008141585A1 (en) * 2007-05-23 2008-11-27 Huawei Technologies Co., Ltd. Method for joining group, server and client
CN100442765C (en) * 2004-06-21 2008-12-10 日立通讯技术株式会社 Multicast packet conveying device
WO2009003383A1 (en) * 2007-06-30 2009-01-08 Huawei Technologies Co., Ltd. Multicast method, network device and multicast system
CN1838766B (en) * 2005-03-22 2010-08-25 华为技术有限公司 IP broadband video service words list generating method
CN101453350B (en) * 2003-04-23 2010-11-10 华为技术有限公司 Implementing method for controllable multicast service
CN101917435A (en) * 2010-08-17 2010-12-15 中国电信股份有限公司 Method and system for implementing VOIP user authentication
CN1801711B (en) * 2006-01-18 2011-03-23 杭州华三通信技术有限公司 Multicast group member identification method and apparatus
CN101132297B (en) * 2006-08-21 2011-04-13 华为技术有限公司 Method and system for implementing multicast business, resource and admission control cell
CN101163002B (en) * 2006-10-12 2011-04-20 中兴通讯股份有限公司 Highly effective multicast authenticating method
CN101160858B (en) * 2005-07-22 2011-06-01 华为技术有限公司 Implementing method and an apparatus for enhancing the multicast service manageability
CN101466095B (en) * 2007-12-20 2011-06-01 株式会社日立制作所 Network connection method of non-portable terminal
CN101656872B (en) * 2009-08-25 2011-07-20 中兴通讯股份有限公司 Method and system for reducing time delay of switching channels of network TV
WO2012083729A1 (en) * 2010-12-23 2012-06-28 中兴通讯股份有限公司 Method and apparatus for transmitting multicast preview services
US8533750B2 (en) 2005-03-22 2013-09-10 Huawei Technologies Co., Ltd. Method and access device for generating IP broadband video service bill
CN101297574B (en) * 2005-10-25 2014-07-23 高通股份有限公司 Accessing telecommunication devices using mobile telephone numbers
CN104066109A (en) * 2014-06-30 2014-09-24 中国联合网络通信集团有限公司 Method, device and system for registration management of IMS network

Families Citing this family (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN201379072Y (en) 2009-02-11 2010-01-13 韩力 Improved atomizing electronic cigarette

Cited By (30)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101453350B (en) * 2003-04-23 2010-11-10 华为技术有限公司 Implementing method for controllable multicast service
WO2004114619A1 (en) * 2003-06-26 2004-12-29 Huawei Technologies Co., Ltd A method and system for controlling the multicast source
CN100346605C (en) * 2003-06-26 2007-10-31 华为技术有限公司 A method and system for multicast source control
US7855956B2 (en) 2003-06-26 2010-12-21 Huawei Technologies Co., Ltd. Method and system for controlling the multicast source
CN100393034C (en) * 2004-04-30 2008-06-04 北京航空航天大学 A source authentication method applied in multicast communication system
CN100442765C (en) * 2004-06-21 2008-12-10 日立通讯技术株式会社 Multicast packet conveying device
CN100355299C (en) * 2004-11-16 2007-12-12 华为技术有限公司 Method for receiving multicast service
US9179172B2 (en) 2005-03-22 2015-11-03 Huawei Technologies Co., Ltd. Method and access device for implementing IP broadband video service
US8533750B2 (en) 2005-03-22 2013-09-10 Huawei Technologies Co., Ltd. Method and access device for generating IP broadband video service bill
US9762940B2 (en) 2005-03-22 2017-09-12 Huawei Technologies Co., Ltd. Method and access device for implementing IP broadband video service
CN1838766B (en) * 2005-03-22 2010-08-25 华为技术有限公司 IP broadband video service words list generating method
CN101160858B (en) * 2005-07-22 2011-06-01 华为技术有限公司 Implementing method and an apparatus for enhancing the multicast service manageability
US8270294B2 (en) 2005-07-22 2012-09-18 Huawei Technologies Co., Ltd. Method and apparatus for implementing multicast service
CN101297574B (en) * 2005-10-25 2014-07-23 高通股份有限公司 Accessing telecommunication devices using mobile telephone numbers
CN100362812C (en) * 2005-10-28 2008-01-16 华为技术有限公司 Managing method for user multicast power
CN1801711B (en) * 2006-01-18 2011-03-23 杭州华三通信技术有限公司 Multicast group member identification method and apparatus
WO2007131431A1 (en) * 2006-05-09 2007-11-22 Huawei Technologies Co. Ltd. A method, device, base station and multicast system for realizing the multicast service
CN101132297B (en) * 2006-08-21 2011-04-13 华为技术有限公司 Method and system for implementing multicast business, resource and admission control cell
CN101163002B (en) * 2006-10-12 2011-04-20 中兴通讯股份有限公司 Highly effective multicast authenticating method
WO2008052475A1 (en) * 2006-10-27 2008-05-08 Huawei Technologies Co., Ltd. A method, system and device for multicast authenticating
WO2008141585A1 (en) * 2007-05-23 2008-11-27 Huawei Technologies Co., Ltd. Method for joining group, server and client
WO2009003383A1 (en) * 2007-06-30 2009-01-08 Huawei Technologies Co., Ltd. Multicast method, network device and multicast system
CN101466095B (en) * 2007-12-20 2011-06-01 株式会社日立制作所 Network connection method of non-portable terminal
CN101656872B (en) * 2009-08-25 2011-07-20 中兴通讯股份有限公司 Method and system for reducing time delay of switching channels of network TV
CN101917435A (en) * 2010-08-17 2010-12-15 中国电信股份有限公司 Method and system for implementing VOIP user authentication
CN102546195A (en) * 2010-12-23 2012-07-04 中兴通讯股份有限公司 Transmission method of multicast preview services
WO2012083729A1 (en) * 2010-12-23 2012-06-28 中兴通讯股份有限公司 Method and apparatus for transmitting multicast preview services
CN102546195B (en) * 2010-12-23 2015-07-22 中兴通讯股份有限公司 Transmission method of multicast preview services
CN104066109A (en) * 2014-06-30 2014-09-24 中国联合网络通信集团有限公司 Method, device and system for registration management of IMS network
CN104066109B (en) * 2014-06-30 2018-01-26 中国联合网络通信集团有限公司 The registration management method, apparatus and system of IMS network

Also Published As

Publication number Publication date
CN1252961C (en) 2006-04-19

Similar Documents

Publication Publication Date Title
CN1252961C (en) Method for authenticating group broadcast service
CN1192574C (en) Controlled group broadcasting system and its realizing method
CN1167227C (en) Method for switching in virtual local area network of the access network with mixed optical fiber and coaxial line
US7653933B2 (en) System and method of network authentication, authorization and accounting
CN101110847B (en) Method, device and system for obtaining medium access control address
EP1876754A1 (en) Method system and server for implementing dhcp address security allocation
US20020146005A1 (en) Method for billing in a telecommunications network
CN1671101A (en) Access point and method for controlling access point
CN1184776C (en) Method for the point-to-point protocol log-on user to obtain Internet protocol address
CN101047618A (en) Method and system for acquiring network route information
CN101064714A (en) Service dispensing method
CN1553674A (en) Method for wideband connection server to obtain port numbers of its uers
CN1674579A (en) Method for supporting PPPoA on wideband switch-in equipment
US20040205359A1 (en) Packet filtering method for securing security in communications and packet communications system
CN100352203C (en) Method for controlling wide band network user to access network
CN1176540C (en) Method for realizing switch in with mixed multiple users'types in Ethernet network switch in devices
CN100338909C (en) Method for discriminating service flow
CN1309213C (en) Network access anthentication method for improving network management performance
US7353405B2 (en) Method and systems for sharing network access capacities across internet service providers
CN1299476C (en) Method for H.323 agent server to register on gatekeeper from terminals after being agent of NAT
CN1204713C (en) Management method of user's connecting network in wideband network
CN1265579C (en) Method for network access user authentication
AU2003231627B2 (en) A multi-layer user management method for multicasting proxy
CN1404259A (en) Business node-controlling multicasting method
CN1298145C (en) Control device and method for realizing broad band connecting server multiple business united interface

Legal Events

Date Code Title Description
C06 Publication
PB01 Publication
C10 Entry into substantive examination
SE01 Entry into force of request for substantive examination
C14 Grant of patent or utility model
GR01 Patent grant
CX01 Expiry of patent term
CX01 Expiry of patent term

Granted publication date: 20060419