JP2014027550A - Mobile communication system, mobile station, network device, and mobile communication method - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a mobile communication system, a mobile station, a network device and a mobile communication method, capable of rapidly transmitting a connection establishment request message to the network of the same APN without deteriorating usability even when a user name or a password is erroneously input.SOLUTION: When connection with a UE 20 is rejected, a GGSN 60/PGW 100 transmits an activate PDP context reject or a PDN connectivity reject being a reject message to reject a connection establishment request message to the UE 20. When a re-input password included in a packet communication request acquired after the reception of a reject message is different from a password that has input last time, the UE 20 transmits a connection establishment request message including a user name and a re-input password to the GGSN 60/PGW 100.

Description

  The present invention relates to a mobile communication system, a mobile station, a network device, and a mobile communication method for transmitting and receiving a connection establishment request message including a user name and a password.

  Packet communication requests in 3G (W-CDMA) and Long Term Evolution (LTE) specified in the 3rd Generation Partnership Project (3GPP) are sent by the mobile station (UE) for PDP Context Request (for 3G), PDN Connectivity It is started by sending a connection establishment request message such as Request (in the case of LTE).

  Further, Protocol Configuration Option (PCO) can be set in these connection establishment request messages, and the user name (username) and password (password) can be included in the PCO (for example, Non-Patent Document 1). By including the user name and password in the connection establishment request message, user authentication on the service provider network (Access Point Name (APN)) side becomes possible. PAP (RFC1334) or CHAP (RFC1994) can be used for user authentication.

3GPP TS 29.061 V11.1.0 Subclause 16.4, 3rd Generation Partnership Project; Technical Specification Group Core Network and Terminals; Interworking between the Public Land Mobile Network (PLMN) supporting packet based services and Packet Data Networks (PDN) (Release 11), 3GPP, June 2012

  However, user authentication by including the above-described conventional user name and password in the connection establishment request message has the following problems. In other words, if the user name or password is incorrect and the user name and password authentication fails by the service provider network (specifically, the Radius server), a rejection message (Active PDP Context Reject or PDN Connectivity) for the connection establishment request message Reject) is notified from the network device (GGSN or P-GW) to the UE, but the UE may recognize that the connection establishment request message has been rejected due to failure of the user name and password authentication. Therefore, retransmission of the connection establishment request message including the same user name and password is repeated. For this reason, if the implementation is such that when the authentication failure reaches the specified number of times in the network of the service provider, the login by the user name is restricted (account lock), even if the user has not changed the password etc. Regardless, there is a problem that login is restricted.

  Note that if the connection establishment request message is rejected for a certain reason, 3GPP does not send the connection establishment request message to the network of the same APN until the UE starts the backoff timer and the backoff timer expires. The above-mentioned problem can be solved by setting the back-off timer to an infinite value. In addition, the above-described problem may be solved even by using a cause value of an operation that suppresses retransmission until a specific condition such as an IP version change is changed. However, since the connection establishment request message for the same APN network cannot be sent until the UE is turned OFF / ON or the USIM is inserted / removed, etc. Operation such as power OFF / ON is required, which is not preferable because usability is significantly reduced.

  Therefore, the present invention has been made in view of such a situation, and even when a user name or password input error occurs, a connection establishment request message is promptly transmitted to the network of the same APN without impairing usability. An object of the present invention is to provide a mobile communication system, a mobile station, a network device, and a mobile communication method.

  A first feature of the present invention is a mobile comprising a connection establishment request message transmission unit that transmits a connection establishment request message including a user name and a password used in a service provider network provided by a service provider via a radio base station. A mobile communication system including a station and a network device including a connection determination unit that determines whether to permit connection with the mobile station based on the connection establishment request message transmitted by the mobile station, The network device includes a message transmission unit that transmits a rejection message for rejecting the connection establishment request message to the mobile station when the connection determination unit rejects the connection with the mobile station, Included in the packet communication request obtained after receiving the rejection message If the entered password is different from the password entered last, and summarized in that comprises a transmission control unit that transmits the connection establishment request message including the user name and the re-entered password toward the network device.

  A second feature of the present invention is a connection establishment request message for transmitting a connection establishment request message including a user name and a password used in a service provider network provided by a service provider to a network device via a radio base station. A mobile station including a transmission unit, wherein a re-entry password included in a packet communication request acquired after receiving a rejection message for rejecting the connection establishment request message is different from the previously input password, the user name and The gist of the present invention is to include a transmission control unit that transmits a connection establishment request message including the re-input password to the network device.

  According to a third aspect of the present invention, a connection with a mobile station that has transmitted the connection establishment request message is permitted based on a connection establishment request message including a user name and a password used in a service provider network provided by a service provider. A network device including a connection determination unit that determines whether or not to perform a connection, and when the connection determination unit rejects connection with the mobile station, a rejection message for rejecting the connection establishment request message is sent to the mobile station. The gist of the invention is to provide a message transmission unit for transmission.

  According to a fourth aspect of the present invention, the mobile station transmits a connection establishment request message including a user name and a password used in a service provider network provided by a service provider, to the network device; Determining whether to permit connection with the mobile station based on the connection establishment request message transmitted by the mobile station, and when the network device refuses connection with the mobile station, And a step of transmitting a rejection message for rejecting the connection establishment request message to the mobile station.

  According to the features of the present invention, even when an input error of a user name or a password occurs, a mobile communication system, a mobile station, and a network device capable of promptly transmitting a connection establishment request message to the same APN network without impairing usability And a mobile communication method.

1 is an overall schematic configuration diagram of a mobile communication system 1 according to an embodiment of the present invention. It is a functional block block diagram of UE20 which concerns on embodiment of this invention. It is a functional block block diagram of GGSN60 / PGW100 which concerns on embodiment of this invention. It is a figure which shows the communication sequence which concerns on ISP server 10 and network authentication operation | movement by UE20 which concerns on embodiment of this invention. It is a functional block block diagram of UE20 which concerns on the example of a change of this invention. It is a figure which shows the communication sequence which concerns on ISP server 10 and network authentication operation | movement by UE20 which concerns on this example of a change of this invention.

  Next, an embodiment of the present invention will be described. In the following description of the drawings, the same or similar parts are denoted by the same or similar reference numerals. However, it should be noted that the drawings are schematic and ratios of dimensions and the like are different from actual ones.

  Accordingly, specific dimensions and the like should be determined in consideration of the following description. Moreover, it is a matter of course that portions having different dimensional relationships and ratios are included between the drawings.

(1) Overall Schematic Configuration of Mobile Communication System FIG. 1 is an overall schematic configuration diagram of a mobile communication system 1 according to the present embodiment. As shown in FIG. 1, a mobile communication system 1 includes a mobile station 20 (hereinafter referred to as UE20, a radio base station 30 (hereinafter referred to as NB30), a radio base station 70 (hereinafter referred to as eNB70), and a network connected to NB30 or eNB70. The mobile communication system 1 includes a plurality of radio access networks, specifically, 3G (W-CDMA) and Long Term Evolution (LTE) defined in 3GPP.NB30 is a radio base according to 3G ENB70 is a radio base station according to LTE, UE20 supports 3G and LTE, and can execute radio communication with NB30 and eNB70.In addition to 3G and LTE, 2G (GSM (registered trademark), etc.) may be included.

  As shown in FIG. 1, the network device on the 3G side included in the mobile communication system 1 includes a Radio Network Controller 40 (hereinafter referred to as RNC 40) that controls the UE 20 via the NB 30, and a Serving GPRS Support that is a packet access control node. Node 50 (hereinafter referred to as SGSN50) and Gateway GPRS Support Node 60 (hereinafter referred to as GGSN60), which is a packet access gateway node. The LTE network device included in the mobile communication system 1 is a mobility management entity 80 (hereinafter referred to as MME80) that performs mobility control and bearer control of the UE 20, and a visited packet switch that accommodates the LTE access system. Examples include Serving Gateway 90 (hereinafter referred to as SGW90) and Packet Data Network Gateway 100 (hereinafter referred to as PGW100), which is a packet switch that performs IP address assignment and packet transfer to SGW. It should be noted that the network device constituting the mobile communication system 1 is not limited to the device shown in FIG. Moreover, these network devices control communication by UE20 via a radio base station (NB30, eNB70), and the core network in the mobile communication system 1 is comprised by these network devices.

  The mobile communication system 1 is connected to the IP network 5 via the network device described above. The IP network 5 is a communication network based on the Internet protocol, and includes the Internet, a Local Area Network not connected to the Internet, a service provider network provided by a service provider, and the like. An ISP server 10 is connected to the IP network 5.

  The ISP server 10 is a server provided by a communication service provider (service provider), and includes a function as a RADIUS server that authenticates a user of the service and a DHCP server that issues an IP address. In addition, an APN (Access Point Name) is assigned to the service provider network as identification information for identifying the network.

(2) Functional Block Configuration of Mobile Communication System Next, a functional block configuration of the mobile communication system 1 will be described. Specifically, the functional block configurations of UE 20 and GGSN 60 / PGW 100 will be described.

(2.1) UE20
FIG. 2 is a functional block configuration diagram of the UE 20. As shown in FIG. 2, the UE 20 includes a packet communication request processing unit 21, a user information storage unit 23, a transmission control unit 25, and a message processing unit 27. The packet communication request processing unit 21, the user information storage unit 23, and the transmission control unit 25 (user name and password authentication part) operate in the application (APL) layer, and the transmission control unit 25 (message transmission / reception control part) and message processing unit 27 operates in Terminal Equipment / Mobile Terminal (TE / MT layer) lower than the application layer.

  The packet communication request processing unit 21 transmits a packet communication request for requesting the start of a predetermined communication service (such as a mail service) to the transmission control unit 25 when the UE 20 is turned on or the user performs a transmission operation. Specifically, the packet communication request processing unit 21 transmits a packet communication request for a network having a specific Access Point Name (APN).

  The user information storage unit 23 stores user information of the UE 20. Specifically, the user information storage unit 23 stores a user name (username) and a password (password) required when the user of the UE 20 connects to the ISP server 10 (network authentication). More specifically, the user information storage unit 23 stores a combination of a user name and a password input by the user. Further, the user information storage unit 23 can store a combination of a user name and a password for each APN in association with a service provider (APN).

  The transmission control unit 25 controls message transmission / reception by the message processing unit 27. Specifically, the transmission control unit 25 controls transmission of a connection establishment request message by the message processing unit 27. The connection establishment request message is Activate PDP Context Request (when UE20 is accessing 3G) or PDN Connectivity Request (when UE20 is accessing LTE).

  In particular, the outgoing call control unit 25 rejects the connection establishment request message transmitted by the message processing unit 27, specifically, Activate PDP Context Reject (when the UE 20 is accessing 3G) or PDN Connectivity Reject ( When UE20 is accessing LTE), the operation is controlled.

  After receiving the rejection message, the transmission control unit 25 (user name and password authentication part) re-enters the password included in the packet communication request acquired from the packet communication request processing unit 21, that is, the user authentication has failed, If the re-entered password is different from the previously entered password, a connection establishment request message including the user name and the re-entered password is transmitted to the GGSN 60 or PGW 100 (network device). On the other hand, when the re-entry password is the same as the previously entered password, the transmission control unit 25 (user name and password authentication part) stops sending the connection establishment request message.

  In the present embodiment, as described above, the outgoing call control unit 25 (user name and password authentication part) operates in the application layer, and in the application layer, whether or not the re-entry password is different from the previously entered password. Determine.

  The message processing unit 27 processes various messages transmitted / received to / from the core network via the radio base station. In particular, in the present embodiment, the message processing unit 27 transmits a connection establishment request message (Activate PDP Context Request, PDN Connectivity Request) requesting connection establishment with the core network via the radio base station. More specifically, the message processing unit 27 transmits a connection establishment request message including the user name and password used in the service provider network provided by the service provider via the radio base station. In the present embodiment, the message processing unit 27 constitutes a connection establishment request message transmission unit.

  In addition, the message processing unit 27 receives a rejection message (Activate PDP Context Reject, PDN Connectivity Reject) from the core network.

(2.2) GGSN60 / PGW100
FIG. 3 is a functional block configuration diagram of the GGSN60 / PGW100. That is, the GGSN 60 and the PGW 100 have the same function. The GGSN 60 functions as a network device on the 3G side, and the PGW 100 functions as a network device on the LTE side.

  The GGSN 60 and the PGW 100 include a connection establishment request message reception unit 101, an access request processing unit 103, a connection determination unit 105, and a connection response message transmission unit 107.

  The connection establishment request message receiving unit 101 receives a connection establishment request message (Activate PDP Context Request, PDN Connectivity Request) transmitted by the UE 20.

  The access request processing unit 103 transmits an access request to the ISP server 10 using the user name and password included in the connection establishment request message received by the connection establishment request message receiving unit 101. Further, the access request processing unit 103 receives the result (permission or rejection) of the access request from the ISP server 10 and notifies the connection determination unit 105 of the result. Note that PAP (RFC 1334) or CHAP (RFC 1994) is used for the user authentication.

  The connection determination unit 105 determines whether or not to permit connection with the UE 20 based on the connection establishment request message transmitted by the UE 20. Specifically, when the access request processed by the access request processing unit 103 is permitted by the ISP server 10, the connection determination unit 105 determines that the connection determination unit 105 is a message that permits a connection request by a connection establishment request message ( The connection response message transmission unit 107 is requested to transmit (Activate PDP Context Accept, Activate Default EPS Bearer Context Request). On the other hand, when the access request is rejected by the ISP server 10, the connection determination unit 105 requests the connection response message transmission unit 107 to transmit a rejection message (Activate PDP Context Reject, PDN Connectivity Reject) that rejects the connection establishment request message. To do. The Activate PDP Context Reject and the PDN Connectivity Reject include information (Flag or Cause) indicating the reason for refusal (the access request has been rejected by the ISP server 10).

  The connection response message transmission unit 107 transmits a connection response message based on an instruction from the connection determination unit 105. In particular, when the connection determination unit 105 rejects the connection with the UE 20, the connection response message transmission unit 107 transmits the rejection message described above to the UE 20. In the present embodiment, the connection response message transmission unit 107 constitutes a message transmission unit.

  Specifically, the connection response message transmission unit 107 transmits to the UE 20 a rejection message including a reason indicating that the connection establishment request message is rejected due to a mismatch between the user name and the password in the service provider network.

(3) Operation of Mobile Communication System Next, the operation of the mobile communication system 1 described above will be described. Specifically, an operation in which the UE 20 performs network authentication with the ISP server 10 will be described.

  FIG. 4 shows a communication sequence related to the ISP server 10 and network authentication operation by the UE 20. As shown in FIG. 4, when the UE 20 is turned on or a transmission operation is performed by the user, a packet communication request (packet profile establishment request) is executed in the UE 20 and a connection establishment request message (Activate PDP Context Request or PDN) Connectivity Request) is sent to the core network (S10 to S30).

  The packet communication request includes a user name (username) and a password (password) required when the user of the UE 20 connects to the ISP server 10 (network authentication). The packet profile includes PDP (Packet Data Protocol) Context (for 3G) or EPS (Evolved Packet System) Bearer Context (for LTE), identification information (APN) of the destination packet network, and IP address Etc. are included.

  The core network (GGSN60 / PGW100) transmits an access request (access request) to the ISP server 10 using the user name and password included in the received connection establishment request message (S40). The ISP server 10 notifies the GGSN 60 / PGW 100 that access is rejected (Access Reject) because the user name and password included in the received access request do not match (S50).

  The GGSN60 / PGW100 sends a rejection message (Activate PDP Context Reject or PDN Connectivity Reject) to UE20 based on an access request to ISP server 10, specifically, a notification that network authentication by ISP server 10 has been rejected. Send (S60).

  The UE 20 that has received the rejection message notifies the application that the combination of the user name and password cannot connect to the ISP server 10 (service provider network) (S70). Moreover, UE20 (application) memorize | stores the combination of the said user name and password as user information.

  Then, the packet communication request is executed again using the combination of the user name and the password, that is, when the user inputs the same combination of the user name and the password again, the UE 20 is based on the stored user information, The connection establishment request message is not transmitted to the core network, and it is determined as NG (S110, S120).

  Note that the UE 20 displays (pop-up display) a message notifying the user that the user name and password cannot be connected to the ISP server 10 (service provider network) in combination with the image display unit (not shown). May be. As a result, the user (UE20) can be prompted to input a combination of a user name and a password different from each other.

  On the other hand, a packet communication request is executed using a combination different from the previous combination of the user name and password, specifically, a different password, that is, the user inputs a combination of the user name and password different from the previous one. Then, UE20 transmits a connection establishment request message to the core network based on the stored user information (S210 to S240). The GGSN 60 / PGW 100 transmits an access request (Access Request) to the ISP server 10 using the user name and password included in the received connection establishment request message (S250). As a result, if the combination of the user name and password is registered in the ISP server 10, the access request is permitted.

(4) Modification Example Next, a modification example of the UE 20 described above will be described. FIG. 5 is a functional block configuration diagram of the UE 20 according to the modified example. The UE 20 shown in FIG. 5 includes a Protocol Configuration Option storage unit 29 instead of the user information storage unit 23. In this modified example, the packet communication request processing unit 21 operates in the application (APL) layer, and the transmission control unit 25, the message processing unit 27, and the PCO storage unit 29 are connected to the Terminal Equipment / Mobile Terminal (TE / MT layer). ).

  The PCO storage unit 29 stores the contents of the PCO set with the execution of the packet communication request. The PCO includes a user name and password used for network authentication in the ISP server 10 described above. The details of PCO are described in 3GPP TS 24.008 10.5.6.3.

  In addition, the transmission control unit 25 according to the present modification example determines whether or not the re-entry password described above is different from the previously entered password in the TE / MT layer positioned below the application layer. Specifically, the transmission control unit 25 determines whether or not the re-entered password is different from the previously entered password based on the password included in the Protocol Configuration Option. That is, the outgoing call control unit 25 compares the password (previous password) stored in the PCO storage unit 29 with the password (current password) included in the connection establishment request message, and determines whether the passwords match. Determine whether. When the password is different, the transmission control unit 25 transmits a connection establishment request message to the GGSN 60 / PGW 100. Since the PCO is notified from the packet communication request processing unit 21 (application layer) and includes information other than the user name and password, the transmission control unit 25 is re-input including information other than the user name and password. It is determined in bit units whether the entered password is different from the previously entered password.

  FIG. 6 shows a communication sequence related to the ISP server 10 and the network authentication operation by the UE 20 according to this modification. Hereinafter, a description will be mainly given of portions different from the communication sequence shown in FIG.

  As shown in FIG. 6, the operations in steps S310 to S390 are similar to the operations in S10 to S80 (see FIG. 4). In this modified example, when a packet communication request is executed, the UE 20 creates a PCO and stores the contents (user name and password) of the created PCO (S330). When receiving the rejection message, the UE 20 treats the stored PCO as NG (that is, network authentication failure) (S380).

  Also, a packet communication request is executed using a combination different from the previous combination of the user name and password, specifically, a different password, that is, the user inputs a combination of the user name and password different from the previous one. Then, UE 20 transmits a connection establishment request message to the core network based on the stored PCO information (S510 to S540). The GGSN 60 / PGW 100 transmits an access request (Access Request) to the ISP server 10 using the user name and password included in the received connection establishment request message (S550). In other words, the determination whether or not the combination of the user name and the password matches is executed in the application layer (FIG. 4) or executed using PCO in the TE / MT layer (FIG. 6). As for the communication sequence, the above-described embodiment and the present modification are substantially the same.

(5) Operation / Effect According to the mobile communication system 1, the UE 20 is the password in which the re-entry password included in the packet communication request acquired after receiving the rejection message (Activate PDP Context Reject, PDN Connectivity Reject) was previously input. If it is different from the above, a connection establishment request message including the user name and the re-entry password is transmitted to the GGSN 60 / PGW 100. On the other hand, when the re-input password is the same as the previously input password, the UE 20 stops transmitting the connection establishment request message.

  For this reason, even if a user name or password input error occurs, login to the service provider network is restricted (account lock) by repeatedly resending the connection establishment request message including the same user name and password. Can be avoided. Further, when a combination of a different user name and password is input, a connection establishment request message is promptly transmitted, so that usability is not impaired. That is, according to the mobile communication system 1, even when an input error of the user name or password occurs, the connection establishment request message can be promptly transmitted to the same APN network (service provider network) without impairing usability.

  In the present embodiment, a rejection message including information (Flag or Cause) indicating that the connection establishment request message is rejected due to a mismatch between the user name and the password in the ISP server 10 (service provider network) is sent to the UE 20. Sent. For this reason, the UE 20 can quickly and reliably recognize that the connection establishment request message has been rejected due to a mismatch between the user name and the password.

(6) Other Embodiments As described above, the contents of the present invention have been disclosed through one embodiment of the present invention. However, it is understood that the description and drawings constituting a part of this disclosure limit the present invention. should not do. From this disclosure, various alternative embodiments will be apparent to those skilled in the art.

  For example, in the above-described embodiment of the present invention, the GGSN 60 or the PGW 100 has determined whether or not the UE 20 can connect to the ISP server 10, but other network devices such as the SGSN 50 and the MME 80 may determine whether or not the connection is possible. Good.

  In the above-described embodiment, the ISP server 10 (service provider network) has been described as an example. However, the service provider network includes an intranet or the like. That is, the network authentication is not limited to the network (service) provided by the service provider as long as it performs network authentication.

  As described above, the present invention naturally includes various embodiments that are not described herein. Therefore, the technical scope of the present invention is defined only by the invention specifying matters according to the scope of claims reasonable from the above description.

  The present invention may be expressed as follows. A first feature of the present invention is that a connection establishment request message (Activate PDP Context Request, PDN Connectivity Request) including a user name and a password used in a service provider network provided by a service provider is transmitted to a radio base station (NB30, eNB70). ) To determine whether to permit connection between UE 20 (mobile station) including a connection establishment request message transmission unit to be transmitted via the mobile station based on the connection establishment request message transmitted by the mobile station A mobile communication system including a network device (GGSN60 / PGW100) including a connection determination unit 105 (connection determination unit), wherein the network device is rejected by the connection determination unit with the mobile station, Reject message (Activate PDP Context Reject, PDN Connectivity Reject) to reject the connection establishment request message A message transmission unit for transmitting to the mobile station, the mobile station, if the re-entry password included in the packet communication request acquired after receiving the rejection message is different from the password previously input, The gist of the invention is that it includes a transmission control unit 25 (transmission control unit) that transmits a connection establishment request message including the re-input password to the network device.

  In the first feature of the present invention, the transmission control unit may stop transmission of a connection establishment request message when the re-input password is the same as the previously input password.

  In the first feature of the present invention, the transmission control unit may determine in the application layer whether or not the re-input password is different from the previously input password.

  In the first feature of the present invention, the transmission control unit may determine whether or not the re-entry password is different from the previously inputted password in the TE / MT layer positioned below the application layer. Good.

  In the first aspect of the present invention, the message transmitting unit includes the rejection message including a reason indicating that the connection establishment request message is rejected due to a mismatch between the user name and the password in the service provider network. May be transmitted to the mobile station.

  A second feature of the present invention is a connection establishment request message for transmitting a connection establishment request message including a user name and a password used in a service provider network provided by a service provider to a network device via a radio base station. A mobile station including a transmission unit, wherein a re-entry password included in a packet communication request acquired after receiving a rejection message for rejecting the connection establishment request message is different from the previously input password, the user name and The gist of the present invention is to include a transmission control unit that transmits a connection establishment request message including the re-input password to the network device.

  According to a third aspect of the present invention, a connection with a mobile station that has transmitted the connection establishment request message is permitted based on a connection establishment request message including a user name and a password used in a service provider network provided by a service provider. A network device including a connection determination unit that determines whether or not to perform a connection, and when the connection determination unit rejects connection with the mobile station, a rejection message for rejecting the connection establishment request message is sent to the mobile station. The gist of the invention is to provide a message transmission unit for transmission.

  According to a fourth aspect of the present invention, the mobile station transmits a connection establishment request message including a user name and a password used in a service provider network provided by a service provider, to the network device; Determining whether to permit connection with the mobile station based on the connection establishment request message transmitted by the mobile station, and when the network device refuses connection with the mobile station, And a step of transmitting a rejection message for rejecting the connection establishment request message to the mobile station.

1 ... Mobile communication system
5 ... IP network
10 ... ISP server
20 ... UE
21 ... Packet communication request processor
23… User information storage
25. Call control section
27 ... Message processing section
29… PCO memory
30 ... NB
40… RNC
50 ... SGSN
60 ... GGSN
70 ... eNB
80 ... MME
90 ... SGW
100 ... PGW
101 ... Connection establishment request message receiver
103 ... Access request processing part
105 ... Connection judgment part
107: Connection response message transmitter

Claims (10)

A mobile station comprising a connection establishment request message transmission unit for transmitting a connection establishment request message including a user name and a password used in a service provider network provided by a service provider via a radio base station;
A mobile communication system comprising: a network device including a connection determination unit that determines whether to permit connection with the mobile station based on the connection establishment request message transmitted by the mobile station;
The network device includes a message transmission unit that transmits a rejection message for rejecting the connection establishment request message to the mobile station when the connection determination unit rejects the connection with the mobile station,
When the re-entry password included in the packet communication request acquired after receiving the rejection message is different from the previously input password, the mobile station sends a connection establishment request message including the user name and the re-entry password. A mobile communication system including a transmission control unit that transmits to a network device.   2. The mobile communication system according to claim 1, wherein, when the re-input password is the same as the previously input password, the transmission control unit stops transmission of a connection establishment request message.   The mobile communication system according to claim 1, wherein the transmission control unit determines whether or not the re-input password is different from the previously input password in the application layer.   The mobile communication system according to claim 1, wherein the transmission control unit determines whether or not the re-entry password is different from the previously inputted password in a TE / MT layer positioned below the application layer.   The message transmission unit transmits the rejection message including a reason indicating that the connection establishment request message is rejected due to a mismatch between the user name and the password in the service provider network to the mobile station. The mobile communication system according to 1. A mobile station including a connection establishment request message transmission unit that transmits a connection establishment request message including a user name and a password used in a service provider network provided by a service provider to a network device via a wireless base station. ,
If the re-entry password included in the packet communication request acquired after receiving the rejection message for rejecting the connection establishment request message is different from the previously input password, the connection establishment request message including the user name and the re-entry password A mobile station comprising a transmission control unit that transmits the message to the network device. Connection determination for determining whether to permit connection with the mobile station that has transmitted the connection establishment request message based on a connection establishment request message including a user name and password used in a service provider network provided by a service provider A network device comprising a unit,
A network apparatus comprising: a message transmission unit that transmits a rejection message for rejecting the connection establishment request message to the mobile station when the connection determination unit rejects the connection with the mobile station.   The message transmission unit transmits the rejection message including a reason indicating that the connection establishment request message is rejected due to a mismatch between the user name and the password in the service provider network to the mobile station. 8. The network device according to 7. A mobile station sending a connection establishment request message including a user name and password used in a service provider network provided by a service provider to a network device;
Determining whether the network device permits connection with the mobile station based on the connection establishment request message transmitted by the mobile station;
And a step of transmitting, to the mobile station, a rejection message for rejecting the connection establishment request message when the network device rejects the connection with the mobile station.   If the re-entry password included in the packet communication request acquired after receiving the rejection message is different from the previously input password, the mobile station sends a connection establishment request message including the user name and the re-entry password. The mobile communication method according to claim 9, further comprising a step of transmitting to a network device.

Images