WO2007112690A1

WO2007112690A1 - Route updating method and system in mobile communication system

Info

Publication number: WO2007112690A1
Application number: PCT/CN2007/001058
Authority: WO
Inventors: Zaifeng Zong; Wenruo Zhu
Original assignee: Zte Corporation
Priority date: 2006-04-03
Filing date: 2007-04-02
Publication date: 2007-10-11
Also published as: CN100473216C; CN101052200A

Abstract

A route updating method in mobile communication system includes: after a mobile equipment in idle condition re-selects network, it transmits a register request message to the serving node of new network side; after the serving node of the new network side receives the register request message, it acquires mobile security league information from the serving node of old network side or HSS of the mobile equipment; the serving node of the new network side transmits a mobile IP register request message to home agent of the mobile equipment, the home agent processes the mobile IP register request message; the serving node of new network side transmits a register accept acknowledge message to the mobile equipment. A route updating system includes: a mobile equipment, a serving node of new network side, a serving node of old network side, a HSS and a home agent. By using the present system and method, a UE without mobile IP function in idle condition could use mobile IP to perform route updating when the roaming across systems happens, without adding radio interface signaling and the flow complexity.

Description

Route update method and system in mobile communication system

TECHNICAL FIELD The present invention relates to a route update method and system in a mobile communication system.

Background technique

In the prior art, a system block diagram for using a mobile IP for routing update is shown in FIG. 1, wherein:

SGSN (Serving GPRS Supporting Node): 2G/3G network packet domain functional entity, responsible for mobility management, session management, forwarding user data packets, storing UE (mobile device) context information, generating temporary identification and Assign it to the UE, and be responsible for authenticating the user, etc.;

GGSN (Gateway GPRS Supporting Node): 2G/3G network packet domain function entity, responsible for session management, forwarding user data packets, etc., is a border gateway between 2G/3G network and external network; MME ( Mobility Management Entity, mobility management node): Control plane function entity, responsible for managing and storing UE context (such as UE/user identity, mobility management state, user security parameters, etc.), generating temporary identifiers and assigning them to the UE, when the UE is camped Responsible for authenticating the user in the tracking area or the network;

UPE (User Plane Entity): User plane function entity, user plane data routing processing, terminating the downlink data of the UE in idle state, and when the downlink data sent to the UE arrives, initiate paging, manage and store the UE. The context includes the parameters of the IP bearer service or the internal routing information of the network. The 2G/3G UPE is the UPE serving the 2G/3G network, and the 2G/3G UPE is also the SGSN+GGSN. The SAE UPE is the UPE in the SAE network.

User Plane Anchor: User plane anchor, which is the data entry point for boundary field B. Responsible for mobility management within Boundary Domain B, and is the border gateway of Boundary Domain B, responsible for forwarding user data to different UPEs within Boundary Domain B.

IASA (Inter AS Anchor, Mobility Management Anchor between Multiple Access Systems): This anchor is a mobility tube that supports 3GHP internal and 3GPP and non-3GPP defined multiple access systems User plane functional entity. IAS A has the function of a mobile IP home agent.

In the above system, the method for routing update is as shown in FIG. 2, which specifically includes the following steps:

201. The UE in idle state reselects the 3GPP access system.

202. The access system reselection triggers the UE network registration;

203. MME/UPE authentication UE. After the authentication succeeds, the UE obtains the IP address belonging to the boundary domain B.

IPEdg _eB . For route optimization, the User Plane Anchor can be integrated with the UPE;

204. The new MME/UPE to the HSS (Home Subscriber Server) registers it as a UE service;

205. The context of the UE in the SGSN/GGSN is deleted under the notification of the network, or deleted when the timer expires;

206. The HSS sends a registration confirmation message to the MME/UPE.

207. The MME/UPE sends a network registration acceptance to the UE.

208. The UE registers the IP address of the border domain with the IASA. This step can be based on Mobile IPv4 or Mobile IPv6. The UE sends a Mobile IP Registration Request message to the IASA (Home Agent HA), in which IP _{EdgeB is} used as the Mobile IP Address of Interest (CoA, Care of address). The packet arriving at the IASA is tunneled to the user plane anchor. The tunnel terminates at the terminal (in the FA co-located mode using Mobile IPv6 or Mobile IPv4) or terminates at the user plane anchor (when using the FA mode FA located mode of Mobile IPv4).

In existing systems and methods for routing updates, mobile devices are required to have mobile IP functions (mobile IPv4 or mobile IPv6), and mobile devices that do not have mobile IP capabilities cannot use mobile IP for mobility management. .

Summary of the invention

The present invention is directed to enabling mobile devices that do not have mobile IP to also use mobile IP for mobility management. The problem to be solved by the present invention is that the UE that does not have the mobile IP function in the Idle state uses the mobile IP for routing update.

The present invention provides a route update method in a mobile communication system, which specifically includes the following steps: 1. After the mobile device in the idle state reselects the network, sends a registration request message to the new network side service node;

1. After receiving the registration request message, the new network side service node obtains the mobile security association information from the old network side service node or from the home device server of the mobile device;

1. The new network side service node sends a mobile IP registration request message to the home agent of the mobile device, and the home agent processes the mobile IP registration request message;

1. The new network side service node sends a registration acceptance confirmation message to the mobile device.

Further, in step 1.3, if there is no mobile security association information between the active mobile device and the home agent in the home agent, the home agent requests the mobile home network information from the home subscriber server.

Further, after step 1. 2, before step 1. 3, the method further includes the following steps: 1. 1. The new network side service node registers itself with the home user server as a service node of the mobile device;

3. The home subscriber server sends a registration confirmation message to the new network side service node. Further, the registration request message of step 1.1 includes the temporary ID of the mobile device and the old routing area information, or a permanent ID.

Further, step 1. 2 further includes the following steps:

5. The new network side service node obtains the user context from the old network side service node where the mobile device was last registered according to the registration request information;

5. The old network side service node sends the user context to the new network side service node. Further, after step 3.1, before step 3.2, the method further includes: the home user server notifying the old network side service node to delete the mobile device information or to identify the mobile device information as not present.

Further, the user context includes a mobile IP context.

Further, the mobile IP context includes Mobile Security Association information between the mobile device and the home agent.

Further, after step 5.2, the method further includes: when the new network side service node fails to be from the old network side When the service node obtains the security information and the mobile security association information required for mutual authentication between the valid mobile device and the new network side service node, the new network side service node acquires the required security information from the home user server of the mobile device;

When the mobile device is authenticated by the new network side service node, the new network side service node obtains the mobile security association information and the mutual authentication information of the mobile device and the network side service node from the old network side service node or the home user server. And then authenticating the mobile device directly; when the mobile device is authenticated by the home user server, the new network side service node obtains the mobile device authentication new network side service node only from the old network side service node or the home user server. The required security information; the new network side service node sends an authentication request to the mobile device, and after the mobile device authenticates the authentication request, the authentication response is sent to the new network side service node; after receiving the authentication response of the mobile device, the new network side The service node sends the authentication response to the home subscriber server, and the home subscriber server authenticates the mobile device. After the authentication succeeds, the mobile security association information is sent to the new network side service node.

Further, it is determined at the time of system configuration, or according to the security information obtained by the new network side service node, which device authenticates the mobile device.

Further, step 1. 3 further includes the following steps:

11. The new network side service node sends a mobile IP registration request message to the home agent;

11. The home agent authenticates the legitimacy of the message. If there is no mobile security association for the user equipment in the home agent, the home agent needs to query the home user server to obtain the information.

11. The home agent updates the mobile IP binding information of the user equipment, and sends a mobile IP registration response message to the new network side service node; in the mobile IP registration process, the new network side service node forwards the tunnel to the home agent. Also built together.

Further, the mobile security association information includes at least a session key between the mobile device and the home agent.

Further, in step 1.3: the mobile IP registration request message carries a digital digest calculated by using mobile security association information between the mobile device and the home agent, and the digital digest is used for the home agent to authenticate the source of the mobile IP registration message and the integrity of the message. . W Further, in step 1.3: The Mobile IP registration request message is based on Mobile IPv4 or IPv6. Further, the new network side service node is a mobility management node and a user plane node; the old network side service node is a general wireless packet service service node or a mobility management node and a user plane node.

The invention also provides a routing update system in a mobile communication system, comprising: a mobile device, a new network side service node, an old network side service node, a home user server, a home agent; the mobile device is in an idle state and reselects the network Afterwards, sending a registration request message to the new network side service node;

After receiving the registration request message, the new network side service node sends the mobile IP registration request message to the home agent from the old network side service node or from the home device server of the mobile device, and receives the mobile IP registration request message; Sending a registration acceptance confirmation message to the mobile device after the mobile IP registration response message is sent;

The home agent processes the mobile IP registration request message and returns a mobile IP registration response message to the new network side service node.

Further, if there is no mobile security association information between the active mobile device and the home agent in the home agent, the home agent requests the mobile home network information from the home subscriber server.

Further, the new network side service node or the home subscriber server authenticates the mobile device.

Further, the mobile security association information acquired by the new network side service node includes at least a session key between the mobile device and the home agent.

Further, the new network side service node is a mobility management node and a user plane node; the old network side service node is a general wireless packet service service node or a mobility management node and a user plane node.

By adopting the system and the method provided by the present invention, without increasing the signaling of the wireless port and increasing the complexity of the process, the UE without the mobile IP function can perform the cross-system roaming when in the idle state. Use mobile IP for routing updates. BRIEF abstract

1 is a system block diagram of a method for routing update using mobile IP in the prior art; FIG. 2 is a flowchart of a method for routing update using mobile IP in the prior art; 3 is a flowchart of routing update according to Embodiment 1 of the present invention;

4 is a system block diagram of Embodiment 2 of the present invention;

FIG. 5 is a flowchart of routing update according to Embodiment 2 of the present invention. Preferred embodiment of the invention

The technical solution of the present invention will be described in more detail below with reference to the accompanying drawings and embodiments.

Embodiment 1

This embodiment is a case where the UE roams from the 2G/3G network to the SAE. The block diagram of the route update system is as shown in FIG. 1, and includes: a mobile device UE, a new network side service node MME UPE, an old network side service node SGSN, and a home location. User server HSS, home agent IASA;

After the mobile device is in an idle state and reselects the network, the mobile device sends a registration request message to the new network side service node;

The flow of the specific implementation of the route update is shown in Figure 3. In order to simplify the process, the MME/UPE and the user plane anchor point are drawn on one node in Figure 3, including the following steps:

301. The UE selects a new access system in an idle state.

302. The UE sends a registration request message to the new network side serving node MME/UPE/User plane anchor under the new access system. The registration request message includes a UE temporary ID and an old routing area information or a permanent ID;

303. The registration request message received by the MME/UPE includes the temporary ID and the old routing area information.

The MME/UPE finds the old network side service node SGSN where the UE was last registered (ie, registered) according to the temporary ID and the old routing area information, and the MME/UPE sends a temporary ID to the SGSN, requesting the SGSN to send the user context; 304. The SGSN sends the UE context to the MME/UPE. The context should at least include a mobile IP context, the mobile IP context further including information such as a mobile security association between the UE and the home agent IASA.

305. If the MME/UPE does not obtain the UE context, or the mobile security association information in the mobile IP context fails, that is, the valid mobile security association information is not obtained, the MME UPE shall obtain the mobile IP related mobile security from the home subscriber server HSS. Alliance information. The UE is authenticated by the MME/UPE or HSS as needed. There are two options for obtaining the Mobile Security Association information and the authentication process for the UE:

Method 1: The UE is authenticated by the MME/UPE. The MME/UPE determines whether it has all the security information required for authenticating the mobile device UE. The security information includes: security information and mobile security association information required for mutual authentication between the UE and the MME/UPE. If the information is stored in the MME/UPE, the MME UPE does not need to access the HSS, and the MME UPE authenticates the UE by using its locally saved information. If there is no UE-related security information in the MME UPE, the MME/UPE first sends the HSS to the HSS. Obtain this information and authenticate the UE after obtaining this information.

Method 2: The MME/UPE does not authenticate the UE, and the authentication point of the UE is in the HSS. The MME/UPE first determines whether there is security information required for the UE to authenticate the MME UPE. (Under the first method, in the first method, the UE and the MME/UPE mutually authenticate the security information, where is the security information of the UE authentication MME UPE) If not, the MME/UPE obtains the information from the HSS of the UE. The security information only includes the necessary information required by the UE to authenticate the MME UPE, and does not include the necessary information of the MME/UPE authentication UE, and does not include the mobile security association information. After receiving the necessary information, the MME UPE sends an authentication request to the UE. After receiving the authentication response from the UE, the MME/UPE sends the authentication response to the HSS. The HSS authenticates the UE. After the authentication succeeds, the mobile security association information is sent to the MME UPE.

The choice of the two methods is determined at the time of system configuration, or based on the security information obtained from the old network side service node or HSS.

306. The MME/UPE registers with the HSS as the service MME/UPE of the UE.

307. The HSS notifies the SGSN/GGSN to delete the UE information or identify the UE information as not existing.

308. The HSS sends a registration confirmation message to the MME UPE.

309. The current location of the MME/UPE to the IASA registration UE, the registration process further includes The following steps are performed: a. The MME/UPE sends a mobile IP registration request message to the IASA, where the mobile IP registration request message is based on mobile IPv4 or IPv6, and has a digital digest calculated by using the mobile security association information between the UE and the IASA, for the IASA. Authenticate the source of the mobile IP registration message and the integrity of the message;

b. The IASA accepts the registration request message. If there is no valid mobile security association information about the mobile device in the IASA, the IASA needs to query the HSS to obtain the information. The mobile security association information includes at least the session between the UE and the IASA. Key. ;

c. The IASA updates the mobile IP binding information of the UE, and sends a mobile IP registration response message to the MME/UPE; in the mobile IP registration process, the forwarding tunnel of the MME/UPE to the IASA is also established together;

310. The MME/UPE sends a registration acceptance confirmation message to the UE.

Embodiment 2:

This example is roaming between two different domains in an evolved system (the wireless access system is unchanged or changed). The system block diagram is shown in Figure 4. The system includes a new network side service node MME/UPE(b), an old network side service node MME/UPE(a), a home device user server HSS of the mobile device, and a home agent IASA of the mobile device. And user plane anchor User Plane Anchor.

The MME/UPE may be either a functional entity defined in the SAE or an SGSN in the 2G/3G network, and the UE moves from the network covered by the boundary domain A to the network covered by the boundary domain B. In order to maintain the service continuity of the UE, the IASA(a) of the border domain A acts as the home agent HA of the mobile IP during the UE's movement. The UE establishes a new user plane through the routing update between IASA(b) and IASA(a) and ensures that the UE's external IP address does not change. The routing update here is implemented by proxying the mobile IP registration update. IASA(b) provides the foreign agent function of the UE. MME/UPE(b) and IASA(b) represent functional entities and do not exclude the possibility of physical merging.

When using proxy mobile IP, MME/UPE(b) acts as a mobile IP proxy node.

The process of this embodiment is shown in FIG. 5, and specifically includes the following steps:

501. The UE selects a new access system in an idle state. 502. The UE sends a registration request message to the MME/UPE(b)/User plane anchor under the new access system, where the registration request message includes the temporary ID of the UE and the old routing area information or permanent ID.

503. The MME/UPE(b) receives the temporary ID/old routing area information, and the MME/UPE(b) requests the user context according to the temporary ID and the old routing area information to the MME/UPE(a), and the message should be carried in the message. There is an identifier requesting to send a mobile IP context;

504. The MME/UPE(a) sends the UE context to the MME/UPE(b). This context should include the user's permanent ID and other information such as: security information, IP bearer information. The user context also includes a mobile IP context, such as the UE's Home Address (HoA), UE-related Mobile Security Association information (eg, UE and IASA Mobile Security Association information, Mobile Security Alliance between MME/UPE and IASA) Information, etc., the Mobile Security Association information includes at least a session key between the UE and the IASA;

505. If the MME UPE(b) does not obtain the UE context, or the mobile security association information in the UE context fails, that is, the mobile security association information is not obtained, the MME UPE(b) should obtain the mobile IP related mobile security from the HSS. Alliance information. The UE is authenticated by the MME/UPE(b) or HSS as needed. The process of obtaining the mobile security association information and the authentication process for the UE have two alternative modes: Method 1: The UE is authenticated by the MME/UPE(b). The MME/UPE(b) determines whether it locally stores all the security information required for authenticating the mobile device UE. The security information includes: security information and mobile security association information required for mutual authentication between the UE and the MME/UPE(b). If the information is stored in the MME/UPE(b), the MME/UPE(b) does not need to access the HSS, and the MME/UPE(b) authenticates the UE by using its locally stored information; if MME/UPE(b) There is no UE-related security information, then] VDVE UPE(b) first obtains this information from the HSS and authenticates the UE after obtaining the information.

Method 2: The MME UPE(b) does not authenticate the UE, and the authentication point for the UE is in the HSS. MME/UPE(b) first determines whether there is security information required for the UE to authenticate the MME/UPE(b) (unlike the first method, in the first method, the UE and the MME UPE(b) mutually authenticate the security information, here It is the security information of the UE authentication MME UPE(b). If not, the VIME UPE(b) is obtained from the HSS of the UE. The security information only includes the necessary information required by the UE to authenticate the MME/UPE(b), excluding the necessary information. MME/UPE(b) Necessary information for authenticating the UE, and does not include Mobile Security Association information. Receiving this After the necessary information, the MME/UPE(b) sends an authentication request to the UE. After receiving the authentication response of the UE, the MME/UPE(b) sends an authentication response to the HSS, and the HSS authenticates the UE. After the authentication succeeds, the mobile security association information is sent to the MME UPE.

The choice of the above two methods is determined at the time of system configuration, or based on the security information obtained from the old network side service node or HSS.

506. MME/UPE(b) selects IASA, and in Figure 5, MME/UPE(b) selects IASA(b). When using Mobile IPv4, IASA(b) is the mobile IP foreign agent of the UE. When using Mobile IPv6, IASA(b) is the border gateway of Boundary Domain B; IASA(b) should assign the Mobile IP attention address to the UE. Notify MME/UPE(b). In mobile IPv4, the mobile IP attention address (ie, the foreign IP address) is the IP address of an interface of IASA(b); in mobile IPv6, the address can be sent to the MME/UPE through the IASA(b)(b) Or generating, by the MME/UPE (b), the mobile IP attention address of the UE according to the IPv6 prefix and other related information previously sent to it by the IASA (b);

507, MME / UPE (b) sends a registration message to the HSS, the current MME / UPE (b) is registered as the service MME / UPE of the UE;

508, the HSS notifies the MME/UPE(a) to delete the UE information or identify the UE information as not existing;

509, border domain A routing update: MME UPE (a) and IASA (a) delete the routing relationship between the UE in the border domain A through the internal routing update protocol;

510. The MME/UPE(a) sends a delete old UE context response to the HSS.

511. The HSS sends a registration confirmation message to the MME/UPE(b).

512. The MME/UPE(b) sends a Mobile IP Registration Request message to the IASA(a) (the IASA(a) is the home agent of the UE). The message is based on Mobile IPv4 or IPv6 with a digital digest calculated using UE and IASA(a) Mobile Security Association information for IASA (a) authenticating the source and message integrity of the Mobile IP registration message . In this message, the UE's mobile IP attention address is allocated in step 506. If there is no valid Mobile Security Association information about the UE in IASA(a), IASA(a) needs to access the HSS to obtain UE-related registration information. Mobile IP registration messages need to be forwarded by IASA(b).

513. The MME/UPE(b) registers the routing relationship of the UE with the IASA (b), so that the data packet obtained by the UE can be sent to the MME/UPE (b) through the IASA (b), and finally can be sent to the UE. 514. MME/UPE(b) sends a registration acceptance confirmation message to the UE.

Industrial applicability

By adopting the system and the method provided by the present invention, without increasing the signaling of the wireless port and increasing the complexity of the process, the UE without the mobile IP function can perform the cross-system roaming when in the idle state. Use mobile IP for routing updates.

Claims

Claim

A method for updating a route in a mobile communication system, which is characterized by the following steps:

1. After the mobile device in the idle state reselects the network, the registration request message is sent to the new network side service node;

1. After the new network side service node receives the registration request message, obtain the mobile security association information from the old network side service node or from the home user server of the mobile device;

1. The new network side service node sends a mobile IP registration request message to the home agent of the mobile device, where the home agent processes the mobile IP registration request message;

The method according to claim 1, wherein, in the step 1.3, if there is no valid mobile security association information between the mobile device and the home agent in the home agent, The home agent requests the mobile security association information from the home subscriber server.

3. The method according to claim 1, wherein after the step 1. 2, before the step 1. 3, the method further comprises the following steps:

3. The new network side service node registers itself with the home subscriber server as a service node of the mobile device;

3. The home subscriber server sends a registration confirmation message to the new network side service node.

The method according to claim 1, wherein the registration request message of the step 1.1 includes a temporary ID of the mobile device and old routing area information, or a permanent ID.

The method according to any one of claims 1 to 4, wherein the step 1.2 further comprises the following steps:

5. The new network side service node obtains the user context from the old network side service node where the mobile device last registered according to the registration request information;

5. The old network side service node sends the user context to the new network side service node.

The method according to claim 3, wherein the step 3.1 and before step 3.2 further comprise: the home subscriber server notifying the old network side service node to delete the mobile device information or The mobile device information identifier is not present.

7. The method according to claim 5, wherein the user context includes a mobile IP context.

8. The method according to claim 7, wherein the mobile IP context comprises mobile security association information between the mobile device and the home agent.

The method according to claim 5, wherein the step 5.2 further comprises: when the new network side service node fails to obtain the valid mobile device from the old network side service node And the new network side service node acquires the required security information from the home user server of the mobile device when the security information and the mobile security association information required for mutual authentication are performed with the new network side service node;

When the mobile device is authenticated by the new network side serving node, the new network side serving node obtains the mobile security association information from the old network side service node or the home subscriber server and the The mobile device and the network side service node mutually authenticate the security information, and then directly authenticate the mobile device;

When the mobile device is authenticated by the home subscriber server, the new network side service node obtains the mobile device authentication the new network side service only from the old network side service node or the home subscriber server. The security information required by the node; the new network side service node sends an authentication request to the mobile device, and after the mobile device authenticates the authentication request, the authentication response is sent to the new network side service node; After the authentication response to the mobile device, the new network side service node sends the authentication response to the home subscriber server, and the home subscriber server authenticates the mobile device, and after the authentication succeeds, The mobile security association information is sent to the new network side node.

10. The method according to claim 9, characterized in that it is determined at the time of system configuration, or according to the security information obtained by the new network side service node, which device authenticates the mobile device.

The method of updating the route in the mobile communication system according to claim 1, wherein the step 1.3 further comprises the following steps:

11. The home agent authenticates the validity of the message. If there is no mobile security association related to the user equipment in the home agent, the home agent needs to query the home user server to obtain the information. ;

11. The home agent updates mobile IP binding information of the user equipment, and sends a mobile IP registration response message to the new network side service node. In the mobile IP registration process, the new network side service node The forwarding tunnel to the home agent is also established together.

12. The method of claim 1, wherein the mobile security association information comprises at least a session key between the mobile device and the home agent.

The method according to claim 1, wherein in the step 1.3: the mobile IP registration request message carries a digital digest calculated by using mobile security association information between the mobile device and the home agent, The digital digest is used by the home agent to authenticate the source of the Mobile IP registration message and the integrity of the message.

14. The method according to claim 1, wherein in step 1.3: moving

The IP registration request message is based on mobile IPv4 or IPv6.

The method according to claim 1, wherein the new network side service node is a mobility management node and a user plane node; and the old network side service node is a general wireless packet service node or a mobile node. Sex management node and user plane node.

A routing update system in a mobile communication system, comprising: a mobile device, a new network side service node, an old network side service node, a home user server, and a home agent; wherein the mobile device is in an idle state After reselecting the network, sending a registration request message to the new network side service node;

After receiving the registration request message, the new network side service node sends the mobile security association information to the home agent after obtaining the mobile security association information from the old network side service node or from the home user server of the mobile device. Registering a request message; and sending a registration acceptance confirmation message to the mobile device after receiving the mobile IP registration response message;

The home agent processes the mobile IP registration request message and provides the new network side service The node returns a Mobile IP Registration Response message.

The routing update system according to claim 16, wherein: if there is no valid mobile security association information between the mobile device and the home agent in the home agent, the home agent reports to the The home subscriber server requests the mobile security association information.

18. The routing update system according to claim 16, wherein: the new network side service node or the home user server authenticates the mobile device.

The routing update system according to claim 16, wherein: the mobile security association information acquired by the new network side service node includes at least a session key between the mobile device and the home agent.

20. The routing update system according to claim 16, wherein: the new network side service node is a mobility management node and a user plane node; and the old network side service node is a general wireless packet service service node or mobile. Sex management node and user plane node.