WO2008040212A1

WO2008040212A1 - A method, system and device for network access

Info

Publication number: WO2008040212A1
Application number: PCT/CN2007/070658
Authority: WO
Inventors: Weilong Ouyang
Original assignee: Huawei Technologies Co., Ltd.
Priority date: 2006-09-07
Filing date: 2007-09-07
Publication date: 2008-04-10
Also published as: CN101141379A; CN100579070C

Abstract

A method for network access is provided, including: the central policy decision function building up a relationship between the user and the related distribution or access policy function based on the user routing information sent by the distribution or access policy function and the information of the distribution or access policy function. A system for network access is also provided. In the process of the user performing network access, the relationship between the user and the A-RACF of the current network he or she stays in is dynamically built up in the SPDF, which is to say, the topology relationship between the SPDF and the A-RACF is dynamically built up. Thus, when the AF sends a resource request to the SPDF, the SPDF can find the A-RACF the SPDF belongs to based on the relationship between the user and the A-RACF, so that the automatic topology discovery between SPDF and A-RACF can be implemented and the normal user network access can be ensured.

Description

Method, system and device for realizing network access

The present invention relates to access technologies, and more particularly to a method, system and device for implementing network access. Background of the invention

With the continuous development of access technologies, users can use more and more bandwidth, then the access network needs to provide more transmission capabilities. How to make the resources of the access network can be utilized to the greatest extent, so that the provider can obtain more benefits, is the mission of the operator to the next generation (NGN) access network. Currently, dynamic QoS mechanisms such as bandwidth-on-demand, application- and session-based quality of service (QoS) control have become the primary means of improving the utilization of access network resources, such as the convergence of services and protocols for telecommunications and the Internet in the future (TISPAN). , Telecommunications and Internet converged Services and Protocols for Advanced Networking ) , is the standard for the next generation network in the European Union, and the dynamic QoS solution proposed by the TISPAN Forum.

1 is a schematic diagram of a prior art TISPAN QoS architecture. As shown in FIG. 1, a transport control layer, that is, a resource admission subsystem (RACS), is added between a service layer (AF) and a transport layer (RACS). Management and policy deployment of network resources based on user information such as the user's profile. The RACS is composed of a Service Policy Decision Function Entity (SPDF) and an Access Network Resource Admission Control Function Entity (A-RACF), where the SPDF is used to manage the access network and the core according to the resource and policy control request of the service delivered by the AF. Network resource and policy control; A-RACF is used for resource admission control and policy deployment of the access network according to the user's profile. The AF is used to request network resources and policy control according to the user's service request, and to provide services for the user. The AF finds the A-RACF through the SPDF, thereby implementing control of the access network resources, such as resource application and release, and QoS policy. Deployment, etc. The AF requests the user to use the resource and control policy of the service through the Gq' interface, and the RACS sends the resource request and control policy to the edge node (IP Edge) of the corresponding access network and the core border node device (Core Border Node). Perform resource allocation and policy enforcement. The IP Edge is connected to the IP transport network; the Network Connection Management Subsystem (NASS) has only data and control interfaces with the IP Edge, and is used for authentication, authorization, and address assignment of users on the access network, and through the e4 interface. The RACS notifies the user of the user information such as the attribute and the user IP address. The IP Edge includes a Layer 2 Transport Termination Function (L2TF) entity and a Resource Control Execution Function Entity (RCEF), where the L2TF is used to terminate the Layer 2 transmission information of the user packet. The RCEF is used to execute the resource control and policy control commands delivered by the RACS. The core border node is configured to perform corresponding resource control and policy control according to a control instruction of a core network edge gateway function entity (C-BGF), where the C-BGF performs resource control and policy for the core network delivered by the SPDF according to the profile of the service. Controlled instructions.

The Customer Premises Equipment (CPE) is used to carry the user's message on the corresponding line technology and transmit it to the access node (AN, Access Node), and the AN is responsible for terminating the access line of the user, such as xDSL, PON, Wimax, and the like.

The NGN network of the TISPAN QoS architecture supports the user's mobility, that is, when the user moves, the mobile IP, such as MIPv4 or MIPv6, can be used to solve the problem that the user's IP address does not change. However, in the current TISPAN QoS architecture, SPDF does not store user information, and the information related to the network carried by the AF is only the user IP address, and the topology relationship between SPDF and A-RACF in the TISPAN QoS architecture is a pre-configured static configuration. Information, for example, the SPDF configures the communication address of the A-RACF to which it belongs according to the address segment of the access network.

In this way, in the case of user roaming, if the user adopts mobile IP, the IP address of the user that the AF learns is the same, but the network accessed by the user is constantly changing, so that the SPDF cannot be correctly found through static configuration. The topology relationship of A-RACF cannot guarantee the normal communication of the user; in addition, due to the shortage of IP address resources, the IP address segment is Split into small subnet segments, the existing static configuration to configure the topology relationship between SPDF and A-RACF is very large. Summary of the invention

In view of the above, the main purpose of the present invention is to provide a method for implementing network access, which can dynamically establish a topology relationship between a central policy decision function entity and a distribution or access policy function entity, so as to ensure that the user normally implements network access.

Another object of the present invention is to provide a system for implementing network access and a central policy decision function entity, which can dynamically establish a topology relationship between a central policy decision function entity and a distribution or access policy function entity to ensure that the user normally implements network access. In.

In order to achieve the above object, the technical solution of the present invention is specifically implemented as follows:

A method for implementing network access, including:

The central policy decision function entity establishes a correspondence between the user and the distribution or access policy functional entity according to the user route information sent by the distribution or access policy function entity and the information of the distribution or access policy function entity.

A system for implementing network access, the system comprising: a network connection management subsystem NASS, a central policy decision function entity, and a distribution or access policy function entity, the NASS through a distribution or access policy functional entity and a central policy decision function The entities are connected, and the user accesses the network through NASS.

Providing an available central policy decision function entity in the NASS, or pre-configuring a communication link with the designated central policy decision function entity in the distribution or access policy function entity;

The distribution or access policy function entity receives user information from the NASS carrying the user address, the currently available central policy decision function entity address, or the distribution or access policy function entity receiving the carried user address from the NASS User information; The available or designated central policy decision function entity receives user routing information carrying a user address from a distributed or access policy functional entity, and establishes a correspondence between the user and the distribution or access policy functional entity.

A central policy decision function entity, including:

a distribution or access policy function entity interface unit, configured to receive user routing information sent by the distribution or access policy function entity, and provide the information to the corresponding relationship establishing unit;

The correspondence establishing unit is configured to establish a correspondence between the user and the distribution or access policy functional entity according to the user routing information received by the distribution or access policy function entity interface unit and the distribution or access policy function entity information.

It can be seen from the foregoing technical solution that the user dynamically establishes a correspondence between a user and a current network distribution or an access policy functional entity in a central policy decision function entity in a process of user network access, that is, dynamically establishing a central policy. The topological relationship between the decision function entity and the distribution or access policy function entity. In this way, when the AF sends a resource request to the central policy decision function entity, the central policy decision function entity may find the distribution or access to which the central policy decision function entity belongs according to the corresponding relationship between the user and the distribution or access policy function entity. The policy function entity realizes the topology automatic discovery of the central policy decision function entity and the distribution or access policy function entity, ensuring that the user normally implements network access. The central policy decision function entity may be specifically SPDF, and the distribution or access policy function entity may be specifically A-RACF. BRIEF DESCRIPTION OF THE DRAWINGS

1 is a schematic diagram of a prior art TISPAN QoS architecture;

Figure 2 is a flow chart of the method of the present invention;

3 is a schematic diagram of a system according to Embodiment 1 of the present invention;

4 is a schematic structural diagram of an SPDF according to Embodiment 1 of the present invention; Figure 5 is a flow chart of Embodiment 1 of the present invention;

6 is a schematic diagram of a system according to Embodiment 2 of the present invention;

Figure 7 is a flow chart of Embodiment 2 of the present invention;

8 is a schematic diagram of a system according to Embodiment 3 of the present invention;

9 is a flowchart of Embodiment 3 of the present invention;

Figure 10 is a schematic diagram of an IP lookup table. Mode for carrying out the invention

The core idea of the present invention is: a user access network, a distribution or access policy function entity sends user routing information to a central policy decision function entity; a central policy decision function entity according to received user routing information and a distribution or access policy via Functional entity information, establishing a correspondence between a user and a distribution or access policy functional entity. The central policy decision function entity may be specifically SPDF, and the distribution or access policy function entity may be specifically A-RACF. In the following detailed description of the present invention, the SPDF is used as the central policy decision function entity, and the A-RACF is used as the The distribution or access policy function entity is described as an example.

In this paper, each access network is controlled by NASS and A-RACF.

2 is a flowchart of the method of the present invention. As shown in FIG. 2, the user accesses the network, and the NASS sends user information to the A-RACF. Here, the user accesses the network, and the user authenticates and succeeds when requesting to use the service. The user IP address is assigned. This process belongs to the prior art. For details, refer to related protocols, and details are not described here.

The method of the invention further comprises the following steps:

Step 200: A-RACF sends user routing information to SPDF.

The SPDF in this step may be a preset SPDF available in the N AS S or a designated SPDF pre-configured in the A-RACF. Different SPDFs can be distinguished by different SPDF addresses. The available or specified SPDF can be an SPDF corresponding to the service, for example, service 1 corresponds to SPDF1, SPDF2, and service 2 corresponds to SPDF1, SPDF3, and the like. The specific implementation can be configured according to the actual situation.

Further, in the NASS, a communication negotiation parameter between the SPDF and the A-RACF is preset, and the communication negotiation parameter refers to a parameter for establishing a communication link between the A-RACF and the SPDF, such as a key and the like, in the home network. It may be referred to as a home communication negotiation parameter, which may be referred to as a visited communication negotiation parameter in a visited network.

After the user accesses the network, the NASS sends the user information to the A-RACF. Here, the user information includes at least the successfully assigned user IP address, the currently available or designated SPDF address, and may also include the communication negotiation parameters between the SPDF and the A-RACF. After receiving the user information, the A-RACF will generally send a response to the NASS.

Before transmitting, the method further includes the A-RACF performing communication link negotiation with the SPDF corresponding to the SPDF address by using the received communication negotiation parameter to establish a communication link. During the communication link negotiation process, SPDF learns the A-RACF information such as the A-RACF address;

A-RACF sends user routing information such as user IP address to SPDF through the established communication link.

Step 201: The SPDF establishes a correspondence between the user and the A-RACF according to the received user routing information and the A-RACF information.

The correspondence between the user and the A-RACF in this step can be represented by a correspondence table between the user IP address and the A-RACF address.

The established correspondence is a lookup table, and the lookup table is as shown in FIG. 10. FIG. 10 is a schematic diagram of an IP lookup table. The index of the IP lookup table is a user IP address, and the content of the IP lookup table may include:

Basic information, such as the user's IP address, the user's current location information (attribution or place of visit), etc. Home location information, such as home A-RACF address, home SPDF address, etc.; visit information: such as the user's care-of address, visit A-RACF address, visit SPDF address, etc.;

Because the routing information reported by A-RACF to SPDF may not be well aggregated, the shortest match and hash (HASH) methods can be used to reduce the memory requirements of the IP lookup table and improve the search speed. The shortest match and the HASH method belong to the prior art, and are not described here.

From the flow shown in Figure 2, in the process of user network access, the correspondence between the user and A-RACF is dynamically established in SPDF, that is, the topology relationship between SPDF and A-RACF is dynamically established. In this way, when the AF sends a resource request to the SPDF, the SPDF can find the A-RACF to which the SPDF belongs according to the corresponding relationship between the user and the A-RACF, thereby realizing the topology automatic discovery of the SPDF and the A-RACF. It ensures that the user can access the network normally.

The present invention will be further described in detail below with reference to the accompanying drawings and preferred embodiments.

3 is a schematic diagram of a system according to Embodiment 1 of the present invention. As shown in FIG. 3, SPDF is connected to two access networks, and is respectively connected to A-RACF1 and A-RACF2, and it is assumed that the user accesses the network through the home network. Access the network, and pre-configure the available SPDF addresses such as domain name or IP address correspondence and communication negotiation parameters such as keys in NASS1. FIG. 4 is a schematic structural diagram of an SPDF according to Embodiment 1 of the present invention, which is a specific implementation manner of a central policy decision function entity provided by the present invention, and can be applied to the system shown in FIG. 3. As shown in FIG. 4, the SPDF includes: an A-RACF interface unit and a correspondence establishing unit. The A-RACF interface unit is configured to receive the user routing information sent by the A-RACF, provide the corresponding relationship establishing unit, and negotiate with the A-RACF to obtain the A-RACF information, and provide the corresponding information. Relationship building unit. Correspondence relationship establishment And a unit, configured to establish a correspondence between the user and the A-RACF according to the user routing information received by the A-RACF interface unit and the A-RACF information.

FIG. 5 is a flowchart of Embodiment 1 of the present invention. Referring to FIG. 3 and FIG. 4, the following steps are included: Step 500: A user accesses a network through NASS1.

In this step, the user successfully connects to the network, such as successfully completing the authentication, and the user's IP address is successfully assigned. The specific implementation is related to the prior art.

Step 501 ~ Step 502: NASS1 sends the user information carrying the user IP address, SPDF address and communication negotiation parameters to A-RACF1, and A-RACF1 returns a response to NASS1.

Step 503: A-RACF1 performs communication link negotiation with the SPDF corresponding to the SPDF address to establish a communication link.

In this step, the communication link negotiation is performed between the A-RACF1 and the SPDF by using the communication negotiation parameters in the user information from the NASS1. Through the communication link negotiation process, the SPDF learns the information of the A-RACF1, such as the A-RACF1 address. There are many ways to implement negotiation, which are current technologies and will not be described in detail here.

Step 504: A-RACF1 sends the user routing information carrying the user IP address to the SPDF through the established communication link.

Step 505: The SPDF establishes a correspondence between the user IP address and the A-RACF1 address according to the received user routing information and the A-RACF1 address obtained in the communication link negotiation.

At this point, the user's network access process is completed.

Thereafter, when the AF sends a resource request to the SPDF, the SPDF can find the A-RACF1 to which the SPDF belongs according to the correspondence between the user IP address and the A-RACF1 address that has been established, thereby realizing the SPDF and the A-RACF1. Topology automatically discovers.

6 is a schematic diagram of a system according to Embodiment 2 of the present invention. As shown in FIG. 6, in a mobile IP mechanism, a Home Agent (HA) is a router on a home network, and can act as a mobile node. The anchor point for communication can also send the packet data to the mobile node that is roaming through the tunnel. The Visiting Agent (FA) is a router that visits a connection point acting as a mobile node in the network, and the FA can forward the packet data sent by the HA to the mobile node. A mobile node is a terminal device capable of network roaming.

In Figure 6, the home A-RACF and the visited A-RACF are connected to the same SPDF, and the connection between the home NASS and the visited NASS. It is assumed that the correspondence between available SPDF addresses such as domain names or IP addresses, and home communication negotiation parameters and visited communication negotiation parameters are pre-configured in the home NASS and the roaming NASS, respectively.

Here, it is assumed that the user moves from the home network to the visited network. At this time, the home network has completed the network access of the user in the home network according to the flow shown in FIG. 4, that is, the user IP address and the attribution have been established in the SPDF. Correspondence between A-RACF addresses.

FIG. 7 is a flowchart of Embodiment 2 of the present invention. Referring to FIG. 6, the method includes the following steps: Step 700: A user accesses a network by visiting a NASS.

In this step, the user obtains the care-of address of the user in the visited network. The care-of address is the location information of the user currently in the visited network. The method for obtaining the care-of address can be referred to the related protocol and has nothing to do with the method of the present invention, and details are not described herein again.

Step 701: Visiting the NASS to obtain the home information of the user including the user IP address from the home NASS. The interaction between the visited NASS and the home NASS belongs to the prior art, and the specific implementation can be referred to the related protocol.

Step 702 ~ Step 703: Visiting NASS sends the user information carrying the user IP address, the care-of address, the SPDF address, and the visited communication negotiation parameters to the visited A-RACF, and visits the A-RACF to return a response to the visited NASS.

Step 704: Visiting the A-RACF and the SPDF corresponding to the SPDF address to perform communication link negotiation and establishing a communication link.

In this step, visit between A-RACF and SPDF, using users from visiting NASS. The communication communication negotiation parameter in the information is used for communication link negotiation. Through the communication link negotiation process, the SPDF learns the information of the visited A-RACF, such as the visited A-RACF address. There are many ways to implement negotiation, which belong to the prior art and will not be described in detail here.

Step 705: Visiting the A-RACF to send the user routing information carrying the user IP address and the care-of address to the SPDF through the established communication link.

Step 706: The SPDF establishes a correspondence between the user IP address, the care-of address, and the visited A-RACF address according to the received user routing information and the visited A-RACF address obtained in the communication link negotiation.

At this point, the user's network access process is completed.

Thereafter, when the AF sends a user uplink resource request to the SPDF, the SPDF can find the visited A-RACF according to the correspondence between the user IP address, the care-of address and the visited A-RACF address established by itself, and when the AF is directed to the SPDF, When sending a request for a downlink resource of a user, the SPDF may search for a correspondence between the user IP address established by the user, the care-of address and the visited A-RACF address, and the correspondence between the user IP address and the home A-RACF address. Go to the home A-RACF and visit the A-RACF to achieve topology auto-discovery of SPDF and visit/attribute A-RACF.

8 is a schematic diagram of a system according to Embodiment 3 of the present invention. As shown in FIG. 8, the home A-RACF and the visited A-RACF are respectively connected to the home SPDF and the visited SPDF in the respective networks, and the connection between the home SPDF and the visited SPDF is attributed. The connection between NASS and visiting NASS. It is assumed that the corresponding relationship between the available home SPDF address, such as a domain name or an IP address, and the parameters of the home communication negotiation parameter, such as a key, are pre-configured in the home NASS; the corresponding visited SPDF address such as the domain name or the IP address is pre-configured in the visited NASS. Relationships, as well as visiting parameters such as communication negotiation parameters such as keys.

Here, it is assumed that the user moves from the home network to the visited network. At this time, the home network has completed the network access of the user in the home network according to the flow shown in FIG. 4, that is, at the home network. The correspondence between the user IP address and the home A-RACF address has been established in the SPDF. FIG. 9 is a flowchart of Embodiment 3 of the present invention. Referring to FIG. 9, the following steps are included: Step 900: A user accesses a network by visiting a NASS.

In this step, the user obtains the care-of address of the user in the visited network.

Step 901: The visited NASS obtains the home subscriber information including the user IP address and the home SPDF address from the home NASS. The interaction between the visited NASS and the home NASS belongs to the prior art. For the specific implementation, refer to the related protocol. The difference is that the home subscriber information also includes the home SPDF address.

Step 902 ~ Step 903: Visiting NASS sends the user information carrying the user IP address, the care-of address, the home SPDF address, the visited SPDF address, and the visited communication negotiation parameters to the visited A-RACF, and visits the A-RACF to return a response to the visited NASS.

Step 904: Visiting the A-RACF and visiting the SPDF to negotiate a communication link and establish a communication link.

In this step, visit A-RACF and visit SPDF, use the communication communication negotiation parameters from the user information of the visited NASS to conduct communication link negotiation, and visit the SPDF to learn the information of the visited A-RACF through the communication link negotiation process. A-RACF address, etc. There are many ways to implement negotiation, which are prior art and will not be described in detail here.

Step 905: Visiting the A-RACF to send the user routing information carrying the user IP address, the care-of address, and the home SPDF address to the visited SPDF through the established communication link.

Step 906: Visiting SPDF establishes a correspondence between the user IP address, the care-of address, and the visited A-RACF address and the home SPDF address according to the received user routing information and the visited A-RACF address obtained in the communication link negotiation.

Steps 907 to 908: The communication link negotiation between the SPDF and the home SPDF is performed, and the user who carries the user IP address, the care-of address, and the visited A-RACF address is sent to the home SPDF through the communication link established after the negotiation. Routing information. Through the communication link negotiation process, the home SPDF is informed of the information such as the SPDF address. Step 909: The home SPDF establishes a correspondence between the user IP address, the care-of address, the visited A-RACF address, and the visited SPDF address according to the received user routing information and the visited SPDF address obtained in the communication link negotiation.

Thereafter, when the AF sends a user uplink resource request to the home SPDF, the home SPDF can find a visit to the SPDF and visit based on the correspondence between the user IP address, the care-of address, the visited A-RACF address, and the visited SPDF address.

A-RACF; When the AF sends a user downlink resource request to the home SPDF, the home SPDF is based on the correspondence between the user IP address established by itself and the home A-RACF address, and the user IP address, the care-of address, and the visited A-RACF address. Correspond to the visit to the SPDF address, find the home A-RACF and visit the SPDF, and then visit the A-RACF by visiting the SPDF to achieve attribution. Visit SPDF and attribution/visit

The topology of A-RACF is automatically discovered.

For the system diagrams shown in FIG. 6 and FIG. 8, there is another case. If the user moves from the home network to the visited network, the user does not complete the network access of the user in the home network, that is, not in the SPDF. Establish a correspondence between the user IP address and the home A-RACF address. This situation is called a nomadic scenario. In this way, the visit A-RACF can directly contact the SPDF or the home SPDF according to the agreement between the visited place and the home network operator. Network access, including:

First, after the user moves to the visited network, the NASS accesses the network. After the user registers successfully, the visited NASS authenticates the user through the home NASS, obtains the profile and the visited/home SPDF address, and then visits the NASS to directly allocate the user to the user. IP address; Visit NASS chooses to use SPDF or home SPDF according to the agreement with the home NASS operator, and then sends the user's profile and SPDF address to visit A-RACF. If the home SPDF is the same as the visited SPDF, there is no need to choose. After that, visit A-RACF to negotiate with the visited/home SPDF and establish a communication link; visit the user IP address, attribution/visit SPDF address of the user who visited the visited/home SPDF through the established communication link through the established communication link. And user routing information such as user information of the home/visit communication negotiation parameter;

Then, visit/home SPDF establishes the user based on the received user routing information.

The correspondence between the IP address and the visited A-RACF address. At this point, the user's network access process is completed.

Thereafter, when the AF sends a user resource request to the visited/home SPDF, the visited/home SPDF can find the visited A-RACF according to the correspondence between the household IP address and the visited A-RACF address, thereby implementing SPDF and A-RACF. The topology is automatically discovered.

The above is only the preferred embodiment of the present invention, and is not intended to limit the scope of the present invention. Any modifications, equivalents, improvements, etc., which are made within the spirit and principles of the present invention, should be included. It is within the scope of the invention.

Claims

Claim

A method for implementing network access, the method further comprising: user routing information sent by a central policy decision function entity according to a distribution or access policy function entity, and information of the distribution or access policy function entity And establishing a correspondence between the user and the distribution or access policy functional entity.

The method according to claim 1, wherein the available central policy decision function entity is preset in the network connection management subsystem NASS, or the designated central policy decision function entity is pre-configured in the distribution or access policy function entity; The access network resource admission control function distribution or the access policy function entity sends the user routing information specifically:

The user accesses the network and obtains the current address of the user assigned by the network, and the NASS sends the user information to the distribution or access policy function entity, where the user information carries the user address, the available central policy decision function entity address, or the user interface Entering the network and obtaining the current address of the user allocated by the network, the NASS sending user information to the distribution or access policy function entity, where the user information carries the user address;

The distribution or access policy functional entity sends user routing information carrying the user address to the available or designated central policy decision function entity.

The method according to claim 2, wherein a communication negotiation parameter between the central policy decision function entity and the distribution or access policy function entity is further preset in the NASS;

The user information sent by the NASS to the distribution or access policy function entity further carries a communication negotiation parameter between the central policy decision function entity and the distribution or access policy function entity;

The method for sending user routing information carrying a user address is:

The distribution or access policy function entity utilizes the received communication negotiation parameters, The central policy decision function entity corresponding to the central policy decision function entity address performs communication link negotiation to establish a communication link;

The distribution or access policy function entity sends the user routing information carrying the user address to the central policy decision function entity through the established communication link.

The method according to claim 3, wherein the NASS is a home NASS, the central policy decision function entity is a home center policy decision function, and the distribution or access policy function entity is a home distribution or connection. Into the strategy function;

The current address of the allocated user is a user IP address;

The user address is a user IP address.

The method according to claim 4, wherein the distribution or access policy function entity information is: a home distribution or access policy function entity obtained by the central policy decision function entity in the communication link negotiation Address

The corresponding relationship between the user and the distribution or access policy function entity is: the correspondence between the user IP address and the home distribution or the access policy function entity address.

The method according to claim 3, wherein the NASS is a visited NASS, the central policy decision function entity is a home center policy decision function, and the distribution or access policy function is a visit distribution or access. Strategy function

The assigned user address is a care-of address;

Before the NASS sends the user information to the distribution or access policy function entity, the method further includes: the visited NASS acquiring the home information of the user including the user IP address from the home NASS;

The user address includes a care-of address and a user IP address, and the communication negotiation parameter is a visited communication negotiation parameter.

The method according to claim 6, wherein the distribution or access policy function entity information is: the central policy decision function entity obtained in the communication link negotiation The visit distribution or access policy function entity address;

The corresponding relationship between the user and the distribution or access policy function entity is: the correspondence between the user IP address, the care-of address, the visit distribution, or the access policy function entity address.

The method according to claim 3, wherein the NASS is a visited NASS, the central policy decision function entity is a visit center policy decision function entity, and the distribution or access policy function entity is a visit distribution or Access policy function entity;

The assigned user address is a care-of address;

Before the NASS sends the user information to the distribution or access policy function entity, the method further includes: obtaining, by the NASS, the home subscriber information including the user IP address and the home center policy decision function entity address from the home NASS;

The user information further includes: a home center policy decision function address;

The method according to claim 8, wherein the distribution or access policy function information is: a visit distribution or an access policy function entity obtained by the visited central policy decision function entity in the communication link negotiation Address

The corresponding relationship between the user and the distribution or access policy function entity is: the correspondence between the user IP address, the care-of address, the visit distribution, or the access policy function entity address and the home center policy decision function entity.

The method according to claim 8, wherein the method further comprises: the visiting center policy decision function entity transmitting, by using the negotiated communication link, a user IP address and a care-of address to the home center policy decision function And accessing user routing information of the distribution or access policy function entity address;

The home center policy decision function entity establishes a user IP address according to the received user route information and the visit center policy decision function entity address obtained in the communication link negotiation. The correspondence between the address, the care-of address, the visit distribution or the access policy function entity address and the address of the visit center policy decision function entity.

The method according to claim 2 or 3, wherein the NASS is a visited NASS, the central policy decision function entity is a home/visit center policy decision function entity, and the distribution or access policy function entity To access the distribution or access policy functional entity;

The method for the user to access the network and obtain the current address of the user allocated by the network is: the visited NASS communicates with the home NASS, completes the authentication and address allocation of the user, and sends the allocated address information to the home/visit center policy decision function entity. ;

The assigned user address is a user IP address;

The corresponding relationship between the user and the distribution or access policy function entity is: the correspondence between the user IP address and the visit distribution or the access policy function entity address.

The method according to claim 1, wherein the established correspondence is an IP lookup table indexed by a user IP address; the IP lookup table includes: basic information, attribution information, and visited location information. ;

The basic information includes: a user IP address and a current location information of the user; the attribution information includes: a home distribution or an access policy function entity address, and a home center policy decision function entity address;

The visitor information includes: a care-of address of the user, a visit distribution or an access policy function entity address, and a visit center policy decision function entity address.

The method according to claim 1, wherein the available central policy decision function entity is: a central policy decision function entity corresponding to the service.

14. A system for implementing network access, the system comprising: a network connection management subsystem NASS, a central policy decision function entity, and a distribution or access policy function entity, the NASS through a distribution or access policy functional entity and a central policy Decision function entities are connected, The user accesses the network through the NASS, and is characterized in that

The distribution or access policy function entity receives user information from the NASS carrying the user address, the currently available central policy decision function entity address, or the distribution or access policy function entity receiving the carried user address from the NASS User information; the available or specified central policy decision function entity receives user routing information carrying a user address from a distribution or access policy functional entity, and establishes a correspondence between the user and the distribution or access policy functional entity.

The system according to claim 14, wherein the NASS further presets a communication negotiation parameter between the central policy decision function entity and the distribution or access policy function entity;

The distribution or access policy function entity further receives communication negotiation parameters between the central policy decision function entity and the distribution or access policy function entity;

The system according to claim 14 or 15, wherein the NASS is a home NASS, the central policy decision function entity is a home center policy decision function entity, and the distribution or access policy function entity is a home entity. A distribution or access policy function entity; the user address is a user IP address.

The system according to claim 14 or 15, wherein the NASS is a visited NASS, the central policy decision function entity is a home center policy decision function entity, and the distribution or access policy function entity is a visit. a distribution or access policy function entity; the system further comprising: a home NASS and a home distribution or access policy function entity; the visited NASS receiving home information of the user including the user IP address from the home NASS; The visit distribution or access policy function entity receives user information from the visited NASS carrying the user IP address, the care-of address obtained by the user access network, the home center policy decision function entity address, and the visited communication negotiation parameter;

The central policy decision function entity receives the user routing information of the user's IP address and the care-of address from the visited distribution or access policy function entity, and establishes a correspondence between the user and the visit distribution or the access policy function entity.

The system according to claim 14 or 15, wherein the NASS is a visited NASS, the central policy decision function entity is a home/visit center policy decision function entity, and the distribution or access policy function entity To access the distribution or access policy function; the system further includes: a home NASS and a home distribution or access policy function entity; the visited NASS communicates with the home NASS, completes authentication of the user, and obtains the user's attribution information, and Complete the address allocation, and send the user information to the visited distribution or access policy function entity;

The visit distribution or access policy function entity receives user information from the visited NASS that carries the user IP address, the home/visit center policy decision function entity address, and the home/visit communication negotiation parameter;

The visit/home center policy decision function entity receives user routing information of the user's IP address from the visited distribution or access policy function, and establishes a correspondence between the user and the visited distribution or the access policy functional entity.

The system according to claim 14 or 15, wherein the NASS is a visited NASS, the central policy decision function entity is a visit center policy decision function entity, and the distribution or access policy function entity is a visit. a distribution or access policy functional entity; the system further comprising: a home center policy decision function entity, a home NASS, and a home distribution or access policy function entity;

The visited NASS receives the user IP address and attribution from the home NASS. The central user determines the attribution user information of the functional entity address;

The visit distribution or access policy function entity receives the user IP address from the visited NASS, the care-of address obtained by the user access network, the home center policy decision function entity address, the visit center policy decision function entity address, and the visited communication negotiation parameter. User information;

The visit center policy decision function entity receives user routing information from the visited distribution or access policy function entity that carries the user IP address, the care-of address, and the home center policy decision function entity address, and establishes a user and visit distribution or access policy function entity. Correspondence with the address of the home authority policy decision function entity.

20. The system of claim 19, wherein the system further comprises:

The home center policy decision function entity receives user routing information from the visited center policy decision function entity that carries the user IP address, the care-of address, and the visit distribution or the access policy function entity address, and establishes a user and visit distribution or access policy function entity. The correspondence between the address and the address of the visit center policy decision function entity.

21. A central policy decision function entity, wherein the central policy decision function entity comprises:

The central policy decision function entity according to claim 21, wherein the distribution or access policy function entity interface unit further performs a communication link negotiation with the distribution or access policy function entity to obtain the Distribution or access policy functional entity information.