WO2009043210A1

WO2009043210A1 - A method for selecting a gateway of the radio network

Info

Publication number: WO2009043210A1
Application number: PCT/CN2007/003931
Authority: WO
Inventors: Xiaoyun Zhou; Zaifeng Zong; Min Fang
Original assignee: Zte Corporation
Priority date: 2007-09-30
Filing date: 2007-12-29
Publication date: 2009-04-09
Also published as: CN101141822A; CN101141822B

Abstract

A method for selecting a gateway of the radio network includes: if 3GPP AAA Server successfully performs an authentication for UE, then Home 3GPP AAA Server determines the selecting function information parameter and determines whether UE accesses 3GPP network through the visited PDG, and sends the returning back message to the visited 3GPP AAA Proxy; if the returning back message does not carry the indication parameter not allowing UE to access 3GPP network through the visited PDG, then the visited 3GPP AAA Proxy ignores the selecting function information parameter and forwards the returning back message to the visited PDG; finally, the visited PDG authorizes UE to access the network. When 3GPP Evolved network is Home network, and 3GPP network of the pre-Evolved network is the visited network, the present invention solves the problem for selecting the gateway when UE accesses the network through non-trusting and non-3GPP IP access network.

Description

Gateway selection method for wireless network

The present invention relates to a method for selecting a gateway of a wireless network, and more particularly to a gateway selection method for a wireless network in which a 3GPP evolved network is a home network, and a 3GPP network before the evolved network is a roaming scenario of a visited network.

Background technique

With the emergence of Wimax (World Interoperability for Microwave Access), the third generation of mobile communication systems must maintain their strong competitiveness in the field of mobile communications, and must improve their network performance and network construction. Operating costs. Therefore, the 3GPP (3rd Generation Partnership Project) standardization working group is currently working on PS Core (Packet Switch Core, Packet Switch Core) and UTRAN (Universal Mobile Telecommunication System Radio Access Network, The evolution of the global mobile communication system radio access network, the entire system is called EPS (Evolved Packet System). The research topic of PS Core Evolution (E-PS Core) is called System Architecture Evolution (SAE). The purpose is to enable E-PS Core to provide higher transmission rate and shorter transmission delay. , Optimize packets, and support mobility management between E-UTRAN (Evolved UTRAN, Evolved UTRAN), UTRAN, WLAN (Wireless Local Area Network), and other non-3GPP access networks.

At present, the architecture of SAE non-3GPP IP access is shown in Figure 1, which includes the following network elements:

E-UTRAN (Evolved UTRAN): An evolved radio access network that provides higher uplink and downlink rates, lower transmission delays, and more reliable wireless transmission. The network element included in the E-UTRA is an eNodeB (Evolved NodeB), which provides radio resources for terminal access.

HSS (Home Subscriber Server): A home subscriber server that permanently stores user subscription data.

MME (Mobility Management Entity): A control plane function entity, a server that temporarily stores user data, responsible for managing and storing UE contexts (such as UE identity/ User ID, mobility management status, user security parameters, etc.), assign temporary identifiers to users, when

The UE is camped on the tracking area or the network is responsible for authenticating the user; processing all non-access stratum messages between the MME and the UE; triggering paging at the SAE.

S-GW (Serving Gateway): A service gateway. The gateway is a user plane entity responsible for user plane data routing processing and terminating downlink data of UEs in idle state. Manage and store the SAE bearer context of the UE, such as IP bearer service parameters and network internal routing information. It is the anchor point of the internal user plane of the 3GPP system. A user can only have one S-GW at a time. In the case of roaming without 3GPP IP access, the S-GW acts as a local anchor for the visited network.

PDN GW (PDN Gateway): A packet data network gateway, which is responsible for the UE accessing the PDN gateway, assigning the user IP address, and is the mobility anchor of the 3GPP and non-3GPP access systems. Users can access multiple PDN GWs at the same time.

Evolved Packet Data Gateway (Evolved Packet Data Gateway) is an evolution and enhancement of PDG (Packet Data Gateway) in an I-WLAN access network. Untrusted non-3GPP access networks must pass ePDG to access the E-PS Core.

3GPP AAA (Authentication, Authorization, Accounting): for passing non-3GPP

The UE accessing the IP access network provides authentication, authentication, and accounting services.

S2a: Provides control and mobility support related to the user plane between the trusted non-3GPP IP access network and the PDN Gateway. Supports MIPV4 FA Mode and PMIPv6 mobility management protocols.

S2b: Provides user plane related control and mobility support between ePDG and PDN Gateway. Support PMIPv6 mobility management protocol

S2c: Provides user plane related control and mobility support between the UE and the PDN Gateway. It can be applied with a trusted or untrusted non-3GPP IP access network or a 3GPP access network. Support for the DSMHV6 mobility management protocol. In the SAE, when the UE accesses the network, the PDN GW selection function selects an appropriate PDN for the UE. In the access authentication process of the mobile terminal, the HSS/AAA provides the necessary information for the PDN GW selection function. In SAE, the information provided by HSS/AAA is as follows:

The information provided by the HSS/AAA to the PDN GW selection function is either the PDN GW IP address list and the APN (Access Point Name); or the APN and whether the visited land is optional. An indication of the PDN GW of the mobile network (VPLMN, Visited PLMN).

When the HSS/AAA provides an indication of the APN and whether the PDN GW of the VPLMN is available for the PDN GW selection function, if the indication indicates that the PDN GW can be selected in the VPLMN, then: the PDN GW selection function first attempts to select from the VPLMN according to the APN. PDN GW, if it fails, the PDN GW selection function then selects the PDN GW from the HPLMN based on the APN.

When the UE accesses the 3GPP network through the untrusted non-3GPP network, the ePDG must pass. When the PMIPv6 protocol is adopted, the PDN GW selection function will be located in the ePDG. When the DSMIPv6 is adopted, the UE can obtain the PDN GW through multiple methods. Select the function information: (1) Obtained through the attach process of 3GPP access; (2) Obtained from the ePDG in the process of establishing an IPSec tunnel. (3) Obtained through DHCP; (4) Obtained through DNS lookup.

The I-WLAN access network is a wireless network that has been successfully applied and deployed. It solves the interconnection between the 3GPP network and the WLAN network. However, the I-WLAN access network is not limited to the interworking between 3GPP and WLAN. Any other IP access network with similar capabilities to WLAN can access WLAN 3GPP IP access and 3GPP through I-WLAN access network. The network is interconnected or directly connected to the Internet via WLAN Derect IP access.

The I-WLAN network architecture is shown in Figure 2. The network elements included are as follows:

PDG (Packet Data Gateway): Packet data gateway, which is the end point of the IPSec tunnel between the UE and the PDG, and encapsulates and encapsulates the data. During the establishment of the IPSec tunnel, the UE is authenticated by the 3GPP AAA Server. The UE is assigned a remote IP address and is bound to its local IP address, and performs routing between the PDN and the UE to provide services for the UE to access the 3GPP through the WLAN. Compared with ePDG, it is obvious that PDG does not support the PDN GW selection function.

WAG (WLAN-Access gateway): A WLAN access gateway that isolates the WLAN from the 3GPP network to provide security for the 3GPP network for data filtering and policy enforcement. Billing is also provided in the case of roaming.

As shown in Figure 3, the roaming scenario is as follows: The UE is the contracted user of the EPS, and the home network is the EPS. The visited network of the UE is the Pre-SAE (Previous SAE, which is the 3GPP network before the EPS. Therefore, the EPS is not supported. The added function) network, but the visited network supports I-WLAN.

During the access authentication process, the UE accesses the 3GPP AAA Proxy of the network and the home network. The HSS/3GPP AAA Server, the UE and the access network perform mutual authentication. After the authentication succeeds, the home network will authorize the UE. Since the UE is a contracted user of the EPS, the HSS/3GPP AAA Server will carry the information parameter of the PDN GW selection function in the authorization return message. Since the 3GPP AAA Proxy (3GPP AAA Proxy Server) of the visited network is Pre-SAE, it does not support the PDN GW selection function information parameter. At this time, there will be two cases: (1) If the PDN GW selects the function parameter to be non-mandatory (that is, when the 3GPP AAA Proxy cannot recognize the parameter, the parameter may not be processed), then there are two cases: a) If the home network authorizes the UE to access the 3GPP network through the visited network PDN GW, it is also acceptable for the UE to access the 3GPP through the visited PDG: (b) If the home network does not authorize the UE to pass through the visited network PDN GW Accessing the 3GPP network, but since the 3GPP AAA Proxy simply ignores the I ^> DN GW selection function parameter, the UE can still access the 3GPP network through the PDG of the visited network. (2) If the PDN GW selects the function parameter to be mandatory (that is, when the 3GPP AAA Proxy cannot recognize the parameter, it will discard the message or return an error message), regardless of whether the home network authorizes the UE to access the visited network PDN GW. In the 3GPP network, the UE cannot access 3GPP, and even cannot access through PDG.

To sum up, there is a need for a gateway scheme in which the 3GPP evolved network is the home network, the 3GPP network before the evolved network is the roaming scenario of the visited network, and the UE selects the gateway through the untrusted non-3GPP IP access network. Summary of the invention

The technical problem to be solved by the present invention is to provide a gateway selection method for a wireless network, which solves the problem that when the 3GPP evolved network is a home network, the 3GPP network before the evolved network is a roaming scenario of the visited network, and the UE is connected through the untrusted non-3GPP IP. The problem of gateway selection for access to the network.

In order to solve the above problems, the present invention provides a

Claims approved

Compared with the prior art, the present invention solves the problem that when the 3GPP evolved network is the home network, the 3GPP network before the evolved network is the roaming scenario of the visited network, and the gateway is selected by the UE through the untrusted non-3GPP IP access network. The problem. BRIEF abstract

FIG. 1 is an interworking architecture diagram of an EPS and a non-3GPP IP access network when non-roaming;

Figure 2 is a non-roaming. I-WLAN architecture diagram;

3 is a roaming scenario diagram of UE untrusted non-3GPP access when the 3GPP evolved network is a home network and the evolved network is a visited network;

4 is a flow chart of a gateway selection method for a wireless network in a preferred embodiment of the present invention;

5 is a schematic diagram of a preferred embodiment of the present invention, when the 3GPP evolved network is a home network, and the 3GPP network before the evolved network is a roaming scenario of the visited network, the UE authenticates when accessing the 3GPP service through the non-trusted non-3GPP access network. Authentication flow chart. Preferred embodiment of the invention

The invention will now be further described with reference to the drawings and preferred embodiments.

As shown in FIG. 4, a method for selecting a gateway of a wireless network is applied to a state in which the 3GPP evolved network is a home network and the 3GPP network before the evolved network is a visited network, and the following steps are included.

Step 110: When the UE accesses the untrusted non-3GPP IP access network, the home 3GPP AAA Server authenticates the UE. If the authentication succeeds, step 120 is performed; otherwise, the process ends; the visited non-trusted non-3GPP IP access Net through 3GPP AAA Server, or, through

The 3GPP AAA Server and the HSS perform access authentication or tunnel authentication on the visited UE.

Step 120: The home 3GPP AAA Server determines the selection function information parameter of the PDN GW according to the subscription information of the UE, and determines whether the UE can access the 3GPP or the external data network through the PDG of the visited network according to the roaming protocol and the network policy, and the home 3GHP The AAA Server sends a return message to the visited 3GPP AAA Proxy;

If the home 3GPP AAA Server does not allow the UE to access the 3GPP or the external data network through the visited network PDG, the return message carries an indication parameter that does not allow the UE to access the 3GPP or the external data network through the visited network PDG; if the home 3GPP AAA Server Allow the UE to pass If the PDG of the visited network accesses the 3GPP or the external data network, the return message does not carry an indication parameter that does not allow the UE to access the 3GPP or the external data network through the visited network PDG.

The PDN GW selection function information parameter is non-mandatory, and the indication parameters that are not allowed to access the 3GPP or the external data network through the visited network PDG are mandatory.

Step 130, after the visited 3GPP AAA Proxy receives the return message sent by the home 3GPP AAA Server, if the return message does not carry the indication parameter that does not allow the UE to access the 3GPP or the external data network through the visited network PDG, step 140 is performed; Otherwise, step 150 is performed; step 140, the visited 3GPP AAA Proxy ignores the selection function information parameter of the PDN GW, and forwards the return message to the visited network PDG, and performs step 160;

Step 150: Visiting the 3GPP AAA Proxy to discard the return message or to the home 3GPP

AAA Server returns an error message and ends the process;

If the return message carries an indication parameter that does not allow the UE to access the 3GPP or the external data network through the visited network PDG, the visited 3GPP AAA Proxy discards the return message or returns an error message to the home 3GPP AAA Server, and the process ends.

Step 160: The visited network PDG receives the return message, and authorizes the UE to access the 3GPP or the external data network by visiting the local network PDG.

The present invention will be further described below in conjunction with specific examples.

As shown in FIG. 5, this example describes authentication authentication when a 3GPP evolved network is a home network, and the 3GPP network before the evolved network is a visited network, and the UE accesses the 3GPP service through the untrusted non-3GPP access network. The process, including the following steps,

Step 501: The UE establishes an IKE (Internet Key Exchange) security association with the PDG, and the UE sends a User Identity (NAI) (Network Access Identifier) and a W-APN (WLAN Access Point Name), and adopts EAP. - AKA (Extensible Authentication Protocol - Key Identity Protocol) method for tunnel authentication succeeded;

Step 502: The PDG sends an authorization request message to the 3GPP AAA Server, where

W-APN;

Step 503: The 3GPP AAA Server determines, according to the subscription information, the roaming protocol, and the network policy of the user, whether the tunnel can be established and whether the visited PDG is allowed to access the 3GPP network or The external data network, if the tunnel is allowed to be established and the access to the 3GPP network or the external data network is allowed through the visited PDG, step 504a is performed; if the tunnel is allowed to be established but not allowed to access the 3GPP network or the external data network by the visited PDG, the execution is performed. Step 504b;

Step 504a, the 3GPP AAA Server allows the UE to access the 3GPP or the external data network through the PDG, and sends an authorization-response message to the 3GPP AAA Proxy, carrying the PDN GW to select the function information, and performing step 505a;

The PDN GW selection function information is not mandatory.

Step 505a, the 3GPP AAA Proxy receives the authorization-response message, ignores the PDN GW selection function information in the message, and forwards it to the PDG, and performs step 506a;

Step 506a: The PDG receives the authorization-response message, ignores the 3PDN GW selection function information in the message, and sends an IKE-authentication response message to the UE. Step 507a;

Step 507a: The UE receives the EAP success message, and the access authentication authentication succeeds.

Step 504b, the 3GPP AAA Server does not allow the UE to access the 3GPP or the external data network through the PDG, and sends an authorization-response message to the 3GPP AAA Proxy, carrying the PDN GW to select the function information and not allowing the PDG access indication, and performing step 505b;

The PDG access indication is not allowed to be mandatory.

Step 505b: The 3GPP AAA Proxy receives the authorization response-message, and the message carries the PDG access indication. Since the 3GPP AAA Proxy cannot identify the parameter and the parameter is mandatory, the 3GPP AAA Proxy discards the message. Performing step 506b;

Step 506b: In 505b, the 3GPP AAA Proxy discards the message, the session times out, the authentication fails, and the process ends.

The above is only a preferred embodiment of the present invention, but the scope of protection of the present invention is not limited thereto, and any person skilled in the art can easily think of changes or replacements within the technical scope of the present invention. All should be covered by the scope of the present invention. Therefore, the scope of protection of the present invention should be determined by the scope of the claims.

Industrial and practical 4 students The technical solution of the present invention solves the problem that when the 3GPP evolved network is the home network, the 3GPP network before the evolved network is the roaming scenario of the visited network, and the UE selects the gateway through the untrusted non-3GPP IP access network, A secure and reliable gateway selection method for wireless networks.

Claims

Claim

A gateway selection method for a wireless network, which is applied to a third-generation partnership program. The 3GPP network before the home network and the evolved network are in the state of the visited network, and the following steps are included.

a. When the terminal UE accesses through the untrusted non-3GPP IP access network, the home 3GPP evolved network authentication, authentication, and accounting server 3GPP AAA Server authenticates the UE. If the authentication succeeds, the home 3GPP AAA Server determines the packet data network. The gateway PDN GW selects a function information parameter, and determines whether the UE accesses the 3GPP network through the packet data gateway PDG of the visited network, and the home 3GPP AAA Server sends the return message to the 3GPP network before the visited evolved network, authentication, authentication, Charging proxy server 3GPP AAA Proxy;

After the 3GPP AAA Proxy receives the return message sent by the home 3GPP AAA Server, if the return message does not carry the indication parameter that does not allow the UE to access the 3GPP network or the external data network through the visited network PDG, the PDN is ignored. The GW selects a function information parameter, and forwards the return message to the visited network PDG;

c. Visiting network After receiving the return message, the PDG authorizes the UE to access the 3GPP network through the visited network PDG.

2. The method according to claim 1, wherein the non-trusted non-3GPP IP access network in the visited area performs access authentication or tunneling to the visited UE through the 3GPP AAA Server or through the 3GPP AAA Server and the HSS. Certification.

The method according to claim 1, wherein in the step a, the home 3GPP AAA Server determines a selection function information parameter of the PDN GW according to the subscription information of the UE, and according to the roaming protocol and the network policy. Determining whether the UE accesses the 3GPP or the external data network through the PDG of the visited network.

The method according to claim 3, wherein the home 3GPP AAA Server determines whether the UE accesses the 3GPP or the external data network through the PDG of the visited network.

If the home 3GPP AAA Server does not allow the UE to access 3GPP through the visited network PDG Or an external data network, where the return message carries an indication parameter that does not allow the UE to access the 3GPP or the external data network through the visited network PDG;

If the home 3GPP AAA Server allows the UE to access the 3GPP or the external data network through the PDG of the visited network, the return message does not carry the indication parameter that does not allow the UE to access the 3GPP or the external data network through the visited network PDG.

5. The method according to claim 4, wherein in the step b,

After the visited 3GPP AAA Proxy receives the return message sent by the home 3GPP AAA Server, if the return message does not carry the indication parameter that does not allow access to the 3GPP or the external data network through the visited network PDG, the PDN GW is ignored. The function information is selected and forwarded to the visited network PDG.

6. The method according to claim 4, wherein in the step b,

If the return message carries an indication parameter that does not allow the UE to access the 3GPP or the external data network through the visited network PDG, the visited 3GPP AAA Proxy discards the return message or returns an error message to the home 3GPP AAA Server, and ends the process.

The method according to claim 3, wherein the selection function information parameter of the PDN GW is non-mandatory; the home 3GPP AAA Server does not allow the UE to access the 3GPP or the external data network through the visited network PDG. Indicates that the parameter is mandatory.

8. The method according to claim 1, wherein in the step a, if the authentication fails, the process ends.