WO2009074084A1 - Registration information process method, data process device and system - Google Patents

Registration information process method, data process device and system Download PDF

Info

Publication number
WO2009074084A1
WO2009074084A1 PCT/CN2008/073260 CN2008073260W WO2009074084A1 WO 2009074084 A1 WO2009074084 A1 WO 2009074084A1 CN 2008073260 W CN2008073260 W CN 2008073260W WO 2009074084 A1 WO2009074084 A1 WO 2009074084A1
Authority
WO
WIPO (PCT)
Prior art keywords
user
information
identifier
network access
registration
Prior art date
Application number
PCT/CN2008/073260
Other languages
French (fr)
Chinese (zh)
Inventor
Enjie Dong
Xiaofeng Cai
Original Assignee
Huawei Technologies Co., Ltd.
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Huawei Technologies Co., Ltd. filed Critical Huawei Technologies Co., Ltd.
Publication of WO2009074084A1 publication Critical patent/WO2009074084A1/en

Links

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04WWIRELESS COMMUNICATION NETWORKS
    • H04W8/00Network data management
    • H04W8/02Processing of mobility data, e.g. registration information at HLR [Home Location Register] or VLR [Visitor Location Register]; Transfer of mobility data, e.g. between HLR, VLR or external networks
    • H04W8/04Registration at HLR or HSS [Home Subscriber Server]

Definitions

  • a second transceiver module configured to receive registration information sent by the external proxy node, where the second message processing module is configured to update the user identifier carried in the registration information User information and/or first data forwarding information corresponding to the network access identity update.
  • a second transceiver module configured to receive the registration information sent by the sending module, where the second message processing module is configured to update the user information and/or the user information corresponding to the user identifier and the network access identifier update carried in the registration information.
  • a data forwarding message configured to update the user information and/or the user information corresponding to the user identifier and the network access identifier update carried in the registration information.
  • the mobile node user identifier is written into the registration request information or the registration update request information, so that the HA can uniquely identify the user identifier and the NAI.
  • the user in the case of realizing multi-user shared NAI, effectively ensures the security of the user's normal use of the IP service and the user information. Detailed description.
  • FIG. 1 it is a flowchart of a first embodiment of a registration information processing method of the present invention, which includes the following steps:
  • Step 102 The HA updates the user information and/or the first data forwarding information corresponding to the user identifier and the NAI in the registration information according to the registration information, that is, updates the user information corresponding to the user identifier and the NAI, and/or the first data forwarding. Any or both of the information.
  • the FA When the MN leaves the home network and accesses a foreign network, the FA sends a link request to the FA of the foreign network, and sends its user identification IMSI, NAI, HA address and its home address to the FA, and establishes a link connection with the FA. And get one available from the foreign network
  • FIG. 2 it is a flowchart of a second embodiment of a registration information processing method of the present invention, which includes the following steps:
  • Step 206 The HA creates user information and first data forwarding information corresponding to the user identifier IMSI in the user information table and the first data forwarding table, where the user information includes the user identifier IMSI, NAI, the COA carried in the registration information, and The HA address assigned to the user ID.
  • Step 209 the HA cooperates with the FA, and forwards information according to the first data stored in the HA.
  • FIG. 3 it is a flowchart of a third embodiment of a registration information processing method of the present invention, which includes the following steps:
  • Step 309 The HA determines whether the first user information table stored in the pre-stored user information has the same user information as the NAI carried in the registration information. If yes, the registration information is the registration update request information, and step 310 is performed; otherwise, the registration is performed. Information is a registration request letter In the event, go to step 311.
  • FIG. 4 it is a schematic structural diagram of Embodiment 1 of a data processing apparatus according to the present invention.
  • the data processing apparatus can be used as an external proxy node, and includes:
  • the first data table management module 406 is connected to the first receiving module 401, and is configured to create a hometown with the MN in the second data forwarding table when the update response information received by the first receiving module 401 is the response information of the update success.
  • Corresponding second data forwarding information where the second data forwarding information includes a home address, a home agent node address to which the user identifier belongs, a COA and a data link;
  • the second data forwarding module 503 is configured to forward data to the FA according to the first data forwarding information.
  • the creating unit 5021 is configured to be connected to the first determining module 504, configured to: when the user information that is the same as the user identifier and the NAI carried in the registration information does not exist in the first user information table, respectively, in the user information table and the first data forwarding table. Creating the first data forwarding information of the user information corresponding to the user identifier and the NAI, where the user information includes the user identifier, the NAI, the C 0 A carried in the registration information, and the home address assigned to the user identifier;
  • the second determining module 505 is configured to determine, when the user is a multi-user, whether the user information is included in the registration information.
  • FIG. 8 is a schematic structural diagram of Embodiment 5 of the data processing apparatus of the present invention.
  • the data processing apparatus of the embodiment may further include: a fourth determining module 507, configured on the basis of the embodiment shown in FIG.
  • the second determining module 506 and the second transceiver module 501 are configured to determine, according to the attribute information of the user, whether the user is a multi-user when the registration information does not include the user identifier;
  • the FA when the FA forwards the registration request information or the registration request information and the registration update information sent by the mobile node to the HA, the FA writes the mobile node user identifier to the registration request information or the registration request information and the registration update information, on the HA.
  • the NAI and the user identifier uniquely identify a registration request information or registration update information, so that the HA can uniquely identify the mobile IP user according to the user identifier and the NAI, and uniquely identify the registration request information or the registration update information according to the NAI and the user identifier, thereby avoiding
  • the user information is confused by the multi-user shared NAI, which effectively ensures the security of the user's normal use of the IP service and the user information.

Abstract

A registration information process method, a data process device and a system are disclosed. The registration information process method includes that: receiving registration information which contains a user identifier and a network access identifier, updating the user information and/or the first data transmitting information corresponding to the user identifier and the network access identifier. The HA can identify the user uniquely based on the user identifier and the NAI, in order to avoid the confusion of user information caused by multi-users sharing NAI, and effectively to guarantee the security for the user to normally use the IP service and the user information.

Description

注册信息处理方法、 数据处理装置与系统 本申请要求于 2007 年 12 月 4 日提交中国专利局, 申请号为 200710193857.X, 发明名称为 "注册信息处理方法、 数据处理装置与 系统"的中国专利申请的优先权, 其全部内容通过引用结合在本申请 中。 技术领域  Registration information processing method, data processing device and system The present application claims to be submitted to the Chinese Patent Office on December 4, 2007, the application number is 200710193857.X, and the invention name is "registration information processing method, data processing device and system" Chinese patent Priority of the application, the entire contents of which are incorporated herein by reference. Technical field
本发明涉及通信技术, 尤其是一种注册信息处理方法、数据处理 装置与系统。 背景技术  The present invention relates to communication technologies, and more particularly to a registration information processing method, a data processing apparatus and system. Background technique
用户接入网络后, 在不同地区间移动时, 经常会遇到切换运营商 与网络接入方式的情况, 由于不同运营商、 不同的接入方式的网络覆 盖范围与适用条件不同, 因此, 用户切换运营商、 接入方式时需要释 放已有的数据链路, 重新建立一条新的数据链路。  After users access the network, when they move between different areas, they often encounter the situation of switching operators and network access methods. Because different operators and different access methods have different network coverage and applicable conditions, users When switching operators and access modes, you need to release the existing data link and re-establish a new data link.
每个移动 IP用户都有自己的家乡网络, 当移动节点 (Mobile Node, MN ) 处于在家乡网络中时, 其可以直接通过家乡代理节点 ( home agent, HA )与外部网络通信, 所有发往该移动节点的数据报 文都发送给 HA, 由 HA转发给移动节点; 该移动节点发出的数据报文 通过数据流链路首先发送到 HA, 由 HA转发给目的节点。  Each mobile IP user has its own home network. When the mobile node (MN) is in the home network, it can communicate with the external network directly through the home agent (HA), all sent to the mobile node (MN). The data packets of the mobile node are sent to the HA and forwarded by the HA to the mobile node. The data packets sent by the mobile node are first sent to the HA through the data flow link, and are forwarded by the HA to the destination node.
当移动节点离开家乡网络、接入到一个外地网络中时, 移动节点 首先与外地网络的外部代理节点 ( foreign agent, FA )建立连接, 向 FA上报其 HA地址及其家乡地址, 并从该外地网络获得一个可用的转 交地址(Care-of- Address, COA ) , FA根据移动节点的 HA地址、 家 乡地址、 COA, 以及 FA到移动节点之间的数据链路建立用户相关信 息表。 移动节点获取到 COA后, 向 HA发送移动 IP注册请求信息, 请 求在 HA上注册其当前的 COA, HA根据注册请求为用户创建注册记 录,该注册记录包括用于标识移动节点用户的网络接入标识( Network Access Identifier, NAI )、 由 HA分配的、 表示移动节点用户在家乡网 络中的 IP地址的家乡地址( home address )与转交地址, 可记为 <NAI, home address, COA>。 之后, 移动节点定期向 HA发送注册更新请求 信息, 以更新其在 HA上的注册记录。 此时, HA上保存的移动节点用 户信息中包括移动节点用户的注册记录以及向该移动节点转发数据 的数据转发方式信息, 例如: 隧道方式。 移动节点经过 F A在 HA上注 册后, 在 FA与 HA上会分别为该移动节点创建数据转发表。 When the mobile node leaves the home network and accesses a foreign network, the mobile node first establishes a connection with a foreign agent (FA) of the foreign network, reports its HA address and its home address to the FA, and from the field. The network obtains an available Care-of-Address (COA), and the FA establishes a user-related information table based on the mobile node's HA address, home address, COA, and the data link between the FA and the mobile node. After obtaining the COA, the mobile node sends a mobile IP registration request message to the HA, requesting to register its current COA on the HA, and the HA creates a registration record for the user according to the registration request, and the registration record includes network access for identifying the mobile node user. Logo ( Network Access Identifier (NAI), the home address and care-of address assigned by the HA to indicate the IP address of the mobile node user in the home network, can be recorded as <NAI, home address, COA>. Thereafter, the mobile node periodically sends registration update request information to the HA to update its registration record on the HA. At this time, the mobile node user information stored on the HA includes a registration record of the mobile node user and data forwarding mode information for forwarding data to the mobile node, for example, a tunnel mode. After the mobile node registers with the HA on the HA, a data forwarding table is created for the mobile node on the FA and the HA respectively.
HA为用户创建注册记录后, 所有发往该移动节点的下行数据, 其目的地址即移动结点的家乡地址, 首先发送给移动节点的 HA, HA 根据家乡地址查询 HA上存储的第一数据转发表, 根据其中记录的转 发方式信息对数据进行相应的隧道封装后, 按照注册记录中的 COA 地址转发给 FA; FA收到下行数据后, 以<11 地址, COA地址, 家乡 地址 >为索引, 查询 FA上存储的第二数据转发表, 查询该移动节点所 在的数据链路, 并以该数据链路发送给移动节点。 移动节点发出的上 行数据通过其所在数据链路首先发送到 FA, 由 FA封装后按照移动节 点注册的 HA地址发送给 HA, 再由 HA解封装后转发给目的节点; 另 外, 也可以由 FA根据移动节点注册的家乡地址直接进行路由转发, 此时, 上下行数据报文所经过的路径不同, 称之为三边路由。  After HA creates a registration record for the user, all the downlink data sent to the mobile node, whose destination address is the home address of the mobile node, is first sent to the HA of the mobile node, and the HA queries the first data transfer stored on the HA according to the home address. After the tunnel is encapsulated according to the forwarding mode information recorded therein, the data is forwarded to the FA according to the COA address in the registration record. After receiving the downlink data, the FA uses the <11 address, COA address, and home address> as the index. Querying the second data forwarding table stored on the FA, querying the data link where the mobile node is located, and transmitting the data link to the mobile node by using the data link. The uplink data sent by the mobile node is first sent to the FA through the data link where it is located, and is encapsulated by the FA and sent to the HA according to the HA address registered by the mobile node, and then decapsulated by the HA and then forwarded to the destination node. Alternatively, the FA may also be based on the FA. The home address registered by the mobile node directly performs route forwarding. At this time, the path through which the uplink and downlink data packets pass is different, which is called a three-sided route.
CDMA2000网络中的用户数量较多, 如果每个用户使用的 NAI都 不相同, 此时的 NAI可称为单用户 NAI, 则需要浪费较多的 NAI网络 资源; 并且, 需要运营商维护的信息量庞大, 所需成本较高; 另外, 对 HA的存储、 信息处理与维护性能要也很高。 因此, CDMA2000分 组域协议提出了多用户使用相同 NAI, 此时的 NAI也称为多用户共用 NAI, 要求 HA支持移动节点通过多用户共用 NAI接入网络, 若 HA能 接受 "相同 NAI但不同 home address" 的注册请求信息并创建不同注 册记录, 便可实现该功能。  The number of users in the CDMA2000 network is large. If the NAI used by each user is different, the NAI at this time can be called a single-user NAI, which requires wasting more NAI network resources. Moreover, the amount of information maintained by the operator is required. Large, high cost; In addition, the storage, information processing and maintenance performance of HA is also very high. Therefore, the CDMA2000 packet domain protocol proposes that multiple users use the same NAI. At this time, the NAI is also called multi-user shared NAI, and the HA is required to support the mobile node to access the network through multi-user shared NAI. If the HA can accept the same NAI but different homes. This function can be implemented by registering request information for address" and creating different registration records.
在实现本发明的过程中, 发明人发现现有技术至少存在以下问 题:  In carrying out the process of the present invention, the inventors have found that the prior art has at least the following problems:
现有的移动 IP技术方案无法实现多用户共用 NAI, NAI只能唯一 标识一个移动 IP用户。 由于 MN-FA、 MN-HA、 MN-AAA间的安全联 盟参数都是通过 NAI来索引的, 如果简单地使多个用户使用相同的 The existing mobile IP technology solution cannot achieve multi-user shared NAI, and the NAI can only be unique. Identify a mobile IP user. Since the security association parameters between MN-FA, MN-HA, and MN-AAA are all indexed by NAI, if multiple users are simply used the same
MN- AAA的安全联盟参数, HA无法根据 NAI识别不同的用户, 这就 会导致 HA将不同用户的消息当成同一用户的消息进行处理, 从而使 用户无法正常使用移动 IP业务; 并且, 由于 HA的误发或者某些用户 的恶意破坏, 可能导致本应发往 A用户移动节点的数据被发往用户 B 的节点, 从而造成用户 A信息的泄露, 存在这严重的安全性问题。 MN-AAA security association parameters, HA cannot identify different users according to NAI, which causes HA to process messages of different users as messages of the same user, so that users cannot use mobile IP services normally; and, due to HA Mis-delivery or malicious destruction of some users may cause data that should be sent to the mobile node of the A user to be sent to the node of user B, thereby causing leakage of user A information, and this serious security problem exists.
当多用户共用 NAI, 并且位于不同的外地网络时, 也存在同样的 问题。 发明内容  The same problem exists when multiple users share NAI and are located in different foreign networks. Summary of the invention
本发明实施例提供了注册信息处理方法、 数据处理装置与系统, 可以实现多用户共用 NAI, 并且有效提高用户信息的安全性。  The embodiments of the present invention provide a registration information processing method, a data processing apparatus, and a system, which can implement multi-user sharing of NAI, and effectively improve the security of user information.
本发明实施例的一个方面, 提供的一种注册信息处理方法, 包括 以下步骤:  An aspect of an embodiment of the present invention provides a registration information processing method, including the following steps:
接收注册信息, 所述注册信息中包含用户标识与网络接入标识; 更新与所述用户标识及所述网络接入标识相应的用户信息和 /或 第一数据转发信息, 即: 更新与所述用户标识及所述网络接入标识相 应的用户信息与第一数据转发信息中的任意一种或两种。  Receiving registration information, where the registration information includes a user identifier and a network access identifier; updating user information and/or first data forwarding information corresponding to the user identifier and the network access identifier, that is, updating and The user identifier and any one or two of the corresponding user information and the first data forwarding information of the network access identifier.
本发明实施例的另一个方面, 提供的一种数据处理装置, 包括: 第一消息处理模块,用于根据移动节点发送的注册请求或注册更 新请求生成包含用户标识与网络接入标识的注册信息;  According to another aspect of the embodiments of the present invention, a data processing apparatus includes: a first message processing module, configured to generate registration information including a user identifier and a network access identifier according to a registration request or a registration update request sent by a mobile node. ;
发送模块, 用于发送所述注册信息。  a sending module, configured to send the registration information.
根据本发明实施例的又一个方面, 提供的另一种数据处理装置 , 包括:  According to still another aspect of the embodiments of the present invention, another data processing apparatus is provided, including:
第二收发模块, 用于接收外部代理节点发送的注册信息; 第二消息处理模块,用于更新与所述注册信息中携带的用户标识 与网络接入标识更新相应的用户信息和 /或第一数据转发信息。 a second transceiver module, configured to receive registration information sent by the external proxy node, where the second message processing module is configured to update the user identifier carried in the registration information User information and/or first data forwarding information corresponding to the network access identity update.
根据本发明实施例的再一个方面, 提供的一种数据处理系统, 包 括家乡代理节点与外部代理节点, 所述外部代理节点包括:  According to still another aspect of the embodiments of the present invention, a data processing system is provided, including a home agent node and an external agent node, where the external agent node includes:
第一消息处理模块,用于根据移动节点发送的注册请求或注册更 新请求生成包含用户标识与网络接入标识的注册信息;  a first message processing module, configured to generate registration information including a user identifier and a network access identifier according to a registration request or a registration update request sent by the mobile node;
发送模块, 用于向所述家乡代理节点发送所述注册信息; 所述家乡代理节点包括:  a sending module, configured to send the registration information to the home agent node; the home agent node includes:
第二收发模块, 用于接收所述发送模块发送的注册信息; 第二消息处理模块,用于更新与所述注册信息中携带的用户标识 与网络接入标识更新相应的用户信息和 /或第一数据转发信息。  a second transceiver module, configured to receive the registration information sent by the sending module, where the second message processing module is configured to update the user information and/or the user information corresponding to the user identifier and the network access identifier update carried in the registration information. A data forwarding message.
与现有技术相比, 本发明实施例具有以下优点:  Compared with the prior art, the embodiment of the invention has the following advantages:
本发明实施例中, FA向 HA转发移动节点发送的注册请求信息或 注册请求信息与注册更新信息时,向注册请求信息或注册请求信息与 注册更新信息中写入移动节点用户标识, 在 HA上通过 NAI与用户标 识唯一标识一个注册请求信息或注册更新信息, 使 HA可以根据用户 标识与 NAI唯一的识别移动 IP用户, 才艮据 NAI与用户标识唯一识别注 册请求信息或注册更新信息, 从而避免由于多用户共用 NAI引起用户 信息的混乱, 有效保证了用户正常使用 IP业务与用户信息的安全性。 附图说明  In the embodiment of the present invention, when the FA forwards the registration request information or the registration request information and the registration update information sent by the mobile node to the HA, the FA writes the mobile node user identifier to the registration request information or the registration request information and the registration update information, on the HA. The NAI and the user identifier uniquely identify a registration request information or registration update information, so that the HA can uniquely identify the mobile IP user according to the user identifier and the NAI, and uniquely identify the registration request information or the registration update information according to the NAI and the user identifier, thereby avoiding The user information is confused by the multi-user shared NAI, which effectively ensures the security of the user's normal use of the IP service and the user information. DRAWINGS
图 1为本发明注册信息处理方法第一实施例的流程图;  1 is a flowchart of a first embodiment of a method for processing registration information according to the present invention;
图 2为本发明注册信息处理方法第二实施例的流程图;  2 is a flowchart of a second embodiment of a method for processing registration information according to the present invention;
图 3为本发明注册信息处理方法第三实施例的流程图;  3 is a flowchart of a third embodiment of a method for processing registration information according to the present invention;
图 4为本发明数据处理装置实施例一的结构示意图;  4 is a schematic structural diagram of Embodiment 1 of a data processing apparatus according to the present invention;
图 5为本发明数据处理装置实施例二的结构示意图;  FIG. 5 is a schematic structural diagram of Embodiment 2 of a data processing apparatus according to the present invention; FIG.
图 6为本发明数据处理装置实施例三的结构示意图;  6 is a schematic structural diagram of Embodiment 3 of a data processing apparatus according to the present invention;
图 7为本发明数据处理装置实施例四的结构示意图;  7 is a schematic structural diagram of Embodiment 4 of a data processing apparatus according to the present invention;
图 8为本发明数据处理装置实施例五的结构示意图;  8 is a schematic structural diagram of Embodiment 5 of a data processing apparatus according to the present invention;
图 9为本发明数据处理装置实施例六的结构示意图。 具体实施方式 FIG. 9 is a schematic structural diagram of Embodiment 6 of a data processing apparatus according to the present invention. detailed description
下面将结合本发明实施例中的附图,对本发明实施例中的技术方 案进行清楚、 完整地描述, 显然, 所描述的实施例仅是本发明一部分 实施例, 而不是全部的实施例。 基于本发明中的实施例, 本领域普通 技术人员在没有做出创造性劳动前提下所获得的所有其他实施例,都 属于本发明保护的范围。  The technical solutions in the embodiments of the present invention are clearly and completely described in the following with reference to the accompanying drawings in the embodiments of the present invention. It is obvious that the described embodiments are only a part of the embodiments of the present invention, but not all of the embodiments. All other embodiments obtained by a person of ordinary skill in the art based on the embodiments of the present invention without creative efforts are within the scope of the present invention.
本发明实施例 FA向 HA转发移动节点发送的注册请求信息或注 册更新请求信息时,向注册请求信息或注册更新请求信息中写入移动 节点用户标识, 使 HA可以根据用户标识与 NAI唯一的识别用户, 从 而在实现多用户共用 NAI的情况下, 有效保证了用户正常使用 IP业务 与用户信息的安全性。 细说明。  In the embodiment of the present invention, when the FA forwards the registration request information or the registration update request information sent by the mobile node to the HA, the mobile node user identifier is written into the registration request information or the registration update request information, so that the HA can uniquely identify the user identifier and the NAI. The user, in the case of realizing multi-user shared NAI, effectively ensures the security of the user's normal use of the IP service and the user information. Detailed description.
如图 1所示, 为本发明注册信息处理方法第一实施例的流程图, 其包括以下步骤:  As shown in FIG. 1 , it is a flowchart of a first embodiment of a registration information processing method of the present invention, which includes the following steps:
步骤 101 , FA根据 MN发送的注册请求或注册更新请求, 生成并 向该 MN的 HA发送注册信息, 该注册信息中包含用户标识与 NAI。 其 中的用户标识与 NAI唯一标识一个移动节点用户, 例如: 国际移动用 户标识 ( International Mobile Subscriber Identity, IMSI ) , 注册信息 可以为注册请求信息或注册更新请求信息。  Step 101: The FA generates and sends registration information to the HA of the MN according to the registration request or the registration update request sent by the MN, where the registration information includes the user identifier and the NAI. The user identifier and the NAI uniquely identify a mobile node user, for example, an International Mobile Subscriber Identity (IMSI), and the registration information may be registration request information or registration update request information.
步骤 102 , HA根据注册信息, 更新与注册信息中的用户标识及 NAI相应的用户信息和 /或第一数据转发信息, 即: 更新与用户标识及 NAI相应的用户信息和 /或第一数据转发信息中的任意一种或两种。  Step 102: The HA updates the user information and/or the first data forwarding information corresponding to the user identifier and the NAI in the registration information according to the registration information, that is, updates the user information corresponding to the user identifier and the NAI, and/or the first data forwarding. Any or both of the information.
对注册信息进行处理时,首先要识别该注册信息是注册请求信息 或注册更新请求信息, 具体地, 可通过判断预先存储的用户信息表中 是否存在与注册信息中携带的用户标识及 NAI相同的用户信息来识 别该注册信息, 从而进行相应处理。 向注册请求信息或注册更新信息中写入移动节点用户标识, 在When the registration information is processed, the registration information is first identified as the registration request information or the registration update request information. Specifically, the user information table stored in the pre-stored information may be the same as the user identifier and the NAI carried in the registration information. The user information identifies the registration information and performs corresponding processing. Write the mobile node user ID to the registration request information or the registration update information,
HA上通过 NAI与用户标识唯一标识一个注册请求信息或注册更新信 息, 使 HA可以根据用户标识与 NAI唯一的识别移动 IP用户, 根据 NAI 与用户标识唯一识别注册请求信息或注册更新信息,从而避免由于多 用户共用 NAI引起用户信息的混乱, 有效保证了用户正常使用 IP业务 与用户信息的安全性。 The HA uniquely identifies a registration request information or registration update information by using the NAI and the user identifier, so that the HA can uniquely identify the mobile IP user according to the user identifier and the NAI, and uniquely identify the registration request information or the registration update information according to the NAI and the user identifier, thereby avoiding The user information is confused by the multi-user shared NAI, which effectively ensures the security of the user's normal use of the IP service and the user information.
MN离开家乡网络、 接入到一个外地网络中时, 向外地网络的 FA 发送建立链路请求, 向 FA上 ^艮其用户标识 IMSI、 NAI、 HA地址及其 家乡地址, 与 FA建立链路连接, 并从该外地网络获得一个可用的 When the MN leaves the home network and accesses a foreign network, the FA sends a link request to the FA of the foreign network, and sends its user identification IMSI, NAI, HA address and its home address to the FA, and establishes a link connection with the FA. And get one available from the foreign network
COA: COA1 , FA根据移动节点的 IMSI、 NAI, HA地址、 家乡地址、COA: COA1, FA according to the mobile node's IMSI, NAI, HA address, home address,
COA, 以及 F A到该 MN之间的数据链路建立用户相关信息表, 即: 第 二用户信息表, 以及第二数据转发表。 之后, MN便可通过该 FA向其The COA, and the data link between F A and the MN establish a user related information table, namely: a second user information table, and a second data forwarding table. After that, the MN can pass the FA to it.
HA发送注册请求信息或注册更新请求信息。 如下表 10所示, 为 FA建 立的第二用户信息表上该 MN的用户相关信息: The HA sends registration request information or registration update request information. As shown in Table 10 below, the user information about the MN on the second user information table established for the FA:
表 1 FA上的第二用户信息表  Table 1 Second User Information Table on FA
Figure imgf000008_0001
Figure imgf000008_0001
FA上的第二用户信息表中根据实际需求,还可以存储有 MN用户 的其它信息, 例如: 隧道参数。  The second user information table on the FA may also store other information of the MN user according to actual needs, for example: tunnel parameters.
如图 2所示, 为本发明注册信息处理方法第二实施例的流程图, 其包括以下步骤:  As shown in FIG. 2, it is a flowchart of a second embodiment of a registration information processing method of the present invention, which includes the following steps:
步骤 201 , FA接收 MN发送的注册请求或注册更新请求, 并根据 该注册请求或注册更新请求生成并向该 MN的 HA发送注册信息,该注 册信息中包含 NAI, 另夕卜, 还可以包含 MN用户标识: IMSI信元扩展。  Step 201: The FA receives a registration request or a registration update request sent by the MN, and generates and sends registration information to the HA of the MN according to the registration request or the registration update request, where the registration information includes the NAI, and may further include the MN. User ID: IMSI Cell Extension.
其中, IMSI信元扩展格式可以釆用 RFC3115中定义的普通厂商定 义扩展 ( Normal Vendor/ Organization Specific Extension, NVSE )格式, 此时, 若 HA能识别该 NVSE格式的 IMSI信息则处理, 若无法识别或 者不支持该 NVSE格式消息, 可以跳过该 NVSE格式的 IMSI信息继续 处理注册信息中的其它部分信息。 如下表 11所示, 为 RFC3115协议定 义的 NVSE格式要求: The IMSI cell extension format may use the Normal Vendor/Organization Specific Extension (NVSE) format defined in RFC3115. In this case, if the HA can identify the IMSI information in the NVSE format, if it is not recognized or The NVSE format message is not supported, and the IMSI information in the NVSE format can be skipped to continue processing other pieces of information in the registration information. As shown in Table 11 below, the NVSE format requirements defined for the RFC3115 protocol are:
表 2 NVSE格式要求  Table 2 NVSE format requirements
0 1 2  0 1 2
3  3
01234567890123456789012345678901
Figure imgf000009_0001
其中, Type为扩展类型, 按照 RFC3115协议的定义, 取值为 134, 表示是一个 NVSE扩展; Length表示该扩展所占的字节数,不包括 type 和 length字段所占的字节数; Reserved为保留字段,按照 RFC3115协议 的定义, 取值为 0; Vendor-ID为设备厂商 ID , 取值为 2011 ; Vendor-NVSE-Type为该 NVSE格式扩展的子类型, 取值为 1; Vendor-NVSE-Value为该扩展所保护的数据部分, 即: IMSI值。例如: IMSI为 460030912120016, 以 NVSE格式表示的该 IMSI的 16进制码流 为: 86110000000007 db 0001084106309021210061, 其中, 86为扩展类型, 11为长度, 0000为保留字段, 000007 db为设备厂商 ID, 0001为子类型, 08 为 IMSI长度, 4106309021210061为 IMSI 编码后的值。
01234567890123456789012345678901
Figure imgf000009_0001
Type is an extension type. According to the definition of RFC3115, the value is 134, indicating that it is an NVSE extension. Length indicates the number of bytes occupied by the extension, excluding the number of bytes occupied by the type and length fields. The reserved field is 0 according to the definition of the RFC3115 protocol; the Vendor-ID is the device manufacturer ID, and the value is 2011; the Vendor-NVSE-Type is the subtype of the NVSE format extension, which is 1; Vendor-NVSE- Value is the portion of data protected by this extension, ie: IMSI value. For example: IMSI is 460003312120016, the hexadecimal code stream of the IMSI expressed in NVSE format is: 86110000000007 db 0001084106309021210061, where 86 is the extension type, 11 is the length, 0000 is the reserved field, 000007 db is the device manufacturer ID, 0001 is Subtype, 08 is the IMSI length, 4106309021210061 is the IMSI encoded value.
具体地,该 IMSI在注册请求信息与注册更新请求信息或其应该消 息中的位置,位于 MN-HA认证扩展信息与 FA-HA认证扩展信息之间。  Specifically, the location of the IMSI in the registration request information and the registration update request information or its corresponding message is located between the MN-HA authentication extension information and the FA-HA authentication extension information.
步骤 202, HA根据预先设置的 NAI的属性信息, 判断该 NAI是否 为多用户 NAI,若是多用户 NAI,则执行步骤 203;否则,执行步骤 205。 其中的预先设置的 NAI的属性信息可以是预先指定哪些 NAI为单用户 NAI, 哪些 NAI为多用户 NAI。  Step 202: The HA determines, according to the attribute information of the preset NAI, whether the NAI is a multi-user NAI, and if it is a multi-user NAI, performs step 203; otherwise, performs step 205. The attribute information of the preset NAI may be pre-specified which NAIs are single-user NAIs and which NAIs are multi-user NAIs.
步骤 203, HA判断注册信息中是否包含用户标识 IMSI, 若包含, 执行步骤 204; 否则, 执行步骤 210。 步骤 204, HA判断预先存储的用户信息表中是否存在与注册信息 中携带的用户标识 IMSI及 NAI相同的用户信息, 若存在, 说明该注册 信息为注册更新请求信息, 执行步骤 205; 否则, 说明该注册信息为 注册请求信息, 执行步骤 206。 Step 203: The HA determines whether the user identifier IMSI is included in the registration information. If yes, go to step 204; otherwise, go to step 210. Step 204: The HA determines whether the user information in the pre-stored user information table is the same as the user identifiers IMSI and the NAI carried in the registration information. If yes, the registration information is the registration update request information, and the step 205 is performed; otherwise, the description is performed. The registration information is registration request information, and step 206 is performed.
步骤 205 , 在 NAI为单用户 NAI时, HA更新与 NAI相应的第一用 户信息表中的用户信息, 和 /或第一数据转发表中的第一数据转发信 息中的相关信息: 例如: COA; 若 NAI为多用户 NAI, 则更新与 IMSI 及 NAI相应的第一用户信息表中的用户信息,和 /或第一数据转发表中 的第一数据转发信息中的相关信息, 然后执行步骤 207。 HA上存储的 第一用户信息表的一具体实例如下表 12所示:  Step 205: When the NAI is a single-user NAI, the HA updates the user information in the first user information table corresponding to the NAI, and/or the related information in the first data forwarding information in the first data forwarding table: For example: COA If the NAI is a multi-user NAI, update the user information in the first user information table corresponding to the IMSI and the NAI, and/or the related information in the first data forwarding information in the first data forwarding table, and then perform step 207. . A specific example of the first user information table stored on the HA is as shown in Table 12 below:
表 3 HA上的第一用户信息表
Figure imgf000010_0001
其中, 第一用户信息表中还可以存储更多的用户信息, 例如: 隧 道封装参数。
Table 3 First User Information Table on HA
Figure imgf000010_0001
The first user information table may further store more user information, for example: tunnel encapsulation parameters.
步骤 206, HA分别在用户信息表与第一数据转发表中创建与用户 标识 IMSI相应的用户信息与第一数据转发信息,该用户信息包括用户 标识 IMSI、 NAI, 注册信息中携带的 COA、 与向用户标识分配的 HA 地址。  Step 206: The HA creates user information and first data forwarding information corresponding to the user identifier IMSI in the user information table and the first data forwarding table, where the user information includes the user identifier IMSI, NAI, the COA carried in the registration information, and The HA address assigned to the user ID.
步骤 207 , HA生成并向 FA返回包含用户标识 IMSI及向该用户标 识分配的 COA的更新成功应答信息。  Step 207: The HA generates and returns to the FA an update success response message including the user identifier IMSI and the COA assigned to the user identifier.
步骤 208 , FA在第二数据转发表中创建与家乡地址相应的第二数 据转发信息, 该第二数据转发信息包括家乡地址、 用户标识所属的家 HA地址、向用户标识分配的 COA、与到使用该用户标识的 MN的数据 链路。  Step 208: The FA creates second data forwarding information corresponding to the home address in the second data forwarding table, where the second data forwarding information includes a home address, a home HA address to which the user identifier belongs, a COA assigned to the user identifier, and The data link of the MN using the subscriber identity.
步骤 209, HA与 FA配合, 根据 HA中存储的第一数据转发信息与 Step 209, the HA cooperates with the FA, and forwards information according to the first data stored in the HA.
FA中存储的第二数据转发信息, 向该 MN转发数据。 答信息。 The second data forwarding information stored in the FA forwards the data to the MN. Answer the information.
步骤 211 , FA向 MN返回更新失败应答信息。  Step 211: The FA returns an update failure response message to the MN.
如图 3所示, 为本发明注册信息处理方法第三实施例的流程图, 其包括以下步骤:  As shown in FIG. 3, it is a flowchart of a third embodiment of a registration information processing method of the present invention, which includes the following steps:
步骤 301 , 管理员预先设置用于标识 NAI为单用户 NAI或多用户 NAI的属性信息并存储在 FA中。  Step 301: The administrator presets attribute information for identifying the NAI as a single-user NAI or a multi-user NAI and stores the information in the FA.
步骤 302 , FA接收 MN发送的注册请求后, 根据预先设置的 NAI 的属性信息, 判断该注册请求中携带的 NAI是否为多用户 NAI, 若是 多用户 NAI, 执行步骤 303; 否则, 执行步骤 304。  Step 302: After receiving the registration request sent by the MN, the FA determines whether the NAI carried in the registration request is a multi-user NAI according to the preset attribute information of the NAI, and if it is a multi-user NAI, performs step 303; otherwise, performs step 304.
步骤 303 , FA向注册请求中写入 MN的用户标识 IMSI, 该 IMSI可 以釆用 CVSE格式或 NVSE格式, 生成并向该 MN的 HA发送注册信息, 该注册信息中包含 IMSI与 NAI, 然后执行步骤 305。  Step 303: The FA writes the user identifier IMSI of the MN to the registration request, and the IMSI may generate and send registration information to the HA of the MN by using the CVSE format or the NVSE format, where the registration information includes the IMSI and the NAI, and then the step is performed. 305.
步骤 304 , FA根据该注册请求生成并向该 MN的 HA发送注册信 息, 该注册信息中包含 NAI。  Step 304: The FA generates and sends a registration information to the HA of the MN according to the registration request, where the registration information includes a NAI.
步骤 305 , HA接收到 FA发送的注册信息后, 判断注册信息中是 否包含 IMSI, 若包含, 执行步骤 306; 若不包含, 执行步骤 309。  Step 305: After receiving the registration information sent by the FA, the HA determines whether the registration information includes the IMSI. If yes, go to step 306. If not, go to step 309.
步骤 306 , HA判断预先存储的第一用户信息表中是否存在与注册 信息中携带的 IMSI及 NAI相同的用户信息, 若存在, 说明该注册信息 为注册更新请求信息, 执行步骤 307; 否则, 说明该注册信息为注册 请求信息, 执行步骤 308。  Step 306: The HA determines whether the first user information table stored in the pre-stored user information is the same as the IMSI and the NAI carried in the registration information. If yes, the registration information is the registration update request information, and step 307 is performed; otherwise, the description is performed. The registration information is registration request information, and step 308 is performed.
步骤 307 , HA更新与 IMSI及 NAI相应的用户信息和 /或第一数据转 发信息, 然后执行步骤 312。  Step 307: The HA updates the user information and/or the first data forwarding information corresponding to the IMSI and the NAI, and then performs step 312.
步骤 308 , HA分别在用户信息表与第一数据转发表中创建与用户 标识 IMSI相应的用户信息第一数据转发信息, 该用户信息包括 IMSI、 NAI, 注册信息中携带的 COA、 与向用户标识分配的 HA地址, 然后 执行步骤 312。  Step 308: The HA creates the first data forwarding information of the user information corresponding to the user identifier IMSI in the user information table and the first data forwarding table, where the user information includes the IMSI, the NAI, the COA carried in the registration information, and the identifier to the user. Assign the HA address, and then go to step 312.
步骤 309 , HA判断预先存储的第一用户信息表中是否存在与注册 信息中携带的 NAI相同的用户信息, 若存在, 说明该注册信息为注册 更新请求信息, 执行步骤 310; 否则, 说明该注册信息为注册请求信 息, 执行步骤 311。 Step 309: The HA determines whether the first user information table stored in the pre-stored user information has the same user information as the NAI carried in the registration information. If yes, the registration information is the registration update request information, and step 310 is performed; otherwise, the registration is performed. Information is a registration request letter In the event, go to step 311.
步骤 310 , HA更新与 NAI相应的用户信息和 /或第一数据转发信 息, 然后执行步骤 312。  Step 310: The HA updates the user information and/or the first data forwarding information corresponding to the NAI, and then performs step 312.
步骤 311 , HA分别在用户信息表与第一数据转发表中创建与 NAI 相应的用户信息第一数据转发信息, 该用户信息包括 NAI、 注册信息 中携带的 COA、 与向用户标识分配的 HA地址。  Step 311: The HA creates the first data forwarding information of the user information corresponding to the NAI in the user information table and the first data forwarding table, where the user information includes the NAI, the COA carried in the registration information, and the HA address allocated to the user identifier. .
步骤 312, HA生成并向 FA返回包含向该用户标识分配的 COA的 更新成功应答信息; 对于多用户 NAI, 该更新成功应答信息还包含 IMSL  Step 312, the HA generates and returns an update success response message including the COA assigned to the user identifier to the FA; and for the multi-user NAI, the update success response information further includes the IMSL
步骤 313, FA在第二数据转发表中创建与家乡地址相应的第二数 据转发信息, 该第二数据转发信息包括家乡地址、 用户标识所属的家 HA地址、 向用户标识分配的 COA、 与到使用用户标识的移动节点的 数据链路。  Step 313: The FA creates second data forwarding information corresponding to the home address in the second data forwarding table, where the second data forwarding information includes a home address, a home HA address to which the user identifier belongs, a COA assigned to the user identifier, and The data link of the mobile node using the user ID.
步骤 314, FA与 HA配合, 根据 HA上存储的第一数据转发信息与 FA上存储的第二数据转发信息, 向 MN转发数据。  Step 314: The FA cooperates with the HA to forward the data to the MN according to the first data forwarding information stored on the HA and the second data forwarding information stored on the FA.
根据本发明实施例提供的一种数据处理装置, 包括: 第一消息处 理模块,用于根据 MN发送的注册请求或注册更新请求,生成包含 MN 用户标识与网络接入标识的注册信息 ,该注册信息可以是注册请求信 息或注册更新请求信息; 发送模块, 用于发送第一消息处理模块生成 的注册信息。  A data processing apparatus according to an embodiment of the present invention includes: a first message processing module, configured to generate registration information including an MN user identifier and a network access identifier according to a registration request or a registration update request sent by the MN, the registration The information may be registration request information or registration update request information. The sending module is configured to send the registration information generated by the first message processing module.
如图 4所示, 为本发明数据处理装置实施例一的结构示意图, 该 数据处理装置可用作外部代理节点, 其包括:  As shown in FIG. 4, it is a schematic structural diagram of Embodiment 1 of a data processing apparatus according to the present invention. The data processing apparatus can be used as an external proxy node, and includes:
第一接收模块 401 ,用于接收并转发 MN发送的数据链路建立请求 与 COA获取请求, 注册请求或注册更新请求,根据从数据链路建立请 求中提取 MN的用户相关信息与向 MN用户标识分配的 COA, 在第二 用户信息表中创建 MN用户信息, 另外, 还接收家乡代理节点发送的 更新应答信息;  The first receiving module 401 is configured to receive and forward a data link setup request and a COA acquisition request, a registration request, or a registration update request sent by the MN, and extract the user related information of the MN and the identifier to the MN according to the data link establishment request. The allocated COA, the MN user information is created in the second user information table, and the update response information sent by the home agent node is also received;
数据链路维护模块 402, 与第一接收模块 401连接, 用于根据第一 接收模块 401接收到的数据链路建立请求, 建立与 MN之间的数据链 路; The data link maintenance module 402 is connected to the first receiving module 401, and is configured to establish a data link with the MN according to the data link establishment request received by the first receiving module 401. Road
地址管理模块 403 , 与第一接收模块 401连接, 用于根据第一接收 模块 401接收到的 COA获取请求, 向 MN用户标识分配 COA;  The address management module 403 is connected to the first receiving module 401, and configured to allocate a COA to the MN user identifier according to the COA acquisition request received by the first receiving module 401;
第一消息处理模块 404, 与第一接收模块 401连接, 用于根据第一 接收模块 401接收到 MN发送的注册请求或注册更新请求,生成包含用 户标识的注册信息;  The first message processing module 404 is connected to the first receiving module 401, and configured to generate registration information including the user identifier according to the first receiving module 401 receiving the registration request or the registration update request sent by the MN;
发送模块 405, 与第一消息处理模块 404连接, 用于发送第一消息 处理模块 404生成的注册信息;  The sending module 405 is connected to the first message processing module 404 and configured to send the registration information generated by the first message processing module 404.
第一数据表管理模块 406, 与第一接收模块 401连接, 用于在第一 接收模块 401接收到的更新应答信息为更新成功的应答信息时, 在第 二数据转发表中创建与 MN的家乡地址相应的第二数据转发信息, 该 第二数据转发信息包括家乡地址、 用户标识所属的家乡代理节点地 址、 COA与数据链路;  The first data table management module 406 is connected to the first receiving module 401, and is configured to create a hometown with the MN in the second data forwarding table when the update response information received by the first receiving module 401 is the response information of the update success. Corresponding second data forwarding information, where the second data forwarding information includes a home address, a home agent node address to which the user identifier belongs, a COA and a data link;
第一数据转发模块 407 , 用于根据第一数据表管理模块创建的第 二数据转发信息, 向 MN转发数据。  The first data forwarding module 407 is configured to forward data to the MN according to the second data forwarding information created by the first data table management module.
在图 4所示的上述数据处理装置实施例中, 还可以包括: 第一存储模块,与第一接收模块连接,用于存储第二用户信息表; 和 /或第二存储模块, 分别与第一数据表管理模块及第一数据转 发模块连接, 用于存储第二数据转发表。  In the embodiment of the data processing device shown in FIG. 4, the method may further include: a first storage module connected to the first receiving module, configured to store a second user information table; and/or a second storage module, respectively A data table management module and a first data forwarding module are connected to store the second data forwarding table.
根据本发明实施例提供的一种数据处理装置, 包括:  A data processing apparatus according to an embodiment of the present invention includes:
第二收发模块, 用于接收与转发 FA发送的注册信息, 该注册信 息可以是注册请求信息或注册更新请求信息;  a second transceiver module, configured to receive and forward registration information sent by the FA, where the registration information may be registration request information or registration update request information;
第二消息处理模块, 与第二收发模块连接, 用于更新与注册信息 中携带的用户标识与 NAI,更新相应的用户信息和 /或第一数据转发信 息。  The second message processing module is connected to the second transceiver module, and is configured to update the user identifier and the NAI carried in the registration information, and update the corresponding user information and/or the first data forwarding information.
如图 5所示, 为本发明数据处理装置实施例二的结构示意图, 该 数据处理装置可用作家乡代理节点, 其包括:  As shown in FIG. 5, it is a schematic structural diagram of Embodiment 2 of a data processing apparatus according to the present invention. The data processing apparatus can be used as a home agent node, and includes:
第二收发模块 501 , 用于接收与转发 F A发送的注册请求信息或注 册更新请求信息, 以及发送给 FA的更新应答信息; 第二消息处理模块 502, 与第二收发模块 501连接, 用于更新与注 册请求信息或注册更新请求信息中携带的用户标识与 NAI, 更新相应 的用户信息和 /或第一数据转发信息; a second transceiver module 501, configured to receive and forward registration request information or registration update request information sent by the FA, and update response information sent to the FA; The second message processing module 502 is connected to the second transceiver module 501, and is configured to update the user identifier and the NAI carried in the registration request information or the registration update request information, and update the corresponding user information and/or the first data forwarding information.
第二数据转发模块 503 , 用于根据第一数据转发信息, 向 FA转发 数据。  The second data forwarding module 503 is configured to forward data to the FA according to the first data forwarding information.
如图 6所示, 为本发明数据处理装置实施例三的结构示意图, 该 实施例的数据处理装置在图 5所示实施例的基础上, 还可以包括: 第一判断模块 504,设置于第二收发模块 501与第二消息处理模块 503之间, 用于判断预先存储的第一用户信息表中是否存在与注册信 息中携带的用户标识及 NAI相同的用户信息;  As shown in FIG. 6 , it is a schematic structural diagram of a third embodiment of the data processing apparatus of the present invention. The data processing apparatus of the embodiment may further include: a first determining module 504, configured on the basis of the embodiment shown in FIG. The second transceiver module 501 and the second message processing module 503 are configured to determine whether the first user information table stored in the pre-stored user information is the same as the user identifier and the NAI carried in the registration information.
第二消息处理模块 502包括:  The second message processing module 502 includes:
创建单元 5021 , 与第一判断模块 504连接, 用于在第一用户信息 表中不存在与注册信息中携带的用户标识及 NAI相同的用户信息时, 分别在用户信息表与第一数据转发表中创建与用户标识及 NAI相应 的用户信息第一数据转发信息, 用户信息包括用户标识、 NAI、 注册 信息中携带的 C 0 A、 与向用户标识分配的家乡地址;  The creating unit 5021 is configured to be connected to the first determining module 504, configured to: when the user information that is the same as the user identifier and the NAI carried in the registration information does not exist in the first user information table, respectively, in the user information table and the first data forwarding table. Creating the first data forwarding information of the user information corresponding to the user identifier and the NAI, where the user information includes the user identifier, the NAI, the C 0 A carried in the registration information, and the home address assigned to the user identifier;
更新单元 5022, 与第一判断模块 504连接, 用于在第一用户信息 表中存在与注册信息中携带的用户标识及 NAI相同的用户信息时, 以 注册信息中携带的信息更新与用户标识及 NAI相应的用户信息表中 的用户信息和 /或第一数据转发表中的第一数据转发信息。  The updating unit 5022 is connected to the first determining module 504, and is configured to update the user identifier and the user identifier with the information carried in the registration information when the user information that is the same as the user identifier and the NAI carried in the registration information exists in the first user information table. The user information in the corresponding user information table of the NAI and/or the first data forwarding information in the first data forwarding table.
再参见图 6, 本发明数据处理装置还可以包括:  Referring to FIG. 6, the data processing apparatus of the present invention may further include:
第二判断模块 505, 设置于第二收发模块 501与第一判断模块 504 之间, 用于判断注册信息中是否包含用户标识;  The second determining module 505 is disposed between the second transceiver module 501 and the first determining module 504, and configured to determine whether the user identifier is included in the registration information.
第一判断模块 504用于在注册信息中包含用户标识时, 判断预先 存储的第一用户信息表中是否存在与注册信息中携带的用户标识及 NAI相同的用户信息。  The first determining module 504 is configured to determine, when the user identifier is included in the registration information, whether the user information that is the same as the user identifier and the NAI carried in the registration information exists in the first user information table stored in advance.
如图 7所示, 为本发明数据处理装置实施例四的结构示意图, 该 实施例的数据处理装置在图 6所示实施例的基础上, 还可以包括: 第三判断模块 506 , 设置于第二收发模块 501与第二判断模块 505 之间,用于在第一用户信息表中存在与注册信息中携带的用户标识及FIG. 7 is a schematic structural diagram of a fourth embodiment of a data processing apparatus according to the present invention. The data processing apparatus of the embodiment may further include: a third determining module 506, configured on the basis of the embodiment shown in FIG. The second transceiver module 501 and the second determination module 505 Between the presence of the user identifier carried in the registration information in the first user information table and
ΝΑΙ相同的用户信息时, 根据 ΝΑΙ的属性信息判断 ΝΑΙ是否为多用户 ΝΑΙ; ΝΑΙWhen the same user information is used, it is judged based on the attribute information of ΝΑΙ whether ΝΑΙ is a multi-user ΝΑΙ;
第二判断模块 505用于在 ΝΑΙ为多用户 ΝΑΙ时,判断注册信息中是 否包含用户标识;  The second determining module 505 is configured to determine, when the user is a multi-user, whether the user information is included in the registration information.
第二消息处理模块 502用于在 ΝΑΙ不是多用户 ΝΑΙ时,更新与注册 信息中携带的用户标识与 ΝΑΙ相应的用户信息和 /或第一数据转发信 息 ,生成包含用户标识及向用户标识分配的家乡地址的更新成功应答 信息。  The second message processing module 502 is configured to: when the user is not a multi-user, update the user information and/or the first data forwarding information corresponding to the user identifier and the user carried in the registration information, and generate the user identifier and the user identifier. Update the success response information of the home address.
如图 8所示, 为本发明数据处理装置实施例五的结构示意图, 该 实施例的数据处理装置在图 6所示实施例的基础上, 还可以包括: 第四判断模块 507, 设置于第二判断模块 506与第二收发模块 501 之间, 用于在注册信息中不包含用户标识时, 根据 ΝΑΙ的属性信息判 断 ΝΑΙ是否为多用户 ΝΑΙ;  FIG. 8 is a schematic structural diagram of Embodiment 5 of the data processing apparatus of the present invention. The data processing apparatus of the embodiment may further include: a fourth determining module 507, configured on the basis of the embodiment shown in FIG. The second determining module 506 and the second transceiver module 501 are configured to determine, according to the attribute information of the user, whether the user is a multi-user when the registration information does not include the user identifier;
第二消息处理模块 502用于在 ΝΑΙ为多用户 ΝΑΙ时,生成包含用户 标识的更新失败应答信息, 在 ΝΑΙ不是多用户 ΝΑΙ时, 更新与注册请 求或注册更新请求中携带的用户标识与 ΝΑΙ相应的用户信息和 /或第 一数据转发信息 ,生成包含用户标识及向用户标识分配的家乡地址的 更新成功应答信息。  The second message processing module 502 is configured to generate an update failure response message including the user identifier when the user is a multi-user, and update the user identifier and the user identifier carried in the registration request or the registration update request when the user is not the user. The user information and/or the first data forwarding information generates update success response information including the user identification and the home address assigned to the user identification.
在图 7或图 8所示的实施例中, 数据处理装置都可以进一步包括: 第三存储模块, 与第二消息处理模块连接, 用于存储第一用户信 息表;  In the embodiment shown in FIG. 7 or FIG. 8, the data processing apparatus may further include: a third storage module, connected to the second message processing module, configured to store the first user information table;
和 /或第四存储模块, 与第二消息处理模块连接, 用于存储第一 数据转发表;  And/or a fourth storage module, connected to the second message processing module, configured to store the first data forwarding table;
和 /或第五存储模块, 与第三判断模块或第四判断模块连接, 用 于存储 ΝΑΙ的属性信息。 如图 9所示, 为本发明数据处理装置实施例 六的结构示意图。  And/or a fifth storage module, connected to the third determining module or the fourth determining module, for storing attribute information of the UI. FIG. 9 is a schematic structural diagram of Embodiment 6 of the data processing apparatus of the present invention.
本发明实施例提供的一种数据处理系统,包括家乡代理节点与外 部代理节点, 其中的外部代理节点可以釆用如图 4所示实施例二任意 之一; 家乡代理节点可以釆用如图 5至图 9所示实施例六任意之一。 外 部代理节点中的发送模块与 MN及家乡代理节点中的第二收发模块通 信连接, 进行注册信息与更新应答信息的交互; 外部代理节点中的第 一数据转发模块与 MN及家乡代理节点中的第二数据转发模块通信连 接, 进行数据的转发。 A data processing system provided by an embodiment of the present invention includes a home agent node and an external agent node, wherein the external agent node can use any of the embodiments shown in FIG. One of the home agent nodes may use any one of the sixth embodiments shown in FIGS. 5 to 9. The sending module in the external proxy node communicates with the second transceiver module in the MN and the home agent node to perform interaction between the registration information and the update response information; the first data forwarding module in the external proxy node and the MN and the home agent node The second data forwarding module communicates and performs data forwarding.
本发明实施例中, FA向 HA转发移动节点发送的注册请求信息或 注册请求信息与注册更新信息时,向注册请求信息或注册请求信息与 注册更新信息中写入移动节点用户标识, 在 HA上通过 NAI与用户标 识唯一标识一个注册请求信息或注册更新信息, 使 HA可以根据用户 标识与 NAI唯一的识别移动 IP用户, 才艮据 NAI与用户标识唯一识别注 册请求信息或注册更新信息, 从而避免由于多用户共用 NAI引起用户 信息的混乱, 有效保证了用户正常使用 IP业务与用户信息的安全性。  In the embodiment of the present invention, when the FA forwards the registration request information or the registration request information and the registration update information sent by the mobile node to the HA, the FA writes the mobile node user identifier to the registration request information or the registration request information and the registration update information, on the HA. The NAI and the user identifier uniquely identify a registration request information or registration update information, so that the HA can uniquely identify the mobile IP user according to the user identifier and the NAI, and uniquely identify the registration request information or the registration update information according to the NAI and the user identifier, thereby avoiding The user information is confused by the multi-user shared NAI, which effectively ensures the security of the user's normal use of the IP service and the user information.
最后所应说明的是: 以上实施例仅用以说明本发明的技术方案, 而非对本发明作限制性理解。尽管参照上述较佳实施例对本发明进行 了详细说明, 本领域的普通技术人员应当理解: 其依然可以对本发明 的技术方案进行修改或者等同替换,而这种修改或者等同替换并不脱 离本发明技术方案的精神和范围。  It should be noted that the above embodiments are merely illustrative of the technical solutions of the present invention and are not intended to be limiting. Although the present invention has been described in detail with reference to the preferred embodiments thereof, those skilled in the art will understand that the invention may be modified or equivalently substituted without departing from the teachings of the present invention. The spirit and scope of the programme.

Claims

权利要求 Rights request
1、 一种注册信息处理方法, 其特征在于, 包括以下步骤: 接收注册信息, 所述注册信息中包含用户标识与网络接入标识; 更新与所述用户标识及所述网络接入标识相应的用户信息和 /或 第一数据转发信息。 A registration information processing method, comprising the steps of: receiving registration information, wherein the registration information includes a user identifier and a network access identifier; and updating, corresponding to the user identifier and the network access identifier User information and/or first data forwarding information.
2、 根据权利要求 1所述的注册信息处理方法, 其特征在于, 所述 接收注册信息之前, 还包括:  2. The registration information processing method according to claim 1, wherein before the receiving the registration information, the method further includes:
外部代理节点生成包含用户标识与网络接入标识的注册信息。 The external proxy node generates registration information including the user identification and the network access identifier.
3、 根据权利要求 1所述的注册信息处理方法, 其特征在于, 所述 注册信息为注册请求信息或注册更新请求信息。 The registration information processing method according to claim 1, wherein the registration information is registration request information or registration update request information.
4、 根据权利要求 1所述的注册信息处理方法, 其特征在于, 所述 更新与所述用户标识及所述网络接入标识相应的用户信息和 /或第一 数据转发信息包括:  The method for processing registration information according to claim 1, wherein the updating the user information and/or the first data forwarding information corresponding to the user identifier and the network access identifier comprises:
判断预先存储的用户信息表中是否存在与所述注册信息中携带 的所述用户标识及所述网络接入标识相同的用户信息;  Determining whether the user information in the pre-stored user information table is the same as the user identifier and the network access identifier carried in the registration information;
若不存在,则分别在用户信息表与第一数据转发表中创建与所述 用户标识及所述网络接入标识相应的用户信息第一数据转发信息 ,所 述用户信息包括所述用户标识、 所述网络接入标识、 所述注册信息中 携带的转交地址、 与向所述用户标识分配的家乡地址;  If not existing, the first data forwarding information of the user information corresponding to the user identifier and the network access identifier is created in the user information table and the first data forwarding table, where the user information includes the user identifier, The network access identifier, a care-of address carried in the registration information, and a home address assigned to the user identifier;
若存在,则以所述注册信息中携带的信息更新与所述用户标识及 所述网络接入标识相应的用户信息表中的用户信息和 /或第一数据转 发表中的第一数据转发信息。  If yes, updating the user information in the user information table corresponding to the user identifier and the network access identifier and/or the first data forwarding information in the first data forwarding table by using information carried in the registration information .
5、 根据权利要求 1至 4中任意一项所述的注册信息处理方法, 其 特征在于,所述更新与所述用户标识及所述网络接入标识相应的用户 信息和 /或第一数据转发信息之前, 还包括:  The registration information processing method according to any one of claims 1 to 4, wherein the updating the user information and/or the first data forwarding corresponding to the user identifier and the network access identifier Before the information, it also includes:
判断所述注册信息中是否包含用户标识, 若包含, 则更新与所述 用户标识及所述网络接入标识相应的用户信息和 /或第一数据转发信 息,生成并返回包含所述用户标识及向所述用户标识分配的家乡地址 的更新成功应答信息。 Determining whether the user identifier is included in the registration information, and if yes, updating user information and/or first data forwarding information corresponding to the user identifier and the network access identifier, generating and returning the user identifier and The home address assigned to the user ID Update success response message.
6、 根据权利要求 5所述的注册信息处理方法, 其特征在于, 所述 接收注册信息之后, 还包括:  The registration information processing method according to claim 5, wherein after receiving the registration information, the method further includes:
家乡代理节点或外部代理节点根据预先设置的网络接入标识属 性信息, 判断所述网络接入标识是否为多用户网络接入标识;  The home agent node or the external agent node determines whether the network access identifier is a multi-user network access identifier according to the preset network access identifier attribute information;
若是多用户网络接入标识,则由所述家乡代理节点判断所述注册 信息中是否包含用户标识。  If it is a multi-user network access identifier, the home agent node determines whether the registration information includes a user identifier.
7、 根据权利要求 5所述的注册信息处理方法, 其特征在于, 若所 述注册信息中不包含用户标识,则根据预先设置的网络接入标识属性 信息, 判断所述网络接入标识是否为多用户网络接入标识;  The method of processing the registration information according to claim 5, wherein if the registration information does not include the user identifier, determining whether the network access identifier is based on the network access identifier attribute information set in advance Multi-user network access identifier;
若是多用户网络接入标识,生成并返回包含所述用户标识的更新 失败应答信息;  If it is a multi-user network access identifier, generating and returning an update failure response message including the user identifier;
否则, 更新与所述网络接入标识相应的用户信息和 /或第一数据 转发信息 ,生成并返回包含向所述网络接入标识分配的家乡地址的更 新成功应答信息。  Otherwise, the user information and/or the first data forwarding information corresponding to the network access identifier is updated, and the updated success response information including the home address assigned to the network access identifier is generated and returned.
8、 根据权利要求 5所述的注册信息处理方法, 其特征在于, 所述 生成并返回包含所述用户标识及向所述用户标识分配的家乡地址的 更新成功应答信息之后, 还包括:  The registration information processing method according to claim 5, wherein after the generating and returning the update success response information including the user identifier and the home address assigned to the user identifier, the method further includes:
在第二数据转发表中创建与所述家乡地址相应的第二数据转发 信息, 该第二数据转发信息包括所述家乡地址、 所述用户标识所属的 家乡代理节点地址、 向所述用户标识分配的转交地址、 与到使用所述 用户标识的移动节点的数据链路。  And a second data forwarding information corresponding to the home address is created in the second data forwarding table, where the second data forwarding information includes the home address, a home agent node address to which the user identifier belongs, and the user identifier is allocated The care-of address, the data link to the mobile node using the user identity.
9、 根据权利要求 8所述的注册信息处理方法, 其特征在于, 所述 创建与所述家乡地址相应的第二数据转发信息之后, 还包括:  The registration information processing method according to claim 8, wherein after the creating the second data forwarding information corresponding to the home address, the method further includes:
根据所述第一数据转发信息与第二数据转发信息,向所述移动节 点转发数据。  And forwarding data to the mobile node according to the first data forwarding information and the second data forwarding information.
10、 一种数据处理装置, 其特征在于, 包括:  A data processing device, comprising:
第一消息处理模块,用于根据移动节点发送的注册请求或注册更 新请求生成包含用户标识与网络接入标识的注册信息; 发送模块, 用于发送所述注册信息。 a first message processing module, configured to generate registration information including a user identifier and a network access identifier according to the registration request or the registration update request sent by the mobile node; a sending module, configured to send the registration information.
11、根据权利要求 10所述的数据处理装置,其特征在于,还包括: 第一接收模块,用于接收并转发移动节点发送的数据链路建立请 求、地址获取请求与注册请求或注册更新请求, 根据从所述数据链路 建立请求中提取移动节点的用户相关信息与向所述移动节点用户标 识分配的转交地址, 在第二用户信息表中创建移动节点用户信息; 以 及接收家乡代理节点发送的更新应答信息;  The data processing apparatus according to claim 10, further comprising: a first receiving module, configured to receive and forward a data link establishment request, an address acquisition request, and a registration request or a registration update request sent by the mobile node. And, according to the user-related information of the mobile node extracted from the data link establishment request and the care-of address assigned to the mobile node user identifier, creating mobile node user information in the second user information table; and receiving the home agent node to send Update response information;
数据链路维护模块,用于根据所述数据链路建立请求建立与所述 移动节点之间的数据链路;  a data link maintenance module, configured to establish a data link with the mobile node according to the data link establishment request;
地址管理模块,用于根据转交地址获取请求向所述移动节点用户 标识分配转交地址;  An address management module, configured to allocate a care-of address to the mobile node user identifier according to the care-of address obtaining request;
第一数据表管理模块,用于在所述更新应答信息为更新成功的应 答信息时, 创建与所述移动节点的家乡地址相应的第二数据转发信 息, 该第二数据转发信息包括所述家乡地址、 所述用户标识所属的家 乡代理节点地址、 所述转交地址、 与所述数据链路;  a first data table management module, configured to: when the update response information is the response information of the update success, create second data forwarding information corresponding to the home address of the mobile node, where the second data forwarding information includes the hometown An address, a home agent node address to which the user identifier belongs, the care-of address, and the data link;
第一数据转发模块, 用于根据所述第二数据转发信息, 向所述移 动节点转发数据。  And a first data forwarding module, configured to forward data to the mobile node according to the second data forwarding information.
12、 一种数据处理装置, 其特征在于, 包括:  12. A data processing apparatus, comprising:
第二收发模块, 用于接收外部代理节点发送的注册信息; 第二消息处理模块,用于更新与所述注册信息中携带的用户标识 与网络接入标识更新相应的用户信息和 /或第一数据转发信息。  The second transceiver module is configured to receive the registration information sent by the external proxy node, and the second message processing module is configured to update the user information corresponding to the user identifier and the network access identifier update carried in the registration information, and/or the first Data forwarding information.
13、根据权利要求 12所述的数据处理装置,其特征在于,还包括: 第二数据转发模块, 用于根据所述第一数据转发信息, 向外部代 理节点转发数据。  The data processing apparatus according to claim 12, further comprising: a second data forwarding module, configured to forward data to the external agent node according to the first data forwarding information.
14、根据权利要求 13所述的数据处理装置,其特征在于,还包括: 第一判断模块,用于判断预先存储的第一用户信息表中是否存在 与所述注册信息中携带的所述用户标识及所述网络接入标识相同的 用户信息;  The data processing apparatus according to claim 13, further comprising: a first determining module, configured to determine whether the user carried in the registration information exists in the first user information table stored in advance Identifying the same user information as the network access identifier;
所述第二消息处理模块包括: 创建单元,用于在第一用户信息表中不存在与所述注册信息中携 带的所述用户标识及所述网络接入标识相同的用户信息时,分别在用 户信息表与第一数据转发表中创建与所述用户标识及所述网络接入 标识相应的用户信息第一数据转发信息,所述用户信息包括所述用户 标识、 所述网络接入标识、 所述注册信息中携带的转交地址、 与向所 述用户标识分配的家乡地址; The second message processing module includes: a creating unit, configured to: in the first user information table, when the user information that is the same as the user identifier and the network access identifier carried in the registration information does not exist, respectively, in the user information table and the first data forwarding table Creating a first data forwarding information of the user information corresponding to the user identifier and the network access identifier, where the user information includes the user identifier, the network access identifier, and a care-of address carried in the registration information And a home address assigned to the user identification;
更新单元,用于在第一用户信息表中存在与所述注册信息中携带 的所述用户标识及所述网络接入标识相同的用户信息时 ,以所述注册 信息中携带的信息更新与所述用户标识及所述网络接入标识相应的 用户信息表中的用户信息和 /或第一数据转发表中的第一数据转发信 息。  And an update unit, configured to update the information carried in the registration information when the user information that is the same as the user identifier and the network access identifier carried in the registration information exists in the first user information table The user identifier and the user information in the user information table corresponding to the network access identifier and/or the first data forwarding information in the first data forwarding table.
15、根据权利要求 14所述的数据处理装置,其特征在于,还包括: 第二判断模块, 用于判断所述注册信息中是否包含用户标识; 所述第二消息处理模块用于在所述注册信息中包含用户标识时, 更新与所述注册请求或注册更新请求中携带的用户标识与网络接入 标识相应的用户信息和 /或第一数据转发信息, 生成包含所述用户标 识及向所述用户标识分配的家乡地址的更新成功应答信息;用于在所 述注册信息中不包含用户标识时,生成包含所述用户标识的更新失败 应答信息。  The data processing apparatus according to claim 14, further comprising: a second determining module, configured to determine whether the registration information includes a user identifier; the second message processing module is configured to When the user identifier is included in the registration information, the user information and/or the first data forwarding information corresponding to the user identifier and the network access identifier carried in the registration request or the registration update request are updated, and the user identifier and the destination information are generated. The update success response information of the home address assigned by the user identifier is used to generate update failure response information including the user identifier when the user identifier is not included in the registration information.
16、根据权利要求 15所述的数据处理装置,其特征在于,还包括: 第三判断模块,用于在所述第一用户信息表中存在与所述注册信 息中携带的所述用户标识及所述网络接入标识相同的用户信息时,根 据所述网络接入标识的属性信息判断所述网络接入标识是否为多用 户网络接入标识;  The data processing apparatus according to claim 15, further comprising: a third determining module, configured to: in the first user information table, the user identifier carried in the registration information and When the network access identifies the same user information, determining, according to the attribute information of the network access identifier, whether the network access identifier is a multi-user network access identifier;
所述第二判断模块用于在所述网络接入标识为多用户网络接入 标识时, 判断所述注册信息中是否包含用户标识;  The second determining module is configured to determine, when the network access identifier is a multi-user network access identifier, whether the user identifier is included in the registration information;
所述第二消息处理模块用于在所述网络接入标识不是多用户网 络接入标识时,更新与所述注册请求或注册更新请求中携带的用户标 识与网络接入标识相应的用户信息和 /或第一数据转发信息, 生成包 含所述用户标识及向所述用户标识分配的家乡地址的更新成功应答 信息。 The second message processing module is configured to: when the network access identifier is not a multi-user network access identifier, update user information corresponding to the user identifier and the network access identifier carried in the registration request or the registration update request, and / or the first data forwarding information, generate a package An update success response message including the user identification and a home address assigned to the user identification.
17、根据权利要求 15所述的数据处理装置,其特征在于,还包括: 第四判断模块, 用于在所述注册信息中不包含用户标识时, 根据 所述网络接入标识的属性信息判断所述网络接入标识是否为多用户 网络接入标识;  The data processing apparatus according to claim 15, further comprising: a fourth determining module, configured to determine, according to the attribute information of the network access identifier, when the registration information does not include a user identifier Whether the network access identifier is a multi-user network access identifier;
所述第二消息处理模块用于在所述网络接入标识为多用户网络 接入标识时, 生成包含所述用户标识的更新失败应答信息, 在所述网 络接入标识不是多用户网络接入标识时,更新与所述注册请求或注册 更新请求中携带的用户标识与网络接入标识相应的用户信息和 /或第 一数据转发信息,生成包含所述用户标识及向所述用户标识分配的家 乡地址的更新成功应答信息。  The second message processing module is configured to: when the network access identifier is a multi-user network access identifier, generate an update failure response message that includes the user identifier, where the network access identifier is not a multi-user network access And the user information and/or the first data forwarding information corresponding to the user identifier and the network access identifier carried in the registration request or the registration update request are updated, and the user identifier is generated and allocated to the user identifier. Update the success response information of the home address.
18、 一种数据处理系统, 包括家乡代理节点与外部代理节点, 其 特征在于, 所述外部代理节点包括:  18. A data processing system, comprising a home agent node and an external agent node, wherein the foreign agent node comprises:
第一消息处理模块,用于根据移动节点发送的注册请求或注册更 新请求生成包含用户标识与网络接入标识的注册信息;  a first message processing module, configured to generate registration information including a user identifier and a network access identifier according to a registration request or a registration update request sent by the mobile node;
发送模块, 用于向所述家乡代理节点发送所述注册信息; 所述家乡代理节点包括:  a sending module, configured to send the registration information to the home agent node; the home agent node includes:
第二收发模块, 用于接收所述发送模块发送的注册信息; 第二消息处理模块,用于更新与所述注册信息中携带的用户标识 与网络接入标识更新相应的用户信息和 /或第一数据转发信息。  a second transceiver module, configured to receive the registration information sent by the sending module, where the second message processing module is configured to update the user information and/or the user information corresponding to the user identifier and the network access identifier update carried in the registration information. A data forwarding message.
19、 根据权利要求 18所述的数据处理系统, 其特征在于, 所述外 部代理节点还包括:  The data processing system according to claim 18, wherein the external proxy node further comprises:
第一接收模块,用于接收并转发移动节点发送的数据链路建立请 求、转交地址获取请求与注册请求或注册更新请求, 根据从所述数据 链路建立请求中提取移动节点的用户相关信息与向所述移动节点用 户标识分配的转交地址, 在第二用户信息表中创建移动节点用户信 息;  a first receiving module, configured to receive and forward a data link establishment request, a care-of address obtaining request, a registration request, or a registration update request sent by the mobile node, and extract relevant information about the user of the mobile node according to the data link establishment request. And assigning a care-of address to the mobile node user identifier, and creating mobile node user information in the second user information table;
以及接收家乡代理节点发送的更新应答信息; 数据链路维护模块,用于根据所述数据链路建立请求建立与所述 移动节点之间的数据链路; And receiving update response information sent by the home agent node; a data link maintenance module, configured to establish a data link with the mobile node according to the data link establishment request;
地址管理模块,用于根据转交地址获取请求向所述移动节点用户 标识分配转交地址;  An address management module, configured to allocate a care-of address to the mobile node user identifier according to the care-of address obtaining request;
第一数据表管理模块,用于在所述更新应答信息为更新成功的应 答信息时, 创建与所述移动节点的家乡地址相应的第二数据转发信 息, 该第二数据转发信息包括所述家乡地址、 所述用户标识所属的家 乡代理节点地址、 所述转交地址、 与所述数据链路;  a first data table management module, configured to: when the update response information is the response information of the update success, create second data forwarding information corresponding to the home address of the mobile node, where the second data forwarding information includes the hometown An address, a home agent node address to which the user identifier belongs, the care-of address, and the data link;
第一数据转发模块, 用于根据所述第二数据转发信息, 向所述移 动节点转发数据。  And a first data forwarding module, configured to forward data to the mobile node according to the second data forwarding information.
20、 根据权利要求 18或 19所述的数据处理系统, 其特征在于, 所 述家乡代理节点还包括:  The data processing system according to claim 18 or 19, wherein the home agent node further comprises:
第二数据转发模块, 用于根据所述第一数据转发信息, 向外部代 理节点转发数据。  And a second data forwarding module, configured to forward data to the external proxy node according to the first data forwarding information.
21、 根据权利要求 20所述的数据处理系统, 其特征在于, 所述家 乡代理节点还包括:  The data processing system according to claim 20, wherein the home agent node further comprises:
第一判断模块,用于判断预先存储的第一用户信息表中是否存在 与所述注册信息中携带的所述用户标识及所述网络接入标识相同的 用户信息;  a first determining module, configured to determine whether the user information that is the same as the user identifier and the network access identifier carried in the registration information exists in the first user information table that is stored in advance;
所述第二消息处理模块包括:  The second message processing module includes:
创建单元,用于在第一用户信息表中不存在与所述注册信息中携 带的所述用户标识及所述网络接入标识相同的用户信息时,分别在用 户信息表与第一数据转发表中创建与所述用户标识及所述网络接入 标识相应的用户信息第一数据转发信息,所述用户信息包括所述用户 标识、 所述网络接入标识、 所述注册信息中携带的转交地址、 与向所 述用户标识分配的家乡地址;  a creating unit, configured to: in the first user information table, when the user information that is the same as the user identifier and the network access identifier carried in the registration information does not exist, respectively, in the user information table and the first data forwarding table Creating a first data forwarding information of the user information corresponding to the user identifier and the network access identifier, where the user information includes the user identifier, the network access identifier, and a care-of address carried in the registration information And a home address assigned to the user identification;
更新单元,用于在第一用户信息表中存在与所述注册信息中携带 的所述用户标识及所述网络接入标识相同的用户信息时 ,以所述注册 信息中携带的信息更新与所述用户标识及所述网络接入标识相应的 用户信息表中的用户信息和 /或第一数据转发表中的第一数据转发信 息。 And an update unit, configured to update the information carried in the registration information when the user information that is the same as the user identifier and the network access identifier carried in the registration information exists in the first user information table Corresponding to the user identifier and the network access identifier User information in the user information table and/or first data forwarding information in the first data forwarding table.
22、 根据权利要求 21所述的数据处理系统, 其特征在于, 所述家 乡代理节点还包括:  The data processing system according to claim 21, wherein the home agent node further comprises:
第二判断模块, 用于判断所述注册信息中是否包含用户标识; 所述第二消息处理模块用于在所述注册信息中包含用户标识时, 更新与所述注册请求或注册更新请求中携带的用户标识与网络接入 标识相应的用户信息和 /或第一数据转发信息, 生成包含所述用户标 识及向所述用户标识分配的家乡地址的更新成功应答信息;用于在所 述注册信息中不包含用户标识时,生成包含所述用户标识的更新失败 应答信息。  a second determining module, configured to determine whether the user identifier is included in the registration information, where the second message processing module is configured to: when the user information is included in the registration information, update and carry the registration request or the registration update request User identification and user data and/or first data forwarding information corresponding to the network access identifier, generating update success response information including the user identifier and a home address assigned to the user identifier; When the user ID is not included, an update failure response message including the user ID is generated.
23、 根据权利要求 22所述的数据处理系统, 其特征在于, 所述家 乡代理节点还包括:  The data processing system according to claim 22, wherein the home agent node further comprises:
第三判断模块,用于在所述第一用户信息表中存在与所述注册信 息中携带的所述用户标识及所述网络接入标识相同的用户信息时,根 据所述网络接入标识的属性信息判断所述网络接入标识是否为多用 户网络接入标识;  a third determining module, configured to: when the user information that is the same as the user identifier and the network access identifier carried in the registration information exists in the first user information table, according to the network access identifier The attribute information determines whether the network access identifier is a multi-user network access identifier;
所述第二判断模块用于在所述网络接入标识为多用户网络接入 标识时, 判断所述注册信息中是否包含用户标识;  The second determining module is configured to determine, when the network access identifier is a multi-user network access identifier, whether the user identifier is included in the registration information;
所述第二消息处理模块用于在所述网络接入标识不是多用户网 络接入标识时,更新与所述注册请求或注册更新请求中携带的用户标 识与网络接入标识相应的用户信息和 /或第一数据转发信息, 生成包 含所述用户标识及向所述用户标识分配的家乡地址的更新成功应答 信息。  The second message processing module is configured to: when the network access identifier is not a multi-user network access identifier, update user information corresponding to the user identifier and the network access identifier carried in the registration request or the registration update request, and And/or the first data forwarding information, generating update success response information including the user identifier and a home address assigned to the user identifier.
24、 根据权利要求 22所述的数据处理系统, 其特征在于, 所述家 乡代理节点还包括:  The data processing system according to claim 22, wherein the home agent node further comprises:
第四判断模块, 用于在所述注册信息中不包含用户标识时, 根据 所述网络接入标识的属性信息判断所述网络接入标识是否为多用户 网络接入标识; 所述第二消息处理模块用于在所述网络接入标识为多用户网络 接入标识时, 生成包含所述用户标识的更新失败应答信息, 在所述网 络接入标识不是多用户网络接入标识时,更新与所述注册请求或注册 更新请求中携带的用户标识与网络接入标识相应的用户信息和 /或第 一数据转发信息,生成包含所述用户标识及向所述用户标识分配的家 乡地址的更新成功应答信息。 a fourth determining module, configured to determine, according to the attribute information of the network access identifier, whether the network access identifier is a multi-user network access identifier, when the user information is not included in the registration information; The second message processing module is configured to: when the network access identifier is a multi-user network access identifier, generate an update failure response message that includes the user identifier, where the network access identifier is not a multi-user network access And the user information and/or the first data forwarding information corresponding to the user identifier and the network access identifier carried in the registration request or the registration update request are updated, and the user identifier is generated and allocated to the user identifier. Update the success response information of the home address.
PCT/CN2008/073260 2007-12-04 2008-11-28 Registration information process method, data process device and system WO2009074084A1 (en)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN200710193857.X 2007-12-04
CN 200710193857 CN101170469B (en) 2007-12-04 2007-12-04 Registration information processing method, data processing device and system

Publications (1)

Publication Number Publication Date
WO2009074084A1 true WO2009074084A1 (en) 2009-06-18

Family

ID=39390947

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2008/073260 WO2009074084A1 (en) 2007-12-04 2008-11-28 Registration information process method, data process device and system

Country Status (2)

Country Link
CN (1) CN101170469B (en)
WO (1) WO2009074084A1 (en)

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN112260850A (en) * 2020-09-11 2021-01-22 苏州浪潮智能科技有限公司 Method and system for creating high-availability network based on openstack
CN112910663A (en) * 2021-01-14 2021-06-04 网易(杭州)网络有限公司 Method, device, equipment and storage medium for message broadcasting and terminal registration

Families Citing this family (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101170469B (en) * 2007-12-04 2010-11-10 华为技术有限公司 Registration information processing method, data processing device and system
CN114817377B (en) * 2022-06-29 2022-09-20 深圳红途科技有限公司 User portrait based data risk detection method, device, equipment and medium

Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1422065A (en) * 2001-11-29 2003-06-04 三星电子株式会社 Radio data protector and discriminating method
CN1643853A (en) * 2002-03-19 2005-07-20 思科技术公司 Method and system for providing network services
CN1714558A (en) * 2002-11-20 2005-12-28 思科技术公司 Mobile IP registration supporting port identification
CN101170469A (en) * 2007-12-04 2008-04-30 华为技术有限公司 Registration information processing method, data processing device and system

Family Cites Families (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US6760585B1 (en) * 1998-12-02 2004-07-06 Siemens Information And Communication Networks, Inc. Private user mobility (PUM) update and private integrated services network PUM alternative identifier translator (PP-AIT) system and methods
CN1332583C (en) * 2004-01-08 2007-08-15 电子科技大学 Moving management method for use between high anti-destroy distribution type user's network
CN1287578C (en) * 2004-01-13 2006-11-29 中兴通讯股份有限公司 A system and method for implementing user roaming between different places by routing server

Patent Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1422065A (en) * 2001-11-29 2003-06-04 三星电子株式会社 Radio data protector and discriminating method
CN1643853A (en) * 2002-03-19 2005-07-20 思科技术公司 Method and system for providing network services
CN1714558A (en) * 2002-11-20 2005-12-28 思科技术公司 Mobile IP registration supporting port identification
CN101170469A (en) * 2007-12-04 2008-04-30 华为技术有限公司 Registration information processing method, data processing device and system

Cited By (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN112260850A (en) * 2020-09-11 2021-01-22 苏州浪潮智能科技有限公司 Method and system for creating high-availability network based on openstack
CN112260850B (en) * 2020-09-11 2022-06-07 苏州浪潮智能科技有限公司 Method and system for creating high-availability network based on openstack
CN112910663A (en) * 2021-01-14 2021-06-04 网易(杭州)网络有限公司 Method, device, equipment and storage medium for message broadcasting and terminal registration
CN112910663B (en) * 2021-01-14 2022-06-14 网易(杭州)网络有限公司 Method, device, equipment and storage medium for message broadcasting and terminal registration

Also Published As

Publication number Publication date
CN101170469A (en) 2008-04-30
CN101170469B (en) 2010-11-10

Similar Documents

Publication Publication Date Title
JP4861426B2 (en) Method and server for providing mobility key
US9143483B2 (en) Method for anonymous communication, method for registration, method and system for transmitting and receiving information
US7483411B2 (en) Apparatus for public access mobility LAN and method of operation thereof
EP1634422B1 (en) Method, system and apparatus to support hierarchical mobile ip services
JP4806028B2 (en) Method and server for providing mobility key
US20170026896A1 (en) Terminal device, relay terminal device, and communication control method
JP4681656B2 (en) Subscriber-specific enforcement of Proxy Mobile IP (PMP) instead of Client Mobile IP (CMIP)
US20060185013A1 (en) Method, system and apparatus to support hierarchical mobile ip services
US20140059192A1 (en) Ethernet Based Local IP Access
JP4909357B2 (en) Method for transmitting data packets based on an Ethernet transmission protocol between at least one mobile communication unit and a communication system
US9172722B2 (en) Method for network access, related network and computer program product therefor
JPWO2008099802A1 (en) Mobile terminal management system, network device, and mobile terminal operation control method used therefor
WO2011137792A1 (en) Method and apparatus for cooperation between push devices
WO2009082979A1 (en) A method for allocating network addresses, network and network node thereof
WO2008151557A1 (en) Method, equipment and proxy mobile ip system for triggering route optimization
KR20160126079A (en) Access node device for forwarding data packets
WO2013091397A1 (en) Data transmitting method and apparatus
WO2011035667A1 (en) Methods and systems for implementing inter-network roam, querying and attaching network
WO2011050676A1 (en) Anonymous communication method, registration and cancellation method, and access node
WO2011032455A1 (en) Method, system and access gateway router for handoff management and user data management when handing off
WO2007128239A1 (en) System for implementing mobile ipv6 and method for establishing user link in the system
WO2009074084A1 (en) Registration information process method, data process device and system
KR100915513B1 (en) PACKET BUFFERING METHOD AND APPARATUS FOR REDUCING PACKET LOSS IN PROXY MOBILE IPv6
WO2011044807A1 (en) Method for registration and communication of anonymous communication and transceiver system for data message
WO2009155863A1 (en) Method and system for supporting mobility security in the next generation network

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 08859057

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE

122 Ep: pct application non-entry in european phase

Ref document number: 08859057

Country of ref document: EP

Kind code of ref document: A1