WO2009092225A1

WO2009092225A1 - Method for obtaining network information and communication system and correlative devices

Info

Publication number: WO2009092225A1
Application number: PCT/CN2008/073423
Authority: WO
Inventors: Liang Gu; Wenliang Liang
Original assignee: Huawei Technologies Co., Ltd.
Priority date: 2007-12-27
Filing date: 2008-12-10
Publication date: 2009-07-30
Also published as: CN101471778A

Abstract

A method for obtaining network information and a communication system and correlative devices are used for each host to obtain correlative network information under a multi-host configuration, so as to access a network. The method includes steps: a gateway mobile device receives an authentication request sent by a host; obtaining correlative network information according to the authentication request; feeding back an authentication identifier request which contains the network information to the host. Also a communication system and correlative devices are provided.

Description

Network information acquisition method and communication system and related equipment

This application claims priority to Chinese patent application filed on December 27, 2007, the Chinese Patent Office, application number 200710300295.4, the invention titled "Network Information Acquisition Method and Communication System and Related Equipment", and January 8, 2008 Priority is claimed on Chinese Patent Application No. 200810002318.8, the entire disclosure of which is hereby incorporated by reference in its entirety in its entirety in its entirety in the the the the the the the the the

Technical field

The present invention relates to the field of communications, and in particular, to a network information acquisition method, a communication system, and related devices.

Background technique

The Worldwide Interoperability for Microwave Access (WiMAX) technology is a wireless metropolitan area network technology based on the 802.16 standard of the Institute of Electrical and Electronics Engineers (IEEE). As shown in FIG. 1 , the WiMAX network includes: a client 101, an access service network 102, and a connection service network 103. The client 101 and the access service network 102 are connected through an air interface chain R1. In the case that the access service network 102 and the connection service network 103 may belong to different operators, one access service network 102 may be shared by multiple network service providers (NSPs), so users access WiMAX. When the network needs to determine the available NSP, the access service network 102 needs to send the corresponding network information to the client 101.

The network information obtaining method in the prior art is: the access service network 102 and the client 101 transmit relevant network information (for example, the identifier of the available NSP) to the client through the air interface connection interface R1 in the process of performing basic capability negotiation. The terminal 101 enables the client 101 to select a corresponding NSP according to the network information to access the WiMAX network.

However, with the development of WiMAX network technology, the current research direction of WiMAX network is multi-host architecture, which is an evolution of the existing architecture of WiMAX network. For details, please refer to Figure 2. The multi-host architecture includes host 201 and gateway mobile device. G-MS (Gateway-Mobile Subscriber) 202, access service network ASN (Access Service Network) 203 and connection service network 204, wherein several hosts 201 are connected to the gateway mobile device 202 through a wired or wireless network, and through the gateway The mobile device 202 performs communication, and the gateway mobile device 202 and the access service network 203 pass The air port chain R1 is connected. In the multi-host architecture, since the host 201 and the access service network 203 are not directly connected, the related network information cannot be sent to the host 201 through the air interface link interface R1, so that the host 201 cannot select an appropriate NSP access. In the WiMAX network, the prior art does not provide a method for how each host in the multi-host structure acquires network information and accesses the WiMAX network.

Summary of the invention

The embodiment of the invention provides a network information acquisition method, a communication system and a related device, which enable each host to acquire relevant network information and access the network under the multi-host architecture.

The network information obtaining method provided by the embodiment of the present invention includes: the gateway mobile device receives an authentication request sent by the host; acquires corresponding network information according to the authentication request; and feeds back, to the host, an authentication identifier that includes the network information. request.

The communication system provided by the embodiment of the present invention includes: a host and a gateway mobile device; the host is configured to send an authentication request, and receive an authentication identifier request that includes network information from the gateway mobile device; Receiving an authentication request from the host, acquiring network information corresponding to the authentication request, and feeding back the network information to the host by using an authentication identifier request.

The communication system provided by the embodiment of the present invention includes: a host, a gateway mobile device, and an access service network; the host is configured to send an authentication request, and receive an authentication identifier request including network information from the gateway mobile device; The gateway mobile device is configured to receive an authentication request from the host, and forward the authentication request to the access service network, receive network information fed back by the access service network, and pass the network information The right identifier request is fed back to the host; the access service network is configured to receive an authentication request sent by the gateway mobile device, obtain network information corresponding to the authentication request, and feed back the network information to the gateway mobile device. .

The gateway mobile device provided by the embodiment of the present invention includes: a data receiving unit, configured to receive an authentication request sent by the host, and receive an authentication identifier request that includes the network information fed back by the access service network, where the network information includes at least a network service Provider information; a data forwarding unit, configured to forward the received authentication request to the access service network, and feed the received network information to the host by using an authentication identifier request.

The gateway mobile device provided by the embodiment of the present invention includes: a data receiving unit, configured to receive an authentication request sent by the host; and a query unit, configured to check, according to the authentication request received by the data receiving unit Corresponding network information is sent, and the queried network information is carried in the authentication identifier request and sent to the data feedback unit. The data feedback unit is configured to feed back the authentication identifier request to the host.

The host provided by the embodiment of the present invention includes: an authentication request sending unit, which sends an authentication request to the gateway mobile device, where the authentication request is used to request network information; and an authentication identifier request receiving unit is configured to receive the gateway from the gateway An authentication identifier request of the mobile device, where the authentication identifier request includes network information.

As can be seen from the above technical solutions, the embodiments of the present invention have the following advantages:

In the embodiment of the present invention, after the gateway mobile device G-MS obtains the authentication request message from the host, the G-MS obtains the corresponding network information (including at least the NSP identifier), and feeds the network information to the host, so The host can select the corresponding NSP according to the NSP identifier to access the network. Therefore, in the multi-host architecture, each host can obtain related network information and access the network.

DRAWINGS

1 is a schematic diagram of a WiMAX network architecture in the prior art;

2 is a schematic diagram of a multi-host architecture in the prior art;

3 is a signaling flowchart of a first embodiment of a method for acquiring network information according to an embodiment of the present invention; FIG. 4 is a signaling flowchart of a second embodiment of a method for acquiring network information according to an embodiment of the present invention; Network information acquisition method third embodiment signaling flow chart; FIG. 6 is a signaling flow chart of a fourth embodiment of a network information acquisition method according to an embodiment of the present invention; FIG. 7 is a schematic diagram of an embodiment of a communication system according to an embodiment of the present invention;

8 is a schematic diagram of a first embodiment of a gateway mobile device according to an embodiment of the present invention;

FIG. 9 is a schematic diagram of a second embodiment of a gateway mobile device according to an embodiment of the present invention;

FIG. 10 is a schematic diagram of an embodiment of a host in an embodiment of the present invention.

detailed description

The embodiment of the invention provides a network information acquisition method, a communication system and a related device, which are used to enable the hosts to obtain relevant network information and access the WiMAX network under the multi-host architecture.

In the embodiment of the present invention, the G-MS obtains the network information corresponding to the network indication information (including at least the NSP identifier), and the network information is received by the G-MS. The network information is fed back to the host, so that the host can select the corresponding NSP according to the NSP identifier to access the WiMAX network. Therefore, each host can obtain the multi-host architecture. Access the WiMAX network to relevant network information.

The following is a detailed description of the network information acquisition method in the embodiment of the present invention. In the following embodiments, the authentication process is taken as an example. According to different authentication modes, the following can be divided into two cases:

First, the method of single authentication:

In this mode, the G-MS does not need to authenticate the host, but only needs to be authenticated by the Access Service Network (ASN), that is, in this mode, local authentication is not required. Only network authentication is required.

Specifically, the following methods are included:

1. The ASN feeds back the network information to the host through the G-MS:

In this manner, the ASN feeds back the network information to the host through the G-MS. For details, refer to FIG. 3. The first embodiment of the network information obtaining method in the embodiment of the present invention includes:

301. The host sends an authentication request to the gateway mobile device.

In this embodiment, when the host needs to access the WiMAX network, the authentication process is first performed, and the host needs to send an authentication request to the G-MS, such as an EAP-Start message. Prior to this, the host needs to generate the network indication information according to the network configuration information of the network. The network indication information may include the user identifier of the host, where the network indication information is used to instruct the ASN network to send network information to the host, so that the host Ability to choose the right network. The network configuration information refers to information about the NSP that the host can access, including one or more of the NSP type, capacity, identity, official name, and authentication mode.

After the host generates the network indication information, the network indication information is carried in the authentication request sent to the G-MS, and the authentication request is sent to the G-MS.

The foregoing describes the case where the network indication information is carried in the authentication request. It can be understood that, in actual applications, the network indication information may not be carried. If the network indication information is not carried, the system may be configured at the time of system construction. After receiving the authentication request sent by the host, the network information is unconditionally fed back to the host without the triggering of the network indication information. The authentication request at this time can trigger the ASN network to send network information to the host.

302. The G-MS forwards the authentication request to the ASN.

After receiving the authentication request sent by the host, the G-MS forwards the authentication request to the ASN. 303. The ASN feeds back an authentication identifier request to the G-MS.

After receiving the authentication request sent by the G-MS, the ASN may know that the host that sends the authentication request needs to obtain related network information according to the network indication information carried in the authentication request, and then locally stored according to the network indication information. The NSP lists the NSPs that meet the network indication information, and records the identifiers of the NSPs, and carries the identifiers of the NSPs in the authentication identifier request, such as carrying the identifiers of the NSPs in the EAP-Request, and the ASN. A mode for authenticating the host may be queried, for example, a single authentication or multiple authentication. The authentication mode may also indicate whether device authentication or user authentication is required. In the embodiment of the present invention, the authentication mode is a single authentication. The authentication mode is carried in the authentication identifier request, and the authentication identifier request is sent to the G-MS. The network information in this embodiment includes at least the identifier of the NSP, and the identifier of the NSP described herein may be the ID of the NSP. Or the name. It can be understood that other information related to the host to access the WiMAX network, such as an authentication mode, may be included. Other information is not limited herein.

It can be understood that if the network indication information is not carried in the authentication request, the G-MS acquires the network information according to the received authentication request.

304. The G-MS forwards the authentication identifier request to the host.

After receiving the authentication identity request sent by the ASN, the G-MS forwards the request to the host.

In this embodiment, after receiving the authentication request from the host, the G-MS forwards the authentication request to the ASN, requests network information from the ASN, and after receiving the authentication identifier request from the ASN feedback, It is forwarded to the host, so that the host obtains network information.

Further, in the embodiment of the present invention, after acquiring the network information, the host may access the corresponding network according to the network information, as follows:

305. The host sends an authentication identifier response to the G-MS.

Further, after receiving the authentication identifier request sent by the G-MS, the host reads the corresponding network information from the authentication identifier request, and selects an appropriate NSP according to its own access rule, and extracts the identifier of the NSP. And receiving the authentication mode, carrying the identifier of the NSP and the authentication mode in the authentication identifier response, and sending the authentication identifier response to the G-MS.

In this embodiment, if the authentication mode is the default authentication mode, the authentication identity response sent by the host to the G-MS may not carry the authentication mode.

306. The G-MS forwards the authentication identifier response to the ASN. In the embodiment of the present invention, the authentication mode is a single authentication, that is, the G-MS does not need to authenticate the host, but only needs to be authenticated by the access service network ASN, so G- After receiving the authentication identity response, the MS forwards the authentication identity response to the ASN.

307. The ASN selects a corresponding AAA, Authentication, Authorization and Accounting according to the selected information.

After receiving the authentication identifier response sent by the G-MS, the ASN selects the corresponding AAA server according to the NSP information selected by the host in the authentication identifier response and the authentication mode as the AAA server of the host accessing the WiMAX network, and the specific The process of selecting an AAA server based on the NSP identity and the authentication mode is prior art and will not be discussed here.

308. The ASN sends an authentication authentication request to the selected AAA server.

After the ASN selects the AAA server, the authentication request is sent to the AAA server, and the authentication authentication request carries the authentication mode selected by the user and the user identifier.

309. Other processes for authentication.

After receiving the authentication request, the AAA server authenticates the host requesting access to the WiMAX network according to the authentication mode contained therein. If the host can authenticate, the WiMAX network can be accessed.

Specific processes for authentication include: AAA server, ASN, G-MS, and the process of replying confirmation messages between hosts and the sending process of authentication response and authentication failure response. This process is prior art, here is not Say it again.

In the above embodiment, the ASN sends the network information to the host through the G-MS. In the foregoing embodiment, the host can obtain the network information through the G-MS, so that the host can obtain the host under the multi-host architecture. Access the WiMAX network to relevant network information.

2. G-MS directly feeds back network information to the host:

Referring to FIG. 4, the second embodiment of the network information obtaining method in the embodiment of the present invention includes:

401. The host sends an authentication request to the gateway mobile device.

In this embodiment, when the host needs to access the WiMAX network, the authentication process is first performed, and the host needs to send an authentication request to the G-MS, such as an EAP-Start message. Before this, the host needs to generate network indication information according to its network configuration information, and the network indication information may include The user identifier of the host, the network indication information is used to instruct the network side to send network information to the host, so that the host can select an appropriate network. The network configuration information refers to information about the NSP that the host can access, including one or more of the NSP type, capacity, identity, official name, and authentication mode.

The foregoing describes the case where the network indication information is carried in the authentication request. It can be understood that, in actual applications, the network indication information may not be carried. If the network indication information is not carried, the system may be configured at the time of system construction. After receiving the authentication request sent by the host, the network information is unconditionally fed back to the host without the triggering of the network indication information, that is, the authentication request at this time can trigger the ASN network side to send the network information to the host.

402. The G-MS feeds back an authentication identifier request to the host.

After receiving the authentication request sent by the host, the G-MS may know that the host that sends the authentication request needs to obtain the related first network information according to the network indication information carried in the authentication request, and then locally according to the network indication information. The stored NSP list queries the NSPs that meet the network indication information, and records the identifiers of the NSPs, and carries the identifiers of the NSPs in the authentication identifier request, for example, the identifiers of the NSPs may be carried in the EAP-Request message. In the meantime, the G-MS can query the mode that needs to be authenticated according to the related information of the host, for example, it can be single authentication or multiple authentication. The authentication mode can also indicate whether device authentication or user authentication is required. The case of single authentication is described in this embodiment. Therefore, the authentication mode queried by the G-MS is "single authentication", the authentication mode is carried in the authentication identifier request, and the authentication is performed. The identification request is sent to the host. The first network information in this embodiment includes at least the identifier of the NSP. The identifier of the NSP described herein may be an ID or a name of the NSP. That can also contain other information indicating the host WiMAX access network, such as authentication mode, additional information is not limited here.

In this embodiment, the G-MS first accesses the WiMAX network, and when it accesses the WiMAX network, it communicates with the ASN to obtain the network information saved by the ASN, and at least includes information about the NSP (including the NSP identifier list and the NSP name). List). In this embodiment, after receiving the authentication request from the host, the G-MS sends the network information saved by the host to the host, so that the host can acquire the network information.

In the embodiment of the present invention, the G-MS may further forward the authentication request to the ASN, and further request the network information to the ASN, as follows: 403, G-MS Forwarding the authentication request to the ASN;

Further, in the embodiment of the present invention, after the G-MS sends the authentication identifier request to the host, the G-MS may also select to send the authentication request sent by the host to the ASN, because in this case, if the G-MS fails to be timely Updating the network information of the network may result in the network information sent to the host not being the latest information. Therefore, the G-MS may forward the authentication request to the ASN, requesting the ASN to send the authentication identifier request containing the latest network information to the host again.

404. The ASN feeds back the authentication identifier request to the G-MS.

After receiving the authentication request sent by the G-MS, the ASN may know that the host that sends the authentication request needs to obtain the related second network information according to the network indication information carried in the authentication request, and then the local indication information is locally according to the network indication information. The stored NSP list queries the NSPs that meet the network indication information, and records the identifiers of the NSPs, and carries the identifiers of the NSPs in the authentication identifier request, for example, the identifiers of the NSPs may be carried in the EAP-Request message. In the meantime, the ASN can query the mode that needs to be authenticated according to the related information of the host, for example, it can be single authentication or multiple authentication. The authentication mode can also indicate whether device authentication or user authentication is required. The authentication mode is carried in the authentication identifier request, and the authentication identifier request is sent to the G-MS. The second network information in this embodiment includes at least the identifier of the NSP. It can be understood that the authentication mode may also include other The information about the host accessing the WiMAX network, such as the authentication mode, is not limited herein.

It can be understood that the network request information may not be carried in the authentication request forwarded by the G-MS to the ASN.

405. The G-MS forwards the authentication identifier request to the host.

In this embodiment, step 403 to step 405 are optional steps.

In this embodiment, the G-MS requests the network information from the ASN and sends the network information obtained from the ASN to the host, so as to ensure that the network information acquired by the host is complete and correct. Further, in the embodiment of the present invention, after acquiring the network information, the host may access the corresponding network according to the network information, as follows:

406. The host sends an authentication identifier response to the G-MS.

Further, after receiving the two authentication identifier requests sent by the G-MS, the host may select to compare the first network information and the second network information in the two authentication identifier requests, and if the two network information are inconsistent, Based on the network information sent by the ASN, it can be understood that if the step 403 to the step 405 are not required, the host directly takes the network information received from the G-MS, and the host reads the request from the authentication identifier. The identifier of the corresponding NSP is obtained, and an appropriate NSP is selected according to the access rule of the user, and the identifier of the NSP and the corresponding authentication mode are extracted, and the identifier of the NSP and the corresponding authentication mode are carried in the authentication identifier response. And send the authentication identity response to the G-MS.

407. The G-MS forwards the authentication identifier response to the ASN.

In the embodiment of the present invention, the authentication mode is a single authentication, that is, the G-MS does not need to authenticate the host, but only needs to be authenticated by the access service network ASN, so G- After receiving the authentication identity response, the MS forwards the authentication identity response to the ASN.

408. The ASN selects a corresponding AAA server according to the selected information.

After receiving the authentication identifier response sent by the G-MS, the ASN selects the corresponding AAA server as the AAA server of the host to access the WiMAX network according to the NSP information selected by the host in the authentication identifier response and the corresponding authentication mode. The process of selecting an AAA server according to the NSP identifier and the corresponding authentication mode is a prior art, and details are not described herein again.

409. The ASN sends an authentication authentication request to the selected AAA server.

410. Other processes for authentication.

Specific authentication other processes include: AAA server, ASN, G-MS and host back The process of re-confirming the message and the sending process of the response through the response and the authentication failure response are all prior art, and are not mentioned here.

In this embodiment, steps 403, 404, and 405 may not be performed, that is, the host directly refers to the first network information queried by the G-MS. It can be understood that if this method is adopted, the G-MS needs to be timely. The data is synchronized with the ASN.

In the above embodiment, the G-MS can directly feed back the network information stored by the host to the host, so the signaling interaction between the networks can be reduced, thereby improving the network working efficiency.

The embodiment of single authentication is described above. The following describes an embodiment of multiple authentication:

Second, the method of multiple authentication:

In this mode, the G-MS or the host's own authenticator needs to authenticate the host, and also needs to

The ASN authenticates the host. In this mode, both local authentication and network authentication are required.

In this mode, the specific multiple authentication methods are as follows:

1. The ASN feeds back the network information to the host through the G-MS;

Referring to FIG. 5, the third embodiment of the network information obtaining method in the embodiment of the present invention includes:

501. The host sends an authentication request to the gateway mobile device.

In this embodiment, when the host needs to access the WiMAX network, the authentication process is first performed, and the host needs to send an authentication request to the G-MS, such as an EAP-Start message. Prior to this, the host needs to generate the network indication information according to the network configuration information of the network. The network indication information may include the user identifier of the host, where the network indication information is used to indicate that the ASN network side sends the network information to the host, so that The host can choose the appropriate network to enter. The network configuration information refers to information about the NSP that the host can access, including one or more of the NSP type, capacity, identity, official name, and authentication mode.

The foregoing describes the case where the network indication information is carried in the authentication request. It can be understood that, in actual applications, the network indication information may not be carried. If the network indication information is not carried, the system may be configured at the time of system construction. After receiving the authentication request sent by the host, the network information is unconditionally fed back to the host without triggering the network indication information, that is, the authentication request at this time can trigger the ASN network. The host sends network information to the host.

502. The G-MS forwards the authentication request to the ASN.

After receiving the authentication request sent by the host, the G-MS forwards the authentication request to the ASN.

503. The ASN feeds back the authentication identifier request to the G-MS.

After receiving the authentication request sent by the G-MS, the ASN may know that the host that sends the authentication request needs to obtain related network information according to the network indication information carried in the authentication request, and then locally stored according to the network indication information. Querying the NSPs that meet the network indication information in the NSP list, and recording the identifiers of the NSPs, and carrying the identifiers of the NSPs in the authentication identifier request, for example, the identifiers of the NSPs may be carried in the EAP-Request message. At the same time, the ASN queries the mode that needs to be authenticated according to the information about the host. For example, the ASN can be a single authentication or multiple authentication. The authentication mode can also indicate whether device authentication or user authentication is required. The case described in the example is the case of multiple authentication. Therefore, the authentication mode that the ASN queries is "multiple authentication", the authentication mode is carried in the authentication identifier request, and the authentication identifier request is sent to the G. -MS, the network information in this embodiment includes at least the identifier of the NSP, and the identifier of the NSP described herein may be the ID or the name of the NSP. It can be understood that Other information related to the host to access the WiMAX network, such as the authentication mode, may be included. Other information is not limited herein.

504. The G-MS forwards the authentication identifier request to the host.

505. The host sends an authentication identifier response to the G-MS.

After receiving the authentication identifier request sent by the G-MS, the host can learn from the authentication mode that the current authentication needs to be performed multiple times. First, local authentication is performed, that is, the host is authenticated by the G-MS. , the host sends an authentication identifier response including the authentication mode to the G-MS, and the G-MS performs the host Local authentication.

506. The G-MS sends an authentication success indication to the host.

After receiving the authentication identifier response sent by the host, the G-MS can learn from the authentication mode that the user needs to perform multiple authentications at the current time. First, local authentication is performed, and the host is locally authenticated and authenticated. After the completion, an authentication success indication is sent to the host.

507. The G-MS sends a second authentication identity request to the host.

The G-MS sends a secondary authentication identity request to the host, where the request carries network information and/or authentication mode.

508. The host sends a second authentication identifier response that includes the selected NSP information and the authentication mode to the G-MS.

After receiving the second authentication identifier request sent by the G-MS, the host learns that the next step needs to perform network authentication, and then reads the corresponding NSP identifier from the second authentication identifier request, and according to its own access. The rule selects an appropriate NSP, and extracts the identifier of the NSP and the corresponding authentication mode, and carries the identifier of the NSP and the corresponding authentication mode in the second authentication identifier response, and sends the second authentication identifier response. To G-MS.

It can be understood that, if the host sends the authentication identifier response to the G-MS in step 505, and the selected NSP and the authentication mode are carried in the authentication identifier response, step 507 and step 508 may not be performed. After the G-MS returns the authentication success indication to the host, the authentication identifier response is directly forwarded to the ASN.

509. The G-MS forwards the second authentication identifier response to the ASN.

After receiving the second authentication identifier response, the G-MS forwards the second authentication identifier response to the ASN. It can be understood that if step 507 and step 508 need not be performed, the G-MS receives the step 505. The authentication identity response is forwarded to the ASN.

In this embodiment, if the authentication mode is the default authentication mode, the secondary authentication identity response sent by the host to the G-MS may not carry the authentication mode.

510. The ASN selects a corresponding AAA server according to the selected information.

After receiving the authentication identifier response or the secondary authentication identifier response sent by the G-MS, the ASN selects the corresponding NSP information selected by the host in the authentication identifier response or the secondary authentication identifier response and the corresponding authentication mode. The AAA server serves as the AAA server for the host to access the WiMAX network. The process of selecting an AAA server according to the NSP identifier and the corresponding authentication mode is a prior art, and details are not described herein again.

511. The ASN sends an authentication authentication request to the selected AAA server.

512, authentication other processes.

In the above embodiment, the ASN sends the network information to the host through the G-MS. In the foregoing embodiment, the host can obtain the network information through the G-MS, so that the host can obtain the host under the multi-host architecture. Access the WiMAX network to relevant network information. The above describes the case of multiple authentications. Since the flow of local authentication is increased, the above embodiment further improves the reliability of the authentication process based on the foregoing embodiments.

2. G-MS directly feeds back network information to the host:

For details, please refer to FIG. 6. The fourth embodiment of the method for acquiring network information in the embodiment of the present invention includes:

601. The host sends an authentication request to the gateway mobile device.

In this embodiment, when the host needs to access the WiMAX network, the authentication process is first performed, and the host needs to send an authentication request to the G-MS, which may be an EAP-Start message. Before that, the host needs to generate the network indication information according to the network configuration information of the network. The network indication information may include the user identifier of the host, where the network indication information is used to indicate that the ASN network side sends the network information to the host, so that The host can choose the appropriate network to enter. The network configuration information refers to information about the NSP that the host can access, including one or more of the NSP type, capacity, identifier, official name, and authentication mode.

After the host generates the network indication information, the network indication information is carried in the G-MS. In the authentication request, the authentication request is sent to the G-MS.

602. The G-MS feeds back an authentication identifier request to the host.

After receiving the authentication request sent by the host, the G-MS may know that the host that sends the authentication request needs to obtain the related first network information according to the network indication information carried in the authentication request, and then locally according to the network indication information. Querying the NSPs that meet the network indication information in the stored NSP list, and recording the identifiers of the NSPs, and carrying the identifiers of the NSPs in the authentication identifier request EAP-Request, and the G-MS according to the related information of the host Querying the mode of authentication, for example, a single authentication or multiple authentication, the authentication mode may also indicate whether device authentication or user authentication is required, because multiple authentication is described in this embodiment. In this case, the authentication mode that is queried by the G-MS is "multiple authentication", the authentication mode is carried in the authentication identifier request, and the authentication identifier request is sent to the host, in this embodiment A network information includes at least an identifier of the NSP, and the identifier of the NSP described herein may be an ID or a name of the NSP. It is understood that the same may also include other Host Access WiMAX network-related information, such as authentication mode, other information is not limited herein.

In this embodiment, the G-MS first accesses the WiMAX network, and when it accesses the WiMAX network, it communicates with the ASN to obtain the network information saved by the ASN, and at least includes information about the NSP (including the NSP identifier list and the NSP name). List).

In this embodiment, after receiving the authentication request from the host, the G-MS sends the network information saved by the host to the host, so that the host can acquire the network information.

In the embodiment of the present invention, the G-MS may forward the authentication request to the ASN, and further request the network information to the ASN, as follows:

603. The G-MS forwards the authentication request to the ASN. Further, in the embodiment of the present invention, after the G-MS sends the authentication identifier request to the host, the G-MS may also select to send the authentication request sent by the host to the ASN, because in this case, if the G-MS fails to be timely Updating the network information of the network may result in the network information sent to the host not being the latest information. Therefore, the G-MS may forward the authentication request to the ASN, requesting the ASN to send the authentication identifier request containing the latest network information to the host again.

604. The ASN feeds back the authentication identifier request to the G-MS.

After receiving the authentication request sent by the G-MS, the ASN may know that the host that sends the authentication request needs to obtain the related second network information according to the network indication information carried in the authentication request, and then the local indication information is locally according to the network indication information. The stored NSP list queries the NSPs that meet the network indication information, and records the identifiers of the NSPs, and carries the identifiers of the NSPs in the authentication identifier request, for example, the identifiers of the NSPs may be carried in the EAP-Request message. In the meantime, the ASN can query the mode that needs to be authenticated according to the related information of the host, for example, it can be single authentication or multiple authentication. The authentication mode can also indicate whether device authentication or user authentication is required. In this embodiment, the multiple authentication is described. Therefore, the authentication mode that the ASN queries is "multiple authentication", the authentication mode is carried in the authentication identifier request, and the authentication identifier request is sent. To the G-MS, the second network information in this embodiment includes at least the identifier of the NSP. It can be understood that the other may also include other means for indicating that the host accesses the WiMAX. Network-related information, such as authentication mode is not limited herein.

605. The G-MS forwards the authentication identifier request to the host.

Steps 603 through 605 are optional steps.

In this embodiment, further, the G-MS requests the network information from the ASN and sends the network information obtained from the ASN to the host, so as to ensure that the network information acquired by the host is complete and correct.

606. The host sends an authentication identifier response to the G-MS.

It can be understood that if the above steps 603 to 605 are performed, the host will receive two authentication tokens. For the request, one is that the G-MS itself feeds back to the host, and the other is that the G-MS forwards the ASN, and the host checks whether the two authentication identifier requests are consistent. If they are inconsistent, the authentication identifier sent by the ASN is used. The request shall prevail.

In this embodiment, if the step 603 to the step 605 are not performed, the host directly determines the authentication identifier request of the G-MS feedback received in step 602.

After receiving the authentication identifier request, the host can learn from the authentication mode that the current authentication needs to be performed multiple times. First, local authentication is performed, that is, the G-MS authenticates the host, and the host sends the G to the host. - The MS sends an authentication identity response including an authentication mode.

607. The G-MS sends an authentication success indication to the host.

608. The G-MS sends a second authentication identity request to the host.

The G-MS sends a secondary authentication identity request to the host, where the request carries network information and/or an authentication mode on the network side.

609. The host sends a second authentication identifier response that includes the selected NSP information and the authentication mode to the G-MS.

After receiving the two authentication identifier requests sent by the G-MS, the host may select to compare the first network information and the second network information in the two authentication identifier requests, and if the two network information are inconsistent, send the ASN. The network information is correct, the host reads the identifier of the corresponding NSP from the authentication identifier request, and selects an appropriate NSP according to its own access rule, and extracts the identifier of the NSP and the corresponding authentication mode. The identifier of the NSP and the corresponding authentication mode are carried in the secondary authentication identifier response, and the secondary authentication identifier response is sent to the G-MS.

It can be understood that, if the host sends the authentication identifier response to the G-MS in step 606, and the selected NSP and the authentication mode are carried in the authentication identifier response, step 608 and step 609 may not be performed. After the G-MS returns the authentication success indication to the host, the authentication identifier response is directly forwarded to the ASN. 610. The G-MS forwards the second authentication identifier response to the ASN.

After receiving the second authentication identifier response, the G-MS forwards the second authentication identifier response to the ASN. It can be understood that if the step 608 and the step 609 are not performed, the G-MS forwards the authentication identifier to the ASN. response.

611. The ASN selects a corresponding AAA server according to the selected information.

After receiving the authentication identifier response or the secondary authentication identifier response sent by the G-MS, the ASN selects the corresponding NSP information selected by the host in the authentication identifier response or the secondary authentication identifier response and the corresponding authentication mode. The AAA server is used as the AAA server of the host to access the WiMAX network. The process of selecting the AAA server according to the NSP identifier and the corresponding authentication mode is prior art, and is not mentioned here.

612. The ASN sends an authentication authentication request to the selected AAA server.

613. Other processes for authentication.

Specific processes for authentication include: AAA server, ASN, G-MS, and the process of replying confirmation messages between hosts and the sending process of authentication response and authentication failure response. This process is prior art, here is not Let me repeat.

In this embodiment, steps 603, 604, and 605 may not be performed, that is, the host directly refers to the first network information queried by the G-MS. It can be understood that if this method is adopted, the G-MS needs to be timely. The data is synchronized with the ASN.

In the above embodiments, the G-MS obtains the network information corresponding to the network indication information (including at least the NSP identifier), and the network information is received by the G-MS. The network information is fed back to the host, so that the host can select the corresponding NSP according to the NSP identifier to access the WiMAX network. Therefore, in the multi-host architecture, each host can obtain related network information and access the WiMAX network.

It should be noted that because the host must access the WiMAX network in any way, there must be The authentication process, so the above-mentioned embodiments based on the authentication process can be generally applied to various access modes. It can be understood that in actual applications, different network information acquisition methods can also be adopted for different access modes. For example, if the host uses the Internet Protocol (IP) access method, the network information may be obtained in the process of address resolution, that is, the network information acquisition request may be an authentication request message or an address resolution request message. It can also be a corresponding request message in other processes, but the means is similar to the above processing in the authentication process, and details are not described herein again.

The following is a detailed description of the communication system in the embodiment of the present invention. Referring to FIG. 7, the embodiment of the communication system in the embodiment of the present invention specifically includes two cases:

1. The manner in which the gateway mobile device 702 directly feeds back the network information to the host 701:

In this mode, the communication system includes: a host 701 and a gateway mobile device 702;

The host 701 is configured to send an authentication request, and receive an authentication identifier request that includes network information from the gateway mobile device 702.

The gateway mobile device 702 is configured to receive an authentication request from the host 701, obtain network information corresponding to the authentication request, and feed back the network information to the host 701 by using an authentication identifier request.

Further, in this embodiment, the host 701 may be further configured to: select a network service provider according to the network information in the authentication identifier request, and send an authentication identifier response that includes the selected network service provider information. The authentication identifier response of the quotient information is forwarded to the access service network.

In this embodiment, the communication system further includes:

The access service network 703 is configured to receive an authentication identifier response that is sent by the gateway mobile device 702 and includes the selected network service provider information, and select a corresponding network service provider according to the selected network service provider information, Querying an AAA server corresponding to the network service provider, and sending an authentication request to the AAA server.

In this embodiment, the gateway mobile device 702 is further configured to forward the authentication request sent by the host 701 to the access service network 703, and receive the network information fed back by the access service network 703.

In the above embodiment, the network information is obtained by the gateway mobile device after acquiring the authentication request message from the host, and the network information is fed back to the host, so that the host can obtain the network information. Enter one In step, the host can select the corresponding NSP according to the NSP identifier to access the WiMAX network. Therefore, in the multi-host architecture, each host can obtain related network information and access the WiMAX network.

Second, the gateway mobile device 702 forwards the access service network 703 feedback network information: In this mode, the communication system includes: a host 701, a gateway mobile device 702 and an access service network 703;

The host 701 is configured to send an authentication request, and receive an authentication identifier request from the gateway mobile device 702 that includes network information.

The gateway mobile device 702 is configured to receive an authentication request from the host 701, and forward the authentication request to the access service network 703, and receive network information fed back by the access service network 703. The network information is fed back to the host 701 through an authentication identifier request;

The access service network 703 is configured to receive an authentication request sent by the gateway mobile device 702, obtain network information corresponding to the authentication request, and feed back the network information to the gateway mobile device 702. The host 701 may be further configured to: select, according to the network information requested by the authentication identifier, a network service provider, and send an authentication identifier response that includes the selected network service provider information;

The gateway mobile device 702 receives an authentication identifier response sent by the host 701 and includes the selected network service provider information, and forwards the authentication identifier response to the access service network.

In the above embodiment, after the gateway mobile device receives the authentication request message from the host, the authentication request is forwarded to the ASN, and the network information is requested from the ASN, and after receiving the authentication identifier request from the ASN feedback. Forward it to the host so that the host gets the network information. Further, the host can select the corresponding NSP according to the NSP identifier to access the WiMAX network. Therefore, in the multi-host architecture, each host can obtain related network information and access the WiMAX network.

Referring to FIG. 8, the first embodiment of the gateway mobile device in the embodiment of the present invention includes:

The data receiving unit 801 is configured to receive an authentication request sent by the host, and receive an authentication identifier request that includes the network information that is sent by the access service network;

The data forwarding unit 802 is configured to forward the authentication request received by the data receiving unit 801 And the access service network feeds back the authentication identifier request received by the data receiving unit 801 to the host.

In the embodiment of the present invention, after receiving the authentication request from the host, the gateway mobile device forwards the authentication request to the access service network, and feeds back the received authentication identifier request from the access service network to the The host, the authentication identifier request includes network information, so that the host can obtain the network information.

The gateway mobile device in this embodiment may further include:

The query unit 803 is configured to query the corresponding network information according to the authentication request received by the data receiving unit 801, and carry the queried network information in the authentication identifier request and send it to the data forwarding unit 802;

The data forwarding unit 802 is further configured to send the authentication identification request from the query unit 803 to the host.

Further, in the embodiment of the present invention, the gateway mobile device may further query the network information saved by the gateway after receiving the authentication request from the host, and feed back the queried network information to the host, The host can get network information.

Referring to FIG. 9, the second embodiment of the gateway mobile device in the embodiment of the present invention includes:

The data receiving unit 901 is configured to receive an authentication request sent by the host.

The query unit 902 is configured to query the corresponding network information according to the authentication request received by the data receiving unit 901, and carry the queried network information in the authentication identifier request and send it to the data feedback unit 902;

The data feedback unit 903 is configured to feed back the authentication identifier request to the host.

In the embodiment of the present invention, after receiving the authentication request from the host, the gateway mobile device queries the network information saved by itself according to the authentication request, and feeds back the queried network information to the host, so that the host You can get network information.

Referring to FIG. 10, an embodiment of a host in an embodiment of the present invention includes:

The authentication request sending unit 1001 sends an authentication request to the gateway mobile device, where the authentication request is used to request network information;

The authentication identifier request receiving unit 1002 is configured to receive an authentication identifier request from the gateway mobile device, where the authentication identifier request includes network information. In this embodiment, the host sends an authentication request to the gateway mobile device to request network information, and receives an authentication identifier request from the gateway mobile device to obtain a network carried in the authentication identifier request. information.

The host in this embodiment may further include:

The network information confirming unit 1003 is configured to confirm the selected network service provider according to the received authentication identifier request;

The authentication identifier response sending unit 1004 is configured to send the selected network service provider identifier to the gateway mobile device by carrying the identifier in the authentication identifier response.

In the embodiment of the present invention, the host may select a network according to the acquired network information, and carry the information of the selected network in the authentication identifier response, and send the information to the gateway mobile device, where the host can According to the network information, the corresponding NSP is selected to access the WiMAX network.

It will be understood by those skilled in the art that all or part of the steps of implementing the foregoing embodiments may be performed by a program to instruct related hardware, and the program may be stored in a computer readable storage medium. , including the following steps:

The gateway mobile device receives an authentication request sent by the host;

Obtaining corresponding network information according to the authentication request;

An authentication identification request containing the network information is fed back to the host.

The above-mentioned storage medium may be a read only memory, a magnetic disk or an optical disk or the like.

The network information acquisition method, the communication system, and the related device provided by the present invention are described in detail above. For those skilled in the art, according to the idea of the embodiment of the present invention, there will be a specific implementation manner and application scope. The details of the description are not to be construed as limiting the invention.

Claims

Rights request

A method for acquiring network information, which is characterized by comprising:

The gateway mobile device receives an authentication request sent by the host;

The method according to claim 1, wherein the authentication request includes network indication information, where the network indication information is used to instruct the gateway mobile device to send a network message to the host

The method according to claim 2, wherein the network indication information comprises: a user identifier of the host;

The obtaining the corresponding network information according to the authentication request is specifically:

The gateway mobile device queries network information corresponding to the user identifier of the host;

And the requesting, by the host, the authentication identifier request that includes the network information is: carrying the network information in an authentication identifier request;

Sending the authentication identification request to the host.

The method according to claim 1, wherein the obtaining the corresponding network information according to the authentication request specifically includes:

The gateway mobile device locally queries the network information corresponding to the authentication request, where the network information includes a network service provider identifier;

Or,

Transmitting, by the gateway mobile device, the authentication request to the access service network;

Receiving an authentication identity request message from the access service network, the authentication identity request message includes network information, and the network information includes a network service provider identity.

The method according to claim 4, wherein the network information further includes: an authentication mode, where the authentication mode indicates that the current authentication is a single authentication;

After the step of feeding back to the host the authentication identifier request that includes the network information, the method includes: receiving an authentication identifier response from the host, where the authentication identifier response includes a network service provider identifier selected by the host and Authentication mode

Sending the authentication identity response to the access service network.

The method according to claim 4, wherein the network information further includes: an authentication mode, where the authentication mode indicates that the current authentication is multiple authentication;

The step of feeding back to the host the authentication identifier request including the network information includes: the gateway mobile device receiving an authentication identifier response from the host, where the authentication identifier response includes the network service provision selected by the host Business identity and authentication mode;

Performing local authentication on the host according to the authentication identifier response, and sending a secondary authentication identifier request to the host if the authentication is passed;

Receiving a second authentication identifier response sent by the host, where the authentication identifier response includes a network service provider identifier and an authentication mode selected by the host;

Sending the secondary authentication identity response to the access service network.

After the requesting the host to feed back the authentication identifier request including the network information, the method further includes: the gateway mobile device receiving an authentication identifier response from the host, where the authentication identifier response includes the network service provider selected by the host Identification and authentication mode;

And authenticating the host according to the authentication identifier response, and if the authentication passes, sending the authentication identifier response to the access service network.

8. A communication system, comprising:

Host and gateway mobile device;

The host is configured to send an authentication request, and receive an authentication identifier request that includes network information from the gateway mobile device;

The gateway mobile device is configured to receive an authentication request from the host, obtain network information corresponding to the authentication request, and feed back the network information to the host by using an authentication identifier request.

9. The communication system of claim 8 wherein:

The host is further configured to select a network service provider according to the network information requested by the authentication identifier, and send an authentication identifier response including the selected network service provider information;

The gateway mobile device receives an authentication identifier response that is sent by the host and includes the selected network service provider information, and forwards the authentication identifier response to the access service network.

10. The communication system of claim 9, wherein the communication system further comprises: And an access service network, configured to receive an authentication identifier response that is sent by the gateway mobile device and includes the selected network service provider, select a corresponding network service provider according to the selected network service provider information, and query the network service. An AAA server corresponding to the provider, and sending an authentication request to the AAA server.

The communication system according to claim 10, wherein the gateway mobile device is further configured to forward an authentication request sent by the host to the access service network, and receive network information fed back by the access service network. .

12. A communication system, comprising:

Host, gateway mobile device, and access service network;

The gateway mobile device is configured to receive an authentication request from the host, and forward the authentication request to the access service network, receive network information fed back by the access service network, and pass the network information. The authentication identifier request is fed back to the host;

The access service network is configured to receive an authentication request sent by the gateway mobile device, obtain network information corresponding to the authentication request, and feed back the network information to the gateway mobile device.

13. The communication system according to claim 12, wherein:

The host is further configured to: select a network service provider according to the network information requested by the authentication identifier, and send an authentication identifier response that includes the selected network service provider information;

14. A gateway mobile device, comprising:

a data receiving unit, configured to receive an authentication request sent by the host, and receive an authentication identifier request that includes network information fed back by the access service network, where the network information includes at least network service provider information; and a data forwarding unit, configured to receive The obtained authentication request is forwarded to the access service network, and the received network information is fed back to the host through the authentication identifier request.

The gateway mobile device according to claim 14, wherein the gateway mobile device further comprises:

a querying unit, configured to query a corresponding network according to the authentication request received by the data receiving unit The information, the queried network information is carried in the authentication identifier request and sent to the data forwarding unit;

The data forwarding unit is further configured to send the authentication identifier request from the query unit to the host.

16. A gateway mobile device, comprising:

a data receiving unit, configured to receive an authentication request sent by the host;

The querying unit is configured to query the corresponding network information according to the authentication request received by the data receiving unit, and carry the queried network information in the authentication identifier request and send the information to the data feedback unit;

a data feedback unit, configured to feed back the authentication identifier request to the host.

17. A host computer, comprising:

The authentication request sending unit sends an authentication request to the gateway mobile device, where the authentication request is used to request network information;

The authentication identifier request receiving unit is configured to receive an authentication identifier request from the gateway mobile device, where the authentication identifier request includes network information.

The host according to claim 17, wherein the host further comprises: a network information confirming unit, configured to confirm the selected network service provider according to the received authentication identifier request;

The authentication identifier response sending unit is configured to send the selected network service provider identifier to the gateway mobile device by carrying the identifier in the authentication identifier.