WO2009129703A1

WO2009129703A1 - Method and device for registering at universal service interface system

Info

Publication number: WO2009129703A1
Application number: PCT/CN2009/070345
Authority: WO
Inventors: 何贤会
Original assignee: 华为技术有限公司
Priority date: 2008-04-21
Filing date: 2009-02-03
Publication date: 2009-10-29
Also published as: CN101568111A

Abstract

A method for registering at a universal service interface system is provided, the method comprises the following steps: authenticating a terminal after receiving a universal service interface USI register request message from the terminal; after completing the authenticating, sending a USI register response message to the terminal. A universal service interface device is also provided, the device comprises: a register receiving unit, for receiving the universal service interface USI register request message from the terminal; an authenticating unit, for authenticating the terminal after receiving the USI register request message from the terminal by the register receiving unit; a sending unit, for sending the USI register response message to the terminal after the authenticating of the terminal is passed by the authenticating unit. Through the above method and device, the terminal can initiate a USI register when it is needed to use USI, thereby the network resource is saved.

Description

Method and device for registering general service interface system This application claims to be submitted to the Chinese Patent Office on April 21, 2008, application number 200810066671.2, and the Chinese patent entitled "Method and Equipment for Registering a General Service Interface System" Priority of the application, the entire contents of which are incorporated herein by reference.

Technical field

The present invention belongs to the field of communication technologies, and in particular, to a method and device for registering a general service interface system.

Background technique

WiMAX (Worldwide Interoperability for Microwave Access) is a wireless metropolitan area network technology based on the IEEE 802.16 standard. The WiMAX network is mainly composed of two parts, namely, the Access Service Network (ASN) and the Connectivity Service Network (CSN). Among them, ASN mainly provides corresponding wireless access and control for WiMAX users. ASN includes logical entities such as base station (BS) and access service network gateway (ASN Gateway, ASN GW); CSN is WiMAX core network, which is WiMAX. The user provides an IP connection service, and the CSN includes a router, an AAA (authentication, authorization, and accounting) proxy or a server, a user database, an Internet gateway device, and the like. The ASN can select different CSNs to provide services for users according to user requirements.

With the opening of the network business, a WiMAX network has also introduced a

The service of the WiMAX network is open to third-party application interfaces in the network or outside the network, that is, USI (Universal Service Interface). Figure 1 shows the network architecture of the USI system in the WiMAX network. The WiMAX network can provide the service interface to the Application Service Provider (ASP)/Internet Application Service Provider (IIS) through the USI system. ). By calling the business capabilities provided by USI, the ASP network or the Internet can be applied to businesses open to WiMAX access users. And, through the ASP network or the Internet, it is more convenient to provide personalized services for WiMAX access users. The service capabilities that WiMAX networks open through the USI system include Quality of Service (QoS), location services, multicast broadcast services, user information queries, and user authentication.

The terminal wants to use the USI function and needs to go to the general service interface system (ie USI system).

USI registration. In the prior art, the registration of the USI is initiated by the AAA server in the CSN to initiate the USI registration after the network is accessed, or the application server of the ASP initiates the USI registration instead of the terminal after interacting with the terminal. Referring to FIG. 2, the process of initiating the USI registration by the AAA server instead of the terminal in the prior art mainly includes the following steps:

Step 201: After the initial network access of the terminal is completed, the ASN starts the charging start (Accounting-

Start) a message to the AAA server to activate the user session;

Step 202: The AAA server sends a USI registration request to the USI system, where the registration request includes the user identifier of the terminal user.

Step 203: After receiving the USI registration request sent by the AAA server, the USI system registers the user identifier in the registration request message with the USI system, and sends a USI registration confirmation message to the AAA server.

Step 204: The terminal sends a USI ID request message to the USI system to request a temporarily used USI ID.

Step 205: The USI system allocates a temporary USI ID to the terminal, and sends the temporary USI ID to the terminal by using a USI ID response message.

In the above prior art, the network side replaces the terminal for USI registration regardless of whether the USI system needs to be used after the terminal accesses the network. In the actual situation, some terminals may not need to use the USI system or need to use the USI system immediately after accessing the network. The registration method provided by the above prior art may cause unnecessary processing on the network side and waste network resources.

Summary of the invention

Embodiments of the present invention provide a method and device for registering a general service interface system to solve In the prior art, the USI registration cannot be performed according to the requirements of the terminal, which causes a problem of waste of network resources. Embodiments of the present invention provide a method for registering a general service interface system, the method comprising the following steps:

After receiving the general service interface USI registration request message from the terminal, the terminal is authenticated;

After the authentication is completed, the USI registration response message is sent to the terminal. An embodiment of the present invention also provides a terminal, the terminal comprising:

a registration request unit, configured to send a general service interface USI registration request message to the universal service interface device;

And a receiving unit, configured to receive a USI registration response message from the universal service interface device. An embodiment of the present invention further provides a general service interface device, where the device includes: a registration receiving unit, configured to receive a universal service interface USI registration request message from the terminal; and an authentication unit, configured to receive at the registration receiving unit After the USI registration request message of the terminal, the terminal is authenticated;

And a sending unit, configured to send a USI registration response message to the terminal after the authentication unit passes the authentication of the terminal.

DRAWINGS

1 is a network structure including a USI in a WiMAX network in the prior art;

2 is a schematic flowchart of a USI registration process performed by an AAA server instead of a terminal in the prior art; FIG. 3 is a schematic flowchart of a first embodiment of a USI system registration method according to the present invention;

4 is a schematic flowchart of a second embodiment of a USI system registration method according to the present invention;

5 is a schematic flowchart of a third embodiment of a USI system registration method according to the present invention;

6 is a schematic diagram of a first structure of a system for performing USI registration according to an embodiment of the present invention;

7 is a schematic diagram of a first structure of an authentication unit in a USI device according to an embodiment of the present invention;

8 is a schematic diagram of a second structure of an authentication unit in a USI device according to an embodiment of the present invention;

FIG. 9 is a schematic diagram of a second structure of a system for performing USI registration according to an embodiment of the present invention. detailed description

The embodiment of the present invention provides a solution for registering a general service interface USI. In this solution, the terminal can initiate the USI registration when the USI needs to be used, thereby solving the problem that the network side blindly replaces the terminal to register in the prior art. The problem of wasting resources.

General Service Interface The flow of the first embodiment of the USI registration method is as shown in FIG. 3, and includes the following steps:

Step 301: The terminal sends a USI registration request message to the USI system, where the USI registration request message carries the USI ID signed by the terminal;

After the terminal is successfully connected to the network, the USI registration request message is sent to the USI system when the USI function is required. The USI registration request message includes the USI ID of the terminal subscription. The USI ID of the terminal subscription may be the user name of the terminal contracted USI system, or the terminal device identifier, or the WiMAX user ID or the IP address of the terminal.

Step 302: After receiving the USI registration request message from the terminal, the USI system authenticates the terminal according to the USI ID signed by the terminal in the USI registration request message.

After receiving the USI registration request message from the terminal, the USI system can authenticate the terminal according to the USI ID signed by the terminal in the USI registration request message.

Step 303: After the terminal authentication is completed, the USI system sends a USI registration response message to the terminal.

In the step 303, if the USI system passes the terminal authentication, the USI registration response message sent to the terminal is a USI registration success message. If the USI system fails to authenticate the terminal, the USI registration response message sent by the USI system to the terminal is USI registration. Reject the message.

After the terminal authentication is passed, the USI system sends a USI registration success message to the terminal. The USI registration success message may include a temporary USI ID assigned by the USI system to the terminal. The temporary USI ID may also be sent to the terminal without using the USI registration success message, but is sent to the terminal through a separate message, such as the USI ID distribution message, after step 303.

The terminal obtains the USI registration success message or the USI ID distribution message from the USI system. In the process of interacting with the USI subsystem, the terminal may use the temporary USI ID instead of the USI ID signed by the terminal. The temporary USI ID can prevent the USI ID signed by the terminal from being maliciously stolen by others, so that the information interaction between the terminal and the network side becomes more secure.

In addition, in order to ensure the security of the temporary USI ID, the temporary USI ID can also be set to a valid time. During the effective time, the terminal can use the temporary USI ID to interact with the network side. When the effective time is exceeded, the USI system can be new. A temporary USI ID is assigned to the terminal, for example, the newly assigned temporary USI ID is sent to the terminal through the USI ID update message.

Through the foregoing first embodiment of the method of the present invention, the terminal can initiate the USI registration when the USI needs to be used, thereby avoiding the problem that the terminal is blindly registered by the network side instead of the terminal during the network access process, thereby saving network resources. And by using the temporary USI ID, the information interaction between the terminal and the USI system can be made more secure.

In the above step 302, the USI system can authenticate the terminal in two ways. One is to authenticate the terminal through information interaction between the USI system and the AAA server, and the other is between the USI system and the terminal. The information exchange authenticates the terminal, and the two methods will be described below through a more detailed embodiment.

FIG. 4 is a flowchart of a second embodiment of the method according to the present invention. In this embodiment, the USI system can authenticate the terminal by interacting with the AAA server. The method in this embodiment includes the following steps. :

Step 401: The terminal sends a USI registration request message to the USI system.

After the terminal is successfully connected to the network, the USI registration request message is sent to the USI system. The USI registration request message includes the USI ID of the terminal subscription. The USI ID of the terminal subscription may be the user name of the terminal contracted USI system, or the terminal device identifier, or the WiMAX user ID or the IP address of the terminal.

Step 402: After receiving the USI registration request message of the terminal, the USI system sends an authentication request message to the AAA server to request authentication of the terminal. The USI system obtains the USI ID of the terminal in the USI registration request message from the USI registration request message, and carries the USI ID signed by the terminal in the authentication request message to the AAA server.

Step 403: After receiving the authentication request message sent by the USI system, the AAA server authenticates the terminal, and sends an authentication response message to the USI system after the authentication is completed.

The AAA server stores the subscription information registered at the time of opening the account or after the account is opened. The subscription information includes the USI ID signed by the terminal, the password of the terminal, and the like. After receiving the authentication request message, the AAA server determines whether the USI ID signed by the terminal in the authentication request message is the saved USI ID, and whether the terminal has subscribed to the USI service. If the USI ID of the terminal is the saved USI ID and the USI has been signed. The authentication response message sent by the AAA server to the USI system is the authentication pass message. If the USI ID of the terminal is not the saved USI ID or the terminal does not subscribe to the USI service, the authentication response message sent by the AAA server to the USI system is the authentication failure. Message.

Step 404: After receiving the authentication response message sent by the AAA server, the USI system sends a USI registration response message to the terminal.

In step 404, if the USI system receives the authentication response message sent by the AAA server as the authentication pass message, the USI registration response message sent by the USI system to the terminal is a USI registration success message; if the USI system receives the authentication response sent by the AAA server The message is an authentication failure message, and the USI registration response message sent by the USI system to the terminal is a USI registration rejection message.

The USI registration success message sent by the USI system to the terminal may include a temporary USI ID assigned by the USI system to the terminal. The temporary USI ID may also be sent to the terminal without using the USI registration success message, but is sent to the terminal through a separate message, such as the USI ID distribution message, after step 404.

The terminal obtains the temporary USI ID after receiving the USI registration success message or the USI ID distribution message from the USI system. In the subsequent interaction with the USI subsystem, the terminal may use the temporary USI ID instead of the USI ID signed by the terminal. The temporary USI ID can prevent the USI ID signed by the terminal from being maliciously stolen by others, so that the information interaction between the terminal and the network side becomes more Safety.

Through the method provided by the second embodiment of the method of the present invention, the terminal can initiate the USI registration when the USI needs to be used, thereby avoiding the fact that even if the terminal does not need to use the USI function, the terminal will register instead of the terminal, resulting in the network. The problem of wasting resources. In the embodiment of the method, the AAA server in the existing network can be used to authenticate the terminal, so that the functional requirements of the USI system are relatively simple.

The second embodiment of the method of the present invention is to authenticate the terminal by using the AAA server in the existing network. In the method provided by the embodiment of the present invention, the authentication may be added to the USI system instead of the AAA server. Function to authenticate the terminal.

Referring to FIG. 5, a flowchart of a third embodiment of the method of the present invention is shown. In this embodiment, a user authentication function is added to the USI system, and the USI system can authenticate the terminal by interacting with the terminal. The method of this embodiment includes the following steps:

Step 501: The terminal sends a USI registration request message to the USI system.

Step 502: After receiving the USI registration request message sent by the terminal, the USI system sends a challenge request message to the terminal.

After receiving the USI registration request message sent by the terminal, the USI system checks whether the USI ID signed by the terminal is the saved USI ID, and whether the terminal subscribes to the contracted USI service. If the USI ID of the terminal is the saved USI ID and Signing up for the USI business, the USI system generates quality The value column is queried (for example, a random sequence is generated as a challenge value column), and the challenge value column is sent to the terminal through a challenge request message.

Step 503: After receiving the challenge request message, the terminal sends a challenge response message to the USI system. After receiving the challenge request message from the USI system, the terminal selects the challenge value in the challenge request message and the USI key of the terminal according to the specific The algorithm generates a response value column and sends it to the USI system via a challenge response message.

Step 504: After receiving the challenge response message, the USI system sends a USI registration response message to the end.

After receiving the challenge response message, the USI system verifies the response value column in the challenge response message, for example, comparing whether the response value column in the challenge response message sent by the terminal matches the challenge value column generated by the USI system itself, if it matches, If the verification succeeds, the USI registration response message sent by the USI system to the terminal is the USI registration success message; if it does not match, the verification fails, and the USI registration response message sent by the USI system to the terminal is a USI registration rejection message.

The USI registration success message sent by the USI system to the terminal may include a temporary USI ID assigned by the USI system to the terminal. The temporary USI ID may also be sent to the terminal without the USI registration success message, but sent to the terminal through a separate message, such as the USI ID distribution message, after step 504.

After receiving the USI registration success message or the USI ID distribution message from the USI system, the terminal obtains the temporary USI ID. In the subsequent interaction with the USI subsystem, the terminal can use the temporary USI ID instead of the USI ID signed by the terminal. The temporary USI ID can prevent the USI ID of the terminal from being maliciously stolen by others, making the information interaction between the terminal and the network side more secure.

In addition, to ensure the security of the temporary USI ID, the temporary USI ID can be set to a valid time. During the effective time, the terminal can use the temporary USI ID to interact with the network. When the valid time is exceeded, the USI system can be newly allocated. A temporary USI ID is sent to the terminal, for example, by sending a newly assigned temporary USI ID to the terminal through the USI ID update message. Through the method provided by the third embodiment of the method of the present invention, the terminal can initiate the USI registration when the USI needs to be used, thereby avoiding the prior art that even if the terminal does not need to use the USI function, the network side also replaces the terminal for registration, resulting in the network. The problem of wasting resources. In the embodiment of the method, only one authentication function needs to be added to the USI system, and the subsequent USI system can directly authenticate the terminal without using the AAA server.

An embodiment of the present invention further provides a system for performing USI registration. Referring to the system structure diagram shown in FIG. 6, the system includes a terminal 60 and a general service interface device 61.

The terminal 60 mainly includes the following modules:

The registration request unit 601 is configured to send a USI registration request message to the universal service interface device 61;

The receiving unit 602 is configured to receive a USI registration response message from the universal service interface device 61.

According to the description of the first embodiment, the second embodiment of the method, and the third embodiment of the method, when the USI system sends a registration response message to the terminal, it may carry the temporary USI ID assigned by the USI system to the terminal, and may not carry this. The temporary USI ID is sent to the terminal by using a USI ID distribution message. Therefore, the receiving unit 602 in the terminal 60 may specifically include: a first receiving unit 6021: for receiving the USI registration from the universal service interface device 61. Response message

The second receiving unit 6022 is configured to receive a USI ID distribution message sent by the universal service interface device 61, where the USI ID distribution message includes a temporary USI ID allocated by the universal service interface device 61 for the terminal.

The functions of the above USI system can be implemented by the universal service interface device 61. The universal service interface device 61 includes:

a registration receiving unit 611, configured to receive a USI registration request message from the terminal;

The authentication unit 612 is configured to: after the registration receiving unit 611 receives the USI registration request message of the terminal, perform authentication on the terminal; The sending unit 613 is configured to send a USI registration response message to the terminal after the authentication unit 612 completes the terminal authentication.

According to the description of the first embodiment, the second embodiment of the method, and the third embodiment of the method, when the USI system in the universal service interface device 61 sends a registration response to the terminal, it may carry the temporary USI ID assigned by the USI system to the terminal. It is also possible that the temporary USI ID is not carried, but the temporary USI ID is sent to the terminal through a USI ID distribution message. Therefore, the sending unit 613 of the universal service interface device 61 can further include:

The first sending unit 6131 is configured to send a USI registration response message to the terminal.

The second sending unit 6132 is configured to send a USI ID distribution message to the terminal, where the USI ID distribution message includes a temporary USI ID allocated by the universal service interface device 61 for the terminal.

Referring to Figure 6, the principle of the above terminal 60 working in conjunction with the universal service interface device 61 is as follows:

When the terminal 60 needs to use the USI function, the registration request unit 601 may send a USI registration request message to the registration receiving unit 611 in the universal service interface device 61. The registration receiving unit 611 notifies the authentication unit 612 after receiving the USI registration request message. The terminal 60 performs authentication, and if the authentication passes, the authentication unit 612 notifies the transmitting unit 613 to transmit the USI registration response message to the receiving unit 602 of the terminal 60.

If the general service interface device 61 sends the USI registration response message to the terminal 60 without carrying the temporary USI ID, the authentication unit 612 notifies the first sending unit 6131 to send the USI registration response message to the first receiving unit 6021 of the terminal 60 after the authentication is passed. And informing the second sending unit 6132 to send the USI ID distribution message to the second receiving unit 6022 of the terminal 60, where the USI ID distribution message includes the temporary USI ID allocated by the universal service interface device 61 for the terminal.

In addition, according to the technical solution of the second embodiment and the third embodiment of the foregoing method, the universal service interface device 61 can perform authentication on the terminal in two ways, one is through the common service interface device 61 and the AAA server. The information exchanges the terminal for authentication, and the other is to perform the terminal interaction between the USI system and the terminal in the universal service interface device 61. Certification.

If the universal service interface device 61 authenticates the terminal by using the information exchange with the AAA server, the authentication unit 612 of the universal service interface device 61 may specifically include:

The first authentication requesting unit 61201 is configured to send an authentication request message to the AAA server after the registration receiving unit 611 receives the USI registration request message of the terminal, requesting authentication of the terminal; and the first authentication receiving unit 61202 is configured to be used in the AAA server. After the authentication is passed, the authentication response message from the AAA server is received.

If the universal service interface device 61 authenticates the terminal 60 by using the information exchange with the terminal 60, the authentication unit 612 of the universal service interface device 61 may specifically include:

The second authentication request unit 61211 is configured to send a challenge request message to the terminal after the registration receiving unit 611 receives the USI registration request message of the terminal;

The second authentication receiving unit 61212 is configured to receive a challenge response message from the terminal.

Correspondingly, in order to complete the authentication information interaction with the universal service interface device 61, as shown in FIG. 9, the terminal 60 may further include an authentication response unit 603 for receiving the challenge request message from the universal service interface device 61. Sending a challenge response message to the general service interface device 61, the authentication response unit specifically includes:

a challenge receiving unit 6031, configured to receive a challenge request message from the universal service interface device 61;

The above challenge request message includes a USI system generated challenge value column.

The challenge response unit 6032 is configured to send a challenge response message to the universal service interface device 61. The challenge response unit 6032 generates a response value column according to the challenge value column in the challenge request message and the USI key of the terminal according to a specific algorithm, and sends the response value column to the general service interface device 61 through the challenge response message.

Referring to FIG. 9, the terminal uses and ends the general service interface device 61 when performing USI registration. The method for authenticating the terminal 60 in the manner of information exchange between the terminals 60 is as follows: When the terminal 60 needs to use the USI function, the USI registration request message may be sent by the registration request unit 601 to the registration receiving in the universal service interface device 61. The unit 611; the registration receiving unit 611 notifies the second authentication request unit 61211 after receiving the USI registration request message, the second authentication request unit 61211 sends a challenge request message to the challenge receiving unit 6031 in the terminal 60; the challenge receiving unit 6031 receives the challenge request After the message, the response value column is generated according to the USI ID and password signed by the terminal according to a specific algorithm, and sent to the challenge response unit 6032; the challenge response unit 6032 sends the response value column to the second of the universal service interface device 61 through the challenge response message. The authentication receiving unit 61212; the second authentication receiving unit 61212 verifies the response value column in the challenge response message after receiving the challenge response message, and if the verification passes, the notification sending unit 613 sends the USI registration response message to the receiving unit 602 of the terminal 60. .

If the general service interface device 61 sends the USI registration response message to the terminal 60 without carrying the temporary USI ID, the second authentication receiving unit 61212 notifies the first sending unit 6131 to send the USI registration after the response value column verification in the challenge response message is passed. The response message is sent to the first receiving unit 6021 of the terminal 60, and the second sending unit 6132 is notified to send the USI ID distribution message to the second receiving unit 6022 of the terminal 60. The USI ID distribution message includes the universal service interface device 61 for the terminal. Temporary USI ID.

The above-mentioned universal service interface device 61 may be a single board or a single device, or may be integrated as a function module in a network entity such as an AAA server or a PCRF (Policy Charging Rules Function) or an application server.

With the system provided by the embodiment of the present invention, the terminal does not need to perform the USI registration by the network side blindly instead of the terminal after the network access, but the terminal initiates the USI registration when the USI needs to be used, thereby greatly saving network resources.

The above description is only the preferred embodiment of the present invention, and is not intended to limit the present invention. Any modifications, equivalent substitutions, improvements, etc., which are included in the spirit and principle of the present invention, should be included in the present invention. Within the scope of protection.

Claims

Claim

A method for registering a general service interface system, the method comprising:

After the authentication is completed, the USI registration response message is sent to the terminal.

The method according to claim 1, wherein, after the authentication is completed, sending the USI registration response message to the terminal specifically includes:

Sending a USI registration success message to the terminal if the authentication is passed;

If the authentication fails, the USI registration reject message is sent to the terminal.

The method according to claim 1, wherein the authenticating the terminal specifically includes:

Sending an authentication request message to the authentication, authorization, and accounting AAA server, requesting authentication of the terminal, where the authentication request message includes the USI ID signed by the terminal;

After the AAA service completes the terminal authentication, it receives an authentication response message from the AAA server.

After confirming that the terminal has subscribed to the USI service, sending a challenge request message to the terminal; receiving a challenge response message from the terminal;

The terminal is verified according to the challenge response message.

5. The method of claim 4, wherein

The challenge request message includes a challenge value column; the challenge response message includes a response value column generated according to the challenge value column and the USI key of the terminal; and the terminal is verified according to the challenge response message:

The response value column carried in the challenge response message is verified.

6. The method according to claim 5, wherein the message is carried in a challenge response message The verification of the response value column specifically includes:

Comparing whether the response value column and the challenge value column match, if it matches, the verification succeeds; if it does not match, the verification fails.

The method according to any one of claims 1 to 6, wherein the USI registration response message sent to the terminal includes a USI ID temporarily allocated for the terminal.

The method according to any one of claims 1 to 6, wherein the sending the USI registration response message to the terminal further comprises:

Sending a USI ID distribution message to the terminal, where the USI ID distribution message includes a USI ID temporarily allocated for the terminal.

A terminal, wherein the terminal comprises:

a registration request unit, configured to send a general service interface USI registration request message to the general service interface device;

And a receiving unit, configured to receive a USI registration response message from the universal service interface device.

10. The terminal of claim 9, wherein:

The terminal further includes: an authentication response unit, configured to: after receiving a challenge request message from the universal service interface device, send a challenge response message to the universal service interface device, where the authentication response unit specifically includes:

a challenge receiving unit, configured to receive a challenge request message from the universal service interface device, and a challenge response unit, configured to send a challenge response message to the universal service interface device.

The terminal according to claim 9, wherein the receiving unit specifically includes:

a first receiving unit: configured to receive a USI registration response message from the universal service interface device;

a second receiving unit, configured to receive a USI ID distribution message sent by the universal service interface device, where the USI ID distribution message includes the universal service interface device to allocate the terminal Temporary USI ID.

A general service interface device, the device includes: a registration receiving unit, configured to receive a general service interface USI registration request message from the terminal; and an authentication unit, configured to receive at the registration receiving unit After the USI registration request message of the terminal, the terminal is authenticated;

The universal service interface device according to claim 12, wherein the authentication unit comprises:

a first authentication requesting unit, configured to send an authentication request message to the AAA server after the registration receiving unit receives the USI registration request message of the terminal, requesting authentication of the terminal; After the AAA server authenticates the terminal, the AAA server receives an authentication response message from the AAA server.

a second authentication requesting unit, configured to send a challenge request message to the terminal after the registration receiving unit receives the USI registration request message of the terminal;

And a second authentication receiving unit, configured to receive a challenge response message from the terminal.

The universal service interface device according to claim 12, wherein the sending unit specifically includes:

a first sending unit, configured to send a USI registration response message to the terminal;

The second sending unit is configured to send a USI ID distribution message to the terminal, where the USI ID distribution message includes a temporary USI ID allocated by the universal service interface device for the terminal.

The universal service interface device according to any one of claims 12 to 15, wherein the device is a single board, or is integrated as a function module in an AAA server, or a policy and charging rule function entity, Or in the application server.