WO2009135371A1

WO2009135371A1 - Network connection mode determining method

Info

Publication number: WO2009135371A1
Application number: PCT/CN2008/073555
Authority: WO
Inventors: 朱春晖; 宗在峰
Original assignee: 中兴通讯股份有限公司
Priority date: 2008-05-04
Filing date: 2008-12-17
Publication date: 2009-11-12
Also published as: CN101472263B; CN101472263A

Abstract

A network connection mode determining method comprises the following steps: step 1), an Authentication Authorization and Accounting (AAA) Server determines that the relationship between the Home Public Land Mobile Network (HPLMN) and the Non 3GPP Access Network is trustworthy, and then sends the trust relationship information of the HPLMN and the Non 3GPP Access Network, and the user signature information to the AAA Proxy, and, step 2), the AAA Proxy determines the network connection mode according to the trust relationship above, the user signature information, the trust relationship of the Visited Public Land Mobile Network (VPLMN) and the Non 3GPP Access Network, whether the VPLMN has an Evolved Packet Data Gateway (ePDG), and whether the VPLMN can provide a service information. The present invention provides a method for determining the connection mode about how to access the Evolved Packet Core (EPC) Network through a Non 3GPP Access Network while a user's end (UE) is roaming.

Description

Method for determining network connection method

The present invention relates to the field of communications technologies, and in particular, to a method for determining a network connection manner. BACKGROUND OF THE INVENTION In order to maintain the competitiveness of the third generation mobile communication system in the field of mobile communication, it is necessary to improve its network performance and reduce network construction and operation costs. Therefore, the 3rd Generation Partnership Project (3GPP) is referred to as 3GPP. The standardization working group is currently working on the next-generation evolution of the core network system, the Evolved Packet Core (EPC), which aims to provide users with higher transmission rates and shorter transmission delays. The EPC system supports access to non-3GPP radio access networks. 1 is a schematic diagram of a non-3GPP radio access network accessing a Home Public Land Mobile Network (Home PLMN, referred to as HPLMN) by visiting a Public Land Mobile Network (VPLMN), as shown in FIG. The network elements involved are: Packet Data Network Gateway (P-GW), which is responsible for the gateway function of the UE accessing the Packet Data Network (PDN); Home Subscriber Server (Home Subscriber Server) , referred to as HSS), is located in the user's home network, and is used to permanently store user subscription data and security data. In order to support non-3GPP access system access to EPC, Authentication Authorization and Accounting (AAA) system It also includes an authentication 4 authorized charging server (referred to as AAA Server for short) and an authentication 4 authorized charging agent (referred to as AAA Proxy for short). Non-3GPP radio access networks include the following two types:

Trusted Non 3 GPP Access (trusted non-3GPP access network), there is a trust relationship between the 3GPP network and the non-3GPP access system, and the non-3GPP access system can directly access the P-GW through S2a.

Untrusted Non 3GPP Access (untrusted non-3GPP access network), there is no trust relationship between the 3GPP network and the non-3GPP access system, and the non-3GPP access system must first access

1 P23432 The Evolved Packet Data Gateway (ePDG) of the 3GPP network is connected to the P-GW through S2b. At this time, a secure tunnel is established between the UE and the ePDG to ensure data transmission security between the UE and the 3GPP network. In Figure 1, a trust relationship may be established between HPLMN and VPLMN and Non 3GPP Access. For example, both HPLMN and VPLMN consider the Non 3 GPP Access to be trusted, or either of HPLMN and VPLMN may -3 GPP Access is considered untrustworthy. When the mobile terminal is allowed to directly access the PDN GW of a PLMN from Non-3GPP Access, the PLMN and the Non-3GPP Access are trusted relationships; otherwise, if the PLMN and the Non-3GPP Access are not trusted, then The mobile terminal accessed by the Non-3GPP Access must pass through the security gateway ePDG to access the PDN GW of the PLMN. When non-roaming, the trust relationship between HPLMN and Non-3GPP Access is determined by the HPLMN, but when the user accesses the VPLMN from Non-3GPP Access, the PDN of the monthly service is provided for the user according to the location of the service provided. The GW may be located in the HPLMN or in the VPLMN. However, at present, there is no method for determining which connection method the Non 3GPP Access adopts at this time. SUMMARY OF THE INVENTION The present invention has been made in view of the problem in the prior art that the user equipment cannot determine the connection mode of accessing the VPLMN through Non-3GPP Access when roaming, and it is therefore an object of the present invention to provide a solution to the above problem. solution. In order to achieve the above object, according to an aspect of the present invention, a method of determining a network connection manner is provided. The user equipment (UE) roams access to the non-3GPP access network, and the non-3GPP access network ^! User information of the UE is sent to the authentication 4 authorized charging agent AAA Proxy and the home subscriber server HSS/authentic 4 authorized charging server AAA Server, non-3GPP access network, AAA Proxy and HSS/AAA to authenticate the UE and 4 The method for determining the foregoing network connection manner includes: Step 1: The AAA Server determines that the belonging public land mobile network and the non-3GPP access network are in a trust relationship, and the trust relationship information and the user belonging to the public land mobile network and the non-3GPP access network are used. The subscription information is sent to the AAA Proxy. Step 2: The AAA Proxy reports the trust relationship information sent by the AAA Server, the user subscription information, the trust relationship information between the public land mobile network and the non-3GPP access network, and whether the public land mobile network is visited. Is there an evolved packet data gateway, can you provide access to public land mobile networks?

2 P23432 The service information determines the network connection method used. After the second step, the foregoing method may further include: Step 3: The AAA Proxy sends the determined network connection mode to the non-3GPP access network; Step 4: If the network connection mode is required to connect to the evolved packet data gateway, Then the non-3GPP access network informs the UE to establish a connection between the UE and the evolved packet data gateway. In the first step, the trust relationship information and the user subscription information of the public land mobile network and the non-3GPP access network are any one of the following: Case 1: The user subscription information is an indication that all services are provided by the public land mobile network, belonging to The public land mobile network and the non-3GPP access network are in a trust relationship; Case 2: the user subscription information is an indication that all services are provided by the public land mobile network, and the public land mobile network and the non-3GPP access network are not trusted; III: The user subscription information is an indication that the service can be provided by visiting the public land mobile network, and the belonging public land mobile network and the non-3GPP access network are not trusted. The above method, wherein the AAA Server sends information to the AAA Proxy to allow the public land mobile network to provide services, and the AAA Proxy decides whether to provide the UE with the public land mobile network service according to the configuration in the visited public land mobile network, if not Providing any access to public land mobile network services, it is considered that services must be provided by the home public land mobile network. In the above method, in case 1, the UE does not need to connect to the network through the evolved packet data gateway. In the above method, in case 2, if there is no evolved packet data gateway in the public land mobile network, the AAA Proxy considers that the UE's network connection does not require an evolved packet data gateway. In the above method, in case 2, if there is an evolved packet data gateway in the public land mobile network, the AAA Proxy determines that the network connection of the UE needs to pass through the evolved packet data gateway. The above method, wherein the user subscription information is an indication that the service can be provided by visiting the public land mobile network, and the AAA Proxy decides to provide the full service service to the UE by visiting the public land mobile network according to the configuration in the visited public land mobile network, if the public land is visited The mobile network and the non-3GPP access network are in a trusted relationship, and the AAA Proxy determines that the UE's network connection does not need to be connected to evolve.

3 P23432 Packet data gateway. The above method, wherein the user subscription information is an indication that the service can be provided by visiting the public land mobile network, and the AAA Proxy decides to provide the full service service to the UE by visiting the public land mobile network according to the configuration in the visited public land mobile network, if the public land is visited The mobile network and the non-3GPP access network are in an untrusted relationship, and the AAA Proxy determines that the UE's network connection needs to connect to the evolved packet data gateway. The above method, wherein the user subscription information is an indication that the service can be provided by visiting the public land mobile network, and the AAA Proxy decides to provide partial service monthly service to the UE by visiting the public land mobile network according to the configuration in the visited public land mobile network, and visits the public land. The mobile network and the non-3GPP access network have a trust relationship. If the AAA server sends the AAA Proxy a message indicating that the home public land mobile network and the non-3GPP access network have a trust relationship, the AAA Proxy determines that the UE's network connection does not need to be connected. Evolved packet data gateway. The above method, wherein the user subscription information is an indication that the service can be provided by visiting the public land mobile network, and the AAA Proxy decides to provide a partial service monthly service to the UE by visiting the public land mobile network according to the configuration in the visited public land mobile network, and visits the public land. The mobile network and the non-3GPP access network are trusted. If the home public land mobile network and the non-3GPP access network are in an untrusted relationship, and the public land mobile network does not have an evolved packet data gateway, the AAA Proxy determines the UE. The network connection does not require connection to an evolved packet data gateway. The above method, wherein the user subscription information is an indication that the service can be provided by visiting the public land mobile network, and the AAA Proxy decides to provide partial service service to the UE by visiting the public land mobile network according to the configuration in the visited public land mobile network, and visits the public land mobile. The network and the non-3GPP access network are trusted. If the home public land mobile network and the non-3GPP access network are in an untrusted relationship, if there is an evolved packet data gateway in the public land mobile network, the AAA Proxy determines the UE. The network connection needs to connect to the evolved packet data gateway. The above method, wherein the user subscription information is an indication that the service can be provided by visiting the public land mobile network, and the AAA Proxy decides to provide partial service service to the UE by visiting the public land mobile network according to the configuration in the visited public land mobile network, and visits the public land mobile. The network and the non-3GPP access network are in an untrusted relationship, and the AAA Proxy determines that the UE's network connection needs to connect to the evolved packet data gateway.

4 P23432 According to another aspect of the present invention, a method of determining a network connection manner is also provided. The user equipment UE roams access to the non-3GPP access network, and the non-3GPP access network sends the user information of the UE to the authentication 4 authorized charging AAA system, and the non-3GPP access network and the AAA system authenticate and authorize the UE. The method includes: determining, by the AAA system, the adopted network connection manner according to the predetermined information, where the predetermined information includes: trust relationship information belonging to a trust relationship between the public land mobile network and the non-3GPP access network, user subscription information, and visiting the public land mobile network and The trust relationship information of the non-3GPP access network, whether the public land mobile network accesses the evolved packet data gateway, and whether the public land mobile network can provide service information. The foregoing AAA system includes an authentication 4 authorized charging proxy AAA Proxy and a home subscriber monthly server HSS/authentication 4 authorized charging server AAA Server. Therefore, the foregoing AAA system determines the adopted network connection manner according to the predetermined information, including: The AAA server determines that the home public land mobile network and the non-3GPP access network are in a trust relationship, and sends the trust relationship information and the user subscription information indicating the trust relationship between the home public land mobile network and the non-3GPP access network to the AAA Proxy. Second, the AAA Proxy determines the network connection method to be used according to the predetermined information. With at least one of the above technical solutions, the present invention provides for determining that a user equipment is roaming when roaming

The method by which Non 3 GPP Access accesses the connection mode of the EPC network. BRIEF DESCRIPTION OF DRAWINGS FIG. 1 is a schematic diagram of an EPC architecture accessed by Non 3 GPP Access when a user roams in the related art; FIG. 2 is a flowchart of the AAA Server determining a trust relationship between the HPLMN and the Non-3 GPP Access and notifying the AAA Proxy; The AAA Proxy determines the decision logic diagram of the network connection mode. Figure 4 is a flow chart of the AAA Server's decision to adopt the S2b access mode. Figure 5 is a flow chart of the AAA Server's decision to adopt the S2a access mode. Figure 6 is the AAA Proxy decision. A flow chart using the connection method of S2b.

5 P23432 DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS In the technical solution provided by this embodiment, a user equipment UE roams into a non-3GPP access network, and a non-3GPP access network sends user information of the UE to an authentication 4 authorized charging agent AAA Proxy and Home subscriber server HSS/authentication 4 authorized billing server AAA Server, non-3GPP access network, AAA Proxy and HSS/AAA authenticate the UE and 4 are authorized, when the AAA Server determines the home public land mobile network and non-3GPP access When the network is a trust relationship, the trust relationship information and the user subscription information of the public land mobile network and the non-3GPP access network are sent to the AAA Proxy, and then the AAA Proxy accesses the public land mobile network according to the trust relationship information, the user subscription information, and The trust relationship information of the non-3GPP access network, whether the public land mobile network accesses the evolved packet data gateway, and whether the public land mobile network can provide the service information determines the network connection mode. In the method for determining the network connection mode during roaming, the user subscription information stored in the HSS includes the following indication information: Whether to allow the user to roam to the VPLMN to provide the service service by the VPLMN. In the user access authentication and authorization process, the user subscription information is sent from the HSS to the AAA Server of the HPLMN, and the AAA Server determines whether the PDN GW serving the user can be located in the VPLMN according to the subscription information of the user, if not located. VPLMN (Home Routed must be provided by the PLM of the HPLMN), and the AAA Server determines whether there is a trust relationship between the HPLMN and the user's current Non-3GPP Access. If there is a trust relationship between the HPLMN and the Non-3GPP, The network connection that provides the service to the UE does not need to pass the ePDG; if the AAA Server determines according to its own configuration, there is no trust relationship between the HPLMN and the user's current Non-3 GPP Access (eg, the port, the HPLMN and the Non- If the 3GPP Access is not signed, the AAA Server notifies the AAA Proxy of the VPLMN to the untrusted relationship, and informs the AAA Proxy that all services must be served by the PDN GW of the HPLMN. When the AAA Proxy receives the information from the AAA Server, the information indicates HPLMN and Non-3GPP.

Access is an untrusted relationship, and all services need to be provided by HPLMN's PDN GW.

The AAA Proxy determines whether the ePDG is deployed on the VPLMN. If there is an ePDG, the AAA Proxy determines that the network connection of the UE must pass the ePDG. Otherwise, the eAPG is not deployed. The AAA Proxy determines the VPLMN and the Non- according to its configuration. Trust relationship between 3GPP, if there is a trust relationship between the VPLMN and the Non-3GPP, and the VPLMN allows chain access

HPLMN, Baye AAA Proxy decided to use chained access, if there is no trust relationship, Baye AAA

6 P23432 The Proxy determines that the UE cannot access the EPC through the Non-3GPP Access. The above chained connection method is a connection mode in which Non 3GPP Access connects to the P-GW1 of the HPLMN through a monthly service gateway (Serving Gateway, S-GW) in the VPLMN. The AAA Proxy determines the use of the connection mode when the user accesses the authentication and the 4 吏 right. After the AAA Proxy decides to use the connection mode, the AAA Proxy selects the S-GW in the VPLMN and selects the S-GW in the authentication process. The GW address is sent to Non 3GPP Access, which is saved by Non 3 GPP Access. After the user authentication and the 4 authorization process are completed, the AAA Proxy sends the APN sent by the user at the time of access and the address of the corresponding P-GW1 selected by the network to the selected S-GW, and the subscription information of the user (such as signing the contract). APN, etc.), after that, the S-GW saves the above information. The Non-3GPP Access is in the above-mentioned information sending proxy binding update message to the S-GW, and after receiving the above message, the S-GW establishes a tunnel connection with the P-GW; when the tunnel connection between the S-GW and the P-GW is established After that, the S-GW sends a proxy binding acknowledgement message to the Non 3GPP Access to complete the establishment of a tunnel between the Non 3 GPP Access and the S-GW. Finally, the Non 3GPP Access notifies the UE of the configuration information required by the UE. The method of the invention will be further described in detail below with reference to the accompanying drawings. It should be noted that the embodiments in the present application and the features in the embodiments may be combined with each other if they do not conflict. 2 is a flow chart of the AAA Server determining the trust relationship between the HPLMN and the Non-3 GPP Access and notifying the AAA Proxy. As shown in FIG. 2, the method includes the following steps: Step 21: After the AAA Server obtains the subscription information of the user from the HSS, the AAA server The server first determines whether there is an indication that all services of the user must be served by the HPLMN. If the determination is yes, proceed to step 22, otherwise, proceed to step 25; Step 22, when the subscription information of the user includes the above-mentioned provided by the HPLMN When the service is instructed, the AAA Server judges the HPLMN and the Non-3GPP Access trust relationship according to the configuration, and the identity information of the Non-3GPP Access is obtained from the Non-3GPP Access through the user authentication process, if the HPLMN and If Non-3GPP Access is trusted, proceed to step 23, otherwise proceed to step 24; Step 23, AAA Server is configured to indicate that HPLMN and Non-3GPP Access are trusted, and all services of the user must be served by HPLMN The AAA Proxy is notified by the indication; Step 24, the AAA Server is configured to indicate HPLMN and Non-3GPP Access

P23432 Is not trusted (the untrusted can be indicated by the configuration or there is no trust relationship in the configuration), all services of the UE must be notified by the HPLMN to provide an indication of the AAA Proxy; Step 25, when the user's subscription information indicates the user When the service can be served by the VPLMN, the AAA Server will not trust the above information and the HPLMN and Non-3 GPP Access determined by the AAA Server configuration. (The mistrust can be indicated by the configuration or there is no trust relationship in the configuration. ) inform the AAA Proxy and other information. Figure 3 is a logic diagram for determining the network connection mode determined by the AAA Proxy according to the information sent by the AAA Server in Figure 2. As shown in Figure 3, the AAA Proxy indicates whether the user is based on the information sent by the AAA Server. All services are provided by HPLMN to judge: If all services are required to be provided by HPLMN, then the network of the user is determined according to the trust relationship between HPLMN and Non-3GPP Access indicated in the above information and whether there is ePDG in the VPLMN. Whether the connection needs to pass ePDG: If HPLMN and Non-3GPP Access are trusted, the user's network connection does not need to connect to ePDG; if HPLMN and Non-3GPP Access are untrusted, and if there is no ePDG in VPLMN, Bay AAA Proxy It is considered that the network connection of the UE does not require ePDG. In this case, the chain access method may be selected, or the user access failure may be determined; if the ePDG is in the VPLMN, the network connection of the UE needs to pass the ePDG; Both are provided by HPLMN, and the information sent by the AAA Server indicates that VPLMN is allowed to provide services. The configuration of the 'J AAA Proxy is determined according to the configuration in the VPLMN. Whether to provide the VPLMN service to the user, if it is unable to provide any VPLMN service, it is considered that the service must be provided by the HPLMN, and the subsequent judgment process is as shown in the above steps (that is, the operation in the case where all services are required to be provided by the HPLMN); If the VPLMN service is allowed, then further judgment is needed to provide some or all of the VPLMN services:

(1) All services provided by VPLMN At this time, if AAA Proxy decides VPLMN and the Non-3GPP according to its own configuration

Access is trusted, then the AAA Proxy determines that the user network connection does not need to connect to the ePDG. If the VPLMN and the Non-3GPP Access are not trusted, then the AAA Proxy determines that the user network connection needs to connect to the ePDG;

8 P23432 (2) Part of the service provided by the VPLMN. At this time, if the VPLMN and the Non-3GPP Access are trusted, and the information sent by the AAA Server to the AAA Proxy indicates that the HPLMN and the Non-3GPP Access are trusted, the Bell's AAA Proxy decides The network connection of the UE does not need to be connected to the ePDG. If the HPLMN and the Non-3GPP Access are untrusted, and there is no ePDG in the VPLMN, then the AAA Proxy determines that the UE's network connection does not need to be connected to the ePDG (in this case, the AAA Proxy can The chain access method is selected. However, if there is an ePDG in the VPLMN, the AAA Proxy determines that the user network connection needs to connect to the ePDG. FIG. 4 is a flow chart of determining the access mode of the S2b when the subscription information of the user indicates that the UE must be provided by the HPLMN and the AAA Server is not trusted according to the HPLMN and the user's roaming access to the Non 3GPP Access. As shown in FIG. 4, the process includes the following steps (step 401 - step 404): Step 401: The UE accesses Non 3GPP Access, and sends information such as user identity to Non 3 GPP Access, and the Non 3 GPP Access user The information is sent to the AAA Proxy and the HSS/AAA, and the above-mentioned network elements (ie, Non 3GPP Access, AAA Proxy, and HSS/AAA) authenticate the user and 4 are authorized. In the authentication and 4 authorization process, the AAA Server, AAA Proxy and/or Non 3GPP Access determine the APN information sent by the UE and the user subscription information stored in the HSS (the information indicates that the user must be provided by the HPLMN) The service is provided by the HPLMN, and the AAA Server decides to adopt the access mode of the S2b, and notifies the UE through the Non 3 GPP Access in the process of authentication and 4 authorization. Step 402: The UE searches for the IP address of the ePDG in the VPLMN. Specifically, the UE may perform the search according to the internal configuration of the UE or according to the information provided by the DNS system. The UE initiates a secure tunnel connection with the ePDG, and sends the APN to the APN. The ePDG. During the process of establishing the tunnel, the ePDG interacts with the HSS/AAA server and the AAA Proxy to obtain the IP address of the P-GW1 that can access the PDN service corresponding to the APN and some subscription information including the APN subscribed by the user. Step 403: The ePDG initiates a proxy binding to update a tunnel connection with the P-GW1, where the message bound by the proxy includes the identity of the user, and the P-GW1 allocates an IP address or an address prefix to the UE, and is in the proxy. The IP address or address prefix assigned by the P-GW 1 to the UE is notified to the ePDG in the binding acknowledgement message.

9 P23432 Step 404: The ePDG notifies the UE of the address or address prefix. The UE connects to the P-GW1 through the ePDG and establishes a connection of the IP service provided by the HPLMN. FIG. 5 is a flow chart of determining the access mode of the S2a when the subscription information of the user indicates that the user must be provided by the HPLMN and the AAA Server is trusted according to the HPLMN and the user's roaming access to the Non 3GPP Access. As shown in FIG. 5, the process includes the following steps (step 501 - step 503): Step 501: The UE accesses Non 3GPP Access, and sends information such as user identity to Non 3 GPP Access, and the Non 3 GPP Access user The information is sent to the AAA Proxy and the HSS/AAA, and the above-mentioned network elements (ie, Non 3GPP Access, AAA Proxy, and HSS/AAA) authenticate the user and 4 are authorized. In the authentication and 4 authorization process, the AAA Server, AAA Proxy and/or Non 3GPP Access determine the APN information sent by the UE and the user subscription information stored in the HSS (the information indicates that the user must be provided by the HPLMN) The service is provided by HPLMN. The AAA Server trusts the Non-3GPP Access between the HPLMN and the user roaming access, and determines that the Non 3GPP Access uses the S2a access mode for access, and in the process of authentication and 4 authorization, Sending the IP address of the P-GW1 that can provide the PDN connection service and the subscription information of all the subscription APNs of the user corresponding to the APN sent by the user to the Non 3GPP Access, Step 502, Non 3GPP Access initiates the proxy binding to update Establishing a tunnel connection with the P-GW1, the message bound by the proxy includes the identity of the user and the APN sent by the user, and the P-GW1 assigns an IP address or an address prefix to the UE, and in the proxy binding confirmation message. The IP address or address prefix assigned by the P-GW1 to the UE is notified to the Non 3 GPP Access, and in step 503, the Non 3GPP Access notifies the UE of the above address or address prefix. The UE connects to the P-GW1 through Non 3 GPP Access to establish a connection to the IP service provided by the HPLMN. 6 is a connection mode of the Non 3GPP Access adopting S2b when the subscription information of the user indicates that the user can provide the service monthly service by the VPLMN and the VLPMN and the Non 3 GPP Access are not trusted, the 3GPP AAA Proxy in the VPLMN determines the connection mode of the Non 3GPP Access by using the S2b. The flow chart, as shown in FIG. 6, includes the following steps (step 601 - step 602). Step 601: The UE accesses the Non 3GPP Access, and sends the information such as the user identity to the Non 3 GPP Access. The Non 3GPP Access sends the information of the user to the AAA Proxy and the HSS/AAA. The network element (Non 3GPP Access, AAA Proxy) And HSS/AAA) authenticate the user and 4 are authorized. In the process of authentication and 4 authorization, the AAA Proxy is sent from the HSS/AAA Server.

10 P23432 User subscription information, if it is determined according to the user subscription information that the service can be provided by the VPLMN, and the VPLMN and the Non 3GPP Access are not trusted, the AAA Proxy determines that the Non 3 GPP Access uses the S2b connection mode to access. And notify the UE through Non 3 GPP Access in the authentication and 4 authorization process. Step « 602, and the above steps « 402, 403, 404 are the same, the UE is connected to the ePDG and passes

The P-GW accesses the IP service provided by the UE, where the P-GW can be the P-GW1 of the HPLMN or the P-GW2 of the VPLMN. The AAA server, the AAA Proxy, and/or the ePDG are only based on the APN sent by the UE. The information and the user subscription information stored in the HSS (which indicates that the user can be provided by VPLMN) is determined. According to an embodiment of the present invention, a method for determining a network connection manner is further provided, where the user equipment UE roams to a non-3GPP access network, and the non-3GPP access network sends the user information of the UE to the authentication 4 authorized charging. The AAA system, the non-3GPP access network, and the AAA system perform authentication and authorization on the UE. The method specifically includes: determining, by the AAA system, the adopted network connection manner according to the predetermined information, where the predetermined information includes: the home public land mobile network and the non-3GPP interface Trust relationship information of the trust relationship entering the network, user subscription information, access to the trust relationship information of the public land mobile network and the non-3GPP access network, whether the public land mobile network accesses the evolved packet data gateway, and whether the public land mobile network is visited Provide service information. The AAA system includes an authentication 4 authorized charging proxy AAA Proxy and a home subscriber server HSS/authentication authorization accounting server AAA Server. Therefore, the AAA system determines, according to the predetermined information, the adopted network connection manner, including: Step one, the AAA Server determines The belonging public land mobile network and the non-3GPP access network are in a trust relationship, and the trust relationship information and the user subscription information indicating the trust relationship between the public land mobile network and the non-3GPP access network are sent to the AAA Proxy; Step 2, the AAA Proxy is based on The predetermined information determines the network connection method used. In summary, the embodiments of the present invention enable the user to determine the connection mode of accessing the EPC network through Non 3 GPP Access when roaming, which solves the problems in the prior art. Obviously, those skilled in the art should understand that the above modules or steps of the present invention can be implemented by a general-purpose computing device, which can be concentrated on a single computing device or distributed over a network composed of multiple computing devices. Alternatively, they may be implemented by program code executable by the computing device, such that they may be stored in the storage device by the computing device, or they may be separately fabricated into individual integrated circuit modules, or they may be Multiple modules or steps are made into a single integrated circuit module. Thus, the invention is not limited to any particular hardware and software.

11 P23432 Piece combination. The above is only the preferred embodiment of the present invention, and is not intended to limit the present invention, and various modifications and changes can be made to the present invention. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and scope of the present invention are intended to be included within the scope of the present invention.

12 P23432

Claims

Claim

A method for determining a network connection manner, a user equipment UE roaming access to a non-3GPP access network, and a non-3GPP access network transmitting user information of the UE to an authentication 4 authorized charging proxy AAA Proxy and a home subscriber server HSS/ The authentication 4 authorized accounting server AAA Server, the non-3GPP access network, the AAA Proxy, and the HSS/AAA perform authentication and authorization on the UE, and the method includes the following steps: Step 1: The AAA server determines the attribution to the public land. The mobile network and the non-3GPP access network are in a trust relationship, and the trust relationship information and the user subscription information indicating the trust relationship between the public land mobile network and the non-3GPP access network are sent to the AAA Proxy. Step 2: The AAA Proxy determines according to the predetermined information. The network connection mode, where the predetermined information includes: the trust relationship information, the user subscription information, the trust relationship information of the public land mobile network and the non-3GPP access network, and whether the public land mobile network visits the evolved group Data gateways, visits to public land mobile networks can provide service information.

The method according to claim 1, wherein after the step 2, the method further includes: Step 3: The AAA Proxy sends the determined network connection manner to the non-3GPP access network;

Step 4: If the determined network connection mode is that it needs to connect to the evolved packet data gateway, the non-3GPP access network notifies the UE to establish a connection between the UE and the evolved packet data gateway.

The method according to claim 1, wherein in the step 1, the trust relationship information and the user subscription information of the home public land mobile network and the non-3GPP access network are any of the following: Case 1: User The subscription information is an indication that all services are provided by the public land mobile network, and the public land mobile network and the non-3GPP access network are trusted; Case 2: the user subscription information is an indication that all services are provided by the public land mobile network, belonging The public land mobile network and the non-3GPP access network are untrusted;

13 P23432 Case 3: The user subscription information is an indication that the service can be provided by visiting the public land mobile network, and the belonging public land mobile network and the non-3GPP access network are not trusted.

4. The method according to claim 3, wherein the AAA Server sends information to the AAA Proxy to allow the public land mobile network to provide services, and the AAA Proxy determines whether to go to the public land mobile network according to the configuration in the visited public land mobile network. The UE provides access to the public land mobile network service, and if it does not provide any access to the public land mobile network service, it is considered that the service must be provided by the home public land mobile network.

The method according to claim 3 or 4, wherein, for the first case, the UE does not need to connect to the network through the evolved packet data gateway.

The method according to claim 5, wherein, in the second case, if there is no evolved packet data gateway in the public land mobile network, the AAA Proxy considers that the user network connection does not require an evolved packet data gateway. ;

The method according to claim 5, wherein, in case 2, if there is an evolved packet data gateway in the public land mobile network, the AAA Proxy determines that the network connection of the UE needs an evolved packet. Data gateway.

8. The method according to claim 3, wherein the user subscription information is an indication that the service can be provided by visiting the public land mobile network, and the configuration decision of the AAA Proxy to visit the public land mobile network is determined by visiting the public land mobile network. The UE provides all service services. If the public land mobile network and the non-3GPP access network are trusted, the AAA Proxy determines that the network connection of the UE does not need to connect to the evolved packet data gateway.

9. The method according to claim 8, wherein the user subscription information is an indication that the service can be provided by visiting the public land mobile network, and the configuration decision of the AAA Proxy in the public land mobile network is visited by the public land mobile network. Providing all the service services to the UE. If the public land mobile network and the non-3GPP access network are in an untrusted relationship, the AAA Proxy determines that the network connection of the UE needs to connect to the evolved packet data gateway.

10. The method according to claim 8, wherein the user subscription information is an indication that the service can be provided by visiting the public land mobile network, and the configuration decision of the AAA Proxy in the public land mobile network is visited by the public land mobile network. Providing a partial service service to the UE, and accessing the public land mobile network and the non-3GPP access network as a trust relationship, if AAA

14 P23432 The server sends information indicating that the home public land mobile network and the non-3GPP access network have a trust relationship to the AAA Proxy, and the AAA Proxy determines that the network connection of the UE does not need to connect to the evolved packet data gateway.

11. The method according to claim 8, wherein the user subscription information is an indication that the service can be provided by visiting the public land mobile network, and the configuration decision of the AAA Proxy in the public land mobile network is visited by the public land mobile network. Providing a partial service service to the UE, accessing the public land mobile network and the non-3GPP access network as a trust relationship, if the home public land mobile network and the non-3GPP access network are in an untrusted relationship, and visiting the public land mobile network Without an evolved packet data gateway, the AAA Proxy determines that the UE's network connection does not require connection to an evolved packet data gateway.

12. The method according to claim 11, wherein the user subscription information is an indication that the service can be provided by visiting the public land mobile network, and the configuration decision of the AAA Proxy in the public land mobile network is visited by the public land mobile network. Providing a partial service service to the UE, accessing the public land mobile network and the non-3GPP access network as a trust relationship, when the home public land mobile network and the non-3GPP access network are in a distrust relationship, if visiting the public land mobile network With an evolved packet data gateway, the AAA Proxy determines that the network connection of the UE needs to connect to the evolved packet data gateway.

13. The method according to claim 11, wherein the user subscription information is an indication that the service can be provided by visiting the public land mobile network, and the configuration decision of the AAA Proxy to visit the public land mobile network is determined by visiting the public land mobile network. The UE provides a part of the service service. If the visited public land mobile network and the non-3GPP access network are in an untrusted relationship, the AAA Proxy determines that the network connection of the UE needs to connect to the evolved packet data gateway.

A method for determining a network connection mode, the user equipment UE roaming accesses a non-3GPP access network, and the non-3GPP access network sends the user information of the UE to the authentication and authorization charging AAA system, where the non-3GPP access The network, the AAA system performs authentication and authorization on the UE, and the method includes: the AAA system determines, according to the predetermined information, a network connection mode to be adopted, where the predetermined information includes: Trust relationship information of the trust relationship between the mobile network and the non-3GPP access network, user subscription information, access to the trust relationship information of the public land mobile network and the non-3GPP access network, and whether the public land mobile network has an evolutionary point

15 P23432 Group data gateways, visits to public land mobile networks can provide service information. The method according to claim 14, wherein the AAA system comprises an authentication and authorization charging proxy AAA Proxy and a home subscriber server HSS/authentication 4 authorized charging server AAA Server, wherein the AAA system is Determining the adopted network connection manner according to the predetermined information includes: Step 1: The AAA Server determines that the home public land mobile network and the non-3GPP access network are in a trust relationship, and represents the home public land mobile network and the The trust relationship information of the trust relationship of the non-3GPP access network and the user subscription information are sent to the AAA Proxy. Step 2: The AAA Proxy determines the adopted network connection manner according to the predetermined information.

16 P23432