WO2010130198A1 - 一种接入网的切换方法、系统和设备 - Google Patents

一种接入网的切换方法、系统和设备 Download PDF

Info

Publication number
WO2010130198A1
WO2010130198A1 PCT/CN2010/072635 CN2010072635W WO2010130198A1 WO 2010130198 A1 WO2010130198 A1 WO 2010130198A1 CN 2010072635 W CN2010072635 W CN 2010072635W WO 2010130198 A1 WO2010130198 A1 WO 2010130198A1
Authority
WO
WIPO (PCT)
Prior art keywords
terminal
base station
wimax
server
handover
Prior art date
Application number
PCT/CN2010/072635
Other languages
English (en)
French (fr)
Inventor
杨永利
丁志明
树贵明
Original Assignee
华为终端有限公司
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 华为终端有限公司 filed Critical 华为终端有限公司
Publication of WO2010130198A1 publication Critical patent/WO2010130198A1/zh

Links

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04WWIRELESS COMMUNICATION NETWORKS
    • H04W12/00Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/08Access security
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04WWIRELESS COMMUNICATION NETWORKS
    • H04W36/00Hand-off or reselection arrangements
    • H04W36/0005Control or signalling for completing the hand-off
    • H04W36/0055Transmission or use of information for re-establishing the radio link
    • H04W36/0066Transmission or use of information for re-establishing the radio link of control information between different types of networks in order to establish a new radio link in the target network
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04WWIRELESS COMMUNICATION NETWORKS
    • H04W36/00Hand-off or reselection arrangements
    • H04W36/02Buffering or recovering information during reselection ; Modification of the traffic flow during hand-off

Definitions

  • the application is submitted to the Chinese Patent Office on May 11, 2009, and the application number is 200910136345. 9.
  • the invention name is "an access network switching method, system and device” The priority of the Chinese Patent Application, the entire contents of which is incorporated herein by reference.
  • the present invention relates to the field of mobile communications, and in particular, to a method, system and device for switching an access network.
  • WiFi Wireless Fidelity
  • WiFi Wireless Fidelity
  • WiMAX Worldwide Interoperability for Microwave Access
  • WiMAX Worldwide Interoperability for Microwave Access
  • WiMAX is a wireless broadband access technology and one of the third international standards for wireless communication technology. Many operators around the world use WiMAX technology to build wireless broadband access networks. . WiMAX has the advantage of large coverage, but there will be many users in a large coverage area, so the average user bandwidth will decrease.
  • WiFi hotspots in indoor WiMAX signals with weak or densely populated locations can overcome the problem of narrow WiMAX average user bandwidth. Therefore, how to access the WiMAX core network through the WiFi network and ensure the continuity of the service when switching between WiMAX and WiFi access networks, and reduce the interruption time of the handover, becomes an urgent problem to be solved.
  • the present invention provides a method, system, and device for switching an access network, in order to reduce the interruption time of the WiMAX and WiFi multimode terminals from the WLAN access network to the WiMAX access network, and improve the user experience.
  • the technical solution is as follows:
  • An embodiment of the present invention provides a method for switching an access network, where the method includes:
  • the terminal acquires the target of the handover WiMAX base station identifier
  • the terminal sends a handover request to the handover server through the WLAN access network, where the request carries the target WiMAX The identity of the base station;
  • the terminal authenticates with the switching server through the first tunnel, and switches to the WiMAX access network corresponding to the identifier of the target WiMAX base station.
  • the embodiment of the present invention further provides a method for switching an access network, where the terminal is a single radio frequency wireless fidelity WiFi/microwave access global interworking WiMAX multimode terminal, and the handover is switched from a wireless local area network WLAN access network to a WiMAX connection.
  • the method includes:
  • the terminal acquires a target WiMAX base station identifier of the handover
  • the terminal sends a handover request to the handover server by using the WLAN access network, where the request carries the identifier of the target WiMAX base station;
  • the terminal performs ranging with the switching server by using the first tunnel
  • the terminal performs SBC negotiation with the switching server through the first tunnel, and exchanges capability information, where the capability information includes a version of the key management PKM protocol and an authentication policy;
  • the terminal After receiving the EAP request/identification message, the terminal returns an EAP response/identification message to the authenticator by using the handover server, where the EAP response/identification message includes the user identification information of the terminal;
  • the user identification information is sent to an authentication server in the WiMAX core network, and the authentication server authenticates the user according to the received user identification information;
  • the terminal and the authentication server perform mutual authentication through the switching server and negotiate to obtain a primary session key MSK;
  • the authenticator receives the MSK sent by the authentication server, and negotiates with the terminal through the switching server to obtain a master key PMK and an authorization key AK between the paired nodes;
  • the authenticator sends the AK to the analog WiMAX base station of the handover server.
  • the terminal and the analog WiMAX base station perform packet encryption key TEK exchange through the first tunnel; the terminal and the analog WiMAX base station and the WiMAX access network gateway complete registration and service of the data path through the first tunnel.
  • the terminal turns on the WiMAX radio and turns off the WiFi radio.
  • An embodiment of the present invention provides a switching system for an access network, where the system includes: a terminal and a handover server, where the terminal is configured to acquire a target WiMAX base station identifier of the handover; and send a handover request to the handover server by using the WLAN access network.
  • the request carries the identifier of the target WiMAX base station; and the switching server establishes a first tunnel; performs authentication by the first tunnel with the switching server, and switches to the identifier of the target WiMAX base station Corresponding WiMAX access network;
  • the switching server is configured to receive, by using a WLAN access network, a handover request sent by the terminal, where the request carries an identifier of a target WiMAX base station; and the terminal establishes a first tunnel; The terminal performs authentication so that the terminal switches to the WiMAX access network corresponding to the identifier of the target WiMAX base station.
  • the embodiment of the present invention further provides a switching system for an access network, where the terminal is a single radio frequency wireless fidelity WiFi/microwave access global interworking WiMAX multimode terminal, and the handover is switched from a wireless local area network WLAN access network to a WiMAX connection.
  • the system includes: a terminal and a switching server,
  • the terminal is configured to acquire a target WiMAX base station for handover; send a handover request to the handover server by using the WLAN access network, where the handover request carries a target WiMAX base station identifier; and the handover server establishes a first tunnel; a tunnel is used to perform ranging with the switching server; the first tunnel is used to perform SBC negotiation with the switching server, and the capability information includes the version of the key management PKM protocol and the authentication policy;
  • the EAP response/identification message is returned to the authenticator by the switching server, where the EAP response/identification message includes user identification information of the terminal;
  • the authentication server performs two-way authentication with the switching server and negotiates to obtain a primary session key MSK; according to the MSK, the authenticator passes The switching server negotiates to obtain a master key PMK between the paired nodes Authorization key AK; after the authenticator transmit
  • the switching server is configured to receive, by using a WLAN access network, a handover request sent by the terminal; establishing a first tunnel with the terminal; and receiving, by the first tunnel, messages received and sent by an analog WiMAX base station on the handover server; Performing ranging with the terminal through the first tunnel; performing SBC negotiation with the terminal through the first tunnel, and exchanging capability information, where the capability information includes a version of the key management PKM protocol and an authentication policy; An EAP request/identification message sent by the terminal authenticator, and forwarding an EAP response/identification message to the authenticator, where the EAP response/identification message includes user identification information of the terminal; and the terminal passes the first tunnel Performing a TEK exchange; performing registration of a data path and establishment of a service flow with the terminal through the first tunnel.
  • the embodiment of the present invention provides a single radio frequency wireless fidelity WiFi/microwave access global interworking WiMAX multimode terminal device.
  • the terminal device When the terminal is switched from a WLAN access network to a WiMAX access network, the terminal device includes: a first sending module, configured to acquire a target WiMAX base station identifier, and send a handover request to the handover server by using the WLAN access network, where the handover request carries the target WiMAX base station identifier; a first establishing module, configured to establish a first tunnel with the switching server;
  • a first ranging module configured to perform ranging with the switching server by using the first tunnel
  • a first negotiation module configured to perform basic capabilities of the user terminal by using the first tunnel and the switching server
  • the SBC negotiates, exchanges capability information, the capability information includes a version of the key management PKM protocol, and an authentication policy.
  • the first request module receives, by the switching server, an EAP request/identification message sent by the authenticator, and passes the switching server. Returning an EAP response/identification message to the authenticator, where the EAP response/identification message includes user identification information of the terminal;
  • a first authentication module configured to perform mutual authentication with the authentication server through the switching server after the authentication server passes the user identification information in the received EAP response/identification message, and negotiate to obtain a primary session.
  • Key MSK
  • a first generating module configured to, according to the MSK, negotiate with the authenticator to obtain a master key PMK and an authorization key AK between the paired nodes;
  • a first switching module configured to: after the authenticator transmits the AK to the analog WiMAX base station of the switching server, exchange the packet encryption key TEK with the analog WiMAX base station by using the first tunnel;
  • a first switching module configured to complete registration of a data path and establishment of a service flow by using the first tunnel with the analog WiMAX base station and a WiMAX access network gateway; after the registration of the data path and the establishment of the service flow, opening the WiMAX RF, turn off the WiFi radio.
  • the embodiment of the present invention provides a switching server device.
  • the switching server device When a single radio frequency wireless fidelity WiFi/microwave access global interworking WiMAX multimode terminal is switched from a wireless local area network WLAN access network to a WiMAX access network, the switching server device includes:
  • a first receiving module configured to receive, by using a WLAN access network, a handover request sent by the terminal
  • a second establishing module configured to establish a first tunnel with the terminal
  • a second ranging module configured to perform ranging with the terminal by using the first tunnel
  • a second negotiation module configured to perform SBC negotiation with the terminal by using the first tunnel, and exchange capability information, where the capability information includes a version of a key management PKM protocol and an authentication policy;
  • the second requesting module receives the EAP request/identification message sent by the terminal authenticator, and forwards the EAP response/identification message to the authenticator, where the EAP response/identification message includes the user identification information of the terminal;
  • a second switching module configured to: after the authenticator transmits the AK to the analog WiMAX base station of the handover server, exchange the packet encryption key TEK with the terminal through the first tunnel;
  • the first registration module performs registration of a data path and establishment of a service flow by using the first tunnel with the terminal and with a WiMAX access network gateway.
  • FIG. 1 is a schematic flow chart of a method provided by Embodiment 1 of the present invention.
  • Embodiment 2 is a schematic flow chart of a method provided by Embodiment 2 of the present invention.
  • FIG. 3 is a schematic diagram of a process for a terminal to switch from WiFi access to WiMAX access according to Embodiment 3 of the present invention
  • FIG. 4 is a schematic flowchart of a method provided by Embodiment 3 of the present invention
  • FIG. 5 is a schematic diagram of a process for acquiring a target WiMAX base station by using a single-receipt single-issue mode provided by the terminal according to Embodiment 3 of the present invention
  • FIG. 6 is another schematic diagram of a process for acquiring a target WiMAX base station by using a single-receipt single-issue mode provided by the terminal according to Embodiment 3 of the present invention
  • FIG. 7 is a schematic diagram of a process for acquiring a target WiMAX base station by using a dual-receive single-issue mode according to Embodiment 3 of the present invention.
  • FIG. 8 is a schematic structural diagram of a system according to Embodiment 4 of the present invention.
  • FIG. 9 is a schematic structural diagram of a system according to Embodiment 5 of the present invention.
  • FIG. 10 is a schematic structural diagram of a terminal device according to Embodiment 6 of the present invention.
  • FIG. 11 is a schematic structural diagram of a switching server according to Embodiment 7 of the present invention.
  • Example 1 DETAILED DESCRIPTION OF THE EMBODIMENTS
  • An embodiment of the present invention provides a method for switching an access network. Referring to FIG. 1, the method includes:
  • the terminal acquires the target of the handover, the WiMAX base station identifier;
  • the terminal sends a handover request to the handover server by using the WLAN access network, where the request carries the identifier of the target WiMAX base station;
  • 103 The terminal establishes a first tunnel with the switching server.
  • the terminal performs authentication with the switching server through the first tunnel, and switches to the WiMAX access network corresponding to the identifier of the target WiMAX base station.
  • the terminal and the switching server first establish the first tunnel, the terminal sends a handover request to the switching server through the established first tunnel.
  • the terminal is authenticated by the first tunnel and the switching server, and is switched to the WiMAX access network corresponding to the identifier of the target WiMAX base station, and specifically includes:
  • the terminal performs ranging with the switching server through the first tunnel
  • the terminal performs the SBC negotiation of the basic capability of the user terminal with the switching server through the first tunnel, and exchanges the capability information, and the capability information includes the version of the key management PKM protocol and the authentication policy;
  • the terminal After receiving the EAP request/identification message, the terminal returns an EAP response/identification message to the authenticator through the switching server, where the EAP response/identification message includes the user identification information of the terminal; the authenticator sends the user identification information to the authentication in the WiMAX core network.
  • the server the authentication server authenticates the user according to the received user identification information; the terminal and the authentication server perform mutual authentication through the switching server and negotiate to obtain the primary session key MSK;
  • the authenticator receives the MSK sent by the authentication server, and obtains a master key PMK and an authorization key AK between the paired nodes through negotiation between the switching server and the terminal;
  • the authenticator sends the AK to the analog WiMAX base station of the switching server;
  • the terminal and the analog WiMAX base station perform a packet encryption key TEK exchange through the first tunnel;
  • the terminal and the analog WiMAX base station and the WiMAX access network gateway complete the registration of the data path and the establishment of the service flow through the first tunnel;
  • the terminal turns on the WiMAX radio, turns off the WiFi radio, and switches to the WiMAX access network.
  • the switching server and the terminal when the switching server is in the WiMAX core network, the switching server and the terminal establish a second tunnel with the authenticator in the WiMAX access network after establishing the first tunnel; or, the switching server first establishes a second tunnel with the authenticator. Then establish a first tunnel with the terminal.
  • the terminal acquires the target WiMAX base station identifier of the handover, and specifically includes:
  • the handover request includes the currently connected WiFi access point identifier
  • the switching server uses the currently connected WiFi access point identifier included in the handover request sent by the terminal to query the candidate target WiMAX base station identifier;
  • the switching server finds at least one candidate target WiMAX base station identifier, the switching server selects one of the candidate target WiMAX base stations as the target WiMAX base station according to a preset selection rule; the switching server sends a handover response to the terminal, where the handover response includes at least one Target WiMAX selected in the candidate target WiMAX base station Base station identification.
  • the terminal acquires the target WiMAX base station identifier of the handover, and specifically includes:
  • the switching server receives the query request sent by the terminal through the WLAN access network, where the query request includes the WiFi access point identifier currently connected by the terminal;
  • the switching server queries the candidate target WiMAX base station identifier by querying the WiFi access point identifier currently connected by the terminal in the request;
  • the switching server returns the query result to the terminal through the WLAN access network. If the query result received by the terminal is at least one candidate target WiMAX base station identifier, the terminal selects a candidate target WiMAX base station identifier from the query result according to the preset selection rule. As the target WiMAX base station identity.
  • the terminal acquires the target WiMAX base station identifier of the handover, and specifically includes:
  • the terminal turns on the WiMAX receiving circuit, and listens to the broadcast message sent by the WiMAX base station at different frequency points. After receiving the broadcast message of the WiMAX base station, the terminal determines, from the content of the broadcast message, whether the base station that sends the broadcast message is the current target WiMAX of the terminal. The base station, if yes, sends a handover request message to the handover server through the WLAN access network; otherwise, continues to listen to the broadcast message sent by the WiMAX base station at the next frequency point.
  • the method provided by the embodiment of the present invention reduces the WiMAX and WiFi multimode terminals from WLAN access by completing the WiMAX network access process on the WiFi access path and the switching server before switching from the WiFi network to the WiMAX network.
  • the delay of switching the network to the WiMAX access network improves the user experience.
  • the embodiment of the invention provides a method for switching an access network, where the terminal is a single radio frequency wireless fidelity WiFi/microwave access global interworking WiMAX multimode terminal, and switches to switch from a wireless local area network WLAN access network to a WiMAX access network.
  • the method includes:
  • the terminal acquires the target of the handover, the WiMAX base station identifier;
  • the terminal sends a handover request to the handover server by using the WLAN access network, where the request carries the identifier of the target WiMAX base station;
  • the terminal establishes a first tunnel with the switching server.
  • the step 203 is performed first, and then the step 202 is performed, that is, the terminal and the switching server first establish a first tunnel, and then the terminal sends a handover request to the switching server through the established first tunnel.
  • the terminal performs ranging by using the first tunnel and the switching server.
  • the terminal performs the SBC negotiation of the basic capability of the user terminal with the switching server by using the first tunnel, and exchanges the capability information, where the capability information includes the version of the key management PKM protocol and the authentication policy.
  • the terminal After receiving the EAP request/identification message, the terminal returns an EAP response/identification message to the authenticator by using the handover server, where the EAP response/identification message includes the user identification information of the terminal; the authenticator sends the user identification information to the WiMAX core network.
  • the authentication server the authentication server authenticates the user according to the received user identification information;
  • the terminal and the authentication server perform mutual authentication through the switching server and negotiate to obtain a primary session key MSK;
  • the authenticator receives the MSK sent by the authentication server, and obtains a master key PMK and an authorization key AK between the paired nodes through negotiation between the switching server and the terminal; the authenticator sends the AK to the analog WiMAX base station of the switching server.
  • the terminal and the analog WiMAX base station perform a packet encryption key TEK exchange through the first tunnel;
  • the terminal and the analog WiMAX base station and the WiMAX access network gateway complete the registration of the data path and the establishment of the service flow through the first tunnel;
  • the terminal turns on the WiMAX radio and turns off the WiFi radio.
  • the switching server and the terminal when the switching server is in the WiMAX core network, the switching server and the terminal establish a second tunnel with the authenticator in the WiMAX access network after establishing the first tunnel; or, the switching server first establishes a second tunnel with the authenticator. Then establish a first tunnel with the terminal.
  • the terminal sends a notification message for switching the radio frequency to the switching server before the terminal turns off the WiFi radio.
  • the switching server After the analog WiMAX base station on the switching server receives the AK or receives the notification message that the terminal sends the switching radio frequency to the switching server, the switching server sends a connection holding request to the home agent, so that the home agent receives the connection holding request temporarily.
  • the terminal caches the data sent to the terminal.
  • the method further includes:
  • the terminal sends a request message, requesting to enter an idle state
  • the switching server tears down the first tunnel established with the terminal.
  • the terminal After the terminal turns on the WiMAX radio and turns off the WiFi radio, it also includes:
  • the terminal searches for the target WiMAX base station corresponding to the target WiMAX base station, exits the idle state, and performs a fast network access process;
  • the terminal obtains the mobile IP care-of address and performs mobile IP registration.
  • the terminal After the terminal obtains the mobile IP care-of address and performs mobile IP registration, the terminal further includes:
  • the terminal sends a resource release request to the handover server, requesting to release related resources of the WiFi access network.
  • the terminal Before the terminal sends the handover request to the handover server by using the WLAN access network, the terminal further includes:
  • the terminal searches for a supported single radio switching server and establishes a secure communication channel with the found switching server.
  • the terminal acquires the target WiMAX base station identifier of the handover, and specifically includes:
  • the handover request includes the currently connected WiFi access point identifier;
  • the switching server uses the currently connected WiFi access point identifier included in the handover request sent by the terminal to query the candidate target WiMAX base station identifier;
  • the switching server finds at least one candidate target WiMAX base station identifier, the switching server selects one of the candidate target WiMAX base stations as the target WiMAX base station according to a preset selection rule; the switching server sends a handover response to the terminal, where the handover response includes at least one a target WiMAX base station identifier selected among the candidate target WiMAX base stations;
  • the target WiMAX base station information in the handover response sent by the handover server to the terminal is null, so that the terminal receives the handover response that the target WiMAX base station information is empty, and ends the process; or
  • the handover response sent by the handover server to the terminal indicates that the handover request is rejected, so that the terminal receives the handover response rejecting the handover, and then ends the process.
  • the terminal acquires the target WiMAX base station identifier of the handover, and specifically includes:
  • the switching server receives the query request sent by the terminal through the WLAN access network, where the query request includes the WiFi access point identifier currently connected by the terminal;
  • the switching server queries the candidate target WiMAX base station identifier by querying the WiFi access point identifier currently connected by the terminal in the request;
  • the switching server returns the query result to the terminal through the WLAN access network. If the query result received by the terminal is empty, the terminal ends the process; otherwise, the terminal selects a candidate target WiMAX base station identifier from the query result according to the preset selection rule. As the target WiMAX base station identity.
  • the terminal acquires the target WiMAX base station identifier of the handover, and specifically includes:
  • the terminal turns on the WiMAX receiving circuit, and listens to the broadcast message sent by the WiMAX base station at different frequency points. After receiving the broadcast message of the WiMAX base station, the terminal determines, from the content of the broadcast message, whether the base station that sends the broadcast message is the current target WiMAX of the terminal. The base station, if yes, sends a handover request message to the handover server through the WLAN access network; otherwise, continues to listen to the broadcast message sent by the WiMAX base station at the next frequency point.
  • the method provided by the embodiment of the present invention reduces the WiMAX and WiFi multimode terminals from WLAN access by completing the WiMAX network access process on the WiFi access path and the switching server before switching from the WiFi network to the WiMAX network.
  • the delay of switching the network to the WiMAX access network improves the user experience.
  • the embodiment of the present invention provides a method for switching the access network, so that the work is performed on a single radio frequency.
  • the mode terminal is a WiMAX and WiFi multimode terminal operating in a single radio mode, and the following is the following: Before the switchover from the WiFi network to the WiMAX network, the network access process is performed in advance on the WiFi access path. First, the process of the terminal switching from WiFi access to WiMAX access is described. See Figure 2:
  • the curve 1 shown in FIG. 3 indicates the data path when the terminal originally accesses the WiMAX core network through the WLAN access network, that is, the access point of the terminal connected to the WLAN through the WiFi air interface, and the uplink routing node or access control via the WLAN.
  • the device is connected to the mobile IP home agent of the WiMAX core network.
  • the curve 2 shown in Figure 3 indicates the data path after the terminal switches to the WiMAX access network. That is, the terminal connects to the WiMAX base station through the WiMAX air interface, and the gateway of the WiMAX access network connects to the mobile IP home agent of the WiMAX core network.
  • the connection mentioned here does not refer to a physical connection, but refers to a topology path.
  • curve 1 may pass through an Internet or a local switching network from the WLAN to the WiMAX core network, and curves 1 and 2 arrive at home.
  • the agent may pass through other routing nodes of the WiMAX core network before. Curves 1 and 2 will continue to extend outward after reaching the home agent, and the terminal will eventually communicate with another terminal or a service server on the network.
  • the terminal When the terminal switches from the WLAN access network to the WiMAX access network, because the terminal works in single radio mode, the terminal turns off the WiFi radio and turns on the WiMAX radio. The terminal can turn off the WiFi radio and then turn on the WiMAX radio.
  • This mode is a strict single-receipt single-issue mode, that is, only one RF circuit can work at any time.
  • the terminal can also turn on the WiMAX radio and then turn off the WiFi radio. Before the WiFi radio is turned off, the WiMAX radio is only used for listening.
  • This mode is dual-issue single-issue mode and also belongs to single-radio working mode. The dual-issue work mode allows the terminal to listen to the WiMAX signal before deciding to switch, so that the terminal can determine whether it can switch to WiMAX.
  • the terminal decides to send information through the WiMAX radio, it must turn off the WiFi radio, at least prohibit the transmission of the WiFi radio.
  • the communication between the terminal and the remote end may be temporarily interrupted. The longer the interruption, the user The worse the experience.
  • the terminal switches to the WiMAX access network before the data can be sent and received, and WiMAX access authentication must be performed, that is, the authentication of the authenticator (also called the authenticator) in the WiMAX access network in FIG.
  • the authentication server located in the WiMAX core network is used to authenticate the terminal (the user's information is actually located in the authentication server or its attached database); after the authentication is completed, the terminal also obtains a new IP connection in the WiMAX access network. Then you can continue to communicate.
  • the embodiment of the present invention advances the WiMAX access authentication process to the WLAN access network before the handover of the radio frequency, and the communication can continue normally while the WiMAX access authentication is performed on the WLAN access network, completing the WiMAX.
  • the WiMAX radio frequency is switched, so that the time for the communication between the terminal and the network to be interrupted after the radio frequency is interrupted is shortened, and the user experience is improved. Referring to FIG. 4, the specific implementation process of the method provided by the embodiment of the present invention is described in detail:
  • the terminal searches for a switching server that supports a single radio, and establishes a secure communication channel with the found switching server.
  • the method for the terminal to search for the switching server may be various, for example, the address of the switching server may be discovered through the DHCP protocol, or the method of DNS resolution may be used.
  • the embodiment of the present invention does not limit the manner of searching for the switching server. In addition, this step is not required if the terminal has obtained the address of the switching server at the time of initial network access.
  • the terminal sends a handover request to the handover server on the WLAN path, and obtains an identifier of the target WiMAX base station.
  • the multimode terminal working in the single radio mode in the embodiment of the present invention currently uses WiFi access technology to access the WiMAX core network through the WLAN access network.
  • a certain trigger condition is met, it is necessary to switch to the WiMAX access mode, that is, switch to access the WiMAX core network through the WiMAX access network.
  • the triggering condition in the embodiment of the present invention may be that the terminal finds that the WLAN signal is weak, automatically decides to switch to the WiMAX access network, or the user actively switches to the WiMAX access network, or the network requires the terminal to WiMAX. Access network switching.
  • the process of obtaining the target WiMAX base station by the terminal has the following implementation manners:
  • the terminal sends a handover request message to the handover server via the WLAN access network, where the request message includes a WiFi access point identifier currently connected by the terminal, that is, a BSSID (Basic Service Set Identification), and the identifier is actually The MAC address of the WiFi access point.
  • the switch request message can also contain a user ID.
  • the switching server queries the authentication server to check whether the user has the right to switch to the WiMAX access network. If the step is to perform the check, the terminal needs to include the user identification information in the handover request.
  • the user identifier is the NAI (Network Access Identity) required by the WiMAX. Into the identification) information.
  • NAI Network Access Identity
  • the NAI is a string containing the user name and the network name and format similar to the email address. For details, refer to the WiMAX related specifications, which are not mentioned here.
  • the switching server may also send a message to the terminal to request the terminal to send the user identification information, and the terminal sends the user identification information to the switching server after receiving the message.
  • the switching server uses the BSSID information sent by the terminal to query the location configuration server for the candidate target WiMAX base station information.
  • the location configuration server stores location information of all WiMAX base stations available in the network and location information of all WiFi access points. If there is a WiMAX base station whose signal coverage is that the location information of the WiMAX base station includes the signal coverage of the WiFi access point currently connected by the terminal, that is, the location information of the WiFi access point, the base station is a candidate target WiMAX base station. .
  • the location configuration server can also directly store the relationship table of all WiFi access points covered by each WiMAX base station available in the network, so that the target WiMAX base station can be directly found through the identifier of the WiFi access point without passing through the location calculation. .
  • the location configuration server can be a functional module inside the switching server.
  • the candidate target WiMAX base station that the handover server finds is sent to the terminal in the handover request response message via the WLAN access network.
  • the terminal may add a preset selection rule to the handover request, for example, including the terminal motion direction information in the handover request, so that the handover server finds a most suitable target WiMAX base station. For example, if the terminal is moving from south to north at this time, the direction of the user's motion can be added in the handover request, and the switching server obtains the motion direction information in the handover request of the terminal, and the user motion direction can be selected in multiple candidate target WiMAX base stations. The base station on that side.
  • the target WiMAX base station can also be implemented in the following manner.
  • the specific process is as follows:
  • the terminal sends a request message for querying the target WiMAX base station to the switching server via the WLAN access network, where the request message includes the identifier BSSID of the WiFi access point currently connected by the terminal.
  • the switching server queries the location configuration server through the BSSID to the WiMAX base station that covers the coverage of the WiFi access point currently connected by the terminal.
  • the base station of the WiMAX base station that can be switched by the switching server to the location configuration server and can cover the coverage of the WiFi access point currently connected by the terminal by the BSSID is a candidate target WiMAX base station to be switched by the terminal, and the candidate target WiMAX base station may not have or may have One or more, the query result is represented by the base station ID (Base Station IDentity).
  • step 503 The switching server returns the query result to the terminal via the WLAN access network. If the result is empty, the terminal terminates the process; otherwise, step 504 is performed.
  • the terminal selects a base station BSID from the query result as the target WiMAX base station BSID, and sends a handover request to the handover server via the WLAN access network, where the request message includes the selected target WiMAX base station BSID, and It may contain identification information of the terminal.
  • the terminal selects one base station BSID as the target WiMAX base station BSID, wherein the terminal may select according to the current terminal motion direction, signal strength, etc., or may be random.
  • the method for selecting a target WiMAX base station is not limited in this embodiment of the present invention.
  • the switching server queries the authentication server according to the user identification information whether the user has the right to use the WiMAX access service. Wherein, the step may or may not be performed directly.
  • the switching server can also query whether there is a corresponding target WiMAX base station through the BSID. This step may or may not be performed directly.
  • the steps 505 and 506 may be performed in the above steps, and the subsequent steps may be omitted.
  • the embodiment of the present invention does not limit the sequence, that is, the step 506 may be performed first, and then the step 505 is performed.
  • the switching server returns a handover request response via the WLAN access network. If the user requesting the handover does not have permission to use the WiMAX access service, or the target WiMAX base station does not exist, the response message indicates that the handover request is rejected, otherwise the handover request is agreed. .
  • the terminal turns on the WiMAX receiving circuit, and the terminal continues to communicate normally on the WiFi radio.
  • the WiMAX RF circuit can also be turned on, but the WiMAX RF circuit does not transmit any WiMAX signals.
  • the terminal listens to broadcast messages sent by the WiMAX base station at different frequency points.
  • the terminal After receiving the broadcast message of the WiMAX base station, the terminal determines, according to the content in the broadcast message, whether the base station is the target WiMAX base station of the current service of the terminal, and if yes, performing step 604; otherwise, performing step 602 continues to detect at the next frequency point. Listen to the broadcast message sent by the WiMAX base station.
  • the terminal After receiving the broadcast message of the WiMAX base station, the terminal determines, from the content of the broadcast message, whether the base station is the target WiMAX base station of the current service of the terminal, that is, if the terminal switches to the target WiMAX base station, the current service of the terminal may maintain continuity. . If not, return to step 602 to continue listening to the broadcast message of the base station at the next frequency point until a target WiMAX base station is found. In addition, if the target WiMAX base station is not found, the process ends and the WiMAX receiving circuit is turned off.
  • the terminal can temporarily turn off the WiMAX receiving circuit to save power, and then turn on the WiMAX radio after completing the WiMAX access authentication of the WLAN access network.
  • the terminal may also not turn off the WiMAX receiving circuit until the WiMAX access authentication of the WLAN access network is completed, and then the WiMAX transmission is turned on. Circuit.
  • the terminal sends a handover request message to the handover server by using the WLAN access network, where the request message includes the identifier BSID of the target WiMAX base station, and may further include identifier information of the terminal.
  • the switching server may query, by using the user identification information in the handover request message, whether the user has the right to use the WiMAX access service. Wherein, the step may or may not be performed directly.
  • the handover server may query whether there is such a base station by using a BSID in the handover request message. Wherein, the step may or may not be performed directly.
  • steps 605 and 606 may be performed in the following steps, and the subsequent steps may be omitted.
  • the embodiment of the present invention does not limit the sequence, that is, step 606 may be performed first, and then step 605 is performed.
  • the switching server returns a handover request response by using the WLAN access network. If the user requesting the handover does not have permission to use the WiMAX access service, or the target WiMAX base station does not exist, indicating that the handover request is rejected in the handover request response message; otherwise, agreeing The switch request.
  • the terminal establishes a first tunnel with the switching server.
  • the terminal establishes a tunnel with the switching server. For convenience of description, it is referred to as a first tunnel.
  • the switching server works as a virtual WiMAX base station after the first tunnel is established, and the transit terminal and the switching server, that is, the virtual base station, pass through the first tunnel.
  • the interaction signaling between the terminal and the WiMAX access network is performed directly on the link layer (the second layer), and the process of the present invention requires the terminal to perform WiMAX access authentication through the WLAN access network through the handover service.
  • the IP layer is the Layer 3 interface. Therefore, the Layer 2 packet of the WiMAX access authentication is encapsulated into the Layer 3 packet transmitted by the WLAN. The Layer 2 packet of the WiMAX is used as the IP packet in the WLAN. The data is transmitted.
  • the specific tunnel form is not limited in the embodiment of the present invention.
  • the step 303 is performed first, and then the step 302 is performed, that is, the terminal and the switching server first establish a first tunnel, and then the terminal sends a handover request to the switching server through the established first tunnel.
  • a second tunnel can be established if a server and an authenticator need to be switched.
  • the switching server and the authenticator establish a tunnel.
  • the second tunnel transmits the data transmitted by the virtual base station, that is, the R6 interface between the switching server and the authenticator.
  • the switching server when the switching server is in the WiMAX core network, the switching server can establish a second tunnel with the authenticator in the WiMAX access network.
  • the switching server when the switching server is in the WiMAX access network, the switching server only needs to establish a first tunnel with the terminal without performing this step.
  • the terminal performs the ranging with the switching server, that is, the virtual base station, by using the first tunnel established in step 303.
  • ranging is the first step in the WiMAX access process of the terminal.
  • the first tunnel established by the terminal 303 is negotiated with the switching server, that is, the virtual base station, the SBC (Subscriber Station Basic Capability), and the capability information is exchanged.
  • the information mainly includes the PKM used in the WiMAX network. Privacy Key Management, Key Management) Protocol version, authentication policy.
  • the terminal sends the SBC request message in the WiMAX specification to the switching server, and then the switching server returns an SBC response message to the terminal.
  • the SBC negotiation interaction originally occurs on the air interface of the terminal and the base station, and is now between the terminal and the switching server. Interaction in the first tunnel.
  • the SBC request message includes various parameter information requested by the terminal, including a PKM version, an authentication policy, related physical parameters, and uplink and downlink modulation modes of the terminal.
  • the terminal only needs to include the parameter authentication protocol version and the authentication policy that the terminal must request at the time in the SBC request message.
  • the terminal may also send an SBC request message containing all parameter information, and then the switching server ignores the parameter information that the terminal does not need, or switches the server to respond to all parameter information requested by the terminal, but the terminal ignores the unused information.
  • the switching server can interact with the WiMAX authenticator to obtain information such as the version of the protocol used in the WiMAX network, and can also be obtained from the pre-configured data table. How does the embodiment of the present invention specifically learn about the WiMAX authenticator and/or the WiMAX base station for the switching server?
  • the protocol version information is not limited, and by the interaction of step 302, the switching server has obtained the information.
  • the authenticator sends an EAP request/identification message to the terminal by using the switching server, where the message includes the identifier information of the terminal. After receiving the EAP request/identification message, the terminal sends an EAP response/identification message to the authenticator through the switching server. Contains the NAI (Network Access Identifier) of the terminal.
  • NAI Network Access Identifier
  • the terminal After receiving the EAP request/identification message, the terminal returns an EAP response/identification message to the authenticator.
  • the EAP response/identification message includes the NAI of the terminal, and the NAI is a string containing the user name and the network name, and the format is similar to the email address ( Use rname@realm), please refer to the WiMAX related specifications in detail, and will not go into details here.
  • the base station acts as an EAP relay in the EAP authentication process
  • the EAP message sent from the virtual base station to the authenticator and the authenticator to the virtual base station is encapsulated into an EAP relay format (EAPJTransferer).
  • the authenticator will encapsulate the identifier of the terminal response and send it to the authentication server through a protocol such as RADIUS.
  • the terminal and the authenticator perform an EAP authentication process.
  • the authenticator After receiving the EAP response/identification message sent by the terminal, the authenticator forwards the EAP response/identification message to the authentication server, and the authenticator may also include the content included in the EAP response message, such as an EAP response/identification message.
  • the NAI is taken out and encapsulated by another protocol and sent to the authentication server. After the authentication server receives the NAI, it authenticates the terminal user. 309: After the EAP authentication of the terminal and the authenticator succeeds, the authenticator relays the successful EAP-Success message to the terminal through the switching server.
  • the authentication server and the terminal perform mutual authentication and negotiate to obtain the MSK (Master Session Key).
  • the authenticator obtains the PMK (Pairwise Master Key, the primary key between the paired nodes according to the MSK sent by the authentication server and the terminal. Key) and AK (Authorization Key);
  • the authenticator passes the AK to the analog WiMAX base station on the switching server; the terminal and the switching server perform a TEK (Traffic Encryption Key) three-way handshake process.
  • the authentication server and the terminal negotiate to obtain an EMSK (Extended Master Session Key), and the EMSK is used as an extension; the authentication server passes the MSK to the authenticator, and the EMSK remains on the authentication server.
  • the terminal and the authenticator use the MSK to generate a PMK.
  • the terminal and HAAA generate a mobility key based on EMSK.
  • PMK is generated on the basis of MSK.
  • the PMK can remain unchanged when the terminal switches base stations; AK is generated on the basis of PMK and is the key between the terminal and the base station. A new AK needs to be generated when the terminal switches the target WiMAX base station.
  • the authenticator receives the MSK from the authentication server, and the MSK is calculated by the terminal and the authentication server in the process of negotiating the key. The terminal and the authenticator should have the same MSK. Otherwise, the two parties negotiate the PMK process. It will fail.
  • the switching server simulates the behavior of the base station, and the authenticator should send the AK to the analog WiMAX base station on the switching server.
  • the TEK three-way handshake process consists of three messages. The first is that the handover server sends a TEK challenge message to the terminal, after which the terminal sends a TEK request message to the handover server, and finally switches the server back to a TEK response message. Through the interaction of these three messages, the two-way authentication between the terminal and the switching server is actually completed, which is based on AK. If the analog WiMAX base station on the switching server does not have the same AK as the terminal, it cannot Complete the TEK handshake process.
  • the analog WiMAX base station on the switching server completes the registration of the data path and the establishment of the service flow by interacting with the terminal through the first tunnel and the second tunnel and the WiMAX access network gateway respectively.
  • the terminal sends a request message to enter an idle Idle working mode.
  • the step is to prepare the terminal to switch to the WiMAX radio to find the real target WiMAX base station.
  • 313 Dismantle the tunnel between the terminal and the switching server and switch the tunnel between the server and the authenticator. If the tunnel between the switching server and the authenticator is not established in 304, then no disassembly is required.
  • the terminal sends a link hold request to the home agent through the switch server, and the home agent receives the request.
  • the data that is sent to the terminal is temporarily cached for the terminal.
  • the terminal sends a link hold request to the home agent through the switching server, and is used to notify the home agent terminal to perform the handover, and there is a short interruption.
  • the home agent temporarily buffers the data sent to the terminal for the terminal.
  • the switching server can also directly send a connection hold request to the home agent to notify the home agent terminal to perform the handover.
  • the terminal turns on the WiMAX radio and turns off the WiFi radio.
  • the terminal switches to the WiMAX access network.
  • the terminal scans and selects the target WiMAX base station, exits the Idle mode, and performs a fast network access process.
  • 317 The terminal starts to obtain the CoA Care of Address, mobile IP care-of address, and performs MIP (Mobile IP, Mobile IP) registration.
  • MIP Mobile IP, Mobile IP
  • the WiMAX supports the MIP technology of the PMIP and the CMIP.
  • the IP address of the two MIPs is slightly different. If the IP address is PMIP, the DHCP process is used to register the CoA of the FA to the HA and bind it to the HoA. If the CMIP is used, the MIA is used to obtain the CoA of the terminal, and the CoA is registered on the HA and bound to the HoA.
  • the terminal sends a resource release request to the handover server, and requests to release related resources of the WiFi access network. At this point, the terminal completes all handover work and can work on the WiMAX channel. The terminal can also send packets to the communication peer through the WiMAX access network to perform data communication, that is, the state of the curve 2 in FIG.
  • the method provided by the embodiment of the present invention reduces the WiMAX and WiFi multimode terminals from WLAN access by completing the WiMAX network access process on the WiFi access path and the switching server before switching from the WiFi network to the WiMAX network.
  • the delay of switching the network to the WiMAX access network improves the user experience.
  • An embodiment of the present invention provides a switching system for an access network.
  • the system includes: a terminal 701 and a switching server 702.
  • the terminal 701 is configured to acquire the target WiMAX base station identifier of the handover, and send a handover request to the handover server 702 by using the WLAN access network, where the request carries the identifier of the target WiMAX base station; and the handover server 702 establishes the first tunnel;
  • the server 702 performs authentication and switches to the WiMAX access network corresponding to the identifier of the target WiMAX base station;
  • the switching server 702 is configured to receive, by using the WLAN access network, a handover request sent by the terminal 701, where the request is carried.
  • Authentication is performed with the terminal 701 through the first tunnel, so that the terminal 701 switches to the WiMAX access network corresponding to the identifier of the target WiMAX base station.
  • the terminal 701 is specifically configured to perform ranging by using the first tunnel and the switching server 702.
  • the first tunnel and the switching server 702 perform basic SBC negotiation of the user terminal 701, and exchange capability information, where the capability information includes a key management PKM protocol.
  • the EAP response/identification message is returned to the authenticator by the switching server 702, where the EAP response/identification message includes the user identification information of the terminal 701;
  • the authentication server performs mutual authentication with the switching server 702 and negotiates to obtain the primary session key MSK. According to the MSK, the authentication server obtains the negotiation through the switching server 702.
  • the switching server 702 is configured to perform ranging with the terminal 701 through the first tunnel, perform SBC negotiation with the terminal 701 through the first tunnel, and exchange capability information, where the capability information includes a version of the key management PKM protocol and an authentication policy;
  • the EAP request/identification message sent by the 701 authenticator, and forwarding the EAP response/identification message to the authenticator, where the EAP response/identification message includes the user identification information of the terminal 701; and the terminal 701 performs TEK exchange through the first tunnel;
  • the tunnel and the terminal 701 perform registration of the data path and establishment of the service flow.
  • the switching server 702 When the switching server 702 is in the WiMAX core network, the switching server 702 is configured to establish a second tunnel with the authenticator in the WiMAX access network after establishing the first tunnel with the terminal 701; or, switch the server 702, It is used to establish a second tunnel with the authenticator first, and then establish a first tunnel with the terminal 701.
  • the switching server 702 when the handover request sent by the terminal 701 includes the currently connected WiFi access point identifier, uses the currently connected WiFi access point identifier to query the candidate target WiMAX base station identifier; if at least one candidate target is found
  • the WiMAX base station identifier selects one of the candidate target WiMAX base stations as the target WiMAX base station according to a preset selection rule; and sends a handover response to the terminal 701, where the handover response includes the target WiMAX base station identifier selected from the at least one candidate target WiMAX base station.
  • the switching server 702 is configured to receive the query request sent by the terminal 701 through the WLAN access network, where the query request includes the WiFi access point identifier currently connected by the terminal 701; and the WiFi access point identifier currently connected by the terminal 701 in the query request. Querying the candidate target WiMAX base station identifier; returning the query result to the terminal 701 through the WLAN access network, and if the query result received by the terminal 701 is at least one candidate target WiMAX base station identifier, the terminal 701 selects the query result according to the preset selection rule. Select a candidate target WiMAX base station identifier as the target Marked WiMAX base station identification.
  • the terminal 701 is configured to open a WiMAX receiving circuit, and listen to a broadcast message sent by the WiMAX base station at different frequency points. After receiving the broadcast message of the WiMAX base station, determine, according to the content in the broadcast message, whether the base station that sends the broadcast message is The current target WiMAX base station of the terminal 701, if yes, sends a handover request message to the handover server 702 through the WLAN access network; otherwise, it continues to listen to the broadcast message sent by the WiMAX base station at the next frequency point.
  • the system provided by the embodiment of the present invention reduces the WiMAX and WiFi multimode terminals from the WLAN by completing the WiMAX network access process on the WiFi access path and the switching server before switching from the WiFi network to the WiMAX network.
  • the delay of switching the network to the WiMAX access network improves the user experience.
  • the embodiment of the invention provides a switching system for an access network, where the terminal is a single radio frequency wireless fidelity WiFi/microwave access global interworking WiMAX multimode terminal, and switches to switch from a wireless local area network WLAN access network to a WiMAX access network.
  • the system includes: a terminal 801 and a switching server 802,
  • the terminal 801 is configured to acquire a target WiMAX base station for handover; send a handover request to the handover server 802 through the WLAN access network, where the handover request carries the target WiMAX base station identifier; and the handover server 802 establishes a first tunnel; and passes the first tunnel and the handover server.
  • the 802 performs ranging; performs the basic capability SBC negotiation of the user terminal 801 through the first tunnel with the switching server 802, and exchanges capability information, and the capability information includes a version of the key management PKM protocol and an authentication policy; and receives an EAP request/identification message sent by the authenticator. Afterwards, the EAP response/identification message is returned to the authenticator by the switching server 802.
  • the EAP response/identification message includes the user identification information of the terminal 801; and the authentication server authenticates the user according to the user identification information in the received EAP response/identification message.
  • the authentication server After passing, the authentication server performs bidirectional authentication with the switching server 802 and negotiates to obtain the main session key MSK; according to the MSK, the authentication key is negotiated with the authenticating server 802 to obtain the master key PMK and the authorization key AK between the paired nodes; Pass the AK to the switch server in the authenticator
  • the analog WiMAX base station After simulating the WiMAX base station of the 802, the analog WiMAX base station performs the TEK exchange of the message encryption key through the first tunnel; and the analog WiMAX base station and the WiMAX access network gateway complete the registration of the data path and the establishment of the service flow through the first tunnel; WiMAX radio, turn off the WiFi radio;
  • the switching server 802 is configured to receive, by using the WLAN access network, the handover request sent by the terminal 801; establish a first tunnel with the terminal 801; and the message that passes through the first tunnel is received and sent by the analog WiMAX base station on the handover server 802; A tunnel is used to perform ranging with the terminal 801.
  • the SBC is negotiated with the terminal 801 through the first tunnel to exchange capability information.
  • the capability information includes a version of the key management PKM protocol and an authentication policy.
  • the receiving terminal 801 sends an EAP request/identification message to the authenticator.
  • the EAP response/identification message includes the user identification information of the terminal 801; and the terminal 801 performs TEK exchange through the first tunnel;
  • the registration of the data path and the establishment of the service flow are performed with the terminal 801.
  • the switching server 802 When the switching server 802 is in the WiMAX core network, the switching server 802 is configured to establish a second tunnel with the authenticator in the WiMAX access network after establishing the first tunnel with the terminal 801; or, switch the server 802, It is used to establish a second tunnel with the authenticator first, and then establish a first tunnel with the terminal 801.
  • the terminal 801 is further configured to send a notification message for switching the radio frequency to the switching server 802 before the terminal 801 turns off the WiFi radio.
  • the switching server 802 After the analog WiMAX base station on the switching server 802 receives the AK or the receiving terminal 801 sends a notification message for switching the radio frequency to the switching server 802, the switching server 802 sends a connection holding request to the home agent, so that the home agent receives the connection hold.
  • the terminal 801 temporarily buffers the data sent to the terminal 801 after the request.
  • the terminal 801 is further configured to: after the registration with the analog WiMAX base station and the WiMAX access network gateway completes the registration of the data path and the establishment of the service flow by using the first tunnel, send a request message, requesting to enter an idle state, so that the terminal 801 enters the idle state. After the state, the switching server 802 tears down the first tunnel established with the terminal 801.
  • the terminal 801 is further configured to enable the WiMAX radio, turn off the WiFi radio, search for the target WiMAX base station corresponding to the target WiMAX base station identifier, exit the idle state, and perform a fast network access procedure; obtain the mobile IP care-of address, and perform mobile IP registration.
  • the terminal 801 is further configured to obtain a mobile IP care-of address and perform mobile IP registration, and then send a resource release request to the handover server 802, requesting to release related resources of the WiFi access network.
  • the terminal 801 is further configured to search for a supported single radio switching server 802, and establish a secure communication channel with the found switching server 802.
  • the terminal 801 is a single-receipt WiFi/WiMAX multi-mode terminal 801, and when the handover request includes the currently connected WiFi access point identifier,
  • the switching server 802 further queries the candidate target WiMAX base station identifier by using the currently connected WiFi access point identifier included in the handover request sent by the terminal 801.
  • the handover server 802 selects one of the candidate target WiMAX base stations as the target WiMAX base station according to a preset selection rule; the handover server 802 sends a handover response to the terminal 801, where the handover response includes at least a target WiMAX base station identifier selected among a candidate target WiMAX base station;
  • the target WiMAX base station information in the handover response sent by the handover server 802 to the terminal 801 is null, so that the terminal 801 receives the handover response that the target WiMAX base station information is empty, and ends the process; or
  • the switching response sent by the switching server 802 to the terminal 801 indicates that the handover request is rejected, so that the terminal 801 receives the handover response rejecting the handover, and then ends the flow.
  • the terminal 801 is a single-receipt WiFi/WiMAX multi-mode terminal 801
  • the switching server 802 is further configured to receive the query request sent by the terminal 801 through the WLAN access network, where the query request includes the WiFi access point identifier currently connected by the terminal 801; and the WiFi access point identifier currently connected by the terminal 801 in the query request, Querying the candidate target WiMAX base station identifier; returning the query result to the terminal 801 through the WLAN access network. If the query result received by the terminal 801 is empty, the terminal 801 ends the process; otherwise, the terminal 801 selects the query result according to the preset selection rule. A candidate target WiMAX base station identity is selected as the target WiMAX base station identity.
  • the terminal 801 is a dual-receipt WiFi/WiMAX multi-mode terminal 801
  • the terminal 801 is further configured to: open a WiMAX receiving circuit, and listen to a broadcast message sent by the WiMAX base station at different frequency points; and after receiving the broadcast message of the WiMAX base station, determine, from the content of the broadcast message, whether the base station that sends the broadcast message is a terminal 801 The current target WiMAX base station, if yes, sends a handover request message to the handover server 802 through the WLAN access network; otherwise, continues to listen to the broadcast message sent by the WiMAX base station at the next frequency point.
  • the system provided by the embodiment of the present invention reduces the WiMAX and WiFi multimode terminals from the WLAN by completing the WiMAX network access process on the WiFi access path and the switching server before switching from the WiFi network to the WiMAX network.
  • the delay of switching the network to the WiMAX access network improves the user experience.
  • the embodiment of the invention provides a single radio frequency wireless fidelity WiFi/microwave access global interworking WiMAX multimode terminal device.
  • the terminal device includes :
  • the first sending module 901 is configured to obtain a target WiMAX base station identifier, and send a handover request to the handover server by using the WLAN access network, where the handover request carries the target WiMAX base station identifier;
  • a first establishing module 902 configured to establish a first tunnel with the switching server
  • the first ranging module 903 is configured to perform ranging by using the first tunnel and the switching server.
  • the first negotiation module 904 is configured to perform SBC negotiation on the basic capability of the user terminal with the switching server by using the first tunnel, and exchange capability information, where the capability information includes a version of the key management PKM protocol and an authentication policy;
  • the first requesting module 905 receives the EAP request/identification message sent by the authenticator through the switching server, and returns an EAP response/identification message to the authenticator through the switching server, where the EAP response/identification message includes the user identification information of the terminal;
  • the first authentication module 906 is configured to: after the authentication server authenticates the user according to the user identifier information in the received EAP response/identification message, perform mutual authentication with the authentication server through the switching server, and negotiate to obtain a primary session.
  • Key MSK
  • the first generating module 907 is configured to obtain, according to the MSK, the master key PMK and the authorization key AK between the paired nodes by negotiating with the authenticator through the switching server;
  • the first switching module 908 is configured to perform, after the authenticator transmits the AK to the analog WiMAX base station of the switching server, exchange the packet encryption key TEK with the analog WiMAX base station through the first tunnel;
  • the first switching module 909 is configured to complete the registration of the data path and the establishment of the service flow by using the first tunnel with the analog WiMAX base station and the WiMAX access network gateway; after the registration of the data path and the establishment of the service flow, the WiMAX radio is turned on, and the service is turned off. WiFi radio.
  • the terminal is specifically a single-receipt WiFi/WiMAX multi-mode terminal; or, a dual-receipt WiFi/WiMAX multi-mode terminal, when the terminal is a dual-receipt WiFi/WiMAX multi-mode terminal, the first sending module includes :
  • a listening unit configured to: open a WiMAX receiving circuit, and listen to a broadcast message sent by the WiMAX base station at different frequency points;
  • a determining unit configured to: after receiving the broadcast message of the WiMAX base station, determine, by the content in the broadcast message, whether the base station that sends the broadcast message is the current target WiMAX base station of the terminal, and if yes, send the switch to the switching server by using the WLAN access network. Request message; otherwise, continue to listen to the broadcast message sent by the WiMAX base station at the next frequency point.
  • the terminal device provided by the embodiment of the present invention reduces the WiMAX and WiFi multimode terminals from the WLAN by completing the WiMAX network access process on the WiFi access path and the switching server before switching from the WiFi network to the WiMAX network.
  • the delay of switching to the WiMAX access network improves the user experience.
  • the embodiment of the present invention provides a switching server device, when a single radio frequency wireless fidelity WiFi/microwave access global interworking WiMAX multimode terminal is switched from a wireless local area network WLAN access network to a WiMAX access network, see FIG. 11, the switching server Equipment includes:
  • the first receiving module 1001 is configured to receive, by using a WLAN access network, a handover request sent by the terminal;
  • a second establishing module 1002 configured to establish a first tunnel with the terminal
  • the second ranging module 1003 is configured to perform ranging by using the first tunnel and the terminal;
  • the second negotiation module 1004 is configured to perform SBC negotiation with the terminal through the first tunnel, and exchange capability information, where the capability information includes a version of the key management PKM protocol and an authentication policy.
  • the second requesting module 1005 receives the EAP request/identification message sent by the terminal authenticator, and forwards the EAP response/identification message to the authenticator, where the EAP response/identification message includes the user identification information of the terminal;
  • a second switching module 1006 configured to: after the authenticator transmits the AK to the analog WiMAX base station of the switching server, and The terminal performs a packet encryption key TEK exchange through the first tunnel;
  • the first registration module 1007 performs data path registration and service flow establishment through the first tunnel and the terminal and the WiMAX access network gateway.
  • the switching server when the switching server is in the WiMAX core network, the switching server is configured to establish a second tunnel with the authenticator in the WiMAX access network after establishing the first tunnel with the terminal; or, switch the server, for The authenticator establishes a second tunnel and establishes a first tunnel with the terminal.
  • the terminal specifically is a single-acquisition WiFi/WiMAX multi-mode terminal or a dual-receipt WiFi/WiMAX multi-mode terminal.
  • the handover request sent by the terminal includes the current connection.
  • the first receiving module specifically includes:
  • a first querying unit configured to: switch, by the server, the currently connected WiFi access point identifier included in the handover request sent by the terminal, and query the candidate target WiMAX base station identifier;
  • a first processing unit configured to: if the handover server finds at least one candidate target WiMAX base station identifier, the handover server selects one of the candidate target WiMAX base stations as the target WiMAX base station according to the preset selection rule; and the handover response sent by the handover server to the terminal Included in the target WiMAX base station identifier selected from the at least one candidate target WiMAX base station;
  • a second processing unit configured to: if the handover server does not find the candidate target WiMAX base station identifier, the target WiMAX base station information in the handover response sent by the handover server to the terminal is null, so that the terminal receives the handover response that the target WiMAX base station information is empty Then, the process ends; or, the switching response sent by the switching server to the terminal indicates that the handover request is rejected, so that the terminal receives the handover response rejecting the handover, and then ends the process.
  • the terminal is specifically a single-receipt WiFi/WiMAX multi-mode terminal or a dual-receipt WiFi/WiMAX multi-mode terminal.
  • the first receiving module specifically includes:
  • the first receiving unit is configured to receive a query request sent by the terminal through the WLAN access network, where the query request includes a WiFi access point identifier currently connected by the terminal;
  • a second querying unit configured to query a candidate target WiMAX base station identifier by querying a WiFi access point identifier currently connected by the terminal in the request;
  • the third processing unit is configured to return the query result to the terminal by using the WLAN access network. If the query result received by the terminal is empty, the terminal ends the process; otherwise, the terminal selects one of the query results according to the preset selection rule.
  • the candidate target WiMAX base station identity is identified as the target WiMAX base station identity.
  • the switching server device reduces the WiMAX and WiFi multimode terminals from the WLAN by completing the WiMAX network access process on the WiFi access path and the switching server before switching from the WiFi network to the WiMAX network.
  • the delay of the access network switching to the WiMAX access network improves the user experience.
  • Embodiments of the present invention may be implemented in software, and the corresponding software program may be stored in a readable storage medium, such as a hard disk, a cache, or an optical disk of a router.
  • the present invention relates to the field of mobile communications, and in particular, to a method, system and apparatus for authenticating a handover access network.

Description

一种接入网的切换方法、 系统和设备 本申请要求于 2009年 5月 11日提交中国专利局、申请号为 200910136345. 9、发明 名称为 "一种接入网的切换方法、 系统和设备"的中国专利申请的优先权, 其全部内容 通过引用结合在本申请中。 技术领域 本发明涉及移动通信领域, 特别涉及一种接入网的切换方法、 系统和设备。
背景技术
WiFi (Wireless Fidelity, 无线保真) 是一种重要的无线局域网技术, 同时也用 于无线宽带接入, WiFi具有布网速度快、成本低、 带宽更高、使用频谱无需授权, 但覆 盖范围小。
WiMAX (Worldwide Interoperability for Microwave Access, 微波存取全球互通) 是一种无线宽带接入技术, 也是第三代无线通信技术国际标准之一, 全球有众多的运营 商使用 WiMAX技术建设无线宽带接入网络。 WiMAX具有覆盖范围大的优点, 但在大覆盖 范围内会有很多的用户, 所以平均用户带宽就下降。
将 WiFi作为 WiMAX的补充, 在室内 WiMAX信号弱、或人口稠密的地点使用 WiFi热 点, 可以克服 WiMAX平均用户带宽窄的问题。 因此, 如何通过 WiFi网络接入到 WiMAX 的核心网络, 以及在 WiMAX和 WiFi两个接入网络之间切换时保证业务的连续性, 减少 切换的中断时间, 成为急需解决的问题。
发明内容 为了减少 WiMAX、 WiFi多模终端从 WLAN接入网向 WiMAX接入网切换的中断时间, 提高用户的使用体验, 本发明实施例提供了一种接入网的切换方法、 系统和设备。所述 技术方案如下:
本发明实施例提供了一种接入网的切换方法, 所述方法包括:
终端获取切换的目标 WiMAX基站标识;
所述终端通过 WLAN接入网向切换服务器发送切换请求,所述请求中携带目标 WiMAX 基站的标识;
所述终端和所述切换服务器建立第一隧道;
所述终端通过所述第一隧道与所述切换服务器进行认证,切换到所述目标 WiMAX基 站的标识对应的 WiMAX接入网中。
本发明实施例还提供了一种接入网的切换方法, 终端为单射频无线保真 WiFi/微波 存取全球互通 WiMAX多模终端, 所述切换为从无线局域网 WLAN接入网切换到 WiMAX接 入网, 所述方法包括:
所述终端获取切换的目标 WiMAX基站标识;
所述终端通过 WLAN接入网向切换服务器发送切换请求,所述请求中携带目标 WiMAX 基站的标识;
所述终端和所述切换服务器建立第一隧道;
所述终端通过所述第一隧道与所述切换服务器进行测距;
所述终端通过所述第一隧道与所述切换服务器进行用户终端基本能力 SBC协商,交 换能力信息, 所述能力信息包括密钥管理 PKM协议的版本和认证策略;
所述终端收到 EAP请求 /标识消息后,通过所述切换服务器返回 EAP响应 /标识消息 给认证器, 所述 EAP响应 /标识消息中包含所述终端的用户标识信息; 所述认证器将所 述用户标识信息发送给 WiMAX核心网中的认证服务器,所述认证服务器根据收到的所述 用户标识信息, 对用户进行认证;
所述终端与所述认证服务器通过所述切换服务器进行双向认证并协商得到主会话 密钥 MSK;
所述认证器接收所述认证服务器发送的 MSK, 通过所述切换服务器与所述终端协商 得到成对结点间的主密钥 PMK和授权密钥 AK;
所述认证器将 AK发送给切换服务器的模拟 WiMAX基站。
所述终端与所述模拟 WiMAX基站通过所述第一隧道进行报文加密密钥 TEK交换; 所述终端与所述模拟 WiMAX基站以及 WiMAX接入网网关经第一隧道完成数据路径的 注册和业务流的建立;
所述终端打开 WiMAX射频, 关闭 WiFi射频。
本发明实施例提供了一种接入网的切换系统, 所述系统包括: 终端和切换服务器, 所述终端, 用于获取切换的目标 WiMAX基站标识; 通过 WLAN接入网向切换服务器 发送切换请求, 所述请求中携带目标 WiMAX基站的标识; 和所述切换服务器建立第一隧 道; 通过所述第一隧道与所述切换服务器进行认证, 切换到所述目标 WiMAX基站的标识 对应的 WiMAX接入网中;
所述切换服务器, 用于通过 WLAN接入网接收所述终端发送的切换请求, 所述请求 中携带目标 WiMAX基站的标识; 和所述终端建立第一隧道; 通过所述第一隧道与所述终 端进行认证,以使得所述终端切换到所述目标 WiMAX基站的标识对应的 WiMAX接入网中。
本发明实施例还提供了一种接入网的切换系统, 终端为单射频无线保真 WiFi/微波 存取全球互通 WiMAX多模终端, 所述切换为从无线局域网 WLAN接入网切换到 WiMAX接 入网, 所述系统包括: 终端和切换服务器,
所述终端, 用于获取切换的目标 WiMAX基站; 通过 WLAN接入网向切换服务器发送 切换请求,所述切换请求中携带目标 WiMAX基站标识;和所述切换服务器建立第一隧道; 通过所述第一隧道与所述切换服务器进行测距;通过所述第一隧道与所述切换服务器进 行用户终端基本能力 SBC协商, 交换能力信息, 所述能力信息包括密钥管理 PKM协议的 版本和认证策略; 接收认证器发送的 EAP请求 /标识消息后, 通过所述切换服务器返回 EAP响应 /标识消息给认证器, 所述 EAP响应 /标识消息中包含终端的用户标识信息; 在 所述认证服务器根据收到的 EAP响应 /标识消息中的用户标识信息对用户认证通过后, 与所述认证服务器通过所述切换服务器进行双向认证并协商得到主会话密钥 MSK; 根据 所述 MSK, 与所述认证器通过所述切换服务器协商得到成对结点间的主密钥 PMK和授权 密钥 AK;在所述认证器将所述 AK传给切换服务器的模拟 WiMAX基站后,和所述模拟 WiMAX 基站通过所述第一隧道进行报文加密密钥 TEK交换; 与所述模拟 WiMAX基站以及 WiMAX 接入网网关通过所述第一隧道完成数据路径的注册和业务流的建立; 打开 WiMAX射频, 关闭 WiFi射频;
所述切换服务器, 用于通过 WLAN接入网接收所述终端发送的切换请求; 与所述终 端建立第一隧道;经过第一隧道的消息都是切换服务器上的模拟 WiMAX基站接收和发送 的; 通过所述第一隧道与所述终端进行测距; 通过所述第一隧道与所述终端进行 SBC协 商, 交换能力信息, 所述能力信息包括密钥管理 PKM协议的版本和认证策略; 接收所述 终端认证器发送的 EAP请求 /标识消息, 并转发 EAP响应 /标识消息给所述认证器, 所述 EAP响应 /标识消息中包含终端的用户标识信息; 和所述终端通过所述第一隧道进行 TEK 交换; 通过所述第一隧道与所述终端进行数据路径的注册和业务流的建立。
本发明实施例提供了一种单射频无线保真 WiFi/微波存取全球互通 WiMAX多模终端 设备, 当所述终端从无线局域网 WLAN接入网切换到 WiMAX接入网, 所述终端设备包括: 第一发送模块, 用于获取切换的目标 WiMAX基站标识, 通过 WLAN接入网向切换服 务器发送切换请求, 所述切换请求中携带目标 WiMAX基站标识; 第一建立模块, 用于和所述切换服务器建立第一隧道;
第一测距模块, 用于通过所述第一隧道与所述切换服务器进行测距;
第一协商模块, 用于通过所述第一隧道与所述切换服务器进行用户终端基本能力
SBC协商, 交换能力信息, 所述能力信息包括密钥管理 PKM协议的版本和认证策略; 第一请求模块, 通过所述切换服务器接收认证器发送的 EAP请求 /标识消息, 并通 过所述切换服务器返回 EAP响应 /标识消息给认证器,所述 EAP响应 /标识消息中包含终 端的用户标识信息;
第一认证模块, 用于在所述认证服务器根据收到的 EAP响应 /标识消息中的用户标 识信息对用户认证通过后,与所述认证服务器通过所述切换服务器进行双向认证并协商 得到主会话密钥 MSK;
第一生成模块, 用于根据所述 MSK, 与所述认证器通过所述切换服务器协商得到成 对结点间的主密钥 PMK和授权密钥 AK;
第一交换模块,用于在所述认证器将所述 AK传给切换服务器的模拟 WiMAX基站后, 和所述模拟 WiMAX基站通过所述第一隧道进行报文加密密钥 TEK交换;
第一切换模块,用于与所述模拟 WiMAX基站以及 WiMAX接入网网关通过所述第一隧 道完成数据路径的注册和业务流的建立; 在数据路径的注册和业务流的建立后, 打开 WiMAX射频, 关闭 WiFi射频。
本发明实施例提供了一种切换服务器设备, 当单射频无线保真 WiFi/微波存取全球 互通 WiMAX多模终端从无线局域网 WLAN接入网切换到 WiMAX接入网, 所述切换服务器 设备包括:
第一接收模块, 用于通过 WLAN接入网接收所述终端发送的切换请求;
第二建立模块, 用于与所述终端建立第一隧道;
第二测距模块, 用于通过所述第一隧道与所述终端进行测距;
第二协商模块, 用于通过所述第一隧道与所述终端进行 SBC协商, 交换能力信息, 所述能力信息包括密钥管理 PKM协议的版本和认证策略;
第二请求模块, 接收所述终端认证器发送的 EAP请求 /标识消息, 并转发 EAP响应 / 标识消息给所述认证器, 所述 EAP响应 /标识消息中包含终端的用户标识信息;
第二交换模块,用于在所述认证器将所述 AK传给切换服务器的模拟 WiMAX基站后, 和所述终端通过所述第一隧道进行报文加密密钥 TEK交换;
第一注册模块,通过所述第一隧道与所述终端以及与 WiMAX接入网网关进行数据路 径的注册和业务流的建立。 通过本发明实施例提供的方案, 单射频的多模终端从 WiFi网络切换到 WiMAX网络 前, 通过在 WiFi接入路径上与切换服务器完成 WiMAX入网过程, 减少了 WiMAX、 WiFi 多模终端从 WLAN接入网向 WiMAX接入网切换的延时, 提高了用户的使用体验。
附图说明 图 1是本发明实施例 1提供的方法流程示意图;
图 2是本发明实施例 2提供的方法流程示意图;
图 3是本发明实施例 3提供的终端从 WiFi接入切换到 WiMAX接入的过程示意图; 图 4是本发明实施例 3提供的方法流程示意图;
图 5是本发明实施例 3提供的终端采用单收单发模式获取目标 WiMAX基站过程示意 图;
图 6是本发明实施例 3提供的终端采用单收单发模式获取目标 WiMAX基站过程另一 示意图;
图 7是本发明实施例 3提供的终端采用双收单发模式获取目标 WiMAX基站过程示意 图;
图 8是本发明实施例 4提供的系统结构示意图;
图 9是本发明实施例 5提供的系统结构示意图;
图 10是本发明实施例 6提供的终端设备结构示意图;
图 11是本发明实施例 7提供的切换服务器结构示意图。
具体实施方式 为使本发明实施例的目的、 技术方案和优点更加清楚, 下面将结合附图对本发明实 施方式作进一步地详细描述。 实施例 1
本发明实施例提供了一种接入网的切换方法, 参见图 1, 该方法包括:
101: 终端获取切换的目标 WiMAX基站标识;
102: 终端通过 WLAN接入网向切换服务器发送切换请求, 请求中携带目标 WiMAX基 站的标识; 103: 终端和切换服务器建立第一隧道;
104: 终端通过第一隧道与切换服务器进行认证, 切换到目标 WiMAX基站的标识对 应的 WiMAX接入网中。
其中, 也可以先执行步骤 103再执行步骤 102, 即终端和切换服务器先建立第一隧 道, 然后终端再通过建立的第一隧道向切换服务器发送切换请求。
其中, 终端通过第一隧道与切换服务器进行认证, 切换到目标 WiMAX基站的标识对 应的 WiMAX接入网中, 具体包括:
终端通过第一隧道与切换服务器进行测距;
终端通过第一隧道与切换服务器进行用户终端基本能力 SBC协商, 交换能力信息, 能力信息包括密钥管理 PKM协议的版本和认证策略;
终端收到 EAP请求 /标识消息后,通过切换服务器返回 EAP响应 /标识消息给认证器, EAP 响应 /标识消息中包含终端的用户标识信息; 认证器将用户标识信息发送给 WiMAX 核心网中的认证服务器, 认证服务器根据收到的用户标识信息, 对用户进行认证; 终端与认证服务器通过切换服务器进行双向认证并协商得到主会话密钥 MSK;
认证器接收认证服务器发送的 MSK, 通过切换服务器与终端协商得到成对结点间的 主密钥 PMK和授权密钥 AK;
认证器将 AK发送给切换服务器的模拟 WiMAX基站;
终端与模拟 WiMAX基站通过第一隧道进行报文加密密钥 TEK交换;
终端与模拟 WiMAX基站以及 WiMAX接入网网关经第一隧道完成数据路径的注册和业 务流的建立;
终端打开 WiMAX射频, 关闭 WiFi射频, 切换到 WiMAX接入网中。
其中, 当切换服务器在 WiMAX核心网中时, 切换服务器与终端在建立第一隧道后, 与 WiMAX接入网中的认证器建立第二隧道;或者,切换服务器先与认证器建立第二隧道, 再与终端建立第一隧道。
其中, 终端获取切换的目标 WiMAX基站标识, 具体包括:
切换请求中包含当前连接的 WiFi接入点标识;
切换服务器利用终端发送的切换请求中包含的当前连接的 WiFi接入点标识, 查询 候选目标 WiMAX基站标识;
如果切换服务器查找到至少一个候选目标 WiMAX基站标识,则切换服务器根据预设 的选择规则, 选择其中一个候选目标 WiMAX基站作为目标 WiMAX基站; 切换服务器向终 端发送切换响应, 切换响应中包含从至少一个候选目标 WiMAX基站中选择的目标 WiMAX 基站标识。
其中, 终端获取切换的目标 WiMAX基站标识, 具体包括:
切换服务器接收终端通过 WLAN接入网发送的查询请求, 查询请求中包含终端当前 连接的 WiFi接入点标识;
切换服务器通过查询请求中终端当前连接的 WiFi接入点标识,查询候选目标 WiMAX 基站标识;
切换服务器通过 WLAN接入网将查询结果返回给终端, 如果终端接收到的查询结果 为至少一个候选目标 WiMAX基站标识,则终端根据预设的选择规则从查询结果中选择出 一个候选目标 WiMAX基站标识作为目标 WiMAX基站标识。
其中, 终端获取切换的目标 WiMAX基站标识, 具体包括:
终端打开 WiMAX接收电路, 在不同的频点上侦听 WiMAX基站发送的广播消息; 终端收到 WiMAX基站的广播消息后,从广播消息中的内容判断发送广播消息的基站 是否为终端当前的目标 WiMAX基站, 如果是, 则通过 WLAN接入网向切换服务器发送切 换请求消息; 否则, 继续在下一个频点侦听 WiMAX基站发送的广播消息。
本发明实施例提供的方法, 单射频的多模终端从 WiFi网络切换到 WiMAX网络前, 通过在 WiFi接入路径上与切换服务器完成 WiMAX入网过程, 减少了 WiMAX、 WiFi多模 终端从 WLAN接入网向 WiMAX接入网切换的延时, 提高了用户的使用体验。 实施例 2
本发明实施例提供了一种接入网的切换方法, 终端为单射频无线保真 WiFi/微波存 取全球互通 WiMAX多模终端, 切换为从无线局域网 WLAN接入网切换到 WiMAX接入网, 参见图 2, 该方法包括:
201: 终端获取切换的目标 WiMAX基站标识;
202: 终端通过 WLAN接入网向切换服务器发送切换请求, 请求中携带目标 WiMAX基 站的标识;
203: 终端和切换服务器建立第一隧道;
其中, 也可以先执行步骤 203再执行步骤 202, 即终端和切换服务器先建立第一隧 道, 然后终端再通过建立的第一隧道向切换服务器发送切换请求。
204: 终端通过第一隧道与切换服务器进行测距;
205: 终端通过第一隧道与切换服务器进行用户终端基本能力 SBC协商, 交换能力 信息, 能力信息包括密钥管理 PKM协议的版本和认证策略; 206: 终端收到 EAP请求 /标识消息后, 通过切换服务器返回 EAP响应 /标识消息给 认证器, EAP响应 /标识消息中包含终端的用户标识信息;认证器将用户标识信息发送给 WiMAX核心网中的认证服务器,认证服务器根据收到的用户标识信息,对用户进行认证;
207: 终端与认证服务器通过切换服务器进行双向认证并协商得到主会话密钥 MSK;
208:认证器接收认证服务器发送的 MSK,通过切换服务器与终端协商得到成对结点 间的主密钥 PMK和授权密钥 AK; 认证器将 AK发送给切换服务器的模拟 WiMAX基站。
209: 终端与模拟 WiMAX基站通过第一隧道进行报文加密密钥 TEK交换;
210: 终端与模拟 WiMAX基站以及 WiMAX接入网网关经第一隧道完成数据路径的注 册和业务流的建立;
211: 终端打开 WiMAX射频, 关闭 WiFi射频。
其中, 当切换服务器在 WiMAX核心网中时, 切换服务器与终端在建立第一隧道后, 与 WiMAX接入网中的认证器建立第二隧道;或者,切换服务器先与认证器建立第二隧道, 再与终端建立第一隧道。
其中, 在终端关闭 WiFi射频之前, 终端向切换服务器发送切换射频的通知消息。 其中, 当切换服务器上的模拟 WiMAX基站收到 AK或者收到终端向切换服务器发送 切换射频的通知消息后, 切换服务器向家乡代理发送连接保持请求, 以使得家乡代理收 到连接保持请求后暂时为终端缓存发向终端的数据。
其中,终端与模拟 WiMAX基站以及 WiMAX接入网网关经第一隧道完成数据路径的注 册和业务流的建立之后, 还包括:
终端发送请求消息, 请求进入空闲状态;
切换服务器拆除与终端建立的第一隧道。
其中, 终端打开 WiMAX射频, 关闭 WiFi射频之后, 还包括:
终端查找目标 WiMAX基站标识对应的目标 WiMAX基站, 退出空闲状态, 并执行快速 入网过程;
终端获取移动 IP转交地址, 并进行移动 IP注册。
其中, 终端获取移动 IP转交地址, 并进行移动 IP注册之后, 还包括:
终端向切换服务器发送资源释放请求, 请求释放 WiFi接入网的相关资源。
其中, 终端通过 WLAN接入网向切换服务器发送切换请求之前, 还包括:
终端查找支持的单射频的切换服务器,并与查找到的切换服务器建立安全的通信通 道。
其中, 终端获取切换的目标 WiMAX基站标识, 具体包括: 切换请求中包含当前连接的 WiFi接入点标识;
切换服务器利用终端发送的切换请求中包含的当前连接的 WiFi接入点标识, 查询 候选目标 WiMAX基站标识;
如果切换服务器查找到至少一个候选目标 WiMAX基站标识,则切换服务器根据预设 的选择规则, 选择其中一个候选目标 WiMAX基站作为目标 WiMAX基站; 切换服务器向终 端发送切换响应, 切换响应中包含从至少一个候选目标 WiMAX基站中选择的目标 WiMAX 基站标识;
如果切换服务器没有查找到候选目标 WiMAX基站标识,则切换服务器向终端发送的 切换响应中目标 WiMAX基站信息为空, 以使终端接收到目标 WiMAX基站信息为空的切换 响应后, 结束流程; 或者, 切换服务器向终端发送的切换响应中表示拒绝切换请求, 以 使终端接收到拒绝切换的切换响应后, 结束流程。
其中, 终端获取切换的目标 WiMAX基站标识, 具体包括:
切换服务器接收终端通过 WLAN接入网发送的查询请求, 查询请求中包含终端当前 连接的 WiFi接入点标识;
切换服务器通过查询请求中终端当前连接的 WiFi接入点标识,查询候选目标 WiMAX 基站标识;
切换服务器通过 WLAN接入网将查询结果返回给终端, 如果终端接收到的查询结果 为空, 则终端结束流程; 否则, 终端根据预设的选择规则从查询结果中选择出一个候选 目标 WiMAX基站标识作为目标 WiMAX基站标识。
其中, 终端获取切换的目标 WiMAX基站标识, 具体包括:
终端打开 WiMAX接收电路, 在不同的频点上侦听 WiMAX基站发送的广播消息; 终端收到 WiMAX基站的广播消息后,从广播消息中的内容判断发送广播消息的基站 是否为终端当前的目标 WiMAX基站, 如果是, 则通过 WLAN接入网向切换服务器发送切 换请求消息; 否则, 继续在下一个频点侦听 WiMAX基站发送的广播消息。
本发明实施例提供的方法, 单射频的多模终端从 WiFi网络切换到 WiMAX网络前, 通过在 WiFi接入路径上与切换服务器完成 WiMAX入网过程, 减少了 WiMAX、 WiFi多模 终端从 WLAN接入网向 WiMAX接入网切换的延时, 提高了用户的使用体验。 实施例 3
为了减少 WiMAX、 WiFi多模终端从 WLAN接入网向 WiMAX接入网切换的延时, 提高 用户的使用体验, 本发明实施例提供了一种接入网的切换方法, 使得工作在单射频的多 模终端, 从 WiFi网络切换到 WiMAX网络前, 在 WiFi接入路径上预先进行入网过程, 本 发明实施例中的终端为工作在单射频模式下的 WiMAX、 WiFi多模终端, 具体内容如下: 下面首先描述终端从 WiFi接入切换到 WiMAX接入的过程, 参见图 2:
图 3所示的曲线 1表示终端原来通过 WLAN接入网接入到 WiMAX核心网时的数据路 径, 即终端通过 WiFi空口连接到 WLAN的接入点, 经过 WLAN的上行路由结点或者接入 控制器连接到 WiMAX核心网的移动 IP家乡代理。 而图 3所示的曲线 2表示终端切换到 WiMAX接入网之后的数据路径, 即终端通过 WiMAX空口连接到 WiMAX基站, 经过 WiMAX 接入网的网关连接到 WiMAX核心网的移动 IP家乡代理。 其中, 这里所说的连接不是指 物理上的连接, 而是指拓扑上的通路, 例如曲线 1从 WLAN到 WiMAX核心网时中间可能 经过一段互联网或局部交换网络, 曲线 1和曲线 2在到达家乡代理之前都可能先经过 WiMAX核心网的其它路由结点。 曲线 1和曲线 2在到达家乡代理后会继续向外延伸, 最 终所述终端和远处另外一个终端或网络上的一个业务服务器进行通信。
当终端从 WLAN接入网切换到 WiMAX接入网时, 因为终端是工作在单射频模式下, 所以终端会关闭 WiFi射频并打开 WiMAX射频。其中, 终端可以先关闭 WiFi射频再打开 WiMAX射频,这种方式为严格的单收单发模式,即任何时候只会有一个射频电路在工作; 终端也可以先打开 WiMAX射频再关闭 WiFi射频, 在关闭 WiFi射频之前, WiMAX射频仅 作收听工作, 这种方式为双收单发模式, 也属于单射频工作模式。双收单发的工作模式 可以使得终端在决定切换之前先侦听一下 WiMAX信号, 以便终端可以判断是否可向 WiMAX切换。
不管是单收单发模式还是双收单发模式, 终端如果决定通过 WiMAX射频发送信息, 就必须关闭 WiFi射频, 至少是禁止 WiFi射频的发送。 从终端停止通过 WiFi收发数据 到可以通过 WiMAX收发数据过程中, 终端与远端(远处另外一个终端或网络上的一个业 务服务器) 的通信可能被迫暂时中断, 这个中断的时间越长, 用户体验越差。 其中, 终 端切换到 WiMAX接入网在可以收发数据之前, 必须进行 WiMAX的接入认证, 即必须接受 图 3中的 WiMAX接入网内的认证器(又称认证者)的认证,而认证器又使用了位于 WiMAX 核心网中的认证服务器对终端进行认证(用户的信息实际上位于认证服务器或其附属的 数据库中); 完成认证后, 终端还要在 WiMAX接入网获得新的 IP连接, 然后才可以继续 进行通信。
如果在终端切换到 WiMAX射频之后, 再进行 WiMAX的接入认证, 则通信中断的时间 会较长。 为此, 本发明实施例将 WiMAX接入认证的过程提前到切换射频前在 WLAN接入 网进行,在 WLAN接入网进行 WiMAX接入认证的同时通信可以继续正常进行,完成 WiMAX 接入认证后再向 WiMAX射频切换, 这样可缩短切换射频后终端与网络通信中断的时间, 提高用户使用体验, 下面参见图 4, 对本发明实施例提供的方法的具体实现过程进行详 细描述:
301: 终端查找支持单射频的切换服务器, 并与查找到的切换服务器建立安全的通 信通道
其中, 终端查找切换服务器的方法可以有多种, 比如可以通过 DHCP协议发现切换 服务器的地址, 或者通过 DNS解析的方式, 本发明实施例对查找切换服务器的方式不作 限制。 另外, 如果终端在初始入网时已经获得切换服务器的地址, 则此步骤不需要。
302:终端在 WLAN路径上向切换服务器发送切换请求,获取目标 WiMAX基站的标识。 其中, 本发明实施例中工作在单射频模式下的多模终端, 当前采用 WiFi 的接入技 术, 通过 WLAN接入网接入到 WiMAX的核心网。 当满足一定的触发条件时, 需要切换到 WiMAX的接入方式, 即切换到通过 WiMAX接入网接入到 WiMAX核心网。 其中, 本发明实 施例中一定的触发条件, 可以是终端发现 WLAN的信号较弱, 自动决定向 WiMAX接入网 切换, 或者用户主动操作切换到 WiMAX接入网, 也可能是网络要求终端向 WiMAX接入网 切换。
其中, 终端获取目标 WiMAX基站的过程, 具体有如下几种实现方式:
( 1 ) 参见图 5, 当终端采用单收单发模式时, 可以采用如下过程获取目标 WiMAX 基站:
401: 终端经 WLAN接入网向切换服务器发送切换请求消息, 该请求消息中包含终端 当前连接的 WiFi接入点标识, 即 BSSID (Basic Service Set Identification, 基本服 务集标识), 这个标识实际上就是 WiFi接入点的 MAC地址。 切换请求消息中还可以包含 用户标识。
402: 切换服务器向认证服务器查询一下用户是否有切换到 WiMAX接入网的权限。 其中, 本步骤可以执行也可以不执行直接执行步骤 403, 如果要做执行该步骤的检 查, 终端在切换请求中需要包含用户标识信息, 这个用户标识是 WiMAX 要求的 NAI (Network Access Identity, 网络接入标识) 信息。 NAI是一个内容包含用户名和所在 网络名、格式类似电子邮箱地址的字符串,详细可查阅 WiMAX相关规范,这里不再赘述。 切换服务器也可以专门给终端发一个消息要求终端将用户标识信息发送过来,终端收到 该消息后再向切换服务器发送用户标识信息。
如果切换服务器发现该用户不能切换到 WiMAX接入网,则向终端返回响应消息拒绝 切换请求。 403: 切换服务器利用终端发来的 BSSID 信息, 向位置配置服务器查询候选目标 WiMAX基站信息。
其中,位置配置服务器存储了本网络中可用的所有 WiMAX基站的位置信息以及所有 WiFi接入点的位置信息。如果存在一个 WiMAX基站,其信号覆盖范围即该 WiMAX基站的 位置信息包含了终端当前连接的 WiFi接入点的信号覆盖范围即该 WiFi接入点的位置信 息, 则该基站是一个候选目标 WiMAX基站。
位置配置服务器也可以直接存储本网络中可用的每个 WiMAX 基站覆盖到的所有 WiFi接入点的关系表,这样,就可以直接通过 WiFi接入点的标识找到目标 WiMAX基站, 而不用通过位置计算。
位置配置服务器可以是切换服务器内部的一个功能模块。
404:切换服务器将查到的候选目标 WiMAX基站在切换请求响应消息中经 WLAN接入 网发送给终端。
其中, 候选目标 WiMAX基站可能有多个, 终端可以在切换请求中添加预设的选择规 贝 |J, 例如在切换请求中包含终端运动方向信息, 以便切换服务器找到一个最合适的目标 WiMAX基站, 例如: 终端此时正在从南向北移动, 则可以在切换请求中添加用户的运动 方向, 切换服务器获取终端的切换请求中的运动方向信息, 可以在多个候选目标 WiMAX 基站选择出用户运动方向那一侧的基站。
(2)参见图 6, 当终端采用单收单发模式时, 获取目标 WiMAX基站还可以通过如下 方式实现, 具体过程如下:
501: 终端经 WLAN接入网向切换服务器发送查询目标 WiMAX基站的请求消息, 该请 求消息中包含终端当前连接的 WiFi接入点的标识 BSSID。
502:切换服务器通过 BSSID向位置配置服务器查询能覆盖终端当前连接的 WiFi接 入点覆盖范围的 WiMAX基站。
其中,切换服务器通过 BSSID向位置配置服务器查询的能覆盖终端当前连接的 WiFi 接入点覆盖范围的 WiMAX基站这样的基站为终端要切换的候选目标 WiMAX基站,候选目 标 WiMAX 基站可能没有、 也可能有 1 个或多个, 查询结果用基站的标识 BSID (Base Station IDentity, 基站的标识) 表示。
503: 切换服务器将查询结果经 WLAN接入网返回给终端, 如果结果为空, 终端终止 流程; 否则, 执行步骤 504。
504: 终端从查询结果中选择出一个基站 BSID作为目标 WiMAX基站 BSID, 经 WLAN 接入网向切换服务器发送切换请求,该请求消息中包含选择的目标 WiMAX基站 BSID,还 可以包含终端的标识信息。
其中, 当查询结果中有多个候选目标 WiMAX基站的 BSID时, 终端从中选择一个一 个基站 BSID作为目标 WiMAX基站 BSID, 其中终端可以按照当前终端的运动方向、 信号 强弱等进行选择, 也可以随机从中选择一个, 本发明实施例对选择目标 WiMAX基站的方 式不作限制。
505: 切换服务器根据用户标识信息, 向认证服务器查询该用户是否有权限使用 WiMAX接入服务。 其中, 该步骤可以执行也可以不执行直接执行后续步骤。
506: 切换服务器此时也可以通过 BSID查询是否存在对应的目标 WiMAX基站。 该步 骤可以执行也可以不执行直接执行后续步骤。
上述步骤 505和步骤 506可以选择执行也可以省略直接执行后续的步骤,且本发明 实施例不限制先后顺序, 即也可以先执行步骤 506, 再执行步骤 505。
507: 切换服务器经 WLAN接入网返回切换请求响应, 如果请求切换的用户无权限使 用 WiMAX接入服务, 或目标 WiMAX基站不存在, 则在响应消息中表示拒绝该切换请求, 否则同意此切换请求。
( 3) 参见图 7, 当终端采用双收单发模式时, 可以使用下述方法获取目标 WiMAX 基站, 具体过程如下:
601: 终端打开 WiMAX接收电路, 此时终端在 WiFi射频上继续正常通信。
其中,如果终端不支持对 WiMAX收发电路的单独控制,也可以打开 WiMAX射频电路, 但此时 WiMAX射频电路不发送任何 WiMAX信号。
602: 终端在不同的频点上侦听 WiMAX基站发送的广播消息。
603: 终端收到 WiMAX基站的广播消息后, 从广播消息中的内容判断该基站是否为 本终端当前业务的目标 WiMAX基站, 如果是, 执行步骤 604; 否则, 执行步骤 602继续 在下一个频点侦听 WiMAX基站发送的广播消息。
其中, 终端收到 WiMAX基站的广播消息后, 从广播消息中的内容判断该基站是否为 本终端当前业务的目标 WiMAX基站, 即如果终端切换到该目标 WiMAX基站后, 终端当前 业务可保持连续性。如果不能,回到步骤 602继续在下一个频点上侦听基站的广播消息, 直到找到一个目标 WiMAX基站。另外,如果找不到目标 WiMAX基站,流程结束,关闭 WiMAX 接收电路。
其中, 在找到目标 WiMAX基站之后, 终端可以暂时关闭 WiMAX接收电路, 以节约用 电, 到完成经 WLAN接入网的 WiMAX接入认证之后再打开 WiMAX射频。 终端也可以不关 闭 WiMAX接收电路, 直到完成经 WLAN接入网的 WiMAX接入认证之后再打开 WiMAX发射 电路。
604: 终端经 WLAN接入网向切换服务器发送切换请求消息, 该请求消息中包含目标 WiMAX基站的标识 BSID, 还可以包含终端的标识信息。
605: 切换服务器可以通过切换请求消息中的用户标识信息查询该用户是否有权限 使用 WiMAX接入服务。 其中, 该步骤可以执行也可以不执行直接执行后续步骤。
606:切换服务器可以通过切换请求消息中的 BSID查询是否存在这样的基站。其中, 该步骤可以执行也可以不执行直接执行后续步骤。
上述步骤 605和步骤 606可以选择执行也可以省略直接执行后续的步骤,且本发明 实施例不限制先后顺序, 即也可以先执行步骤 606, 再执行步骤 605。
607: 切换服务器经 WLAN接入网返回切换请求响应, 如果请求切换的用户无权限使 用 WiMAX接入服务, 或目标 WiMAX基站不存在, 则在切换请求响应消息中表示拒绝该切 换请求; 否则, 同意该切换请求。
303: 终端和切换服务器建立第一隧道。
其中, 终端和切换服务器建立一条隧道, 为了便于说明这里称为第一隧道, 切换服 务器在第一隧道建立后作为一个虚拟 WiMAX基站工作,第一隧道中传递终端和切换服务 器即虚拟基站之间通过 R1接口传递的数据。
终端和 WiMAX接入网之间交互信令消息是直接在链路层(二层)上进行的, 而本发 明实施例要求终端通过切换服务经过 WLAN接入网进行 WiMAX接入认证的过程是在 IP层 即三层上交互的, 因此需要将 WiMAX接入认证的二层报文封装到在 WLAN网络传输的三 层报文之中, 即将 WiMAX的二层报文作为 WLAN网络中的 IP报文的数据来传输。具体的 隧道形式本发明实施例不作限制。
其中, 也可以先执行步骤 303再执行步骤 302, 即终端和切换服务器先建立第一隧 道, 然后终端再通过建立的第一隧道向切换服务器发送切换请求。
304: 如果需要切换服务器和认证器可以建立第二隧道。
其中, 切换服务器和认证器建立一条隧道, 为了便于区分这里称为第二隧道, 第二 隧道中传递虚拟基站即切换服务器和认证器之间的 R6接口传递的数据。
其中, 当切换服务器在 WiMAX核心网中时, 切换服务器可与 WiMAX接入网中的认证 器建立第二隧道。 当切换服务器在 WiMAX接入网中时, 切换服务器只需要与终端建立第 一隧道即可, 而无需执行该步骤。
305: 终端通过步骤 303 建立的第一隧道, 与切换服务器即虚拟基站进行测距
(Ranging)过程。 其中, 测距是终端的 WiMAX接入过程中的第一步。
306: 终端通过步骤 303 建立的第一隧道与切换服务器即虚拟基站进行 SBC (Subscriber Station Basic Capability, 用户站即用户终端基本能力) 协商, 交换 能力信息, 该信息主要包括 WiMAX网络中使用的 PKM (Privacy Key Management, 密钥 管理) 协议的版本、 认证策略。
其中, 终端向切换服务器发送 WiMAX规范中所说的 SBC请求消息, 然后切换服务器 向终端返回 SBC响应消息; SBC协商交互原来发生于终端与基站的空口之上, 现在在终 端与切换服务器之间的第一隧道中交互。
其中, SBC请求消息中包含终端请求的各种参数信息, 包括 PKM版本、 认证策略、 有关物理参数、 终端上下行调制方式等。 在本发明实施例的该步骤中, 终端只需在 SBC 请求消息中包含此时终端所必须请求的参数认证协议版本、 认证策略即可。 当然, 终端 也可以发送包含所有参数信息的 SBC请求消息,然后切换服务器忽略终端不需要的参数 信息, 或者切换服务器响应终端所请求的所有参数信息, 但终端忽略不用的信息即可。
切换服务器可以与 WiMAX认证器交互获得 WiMAX网络中使用的协议版本等信息,也 可以从预先配置好的数据表中获取, 本发明实施例对于切换服务器具体如何获知 WiMAX 认证器和 /或 WiMAX基站支持的协议版本信息不作限制, 而通过步骤 302的交互, 切换 服务器已获知这些信息。
307: 认证器通过切换服务器发送 EAP请求 /标识消息给终端, 该消息中包含终端的 标识信息; 终端收到 EAP请求 /标识消息后, 通过切换服务器向认证器发送 EAP响应 /标 识消息, 消息中包含终端的 NAI (Network Access Identifier, 网络接入标识)。
终端收到 EAP请求 /标识消息后, 向认证器返回 EAP响应 /标识消息, EAP响应 /标识 消息中包含终端的 NAI, NAI是一个包含用户名和所在网络名, 格式类似电子邮箱地址 的字符串 (username@realm), 详细可查阅 WiMAX相关规范, 这里不再赘述。 由于基站 在 EAP认证过程中充当 EAP中继的作用, 因此从虚拟基站发向认证器, 以及认证器发向 虚拟基站的 EAP报文都封装成了 EAP中继的格式 (EAPJTransf er)。 认证器会把终端响 应的标识符通过 RADIUS等协议封装后送给认证服务器。
308: 终端和认证器进行 EAP认证过程。
其中, 认证器收到终端通过切换服务器发送的 EAP响应 /标识消息后, 将 EAP响应 / 标识消息转发到认证服务器,认证器也可以将 EAP响应消息中包含的内容例如 EAP响应 /标识消息中包含的 NAI取出, 使用其它协议封装后发给认证服务器; 认证服务器收到 NAI后, 对终端用户进行认证工作。 309: 终端和认证器的 EAP认证成功后, 认证器会将认证成功 EAP-Success消息通 过切换服务器中继后发送给终端。
310: 认证服务器和终端进行双向认证并协商得到 MSK (Master Session Key, 主会 话密钥);认证器根据认证服务器发送的 MSK和终端协商得到 PMK(Pairwise Master Key, 成对结点间的主密钥)和 AK (Authorization Key, 授权密钥); 认证器将 AK传递给切 换服务器上的模拟 WiMAX基站; 终端和切换服务器进行 TEK (Traffic Encryption Key, 报文加密密钥)三次握手过程。
其中, 认证服务器和终端协商还得到 EMSK (Extended Master Session Key, 扩展 主会话密钥), EMSK作为扩展之用; 认证服务器把 MSK传递给认证器, EMSK保留在认证 服务器上。根据 802. 16e协议,终端和认证器使用 MSK,产生出一个 PMK。而终端和 HAAA 根据 EMSK产生移动性密钥。
PMK是在 MSK基础上生成的, 作为认证器和终端之间的主密钥, 在终端切换基站时 PMK可保持不变; AK是在 PMK基础上产生的, 是终端与基站之间的密钥, 终端切换目标 WiMAX基站时需要产生新的 AK。需要注意的是,认证器是从认证服务器那里收到 MSK的, 而 MSK是终端和认证服务器协商密钥过程中计算出来的,终端和认证器应该拥有相同的 MSK, 否则, 双方协商 PMK的过程就会失败。
在本发明实施例认证过程, 切换服务器模拟了基站的行为, 认证器应该将 AK发送 给切换服务器上的模拟 WiMAX基站。
其中, TEK三次握手过程由三个消息组成, 首先是切换服务器向终端发送一个 TEK 挑战消息,之后终端向切换服务器发送一个 TEK请求消息,最后切换服务器再回一个 TEK 响应消息。 通过这三个消息的交互, 实际上完成了终端与切换服务器之间的双向认证, 这是基于 AK的基础上进行的, 如果切换服务器上的模拟 WiMAX基站与终端不拥有相同 的 AK, 则无法完成 TEK握手过程。
311: 切换服务器上的模拟 WiMAX基站分别通过第一隧道与终端以及通过第二隧道 和 WiMAX接入网网关交互, 完成了数据路径的注册和业务流的建立。
312: 终端发送请求消息, 进入空闲 Idle工作模式。
其中, 该步骤是为了终端切换到 WiMAX射频, 寻找真实的目标 WiMAX基站做准备。 313: 拆除终端和切换服务器之间的隧道以及切换服务器和认证器之间的隧道。 其中, 如果不中 304中没有建立切换服务器和认证器之间的隧道, 此时则不需要拆 除。
314: 终端通过切换服务器向家乡代理发送链接保持请求, 家乡代理收到此请求后 就暂时为终端缓存发向终端的数据。
其中, 终端通过切换服务器向家乡代理发送链接保持请求, 用于通知家乡代理终端 要执行切换, 会存在短暂的中断, 家乡代理收到此请求后就暂时为终端缓存发向终端的 数据。 另外, 切换服务器还可以直接向家乡代理发送连接保持请求, 通知家乡代理终端 要执行切换。
315: 终端打开 WiMAX射频, 关闭 WiFi射频。
此时, 终端切换到 WiMAX接入网。
316: 终端扫描并选定目标 WiMAX基站, 退出 Idle模式, 执行快速入网过程。 317:终端开始获取 CoA Care of Address,移动 IP转交地址)地址并进行 MIP(Mobile IP, 移动 IP) 注册。
其中, 由于 WiMAX支持 PMIP及 CMIP两种 MIP技术, 两种 MIP的 IP地址获取方式 稍有不同, 如果是 PMIP, 则采用 DHCP过程, 将 FA的 CoA注册到 HA上, 与 HoA进行绑 定; 如果是 CMIP, 则使用 MIP消息获取终端的 CoA, 并将 CoA注册到 HA上, 与 HoA进 行绑定;
318: 终端向切换服务器发送资源释放请求, 要求释放 WiFi接入网络的相关资源。 至此, 终端就完成了所有切换工作, 可以工作在 WiMAX信道上, 终端也可以通过 WiMAX接入网向通信对端发送报文, 进行数据通信, 即图 2曲线 2的状态。
上述流程只是为了方便理解而给出的一个具体实施例,不作为对本发明实施例的限 制。
本发明实施例提供的方法, 单射频的多模终端从 WiFi网络切换到 WiMAX网络前, 通过在 WiFi接入路径上与切换服务器完成 WiMAX入网过程, 减少了 WiMAX、 WiFi多模 终端从 WLAN接入网向 WiMAX接入网切换的延时, 提高了用户的使用体验。 实施例 4
本发明实施例提供了一种接入网的切换系统, 参见图 8, 该系统包括: 终端 701和 切换服务器 702,
终端 701, 用于获取切换的目标 WiMAX基站标识; 通过 WLAN接入网向切换服务器 702发送切换请求, 请求中携带目标 WiMAX基站的标识; 和切换服务器 702建立第一隧 道; 通过第一隧道与切换服务器 702进行认证, 切换到目标 WiMAX基站的标识对应的 WiMAX接入网中;
切换服务器 702,用于通过 WLAN接入网接收终端 701发送的切换请求,请求中携带 目标 WiMAX基站的标识; 和终端 701建立第一隧道;
通过第一隧道与终端 701进行认证, 以使得终端 701切换到目标 WiMAX基站的标识 对应的 WiMAX接入网中。
其中, 终端 701, 具体用于通过第一隧道与切换服务器 702进行测距; 通过第一隧 道与切换服务器 702进行用户终端 701基本能力 SBC协商, 交换能力信息, 能力信息包 括密钥管理 PKM协议的版本和认证策略; 接收认证器发送的 EAP请求 /标识消息后, 通 过切换服务器 702返回 EAP响应 /标识消息给认证器, EAP响应 /标识消息中包含终端 701 的用户标识信息; 在认证服务器根据收到的 EAP响应 /标识消息中的用户标识信息对用 户认证通过后,与认证服务器通过切换服务器 702进行双向认证并协商得到主会话密钥 MSK;根据 MSK,与认证器通过切换服务器 702协商得到成对结点间的主密钥 PMK和授权 密钥 AK; 在认证器将 AK传给切换服务器 702的模拟 WiMAX基站后, 与模拟 WiMAX基站 通过第一隧道进行报文加密密钥 TEK交换; 与模拟 WiMAX基站以及 WiMAX接入网网关通 过第一隧道完成数据路径的注册和业务流的建立; 打开 WiMAX射频, 关闭 WiFi射频。
其中, 切换服务器 702, 用于通过第一隧道与终端 701进行测距; 通过第一隧道与 终端 701进行 SBC协商, 交换能力信息, 能力信息包括密钥管理 PKM协议的版本和认证 策略; 接收终端 701认证器发送的 EAP请求 /标识消息, 并转发 EAP响应 /标识消息给认 证器, EAP响应 /标识消息中包含终端 701的用户标识信息;和终端 701通过第一隧道进 行 TEK交换; 通过第一隧道与终端 701进行数据路径的注册和业务流的建立。
其中, 当切换服务器 702在 WiMAX核心网中时,切换服务器 702,用于在与终端 701 在建立第一隧道后, 与 WiMAX接入网中的认证器建立第二隧道; 或者, 切换服务器 702, 用于先与认证器建立第二隧道, 再与终端 701建立第一隧道。
其中,切换服务器 702,用于终端 701发送的切换请求中包含当前连接的 WiFi接入 点标识时, 利用当前连接的 WiFi接入点标识, 查询候选目标 WiMAX基站标识; 如果查 找到至少一个候选目标 WiMAX基站标识, 则根据预设的选择规则, 选择其中一个候选目 标 WiMAX基站作为目标 WiMAX基站; 向终端 701发送切换响应, 切换响应中包含从至少 一个候选目标 WiMAX基站中选择的目标 WiMAX基站标识。
其中, 切换服务器 702, 用于接收终端 701通过 WLAN接入网发送的查询请求, 查询 请求中包含终端 701当前连接的 WiFi接入点标识; 通过查询请求中终端 701当前连接 的 WiFi接入点标识, 查询候选目标 WiMAX基站标识; 通过 WLAN接入网将查询结果返回 给终端 701, 如果终端 701接收到的查询结果为至少一个候选目标 WiMAX基站标识, 则 终端 701根据预设的选择规则从查询结果中选择出一个候选目标 WiMAX基站标识作为目 标 WiMAX基站标识。
其中, 终端 701, 用于打开 WiMAX接收电路, 在不同的频点上侦听 WiMAX基站发送 的广播消息; 收到 WiMAX基站的广播消息后, 从广播消息中的内容判断发送广播消息的 基站是否为终端 701当前的目标 WiMAX基站, 如果是, 则通过 WLAN接入网向切换服务 器 702发送切换请求消息; 否则, 继续在下一个频点侦听 WiMAX基站发送的广播消息。
本发明实施例提供的系统, 单射频的多模终端从 WiFi网络切换到 WiMAX网络前, 通过在 WiFi接入路径上与切换服务器完成 WiMAX入网过程, 减少了 WiMAX、 WiFi多模 终端从 WLAN接入网向 WiMAX接入网切换的延时, 提高了用户的使用体验。 实施例 5
本发明实施例提供了一种接入网的切换系统, 终端为单射频无线保真 WiFi/微波存 取全球互通 WiMAX多模终端, 切换为从无线局域网 WLAN接入网切换到 WiMAX接入网, 参见图 9, 该系统包括: 终端 801和切换服务器 802,
终端 801, 用于获取切换的目标 WiMAX基站; 通过 WLAN接入网向切换服务器 802 发送切换请求,切换请求中携带目标 WiMAX基站标识;和切换服务器 802建立第一隧道; 通过第一隧道与切换服务器 802进行测距;通过第一隧道与切换服务器 802进行用户终 端 801基本能力 SBC协商, 交换能力信息, 能力信息包括密钥管理 PKM协议的版本和认 证策略; 接收认证器发送的 EAP请求 /标识消息后, 通过切换服务器 802返回 EAP响应 / 标识消息给认证器, EAP响应 /标识消息中包含终端 801的用户标识信息;在认证服务器 根据收到的 EAP响应 /标识消息中的用户标识信息对用户认证通过后, 与认证服务器通 过切换服务器 802进行双向认证并协商得到主会话密钥 MSK; 根据 MSK, 与认证器通过 切换服务器 802协商得到成对结点间的主密钥 PMK和授权密钥 AK; 在认证器将 AK传给 切换服务器 802的模拟 WiMAX基站后,和模拟 WiMAX基站通过第一隧道进行报文加密密 钥 TEK交换; 与模拟 WiMAX基站以及 WiMAX接入网网关通过第一隧道完成数据路径的注 册和业务流的建立; 打开 WiMAX射频, 关闭 WiFi射频;
切换服务器 802, 用于通过 WLAN接入网接收终端 801发送的切换请求; 与终端 801 建立第一隧道;经过第一隧道的消息都是切换服务器 802上的模拟 WiMAX基站接收和发 送的; 通过第一隧道与终端 801进行测距; 通过第一隧道与终端 801进行 SBC协商, 交 换能力信息, 能力信息包括密钥管理 PKM协议的版本和认证策略; 接收终端 801认证器 发送的 EAP请求 /标识消息,并转发 EAP响应 /标识消息给认证器, EAP响应 /标识消息中 包含终端 801的用户标识信息; 和终端 801通过第一隧道进行 TEK交换; 通过第一隧道 与终端 801进行数据路径的注册和业务流的建立。
其中, 当切换服务器 802在 WiMAX核心网中时,切换服务器 802,用于在与终端 801 在建立第一隧道后, 与 WiMAX接入网中的认证器建立第二隧道; 或者, 切换服务器 802, 用于先与认证器建立第二隧道, 再与终端 801建立第一隧道。
其中, 终端 801, 还用于在终端 801关闭 WiFi射频之前, 向切换服务器 802发送切 换射频的通知消息。
其中, 当切换服务器 802上的模拟 WiMAX基站收到 AK或者收到终端 801向切换服 务器 802发送切换射频的通知消息后, 切换服务器 802向家乡代理发送连接保持请求, 以使得家乡代理收到连接保持请求后暂时为终端 801缓存发向终端 801的数据。
其中, 终端 801, 还用于与模拟 WiMAX基站以及 WiMAX接入网网关经第一隧道完成 数据路径的注册和业务流的建立之后, 发送请求消息, 请求进入空闲状态, 以使得在终 端 801进入空闲状态后, 切换服务器 802拆除与终端 801建立的第一隧道。
其中, 终端 801, 还用于打开 WiMAX射频, 关闭 WiFi射频之后, 查找目标 WiMAX 基站标识对应的目标 WiMAX基站, 退出空闲状态, 并执行快速入网过程; 获取移动 IP 转交地址, 并进行移动 IP注册。
其中, 终端 801, 还用于获取移动 IP转交地址, 并进行移动 IP注册之后, 向切换 服务器 802发送资源释放请求, 请求释放 WiFi接入网的相关资源。
其中, 终端 801, 还用于查找支持的单射频的切换服务器 802, 并与查找到的切换 服务器 802建立安全的通信通道。
其中, 终端 801为单收单发 WiFi/ WiMAX多模终端 801, 切换请求中包含当前连接 的 WiFi接入点标识时,
切换服务器 802,还利用终端 801发送的切换请求中包含的当前连接的 WiFi接入点 标识, 查询候选目标 WiMAX基站标识;
如果查找到至少一个候选目标 WiMAX基站标识,则切换服务器 802根据预设的选择 规则, 选择其中一个候选目标 WiMAX基站作为目标 WiMAX基站; 切换服务器 802向终端 801发送切换响应,切换响应中包含从至少一个候选目标 WiMAX基站中选择的目标 WiMAX 基站标识;
如果没有查找到候选目标 WiMAX基站标识,则切换服务器 802向终端 801发送的切 换响应中目标 WiMAX基站信息为空, 以使终端 801接收到目标 WiMAX基站信息为空的切 换响应后, 结束流程; 或者, 切换服务器 802向终端 801发送的切换响应中表示拒绝切 换请求, 以使终端 801接收到拒绝切换的切换响应后, 结束流程。 其中, 终端 801为单收单发 WiFi/ WiMAX多模终端 801时,
切换服务器 802,还用于接收终端 801通过 WLAN接入网发送的查询请求,查询请求 中包含终端 801当前连接的 WiFi接入点标识;通过查询请求中终端 801当前连接的 WiFi 接入点标识, 查询候选目标 WiMAX基站标识; 通过 WLAN接入网将查询结果返回给终端 801, 如果终端 801接收到的查询结果为空, 则终端 801结束流程; 否则终端 801根据 预设的选择规则从查询结果中选择出一个候选目标 WiMAX基站标识作为目标 WiMAX基站 标识。
其中, 终端 801为双收单发 WiFi/ WiMAX多模终端 801时,
终端 801, 还用于打开 WiMAX接收电路, 在不同的频点上侦听 WiMAX基站发送的广 播消息; 收到 WiMAX基站的广播消息后, 从广播消息中的内容判断发送广播消息的基站 是否为终端 801当前的目标 WiMAX基站,如果是,则通过 WLAN接入网向切换服务器 802 发送切换请求消息; 否则, 继续在下一个频点侦听 WiMAX基站发送的广播消息。
本发明实施例提供的系统, 单射频的多模终端从 WiFi网络切换到 WiMAX网络前, 通过在 WiFi接入路径上与切换服务器完成 WiMAX入网过程, 减少了 WiMAX、 WiFi多模 终端从 WLAN接入网向 WiMAX接入网切换的延时, 提高了用户的使用体验。 实施例 6
本发明实施例提供了一种单射频无线保真 WiFi/微波存取全球互通 WiMAX多模终端 设备, 当终端从无线局域网 WLAN接入网切换到 WiMAX接入网, 参见图 10, 该终端设备 包括:
第一发送模块 901,用于获取切换的目标 WiMAX基站标识,通过 WLAN接入网向切换 服务器发送切换请求, 切换请求中携带目标 WiMAX基站标识;
第一建立模块 902, 用于和切换服务器建立第一隧道;
第一测距模块 903, 用于通过第一隧道与切换服务器进行测距;
第一协商模块 904, 用于通过第一隧道与切换服务器进行用户终端基本能力 SBC协 商, 交换能力信息, 能力信息包括密钥管理 PKM协议的版本和认证策略;
第一请求模块 905,通过切换服务器接收认证器发送的 EAP请求 /标识消息,并通过 切换服务器返回 EAP响应 /标识消息给认证器, EAP响应 /标识消息中包含终端的用户标 识信息;
第一认证模块 906,用于在认证服务器根据收到的 EAP响应 /标识消息中的用户标识 信息对用户认证通过后,与认证服务器通过切换服务器进行双向认证并协商得到主会话 密钥 MSK;
第一生成模块 907, 用于根据 MSK, 与认证器通过切换服务器协商得到成对结点间 的主密钥 PMK和授权密钥 AK;
第一交换模块 908,用于在认证器将 AK传给切换服务器的模拟 WiMAX基站后,与模 拟 WiMAX基站通过第一隧道进行报文加密密钥 TEK交换;
第一切换模块 909, 用于与模拟 WiMAX基站以及 WiMAX接入网网关通过第一隧道完 成数据路径的注册和业务流的建立; 在数据路径的注册和业务流的建立后, 打开 WiMAX 射频, 关闭 WiFi射频。
其中, 终端具体为单收单发 WiFi/ WiMAX多模终端; 或, 双收单发 WiFi/ WiMAX多 模终端, 当终端为双收单发 WiFi/ WiMAX多模终端时, 第一发送模块, 包括:
侦听单元, 用于终端打开 WiMAX接收电路, 在不同的频点上侦听 WiMAX基站发送的 广播消息;
判断单元, 用于终端收到 WiMAX基站的广播消息后, 从广播消息中的内容判断发送 广播消息的基站是否为终端当前的目标 WiMAX基站, 如果是, 则通过 WLAN接入网向切 换服务器发送切换请求消息;否则,继续在下一个频点侦听 WiMAX基站发送的广播消息。
本发明实施例提供的终端设备, 单射频的多模终端从 WiFi网络切换到 WiMAX网络 前, 通过在 WiFi接入路径上与切换服务器完成 WiMAX入网过程, 减少了 WiMAX、 WiFi 多模终端从 WLAN接入网向 WiMAX接入网切换的延时, 提高了用户的使用体验。 实施例 7
本发明实施例提供了一种切换服务器设备, 当单射频无线保真 WiFi/微波存取全球 互通 WiMAX多模终端从无线局域网 WLAN接入网切换到 WiMAX接入网, 参见图 11, 该切 换服务器设备包括:
第一接收模块 1001, 用于通过 WLAN接入网接收终端发送的切换请求;
第二建立模块 1002, 用于与终端建立第一隧道;
第二测距模块 1003, 用于通过第一隧道与终端进行测距;
第二协商模块 1004, 用于通过第一隧道与终端进行 SBC协商, 交换能力信息, 能力 信息包括密钥管理 PKM协议的版本和认证策略;
第二请求模块 1005,接收终端认证器发送的 EAP请求 /标识消息,并转发 EAP响应 / 标识消息给认证器, EAP响应 /标识消息中包含终端的用户标识信息;
第二交换模块 1006, 用于在认证器将 AK传给切换服务器的模拟 WiMAX基站后, 和 终端通过第一隧道进行报文加密密钥 TEK交换;
第一注册模块 1007,通过第一隧道与终端以及与 WiMAX接入网网关进行数据路径的 注册和业务流的建立。
其中, 当切换服务器在 WiMAX核心网中时, 切换服务器, 用于在与终端在建立第一 隧道后, 与 WiMAX接入网中的认证器建立第二隧道; 或者, 切换服务器, 用于先与认证 器建立第二隧道, 再与终端建立第一隧道。
其中, 终端具体为单收单发 WiFi/ WiMAX多模终端或双收单发 WiFi/ WiMAX多模终 端, 当终端为单收单发 WiFi/ WiMAX多模终端, 终端发送的切换请求中包含当前连接的 WiFi接入点标识时, 第一接收模块, 具体包括:
第一查询单元,用于切换服务器利用终端发送的切换请求中包含的当前连接的 WiFi 接入点标识, 查询候选目标 WiMAX基站标识;
第一处理单元, 用于如果切换服务器查找到至少一个候选目标 WiMAX基站标识, 则 切换服务器根据预设的选择规则,选择其中一个候选目标 WiMAX基站作为目标 WiMAX基 站;切换服务器向终端发送的切换响应中包含从至少一个候选目标 WiMAX基站中选择的 目标 WiMAX基站标识;
第二处理单元, 用于如果切换服务器没有查找到候选目标 WiMAX基站标识, 则切换 服务器向终端发送的切换响应中目标 WiMAX基站信息为空, 以使终端接收到目标 WiMAX 基站信息为空的切换响应后, 结束流程; 或者, 切换服务器向终端发送的切换响应中表 示拒绝切换请求, 以使终端接收到拒绝切换的切换响应后, 结束流程。
其中, 终端具体为单收单发 WiFi/ WiMAX多模终端或双收单发 WiFi/ WiMAX多模终 端, 当终端为单收单发 WiFi/ WiMAX多模终端时, 第一接收模块, 具体包括:
第一接收单元, 用于接收终端通过 WLAN接入网发送的查询请求, 查询请求中包含 终端当前连接的 WiFi接入点标识;
第二查询单元, 用于通过查询请求中终端当前连接的 WiFi接入点标识, 查询候选 目标 WiMAX基站标识;
第三处理单元, 用于通过 WLAN接入网将查询结果返回给终端, 如果终端接收到的 查询结果为空, 则终端结束流程; 否则, 终端根据预设的选择规则从查询结果中选择出 一个候选目标 WiMAX基站标识作为目标 WiMAX基站标识。
本发明实施例提供的切换服务器设备,单射频的多模终端从 WiFi网络切换到 WiMAX 网络前,通过在 WiFi接入路径上与切换服务器完成 WiMAX入网过程,减少了 WiMAX、WiFi 多模终端从 WLAN接入网向 WiMAX接入网切换的延时, 提高了用户的使用体验。 本发明实施例可以利用软件实现, 相应的软件程序可以存储在可读取的存储介质 中, 例如, 路由器的硬盘、 缓存或光盘中。
以上所述仅为本发明的较佳实施例, 并不用以限制本发明, 凡在本发明的精神和原 则之内, 所作的任何修改、 等同替换、 改进等, 均应包含在本发明的保护范围之内。
本发明涉及移动通信领域, 特别涉及一种切换接入网的认证方法、 系统和装置。

Claims

权利要求
1、 一种接入网的切换方法, 其特征在于, 所述方法包括:
终端获取切换的目标 WiMAX基站标识;
所述终端通过 WLAN接入网向切换服务器发送切换请求,所述请求中携带目标 WiMAX 基站的标识;
所述终端和所述切换服务器建立第一隧道;
所述终端通过所述第一隧道与所述切换服务器进行认证,切换到所述目标 WiMAX基 站的标识对应的 WiMAX接入网中。
2、 如权利要求 1所述的方法, 其特征在于, 所述终端通过所述第一隧道与所述切 换服务器进行认证, 切换到所述目标 WiMAX基站的标识对应的 WiMAX接入网中, 具体包 括:
所述终端通过所述第一隧道与所述切换服务器进行测距;
所述终端通过所述第一隧道与所述切换服务器进行用户终端基本能力 SBC协商,交 换能力信息, 所述能力信息包括密钥管理 PKM协议的版本和认证策略;
所述终端收到 EAP请求 /标识消息后,通过所述切换服务器返回 EAP响应 /标识消息 给认证器, 所述 EAP响应 /标识消息中包含所述终端的用户标识信息; 所述认证器将所 述用户标识信息发送给 WiMAX核心网中的认证服务器,所述认证服务器根据收到的所述 用户标识信息, 对用户进行认证;
所述终端与所述认证服务器通过所述切换服务器进行双向认证并协商得到主会话 密钥 MSK;
所述认证器接收所述认证服务器发送的 MSK, 通过所述切换服务器与所述终端协商 得到成对结点间的主密钥 PMK和授权密钥 AK;
所述认证器将 AK发送给切换服务器的模拟 WiMAX基站;
所述终端与所述模拟 WiMAX基站通过所述第一隧道进行报文加密密钥 TEK交换; 所述终端与所述模拟 WiMAX基站以及 WiMAX接入网网关经第一隧道完成数据路径的 注册和业务流的建立;
所述终端打开 WiMAX射频, 关闭 WiFi射频, 切换到 WiMAX接入网中。
3、 如权利要求 1所述的方法, 其特征在于, 当所述切换服务器在 WiMAX核心网中 时, 所述切换服务器与所述终端在建立所述第一隧道后, 与所述 WiMAX接入网中的认证 器建立第二隧道; 或者, 所述切换服务器先与所述认证器建立所述第二隧道, 再与所述 终端建立第一隧道。
4、 如权利要求 1所述的方法, 其特征在于, 所述终端获取切换的目标 WiMAX基站 标识, 具体包括:
所述切换请求中包含当前连接的 WiFi接入点标识;
所述切换服务器利用所述终端发送的切换请求中包含的当前连接的 WiFi接入点标 识, 查询候选目标 WiMAX基站标识;
如果所述切换服务器查找到至少一个候选目标 WiMAX基站标识,则所述切换服务器 根据预设的选择规则, 选择其中一个候选目标 WiMAX基站作为目标 WiMAX基站; 所述切 换服务器向所述终端发送切换响应,所述切换响应中包含从至少一个候选目标 WiMAX基 站中选择的目标 WiMAX基站标识。
5、 如权利要求 1所述的方法, 其特征在于, 所述终端获取切换的目标 WiMAX基站 标识, 具体包括:
所述切换服务器接收所述终端通过 WLAN接入网发送的查询请求, 所述查询请求中 包含所述终端当前连接的 WiFi接入点标识;
所述切换服务器通过所述查询请求中所述终端当前连接的 WiFi接入点标识, 查询 候选目标 WiMAX基站标识;
所述切换服务器通过 WLAN接入网将查询结果返回给所述终端, 如果所述终端接收 到的查询结果为至少一个候选目标 WiMAX基站标识,则所述终端根据预设的选择规则从 查询结果中选择出一个候选目标 WiMAX基站标识作为目标 WiMAX基站标识。
6、 如权利要求 1所述的方法, 其特征在于, 所述终端获取切换的目标 WiMAX基站 标识, 具体包括:
所述终端打开 WiMAX接收电路, 在不同的频点上侦听 WiMAX基站发送的广播消息; 所述终端收到 WiMAX基站的广播消息后,从广播消息中的内容判断发送广播消息的 基站是否为所述终端当前的目标 WiMAX基站, 如果是, 则通过 WLAN接入网向所述切换 服务器发送切换请求消息; 否则, 继续在下一个频点侦听 WiMAX基站发送的广播消息。
7、一种接入网的切换方法, 其特征在于, 终端为单射频无线保真 WiFi/微波存取全 球互通 WiMAX多模终端, 所述切换为从无线局域网 WLAN接入网切换到 WiMAX接入网, 所述方法包括:
所述终端获取切换的目标 WiMAX基站标识;
所述终端通过 WLAN接入网向切换服务器发送切换请求,所述请求中携带目标 WiMAX 基站的标识;
所述终端和所述切换服务器建立第一隧道;
所述终端通过所述第一隧道与所述切换服务器进行测距;
所述终端通过所述第一隧道与所述切换服务器进行用户终端基本能力 SBC协商,交 换能力信息, 所述能力信息包括密钥管理 PKM协议的版本和认证策略;
所述终端收到 EAP请求 /标识消息后,通过所述切换服务器返回 EAP响应 /标识消息 给认证器, 所述 EAP响应 /标识消息中包含所述终端的用户标识信息; 所述认证器将所 述用户标识信息发送给 WiMAX核心网中的认证服务器,所述认证服务器根据收到的所述 用户标识信息, 对用户进行认证;
所述终端与所述认证服务器通过所述切换服务器进行双向认证并协商得到主会话 密钥 MSK;
所述认证器接收所述认证服务器发送的 MSK, 通过所述切换服务器与所述终端协商 得到成对结点间的主密钥 PMK和授权密钥 AK;
所述认证器将 AK发送给切换服务器的模拟 WiMAX基站。
所述终端与所述模拟 WiMAX基站通过所述第一隧道进行报文加密密钥 TEK交换; 所述终端与所述模拟 WiMAX基站以及 WiMAX接入网网关经第一隧道完成数据路径的 注册和业务流的建立;
所述终端打开 WiMAX射频, 关闭 WiFi射频。
8、 如权利要求 7所述的方法, 其特征在于, 当所述切换服务器在 WiMAX核心网中 时, 所述切换服务器与所述终端在建立所述第一隧道后, 与所述 WiMAX接入网中的认证 器建立第二隧道; 或者, 所述切换服务器先与所述认证器建立所述第二隧道, 再与所述 终端建立第一隧道。
9、 如权利要求 7所述的方法, 其特征在于, 在所述终端关闭 WiFi射频之前, 所述 终端向所述切换服务器发送切换射频的通知消息。
10、如权利要求 7或 9所述的方法,其特征在于,当所述切换服务器上的模拟 WiMAX 基站收到 AK或者收到所述终端向切换服务器发送切换射频的通知消息后, 所述切换服 务器向所述家乡代理发送连接保持请求, 以使得所述家乡代理收到所述连接保持请求后 暂时为所述终端缓存发向终端的数据。
11、 如权利要求 7所述的方法, 其特征在于, 所述终端与所述模拟 WiMAX基站以及 WiMAX接入网网关经第一隧道完成数据路径的注册和业务流的建立之后, 还包括:
所述终端发送请求消息, 请求进入空闲状态;
所述切换服务器拆除与所述终端建立的第一隧道。
12、如权利要求 11所述的方法,其特征在于,所述终端打开 WiMAX射频,关闭 WiFi 射频之后, 还包括:
所述终端查找所述目标 WiMAX基站标识对应的目标 WiMAX基站, 退出空闲状态, 并 执行快速入网过程;
所述终端获取移动 IP转交地址, 并进行移动 IP注册。
13、 如权利要求 12所述的方法, 其特征在于, 所述终端获取移动 IP转交地址, 并 进行移动 IP注册之后, 还包括:
所述终端向所述切换服务器发送资源释放请求,请求释放 WiFi接入网的相关资源。
14、 如权利要求 7所述的方法, 其特征在于, 所述终端通过 WLAN接入网向切换服 务器发送切换请求之前, 还包括:
所述终端查找支持的单射频的切换服务器,并与查找到的切换服务器建立安全的通 信通道。
15、 如权利要求 7所述的方法, 其特征在于, 所述终端获取切换的目标 WiMAX基站 标识, 具体包括:
所述切换请求中包含当前连接的 WiFi接入点标识;
所述切换服务器利用所述终端发送的切换请求中包含的当前连接的 WiFi接入点标 识, 查询候选目标 WiMAX基站标识;
如果所述切换服务器查找到至少一个候选目标 WiMAX基站标识,则所述切换服务器 根据预设的选择规则, 选择其中一个候选目标 WiMAX基站作为目标 WiMAX基站; 所述切 换服务器向所述终端发送切换响应,所述切换响应中包含从至少一个候选目标 WiMAX基 站中选择的目标 WiMAX基站标识;
如果所述切换服务器没有查找到候选目标 WiMAX基站标识,则所述切换服务器向所 述终端发送的切换响应中目标 WiMAX基站信息为空, 以使所述终端接收到目标 WiMAX基 站信息为空的切换响应后, 结束流程; 或者, 所述切换服务器向所述终端发送的切换响 应中表示拒绝切换请求, 以使所述终端接收到拒绝切换的切换响应后, 结束流程。
16、 如权利要求 7所述的方法, 其特征在于, 所述终端获取切换的目标 WiMAX基站 标识, 具体包括:
所述切换服务器接收所述终端通过 WLAN接入网发送的查询请求, 所述查询请求中 包含所述终端当前连接的 WiFi接入点标识;
所述切换服务器通过所述查询请求中所述终端当前连接的 WiFi接入点标识, 查询 候选目标 WiMAX基站标识;
所述切换服务器通过 WLAN接入网将查询结果返回给所述终端, 如果所述终端接收 到的查询结果为空, 则所述终端结束流程; 否则, 所述终端根据预设的选择规则从查询 结果中选择出一个候选目标 WiMAX基站标识作为目标 WiMAX基站标识。
17、 如权利要求 7所述的方法, 其特征在于, 所述终端获取切换的目标 WiMAX基站 标识, 具体包括:
所述终端打开 WiMAX接收电路, 在不同的频点上侦听 WiMAX基站发送的广播消息; 所述终端收到 WiMAX基站的广播消息后,从广播消息中的内容判断发送广播消息的 基站是否为所述终端当前的目标 WiMAX基站, 如果是, 则通过 WLAN接入网向所述切换 服务器发送切换请求消息; 否则, 继续在下一个频点侦听 WiMAX基站发送的广播消息。
18、 一种接入网的切换系统, 其特征在于, 所述系统包括: 终端和切换服务器, 所述终端, 用于获取切换的目标 WiMAX基站标识; 通过 WLAN接入网向切换服务器 发送切换请求, 所述请求中携带目标 WiMAX基站的标识; 和所述切换服务器建立第一隧 道; 通过所述第一隧道与所述切换服务器进行认证, 切换到所述目标 WiMAX基站的标识 对应的 WiMAX接入网中;
所述切换服务器, 用于通过 WLAN接入网接收所述终端发送的切换请求, 所述请求 中携带目标 WiMAX基站的标识; 和所述终端建立第一隧道; 通过所述第一隧道与所述终 端进行认证,以使得所述终端切换到所述目标 WiMAX基站的标识对应的 WiMAX接入网中。
19、 如权利要求 18所述的系统, 其特征在于,
所述终端, 具体用于通过所述第一隧道与所述切换服务器进行测距; 通过所述第一 隧道与所述切换服务器进行用户终端基本能力 SBC协商, 交换能力信息, 所述能力信息 包括密钥管理 PKM协议的版本和认证策略; 接收认证器发送的 EAP请求 /标识消息后, 通过所述切换服务器返回 EAP响应 /标识消息给认证器,所述 EAP响应 /标识消息中包含 终端的用户标识信息; 在所述认证服务器根据收到的 EAP响应 /标识消息中的用户标识 信息对用户认证通过后,与所述认证服务器通过所述切换服务器进行双向认证并协商得 到主会话密钥 MSK; 根据所述 MSK, 与所述认证器通过所述切换服务器协商得到成对结 点间的主密钥 PMK和授权密钥 AK;在所述认证器将所述 AK传给切换服务器的模拟 WiMAX 基站后, 与所述模拟 WiMAX基站通过所述第一隧道进行报文加密密钥 TEK交换; 与所述 模拟 WiMAX基站以及 WiMAX接入网网关通过所述第一隧道完成数据路径的注册和业务流 的建立; 打开 WiMAX射频, 关闭 WiFi射频。
20、 如权利要求 18所述的系统, 其特征在于,
所述切换服务器, 用于通过所述第一隧道与所述终端进行测距; 通过所述第一隧道 与所述终端进行 SBC协商, 交换能力信息, 所述能力信息包括密钥管理 PKM协议的版本 和认证策略; 接收所述终端认证器发送的 EAP请求 /标识消息, 并转发 EAP响应 /标识消 息给所述认证器, 所述 EAP响应 /标识消息中包含终端的用户标识信息; 和所述终端通 过所述第一隧道进行 TEK交换;通过所述第一隧道与所述终端进行数据路径的注册和业 务流的建立。
21、 如权利要求 18所述的系统, 其特征在于, 当所述切换服务器在 WiMAX核心网 中时, 所述切换服务器, 用于在与所述终端在建立所述第一隧道后, 与所述 WiMAX接入 网中的认证器建立第二隧道; 或者, 所述切换服务器, 用于先与所述认证器建立所述第 二隧道, 再与所述终端建立第一隧道。
22、 如权利要求 18所述的系统, 其特征在于,
所述切换服务器, 用于所述终端发送的切换请求中包含当前连接的 WiFi接入点标 识时, 利用所述当前连接的 WiFi接入点标识, 查询候选目标 WiMAX基站标识; 如果查 找到至少一个候选目标 WiMAX基站标识, 则根据预设的选择规则, 选择其中一个候选目 标 WiMAX基站作为目标 WiMAX基站; 向所述终端发送切换响应, 所述切换响应中包含从 至少一个候选目标 WiMAX基站中选择的目标 WiMAX基站标识。
23、 如权利要求 18所述的系统, 其特征在于,
所述切换服务器, 用于接收所述终端通过 WLAN接入网发送的查询请求, 所述查询 请求中包含所述终端当前连接的 WiFi接入点标识; 通过所述查询请求中所述终端当前 连接的 WiFi接入点标识, 查询候选目标 WiMAX基站标识; 通过 WLAN接入网将查询结果 返回给所述终端,如果所述终端接收到的查询结果为至少一个候选目标 WiMAX基站标识, 则所述终端根据预设的选择规则从查询结果中选择出一个候选目标 WiMAX基站标识作为 目标 WiMAX基站标识。
24、 如权利要求 18所述的系统, 其特征在于,
所述终端, 用于打开 WiMAX接收电路, 在不同的频点上侦听 WiMAX基站发送的广播 消息; 收到 WiMAX基站的广播消息后, 从广播消息中的内容判断发送广播消息的基站是 否为所述终端当前的目标 WiMAX基站, 如果是, 则通过 WLAN接入网向所述切换服务器 发送切换请求消息; 否则, 继续在下一个频点侦听 WiMAX基站发送的广播消息。
25、 一种接入网的切换系统, 其特征在于, 终端为单射频无线保真 WiFi/微波存取 全球互通 WiMAX多模终端,所述切换为从无线局域网 WLAN接入网切换到 WiMAX接入网, 所述系统包括: 终端和切换服务器,
所述终端, 用于获取切换的目标 WiMAX基站; 通过 WLAN接入网向切换服务器发送 切换请求,所述切换请求中携带目标 WiMAX基站标识;和所述切换服务器建立第一隧道; 通过所述第一隧道与所述切换服务器进行测距;通过所述第一隧道与所述切换服务器进 行用户终端基本能力 SBC协商, 交换能力信息, 所述能力信息包括密钥管理 PKM协议的 版本和认证策略; 接收认证器发送的 EAP请求 /标识消息后, 通过所述切换服务器返回 EAP响应 /标识消息给认证器, 所述 EAP响应 /标识消息中包含终端的用户标识信息; 在 所述认证服务器根据收到的 EAP响应 /标识消息中的用户标识信息对用户认证通过后, 与所述认证服务器通过所述切换服务器进行双向认证并协商得到主会话密钥 MSK; 根据 所述 MSK, 与所述认证器通过所述切换服务器协商得到成对结点间的主密钥 PMK和授权 密钥 AK;在所述认证器将所述 AK传给切换服务器的模拟 WiMAX基站后,和所述模拟 WiMAX 基站通过所述第一隧道进行报文加密密钥 TEK交换; 与所述模拟 WiMAX基站以及 WiMAX 接入网网关通过所述第一隧道完成数据路径的注册和业务流的建立; 打开 WiMAX射频, 关闭 WiFi射频;
所述切换服务器, 用于通过 WLAN接入网接收所述终端发送的切换请求; 与所述终 端建立第一隧道;经过第一隧道的消息都是切换服务器上的模拟 WiMAX基站接收和发送 的; 通过所述第一隧道与所述终端进行测距; 通过所述第一隧道与所述终端进行 SBC协 商, 交换能力信息, 所述能力信息包括密钥管理 PKM协议的版本和认证策略; 接收所述 终端认证器发送的 EAP请求 /标识消息, 并转发 EAP响应 /标识消息给所述认证器, 所述 EAP响应 /标识消息中包含终端的用户标识信息; 和所述终端通过所述第一隧道进行 TEK 交换; 通过所述第一隧道与所述终端进行数据路径的注册和业务流的建立。
26、 如权利要求 25所述的系统, 其特征在于, 当所述切换服务器在 WiMAX核心网 中时, 所述切换服务器, 用于在与所述终端在建立所述第一隧道后, 与所述 WiMAX接入 网中的认证器建立第二隧道; 或者, 所述切换服务器, 用于先与所述认证器建立所述第 二隧道, 再与所述终端建立第一隧道。
27、 如权利要求 25所述的系统, 其特征在于, 所述终端, 还用于在所述终端关闭 WiFi射频之前, 向所述切换服务器发送切换射频的通知消息。
28、如权利要求 25或 27所述的方法,其特征在于,当所述切换服务器上的模拟 WiMAX 基站收到 AK或者收到所述终端向切换服务器发送切换射频的通知消息后, 所述切换服 务器向所述家乡代理发送连接保持请求, 以使得所述家乡代理收到所述连接保持请求后 暂时为所述终端缓存发向终端的数据。
29、 如权利要求 25所述的系统, 其特征在于,
所述终端,还用于与所述模拟 WiMAX基站以及 WiMAX接入网网关经第一隧道完成数 据路径的注册和业务流的建立之后, 发送请求消息, 请求进入空闲状态, 以使得在所述 终端进入空闲状态后, 所述切换服务器拆除与所述终端建立的第一隧道。
30、 如权利要求 29所述的系统, 其特征在于, 所述终端, 还用于打开 WiMAX射频, 关闭 WiFi射频之后, 查找所述目标 WiMAX基 站标识对应的目标 WiMAX基站, 退出空闲状态, 并执行快速入网过程; 获取移动 IP转 交地址, 并进行移动 IP注册。
31、 如权利要求 30所述的系统, 其特征在于, 所述终端, 还用于获取移动 IP转交 地址, 并进行移动 IP注册之后, 向所述切换服务器发送资源释放请求, 请求释放 WiFi 接入网的相关资源。
32、 如权利要求 25所述的系统, 其特征在于,
所述终端, 还用于查找支持的单射频的切换服务器, 并与查找到的切换服务器建立 安全的通信通道。
33、 如权利要求 25所述的系统, 其特征在于, 所述终端为单收单发 WiFi/ WiMAX 多模终端, 所述切换请求中包含当前连接的 WiFi接入点标识时,
所述切换服务器, 还利用所述终端发送的切换请求中包含的当前连接的 WiFi接入 点标识, 查询候选目标 WiMAX基站标识;
如果查找到至少一个候选目标 WiMAX基站标识,则所述切换服务器根据预设的选择 规则, 选择其中一个候选目标 WiMAX基站作为目标 WiMAX基站; 所述切换服务器向所述 终端发送切换响应,所述切换响应中包含从至少一个候选目标 WiMAX基站中选择的目标 WiMAX基站标识;
如果没有查找到候选目标 WiMAX基站标识,则所述切换服务器向所述终端发送的切 换响应中目标 WiMAX基站信息为空, 以使所述终端接收到目标 WiMAX基站信息为空的切 换响应后, 结束流程; 或者, 所述切换服务器向所述终端发送的切换响应中表示拒绝切 换请求, 以使所述终端接收到拒绝切换的切换响应后, 结束流程。
34、 如权利要求 25所述的系统, 其特征在于, 所述终端为单收单发 WiFi/ WiMAX 多模终端时,
所述切换服务器, 还用于接收所述终端通过 WLAN接入网发送的查询请求, 所述查 询请求中包含所述终端当前连接的 WiFi接入点标识; 通过所述查询请求中所述终端当 前连接的 WiFi接入点标识, 查询候选目标 WiMAX基站标识; 通过 WLAN接入网将查询结 果返回给所述终端, 如果所述终端接收到的查询结果为空, 则所述终端结束流程; 否则 所述终端根据预设的选择规则从查询结果中选择出一个候选目标 WiMAX基站标识作为目 标 WiMAX基站标识。
35、 如权利要求 25所述的系统, 其特征在于, 所述终端为双收单发 WiFi/ WiMAX 多模终端时,
所述终端, 还用于打开 WiMAX接收电路, 在不同的频点上侦听 WiMAX基站发送的广 播消息; 收到 WiMAX基站的广播消息后, 从广播消息中的内容判断发送广播消息的基站 是否为所述终端当前的目标 WiMAX基站, 如果是, 则通过 WLAN接入网向所述切换服务 器发送切换请求消息; 否则, 继续在下一个频点侦听 WiMAX基站发送的广播消息。
36、 一种单射频无线保真 WiFi/微波存取全球互通 WiMAX多模终端设备, 其特征在 于, 当所述终端从无线局域网 WLAN接入网切换到 WiMAX接入网, 所述终端设备包括: 第一发送模块, 用于获取切换的目标 WiMAX基站标识, 通过 WLAN接入网向切换服 务器发送切换请求, 所述切换请求中携带目标 WiMAX基站标识;
第一建立模块, 用于和所述切换服务器建立第一隧道;
第一测距模块, 用于通过所述第一隧道与所述切换服务器进行测距;
第一协商模块, 用于通过所述第一隧道与所述切换服务器进行用户终端基本能力 SBC协商, 交换能力信息, 所述能力信息包括密钥管理 PKM协议的版本和认证策略; 第一请求模块, 通过所述切换服务器接收认证器发送的 EAP请求 /标识消息, 并通 过所述切换服务器返回 EAP响应 /标识消息给认证器,所述 EAP响应 /标识消息中包含终 端的用户标识信息;
第一认证模块, 用于在所述认证服务器根据收到的 EAP响应 /标识消息中的用户标 识信息对用户认证通过后,与所述认证服务器通过所述切换服务器进行双向认证并协商 得到主会话密钥 MSK;
第一生成模块, 用于根据所述 MSK, 与所述认证器通过所述切换服务器协商得到成 对结点间的主密钥 PMK和授权密钥 AK;
第一交换模块,用于在所述认证器将所述 AK传给切换服务器的模拟 WiMAX基站后, 和所述模拟 WiMAX基站通过所述第一隧道进行报文加密密钥 TEK交换;
第一切换模块,用于与所述模拟 WiMAX基站以及 WiMAX接入网网关通过所述第一隧 道完成数据路径的注册和业务流的建立; 在数据路径的注册和业务流的建立后, 打开 WiMAX射频, 关闭 WiFi射频。
37、如权利要求 36所述的终端设备, 其特征在于, 所述终端具体为单收单发 WiFi/ WiMAX多模终端; 或, 双收单发 WiFi/ WiMAX多模终端, 当所述终端为双收单发 WiFi/ WiMAX多模终端时, 所述第一发送模块, 包括:
侦听单元, 用于所述终端打开 WiMAX接收电路, 在不同的频点上侦听 WiMAX基站发 送的广播消息;
判断单元, 用于所述终端收到 WiMAX基站的广播消息后, 从广播消息中的内容判断 发送广播消息的基站是否为所述终端当前的目标 WiMAX基站, 如果是, 则通过 WLAN接 入网向所述切换服务器发送切换请求消息; 否则, 继续在下一个频点侦听 WiMAX基站发 送的广播消息。
38、 一种切换服务器设备, 其特征在于, 当单射频无线保真 WiFi/微波存取全球互 通 WiMAX多模终端从无线局域网 WLAN接入网切换到 WiMAX接入网, 所述切换服务器设 备包括:
第一接收模块, 用于通过 WLAN接入网接收所述终端发送的切换请求;
第二建立模块, 用于与所述终端建立第一隧道;
第二测距模块, 用于通过所述第一隧道与所述终端进行测距;
第二协商模块, 用于通过所述第一隧道与所述终端进行 SBC协商, 交换能力信息, 所述能力信息包括密钥管理 PKM协议的版本和认证策略;
第二请求模块, 接收所述终端认证器发送的 EAP请求 /标识消息, 并转发 EAP响应 / 标识消息给所述认证器, 所述 EAP响应 /标识消息中包含终端的用户标识信息;
第二交换模块,用于在所述认证器将所述 AK传给切换服务器的模拟 WiMAX基站后, 和所述终端通过所述第一隧道进行报文加密密钥 TEK交换;
第一注册模块,通过所述第一隧道与所述终端以及与 WiMAX接入网网关进行数据路 径的注册和业务流的建立。
39、 如权利要求 38所述的服务器设备, 其特征在于, 当所述切换服务器在 WiMAX 核心网中时,所述切换服务器,用于在与所述终端在建立所述第一隧道后,与所述 WiMAX 接入网中的认证器建立第二隧道; 或者, 所述切换服务器, 用于先与所述认证器建立所 述第二隧道, 再与所述终端建立第一隧道。
40、如权利要求 38所述的服务器设备,其特征在于,所述终端具体为单收单发 WiFi/ WiMAX多模终端或双收单发 WiFi/ WiMAX多模终端, 当所述终端为单收单发 WiFi/ WiMAX 多模终端, 所述终端发送的切换请求中包含当前连接的 WiFi接入点标识时, 所述第一 接收模块, 具体包括- 第一查询单元,用于所述切换服务器利用终端发送的切换请求中包含的当前连接的
WiFi接入点标识, 查询候选目标 WiMAX基站标识;
第一处理单元,用于如果所述切换服务器查找到至少一个候选目标 WiMAX基站标识, 则所述切换服务器根据预设的选择规则, 选择其中一个候选目标 WiMAX基站作为目标 WiMAX 基站; 所述切换服务器向所述终端发送的切换响应中包含从至少一个候选目标 WiMAX基站中选择的目标 WiMAX基站标识;
第二处理单元, 用于如果所述切换服务器没有查找到候选目标 WiMAX基站标识, 则 所述切换服务器向所述终端发送的切换响应中目标 WiMAX基站信息为空, 以使所述终端 接收到目标 WiMAX基站信息为空的切换响应后, 结束流程; 或者, 所述切换服务器向所 述终端发送的切换响应中表示拒绝切换请求, 以使所述终端接收到拒绝切换的切换响应 后, 结束流程。
41、如权利要求 38所述的服务器设备,其特征在于,所述终端具体为单收单发 WiFi/ WiMAX多模终端或双收单发 WiFi/ WiMAX多模终端, 当所述终端为单收单发 WiFi/ WiMAX 多模终端时, 所述第一接收模块, 具体包括- 第一接收单元, 用于接收所述终端通过 WLAN接入网发送的查询请求, 所述查询请 求中包含所述终端当前连接的 WiFi接入点标识;
第二查询单元, 用于通过所述查询请求中所述终端当前连接的 WiFi接入点标识, 查询候选目标 WiMAX基站标识;
第三处理单元, 用于通过 WLAN接入网将查询结果返回给所述终端, 如果所述终端 接收到的查询结果为空, 则所述终端结束流程; 否则, 所述终端根据预设的选择规则从 查询结果中选择出一个候选目标 WiMAX基站标识作为目标 WiMAX基站标识。
PCT/CN2010/072635 2009-05-11 2010-05-11 一种接入网的切换方法、系统和设备 WO2010130198A1 (zh)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN200910136345.9A CN101888631B (zh) 2009-05-11 2009-05-11 一种接入网的切换方法、系统和设备
CN200910136345.9 2009-05-11

Publications (1)

Publication Number Publication Date
WO2010130198A1 true WO2010130198A1 (zh) 2010-11-18

Family

ID=43074302

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2010/072635 WO2010130198A1 (zh) 2009-05-11 2010-05-11 一种接入网的切换方法、系统和设备

Country Status (2)

Country Link
CN (1) CN101888631B (zh)
WO (1) WO2010130198A1 (zh)

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2023103546A1 (zh) * 2021-12-08 2023-06-15 成都拟合未来科技有限公司 应用于无网络环境的健身视频流获取方法及系统

Families Citing this family (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN103841569B (zh) * 2012-11-27 2017-10-24 华为技术有限公司 一种虚拟基站的建立及数据传输方法、设备和系统
CN105682163A (zh) * 2016-01-12 2016-06-15 宇龙计算机通信科技(深圳)有限公司 基站切换控制方法、基站切换控制装置和终端
CN107484210A (zh) * 2016-06-07 2017-12-15 大唐移动通信设备有限公司 一种数据传输方法及装置
CN108377511A (zh) * 2016-11-18 2018-08-07 中兴通讯股份有限公司 Wlan汇聚单元变更方法及装置、基站、系统
CN116055555B (zh) * 2023-01-28 2023-08-04 深圳市明源云科技有限公司 代理服务器设置方法、装置、电子设备及可读存储介质

Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1909739A (zh) * 2006-08-24 2007-02-07 华为技术有限公司 无线接入网及其中分组的传输和终端的切换方法
CN101282287A (zh) * 2007-04-02 2008-10-08 华为技术有限公司 协商移动性管理协议的方法及其装置
EP2053886A2 (en) * 2007-10-26 2009-04-29 Hitachi Communication Technologies, Ltd. Communication system and gateway apparatus
CN101426202A (zh) * 2007-11-02 2009-05-06 华为技术有限公司 一种实现网络切换的方法、设备及系统

Family Cites Families (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN100536483C (zh) * 2005-12-01 2009-09-02 中国科学院计算技术研究所 一种宽带无线城域网中基站标识符的分配与安全传送方法
US8064948B2 (en) * 2006-01-09 2011-11-22 Cisco Technology, Inc. Seamless roaming for dual-mode WiMax/WiFi stations
CN100574503C (zh) * 2006-04-18 2009-12-23 华为技术有限公司 一种终端和终端切换方法及系统
KR100965666B1 (ko) * 2007-01-05 2010-06-24 삼성전자주식회사 이종 망간의 핸드 오프 방법 및 그 시스템

Patent Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1909739A (zh) * 2006-08-24 2007-02-07 华为技术有限公司 无线接入网及其中分组的传输和终端的切换方法
CN101282287A (zh) * 2007-04-02 2008-10-08 华为技术有限公司 协商移动性管理协议的方法及其装置
EP2053886A2 (en) * 2007-10-26 2009-04-29 Hitachi Communication Technologies, Ltd. Communication system and gateway apparatus
CN101426202A (zh) * 2007-11-02 2009-05-06 华为技术有限公司 一种实现网络切换的方法、设备及系统

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2023103546A1 (zh) * 2021-12-08 2023-06-15 成都拟合未来科技有限公司 应用于无网络环境的健身视频流获取方法及系统

Also Published As

Publication number Publication date
CN101888631A (zh) 2010-11-17
CN101888631B (zh) 2014-02-19

Similar Documents

Publication Publication Date Title
KR101467780B1 (ko) 이기종 무선접속망간 핸드오버 방법
US8549293B2 (en) Method of establishing fast security association for handover between heterogeneous radio access networks
US8665819B2 (en) System and method for providing mobility between heterogenous networks in a communication environment
KR101217757B1 (ko) 푸시 세션 및 푸싱 시스템을 구축하는 방법 및 관련 장치
US9167427B2 (en) Method of providing user equipment with access to a network and a network configured to provide access to the user equipment
CN102687537B (zh) 媒体无关切换协议的安全
JP4707671B2 (ja) 複数の異種アクセスネットワークを含む通信ネットワークにおけるコンテキストの転送
JP5376185B2 (ja) ハンドオーバ方法およびハンドオーバ装置
WO2010130191A1 (zh) 一种切换接入网的认证方法、系统和装置
US20080311911A1 (en) Handover trigger for an inter-access-gateway interface
WO2010127597A1 (zh) 切换方法、设备和系统
WO2008006314A1 (en) A gateway system and the method for implementing various media accesses
TW200939717A (en) Wireless communication method and system for implementing media independent handover between technologically diversified access networks
WO2007006227A1 (fr) Procédé et système de négociation destinés à l’établissement de chemins de données d’interface
WO2010130198A1 (zh) 一种接入网的切换方法、系统和设备
EP2432263B1 (en) Method and system for station switching when wireless terminal point completes wpi in convergent wlan
CN100455120C (zh) 一种异构网络切换中链路建立前的消息安全传送方法
Mohamed et al. Technology Integration Framework for Fast and Low Cost Handovers—Case Study: WiFi-WiMAX Network
KR100623291B1 (ko) 씨디엠에이 2000과 휴대인터넷 망간 핸드오프 시스템 및 이를 이용한 핸드오프 방법
KR100664946B1 (ko) 고속 핸드오버를 수행하기 위한 장치 및 방법
KR100623292B1 (ko) 휴대 인터넷망에서 씨디엠에이 2000 망으로의 핸드오프 방법
Iyer et al. Handling mobility across WiFi and WiMAX
CN101945372A (zh) 保证用户设备单射频切换数据完整性的方法
Ganti et al. Fast Authentication during Handover in NGN
CN116057982A (zh) 非3gpp切换准备

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 10774539

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE

122 Ep: pct application non-entry in european phase

Ref document number: 10774539

Country of ref document: EP

Kind code of ref document: A1