WO2011015001A1

WO2011015001A1 - Method and system for carrying out access through wireless local area network access network

Info

Publication number: WO2011015001A1
Application number: PCT/CN2009/074802
Authority: WO
Inventors: 朱春晖
Original assignee: 中兴通讯股份有限公司
Priority date: 2009-08-04
Filing date: 2009-11-05
Publication date: 2011-02-10
Also published as: CN101990274B; CN101990274A

Abstract

The invention provides a method and system for carrying out access through wireless local area network access network (WLAN AN), and the method includes: the UE accesses the evolved packet core network (EPC), and interacts with the access network discovery and selection function (ANDSF) to obtain the access network information of the WLAN; the UE accesses the WLAN AN, and accesses the core network by using the obtained access network information of the WLAN. The UE has obtained the access network information of the WLAN beforehand by accessing the EPC and interacting with the ANDSF, in other words, the UE has been aware of the wireless core network which is connected with the current WLAN AN or can be accessed by the current WLAN AN. In this way, the wireless core network which will later participate in the access authentication is the wireless core network which is connected with the current WLAN AN or can be accessed by the current WLAN AN, the successful access of the UE is ensured, the loads of the UE and the network are reduced, thereby the resources are saved, and the user experience is enhanced.

Description

Method and system for accessing through wireless local area network access network

The present invention relates to a radio access technology, and more particularly to a method and system for accessing through a WLAN AN (Wireless Local Area Network Access Network). Background technique

In some cases, the user equipment (UE, User Equipment) needs to access the following wireless core network through the WLAN AN: e.g. Evolved Packet Core network (EPC), interactive wireless office i or network (I - WLAN (Interworking Wireless Local Area Network), Microwave Access Global Interworking Network (WIMAX), Code Division Multiple Access (CDMA) network, etc.

1 is a schematic diagram of a network architecture of a non-3GPP network accessing an I-WLAN, where the I-WLAN refers to a WLAN network that interacts with a 3GPP, 3rd Generation Partnership Project (3GPP) network. The purpose of the interaction is to enable the WLAN access technology to cooperate with the GPRS core network infrastructure to enable the WLAN user equipment to access the GPRS packet service via the WLAN AN. As shown in Figure 1, the network architecture of the non-3GPP network accessing the I-WLAN includes the I-WLAN core network, the UE, the WLAN AN, and the IP services provided by the operator. The I-WLAN core network further includes a packet data gateway (PDG, Packet Data Gateway, or P-GW), an authentication and accounting server (3GPP AAA Server), and a user home subscription server (HSS, Home Subscriber Server). The HSS is used to store user data and generate a vector for authentication in the user access authentication process.

2 is a schematic diagram of a network architecture of a non-3GPP network access EPC. As shown in FIG. 2, the EPC includes an evolved packet data gateway (ePDG, Evolved Packet Data Gateway), and a data network gateway (P-GW, Packet Data Network Gate Way). ), 3GPP AAA Server and HSS. Among them, in the network architecture shown in FIG. 2, the HSS is also used to store user data and generate a vector for authentication in the user access authentication process.

The EPC can communicate with the non-3GPP network. In Figure 2, the P-GW is the border gateway between the EPC and the PDN network. It is responsible for PDN access and forwarding data between the EPC and the PDN. When the operator considers that the WLAN network is trusted, the WLAN AN can be directly connected to the P-GW. When the operator considers that the WLAN AN is untrustworthy, the WLAN AN needs to be connected to the ePDG to ensure the security of data transmission between the UE and the ePDG. And confidentiality.

In addition, the UE can also access the EPC through other access networks, including the radio access network defined by the 3GPP itself, such as a Long Term Evolution (LTE) network, WIMAX, CDMA, and the like. As an IP service, an Access Network Discovery and Selection Function (ANDSF) is a network element used by an operator to provide access information to a UE. Currently, the access network information may be an access network. The frequency and so on.

The process of the UE accessing the above-mentioned I-WLAN core network and the EPC core network through the WLAN AN is similar, and mainly includes the following processes:

First, the UE attaches to the WLAN AN to establish a wireless connection;

Then, the WLAN AN sends an Extensible Authentication Protocol (EAP) request to the UE, and carries the identity information in the EAP request; the UE returns an EAP reply to the WLAN AN, where the authentication identity is carried;

Finally, the WLAN AN sends an authentication request to the 3GPP AAA Server; the AAA Server obtains the authentication vector and the user subscription data from the HSS; and completes the access authentication process.

When the UE accesses the above two I-WLAN core networks and two different core networks of the EPC through the WLAN AN, the following differences exist:

(1) When accessing different core networks, the identity information carried in the EAP request is different: For example, when the UE accesses the EPC, the EPC identity (EPC NAI) should be used, and its form can be: 0<IMSI>@nai . epc . mnc<MNC> . mcc<MCC> .3 gppnetwork. org"; When the UE accesses the I-WLAN, the I-WLAN NAI should be used, which can be in the form: 0<IMSI>@wlan.mnc<MNC> . mcc<MCC> .3 gppnetwork.org.

(2) When accessing different core networks, the authentication vectors generated by the HSS are different: For example, when the UE needs to access the I-WLAN, the quintuple vector is used in the I-WLAN authentication, and when the UE needs to connect When entering EPC, the triplet vector is used in EPC authentication.

In the prior art, the WLAN AN can access the I-WLAN and the EPC at the same time. However, the UE does not know which wireless core network can be accessed currently, and therefore cannot use the corresponding authentication step, that is, the WLAN AN sends the UE to the UE. After the EAP request message, the identity sent by the UE to the WLAN AN may not be the wireless core network that the current WLAN AN is connected to or can access. For example, when the UE sends the identity that needs to access the I-WLAN, actually The WLAN AN is connected to the EPC network, so the access authentication fails. Until the UE sends the EPC network identity authentication, it can connect to the EPC network. This will result in multiple authentication failures, which increase the load on the UE and the network. Resources have affected the user experience. Summary of the invention

In view of this, the main purpose of the present invention is to provide a method for accessing a network through a wireless local area network (LAN) to ensure successful access of the UE, reduce the load on the UE and the network, save resources, and enhance the user experience.

Another object of the present invention is to provide a system for accessing a network through a wireless local area network (LAN) to ensure successful access by the UE, reduce the load on the UE and the network, save resources, and enhance the user experience.

In order to achieve the above object, the technical solution of the present invention is achieved as follows:

A method for accessing a network through a wireless local area network includes:

The user terminal UE accesses the evolved packet core network EPC, and interacts with the access network discovery and selection function ANDSF to obtain the access network information of the wireless local area network WLAN;

The UE is connected to the WLAN access network WLAN AN, and the obtained WLAN is connected. The network access information is connected to the core network.

The UE accessing the access network information of the WLAN by the ANDSF specifically includes: the UE accessing the EPC through the access network, establishing a connection to the packet data gateway P-GW; the UE acquiring the IP address of the ANDSF, and the ANDSF Sending an access network information request, where the access network information request carries the capability and location information of the UE;

The ANDSF determines that the user has the WLAN access capability according to the obtained capability of the UE, and the WLAN access network exists in the current location of the user, and returns the found access network information of the WLAN to the UE.

The UE is connected to the WLAN AN, and accessing the core network by using the obtained access network information of the WLAN specifically includes:

The WLAN AN establishes a wireless connection with the UE, and initiates an Extensible Authentication Protocol EAP request to the UE;

After receiving the EAP request, the UE selects to access a wireless core network according to the obtained access network information of the WLAN, according to the information of the core network of the currently accessed WLAN, and the access capability of the UE itself. And carrying the corresponding identity information in the EAP reply message and sent to the WLAN AN;

The WLAN AN cooperates with the UE to complete subsequent corresponding wireless core network access authentication according to the identity information from the UE.

The identity information carried in the EAP reply message is: EPC identity EPC NAI, or I-WLAN NAL

The access network information of the WLAN is information of a wireless core network that the WLAN AN can access, and/or an operator's policy.

The information of the wireless core network includes: information of an interactive wireless local area network I-WLAN core network, and/or EPC information.

The carrier's policies include: Connecting to the Internet using WLAN access does not traverse the carrier Core network.

A system for accessing a network through a wireless local area network (LAN), comprising at least a core network of a UE, an ANDSF, a WLAN AN, and a WLAN access, where

The UE is configured to: access the EPC, and interact with the ANDSF to obtain access network information of the WLAN; when the UE is connected to the WLAN AN, access the WLAN access core network by using the obtained access information of the WLAN;

The ANDSF is configured to complete the interaction with the user terminal, and send the access network information of the WLAN to the UE. The UE is specifically configured to: access the EPC through the access network, establish a connection to the packet data gateway P-GW; acquire an IP address of the ANDSF, and send an access network information request to the ANDSF, where the access network The information request carries the capability and location information of the UE;

The ANDSF is specifically configured to determine, according to the obtained capability of the UE, that the user has the WLAN access capability, and that the WLAN access network exists in the current location of the user, and find the access network information of the WLAN and return the information to the UE.

The UE is further configured to establish a wireless connection with the WLAN AN, and after receiving the EAP request, according to the obtained access network information of the WLAN, according to the information of the core network of the currently accessed WLAN, and the access capability of the WLAN. , selecting to access a wireless core network and carrying the corresponding identity in an EAP reply message and sending it to the WLAN AN;

The WLAN AN is further configured to cooperate with the UE to complete the corresponding wireless core network access authentication according to the identity information from the UE.

As can be seen from the technical solution provided by the present invention, the UE accesses the EPC and interacts with the ANDSF to obtain the access network information of the WLAN. The UE connects to the WLAN AN, and accesses the core network by using the obtained WLAN access network information. . Since the UE accesses the EPC in advance and interacts with the ANDSF, the access network information of the WLAN is obtained, that is, the UE knows the wireless core network that the current WLAN AN is connected to or can access. In this way, the wireless core network that participates in the access authentication is the wireless core network that is connected or accessible by the current WLAN AN, which ensures the success of the UE. Access reduces the load on the UE and the network, thereby saving resources and enhancing the user experience. DRAWINGS

1 is a schematic diagram of a network architecture of a non-3GPP network accessing an I-WLAN;

2 is a schematic diagram of a network architecture of a non-3GPP network access EPC;

FIG. 3 is a flowchart of a method for accessing a WLAN access network by using a wireless local area network access network according to the present invention; FIG. 4 is a flowchart of an embodiment of a UE interacting with an ANDSF to obtain WLAN access network information;

5 is a flowchart of an embodiment of a UE accessing a WLAN AN according to the present invention;

FIG. 6 is a schematic structural diagram of a system for accessing a wireless local area network access network according to the present invention. detailed description

FIG. 3 is a flowchart of a method for accessing a network through a wireless local area network, as shown in FIG. 3, including the following steps:

Step 300: The UE accesses the EPC and interacts with the ANDSF to obtain access network information of the WLAN.

The access network information of the WLAN includes information of the wireless core network that the WLAN AN can access, such as the information of the I-WLAN core network and/or the information of the EPC, and may also include the policy of the operator: The Internet does not cross the carrier's core network.

4 is a flowchart of an embodiment of the UE accessing the WLAN access network information by the UE and the ANDSF. As shown in FIG. 4, the step 300 is specifically implemented as follows:

Step 400: The UE accesses the EPC and establishes a connection to the P-GW. The access network may be any access network, such as LTE, WLAN, WIMAX, CDMA, and the like. The implementation of this step is well known to those skilled in the art and will not be described herein. Step 401: The UE acquires an IP address of the ANDSF, and sends an access network information request to the ANDSF, where the capability and location information of the UE are carried in the access network information request. The manner in which the UE obtains the IP address of the ANDSF may be queried by a domain name server (DNS) or pre-configured in the UE.

Step 402: The ANDSF returns the WLAN access network information of the WLAN to the UE according to the WLAN access capability of the user and the current location of the user, and the information about the WLAN AN accessing the EPC is included in the AND SF. The information of the access to the I-WLAN may also include the policy of the operator: if the WLAN access is used to connect to the Internet, the carrier does not traverse the core network of the operator.

Through the process shown in FIG. 4, the UE obtains the access network information of the WLAN, that is, it knows which wireless core networks, such as the I-WLAN core network, and/or the EPC, can be accessed by the WLAN. Business strategy.

Step 301: The UE connects to the WLAN AN, and accesses the core network by using the obtained access network information of the WLAN. The specific implementation of this step is shown in Figure 5.

FIG. 5 is a flowchart of an embodiment of a UE accessing a WLAN AN according to the present invention. In step 300, the UE has obtained access network information of the WLAN. As shown in FIG. 5, the UE accessing the WLAN AN according to the present invention includes:

Step 500: The WLAN AN establishes a wireless connection with the UE, and the WLAN AN initiates an EAP Request (EAP Request) to the UE, and requests the UE to provide identity information to the network for access authentication.

Step 501: After receiving the EAP request, the UE according to the obtained access network information of the WLAN, according to the information of the core network of the currently accessed WLAN (the type of the core network), that is, the I-WLAN core network or the EPC, and its own Access capability, choose to access one of the wireless core networks, and carry the corresponding identity information, ie, I-WLAN NAI or EPC NAI, in the EAP reply message and send it to the WLAN AN.

Step 502: The WLAN AN cooperates with the UE to complete the follow-up according to the identity information from the UE. The corresponding wireless core network access authentication. The specific implementation of this step is completely consistent with the existing ones, and will not be described here.

It can be seen from the method of the present invention that the UE obtains the access network information of the WLAN by accessing the EPC in advance and interacting with the ANDSF, that is, the UE knows the wireless core network that the current WLAN AN is connected to or can access, and You can use WLAN access to connect to the Internet without going through the carrier's core network. In this way, the wireless core network that participates in the access authentication is the wireless core network that is connected or accessible by the current WLAN AN, which ensures the successful access of the UE, reduces the load on the UE and the network, thereby saving resources and enhancing the user experience. .

FIG. 6 is a schematic diagram showing the structure of a system for accessing a network through a wireless local area network access network. As shown in FIG. 6, the core network includes a UE, an ANDSF, a WLAN AN, and a WLAN connection, where

The UE is configured to interact with the ANDSF to obtain the access network information of the WLAN by accessing the EPC. When the UE is connected to the WLAN AN, the access network information of the obtained WLAN is used to access the core network of the WLAN connection.

The ANDSF is configured to complete the interaction with the user terminal, and send the access network information of the WLAN to the UE. The UE is specifically configured to access the EPC through the access network, establish a connection to the packet data gateway P-GW, obtain an IP address of the ANDSF, and send an access network information request to the ANDSF, and carry the request in the access network information request. Have the capabilities and location information of the UE;

The ANDSF is specifically configured to determine, according to the obtained capability of the UE, that the user has the WLAN access capability, and that the WLAN access network exists in the current location of the user, and return the found access network information of the WLAN to the UE.

The UE establishes a wireless connection with the WLAN AN, and after receiving the EAP request, according to the obtained access network information of the WLAN, according to the information of the core network of the currently accessed WLAN, and the access capability of the WLAN, select the access. a wireless core network and carrying the corresponding identity in the EAP reply message is sent to the WLAN AN; The WLAN AN is further configured to cooperate with the UE to complete subsequent corresponding wireless core network access authentication according to the identity information from the UE.

The above description is only for the preferred embodiment of the present invention, and is not intended to limit the scope of the present invention. Any modifications, equivalent substitutions and improvements made within the spirit and principles of the present invention should be included. Within the scope of protection of the present invention.

Claims

Claim

A method for accessing a network through a WLAN access network, comprising: a user terminal UE accessing an evolved packet core network EPC, interacting with an access network discovery and selection function ANDSF, and acquiring a wireless local area network WLAN Access network information;

The UE is connected to the WLAN access network WLAN AN, and accesses the core network by using the obtained access information of the WLAN.

The method according to claim 1, wherein the acquiring, by the UE, the access network information of the WLAN by the AND SF includes:

The UE accesses the EPC through the access network to establish a connection to the packet data gateway P-GW; the UE acquires an IP address of the ANDSF, and sends an access network information request to the ANDSF, where the access network information request is carried Have the capabilities and location information of the UE;

The method according to claim 1, wherein the UE is connected to the WLAN AN, and accessing the core network by using the obtained access network information of the WLAN specifically includes:

The method according to claim 3, wherein the identity information carried in the EAP reply message is: an EPC identity EPC NAI, or an I-WLAN NAI.

The method according to claim 2 or 3, wherein the access network information of the WLAN is information of a wireless core network that the WLAN AN can access, and/or an operator's policy.

The method according to claim 5, wherein the information of the wireless core network comprises: information of an interactive wireless local area network I-WLAN core network, and/or information of an EPC.

7. The method according to claim 5, wherein the policy of the operator comprises: connecting to the Internet using a WLAN access without crossing the core network of the operator.

A system for accessing a network through a wireless local area network (LAN), characterized in that it comprises at least a core network of a UE, an ANDSF, a WLAN AN, and a WLAN access, wherein

The ANDSF is configured to complete the interaction with the user terminal, and send the access network information of the WLAN to the UE.

9. The system of claim 8 wherein:

The UE is specifically configured to: access the EPC through the access network, establish a connection to the packet data gateway P-GW; acquire an IP address of the ANDSF, and send an access network information request to the ANDSF, where the access network The information request carries the capability and location information of the UE;

10. The system of claim 8 wherein:

The UE is further configured to establish a wireless connection with the WLAN AN, and after receiving the EAP request, according to the obtained access network information of the WLAN, according to the core network of the currently accessed WLAN Information, and its own access capability, choose to access a wireless core network and carry the corresponding identity in the EAP reply message and send it to the WLAN AN;