WO2011050679A1

WO2011050679A1 - Communication network and terminal access method implemented based on wimax network framework

Info

Publication number: WO2011050679A1
Application number: PCT/CN2010/077723
Authority: WO
Inventors: 霍玉臻; 吴强; 符涛
Original assignee: 中兴通讯股份有限公司
Priority date: 2009-11-01
Filing date: 2010-10-14
Publication date: 2011-05-05
Also published as: CN102056236A; CN102056236B

Abstract

A communication network and terminal access method implemented based on WIMAX network framework are provided. The communication network includes an access service network and a connection service network in the WIMAX network framework. The access service network includes a base station and an access gateway, and the connect service network includes an Identity Location Core Route (ILCR). The communication network also includes a packet data network. The access gateway provides access service and control for the terminals, and maintains connection information between the terminal and the correspondent end, and cooperates with other access gateways to implement handover for the terminals across the access gateway and across the ILCR. The ILCR is used for maintaining session connection for the terminal, maintaining the mapping information between the terminal and the correspondent end, and implementing the routing and forwarding of the data message. The framework arrangement of the invention takes requirement of compatibility with the terminal and compatibility with the upper layer service, requirement of only upgrading the network side device, and compatibility with the application settings of not changing terminal into consideration.

Description

Communication network and terminal access method based on Wimax network architecture

Technical field

The present invention relates to the field of communications technologies, and in particular, to a communication network and a terminal access method implemented based on a Wimax network architecture.

Background technique

In the traditional Transmission Control Protocol/Internet Protocol (TCP/IP) network environment, IP provides routing for the Internet, which assigns all nodes, including hosts and routers. The logical address, which is the IP address, and each port of each host is assigned an IP address. The IP address includes the network prefix and the host part. The IP addresses of all hosts on the same link usually have the same network prefix and different host parts. This allows IP to be routed based on the network prefix portion of the destination node's IP address, allowing the router to maintain a simple network prefix route without having to maintain a separate route for each host. In this case, since the network prefix route is used, when the node switches from one link to another without changing its IP address, the node cannot receive the data packet on the new link. Therefore, it is impossible to communicate with other nodes.

The existing network technology of TCP/IP has the following shortcomings:

固定 Support the mobility of the terminal by means of a fixed anchor point, for example, GPRS Tunneling Protocol (Mobile Tunneling Protocol) in the Long Term Evolution (LTE) network, and the Mobile IP protocol in the Wimax network. Use Home Agent (HA) as an anchor. The introduction of fixed anchor points brings about the problem of packet path roundabout, which increases transmission delay and bandwidth waste. The route optimization process of Mobile IPv6 (Mobile IPv6, MIPV6) requires the host participating in the communication to support the MIPV6 protocol, which is difficult to deploy.

The IP address has a dual function: the location identifier of the network interface of the communication terminal host as the network layer in the network topology, and the identity of the network interface of the transport layer host. When the IP address of the host changes, not only the route changes, but also the identity of the communication terminal host changes. This can result in a heavier routing load, and changes in host identification can cause disruptions to applications and connections. The prior art identity identification and location separation framework Host Identity Protocol (HIP), Locator/Identifier Separation Protocol (LISP), etc. are constructed to overcome this deficiency of the existing network technology. A new web framework. The host-based HIP needs to make major changes to the terminal and upper-layer services, and the deployment is difficult. The two ends of the communication move simultaneously and the location update phase requires the network to participate in maintaining the communication link. Otherwise, packet loss will occur. Network-based LISP, for mobility and multi-homedness is a problem that is solved after the separation of identity locations. There is no specific solution and implementation method.

1 is a network architecture of an existing Wimax system. As shown in the figure, a prior art Wimax system generally consists of three parts: a terminal, a Wimax Access Service Network (W-ASN), and a Wimax connection service. Network (Wimax Connect Service Network, W-CSN for short).

The W-ASN mainly performs the following functions: completing the Layer 2 (L2) connection of the Wimax terminal, transmitting the AAA message to the H-CSN (Home CSN), NSP network selection and discovery, and providing the Layer 3 (L3) connection of the Wimax terminal. Relay, radio resource management, tunnel maintenance between W-ASN and W-CSN. In the mobile scenario, W-ASN also needs to support the following functions: W-ASN Anchored Mobility Management (W-ASN Anchored MM), W-CSN Anchored Mobility Management (W-CSN Anchored MM), Paging and Idle Mode operation.

W-ASN is also used to manage the IEEE 802.16 air interface to provide wireless access to Wimax end users. The W-ASN is composed of at least one base station (BS) and one access gateway (W-ASN Gateway, AGW for short), and may include a single AGW or multiple AGWs. The W-ASN interworks with the mobile station (MS) at the R1 reference point, interworks with the W-CSN at the R3 reference point, and communicates with another W-ASN at the R4 reference point. The operator that manages the W-ASN is called the Network Access Provider (NAP).

W-CSN is a combination of network functions, W-CSN can be used by mobile IP's home agent

(HA), AAA proxy or server (AAA Proxy/Server), accounting server, interconnection gateway device, etc. As mentioned above, the operator managing the W-CSN is called the Network Service Provider (NSP).

W-CSN mainly provides the following functions: end user session connection, terminal IP address allocation, Internet access, AAA proxy or server, end user policy and admission control, tunnel maintenance between W-ASN and W-CSN, end user billing and settlement, roaming between W-CSN, movement between W-CSN Sex management and Wimax business.

Existing mobile communication networks using TCP/IP, including Wimax systems, also have the drawbacks of the above-mentioned existing TCP/IP network technology.

There are two main solutions for identity identification and location separation in the prior art, one is implementation of the host, and the other is based on the implementation of the router, and each implementation has various related technologies to support, In this solution, the access identifier (AID) of the terminal user does not change during the mobile process, and the location identifier is separately allocated according to the location of the terminal to implement routing and forwarding of data packets. However, no corresponding implementation scheme has been proposed for how to implement a communication network with identity and location separation architecture based on Wimax system. Summary of the invention

In view of the above drawbacks of the prior art, the technical problem to be solved by the present invention is to provide a communication network implemented based on a Wimax network architecture, which can implement identity identification and location separation of network-based user terminals.

Another technical problem to be solved by the present invention is to provide a communication network based on the Wimax network architecture, which can support the application scenario of the mobile terminal, and effectively solve the problem of the loop in the scenario.

Another technical problem to be solved by the present invention is to provide a communication network based on the Wimax network architecture. Considering the requirements of compatible terminals and compatible upper layer services in the deployment of the architecture, only the network side equipment needs to be upgraded, and the compatibility is not changed. Application scenario.

Another technical problem to be solved by the present invention is to provide a communication network based on the Wimax network architecture, which can realize identity identification and location separation when the terminal accesses the communication network.

Another technical problem to be solved by the present invention is to provide a communication network based on the Wimax network architecture, which can realize identity identification and location separation when the terminal communicates in the communication network.

Another technical problem to be solved by the present invention is to provide a communication network based on the Wimax network architecture, which can realize identity identification and location separation when the terminal is offline in the communication network. Another technical problem to be solved by the present invention is to provide a communication network based on the Wimax network architecture, which can realize identity identification and location separation when the terminal switches in the communication network.

In order to solve the above problem, the present invention provides a communication network for identity identification (AID) and location separation based on a Wimax network architecture, including an access service network and a connection service network in a Wimax network architecture, and the access service network. The base station and the access gateway are included, and the connection service network includes an identity location core router (ILCR) and an identity location register (ILR), and the communication network further includes a route identifier (RID) for routing and forwarding inter-ILCR datagrams. The generalized forwarding plane of the text, where:

The access gateway is configured to provide access services and control for the terminal, maintain connection information between the terminal and the communication peer, and cooperate with other access gateways to implement handover of the terminal across the access gateway and across the ILCR; the ILCR is set as the maintenance terminal. Session connection, assigning the terminal to the RID of the ILCR, maintaining the AID-RID mapping information of the terminal and the communication peer, querying the RID of the terminal to the ILR, implementing routing and forwarding of the data message, and other ILCRs other than the ILCR. Cooperate to realize the switching of the terminal across the ILCR;

The ILR is configured to receive a registration and deregistration request of the access gateway or the ILCR to the ILR home subscriber terminal, maintain AID-RID mapping information of the home user terminal, and receive a query request for the terminal RID, and request the terminal AID. The corresponding RID is returned to the query requester.

The foregoing communication network may also have the following features: The access gateway includes: a connection maintenance module, an offline processing module, and a data forwarding module, where:

The connection maintenance module is configured to: save connection information between the terminal and the communication peer, including the terminal

The correspondence between the AID and the communication peer AID; the connection information of the terminal and the communication peer is deleted after the terminal is offline or after the communication end is terminated; the communication is deleted when the communication peer is offline or cut out or the communication with the terminal is terminated. Connection information between the peer and the terminal;

The offline processing module is configured to: notify the connection maintenance module when determining that the accessed terminal is offline; and notify the connection maintenance module when determining that the communication peer is offline;

The data forwarding module is configured to: forward data packets between the base station and the ILCR. The above communication network can also have the following characteristics:

The offline processing module in the access gateway is further configured to: when determining that the accessed terminal is offline, Notifying the access gateway that the communication peer accesses that the terminal is offline, and when receiving the offline notification of the terminal sent by the peer access gateway, determining that the terminal that is the communication peer is offline;

The offline processing module in the access gateway is further configured to: find an AID of all communication peers of the terminal according to the connection information saved in the connection maintenance module, and localize or belong to the communication peer according to the AID of the communication peer The local AAA server queries the access gateway to which the communication peer accesses.

The above communication network may also have the following features: The ILCR includes a tunnel establishment module, a mapping management module, and a packet forwarding module, where:

The tunnel establishment module is configured to: establish a tunnel between the access gateway and the ILCR, allocate an RID to the terminal, and send the AID of the terminal and the RID to the mapping management module;

The mapping management module is configured to: cache and process the AID-RID mapping information of the terminal and the communication peer; the packet forwarding module is configured to: the receiving terminal and the communication peer do not belong to the same ILCR (ie, not connected to the same The uplink data packet of the ILCR is encapsulated in the data packet including the terminal AID and the communication peer AID from the RID of the communication peer and the RID of the terminal that are queried by the mapping management module or the communication peer home ILR. The generalized forwarding plane is routed and forwarded to the peer ILCR; and the downlink data packet sent by the generalized forwarding plane is decapsulated, and the RID is stripped and sent to the terminal.

The communication network may further have the following features: the communication network further includes a registration cancellation module, and the registration cancellation module is configured to: after receiving the terminal AID and the RID allocated for the terminal, requesting the terminal belonging to the ILR to register the terminal RID Carrying the AID and RID of the terminal; after learning that the terminal is offline, requesting the terminal to belong to the local ILR to cancel the RID of the terminal;

The registration and cancellation module is located in the access gateway, and the tunnel establishment module in the ILCR is further configured to: send the AID of the terminal and the RID for the terminal to the registration cancellation module of the access gateway; or the registration cancellation module Located in the ILCR, the tunnel establishment module in the ILCR is further configured to: send the AID of the terminal and the RID for the terminal to the registration logout module of the ILCR.

The above communication network can also have the following characteristics:

The ILCR further includes an offline processing module, where the offline processing module is configured to: notify the mapping management module when determining that the accessed terminal is offline; and notify the mapping management module when determining that the communication peer is offline; The mapping management module in the ILCR is further configured to: delete the AID-RID mapping information of the terminal when the terminal is offline or cut out, and delete the communication end of the terminal that has no communication relationship with other terminals accessing the ILCR. AID-RID mapping information of the communication peer; after learning that the communication between the terminal and the communication peer is terminated, and the communication peer has no communication relationship with other terminals accessing the ILCR, the AID-RID mapping information of the communication peer is deleted; The AID-RID information of the communication peer is deleted when the peer ends offline or terminates communication with the terminal.

The foregoing communication network may further have the following features: the text forwarding module includes a first forwarding unit and a second forwarding unit, where: the first forwarding unit is configured to: receive the terminal AID and the communication peer AID sent by the base station, and After the terminal and the communication peer do not belong to the uplink data packet of the same ILCR, for example, the mapping management module queries the RID of the communication peer end, and encapsulates the RID of the terminal and the communication peer as a source and destination address in the data packet, Forwarding the plane route and forwarding it to the peer ILCR; if the RID of the communication peer is not queried, the ILR of the communication peer is queried to the RID of the communication peer, and the queried AID-RID of the communication peer is saved to the mapping management module;

The second forwarding unit is configured to: decapsulate the downlink data packet sent by the received generalized forwarding plane, strip the RID, and send the connection to the terminal through the connection of the ILCR; and determine the data packet. Whether the AID-RID mapping information of the middle communication peer exists in the mapping management module, and if not, saves it to the mapping management module.

The above communication network can also have the following characteristics:

The connection service network further includes a packet forwarding function (PTF) entity. The first forwarding unit is configured to: after receiving the uplink data packet sent by the base station, if the mapping management module cannot query the RID of the communication peer end, The terminal RID is encapsulated in the data packet as a source address, and forwarded to the PTF entity;

The PTF entity is configured to: after receiving the data packet sent by the PTR entity other than the ILCR or itself, the corresponding RID is found as the destination address and encapsulated in the packet header according to the communication peer AID in the data packet. Transmitting the data packet to the peer ILCR via the generalized forwarding plane; or

The first forwarding unit is configured to: after receiving the uplink data packet sent by the base station, if the mapping management module cannot query the RID of the communication peer, first cache the data packet, and query the communication pair. The RID of the terminal and the RID of the communication peer are encapsulated in the data packet as the source and destination addresses, and are routed through the generalized forwarding plane and forwarded to the peer ILCR.

The above communication network can also have the following characteristics:

The access gateway further includes a switching module and an anchor data channel function (DPF) module, where the switching module is configured to: switch the service area triggered by the terminal to another anchor DPF module or ILCR when the communication peer exists Control, the switching module includes a cut-out unit and a cut-in unit:

The cutting unit is configured to: implement control for cutting out the terminal, notify the ILCR of the terminal to switch, and send the connection information of the terminal and the communication peer saved by the connection maintenance module to the handover access gateway, and send the received message during the handover. The data packet of the terminal is forwarded to the access gateway, and the terminal is cut out to notify the connection maintenance module;

The cutting-in unit is configured to: implement control of the terminal cutting, and save the connection information of the terminal and the communication peer sent out by the access gateway to the connection maintenance module;

The connection maintenance module is further configured to: delete the connection information between the terminal and the communication peer after learning that the terminal is cut out.

The above communication network can also have the following characteristics:

The ILCR further includes a handover control module, where the handover control module is configured to: control that the terminal moves to another ILCR service area triggered handover when the communication peer exists, the handover control module includes a cut-out control unit and a hand-in control Unit:

The cut-out control unit is configured to: implement control over the terminal cut-out, and send a handover request to the hand-in ILCR to which the terminal moves, and the data packet sent to the terminal received during the handover is forwarded to the cut-in ILCR, after the terminal cuts out Notification mapping management module;

The cut-in control unit is configured to: implement control of the terminal hand-in, allocate the RID pointing to the ILCR to the terminal, and send the AID and the RID of the terminal to the mapping management module, or to the mapping management module and the access gateway; The terminal ILCR sends a terminal RID update notification, and carries the AID-RID mapping information of the terminal;

The mapping management module is further configured to: manage the communication peers of all the terminals that access the ILCR, and update the locally saved AID-RID mapping information of the terminal after receiving the terminal RID update notification sent by the peer. The above communication network can also have the following characteristics:

The hand-in control unit is configured to: when sending a terminal RID update notification to the peer ILCR, first find an AID of all communication peers of the terminal according to the connection maintenance module of the terminal to the access gateway, and then find the mapping management module Sending, by the RID of the communication peer, a terminal RID update notification to the peer ILCR according to the found RID; or

The hand-in control unit of the ILCR is further configured to: send a terminal RID update notification to an access gateway on the same side,

The intercepting unit of the access gateway is further configured to: send the terminal RID update notification to the peer access gateway, and forward the notification to the ILCR after receiving the terminal RID update notification sent by the peer access gateway.

The above communication network can also have the following characteristics:

The data forwarding module in the access gateway is further configured to: after receiving the data packet, determine whether the correspondence between the terminal AID and the communication peer AID in the data packet is saved in the connection maintenance module, and if not saved, add to Connected to the maintenance module; or

The packet forwarding module in the ILCR is further configured to: after receiving the data packet, determine whether the correspondence between the terminal AID and the communication peer AID in the data packet is saved in the connection maintenance module, and if not saved, the packet is transmitted to the connection. The connection maintenance module of the gateway is saved.

The above communication network can also have the following characteristics:

The ILR is set to: save or update the AID-RID mapping information of the terminal after receiving the registration request to the home user terminal, and delete the AID-RID mapping information of the terminal after receiving the cancellation request for the home user terminal or If it is invalid, if it receives a registration and cancellation request for the non-home user terminal, it will forward it to the home location ILR for processing.

The above communication network can also have the following characteristics:

The ILCR is a function that aggregates the home agent and/or the core router in the Wimax network architecture, and extends the new functions required to implement identity and location separation; the connection service network also includes the Wimax network architecture The original network element for authentication, authorization, and accounting;

The access gateway is obtained by the function entity of the access gateway in the Wimax network architecture, and the new function module required for implementing identity identification and location separation is extended, and the access gateway in the Wimax network architecture is obtained. Functional entities with anchor data channel function (DPF) modules and The above communication network can also have the following characteristics:

The tunnel establishment module in the ILCR is configured to: establish a tunnel based tunnel between the access gateway and the ILCR in the terminal access process by dynamically establishing a tunnel.

In order to solve the above technical problem, the present invention further provides a second communication network (AID) and location separation based on the Wimax network architecture, including an access service network and a connection service network in the Wimax network architecture, The ingress service network includes a base station and an access gateway, and the connection service network includes an identity location core router (ILCR) and an identity location register (ILR), and the communication network further includes a route identifier (RID) for routing and forwarding the ILCR. The generalized forwarding plane of the data message, where:

The ILCR is set to: allocate a RID to the ILCR to the terminal, register the ILR to the terminal, log out and query the RID of the terminal, maintain the connection information between the terminal and the communication peer, maintain the session connection of the terminal, and maintain the terminal and the communication peer. AID-RID mapping information, routing and forwarding of data packets, and cooperation with other ILCRs other than the ILCR to implement terminal-to-ILCR switching; the ILR is set to: receive a registration and deregistration request for the ILR home subscriber terminal, The AID-RID mapping information of the home user terminal is maintained, and the query request for the terminal RID is received, and the RID corresponding to the terminal AID in the request is returned to the query requesting party.

The foregoing communication network may also have the following features: The ILCR includes a tunnel establishment module, a registration cancellation module, a mapping management module, and a message forwarding module:

The tunnel establishment module is configured to: establish a tunnel between the access gateway and the ILCR, allocate an RID to the terminal, and send the AID of the terminal and the RID to the mapping management module and the registration cancellation module; the registration and logout module is configured as: After receiving the terminal AID and the RID allocated to the terminal, requesting the terminal home ILR to register the terminal RID, carrying the terminal's AID and RID; after knowing that the terminal is offline, requesting the terminal to belong to the local ILR to cancel the RID of the terminal;

The mapping management module is configured to: cache and perform AID-RID mapping information of the communication terminal; and the packet forwarding module is configured to: receive the terminal and the communication peer does not belong to the same ILCR. After the data packet is sent, the RID of the communication peer and the RID of the terminal that are queried from the mapping management module or the communication peer home ILR are encapsulated in the data packet including the terminal AID and the communication peer AID, and are forwarded in a generalized manner. The plane is routed and forwarded to the peer ILCR; and the downlink data packet is decapsulated, and the RID is stripped and sent to the terminal.

The above communication network may also have the following features: The ILCR further includes a connection maintenance module, an offline processing module, and a mapping management module, where:

The connection maintenance module is configured to: save the connection information between the terminal and the communication peer; and learn to delete the connection information between the terminal and the communication peer after the terminal is offline or removed, or after the communication with the communication peer is terminated; and the communication peer is offline or communicates with the terminal. After the termination, deleting the connection information between the communication peer and the terminal; the offline processing module is configured to: notify the registration cancellation module, the mapping management module, and the connection maintenance module when determining that the accessed terminal is offline; determining that the communication peer is offline Notifying the mapping management module and the connection maintenance module;

The mapping management module is further configured to: delete the terminal when the terminal is cut out or offline

AID-RID mapping information, deleting AID-RID mapping information of a communication peer end of the communication communication end that has no communication relationship with other terminals accessing the ILCR; and knowing that the terminal and the communication peer end communication are terminated, and the communication peer end If the other terminal accessing the ILCR has no communication relationship, the AID-RID mapping information of the communication peer is deleted; when the communication peer is offline or terminates with the terminal, the AID-RID information of the communication peer is deleted.

The above communication network can also have the following characteristics:

The offline processing module is further configured to: when determining that the communication peer is offline, further find the AID of all communication peers of the terminal according to the terminal AID to the connection maintenance module, and then query the mapping management module to query the RIDs of all communication peers, and then Sending the terminal offline notification to the peer ILCR; and receiving the offline notification of the terminal sent by the peer ILCR, determining that the terminal as the communication peer is offline.

The above communication network may also have the following features: The text forwarding module includes a first forwarding unit and a second forwarding unit, where:

The first forwarding unit is configured to: after receiving the uplink data packet sent by the access gateway, including the terminal AID and the communication peer AID, and the terminal and the communication peer do not belong to the same ILCR, such as querying the communication in the mapping management module The RID of the peer, the RID of the terminal and the communication peer as the source and destination The address is encapsulated in the data packet, and is routed through the generalized forwarding plane and forwarded to the peer ILCR; if the RID of the communication peer is not queried, the ILR of the communication peer belongs to the RID of the communication peer;

The second forwarding unit is configured to: unpack the downlink data packet sent by the received generalized forwarding plane, strip the RID, and send the connection to the terminal through the ILCR connection with the terminal.

The above communication network can also have the following characteristics:

The connection service network further includes a packet forwarding function (PTF) entity; the first forwarding unit is configured to: after receiving the uplink data packet sent by the access gateway and the communication peer that does not belong to the same ILCR, The mapping management module cannot query the RID of the communication peer end, and encapsulates the terminal RID as a source address in the data packet, and forwards it to the PTF entity of the communication peer end; the PTF entity is set to: Upon receiving the ILCR or itself The data packet sent by the other PTFs is encapsulated in the packet header according to the RID of the communication peer AID, and the data packet is sent to the peer ILCR through the general forwarding plane. ; or

The first forwarding unit is configured to: after receiving the uplink data packet sent by the access gateway and the communication peer that does not belong to the same ILCR, if the mapping management module cannot query the RID of the communication peer, first cache the After the RID of the communication peer is queried, the RID of the terminal and the communication peer is encapsulated in the data packet as the source and destination addresses, and is routed through the generalized forwarding plane and forwarded to the peer ILCR.

The above communication network can also have the following characteristics:

The first forwarding unit is further configured to: save the AID-RID mapping information of the queried communication peer to the mapping management module; and determine whether the correspondence between the terminal AID and the communication peer AID in the received data packet has been saved. In the connection maintenance module, if not, it is saved in the connection maintenance module; the second forwarding unit is further configured to: after receiving the downlink data packet sent by the generalized forwarding plane, determine the communication peer in the data packet Whether the AID-RID mapping information exists in the mapping management module, and if it does not exist, saves it to the mapping management module; and determines whether the correspondence between the terminal AID and the communication peer AID in the received data packet has been saved in the connection maintenance module. If not, save to the connection maintenance module.

The above communication network may also have the following features: The ILCR further includes a handover control module, where the handover control module includes a cut-out control unit and a cut-in control unit, where: The cut-out control unit is configured to: implement control for cutting out the terminal, and when the terminal moves, determine, according to the destination of the movement, the cut-in ILCR to which the terminal is to move, and notify the mapping management module and the connection maintenance module to cut the terminal after the movement is completed. Out, the data packet sent to the terminal received during the handover is forwarded to the cut-in ILCR;

The hand-in control unit is configured to: implement control of the terminal hand-in. When the terminal moves from another ILCR to the service area of the ILCR, allocate the RID to the ILCR to the terminal, and send the AID of the terminal and the RID to the registration. The module is logged out and saved to the mapping management module.

The above communication network can also have the following characteristics:

The hand-in control unit is further configured to: query the location information of the peer ILCR, send a terminal RID update notification to the peer ILCR, and carry the AID-RID mapping information of the terminal; when querying, first save the terminal according to the terminal AID to the connection maintenance module. The AID of all the communication peers is found in the connection information between the terminal and the communication peer, and the corresponding RID is found in the AID-RID mapping information of the communication peer end saved by the mapping management module, and the RID found is the pair. Location information of the terminal ILCR;

The mapping management module is further configured to: manage the communication peers of all terminals accessing the ILCR, and update the locally saved AID-RID mapping information of the terminal after receiving the terminal RID update notification sent by the peer.

The above communication network can also have the following characteristics:

The ILR is further configured to: save or update the AID-RID mapping information of the terminal after receiving the registration request to the home user terminal, and delete the AID-RID mapping information of the terminal after receiving the cancellation request for the home user terminal. Or invalidated; if a registration or cancellation request is received for the non-home user terminal, it is forwarded to the home location of the terminal for ILR processing.

The above communication network can also have the following characteristics:

The ILCR is a function that aggregates the home agent and/or the core router in the Wimax network architecture, and extends the new functions required to implement identity and location separation; the connection service network also includes the Wimax network architecture The original network element for authentication, authorization, and accounting.

In order to solve the above technical problem, the present invention further provides a third communication network based on the Wimax network architecture for identity identification (AID) and location separation, including access in the Wimax network architecture. a service network and a connection service network, where the access service network includes a base station and an access gateway, the connection service network includes an identity location register (ILR), and the communication network further includes a location identifier (RID) route and A generalized forwarding plane for forwarding data packets, where:

The access gateway is configured to: provide an access service and control for the terminal, allocate a RID to the terminal, register, log out, and query the RID of the terminal to the home belonging to the ILR, maintain connection information between the terminal and the communication peer, and maintain the terminal and the communication pair. The AID-RID mapping information of the terminal implements routing and forwarding of data packets, and cooperates with other access gateways other than the access gateway to implement handover of the terminal across the access gateway; the ILR is set to: Receive the user to the ILR. The registration and deregistration request of the terminal, the AID-RID mapping information of the home user terminal is maintained, and the query request for the terminal RID is received, and the RID corresponding to the terminal AID in the request is returned to the query requesting party.

The foregoing communication network may also have the following features: The access gateway includes an RID allocation module, an registration cancellation module, a mapping management module, and a data forwarding module, where:

The RID allocation module is configured to: allocate a RID to the terminal during the terminal requesting access or terminal hand-in, and send the RID and the AID of the terminal to the mapping management module and the registration cancellation module; the registration cancellation module is set to: Receiving the terminal AID and the RID assigned to the terminal, registering with the terminal ILR to the terminal RID, carrying the terminal's AID and RID; after knowing that the terminal is offline, requesting the terminal to belong to the local ILR to cancel the RID of the terminal;

The mapping management module is configured to: cache and perform AID-RID mapping information of the communication terminal; and the data forwarding module is configured to: after receiving the uplink data packet, the terminal in the uplink data packet When the communication peer does not belong to the same ILCR, the communication peer RID queried from the mapping management module or the communication peer home ILR is encapsulated in a data packet including the terminal AID and the communication peer AID, and forwarded to the tunnel. ILCR; and decapsulating the downlink data packet and sending it to the terminal.

The foregoing communication network may also have the following features: The access gateway further includes a connection maintenance module and an offline processing module, where:

The connection maintenance module is configured to: save connection information between the terminal and the communication peer; and learn to delete the connection information between the terminal and the communication peer after the terminal is offline or removed, or after communication with the communication peer is terminated; After the communication peer is offline or terminated with the terminal, the connection information between the communication peer and the terminal is deleted; the offline processing module is configured to: notify the registration cancellation module and connect after determining that the terminal accessing the access gateway is offline The maintenance module and the mapping management module; notify the connection maintenance module and the mapping management module when determining that the communication peer is offline;

The mapping management module is configured to: delete the terminal when the terminal is cut out or offline

AID-RID mapping information, deleting AID-RID mapping information of a communication peer end of the communication communication end that has no communication relationship with other terminals accessing the access gateway; and knowing that the terminal and the communication peer end communication are terminated, and the communication pair If there is no communication relationship between the terminal and the other terminal accessing the ILCR, the AID-RID mapping information of the communication peer is deleted; when the communication peer is offline or terminates with the terminal, the AID-RID information of the communication peer is deleted.

The above communication network can also have the following characteristics:

The RID distribution module is configured to: assign a RID to the terminal to the access gateway; the offline processing module is further configured to: when determining that the communication peer is offline, find all communication pairs of the terminal according to the terminal AID to the connection maintenance module. The AID of the end, and then the mapping management module queries the RID of all communication peers, and then sends a terminal offline notification to the peer access gateway, carrying the AID of the terminal; and after receiving the offline notification of the terminal sent by the peer access gateway , determining that the terminal as the communication peer is offline; or

The RID distribution module is configured to: allocate a RID to the terminal to the ILCR; the offline processing module is further configured to: when determining that the communication peer is offline, find the AID of all communication peers of the terminal according to the terminal AID to the connection maintenance module, and then Querying the location information of the peer access gateway from the local or communication peer AAA home server, and then sending the terminal offline notification to the peer access gateway, carrying the AID of the terminal; and receiving the peer access After the offline notification of the terminal sent by the gateway, it is determined that the terminal that is the communication peer is offline.

The above communication network can also have the following characteristics:

The access gateway further includes a switching module, and the switching module is configured to: when the terminal moves to control of a handover triggered by another access gateway service area, the switching module includes a cut-out unit and a cut-in unit:

The cut-out unit is set to: implement the cutting out of the terminal, and the data received during the switching to the terminal The file is forwarded to the access gateway, and the connection maintenance module is notified after the handover is completed.

The access gateway or the ILCR pointed to by the RID is changed, and the mapping management module is also notified; optionally, the connection information of the terminal and the communication peer and/or the AID-RID mapping information of the communication communication end of the terminal are sent to the access access gateway to save ;

The cut-in unit is configured to: implement the handover of the terminal, if the handover causes the access gateway or the ILCR pointed by the terminal RID to change, allocate a new RID to the terminal, save the new AID-RID mapping information of the terminal to the mapping management module, and The terminal AID and the newly assigned RID are sent to the registration logout module.

The above communication network can also have the following characteristics:

The access service network has a data plane interface with a generalized forwarding plane; the data forwarding module includes:

The first forwarding unit is configured to: after receiving the uplink data packet sent by the base station, including the terminal AID and the communication peer AID, and the terminal and the communication peer do not belong to the same ILCR, for example, querying the communication pair in the mapping management module The RID of the terminal, the RID of the terminal and the communication peer is encapsulated in the data packet as a source and destination address, and sent to the generalized forwarding plane; if the RID of the communication peer is not queried, the RID of the communication peer is queried to the ILR of the communication peer; as well as

The second forwarding unit is configured to: decapsulate the downlink data packet sent by the generalized forwarding plane, strip the RID, and send the connection to the terminal through the connection between the access gateway and the terminal.

The above communication network can also have the following characteristics:

The connection service network includes an identity location core router (ILCR), and the ILCR is configured to: maintain a session connection of the terminal, establish a tunnel between the access gateway and the ILCR, and forward between the generalized forwarding plane and the access gateway. The data packet of the RID format is the source address and the destination address; the RID allocation module of the access gateway is configured to: the RID allocated to the terminal points to the access gateway; the data forwarding module includes:

The first forwarding unit is configured to: after receiving the uplink data packet sent by the base station, including the terminal AID and the communication peer AID, and the terminal and the communication peer do not belong to the same ILCR, such as querying the communication in the mapping management module The RID of the peer end encapsulates the RID of the terminal and the communication peer as a source and destination address in the data packet, and performs tunnel encapsulation and then forwards it to the ILCR. If the RID of the communication peer is not queried, the ILR query communication to the communication peer end is performed. The RID of the peer; and The second forwarding unit is configured to: decapsulate the downlink data packet sent by the ILCR, strip the RID and the tunnel encapsulation, and send the connection to the terminal through the access gateway to the terminal.

The above communication network can also have the following characteristics:

Established between the access gateway (AGW) and the ILCR is a terminal-based dynamic tunnel; or a static tunnel is established between the access gateway (AGW) and the ILCR, and the ILCR is further configured to: After the tunnel between the ILCRs is established, the AGW-AID-RID mapping information of the terminal is cached and maintained, and after the terminal moves to the service area of another ILCR, the AGW-AID-RID mapping information of the terminal is deleted.

The above communication network can also have the following characteristics:

The connection service network includes an identity location core router (ILCR), and the ILCR is configured to: maintain a session connection of the terminal, establish a tunnel between the access gateway and the ILCR, and forward between the generalized forwarding plane and the access gateway. The data packet of the RID format is the source address and the destination address; the RID allocation module of the access gateway is configured to: the RID allocated to the terminal points to the ILCR that establishes a tunnel with the access gateway; the data forwarding module includes:

The first forwarding unit is configured to: after receiving the uplink data packet sent by the base station, including the terminal AID and the communication peer AID, and the terminal and the communication peer do not belong to the same ILCR, if the mapping management module queries the communication pair The RID of the terminal is used as the source address of the terminal RID or the access gateway address, and the communication peer RID is encapsulated in the data packet as the destination address, and is encapsulated and forwarded to the ILCR; if the RID of the communication peer is not queried, The communication peer end attribution ILR queries the RID of the communication peer;

The second forwarding unit is configured to: decapsulate the downlink data packet sent by the ILCR, strip the RID and the tunnel encapsulation thereof, or strip the RID, the access gateway address, and the tunnel encapsulation, or strip the tunnel therein After being encapsulated, the connection between the access gateway and the terminal is sent to the terminal.

The above communication network can also have the following characteristics:

A dynamic tunnel is established between the access gateway (AGW) and the ILCR; or a static tunnel is established between the access gateway (AGW) and the ILCR, and the ILCR includes a packet forwarding module, and the packet is The forwarding module further includes:

The first forwarding unit is configured to: the terminal and the communication peer sent by the access gateway do not belong to After the uplink data packet of the same ILCR, the source AID is used to query the AGW-AID-RID mapping information in the local cache, and the access gateway address as the source address is replaced with the terminal RID, and the tunnel encapsulation is stripped and forwarded to the mapping forwarding plane. Or a generalized forwarding plane;

The second forwarding unit is configured to: after receiving the downlink data packet sent by the generalized forwarding plane, query the AGW-AID-RID mapping information in the local cache according to the destination AID, and replace the destination RID in the data packet with the destination RID. After the gateway address is encapsulated and encapsulated, it is forwarded to the access gateway accessed by the terminal. After receiving the downlink data packet sent from the generalized forwarding plane, the RID encapsulated in the data packet is stripped and encapsulated. The AGW-AID-RID mapping information in the local cache is queried according to the destination AID, and the data packet is forwarded to the access gateway accessed by the terminal.

The above communication network can also have the following characteristics:

The connection service network further includes a packet forwarding function (PTF) entity; the first forwarding unit in the access gateway is configured to: after receiving the uplink data packet sent by the base station and the communication peer end not belonging to the same ILCR If the RID of the communication peer is not queried in the mapping management module, the terminal RID is encapsulated in the data file and forwarded to the PTF entity of the communication peer; or the terminal RID is encapsulated in the data packet as the source address. After the tunnel is encapsulated, it is forwarded to the PTF entity belonging to the communication peer end;

The PTF entity is configured to: after receiving the data packet sent by the ILCR or other PTF entity, the RID is found as the destination address and is encapsulated in the packet header according to the communication peer AID in the data packet, and the data is encapsulated in the packet header. The message is sent to the peer ILCR or the peer access gateway through the generalized forwarding plane.

The above communication network can also have the following characteristics:

The first forwarding unit in the access gateway is configured to: after receiving the uplink data packet sent by the base station and the communication peer that does not belong to the same ILCR, if the mapping management module cannot query the RID of the communication peer, The data packet is buffered, and after the RID of the communication peer is queried, the RID of the terminal and the communication peer is encapsulated in the data packet as a source and destination address, and then tunneled and then forwarded to the ILCR or directly sent to the generalized forwarding plane. .

The above communication network can also have the following characteristics:

The first forwarding unit in the access gateway is further configured to: save the queried AID-RID mapping information of the communication peer to the mapping management module; determine the terminal AID in the received data packet Whether the correspondence between the communication peer AID has been saved in the connection maintenance module, and if not, it is saved in the connection maintenance module;

The second forwarding unit in the access gateway is configured to: after receiving the downlink data packet, determine whether the AID-RID mapping information of the communication peer end in the data packet exists in the mapping management module, if not, Save to the mapping management module; and determine whether the correspondence between the terminal AID and the communication peer AID in the received data packet has been saved in the connection maintenance module, and if not, save to the connection maintenance module.

The above communication network can also have the following characteristics:

The intercepting unit of the access gateway is further configured to: query location information of the peer access gateway, send a terminal RID update notification to all the peer access gateways, and carry the new AID-RID mapping information of the terminal;

The mapping management module in the access gateway is further configured to: update the locally saved AID-RID mapping information of the terminal after receiving the terminal RID update notification sent by the peer end.

The above communication network can also have the following characteristics:

The access gateway is obtained by the function entity of the access gateway in the Wimax network architecture, and the new function module required for implementing identity identification and location separation is extended, and the access gateway in the Wimax network architecture is obtained. The functional entities that are included include the Anchored Data Channel Function (DPF) module and the authenticator.

The above-mentioned communication network based on the Wimax network architecture supports the application scenario of the mobile terminal, and effectively solves the problem of the loop in the scenario.

The above-mentioned deployment of the communication network based on the Wimax network architecture considers the requirements of the compatible terminal and the compatible upper-layer service, and only needs to upgrade the network-side device, and is compatible with the application scenario without changing the terminal.

The method for enabling the terminal to initiate communication according to the identity identifier and the addressing of the peer end according to the RID, the present invention also provides a method for the terminal to boot into the first or second communication network, including: after the terminal is powered on, Access authentication and initial service flow creation, and then obtain an identity (AID) from the access gateway;

In the process of initiating tunnel establishment by the access gateway to an identity location core router (ILCR), The ILCR allocates a location identifier (RID) directed to the ILCR to the terminal, saves mapping information of the terminal AID and the RID, and notifies the access gateway of the RID allocated to the terminal;

After obtaining the AID and the RID of the terminal, the access gateway or the ILCR initiates a registration request to the home ILR of the terminal, and carries the AID and the RID of the terminal; after receiving the registration request, the ILR saves the current terminal of the terminal. AID-RID mapping relationship.

The above method can also have the following characteristics:

The AID obtained by the terminal from the access gateway is sent by the AAA server of the terminal to the access gateway in the access authentication process of the terminal.

The above method can also have the following characteristics:

The terminal obtains the AID of the terminal from the access gateway by using a dynamic host configuration protocol (DHCP) process or by using a mobile IP method, where the AID is a static IP address allocated when the terminal signs the contract.

The above method can also have the following characteristics:

During the establishment of the tunnel, the ILCR also authenticates to the home AAA server of the terminal to obtain key information.

In order to enable the terminal to initiate communication according to the identity, and to address the peer according to the RID, the present invention also provides a method for the terminal to boot into the third communication network, including:

After the terminal is powered on, performing access authentication and initial service flow creation, and then obtaining an identity (AID) of the terminal from the access gateway;

The access gateway allocates a location identifier (RID) to the terminal, saves mapping information of the terminal AID and the RID, and sends a registration request to the ILR of the terminal home, carrying the AID and the RID of the terminal;

After receiving the registration request, the ILR saves the current AID-RID mapping relationship of the terminal. The above method can also have the following characteristics:

The above method can also have the following characteristics: The terminal obtains the AID of the terminal from the access gateway by using a dynamic host configuration protocol (DHCP) process or by using a mobile IP method, where the AID is a static IP address allocated when the terminal signs the contract.

The above method can also have the following characteristics:

The step of assigning the RID to the terminal by the access gateway is to trigger the access gateway to allocate an RID to the terminal in the process of acquiring the AID from the access gateway.

The above method can also have the following characteristics:

Established between the access gateway and the ILCR is a static tunnel, and the access gateway allocates an AID to the access gateway or points to an ILCR with which a static tunnel is established; or the access gateway and the ILCR Established between the terminal is a dynamic tunnel, and the AID allocated by the access gateway to the terminal points to the access gateway.

The method for accessing the communication network by the terminal, the network assigns an identity identifier and a location identifier to the terminal, and after the terminal accesses, the IRR registers the RID of the terminal, so that the terminal can initiate communication according to the identity identifier, and implement the communication according to the RID. The addressing of the peer. BRIEF abstract

1 is a schematic diagram of an existing Wimax network architecture;

2 is a schematic diagram of a network topology of an identity identification and location separation (SILSN) architecture according to the present invention; FIG. 3 is a schematic diagram of a topological relationship between a SILSN network and a traditional IP network in FIG. 2; FIG. 4a is a first to sixth embodiment of the present invention; Schematic diagram of a SILSN network implemented based on the Wimax architecture;

4b is a schematic diagram of a SILSN network implemented based on a Wimax architecture according to Embodiment 7 of the present invention; FIG. 5 is a first flowchart of a user booting into the network according to an embodiment of the present invention;

6 is a second flowchart of a user booting into the network according to an embodiment of the present invention;

7 is a third flowchart of a user booting into the network according to an embodiment of the present invention;

FIG. 8 is a fourth flowchart of a user booting into the network according to an embodiment of the present invention; FIG.

9 is a block diagram of an access gateway and an ILCR according to an embodiment of the present invention; 10 is a block diagram of an access gateway and an ILCR according to Embodiment 2 of the present invention;

11 is a block diagram of an access gateway and an ILCR according to Embodiment 6 of the present invention.

Preferred embodiment of the invention

The technical solutions of the present invention are further described in detail below with reference to the accompanying drawings and specific embodiments to enable those skilled in the art to understand the invention. .

Figure 2 shows a Subscriber Identifier & Locator Separation Network (SILSN) architecture. The network topology of the SILSN architecture is divided into access networks and backbone networks with no overlapping relationships in the topology relationship. It is located at the edge of the backbone network and is responsible for accessing all terminals. The backbone network is responsible for routing and forwarding data packets between terminals.

There are two types of identification in the network of the SILSN architecture: Access Identifier (AID) and Routing Identifier (RID). The AID is the user identity of the terminal, and the network assigns an AID to each terminal user, which remains unchanged during the terminal movement; the RID is the location identifier assigned by the network to the terminal, and is used in the backbone network. It should be noted that the identity and location identifiers may have different names in different SILSN architectures, but the essence is the same. After the user subscribes to become the network user of the architecture, the user can perform the account opening operation in the home authentication center and the home ILR. The authentication center and the ILR record the attribute data of the user, including the AID assigned to the user. After the account numbering process is completed, the AID is statically assigned to the user, and the user's AID remains unchanged during the effective legal existence of the user.

In the SILSN architecture, the terminal may be one or more of a mobile terminal, a fixed terminal, and a nomadic terminal, such as a mobile phone, a landline telephone, a computer, a server, and the like.

In the SILSN architecture, the access network is used to provide a Layer 2 (physical layer and link layer) access means for the terminal, and maintains a physical access link between the terminal and the ASN. Possible Layer 2 access methods include: Cellular mobile network technology (GSM/CDMA/TD-SCDMA/WCDMA/Wimax/LTE), DSL, broadband fiber access or WiFi access, and more.

In the SILSN architecture, the access service node is used to provide access services for the terminal, maintain the connection between the terminal and the network, assign the RID to the terminal, maintain the AID-RID mapping information, and register with the mapping forwarding plane. Register and query the RID of the terminal, and implement the routing and forwarding of data packets.

In the SILSN architecture, the main network elements of the backbone network include:

An access service node (ASN) is used to allocate RIDs to terminals, maintain AID-RID mapping information of terminals, register and register RIDs of ILRs, and implement routing and forwarding of data packets. The ASN accesses the backbone network. The RID assigned by the ASN contains the address information of the ASN. When the RID is used as the destination address of the data packet, the data packet will be routed to the ASN.

A common router (CR) is used to select a route according to the RID in the data packet, and forward the data with the RID as the destination address.

The Identity Location Register (ILR) is used to store the identity and location identifier mapping information of the terminal. The text is also written as AID-RID mapping information to process registration, logout, and query of the terminal location.

Optionally, the backbone network may further include:

A Packet Transfer Function (PTF) entity, also known as a packet forwarding function node, is used to route and forward data packets with the AID as the destination address.

An Interconnect Service Node (ISN) has an interface with a general-purpose router, ASN, and ILR for querying and maintaining AID-RID mapping information of the network terminal, encapsulating, routing, and forwarding between the network and the legacy IP network. Data packets from and to each other to achieve interconnection and interoperability between the two networks.

The above ILR, or ILR and PTF entities form the mapping forwarding plane of the backbone network, CR, or

CR and ISN form the generalized forwarding plane of the backbone network. Other network elements such as a certification center may also be included in the backbone network.

The SILSN architecture can exist and evolve in the form of one or more islands of a traditional IP network, or as an extension of a traditional IP network. The topology relationship between the SILSN architecture and the traditional IP network is shown in Figure 3. The backbone part of the SILSN architecture is in the same plane as the traditional IP, and communicates with the traditional IP network through the ISN. The SILSN architecture has the capability of independent networking, which can form a network that is developed independently from the traditional IP network. At this stage, the functional entity ISN will no longer exist. The SILSN architecture is mainly a technology for identity identification and location separation proposed by the existing mobile Internet. Based on the Wimax network architecture, an implementation example of implementing the SILSN architecture on the Wimax network architecture is proposed, which is mainly for implementing terminal identity identification and The relevant content of the improvements made on the original system required for the location separation is described.

Figure 4a shows a schematic diagram of the SILSN architecture implemented in the Wimax network architecture. The solid line in the figure shows the connection of the bearer plane and the dashed line shows the connection of the control plane. In a system with a SILSN architecture, the Wimax legacy terminal can achieve mobility without fixed anchor points, solves the problem of packet path roundabout, and can also achieve the purpose of solving the dual identity of the IP address.

In this paper, the network element that accesses the communication peer end of the terminal is simply referred to as the peer network element. When the terminal switches, the network element cut out by the terminal is simply referred to as the cut-out network element, and the network element that the terminal cuts in is called the cut-in network. When describing the information transfer between two network elements, if there is no specific indication that a network element is a peer network element, it should be understood as information transmission between network elements on the same side of the terminal access; When a function of a network element is expressed, a user terminal that accesses the network element is referred to as a terminal, and a user terminal that accesses the network element is called a communication peer.

In addition, when a network element receives information sent by another network element, the information is distributed to a module that saves or processes the information, and the function will not be further described below.

Embodiment 1

In this embodiment, the communication network with the SILSN architecture implemented based on the Wimax network architecture also includes an access service network (W-ASN), a connection service network (W-CSN), and a generalized forwarding plane, as shown in FIG. 4a. In the W-CSN, the original network element in the Wimax architecture, such as the AAA proxy or server (AAA Proxy/Server), the accounting server, and the interconnection gateway device, also sets the Identity Location Core Route (ILCR). ), Identity Location Register (ILR) and Packet Forwarding Function (PTF) entities, ILR and PTF entities can be combined, represented as ILR/PTF entities, and the ILR/PTF entities in each W-CSN form a mapping forwarding plane. Among them, ILCR integrates the functions of HA and W-CR, and expands the new functions required to implement the SILSN architecture. The extended function modules can be combined with the original function modules or can be set separately. The W-ASN includes a base station and an access gateway, wherein the access gateway is based on a functional entity (such as an anchor DPF entity, an authenticator, etc.) of the access gateway in the Wimax architecture. , extended implementation of SILSN New features needed. In addition, the generalized forwarding plane in the communication network includes a packet data network that supports routing and forwarding of data messages by RID (other embodiments are the same). The W-CSN has a data plane interface with the generalized forwarding plane, which is represented as a D interface.

In this embodiment, a dynamic tunnel based on the terminal is established between the ILCR and the access gateway. When the terminal registers or switches to the network, the ILCR allocates the RID to the terminal according to the established policy, and the access gateway registers with the ILR. The RID assigned by ILCR should point to the ILCR. According to the business needs, ILCR can assign one or more dedicated RIDs to one terminal, and can also assign the same RID to multiple terminals. When the data message is forwarded, the ILCR queries the ILR for the AID-RID mapping information. When the terminal goes offline, the access gateway deregisters the AID-RID mapping information from the ILR.

Referring to FIG. 9, the WiMAX system of this embodiment includes the following parts:

An access gateway (AGW), located in the WiMAX access service network (W-ASN), is used to provide access services and control for user terminals, to register and logout terminals to the terminal's home ILR, and to maintain terminals and communication peers. Connection information. The access gateway can also be used to cooperate with other access gateways to implement handover of the terminal across the AGW and across the ILCR. The access gateway also has other functions in the Wimax system, such as cooperating with the AAA server to complete the authentication of the terminal. This part of the function will not be described in detail.

In this embodiment, the access gateway includes the following functional entities related to the extended function:

The registration cancellation module is configured to, after receiving the terminal AID and the RID assigned to the terminal, request the terminal to belong to the local ILR to register the terminal RID, and carry the AID and the RID of the terminal; after learning that the terminal is offline, requesting the terminal to belong to the local ILR Log out of the RID of the terminal.

An offline processing module, configured to notify the registration cancellation module and the connection maintenance module when determining that the accessed terminal is offline; optionally, notifying all the peer access gateways that the terminal is offline, and notifying the connection when determining that the communication peer is offline Maintenance module and ILCR. The offline processing module can query the location information of the peer access gateway from the local or communication peer AAA home server. The offline processing module can determine whether the terminal is offline according to the flow real-time detection mechanism or according to relevant signaling of the received terminal offline. It should be noted that it is optional to notify the peer end that the terminal is offline when the terminal is offline, and the peer end can also determine whether the communication peer is offline through the real-time detection mechanism.

The connection maintenance module is configured to save connection information between the terminal and the communication peer; Delete the connection information between the terminal and the communication peer after the communication is terminated (including the scenario where the communication peer exists or does not exist) or after the termination of the communication with the communication peer; after the communication peer is offline or terminated with the terminal, the communication peer and the terminal are deleted. Connection information. The terminal is removed or terminated with the communication peer. The connection maintenance module can be notified by the relevant function module in the access gateway, and the ILCR is similar.

The data forwarding module is configured to perform data packet forwarding between the base station and the ILCR, and after receiving the data packet, determine whether the correspondence between the terminal AID and the communication peer AID in the data packet has been saved in the connection maintenance module, such as If not saved, the connection maintenance module is notified to save the connection information between the terminal and the communication peer.

The switching module is used for controlling the handover of the service area triggered by the terminal to the service area of another anchor DPF module or ILCR when there is a communication peer end, including the cut-out unit and the cut-in unit:

The cut-out unit is configured to implement the control of the terminal cut-out, notify the ILCR of the terminal to switch, forward the data packet sent to the terminal during the handover to the access access gateway, and notify the connection maintenance module after the terminal cuts out; Optionally, the connection information of the terminal and the communication peer saved by the connection maintenance module is sent to the access access gateway.

The cut-in unit is configured to implement the control of the terminal cut-in, and save the connection information of the terminal and the communication peer sent out by the access gateway to the connection maintenance module.

In a WiMAX system, the registration logout module can be combined with a functional entity authenticator or an anchor DPF module of the access gateway. The connection maintenance module can be combined with the authenticator or the anchor DPF module. When not connected with the anchor DPF, the DPF module needs to be anchored to obtain the AID of the terminal and the communication peer from the data message, and the new contingency is changed. The correspondence between the terminal AID and the communication peer AID is notified to the connection maintenance module for saving or updating. The data forwarding module can be combined with the anchor DPF module. The switching control module can be combined with the anchor DPF module.

The Identity Location Core Router (ILCR), located in the WiMAX Core Service Network (W-CSN), is used to maintain the session connection of the terminal, assigning the terminal to the RID of the ILCR, and to the ILR query terminal (where the terminal includes the communication peer) RID, maintain AID-RID mapping information of the terminal and the communication peer, and implement routing and forwarding of data packets. ILCR is also used in conjunction with other ILCRs to achieve terminal cross-ILCR switching.

In this embodiment, the ILCR includes the following functional entities related to the extended function: The tunnel establishment module is configured to establish a tunnel between the access gateway and the ILCR, allocate a RID to the terminal, and send the AID and the RID of the terminal to the registration and cancellation module of the access gateway and the local mapping management module. The tunnel is dynamically established, that is, a terminal-based tunnel is established in the terminal access process.

a mapping management module, configured to cache AID-RID mapping information of the terminal and the communication peer; when the terminal is cut out or offline, the AID-RID mapping information of the terminal is deleted, and the other end of the terminal communication terminal and the accessing ILCR are deleted. The terminal has no communication relationship AA-RID mapping information of the communication peer; after learning that the communication between the terminal and the communication peer is terminated, and the communication peer has no communication relationship with other terminals accessing the ILCR, deleting the AID-RID of the communication peer Mapping information; when the communication peer is offline or terminated with the terminal, the AID-RID information of the communication peer is deleted; after receiving the terminal RID update notification sent by the peer, the locally saved AID-RID mapping information of the terminal is updated. The mapping management module can uniformly manage the mapping information of all communication peers accessing the ILCR.

The offline processing module is configured to notify the mapping management module when determining that the accessed terminal is offline; and notify the mapping management module when determining that the communication peer is offline; the offline processing module may be based on the real-time detection mechanism of the flow, or may be offline according to the received terminal. Relevant signaling, etc., to determine whether the terminal is offline, may determine that the corresponding communication peer is offline according to the received offline notification of the terminal or the real-time detection mechanism of the flow sent by the access gateway.

The message forwarding module is configured to: after receiving the uplink data packet, encapsulate the RID of the communication peer and the RID of the terminal that are queried by the mapping management module or the communication peer home ILR from the terminal AID and the communication peer AID. In the data, when the terminal and the communication peer do not belong to the same ILCR, the generalized forwarding plane routes and forwards to the opposite ILCR, and decapsulates the downlink data packet, strips the RID and sends it to the terminal.

The packet forwarding module includes a first forwarding unit and a second forwarding unit, where:

The first forwarding unit is configured to: after receiving the uplink data packet sent by the base station, including the terminal AID and the communication peer AID, when the terminal and the communication peer do not belong to the same ILCR, for example, the mapping management module queries the communication peer end. RID, the RID of the terminal and the communication peer is encapsulated in the data packet as the source and destination addresses, and is routed through the generalized forwarding plane and forwarded to the peer ILCR;

If the RID of the communication peer is not queried, the ILR of the communication peer is queried to the RID of the communication peer, and the AID-RID of the queried communication peer is saved to the mapping management module. At this time for the data message, The terminal RID may be encapsulated in the data packet as a source address, and forwarded to the PTF entity (the destination address may be the RID of the PTF entity of the communication peer end, or may be the RID of the visited PTF entity, and then sent by the visited PTF entity to The PTF entity to which the communication peer belongs, and so on) is forwarded by the PTF entity to the peer ILCR. It may also be cached first. After querying the RID of the communication peer, the RID of the terminal and the communication peer is encapsulated as the source and destination addresses. In the data message, it is routed through the generalized forwarding plane and forwarded to the peer ILCR.

The first forwarding unit searches for the terminal (or the communication peer). The home ILR and/or the PTF entity can be implemented by querying the mapping relationship between the locally configured terminal (or communication peer) AID and its home ILR and/or PTF entity.

The second forwarding unit is configured to decapsulate the downlink data packet sent by the received generalized forwarding plane, strip the RID, and send the connection to the terminal through the connection between the ILCR and the terminal; optionally, the datagram is also determined. Whether the AID-RID mapping information of the communication peer end exists in the mapping management module, and if not, saves it to the mapping management module.

If the first forwarding unit determines that the terminal in the uplink data packet belongs to the same ILCR as the communication peer according to the AID, the first forwarding unit may directly perform the encapsulation and/or query RID of the RID, and directly send the packet to the second forwarding unit of the ILCR. The second forwarding unit also does not need to strip the RID package. Of course, you can also not judge, and use the above methods that are not in the same ILCR for encapsulation, routing, and forwarding. Other embodiments are the same.

The switching control module is configured to control, when the terminal has a communication peer, move to another ILCR service area, including a cut-out control unit and a cut-in control unit, where:

The cut-out control unit is configured to implement control for cutting out the terminal, and send a handover request to the hand-in ILCR to which the terminal moves; and forward the data packet sent to the terminal during the handover to the hand-in ILCR; after the terminal cuts out Notifying the mapping management module; optionally, sending the AID-RID mapping information of the terminal communication peer to the cut-in ILCR save. During the handover, the cut-out control unit may not send the AID-RID mapping information of the communication peer to the cut-in ILCR. In this case, the cut-in ILCR may reconstruct the mapping information by querying the ILR in the subsequent data packet forwarding process.

a cut-in control unit, configured to implement control of the terminal hand-in, assign a terminal to the RID of the ILCR, and send the AID and the RID of the terminal to the mapping management module and the access gateway; and query the location information of the opposite ILCR, The peer ILCR sends a terminal RID update notification, carrying the terminal AID-RID mapping information. The cut-in control unit may find the AID of all communication peers of the terminal according to the connection maintenance module of the terminal to the access gateway, and then find the RID of the communication peer to the mapping management module, where the RID is the location information of the peer ILCR. . Other embodiments are also possible.

It should be noted that the AID-RID mapping information of the communication peer end transmitting the terminal to the side of the cut-in side is cut out, and the communication relationship information between the transmitting terminal and the communication peer end is optional, and the process of initiating communication at the terminal side can also be initiated. Get this information in . Other embodiments are the same.

The identity location register and packet forwarding function (ILR/PTF) entity is located in the mapping forwarding plane of the backbone network and can be two functional modules on the same entity.

The ILR is configured to receive a registration and deregistration request for the home user terminal, maintain the AID-RID mapping information of the terminal, and return the RID corresponding to the terminal AID included in the request to the query after receiving the query request to the terminal. Requester. The ILR may save or update the AID-RID mapping information of the terminal after receiving the registration request to the home user terminal, and delete or invalidate the AID-RID mapping information of the terminal after receiving the cancellation request for the home user terminal. If a registration or deregistration request is received for the non-home user terminal, it is forwarded to the terminal home ILR for processing. The ILR can be combined with an AAA server to extend the existing AAA server to support ILR functionality or to be a separate network element in the network.

The Packet Forwarding Function (PTF) entity is optional. The PTF entity can be set up with the ILR or set separately for the datagram of the ILCR or other PTF entity (the destination address is the PTF entity address). After the text, the corresponding RID is found according to the communication peer AID (for example, it can be searched by ILR or local search) and encapsulated in the packet header as the destination address, and the data packet is sent to the opposite ILCR through the generalized forwarding plane.

As shown in Figure 4a, the primary interface in this architecture extends the functionality of the existing WiMAX network interface. Includes:

* The R3 interface is the interface between the access gateway and the W-CSN. When roaming, the R3 interface is the interface between the access gateway and the visited W-CSN. The difference between the interface function and the R3 interface function in the existing WiMAX network is mainly reflected in the following aspects: The control plane is used to register the RID of the terminal with the terminal ILR. When roaming, the control plane signaling between the access gateway and the terminal's home ILR is forwarded by the visited ILR to the home ILR through the R5 interface.

The control plane of the R3 interface is also used to establish a tunnel with the ILCR, transmit the terminal RID information, and can also be used to transmit the communication terminal AID information.

The data plane of the R3 interface is also used for data forwarding between the access gateway and the ILCR. The packet format is shown in Table 1:

Table 1

The source AID is the AID of the terminal that sends the data packet, and the destination AID is the AID of the terminal to which the data packet is sent. The access gateway adds tunnel encapsulation to the data packet before the data packet is forwarded. There are many, such as L2TPv3, IP-in-IP, MPLS (LDP-based and RSVP-TE based), GRE, MIP and IPsec, etc., and the present invention is not limited to any particular tunnel encapsulation.

• The R4 interface is the interface between the access gateways. The difference between the interface function and the R4 interface function in the existing WiMAX network is mainly reflected in the following aspects:

The control plane is used to communicate the connection information between the terminal and the communication peer when the user moves.

* The R5 interface is the interface between the W-CSN and the home W-CSN when roaming. The difference between the interface function and the R5 interface function in the existing WiMAX network is mainly reflected in the following aspects: Control plane, used to belong to the terminal Local ILR registration and cancellation. When switching across ILCR, the R5 interface is also the interface between the ILCRs, used to switch the management signaling, and the RID update message is transmitted when the position between the communication peers changes, the data between the ILCRs is forwarded, and the data packets are switched. The following formats may exist in different periods: When the ILCR is cut out for RID encapsulation and decapsulation, the message format is as shown in Table 2:

Table 2

When cutting into ILCR for RID encapsulation and decapsulation, the format is as shown in Table 3:

table 3

Before the data packet is forwarded, the ILCR adds tunnel encapsulation to the data packet. There are many tunnel encapsulation methods, such as L2TPv3, IP-in-IP, MPLS (LDP-based and RSVP-TE based), GRE, and IPsec. The invention is not limited to any particular tunnel encapsulation.

• The D interface is the interface between the ILCR and the generalized forwarding plane for the forwarding of terminal data messages between the ILCR and the generalized forwarding plane. The format of the data packet of its interface is shown in Table 4:

Table 4

The data packet of the D interface encapsulates the source RID as the source address and the destination RID as the destination address on the basis of the data packet of the R1 interface, where the source RID is the RID assigned to the terminal transmitting the data packet, and the destination RID is The RID assigned to the correspondent peer to which the packet is sent.

• The E interface is the interface between the ILCR and the Map Forwarding Plane (ILR/PTF) entity.

Control plane, used to query and maintain AID-RID mapping information. User plane, used to forward terminal data packets between ILCR and PTF. The format of data packets on the interface is shown in Table 5:

table 5

The data packet of the E interface is also encapsulated with the source RID as the source address on the basis of the data packet of the R1 interface, and is the RIDi of the destination address, where the source RID is the RID of the terminal that sends the data packet, and the RIDi is in the mapping forwarding plane. The routing address of the visited PTF or the communication peer home PTF entity can be obtained from the configuration data on the ILCR.

For the communication network of the embodiment, there are also the following modifications: In the first variant, in this variant, the function of registering the logout module does not exist in the access gateway, and the function module is implemented in the ILCR. The connection information between the terminal and the communication peer is still maintained by the connection maintenance module in the access gateway, and the mapping information of the AID-RID is still maintained by the ILCR. At this time, the tunnel establishment module and the handover control module of the ILCR do not need to send the AID of the terminal and the RID allocated for the terminal to the access gateway.

In a second variant, in the variant, the connection control information of the terminal and the communication peer is obtained by the cut-out control unit in the ILCR and the access gateway is notified, and the offline processing module of the ILCR can determine the terminal and/or the communication according to the flow real-time detection mechanism. If the peer is offline and notifies the access gateway, the packet forwarding module in the ILCR receives the data packet and determines whether the mapping between the terminal AID and the communication peer AID in the data packet is saved in the connection maintenance module. Then it is transmitted to the connection maintenance module of the access gateway. ILCR can also set up a connection maintenance module locally.

In the third variant, if the R5 interface does not have the function of transmitting the terminal RID update notification, when the terminal moves to cause the changed ILCR to change, the cut-in ILCR needs to notify the terminal RID update through the cut-in access gateway. The peer access gateway passes to the peer ILCR. Correspondingly, on the function module, the cut-in control unit of the ILCR is further configured to send a terminal RID update notification to the access gateway, where the handover unit of the access gateway is further configured to send the terminal RID update notification to the opposite access gateway, and receive Forward to the ILCR after the terminal RID update notification transmitted by the peer access gateway. The R3 interface also needs to add this feature.

Embodiment 2

The structure of the communication network in this embodiment still refers to FIG. 4a, and includes an access service network (W-ASN), a connection service network (W-CSN), and a generalized forwarding plane. The network elements included in the W-ASN and the W-CSN are also The first embodiment is the same, and the difference from the first embodiment is that the network elements in which the new functional modules required for implementing the SILSN are located are different.

In this embodiment, a static tunnel is established between the ILCR and the access gateway. When the terminal registers or switches to the network, the access gateway allocates the RID to the access gateway and registers with the ILR. When the data packet is forwarded, the access gateway queries the ILR for AID-RID mapping information. When the terminal goes offline, the access gateway deletes the RID of the terminal from the ILR. The block diagram of the access gateway and ILCR is shown in Figure 10.

The access gateway is located in the WiMAX access service network (W-ASN), provides access services and control for the user terminal, maintains the session connection of the terminal, allocates the RID pointing to the access gateway to the terminal, and registers with the ILR of the terminal attribution. Log out and query the RID of the terminal, maintain the connection information between the terminal and the communication peer, and maintain the AID-RID mapping information of the terminal and the communication peer. The access gateway is also used to cooperate with the AAA server to complete authentication of the terminal, and cooperate with other AGWs to implement handover of the terminal across the AGW and across the ILCR.

The RID allocation module is configured to allocate a RID pointing to the access gateway to the terminal during the terminal requesting access or terminal hand-in, and send the RID and the AID of the terminal to the registration cancellation module and the mapping management module.

The registration cancellation module is configured to register the RID of the terminal with the terminal AID and the RID assigned to the terminal, and carry the AID and the RID of the terminal; and after the terminal is offline, request the terminal to belong to the terminal. The ILR logs out the RID of the terminal.

The connection maintenance module is configured to save the connection information between the terminal and the communication peer; and learn to delete the connection information between the terminal and the communication peer after the terminal is offline or removed, or after the communication with the communication peer is terminated; and the communication peer is offline or after the terminal communication is terminated. , delete the connection information between the communication peer and the terminal.

The mapping management module is configured to cache and maintain the AID-RID mapping information of the terminal and the communication peer; when the terminal is cut out or offline, the AID-RID mapping information of the terminal is deleted, and the terminal and the access terminal of the terminal are deleted. The other terminal of the access gateway does not have the AID-RID mapping information of the communication peer of the communication relationship; after learning that the communication between the terminal and the communication peer is terminated, and the communication peer has no communication relationship with other terminals accessing the ILCR, the communication is deleted. The AID-RID mapping information of the peer end; the AID-RID information of the communication peer end is deleted when the communication peer end is offline or terminates with the terminal communication; and the locally saved AID of the terminal is updated after receiving the terminal RID update notification sent by the peer end -RID mapping information. The mapping management module can manage the communication peers accessing all the terminals of the access gateway.

The offline processing module is configured to notify the registration cancellation module, the connection maintenance module, and the mapping management module after determining that the terminal accessing the access gateway is offline, optionally, when the terminal of the communication peer is offline, according to the AID of the terminal The connection maintenance module finds the AID of all communication peers of the terminal. Then, the mapping management module or the ILR finds the RID of the communication peer, sends an offline notification to the peer access gateway according to the found RID, and carries the AID of the terminal; and when the communication peer is determined to be offline, the connection maintenance is notified. Module and mapping management module. The offline processing module may determine that the terminal is offline according to the related signaling of the offline process of the terminal, the real-time detection mechanism of the flow, and the like, and determine that the communication peer is offline according to the offline notification of the terminal, the real-time detection mechanism of the flow, and the like.

The data forwarding module is configured to perform data packet forwarding between the base station and the ILCR. When the uplink data packet is received and the terminal and the communication peer do not belong to the same ILCR, the mapping management module or the communication peer belongs to the ILR. The communication peer RID and the terminal RID are encapsulated in the data packet including the terminal AID and the communication peer AID, and are forwarded to the ILCR; and the downlink data packet is decapsulated, and the RID is stripped and sent to the terminal.

The first forwarding unit and the second forwarding unit are included, where:

The first forwarding unit is configured to: after receiving the uplink data packet sent by the base station and including the terminal AID and the communication peer AID, if the mapping management module queries the RID of the communication peer, and uses the RID of the terminal and the communication peer as a source. The destination address is encapsulated in the data packet and forwarded to the ILCR after tunnel encapsulation. If the RID of the communication peer is not queried, the IRR of the communication peer is queried to the communication peer, and the AID-RID of the queried communication peer is saved. To the mapping management module, the data packet can be forwarded to the PTF entity after encapsulating the terminal RID as the source address, or after the terminal RID as the source address is encapsulated and tunneled and forwarded to the ILCR (for forwarding by the ILCR) To the PTF entity, the data packet can be cached first. After the RID of the communication peer is queried, the RID of the terminal and the communication peer is encapsulated in the data packet as the source and destination addresses, and the tunnel is encapsulated and forwarded to the ILCR.

The second forwarding unit is configured to decapsulate the downlink data packet sent by the ILCR, strip the RID and the tunnel encapsulation, and send the connection to the terminal through the access gateway to the terminal; optionally, determining the datagram Whether the AID-RID mapping information of the communication peer end exists in the mapping management module, and if not, saves it to the mapping management module.

In addition, the first forwarding unit and the second forwarding unit may also determine whether the correspondence between the terminal AID and the communication peer AID in the data packet has been saved in the connection maintenance module, and if not, save to the connection maintenance module.

The switching module is configured to control, when the terminal has a communication peer, move to another access gateway service area, including a cut-out control unit and a cut-in control unit, where: The cut-out unit is configured to implement the cutting out of the terminal, and the data packet sent to the terminal received during the handover is forwarded to the access access gateway. After the switch is completed, the connection maintenance module is notified, and the mapping management module is also notified. Optionally, the cutting unit connects the terminal to the communication peer and/or the terminal communicates with the peer.

The AID-RID mapping information is sent to the hand-in access gateway for saving.

The cut-in unit is configured to implement the handover of the terminal; assign the RID to the terminal, save the AID-RID mapping information of the terminal, and send the terminal AID and the RID allocated for the terminal to the registration and logout module; optionally, to all the peers The access gateway sends a terminal RID update notification, and carries the new AID-RID mapping information of the terminal. The gateway can find the AID of all communication peers of the terminal according to the AID of the terminal to the connection maintenance module, and then find the RID of the communication peer by the mapping management module or the ILR, and send the terminal RID update notification according to the found RID.

In WiMAX systems, the RID distribution module can be combined with the anchor DPF. The registration logout module can be combined with the functional entity authenticator or anchor DPF module of the access gateway. The connection maintenance module can be combined with the authenticator or the anchor DPF module. When not connected with the anchor DPF, the DPF module needs to be anchored to obtain the AID of the terminal and the communication peer from the data message, and the new or changed. The correspondence between the terminal AID and the communication peer AID is notified to the connection maintenance module for saving or updating. The mapping management module, the data forwarding module, and the switching module can be combined with the anchor DPF.

The Identity Location Core Router (ILCR), located in the WiMAX Core Service Network (W-CSN), is used to maintain the session connection of the terminal, establish a tunnel between the access gateway and the ILCR, and between the generalized forwarding plane and the access gateway. The data packet with the RID format as the source address and the destination address is routed and forwarded. This function is no different from the router in the prior art. The terminal can be connected to the home ILCR or to the visited ILCR.

In this embodiment, the ILCR includes the following functional entities related to the extended function:

A tunnel establishment module is configured to establish a static tunnel between the access gateway and the ILCR, that is, a network element level tunnel is established when the AGW or the ILCR is powered on.

a mapping management module, configured to cache and perform maintenance on the AGW-AID-RID mapping information of the terminal after the tunnel between the access gateway (AGW) and the ILCR is established, where the AID and RID information can be extracted from the data packet, and the AGW The information is obtained according to the correspondence between the AGW and the tunnel. The packet forwarding module is configured to forward the data packet of the terminal connected to the ILCR between the generalized forwarding plane and the access gateway, and the tunnel encapsulation and decapsulation are performed. It is no different from the routers in the prior art. The data packet sent by the access gateway to the PTF entity may be stripped and encapsulated and forwarded to the PTF entity.

The switching control module is configured to move the terminal to another ILCR service area, including a cut-out control unit and a cut-in control unit, the module being optional. among them:

The cut-out control unit is configured to control the terminal to move out of the ILCR, determine the cut-in ILCR according to the movement destination, and send a handover request to the cut-in ILCR, and the data packet sent to the terminal received during the handover is forwarded to the cut-in ILCR, after the handover is completed. Notify the mapping management module. The mapping management module deletes the AGW-AID-RID mapping information of the terminal.

The cut-in control unit is used to control the terminal access to the cut-in ILCR.

The identity location register/packet forwarding function (ILR/PTF) is the same as the ILR/PTF entity of the first embodiment, and the PTF entity is optional. The certification center is the same as the certification center in the first embodiment.

* The R3 interface is the interface between the access gateway and the W-CSN. When roaming, the R3 interface is the interface between the access gateway and the visited W-CSN. The difference between the interface function and the R3 interface function in the existing WiMAX network is mainly reflected in the following aspects:

The control plane is used for the access network to register, log out, and query the home location of the terminal. The data plane can be used for data forwarding between the access gateway and the mapping forwarding plane PTF entity. The format of the data packet is shown in Table 6. :

Table 6

The data packet of the R3 interface encapsulates the source RID as the source address and the RIDi as the destination address on the basis of the data packet of the R1 interface, where the source RID is allocated for the terminal that sends the data packet. The RID, RIDi is the routing address of the PTF entity in the mapping forwarding plane or the PTF entity in the communication peer, which can be obtained from the configuration data on the access gateway.

The control plane signaling and data plane packets between the access gateway and the ILR/PTF entity are forwarded by the visited ILR/PTF entity to the home ILR/PTF entity through the R5 interface.

Or, the access gateway and the PTF entity do not forward the packet, and the access gateway encapsulates the packet into the ILCR, and the ILCR strips the tunnel encapsulation and forwards the packet to the PTF entity. The format of the data packet transmitted between the access gateway and the ILCR is as shown in Table 7:

Table 7

The data plane of the R3 interface is also used for data forwarding between the access gateway and the ILCR. The format of the packet is shown in Table 8.

Table 8

The data packet of the access gateway and the ILCR interface encapsulates the source RID as the source address and the destination RID as the destination address on the basis of the data packet of the R1 interface, where the source RID is the RID allocated by the terminal that sends the data packet. The RID is the RID of the communication peer to which the packet is sent.

Before the forwarding of the data packet, the access gateway adds tunnel encapsulation to the data packet. There are many tunnel encapsulation methods, such as L2TPv3, IP-in-IP, MPLS (LDP-based and RSVP-TE based), and GRE. MIP, IPsec, etc., the invention is not limited to any one of the ways.

The control plane is configured to transmit the terminal RID update notification when the terminal RID changes, and also transmit the connection information between the terminal and the communication peer at the time of handover, and communicate the peer AID-RID mapping information, and transmit the terminal terminal offline notification when the terminal is offline.

Data plane, used to forward data packets from the cut-out access gateway to the hand-in access when the terminal switches The gateway, whose message format may exist in the following formats during different periods of handover:

When the access gateway is cut out for RID encapsulation and decapsulation, the packet format is the same as the prior art. When cutting into the access gateway for RID encapsulation and decapsulation, the packet format is as shown in Table 9:

Table 9

* The R5 interface is the interface between the W-CSN and the home W-CSN when roaming. The difference between the interface function and the R5 interface function in the existing WiMAX network is mainly reflected in the following aspects: Control plane, used to visit ILR and Between the home ILR, or between the ILR, the relay ILR, and the home ILR, the registration between the access gateway and the terminal home ILR is registered, the logout is queried, and the terminal RID is queried; the data plane is used for accessing the gateway and mapping. Data forwarding between forwarding planes. The format of the data packets is the same as that of R3.

The data plane is used for data forwarding between the access gateway and the mapping forwarding plane PTF entity, and the format of the data packet is the same as the format of the data packet between the access gateway and the mapping forwarding plane PTF entity in the R3 interface. When switching across ILCRs, the R5 interface is also the interface between ILCRs, used for switching management signaling and data forwarding between ILCRs. The format of the data packets is shown in Table 10:

Table 10

• D interface, the same as the D interface in the first embodiment.

* E interface, optional, data plane is the same as the E interface data plane in the first embodiment, there is no control plane interface. Embodiment 3

The structure of the communication network in this embodiment still refers to FIG. 4a, and includes an access service network (W-NSP), a connection service network (W-CSN), and a generalized forwarding plane. The network elements included in the W-NSP and the W-CSN are also the same. The difference is that the new function modules required to implement SILSN are located in different network elements.

In this embodiment, a static tunnel is established between the ILCR and the access gateway. When the terminal registers or switches to the network, the access gateway allocates a RID to the terminal and registers the RID of the terminal with the terminal home ILR. The RID assigned by the access gateway shall point to the ILCR that establishes a static tunnel with the access gateway. When the data packet is forwarded, the access gateway queries the communication peer RID locally or to the PTF entity of the communication peer. When the terminal is offline, the access gateway cancels the RID of the terminal to the terminal home ILR. Compared with the second embodiment, since the allocated RID is directed to the ILCR that establishes a static tunnel with the access gateway, the format of the data packet is different, and the access gateway and the ILCR process the data packet header differently.

The overall function of the access gateway in this embodiment is the same as that in the second embodiment. The functions of the registration cancellation module, the connection maintenance module, the mapping management module, and the handover module are also the same as those in the access gateway of the second embodiment. The included RID allocation module and the data forwarding module are different from the second embodiment in specific processing, as follows: The offline processing module is basically the same as the second embodiment, the difference is: because the allocated RID points to the ILCR, the offline processing module notifies the opposite end When the access gateway terminal is offline, it is necessary to find the AID of all communication peers of the terminal according to the terminal AID to the connection maintenance module, and then query the location information of the peer access gateway from the local or communication peer AAA home server. It can also be sent to the peer ILCR through the communication peer RID, and the peer ILCR can be transferred to the peer access gateway.

The RID allocation module is basically the same as the second embodiment. The difference is that the RID assigned to the terminal is the ILCR pointing to the static tunnel, and the data packet whose destination address is the RID will be the most.

The data forwarding module is configured to perform data packet forwarding between the base station and the ILCR, and includes a first forwarding unit and a second forwarding unit, where the first forwarding unit and the first forwarding unit of the access gateway in the second embodiment have basic functions. The same, only need to encapsulate the second embodiment to the access gateway to send to the generalized forwarding The terminal RID in the flat data packet is replaced by the access gateway address. The second forwarding unit is configured to: after receiving the data packet from the ILCR, stripping the communication peer RID, the access gateway address, and the tunnel encapsulation encapsulated in the data packet, and connecting the terminal through the access gateway Send to the terminal. Optionally, it is determined whether the AID-RID mapping information of the communication peer end in the data packet exists in the mapping management module, and is saved to the mapping management module if not present. In a variant of the embodiment, the RID in the downlink data packet is stripped by the ILCR and then forwarded to the access gateway. The access gateway only needs to strip the tunnel encapsulation and then send it to the terminal. The inbound gateway obtains the AID-RID mapping information of the communication peer end by using the packet sent by the terminal.

The overall function of the ILCR in this embodiment is the same as the ILCR in the second embodiment, and the functions of the tunnel establishment module, the mapping management module, and the handover control module are the same as those of the corresponding module in the second embodiment of the ILCR, and the packet forwarding module is specific. The processing is different from the second embodiment, as follows:

a packet forwarding module, configured to forward, by the generalized forwarding plane, the mapping forwarding plane, and the access gateway, the data packet of the terminal that accesses the ILCR, including:

The first forwarding unit is configured to: after receiving the uplink data packet sent by the access gateway, query the AGW-AID-RID mapping information in the local cache according to the source AID, and replace the address of the access gateway as the source address with the terminal. After the RID is stripped of the tunnel encapsulation, the data packet is forwarded to the mapping forwarding plane or the generalized forwarding plane according to the destination address.

The second forwarding unit is configured to: after receiving the downlink data packet sent by the generalized forwarding plane, query the AGW-AID-RID mapping information in the local cache according to the destination AID, and replace the destination RID in the data packet with the access After the gateway address is encapsulated in the tunnel, the data packet is forwarded to the access gateway accessed by the terminal. In a variant of the embodiment, after receiving the downlink data packet sent by the generalized forwarding plane, the RID encapsulated in the data packet is stripped and encapsulated, and the AGW-AID-RID mapping in the local cache is queried. The information is forwarded to the access gateway accessed by the terminal.

The identity location register/packet forwarding function (ILR/PTF) entity, the authentication center, and the ILR/PTF entity and certificate authority in the second embodiment.

As shown in Figure 4a, the primary interface in this architecture extends the functionality of existing WiMAX networks. include: • The difference between the R3 interface function and the R3 interface function in the existing WiMAX network is mainly reflected in the following aspects:

The control plane is used to register, deregister, and query the RID of the terminal to the home terminal, and the data plane is used for data forwarding between the access gateway and the mapping forwarding plane PTF entity, or the access gateway encapsulates the packet after tunneling. Sent to the ILCR, stripped by the ILCR and then forwarded to the PTF entity. Its function and message format are the same as in the second embodiment.

The data plane of the R3 interface is also used for data forwarding between the access gateway and the ILCR. Its message format can be as shown in Table 11:

Table 11

The data packet encapsulates the AGW address as the source address and the destination RID as the destination address on the basis of the data packet of the R1 interface, and the destination RID is the RID of the communication peer to which the data packet is sent.

In a variant of the embodiment, the packet format of the data forwarding between the access gateway and the ILCR may be the same as that of the second embodiment, and the RID of the terminal that sends the data packet is encapsulated as a source address, as shown in Table 12:

Table 12

At this time, the RID address assigned by the access gateway still points to the ILCR, but the first forwarding unit in the access gateway does not encapsulate the address of the access gateway as the source address in the uplink data packet, and the function is the same as that in the second embodiment. The first forwarding unit of the gateway is the same. The function of the packet forwarding module on the ILCR can be the same as that of the packet forwarding module in the ILCR of the second embodiment. The replacement between the AGW address and the source RID is not required, and the RID in the packet can be stripped by the ILCR. The gateway does not need to strip the RID in the received message.

• R4 interface, the R4 interface in the second embodiment.

• R5 interface, the R5 interface in the second embodiment. • D interface, the same as the D interface in the second embodiment.

• E interface, the E interface in the second embodiment.

Embodiment 4

In this embodiment, a terminal-based dynamic tunnel is established between the identity location core router (ILCR) and the access gateway. When the terminal registers or switches to the network, the access gateway allocates a RID to the terminal, and registers the RID of the terminal with the ILR. When the data is forwarded, the access gateway queries the ILR for AID-RID mapping information. When the terminal is offline, the access gateway logs out the RID of the terminal to the ILR.

The communication network of this embodiment is basically the same as the communication network of the second embodiment, except that a dynamic tunnel is established between the access gateway and the ILCR, that is, the functional entity "tunnel establishment module" of the ILCR establishes a terminal-based tunnel in the terminal access process. At this time, the ILCR no longer needs the mapping management module, and the switching control module does not need to perform the maintenance of the AGW-AID-RID mapping information. Other functional entities of the architecture and their functions are identical to the corresponding functional entities in the second embodiment.

Embodiment 5

In this embodiment, a terminal-based dynamic tunnel is established between the identity location core router (ILCR) and the access gateway. When the terminal registers or switches to the network, the access gateway allocates the RID to the terminal and registers the RID of the terminal with the ILR. The RID assigned by the access gateway shall point to the ILCR to which the access gateway is connected. When the data packet is forwarded, the access gateway queries the ILR for AID-RID mapping information. When the terminal goes offline, the access gateway deregisters the RID of the terminal from the ILR.

The communication network with the identity identification and the location separation architecture implemented by the WiMAX system is basically the same as the communication network of the third embodiment, except that the dynamic tunnel is established between the access gateway and the ILCR, that is, the functional entity of the ILCR "tunnel establishment" The module "establishes a terminal-based tunnel in the terminal access process. At this time, the mapping management module and the switching control module are no longer required for maintenance of the AGW-AID-RID mapping information in the ILCR. In addition to this, other functional entities of the architecture and their functions are the same as the corresponding functional entities in the third embodiment.

Embodiment 6 In this embodiment, a terminal-based dynamic tunnel is established between the identity location core router (ILCR) and the access gateway. When the terminal registers or switches to the network, the ILCR allocates the RID to the terminal and the RID of the terminal registered to the ILR (also Said to be the registered terminal's AID-RID mapping information). The RID assigned by the ILCR should point to the ILCR. The AID-RID mapping information is queried by the ILCR to the ILR when the data message is forwarded. When the terminal is offline, the ILID of the terminal is logged out by the ILCR to the ILR.

The communication network with identity identification and location separation architecture implemented by the WiMAX system based on the present embodiment includes the following parts:

The access gateway has the same functions as the prior art.

The Identity Location Core Router (ILCR), located in the WiMAX Core Service Network (W-CSN), is used to assign RIDs to terminals, to the terminal to belong to the ILR to register, log out and query the RID of the terminal, maintain the connection information between the terminal and the communication peer, and maintain The session connection of the terminal, the AID-RID mapping information of the maintenance terminal and the communication peer, and the routing and forwarding of data packets. ILCR is also used in conjunction with other ILCRs to achieve terminal cross-ILCR switching.

As shown in FIG. 11, in this embodiment, the ILCR includes the following functional entities related to the extended function: a tunnel establishment module, configured to establish a tunnel between the access gateway and the ILCR, assign a RID to the terminal, and set the AID of the terminal. And the RID is sent to the mapping management module and the registration cancellation module; in this embodiment, the tunnel is dynamically established, that is, the terminal-based tunnel is established in the terminal access process.

The connection maintenance module is configured to save the connection information between the terminal and the communication peer; and learn to delete the connection information between the terminal and the communication peer after the terminal is offline or removed, or after the communication with the communication peer is terminated; and the communication peer is offline or after the terminal communication is terminated. , delete the connection information between the communication peer and the terminal. The module is optional. If the mapping management module stores the corresponding relationship information between the terminal and the communication peer AID-RID, the connection maintenance module can ignore.

The mapping management module is the same as the mapping management module of the ILCR in the first embodiment.

An offline processing module, configured to notify the registration and cancellation module when the terminal that is determined to be offline is offline The radio management module and the connection maintenance module, optionally, also query the location information of the peer ILCR, and notify the peer ILCR that the terminal is offline. When it is determined that the communication peer is offline, the mapping management module and the connection maintenance module are notified. The offline processing module may determine whether the terminal is offline according to the real-time detection mechanism of the flow, or according to the related signaling of the received terminal, and may determine that the corresponding communication peer is offline according to the received offline notification of the terminal or the real-time detection mechanism of the flow. The offline processing module may query the location information of the peer ILCR by first checking the AID of all the communication peers according to the terminal AID to the connection information of the terminal and the communication peer end saved by the connection maintenance module, and then saving the AID to the mapping management module by using the found AID. The corresponding RID is found in the communication AID-RID mapping information, and the RID found is the location information of the peer ILCR.

The message forwarding module has the function of the message forwarding module of the ILCR in the first embodiment, and includes a first forwarding unit and a second forwarding unit. In this embodiment, the uplink data packet received by the first forwarding unit is sent by the access gateway, and the first forwarding unit and the second forwarding unit further determine the terminal AID and the communication pair in the received data packet. Whether the mapping of the AID is saved in the connection maintenance module. If not, save it to the connection maintenance module.

Switching control module, including cutting out control unit and cutting in control unit, wherein:

The cut-out control unit is configured to implement control for cutting out the terminal. When the terminal moves, the cut-in ILCR to which the terminal is to move is determined according to the destination of the move. After the move is completed, the mapping management module and the connection maintenance module are notified to cut out the terminal. The data packet sent to the terminal received during the handover is forwarded to the cut-in ILCR. Optionally, the connection information of the terminal and the communication peer and/or the AID-RID mapping information of the communication peer are sent to the cut-in ILCR.

The cut-in control unit is configured to implement control of the terminal hand-in. When the terminal moves from another ILCR to the service area of the ILCR, the terminal is assigned a RID pointing to the ILCR, and the AID of the terminal and the RID are sent to the registration and cancellation module. And saving to the mapping management module; optionally, querying the location information of the peer ILCR (the query method is the same as the offline processing module), and sending a terminal RID update notification to the peer ILCR, carrying the AID-RID mapping information of the terminal.

Identity Location Register/Packet Forwarding Function (ILR/PTF) entity, same as the ILR/PTF entity in Embodiment 1. The certification center is the same as the certification center in the first embodiment. As shown in Figure 4a, the main interface in this architecture extends the functionality of the existing WiMAX network interface. include:

* The R3 interface is the interface between the access gateway and the W-CSN. When roaming, the R3 interface is the interface between the access gateway and the visited W-CSN. The interface functions the same as the R3 interface in existing WiMAX networks.

* The R4 interface is the interface between the access gateways, and the interface functions are in the existing WiMAX network.

The R4 interface has the same function.

* The R5 interface is the interface between the W-CSN and the home W-CSN when roaming. The difference between the interface function and the R5 interface function in the existing WiMAX network is mainly reflected in the following aspects: Control plane, for ILCR to the terminal The RID of the home ILR is registered and the terminal is deregistered. The data plane can be used for data forwarding between the ILCR and the mapping forwarding plane PTF entity. The format of the data packet is the same as the E interface.

When switching across ILCRs, the R5 interface is also the interface between the ILCRs, which is used to switch the management signaling. It is also used to transmit the terminal RID update notification to the peer ILCR when the terminal RID changes, and can also be used to cut out the ILCR to cut in. The ILCR transmits the connection information between the terminal and the communication peer, and communicates the AID-RID mapping information of the opposite end. Data plane, used for data forwarding between ILCR, the format of its data message is shown in Table 13:

Table 13

• The D interface is the same as the D interface in the first embodiment.

* The E interface is the interface between the ILCR and the mapped forwarding plane.

Control plane, used by the ILCR to register, log out, and query the RID of the terminal to the ILR. The user plane is used to forward the terminal data packet between the ILCR and the mapping forwarding plane PTF entity. The format of the data packet of the interface is as shown in Table 14: Layer 2 source RID RIDi IP header (..., source AID, data packet payload header AID, ...)

Table 14

The data packet of the E interface encapsulates the source RID as the source address and the RIDi as the destination address on the basis of the data packet of the R1 interface, where the source RID is the RID of the terminal that sends the data packet, and the RIDi is visited in the mapping forwarding plane. The routing address of the PTF entity or the PTF entity of the communication peer is obtained by the configuration data on the ILCR.

Example 7

FIG. 4b is a schematic diagram of a communication network (also referred to as a WiMAX system network that implements identity identification and separation) implemented by the Wimax network architecture based on the Wimax network architecture, and the communication network includes an access service. Network (W-ASN), Connected Service Network (W-CSN) and generalized forwarding plane, W-CSN with AAA proxy or server (AAA Proxy/Server), billing server, interconnection gateway device, etc. The network element also sets an identity location register (ILR)/packet forwarding function (PTF) entity, and the ILR/PTF in each W-CSN constitutes a mapping forwarding plane. The HA and / or W-core routers in the W-CSN can be reserved or transferred to the access gateway. The W-ASN includes a base station and an access gateway, and the access gateway expands the new functions required to implement the SILSN based on the functional entities of the access gateway in the Wimax architecture. In addition, the generalized forwarding plane in the communication network includes multiple routers supporting RID routing and forwarding, and the data plane interface between the W-ASN and the generalized forwarding plane is represented as a D1 interface. The W-CSN and the generalized forwarding plane may have a data plane interface, which is represented as D2. The PTF entity sends the data packet to the generalized forwarding plane through the interface, and is sent by the generalized forwarding plane to the access gateway accessed by the communication peer. .

In this embodiment, there is no ILCR in the WiMAX network, and the access gateway acts as an external data channel endpoint. When the terminal registers or switches to the network, the access gateway allocates the RID to the terminal to the terminal and registers the RID of the terminal with the ILR. According to the needs of the service, the access gateway may allocate one or more dedicated RIDs to one terminal, and may also allocate the same RID to multiple terminals. When the data packet is forwarded, the access gateway queries the ILR for AID-RID mapping information, and the terminal is offline. At the time, the access gateway logs out the RID of the terminal to the ILR (it can also be said that the AID-RID mapping information of the terminal is logged out to the ILR).

In the communication network of this embodiment:

The access gateway is located in the WiMAX Access Service Network (W-ASN), and is used to provide access services and control for the user terminal, allocate the RID to the access gateway for the terminal, register, logout, and query the terminal to the home belonging to the ILR. The RID, maintains the connection information between the terminal and the communication peer, maintains the AID-RID mapping information of the terminal and the communication peer, implements routing and forwarding of data packets, and cooperates with other access gateways to implement handover of the terminal across the AGW.

In this embodiment, the access gateway includes the following functional entities:

The RID allocation module is the same as the RID allocation module of the access gateway in the second embodiment.

The registration cancellation module is the same as the registration cancellation module of the access gateway of the second embodiment.

The connection maintenance module is connected to the access gateway of the access gateway in the second embodiment.

The mapping management module is the mapping management module of the access gateway in the second embodiment.

The data forwarding module includes a first forwarding unit and a second forwarding unit:

The first forwarding unit is configured to: after receiving the uplink data packet sent by the base station, including the terminal AID and the communication peer AID, if the mapping management module queries the RID of the communication peer, the RID of the terminal and the communication peer is used as a source. The destination address is encapsulated in the data packet and sent to the generalized forwarding plane. If the RID of the communication peer is not queried, the ILR of the communication peer is queried to the RID of the communication peer; and the AID-RID of the queried communication peer is saved to The mapping management module; the data packet can be forwarded to the PTF entity after encapsulating the terminal RID as the source address, or the data packet can be cached first, and then the terminal and the communication pair are queried after querying the RID of the communication peer. The RID of the terminal is encapsulated in the data packet as the source and destination address and forwarded to the generalized forwarding plane.

a second forwarding unit, configured to decapsulate the downlink data packet sent by the generalized forwarding plane, and after ripping the RID, send the connection to the terminal through the access gateway to the terminal; optionally, determining the datagram Whether the AID-RID mapping information of the communication peer end exists in the mapping management module, and if not, saves it to the mapping management module.

The switching module is the switching module of the access gateway in the second embodiment.

Identity Location Register/Packet Forwarding Function (ILR/PTF) entity, same as ILR/PTF in Embodiment 1 entity. The certification center is the same as the certification center in the first embodiment.

As shown in Figure 4b, the main interfaces in this architecture extend the functionality of the existing WiMAX network interfaces. Includes:

The control plane is used for the access gateway to register, deregister, and query the RID of the terminal to the ILR of the terminal; the data plane is used for data forwarding between the access gateway and the mapping forwarding plane, and the format of the data packet is as shown in Table 15. :

Table 15

The data packet of the R3 interface is encapsulated with a three-layer header based on the data packet of the R1 interface. The source address of the new Layer 3 header is the source RID, and the destination address is RIDi, where the source RID. It is the RID of the terminal that sends the data packet. RIDi is the routing address of the PTF entity in the mapping forwarding plane or the PTF entity in the communication peer end. It can be obtained from the configuration data on the access gateway.

The control plane signaling and data plane messages between the access gateway and the ILR are forwarded by the visited ILR to the home ILR through the R5 interface during roaming.

The control plane is configured to transmit the terminal RID update notification when the terminal RID changes, and also transmit the connection information between the terminal and the communication peer at the time of handover, and communicate the peer AID-RID mapping information, and transmit the terminal offline notification when the terminal is offline.

The data plane is used to forward data packets from the cut-out access gateway to the hand-in access gateway when the terminal switches, and the packet format may exist in the following format during different periods of handover:

When the access gateway is cut out for RID encapsulation and decapsulation, the packet format is the same as the prior art. When cutting into the access gateway for RID encapsulation and decapsulation, the packet format is as shown in Table 16:

Table 16

• The D1 interface is the interface between the access gateway and the generalized forwarding plane. It is used to forward terminal data packets between the access gateway and the generalized forwarding plane. The format of the data packet of its interface is shown in Table 17.

Table 17

The data packet of the D1 interface is newly encapsulated with a Layer 3 header based on the data packet of the R1 interface. The new Layer 3 header includes a source RID and a destination RID, where the source RID is allocated for the terminal that sends the data packet. The RID, the destination RID is the RID assigned to the correspondent end to which the packet is sent.

• The D2 interface is the interface between the home PTF entity and the generalized forwarding plane, and is used for forwarding the terminal data message between the home PTF entity and the generalized forwarding plane. The format of the data packet of its interface is the same as that of D1.

In all of the above system architecture networks (referred to as the architecture network), the AID identifies an end user identity, and the AID is used to identify the end user within the architecture network. To support legacy terminals, the AID of the architecture network can use IPV4/IPv6 addresses in traditional networks.

In the architecture network, during the data packet sending process, the access gateway or ILCR can be based on the flow. Real-time detection mechanism to establish and update the connection information between the terminal and the communication peer.

In the architecture network, the RID can use the IPV4/IPv6 address format commonly supported by routers in the existing traditional network to indicate the ILCR location where the current terminal is located. The scope of the RID is in the generalized forwarding plane of the backbone network of the architecture.

5 and FIG. 6 are flowcharts of a terminal accessing a network on the basis of the communication network of the first embodiment, and the terminal may be a legacy terminal.

Figure 5 is applicable to the scenario where the access gateway directly obtains the communication peer AID. This example uses a simple IP terminal (that is, a terminal that does not support mobile IP) as an example to describe the process of booting into the network. The specific steps are as follows:

Step 501: The terminal is powered on, and the terminal accessing the authentication process is performed by the base station, the AGW, and the visited AAA server interacting with the home AAA server. In this process, the home AAA server sends the static subscription IP address of the terminal to the AGW;

Step 502: The initial service flow creation process of the terminal. In this process, the preset service flow of the terminal can be created at the same time;

Step 503: The terminal obtains an IP address through a Dynamic Host Configuration Protocol (DHCP) process. This IP address is the AID of the terminal;

In another embodiment, the AID may also be different from the IP address, and the signed AID may also be saved in the terminal home AAA server and sent to the AGW through the access authentication process.

Step 504, triggered by step 503, in the DHCP process for the terminal to obtain an IP address, the AGW needs to initiate a tunnel establishment process of the AGW and the ILCR to the ILCR;

The tunnel between the AGW and the ILCR may be in various manners, such as L2TPv3, IP-in-IP, MPLS (LDP-based and RSVP-TE based), GRE, MIP, IPsec, etc., and the present invention is not limited to any specific one. The way of tunneling. When MIP is used, the tunnel is created and maintained in the same way as an existing WiMAX network.

Step 504a, when the tunnel is established, the ILCR allocates an RID to the terminal, and its RID points to the ILCR. The ILCR saves the mapping relationship between the terminal AID and the RID;

In the first variant of the first embodiment, the registration logout module is at the ILCR, at this time, in this step The ILCR initiates a registration process to the ILR home to which the terminal belongs.

Step 504b: The ILCR notifies the AGW of the terminal to the AGW in the tunnel establishment process. Step 505: Step 504: When establishing a tunnel between the AGW and the ILCR, the ILCR needs to authenticate to the home AAA server to obtain the key information. ;

In the first modification of the first embodiment, if the registration cancellation module is implemented by the ILCR, in this step, the AID registration process initiated by the ILCR to the terminal home ILR can be triggered at the same time, and the registered ILCR is assigned to the terminal. ;

Step 506, if the preset service flow creation does not occur in step 503, it may be performed in this step. It is also possible to modify the initial service flow or the preset service flow at this time;

Step 507, if the registration cancellation module is implemented by the AGW, this step is required.

The AGW initiates a registration process to the terminal home ILR, and registers the ILCR as the RID allocated by the terminal;

Step 508: After receiving the AID registration request of the AGW, the home ILR saves the current AID-RID mapping relationship of the terminal.

When the AID registration process is performed in step 505, this step can be directly executed after step 505.

At this point, the terminal has successfully accessed the network and can start data packet transmission.

Step 509: The terminal and the communication peer end perform data packet transmission.

Step 509a: After receiving the data packet of the terminal and the communication peer, the AGW obtains the AID information in the packet, and establishes the connection information between the terminal and the communication peer (that is, the mapping between the terminal AID and the communication peer AID), and caches the local.

In this step, the AGW may also check the locally cached terminal and the communication peer connection information. If there is no connection information between the terminal and the communication peer, create and cache the connection information of the two; Step 509b, ILCR receives After the data message sent by the terminal to the communication peer end, the AID-RID mapping information in the local cache is queried according to the AID of the communication peer as the destination address in the data, and if the RID of the communication peer is found, the communication pair is The RID of the terminal is used as the destination address, and the RID of the terminal is used as the source address, and is encapsulated in the data packet (for example, it can be encapsulated in the newly added Layer 3 header of the data packet), and then the encapsulated data packet is forwarded. To the generalized forwarding plane; if the RID of the communication peer is not found, the data packet is encapsulated and forwarded to the PTF of the mapping forwarding plane. And querying the RID of the communication peer to the ILR belonging to the communication peer end;

After receiving the data packet sent by the communication peer to the terminal accessing the ILCR, the ILCR strips the RID encapsulated in the data packet and sends the connection to the terminal through the connection between the ILCR and the terminal.

FIG. 6 is applicable to a scenario in which the ILCR directly acquires the communication peer AID and then notifies the access gateway, and the communication network is based on the second variation of the first embodiment. This example uses a simple IP terminal (that is, a terminal that does not support mobile IP) as an example to describe the process of booting into the network. The specific steps are as follows:

Step 601 to step 608, the same as step 501 to step 508.

Step 609: The terminal and the communication peer end perform data packet transmission.

Step 609a, the same step 509b.

Step 609b: After receiving the data packet of the terminal and the communication peer, the ILCR obtains the AID information in the packet, establishes the connection information between the terminal and the communication peer (AID1-AID2), and caches it locally. In this step, the ILCR may also check the locally cached terminal and the communication peer connection information. If there is no connection information between the terminal and the communication peer, the connection information of the two is created and cached.

Step 610: When the ILCR does not locally exist the connection information between the terminal and the communication peer, the ILCR

The AGW notifies the acquired connection information of the terminal and the communication peer (the mapping of AID1-AID2). The AGW caches the connection information locally.

Figure 7 is a flow chart of the terminal accessing the network based on the second and third embodiments, and the terminal can be a legacy terminal.

Figure 7 is applicable to a scenario in which a tunnel is statically established between the AGW and the ILCR before the user joins the network. This example uses a simple IP terminal (that is, a terminal that does not support mobile IP) as an example to describe the process of booting into the network. The specific steps are as follows: Step 701: After the AGW/ILCR is powered on, establish a static tunnel between the AGW and the ILCR according to the policy or configuration.

The tunnel between the AGW and the ILCR may be in various manners, such as L2TPv3, IP-in-IP, MPLS (LDP-based and RSVP-TE based), GRE, MIP, and IPsec. Limited to any particular tunneling method. When MIP is used, the tunnel is created and maintained in the same way as the existing WiMAX network.

Step 702: The terminal is powered on, and the terminal access authentication process is performed by the base station, the AGW, and the visited AAA server interacting with the home AAA server. In this process, the home AAA server sends the static subscription IP address of the terminal to the AGW;

Step 703: The initial service flow creation process of the terminal. In this process, the preset service flow of the terminal can be created at the same time;

Step 704: The terminal obtains an IP address through a DHCP process. This IP address is the terminal's

AID;

Step 704a: In the process of obtaining an IP address, the AGW allocates an RID to the terminal. In the second embodiment, the RID points to the AGW. In the third embodiment, the RID points to the ILCR that has a static tunnel with the AGW, and the AGW saves the terminal AID and the RID. Mapping relationship;

Step 705, if the preset service flow creation does not occur in step 703, it can be performed in this step. It is also possible to modify the initial service flow or the preset service flow at this time.

Step 706, the AGW registration process initiated by the AGW to the home ILR of the terminal, and registering the RID assigned by the AGW to the terminal;

Step 707: After receiving the registration request of the AGW, the home ILR saves the mapping relationship between the current AID-RID of the terminal.

Step 708: The terminal and the communication peer end perform data packet transmission.

Step 708a, after receiving the data packet of the terminal and the communication peer, the AGW obtains the AID information in the packet, establishes the connection information between the terminal and the communication peer (the mapping of AID1-AID2), and caches it locally. In this step, the AGW may also check the connection information between the locally cached terminal and the communication peer. If there is no connection information between the terminal and the communication peer, the connection information of the two is created and cached.

Based on the communication network of the second embodiment, after receiving the data packet sent by the terminal to the communication peer, the AGW queries the AID-RID mapping information in the local cache according to the AID of the communication peer as the destination address in the data packet, for example, To the RID of the communication peer, the RID of the communication peer is used as the destination address, and the RID of the terminal is used as the source address, and is encapsulated in the data text (if it can be encapsulated in the data address) If the RID of the communication peer is not found, the data packet is tunnel encapsulated and then forwarded to the mapping forwarding plane, and the data packet is forwarded to the ILCR. The notification mapping management module queries the RID of the communication peer.

After receiving the data packet from the communication peer, the AGW strips the RID encapsulated in the data packet and restores the format of the data packet sent by the communication peer to the terminal through the connection between the AGW and the terminal.

Data message.

Based on the communication network of the third embodiment, after receiving the data packet sent by the base station (that is, the terminal accessing the ILCR), the AGW queries the AID in the local cache according to the AID of the communication peer as the destination address in the data packet. -RID mapping information, if the RID of the communication peer is found, the RID of the communication peer is used as the destination address, and the address of the AGW is used as the source address, and is encapsulated in the data packet (for example, the data packet can be encapsulated in the data packet) In the Layer 3 packet header, the encapsulated data packet is forwarded to the ILCR. If the RID of the communication peer is not found, the data packet is tunnel encapsulated and then forwarded to the mapping forwarding plane, and the mapping management module is notified. The RID of the communication peer.

After the AGW receives the data packet from the ILCR, if the ILCR does not strip the RID encapsulated in the data packet, the RID encapsulated in the data packet is restored to the format of the data packet sent by the communication peer. The connection between the AGW and the terminal is sent to the terminal.

After receiving the data packet sent by the external network, the ILCR strips the RID encapsulated in the data packet, queries the AGW-AID-RID mapping information in the local cache according to the destination AID, and then forwards the data packet to the terminal. AGW; or query the AGW-AID-RID mapping information in the local cache according to the destination AID, replace the destination RID in the data 4 with the address of the AGW, and then forward the data packet to the AGW accessed by the terminal.

After receiving the data packet from the AGW, the ILCR queries the AGW-AID-RID mapping information in the local cache according to the source AID, replaces the AGW address in the source address with the RID of the terminal, and then forwards the data packet.

Based on the fourth and fifth embodiments above, a flowchart of the terminal booting into the network, the terminal may The traditional terminal can also use the process of FIG. 7, but the process of establishing a static tunnel in step 701 needs to be changed to the establishment of the dynamic tunnel after step 704, and the authentication process to the AAA server is triggered, as in step 505. The other steps are the same as those of FIG. It will not be detailed here.

Figure 8 is a flow chart of the terminal accessing the network based on the communication network of the sixth embodiment, and the terminal may be a legacy terminal.

Figure 8 is applicable to the scenario of establishing a dynamic tunnel between the AGW and the ILCR. In this embodiment, a simple IP terminal (that is, a terminal that does not support mobile IP) is used as an example to describe the process of booting into the network. The specific steps are as follows:

Step 801 to step 804 are the same as step 501 to step 504.

Step 805, triggered by step 804, when establishing a tunnel between the AGW and the ILCR, the ILCR needs to authenticate to the home AAA server to obtain key information.

Step 806, the same step 506.

Step 807: The ACR registration process initiated by the ILCR to the home ILR, and the registered ILCR is the RID allocated by the terminal.

There is no necessary order relationship between step 807 and step 806.

Step 808 is the same as step 508.

Step 809: The terminal and the communication peer end perform data packet transmission.

Step 809a, the same step 509b.

Step 809b: After receiving the data packet of the terminal and the communication peer, the ILCR obtains the AID information in the packet, establishes the connection information between the terminal and the communication peer (the mapping of AID1-AID2), and caches it locally. In this step, the ILCR may also check the locally cached terminal and the communication peer connection information. If there is no connection information between the terminal and the communication peer, the connection information of the two is created and cached.

Figure 5, Figure 6, Figure 7, and Figure 8 are examples of a traditional simple IP terminal that does not support mobile IP. For a traditional mobile IP terminal, the process of booting into the network is similar to that of obtaining the IP address of the terminal. For the mobile IP mode, it will not be detailed here. Obviously, those skilled in the art should understand that the above modules or steps of the present invention can be implemented by a general-purpose computing device, which can be concentrated on a single computing device or distributed over a network composed of multiple computing devices. Alternatively, they may be implemented by program code executable by the computing device, such that they may be stored in the storage device by the computing device, or they may be separately fabricated into individual integrated circuit modules, or they may be Multiple modules or steps are made into a single integrated circuit module. Thus, the invention is not limited to any specific combination of hardware and software.

To simplify the description, the above description is not only applicable to WiMAX networks, but also to other mobile communication networks. The above is only the preferred embodiment of the present invention, and is not intended to limit the present invention, and various modifications and changes can be made to the present invention. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and scope of the present invention are intended to be included within the scope of the present invention.

Industrial Applicability The present invention is based on a communication network implemented by a Wimax network architecture, supports an application scenario of a mobile terminal, and effectively solves the problem of identity identification and location separation and loopback in the scenario. The deployment of the communication network based on the Wimax network architecture considers the requirements of compatible terminals and compatible upper-layer services. It only needs to upgrade the network-side devices and is compatible with the application scenarios that do not change the terminal. The network assigns an identity and a location identifier to the terminal. After the terminal accesses, the ILR registers the RID of the terminal, so that the terminal can initiate communication according to the identity identifier, and address the peer according to the RID.

Claims

Claim

A communication network based on a Wimax network architecture for identity identification (AID) and location separation, comprising an access service network and a connection service network in a Wimax network architecture, the access service network including a base station and an access gateway The connection service network includes an identity location core router (ILCR) and an identity location register (ILR), and the communication network further includes a generalized set to route and forward inter-ILCR data messages by location identifier (RID). Forwarding plane, where:

The access gateway is configured to: provide access services and control for the terminal, maintain connection information between the terminal and the communication peer, and cooperate with other access gateways to implement handover of the terminal across the access gateway and across the ILCR; the ILCR is set to: Maintain the session connection of the terminal, assign the terminal the RID to the ILCR, maintain the AID-RID mapping information of the terminal and the communication peer, query the RID of the terminal to the ILR, implement routing and forwarding of the data packet, and other than the ILCR. Other ILCRs cooperate to achieve terminal switching across ILCRs;

The ILR is configured to: receive a registration and deregistration request of the access gateway or the ILCR to the ILR home subscriber terminal, maintain AID-RID mapping information of the home subscriber terminal, and receive a query request for the terminal RID, and request the terminal in the request The RID corresponding to the AID is returned to the query requester.

2. The communication network according to claim 1, wherein the access gateway comprises: a connection maintenance module, an offline processing module, and a data forwarding module, wherein:

The connection maintenance module is configured to: save the connection information between the terminal and the communication peer, including the correspondence between the terminal AID and the communication peer AID; and learn to delete the connection information between the terminal and the communication peer after the terminal is offline or terminated with the communication peer Obtaining the connection information of the communication peer and the terminal when the communication peer is offline or cut out or terminated with the terminal;

The data forwarding module is configured to: forward data packets between the base station and the ILCR.

3. The communication network according to claim 2, wherein

The offline processing module in the access gateway is further configured to: notify the access gateway accessed by the communication peer that the terminal is offline when determining that the accessed terminal is offline, and send the remote access gateway to the peer When the terminal is offlinely notified, it is determined that the terminal that is the communication peer is offline;

4. The communication network of claim 2, wherein the ILCR comprises a tunnel establishment module, a mapping management module, and a message forwarding module, wherein:

The mapping management module is configured to: cache and perform AID-RID mapping information of the terminal and the communication peer;

The packet forwarding module is configured to: after receiving the uplink data packet that the terminal and the communication peer do not belong to the same ILCR, the RID of the communication peer and the RID of the terminal that are queried from the mapping management module or the communication peer home ILR. The packet is encapsulated in a data packet including the terminal AID and the communication peer AID, and is routed through the generalized forwarding plane and forwarded to the opposite ILCR; and the downlink data packet sent from the generalized forwarding plane is decapsulated, and the RID is stripped and sent. Give the terminal.

5. The communication network of claim 4, wherein the communication network further comprises a registration logout module,

The registration and cancellation module is configured to: after receiving the terminal AID and the RID assigned to the terminal, requesting the terminal to belong to the terminal ILR to register the terminal RID, carrying the AID and the RID of the terminal; and after learning that the terminal is offline, requesting the terminal to belong to the terminal The local ILR cancels the RID of the terminal;

The registration and cancellation module is located in the access gateway, and the tunnel establishment module in the ILCR is further configured to: send the AID of the terminal and the RID for the terminal to the registration and logout module of the access gateway; or

The registration cancellation module is located in the ILCR, and the tunnel establishment module in the ILCR is further configured to: send the AID of the terminal and the RID for the terminal to the registration cancellation module of the ILCR.

6. The communication network according to claim 4, wherein

The ILCR further includes an offline processing module, and the offline processing module is configured to: When the incoming terminal is offline, the mapping management module is notified; when it is determined that the communication peer is offline, the mapping management module is notified;

The mapping management module in the ILCR is further configured to: delete the AID-RID mapping information of the terminal when the terminal is offline or cut out, and delete the communication end of the terminal that has no communication relationship with other terminals accessing the ILCR. AID-RID mapping information of the communication peer; after learning that the communication between the terminal and the communication peer is terminated, and the communication peer has no communication relationship with other terminals accessing the ILCR, the AID-RID mapping information of the communication peer is deleted; The AID-RID information of the communication peer is deleted when the peer ends offline or terminates communication with the terminal.

7. The communication network of claim 4, wherein the message forwarding module comprises a first forwarding unit and a second forwarding unit, wherein:

The first forwarding unit is configured to: after receiving the uplink data packet sent by the base station, including the terminal AID and the communication peer AID, and the terminal and the communication peer do not belong to the same ILCR, for example, querying the RID of the communication peer in the mapping management module The RID of the terminal and the communication peer is encapsulated in the data packet as the source and destination addresses, and is routed through the generalized forwarding plane and forwarded to the peer ILCR; if the RID of the communication peer is not queried, the IRR query to the home end of the communication peer is performed. The RID of the communication peer, the AID-RID of the queried communication peer is saved to the mapping management module;

The second forwarding unit is configured to: decapsulate the downlink data packet sent by the received generalized forwarding plane, strip the RID, send the connection to the terminal through the ILCR, and determine the communication in the data packet. Whether the AID-RID mapping information of the peer exists in the mapping management module, and if it does not exist, it is saved in the mapping management module.

8. The communication network according to claim 7, wherein

The connection service network further includes a packet forwarding function (PTF) entity;

The first forwarding unit is configured to: after receiving the uplink data packet sent by the base station, if the mapping management module cannot query the RID of the communication peer end, the terminal RID is encapsulated in the data packet as a source address, and forwarded. To the PTF entity;

The PTF entity is configured to: after receiving the data packet sent by the PTR entity other than the ILCR or itself, the corresponding RID is found as the destination address and encapsulated in the packet header according to the communication peer AID in the data packet. Transmitting the data packet to the peer ILCR via the generalized forwarding plane; or The first forwarding unit is configured to: after receiving the uplink data packet sent by the base station, if the mapping management module cannot query the RID of the communication peer end, first cache the data packet, and query the RID of the communication peer end. Then, the RID of the terminal and the communication peer is encapsulated in the data packet as the source and destination addresses, and is routed through the generalized forwarding plane and forwarded to the peer ILCR.

9. The communication network according to claim 2, wherein

10. The communication network according to claim 4, wherein

The cut-in control unit is configured to: implement control of the terminal hand-in, allocate the RID pointing to the ILCR to the terminal, and send the AID and the RID of the terminal to the mapping management module, or to the mapping management module and the access gateway; The terminal ILCR sends a terminal RID update notification, and carries the AID-RID mapping information of the terminal; The mapping management module is further configured to: manage the communication peers of all the terminals that access the ILCR, and update the locally saved AID-RID mapping information of the terminal after receiving the terminal RID update notification sent by the peer.

11. The communication network according to claim 10, wherein

The hand-in control unit is configured to: when sending a terminal RID update notification to the peer ILCR, first find an AID of all communication peers of the terminal according to the connection maintenance module of the terminal to the access gateway, and then search for the mapping management module. Sending a terminal RID update notification to the peer ILCR according to the found RID to the RID of the communication peer; or

12. The communication network according to claim 4, wherein

13. The communication network according to claim 1, wherein

The ILR is configured to: save or update the AID-RID mapping information of the terminal after receiving the registration request to the home user terminal, and delete the AID-RID mapping information of the terminal after receiving the cancellation request for the home user terminal. Or invalidated; if a registration or cancellation request is received for the non-home user terminal, it is forwarded to the home location of the terminal for ILR processing.

14. The communication network according to claim 1, wherein

The ILCR is a collection of functions of a home agent and/or a core router in a Wimax network architecture. The new function required for implementing identity identification and location separation is obtained, and the connection service network further includes an original network element for authentication, authorization, and charging in the Wimax network architecture;

15. The communication network according to claim 1, wherein

The tunnel establishment module in the ILCR is configured to: dynamically establish a tunnel, and establish a terminal-based tunnel in a tunnel between the access gateway and the ILCR in the terminal access process.

16. A communication network based on a Wimax network architecture for identity identification (AID) and location separation, comprising an access service network and a connection service network in a Wimax network architecture, the access service network including a base station and an access gateway The connection service network includes an identity location core router (ILCR) and an identity location register (ILR), and the communication network further includes a generalized method for routing and forwarding inter-ILCR data messages by location identification (RID). Forwarding plane, where:

The ILCR is set to: allocate a RID to the ILCR to the terminal, register, log out, and query the RID of the terminal to the home belonging to the ILR, maintain the connection information between the terminal and the communication peer, maintain the session connection of the terminal, and maintain the terminal and the communication peer. AID-RID mapping information, routing and forwarding of data packets, and cooperation with other ILCRs other than the ILCR to implement terminal-to-ILCR switching; the ILR is set to: receive a registration and deregistration request for the ILR home subscriber terminal, The AID-RID mapping information of the home user terminal is maintained, and the query request for the terminal RID is received, and the RID corresponding to the terminal AID in the request is returned to the query requesting party.

The communication network according to claim 16, wherein the ILCR comprises a tunnel establishment module, a registration cancellation module, a mapping management module, and a message forwarding module:

The tunnel establishment module is configured to: establish a tunnel between the access gateway and the ILCR, allocate an RID to the terminal, and send the AID of the terminal and the RID to the mapping management module and the registration cancellation module; the registration and logout module is configured as: After receiving the terminal AID and the RID allocated to the terminal, requesting the terminal home ILR to register the terminal RID, carrying the AID and RID of the terminal; After the terminal is offline, requesting the terminal to belong to the local ILR to cancel the RID of the terminal;

The mapping management module is configured to: cache and process the AID-RID mapping information of the terminal and the communication peer; the packet forwarding module is configured to: after receiving the uplink data packet that the terminal and the communication peer do not belong to the same ILCR, The RID of the communication peer that is queried from the mapping management module or the communication peer-to-home ILR and the RID of the terminal are encapsulated in a data packet including the terminal AID and the communication peer AID, and are routed through the generalized forwarding plane and forwarded to the pair. End ILCR; and decapsulating the downlink data packet, stripping the RID and sending it to the terminal.

18. The communication network of claim 17, wherein the ILCR further comprises a connection maintenance module, an offline processing module, and a mapping management module, wherein:

The mapping management module is further configured to: delete the AID-RID mapping information of the terminal when the terminal is cut out or offline, and delete the communication peer end of the communication communication end of the terminal that has no communication relationship with other terminals accessing the ILCR. AID-RID mapping information; after the communication between the terminal and the communication peer is terminated, and the communication peer has no communication relationship with other terminals accessing the ILCR, the AID-RID mapping information of the communication peer is deleted; Or when the communication with the terminal is terminated, the AID-RID information of the communication peer is deleted.

19. The communication network of claim 18, wherein

The offline processing module is further configured to: when determining that the communication peer is offline, find the AID of all communication peers of the terminal according to the terminal AID to the connection maintenance module, and then query the mapping management module to query the RIDs of all communication peers, and then The peer ILCR sends the terminal offline notification;

After receiving the offline notification of the terminal sent by the peer ILCR, determine the terminal as the communication peer Line.

The communication network of claim 17 or 18 or 19, wherein the message forwarding module comprises a first forwarding unit and a second forwarding unit, wherein:

The first forwarding unit is configured to: after receiving the uplink data packet sent by the access gateway, including the terminal AID and the communication peer AID, and the terminal and the communication peer do not belong to the same ILCR, such as querying the communication in the mapping management module The RID of the peer end, the RID of the terminal and the communication peer is encapsulated in the data packet as the source and destination addresses, and is routed through the generalized forwarding plane and forwarded to the peer ILCR; if the RID of the communication peer is not queried, the communication peer belongs to The local ILR queries the RID of the communication peer;

21. The communication network of claim 20, wherein

The first forwarding unit is configured to: after receiving the uplink data packet sent by the access gateway and the communication peer that does not belong to the same ILCR, if the mapping management module cannot query the RID of the communication peer, the terminal The RID is encapsulated in the data packet as the source address, and forwarded to the PTF entity at the opposite end of the communication;

22. The communication network of claim 20, wherein

The first forwarding unit is further configured to: save the queried AID-RID mapping information of the communication peer to the mapping management module; and determine the pair of the terminal AID and the communication peer AID in the received data packet Whether the relationship has been saved in the connection maintenance module, if not, is saved in the connection maintenance module; the second forwarding unit is further configured to: after receiving the downlink data packet sent by the generalized forwarding plane, determine the datagram Whether the AID-RID mapping information of the communication peer end exists in the mapping management module, and saves to the mapping management module if it does not exist;

It is determined whether the correspondence between the terminal AID and the communication peer AID in the received data packet has been saved in the connection maintenance module, and if not, is saved in the connection maintenance module.

The communication network according to claim 17 or 18 or 19, wherein the ILCR further comprises a handover control module, the handover control module comprising a cutout control unit and a handover control unit, wherein: the cutout control unit is configured The control for the terminal is cut out. When the terminal moves, the hand-in ILCR to which the terminal is to be moved is determined according to the destination of the movement, and after the completion of the movement, the mapping management module and the connection maintenance module are cut out, and the terminal receives the switch. The data packet sent to the terminal is forwarded to the cut-in ILCR;

24. The communication network of claim 23, wherein

25. The communication network of claim 16, wherein

The ILR is further configured to: save or update the AID-RID mapping information of the terminal after receiving the registration request to the home user terminal, and receive the logout request to the home user terminal after receiving the logout request of the home user terminal The AID-RID mapping information is deleted or invalidated; if a registration or deregistration request is received to the non-home user terminal, it is forwarded to the home location ILR for processing.

26. The communication network of claim 16, wherein

27. A communication network based on a Wimax network architecture for identity identification (AID) and location separation, comprising an access service network and a connection service network in a Wimax network architecture, the access service network including a base station and an access gateway The connection service network includes an identity location register (ILR), and the communication network further includes a generalized forwarding plane for routing and forwarding data messages by location identifier (RID), where:

The communication network according to claim 27, wherein the access gateway comprises an RID distribution module, a registration cancellation module, a mapping management module, and a data forwarding module, wherein:

The mapping management module is configured to: cache and perform AID-RID mapping information of the terminal and the communication peer; The data forwarding module is configured to: after receiving the uplink data packet, when the terminal and the communication peer in the uplink data packet do not belong to the same ILCR, the ILR query from the mapping management module or the communication peer attribution The incoming communication RID is encapsulated in a data packet including the terminal AID and the communication peer AID, and forwarded to the ILCR with which the tunnel is established; and the downlink data packet is decapsulated and sent to the terminal.

29. The communication network of claim 28, wherein the access gateway further comprises a connection maintenance module and an offline processing module, wherein:

The connection maintenance module is configured to: save the connection information between the terminal and the communication peer; and learn to delete the connection information between the terminal and the communication peer after the terminal is offline or removed, or after the communication with the communication peer is terminated; and the communication peer is offline or communicates with the terminal. After the termination, the connection information between the communication peer and the terminal is deleted; the offline processing module is configured to: notify the registration cancellation module, the connection maintenance module, and the mapping management module after determining that the terminal accessing the access gateway is offline; When the communication peer is offline, notify the connection maintenance module and the mapping management module;

The mapping management module is configured to: delete the AID-RID mapping information of the terminal when the terminal is cut out or offline, and delete the communication pair in the communication communication end of the terminal that has no communication relationship with other terminals accessing the access gateway. The AID-RID mapping information of the terminal; after learning that the communication between the terminal and the communication peer is terminated, and the communication peer has no communication relationship with other terminals accessing the ILCR, deleting the AID-RID mapping information of the communication peer; When offline or when communication with the terminal is terminated, the AID-RID information of the communication peer is deleted.

30. The communication network of claim 29, wherein

The RID allocation module is configured to: allocate a RID to the terminal to the ILCR; the offline processing module is further configured to: when determining that the communication peer is offline, searching according to the terminal AID to the connection maintenance module Go to the AID of all the communication peers of the terminal, and then query the location information of the peer access gateway from the local or communication peer AAA home server, and then send the terminal offline notification to the peer access gateway to carry the AID of the terminal; After receiving the offline notification of the terminal sent by the peer access gateway, it is determined that the terminal that is the communication peer is offline.

31. The communication network of claim 28, wherein

The cut-out unit is configured to: implement the cutting out of the terminal, and the data file sent to the terminal received during the handover is forwarded to the access access gateway, and the connection maintenance module is notified after the handover is completed, if the handover causes the access gateway pointed by the terminal RID or The ILCR changes, and the mapping management module is also notified;

The communication network according to claim 31, wherein the cutting unit is further configured to: send connection information of the terminal and the communication peer and/or AID-RID mapping information of the communication communication peer to the hand-in access The gateway saves.

The communication network of claim 27, wherein the access service network has a data plane interface with a fair forwarding plane; the data forwarding module includes:

The first forwarding unit is configured to: after receiving the uplink data packet sent by the base station, including the terminal AID and the communication peer AID, and the terminal and the communication peer do not belong to the same ILCR, if the mapping management module queries the communication pair The RID of the terminal, the RID of the terminal and the communication peer is encapsulated in the data packet as a source and destination address, and sent to the generalized forwarding plane; if the RID of the communication peer is not queried, the RID of the communication peer is queried to the ILR of the communication peer; as well as

34. The communication network of claim 27, wherein The connection service network includes an identity location core router (ILCR), and the ILCR is configured to: maintain a session connection of the terminal, establish a tunnel between the access gateway and the ILCR, and forward between the generalized forwarding plane and the access gateway. The data packet of the RID format is the source address and the destination address; the RID allocation module of the access gateway is configured to: the RID allocated to the terminal points to the access gateway; the data forwarding module includes:

The first forwarding unit is configured to: after receiving the uplink data packet sent by the base station, including the terminal AID and the communication peer AID, and the terminal and the communication peer do not belong to the same ILCR, such as querying the communication in the mapping management module The RID of the peer end encapsulates the RID of the terminal and the communication peer as a source and destination address in the data packet, and performs tunnel encapsulation and then forwards it to the ILCR. If the RID of the communication peer is not queried, the ILR query communication to the communication peer end is performed. The RID of the peer; and

The second forwarding unit is configured to: decapsulate the downlink data packet sent by the ILCR, strip the RID and the tunnel encapsulation, and send the connection to the terminal through the access gateway to the terminal.

35. The communication network of claim 34, wherein

36. The communication network of claim 27, wherein

The first forwarding unit is configured to: after receiving the uplink data packet sent by the base station, including the terminal AID and the communication peer AID, and the terminal and the communication peer do not belong to the same ILCR, if the mapping management module queries the communication pair RID of the end, using the terminal RID or the access gateway address as the source address, The communication peer RID is encapsulated in the data packet as the destination address, and is tunnel encapsulated and forwarded to the ILCR; if the RID of the communication peer is not queried, the IRR of the communication peer belongs to the RID of the communication peer;

The second forwarding unit is configured to: decapsulate the downlink data packet sent by the ILCR, strip the RID and the tunnel encapsulation, or strip the RID, the access gateway address, and the tunnel encapsulation, or strip the tunnel encapsulation, and then pass the connection The connection between the gateway and the terminal is sent to the terminal.

37. The communication network of claim 36, wherein

The first forwarding unit is configured to: after receiving the uplink data packet that the terminal sent by the access gateway and the communication peer does not belong to the same ILCR, query the AGW-AID-RID mapping information in the local cache according to the source AID, The address of the access gateway as the source address is replaced with the terminal RID and is stripped of the tunnel encapsulation, and then forwarded to the mapping forwarding plane or the generalized forwarding plane.

The communication network according to any one of claims 32 to 36, wherein the connection service network further includes a packet forwarding function (PTF) entity; and the first forwarding unit in the access gateway is configured to: After receiving the uplink data packet sent by the base station and the communication peer that does not belong to the same ILCR, if the mapping management module cannot query the RID of the communication peer, the terminal RID is encapsulated in the data text and forwarded to the communication peer. The home PTF entity; or the terminal RID is encapsulated in the data packet as a source address and encapsulated in the tunnel, and then forwarded to the PTF entity of the communication peer; The PTF entity is configured to: after receiving the data packet sent by the ILCR or other PTF entity, the RID is found as the destination address and is encapsulated in the packet header according to the communication peer AID in the data packet, and the data is encapsulated in the packet header. The message is sent to the peer ILCR or the peer access gateway through the generalized forwarding plane.

The communication network according to any one of claims 32 to 36, wherein the first forwarding unit in the access gateway is configured to: receive the terminal sent by the base station and the communication peer does not belong to the same ILCR After the uplink data packet, if the RID of the communication peer is not queried in the mapping management module, the data packet is cached first, and the RID of the communication peer is used as the source and destination address after querying the RID of the communication peer. Encapsulated in data packets, tunneled and forwarded to ILCR or directly sent to the generalized forwarding plane.

The communication network according to any one of claims 32 to 36, wherein the first forwarding unit in the access gateway is further configured to: save the queried AID-RID mapping information of the communication peer to a mapping management module; determining whether the correspondence between the terminal AID and the communication peer AID in the received data packet is saved in the connection maintenance module, and if not, saving to the connection maintenance module;

41. The communication network of claim 31, wherein

42. The communication network of claim 27, wherein

The access gateway is the basis of the functional entity of the access gateway in the Wimax network architecture In the above, the new functional modules required for implementing identity identification and location separation are extended. The functional entities of the access gateway in the Wimax network architecture include an anchor data channel function (DPF) module and an authenticator.

43. A method for a terminal to access a communication network according to claim 1 or 16, comprising: after the terminal is powered on, performing access authentication and initial service flow creation, and then obtaining an identity (AID) from the access gateway;

In the process of the tunnel establishment initiated by the access gateway to the identity location core router (ILCR), the ILCR allocates a location identifier (RID) to the terminal for the ILCR, and saves mapping information of the terminal AID and the RID, and Notifying the access gateway of the RID assigned to the terminal;

After obtaining the AID and RID of the terminal, the access gateway or the ILCR belongs to the terminal.

The ILR initiates a registration request, carrying the AID and RID of the terminal; after receiving the registration request, the ILR saves the current AID-RID mapping relationship of the terminal.

44. The method of claim 43 wherein

45. The method of claim 43 or 44, wherein

46. The method of claim 43 or 44, wherein

In the process of establishing the tunnel, the method further includes: the ILCR is further authenticated to the home AAA server of the terminal to obtain key information.

47. A method for a terminal to access a communication network according to claim 27, comprising: after the terminal is powered on, performing access authentication and initial service flow creation, and then acquiring an identity (AID) of the terminal from the access gateway. ;

The access gateway allocates a location identifier (RID) to the terminal, saves mapping information of the terminal AID and the RID, and sends a registration request to the ILR of the terminal home, carrying the AID of the terminal and RID; and

After receiving the registration request, the ILR saves the current AID-RID mapping relationship of the terminal.

48. The method of claim 47, wherein

49. The method of claim 47, wherein

The terminal obtains the AID of the terminal from the access gateway through a dynamic host configuration protocol (DHCP) process or by using a mobile IP method, and the AID is a static IP address allocated when the terminal signs the contract.

50. The method of claim 47 or 48 or 49, wherein

The step of the access gateway assigning an RID to the terminal is to obtain, at the terminal, the access gateway

During the process of the AID, the access gateway is triggered to allocate an RID to the terminal.

51. The method of claim 47 or 48 or 49, wherein