WO2012022221A1

WO2012022221A1 - Method and system triggering fixed-mobile convergence policy negotiation

Info

Publication number: WO2012022221A1
Application number: PCT/CN2011/077922
Authority: WO
Inventors: 霍玉臻; 周晓云; 毕以峰
Original assignee: 中兴通讯股份有限公司
Priority date: 2010-08-16
Filing date: 2011-08-02
Publication date: 2012-02-23
Also published as: CN102378143B; CN102378143A

Abstract

Disclosed is a method to trigger a fixed-mobile convergence policy negotiation. The method comprises: an Evolved Pocket Data Gateway initiating the establishment of a Gxb session with a Policy And Charging Rules Function (PCRF), the PCRF is triggered by the establishment of the Gxb session, the PCRF initiating the establishment of a S9* session with Broadband Policy Control Framework (BPCF), triggering a policy negotiation between a mobile network and a fixed network. Also disclosed is a system of triggering a fixed-mobile convergence policy negotiation session, wherein the policy negotiation triggering unit establishes the Gxb session initiated by the ePDG with the PCRF. When the PCRF is triggered by the establishment of the Gxb session, the PCRF initiates the establishment of the S9* session, triggering the policy negotiation between the mobile network and the fix network. The method and system of the present invention can ensure the triggering of the policy negotiation between the fixed network and the mobile network in any situation.

Description

Method and system for triggering fixed network mobile convergence strategy negotiation

The present invention relates to the field of communications, and in particular, to a method and system for triggering a fixed network mobile convergence policy negotiation. Background technique

As shown in Figure 1, the 3GPP (3rd Generation Partnership Project) evolved packet system (EPS, Evolved Packet System) network architecture in the non-roaming scenario, the evolved universal mobile communication system terrestrial radio access network (E-UTRAN, Evolved Universal Terrestrial Radio Access Network), Mobility Management Entity (MME), Serving Gateway (S-GW), Packet Data Network Gateway (P-GW or PDN GW, Packet Data Network) Gateway), Home Subscriber Server (HSS), Policy and Charging Rules Function (PCRF) entity and other supporting nodes. The PCRF is the core of Policy and Charging Control (PCC) and is responsible for policy decision making and charging rules. The PCRF provides network control rules based on service data flows, including traffic data flow detection, Gating Control, Quality of Service (QoS) control, and data flow based charging rules. The PCRF sends its formulated policies and charging rules to the Policy and Charging Enforcement Function (PCEF) for execution. At the same time, the PCRF also needs to ensure that these rules are consistent with the user's subscription information. The PCRF formulates the policy and charging rules based on: obtaining information related to the service from the application function (AF, Application Function); obtaining the subscription information with the user policy charging control from the SPR (Spent Profile Repository); Get information about the network associated with the bearer. The PCRF includes a visited PCRF (vPCRF) and a home PCRF (hPCRF). In the roaming scenario, both vPCRF and hPCRF exist. In the non-roaming scenario, only hPCRF can continue to be called PCRF.

EPS supports interworking with non-3GPP systems. Interworking with non-3GPP systems is implemented through the S2a/b/c interface, which acts as an anchor between 3GPP and non-3GPP systems. The system architecture diagram of EPS is shown in Figure 1. The non-3GPP system is divided into trusted non-3GPP IP access and untrusted non-3GPP IP access. Trusted non-3GPP IP access can be directly connected to the P-GW through the S2a interface; untrusted non-3GPP IP access requires an evolved packet data gateway (ePDG, Evolved Packet Data Gateway) to be connected to the P-GW, ePDG and P- The interface between the GWs is S2b, and IPSec is used to encrypt and protect signaling and data between the user equipment (UE, User Equipment) and the ePDG. S2c provides user plane related control and mobility support between the UE and the P-GW. The supported mobility management protocol is Moblie IPv6 support for dual stack Hosts and Routers (DSMIPv6). S2c is also divided into trusted access and untrusted access, and ePDG is required for untrusted access.

At present, many operators pay attention to Fixed Mobile Convergence (FMC) and conduct research on interconnection and interoperability between 3GPP and Broadband Forum (BBF). For the scenario where the user accesses the mobile core network through the BBF fixed network, the QoS of the entire data transmission path (data will be transmitted through the fixed network and the mobile network) is required. In the prior art, the PCRF and the BBF fixed network are used. The Broadband Policy Control Architecture (BPCF, Broadband Policy Control Framework) negotiates to implement QoS guarantees. As a network element in the BBF fixed network, BPCF performs resource admission control on the resource request message of the PCRF according to the network policy and subscription information of the BBF fixed network access. For example, when the UE accesses the 3GPP core network through a wireless local area network (WLAN), the total bandwidth requirement of all UEs accessing the service through a WLAN access line does not exceed the bandwidth of the line, for example, The PCRF needs to interact with the BPCF when performing QoS authorization so that the BPCF performs resource admission control without exceeding the contracted bandwidth or the largest physical agent supported by the line.

At present, only the BBF fixed network in the non-trusted non-3GPP access network proposes the above-mentioned explicit needs. Seeking, that is: need to guarantee the QoS on the entire transmission path of the data, in order to meet this demand, when the BBF fixed network accesses the mobile core network, it needs to be guaranteed: can trigger between the BBF fixed network and the mobile core network The policy negotiation does not affect the access of other untrusted non-3GPP access networks except the BBF fixed network.

2 is a structural diagram of a UE accessing a 3GPP core network through a BBF fixed network in the prior art, where the BBF fixed network is accessed as an untrusted non-3GPP access network. In the architecture of Figure 2, when the UE accesses the BBF fixed network, the Broadband Access Server (BRAS)/Broadband Network Access Gateway (BNG, Broadband Network Gateway) located in the BBF fixed network will perform 3GPP-based Access authentication, and trigger the BPCF to initiate an S9* session to interact with the PCRF. Here, the initiation of the S9* session is initiated to trigger the policy negotiation between the BBF fixed network and the mobile network, so that the PCRF can perform policy interworking with the BPCF when the PCRF performs QoS authorization, and the BPCF according to the PCRF resource request, network policy, subscription information, and resources. Resource admission control is performed using usage conditions and the like.

However, in some scenarios, the BBF fixed network does not always be aware of UE access, or the BBF fixed network does not support 3GPP-based access authentication. As a result, BPCF acts as a network element in the BBF fixed network. It is also impossible to perceive the access of the UE or the 3GPP-based access authentication. In this case, BPCF will not be able to initiate the establishment of an S9* session, and thus cannot trigger policy negotiation between the fixed network and the mobile network. It can be seen that: With the prior art, it is not always guaranteed to trigger policy negotiation between the fixed network and the mobile network, and it is unable to provide stable and reliable support for subsequent QoS control of UE access based on policy negotiation, thereby resulting in Subsequent policy-based negotiation to achieve QoS control for UE access is full of uncertainty. Summary of the invention

In view of this, the main purpose of the present invention is to provide a method and system for triggering a fixed network mobile convergence policy negotiation, and in any case, can always guarantee the policy negotiation between the fixed network and the mobile network. In order to achieve the above object, the technical solution of the present invention is achieved as follows: A method for triggering a fixed network mobile convergence policy negotiation, the method comprising: an evolved packet data gateway (ePDG) initiating establishment of a Gxb session to a policy and charging rule function (PCRF); the PCRF being established by the Gxb session Triggering, the establishment of the S9* session by the PCRF to the Broadband Policy Control Architecture (BPCF), triggering the policy negotiation between the mobile network and the fixed network; wherein the ePDG is connected to the PCRF, and between the ePDG and the PCRF The interface is a Gxb interface.

Before the ePDG initiates the establishment of the Gxb session to the PCRF, the method further includes: the user equipment (UE) accesses the 3GPP core network through the untrusted non-3GPP access network, and is authenticated by the ePDG, and/or the 3GPP. The authorized charging server, and/or the 3GPP authentication and authorization charging proxy server determines whether it is necessary to trigger policy negotiation between the mobile core network and the fixed network.

In the roaming scenario, the PCRF includes a vPCRF and an hPCRF, and the method further includes: ePDG initiates establishment of a Gxb session to the vPCRF or hPCRF, and the vPCRF or hPCRF is triggered by the establishment of the Gxb session, and is initiated by the vPCRF or hPCRF to the BPCF. The establishment of the S9* session triggers the policy negotiation between the mobile network and the fixed network.

In the non-roaming scenario, the PCRF includes an hPCRF, and the method further includes: ePDG initiating the establishment of a Gxb session to the hPCRF, the hPCRF is triggered by the establishment of the Gxb session, and the hPCRF initiates the establishment of the S9* session to the BPCF, triggering The policy negotiation between the mobile core network and the fixed network.

A system for triggering a fixed network mobile convergence policy negotiation, the system includes a policy negotiation triggering unit, configured to initiate a Gxb session establishment to the PCRF by the ePDG, where the PCRF is triggered by the establishment of the Gxb session, by the PCRF Initiating the establishment of an S9* session to the BPCF, triggering policy negotiation between the mobile network and the fixed network;

The ePDG is connected to the PCRF, and the interface between the ePDG and the PCRF is a Gxb interface.

The system further includes a determining unit, configured to initiate the Gxb to the PCRF by the ePDG Before the establishment of the session, the UE accesses the 3GPP core network through the untrusted non-3GPP access network, and is judged by the ePDG, and/or the 3GPP authentication and authorization charging server, and/or the 3GPP authentication and authorization charging proxy server. Whether it is necessary to trigger policy negotiation between the mobile core network and the fixed network.

The policy negotiation triggering unit is further configured to: in a roaming scenario, where the PCRF includes a vPCRF and an hPCRF, the ePDG initiates establishment of a Gxb session to the vPCRF or the hPCRF, where the vPCRF or the hPCRF is established by the Gxb session. Triggering, the vPCRF or hPCRF initiates the establishment of an S9* session to the BPCF, triggering policy negotiation between the mobile network and the fixed network.

The policy negotiation triggering unit is further configured to: in a non-roaming scenario, where the PCRF includes an hPCRF, the ePDG initiates establishment of a Gxb session to the hPCRF, and the hPCRF is triggered by the establishment of the Gxb session, by the hPCRF BPCF initiates the establishment of an S9* session, triggering policy negotiation between the mobile core network and the fixed network.

The ePDG of the present invention initiates the establishment of a Gxb session to the PCRF; the PCRF is triggered by the establishment of the Gxb session, and the PCRF initiates the establishment of the S9* session to the BPCF, triggering the policy negotiation between the mobile network and the fixed network; wherein the ePDG is connected to the PCRF, ePDG The interface with the PCRF is the Gxb interface.

With the present invention, when the UE accesses the 3GPP core network through the BBF fixed network, in any case, for example, whether the BBF fixed network senses the access of the UE, or whether the BBF fixed network supports the 3GPP-based access authentication, The PCRF initiates the establishment of the S9* session to the BPCF, and the PCRF is not the network element in the BBF fixed network. Therefore, the policy negotiation of the fixed network and the mobile network can be triggered to ensure stable implementation of the QoS control for the UE access. Reliable support. DRAWINGS

1 is an EPS architecture diagram in a non-roaming scenario in the prior art;

2 is a non-roaming architecture diagram of a BBF fixed network accessing 3GPP when untrusted non-3GPP access in the prior art;

3 is a non-roaming architecture diagram of a UE accessing a 3GPP core network through a BBF fixed network according to the present invention; 4 is a roaming architecture diagram of a home route of a UE accessing a 3GPP core network through a BBF fixed network according to the present invention;

5 is a schematic diagram of a local grooming roaming architecture of a UE accessing a 3GPP core network through a BBF fixed network according to the present invention;

FIG. 6 is a flowchart of a policy negotiation between an ePDG and a 3GPP AAA Server/Proxy determining activation and fixed network in an S2b access scenario according to an embodiment of the present invention;

7 is a flowchart of a policy negotiation between a 3GPP AAA Server/Proxy decision activation and a fixed network in an S2b access scenario according to Embodiment 2 of the present invention;

FIG. 8 is a flowchart of a policy negotiation between an ePDG and a 3GPP AAA Server/Proxy determining activation and fixed network in an S2c access scenario according to Embodiment 3 of the present invention;

FIG. 9 is a flowchart of a policy negotiation between a 3GPP AAA Server/Proxy decision activation and a fixed network in an S2c access scenario according to Embodiment 4 of the present invention. detailed description

The basic idea of the present invention is: ePDG initiates the establishment of a Gxb session to the PCRF; the PCRF is triggered by the establishment of the Gxb session, and the PCRF initiates the establishment of the S9* session to the BPCF, triggering the policy negotiation between the mobile network and the fixed network; wherein, ePDG and The PCRF is connected, and the interface between the ePDG and the PCRF is a Gxb interface.

The implementation of the technical solution will be further described in detail below with reference to the accompanying drawings.

The prior art is to establish an S9* session by the BPCF. If the BBF fixed network does not always perceive the UE access, or the BBF fixed network does not support the 3GPP-based access authentication, the BPCF acts as a BBF fixed network. The network element in the network cannot, of course, perceive the access of the UE or the 3GPP-based access authentication, so that the BPCF cannot initiate the establishment of the S9* session. The present invention is different from the prior art in that the connection and interface between the ePDG and the PCRF are used. The PCRF initiates the establishment of the S9* session, that is, the PCRF establishes an S9* session to the BPCF. Since the PCRF is not a network element in the BBF fixed network, Policy negotiation can be performed between PCRF and BPCF in any case. In other words, it can always guarantee the policy negotiation of the BBF fixed network and the mobile network, thus providing stable and reliable support for the subsequent implementation of QoS control for UE access.

It should be noted here that the S9* interface in this document refers to an evolved interface form based on the S9 interface; the S9* session refers to: an S9-based evolved session form. For the time being, the name "S9*" is used to indicate the evolution from S9, but other names that can implement the functions of the present invention are also within the scope of the present invention and will not be described again.

A method for triggering a fixed network mobile convergence policy negotiation, the method mainly includes: when a policy negotiation between a mobile core network and a fixed network is triggered (ie, a Gxb session is established), the ePDG initiates establishment of a Gxb session to the PCRF, and the PCRF receives the Gxb session. The establishment of the trigger, the establishment of the S9* session by the PCRF, that is, the PCRF establishes an S9* session to the BPCF to trigger the policy negotiation between the BBF fixed network and the mobile network, thereby implementing policy negotiation between the mobile core network and the fixed network. The ePDG is connected to the PCRF, and the interface between the ePDG and the PCRF is a Gxb interface.

Further, before the policy of the mobile core network and the fixed network is negotiated, the method further includes: whether the triggering operation needs to be triggered, that is, the UE accesses the 3GPP core network through an untrusted non-3GPP access network, such as a BBF fixed network. The ePDG, and/or the 3GPP AAA server, and/or the 3GPP AAA Proxy determine whether it is necessary to trigger policy negotiation between the mobile core network and the fixed network.

AAA is an abbreviation for authentication and authorization charging, 3GPP AAA server refers to 3GPP authentication and authorization accounting server, and 3GPPAAA Proxy refers to: 3GPP authentication and authorization charging proxy server.

Further, in the roaming scenario, both the vPCRF and the hPCRF are present. It can be understood that the PCRF specifically includes: vPCRF and hPCRF; at this time, when the policy of the mobile core network and the fixed network needs to be triggered, the ePDG initiates the Gxb to the vPCRF or the hPCRF. The establishment of the session, the vPCRF or the hPCRF is triggered by the establishment of the Gxb session, and the establishment of the S9* session by the vPCRF or the hPCRF, that is, the vPCRF or the hPCRF establishes an S9* session to the BPCF to trigger the policy negotiation between the BBF fixed network and the mobile network. Thereby achieving strategic negotiation between the mobile core network and the fixed network.

Further, in the non-roaming scenario, only hPCRF exists, which can be understood as: Specifically, the method includes: hPCRF; at this time, when the policy negotiation of the mobile core network and the fixed network is triggered, the ePDG initiates the establishment of the Gxb session to the hPCRF, and the hPCRF is triggered by the establishment of the Gxb session, and the hPCRF initiates the establishment of the S9* session. That is, the hPCRF establishes an S9* session to the BPCF to trigger

BBF fixed network and mobile network policy negotiation, so as to achieve strategic negotiation between mobile core network and fixed network.

The invention is illustrated by way of example below.

In the present invention, the BBF fixed network access is one of untrusted non-3GPP access network access, mainly refers to fixed broadband access, including but not limited to the following access: WLAN access, WiFi access, ADSL Access and so on.

FIG. 3 is a non-roaming architecture diagram of a UE accessing a 3GPP core network through a BBF fixed network according to the present invention. The ePDG is connected to the PCRF through the Gxb interface. When the ePDG and/or the 3GPP AAA server determine that the policy negotiation with the fixed network needs to be activated, the ePDG establishes a Gxb session with the PCRF. The PCRF is triggered by the Gxb session establishment and establishes an S9* session with the BPCF to implement policy negotiation with the fixed network.

4 is a schematic diagram of a roaming architecture of a home route of a UE accessing a 3GPP core network through a BBF fixed network according to the present invention. FIG. 5 is a schematic diagram of a local navigation roaming architecture of a UE accessing a 3GPP core network through a BBF fixed network according to the present invention. In Figure 4 and Figure 5, the ePDG and the vPCRF are connected through the Gxb interface. When the ePDG and/or the 3GPPAAA Proxy determine that the policy negotiation with the fixed network needs to be activated, the ePDG establishes a Gxb session to the vPCRF. The vPCRF is triggered by the Gxb session establishment, and establishes an S9* session with the BPCF to implement policy negotiation with the fixed network.

Method embodiment one:

FIG. 6 is a flowchart of policy negotiation between the ePDG and the 3GPP AAA Server/Proxy to determine activation and fixed network in the S2b access scenario of the present invention. This embodiment is applicable to the case where the fixed network is used as an untrusted non-3GPP access network, and the UE accesses the 3GPP core network through the S2b interface. The process of Figure 6 includes the following steps:

Step 601: The UE performs the 3GPP-based access authentication by using the BBF fixed network access. This step Optionally, when the 3GPP-based access authentication is not performed, the UE only needs to perform the traditional fixed network access authentication. In this scenario, the BBF access network cannot sense that the UE accesses the 3GPP core network.

Step 602: After the UE accesses the BBF to access the network, the BBF access network allocates a local IP address to the UE.

Step 603: The UE initiates an IKEv2 tunnel establishment process, and uses EAP for authentication. In the roaming scenario, the ePDG interacts with the AAA server through the AAA Proxy (the AAA Server further interacts with the HSS) to complete the Extensible Authentication Protocol (EAP) authentication.

Step 603a, step 603b, and step 603c belong to the EAP authentication process. In the non-roaming scenario, step 603a and step 603c are performed, and step 603b and step 603c are performed in the roaming scenario.

Step 603a: After receiving the DER command sent by the ePDG (the command code indicates that the command is an authentication and authorization request), the 3GPP AAA Server determines whether it needs to activate the policy negotiation with the fixed network, that is, whether to establish a Gxb session. The judgment conditions include but are not limited to one or more of the following conditions:

1. Determine whether the UE accesses from the fixed network according to the access type. If you access from the fixed network, you need to activate the policy negotiation with the fixed network; otherwise, you do not need to activate the policy negotiation with the fixed network.

2. According to the interworking protocol between the fixed network and the 3GPP network (including whether the fixed network supports 3GPP and fixed network policy negotiation, whether the fixed network supports policy control, whether the fixed network supports BPCF, whether the fixed network/3GPP allows negotiation with the fixed network policy Etc.), to determine whether to allow activation of the policy negotiation with the fixed network. If the interworking agreement allows, you need to activate the policy negotiation with the fixed network; otherwise, you need to activate the policy negotiation with the fixed network.

3. Whether the UE has performed the 3GPP-based access authentication through the BBF AAA Proxy, that is, whether step 601 has been performed. If step 601 is executed, the BPCF has established an S9* session with the PCRF, that is, the policy negotiation with the fixed network has been activated, and the policy negotiation with the fixed network is not required to be activated; otherwise, the policy negotiation with the fixed network needs to be activated.

4. Local strategy. When one or more of the above conditions are met, the 3GPP AAA server determines that it needs to activate policy negotiation with the fixed network.

Step 603b: After receiving the DER command sent by the ePDG (the command code indicates that the command is an authentication and authorization request), the 3GPP AAA Proxy determines whether it is necessary to activate the policy negotiation with the fixed network, that is, whether to establish a Gxb session. The judgment condition is the same as the judgment condition described in the step 603a.

When one or more of the above conditions are met, the 3GPP AAA Proxy determines that policy negotiation with the fixed network needs to be activated.

Step 603c, when the EAP authentication is completed, the 3GPP AAA Server/Proxy sends a DEA command to the ePDGo.

In the non-roaming scenario, the 3GPP AAA Server sends a DEA command to the ePDG. According to the judgment result of the step 603a, the 3GPP AAA Server carries the activation and fixed network policy negotiation indication in the DEA command, that is, establishes the Gxb session indication.

In the roaming scenario, the 3GPP AAA Server sends a DEA command to the 3GPP AAA Proxy, and the 3GPP AAA Proxy forwards the message to the ePDG. After receiving the DEA command sent by the 3GPP AAA Server, the 3GPP AAA Proxy carries the activation and fixed network policy negotiation indication in the DEA command according to the judgment result of step 603b, that is, the Gxb session indication is established.

The activation and fixed network policy negotiation indication can be implemented by adding an indication field to the DEA message with or without existing fields.

When the 3GPP AAA Server/Proxy carries the activation and fixed network policy negotiation indication in the DEA command, it indicates that the ePDG activation and the fixed network policy negotiation are required. When the indication is not carried, it indicates that the ePDG activation and the fixed network policy negotiation are not required; and vice versa. Alternatively, when the 3GPP AAA Server/Proxy sets the activation and fixed network policy negotiation indication to 1 in the DEA command, it indicates that the ePDG activation and the fixed network policy negotiation are required. When the indication is set to 0, the ePDG activation and the fixed network are not required. Strategy negotiation; vice versa. Step 603d: After receiving the DEA command from the 3GPP AAA Proxy/Server, the ePDG determines whether it needs to activate the policy negotiation with the fixed network, that is, whether to establish a Gxb session. The judgment conditions include but are not limited to one or more of the following conditions:

1. The 3GPP AAA Proxy/Server indicates whether the ePDG needs to be activated to negotiate with the fixed network policy. If the 3GPP AAA Proxy/Server indicates that it needs to activate the negotiation with the fixed network policy, it needs to activate the policy negotiation with the fixed network; otherwise, it does not need to activate the policy negotiation with the fixed network.

2. Whether the ePDG's own capabilities support negotiation with the fixed network policy (eg, whether it supports the ability to establish Gxb sessions). If the ePDG's own capabilities support negotiation with the fixed network policy, it is necessary to activate the policy negotiation with the fixed network; otherwise, it is not necessary to activate the policy negotiation with the fixed network.

When one or more of the above conditions are met, the ePDG determines that it needs to activate policy negotiation with the fixed network.

Step 604: If the ePDG determines that the policy negotiation with the fixed network needs to be activated according to the judgment result of the step 603d, the ePDG starts the establishment of the Gxb session. The ePDG sends a gateway control session setup message to the vPCRF, where the message carries the user identifier, the PDN identifier, and the IPSec external tunnel information. The IPSec external tunnel information includes the source address and source port of the IKEv2 signaling sent by the ePDG. Since the IKEv2 signaling may be through NAT traversal, the source address and source port received by the ePDG may be different from the source address and source port when the UE sends the packet.

Step 605, the vPCRF establishes an S9 session with the hPCRF.

Step 606: The vPCRF sends a gateway control session establishment acknowledgement message to the ePDG, where the message carries the QoS rule and the event trigger.

In a non-roaming scenario, the ePDG interacts with the hPCRF directly through the vPCRF.

Step 607: After selecting the P-GW, the ePDG sends a proxy binding update message to the P-GW, where the message carries the user identifier and the PDN identifier.

Step 608: The P-GW sends an update P-GW IP address message to the AAA Server, and the P-GW is sent. The address is sent to the AAA Server, and the AAA Server further interacts with the HSS to save the address of the P-GW to the HSS.

Step 609: The P-GW allocates an IP address to the UE, and initiates an IP-CAN session establishment process to the hPCRF, carrying the user identifier, the PDN identifier, and the IP address.

Step 610: The P-GW returns a proxy binding acknowledgement message to the ePDG, and carries an IP address assigned to the UE.

Step 611: The proxy binding update is successful, and an IPSec tunnel is established between the UE and the ePDG. When the GTP protocol is applied to the S2b interface, in step 607, step 610 is a corresponding GTP bearer setup message.

Step 612: The ePDG sends the last IKEv2 signaling to the UE, and carries the IP address of the UE. Step 613: triggered by the establishment of the Gxb session, the vPCRF/hPCRF establishes an S9* session with the BPCF. Through S9* sessions, vPCRF/hPCRF can negotiate policy with BPCF. The vPCRF determines the BPCF of the BBF access network that the UE currently accesses according to the source IP address in the IPSec external tunnel information received in step 604, and initiates an S9* session establishment process to the BPCF, and carries the source IP in the IPSec external tunnel information. Address and source port number. The BPCF further performs resource admission control according to the access location information of the BBF access network currently accessed by the UE. In a non-roaming scenario, hPCRF interacts with BPCF to establish an S9* session.

The establishment of the S9* session can be performed after the Gxb session is established.

After the process is complete, an IPSec tunnel is established between the UE and the ePDG. A PMIP or GTP tunnel is established between the ePDG and the P-GW.

Method Embodiment 2:

In the S2b access scenario of the present invention, the 3GPP AAA Server/Proxy determines a policy negotiation flowchart for activating and fixing the network. This embodiment is applicable to the case where the fixed network is used as an untrusted non-3GPP access network, and the UE accesses the 3GPP core network through the S2b interface. The process of FIG. 7 includes the following steps: Step 701 to Step 702: The same steps 601 to 602. Step 703: The UE initiates an IKEv2 tunnel establishment process, and uses EAP for authentication. In the roaming scenario, the ePDG interacts with the AAA server through the AAA Proxy (the AAA Server further interacts with the HSS) to complete the EAP authentication.

Step 703a, step 703b, step 703c, and step 703d belong to the EAP authentication process. In the non-roaming scenario, step 703a, step 703b, and step 703d are performed, and step 703a, step 703c, and step 703d are performed in the roaming scenario.

Step 703a: The DER command sent by the ePDG (the command code indicates that the command is an authentication and authorization request), and the message carries the ePDG capability information, where the information is used to indicate whether the ePDG supports the negotiation with the fixed network policy (for example, whether the Gxb is supported or not) is established. ) to the PCRF. In the non-roaming scenario, the ePDG sends the DER command to the hPCRF. In the roaming scenario, the ePDG sends the DER command to the vPCRF, and then the vPCRF forwards it to the hPCRF. The vPCRF can delete the ePDG capability information in the command before forwarding the DER command.

Step 703b: After receiving the DER command sent by the ePDG (the command code indicates that the command is an authentication and authorization request), the 3GPP AAA server determines whether it needs to activate the policy negotiation with the fixed network, that is, whether to establish a Gxb session. The judgment conditions include but are not limited to one or more of the following conditions:

3. Whether the UE has performed 3GPP-based access authentication through the BBF AAA Proxy, that is, whether step 701 has been performed. If 701 is executed, the BPCF has established an S9* session with the PCRF, that is, the policy negotiation with the fixed network has been activated, and the policy association with the fixed network is not required to be activated. Business; otherwise, you need to activate policy negotiation with the fixed network.

4. Local strategy.

5. Does the ePDG capability support negotiation with the fixed network policy (eg, whether it supports the ability to establish Gxb sessions). If the ePDG capability supports negotiation with the fixed network policy, it needs to activate the policy negotiation with the fixed network; otherwise, it does not need to activate the policy negotiation with the fixed network.

When one or more of the above conditions are met, the 3GPP AAA server determines that it needs to activate policy negotiation with the fixed network.

Step 703c: After receiving the DER command sent by the ePDG (the command code indicates that the command is an authentication and authorization request), the 3GPP AAA Proxy determines whether it is necessary to activate the policy negotiation with the fixed network, that is, whether to establish a Gxb session. The judgment condition is the same as the judgment condition described in the step 703b.

Step 703d, when the EAP authentication is completed, the 3GPP AAA Server/Proxy sends a DEA command to the ePDGo.

In the non-roaming scenario, the 3GPP AAA Server sends a DEA command to the ePDG. According to the judgment result of the step 703b, the 3GPP AAA Server carries the activation and fixed network policy negotiation indication, that is, the Gxb session establishment indication, in the DEA command.

In the roaming scenario, the 3GPP AAA Server sends a DEA command to the 3GPP AAA Proxy, and the 3GPP AAA Proxy forwards the message to the ePDG. After receiving the DEA command sent by the 3GPP AAA Server, the 3GPP AAA Proxy carries the activation and fixed network policy negotiation indication, that is, the Gxb session establishment indication, in the DEA command according to the judgment result of step 703c.

The 3GPP AAA Server/Proxy carries the activation and fixed network policy negotiation indication in the DEA command. It indicates that ePDG needs to be activated to negotiate with the fixed network. When the indication is not carried, it indicates that ePDG activation is not required for policy negotiation with the fixed network; vice versa. Alternatively, when the 3GPP AAA Server/Proxy sets the activation and fixed network policy negotiation indication to 1 in the DEA command, it indicates that the ePDG activation and the fixed network policy negotiation are required. When the indication is set to 0, the ePDG activation and the fixed network are not required. Strategy negotiation; vice versa.

Step 704: After receiving the DEA command from the 3GPP AAA Proxy/Server, the ePDG needs to activate the policy negotiation with the fixed network if the 3GPP AAA Proxy/Server indicates that the activation and the fixed network policy negotiation is required, and the ePDG starts the establishment of the Gxb session. The ePDG sends a gateway control session setup message to the V-PCRF, where the message carries the user identifier, the PDN identifier, and the IPSec external tunnel information. The IPSec external tunnel information includes the source address and source port of the IKEv2 signaling sent by the ePDG. Since the IKEv2 signaling may be through NAT traversal, the source address and source port received by the ePDG may be different from the source address and source port when the UE sends the packet.

Step 705 to step 713 are the same as steps 605 to 613.

Method embodiment three:

FIG. 8 is a flowchart of policy negotiation between the ePDG and the 3GPP AAA Server/Proxy to determine activation and fixed network in the S2c access scenario of the present invention. This embodiment is applicable to a fixed network as an untrusted non-3GPP access network, and the UE accesses the 3GPP core network through the S2c interface. The process of Figure 8 includes the following steps:

Step 801 to step 806: The same step 601 to step 606.

Step 807~Step 808 is the same as: Step 611~Step 612.

In step 809, the UE performs a Bootstraping process. The UE performs a DNS lookup according to the APN to obtain an IP address of the P-GW to which the PDN is to be accessed. To protect the DSMIPv6 message between the UE and the P-GW, the UE uses IKEv2 to establish a security association and uses EAP for authentication. The P-GW communicates with the AAA Server (the AAA Server further interacts with the HSS) to complete the EAP authentication, and the P-GW allocates an IPv6 address or prefix to the UE as the home address HoA of the UE. Step 810: The UE sends a DSMIPv6 binding update message to the P-GW, where the message carries CoA and HoA. The lifetime parameter in the binding message is not zero. The P-GW establishes a binding context.

Step 811: The PCEF in the P-GW initiates an IP-CAN session establishment process to the H-PCRF, and carries the user identifier and the PDN identifier.

Step 812: The P-GW sends an update P-GW IP address message to the AAA Server, and sends the P-GW address to the AAA server. The AAA Server further interacts with the HSS to save the address of the P-GW to the HSS.

Step 813: The P-GW returns a binding acknowledgement message to the UE.

Step 814, triggered by the establishment of the Gxb session, the vPCRF/hPCRF establishes an S9* session with the BPCF. Through S9* sessions, vPCRF/hPCRF can negotiate policy with BPCF. The vPCRF determines the BPCF of the BBF access network that the UE currently accesses according to the source IP address in the IPSec external tunnel information received in step 604, and initiates an S9* session establishment process to the BPCF, and carries the source IP in the IPSec external tunnel information. Address and source port number. The BPCF further performs resource admission control according to the access location information of the BBF access network currently accessed by the UE. In a non-roaming scenario, hPCRF (also known as PCRF) interacts with BPCF to establish an S9* session.

After the process is performed, an IPSec tunnel is established between the UE and the ePDG, and a DSMIP tunnel is established between the UE and the P-GW.

Method Embodiment 4:

In the S2c access scenario of the present invention, the 3GPP AAA Server/Proxy determines a policy negotiation flowchart for activating the fixed network. This embodiment is applicable to a fixed network as an untrusted non-3GPP access network, and the UE accesses the 3GPP core network through the S2c interface. The flow of FIG. 9 includes the following processes: Step 901 to Step 906: Same steps 701 to 706.

Step 907 to step 908: the same step 711 to step 712.

Step 909 to step 914: Same as step 809 to step 814. When ePDG can obtain the interworking protocol between fixed network and 3GPP network (including whether fixed network supports 3GPP and fixed network policy negotiation, whether fixed network supports policy control, whether fixed network supports BPCF, whether fixed network/3GPP allows and fixed network strategy When negotiating, etc., whether the decision to activate the policy negotiation with the fixed network is required does not require the participation of the 3GPP AAA server/Proxy, and is directly determined by the ePDG in the EAP authentication process in the IPsec tunnel establishment process according to the judgment condition in step 703b. The subsequent steps of the ePDG are the same as other embodiments of the invention.

A system for triggering a fixed network mobile convergence policy negotiation, the system includes a policy negotiation triggering unit, and the policy negotiation triggering unit is configured to initiate a Gxb session establishment by the ePDG to the PCRF, where the PCRF is triggered by the establishment of the Gxb session, The PCRF initiates the establishment of the S9* session to the BPCF, and triggers the policy negotiation between the mobile network and the fixed network. The ePDG is connected to the PCRF, and the interface between the ePDG and the PCRF is a Gxb interface.

Here, the system further includes a judging unit, configured by the ePDG, and/or the 3GPP in the case that the UE accesses the 3GPP core network through the untrusted non-3GPP access network before the ePDG initiates the establishment of the Gxb session to the PCRF. The rights authorization charging server, and/or the 3GPP authentication authorization charging proxy server determine whether it is necessary to trigger policy negotiation between the mobile core network and the fixed network.

Here, the policy negotiation triggering unit is further configured to: in the case of the roaming scenario, where the PCRF specifically includes the vPCRF and the hPCRF, the ePDG initiates the establishment of the Gxb session to the vPCRF or the hPCRF, and the vPCRF or the hPCRF is triggered by the establishment of the Gxb session, The vPCRF or hPCRF initiates the establishment of an S9* session to the BPCF, triggering policy negotiation between the mobile network and the fixed network.

Here, the policy negotiation triggering unit is further configured to: in the case of the non-roaming scenario, where the PCRF specifically includes the hPCRF, the ePDG initiates the establishment of the Gxb session to the hPCRF, the hPCRF is triggered by the establishment of the Gxb session, and the hPCRF initiates the S9* to the BPCF. The establishment of the session triggers the policy negotiation between the mobile core network and the fixed network.

The above is only the preferred embodiment of the present invention and is not intended to limit the scope of the present invention.

Claims

Claim

A method for triggering a fixed network mobile convergence policy negotiation, the method comprising: an evolved packet data gateway (ePDG) initiating a Gxb session establishment to a policy and charging rule function (PCRF); the PCRF is subjected to Initiating the establishment of the Gxb session, the PCRF initiates the establishment of the S9* session to the Broadband Policy Control Architecture (BPCF), and triggers the policy negotiation between the mobile network and the fixed network;

The method according to claim 1, wherein before the ePDG initiates the establishment of the Gxb session to the PCRF, the method further comprises: the user equipment (UE) accessing through the untrusted non-3GPP access network The 3GPP core network determines whether it is necessary to trigger policy negotiation between the mobile core network and the fixed network by the ePDG, and/or the 3GPP authentication and authorization charging server, and/or the 3GPP authentication and authorization charging proxy server.

The method according to claim 1 or 2, wherein, in the roaming scenario, the PCRF includes a vPCRF and an hPCRF, the method further includes: ePDG initiating establishment of a Gxb session to the vPCRF or hPCRF, and the vPCRF or hPCRF is subjected to In the triggering of the establishment of the Gxb session, the vPCRF or the hPCRF initiates the establishment of the S9* session to the BPCF, triggering the policy negotiation between the mobile network and the fixed network.

The method according to claim 1 or 2, wherein, in the non-roaming scenario, the PCRF includes an hPCRF, the method further includes: ePDG initiating establishment of a Gxb session to the hPCRF, and the hPCRF is established by the Gxb session The triggering, the hPCRF initiates the establishment of the S9* session to the BPCF, triggering the policy negotiation between the mobile core network and the fixed network.

A system for triggering a fixed network mobile convergence policy negotiation, wherein the system includes a policy negotiation triggering unit, configured to initiate establishment of a Gxb session to the PCRF by the ePDG, where the PCRF is triggered by the establishment of the Gxb session. In the case, the S9* will be initiated by the PCRF to the BPCF. The establishment of words, triggering the policy negotiation between the mobile network and the fixed network;

The system according to claim 5, wherein the system further comprises a determining unit, configured to access the UE through an untrusted non-3GPP access network before the ePDG initiates the establishment of the Gxb session to the PCRF. In the case of the 3GPP core network, the ePDG, and/or the 3GPP authentication and authorization charging server, and/or the 3GPP authentication and authorization charging proxy server determine whether it is necessary to trigger policy negotiation between the mobile core network and the fixed network.

The system according to claim 5 or 6, wherein the policy negotiation triggering unit is further configured to: in the roaming scenario, when the PCRF includes a vPCRF and an hPCRF, the ePDG initiates a Gxb to the vPCRF or the hPCRF. The establishment of the session, the vPCRF or the hPCRF is triggered by the establishment of the Gxb session, and the vPCRF or the hPCRF initiates the establishment of the S9* session to the BPCF, triggering the policy negotiation between the mobile network and the fixed network.

The system according to claim 5 or 6, wherein the policy negotiation triggering unit is further configured to: in the non-roaming scenario, when the PCRF includes an hPCRF, the ePDG initiates the establishment of the Gxb session to the hPCRF. The hPCRF is triggered by the establishment of the Gxb session, and the hPCRF initiates the establishment of the S9* session to the BPCF, triggering the policy negotiation between the mobile core network and the fixed network.