WO2012119450A1

WO2012119450A1 - A mapping server in subscriber identifier & locator separation network and a implementing method thereof

Info

Publication number: WO2012119450A1
Application number: PCT/CN2011/080645
Authority: WO
Inventors: 沈炯; 王晓明
Original assignee: 中兴通讯股份有限公司
Priority date: 2011-03-09
Filing date: 2011-10-11
Publication date: 2012-09-13
Also published as: CN102685712B; CN102685712A

Abstract

Disclosed in the invention are a mapping server in the subscriber identifier & locator separation network and a implementing method thereof. The method comprises the following steps: An Authentication, Authorization and Accounting (AAA) server stores and maintains a mapping relationships of user ID, authentication ID(AID) and locator ID (RID); after receiving the mapping query request which is initiated by the access service router or the internet service node according to the user ID or the AID of the subscriber, the AAA server returns the RID corresponding to the user ID or the AID according to the user ID or the AID in the mapping query request. The invention utilizes the AAA server to realize the main function of the mapping server in the WCDMA-based subscriber identifier & locator separation network. The invention can make full use of the existing AAA server and the messages and flow between the Gateway GPRS Support Node (GGSN) and the AAA server, thus the invention has a preferable economy and feasibility.

Description

Mapping server in identity location separation network and implementation method thereof

Technical field

The present invention relates to the field of mobile communication technologies, and in particular, to a mapping server in an identity location separation network and an implementation method thereof. Background technique

In the field of mobile communications, AAA servers (Authentication, Authorization, Accounting, Authentication, Authorization, and Accounting) are widely used for authentication, authorization, and accounting for mobile device users. The main purpose of the AAA server is to manage which users can access the network server, which services are available to users with access rights, and how to account for users who are using network resources. Its specific functions mainly include:

1. Authenticate to verify whether the user can gain access rights;

2. Authorization, which services can be used by authorized users;

3. Accounting, recording the user's use of network resources.

RADIUS (Remote Authentication Dial In User Service) protocol is the interface standard of AAA server. RADIUS is a client/server protocol based on UDP (User Datagram Protocol). In IETF (Internet) Engineering Task Force, Internet Engineering Task Force) RFC (Request For Comments, Request for Comments) defined in 2865 and 2866.

The industry is currently proposing a variety of new mobile management technologies, the essence of which is user identity and location separation technology. There are solutions for the Identity and Identifier & Locator Separation Network (SILSN) in the prior art, such as host-based implementations such as HIP technology, and router-based implementations such as Location Identity Separation Protocol (LISP). Technology, each implementation has a variety of related technologies to support, in which the identity of the end user (indicated as AID in the text) does not change during the move, and the location identifier is additionally assigned according to the location of the terminal (represented as RID in the text) ) to achieve routing and forwarding of data packets.

Figure 1 shows a network architecture for identity and location separation (SILSN), the SILSN architecture The network topology is divided into an access network and a backbone network that do not overlap in the topology relationship. The access network is located at the edge of the backbone network and is responsible for accessing all terminals, and the backbone network is responsible for routing data packets between terminals accessed by the backbone network. Forward. In the network, the user ID of the AID as the terminal remains unchanged during the terminal movement; the RID is the location identifier assigned by the network to the terminal and is used in the backbone network. It should be noted that the identity and location identifiers may have different names in different SILSN architectures, but the essence is the same.

In the SILSN architecture, the terminal may be one or more of a mobile terminal, a fixed terminal, and a nomadic terminal, such as a mobile phone, a landline telephone, a computer, a server, and the like.

In the SILSN architecture, the access network is used to provide a Layer 2 (physical layer and link layer) access device for the terminal, and maintains a physical access link between the terminal and the ASR.

In the SILSN architecture, the main network elements of the backbone network include:

An Access Service Router (ASR) is an edge router of the backbone network. It is used to assign RIDs to terminals, maintain AID-RID mapping information of terminals, and register AID-RID bindings to ILRs. , and implement routing and forwarding of data packets. The terminal must access the backbone network through the ASR. The RID assigned by the ASR to the terminal contains the address information of the ASR, or the ASR, and the RID is used as the destination address of the data packet, and the data packet is routed to the ASR.

A common router (referred to as CR), a core router of the backbone network, is configured to perform routing according to the RID in the data packet, and forward the data packet with the RID as the destination address.

The Identity Location Register (ILR), which can be called a mapping server, etc., can be called a mapping plane when the identity location register is deployed in a distributed manner. The ILR is used to store and maintain the mapping information of the identity identifier AID and the location identifier RID of the home user terminal, and is also written as AID-RID mapping information to process registration, deregistration and query of the terminal location.

Optionally, the backbone network may further include:

An Internet Service Router (ISR) has interfaces with traditional IP networks, ASRs, and ILRs to implement interworking between identity and location separation networks and traditional IP networks.

It can be seen that, in order to implement normal forwarding of packets, the ASR needs to be the terminal when the terminal accesses. The RID is assigned, and the ILR is required to register the binding of the user's AID with the RID to update the bound RID of the terminal in the ILR. In an example, the ASR maintains the peer information of the terminal for each terminal (also referred to as connection information between the terminal and the communication peer, or communication relationship information between the terminal and the communication peer), where the terminal includes the terminal AID and its communication pair. The correspondence information of the terminal AID may further include AID-RID mapping information of the terminal.

The existing Wideband Code Division Multiple Access (WCDMA) system is an important system and method for implementing service access based on wireless WCDMA technology. The core network architecture of WCDMA is shown in Figure 2. It includes the Serving GPRS Support Node (SGSN) and the Gateway GPRS Support Node (GGSN). Network element such as home subscriber registration register, in this paper, 2G (second generation mobile communication technology) home location register (HLR) and home subscriber server in 3G (Home Subscriber Server, HSS for short) ) collectively referred to as the home subscriber subscription register, denoted by HLR/HSS. Since the existing TD-SCDMA (Time Division-Synchronous Code Division Multiple Access) core network uses the same architecture as WCDMA, the following WCDMA refers to WCDMA and TD-SCDMA.

The SGSN is a basic component network element of the GPRS network. It is a new network element device introduced in the Globle System for Mobile Communication (GSM) network to provide GPRS services. It mainly performs the functions of routing and forwarding, mobility management, session management, logical link management, authentication and encryption of packet data packets.

The GGSN provides routing and encapsulation of data packets between the WCDMA network and the external data network. It acts as a gateway and can be called an access gateway. It includes routing information of the PS attached user. The routing information is used to tunnel data packets. The current attachment point of the MS, ie, the SGSN.

The WCDMA network can use the AAA server to complete the authentication, authorization, and accounting for the GPRS Internet users. The Gi interface between the GGSN and the AAA server uses the RADIUS protocol. The interface messages include:

Access class: Access-Request (access request), Access-Accept (access acceptance response), Access-Reject (4 wife into giant color ^p- direction); Accounting class: Accounting-Request Start, Accounting-Response Start, Accounting-Request Stop, Accounting-Response Stop, Accounting Request Interim-Update, Accounting-Response Interim-Update.

In summary, the following technical problems exist in the prior art: How to implement a mapping server of an identity location separation network in an existing WCDMA or TD-SCDMA network, and implement a corresponding function of the mapping server. Summary of the invention

The technical problem to be solved by the present invention is to provide a mapping server in an identity location separation network and an implementation method thereof, and use the AAA server to implement the main functions of the mapping server in the identity location separation network.

To solve the above technical problem, the present invention provides an implementation method of an identity location separation network mapping server, where the method includes:

The Authentication, Authorization, and Accounting (AAA) server maintains and maintains the mapping relationship between the user identity, identity identifier (AID), and location identifier (RID) of the terminal;

After receiving the mapping query request initiated by the access service router or the interconnection service node (ISR) according to the user identifier or the AID of the terminal, the AAA server returns the corresponding RID according to the user identifier or the AID in the mapping query request.

Preferably, the saving and maintaining the mapping relationship by the AAA server includes:

The AAA server pre-stores the correspondence between the user identifier of the terminal and the AID; after the access service router accessed by the terminal allocates the RID to the terminal, the RID allocated for the terminal is sent to the AAA server;

After receiving the RID, the AAA server saves or updates the user identifier of the terminal,

The mapping between AID and RID.

Preferably, the user identity comprises an International Mobile Subscriber Identity (IMSI) or an IMSI and an Access Point Name (APN). Preferably, the method is applied to a Wideband Code Division Multiple Access (WCDMA) or Time Division Synchronous Code Division Multiple Access (TD-SCDMA) network, and the access routing server is an access gateway (GGSN);

After receiving the activation request from the terminal, the GGSN sends the RID that is allocated to the terminal to the AAA server in the access request, and sends the access request to the AAA server;

Or, after receiving the access response of the AAA server, sending the RID allocated to the terminal to the AAA server.

Preferably, the access request sent by the GGSN to the AAA server further carries the user identifier and the authentication information of the terminal;

After receiving the access request, the AAA server authenticates the terminal according to the authentication information, and queries the corresponding AID according to the user identifier. If the terminal passes the authentication and queries for a valid AID, And sending, by the access gateway, an access response to the terminal, and carrying the AID as an IP address allocated to the terminal in the access response; and if the terminal fails to pass the verification, The GGSN returns an access reject message.

Preferably, the GGSN returns the AID as an IP address assigned to the terminal to the terminal according to the received AID included in the access response, and locally saves the AID and RID of the terminal locally. Binding relationship.

Preferably, the saving or updating means: the AAA server adds the RID to the mapping relationship according to the received RID, or updates the RID in the mapping relationship.

Preferably, after receiving the access request, the AAA server sends an access to the terminal through the access gateway if the terminal passes the verification but fails to query the valid AID according to the user identifier. In response, the access response includes a specific AID value;

The GGSN allocates a dynamic IP address to the terminal according to a specific AID value included in the access response, or rejects a user activation request of the terminal.

Preferably, the updating of the mapping relationship further includes:

After receiving the deactivation message of the terminal, the access gateway sends a deactivation message to the AAA server, and carries the user identifier of the terminal;

After receiving the deactivation message, the AAA server deletes according to the user identifier of the terminal. And deleting the RID in the mapping relationship of the terminal, and sending a deactivation response to the access gateway. Preferably, when the user identifier of the terminal corresponds to multiple RIDs, the access gateway carries the specified RID to be deleted in the deactivation message sent to the AAA server.

Preferably, the updating of the mapping relationship further includes:

After receiving the context change request or the handover request of the terminal, the access gateway sends the

The AAA server sends an access request, where the access request carries the user identifier of the terminal and a new RID allocated to the terminal;

After receiving the access request, the AAA server updates the RID in the saved mapping relationship of the terminal according to the new RID.

The present invention also provides an implementation method of an identity location separation network mapping server, where the method includes:

The AAA server saves the first identifier of the terminal, and maintains a mapping relationship between the first identifier and the second identifier of the terminal.

After receiving the mapping query request initiated by the GGSN or the ISR according to the first identifier of the terminal, the AAA server returns a corresponding second identifier according to the first identifier in the mapping query request.

Preferably, the method is applied to a WCDMA or TD-SCDMA network, and the second identifier includes an RID;

After the GGSN accessed by the terminal is the RID allocated by the terminal, the RID allocated to the terminal is sent to the AAA server;

After receiving the RID, the AAA server saves or updates the first identifier of the terminal and

The mapping relationship of RIDs.

Preferably, the first identifier includes a user identifier, and/or an AID;

The user identifier includes an IMSI, or includes an IMSI and an APN.

The present invention also provides a mapping server for an identity location separation network, the mapping server comprising:

a mapping relationship storage module, configured to: save and maintain a mapping relationship between a user identifier, an identity (AID), and a location identifier (RID) of the terminal; The query request processing module is configured to: after receiving the mapping query request initiated by the GGSN or the ISR in the identity location separation network according to the user identifier or the AID of the terminal, return the corresponding user identifier or AID according to the mapping query request. RID.

Preferably, the mapping relationship storage module is further configured to: save and maintain the mapping relationship as follows:

Pre-storing the correspondence between the user identifier of the terminal and the AID;

After receiving the RID allocated by the access service router accessed by the terminal for the terminal, the mapping between the user identifier, the AID, and the RID of the terminal is saved or updated.

Preferably, the mapping server is applied to an AAA server in a WCDMA or TD-SCDMA network,

The mapping relationship storage module is configured to: when receiving an access request sent by the GGSN in the WCDMA or TD-SCDMA network, authenticating the terminal according to the user identifier and the authentication information of the terminal included in the access request, At the same time, the corresponding AID is queried according to the user identifier. If the terminal passes the authentication and the valid AID is queried, the GGSN sends an access response to the terminal, and carries the The AID is used as an IP address assigned to the terminal; if the terminal fails the verification, an access reject message is returned to the GGSN.

Preferably, the mapping relationship storage module is further configured to: after receiving the access request, if the terminal passes the verification, but fails to query the valid AID according to the user identifier, the access gateway is used to The terminal sends an access response, where the access response includes a specific AID value, and the GGSN is notified to allocate a dynamic IP address to the terminal, or reject the user activation request of the terminal.

Preferably, the mapping relationship storage module is further configured to: after receiving the deactivation message sent by the GGSN, delete the saved mapping relationship of the terminal according to the user identifier of the terminal carried in the deactivation message The RID in the middle, and sends a deactivation response to the GGSN.

Preferably, the mapping relationship storage module is further configured to: delete the specified to be deleted in the saved mapping relationship of the terminal according to the specified RID to be deleted that is carried in the deactivation message sent by the GGSN RID; and / or

After receiving the access request sent by the new access gateway to which the terminal is handed over, according to the access request The user identifier of the terminal and the new RID allocated to the terminal are updated, and the RID in the mapping relationship of the saved terminal is updated.

The embodiment of the invention utilizes the AAA server to implement the main functions of the mapping server in the WCDMA-based identity location separation network, and can fully utilize the existing AAA server and the message and process between the GGSN and the AAA server, thereby having better economy and feasibility. Sex. BRIEF abstract

The drawings are intended to provide a further understanding of the invention, and are intended to be illustrative of the invention. In the drawing:

1 is an architectural diagram of a packet domain of an existing WCDMA system;

2 is a schematic diagram of a SILSN network architecture according to an embodiment of the present invention;

3 is a schematic diagram of another SILSN network architecture according to an embodiment of the present invention;

4 is a schematic diagram of a process for a GGSN to obtain a user AID and a registered RID from an AAA server according to an embodiment of the present invention;

5 is a schematic flowchart of deleting an RID of a user by an AAA server when a user is deactivated according to an embodiment of the present invention;

6 is a schematic flowchart of a GGSN or an ISR initiating a mapping query to an AAA server according to an embodiment of the present invention;

FIG. 7 is a schematic flowchart of an AAA server updating a terminal mapping relationship in a terminal handover process according to an embodiment of the present invention. Preferred embodiment of the invention

2 and FIG. 3 show an architecture of a WCDMA core network having a SILSN architecture, and the above SILSN architecture is applied to a WCDMA system. It should be noted that the SILSN architecture is used only to specifically describe an embodiment of the present invention, and the flow of the present invention is also Can be widely applied to other identity location separation architecture. Referring to FIG. 2 and FIG. 3, the GGSN is used as the function of the ASR, and is responsible for forwarding the message. There is an interface S1 with the ILR. The interface S1 is used to query the ILR for the RID of the communication peer, and register, update, and register the AID of the terminal. RID mapping relationship, etc.

The ISR in Figure 3 is a new network element introduced in the WCDMA core network for interworking between the identity and location separation network and the traditional IP network. The interface S1 is used to query the RID of the communication peer.

There is a signaling interface S2 and a data interface D2 between the GGSN and the ISR. The signaling interface S2 is used to notify the ISR of the AID-RID binding change when the GGSN is switched, and can also be used for the GGSN to notify the ISR to register and delete the AID-RID binding. set. The data interface D2 between the GGSN and the ISR is used by the GGSN to forward the data sent by the MS to the external network and the ISR forwards the data addressed to the MS to the GGSN. The data interface D3 between the ISR and the external network is outside the scope of this patent.

The main object of the present invention is to provide an implementation method of an ILR based on an AAA server as an identity and location separation network. It should be noted that, since the TD-SCDMA core network architecture is consistent with the WCDMA core network architecture, the inventive scheme is equally applicable in the TD-SCDMA core network. The following WCDMA refers to WCDMA and TD-SCDMA.

Further, the present invention is not limited to the above architecture. Since the radio access network may employ other structures, in other architectures the target RNC may be other radio side network elements.

In combination with the architecture of the WCDMA core network with the SILSN architecture shown in FIG. 3, the present invention provides a method for using AAA as an identity location separation network ILR, namely: using an AAA server as an ILR in a WCDMA network, implementing ILR functions, mainly Responsible for maintaining the binding between the user ID and the AID-RID mapping relationship, providing the interface S1, for querying the AID-RID binding, and registering, updating, and deregistering the AID-RID mapping relationship of the terminal. The user identifier may include an IMSI (International Mobile Subscriber Identification Number), and may also include an IMSI and an APN (Access Point Name).

Specifically, when the AAA server is used in the WCDMA network, one user is uniquely identified by using IMSI and APN. Unless otherwise specified, the following user identifier refers to IMSI plus APN.

The method for implementing the identity location separation network mapping server provided by the present invention mainly includes: the AAA server saves the first identifier of the terminal, and maintains the first identifier and the second identifier of the terminal. Mapping relations;

Further, the method is applied to a WCDMA or TD-SCDMA network, and the second identifier includes an RID;

After receiving the RID, the AAA server saves or updates the mapping relationship between the first identifier of the terminal and the RID.

Further, the first identifier includes a user identifier, and/or an AID;

The user identifier includes an IMSI, or includes an IMSI and an APN.

In addition, the present invention also provides an implementation method of an identity location separation network mapping server, which mainly includes:

The AAA server saves and maintains the user ID, identity (AID) and location identifier of the terminal.

The mapping relationship of (RID);

After receiving the mapping query request initiated by the access service router or the interconnection service node, the corresponding RID is returned according to the user identifier or AID of the terminal in the mapping query request.

The user identifier includes an IMSI and an APN.

Further, the correspondence between the terminal user identifier and the AID is saved on the AAA server.

(The AAA server may only store the corresponding relationship of the local terminal, and may also store the correspondence between all the terminals); after the access service router that the terminal accesses allocates the RID to the terminal, initiates registration with the AAA server, and carries the user identifier of the terminal and The RID;

The AAA server searches for the corresponding relationship according to the user identifier of the terminal, and saves the mapping relationship between the user identifier, the AID, and the RID of the terminal (for example, adding RID information to the corresponding relationship).

Optionally, the access gateway may also not carry the access request sent to the AAA server. With the RID information assigned to the user; but after receiving the access response of the AAA server, and the user authentication is successful, a new message is used to send the RID information allocated for the terminal to the AAA server.

The saving or updating means: adding the RID information to the mapping relationship according to the received RID information, or updating the RID information in the mapping relationship.

Further, when the user identifier can be bound to multiple RIDs, the access gateway may include multiple RIDs in the RID information of the terminal sent to the AAA server.

Further, in order to reuse the existing AAA server message, the access request and response use the existing Access-Request, Access-Accept/Access-Reject message.

Further, the updating of the mapping relationship further includes:

After receiving the deactivation message, the AAA server deletes the RID information in the mapping relationship of the terminal according to the user identifier of the terminal, and sends a deactivation message response to the access gateway.

Further, if a user identifier can be bound to multiple RIDs, the deactivation message sent by the access gateway to the AAA server also carries the specified RID, which is used to delete the specified RID.

Further, in order to reuse the existing AAA server message, the activation message and the response use the Accounting-Request Stop, Accounting-Response Sto message of the existing AAA server.

Further, in order to match the Accounting-Request Stop, Accounting-Response Sto message, after the access gateway sends an activation message to the AAA server, and receives an activation message response, the access gateway goes to the AAA month. The server sends an Accounting-Request Start, and the AAA server returns an Accounting- Response Start.

In addition, if the user is allowed to seamlessly switch the access gateway, the new access gateway sends an access request to the AAA server after receiving the PDP context change request or the handover request, where the access request carries the user identifier of the user, and a new RID assigned to the user; After receiving the access request, the AAA server replaces the RID bound to the user identifier of the user with a new RID, and sends an access request response to the new access gateway, carrying the identity identifier AID of the user.

Further, if a user identifier can be bound to multiple RIDs, the access request sent by the new access gateway to the AAA server further carries the original RID, and after receiving the access request, the AAA server will The original RID bound to the user identifier is replaced with a new RID.

The access gateway, when forwarding the data packet of the user, if the ISR does not have the binding relationship between the identity identifier AID of the communication peer and the location identifier RID, the ISR queries the AAA server, and sends a RID query request to the AAA server to carry the user identity. Identifies the AID.

After receiving the RID query request of the access gateway, the AAA server queries the RID bound to the identity identifier, returns the RID query response of the access gateway, and carries the RID.

Further, if the identity AID is bound to multiple RIDs, the AAA server returns multiple RIDs.

In order to facilitate the description of the present invention, the implementation of the technical solution of the present invention will be further described in detail below with reference to the accompanying drawings and specific embodiments. It should be noted that, in the case of no conflict, the features in the embodiments and the embodiments in the present application may be arbitrarily combined with each other.

Embodiment 1

This embodiment is based on the core network architecture of the identity location separation described in FIG. 3, and describes a process in which the GGSN obtains the user identity identifier AID and the registered user location identifier RID from the AAA server when the user terminal sends a PDP context activation request.

As shown in FIG. 4, the process of user registration in this embodiment mainly includes the following steps:

Step 401: The terminal sends a PDP context activation request to the SGSN, which is consistent with the existing WCDMA process.

Step 402: The SGSN sends a Create PDP Context Request message to the GGSN associated with the terminal, which is consistent with the existing WCDMA process.

Step 403: The GGSN sends an access request to the AAA server, and uses an existing Access-Request message between the GGSN and the AAA server, and the existing WCDMA process. To. The Called-Station-Id field is filled in with the APN value, the 3GPP-IMSI field of the 3GPP Vendor-Specific field is filled in the IMSI value of the user terminal, and the NAS-IP-Address field is filled in the address of the GGSN for forwarding the datagram to the user terminal (location) Identifies RID).

Step 404: The AAA server queries the corresponding Framed-IP-Address (AID) according to the IMSI and the APN. If there is a valid mapped AID, the AAA server records the IMSI, the APN, and the Framed-IP-Address ( The mapping relationship between the AID) and the RID carried in the NAS-IP-Address field in step 403. The AAA server sends an existing Access-Accept message to the GGSN, which is consistent with the existing WCDMA process, in which the Framed-IP-Address field is filled with the AID value.

If the AAA server does not find a valid mapped AID according to the IMSI and the APN (ie, no user identity is bound to the AID), the AAA server sends an existing Access-Accept message to the GGSN, which is consistent with the existing WCDMA process, where The Framed-IP-Address (AID) field is filled with a specific agreed AID value, such as "0x00000000".

If the AAA server is responsible for authenticating the user and the authentication fails, the AAA server sends an existing Access-Reject message to the GGSN, which is consistent with the existing WCDMA process.

Step 405: If the GGSN receives the Access-Accept message, and the Framed-IP-Address (AID) field is a valid value, the GGSN caches the mapping between the user AID and the RID, and sends the existing Accounting-Request Start to the AAA server. The fee starts to request) the message, consistent with the existing WCDMA process.

Step 406: The AAA server sends an existing Accounting-Response Start to the GGSN.

The (Billing Request Response) response message is consistent with the existing WCDMA process.

Step 407: The GGSN sends a Create PDP Context Request Reply to the SGSN, and sends the valid AID of the user obtained in Step 404 as the IP address assigned to the terminal to the SGSN, which is consistent with the existing WCDMA process.

If the GGSN receives an invalid AID value in step 404, the GGSN may use the existing dynamic IP address allocation process to allocate a dynamic IP address and send a PDP context request response to the SGSN, which is consistent with the existing WCDMA process. When the packet of the terminal is subsequently processed, it is processed as a non-identity and location separated network terminal; the PDP context request may also be sent to the SGSN. Failure response, rejecting the terminal to activate the PDP context.

If, in step 404, the GGSN receives an Access-Reject message, the GGSN rejects the terminal to activate the PDP context, consistent with the existing WCDMA procedure.

Step 408: The SGSN sends a PDP context activation response to the terminal, which is consistent with the existing WCDMA process.

If the AAA server is not required to be charged, and the AAA server can handle the Accounting-Request Start and the Accounting-Request Sto, the p GGSN does not send the Accounting-Request Start to the AAA server, but only the Accounting-Request Stop. The AID-RID mapping is deleted, and steps 405 and 406 can be omitted.

Embodiment 2

This embodiment is based on the core network architecture of the identity location separation described in FIG. 3, and describes the process of deleting the user AID and RID mapping when the user terminal sends a PDP context deactivation request.

As shown in Figure 5, the process mainly includes the following steps:

Step 501: The terminal sends a PDP context deactivation request to the SGSN, which is consistent with the existing WCDMA process.

Step 502: The SGSN sends a delete PDP context request to the GGSN, which is consistent with the existing WCDMA process.

Step 503: The GGSN sends a stop charging request to the AAA server, and uses an existing Accounting-Request Stop message, where the Called-Station-Id field is filled with the APN value, and the 3GPP-IMSI field of the 3GPP Vendor-Specific Fill in the IMSI value and fill in the RID in the NAS-IP-Address field. The process is consistent with existing WCDMA processes.

Step 504: After receiving the stop charging request, the AAA server clears the RID corresponding to the IMSI and the APN.

Step 505: The AAA server sends a stop charging response to the GGSN, using the existing one.

The Accounting-Response Stop message, the process is consistent with the existing WCDMA process. Step 506: The GGSN sends a delete PDP context response to the SGSN, and the process is consistent with the existing WCDMA process.

Step 507: The SGSN sends a PDP context deactivation response to the terminal, and the process is consistent with the existing WCDMA process.

In step 503 of this embodiment, the GGSN is also carried in the Accounting-Request Sto message.

The Framed-IP-Address field is filled in with the AID value; in step 504, the AAA server clears the RID of the AID value map.

In step 503 of this embodiment, the GGSN may not carry the NAS-IP-Address (RID) field in the Accounting-Request Sto message; in step 504, the AAA server clears all RIDs mapped by the IMSI and the APN.

Embodiment 3

This embodiment describes the process in which the GGSN or ISR sends an AID-RID mapping query and the AAA server returns the AID-RID mapping. As shown in Figure 6, the process mainly includes the following steps:

Step 601: The GGSN or the ISR sends an AID-RID mapping query request to the AAA server, and carries the Framed-IP-Address field, where the value is the AID value to be queried.

Step 602: The AAA server queries the mapped RID according to the AID in step 601.

Step 603: The AAA server sends an AID-RID mapping query response to the GGSN, and carries a NAS-IP-Address field, and the value is the RID obtained by querying in step 602.

In step 602, if the AAA server finds that an AID corresponds to multiple RIDs, then in step 603, the extended field is used to return multiple RIDs, or the multiple AID-RID mapping query responses are returned.

Embodiment 4

This embodiment describes a process in which a terminal switches a GGSN, a new GGSN after handover, or an original GGSN before handover to update an AID-RID mapping to an AAA server. As shown in Figure 7, the process mainly includes Next steps:

Step 701: The new GGSN that the terminal switches to sends an Access-Request message to the AAA server, which is consistent with the existing Access-Request message between the GGSN and the AAA server. The Called-Station-Id field is filled in the APN value, the 3GPP-IMSI field of the 3GPP Vendor-Specific is filled in the IMSI value of the user terminal, and the NAS-IP-Address field is filled in the address of the GGSN for forwarding the datagram to the user terminal (location) Identifies RID).

Step 702: Step 404 is the same as Embodiment 1.

Step 703: Step 405 is the same as Embodiment 1.

Step 704: The same as step 406 of the first embodiment.

In step 701, the Access-Request message carries the Framed-IP-Address field, fills in the AID value of the terminal, and the AAA server updates the RID according to the AID instead of passing through the IMSI and the APN.

If the IMSI and the APN can correspond to multiple RIDs, in the step 701, the Access-Request message carries the Framed-IP-Address field, and the original RID value of the terminal is filled in. The AAA server replaces the original RID value in the mapping corresponding to the IMSI and the APN as the new RID value.

If the AAA server is not required to be charged, and the AAA server can handle the Accounting-Request Start and the Accounting-Request Sto, the p GGSN does not send the Accounting-Request Start to the AAA server, but only the Accounting-Request Stop. The AID-RID mapping is deleted, and steps 703 and 704 can be omitted.

Updating the AID-RID mapping relationship can also be done by the original GGSN before the terminal switches.

In addition, the embodiment of the present invention further provides a mapping server in an identity location separation network, where the mapping server mainly includes:

a mapping relationship storage module, configured to save and maintain a mapping relationship between a user identifier, an identity (AID), and a location identifier (RID) of the terminal;

a query request processing module, configured to receive a mapping query request initiated by the GGSN or the ISR in the identity location separation network according to the user identifier or the AID of the terminal, according to the mapping query request The user ID or AID returns the corresponding RID.

Further, the mapping relationship storage module is configured to save and maintain the mapping relationship in the following manner:

Further, the mapping server is applied to an AAA server in a WCDMA or TD-SCDMA network,

The mapping relationship storage module is configured to: when receiving an access request sent by the GGSN in the WCDMA or the TD-SCDMA network, perform authentication on the terminal according to the user identifier and the authentication information of the terminal included in the access request, At the same time, the corresponding AID is queried according to the user identifier. If the terminal passes the authentication and the valid AID is queried, the GGSN sends an access response to the terminal, and carries the The AID is used as an IP address assigned to the terminal; if the terminal fails the verification, an access reject message is returned to the GGSN.

Further, the mapping relationship storage module is further configured to: after receiving the access request, if the terminal passes the verification, but fails to query the valid AID according to the user identifier, the access gateway is used to The terminal sends an access response, where the access response includes a specific AID value, and the GGSN is notified to allocate a dynamic IP address to the terminal, or reject the user activation request of the terminal.

Further, the mapping relationship storage module is further configured to: after receiving the deactivation message sent by the GGSN, delete the saved mapping relationship of the terminal according to the user identifier of the terminal carried in the deactivation message The RID in the middle, and sends a deactivation response to the GGSN.

Further, the mapping relationship storage module is further configured to: delete the specified to be deleted in the saved mapping relationship of the terminal according to the specified RID to be deleted that is carried in the deactivation message sent by the GGSN RID; and / or

After receiving the access request sent by the new access gateway to which the terminal is handed over, according to the user identifier of the terminal included in the access request and the new RID allocated to the terminal, the saved terminal is The RID in the mapping relationship is updated. It should be noted that, since the TD-SCDMA core network and the WCDMA core network use the same architecture, the technical solution of the present invention can also be applied to the TD-SCDMA and similar architecture core networks.

The above is only a preferred embodiment of the present invention, and is not intended to limit the present invention. The present invention may be embodied in various other embodiments without departing from the spirit and scope of the invention. Various changes and modifications may be made to the invention, and such changes and modifications are intended to be included within the scope of the appended claims.

Obviously, those skilled in the art should understand that the above modules or steps of the present invention can be implemented by a general-purpose computing device, which can be concentrated on a single computing device or distributed over a network composed of multiple computing devices. Alternatively, they may be implemented by program code executable by the computing device, such that they may be stored in the storage device by the computing device and, in some cases, may be different from the order herein. The steps shown or described are performed, or they are separately fabricated into individual integrated circuit modules, or a plurality of modules or steps are fabricated as a single integrated circuit module. Thus, the invention is not limited to any particular combination of hardware and software.

INDUSTRIAL APPLICABILITY The embodiment of the present invention utilizes an AAA server to implement the main functions of a mapping server in a WCDMA-based identity location separation network, and can fully utilize existing AAA servers and messages and processes between the GGSN and the AAA server, thereby having a better economy. Sex and feasibility.

Claims

Claim

A method for implementing an identity location separation network mapping server, the method comprising: a verification, authorization, and accounting (AAA) server storing and maintaining a mapping of a user identity, an identity (AID), and a location identifier (RID) of a terminal Relationship

Receiving an access service router or an Interworking Service Node (ISR) based on the user ID of the terminal or

After the AID initiates the mapping query request, the AAA server returns the corresponding RID according to the user identifier or the AID in the mapping query request.

2. The method of claim 1, wherein the saving and maintaining the mapping relationship by the AAA server comprises:

After receiving the RID, the AAA server saves or updates the mapping relationship between the user identifier, the AID, and the RID of the terminal.

3. The method according to claim 1 or 2, wherein

The subscriber identity includes an International Mobile Subscriber Identity (IMSI) or includes an IMSI and an Access Point Name (APN).

4. The method according to claim 2, wherein the method is applied to a Wideband Code Division Multiple Access (WCDMA) or Time Division Synchronous Code Division Multiple Access (TD-SCDMA) network, and the access routing server is an access gateway. (GGSN) ;

5. The method of claim 4, wherein

The access request sent by the GGSN to the AAA server further carries the terminal User identification and authentication information;

6. The method of claim 5, wherein

The GGSN returns the AID as an IP address assigned to the terminal to the terminal according to the AID received in the access response, and locally stores the binding of the AID and the RID of the terminal locally. relationship.

7. The method of claim 2, 4 or 5, wherein

The saving or updating means: the AAA server adds the RID to the mapping relationship according to the received RID, or updates the RID in the mapping relationship.

8. The method of claim 5, wherein

After the AAA server receives the access request, if the terminal passes the verification but fails to query the valid AID according to the user identifier, the access gateway sends an access response to the terminal by using the access gateway. The access response includes a specific AID value;

9. The method of claim 7, wherein

The updating of the mapping relationship further includes:

After receiving the deactivation message, the AAA server deletes the saved RID in the mapping relationship of the terminal according to the user identifier of the terminal, and sends a deactivation response to the access gateway.

10. The method of claim 9, wherein

When the user identifier of the terminal corresponds to multiple RIDs, the access gateway is serving the AAA The deactivated message sent by the device carries the designated RID to be deleted.

11. The method of claim 7, wherein

The updating of the mapping relationship further includes:

After receiving the context change request or the handover request of the terminal, the access gateway sends an access request to the AAA server, where the access request carries the user identifier of the terminal and is allocated for the terminal. New RID;

The method for implementing the identity location separation network mapping server, the method includes: the AAA server saves the first identifier of the terminal, and maintains a mapping relationship between the first identifier and the second identifier of the terminal;

The method of claim 12, wherein the method is applied to a WCDMA or TD-SCDMA network, and the second identifier comprises an RID;

14. The method of claim 12 or 13, wherein

The first identifier includes a user identifier, and/or an AID;

The user identifier includes an IMSI, or includes an IMSI and an APN.

A mapping server for an identity location separation network, the mapping server includes: a mapping relationship storage module, configured to: save and maintain a mapping relationship between a user identifier, an identity (AID), and a location identifier (RID) of the terminal;

The query request processing module is configured to: after receiving the mapping query request initiated by the GGSN or the ISR in the identity location separation network according to the user identifier or the AID of the terminal, according to the mapping query The user ID or AID in the request returns the corresponding RID.

16. The mapping server according to claim 15, wherein

The mapping relationship storage module is further configured to: save and maintain the mapping relationship as follows:

The mapping server according to claim 15 or 16, wherein the mapping server is applied to an AAA server in a WCDMA or TD-SCDMA network,

The mapping relationship storage module is configured to: receive in a WCDMA or TD-SCDMA network

When the access request is sent by the GGSN, the terminal is authenticated according to the user identifier and the authentication information of the terminal included in the access request, and the corresponding AID is queried according to the user identifier, if the terminal passes the authentication, and If the valid AID is queried, the GGSN sends an access response to the terminal, and the AID is carried in the access response as an IP address assigned to the terminal; if the terminal fails to pass the verification, Then, an access reject message is returned to the GGSN.

18. The mapping server according to claim 17, wherein

The mapping relationship storage module is further configured to: after receiving the access request, if the terminal passes the verification, but fails to query the valid AID according to the user identifier, the access gateway is used to the terminal And sending an access response, where the access response includes a specific AID value, and the GGSN is notified to allocate a dynamic IP address to the terminal, or reject a user activation request of the terminal.

19. The mapping server according to claim 17, wherein

The mapping relationship storage module is further configured to: after receiving the deactivation message sent by the GGSN, delete the saved RID in the mapping relationship of the terminal according to the user identifier of the terminal carried in the deactivation message And sending a deactivation response to the GGSN.

20. The mapping server according to claim 18, wherein

The mapping relationship storage module is further configured to: delete the specified RID to be deleted in the saved mapping relationship of the terminal according to the specified RID to be deleted that is carried in the deactivation message sent by the GGSN; and / or After receiving the access request sent by the new access gateway to which the terminal is handed over, according to the user identifier of the terminal included in the access request and the new RID allocated to the terminal, the saved terminal is The RID in the mapping relationship is updated.