WO2013017098A1 - 将用户设备接入演进的分组核心网络的方法、设备和系统 - Google Patents

将用户设备接入演进的分组核心网络的方法、设备和系统 Download PDF

Info

Publication number
WO2013017098A1
WO2013017098A1 PCT/CN2012/079633 CN2012079633W WO2013017098A1 WO 2013017098 A1 WO2013017098 A1 WO 2013017098A1 CN 2012079633 W CN2012079633 W CN 2012079633W WO 2013017098 A1 WO2013017098 A1 WO 2013017098A1
Authority
WO
WIPO (PCT)
Prior art keywords
message
subscription data
mac address
epc
wlan
Prior art date
Application number
PCT/CN2012/079633
Other languages
English (en)
French (fr)
Inventor
刘海
朱文若
靳维生
Original Assignee
华为技术有限公司
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 华为技术有限公司 filed Critical 华为技术有限公司
Publication of WO2013017098A1 publication Critical patent/WO2013017098A1/zh
Priority to US14/167,737 priority Critical patent/US9503881B2/en

Links

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04WWIRELESS COMMUNICATION NETWORKS
    • H04W8/00Network data management
    • H04W8/18Processing of user or subscriber data, e.g. subscribed services, user preferences or user profiles; Transfer of user or subscriber data
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04WWIRELESS COMMUNICATION NETWORKS
    • H04W8/00Network data management
    • H04W8/02Processing of mobility data, e.g. registration information at HLR [Home Location Register] or VLR [Visitor Location Register]; Transfer of mobility data, e.g. between HLR, VLR or external networks
    • H04W8/04Registration at HLR or HSS [Home Subscriber Server]
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04WWIRELESS COMMUNICATION NETWORKS
    • H04W12/00Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/06Authentication
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04WWIRELESS COMMUNICATION NETWORKS
    • H04W84/00Network topologies
    • H04W84/02Hierarchically pre-organised networks, e.g. paging networks, cellular networks, WLAN [Wireless Local Area Network] or WLL [Wireless Local Loop]
    • H04W84/10Small scale networks; Flat hierarchical networks
    • H04W84/12WLAN [Wireless Local Area Networks]
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04WWIRELESS COMMUNICATION NETWORKS
    • H04W88/00Devices specially adapted for wireless communication networks, e.g. terminals, base stations or access point devices
    • H04W88/16Gateway arrangements
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04WWIRELESS COMMUNICATION NETWORKS
    • H04W92/00Interfaces specially adapted for wireless communication networks
    • H04W92/02Inter-networking arrangements
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L61/00Network arrangements, protocols or services for addressing or naming
    • H04L61/50Address allocation
    • H04L61/5007Internet protocol [IP] addresses
    • H04L61/5014Internet protocol [IP] addresses using dynamic host configuration protocol [DHCP] or bootstrap protocol [BOOTP]
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00Network architectures or network communication protocols for network security
    • H04L63/08Network architectures or network communication protocols for network security for authentication of entities
    • H04L63/0876Network architectures or network communication protocols for network security for authentication of entities based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00Network architectures or network communication protocols for network security
    • H04L63/08Network architectures or network communication protocols for network security for authentication of entities
    • H04L63/0892Network architectures or network communication protocols for network security for authentication of entities by using authentication-authorization-accounting [AAA] servers or protocols
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04WWIRELESS COMMUNICATION NETWORKS
    • H04W12/00Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/60Context-dependent security
    • H04W12/69Identity-dependent
    • H04W12/71Hardware identity

Definitions

  • the present invention relates to the field of wireless packet or network (EPC) convergence technology, and particularly relates to user equipment (User Equipment, UE) accessing EPC.
  • EPC wireless packet or network
  • UE user equipment
  • WLAN authentication initiating device authent i cator
  • AAA authentication authorization charging
  • the WLAN deployed by the enterprise or deployed by the operator generally includes some access points (APs) and one or more access point controllers (ACs).
  • the AP is used to absorb the traffic of the user, and the AC is used to manage the AP.
  • the data traffic of the AP can be aggregated in the AC or directly into the switching network without AC processing.
  • the AC devices produced by most equipment manufacturers are only used for AP management, user authentication, and time-based accounting. User data traffic aggregation is not supported.
  • the existing technology for accessing the EPC by the UE through the WLAN requires that the WLAN authenticator function, the dynamic host configuration protocol (DHCP) server function, and the EPC access function be integrated into one physical entity of the WLAN.
  • the data flow of the UE passes through the AC, and is aggregated on the AC and sent to the Public Data Network (PDN) gateway (PDN Gateway, PGW).
  • PDN gateway Public Data Network Gateway
  • a device with an authenticator function in the WLAN of the current network may have DHCP.
  • the server function does not have the aggregation function and does not have the EPC access function.
  • a method for accessing an EPC to a UE, an EPC access gateway, a WLAN authentication initiation device, an AAA server/proxy, and a system for accessing the EPC to the UE are provided to reduce the UE in the WLAN.
  • a method for connecting a UE to an EPC includes:
  • the EPC access gateway that connects the WLAN and the EPC receives the DHCP request from the UE.
  • the EPC access gateway obtains the subscription data of the UE according to the UE MAC address in the DHCP request, and performs EPC connection on the UE according to the obtained subscription data. Processing
  • the obtaining the subscription data of the UE according to the UE MAC address includes: the UE Medium Access Control (MAC) address, and the UE MAC address and the UE subscription data saved by the network device in the access authentication process. Obtaining the subscription data of the above UE.
  • MAC Medium Access Control
  • An EPC access gateway is provided to connect to the WLAN and the EPC, where the EPC access gateway includes: a transceiver module, configured to receive a DHCP request from the UE, where the request includes a MAC address of the UE;
  • a processing module configured to acquire the subscription data of the UE according to the UE MAC address in the DHCP request received by the transceiver module, and the UE MAC address and the UE subscription data saved by the network device in the access authentication process, and obtain the subscription data of the UE according to the acquisition
  • the subscription data is subjected to EPC access processing for the UE.
  • An AAA server/proxy device includes:
  • a transceiver module configured to receive, from the WLAN authenticator during the UE access authentication process a message of the UE MAC address and a message including the UE subscription data from the Home Subscriber Server (HSS), and receiving a request message including the UE MAC address from the EPC access gateway, and sending a processing module to the EPC access gateway. a feedback message generated according to the above request message;
  • a processing module configured to obtain the UE MAC address from a message received by the transceiver module from the WLAN authenticator, and obtain the UE subscription data from a message received by the transceiver module from the HSS, and save the UE MAC address and the foregoing
  • the UE subscribes to the data, and generates a feedback message including the UE subscription data according to the MAC address of the UE and the corresponding saved information in the request message from the access gateway received by the transceiver module.
  • a WLAN authentication initiator device including:
  • transceiver module configured to receive, by the AAA server/proxy, a message including the subscription data of the UE, and send the message generated by the processing module to the EPC access gateway;
  • a processing module configured to acquire the subscription data of the UE from the message received by the transceiver module, and correspondingly save the subscription data of the acquired UE and the MAC address of the UE, and generate a message including the MAC address of the UE and the UE Signing data for the message.
  • a system for providing UE access to an EPC includes: a WLAN authenticator, an AAA server/proxy, and the EPC access gateway mentioned above.
  • the EPC access gateway is set in the network, and the gateway performs the DHCP processing and the EPC access processing of the UE, so that the device with the authenticator function in the WLAN can be upgraded, and the WLAN can be implemented.
  • the access of the UE to the EPC facilitates reuse of devices in the existing WLAN network and reduces the upgrade cost of the WLAN network.
  • FIG. 1 is a schematic structural diagram of a system according to an embodiment of the present invention
  • FIG. 2 is a flow chart of an embodiment of a method for accessing an EPC according to the present invention
  • 3 is a flow chart of a preferred embodiment of a method for accessing an EPC according to the present invention
  • FIG. 4 is a flow chart of another preferred embodiment of a method for accessing an EPC according to the present invention.
  • FIG. 5 is a schematic structural diagram of an embodiment of an EPC access gateway according to the present invention.
  • FIG. 6 is a schematic structural diagram of an AAA server/agent embodiment of the present invention.
  • FIG. 7 is a schematic structural diagram of an embodiment of a WLAN authentication initiating device according to the present invention.
  • FIG. 8 is a schematic structural diagram of an embodiment of a UE accessing an EPC system according to the present invention. detailed description
  • FIG. 1 it is a possible architecture diagram of a UE accessing an EPC through a WLAN according to an embodiment of the present invention, and the specific implementation is not limited to the architecture.
  • a Trusted Gateway (TGW) device is added as an EPC access gateway based on the existing equipment.
  • the TGW has aggregation capability and EPC access function (such as supporting the general packet radio service technology tunneling protocol (General). Packet Radio Service Tunnel Proxy (GTP) function, or support Proxy Mobile Internet Protocol (PMIP) function and DHCP server function.
  • GTP Packet Radio Service Tunnel Proxy
  • PMIP Proxy Mobile Internet Protocol
  • a firewall can also be set up on the TGW to isolate WLAN and EPC.
  • the interface between the TGW and the PGW can adopt the S2a interface. According to the protocol supported by the PGW, the interface can be implemented by using the GTP protocol or the PMIP protocol.
  • the WLAN can be a network built by a third party. If it is directly connected to the EPC, it also faces certain security risks.
  • the present invention by setting the TGW to isolate the WLAN and the EPC, multiple WLANs can access the EPC through a TGW, which reduces the management difficulty of the EPC, and improves the security of the EPC by setting a firewall on the TGW.
  • the present invention can also pass The TGW and the WLAN are connected in a one-to-many manner, which reduces the number of TGWs and reduces the overall technical implementation cost of connecting the UEs in the WLAN to the EPC.
  • an embodiment of a method for accessing an evolved packet core network EPC by a UE includes:
  • Step 201 The EPC access gateway connecting the WLAN and the EPC receives the DHCP request from the UE.
  • the DHCP request sent by the UE is sent to the AP, and the AP sends the DHCP request to the EPC access gateway.
  • the AP and the EPC access gateway can be directly connected to each other.
  • the AP can be connected to the EPC access gateway in the layer 2 mode, such as a virtual local area network (VLAN), or a layer 3 tunnel.
  • Access gateways such as Internet Protocol Security (IPSEC) tunneling.
  • the AP and the EPC access gateway may also not be directly connected.
  • Multiple APs in the WLAN are connected to switches or routers in the WLAN, and the switch or router connects to the EPC to access the gateway through Layer 2 or Layer 3.
  • Step 202 Acquire the subscription data of the UE according to the UE MAC address in the DHCP request, and perform EPC access processing on the UE according to the obtained subscription data.
  • the acquiring the subscription data of the UE according to the UE MAC address includes: according to the foregoing UE MAC address, and the UE MAC address and the corresponding saved by the network device in the access authentication process.
  • the UE subscribes to the data to obtain the subscription data of the UE.
  • the network device corresponding to the UE MAC address and the UE subscription data may be an EPC access gateway in the access authentication process, and the EPC access gateway saves the UE MAC address and
  • the subscription data of the UE may include:
  • the EPC access gateway receives the message including the UE MAC address from the WLAN authenticator during the UE access authentication process, obtains the MAC address of the UE from the message, and receives the subscription from the AAA server/proxy including the UE. a message of data, from which the UE is obtained Contract data
  • the EPC access gateway correspondingly saves the acquired UE MAC address and the subscription data of the UE.
  • the WLAN authenticator can be integrated on the AC of the WLAN network.
  • the receiving the message from the AAA server/proxy and receiving the message from the WLAN authenticator may be implemented by setting the EPC access gateway to the next hop of the WLAN authenticator in the domain routing table of the WLAN authenticator.
  • the format of the domain routing table is generally the mapping between the domain name and the corresponding next hop node.
  • the destination domain is named carrier 1 and the corresponding next hop DIAMETER node is node 1.
  • the device that saves the UE MAC address and the UE subscription data in the access authentication process may also be an AAA server/proxy, and the AAA server/proxy correspondingly saves the UE MAC address and the UE subscription data may include:
  • the AAA server/proxy saves the subscription data of the UE and the UE MAC address in the WLAN authenticator message correspondingly;
  • the foregoing acquiring the subscription data of the UE according to the UE MAC address in the DHCP message includes:
  • the EPC access gateway sends a request message to the AAA server/proxy to obtain the subscription data of the UE saved in the AAA server/proxy, and the request message includes the UE MAC address information in the DHCP message.
  • the EPC access gateway receives the message fed back by the AAA server/proxy, and the message includes the subscription data of the UE obtained by the AAA server/proxy according to the UE MAC address in the request message and the corresponding saved information in the request, The EPC access gateway acquires the subscription data of the UE from the feedback message.
  • the network device that saves the UE MAC address and the UE subscription data in the access authentication process may also be a WLAN authenticator, and the J WLAN authenticator corresponding to the UE MAC address and the UE subscription data may include:
  • the WLAN authenticator stores the UE MAC address corresponding to the UE subscription data in the message from the AAA server/proxy;
  • the foregoing acquiring the subscription data of the UE according to the UE MAC address in the DHCP message includes:
  • the EPC access gateway receives the message from the WLAN authenticator, where the message carries the information corresponding to the WLAN authenticator stored in the access authentication process, and the EPC access gateway carries the UE MAC address in the DHCP message and the message. Corresponding to the saved information, the subscription data of the UE is obtained.
  • the foregoing EPC access processing for the UE includes: the EPC access gateway selects an APN for the UE according to the subscription data of the UE, and further selects a public data network (PDN) gateway (PDN Gateway, PGW) that accesses the EPC according to the APN. ), then initiate a PDN connection setup message to the PGW.
  • PDN public data network
  • the PDN connection setup message is specifically a session establishment request (create session request) message
  • the PDN connection setup message is specifically a proxy bundle. Update the proxy proxy update message.
  • the PGW responds to the connection setup response message, and carries the IP address assigned to the UE in the response message.
  • the EPC access gateway After receiving the IP address, the EPC access gateway sends the IP address to the UE through the AP. It can be an AAA server or an AAA proxy in the 3GPP protocol. If the UE is currently in the roaming state, that is, in the roaming scenario, it may be a 3GPP AAA proxy. If the UE is not in the roaming state, that is, in the non-roaming scenario, the UE may be a 3GPP AAA server.
  • the gateway by setting an EPC access gateway in the network, the gateway performs UE
  • the DHCP processing and EPC access processing which reduces the upgrade cost of the device with the authenticator function in the existing WLAN, and also enables the WLAN to access the EPC, which is beneficial to reuse existing devices in the WLAN and reduce the upgrade cost of the WLAN network.
  • the EPC access processing of the UE is performed by the EPC access gateway, and the device having the authenticator function in the WLAN network performs EPC access processing, so that the data of the UE is aggregated to the EPC access gateway without being aggregated to have an authenticator function.
  • the device also reduces the upgrade cost of the device with the authenticator function in the live WLAN, which also reduces the upgrade cost of the WLAN network.
  • a DIAMETER (RADIUS upgrade protocol) or a Remote Authentication Dial In User Service (WLAN authentication protocol) may be used in the WLAN authenticator (which may be AC, exemplified by AC).
  • RADIUS RADIUS
  • routing table that is, the TGW is configured as the next hop in the domain routing table, the DIAMETER or RADIUS message in the access authentication process will pass the TGW, so the TGW can save the subscription data and perform EPC access processing according to the subscription data.
  • FIG. 3 shows the flow of the embodiment in the specific execution process. As shown in FIG. 3, the embodiment includes the following steps in the specific execution process:
  • Step 301 In the access authentication process, the TGW acquires the subscription data of the UE and the MAC address of the UE, and saves the two.
  • the message interaction mode of the access authentication process is basically the same as the existing access authentication process. The only difference is that the AC received and sent as the authenticator passes through the TGW.
  • the TGW when the TGW receives the access authentication and authorization request (Access Authentication and Authorization Request message) from the AC, the TGW obtains the layer 2 address of the UE from the message (UE Layer-2 address). ) parameter, and save the parameter, that is, get and save the MAC address of the UE.
  • the TGW After receiving the access authentication and authorization response message (Access Authentication and Authorization Response) from the AAA server/proxy, the TGW obtains the user subscription data (APN and PGW Data) and the permanent user identity in the message. And UE Aggregated Maximum Bit Rate (AMBR), etc.
  • the default APN refers to the default APN.
  • the TGW usually selects the APN to establish a PDN connection.
  • the APN and PGW Data contain QoS parameters, all APNs subscribed by the user, and PGW selection information corresponding to each APN.
  • the TGW selects the PGW according to this; Permanent User Identity, It may be the IMSI of the user; the UE AMBR is one of the QoS parameters, and the TGW performs the QoS control of the UE jointly according to the QoS parameters in the APN and PGW Data and the UE AMBR.
  • Step 302 After the authentication is passed, the UE sends a DHCP request message to the network side, and after receiving the message, the AP sends the message to the TGW.
  • the DHCP request message carries the MAC address of the UE.
  • Step 303 After receiving the DHCP request message, the TGW finds the subscription data of the UE according to the MAC address in the message and the corresponding saved data in step 301, and selects an APN for the UE according to the subscription data of the UE, and further selects according to the APN.
  • the PGW of the EPC is accessed, and then a PDN connection setup message is initiated to the PGW.
  • the PDN connection establishment message is specifically a session establishment request (create session request) message; if the PGW supports the PMIP protocol, the PDN connection establishment message is specifically a proxy binding update message.
  • Step 304 The PGW responds to the connection setup response message, where the response message carries the IP address allocated to the UE.
  • connection establishment response message may specifically be a session establishment response (create session response) message in the GTP protocol, or a proxy binding acknowledge message in the PMIP protocol.
  • Step 305 The TGW sends the IP address allocated to the UE to the DHCP response message, and sends the message to the UE through the AP.
  • the TGW is set in the network, and the TGW can be used to obtain the next hop in the AC, so that the message in the access authentication process passes the TGW, so that the TGW can obtain the subscription of the UE.
  • the data, and the DHCP processing and the EPC access processing of the UE are performed according to the subscription data, thereby reducing the upgrade cost of the AC with the authenticator function in the existing WLAN, and also enabling the WLAN access EPC, which is beneficial to reuse the existing equipment in the WLAN. , reducing the upgrade cost of the WLAN network.
  • the EPC access processing of the UE by the TGW is performed, instead of the EPC access processing performed by the device having the authenticator function in the WLAN network, the data of the UE is aggregated to the TGW without being aggregated to the device having the authenticator function, The upgrade cost of the device with the authenticator function in the WLAN, which also reduces the upgrade cost of the WLAN network.
  • the subscription data and the MAC address of the UE are correspondingly stored in the AAA server/proxy without changing the configuration on the AC, so that the AAA server/proxy can provide the subscription data of the UE to the TGW.
  • the embodiment includes the following steps in a specific implementation process:
  • Step 401 During the access authentication process of the UE, the AAA server/proxy obtains the MAC address of the UE, and saves the data corresponding to the subscription data of the user.
  • the MAC Address is carried in the UE Layer-2 address parameter of the Access Authentication and Authorization Request sent by the authenticator to the AAA server/agent. After receiving the message, the server/proxy saves the MAC address in the message.
  • the non-3GPP IP Access Registration response message sent by the HSS to the AAA server/proxy carries the subscription data of the UE. After receiving the message, the AAA server/proxy obtains the subscription data of the UE, and the subscription data and the UE MAC address. Corresponding to save.
  • Step 402 After the authentication is passed, the UE sends a DHCP request message to the network side, where the DHCP request message carries the MAC address of the UE, and after receiving the message, the AP sends the message to the TGW.
  • Step 403 After receiving the DHCP request message, the TGW obtains the MAC address in the DHCP request message, and sends a message of the retrieve subscription data to the AAA server/proxy, where the message carries the MAC address of the UE, and the AAA server/ The proxy finds the subscription data of the UE according to the MAC address index of the UE, and sends the subscription data response message by retrieving the subscription data. TGW.
  • the destination realm in the subscription data message is retrieved to fill in the default destination domain name configured in the TGW.
  • the default destination domain name is the default AAA server/proxy domain name in the carrier network to which the TGW belongs. According to the DIAMETER or RADIUS routing rules, the retrieval of the subscription data message can be routed to the AAA server/agent that holds the UE subscription data.
  • Step 404 The TGW acquires the subscription data of the UE, selects an APN for the UE according to the subscription data of the UE, further selects a PGW that accesses the EPC according to the APN, and then initiates a PDN connection establishment message to the PGW.
  • steps 405 and 406 are the same as steps 304 and 305 described above, and are not described herein again.
  • the TGW performs the DHCP processing and the EPC access processing of the UE, thereby reducing the upgrade cost of the AC device having the authenticator function in the WLAN in the live network, and also implementing the WLAN access EPC. It helps to reuse existing equipment and reduces the upgrade cost of WLAN networks.
  • the EPC access processing of the UE by the TGW is performed, instead of the EPC access processing performed by the device having the authenticator function in the WLAN network, the data of the UE is aggregated to the TGW without being aggregated to the device having the authenticator function, The upgrade cost of the device with the authenticator function in the WLAN, which also reduces the upgrade cost of the WLAN network.
  • the AC after the AC obtains the subscription data, the AC sends a message including the UE subscription data and the MAC address of the UE to the TGW, where the TGW is in the message.
  • the subscription data and the MAC address of the UE are obtained and saved correspondingly, and the subsequent process is the same as step 302 and subsequent processes in FIG. 3.
  • the message sent by the AC to the TGW is a new message compared to the prior art.
  • the message sent by the AC to the TGW may be sent during the access authentication process, or may be sent after the access authentication ends.
  • the DHCP processing of the UE is performed by the TGW by setting the TGW in the network.
  • the EPC access processing thereby reducing the upgrade cost of the AC device with the authenticator function in the existing WLAN, and also enabling the WLAN to access the EPC, which is advantageous for reusing the existing device and reducing the upgrade cost of the WLAN network.
  • the EPC access processing of the UE by the TGW is performed, instead of the EPC access processing performed by the device having the authenticator function in the WLAN network, the data of the UE is aggregated to the TGW without being aggregated to the device having the authenticator function, The upgrade cost of the device with the authenticator function in the WLAN, which also reduces the upgrade cost of the WLAN network.
  • all or part of the steps in implementing the above method embodiments may be completed by a program instructing related hardware, and the program may be stored in a computer readable storage medium, and the program is executed.
  • the content of each embodiment of the communication method based on the MIP technology of the present invention may be included.
  • the storage medium referred to herein is, for example, a ROM/RAM, a magnetic disk, an optical disk, or the like.
  • the embodiment of the present invention further provides an EPC access gateway, where the EPC access gateway is connected to the WLAN and the EPC.
  • the EPC access gateway includes:
  • the transceiver module 51 is configured to receive a DHCP request from the UE, where the request includes a MAC address of the UE;
  • the processing module 52 is configured to acquire the subscription data of the UE according to the UE MAC address in the DHCP request received by the receiving module 51, and perform EPC access processing on the UE according to the determined subscription data; address, and access authentication.
  • the network device corresponding to the saved UE MAC address and the UE subscription data acquires the subscription data of the UE.
  • the transceiver module 51 is further configured to receive a message including a UE MAC address from a WLAN authentication initiator during the UE access authentication process, and receive the UE from the AAA server/proxy, including the UE.
  • Message of contract data The processing module 52 is further configured to obtain the UE MAC address and the subscription data of the UE from the message received by the transceiver module 51, and store the two corresponding data.
  • the transceiver module 51 may be further configured to send a request message to the AAA server/proxy and receive the message fed by the AAA server/agent.
  • the processing module 52 is further configured to obtain the DHCP request received by the transceiver module.
  • the generated request message includes a MAC address in the DHCP request; and acquiring the UE from a message fed back by the AAA server/agent
  • the subscription data, and the EPC access processing is performed on the UE according to the obtained subscription data, where the message fed by the AAA server/proxy includes: the AAA server/proxy correspondingly saved according to the access authentication process UE subscription data and UE MAC address, and UE subscription data determined by the UE MAC address in the request message.
  • the transceiver module 51 is further configured to receive a message from the WLAN authenticator.
  • the processing module 52 is further configured to acquire the subscription data of the UE according to the UE MAC address in the DHCP request received by the transceiver module, and the UE MAC address and the UE subscription data carried in the message from the WLAN authenticator received by the transceiver module.
  • the UE MAC address and the UE subscription data carried in the message are information that is saved by the WLAN authenticator in the access authentication process, and perform EPC access processing on the UE according to the acquired subscription data.
  • the EPC access gateway is configured in the network, and the gateway performs the DHCP processing and the EPC access processing of the UE, thereby reducing the upgrade cost of the device having the authenticator function in the WLAN in the live network. It is also possible to implement WLAN access EPC, which is advantageous for reusing existing devices in the WLAN and reducing the upgrade cost of the WLAN network.
  • the EPC access process is performed by the EPC access gateway, and the device having the authenticator function in the WLAN network performs EPC access processing, so that the data of the UE is aggregated to the EPC access gateway without being aggregated to have an authenticator function.
  • Device also reduces the existing network WLAN
  • the upgrade cost of the device with the authenticator function also reduces the upgrade cost of the WLAN network.
  • An embodiment of the present invention further provides an AAA server/proxy device.
  • the AAA server/proxy device includes:
  • the transceiver module 61 is configured to receive a message including a UE MAC address from the WLAN authenticator during the UE access authentication process, a message including the UE subscription data from the HSS, and receive a request message including the UE MAC address from the EPC access gateway. Sending, to the EPC access gateway, a feedback message generated by the processing module according to the request message;
  • the processing module 62 is configured to obtain the UE MAC address from the WLAN authenticator received by the transceiver module, obtain the UE subscription data from the HSS message received by the transceiver module, and save the UE MAC address and the foregoing
  • the UE subscribes to the data, and generates a feedback message including the subscription data of the UE according to the MAC address of the UE and the corresponding saved information in the request message from the EPC access gateway received by the transceiver module.
  • the correspondence between the UE MAC address and the subscription data of the UE is saved by the AAA server/proxy, and the UE subscription data corresponding to the UE MAC address is provided to the EPC access gateway, so that the EPC access gateway can perform the subscription data according to the UE.
  • the EPC access processing of the UE reduces the upgrade cost of the AC device with the authenticator function in the WLAN in the live network, and also implements the WLAN access EPC, which is beneficial to reuse the existing device and reduces the upgrade cost of the WLAN network.
  • the embodiment of the present invention further provides a WLAN authentication initiation device.
  • the WLAN authentication initiation device includes:
  • the transceiver module 71 is configured to receive a message from the AAA server/proxy, including the UE subscription data, and send the message generated by the processing module to the EPC access gateway.
  • the processing module 72 is configured to acquire the subscription data of the UE from the message received by the receiving module, and save the subscription data corresponding to the UE and the MAC address of the UE, and generate a message including the MAC address of the UE and the UE. Signing data for the message.
  • the WLAN authentication initiating device saves the correspondence between the UE MAC address and the subscription data of the UE, and provides the UE subscription data corresponding to the UE MAC address to the EPC access gateway, so that the EPC access gateway can perform the UE subscription data.
  • the EPC access processing of the UE reduces the upgrade cost of the AC device with the authenticator function in the WLAN in the live network, and also implements the WLAN access EPC, which is beneficial to reuse the existing device and reduces the upgrade cost of the WLAN network.
  • the embodiment of the present invention further provides a system for connecting a UE to an EPC.
  • the system includes: a WLAN authenticator 81, an AAA server/proxy 82, and an EPC access gateway 83.
  • the specific implementation of the system refers to the foregoing method embodiments, and details are not described herein again.
  • the dashed line in Fig. 8 indicates that in some embodiments, the two network devices connected by dashed lines have a connection relationship, and in other embodiments, there is no connection relationship.
  • the WLAN authenticator 81 is a device in the WLAN access network in FIG. 1 , specifically AC; the AAA server/proxy 82 may be the 3GPP AAA server/proxy in FIG. 1 ; the EPC access gateway 83 may be the TGW in FIG. 1 . .
  • the EPC access gateway is configured in the network, and the gateway performs the DHCP processing and the EPC access processing of the UE, thereby reducing the upgrade of the device with the authenticator function in the existing WLAN.
  • the cost can also realize the WLAN access EPC, which is beneficial to reuse existing devices in the WLAN and reduce the upgrade cost of the WLAN network.
  • the EPC access processing of the UE is performed by the EPC access gateway, and the device having the authenticator function in the WLAN network performs EPC access processing, so that the data of the UE is aggregated to the EPC access gateway without being aggregated to have an authenticator function.
  • the device also reduces the upgrade cost of the device with the authenticator function in the live WLAN, which also reduces the upgrade cost of the WLAN network.

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Databases & Information Systems (AREA)
  • Computer Security & Cryptography (AREA)
  • Mobile Radio Communication Systems (AREA)

Abstract

本发明实施方式提供了将用户设备接入演进的分组核心网络的方法、设备和系统。将用户设备UE接入演进的分组核心网络EPC的方法包括:连接无线局域网WLAN和EPC的EPC接入网关接收来自所述UE的动态主机配置协议DHCP请求;所述EPC接入网关根据所述DHCP请求中的UE媒体访问控制MAC地址获取所述UE的签约数据,并根据获取的签约数据对所述UE进行EPC接入处理;其中,所述根据UE MAC地址获取所述UE的签约数据包括:根据所述UE MAC地址,和在接入鉴权过程中网络设备对应保存的UE MAC地址和UE签约数据,获取所述UE的签约数据。本发明实施例在实现将用户设备接入演进的分组核心网络时,有利于重用现有WLAN网络中的设备,降低WLAN网络的升级成本。

Description

将用户设 4 入演进的分组核心网络的方法、 设备和系统 本申请要求于 2011 年 08 月 03 日提交中国专利局、 申请号为 201110221233.0、 发明名称为"将用户设备接入演进的分组核心网络的方法、 设备和系统"的中国专利申请的优先权,其全部内容通过引用结合在本申请中。 技术领域
本发明涉及无线局或网 ( wi reles s loca l area network , WLAN )与演进 的分组核心网络 ( evolved packet core network , EPC ) 融合技术领域, 特 别涉及将用户设备(User Equipment , UE )接入 EPC的方法、 EPC接入网关、 WLAN 认证发起设备 ( authent i cator ) , 鉴权授权计费 ( authent icat ion author izat ion account ing, AAA )月^务器 /代理和将 UE接入 EPC的系统。 背景技术
当前企业部署的,或者运营商部署的 WLAN,—般包括一些接入点( Access Point, AP )和一个或多个接入点控制器( Access Point Controller, AC )。 AP 用于吸收用户的流量, AC用于对 AP进行管理。 AP的数据流量可以在 AC进行 汇聚, 也可以不经过 AC处理直接进入交换网络。 大多数设备厂商生产的 AC设 备只用来做 AP管理和用户鉴权和按时间计费等, 不支持用户数据流量汇聚。
随着通信技术的进步, 移动通信网络也在不断的演进和融合中, UE可通 过 WLAN接入 EPC, 这是移动通信网络演进和融合的一个趋势。
现有将 UE通过 WLAN接入 EPC的技术, 要求将 WLAN authenticator功能、 动态主机配置十办议 ( dynamic host configuration protocol, DHCP )月良务器功能 和 EPC接入功能都集成在 WLAN的一个物理实体, 如 AC上, 而且在实现过程 中, UE的数据流都会经过 AC, 在 AC上汇聚后发送给公用数据网 (Public Data Network, PDN ) 网关 (PDN Gateway, PGW )。
由于现网的 WLAN中具有 authenticator功能的设备,如 AC,可能具备 DHCP 服务器功能但不具备汇聚功能, 也不具备 EPC接入功能。 要实现这些功能, 既 要提高 WLAN中具有 authenticator功能的设备的处理能力以满足汇聚功能, 又 要升级提供 EPC接入能力。 这些都不利于重用现有 WLAN网络中的设备, 导致 将 UE通过 WLAN接入 EPC时, WLAN网络的升级成本高。 发明内容
提供了一种将 UE接入 EPC的方法、一种 EPC接入网关、一种 WLAN认 证发起设备、一种 AAA服务器 /代理和一种将 UE接入 EPC的系统,以降低将 WLAN中的 UE接入 EPC时, WLAN网络的升级成本。
提供的一种将 UE接入 EPC的方法包括:
连接 WLAN和 EPC的 EPC接入网关接收来自上述 UE的 DHCP请求; 上述 EPC接入网关根据上述 DHCP请求中的 UE MAC地址获取上述 UE 的签约数据, 并根据获取的签约数据对上述 UE进行 EPC接入处理;
其中, 上述根据 UE MAC地址获取上述 UE的签约数据包括: 根据上述 UE媒体访问控制 ( Medium Access Control, MAC )地址, 和在接入鉴权过程 中网络设备对应保存的 UE MAC地址和 UE签约数据,获取上述 UE的签约数 据。
提供的一种 EPC接入网关连接 WLAN和 EPC , 该 EPC接入网关包括: 收发模块, 用于接收来自 UE的 DHCP请求, 该请求中包括 UE的 MAC 地址;
处理模块,用于根据上述收发模块接收的 DHCP请求中的 UE MAC地址, 和在接入鉴权过程中网络设备对应保存的 UE MAC地址和 UE签约数据, 获 取上述 UE的签约数据,并根据获取的签约数据对上述 UE进行 EPC接入处理。
提供的一种 AAA服务器 /代理设备包括:
收发模块, 用于接收 UE接入鉴权过程中来自 WLAN authenticator的包括 UE MAC地址的消息和来自家乡签约服务器(Home Subscriber Server, HSS ) 的包括 UE签约数据的消息, 以及接收来自 EPC接入网关的包括 UE MAC地 址的请求消息, 向上述 EPC接入网关发送处理模块根据上述请求消息生成的 反馈消息;
处理模块,用于从上述收发模块接收的来自 WLAN authenticator的消息中 获取上述 UE MAC地址, 并从上述收发模块接收的来自 HSS的消息中获取上 述 UE签约数据, 并对应保存上述 UE MAC地址和上述 UE签约数据, 以及根 据上述收发模块接收的来自接入网关的请求消息中的 UE的 MAC地址和上述 对应保存的信息, 生成包括上述 UE签约数据的反馈消息。
提供的一种 WLAN认证发起设备包括:
收发模块, 用于接收来自 AAA服务器 /代理的、 包括 UE的签约数据的消 息, 以及将上述处理模块生成的消息发送给 EPC接入网关;
处理模块, 用于从上述收发模块接收的消息中获取 UE的签约数据, 以及 对应保存上述获取的 UE的签约数据和上述 UE的 MAC地址, 并生成包括上 述 UE的 MAC地址的消息和上述 UE的签约数据的消息。
提供的一种将 UE接入 EPC的系统包括: WLAN authenticator, AAA服 务器 /代理和上述提及的 EPC接入网关。
上述提供的方案中, 通过在网络中设置 EPC接入网关, 由该网关执行 UE 的 DHCP处理和 EPC接入处理,从而无需升级现网 WLAN中具有 authenticator 功能的设备,也能够实现将 WLAN中的 UE接入 EPC,有利于重用现有 WLAN 网络中的设备, 降低了 WLAN网络的升级成本。 附图说明
图 1为本发明实施例的一种可能的系统架构图;
图 2为本发明将接入 EPC方法一个实施例的流程图; 图 3为本发明将接入 EPC方法一个较佳实施例的流程图;
图 4为本发明将接入 EPC方法另一个较佳实施例的流程图;
图 5为本发明 EPC接入网关实施例的结构示意图;
图 6为本发明 AAA服务器 /代理实施例的结构示意图;
图 7为本发明 WLAN认证发起设备实施例的结构示意图;
图 8为本发明将 UE接入 EPC系统实施例的结构示意图。 具体实施方式
为使本发明的目的、技术方案和优点更加清楚, 下面将结合附图对本发明 作进一步地详细描述。
如图 1所示, 为本发明实施例中, UE通过 WLAN接入 EPC的一种可能 的架构图, 具体实现时并不局限于该架构。 图 1中, 在现有设备的基础上新增 了信任网关(Trusted Gateway, TGW )设备作为 EPC接入网关, TGW具备汇 聚能力、 EPC接入功能(比如支持通用分组无线服务技术隧道协议(General Packet Radio Service Tunnel Proxy, GTP )功能, 或者支持代理移动互联网协议 ( Proxy Mobile Internet Protocol, PMIP )功能)和 DHCP月良务器功能。 TGW 上还可以设置防火墙, 以隔离 WLAN和 EPC。 TGW与 PGW之间的接口可以 采用 S2a接口, 根据 PGW支持的协议, 该接口可以采用 GTP协议或者 PMIP 协议实现。
由于 WLAN的规模可大可小,如果让 ^艮多小规模的 WLAN直接从其中的
AC接入 EPC, 那么会有大量的 AC能直接接入 PGW, EPC面临管理的问题。 另外, WLAN可以是由第三方建设的网络, 如果让它直接接入 EPC, 也面临 一定的安全风险。 本发明实施例中, 通过设置 TGW隔离 WLAN与 EPC, 多 个 WLAN可以通过一个 TGW接入 EPC, 降低了 EPC的管理难度, 同时通过 在 TGW上设置防火墙, 提高了 EPC的安全性。 此外, 本发明还可以通过将 TGW与 WLAN以一对多的方式连接设置, 减少了 TGW的设置数量, 降低将 WLAN中的 UE接入 EPC的整体技术实现成本。
如图 2所示, 本发明提供的一种将 UE接入演进的分组核心网络 EPC的 方法实施例包括:
步骤 201、连接 WLAN和 EPC的 EPC接入网关接收来自 UE的 DHCP请 求。
具体地,本步骤中, UE发出的 DHCP请求会发送给 AP, AP再将该 DHCP 请求发送给 EPC接入网关。 AP与 EPC接入网关可以直接连接, 具体地, AP 可以使用层二方式连接到 EPC接入网关, 比如虚拟局域网 ( Virtual Local Area Network, VLAN )方式, 也可以使用层三隧道的方式连接到 EPC接入网关, 比如因特网协议安全性( Internet Proxy Security, IPSEC )隧道方式。 AP与 EPC 接入网关也可以不直接连接, WLAN中的多个 AP连接到 WLAN中的交换机 或者路由器, 该交换机或者路由器再通过层二或者层三方式连接 EPC接入网 关。
步骤 202、 根据 DHCP请求中的 UE MAC地址获取上述 UE的签约数据, 并根据获取的签约数据对上述 UE进行 EPC接入处理。
步骤 202中, 根据 UE MAC地址获取上述 UE的签约数据包括: 根据上 述 UE MAC地址, 和在接入鉴权过程中网络设备对应保存的 UE MAC地址和
UE签约数据, 获取上述 UE的签约数据。
本实施例中, 在接入鉴权过程中对应保存 UE MAC地址和 UE签约数据 的网络设备可以是 EPC接入网关,则 EPC接入网关对应保存 UE MAC地址和
UE的签约数据可以包括:
上述 EPC接入网关在 UE接入鉴权过程中,接收来自 WLAN authenticator 的、 包括 UE MAC地址的消息, 从该消息中获取 UE的 MAC地址, 并接收来 自 AAA服务器 /代理的、 包括 UE的签约数据的消息, 从该消息中获取 UE的 签约数据;
上述 EPC接入网关对应保存上述获取的 UE MAC地址和 UE的签约数据。 本实施例中, WLAN authenticator可以集成在 WLAN网络的 AC上。 上述接收来自 AAA 服务器 /代理的消息, 以及接收来自 WLAN authenticator的消息, 可以通过在上述 WLAN authenticator的域路由表中将上 述 EPC接入网关设置为上述 WLAN authenticator的下一跳实现。
域路由表的格式一般为域名与对应的下一跳节点的对应关系。比如目的域 名为运营商 1 , 对应的下一跳 DIAMETER节点为节点 1。
本实施例中, 在接入鉴权过程中对应保存 UE MAC地址和 UE签约数据 的设备也可以是 AAA服务器 /代理, 则 AAA服务器 /代理对应保存 UE MAC 地址和 UE签约数据可以包括:
在接入鉴权过程中,由 AAA服务器 /代理将 UE的签约数据和来自 WLAN authenticator消息中的 UE MAC地址对应保存;
则上述根据 DHCP消息中的 UE MAC地址获取上述 UE的签约数据, 包 括:
上述 EPC接入网关向上述 AAA服务器 /代理发送请求消息,请求获取 AAA 服务器 /代理中保存的上述 UE的签约数据, 请求消息中包含 DHCP消息中的 UE MAC地址信息;
上述 EPC接入网关接收上述 AAA服务器 /代理反馈的消息, 该消息中包 括上述 AAA服务器 /代理根据上述请求消息中的 UE MAC地址和自身中上述 对应保存的信息获取的上述 UE的签约数据, 上述 EPC接入网关从该反馈的 消息中获取上述 UE的签约数据。
本实施例中, 在接入鉴权过程中对应保存 UE MAC地址和 UE签约数据 的网络设备还可以是 WLAN authenticator, 贝,J WLAN authenticator对应保存 UE MAC地址和 UE签约数据可以包括: 在接入鉴权过程中, 由 WLAN authenticator将 UE MAC地址与来自 AAA 服务器 /代理的消息中的 UE签约数据对应保存;
则上述根据 DHCP消息中的 UE MAC地址获取上述 UE的签约数据, 包 括:
上述 EPC接入网关接收来自 WLAN authenticator的消息, 该消息中携带 上述在接入鉴权过程中 WLAN authenticator对应保存的信息, 上述 EPC接入 网关根据上述 DHCP消息中的 UE MAC地址和上述消息中携带的对应保存的 信息, 获取上述 UE的签约数据。
上述对 UE进行 EPC接入处理包括: EPC接入网关根据 UE的签约数据为 UE选择 APN,并进一步根据该 APN选择接入 EPC的公用数据网( Public Data Network, PDN ) 网关 (PDN Gateway, PGW ), 然后向该 PGW发起 PDN连 接建立消息。如果 PGW和 EPC接入网关支持 GTP协议, 则该 PDN连接建立 消息具体为会话建立请求( create session request )消息; 如果 PGW和 EPC接 入网关支持 PMIP协议, 则该 PDN连接建立消息具体为代理捆绑更新 ( proxy binding update ) 消息。 此后, PGW会回应连接建立响应消息, 在响应消息中 携带分配给 UE的 IP地址, EPC接入网关收到后再将 IP地址携带在 DHCP应 答消息中通过 AP发送给 UE。 理, 可以为 3GPP协议中的 AAA服务器或 AAA代理。如果 UE当前处于漫游 状态, 即漫游场景下, 具体可以为 3GPPAAA代理, 如果 UE当前没有处于漫 游状态, 即非漫游场景下, 具体可以为 3GPPAAA服务器。
上述实施例中, 通过在网络中设置 EPC接入网关, 由该网关执行 UE的
DHCP处理和 EPC接入处理, 从而降低了现网 WLAN中具有 authenticator功 能的设备的升级成本,也能够实现 WLAN接入 EPC,有利于重用 WLAN中的 现有设备, 降低了 WLAN网络的升级成本。 同时, 由于由 EPC接入网关进行 UE的 EPC接入处理, 而不是 WLAN网 络中具有 authenticator功能的设备进行 EPC接入处理,使得 UE的数据汇聚到 EPC接入网关而不汇聚到具有 authenticator功能的设备,也降低了现网 WLAN 中具有 authenticator功能的设备的升级成本, 即也降低了 WLAN网络的升级 成本。
在本发明的一个较佳实施例中, 在 WLAN authenticator (具体可以是 AC, 以下以 AC为例进行阐述) 的 DIAMETER ( RADIUS的升级协议)或者远程 用户拨号认证系统 ( Remote Authentication Dial In User Service , RADIUS )路 由表, 即域路由表里配置 TGW 作为下一跳, 则在接入鉴权过程中的 DIAMETER或者 RADIUS消息都会经过 TGW,从而 TGW可以保存签约数据, 并根据签约数据进行 EPC接入处理。
图 3示出了本实施例在具体执行过程中的流程,如图 3所示, 本实施例在 具体执行过程中包括如下步骤:
步骤 301、 在接入鉴权过程中, TGW获取 UE的签约数据和 UE的 MAC 地址, 并将两者对应保存。
上述接入鉴权过程的消息交互方式与现有的接入鉴权过程基本相同,区别 仅在于作为 authenticator的 AC接收的和发送的消息均经过 TGW。
具体地, 在接入鉴权过程中, TGW接收到来自 AC的接入鉴权和授权请 求 ( Access Authentication and Authorization Request消息 ) 时, 从该消息中获 取 UE的层 2地址( UE Layer-2 address )参数, 并保存该参数, 即获取并保存 UE的 MAC地址。
TGW接收到来自 AAA服务器 /代理的接入鉴权和认证响应消息 (Access Authentication and Authorization Response )后, 获取该消息中的用户签约数据 数据 ( APN and PGW Data )、 永久用户表示 ( Permanent User Identity )和 UE 的合计最大速率( Aggregated Maximum Bit Rate, AMBR )等。其中, Default APN 指默认 APN, TGW通常选择这个 APN来建立 PDN连接; APN and PGW Data 包含 QoS参数、用户所有签约的 APN和各 APN对应的 PGW选择信息, TGW 据此选择 PGW; Permanent User Identity, 可以是用户的 IMSI; UE AMBR, 是 QoS参数之一, TGW根据 APN and PGW Data中的 QoS参数和 UE AMBR共 同进行 UE的 QoS控制。
步骤 302、 鉴权通过后, UE向网络侧发送 DHCP请求消息, AP接收到该 消息后, 将该消息发送给 TGW。
该 DHCP请求消息中携带 UE的 MAC地址。
步骤 303、 TGW接收到 DHCP请求消息后, 根据该消息中的 MAC地址 和步骤 301中对应保存的数据, 找到该 UE的签约数据, 并根据 UE的签约数 据为 UE选择 APN,进一步根据该 APN选择接入 EPC的 PGW,然后向该 PGW 发起 PDN连接建立消息。
如果 PGW支持 GTP协议, 则该 PDN连接建立消息具体为会话建立请求 ( create session request ) 消息; 如果 PGW支持 PMIP协议, 则该 PDN连接建 立消息具体为代理捆绑更新 ( proxy binding update ) 消息。
步骤 304、 PGW回应连接建立响应消息, 在响应消息中携带分配给 UE 的 IP地址。
与步骤 303对应的, 连接建立响应消息具体可以是 GTP协议中的会话建 立响应( create session response )消息,或 PMIP协议中的代理捆绑应答 ( proxy binding acknowledge ) 消息。
步骤 305、 TGW将为 UE分配的 IP地址承载在 DHCP应答消息中, 通过 AP发送给 UE。
本实施例中, 在网络中设置 TGW, 并通过在 AC中将 TGW设置为下一 跳使接入鉴权过程中的消息均经过该 TGW, 从而 TGW能够获取 UE的签约 数据, 并根据签约数据执行 UE的 DHCP处理和 EPC接入处理, 从而降低了 现网 WLAN中具有 authenticator功能的 AC的升级成本, 也能够实现 WLAN 接入 EPC,有利于重用 WLAN中的现有设备,降低了 WLAN网络的升级成本。
同时, 由于由 TGW进行 UE的 EPC接入处理, 而不是 WLAN网络中具 有 authenticator功能的设备进行 EPC接入处理, 使得 UE的数据汇聚到 TGW 而不汇聚到具有 authenticator 功能的设备, 也降低了现网 WLAN 中具有 authenticator功能的设备的升级成本, 即也降低了 WLAN网络的升级成本。
在本发明的另一个较佳实施例中, 无需更改 AC上的配置, 在 AAA服务 器 /代理中对应保存 UE的签约数据和 MAC地址,从而 AAA服务器 /代理可以 将 UE的签约数据提供给 TGW。
如图 4所示, 本实施例在具体执行过程中包括如下步骤:
步骤 401、 在 UE的接入鉴权过程中, AAA服务器 /代理获取 UE的 MAC 地址, 并与用户的签约数据对应保存。
具体地,在 authenticator发送给 AAA月良务器 /代理的 Access Authentication and Authorization Request的 UE Layer-2 address参数中携带了 MAC地址, 服 务器 /代理接收到该消息后, 保存该消息中的 MAC地址。
在 HSS 发送给 AAA服务器 /代理的 Non-3GPP IP Access Registration response消息中携带了 UE的签约数据, AAA服务器 /代理接收到该消息后, 从中获取 UE的签约数据, 并将签约数据与 UE MAC地址对应保存。
步骤 402、 鉴权通过后, UE向网络侧发送 DHCP请求消息, DHCP请求 消息中携带 UE的 MAC地址, AP接收到该消息后, 将该消息发送给 TGW。
步骤 403、 TGW接收到 DHCP请求消息后, 获取 DHCP请求消息中的 MAC地址, 并向 AAA服务器 /代理发送取回签约数据 ( retrieve subscription data ) 消息, 该消息中携带 UE的 MAC地址, AAA服务器 /代理根据 UE的 MAC 地址索引找到 UE 的签约数据并通过取回签约数据响应消息发送给 TGW。
本步骤中,取回签约数据消息中的目的域名 ( destination realm )填写 TGW 中配置的默认目的域名, 该默认目的域名为 TGW归属的运营商网络中的默认 AAA服务器 /代理域名。 根据 DIAMETER或者 RADIUS路由规则, 取回签约 数据消息即可路由到保存 UE签约数据的 AAA服务器 /代理。
步骤 404、 TGW获取 UE的签约数据, 并根据 UE的签约数据为 UE选择 APN, 进一步根据该 APN选择接入 EPC的 PGW, 然后向该 PGW发起 PDN 连接建立消息。
后续步骤 405和步骤 406与前述步骤 304和 305相同, 这里不再赘述。 本实施例中, 通过在网络中设置 TGW, 由 TGW执行 UE的 DHCP处理 和 EPC接入处理, 从而降低了现网 WLAN中具有 authenticator功能的 AC设 备的升级成本, 也能够实现 WLAN接入 EPC, 有利于重用现有设备, 降低了 WLAN网络的升级成本。
同时, 由于由 TGW进行 UE的 EPC接入处理, 而不是 WLAN网络中具 有 authenticator功能的设备进行 EPC接入处理, 使得 UE的数据汇聚到 TGW 而不汇聚到具有 authenticator 功能的设备, 也降低了现网 WLAN 中具有 authenticator功能的设备的升级成本, 即也降低了 WLAN网络的升级成本。
在本发明方法的另一个较佳实施例中, 还可以是在接入鉴权过程中, AC 获得签约数据后, 向 TGW发送包括 UE签约数据和 UE的 MAC地址的消息, TGW从该消息中获取 UE的签约数据和 MAC地址并对应保存, 之后的流程 与图 3中的步骤 302及其后流程相同。 这里, AC发送给 TGW的消息为相对 于现有技术新增的一个消息。
本实施例中, AC向 TGW发送的消息可以是在接入鉴权过程中发送, 也 可以在接入鉴权结束后发送。
本实施例中, 通过在网络中设置 TGW, 由 TGW执行 UE的 DHCP处理 和 EPC接入处理, 从而降低了现网 WLAN中具有 authenticator功能的 AC设 备的升级成本, 也能够实现 WLAN接入 EPC, 有利于重用现有设备, 降低了 WLAN网络的升级成本。
同时, 由于由 TGW进行 UE的 EPC接入处理, 而不是 WLAN网络中具 有 authenticator功能的设备进行 EPC接入处理, 使得 UE的数据汇聚到 TGW 而不汇聚到具有 authenticator 功能的设备, 也降低了现网 WLAN 中具有 authenticator功能的设备的升级成本, 即也降低了 WLAN网络的升级成本。本 领域普通技术人员可以理解,实现上述方法实施方式中的全部或部分步骤是可 以通过程序来指令相关的硬件来完成,所述的程序可以存储于计算机可读取存 储介质中, 该程序在执行时, 可以包括前述本发明基于 MIP技术的通信方法 各个实施方式的内容。 这里所称得的存储介质, 如: ROM/RAM、 磁碟、 光盘 等。
本发明实施例还提供了一种 EPC接入网关,该 EPC接入网关连接 WLAN 和 EPC, 如图 5所示, 该 EPC接入网关包括:
收发模块 51 ,用于接收来自 UE的 DHCP请求,该请求中包括 UE的 MAC 地址;
处理模块 52,用于根据上述接收模块 51接收的 DHCP请求中的 UE MAC 地址获取上述 UE的签约数据,并根据确定的签约数据对上述 UE进行 EPC接 入处理; 地址, 和在接入鉴权过程中网络设备对应保存的 UE MAC地址和 UE签约数 据, 获取上述 UE的签约数据。
一种较佳实施例中, 上述收发模块 51进一步可以用于接收在 UE接入鉴 权过程中来自 WLAN认证发起者的、 包括 UE MAC地址的消息, 以及接收来 自 AAA服务器 /代理的、 包括 UE的签约数据的消息; 上述处理模块 52进一步可以用于从上述收发模块 51接收的消息中获取上 述 UE MAC地址和上述 UE的签约数据, 并将两者对应保存。
另一种较佳实施例中, 上述收发模块 51也可以进一步用于向 AAA服务 器 /代理发送请求消息, 并接收上述 AAA服务器 /代理反馈的消息;
上述处理模块 52进一步用于获取所述收发模块接收的 DHCP请求中的
UE MAC地址,并生成所述向 AAA服务器 /代理发送的请求消息,该生成的请 求消息中包括所述 DHCP请求中的 MAC地址;从所述 AAA服务器 /代理反馈 的消息中获取所述 UE的签约数据, 以及根据获取的签约数据对所述 UE进行 EPC接入处理, 其中, 所述 AAA服务器 /代理反馈的消息中包括: 所述 AAA 服务器 /代理根据在接入鉴权过程中对应保存的 UE签约数据和 UE MAC地址, 以及所述请求消息中的 UE MAC地址确定的 UE签约数据。
再一种较佳实施例中, 上述收发模块 51 还可以进一步用于接收来自 WLAN authenticator的消息;
上述处理模块 52进一步用于根据收发模块接收的 DHCP请求中的 UE MAC地址, 和所述收发模块接收的来自 WLAN authenticator的消息中携带的 UE MAC地址和 UE签约数据, 获取所述 UE的签约数据, 其中, 所述消息中 携带的 UE MAC地址和 UE签约数据为所述 WLAN authenticator在接入鉴权 过程中保存的信息, 并根据获取的签约数据对所述 UE进行 EPC接入处理。
上述各 EPC接入网关实施例中, 通过在网络中设置 EPC接入网关, 由该 网关执行 UE的 DHCP处理和 EPC接入处理,从而降低了现网 WLAN中具有 authenticator功能的设备的升级成本,也能够实现 WLAN接入 EPC,有利于重 用 WLAN中的现有设备, 降低了 WLAN网络的升级成本。
同时, 由于由 EPC接入网关进行 UE的 EPC接入处理, 而不是 WLAN网 络中具有 authenticator功能的设备进行 EPC接入处理,使得 UE的数据汇聚到 EPC接入网关而不汇聚到具有 authenticator功能的设备,也降低了现网 WLAN 中具有 authenticator功能的设备的升级成本, 即也降低了 WLAN网络的升级 成本。
本发明实施例还提供了一种 AAA服务器 /代理设备,如图 6所示,该 AAA 服务器 /代理设备包括:
收发模块 61 ,用于接收 UE接入鉴权过程中来自 WLAN authenticator的包 括 UE MAC地址的消息和来自 HSS的包括 UE签约数据的消息, 以及接收来 自 EPC接入网关的包括 UE MAC地址的请求消息,向上述 EPC接入网关发送 处理模块根据上述请求消息生成的反馈消息;
处理模块 62, 用于从上述收发模块接收的来自 WLAN authenticator的消 息中获取上述 UE MAC地址, 从上述收发模块接收的来自 HSS的消息中获取 上述 UE签约数据, 并对应保存上述 UE MAC地址和上述 UE签约数据, 以及 根据上述收发模块接收的来自 EPC接入网关的请求消息中的 UE的 MAC地址 和上述对应保存的信息, 生成包括 UE的签约数据的反馈消息。
本实施例中, 通过 AAA服务器 /代理保存 UE MAC地址和 UE的签约数 据的对应关系, 并向 EPC接入网关提供 UE MAC地址对应的 UE签约数据, 使得 EPC接入网关能够根据 UE签约数据执行 UE的 EPC接入处理, 降低了 现网 WLAN 中具有 authenticator功能的 AC设备的升级成本, 也能够实现 WLAN接入 EPC, 有利于重用现有设备, 降低了 WLAN网络的升级成本。
本发明实施例还提供了一种 WLAN认证发起设备,如图 7所示,该 WLAN 认证发起设备包括:
收发模块 71 , 用于接收来自 AAA服务器 /代理的、 包括 UE签约数据的消 息, 以及将上述处理模块生成的消息发送给 EPC接入网关;
处理模块 72,用于从上述接收模块接收的消息中获取 UE的签约数据并保 存; 以及对应保存上述 UE的签约数据和上述 UE的 MAC地址, 并生成包括 上述 UE的 MAC地址的消息和上述 UE的签约数据的消息。 本实施例中, 通过 WLAN认证发起设备保存 UE MAC地址和 UE的签约 数据的对应关系,并向 EPC接入网关提供 UE MAC地址对应的 UE签约数据, 使得 EPC接入网关能够根据 UE签约数据执行 UE的 EPC接入处理, 降低了 现网 WLAN 中具有 authenticator功能的 AC设备的升级成本, 也能够实现 WLAN接入 EPC, 有利于重用现有设备, 降低了 WLAN网络的升级成本。
本发明实施例还提供了一种将 UE接入 EPC的系统, 如图 8所示, 该系 统包括: WLAN authenticator 81 , AAA服务器 /代理 82和 EPC接入网关 83。 该系统的具体实现参照前述各方法实施例, 这里不再赘述。 图 8中的虚线表示 在一些实施例中,虚线连接的两个网络设备存在连接关系, 另一些实施例中不 存在连接关系。
其中, WLAN authenticator 81是图 1中 WLAN接入网中的设备, 具体可 以是 AC; AAA服务器 /代理 82可以是图 1中的 3GPPAAA服务器 /代理; EPC 接入网关 83可以是图 1中的 TGW。
上述将 UE接入 EPC的系统实施例中,通过在网络中设置 EPC接入网关, 由该网关执行 UE的 DHCP处理和 EPC接入处理,从而降低了现网 WLAN中 具有 authenticator功能的设备的升级成本, 也能够实现 WLAN接入 EPC, 有 利于重用 WLAN中的现有设备, 降低了 WLAN网络的升级成本。
同时, 由于由 EPC接入网关进行 UE的 EPC接入处理, 而不是 WLAN网 络中具有 authenticator功能的设备进行 EPC接入处理,使得 UE的数据汇聚到 EPC接入网关而不汇聚到具有 authenticator功能的设备,也降低了现网 WLAN 中具有 authenticator功能的设备的升级成本, 即也降低了 WLAN网络的升级 成本。
虽然通过参照本发明的某些优选实施方式,已经对本发明进行了图示和描 述,但本领域的普通技术人员应该明白, 可以在形式上和细节上对其作各种改 变, 而不偏离本发明的精神和范围。

Claims

1、 一种将用户设备 UE接入演进的分组核心网络 EPC的方法, 其特征在 于, 该方法包括:
连接无线局域网 WLAN和 EPC的 EPC接入网关接收来自所述 UE的动态 主机配置协议 DHCP请求;
所述 EPC接入网关根据所述 DHCP请求中的 UE媒体访问控制 MAC地址 获取所述 UE的签约数据,并根据获利取 _的签约数据对所述 UE进行 EPC接入处
1 6
理; 要 其中, 所述根据 UE MAC地址获取所述求 UE的签约数据包括: 根据所述
UE MAC地址,和在接入鉴权过程中网络设备对应保存的 UE MAC地址和 UE 签约数据, 获取所述 UE的签约数据。
2、 根据权利要求 1所述的方法, 其特征在于, 在接入鉴权过程中网络设 备对应保存 UE MAC地址和 UE签约数据包括:
所述 EPC接入网关在 UE接入鉴权过程中, 接收来自 WLAN认证发起设 备 authenticator的、 包括 UE MAC地址的消息, 从该消息中获取 UE的 MAC 地址, 并接收来自鉴权授权计费 AAA服务器 /代理的、 包括 UE的签约数据的 消息, 从该消息中获取 UE的签约数据;
所述 EPC接入网关对应保存所述获取的 UE MAC地址和 UE签约数据。
3、 根据权利要求 2所述的方法, 其特征在于, 该方法进一步包括: 在所述 WLAN authenticator的域路由表中将所述 EPC接入网关设置为所 述 WLAN authenticator的下一兆;
所述 EPC接入网关在 UE接入鉴权过程中,接收来自 WLAN authenticator 的、 包括 UE MAC地址的消息, 包括: 在所述接入鉴权过程中, 所述 EPC接 入网关接收所述 WLAN authenticator基于所述域路由表发送的消息。
4、 根据权利要求 1所述的方法, 其特征在于,
所述根据 DHCP请求中的 UE MAC地址获取所述 UE的签约数据, 包括: 所述 EPC接入网关向所述 AAA服务器 /代理发送请求消息,请求获取 AAA 服务器 /代理中保存的所述 UE的数据, 该请求消息中包含所述 DHCP请求中 的 UE MAC地址信息;
所述 EPC接入网关接收所述 AAA服务器 /代理反馈的消息, 该消息中包 括所述 AAA服务器 /代理根据所述请求消息中的 UE MAC地址和自身中所述 对应保存的信息获取的所述 UE的签约数据, 所述 EPC接入网关从该反馈的 消息中获取所述 UE的签约数据。
5、 根据权利要求 1所述的方法, 其特征在于, 所述根据 DHCP请求中的
UE MAC地址获取所述 UE的签约数据, 包括:
所述 EPC接入网关接收来自 WLAN authenticator的消息, 该消息中携带 所述 WLAN authenticator对应保存的 UE的 MAC地址和 UE的签约数据, 并 根据所述 DHCP请求中的 UE MAC地址和所述消息中携带的所述对应保存的 信息, 获取所述 UE的签约数据。
6、一种 EPC接入网关,其特征在于,该 EPC接入网关连接 WLAN和 EPC , 该接入网关包括:
收发模块, 用于接收来自 UE的 DHCP请求, 该请求中包括 UE的 MAC 地址;
处理模块,用于根据所述收发模块接收的 DHCP请求中的 UE MAC地址, 和在接入鉴权过程中网络设备对应保存的 UE MAC地址和 UE签约数据, 获 取所述 UE的签约数据,并根据获取的签约数据对所述 UE进行 EPC接入处理。
7、 根据权利要求 6所述的接入网关, 其特征在于, 所述收发模块进一步 用于接收在 UE接入鉴权过程中来自 WLAN authenticator的、 包括 UE MAC 地址的消息,以及接收来自 AAA服务器 /代理的、包括 UE的签约数据的消息; 所述处理模块进一步用于从所述收发模块接收的消息中获取所述 UE MAC地址和所述 UE的签约数据, 并将两者对应保存。
8、 根据权利要求 6所述的接入网关, 其特征在于, 所述收发模块进一步 用于向 AAA服务器 /代理发送请求消息,并接收所述 AAA服务器 /代理反馈的 消息;
所述处理模块用于, 获取所述收发模块接收的 DHCP请求中的 UE MAC 地址, 并生成所述向 AAA服务器 /代理发送的请求消息, 该生成的请求消息中 包括所述 DHCP请求中的 MAC地址;从所述 AAA服务器 /代理反馈的消息中 获取所述 UE的签约数据,以及根据获取的签约数据对所述 UE进行 EPC接入 处理, 其中, 所述 AAA服务器 /代理反馈的消息中包括: 所述 AAA服务器 / 代理根据在接入鉴权过程中对应保存的 UE签约数据和 UE MAC地址, 以及 所述请求消息中的 UE MAC地址确定的 UE签约数据。
9、 根据权利要求 6所述的接入网关, 其特征在于, 所述收发模块进一步 用于接收来自 WLAN authenticator的消息;
所述处理模块用于,根据收发模块接收的 DHCP请求中的 UE MAC地址, 和所述收发模块接收的来自 WLAN authenticator的消息中携带的 UE MAC地 址和 UE签约数据, 获取所述 UE的签约数据, 其中, 所述消息中携带的 UE MAC地址和 UE签约数据为所述 WLAN authenticator在接入鉴权过程中保存 的信息, 并根据获取的签约数据对所述 UE进行 EPC接入处理。
10、 一种 AAA服务器 /代理设备, 其特征在于, 该设备包括:
收发模块, 用于接收 UE接入鉴权过程中来自 WLAN 认证发起设备 authenticator的包括 UE MAC地址的消息和来自 HSS的包括 UE签约数据的消 息,以及接收来自 EPC接入网关的包括 UE MAC地址的请求消息,向所述 EPC 接入网关发送处理模块根据所述请求消息生成的反馈消息;
处理模块,用于从所述收发模块接收的来自 WLAN authenticator的消息中 获取所述 UE MAC地址, 并从所述收发模块接收的来自 HSS的消息中获取所 述 UE签约数据, 并对应保存所述 UE MAC地址和所述 UE签约数据, 以及根 据所述收发模块接收的来自接入网关的请求消息中的 UE的 MAC地址和所述 对应保存的信息, 生成包括所述 UE签约数据的反馈消 , 。
11、 一种 WLAN认证发起设备 authenticator, 其特征在于, 该 WLAN认 证发起设备包括:
收发模块, 用于接收来自 AAA服务器 /代理的、 包括 UE的签约数据的消 息, 以及将所述处理模块生成的消息发送给 EPC接入网关;
处理模块, 用于从所述收发模块接收的消息中获取 UE的签约数据, 以及 对应保存所述获取的 UE的签约数据和所述 UE的 MAC地址, 并生成包括所 述 UE的 MAC地址的消息和所述 UE的签约数据的消息。
12、 一种将 UE接入 EPC的系统, 其特征在于, 该系统包括: WLAN认 证发起设备 authenticator, AAA服务器 /代理和权利要求 6至 9中任一所述的 EPC接入网关。
PCT/CN2012/079633 2011-08-03 2012-08-03 将用户设备接入演进的分组核心网络的方法、设备和系统 WO2013017098A1 (zh)

Priority Applications (1)

Application Number Priority Date Filing Date Title
US14/167,737 US9503881B2 (en) 2011-08-03 2014-01-29 Method, device, and system for user equipment to access evolved packet core network

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN201110221233.0 2011-08-03
CN201110221233.0A CN102917356B (zh) 2011-08-03 2011-08-03 将用户设备接入演进的分组核心网络的方法、设备和系统

Related Child Applications (1)

Application Number Title Priority Date Filing Date
US14/167,737 Continuation US9503881B2 (en) 2011-08-03 2014-01-29 Method, device, and system for user equipment to access evolved packet core network

Publications (1)

Publication Number Publication Date
WO2013017098A1 true WO2013017098A1 (zh) 2013-02-07

Family

ID=47615551

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2012/079633 WO2013017098A1 (zh) 2011-08-03 2012-08-03 将用户设备接入演进的分组核心网络的方法、设备和系统

Country Status (3)

Country Link
US (1) US9503881B2 (zh)
CN (1) CN102917356B (zh)
WO (1) WO2013017098A1 (zh)

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN103826224A (zh) * 2014-01-29 2014-05-28 大唐移动通信设备有限公司 一种实现用户接入控制的方法和装置
WO2015006316A1 (en) * 2013-07-08 2015-01-15 Convida Wireless, Llc Connecting imsi-less devices to the epc

Families Citing this family (13)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN103220817A (zh) * 2012-01-20 2013-07-24 中兴通讯股份有限公司 会话建立方法及装置
CN103313317B (zh) * 2012-03-07 2016-09-28 华为技术有限公司 一种WiFi终端接入分组数据PS业务域的方法和可信网关
US9769659B2 (en) * 2012-08-23 2017-09-19 Telefonaktiebolaget Lm Ericsson (Publ) Access control for a wireless local area network
US9521077B2 (en) * 2013-07-22 2016-12-13 Verizon Patent And Licensing Inc. Network connection via a proxy device using a generic access point name
US9473425B2 (en) * 2013-12-06 2016-10-18 Dell Products L.P. Systems and methods for integrating wireless local area networks on extended bridges
WO2016161017A1 (en) * 2015-03-31 2016-10-06 Ruckus Wireless, Inc. Virtual device with internet protocol security tunnel
EP3345416A4 (en) * 2015-09-01 2019-03-06 Telefonaktiebolaget LM Ericsson (PUBL) METHODS AND DEVICES FOR AUTHENTICATING SIM-FREE MOBILE TERMINALS ACCESSING A WIRELESS COMMUNICATION NETWORK
US10320791B2 (en) * 2015-12-29 2019-06-11 Nokia Of America Corporation Method and apparatus for facilitating access to a communication network
JP2017143497A (ja) * 2016-02-12 2017-08-17 富士通株式会社 パケット転送装置及びパケット転送方法
EP3244588B1 (en) 2016-05-10 2021-06-23 Nokia Solutions and Networks Oy Support of dedicated core networks for wlan access
CN107508931B (zh) * 2017-09-29 2019-08-30 Oppo广东移动通信有限公司 无线网络通信方法、装置、存储介质和计算机设备
CN110784329B (zh) * 2018-07-30 2022-04-12 成都鼎桥通信技术有限公司 一种lte网络的终端设备路由的方法和系统
CN112118575B (zh) * 2020-09-25 2022-06-28 国网江苏省电力有限公司 一种无线设备认证方法及其系统

Citations (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101267656A (zh) * 2007-03-14 2008-09-17 华为技术有限公司 PCC规则和QoS信息的传递方法及系统
US20080295154A1 (en) * 2007-05-21 2008-11-27 Samsung Electronics Co., Ltd. Method and system for managing mobility of access terminal using proxy mobile internet protocol in a mobile communication system, and method for allocating home address of access terminal for the same
CN101466084A (zh) * 2007-12-17 2009-06-24 中兴通讯股份有限公司 一种无线通信系统中实现优先接入的方法
US20090303973A1 (en) * 2008-06-10 2009-12-10 Nokia Siemens Networks Oy Packet data network selection
CN101778373A (zh) * 2009-01-13 2010-07-14 华为技术有限公司 一种选择分组数据网络的方法、装置与系统
CN102026194A (zh) * 2009-09-14 2011-04-20 华为技术有限公司 一种WiFi网络与WiMAX网络融合的方法、设备与系统

Family Cites Families (24)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US7249187B2 (en) * 2002-11-27 2007-07-24 Symantec Corporation Enforcement of compliance with network security policies
JP3769533B2 (ja) * 2002-11-29 2006-04-26 Necインフロンティア株式会社 無線lan通信方法及びシステム
CN1310476C (zh) * 2004-07-05 2007-04-11 华为技术有限公司 无线局域网用户建立会话连接的方法
EP1638261A1 (en) * 2004-09-16 2006-03-22 Matsushita Electric Industrial Co., Ltd. Configuring connection parameters in a handover between access networks
WO2006118497A1 (en) * 2005-04-29 2006-11-09 Telefonaktiebolaget L M Ericsson (Publ) Operator shop selection
FI20050491A0 (fi) * 2005-05-09 2005-05-09 Nokia Corp Järjestelmä varmenteiden toimittamiseksi viestintäjärjestelmässä
DE202005021930U1 (de) * 2005-08-01 2011-08-08 Corning Cable Systems Llc Faseroptische Auskoppelkabel und vorverbundene Baugruppen mit Toning-Teilen
DE102005043364B4 (de) * 2005-09-12 2007-07-05 Siemens Ag Telekommunikationssystem und Verfahren zum Steuern eines Wechsels eines Teilnehmerendgerätes zwischen zwei Netzwerken
CN1874217B (zh) * 2005-09-27 2010-12-08 华为技术有限公司 一种确定路由的方法
EP2176967A4 (en) * 2007-07-14 2013-08-14 Tatara Systems Inc METHOD AND APPARATUS FOR THE MANAGEMENT OF SIP / IMS FEMTOCELLS
US20110063997A1 (en) * 2007-09-07 2011-03-17 Laurence Gras Interworking between wimax and 3gpp networks
US8477793B2 (en) * 2007-09-26 2013-07-02 Sling Media, Inc. Media streaming device with gateway functionality
US8417219B2 (en) * 2008-01-09 2013-04-09 Lg Electronics Inc. Pre-authentication method for inter-rat handover
US8224330B2 (en) * 2008-08-07 2012-07-17 Futurewei Technologies, Inc. Method and system for interworking between two different networks
EP2166724A1 (en) * 2008-09-23 2010-03-24 Panasonic Corporation Optimization of handovers to untrusted non-3GPP networks
US9137833B2 (en) * 2009-03-27 2015-09-15 Sharp Kabushiki Kaisha Mobile communication system
EP2490469B1 (en) * 2009-10-13 2018-06-13 Nec Corporation Mobile communication system, gateway device, base station device, control method for gateway device, and computer-readable medium
US8553647B2 (en) * 2010-01-22 2013-10-08 Telefonaktiebolaget Lm Ericsson (Publ) Optimization of non-optimized handoff from a first access technology to a second access technology
US9386607B2 (en) * 2010-06-17 2016-07-05 Qualcomm Incorporated Method and apparatus for managing packet data network connectivity
US8554933B2 (en) * 2010-10-05 2013-10-08 Verizon Patent And Licensing Inc. Dynamic selection of packet data network gateways
WO2012110093A1 (en) * 2011-02-17 2012-08-23 Telefonaktiebolaget L M Ericsson (Publ) Method and apparatus for establishing a pdn connection
EP2689567B1 (en) * 2011-03-22 2015-06-24 Telefonaktiebolaget L M Ericsson (publ) Network node and method to route through or around traffic detection function nodes
CN103493392B (zh) * 2011-04-29 2016-08-17 英特尔公司 Mimo通信系统中的秩自适应的系统和方法
US8495714B2 (en) * 2011-07-20 2013-07-23 Bridgewater Systems Corp. Systems and methods for authenticating users accessing unsecured wifi access points

Patent Citations (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101267656A (zh) * 2007-03-14 2008-09-17 华为技术有限公司 PCC规则和QoS信息的传递方法及系统
US20080295154A1 (en) * 2007-05-21 2008-11-27 Samsung Electronics Co., Ltd. Method and system for managing mobility of access terminal using proxy mobile internet protocol in a mobile communication system, and method for allocating home address of access terminal for the same
CN101466084A (zh) * 2007-12-17 2009-06-24 中兴通讯股份有限公司 一种无线通信系统中实现优先接入的方法
US20090303973A1 (en) * 2008-06-10 2009-12-10 Nokia Siemens Networks Oy Packet data network selection
CN101778373A (zh) * 2009-01-13 2010-07-14 华为技术有限公司 一种选择分组数据网络的方法、装置与系统
CN102026194A (zh) * 2009-09-14 2011-04-20 华为技术有限公司 一种WiFi网络与WiMAX网络融合的方法、设备与系统

Cited By (11)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2015006316A1 (en) * 2013-07-08 2015-01-15 Convida Wireless, Llc Connecting imsi-less devices to the epc
KR101763271B1 (ko) 2013-07-08 2017-07-31 콘비다 와이어리스, 엘엘씨 Epc로의 imsi-리스 디바이스들의 연결
KR20170089970A (ko) * 2013-07-08 2017-08-04 콘비다 와이어리스, 엘엘씨 Epc로의 imsi-리스 디바이스들의 연결
US9930613B2 (en) 2013-07-08 2018-03-27 Convida Wireless, Llc Connecting IMSI-less devices to the EPC
KR102021679B1 (ko) 2013-07-08 2019-09-16 콘비다 와이어리스, 엘엘씨 Epc로의 imsi-리스 디바이스들의 연결
CN110418300A (zh) * 2013-07-08 2019-11-05 康维达无线有限责任公司 将无imsi设备连接到epc
US10812461B2 (en) 2013-07-08 2020-10-20 Convida Wireless, Llc Connecting IMSI-less devices to the EPC
CN110418300B (zh) * 2013-07-08 2021-08-03 康维达无线有限责任公司 将无imsi设备连接到epc
US11973746B2 (en) 2013-07-08 2024-04-30 Interdigital Patent Holdings, Inc. Connecting IMSI-less devices to the EPC
CN103826224A (zh) * 2014-01-29 2014-05-28 大唐移动通信设备有限公司 一种实现用户接入控制的方法和装置
CN103826224B (zh) * 2014-01-29 2017-11-14 大唐移动通信设备有限公司 一种实现用户接入控制的方法和装置

Also Published As

Publication number Publication date
CN102917356B (zh) 2015-08-19
US20140146806A1 (en) 2014-05-29
US9503881B2 (en) 2016-11-22
CN102917356A (zh) 2013-02-06

Similar Documents

Publication Publication Date Title
WO2013017098A1 (zh) 将用户设备接入演进的分组核心网络的方法、设备和系统
US20210250767A1 (en) Systems and methods for accessing a network
US9717019B2 (en) Data flow control method, and related device and communications system
JP5793812B2 (ja) データオフロードをトリガするための方法、ネットワーク側デバイス、ユーザ機器、およびネットワークシステム
WO2014056445A1 (zh) 一种路由转发的方法、系统及控制器
WO2013016968A1 (zh) 一种接入方法、系统及移动智能接入点
US20130094487A1 (en) Method and System for Information Transmission
WO2011015140A1 (zh) 一种移动通信寻呼方法、系统及装置
WO2015196396A1 (zh) 建立网络连接的方法、网关及终端
WO2013131487A1 (zh) 融合的核心网及其接入方法
WO2011015001A1 (zh) 通过无线局域网接入网络实现接入的方法及系统
WO2016180113A1 (zh) WiFi语音业务发起的方法、LTE通信设备、终端及通信系统
WO2014071685A1 (zh) 基于移动网络的租户网络业务实现方法、系统及网元
WO2014000520A1 (zh) 一种策略控制的方法、装置和系统
WO2012130133A1 (zh) 一种接入点及终端接入方法
WO2013174190A1 (zh) 路由选择方法及功能网元
WO2013016967A1 (zh) 一种接入方法、系统及移动智能接入点
WO2012142889A1 (zh) 一种网关的选择方法、实现设备及系统
WO2012068946A1 (zh) 查询网关的方法及系统
WO2010139285A1 (zh) 一种信息同步方法及通讯系统以及相关设备
WO2012142880A1 (zh) 一种选择网关的方法及系统
WO2012071701A1 (zh) 非3gpp接入网关的选择方法、网络设备及用户设备
WO2011134102A1 (zh) 关联会话的方法、装置及系统
WO2009097779A1 (zh) 一种接入sae核心网的方法、系统及装置
CN103188667B (zh) 无线局域网接入方法、网关及网络融合系统

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 12819822

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE

122 Ep: pct application non-entry in european phase

Ref document number: 12819822

Country of ref document: EP

Kind code of ref document: A1