WO2013071817A1

WO2013071817A1 - Policy server address acquisition method

Info

Publication number: WO2013071817A1
Application number: PCT/CN2012/083725
Authority: WO
Inventors: 严为; 黄翔; 魏元
Original assignee: 中兴通讯股份有限公司
Priority date: 2011-11-17
Filing date: 2012-10-30
Publication date: 2013-05-23
Also published as: CN103117927B; CN103117927A

Abstract

A policy server address acquisition method, comprising: during the mobile node authentication process, an access service router acquires from an authentication, authorization and accounting (AAA) server the address attribute of a policy server providing the stream routing policy for the mobile node. By acquiring the policy server address of the mobile node from the AAA server during the authentication or registration process, an embodiment of the present invention enables an ASR or an ILR to acquire the stream routing policy of the mobile node from the policy server according to the policy server address of the mobile node before selecting a proper stream router for the service initiated by a correspondent node according to the stream routing policy of a multi-interface mobile node.

Description

Method for obtaining address of policy server

Technical field

The present invention relates to the field of mobile communications, and in particular, to a method for obtaining an address of a policy server. Background technique

The IP address in TCP/IP (Transmission Control Protocol/Internet Protocol) widely used in the Internet has a dual function, which is used as the location identifier of the communication terminal host network interface of the network layer in the network topology. And as the identity of the transport layer host network interface. However, when host mobility is becoming more common, the semantic overload defects of such IP addresses are becoming increasingly apparent. When the IP address of the host changes, not only the route changes, but also the identity of the communication terminal host changes. This will cause the routing load to become heavier and heavy, and the change of the host ID will also cause the application and connection to be interrupted. The purpose of identification and location separation is to solve the problem of semantic overload and severe routing load of IP addresses, and to separate the dual functions of IP addresses to achieve dynamic redistribution of mobility, multiple townships, IP addresses, and mitigation of routes. Support for issues such as load and mutual visits between different network areas in the next generation Internet.

Figure 1 shows a communication network architecture with identity and location separation. In this communication network architecture, an AID (Access Identifier) is configured as a terminal MN (Mobile Node) and a CN (Correspondent Node, pair The identity of the end node. The RID (Router Identifier) is used as the location identifier. The Access Service Router (ASR) is used as the access router and the RID (Router Identifier) is used as the location identifier. All terminals are registered, authenticated, and access the network through the ASR. When the terminal accesses or leaves the ASR, the ASR needs to report to the ILR (Identifier & Location Register). According to the ASR report, the ILR saves and maintains the mapping relationship between the terminal identity AID and the location RID (AID, RID) and provides a response to the query mapping relationship.

The text is forwarded in the identity and location network as shown in Figure 2. When the MN communicates with the CN, after the MN sends a message to the CN to reach the ASR1, the ASR1 queries whether the current RID of the CN exists on the local mapping record of the ASR1 according to the destination address of the packet (that is, the AID of the CN). If yes, ASR1 encapsulates and forwards the packet according to the RID of the queried CN.

If it does not exist, ASR1 queries the ILR for the current RID of the CN. ASR1 obtains the RID of the CN from the ILR, and then encapsulates the packet with the RID of the ASR1 and the CN, and then forwards the encapsulated packet to the ASR2 corresponding to the RID of the CN. ASR2 decapsulates the received packet and forwards it to the CN.

In the packet forwarding process, the encapsulation format of the packet is divided into two types: the original packet and the RID encapsulated packet. The original packet is forwarded: The access layer of the network is separated from the identity and location, that is, the AID is used between the Host and the ASR. The packet is forwarded as the source address and the destination address. The format of the packet is shown in Figure 3.

RID-encapsulated packet forwarding: The core layer of the identity and location separation network, that is, the packet forwarding between the ASR and the ASR after RID encapsulation, the packet is shown in Figure 4.

At present, since the terminal can have multiple connections at the same time, the mapping relationship between the terminal AID and the RID becomes complicated. For example, in Figure 5, the MN accesses the identification network through two different interfaces, ifl ( interface 1 ) and if2 ( interface2 ), where ifl is connected to ASR1 and if2 is connected to ASR2. Thus ifl and if2 will use different location identifiers, ifl is assigned RID1 of ASR1, and if2 is assigned RID2 of ASR2. In Figure 6, the MN also accesses the identification network through two different interfaces, ifl and if2, but ifl and if2 access the same ASR, so they are assigned the same RID, that is, RID1 of ASR1.

In a single access technology scenario, the mapping relationship (AID, RID) maintained by the ILR can perform routing tasks well. However, in the multiple access technology scenario, as described above, multiple interfaces on the MN will use the same AID. At this time, the mapping relationship (AID, RID) maintained by the ILR cannot distinguish different interfaces from the same MN. Therefore, in the multi-access technology scenario, the ILR not only needs to maintain (AID, RID), but also includes each interface of the MN. Enter the technology type to distinguish different interfaces belonging to the same MN. The mapping relationship on the extended ILR is (AID, RID, IF), and the ASR completes the registration of different interface access types on the MN in the ILR.

In the multi-access technology scenario, the extended ILR mapping relationship (AID, RID, IF) distinguishes different interfaces belonging to the same MN, but routing through (AID, RID, IF) has the following problems: Figure 5 shows the multi-interface MN Different interfaces access different ASRs. The MN has two mapping relationships on the ILR: (AID 1 , RID 1 , IF 1 )^(AID 1 , RID2, IF2). When the CN initiates communication to the MN, how does ASR3 choose the correct mapping relationship to route the message to which interface. Figure 6 shows that different interfaces of the multi-interface MN access the same ASR, and the MN has two mapping relationships on the ILR (AID 1, RID 1, IF 1 ^o (AID 1 , RID 1 , IF2). When the message is sent to the MN, the ASR1 receives the packet from the CN, and the ASR1 selects the interface of the MN to forward the packet.

Therefore, when the peer node sends data to the multi-interface terminal, the peer ASR or the terminal ASR or

The ILR needs to select an appropriate terminal location identifier and interface for the service initiated by the peer node according to the flow routing policy of the multi-interface terminal, so as to perform normal packet forwarding routing to reduce data transmission anomalies and provide data transmission. Effective protection. Before ASR or ILR selects the appropriate terminal location identifier and interface for the service initiated by the peer node according to the flow routing policy information of the multi-interface terminal, the ASR or ILR must know the address of the policy server where the terminal is located, and download from the policy server. Corresponds to the flow routing policy of this terminal.

Summary of the invention

The technical problem to be solved by the present invention is to provide a method for obtaining an address of a policy server. When a flow routing policy of a mobile node is required, the flow routing policy can be obtained according to the address of the policy server.

To solve the above technical problem, a method for obtaining an address of a policy server according to the present invention includes:

The access service router obtains, from the authentication, authorization, and accounting (AAA) server, an address attribute of a policy server that provides a flow routing policy for the mobile node in the process of authenticating the mobile node.

A method for obtaining an address of a policy server, including:

After the mobile node passes the authentication, the access service router sends a registration request to the identity and location registration register, and the registration request carries a policy server address request option, requesting the address attribute of the policy server that provides the flow routing policy for the mobile node;

After receiving the registration request, the identity and location registration register obtains an address attribute of the policy server from an authentication, authorization, and accounting (AAA) server according to the policy server address request option, and the obtained policy server is obtained. The address attribute is sent to the access service router.

A method for obtaining a flow routing policy includes: The policy server sends a flow routing policy of the mobile node to the network element when the network element requests the flow routing policy of the mobile node, and adds the identifier of the network element to the policy request object list, where the policy is The request object list is used to record correspondence information between the identifier of the network element requesting the flow routing policy of the mobile node and the identifier of the mobile node;

When the flow routing policy of the mobile node changes, the policy server pushes the updated flow routing policy to the network element according to the identifier of the network element of the flow routing policy of the requesting mobile node recorded in the policy request object list.

An access service router includes: an authentication unit, where:

The authentication unit is configured to: obtain, in an authentication process for the mobile node, an address attribute of a policy server that provides a flow routing policy for the mobile node from an authentication, authorization, and accounting (AAA) server.

An identity and location registration register includes: a message receiving unit and a policy request unit, wherein:

The message receiving unit is configured to: receive a registration request;

The policy requesting unit is configured to: after receiving the registration request, request a flow routing policy of the mobile node from the policy server according to the address attribute of the policy server carried in the registration request.

A policy server includes: a policy sending unit and a policy request object list maintaining unit, where:

The policy sending unit is configured to: send a flow routing policy of the mobile node to the network element that requests the flow routing policy;

The policy request object list maintenance unit is configured to: add an identifier of the network element of the request flow routing policy to the policy request object list, where the policy request object list is used to record a flow routing policy of the requesting mobile node The correspondence relationship between the identifier of the network element and the identifier of the mobile node.

An authentication, authorization, and accounting (AAA) server includes: a message receiving unit, an address finding unit, and an information sending unit, where:

The message receiving unit is configured to: receive an AAA request message;

The address searching unit is configured to: carry the request policy service in the AAA request message When the attribute-value pair (AVP) of the address of the server is used, the address attribute of the corresponding policy server is searched according to the identifier of the mobile node; or, after receiving the AAA request message, the corresponding policy is directly searched according to the identifier of the mobile node. The address attribute of the server;

The information sending unit is configured to: return an address attribute of the policy server found by the address searching unit to the access service router.

An access service router includes: a registration unit, where:

The registration unit is configured to: after the mobile node passes the authentication, send a registration request to the identity and location registration register, where the registration request carries a policy server address request option, requesting the address of the policy server that provides the flow routing policy for the mobile node Attributes.

An identity and location registration register includes: a message receiving unit and an address obtaining unit, wherein:

The message receiving unit is configured to: receive a registration request;

The address obtaining unit is configured to: obtain an address attribute of the policy server from an authentication, authorization, and accounting (AAA) server according to a policy server address request option carried in the registration request, and obtain the obtained policy server The address attribute is sent to the access service router.

The message receiving unit is configured to: receive an AAA request message;

The address searching unit is configured to: when the AAA request message carries an option for requesting a policy server address, search for an address attribute of the corresponding policy server according to the identifier of the mobile node; and the information sending unit is set to: The address attribute of the policy server is returned to the identity and location registration registers.

A policy server includes: a policy sending unit, a policy request object list maintaining unit, and a flow routing policy pushing unit, where:

The policy sending unit is configured to: when the network element requests the flow routing policy of the mobile node, send the flow routing policy of the mobile node to the network element;

The slightly requested object list maintenance unit is set to: add a place in the policy request object list An identifier of the network element, where the policy request object list is used to record correspondence information between the identifier of the network element requesting the flow routing policy of the mobile node and the identifier of the mobile node;

The flow routing policy pushing unit is configured to: when the flow routing policy of the mobile node changes, according to the identifier of the network element of the flow routing policy of the requesting mobile node recorded in the policy request object list, the updated flow route is The policy is pushed to the network element.

In summary, the embodiment of the present invention obtains the address of the policy server of the mobile node from the AAA server during the authentication or registration process, so that the ASR or the ILR initiates the flow routing policy of the mobile node according to the multi-interface as the opposite node. Before selecting a suitable flow route, the service can obtain a flow routing policy of the mobile node from the policy server according to the address of the policy server of the mobile node. BRIEF abstract

1 is a schematic diagram of a communication network architecture in which identity and location are separated;

2 is a schematic diagram of a forwarding process of a message in an identity and location separation network;

Figure 3 is a schematic diagram of the original AID message;

Figure 4 is a schematic diagram of a RID encapsulated message;

FIG. 5 is a schematic diagram of connecting different interfaces of a multi-interface MN to different ASRs;

6 is a schematic diagram of a multi-interface MN connecting different interfaces to the same ASR;

7 is a schematic diagram of a communication network connection in an embodiment of the present invention;

8 is a flowchart of Embodiment 1 of an ASR/ILR acquisition policy server address in the present invention; FIG. 9 is a flowchart of Embodiment 2 of an ASR/ILR acquisition policy server address in the present invention; FIG. 10 is a strategy in the present invention. FIG. 11 is a flowchart of a policy server binding deregistration embodiment 4 in the present invention; FIG. 11 is a flowchart of a policy server binding deregistration embodiment 4 in the present invention;

12 is a structural diagram of an access service router in an embodiment of the present invention;

Figure 13 is a block diagram of an identity and location registration register in an embodiment of the present invention;

14 is a structural diagram of a policy server in an embodiment of the present invention;

Figure 15 is a block diagram of an AAA server in accordance with an embodiment of the present invention. Preferred embodiment of the invention

The present embodiment proposes a method for the ASR and the ILR to discover the policy server address corresponding to the terminal in the identity identification and location separation network. Based on this address, the ASR and the ILR obtain a flow routing policy from the policy server, and select the most suitable route for the traffic flow sent to the multi-interface terminal.

In order to more clearly describe the contents of the present embodiment, the following description is made:

(1) CN is the communication peer node of the MN, and there may be multiple CNs.

(2) MNJF1 refers to interface 1 of the current MN.

(3) MNJF2 refers to interface 2 of the current MN.

(4) Flow X refers to the data stream X initiated by the CN to the MN.

(5) In the present embodiment, the meaning of multiple access means that the MN is a terminal having multiple communication systems (such as 3G, LTE, WLAN, etc.), and the MN can simultaneously attach to the interface through different communication systems. The internet.

(6) In this embodiment, the flow routing policy may be classified into a static flow routing policy and a dynamic flow routing policy. The static flow routing policy includes a selection policy according to flow attributes (such as address, port number, and quintuple), a selection policy according to APN (Access Point Name), a selection policy according to busy hours, and a carrier according to the carrier. The policy selection strategy and the like; the dynamic flow routing policy includes a dynamic routing policy based on the terminal side and a dynamic routing policy based on the network side. The dynamic routing policy based on the terminal side includes the connection status of the terminal multi-interface and the willingness of the terminal user to select; the dynamic routing policy based on the network side includes the link and load status of the network. The flow routing policies are stored on the policy server, and the policy server is deployed in the identity network.

The method for obtaining an address of a policy server in this embodiment includes:

Obtain the address of the mobile node's policy server from the Authentication, Authorization, and Accounting (AAA) server during the authentication or registration process, including the following two implementations:

(1) The ASR obtains the address of the MN's policy server from the AAA server during the access authentication process of the MN. The ILR obtains the address of the MN's Policy Server during the ASR registration process for the MN.

(2) The ILR obtains the address of the MN's policy server from the AAA server. ASR is for MN The address of the MN's Policy Server is obtained from the ILR during the registration process.

In addition, the policy server actively pushes the updated flow routing policy when the flow routing policy of the MN changes.

When the MN leaves the ASR/ILR, the ASR/ILR logs out the ASR/ILR record in the policy request object list bound to the MN on the policy server to the policy server.

The technical solutions of the present invention are further described in detail below with reference to the accompanying drawings and specific embodiments to enable those skilled in the art to understand the invention. . The method of the present embodiment will be described below based on the communication network shown in FIG. 7 in conjunction with the following embodiments.

Example 1

8 is a flow of Embodiment 1 of an ASR/ILR acquisition policy server address, including: Step 801: A multi-interface MN includes two interfaces IF1 and IF2, when the MN connects to the network through one of the interfaces, such as the interface IF1 through ASR1. During the connection process of IF1, ASR1 obtains the address of the policy server serving the MN through the AAA server during the authentication process;

Method 1: When ASR1 initiates a request to the AAA server, if ASR1 does not store the information of the address of the MN's policy server, it carries the AVP (Attribute-Value-Pairs, attribute of the address of the requesting policy server) in the AAA request message. -value pair). After receiving the AAA request, the AAA server searches for the MN ID (identity). The AAA response message carries the address attribute of the MN's policy server. (This attribute can be an address or a domain name. If the domain name is used, ASR1 needs to pass the DNS. (Domain name system) query process, get the address of the policy server) to ASR1.

In the second method, the ASR1 sends an AAA request to the AAA server. After receiving the AAA request, the AAA server actively carries the address attribute (described in the above) of the MN's policy server to the ASR1, and informs the MN of the MN. Policy server address.

The AVP requesting the policy server address described in the above method can be implemented by extending the new attributes of the AAA protocol (such as radius, diameter).

Step 802, after the MN passes the authentication, the ASR1 initiates a registration request to the ILR, and registers the MN. The identity and location identifier, and the option to carry the address of the policy server in the registration request. Step 803: The ILR receives the registration request from the ASR1, and obtains the address or domain name of the MN's policy server according to the option of the address of the policy server in the registration request. If the domain name is used, the ILR needs to obtain the policy server through the DNS query process. address.

Step 804: The ILR requests a flow routing policy of the MN from the policy server according to the obtained address of the policy server.

After receiving the request, the policy server sends the MN's flow routing policy to the ILR, and creates and maintains the MN's policy request object list, for example: (MN_ID, ILR_ID, ASR1 ID). Step 804 and step 805 have no order.

Step 805: The ASR1 requests the MN's flow routing policy from the policy server according to the obtained policy server address.

After receiving the request, the policy server sends the MN's flow routing policy to ASR1, and creates and maintains a list of MN's policy request objects, such as: (MN_ID, ILR_ID, ASR1 ID). Step 805 and step 804 have no order.

Example 2:

Figure 9 is a second embodiment of the ASR/ILR acquisition policy server address. Specifically, the method includes the following steps: Step 901: MN_IF1 is connected to the network through ASR1.

Step 902: After the MN passes the authentication, the ASR1 initiates a registration request to the ILR, registers the identity and location identifier of the MN, and carries the policy server address request option in the registration request.

Step 903: When the ILR finds that the ASR1 registration request carries the policy server address request option, the ILR will interact with the AAA server (the interaction process is used to authorize the MN's mobility service or the ability to authenticate the ILR, etc.) to the AAA server. Send an AAA request with the option to request a policy server address.

Step 904: After receiving the AAA request from the ILR, the AAA server carries the address attribute of the policy server in the response message according to the option of requesting the policy server address (the attribute may be an address or a domain name. The ILR needs to obtain the address of the policy server through the DNS query) to the ILR.

Step 905: Upon receiving the AAA of the address attribute of the carrying policy service from the AAA server After responding to the message, the ILR obtains the address attribute of the policy server from the response message and generates and maintains the mapping relationship (AID, RID1, IF1) for the MN. The ILR sends a registration confirmation message to ASR1, and the confirmation message carries the policy server address attribute.

Step 906: The ASR1 obtains the address attribute of the MN's policy server from the received registration confirmation message (the attribute may be an address or a domain name. If the domain name is used, the ASR1 needs to obtain the address of the policy server through the DNS query).

Step 907: The ILR requests a flow routing policy of the MN from the policy server according to the obtained address attribute of the policy server.

After receiving the request, the policy server sends the MN's flow routing policy to the ILR, and creates and maintains a list of MN's policy request objects, such as: (MN_ID, ILR_ID, ASR1-ID). Step 907 and step 905, step 906, and step 908 have no order.

Step 908: The ASR1 requests the MN's flow routing policy from the policy server according to the obtained address attribute of the policy server.

After receiving the request, the policy server sends the MN's flow routing policy to ASR1, and creates and maintains a list of MN's policy request objects, such as: (MN_ID, ILR_ID, ASR1-ID). Step 908 and step 907 have no order.

Example 3:

Figure 10 is an embodiment of a flow routing policy update. Specifically, the following steps are included:

Step 1001: When the flow routing policy of the MN on the policy server changes due to the change of the terminal, the network element entity, the user, or the operator policy, the policy server will request the object list according to the policy of the MN maintained by the policy server, and The element actively pushes the changed flow routing policy.

For example, the policy server has a list of policy request objects (MN_ID, ILR_ID, ASR1-ID, ASR2 ID) bound to the ID of the MN, where the ILR_ID, ASR1-ID can be the address information of the ILR and the ASR1, ASR2—The ID can be the address information of the CN-ASR. The policy server will actively push the updated MN flow routing policy to ILR, ASR1, and ASR2.

Step 1002: The policy server actively pushes the updated MN flow routing policy to the ASR1. Step 1002 and step 1004, step 1006 have no precedence.

Step 1003: After receiving the MN flow routing policy pushed by the policy server, the ASR1 is connected to the ASR1. The existing MN flow routing policy is updated, and a flow route push confirmation message is sent to the policy server. In step 1004, the policy server actively pushes the flow routing policy of the updated MN to the ILR. Step 1004 and step 1002, step 1006 have no order.

Step 1005: After receiving the MN flow routing policy pushed by the policy server, the ILR updates the existing MN flow routing policy of the ILR, and sends a flow route push confirmation message to the policy server.

Step 1006: The policy server pushes the updated MN flow routing policy to the ASR3. Step 1006 and step 1002, step 1004 have no order.

Step 1007: After receiving the CN flow routing policy pushed by the policy server, the ASR2 updates the existing CN flow routing policy of the ASR2, and sends a flow route push confirmation message to the policy server.

Example 4:

Figure 11 is a deregistration embodiment of a list of policy request objects for a MN on a policy server. Specifically, it includes the following steps:

Step 1101: After ASR1 learns that the MN leaves, ASR1 initiates a request to cancel the mapping relationship to the ILR.

For example: Logout of the mapping relationship (AID, RID1, IF1) maintained by the ILR.

Step 1102: The ILR deletes the mapping relationship for requesting cancellation, and sends a logout confirmation message to ASR1.

Step 1103: ASR1 initiates a request to the policy server to cancel the ASR1-ID in the MN's policy request object list.

For example, the policy server has a list of policy request objects (MN IDs) bound to the MN's ID.

ILR ID, ASR1 ID), which records the identification information of the network element related to the flow routing policy of the requesting MN, and ASR1 requests to delete the information related to itself in the list. Step 803, there is no order between steps 804 and 802.

Step 1104: After receiving the logout request, the policy server cancels the record related to ASR1 in the list of policy request objects of the MN.

For example, the policy request object list contains ASR1 address information, ASR2 address information, etc. When the policy server receives the ASR1 logout request, it will log out the address information of ASR1. Step 1105: After the logout of the policy request object list related to ASR1 is cancelled, the policy server sends a logout confirmation message to ASR1.

Step 1106: After the ILR learns that the MN leaves the ILR, the ILR initiates a request to the policy server to cancel the ILR_ID in the MN's policy request object list.

For example: After the MN is shut down or the mobile is registered to another ILR, the original ASRs have been logged out to the original ILR.

The mapping relationship between the MN and the original ILR does not receive the registration request of the MN sent by the new ASR within a certain lifetime, the ILR can consider that the MN has left the ILR at this time. The ILR then initiates an ILR_ID request to the policy server to unregister the list of policy request objects bound to the MN's ID.

Step 1107: After the policy server receives the ILR-ID request in the policy request object list bounded by the MN ID, the policy server logs off the ILR-related record in the MN policy request object list.

For example: The policy request object list contains ILR1 address information, ILR2 address information, etc. After the policy server receives the ILR1 request to log out the ILR1 record, the policy server logs out the address information of ILR1. Step 1107, there is no order between steps 1106 and 1102.

Step 1108, after canceling the ILR related policy request object list record, the policy server

The ILR sends a logout confirmation message.

As shown in FIG. 12, an embodiment of the present invention provides an access service router, including: an authentication unit, a registration unit, a policy request unit, and an identifier deregistration unit, where:

An authentication unit, configured to obtain, from an authentication, authorization, and accounting (AAA) server, an address attribute of a policy server that provides a flow routing policy for the mobile node in the process of authenticating the mobile node.

The authentication unit is configured to carry an attribute-value pair (AVP) of the address of the request policy server in the AAA request message sent to the AAA server; or directly send an AAA request message that does not carry the AVP, and request the policy server from the AAA server. Address attribute.

The registration unit is configured to send a registration request to the identity and location registration register after the mobile node passes the authentication, and carry the address attribute of the policy server in the registration request.

The policy requesting unit is configured to request, from the policy server, a flow routing policy of the mobile node according to the address attribute of the policy server after obtaining the address attribute of the policy server.

Identifying the logout unit, for requesting to logout to the policy server when the mobile node is notified to leave The identity of the access service router in the policy request object list.

As shown in FIG. 13, the embodiment provides an identity and location registration register, including: a message receiving unit, a policy requesting unit, and an identifier deregistration unit, where:

a message receiving unit, configured to receive a registration request;

The policy requesting unit is configured to request, after receiving the registration request, the flow routing policy of the mobile node from the policy server according to the address attribute of the policy server carried in the registration request.

And an identifier deregistration unit, configured to request, from the policy server, to log off the identity of the identity and location registration register in the policy request object list when the mobile node is informed to leave the identity and location registration register.

As shown in FIG. 14, the embodiment provides a policy server, including: a policy sending unit and a policy request object list maintaining unit, where:

a policy sending unit, configured to send a flow routing policy of the mobile node to the network element that requests the flow routing policy;

The policy request object list maintenance unit is configured to add, in the policy request object list, an identifier of the network element that requests the flow routing policy, where the policy request object list is used to record the identifier of the network element requesting the mobile node's flow routing policy and the mobile node Correspondence information of the identity.

The policy request object list maintenance unit is further configured to: after receiving the logout request of the network element, cancel the identifier of the network element in the policy request object list.

As shown in FIG. 15, the embodiment provides an AAA server, including: a message receiving unit, an address searching unit, and an information sending unit, where:

a message receiving unit, configured to receive an AAA request message;

An address search unit, configured to: when the AAA request message carries an attribute-value pair (AVP) of the address of the request policy server, search for an address attribute of the corresponding policy server according to the identifier of the mobile node; or, after receiving the AAA request message, Finding the address attribute of the corresponding policy server directly according to the identifier of the mobile node;

The information sending unit is configured to return an address attribute of the policy server found by the address searching unit to the access service router. Another access service router provided by the embodiment of the present invention includes: a registration unit, where: a registration unit is configured to send a registration request to the identity and location registration register after the mobile node passes the authentication, and carry the policy in the registration request. Server address request option, requesting the address attribute of the policy server that provides the flow routing policy for the mobile node.

Another identity and location registration register provided by this embodiment includes: a message receiving unit and an address obtaining unit, where:

a message receiving unit, configured to receive a registration request;

The address obtaining unit is configured to obtain an address attribute of the policy server from an authentication, authorization, and accounting (AAA) server according to the policy server address request option carried in the registration request, and send the obtained address attribute of the policy server to the address Into the service router.

The address obtaining unit is specifically configured to send an AAA request message to the AAA server, where the AAA request message carries an option to request a policy server address.

Another AAA server provided in this embodiment includes: a message receiving unit, an address searching unit, and an information sending unit, where:

a message receiving unit, configured to receive an AAA request message;

An address searching unit, configured to: when the AAA request message carries an option of requesting a policy server address, search for an address attribute of the corresponding policy server according to the identifier of the mobile node;

The information sending unit is configured to return the address attribute of the found policy server to the identity and location registration register.

Another policy server provided by this embodiment includes: a policy sending unit, a policy request object list maintaining unit, and a flow routing policy pushing unit, where:

a policy sending unit, configured to send a flow routing policy of the mobile node to the network element when the network element requests the flow routing policy of the mobile node;

The request object list maintenance unit is configured to add an identifier of the network element in the policy request object list, where the policy request object list is used to record the correspondence between the identifier of the network element requesting the flow routing policy of the mobile node and the identifier of the mobile node Information

a flow routing policy pushing unit, configured to change when a flow routing policy of the mobile node changes The identifier of the network element of the flow routing policy of the requesting mobile node recorded in the policy request object list, and the updated flow routing policy is pushed to the network element.

The above description is only the preferred embodiment of the present invention, and is not intended to limit the present invention, and various modifications and changes can be made to the present invention. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and scope of the present invention are intended to be included within the scope of the present invention.

Industrial Applicability The embodiment of the present invention obtains the address of the policy server of the mobile node from the AAA server during the authentication or registration process, so that the ASR or the ILR selects the service initiated by the peer node according to the flow routing policy of the mobile node according to the multi-interface. Before the appropriate flow routing, the flow routing policy of the mobile node can be obtained from the policy server according to the address of the mobile node's policy server.

Claims

Claim

1. A method for obtaining an address of a policy server, comprising:

The access service router authenticates, authorizes, and charges during the process of authenticating the mobile node.

The (AAA) server obtains an address attribute of a policy server that provides a flow routing policy for the mobile node.

2. The method according to claim 1, wherein the obtaining, by the AAA server, an address attribute of a policy server that provides a flow routing policy for the mobile node, includes:

The access service router carries an attribute-value pair (AVP) requesting an address of the policy server in an AAA request message sent to the AAA server;

After receiving the AAA request message, when the AAA request message carries the AVP, the AAA server searches for the address attribute of the corresponding policy server according to the identifier of the mobile node, and returns the address attribute of the found policy server. Give the access service router.

3. The method according to claim 1, wherein the step of obtaining, from the AAA server, an address attribute of a policy server that provides a flow routing policy for the mobile node, includes:

The access service router sends an AAA request message to the AAA server;

After receiving the AAA request message, the AAA server searches for the address attribute of the corresponding policy server according to the identifier of the mobile node, and returns the address attribute of the found policy server to the access service router.

4. The method of claim 1, further comprising:

After the mobile node passes the authentication, the access service router sends a registration request to the identity and location registration register, where the registration request carries the address attribute of the policy server;

After receiving the registration request, the identity and location registration register requests a flow routing policy of the mobile node from a policy server according to an address attribute of the policy server;

Transmitting, by the policy server, the flow routing policy of the mobile node to the identity and location registration register, and adding an identifier of the identity and location registration register to the policy request object list, where the policy request object list is used by Corresponding relationship information between the identifier of the network element requesting the flow routing policy of the mobile node and the identifier of the mobile node is recorded.

5. The method of claim 4, further comprising:

The identity and location registration register, upon learning that the mobile node leaves the identity and location registration register, requests the policy server to deregister the identity of the identity and location registration register in the policy request object list;

The policy server deregisters the identity of the identity and location registration register in the policy request object list in accordance with the request of the identity and location registration register.

6. The method of claim 1, further comprising:

After obtaining the address attribute of the policy server, the access service router requests a flow routing policy of the mobile node from the policy server according to the address attribute of the policy server; the policy server uses the mobile node's The flow routing policy is sent to the access service router, and the identifier of the access service router is added to the policy request object list, where the policy request object list is used to record the network element of the flow routing policy requesting the mobile node. Correspondence information of the identity of the mobile node and the identity of the mobile node.

7. The method according to claim 6, further comprising:

When the access service router learns that the mobile node is away, requests the policy server to log off the identifier of the access service router in the policy request object list;

And the policy server deregisters the identifier of the access service router in the policy request object list according to the request of the access service router.

8. A method for obtaining an address of a policy server, wherein:

9. The method of claim 8, wherein the obtaining the policy from an AAA server The address attribute of the server, including:

The identity and location registration register sends an AAA request message to the AAA server, where the AAA request message carries an option to request a policy server address;

After receiving the AAA request message, when the AAA request message carries the option of requesting a policy server address, the AAA server searches for an address attribute of the corresponding policy server according to the identifier of the mobile node, and the searched policy is found. The address attribute of the server is returned to the identity and location registration register.

10. The method of claim 8, further comprising:

After receiving the address attribute of the policy server from the identity and location registration register, the access service router requests a flow routing policy of the mobile node from the policy server according to the address attribute of the policy server;

The policy server sends a flow routing policy of the mobile node to the access service router, and adds an identifier of the access service router to the policy request object list, where the policy request object list is used for recording Corresponding relationship information between the identifier of the network element of the flow routing policy of the mobile node and the identifier of the mobile node.

11. The method of claim 10, further comprising:

12. The method of claim 8, further comprising:

After obtaining the address attribute of the policy server, the identity and location registration register requests a flow routing policy of the mobile node from the policy server according to the address attribute of the policy server;

Transmitting, by the policy server, the flow routing policy of the mobile node to the identity and location registration register, and adding an identifier of the identity and location registration register to the policy request object list, where the policy request object list is used by For recording the network element of the flow routing policy requesting the mobile node Correspondence information identifying the identity of the mobile node.

13. The method of claim 12, further comprising:

14. A method for obtaining a flow routing policy, comprising:

The policy server sends a flow routing policy of the mobile node to the network element when the network element requests the flow routing policy of the mobile node, and adds the identifier of the network element to the policy request object list, where the policy is The request object list is used to record correspondence information between the identifier of the network element requesting the flow routing policy of the mobile node and the identifier of the mobile node;

15. An access service router, comprising: an authentication unit, wherein:

16. The access service router of claim 15, wherein:

The authentication unit is configured to: carry an attribute-value pair (AVP) requesting an address of the policy server in an AAA request message sent to the AAA server; or directly send an AAA request that does not carry the AVP The message requests the address attribute of the policy server from the AAA server.

17. The access service router of claim 15, further comprising a registration unit, wherein: The registration unit is configured to: after the mobile node passes the authentication, send a registration request to the identity and location registration register, where the registration request carries an address attribute of the policy server.

18. The access service router of claim 15, further comprising a policy request unit, wherein:

The policy requesting unit is configured to: after obtaining the address attribute of the policy server, request a flow routing policy of the mobile node from the policy server according to the address attribute of the policy server.

19. The access service router of claim 15, further comprising an identification logout unit, wherein:

The identifier deregistration unit is configured to: upon learning that the mobile node is away, request the policy server to log off the identity of the access service router in the policy request object list.

20. An identity and location registration register, comprising: a message receiving unit and a policy requesting unit, wherein:

The message receiving unit is configured to: receive a registration request;

21. The identity and location registration register of claim 20, further comprising an identification logout unit, wherein:

The identification logout unit is configured to: upon learning that the mobile node leaves the identity and location registration register, request the policy server to log out of the identity of the identity and location registration register in the policy request object list.

22. A policy server, comprising: a policy sending unit and a policy request object list maintenance unit, wherein:

The policy sending unit is configured to: send a flow routing policy of the mobile node to the network element that requests the flow routing policy; The policy request object list maintenance unit is configured to: add an identifier of the network element of the request flow routing policy to the policy request object list, where the policy request object list is used to record a flow routing policy of the requesting mobile node The correspondence relationship between the identifier of the network element and the identifier of the mobile node.

23. The policy server of claim 22, wherein:

An authentication, authorization, and accounting (AAA) server, comprising: a message receiving unit, an address searching unit, and an information sending unit, wherein: the message receiving unit is configured to: receive an AAA request message;

The address search unit is configured to: when the AAA request message carries an attribute-value pair (AVP) of the address of the request policy server, search for an address attribute of the corresponding policy server according to the identifier of the mobile node; or, receive After the AAA request message is sent, the address attribute of the corresponding policy server is directly searched according to the identifier of the mobile node;

25. An access service router, comprising: a registration unit, wherein:

26. An identity and location registration register, comprising: a message receiving unit and an address obtaining unit, wherein:

The message receiving unit is configured to: receive a registration request;

27. The identity and location registration register of claim 26, wherein: The address obtaining unit is configured to: send an AAA request message to the AAA server, where the AAA request message carries an option to request a policy server address.

29. A policy server, comprising: a policy sending unit, a policy request object list maintenance unit, and a flow routing policy pushing unit, where:

The slightly requesting object list maintenance unit is configured to: add an identifier of the network element to the policy request object list, where the policy request object list is used to record the identifier of the network element requesting the flow routing policy of the mobile node Correspondence relationship information of the identity of the mobile node;