WO2013091410A1

WO2013091410A1 - Network access method, system and device

Info

Publication number: WO2013091410A1
Application number: PCT/CN2012/081568
Authority: WO
Inventors: 杨文宏
Original assignee: 华为数字技术（成都）有限公司
Priority date: 2011-12-19
Filing date: 2012-09-19
Publication date: 2013-06-27
Also published as: CN102497379B; CN102497379A

Abstract

A network access method, system and device are used for solving the problem that a policy and charging enforcement function (PCEF) in the prior art is incapable of reliably obtaining user information in time, therefore failing to effectively control and manage network flow of a user. The method comprises: a PCEF receiving, through a Gx interface between the PCEF and a network access device, a session setup request message sent by the network access device, the session setup request message being sent after the network access device receives a network access request message sent by a user; the PCEF acquiring user information by parsing the session setup request message, and storing the user information; requesting from a policy and charging rule function (PCRF) a policy corresponding to the user according to the user information, and saving the policy; and the PCEF managing and controlling the flow of the user according to the user information and the policy. The solution improves the reliability and timeliness of the user information obtained by the PCEF.

Description

The present invention claims the priority of a Chinese patent application filed on December 19, 2011 by the Chinese Patent Office, Application No. 201110425918.7, entitled "Network Access Method, System and Equipment", The entire contents are incorporated herein by reference. Technical field

The present invention relates to the field of computer and communication technologies, and in particular, to a network access method, a network access system, and a device. Background technique

Third Generation Partnership Project (3GPP, Third Generation Partnership Project) As the development of wireless networks is becoming more and more perfect, more and more operators use the 3GPP specifications to manage the network. The network element equipment related to carrier network management in the 3GPP specifications is as shown in FIG.

The gateway (GW, gateway) in Figure 1 serves as an access point for the user to access the network, and the Policy and Charging Enforcement Function (PCEF) is a functional module in the GW. The PCEF interacts with the Policy and Charging Rule Function (PCRF) through the Gx interface. The PCRF sends the policy corresponding to the user to the PCEF, including the traffic control policy, the charging policy, and the like, according to the subscription information of the user. The PCEF performs the policy that is sent by the PCRF, that is, controls the behavior of the user to use the network according to the policy delivered by the PCRF, for example, controls the traffic of the user according to the traffic control policy. The PCEF interacts with the Online Charging System (OCS) through the Gy interface. The OCS is used for credit check and the user's corresponding quota is issued to the PCEF. The PCEF accumulates the user's usage of the network according to the quota issued by the OCS, and controls the network access behavior of the user according to the quota corresponding to the user and the usage of the network by the user for each user.

Because the load of the GW itself accessing the service processing function is heavy, if the functions of the PCEF are also integrated into the same device, the performance of the GW device will be seriously affected. In addition to the network ring The complexity of the environment, for example, operators may operate multiple networks of WCDMA, CDMA2000, etc., and need to implement PCEF functions on multiple devices at the same time. In view of the above requirements, an external PCEF device (hereinafter referred to as PCEF) independent of the GW device has also emerged and gained popularity. After the above-mentioned adjusted network architecture diagram is as shown in FIG. 2, the PCEF is connected to the GW through the Gi interface, and is connected to the OCS through the Gy interface.

When networking with other accounting devices, the specific networking mode is shown in Figure 3. The GW is connected to the authentication authorization and accounting server (AAA Sever, Authentication, Authorization, and Accounting Sever). When the user requests to access the network, the GW authenticates the user. If the authentication succeeds, the user is allowed to access the network. The PCEF monitors the network traffic flowing through the GW, and obtains user information, such as a user identifier, through a Radius message copied by the GW or the AAA Sever.

The inventor has found that at least the following problems exist in the prior art: The PCEF obtains user information and relies on the deployment environment of the live network. In some scenarios, such as when the user does not need to be authenticated, the network is not configured. AAA Sever, the PCEF cannot obtain the copied Radius because the PCEF cannot obtain the user information in a reliable and timely manner, and thus cannot control and manage the network traffic of each user by using the corresponding policy of the user. Summary of the invention

The embodiment of the invention provides a network access method for solving the problem that the PCEF cannot obtain reliable and timely user information in the prior art, thereby effectively controlling and managing user network traffic.

Correspondingly, an embodiment of the present invention further provides a network access system, a PEEF device, and a network access device.

The technical solution provided by the embodiment of the present invention is as follows:

A network access method includes:

The policy and charging execution function entity PCEF receives a session establishment request message sent by the network access device by using a Gx interface with the network access device, where the session establishment request message is that the network access device receives the user initiated network. After the access request message is sent; The PCEF obtains the user information and saves the user information by parsing the session establishment request message, and requests the policy corresponding to the user from the policy and charging rule entity PCRF according to the user information, and saves the policy;

The PCEF manages and controls the traffic of the user according to the user information and policies.

A network access system, including a network access device, a PCEF, and a PCRF, where: a network access device, configured to send a session establishment request message to a PCEF through a Gx interface after receiving a network access request message initiated by a user;

a PCEF, configured to: retrieve the user information and save the user information by parsing the session establishment request message; forward the session establishment request message to the PCRF, receive a policy corresponding to the user returned by the PCRF, and save the policy, The management and control of the user's traffic according to the user information and policies.

A PCEF device, including:

The receiving unit is configured to receive, by using a Gx interface with the network access device, a session establishment request message sent by the network access device, where the session establishment request message is that the network access device receives the network access request initiated by the user. Sent after the news;

a first acquiring unit, configured to receive the session establishment request message by the parsing receiving unit, acquire user information, and save the user information;

a second acquiring unit, configured to request, according to the user information acquired by the first acquiring unit, a policy corresponding to the user to the PCRF, and save the policy, where the user is used according to the user information and policy Traffic is managed and controlled.

A network access device includes:

a first receiving unit, configured to receive a network access request message initiated by a user;

The first sending unit is configured to send, after the first receiving unit receives the network access request message, a session establishment request message to the PCEF through the Gx interface, where the session establishment request message carries user information.

When the user requests to access the network, the PCEF device obtains the user information from the session access request sent by the network access device, and then obtains the corresponding policy of the user, The user information and policies manage and control the traffic of the user. The PCEF ensures that the user information can be obtained in time by participating in the message exchange process of the user's network access process. Compared with the prior art PCEF relies on obtaining the user information from the Radius packet copied by the AAA Server, the reliability of obtaining the user information is improved. And timeliness. DRAWINGS

In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, a brief description of the drawings used in the embodiments or the prior art description will be briefly described below. Obviously, the drawings in the following description It is a certain embodiment of the present invention, and other drawings can be obtained from those skilled in the art without any creative work.

1 is a schematic diagram of a network management system in a 3GPP specification in the prior art;

2 is a schematic diagram of a network management system in an actual networking in the prior art;

3 is a schematic diagram of a network management system including a charging network element in the prior art;

4 is a schematic diagram of a networking solution according to an embodiment of the present invention;

FIG. 5 is a schematic flowchart of a network access solution according to an embodiment of the present invention;

FIG. 6 is a detailed flowchart of a network access method according to an embodiment of the present invention;

FIG. 7 is a flowchart of a flow control management method according to an embodiment of the present invention;

FIG. 8 is a schematic structural diagram of a PCEF device according to an embodiment of the present disclosure;

FIG. 9 is a schematic structural diagram of a network access device according to an embodiment of the present invention. detailed description

In the existing networking solution, in addition to the problem that the PCEF cannot control and manage the network traffic of each user because the user information cannot be obtained in a reliable and timely manner, the GW may allow the user to access the network. The PCEF manages and controls the network traffic of the user, which causes the user status on the GW to be the access network, and the user status in the PCEF is blocked, that is, the user status on the GW and the PCEF is inconsistent. For example, if the user traffic does not meet the user's corresponding policy, such as insufficient user quota, the PCEF blocks the user's traffic. Inconsistent In the case of the user, the user will start to charge, but cannot access the network resources, so the user perception is poor.

The main implementation principles, specific implementation manners, and the corresponding beneficial effects that can be achieved by the technical solutions of the embodiments of the present invention are described in detail below with reference to the accompanying drawings.

4 is a schematic diagram of a networking solution according to an embodiment of the present invention, in which a PCEF and a network access device transmit a service layer data packet in addition to a service layer data packet through a Gi interface, and are used to transmit a control layer data packet. .

As shown in FIG. 5, the main implementation principle process of the embodiment of the present invention is as follows:

Step 10: The PCEF receives a session establishment request message sent by the network access device by using a Gx interface with the network access device, where the session establishment request message is that the network access device receives the network access request message initiated by the user. Later sent.

Optionally, in many scenarios, the network access device is collectively referred to as a mesh GW, specifically: in a scenario where the mobile terminal user accesses the WCDMA standard wireless network, the network access device is a gateway GPRS support node (GGSN, Gateway). GPRS Support Node ); In the scenario where the mobile terminal user accesses the CDMA2000 standard wireless network, the network access device is a Packet Data Serving Node (PDSN); the fixed terminal user passes the asymmetric digital subscriber loop (ADSL) Asymmetric Digital Subscriber Line In the scenario of accessing a fixed network, the network access device is a Broadband Remote Access Server (BRAS).

Step 20: The PCEF obtains the user information and saves the user information by parsing the session establishment request message.

Optionally, after the network access device allows the user to access the network, the PCEF manages and controls the user traffic according to the saved user information.

Step 30: The PCEF requests a policy corresponding to the user from the PCRF according to the user information, and saves the policy.

Optionally, the manner in which the PCEF requests the policy corresponding to the user includes but is not limited to:

The PCEF forwards the session establishment request message to the PCRF through the Gx interface, receives a policy corresponding to the user returned by the PCRF, and saves the policy, where the policy is used according to the policy. User traffic is managed and controlled. Of course, the PCEF can also send a new policy request message to the PCRF according to the user information. As long as the PCEF and the PCRF pre-agreed, the PCRF sends the user policy to the PCEF after receiving the policy request message, that is, the PCEF can request the PCEF to request the PCRF. The purpose of the user's corresponding strategy can be. The PCEF manages and controls the user traffic according to the user information and the corresponding policy of the user. It is a prior art in the field and can be performed according to the settings of the operator, and will not be described in detail herein.

Further, the PCEF determines whether to allow the user traffic to pass the PCEF according to the policy and the user information, and carries the determination result in the session establishment response message, and returns to the network access device through the Gx interface.

Optionally, the value of the flag bit may be used in the session establishment response message to indicate whether the user traffic is allowed to pass through the PCEF. For example, when the value of the flag bit of the lbit is 1, the user traffic is allowed to pass through the PCEF. When the value of the flag bit is 0, the user traffic is not allowed to pass through the PCEF.

Further, after receiving the session establishment response message, the network access device determines, according to the session establishment response message, whether to allow the user to access the network, and returns a network access response message to the user.

Specifically, the network access device obtains, from the session establishment response message, whether the user traffic is allowed to pass the determination result of the PCEF, and allows the user to connect when the user is allowed to pass the PCEF. Entering the network, the user is not allowed to access the network when the result of the determination is that the user traffic is not allowed to pass through the PCEF. Through this scheme, the state of the user in the network access device is consistent with the state of the user in the PCEF.

In the technical solution provided by the embodiment of the present invention, the PCEF can ensure that the PCEF can obtain user information in time to manage and control user traffic by participating in message interaction in the network access process of the user. In the solution and the prior art, when the PCEF obtains user information for managing and controlling user traffic, the reliability and timeliness of obtaining user information is improved by relying on the Radius message copied by the AAA Server.

In the following, in accordance with the above inventive principles of the present invention, several embodiments will be described in detail to explain and explain the main implementation principles of the method of the present invention in detail. Embodiment 1

FIG. 6 is a detailed flowchart of a network access method according to an embodiment of the present invention. In this embodiment, the network access device is a GGSN.

Step 601: When the user needs to access the network, the network access request message is initiated to the GGSN by using a browser or other client software in the host.

Optionally, the network access request message is a PDP context (Packet Data Protocol context) activation request message or an IP-CAN Bear activation request message. The network access request message carries the user information of the user, such as a user identifier, such as a mobile subscriber integrated service data network number (MSISDN, Mobile Subscriber International ISDN/PSTN number), and an international mobile subscriber identifier (IMSI, International Mobile Subscriberdentification Number ), optionally, the user information also includes: the access point name (ΑΡΝ, Access Point Name) that the user needs to access, the IP address of the GPRS service support node (SGSN, Serving GPRS SUPPORT NODE), the requested service Quality parameters (QoS Profile) and more.

Step 602: The GGSN sends a session establishment request message to the PCEF through a Gx interface with the PCEF.

Step 603: The PCEF parses the session establishment request message, obtains user information from the user information, and saves the user information.

Step 604: The PCEF forwards the session establishment request message to the PCRF to request the PCRF to correspond to the policy corresponding to the user.

Of course, the PCEF can also send a new policy request message to the PCRF according to the user information. As long as the PCEF and the PCRF pre-agreed, the PCRF sends the user policy to the PCEF after receiving the policy request message, that is, the PCEF can request the PCRF to request the PCRF. The purpose of the user's corresponding strategy can be.

Step 605: The PCRF acquires a policy corresponding to the user according to the user information in the session establishment request.

Optionally, if the PCRF can find the policy corresponding to the user from the local policy database according to the user information, go to step 606 to directly return the found policy directly to the policy. If the policy corresponding to the user cannot be found, step 605a to step 605c are executed to generate a policy corresponding to the user.

Step 605a: The PCRF sends a subscription information request message to the user profile storage (SPR), where the request message carries the user identifier of the user.

Referring to Figure 1, the PCRF interacts with the SPR through the Sp interface to send the subscription information request message.

Step 605b: The PCRF receives the subscription information response message returned by the SPR, and obtains the user subscription information of the user.

Step 605c: The PCRF generates a policy corresponding to the user according to the user subscription information and the session establishment request message.

For example, the user subscription information includes a discount package or a user's rating when the user opens the account, and the preferential package includes the tariff information when the user is in the local state and the tariff information when the user is in the roaming state; the user level includes the user A. Information for a level user, a level B user, or a level C user.

The user information in the session establishment request message includes a user identifier, a current location of the user, and information that the user is currently in a local state or a roaming state.

The PCRF selects the current status of the user from the policy library according to the user subscription information including the preferential package or the user's rating when the user opens the account, the user identifier in the session establishment request message, the current local state or the roaming status of the user. Strategy.

The two examples are used to illustrate: the user's subscription information includes that the user subscribes to the student discount package, and the PCRF learns from the user's IMSI number and status information in the session establishment request message that the user Zhang is currently roaming; The policy corresponding to the roaming status in the student discount package is found in the strategy corresponding to the user Zhang San. The user's subscription information includes the user as a primary user. The PCRF knows that the user's IMI number and status information in the session establishment request message is that the user is currently in the local state, and then the A-level user is found in the policy library. The policy corresponding to the status is used as the policy corresponding to the user Li.

Those skilled in the art can understand that the specific generation manner of the user policy can be flexibly set by the operator, and is no longer listed here. Step 606: The PCRF sends the policy corresponding to the user to the PCEF.

Step 607: The PCEF saves the received policy corresponding to the user, and when the traffic of the user passes through the PCEF, the user traffic is managed and controlled according to the policy.

Step 608: The PCEF determines whether the policy corresponding to the user includes a charging policy. If the charging policy is included, the process proceeds to step 609. Otherwise, the process proceeds to step 612.

Optionally, the policy content delivered by the PCRF to the PCEF is included in a Charging-rule-Install attribute value pair (AVP, Attribute Value Pair), where each AVP includes a type, a length, and a property value. Each AVP can contain multiple sub-AVPs. When the value of the online AVP is Enable, the rule is a charging rule. If the PCEF finds an online AVP with the value of Enable from the policy content delivered by the PCRF, it confirms that the accounting policy is included.

In step 609, the PCEF requests the OCS to allocate the quota corresponding to the user, and the quota size issued by the OCS may be preset.

Step 610: If the PCEF receives the quota returned by the OCS, the process proceeds to step 612.

Optionally, the quota issued by the OCS according to the request of the PCEF is corresponding to the service type. For example, the PCEF requests the OCS for the user's quota, and the OCS checks whether the account of the user Zhang San has a balance. If there is no balance, the PCEF is notified that the user has insufficient credit, and the PCEF notifies the GGSN that the activation of the user has failed.

If the result of the OCS check is that there is a balance in the user account, for example, there is still 50 yuan in the user account, the user needs to transfer 2 yuan/M for the HyperText Transfer Protocol (HTTP) service, and the OCS will pre-set the pre-set. The 10 M quota corresponding to the HTTP service is given to the PCEF. After the PCEF runs out of the 10M, the usage is reported to the OCS and the new quota is applied. After the OCS deducts the 10M money, the user account balance is detected again. If it is still 10M, A new quota will be issued, otherwise the PCEF balance will be insufficient.

Step 611: If the PCEF receives the insufficient balance information returned by the OCS, the user traffic is not allowed to pass the PCEF, and the process proceeds to step 613.

Step 612: The PCEF determines, according to the user information, whether other policies other than the charging policy corresponding to the user are met, and when the user information meets other policies, the user traffic is allowed to pass. Passing the PCEF; otherwise, determining that the user traffic is not allowed to pass through the PCEF. Go to step 613. For example, in addition to the charging policy, the policy corresponding to the user Zhang 3 includes the traffic control policy R, which is a monthly total traffic of no more than 30 Mbps.

By analyzing and recording the total traffic flowing through the PCEF, the PCEF can obtain the current used traffic of Zhang San in this month is 31 Mbps, so that the current traffic of Zhang San does not meet R, so the traffic of the third traffic is not allowed to pass through the PCEF.

Step 613: The PCEF carries the determination result in the session establishment response message, and returns the information to the network access device through the Gx interface.

Step 614: The GGSN determines, according to the determination result carried in the session establishment response message, whether the user is allowed to access the network, and returns a network access response message to the user according to the method.

The determining result carried by the GGSN in the session establishment response message is that the user is allowed to access the network when the user traffic is allowed to pass the PCEF, and the Gx interface between the network access device and the PCEF is established for the user. The session connection, the session connection of the Gx interface between the PCEF and the PCRF, and the session connection of the Gy interface between the PCEF and the OCS for the user; the determination result carried by the GGSN in the session establishment response message is that the user is not allowed When the traffic passes through the PCEF, the user is not allowed to access the network. Of course, if the GGSN is connected to other authentication devices such as the AAA server, the GGSN needs to comprehensively determine whether to allow the user to access the network according to the determination result of the PCEF and the authentication result of the AAA server.

Optionally, when the network access request message is a PDP context request message, the network access response message is a PDP context activation response message; and when the network access request message is an IP-CAN Bear activation request message, The network access response message is an IP-CAN Bear activation response message.

It should be noted that, in step 608 to step 612, the charging policy is taken as an example, and the process of determining, by the PCEF, whether to allow the user traffic to pass the PCEF according to the policy and the user information, is specifically described. The PCEF in the implementation may be based on a plurality of policies to comprehensively determine whether user traffic is allowed to pass through the PCEF. For example, user traffic is not allowed to pass through the PCEF as long as it does not comply with any of the policies.

In the technical solution provided by the embodiment of the present invention, when a user requests to access a network, the network access setting The device needs to interact with the PCEF to allow the user's network traffic to pass through the PCEF before allowing the user to access the network. On the one hand, the PCEF can ensure that the PCEF obtains the user information to manage and control the user traffic by participating in the message interaction in the network access process of the user, so as to avoid relying on the Radius packet copied by the AAA Server to obtain the user information. Low reliability issues. On the other hand, in the process of the user network access, the network access device determines whether the user is allowed to access the network according to the state of the user in the PCEF, and ensures the consistency of the state of the user in the network access device and the PCEF, thereby avoiding state inconsistency. The resulting billing error problem.

In addition, in the technical solution provided by the present invention, the PCEF can be regarded as a proxy in the network access device and the PCRF, that is, the network access device interacts with the PCRF through the Gx interface during the user access process.

Embodiment 2

The embodiment of the invention provides a method for the PCEF to control and manage user traffic after the user accesses the network. The flowchart is shown in FIG. 7. In addition to transmitting the service layer data packets through the Gi interface, the PCEF and the network access device also connect the data packets of the control plane through the Gx interface. In this embodiment, the network access device is described by taking the GGSN as an example.

Step 701: The GGSN allows the user to access the network, establish a session connection of the Gx interface between the PCEF and the GGSN, and establish a session connection between the PCEF and the PCRF. The session connection between the PCEF and the OCS on the Gy interface.

Step 702: The PCEF calculates the quota usage amount corresponding to the user according to the user traffic passing through the PCEF.

Step 703: The PCEF requests the OCS to issue a new quota after monitoring the quota corresponding to the user that is sent by the OCS according to the quota usage of the user.

Step 704: If the PCEF receives the new quota issued by the OCS, the remaining quota value is updated according to the new quota value, and the process returns to step 702 to continue to monitor whether the quota corresponding to the user is exhausted according to the user traffic.

Step 705: If the information sent by the OCS for indicating that the balance of the user is insufficient is received, the notification is received. The GGSN disconnects the user's network connection.

Step 706: After receiving the notification, the GGSN disconnects the network connection of the user.

Step 707: Terminate the session connection of the Gx interface between the PCEF and the network access device of the user; terminate the session connection of the Gx interface between the PCEF and the PCRF corresponding to the user; terminate the PCEF and the OCS corresponding to the user Session connection between the Gy interfaces.

The network access scheme provided by the embodiment of the present invention, after the user accesses the network, the PCEF manages and monitors the user traffic. When the user traffic does not meet the policy corresponding to the user, for example, when the quota is insufficient, the PCEF notifies the network access device that the network access device is disconnected. The user's network connection is opened, thereby ensuring the consistency of the user status in the network access device and the PCEF, and avoiding the problem of charging errors.

Correspondingly, the embodiment of the present invention further provides a network access system. As shown in FIG. 4, the system includes a network access device, a PCEF, and a PCRF, as follows:

a network access device, configured to send a session establishment request message to the PCEF through the Gx interface after receiving the network access request message initiated by the user;

Optionally, the PCEF is further configured to determine, according to the policy and the user information, whether to allow the user traffic to pass the PCEF, and carry the determination result in a session establishment response message, and return the network to the network through the Gx interface. Access device

The network access device is further configured to determine, according to the session establishment response message, whether the user is allowed to access the network, and return a network access response message to the user.

Optionally, the determining, according to the session establishment response message, whether the user is allowed to access the network, and returning the network access response message to the user, includes:

The determining result carried by the network access device in the session establishment response message is to allow the user to access the network when the user traffic is allowed to pass through the PCEF;

The determination result carried by the network access device in the session establishment response message is that the When user traffic passes through the PCEF, the user is not allowed to access the network.

Correspondingly, the embodiment of the present invention further provides a PCEF device, which is shown in FIG. 8 and includes:

The receiving unit 801 is configured to receive, by using a Gx interface with the network access device, a session establishment request message sent by the network access device, where the session establishment request message is that the network access device receives the network connection initiated by the user. After the request message is sent;

The first obtaining unit 802 is configured to receive the session establishment request message by the parsing receiving unit 801, obtain user information, and save user information.

The second obtaining unit 803 is configured to request, according to the user information acquired by the first acquiring unit 802, a policy corresponding to the user, and save the policy, according to the user information and the policy The user's traffic is managed and controlled.

Optionally, the second obtaining unit 803 includes a sending subunit and a receiving subunit, where: a sending subunit, configured to forward the session establishment request message to the PCRF;

a receiving sub-unit, configured to receive a policy corresponding to the user returned by the PCRF, where the policy is that the PCRF requests the user subscription information according to the user information in the session establishment request message, and the user subscription information returned according to the SPR, And the user information generated.

Referring to FIG. 8 , optionally, the PCEF further includes:

a determining unit 804, configured to determine, according to the policy acquired by the first obtaining unit 802 and the second obtaining unit 803, and the user information, whether to allow the user traffic to pass the PCEF;

The sending unit 805 is configured to carry the determination result of the determining unit 804 in the session establishment response message, and return to the network access device through the Gx interface.

Correspondingly, referring to FIG. 9, the embodiment of the present invention further provides a network access device, which includes:

The first receiving unit 901 is configured to receive a network access request message initiated by the user.

The first sending unit 902 is configured to send a session establishment request message to the PCEF through the Gx interface after the first receiving unit 901 receives the network access request message, where the session establishment request message carries user information. Optionally, the network access device further includes:

The second receiving unit 903 is configured to receive, by using the Gx interface, a session establishment response message returned by the PCEF, where the session establishment response message carries a determination result of whether the user traffic is allowed to pass the PCEF.

The determining unit 904 is configured to determine, according to the determining result, whether the user is allowed to access the network. The second sending unit 905 is configured to return a network access response message to the user according to the determining result of the determining unit 904.

A person skilled in the art can understand that all or part of the steps of implementing the above embodiments can be completed by a program to instruct related hardware, and the program can be stored in a computer readable storage medium, such as: ROM/RAM, Disk, CD, etc. The spirit and scope of the invention. Thus, it is intended that the present invention cover the modifications and variations of the inventions

Claims

Rights request

A network access method, comprising:

The policy and charging execution function entity PCEF receives a session establishment request message sent by the network access device by using a Gx interface with the network access device, where the session establishment request message is that the network access device receives the user initiated network. After the access request message is sent;

The PCEF obtains the user information and saves the user information by parsing the session establishment request message, and requests the policy corresponding to the user from the policy and charging rule entity PCRF according to the user information, and saves the policy;

The method according to claim 1, wherein the requesting, by the user information, the policy corresponding to the user according to the user information comprises:

The PCEF forwards the session establishment request message to the PCRF;

The PCRF requests the user subscription information from the user attribute storage SPR according to the user information in the session establishment request message, and generates a policy corresponding to the user according to the user subscription information returned by the SPR and the user information, and generates the policy. Send to PCEF.

The method according to claim 1 or 2, wherein the requesting, by the user information, the policy corresponding to the user according to the user information, and saving the policy, further comprising:

The PCEF determines whether the user traffic is allowed to pass through the PCEF according to the policy and the user information, and carries the determination result in the session establishment response message, and returns to the network access device through the Gx interface.

The method according to claim 3, wherein the determining, according to the policy and the user information, whether the user traffic is allowed to pass the PCEF, includes:

If the policy includes a charging policy, the PCEF requests the online charging system OCS to request the quota corresponding to the user according to the user information;

The PCEF, when receiving the quota corresponding to the user returned by the OCS, confirms that the user meets other policies except the charging policy according to the user information, and allows the user traffic to pass the PCEF;

The PCEF does not allow the user traffic to pass the PCEF when receiving the information that the OCS returns insufficient user quota.

The method according to claim 3, wherein the step of carrying the determination result in the session establishment response message and returning to the network access device by using the Gx interface further includes:

If the result of the determination in the session setup response message is that the user traffic is allowed to pass through the PCEF, the network access device allows the user to access the network according to the session establishment response message, and the PCEF according to the User traffic of the PCEF, and calculating a quota usage amount corresponding to the user;

The PCEF monitors whether the quota corresponding to the user is exhausted according to the quota usage amount and the quota issued by the previous OCS.

If the monitoring result is that the quota corresponding to the user is exhausted, the OCS is requested to issue a new quota; if the new quota issued by the OCS is received, the quota corresponding to the user is exhausted; if the OCS is received, The information indicating that the user quota is insufficient is notified to the user that the access device disconnects the network connection of the user.

A network access system, comprising: a network access device, a PCEF, and a PCRF, wherein:

7. The system of claim 6 wherein:

The PCEF is further configured to determine, according to the policy and the user information, whether to allow the user traffic to pass the PCEF, and carry the determination result in a session establishment response message, and return the network access device through the Gx interface. ; The network access device is further configured to determine, according to the session establishment response message, whether the user is allowed to access the network, and return a network access response message to the user.

The system according to claim 7, wherein the determining, according to the session establishment response message, whether the user is allowed to access the network, includes:

When the network access device carries the determination result in the session establishment response message that the user traffic is not allowed to pass through the PCEF, the user is not allowed to access the network.

9. A PCEF device, comprising:

The device according to claim 9, wherein the second obtaining unit comprises: a sending subunit, configured to forward the session establishment request message to the PCRF;

The device according to claim 9 or 10, further comprising:

a determining unit, configured to determine, according to the policy and the user information acquired by the first obtaining unit and the second acquiring unit, whether to allow the user traffic to pass the PCEF;

And a sending unit, configured to carry the determination result of the determining unit in the session establishment response message, and return to the network access device by using the Gx interface.

12. A network access device, comprising:

13. The device according to claim 12, further comprising:

a second receiving unit, configured to receive, by using a Gx interface, a session establishment response message returned by the PCEF, where the session establishment response message carries a determination result of whether the user traffic is allowed to pass the PCEF;

And a determining unit, configured to determine, according to the determining result, whether the user is allowed to access the network; and the second sending unit is configured to return a network access response message to the user according to the determining result of the determining unit.