WO2014107969A1 - 无线局域网络与固网交互中分配用户地址的方法及系统 - Google Patents

无线局域网络与固网交互中分配用户地址的方法及系统 Download PDF

Info

Publication number
WO2014107969A1
WO2014107969A1 PCT/CN2013/083254 CN2013083254W WO2014107969A1 WO 2014107969 A1 WO2014107969 A1 WO 2014107969A1 CN 2013083254 W CN2013083254 W CN 2013083254W WO 2014107969 A1 WO2014107969 A1 WO 2014107969A1
Authority
WO
WIPO (PCT)
Prior art keywords
address
bng
request message
authentication
address request
Prior art date
Application number
PCT/CN2013/083254
Other languages
English (en)
French (fr)
Inventor
尤建洁
金利忠
范亮
朱春晖
Original Assignee
中兴通讯股份有限公司
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 中兴通讯股份有限公司 filed Critical 中兴通讯股份有限公司
Publication of WO2014107969A1 publication Critical patent/WO2014107969A1/zh

Links

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04WWIRELESS COMMUNICATION NETWORKS
    • H04W8/00Network data management
    • H04W8/26Network addressing or numbering for mobility support

Definitions

  • the present invention relates to a wireless communication technology, and in particular, to a method and system for allocating user addresses in a wireless local area network (WLAN) interaction with a fixed network.
  • WLAN wireless local area network
  • WLAN access technology is becoming more and more important.
  • WLAN access technology is a supplementary access method for fixed network access. How to effectively grasp and manage user access through WLAN in real time becomes the key to developing WLAN services. At the same time, this will help operators to optimize their networks.
  • the WALN network is mainly composed of user equipment (UE, User Equipment), access point (AP, Access Point), access controller (AC, Access Controller), broadband network gateway (BNG, Broadband Network Gateway), and authentication and authorization. It consists of an Accounting Authorization Accounting (AAA).
  • the AP is a bridge connecting the wired network and the WLAN, and the UE accesses external network resources through the AP.
  • AAA Accounting Authorization Accounting
  • the main purpose of the embodiments of the present invention is to provide a method and system for allocating user addresses in a WLAN and fixed network interaction, which can implement user address allocation in WLAN and fixed network interaction.
  • the technical solution of the embodiment of the present invention is implemented as follows: The embodiment of the present invention provides a method for allocating a user address in a WLAN and a fixed network interaction, where the method includes:
  • the BNG After receiving the address request message from the UE, the BNG sends the address request message to the corresponding AC;
  • the AC allocates an Internet Protocol (IP) address to the UE, and returns an assigned IP address to the UE through the BNG.
  • IP Internet Protocol
  • the method before the BNG receives the address request message from the UE, the method further includes:
  • CAPWAP Wireless Access Points Protocol
  • the AC sends the UE authentication success message to the BNG, and after receiving the message, the BNG saves the binding relationship between the UE and the AC.
  • the method before the sending the UE authentication success message to the BNG, the method further includes:
  • the AC finds the BNG according to the location information of the UE.
  • the location information of the UE is: location information reported by the AP to the AC; or: the location information obtained by the AC according to the configuration relationship between the AC and the AP.
  • the method before the sending the address request message to the corresponding AC, the method further includes:
  • the BNG searches for the AC in the binding relationship saved by itself according to the Medium Access Control (MAC) address in the address request message.
  • the method before the IP address is allocated to the UE, the method further includes: the AC determining, according to the MAC address in the address request message, whether the UE passes the authentication, and after the authentication, the UE is Assign an IP address.
  • the AC allocates an IP address to the UE, which is:
  • the AC allocates an IP address to the UE according to the location information of the UE.
  • the method further includes: the BNG sends an accounting request message to the AAA, and starts charging; or, the AC sends an accounting request message to the AAA, Start billing.
  • the embodiment of the present invention further provides another method for allocating a user address in the interaction between the WLAN and the fixed network, where the method includes:
  • the AP After receiving the address request message from the UE, the AP marks the address request message and sends the message to the BNG;
  • the AC allocates an IP address to the UE, and returns an assigned IP address to the UE through the BNG.
  • the address request message is marked as:
  • the method before the AP receives the address request message from the UE, the method further includes:
  • the UE and the AC After being attached to the network, the UE and the AC interact with each other through the CAPWAP tunnel established between the AP and the AC.
  • the method before the IP address is allocated to the UE, the method further includes: the AC determining, according to the MAC address in the address request message, whether the UE passes the authentication, and after the authentication, the UE is Assign an IP address.
  • the AC allocates an IP address to the UE, which is:
  • the AC is located at the location information of the UE, and/or the VLAN identifier, and/or the SSID selected by the UE, to allocate an IP address to the UE.
  • the method further includes: the BNG sends an accounting request message to the AAA, and starts charging; or, the AC sends an accounting request message to the AAA, Start billing.
  • the embodiment of the present invention further provides a system for allocating a user address in a WLAN and a fixed network interaction, where the system includes: a UE, a BNG, and an AC;
  • the UE is configured to send an address request message to the BNG; and receive an allocated IP address returned by the AC through the BNG;
  • the BNG is configured to: after receiving the address request message sent by the UE, send the address request message to the corresponding AC;
  • the AC configured to receive an address request message sent by the BNG, allocate an IP address to the UE, and return an allocated IP address to the UE by using the BNG.
  • the UE is further configured to interact with the AC through a CAPWAP tunnel established between the AP attached to the AC and the AC to complete the authentication process;
  • the AC is configured to send the UE authentication success message to the BNG after the authentication succeeds.
  • the BNG is further configured to: after receiving the UE authentication success message sent by the AC, save the binding relationship between the UE and the AC.
  • the AC before sending the UE authentication success message to the BNG, the AC is further configured to find the BNG according to the location information of the UE.
  • the BNG before the sending the address request message to the AC corresponding to the UE, the BNG is further configured to save according to the MAC address in the address request message. Find the AC in the binding relationship.
  • the AC is further configured to determine, according to the MAC address in the address request message, whether the UE passes the authentication, and after the authentication, assign an IP to the UE. address.
  • the system further includes: an AAA, configured to receive the BNG or the charging request message sent by the AC;
  • the BNG is further configured to send a charging request message to the AAA;
  • the AC is further configured to send a charging request message to the AAA.
  • the embodiment of the present invention further provides another system for allocating user addresses in the interaction between the WLAN and the fixed network, where the system includes: a UE, an AP, a BNG, and an AC;
  • the UE is configured to send an address request message to the AP, and receive an allocated IP address returned by the AC through the BNG;
  • the AP configured to receive the address request message sent by the UE, mark the address request message, and send the message to the BNG;
  • the BNG is configured to: after receiving the address request message sent by the AP, send the address request message to the corresponding AC according to the label;
  • the AC configured to receive an address request message sent by the BNG, allocate an IP address to the UE, and return an allocated IP address to the UE by using the BNG.
  • the UE is further configured to interact with the AC through a CAPWAP tunnel established between the AP attached to the AC and the AC to complete the authentication process.
  • the AC is further configured to determine, according to the MAC address in the address request message, whether the UE passes the authentication, and passes the authentication. After that, the UE is assigned an IP address.
  • the system further includes: AAA, configured to receive a billing request message sent by the BNG;
  • the BNG is further configured to send a charging request message to the AAA.
  • the method and system for allocating a user address in the interaction between the WLAN and the fixed network provided by the embodiment of the present invention, after receiving the address request message from the UE, the BNG sends the address request message to the AC corresponding to the UE; The UE allocates an IP address, and returns an assigned IP address to the UE through the BNG; or, after receiving the address request message from the UE, the AP marks the address request message and sends the message to the BNG.
  • the BNG sends the address request message to the corresponding AC according to the tag; the AC allocates an IP address to the UE, and returns an assigned IP address to the UE by using the BNG, so that The WLAN interacts with the fixed network to effectively allocate user addresses.
  • the UE and the AC interact with each other through the CAPWAP tunnel established between the AP and the AC, and complete the authentication process, so that the WLAN and the fixed network can be used. Under the interactive architecture, the authentication process is effectively completed.
  • the BNG sends an Accounting Request message to the AAA; or the AC sends an Accounting Request message to the AAA, thereby triggering charging, so that the WLAN and the WLAN can be activated. Under the framework of network interaction, the user is effectively charged for charging.
  • FIG. 1 is a schematic flowchart of a method for allocating user addresses in a WLAN and fixed network interaction according to an embodiment of the present invention
  • FIG. 2 is a schematic flowchart of another method for allocating user addresses in a WLAN and fixed network interaction according to an embodiment of the present invention
  • FIG. 3 is a schematic diagram of a networking scenario of an embodiment
  • 4 is a schematic flowchart of a method for performing authentication in a WLAN and a fixed network interaction according to Embodiment 1
  • FIG. 5 is a schematic flowchart of a method for allocating an IP address and performing charging in a WLAN and fixed network interaction according to Embodiment 2;
  • FIG. 6 is a schematic flowchart of a method for allocating an IP address and performing charging in a WLAN and fixed network interaction according to Embodiment 3;
  • FIG. 7 is a schematic flowchart of a method for performing authentication in a WLAN and a fixed network interaction according to Embodiment 4;
  • FIG. 8 is a schematic flowchart of a method for allocating an IP address and performing charging in a WLAN and fixed network interaction according to Embodiment 5;
  • FIG. 9 is a schematic structural diagram of a system for allocating user addresses in a WLAN and fixed network interaction according to the present invention.
  • FIG. 10 is a schematic structural diagram of another system for allocating user addresses in WLAN and fixed network interaction according to the present invention. detailed description
  • a method for allocating a user address in a WLAN and a fixed network interaction includes the following steps:
  • Step 101 After receiving the address request message from the UE, the BNG sends the address request message to the corresponding AC.
  • the method may further include:
  • the BNG searches for the AC in the binding relationship saved by itself according to the MAC address in the address request message.
  • the method may further include:
  • the UE and the AC After being attached to the network, the UE and the AC interact with each other through the CAPWAP tunnel established between the AP and the AC, and complete the authentication process. After the authentication succeeds, the AC sends the UE authentication success message to the BNG, and after the BNG receives the message, the binding relationship between the UE and the AC is saved.
  • the method may further include: before the sending, by the AP, the packet for authentication from the UE and the message that is sent by the UE to the BNG, the method may further include: The location information of the UE, where the BNG is found; wherein the location information of the UE is the location information reported by the AP to the AC; or the location obtained by the AC according to the configuration relationship between the AC and the AP More specifically, the location information of the UE refers to: location information of the AP.
  • the UE authentication success message carries at least the MAC address of the UE
  • the UE In the binding relationship between the UE and the AC, the UE is identified by the MAC address of the UE.
  • Step 102 The AC allocates an IP address to the UE, and sends the IP address to the
  • the UE returns the assigned IP address.
  • the AC allocates an IP address to the UE, specifically:
  • the AC allocates an IP address to the UE according to the location information of the UE.
  • the method may further include:
  • the AC determines, according to the MAC address in the address request message, whether the UE passes the authentication, and after the authentication, assigns an IP address to the UE.
  • the method may further include:
  • the BNG sends an Accounting Request message to the AAA to start charging.
  • the AC sends an Accounting Request message to the AAA to start charging.
  • Step 201 After receiving the address request message from the UE, the AP marks the address request message and sends it to the BNG.
  • the address request message is marked, specifically:
  • the address request message is marked according to the SSID selected by the UE.
  • the tag may specifically be: a VLAN identifier.
  • the method may further include:
  • the UE and the AC After being attached to the network, the UE and the AC interact with each other through the C APWAP tunnel established between the AP and the AC, and complete the authentication process.
  • the AP can send the packet for authentication from the UE and the step 202: the BNG sends the address request message to the corresponding according to the flag.
  • the BNG has previously configured a correspondence table between the tag and the AC, and specifically, a correspondence table between the VLAN tag and the AC is configured, and the BNG finds a correspondence according to the configured correspondence table between the tag and the AC. AC.
  • Step 203 The AC allocates an IP address to the UE, and returns an allocated IP address to the UE by using the BNG.
  • the AC allocates an IP address to the UE, specifically:
  • the AC is located at the location information of the UE, and/or the VLAN identifier, and/or the SSID selected by the UE, to allocate an IP address to the UE.
  • the method may further include:
  • the AC determines, according to the MAC address in the address request message, whether the UE passes the authentication, and after the authentication, assigns an IP address to the UE.
  • the method may further include:
  • the BNG sends a charging request message to the AAA to start charging.
  • the networking scenario of the first embodiment to the fifth embodiment is as shown in FIG. 3, in which the UE is 802.1X.
  • the client accesses the wired network through the AP, and the AP has the capability of distinguishing between 802.11 and 802.1X packets.
  • the AC is used to manage the AP and deliver configuration parameters to the AP.
  • the AC acts as the 802.1X authenticator and RADIUS client.
  • the AC transmits the user's online and offline notification message to the BNG through the interface with the BNG; the BNG participates in the transmission of the user data, and reports the traffic information of the UE to the AC through the interface with the AC; AAA is the RADIUS server.
  • FIG. 3 the UE is 802.1X.
  • the client accesses the wired network through the AP, and the AP has the capability of distinguishing between 802.11 and 802.1X packets.
  • the AC is used to manage the AP and deliver configuration parameters to the AP.
  • the AC acts as the 802.1X authenticator and R
  • the solid line indicates the transmission direction of the signaling flow, that is, the signaling flow is transmitted between AAA, AC, AP, and BNG;
  • the dotted line indicates the transmission direction of the data flow, that is, the data flow is in BNG, Transfer between APs.
  • the interaction between the UE and the BNG described in the second embodiment and the third embodiment is implemented by the direct forwarding of the AP.
  • the UE and the BNG except the UE sending the address request message to the BNG are described in the fifth embodiment. All other interactions between the two are achieved through direct forwarding of the AP.
  • the application scenario of this embodiment is as follows: The process of performing authentication after the UE is attached to the network; in this embodiment, the method for performing authentication in the interaction between the WLAN and the fixed network, as shown in FIG. 4, includes the following steps:
  • Step 401 After the UE is attached to the network, the AP negotiates with the AC and establishes a CAPWAP tunnel.
  • the AP encapsulates the 802.IX packets from the UE in the CAPWAP tunnel and sends them to the AC.
  • the 802.11 packets from the UE are encapsulated in the CAPWAP tunnel and sent to the AC.
  • the AP Only the packets from the UE for authentication are encapsulated in the CAPWAP tunnel and sent to the AC.
  • Step 402 The UE sends an EAPoL-Start message to the AC to start 802.IX.
  • Authentication access Step 403 After receiving the packet, the AC sends an EAP-Identity-Request message to the UE, requesting the UE to report the user identifier.
  • Step 404 After receiving the packet, the UE returns an EAP-Identity-Response message to the AC.
  • the EAP-Identity-Response message includes a user identifier.
  • Step 405 After receiving the packet, the AC encapsulates the EAP frame into an access request (RADIUS-Access-Request) packet and sends the packet to the AAA.
  • an access request RADIUS-Access-Request
  • the AC inserts the MAC address of the UE in the RADIUS-Access-Request packet.
  • Step 406 After receiving the packet, the AAA returns an access response to the AC.
  • the RADIUS-Access-Response message includes an EAP Challenge.
  • Steps 407 ⁇ 408 After receiving the packet, the AC unblocks the EAP frame from the packet and sends it to the UE. After receiving the EAP frame, the UE replies to the AC through the EAP frame.
  • the EAP frame that is replied contains a Challenged Password.
  • Step 409 After receiving the EAP frame, the AC encapsulates the received EAP frame into a RADIUS-Access-Request packet and sends it to the AAA.
  • the RADIUS-Access-Request message includes a Challenged Password.
  • Step 410 After receiving the packet, the AAA performs authentication. After the authentication succeeds, the AAA returns an RADIUS-Access-Accept packet to the AC.
  • Step 411 The AC finds a corresponding BNG according to the location information of the UE, and sends a UE authentication success message to the BNG.
  • the location information of the UE is: location information reported by the AP, or location information obtained by the AC according to the configuration relationship between the AC and the AP.
  • the location information of the UE refers to: location information of an AP to which the UE is attached.
  • the UE authentication success message carries at least the MAC address of the UE.
  • the BNG After receiving the UE authentication success message, the BNG saves the binding relationship between the UE and the AC. Specifically, the binding relationship between the MAC address identifier of the UE and the identifier of the AC is saved.
  • Step 412 The AC decapsulates the EAP frame and sends an EAP-Success message to the UE.
  • the application scenario of this embodiment is as follows: After the process of the first embodiment is completed, that is, after the authentication succeeds, the UE needs to be assigned an IP address and performs charging.
  • the method for allocating an IP address and performing charging in the interaction between the WLAN and the fixed network, as shown in FIG. 5, includes the following steps:
  • Step 501 After the authentication succeeds, the UE sends a DHCPv4/v6 address request message to the BNG.
  • the DHCPv4/v6 address request message includes the MAC address of the UE.
  • Step 502 After receiving the message, the BNG searches for the corresponding AC in the binding relationship saved by the DHCPv4/v6 address request message, and sends the DHCPv4/v6 address request message to the corresponding AC;
  • the binding relationship is generated in an authentication process of the UE.
  • the BNG When the BNG does not find the corresponding AC in the binding relationship saved by itself, the BNG will reply the address allocation failure message to the UE.
  • Step 503 After receiving the message, the AC allocates a corresponding IP address to the UE according to the location information of the UE, and returns the allocated IP address to the BNG.
  • the method may further include:
  • the AC determines whether the UE is authenticated according to the MAC address in the DHCPv4/v6 address request message, and after the authentication, the UE allocates a corresponding IP address according to the location information of the UE.
  • the AC knows the MAC address of the UE in advance, and determines whether the UE obtains the MAC address of the UE and the MAC address in the DHCPv4/v6 address request message, which are the same. Then, the UE is considered to pass the authentication, otherwise, the UE is considered to have failed the authentication.
  • the UE After the AC considers that the UE fails to pass the authentication, the UE does not allocate an IP address to the UE, and correspondingly, the BNG returns a message indicating that the allocation fails.
  • the AP reports the location information of the UE to the AC, or the AC obtains the location information of the UE according to the configuration relationship between the AP and the AP.
  • Step 504 After receiving the assigned IP address, the BNG returns an IP address to the UE.
  • the charging request message carries user information, where the user information may specifically be an IP address of the UE, and/or a user identifier, and/or a MAC address.
  • step 505 may be performed first, and then step 604 may be performed, or step 504 and step 505 may be performed simultaneously. In other words, the execution of step 504 and step 505 is not sequential.
  • Step 506 After receiving the charging request message, the AAA returns an accounting response message to the BNG.
  • the AAA replies to the BNG with the charging response message, it indicates that the charging starts.
  • the application scenario of this embodiment is as follows: After the process of the first embodiment is completed, that is, after the authentication succeeds, the UE needs to be assigned an IP address and performs charging.
  • the method for allocating an IP address and performing charging in the interaction between the WLAN and the fixed network, as shown in FIG. 6, includes the following steps:
  • Step 601 After the authentication succeeds, the UE initiates a DHCPv4/v6 address request message to the BNG.
  • the DHCPv4/v6 address request message includes the MAC address of the UE.
  • Step 602 After receiving the message, the BNG searches for the corresponding AC in the binding relationship saved by the DHCPv4/v6 address request message, and sends the DHCPv4/v6 address request message to the corresponding AC;
  • the binding relationship is generated in an authentication process of the UE.
  • the BNG When the BNG does not find the corresponding AC in the binding relationship saved by itself, the BNG will reply the address allocation failure message to the UE.
  • Step 603 After receiving the message, the AC allocates a corresponding IP address to the UE according to the location information of the UE, and returns the allocated IP address to the BNG.
  • the method may further include:
  • the AC determines whether the UE is authenticated according to the MAC address in the DHCPv4/v6 address request message, and after the authentication, the UE allocates a corresponding IP address according to the location information of the UE.
  • the AC knows the MAC address of the UE in advance, and determines whether the UE obtains the MAC address of the UE and the MAC address in the DHCPv4/v6 address request message, which are the same. Then, the UE is considered to pass the authentication, otherwise, the UE is considered to have failed the authentication.
  • the UE After the AC considers that the UE fails to pass the authentication, the UE does not allocate an IP address to the UE, and correspondingly, the BNG returns a message indicating that the allocation fails.
  • Step 604 After receiving the assigned IP address, the BNG returns an allocated IP address to the UE.
  • Step 605 The AC sends a charging request message to the AAA.
  • the charging request message carries user information, where the user information may specifically be an IP address of the UE, and/or a user identifier, and/or a MAC address.
  • the user information may specifically be an IP address of the UE, and/or a user identifier, and/or a MAC address.
  • step 605 may be performed first, and then step 603 may be performed, or step 603 and step 605 may be performed at the same time. In other words, the execution of step 603 and step 605 is not sequential.
  • Step 606 After receiving the charging request message, the AAA returns an accounting response message to the AC.
  • the AAA replies to the AC with the charging response message, it indicates that the charging starts.
  • the application scenario of this embodiment is as follows: The process of performing authentication after the UE is attached to the network; in this embodiment, the method for performing authentication in the interaction between the WLAN and the fixed network, as shown in FIG. 7, includes the following steps:
  • Step 701 After the UE is attached to the network, the AP and the AC negotiate and establish a CAPWAP tunnel.
  • the AP encapsulates the 802.IX packets from the UE in the CAPWAP tunnel and sends them to the AC.
  • the 802.11 packets from the UE are encapsulated in the CAPWAP tunnel and sent to the AC.
  • the AP Only the packets from the UE for authentication are encapsulated in the CAPWAP tunnel and sent to the AC.
  • Step 702 The UE sends an EAPoL-Start packet to the AC to start 802.IX authentication access.
  • Step 704 After receiving the packet, the UE returns an EAP-Identity-Response message to the AC.
  • the EAP-Identity-Response message includes a user identifier.
  • Step 705 After receiving the packet, the AC encapsulates the EAP frame into a RADIUS-Access-Request packet and sends the packet to the AAA.
  • the AC inserts the MAC address of the UE in the RADIUS-Access-Request message.
  • Step 706 After receiving the packet, the AAA returns a RADIUS-Access-Response message to the AC.
  • the RADIUS-Access-Response message includes an EAP Challenge.
  • Steps 707 ⁇ 708 After receiving the packet, the AC unblocks the EAP frame from the packet and sends it to the packet.
  • the UE After receiving the EAP frame, the UE replies to the AC through the EAP frame;
  • the EAP frame that is replied contains a Challenged Password.
  • Step 709 After receiving the EAP frame, the AC encapsulates the received EAP frame into a RADIUS-Access-Request packet and sends it to the AAA.
  • the RADIUS-Access-Request message includes a Challenged Password.
  • Step 710 After receiving the packet, the AAA performs authentication, and after the authentication succeeds, the AC replies.
  • Step 711 The AC unblocks the EAP frame and sends an EAP-Success message to the UE.
  • the method for allocating an IP address and performing charging in the interaction between the WLAN and the fixed network includes the following steps:
  • Step 801 After the authentication succeeds, the UE initiates a DHCPv4/v6 address request message to the AP.
  • Step 802 After receiving the message, the AP marks the received DHCPv4/v6 address request message and sends the message to the BNG.
  • the receiving the DHCPv4/v6 address request message is marked, specifically: the AP marks the corresponding identifier according to the SSID selected by the UE.
  • the AP can learn the SSID selected by the UE according to the interface that receives the DHCPv4/v6 address request message.
  • the target may be a VLAN identifier.
  • Step 803 After receiving the message, the BNG searches for the corresponding AC in the corresponding relationship table saved by the BNG, and sends the DHCPv4/v6 address request message to the corresponding AC.
  • the BNG is configured with the mark in advance.
  • a correspondence table between the VLAN and the AC is specifically configured.
  • Step 804 After receiving the message, the AC allocates a corresponding IP address to the UE, and returns an assigned IP address to the BNG.
  • the AC allocates a corresponding IP address to the UE according to the location information of the UE, and/or the VLAN identifier, and/or the SSID selected by the UE.
  • the AC can learn the SSID selected by the UE by using the prior art.
  • the method may further include:
  • the AC determines whether the UE is authenticated according to the MAC address in the DHCPv4/v6 address request message, and after the authentication, the UE allocates a corresponding IP address according to the location information of the UE.
  • Step 805 After receiving the allocated IP address, the BNG returns an allocated IP address to the UE.
  • Step 806 The BNG sends an accounting request message to the AAA.
  • the charging request message carries user information, where the user information may specifically be an IP address of the UE, and/or a user identifier, and/or a MAC address.
  • step 806 may be performed first, and then step 805 may be performed, or step 805 and step 806 may be performed simultaneously. In other words, the execution of step 805 and step 806 is not sequential.
  • Step 807 After receiving the charging request message, the AAA returns an accounting response message to the BNG.
  • the AAA replies to the BNG with the charging response message, it indicates that the charging starts.
  • the embodiment of the present invention further provides a system for allocating a user address in a WLAN and a fixed network interaction.
  • the system includes: UE 91, BNG 92, And AC 93;
  • the UE 91 is configured to send an address request message to the BNG 92; and receive an allocated IP address returned by the AC 93 through the BNG 92;
  • the BNG 92 is configured to: after receiving the address request message sent by the UE 91, send the address request message to the corresponding AC 93;
  • the AC 93 configured to receive the address request message sent by the BNG 92, allocates an IP address to the UE 91, and returns an assigned IP address to the UE 91 through the BNG 92.
  • the BNG 92 is further configured to search for the binding relationship in the saved relationship according to the MAC address in the address request message, before the address request message is sent to the AC 93 corresponding to the UE 91. Said AC 93.
  • the UE 91 is further configured to perform an authentication process after the UE is attached to the network and interacts with the AC 93 through a CAPWAP tunnel established between the AP and the AC 93.
  • the AC 93 is further configured to send the UE 91 authentication success message to the BNG 92 after the authentication succeeds;
  • the BNG 92 is further configured to save the binding relationship between the UE 91 and the AC 93 after receiving the UE 91 authentication success message sent by the AC 93.
  • the AC 93 is further configured to find the BNG 92 according to the location information of the UE 91.
  • the AC 93 is further configured to determine, according to the MAC address in the address request message, whether the UE 91 is authenticated, and after the authentication, assign an IP to the UE 91. address.
  • the system may further include: AAA, configured to receive a charging request message sent by the BNG 92 or the AC 93;
  • the BNG 92 is further configured to send to the AAA. Billing request message; or,
  • the AC 93 is further configured to send an Accounting Request message to the AAA.
  • the embodiment of the present invention further provides a system for allocating user addresses in a WLAN and fixed network interaction.
  • the system includes: UE 101, AP 102, BNG 103, and AC 104; where
  • the UE 101 is configured to send an address request message to the AP 102; and receive an allocated IP address returned by the AC 104 through the BNG 103;
  • the AP 102 is configured to receive the address request message sent by the UE 101, mark the address request message, and send the message to the BNG 103.
  • the BNG 103 configured to receive the address request message sent by the AP 102, send the address request message to the corresponding AC 104 according to the tag;
  • the AC 104 configured to receive an address request message sent by the BNG 103, allocates an IP address to the UE 101, and returns an allocated IP address to the UE 101 through the BNG 103.
  • the UE 101 is further configured to perform an authentication process by interacting with the AC 104 by using a CAPWAP tunnel established between the AP 102 and the AC 104.
  • the AC 104 is further configured to determine, according to the MAC address in the address request message, whether the UE 101 is authenticated, and after the authentication, assign an IP to the UE 101. address.
  • the system may further include: AAA, configured to receive a billing request message sent by the BNG 103;
  • the BNG 103 is further configured to send a charging request message to the AAA.

Landscapes

  • Engineering & Computer Science (AREA)
  • Databases & Information Systems (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Mobile Radio Communication Systems (AREA)

Abstract

本发明公开了一种无线局域网络(WLAN)与固网交互中分配用户地址的方法,该方法包括:宽带网络网关(BNG)收到来自用户设备(UE)的地址请求消息后,将所述地址请求消息发送给对应的接入控制器(AC);所述AC为所述UE分配因特网协议(IP)地址,并通过所述BNG向所述UE返回分配的IP地址。本发明同时公开了一种WLAN与固网交互中分配用户地址的系统,采用本发明的方法及系统,能在WLAN与固网交互中实现用户地址的分配。

Description

无线局域网络与固网交互中分配用户地址的方法及系统 技术领域
本发明涉及无线通信技术, 尤其涉及一种无线局域网络(WLAN, Wireless Local Area Networks ) 与固网交互中分配用户地址的方法及系统。 背景技术
随着 WLAN接入技术的日益成熟和普及、 以及用户对高速无线接入的 需求, 国内外运营商都在大力发展 WLAN业务。 WLAN接入技术作为 2G 以及 3G的分流手段, 作用越来越重要。
WLAN接入技术属于固定网络接入的补充接入方式, 如何实时有效地 掌握和管理用户通过 WLAN的接入情况, 成为开展 WLAN业务的关键。 同时, 这将有助于运营商进行网络优化。
WALN网络主要由用户设备( UE, User Equipment )、 接入节点 ( AP, Access Point, )、接入控制器( AC, Access Controller )、宽带网络网关( BNG, Broadband Network Gateway ), 以及认证、 授权和计费服务器 (AAA, Authentication Authorization Accounting )组成。 其中, AP是连接有线网络 与 WLAN的桥梁, UE通过 AP接入外部的网络资源。现有技术中,在 WLAN 与固定网络交互的架构下, AP、 AC与 BNG、 AAA的功能分割尚未明确, 尤其是对于如何分配用户地址, 还没有解决方案。 发明内容
有鉴于此, 本发明实施例的主要目的在于提供一种 WLAN与固网交互 中分配用户地址的方法及系统, 能在 WLAN与固网交互中实现用户地址的 分配。 为达到上述目的, 本发明实施例的技术方案是这样实现的: 本发明实施例提供了一种 WLAN与固网交互中分配用户地址的方法, 所述方法包括:
BNG收到来自 UE的地址请求消息后, 将所述地址请求消息发送给对 应的 AC;
所述 AC为所述 UE分配因特网协议( IP, Internet Protocol )地址, 并 通过所述 BNG向所述 UE返回分配的 IP地址。
上述方案中, 在 BNG收到来自 UE的地址请求消息之前, 所述方法还 包括:
附着到网络后, 所述 UE与所述 AC之间通过所述 UE所附着的 AP与 所述 AC之间建立的无线接入点控制与配置协议(CAPWAP, Control And Provisioning of Wireless Access Points Protocol ) 随道进行交互, 完成认证过 程;
认证成功后, 所述 AC向所述 BNG发送所述 UE认证成功消息, 所述 BNG收到消息后, 保存所述 UE与所述 AC的绑定关系。
上述方案中, 在向所述 BNG发送所述 UE认证成功消息之前, 该方法 还包括:
所述 AC根据所述 UE的位置信息, 找到所述 BNG。
上述方案中, 所述 UE的位置信息为: 所述 AP上报给所述 AC的位置 信息; 或者为: 所述 AC根据自身与所述 AP的配置关系, 获取到的位置信 息。
上述方案中,在将所述地址请求消息发送给对应的 AC之前,所述方法 还包括:
所述 BNG根据所述地址请求消息中的媒体接入控制 ( MAC, Medium Access Control )地址, 在自身保存的绑定关系中查找所述 AC。 上述方案中, 在为所述 UE分配 IP地址之前, 所述方法还包括: 所述 AC根据所述地址请求消息中的 MAC地址, 判断所述 UE是否通 过认证, 通过认证后, 为所述 UE分配 IP地址。
上述方案中, 所述 AC为所述 UE分配 IP地址, 为:
所述 AC根据所述 UE的位置信息为所述 UE分配 IP地址。
上述方案中, 为所述 UE分配完 IP地址后, 所述方法还包括: 所述 BNG向 AAA发送计费请求消息, 开始计费; 或者, 所述 AC向 所述 AAA发送计费请求消息, 开始计费。
本发明实施例又提供了另一种 WLAN与固网交互中分配用户地址的方 法, 所述方法包括:
AP收到来自 UE的地址请求消息后, 将所述地址请求消息打上标记, 并发送给 BNG;
所述 BNG根据所述标记将所述地址请求消息发送给对应的 AC;
所述 AC为所述 UE分配 IP地址, 并通过所述 BNG向所述 UE返回分 配的 IP地址。
上述方案中, 所述将所述地址请求消息打上标记, 为:
根据所述 UE选择的服务集标识(SSID, Service Set Identifier ), 将所 述地址请求消息打上标记。
上述方案中, 在 AP收到来自 UE的地址请求消息之前, 所述方法还包 括:
附着到网络后, 所述 UE与所述 AC之间通过所述 UE所附着的 AP与 所述 AC之间建立的 CAPWAP隧道进行交互, 完成认证过程。
上述方案中, 在为所述 UE分配 IP地址之前, 所述方法还包括: 所述 AC根据所述地址请求消息中的 MAC地址, 判断所述 UE是否通 过认证, 通过认证后, 为所述 UE分配 IP地址。 上述方案中, 所述 AC为所述 UE分配 IP地址, 为:
所述 AC 居所述 UE的位置信息、 和 /或 VLAN标识、 和 /或所述 UE 选择的 SSID, 为所述 UE分配 IP地址。
上述方案中, 为所述 UE分配完 IP地址后, 所述方法还包括: 所述 BNG向 AAA发送计费请求消息, 开始计费; 或者, 所述 AC向 所述 AAA发送计费请求消息, 开始计费。
本发明实施例还提供了一种 WLAN 与固网交互中分配用户地址的系 统, 所述系统包括: UE、 BNG、 以及 AC; 其中,
所述 UE, 配置为向所述 BNG发送地址请求消息; 并接收所述 AC通 过所述 BNG返回的分配的 IP地址;
所述 BNG, 配置为收到所述 UE发送的地址请求消息后, 将所述地址 请求消息发送给对应的所述 AC;
AC, 配置为收到所述 BNG发送的地址请求消息后, 为所述 UE分配 IP地址, 并通过所述 BNG向所述 UE返回分配的 IP地址。
上述方案中, 所述 UE, 还配置为附着到网络后, 与所述 AC之间通过 自身所附着的 AP与所述 AC之间建立的 CAPWAP隧道进行交互, 完成认 证过程;
所述 AC, 还配置为认证成功后, 向所述 BNG发送所述 UE认证成功 消息;
所述 BNG, 还配置为收到所述 AC发送的所述 UE认证成功消息后, 保存所述 UE与所述 AC的绑定关系。
上述方案中, 在向所述 BNG发送所述 UE认证成功消息之前, 所述 AC, 还配置为根据所述 UE的位置信息, 找到所述 BNG。
上述方案中, 在将所述地址请求消息发送给所述 UE对应的 AC之前, 所述 BNG, 还配置为根据所述地址请求消息中的 MAC地址, 在自身保存 的绑定关系中查找所述 AC。
上述方案中, 在为所述 UE分配 IP地址之前, 所述 AC, 还配置为根据 所述地址请求消息中的 MAC地址, 判断所述 UE是否通过认证, 通过认证 后, 为所述 UE分配 IP地址。
上述方案中, 所述系统还包括: AAA, 配置为接收所述 BNG或者所述 AC发送的计费请求消息;
为所述 UE分配完 IP地址后, 所述 BNG, 还配置为向 AAA发送计费 清求消息; 或者,
为所述 UE分配完 IP地址后, 所述 AC, 还配置为向 AAA发送计费请 求消息。
本发明实施例又提供了另一种 WLAN与固网交互中分配用户地址的系 统, 所述系统包括: UE、 AP、 BNG、 以及 AC; 其中,
所述 UE, 配置为向所述 AP发送地址请求消息; 并接收所述 AC通过 所述 BNG返回的分配的 IP地址;
所述 AP, 配置为收到所述 UE发送的地址请求消息后, 将所述地址请 求消息打上标记, 并发送给所述 BNG;
BNG,配置为收到所述 AP发送的地址请求消息后,将根据所述标记将 所述地址请求消息发送给对应的所述 AC;
AC, 配置为收到所述 BNG发送的地址请求消息后, 为所述 UE分配 IP地址, 并通过所述 BNG向所述 UE返回分配的 IP地址。
上述方案中, 所述 UE, 还配置为附着到网络后, 与所述 AC之间通过 自身所附着的 AP与所述 AC之间建立的 CAPWAP隧道进行交互, 完成认 证过程。
上述方案中, 在为所述 UE分配 IP地址之前, 所述 AC, 还配置为根据 所述地址请求消息中的 MAC地址, 判断所述 UE是否通过认证, 通过认证 后, 为所述 UE分配 IP地址。
上述方案中, 所述系统还包括: AAA, 配置为接收所述 BNG发送的计 费请求消息;
为所述 UE分配完 IP地址后, 所述 BNG, 还配置为向 AAA发送计费 清求消息。
本发明实施例提供的 WLAN 与固网交互中分配用户地址的方法及系 统, BNG收到来自 UE的地址请求消息后, 将所述地址请求消息发送给所 述 UE对应的 AC; 所述 AC为所述 UE分配 IP地址, 并通过所述 BNG向 所述 UE返回分配的 IP地址; 或者, AP收到来自所述 UE的地址请求消息 后, 将所述地址请求消息打上标记, 并发送给 BNG; 所述 BNG根据所述 标记将所述地址请求消息发送给对应的 AC;所述 AC为所述 UE分配 IP地 址, 并通过所述 BNG向所述 UE返回分配的 IP地址, 如此, 能在 WLAN 与固网交互的架构下, 有效地实现用户地址的分配。
另外, 附着到网络后, 所述 UE与所述 AC之间通过所述 UE所附着的 AP与所述 AC之间建立的 CAPWAP隧道进行交互, 完成认证过程, 如此, 能在在 WLAN与固网交互的架构下, 有效地完成认证过程。
除此以外, 在为所述 UE分配完 IP地址后, 所述 BNG向 AAA发送计 费请求消息; 或者所述 AC向 AAA发送计费请求消息, 从而触发计费, 如 此, 能在 WLAN与固网交互的架构下, 有效地对用户进行计费控制。 附图说明
图 1为本发明实施例一种 WLAN与固网交互中分配用户地址的方法流 程示意图;
图 2为本发明实施例另一种 WLAN与固网交互中分配用户地址的方法 流程示意图;
图 3为实施例的组网场景示意图; 图 4为实施例一 WLAN与固网交互中进行认证的方法流程示意图; 图 5为实施例二 WLAN与固网交互中分配 IP地址及进行计费的方法流 程示意图;
图 6为实施例三 WLAN与固网交互中分配 IP地址及进行计费的方法流 程示意图;
图 7为实施例四 WLAN与固网交互中进行认证的方法流程示意图; 图 8为实施例五 WLAN与固网交互中分配 IP地址及进行计费的方法流 程示意图;
图 9为本发明一种 WLAN与固网交互中分配用户地址的系统结构示意 图;
图 10为本发明另一种 WLAN与固网交互中分配用户地址的系统结构 示意图。 具体实施方式
下面结合附图及具体实施例对本发明再作进一步详细的说明。
本发明实施例一种 WLAN与固网交互中分配用户地址的方法, 如图 1 所示, 包括以下步骤:
步骤 101 : BNG收到来自 UE的地址请求消息后, 将所述地址请求消 息发送给对应的 AC;
这里,在将所述地址请求消息发送给对应的 AC之前,该方法还可以进 一步包括:
所述 BNG根据所述地址请求消息中的 MAC地址, 在自身保存的绑定 关系中查找所述 AC。
在执行步骤 101之前, 该方法还可以进一步包括:
附着到网络后, 所述 UE与所述 AC之间通过所述 UE所附着的 AP与 所述 AC之间建立的 CAPWAP隧道进行交互, 完成认证过程; 认证成功后, 所述 AC向所述 BNG发送所述 UE认证成功消息, 所述 BNG收到消息后, 保存所述 UE与所述 AC的绑定关系;
其中, 在认证过程中, AP能将来自所述 UE的用于认证的报文与来自 在向所述 BNG发送所述 UE认证成功消息之前, 该方法还可以进一步 包括: 所述 AC根据所述 UE的位置信息, 找到所述 BNG; 其中, 所述 UE 的位置信息为所述 AP上报给所述 AC的位置信息; 或者, 所述 AC根据自 身与所述 AP的配置关系, 获取到的位置信息; 更具体地, 所述 UE的位置 信息是指: 所述 AP的位置信息。
所述 UE认证成功消息至少携带所述 UE的 MAC地址; 保存的所述
UE与所述 AC的绑定关系中, 用所述 UE的 MAC地址标识所述 UE。
步骤 102: 所述 AC为所述 UE分配 IP地址, 并通过所述 BNG向所述
UE返回分配的 IP地址。
这里, 所述 AC为所述 UE分配 IP地址, 具体为:
所述 AC根据所述 UE的位置信息为所述 UE分配 IP地址。
在为所述 UE分配 IP地址之前, 该方法还可以进一步包括:
所述 AC根据所述地址请求消息中的 MAC地址, 判断所述 UE是否通 过认证, 通过认证后, 为所述 UE分配 IP地址。
为所述 UE分配完 IP地址后, 该方法还可以进一步包括:
所述 BNG向 AAA发送计费请求消息, 开始计费; 或者, 所述 AC向 所述 AAA发送计费请求消息, 开始计费。
本发明实施例另一种 WLAN与固网交互中分配用户地址的方法, 如图
2所示, 包括以下步骤:
步骤 201 : AP收到来自 UE的地址请求消息后, 将所述地址请求消息 打上标记, 并发送给 BNG; 这里, 所述将所述地址请求消息打上标记, 具体为:
根据所述 UE选择的 SSID, 将所述地址请求消息打上标记。
所述标记具体可以是: VLAN标识。
在执行步骤 201之前, 该方法还可以进一步包括:
附着到网络后, 所述 UE与 AC之间通过所述 UE所附着的 AP与所述 AC之间建立的 C APWAP隧道进行交互, 完成认证过程;
其中, 在认证过程中, 所述 AP能将来自所述 UE的用于认证的报文与 步骤 202: 所述 BNG根据所述标记将所述地址请求消息发送给对应的
AC;
这里, 所述 BNG事先已配置所述标记与 AC的对应关系表, 具体地, 配置了 VLAN标识与 AC的对应关系表,所述 BNG根据配置的所述标记与 AC的对应关系表, 找到对应的 AC。
步骤 203: 所述 AC为所述 UE分配 IP地址, 并通过所述 BNG向所述 UE返回分配的 IP地址。
这里, 所述 AC为所述 UE分配 IP地址, 具体为:
所述 AC 居所述 UE的位置信息、 和 /或 VLAN标识、 和 /或所述 UE 选择的 SSID, 为所述 UE分配 IP地址。
在为所述 UE分配 IP地址之前, 该方法还可以进一步包括:
所述 AC根据所述地址请求消息中的 MAC地址, 判断所述 UE是否通 过认证, 通过认证后, 为所述 UE分配 IP地址。
为所述 UE分配完 IP地址后, 该方法还可以进一步包括:
所述 BNG向 AAA发送计费请求消息, 开始计费。
下面结合实施例对本发明再作进一步详细的描述。
实施例一至实施例五的组网场景如图 3所示,在该场景下, UE为 802.1X 客户端; UE通过 AP接入有线网络,且 AP具备区分 802.11和 802.1X报文 的能力; AC用来管理 AP, 并给 AP下发配置参数, 同时, AC充当 802.1X 认证器及 RADIUS客户端; 另夕卜, AC通过与 BNG的接口向 BNG传递用 户上下线通知消息; BNG参与用户数据的传送,并利用与 AC的接口向 AC 上报 UE的流量信息; AAA为 RADIUS服务器。 其中, 在图 3中, 实线表 示信令流的传输走向, 即: 信令流在 AAA、 AC、 AP、 BNG之间进行传输; 虚线表示数据流的传输走向, 即: 数据流在 BNG、 AP之间进行传输。
需要说明的是:实施例二及实施例三中描述的 UE与 BNG之间的交互, 均通过 AP的直接转发实现; 实施例五中描述的除 UE向 BNG发送地址请 求消息外的 UE与 BNG之间的其它所有交互,均通过 AP的直接转发实现。
实施例一
本实施例的应用场景为: UE附着到网络后进行认证的过程; 本实施例 WLAN与固网交互中进行认证的方法, 如图 4所示, 包括以下步骤:
步骤 401: UE附着到网络后, AP与 AC之间协商并建立 CAPWAP隧 道;
这里, CAPWAP隧道建立后, AP只将来自 UE的 802. IX报文封装在 CAPWAP隧道中发往 AC, 而不将来自 UE的 802.11报文封装在 CAPWAP 隧道中发往 AC; 换句话说, AP 只将来自 UE 的用于认证的报文封装在 CAPWAP隧道中发往 AC。
CAPWAP隧道建立后, 后续步骤中的 UE与 AC之间的用于认证的所 有报文均通过 AP与 AC间的 CAPWAP隧道发送。 具体地, UE向 AC发送 的用于认证的所有报文均通过所述 CAPWAP隧道发送; 相应的, AC向 UE 步骤 402: UE 向 AC发送认证开始(EAPoL-Start )报文, 开始 802. IX 认证接入; 步骤 403: AC收到报文后,向 UE发送身份请求( EAP-Identity-Request ) 报文, 请求 UE上报用户标识;
步骤 404: UE收到报文后,向 AC回复身份响应( EAP-Identity-Response ) 报文;
这里, 所述 EAP-Identity-Response报文包括用户标识。
步骤 405: AC 收到报文后, 将 EAP 帧封装到接入请求 ( RADIUS-Access-Request )报文中, 并发送给 AAA;
这里,可选地, AC在 RADIUS-Access-Request报文中插入 UE的 MAC 地址。
步骤 406 : AAA 收到报文后 , 向 AC 回 复接入响应
( RADIUS-Access-Response )报文;
这里, 所述 RADIUS-Access-Response报文包含 EAP Challenge。
步骤 407~408: AC收到报文后, 从报文中解封出 EAP帧, 并发送给 UE; UE收到 EAP帧后, 通过 EAP帧向 AC进行回复;
这里, 回复的 EAP帧中包含 Challenged Password。
步骤 409: AC 收到 EAP 帧后, 将收到的 EAP 帧封装到 RADIUS-Access-Request报文中, 并发送给 AAA;
这里, 所述 RADIUS-Access-Request才艮文包含 Challenged Password。 步骤 410: AAA收到报文后, 进行认证, 认证成功后, 向 AC回复接 入允许( RADIUS-Access-Accept )报文;
步骤 411 : AC并根据 UE的位置信息找到相应的 BNG, 向 BNG发送 UE认证成功消息;
这里, 所述 UE的位置信息为: AP上报的位置信息, 或者, AC根据 自身与 AP的配置关系获取的位置信息。
所述 UE的位置信息是指: UE所附着的 AP的位置信息。 所述 UE认证成功消息至少携带 UE的 MAC地址。
BNG收到 UE认证成功消息后, 保存 UE与 AC的绑定关系; 其中, 具体地, 保存 UE的 MAC地址标识与 AC的标识的绑定关系。
步骤 412: AC解封出 EAP帧, 并向 UE发送 EAP成功( EAP-Success ) 报文。
至此, 完成认证过程。
实施例二
本实施例的应用场景为: 在实施例一的流程完成后, 即认证成功后, 需要给 UE分配 IP地址, 并进行计费。 本实施例 WLAN与固网交互中分配 IP地址及进行计费的方法, 如图 5所示, 包括以下步骤:
步骤 501: 认证成功后, UE向 BNG发起 DHCPv4/v6地址请求消息; 这里, 所述 DHCPv4/v6地址请求消息包含 UE的 MAC地址。
步骤 502: BNG收到消息后, 根据所述 DHCPv4/v6地址请求消息中的 MAC地址,在自身保存的绑定关系中查找对应的 AC,并将所述 DHCPv4/v6 地址请求消息发送给对应的 AC;
这里, 所述绑定关系在所述 UE的认证过程中生成。
当 BNG在自身保存的绑定关系中未查找到对应的 AC 时, 会向所述 UE回复地址分配失败消息。
步骤 503: AC收到消息后, 根据所述 UE的位置信息给所述 UE分配 相应的 IP地址, 并向 BNG返回分配的 IP地址;
这里, 在根据 UE的位置信息给所述 UE分配相应的 IP地址之前, 该 方法还可以进一步包括:
AC根据 DHCPv4/v6地址请求消息中的 MAC地址,判断所述 UE是否 通过认证,通过认证后,根据所述 UE的位置信息给所述 UE分配相应的 IP 地址。 其中, AC事先已获知所述 UE的 MAC地址, 判断所述 UE是否通过 认证时, 将自身获知的所述 UE的 MAC地址与 DHCPv4/v6地址请求消息 中的 MAC地址进行比较, 二者相同, 则认为所述 UE通过认证, 否则, 认 为所述 UE未通过认证。
AC认为所述 UE未通过认证后, 则不会为所述 UE分配 IP地址, 相应 的, 通过 BNG向所述 UE返回分配失败的消息。
这里, 在分配 IP地址时, AP向 AC上报 UE的位置信息, 或者, AC 根据自身与 AP的配置关系, 获取到所述 UE的位置信息。
步骤 504: BNG收到分配的 IP地址后,向所述 UE返回分配的 IP地址; 步骤 505: BNG向 AAA发送计费请求消息;
这里, 所述计费请求消息中携带用户信息, 其中, 所述用户信息具体 可以是 UE的 IP地址、 和 /或用户标识、 和 /或 MAC地址。
在实际应用时, 也可以先执行步骤 505, 再执行步骤 604, 也可以同时 执行步骤 504与步骤 505,换句话说, 步骤 504与步骤 505的执行没有先后 顺序。
步骤 506: AAA收到计费请求消息后, 向 BNG回复计费响应消息。 这里, AAA向 BNG回复计费响应消息后, 则表明计费开始。
实施例三
本实施例的应用场景为: 在实施例一的流程完成后, 即认证成功后, 需要给 UE分配 IP地址, 并进行计费。 本实施例 WLAN与固网交互中分配 IP地址及进行计费的方法, 如图 6所示, 包括以下步骤:
步骤 601: 认证成功后, UE向 BNG发起 DHCPv4/v6地址请求消息; 这里, 所述 DHCPv4/v6地址请求消息包含 UE的 MAC地址。 步骤 602: BNG收到消息后, 根据所述 DHCPv4/v6地址请求消息中的 MAC地址,在自身保存的绑定关系中查找对应的 AC,并将所述 DHCPv4/v6 地址请求消息发送给对应的 AC;
这里, 所述绑定关系在所述 UE的认证过程中生成。
当 BNG在自身保存的绑定关系中未查找到对应的 AC 时, 会向所述 UE回复地址分配失败消息。
步骤 603: AC收到消息后, 根据所述 UE的位置信息给所述 UE分配 相应的 IP地址, 并向 BNG返回分配的 IP地址;
在根据 UE的位置信息给所述 UE分配相应的 IP地址之前, 该方法还 可以进一步包括:
AC根据 DHCPv4/v6地址请求消息中的 MAC地址,判断所述 UE是否 通过认证,通过认证后,根据所述 UE的位置信息给所述 UE分配相应的 IP 地址。
其中, AC事先已获知所述 UE的 MAC地址, 判断所述 UE是否通过 认证时, 将自身获知的所述 UE的 MAC地址与 DHCPv4/v6地址请求消息 中的 MAC地址进行比较, 二者相同, 则认为所述 UE通过认证, 否则, 认 为所述 UE未通过认证。
AC认为所述 UE未通过认证后, 则不会为所述 UE分配 IP地址, 相应 的, 通过 BNG向所述 UE返回分配失败的消息。
步骤 604: BNG收到分配的 IP地址后,向所述 UE返回分配的 IP地址; 步骤 605: AC向 AAA发送计费请求消息;
这里, 所述计费请求消息中携带用户信息, 其中, 所述用户信息具体 可以是 UE的 IP地址、 和 /或用户标识、 和 /或 MAC地址。 在实际应用时, 也可以先执行步骤 605, 再执行步骤 603, 也可以同时 执行步骤 603与步骤 605,换句话说, 步骤 603与步骤 605的执行没有先后 顺序。
步骤 606: AAA收到计费请求消息后, 向 AC回复计费响应消息。 这里, AAA向 AC回复计费响应消息后, 则表明计费开始。
实施例四
本实施例的应用场景为: UE附着到网络后进行认证的过程; 本实施例 WLAN与固网交互中进行认证的方法, 如图 7所示, 包括以下步骤:
步骤 701: UE附着到网络后, AP与 AC之间协商并建立 CAPWAP隧 道;
这里, CAPWAP隧道建立后, AP只将来自 UE的 802. IX报文封装在 CAPWAP隧道中发往 AC, 而不将来自 UE的 802.11报文封装在 CAPWAP 隧道中发往 AC; 换句话说, AP 只将来自 UE 的用于认证的报文封装在 CAPWAP隧道中发往 AC。
CAPWAP隧道建立后, 后续步骤中的 UE与 AC之间的用于认证的所 有报文均通过 AP与 AC间的 CAPWAP隧道发送。 具体地, UE向 AC发送 的用于认证的所有报文均通过所述 CAPWAP隧道发送; 相应的, AC向 UE 步骤 702: UE 向 AC发送 EAPoL-Start报文, 开始 802. IX认证接入; 步骤 703: AC收到报文后, 向 UE发送 EAP-Identity-Request报文, 请 求 UE上报用户标识;
步骤 704: UE收到报文后, 向 AC回复 EAP-Identity-Response报文; 这里, 所述 EAP-Identity-Response报文包括用户标识。
步骤 705: AC收到报文后, 将 EAP帧封装到 RADIUS-Access-Request 报文中, 并发送给 AAA; 这里,可选地, AC在 RADIUS-Access-Request报文中插入 UE的 MAC 地址。
步骤 706: AAA收到报文后, 向 AC回复 RADIUS- Access-Response报 文;
这里, 所述 RADIUS-Access-Response报文包含 EAP Challenge。
步骤 707~708: AC收到报文后, 从报文中解封出 EAP帧, 并发送给
UE; UE收到 EAP帧后, 通过 EAP帧向 AC进行回复;
这里, 回复的 EAP帧中包含 Challenged Password。
步骤 709: AC 收到 EAP 帧后, 将收到的 EAP 帧封装到 RADIUS-Access-Request报文中, 并发送给 AAA;
这里, 所述 RADIUS-Access-Request才艮文包含 Challenged Password。 步骤 710: AAA 收到报文后, 进行认证, 认证成功后, 向 AC 回复
RADIUS-Access-Accept才艮文;
步骤 711 : AC解封出 EAP帧, 并向 UE发送 EAP-Success报文。
至此, 完成认证过程。
实施例五
在实施例四的流程完成后, 即认证成功后, 需要给 UE分配 IP地址, 并进行计费。本实施例 WLAN与固网交互中分配 IP地址及进行计费的方法, 如图 8所示, 包括以下步骤:
步骤 801: 认证成功后, UE向 AP发起 DHCPv4/v6地址请求消息; 步骤 802: AP收到消息后, 将收到的 DHCPv4/v6地址请求消息打上标 记, 并发送给 BNG;
这里, 所述将收到的 DHCPv4/v6地址请求消息打上标记, 具体为: AP根据 UE选择的 SSID, 打上对应的标记。 其中, AP根据接收所述 DHCPv4/v6地址请求消息的接口即可获知 UE选择的 SSID。 所述标己可以是 VLAN标识。
步骤 803: BNG收到消息后, 根据所述标记, 在自身保存的对应关系 表中查找对应的 AC, 并向对应的 AC发送所述 DHCPv4/v6地址请求消息; 这里, BNG上事先已配置标记与 AC的对应关系表, 具体地, 配置了 VLAN标识与 AC的对应关系表。
步骤 804: AC收到消息后, 给所述 UE分配相应的 IP地址, 并向 BNG 返回分配的 IP地址;
具体地, AC根据所述 UE的位置信息、 和 /或 VLAN标识、 和 /或所述 UE选择的 SSID, 给所述 UE分配相应的 IP地址。 其中, AC可利用现有技 术获知所述 UE选择的 SSID。
在给所述 UE分配相应的 IP地址之前, 该方法还可以进一步包括:
AC根据 DHCPv4/v6地址请求消息中的 MAC地址,判断所述 UE是否 通过认证,通过认证后,根据所述 UE的位置信息给所述 UE分配相应的 IP 地址。
步骤 805: BNG收到分配的 IP地址后,向所述 UE返回分配的 IP地址; 步骤 806: BNG向 AAA发送计费请求消息;
这里, 所述计费请求消息中携带用户信息, 其中, 所述用户信息具体 可以是 UE的 IP地址、 和 /或用户标识、 和 /或 MAC地址。
在实际应用时, 也可以先执行步骤 806, 再执行步骤 805, 也可以同时 执行步骤 805与步骤 806,换句话说, 步骤 805与步骤 806的执行没有先后 顺序。
步骤 807: AAA收到计费请求消息后, 向 BNG回复计费响应消息。 这里, AAA向 BNG回复计费响应消息后, 则表明计费开始。
为实现图 1所示的方法, 本发明实施例还提供了一种 WLAN与固网交 互中分配用户地址的系统, 如图 9所示, 该系统包括: UE 91、 BNG 92、 以及 AC 93; 其中,
UE 91, 配置为向 BNG 92发送地址请求消息; 并接收 AC 93通过所述 BNG 92返回的分配的 IP地址;
BNG 92, 配置为收到 UE 91发送的地址请求消息后, 将所述地址请求 消息发送给对应的 AC 93;
AC 93, 配置为收到 BNG 92发送的地址请求消息后, 为所述 UE 91分 配 IP地址, 并通过所述 BNG 92向所述 UE 91返回分配的 IP地址。
其中, 在将所述地址请求消息发送给所述 UE 91对应的 AC 93之前, 所述 BNG 92, 还配置为根据所述地址请求消息中的 MAC地址, 在自身保 存的绑定关系中查找所述 AC 93。
所述 UE 91, 还配置为附着到网络后, 与所述 AC 93之间通过自身所 附着的 AP与所述 AC 93之间建立的 CAPWAP隧道进行交互, 完成认证过 程;
所述 AC 93, 还配置为认证成功后, 向所述 BNG 92发送所述 UE 91 认证成功消息;
所述 BNG 92,还配置为收到所述 AC 93发送的所述 UE 91认证成功消 息后, 保存所述 UE 91与所述 AC 93的绑定关系。
在向所述 BNG 92发送所述 UE 91认证成功消息之前,所述 AC 93,还 配置为根据所述 UE 91的位置信息, 找到所述 BNG 92。
在为所述 UE 91分配 IP地址之前, 所述 AC 93, 还配置为根据所述地 址请求消息中的 MAC地址, 判断所述 UE 91是否通过认证, 通过认证后, 为所述 UE 91分配 IP地址。
该系统还可以进一步包括: AAA, 配置为接收所述 BNG 92或者所述 AC 93发送的计费请求消息;
为所述 UE 91分配完 IP地址后, 所述 BNG 92,还配置为向 AAA发送 计费请求消息; 或者,
为所述 UE 91分配完 IP地址后, 所述 AC 93, 还配置为向 AAA发送 计费请求消息。
为实现图 2所述的方法, 本发明实施例还提供了一种 WLAN与固网交 互中分配用户地址的系统, 如图 10所示, 该系统包括: UE 101、 AP 102, BNG 103、 以及 AC 104; 其中,
UE 101 , 配置为向 AP 102发送地址请求消息; 并接收 AC 104通过所 述 BNG 103返回的分配的 IP地址;
AP 102 , 配置为收到 UE 101发送的地址请求消息后, 将所述地址请求 消息打上标记, 并发送给 BNG 103;
BNG 103, 配置为收到 AP 102发送的地址请求消息后, 将根据所述标 记将所述地址请求消息发送给对应的 AC 104;
AC 104, 配置为收到 BNG 103发送的地址请求消息后, 为所述 UE 101 分配 IP地址, 并通过所述 BNG 103向所述 UE 101返回分配的 IP地址。
其中, 所述 UE 101, 还配置为附着到网络后, 与所述 AC 104之间通 过自身所附着的 AP 102与所述 AC 104之间建立的 CAPWAP隧道进行交互, 完成认证过程。
在为所述 UE 101分配 IP地址之前, 所述 AC 104, 还配置为根据所述 地址请求消息中的 MAC地址, 判断所述 UE 101是否通过认证, 通过认证 后, 为所述 UE 101分配 IP地址。
该系统还可以进一步包括: AAA, 配置为接收所述 BNG 103发送的计 费请求消息;
为所述 UE 101分配完 IP地址后, 所述 BNG 103 , 还配置为向 AAA发 送计费请求消息。
以上所述, 仅为本发明的较佳实施例而已, 并非用于限定本发明的保 护范围

Claims

权利要求书
1、 一种无线局域网络(WLAN )与固网交互中分配用户地址的方法, 所述方法包括:
宽带网络网关 (BNG )收到来自用户设备(UE ) 的地址请求消息后, 将所述地址请求消息发送给对应的接入控制器( AC );
所述 AC为所述 UE分配因特网协议( IP )地址, 并通过所述 BNG向 所述 UE返回分配的 IP地址。
2、 根据权利要求 1所述的方法, 其中, 在 BNG收到来自 UE的地址 请求消息之前, 所述方法还包括:
附着到网络后, 所述 UE与所述 AC之间通过所述 UE所附着的接入节 点 ( AP )与所述 AC之间建立的无线接入点控制与配置协议( CAPWAP ) 隧道进行交互, 完成认证过程;
认证成功后, 所述 AC向所述 BNG发送所述 UE认证成功消息, 所述 BNG收到消息后, 保存所述 UE与所述 AC的绑定关系。
3、 根据权利要求 2所述的方法, 其中, 在向所述 BNG发送所述 UE 认证成功消息之前, 该方法还包括:
所述 AC根据所述 UE的位置信息, 找到所述 BNG。
4、 根据权利要求 3所述的方法, 其中, 所述 UE的位置信息为: 所述 AP上报给所述 AC的位置信息; 或者为: 所述 AC根据自身与所述 AP的 配置关系, 获取到的位置信息。
5、 根据权利要求 1至 4任一项所述的方法, 其中, 在将所述地址请求 消息发送给对应的 AC之前, 所述方法还包括:
所述 BNG根据所述地址请求消息中的媒体接入控制( MAC )地址, 在 自身保存的绑定关系中查找所述 AC。
6、 根据权利要求 1至 4任一项所述的方法, 其中, 在为所述 UE分配 IP地址之前, 所述方法还包括:
所述 AC根据所述地址请求消息中的 MAC地址, 判断所述 UE是否通 过认证, 通过认证后, 为所述 UE分配 IP地址。
7、根据权利要求 1至 4任一项所述的方法, 其中, 所述 AC为所述 UE 分配 IP地址, 为:
所述 AC根据所述 UE的位置信息为所述 UE分配 IP地址。
8、 根据权利要求 1至 4任一项所述的方法, 其中, 为所述 UE分配完 IP地址后, 所述方法还包括:
所述 BNG向认证、 授权和计费服务器(AAA )发送计费请求消息, 开 始计费; 或者, 所述 AC向所述 AAA发送计费请求消息, 开始计费。
9、 一种 WLAN与固网交互中分配用户地址的方法, 所述方法包括: AP收到来自 UE的地址请求消息后, 将所述地址请求消息打上标记, 并发送给 BNG;
所述 BNG根据所述标记将所述地址请求消息发送给对应的 AC;
所述 AC为所述 UE分配 IP地址, 并通过所述 BNG向所述 UE返回分 配的 IP地址。
10、 根据权利要求 9所述的方法, 其中, 所述将所述地址请求消息打 上标己, 为:
根据所述 UE选择的服务集标识( SSID ), 将所述地址请求消息打上标 记。
11、 根据权利要求 10所述的方法, 其中, 在 ΑΡ收到来自 UE的地址 请求消息之前, 所述方法还包括:
附着到网络后, 所述 UE与所述 AC之间通过所述 UE所附着的 AP与 所述 AC之间建立的无线接入点控制与配置协议(CAPWAP ) 隧道进行交 互, 完成认证过程。
12、 根据权利要求 9、 10或 11所述的方法, 其中, 在为所述 UE分配 IP地址之前, 所述方法还包括:
所述 AC根据所述地址请求消息中的 MAC地址, 判断所述 UE是否通 过认证, 通过认证后, 为所述 UE分配 IP地址。
13、根据权利要求 9、 10或 11所述的方法, 其中, 所述 AC为所述 UE 分配 IP地址, 为:
所述 AC 居所述 UE的位置信息、 和 /或 VLAN标识、 和 /或所述 UE 选择的 SSID, 为所述 UE分配 IP地址。
14、 根据权利要求 9、 10或 11所述的方法, 其中, 为所述 UE分配完 IP地址后, 所述方法还包括:
所述 BNG向 AAA发送计费请求消息, 开始计费; 或者, 所述 AC向 所述 AAA发送计费请求消息, 开始计费。
15、 一种 WLAN与固网交互中分配用户地址的系统, 所述系统包括: UE、 BNG、 以及 AC; 其中,
所述 UE, 配置为向所述 BNG发送地址请求消息; 并接收所述 AC通 过所述 BNG返回的分配的 IP地址;
所述 BNG, 配置为收到所述 UE发送的地址请求消息后, 将所述地址 请求消息发送给对应的所述 AC;
所述 AC, 配置为收到所述 BNG发送的地址请求消息后, 为所述 UE 分配 IP地址, 并通过所述 BNG向所述 UE返回分配的 IP地址。
16、 根据权利要求 15所述的系统, 其中,
所述 UE, 还配置为附着到网络后, 与所述 AC之间通过自身所附着的 AP与所述 AC之间建立的 CAPWAP隧道进行交互, 完成认证过程;
所述 AC, 还配置为认证成功后, 向所述 BNG发送所述 UE认证成功 所述 BNG, 还配置为收到所述 AC发送的所述 UE认证成功消息后, 保存所述 UE与所述 AC的绑定关系。
17、 根据权利要求 16所述的系统, 其中, 在向所述 BNG发送所述 UE 认证成功消息之前, 所述 AC, 还配置为根据所述 UE的位置信息, 找到所 述 BNG。
18、 根据权利要求 15、 16或 17所述的系统, 其中, 在将所述地址请 求消息发送给所述 UE对应的 AC之前, 所述 BNG, 还配置为根据所述地 址请求消息中的 MAC地址, 在自身保存的绑定关系中查找所述 AC。
19、 根据权利要求 15、 16或 17所述的系统, 其中, 在为所述 UE分配 IP地址之前, 所述 AC, 还配置为根据所述地址请求消息中的 MAC地址, 判断所述 UE是否通过认证, 通过认证后, 为所述 UE分配 IP地址。
20、 根据权利要求 15、 16或 17所述的系统, 其中, 所述系统还包括: AAA, 配置为接收所述 BNG或者所述 AC发送的计费请求消息;
为所述 UE分配完 IP地址后, 所述 BNG, 还配置为向 AAA发送计费 清求消息; 或者,
为所述 UE分配完 IP地址后, 所述 AC, 还配置为向 AAA发送计费请 求消息。
21、 一种 WLAN与固网交互中分配用户地址的系统, 所述系统包括: UE、 AP、 BNG、 以及 AC; 其中,
所述 UE, 配置为向所述 AP发送地址请求消息; 并接收所述 AC通过 所述 BNG返回的分配的 IP地址;
所述 AP, 配置为收到所述 UE发送的地址请求消息后, 将所述地址请 求消息打上标记, 并发送给所述 BNG;
所述 BNG, 配置为收到所述 AP发送的地址请求消息后, 将根据所述 标记将所述地址请求消息发送给对应的所述 AC; 所述 AC, 配置为收到所述 BNG发送的地址请求消息后, 为所述 UE 分配 IP地址, 并通过所述 BNG向所述 UE返回分配的 IP地址。
22、 根据权利要求 21所述的系统, 其中,
所述 UE, 还配置为附着到网络后, 与所述 AC之间通过自身所附着的 AP与所述 AC之间建立的 CAPWAP隧道进行交互, 完成认证过程。
23、 根据权利要求 21或 22所述的系统, 其中, 在为所述 UE分配 IP 地址之前, 所述 AC, 还配置为根据所述地址请求消息中的 MAC地址, 判 断所述 UE是否通过认证, 通过认证后, 为所述 UE分配 IP地址。
24、根据权利要求 21或 22所述的系统,其中,所述系统还包括: AAA, 配置为接收所述 BNG发送的计费请求消息;
为所述 UE分配完 IP地址后, 所述 BNG, 还配置为向 AAA发送计费 清求消息。
PCT/CN2013/083254 2013-01-14 2013-09-10 无线局域网络与固网交互中分配用户地址的方法及系统 WO2014107969A1 (zh)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN201310012976.6A CN103929504A (zh) 2013-01-14 2013-01-14 无线局域网络与固网交互中分配用户地址的方法及系统
CN201310012976.6 2013-01-14

Publications (1)

Publication Number Publication Date
WO2014107969A1 true WO2014107969A1 (zh) 2014-07-17

Family

ID=51147576

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2013/083254 WO2014107969A1 (zh) 2013-01-14 2013-09-10 无线局域网络与固网交互中分配用户地址的方法及系统

Country Status (2)

Country Link
CN (1) CN103929504A (zh)
WO (1) WO2014107969A1 (zh)

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
EP3454520A1 (en) * 2017-09-12 2019-03-13 Cisco Technology, Inc. Virtual private networks without software requirements

Families Citing this family (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20170374071A1 (en) * 2014-12-31 2017-12-28 Bandwidthx Inc. Systems and methods for controlling access to wireless services
CN106559833B (zh) * 2015-09-24 2019-10-22 中国移动通信集团公司 一种数据传输方法、终端、无线接入点及系统

Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20110173678A1 (en) * 2008-02-13 2011-07-14 Futurewei Technologies, Inc. User and Device Authentication in Broadband Networks
CN102638470A (zh) * 2012-04-20 2012-08-15 姜宁 一种wifi上网过滤方法
CN102724662A (zh) * 2012-06-05 2012-10-10 中国联合网络通信集团有限公司 宽带无线网络中提供差异化服务的方法及装置

Patent Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20110173678A1 (en) * 2008-02-13 2011-07-14 Futurewei Technologies, Inc. User and Device Authentication in Broadband Networks
CN102638470A (zh) * 2012-04-20 2012-08-15 姜宁 一种wifi上网过滤方法
CN102724662A (zh) * 2012-06-05 2012-10-10 中国联合网络通信集团有限公司 宽带无线网络中提供差异化服务的方法及装置

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
EP3454520A1 (en) * 2017-09-12 2019-03-13 Cisco Technology, Inc. Virtual private networks without software requirements
US11019032B2 (en) 2017-09-12 2021-05-25 Cisco Technology, Inc. Virtual private networks without software requirements

Also Published As

Publication number Publication date
CN103929504A (zh) 2014-07-16

Similar Documents

Publication Publication Date Title
US20100048161A1 (en) Method, system and apparatuses thereof for realizing emergency communication service
US9794785B2 (en) Communication system, connection control apparatus, mobile terminal, base station control method, service request method, and program
WO2007006227A1 (fr) Procédé et système de négociation destinés à l’établissement de chemins de données d’interface
WO2014176964A1 (zh) 一种通信管理方法及通信系统
CN103517249A (zh) 一种策略控制的方法、装置和系统
WO2011035667A1 (zh) 实现网间漫游的方法、系统及查询和网络附着方法及系统
WO2014101755A1 (zh) 业务数据分流方法及系统
WO2013174190A1 (zh) 路由选择方法及功能网元
CN106131177B (zh) 一种报文处理方法及装置
WO2014107969A1 (zh) 无线局域网络与固网交互中分配用户地址的方法及系统
WO2011134102A1 (zh) 关联会话的方法、装置及系统
WO2011032478A1 (zh) 一种获取终端身份标识的方法、装置及终端
EP2081327B1 (en) Assignment of a service flow identifier to a host behind a gateway MS
WO2010091562A1 (zh) 用于固定网络与第三方网络或应用服务器交互的方法及装置
US8191153B2 (en) Communication system, server apparatus, information communication method, and program
WO2012142867A1 (zh) 一种认证通知方法及系统
WO2014121614A1 (zh) 无线局域网络与固网交互中实现认证及计费的方法及系统
CN102781093B (zh) 一种用户信息的通知方法及系统
WO2010118570A1 (zh) 一种WiMAX和WiFi网络融合的系统和装置
WO2013067911A1 (zh) 一种接入认证方法、系统及设备
WO2014107970A1 (zh) 无线局域网络与固网交互中接入控制相关方法及系统
US20110153819A1 (en) Communication system, connection apparatus, information communication method, and program
WO2014134973A1 (zh) 一种终端切换方法、接入控制器及接入点
WO2011109992A1 (zh) 一种信息获取方法、装置及系统
JP7351498B2 (ja) 通信システム及び通信制御方法

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 13870645

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE

122 Ep: pct application non-entry in european phase

Ref document number: 13870645

Country of ref document: EP

Kind code of ref document: A1