WO2016082663A1 - 一种进行数据传输的方法、系统和设备 - Google Patents

一种进行数据传输的方法、系统和设备 Download PDF

Info

Publication number
WO2016082663A1
WO2016082663A1 PCT/CN2015/093690 CN2015093690W WO2016082663A1 WO 2016082663 A1 WO2016082663 A1 WO 2016082663A1 CN 2015093690 W CN2015093690 W CN 2015093690W WO 2016082663 A1 WO2016082663 A1 WO 2016082663A1
Authority
WO
WIPO (PCT)
Prior art keywords
user equipment
network
core network
access network
session
Prior art date
Application number
PCT/CN2015/093690
Other languages
English (en)
French (fr)
Inventor
焦斌
Original Assignee
电信科学技术研究院
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 电信科学技术研究院 filed Critical 电信科学技术研究院
Publication of WO2016082663A1 publication Critical patent/WO2016082663A1/zh

Links

Images

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/06—Authentication
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W8/00—Network data management
    • H04W8/02—Processing of mobility data, e.g. registration information at HLR [Home Location Register] or VLR [Visitor Location Register]; Transfer of mobility data, e.g. between HLR, VLR or external networks
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W28/00—Network traffic management; Network resource management
    • H04W28/02—Traffic management, e.g. flow control or congestion control

Definitions

  • the present invention relates to the field of wireless communication technologies, and in particular, to a method, system and device for performing data transmission.
  • the user equipment In the existing LTE (Long Term Evolution) cellular system, the user equipment (User Equipment, UE) will release the Radio Resource Control (RRC) connection without data transmission for a long time, so the subsequent uplink is performed. After the data arrives, the user equipment needs to re-recover the RRC signaling connection before the user plane data transmission can be performed. Since the connection management requires the participation of the core network control plane Mobility Management Entity (MME), the delay is long. At present, it takes at least 80ms to restore the control plane connection process.
  • MME Mobility Management Entity
  • the MME is responsible for the non-access stratum security function, the idle (IDLE) state mobility function, and the Evolved Packet System (EPS) bearer management function.
  • the MME needs to participate in the connection management function.
  • the LTE control plane protocol stack adopts two layers of design: access layer protocol (including RRC) and non-access stratum (NAS).
  • the RRC protocol is responsible for air interface radio resource management and air interface transmission function control, and the RRC protocol is terminated in an evolved Node B (eNB);
  • eNB evolved Node B
  • the non-access stratum (NAS) mainly manages functions that are not directly related to air interface transmission. For example, mobility management, bearer management, identity verification, etc., the non-access stratum protocol stack is terminated in the MME.
  • MTC Machine Type Communications
  • the existing system architecture, protocol stack architecture and data transmission process are all designed for the requirements of multimedia services in the case of mobile communication. Therefore, for the mobility management, connection management and other aspects, the core network entities need to participate in the control. That is to say, since the existing cellular network is a large-scale mobile scene design, the access of the mass machine type user equipment causes a very large processing burden on the existing cellular core network control plane entity MME, along with the machine class in the network. As the number of user devices continues to increase, the problem becomes more and more serious, which will greatly affect the control plane processing delay and reliability performance.
  • the current cellular network surface cannot meet the needs of massive user equipment access, thereby increasing the core network information. Make the burden and increase the processing delay of the core network.
  • the invention provides a method, a system and a device for performing data transmission, which are used to solve the problem that the cellular network surface existing in the prior art cannot meet the access of a large number of user equipments, thereby increasing the signaling burden of the core network and increasing the core network. Handling delays.
  • the access network manages the mobility and connection of the user equipment during the network attachment process of the user equipment
  • the access network When the access network needs to establish a session for the user equipment, the access network establishes a session for the user equipment, and sends the received data of the user equipment.
  • the access network manages the mobility and connection of the user equipment during the network attachment process of the user equipment, including:
  • the access network establishes context information for the user equipment in the user equipment attachment process, and allocates, to the user equipment, a UE ID that uniquely identifies the user equipment in the serving base station of the user equipment, and is used for uplinking.
  • the SR of the resource request is used for uplinking.
  • the access network manages the mobility and connection of the user equipment during the network attachment process of the user equipment, and further includes:
  • the access network configures, for the user equipment, a TA for performing time adjustment during uplink transmission in the process of performing network attachment by the user equipment.
  • the access network saves context information of the user equipment from the core network in the user equipment attachment process, and uniquely identifies the user equipment in the serving base station of the user equipment.
  • the UE ID of the user equipment and the SR for performing the uplink resource request include:
  • the access network After receiving the attach request message from the user equipment, the access network sends an identity verification request message to the core network;
  • the access network After receiving the security context and subscription information for the user equipment from the core network, the access network establishes context information for the user equipment;
  • the access network returns an attach response message including the UE ID and the SR to the user equipment.
  • the access network establishes a session for the user equipment when the session establishment is required for the user equipment, including:
  • the access network allocates, according to the received APN from the user equipment, a first address for performing local transmission for the user equipment after determining that the local session needs to be established for the user equipment;
  • the access network sends a session establishment request to the core network after determining that the user equipment needs to perform a remote session according to the received APN from the user equipment;
  • the access network sends the second address allocated by the core network to the user equipment for remote transmission, and sends the second address to the user equipment.
  • the access network sends the received data of the user equipment, including:
  • the core network After performing a local session, the core network, after receiving the data packet from the user equipment, performs integrity verification on the data packet according to the context information of the user equipment, and after the integrity verification is passed, according to the The context information is decrypted, and the decrypted data packet is sent to the local network;
  • the core network After performing the remote session, the core network, after receiving the data packet from the user equipment, performs integrity verification on the data packet according to the context information of the user equipment, and after the integrity verification is passed, according to the The context information is decrypted, and the decrypted data packet is sent to the core network.
  • the MME sends the received session establishment request message from the access network to the core network gateway, and sends a session establishment response message from the core network gateway to the access network.
  • a system for performing data transmission according to an embodiment of the present invention includes:
  • a management module configured to manage mobility and connection of the user equipment during the network attachment process of the user equipment
  • a module is configured to establish a session for the user equipment when the session establishment is required for the user equipment, and send the received data of the user equipment.
  • the management module is specifically configured to:
  • the management module is further configured to:
  • the user equipment is configured with a TA for performing time adjustment during uplink transmission during the network attachment process performed by the user equipment.
  • the management module is specifically configured to:
  • the establishing module is specifically configured to:
  • the user equipment After the APN is received from the user equipment, after determining that the local session is established for the user equipment, the user equipment is allocated a first address for local transmission; according to the received APN from the user equipment, the user equipment is determined to be required. After the remote session is performed, sending a session establishment request to the core network; the core network is the user equipment The assigned second address for remote transmission is sent to the user equipment.
  • the establishing module is specifically configured to:
  • the data packet is integrity verified according to the context information of the user equipment, and decrypted according to the context information after the integrity verification is passed. Sending the decrypted data packet to the local network;
  • the data packet is integrity verified according to the context information of the user equipment, and decrypted according to the context information after the integrity verification is passed. Send the decrypted data packet to the core network.
  • a sending module configured to send an authentication request from the access network received by the user equipment during the network attaching process to the HSS, and send an identity verification response message from the HSS to the access network;
  • the processing module is configured to send the received session establishment request message from the access network to the core network gateway during the remote session establishment process for the user equipment, and send a session establishment response message from the core network gateway to the access network.
  • the access network manages the mobility and connection of the user equipment during the network attachment process of the user equipment; and when the session establishment needs to be established for the user equipment, establishes a session for the user equipment, and sends the received message.
  • the embodiment of the present invention transfers the connection management and mobility management of the user equipment to the access network, so that the core network no longer participates in the connection management and mobility management of the user equipment, thereby reducing the impact of control plane signaling on the core network.
  • the core network signaling burden and processing delay are reduced, which can better meet the burst communication requirements of mass fixed and search MTC devices in the future.
  • FIG. 1 is a schematic structural diagram of a system for performing data transmission according to Embodiment 1 of the present invention
  • FIG. 2 is a schematic diagram of a local implementation manner of a base station according to an embodiment of the present invention
  • FIG. 3 is a schematic diagram of a manner of implementing a server in an access network according to an embodiment of the present invention
  • FIG. 4 is a schematic diagram of a base station side and a core network side according to an embodiment of the present invention
  • FIG. 5 is a schematic diagram of a user plane protocol stack connected to a local network according to an embodiment of the present invention
  • FIG. 6 is a schematic diagram of a user plane protocol stack and a remote network connection according to an embodiment of the present invention
  • FIG. 7 is a schematic diagram of a first control plane protocol stack according to an embodiment of the present invention.
  • FIG. 8 is a schematic diagram of a second control plane protocol stack according to an embodiment of the present invention.
  • FIG. 9 is a schematic diagram of a core network device according to Embodiment 2 of the present invention.
  • FIG. 10 is a schematic diagram of an MME according to Embodiment 3 of the present invention.
  • FIG. 11 is a schematic diagram of a core network device according to Embodiment 4 of the present invention.
  • FIG. 12 is a schematic diagram of an MME according to Embodiment 5 of the present invention.
  • FIG. 13 is a schematic flowchart of a method for performing data transmission according to Embodiment 6 of the present invention.
  • FIG. 14 is a schematic flowchart of a method for performing data transmission according to Embodiment 7 of the present invention.
  • 15 is a schematic diagram of an attachment process of a user equipment according to an embodiment of the present invention.
  • FIG. 16 is a schematic flowchart of a local session establishment process according to Embodiment 9 of the present invention.
  • FIG. 17 is a schematic flowchart of a remote session establishment process according to Embodiment 10 of the present invention.
  • FIG. 18 is a schematic diagram of an uplink data transmission process for a local network according to Embodiment 11 of the present invention.
  • FIG. 19 is a schematic diagram of an uplink data transmission process for an external network according to Embodiment 12 of the present invention.
  • the access network manages the mobility and connection of the user equipment during the network attachment process of the user equipment; and when the session establishment needs to be established for the user equipment, establishes a session for the user equipment, and sends the received message.
  • the embodiment of the present invention transfers the connection management and mobility management of the user equipment to the access network, so that the core network no longer participates in the connection management and mobility management of the user equipment, thereby reducing the impact of control plane signaling on the core network. It reduces the signaling burden of the core network and the processing delay, and can better meet the burst communication requirements of the mass fixed and search MTC devices in the future.
  • the mobility management function and the connection management function are all moved down to the access network, and the access network stores context information of the user equipment (such as key information used by air interface encryption and integrity protection), and is The user equipment allocates a unique UE ID within the current base station.
  • the UE has uplink and downlink small data packet transmission, the UE access network delay is reduced, and fast data transmission is realized.
  • the user plane access network e.g., base station
  • the user plane access network is responsible for controlling the sessions and local bearers established to access the local network.
  • the MME is only responsible for routing the S1-C interface signaling message received from the base station, including forwarding the authentication identity verification related message to the HSS, and forwarding the session establishment message to the core network gateway S. -GW/PGW.
  • the system for performing data transmission in Embodiment 1 of the present invention includes:
  • the management module 10 is configured to manage mobility and connection of the user equipment during the network attachment process of the user equipment;
  • the establishing module 11 is configured to establish a session for the user equipment when the session establishment is required for the user equipment, and send the received data of the user equipment.
  • the user equipment in the embodiment of the present invention may be a user equipment that moves within a set range after being attached to the network, such as a fixed user equipment or a desert user equipment.
  • the user equipment in the embodiment of the present invention moves in a specific area, and the specific area range here may be rooted. Settings are made as needed, such as areas covered by multiple macro base stations, a range of offices, or a range of factories. Generally, a single base station + remote antenna method can be used in a relatively small range, and a plurality of micro base stations can be used to implement the network deployment in a relatively large range, and a distributed antenna can also be used. If the user equipment of the embodiment of the present invention is attached to the network, the serving base station is not changed. If the user equipment of the embodiment of the present invention is attached to the network, the serving base station may be changed.
  • the user equipment in the embodiment of the present invention is not limited to the user equipment that does not replace the serving base station after being attached to the network, and any user equipment is applicable to the embodiment of the present invention.
  • the management module 10 establishes context information for the user equipment during the user equipment attachment process, and allocates the user equipment to the user equipment during the network attachment process of the user equipment.
  • a UE ID (User Equipment Identity) of the user equipment and a Scheduling Request (SR) for performing an uplink resource request are uniquely identified by the serving base station of the user equipment.
  • the management module 10 saves the context information of the user equipment from the core network in the user equipment attaching process, and assigns the user equipment to the user equipment in the serving base station of the user equipment.
  • the management module 10 After receiving the UE ID and the SR for performing the uplink resource request, after receiving the attach request message from the user equipment, sending an identity verification request message to the core network; receiving the security context for the user equipment from the core network And the subscription information, establishing context information for the user equipment; and returning, to the user equipment, an attach response message including the UE ID and the SR.
  • the management module 10 allocates a UE ID that uniquely identifies the user equipment in the serving base station of the user equipment, so that the bit length occupied by the UE ID can be reduced, and the air interface overhead is reduced.
  • the management module 10 can also select a local gateway serving the user equipment for the user equipment, so as to optimize the data routing, and avoid the problem of frequent replacement of the gateway due to the user equipment movement.
  • the management module 10 may also configure the user equipment in the uplink sending process during the network attachment process of the user equipment. Time Advance (TA) for time adjustment.
  • TA Time Advance
  • the user equipment of the embodiment of the present invention is a fixed user equipment or a search user equipment, since the relative position of the user equipment is always fixed, as long as the user equipment is configured with the TA information during the process of attaching to the network, the subsequent data transmission process does not need to be performed. Then adjust the TA.
  • the user equipment of the embodiment of the present invention is a fixed user equipment or a search user equipment, since the base station accessed after the user equipment is attached to the network remains fixed, the base station and the user equipment can always be maintained even in the absence of data transmission. Connection status without introducing signaling overhead due to mobility procedures
  • the establishing module 11 of the embodiment of the present invention establishes a session for the user equipment when establishing a session for the user equipment, according to the received access point name (APN) from the user equipment.
  • APN access point name
  • the user equipment After determining that the local session establishment of the user equipment is required, the user equipment is allocated a first address for local transmission; Receiving a session establishment request to the core network after determining that the APN from the user equipment is required to perform a remote session for the user equipment; sending the second address of the core network to the user equipment for remote transmission, and sending the second address to the user equipment User equipment.
  • the establishing module 11 of the embodiment of the present invention performs integrity verification and decryption on the uplink data sent by the user equipment according to the key received from the core network, and sends the decrypted data to the network where the local server is located.
  • the base station performs encryption and integrity protection processing on the downlink transmission data using the key received from the core network.
  • the establishing module 11 sends the received data of the user equipment:
  • the data packet is integrity verified according to the context information of the user equipment, and decrypted according to the context information after the integrity verification is passed. Sending the decrypted data packet to the local network;
  • the data packet is integrity verified according to the context information of the user equipment, and decrypted according to the context information after the integrity verification is passed. Send the decrypted data packet to the core network.
  • the establishing module 11 associates the UE ID with the user equipment usage key, and uses the key to perform integrity verification and decryption on the Packet Data Convergence Protocol (PDCP) packet.
  • PDCP Packet Data Convergence Protocol
  • IP Internet Protocol
  • the above modules may be dispersed in different entities of the core network, or may be synthesized in one entity, such as a base station.
  • the multiple functions of the above module may also be divided into multiple sub-modules, each sub-module performing at least one function (for example, the mobility function and the connection management function of the management module 10 for the user equipment may be divided into two sub-modules), and the sub-modules may be dispersed in Different entities in the core network can also be synthesized in one entity.
  • the base station can implement the following three functions:
  • the UE context information is released and stored and the UE ID is allocated in the process of attaching to the network, and the user equipment remains connected after being attached to the network;
  • the user equipment is attached to the network, and the base station (fixed/shedding) information is notified to the base station.
  • the base station triggers the verification of the identity of the user equipment
  • the security context information is saved, and the session type established by the root user equipment is the user.
  • the device selects the gateway. It is considered that the serving base station does not change after the user equipment is attached to the network. If the user equipment needs to be grazing to other locations, the user equipment needs to re-trigger the attaching process to the network.
  • the base station in this embodiment supports the traditional base station and the local gateway function (Local GW) at the same time.
  • the base station performs integrity verification and decryption on the uplink data sent by the user equipment according to the key received from the core network, and sends the decrypted data to the data.
  • the network where the local server is located.
  • the base station performs encryption and integrity protection processing on the downlink transmission data using the key received from the core network.
  • the base station allocates a unique user equipment identifier UE ID in the local base station, and associates the UE ID with the user equipment usage key, and uses the key pair data packet (such as a PDCP packet). Perform integrity verification and decrypt and send the recovered data packets (such as IP packets) to the application layer network.
  • a unique user equipment identifier UE ID in the local base station
  • associates the UE ID with the user equipment usage key uses the key pair data packet (such as a PDCP packet).
  • the key pair data packet such as a PDCP packet.
  • the foregoing modules may be dispersed in different entities of the core network, and may be dispersed in multiple base stations. For details, refer to FIG. 3; or may be dispersed in a local server connected to multiple base stations, as shown in FIG. 4; In any entity.
  • the user plane protocol stack of the embodiment of the present invention also has a difference, which is described below.
  • the IP layer is responsible for routing to the local network
  • the PDCP layer is responsible for encryption and integrity protection of the upper layer IP packets.
  • the Radio Link Control (RLC) layer is responsible for the pair. High-level data packets are concatenated or segmented, and Medium Access Control (MAC) and L1 layers implement data transmission and reception of air interfaces.
  • RLC Radio Link Control
  • the base station + local gateway (eNB+LocalGW) MAC/L1 layer implements the function of receiving and transmitting air interface data
  • the RLC layer implements reassembly of high-level data packets
  • the PDCP layer is responsible for performing integrity verification and decryption functions on the PDCP packets obtained by the UE, IP.
  • the layer implements a routing function for IP data obtained from the UE to the external network.
  • the PDCP layer is responsible for the upper layer IP packet encryption and integrity protection function
  • the RLC layer is responsible for concatenation or segmentation of the data packets from the upper layer
  • the MAC and L1 layer implements the air interface data transmission. And receiving.
  • the base station MAC/L1 layer implements the function of receiving and transmitting air interface data
  • the RLC layer implements reassembly of high-level data packets
  • the PDCP layer is responsible for performing integrity verification and decryption functions on PDCP packets obtained by the UE
  • the base station general packet radio service General Packet Radio
  • the Service, GPRS GPRS Tunneling Protocol
  • GTP GPRS Tunneling Protocol
  • the IP layer of the core network SGW/PGW implements a routing function for IP data obtained from user equipment to an external remote network.
  • FIG. 5 and FIG. 6 are an example of a base station and a local gateway in an entity (that is, the above modules are all in the base station). If the above modules are similar to those in FIG. 5 in other entities, details are not described herein again.
  • control plane protocol stack of the embodiment of the present invention is as shown in FIG. 7:
  • the base station terminates the control plane interface of the user equipment to the network (including the RRC protocol and the enhanced non-access stratum protocol (eNAS) protocol), and the MME is mainly responsible for relaying the S1-C interface signaling, including the association of the authentication identity verification.
  • the information is forwarded to the Home Subscriber Server (HSS), and the session establishment message is forwarded to the core network gateway S-GW/PGW.
  • HSS Home Subscriber Server
  • the non-access stratum protocol Since the non-access stratum protocol is also terminated at the base station, the non-access stratum will be fully designed for the characteristics of the fixed desert device, and the attach process and the session establishment process are retained, and the non-access stratum does not need to maintain the connection state.
  • the RRC layer is basically the same as the existing LTE RRC layer function.
  • the base station can determine the user equipment type according to the RRC layer message. If it is the fixed desert user equipment access, the eNAS message carried in the RRC message received by the user equipment is delivered to the RRC layer. The eNAS processing rate entity of the base station. If the traditional user equipment is accessed, the base station forwards the NAS message carried in the RRC message to the core network MME.
  • both the eNAS layer and the RRC layer terminate with the base station, the functions of the two can be combined, for example, by using a layer stack protocol such as an air interface high layer protocol (for example, this high layer protocol is called an eRRC protocol or an enhanced RRC protocol). Therefore, the purpose of simplifying the control plane protocol stack is achieved, as shown in FIG. 8.
  • a layer stack protocol such as an air interface high layer protocol (for example, this high layer protocol is called an eRRC protocol or an enhanced RRC protocol). Therefore, the purpose of simplifying the control plane protocol stack is achieved, as shown in FIG. 8.
  • the core network device in the second embodiment of the present invention includes: a management module 900 and an establishing module 910.
  • the management module 900 is configured to manage mobility and connection of the user equipment during the network attachment process of the user equipment;
  • the establishing module 910 is configured to establish a session for the user equipment when the session setup needs to be established for the user equipment, and send the received data of the user equipment.
  • the management module 900 is specifically configured to:
  • the management module 900 is further configured to:
  • the user equipment is configured with a TA for performing time adjustment during uplink transmission during the network attachment process performed by the user equipment.
  • the management module 900 is specifically configured to:
  • the establishing module 910 is specifically configured to:
  • the user equipment After the APN is received from the user equipment, after determining that the local session is established for the user equipment, the user equipment is allocated a first address for local transmission; according to the received APN from the user equipment, the user equipment is determined to be required. After the remote session is performed, the session establishment request is sent to the core network, and the second address that is remotely transmitted by the core network for the user equipment is sent to the user equipment.
  • the establishing module 910 is specifically configured to:
  • the data packet is integrity verified according to the context information of the user equipment, and decrypted according to the context information after the integrity verification is passed. Sending the decrypted data packet to the local network;
  • the data packet is integrity verified according to the context information of the user equipment, and decrypted according to the context information after the integrity verification is passed. Send the decrypted data packet to the core network.
  • the core network device in the embodiment of the present invention may be a base station (such as a macro base station, a home base station, etc.), an RN (relay) device, or other core network devices.
  • a base station such as a macro base station, a home base station, etc.
  • RN relay
  • the MME in the third embodiment of the present invention includes: a sending module 1000 and a processing module 1010.
  • the sending module 1000 is configured to send, by the user equipment, an identity verification request from the access network, which is received by the user equipment, to the HSS, and send an identity verification response message from the HSS to the access network;
  • the processing module 1010 is configured to send the received session establishment request message from the access network to the core network gateway, and send a session establishment response message from the core network gateway to the remote session establishment process for the user equipment. Network access.
  • the network side device of Embodiment 4 of the present invention includes:
  • the processor 1101 is configured to read a program in the memory 1104 and perform the following process:
  • the mobility and connection of the user equipment are managed by the transceiver 1102 during the network attachment process of the user equipment; and when the session establishment of the user equipment is required by the transceiver 1102, a session is established for the user equipment, and the connection is sent and received.
  • the data of the user equipment is managed by the transceiver 1102 during the network attachment process of the user equipment; and when the session establishment of the user equipment is required by the transceiver 1102, a session is established for the user equipment, and the connection is sent and received.
  • the transceiver 1102 is configured to receive and transmit data under the control of the processor 1101.
  • the processor 1101 is specifically configured to:
  • the processor 1101 is further configured to:
  • the user equipment is configured with a TA for performing time adjustment during uplink transmission during the network attachment process performed by the user equipment.
  • the processor 1101 is specifically configured to:
  • the processor 1101 is specifically configured to:
  • the local device needs to be established for the user equipment, assigning the first address to the user equipment for local transmission; determining the need according to the received APN from the user equipment.
  • the session establishment request is sent to the core network, and the second address that is remotely transmitted by the core network for the user equipment is sent to the user equipment.
  • the processor 1101 is specifically configured to:
  • the data packet is integrity verified according to the context information of the user equipment, and decrypted according to the context information after the integrity verification is passed. Sending the decrypted data packet to the local network;
  • the data packet is integrity verified according to the context information of the user equipment, and decrypted according to the context information after the integrity verification is passed. Send the decrypted data packet to the core network.
  • bus 1100 can include any number of interconnected buses and bridges, and bus 1100 will include one or more processors represented by processor 1101 and memory represented by memory 1104. The various circuits are linked together. The bus 1100 can also link various other circuits, such as peripherals, voltage regulators, and power management circuits, as is known in the art and, therefore, will not be further described herein.
  • Bus interface 1103 provides an interface between bus 1100 and transceiver 1102.
  • the transceiver 1102 can be an element or a plurality of elements, such as a plurality of receivers and transmitters, providing means for communicating with various other devices on a transmission medium.
  • the data processed by the processor 1101 is transmitted over the wireless medium via the antenna 1105. Further, the antenna 1105 also receives the data and transmits the data to the processor 1101.
  • the processor 1101 is responsible for managing the bus 1100 and the usual processing, and can also provide various functions including timing, peripheral interfaces, voltage regulation, power management, and other control functions.
  • the memory 1104 can be used to store data used by the processor 1101 when performing operations.
  • the processor 1101 may be a central embedded device (CPU), an application specific integrated circuit (ASIC), a field-programmable gate array (FPGA), or a complex programmable logic device ( Complex Programmable Logic Device, CPLD).
  • CPU central embedded device
  • ASIC application specific integrated circuit
  • FPGA field-programmable gate array
  • CPLD complex programmable logic device
  • the MME of the fifth embodiment of the present invention includes:
  • the processor 1201 is configured to read a program in the memory 1204 and perform the following process:
  • An authentication request from the access network received by the transceiver 1202 during the network attach process by the user equipment is sent to the HSS, and an authentication response message from the HSS is sent to the access network; and the user is addressed to the user through the transceiver 1202.
  • the device sends the received session establishment request message from the access network to the core network gateway, and sends a session establishment response message from the core network gateway to the access network.
  • the transceiver 1202 is configured to receive and transmit data under the control of the processor 1201.
  • bus 1200 can include any number of interconnected buses and bridges, and bus 1200 will include one or more processors represented by processor 1201 and memory represented by memory 1204. The various circuits are linked together. Bus 1200 can also be used such as peripherals, voltage regulators and power management Various other circuits, such as circuits and the like, are linked together and are well known in the art and, therefore, will not be further described herein.
  • Bus interface 1203 provides an interface between bus 1200 and transceiver 1202.
  • Transceiver 1202 may be an element or multiple elements, such as multiple receivers and transmitters, providing means for communicating with various other devices on a transmission medium. Data processed by processor 1201 is transmitted over wireless medium via antenna 1205. Further, antenna 1205 also receives data and transmits the data to processor 1201.
  • the processor 1201 is responsible for managing the bus 1200 and the usual processing, and can also provide various functions including timing, peripheral interfaces, voltage regulation, power management, and other control functions.
  • the memory 1204 can be used to store data used by the processor 1201 in performing operations.
  • the processor 1201 may be a CPU, an ASIC, an FPGA, or a CPLD.
  • the method for performing data packet transmission is also provided in the embodiment of the present invention.
  • the device corresponding to the method is a device in a system for transmitting data packets by using the channel in the embodiment of the present invention, and the method solves the problem and the principle
  • the device is similar, so the implementation of the method can be referred to the implementation of the system, and the details are not repeated here.
  • the method for performing data transmission in Embodiment 6 of the present invention includes:
  • Step 1301 The access network manages mobility and connection of the user equipment during the network attachment process of the user equipment.
  • Step 1302 The access network establishes a session for the user equipment when the session establishment is required for the user equipment, and sends the received data of the user equipment.
  • Step 1301 and step 1302 have no necessary timing relationship, when the network attachment is required, step 1301 is performed;
  • step 1302 is performed.
  • the access network manages the mobility and connection of the user equipment during the network attachment process of the user equipment, including:
  • the access network establishes context information for the user equipment in the user equipment attachment process, and allocates, to the user equipment, a UE ID that uniquely identifies the user equipment in the serving base station of the user equipment, and is used for uplinking.
  • the SR of the resource request is used for uplinking.
  • the access network manages the mobility and connection of the user equipment during the network attachment process of the user equipment, and further includes:
  • the access network configures, for the user equipment, a TA for performing time adjustment during uplink transmission in the process of performing network attachment by the user equipment.
  • the access network saves context information of the user equipment from the core network in the user equipment attachment process, and uniquely identifies the user equipment in the serving base station of the user equipment.
  • the UE ID of the user equipment and the SR for performing the uplink resource request include:
  • the access network After receiving the attach request message from the user equipment, the access network sends an identity verification request to the core network. interest;
  • the access network After receiving the security context and subscription information for the user equipment from the core network, the access network establishes context information for the user equipment;
  • the access network returns an attach response message including the UE ID and the SR to the user equipment.
  • the access network establishes a session for the user equipment when the session establishment is required for the user equipment, including:
  • the access network allocates, according to the received APN from the user equipment, a first address for performing local transmission for the user equipment after determining that the local session needs to be established for the user equipment;
  • the access network sends a session establishment request to the core network after determining that the user equipment needs to perform a remote session according to the received APN from the user equipment;
  • the access network sends the second address allocated by the core network to the user equipment for remote transmission, and sends the second address to the user equipment.
  • the access network sends the received data of the user equipment, including:
  • the core network After performing a local session, the core network, after receiving the data packet from the user equipment, performs integrity verification on the data packet according to the context information of the user equipment, and after the integrity verification is passed, according to the The context information is decrypted, and the decrypted data packet is sent to the local network;
  • the core network After performing the remote session, the core network, after receiving the data packet from the user equipment, performs integrity verification on the data packet according to the context information of the user equipment, and after the integrity verification is passed, according to the The context information is decrypted, and the decrypted data packet is sent to the core network.
  • the method for performing data transmission in Embodiment 7 of the present invention includes:
  • Step 1401 The MME receives an identity verification request from the access network that is received by the user equipment during the network attachment process, and sends an identity verification response message from the HSS to the access network;
  • Step 1402 The MME sends a session establishment request message from the access network to the core network gateway during the remote session establishment process for the user equipment, and sends a session establishment response message from the core network gateway to the network gateway. Network access.
  • Example 1 User equipment is attached.
  • the process includes:
  • the base station allocates a unique identifier UE ID in the base station to the user equipment.
  • the base station configures the TA for the user equipment for the user equipment to perform subsequent uplink transmission for time adjustment.
  • the base station configures the SR for the user equipment for the subsequent uplink resource request process of the user equipment.
  • the user equipment establishes a connection on the network side and maintains the RRC connection state after the attachment process is completed.
  • the eighth embodiment of the user equipment attaching process includes the following steps:
  • Step 1 The user equipment sends an attach request message to the base station, and the attach request message carries the “fixed and/or desert” indication information.
  • the purpose of the fixed and/or scenic indication is to determine what mode of operation is used by the base station. It is assumed that the base station supports the access of the traditional user equipment at the same time. Therefore, when the user equipment is accessed, the base station needs to determine the working mode of the current user equipment. In fact, the base station can also determine the type of access of the user equipment from other angles, such as the protocol stack used or the way the message is sealed.
  • the manner in which the indication is used is only an indication method. It is not a method that must be employed in the present invention.
  • the type of the user equipment may not be judged.
  • Step 2 The base station sends an authentication request message for the user equipment to the MME, where the user equipment fixed identifier IMSI is carried.
  • Step 3 The MME forwards the identity verification request message received from the base station to the authentication center HSS.
  • Step 4 The HSS verifies the identity of the user equipment, and sends the security context information of the user equipment and the subscription information of the user equipment to the MME through the identity verification response message.
  • Step 5 The MME forwards the context information of the user equipment received by the HSS and the subscription information of the user equipment to the base station.
  • Step 6 The base station establishes context information for the user equipment, including security context information (such as key information) and subscription information, and adds an attach response message to the base station to allocate a unique UE ID in the base station to the user equipment and send the UE ID to the user equipment together. .
  • the base station sends the configuration to the user equipment TA to enable the user equipment to perform TA adjustment during subsequent uplink data transmission.
  • the base station also configures an SR for the user equipment for the user to perform uplink resource request. After receiving the message, the user equipment saves the UE ID and the TA configuration and the SR configuration information for subsequent uplink data transmission.
  • Step 7 After the user equipment saves the configuration parameters received from the base station, the user equipment sends an attach complete message to the base station. After receiving the attach message, the base station keeps the user equipment in the RRC connection state.
  • Example 2 Local session establishment.
  • the base station selects a local gateway for the user equipment to serve, and the local gateway is responsible for allocating a local IP address to the user equipment and routing IP data of the user equipment to access the local network.
  • the nineth local session establishment method of the embodiment of the invention includes the following steps:
  • Step 1 The user equipment sends a local session establishment request message to the base station, and the base station determines that a local session needs to be established according to the APN.
  • Step 2 The base station allocates an IP address to the user equipment, and the base station sends the IP address assigned by the local gateway to the user equipment to the user equipment through a local session establishment completion message.
  • the base station and the local gateway are not in one entity, and the base station is connected to multiple local gateways, the base station is After determining that a local session needs to be established, the local device Local GW is also selected for the user equipment to serve the user equipment.
  • the gateway can be selected by the user equipment in the following manners: one is that the network saves a “Default APN (default access point name)”, and the user equipment attaches to the MME (the existing network is responsible for gateway selection). Entity), query the optional gateway according to the APN, and prefer one from it. On the other hand, the user equipment accesses an APN, and the network selects a gateway for the user equipment according to the APN reported by the user equipment.
  • the two methods can be reused. For the choice of the core network gateway or the access network local gateway, one way is to carry the .global and .local fields in the APN to assist the query.
  • Example 3 remote session establishment.
  • the MME selects a core network gateway (for example, SGW and PGW) for the user equipment, and the core network gateway PGW is responsible for allocating an IP address for the user equipment and for routing IP data of the user equipment to access the remote network.
  • a core network gateway for example, SGW and PGW
  • the tenth remote session establishment process of the embodiment includes the following steps:
  • Step 1 The user equipment sends a PDN session understanding establishment request, where the APN is carried.
  • Step 2 The base station determines that the user equipment initiates the PDN connection for the remote network, and the base station sends a session establishment request to the MME.
  • Step 3 According to the APN, the MME selects a core network gateway SGW+PGW for the user equipment, and sends a session establishment request message to the core network gateway.
  • Step 4 The core network gateway SGW+PGW establishes a PDN connection for the user equipment and allocates an IP address for accessing the remote network, and sends a session establishment response message to the MME, which carries the IP address allocated for the user equipment PDN connection.
  • Step 5 The MME sends the IP address received from the core network gateway SGW+PGW to the base station through a session establishment response message.
  • Step 6 The base station saves the PDN connection establishment information of the user equipment, and sends the IP address to the user equipment.
  • Example 4 Uplink data transmission for the local network.
  • the user equipment After the uplink data arrives, the user equipment is configured according to the SR (Schedule Request) obtained by using the attach procedure (where the SR configuration includes the physical layer resource used by the SR, and the base station uses the radio network temporary identifier for the downlink resource allocation (Radio Network Temporary Identifier). , SR-RNTI)), after receiving the schedule request, the base station allocates an uplink transmission uplink allocation (Grant) to the user equipment, and the user equipment attempts to receive the Grant allocation by using the SR-RNTI carried in the SR configuration, and successfully receives the request.
  • SR Service Request
  • the user equipment After the uplink GRANT, the user equipment notifies the base station of the amount of the data to be transmitted in the Buffer and the UE ID according to the uplink Grant configuration, and the base station allocates the Grant data to the uplink data of the user equipment according to the buffer capacity (BufferSize) information reported by the user equipment.
  • the uplink Grant information and the random number are sent to the user equipment, and the user equipment sends the PDCP packet to the base station by using the uplink Grant configuration, and the base station associates the UE context saved in advance by using the UE ID.
  • the base station allocates data for the user equipment for the data.
  • the transmitted Grant carries the UE ID as the collision detection identifier.
  • the user equipment determines whether the uplink Grant is allocated for use by itself by comparing the UE ID received from the base station. If the user equipment is consistent, the user equipment uses the uplink Grant to send the PDCP packet to the base station. After receiving the PDCP packet, the base station performs decryption and integrity verification through the key pair stored in the associated UE uplink text, and sends the verified IP packet to the application layer network.
  • the uplink data transmission process for the local network in Embodiment 11 of the present invention includes the following steps:
  • Step 1 After the uplink data arrives, the user equipment sends an SR request on the specified physical layer resource according to the SR configuration obtained in the attach procedure.
  • Step 2 After receiving the SR, the base station allocates an uplink transmission Grant to the user equipment, and sends the uplink Grant allocation to the user equipment.
  • Step 3 The user equipment attempts to receive the uplink Grant by using the SR-RNTI carried in the SR configuration, and after successfully receiving the uplink Grant, the user equipment adjusts the uplink sending time according to the TA configuration obtained in the attaching process, and according to the In the uplink Grant configuration that is allocated in step 2, the user equipment sends the data volume information (ie, BufferSize) to be transmitted in the Buffer and the UE ID allocated by the base station to the user equipment to the base station.
  • the data volume information ie, BufferSize
  • Step 4 The base station allocates a Grant to the subsequent data transmission of the user equipment according to the BufferSize information received in step 3, and saves the UE ID.
  • Step 5 The base station sends the uplink Grant allocated for the user equipment and the UE ID received in step 3 to the user equipment.
  • the user equipment confirms whether the current message is sent to itself by comparing the UE ID received by the current message with the UE ID sent by itself in step 3.
  • Step 6 If the UE ID sent by the user equipment in step 3 is the same as the UE ID received by the user equipment in step 5, the user equipment sends the PDCP packet to the base station by using the uplink Grant obtained in step 5. Otherwise, the user equipment will abandon this uplink transmission.
  • Step 7 The base station associates the UE context information according to the UE ID received in step 3 and determines that the key performs integrity verification and decryption on the PDCP packet.
  • Step 8 The base station sends the IP data packet that has passed the integrity verification and is decrypted and recovered to the local network.
  • Step 9 According to the resource used for uplink transmission in step 6, the base station determines the resource used by the downlink Ack feedback, and sends a correct (ACK) indication to the user equipment as a response to the successful transmission of the uplink PDCP packet in step 6.
  • ACK correct
  • Example 5 Uplink data transmission for an external network.
  • the uplink data transmission process for the external network in Embodiment 12 of the present invention includes the following steps:
  • Step 1 After the uplink data arrives, the user equipment sends an SR request on the specified physical layer resource according to the SR configuration obtained in the attach procedure.
  • Step 2 After receiving the SR, the base station allocates an uplink transmission Grant to the user equipment, and sends the uplink Grant allocation to the user equipment.
  • Step 3 The user equipment attempts to receive the uplink Grant by using the SR-RNTI carried in the SR configuration, and After receiving the uplink Grant, the user equipment adjusts the uplink transmission time according to the TA configuration obtained in the attach process, and according to the uplink Grant configuration allocated in step 2, the user equipment will need to transmit the data amount information in the Buffer (ie, BufferSize). And the UE ID assigned by the base station to the user equipment is sent to the base station.
  • Buffer ie, BufferSize
  • Step 4 The base station allocates a Grant to the subsequent data transmission of the user equipment according to the BufferSize information received in step 3, and saves the UE ID.
  • Step 5 The base station sends the uplink Grant allocated for the user equipment and the UE ID received in step 3 to the user equipment.
  • the user equipment confirms whether the current message is sent to itself by comparing the UE ID received by the current message with the UE ID sent by itself in step 3.
  • Step 6 If the UE ID sent by the user equipment in step 3 is the same as the UE ID received by the user equipment in step 5, the user equipment sends the PDCP packet to the base station by using the uplink Grant obtained in step 5. Otherwise, the user equipment will abandon this uplink transmission.
  • Step 7 The base station associates the UE context information according to the UE ID received in step 3 and determines that the key performs integrity verification and decryption on the PDCP packet.
  • Step 8 The base station converts the IP data packet that has passed the integrity verification and decrypted and recovered into a GTP packet and forwards it to the core network SGW/PGW.
  • Step 9 After receiving the GTP, the core network SGW/PGW recovers the IP data packet from the core network and sends it to the next node on the remote network.
  • Step 10 According to the resource used for uplink transmission in step 6, the base station determines the resource used by the downlink Ack feedback, and sends an ACK indication to the user equipment as a response to the successful transmission of the uplink PDCP packet in step 6.
  • Step 9 and step 10 have no necessary timing relationship, and the base station can perform step 10 after performing step 8.
  • the access network manages the mobility and connection of the user equipment during the network attachment process of the user equipment in the embodiment of the present invention; and establishes the user equipment for the session establishment when the user equipment needs to be established for the user equipment. Conversation and sending the received data of the user equipment.
  • the embodiment of the present invention transfers the connection management and mobility management of the user equipment to the access network, so that the core network no longer participates in the connection management and mobility management of the user equipment, thereby reducing the impact of control plane signaling on the core network.
  • the core network signaling burden and processing delay are reduced, which can better meet the burst communication requirements of mass fixed and search MTC devices in the future.

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Databases & Information Systems (AREA)
  • Computer Security & Cryptography (AREA)
  • Mobile Radio Communication Systems (AREA)

Abstract

本发明涉及无线通信技术领域，特别涉及一种进行数据传输的方法、系统和设备，用以解决现有技术中存在的蜂窝网络面无法满足海量用户设备接入的需要，从而会增加核心网信令负担，加大核心网处理时延的问题。本发明接入网在用户设备进行网络附着过程中对用户设备的移动性和连接进行管理；以及在需要为用户设备进行会话建立时，为所述用户设备建立会话，并发送收到的所述用户设备的数据。由于本发明将用户设备的连接管理和移动性管理转移到接入网，使得核心网不再参与用户设备的连接管理和移动性管理，从而减小了控制面信令对核心网的影响，降低了核心网信令负担以及处理时延，能够更好的满足了未来海量固定、牧游式MTC设备的突发式通信需求。

Description

一种进行数据传输的方法、系统和设备
本申请要求在2014年11月26日提交中国专利局、申请号为201410693934.8、发明名称为“一种进行数据传输的方法、系统和设备”的中国专利申请的优先权，其全部内容通过引用结合在本申请中。
技术领域
本发明涉及无线通信技术领域，特别涉及一种进行数据传输的方法、系统和设备。
背景技术
现有LTE(Long Term Evolution，长期演进)蜂窝系统中，用户设备(User Equipment，UE)在长时间没有数据传输的情况下无线资源控制(Radio Resource Control，RRC)连接将被释放，因此后续上行数据到达后，用户设备首先需要重新恢复RRC信令连接，才能进行用户面数据传输，由于连接管理需要核心网控制面锚点移动性管理实体(Mobility Management Entity，MME)参与，因此延迟较长，目前恢复控制面连接过程需要至少80ms。
蜂窝系统中MME负责非接入层安全功能，空闲(IDLE)状态移动性功能，和演进分组系统(Evolved Packet System，EPS)承载管理功能，此外MME还需要参与连接管理功能。LTE控制面协议栈采用两层设计，分别是接入层协议(包括RRC)和非接入层协议(Non-Access Stratum，NAS)。其中RRC协议负责对空口无线资源管理和空口传输功能控制，RRC协议终结在演进型基站(evolved Node B，eNB)；非接入层(NAS)主要对和空口传输非直接相关的功能进行管理，例如移动性管理，承载管理，身份验证等，非接入层协议栈终结在MME。
未来机器类通信(Machine Type Communications，MTC)用户设备将爆炸式增长，根据预测未来网络中的机器类用户设备数量将是人类用户数量的10倍，因此未来蜂窝网络必须支持海量连接(例如通过单个小区同时为几千个MTC用户设备提供服务)。另外，MTC用户设备采用固定或牧游方式进行部署将占很大比例，在业务特性方面，呈现突发小数据包的特点。
而现有系统架构、协议栈架构和数据传输过程都是针对多媒体业务在移动通信情况下需求进行设计的，因此对于移动性管理，连接管理等方面功能都需要核心网实体参与控制。也就是说，由于现有蜂窝网络是针大范围移动场景设计，海量机器类用户设备的接入对现有蜂窝核心网控制面节实体MME造成和非常大的处理负担，随着网络中机器类用户设备的不断增加，问题变得越来越严重，这将对控制面处理时延和可靠性性能造成极大影响。
综上所述，目前蜂窝网络面无法满足海量用户设备接入的需要，从而会增加核心网信 令负担，加大核心网处理时延。
发明内容
本发明提供一种进行数据传输的方法、系统和设备，用以解决现有技术中存在的蜂窝网络面无法满足海量用户设备接入的需要，从而会增加核心网信令负担，加大核心网处理时延的问题。
本发明实施例提供的一种进行数据传输的方法，该方法包括：
接入网在用户设备进行网络附着过程中对用户设备的移动性和连接进行管理；以及
所述接入网在需要为用户设备进行会话建立时，为所述用户设备建立会话，并发送收到的所述用户设备的数据。
较佳地，所述接入网在用户设备进行网络附着过程中对用户设备的移动性和连接进行管理，包括：
所述接入网在所述用户设备附着过程中为用户设备建立上下文信息，并为所述用户设备分配在所述用户设备的服务基站中唯一标识所述用户设备的UE ID和用于进行上行资源请求的SR。
较佳地，所述接入网在用户设备进行网络附着过程中对用户设备的移动性和连接进行管理，还包括：
所述接入网在用户设备进行网络附着过程中为所述用户设备配置用于在上行发送过程中进行时间调整的TA。
较佳地，所述接入网在所述用户设备附着过程中保存来自核心网的所述用户设备的上下文信息，并为所述用户设备分配在所述用户设备的服务基站中唯一标识所述用户设备的UE ID和用于进行上行资源请求的SR，包括：
所述接入网在收到来自用户设备的附着请求消息后，向核心网发送身份验证请求消息；
所述接入网在收到来自核心网的针对所述用户设备的安全上下文和签约信息后，为所述用户设备建立上下文信息；
所述接入网向所述用户设备返回包含所述UE ID和所述SR的附着响应消息。
较佳地，所述接入网在需要为用户设备进行会话建立时，为所述用户设备建立会话，包括：
所述接入网根据收到的来自用户设备的APN在确定需要为用户设备进行本地会话建立后，为所述用户设备分配进行本地传输的第一地址；
所述接入网根据收到的来自用户设备的APN在确定需要为用户设备进行远程会话后，向核心网发送会话建立请求；
所述接入网将所述核心网为所述用户设备分配的进行远程传输的第二地址，发送给用户设备。
较佳地，所述接入网发送收到的所述用户设备的数据，包括：
若进行本地会话，所述核心网在收到来自所述用户设备的数据包后，根据所述用户设备的上下文信息对所述数据包进行完整性验证，并在完整性验证通过后根据所述上下文信息进行解密，将解密后的数据包发送给本地网络；
若进行远程会话，所述核心网在收到来自所述用户设备的数据包后，根据所述用户设备的上下文信息对所述数据包进行完整性验证，并在完整性验证通过后根据所述上下文信息进行解密，将解密后的数据包发送给核心网。
本发明实施例提供的另一种进行数据传输的方法，该方法包括：
MME在用户设备进行网络附着过程中收到的来自接入网的身份验证请求发送给HSS，并将来自HSS的身份验证响应消息发送给接入网；以及
所述MME在针对用户设备进行远程会话建立过程中，将收到的来自接入网的会话建立请求消息发送给核心网网关，并将来自核心网网关的会话建立响应消息发送给接入网。
本发明实施例提供的一种进行数据传输的系统，该系统包括：
管理模块，用于在用户设备进行网络附着过程中对用户设备的移动性和连接进行管理；
建立模块，用于在需要为用户设备进行会话建立时，为所述用户设备建立会话，并发送收到的所述用户设备的数据。
较佳地，所述管理模块具体用于：
在所述用户设备附着过程中为用户设备建立上下文信息，并为所述用户设备分配在所述用户设备的服务基站中唯一标识所述用户设备的UE ID和用于进行上行资源请求的SR。
较佳地，所述管理模块还用于：
在用户设备进行网络附着过程中为所述用户设备配置用于在上行发送过程中进行时间调整的TA。
较佳地，所述管理模块具体用于：
在收到来自用户设备的附着请求消息后，向核心网发送身份验证请求消息；在收到来自核心网的针对所述用户设备的安全上下文和签约信息后，为所述用户设备建立上下文信息；向所述用户设备返回包含所述UE ID和所述SR的附着响应消息。
较佳地，所述建立模块具体用于：
根据收到的来自用户设备的APN在确定需要为用户设备进行本地会话建立后，为所述用户设备分配进行本地传输的第一地址；根据收到的来自用户设备的APN在确定需要为用户设备进行远程会话后，向核心网发送会话建立请求；将所述核心网为所述用户设备 分配的进行远程传输的第二地址，发送给用户设备。
较佳地，所述建立模块具体用于：
若进行本地会话，在收到来自所述用户设备的数据包后，根据所述用户设备的上下文信息对所述数据包进行完整性验证，并在完整性验证通过后根据所述上下文信息进行解密，将解密后的数据包发送给本地网络；
若进行远程会话，在收到来自所述用户设备的数据包后，根据所述用户设备的上下文信息对所述数据包进行完整性验证，并在完整性验证通过后根据所述上下文信息进行解密，将解密后的数据包发送给核心网。
本发明实施例提供的一种进行数据传输的MME，该MME包括：
发送模块，用于在用户设备进行网络附着过程中收到的来自接入网的身份验证请求发送给HSS，并将来自HSS的身份验证响应消息发送给接入网；以及
处理模块，用于在针对用户设备进行远程会话建立过程中，将收到的来自接入网的会话建立请求消息发送给核心网网关，并将来自核心网网关的会话建立响应消息发送给接入网。
本发明实施例接入网在用户设备进行网络附着过程中对用户设备的移动性和连接进行管理；以及在需要为用户设备进行会话建立时，为所述用户设备建立会话，并发送收到的所述用户设备的数据。由于本发明实施例将用户设备的连接管理和移动性管理转移到接入网，使得核心网不再参与用户设备的连接管理和移动性管理，从而减小了控制面信令对核心网的影响，降低了核心网信令负担以及处理时延，能够更好的满足了未来海量固定、牧游式MTC设备的突发式通信需求。
附图说明
图1为本发明实施例一进行数据传输的系统结构示意图；
图2为本发明实施例基站本地实现方式示意图；
图3为本发明实施例接入网内服务器实现的方式示意图；
图4为本发明实施例基站侧和核心网侧的示意图；
图5为本发明实施例用户面协议栈与本地网络连接的示意图；
图6为本发明实施例用户面协议栈与远程网络连接的示意图；
图7为本发明实施例第一种控制面协议栈示意图；
图8为本发明实施例第二种控制面协议栈示意图；
图9为本发明实施例二的核心网设备示意图；
图10为本发明实施例三的MME示意图；
图11为本发明实施例四的核心网设备示意图；
图12为本发明实施例五的MME示意图；
图13为本发明实施例六进行数据传输的方法流程示意图；
图14为本发明实施例七进行数据传输的方法流程示意图；
图15为本发明实施例八用户设备附着过程示意图；
图16为本发明实施例九本地会话建立流程示意图；
图17为本发明实施例十远程会话建立流程示意图；
图18为本发明实施例十一针对本地网络的上行数据传输流程示意图；
图19为本发明实施例十二针对外部网络的上行数据传输流程示意图。
具体实施方式
本发明实施例接入网在用户设备进行网络附着过程中对用户设备的移动性和连接进行管理；以及在需要为用户设备进行会话建立时，为所述用户设备建立会话，并发送收到的所述用户设备的数据。由于本发明实施例将用户设备的连接管理和移动性管理转移到接入网，使得核心网不再参与用户设备的连接管理和移动性管理，从而减小了控制面信令对核心网的影响，降低了核心网信令负担以及处理时延，能够更好的满足未来海量固定、牧游式MTC设备的突发式通信需求。
本发明实施例在控制面将移动性管理功能和连接管理功能全部下移到接入网，接入网存储用户设备的上下文信息(例如空口加密和完整性保护使用的密钥信息)，并为用户设备分配在当前基站内唯一的UE ID。在UE有上下行小数据包传输时，减少UE接入网络时延，实现快速数据传输。在用户面接入网(例如基站)负责对为接入本地网络建立的会话和本地承载进行控制。
在MTC类设备接入情况下，MME仅负责对从基站收到的S1-C接口信令消息进行路由，包括将鉴权身份验证相关消息转发给HSS，将会话建立消息转发给核心网网关S-GW/PGW。
下面结合说明书附图对本发明实施例作进一步详细描述。
如图1所示，本发明实施例一进行数据传输的系统包括：
管理模块10，用于在用户设备进行网络附着过程中对用户设备的移动性和连接进行管理；
建立模块11，用于在需要为用户设备进行会话建立时，为所述用户设备建立会话，并发送收到的所述用户设备的数据。
较佳地，本发明实施例的用户设备可以是附着到网络后在设定范围内移动的用户设备，比如固定用户设备或牧游用户设备。
也就是说，本发明实施例的用户设备在特定区域内移动，这里的特定区域范围可以根 据需要进行设定，比如多个宏基站覆盖的区域、一个办公室的范围或者一个工厂的范围。通常在比较小的范围内可以使用单基站+拉远天线方式，在比较大的范围内可以使用多个微基站方式实现布网，也可以用分布式天线。如果是单基站覆盖的场景，则本发明实施例的用户设备附着到网络后不会改变服务基站。如果是多基站部署的场景本发明实施例的用户设备附着到网络后可以改变服务基站。
需要说明的是，本发明实施例的用户设备并不局限于附着到网络后不更换服务基站的用户设备，任何用户设备都适用本发明实施例。
在实施中，管理模块10在用户设备进行网络附着过程中对用户设备的移动性和连接进行管理时，在所述用户设备附着过程中为用户设备建立上下文信息，并为所述用户设备分配在所述用户设备的服务基站中唯一标识所述用户设备的UE ID(用户设备标识)和用于进行上行资源请求的调度请求(Scheduling Request，SR)。
较佳地，管理模块10在所述用户设备附着过程中保存来自核心网的所述用户设备的上下文信息，并为所述用户设备分配在所述用户设备的服务基站中唯一标识所述用户设备的UE ID和用于进行上行资源请求的SR时，在收到来自用户设备的附着请求消息后，向核心网发送身份验证请求消息；在收到来自核心网的针对所述用户设备的安全上下文和签约信息后，为所述用户设备建立上下文信息；向所述用户设备返回包含所述UE ID和所述SR的附着响应消息。
由于管理模块10为所述用户设备分配在所述用户设备的服务基站中唯一标识所述用户设备的UE ID，从而可以降低UE ID占用的比特位长度，降低空口开销。
其中，管理模块10还可以为用户设备选择为用户设备服务的本地网关，从而达到优化数据路由的目的，避免出现由于用户设备移动而导致的频繁更换网关的问题。
在实施中，管理模块10在用户设备进行网络附着过程中对用户设备的移动性和连接进行管理时，还可以在用户设备进行网络附着过程中为所述用户设备配置用于在上行发送过程中进行时间调整的时间提前量(Time Advance，TA)。
如果本发明实施例的用户设备是固定用户设备或牧游用户设备，由于用户设备的相对位置一直保持固定，因此只要在用户设备附着到网络过程中为其配置TA信息，后续数据传输过程不需要再对TA进行调整。
如果本发明实施例的用户设备是固定用户设备或牧游用户设备，由于用户设备附着到网络后接入的基站保持固定，因此即使在没有数据传输情况下，基站和用户设备之间可以始终保持连接状态，而不会引入由于移动性过程而导致的信令开销
较佳地，本发明实施例的建立模块11在需要为用户设备进行会话建立时，为所述用户设备建立会话时，根据收到的来自用户设备的接入点名(Access Point Name，APN)在确定需要为用户设备进行本地会话建立后，为所述用户设备分配进行本地传输的第一地址； 根据收到的来自用户设备的APN在确定需要为用户设备进行远程会话后，向核心网发送会话建立请求；将所述核心网为所述用户设备分配的进行远程传输的第二地址，发送给用户设备。
在实施中，本发明实施例的建立模块11根据从核心网收到的密钥对用户设备上行发送数据进行完整性验证和进行解密，并将解密后数据发送到本地服务器所在网络。在下行方向上基站使用从核心网收到的密钥对下行发送数据进行加密和完整性保护处理。
具体的，建立模块11发送收到的所述用户设备的数据时：
若进行本地会话，在收到来自所述用户设备的数据包后，根据所述用户设备的上下文信息对所述数据包进行完整性验证，并在完整性验证通过后根据所述上下文信息进行解密，将解密后的数据包发送给本地网络；
若进行远程会话，在收到来自所述用户设备的数据包后，根据所述用户设备的上下文信息对所述数据包进行完整性验证，并在完整性验证通过后根据所述上下文信息进行解密，将解密后的数据包发送给核心网。
在用户设备接入网络过程中，建立模块11将UE ID和用户设备使用密钥进行关联，并使用此密钥对分组数据聚合协议(Packet Data Convergence Protocol，PDCP)包进行完整性验证和并解密并将恢复后的互联网协议(Internet Protocol，IP)包发送给应用层网络。
在实施中，上述模块可以分散在核心网的不同实体中，也可以合成在一个实体中，比如基站中。
也可以将上述模块的多个功能分成多个子模块，每个子模块执行至少一个功能(比如管理模块10对用户设备的移动性功能和连接管理功能可以分成两个子模块)，各个子模块可以分散在核心网的不同实体中，也可以合成在一个实体中。
如果上述模块合成在基站中，具体基站和核心网的架构可以参见图2。
在图2的架构中，基站可以实现下列三种功能：
1、在附着到网络过程中完成UE上下文信息发布和存储以及UE ID的分配,用户设备在附着到网络后一直保持连接状态；
2、固定UE本地网络接入会话建立过程；
3、固定UE远程网络接入会话建立过程。
在实施中，用户设备附着到网络过程中，将自身类型(固定/牧游)信息通知基站，基站触发对用户设备身份进行验证后，保存安全上下文信息，并根用户设备建立的会话类型为用户设备选择网关。这里认为用户设备附着到网络后服务基站就不会发生变化，如果用户设备需要牧游到其他位置，则用户设备需要重新触发到网络的附着过程。
本实施例的基站同时支持传统基站和本地网关功能(Local GW)，基站根据从核心网收到的密钥对用户设备上行发送数据进行完整性验证和进行解密，并将解密后数据发送到 本地服务器所在网络。在下行方向上基站使用从核心网收到的密钥对下行发送数据进行加密和完整性保护处理。
在用户设备接入网络过程中，基站为用户设备分配本基站内唯一的用户设备标识UE ID，并将UE ID和用户设备使用密钥进行关联，并使用此密钥对数据包(比如PDCP包)进行完整性验证并解密并将恢复后的数据包(比如IP包)发送给应用层网络。
上述模块可以分散在核心网的不同实体中，可以是分散在多个基站中，具体可以参见图3；也可以分散在与多个基站连接的本地服务器中，具体可以参见图4；还可以分散在任何实体中。
针对本地网络和远程网络，本发明实施例用户面协议栈也有区别，下面进行介绍。
一、如图5所示，本发明实施例用户面协议栈与本地网络连接的示意图中：
在用户设备接入本地网络情况下，IP层负责到本地网络的路由功能，PDCP层负责对上层IP数据包加密和完整性保护功能，无线链路控制(Radio Link Control，RLC)层负责对来自高层的数据包进行串接或分段，媒体接入控制(Medium Access Control，MAC)和L1层实现空口的数据发送和接收。
基站+本地网关(eNB+LocalGW)MAC/L1层实现空口数据的接收和发送功能，RLC层实现对高层数据包的重组，PDCP层负责对UE获得的PDCP包进行完整性验证和解密功能，IP层实现对从UE获得的IP数据到外部网络的路由功能。
二、如图6所示，本发明实施例用户面协议栈与远程网络连接的示意图中：
在用户设备接入外部网络情况下，PDCP层负责对上层IP数据包加密和完整性保护功能，RLC层负责对来自高层的数据包进行串接或分段，MAC和L1层实现空口的数据发送和接收。
基站MAC/L1层实现空口数据的接收和发送功能，RLC层实现对高层数据包的重组，PDCP层负责对UE获得的PDCP包进行完整性验证和解密功能，基站通用分组无线业务(General Packet Radio Service，GPRS)隧道协议(GPRS Tunneling Protocol，GTP)层实现将IP数据通过GTP隧道方式与核心网服务网关(Serving GW，SGW)/分组数据网管(PDN GW，PGW)进行通信。
核心网SGW/PGW的IP层实现对从用户设备获得的IP数据到外部远程网络的路由功能。
图5和图6是以基站+本地网关在一个实体中(即上述模块都在基站中)为例进行说明，如果上述模块在其他实体中与图5类似，在此不再赘述。
本发明实施例控制面协议栈，如图7所示：
基站终结用户设备到网络的控制面接口(包括RRC协议和增强型非接入层协议(eNAS)协议)，MME主要负责对S1-C接口信令进行中继，包括将鉴权身份验证相关消 息转发给归属签约用户服务器(Home Subscriber Server，HSS)，将会话建立消息转发给核心网网关S-GW/PGW。
由于非接入层协议也终结在基站，因此在非接入层将针对固定牧游设备的特点进行全下设计，保留附着过程和会话建立过程，非接入层不需要对连接状态进行维护。
RRC层与现有LTE RRC层功能基本一致，基站可以根据RRC层消息判断用户设备类型，如果是固定牧游式用户设备接入则将从用户设备收到的RRC消息中携带的eNAS消息递交给基站的eNAS处理率实体。如果是传统用户设备接入，则基站将RRC消息中携带的NAS消息转发核心网MME。
此外，由于eNAS层与RRC层均终结与基站，因此也可以将两者功能进行合并，通过例如空口高层协议(例如将此高层协议称为eRRC协议或增强型RRC协议)一层协议栈方式实现，从而达到简化控制面协议栈目的，具体可以参见图8。
如果上述模块合成在核心网设备中，具体核心网设备的结构可以参见图9。
如图9所示，本发明实施例二的核心网设备包括：管理模块900和建立模块910。
管理模块900，用于在用户设备进行网络附着过程中对用户设备的移动性和连接进行管理；
建立模块910，用于在需要为用户设备进行会话建立时，为所述用户设备建立会话，并发送收到的所述用户设备的数据。
较佳地，所述管理模块900具体用于：
在所述用户设备附着过程中为用户设备建立上下文信息，并为所述用户设备分配在所述用户设备的服务基站中唯一标识所述用户设备的UE ID和用于进行上行资源请求的SR。
较佳地，所述管理模块900还用于：
在用户设备进行网络附着过程中为所述用户设备配置用于在上行发送过程中进行时间调整的TA。
较佳地，所述管理模块900具体用于：
在收到来自用户设备的附着请求消息后，向核心网发送身份验证请求消息；在收到来自核心网的针对所述用户设备的安全上下文和签约信息后，为所述用户设备建立上下文信息；向所述用户设备返回包含所述UE ID和所述SR的附着响应消息。
较佳地，所述建立模块910具体用于：
根据收到的来自用户设备的APN在确定需要为用户设备进行本地会话建立后，为所述用户设备分配进行本地传输的第一地址；根据收到的来自用户设备的APN在确定需要为用户设备进行远程会话后，向核心网发送会话建立请求；将所述核心网为所述用户设备分配的进行远程传输的第二地址，发送给用户设备。
较佳地，所述建立模块910具体用于：
若进行本地会话，在收到来自所述用户设备的数据包后，根据所述用户设备的上下文信息对所述数据包进行完整性验证，并在完整性验证通过后根据所述上下文信息进行解密，将解密后的数据包发送给本地网络；
若进行远程会话，在收到来自所述用户设备的数据包后，根据所述用户设备的上下文信息对所述数据包进行完整性验证，并在完整性验证通过后根据所述上下文信息进行解密，将解密后的数据包发送给核心网。
本发明实施例的核心网设备可以是基站(比如宏基站、家庭基站等)，也可以是RN(中继)设备，还可以是其它核心网设备。
如图10所示，本发明实施例三的MME包括：发送模块1000和处理模块1010。
发送模块1000，用于在用户设备进行网络附着过程中收到的来自接入网的身份验证请求发送给HSS，并将来自HSS的身份验证响应消息发送给接入网；以及
处理模块1010，用于在针对用户设备进行远程会话建立过程中，将收到的来自接入网的会话建立请求消息发送给核心网网关，并将来自核心网网关的会话建立响应消息发送给接入网。
如图11所示，本发明实施例四的网络侧设备包括：
处理器1101，用于读取存储器1104中的程序，执行下列过程：
通过收发机1102在用户设备进行网络附着过程中对用户设备的移动性和连接进行管理；以及通过收发机1102在需要为用户设备进行会话建立时，为所述用户设备建立会话，并发送收到的所述用户设备的数据。
收发机1102，用于在处理器1101的控制下接收和发送数据。
较佳地，所述处理器1101具体用于：
在所述用户设备附着过程中为用户设备建立上下文信息，并为所述用户设备分配在所述用户设备的服务基站中唯一标识所述用户设备的UE ID和用于进行上行资源请求的SR。
较佳地，所述处理器1101还用于：
在用户设备进行网络附着过程中为所述用户设备配置用于在上行发送过程中进行时间调整的TA。
较佳地，所述处理器1101具体用于：
在收到来自用户设备的附着请求消息后，向核心网发送身份验证请求消息；在收到来自核心网的针对所述用户设备的安全上下文和签约信息后，为所述用户设备建立上下文信息；向所述用户设备返回包含所述UE ID和所述SR的附着响应消息。
较佳地，所述处理器1101具体用于：
根据收到的来自用户设备的APN在确定需要为用户设备进行本地会话建立后，为所述用户设备分配进行本地传输的第一地址；根据收到的来自用户设备的APN在确定需要 为用户设备进行远程会话后，向核心网发送会话建立请求；将所述核心网为所述用户设备分配的进行远程传输的第二地址，发送给用户设备。
较佳地，所述处理器1101具体用于：
若进行本地会话，在收到来自所述用户设备的数据包后，根据所述用户设备的上下文信息对所述数据包进行完整性验证，并在完整性验证通过后根据所述上下文信息进行解密，将解密后的数据包发送给本地网络；
若进行远程会话，在收到来自所述用户设备的数据包后，根据所述用户设备的上下文信息对所述数据包进行完整性验证，并在完整性验证通过后根据所述上下文信息进行解密，将解密后的数据包发送给核心网。
在图11中，总线架构(用总线1100来代表)，总线1100可以包括任意数量的互联的总线和桥，总线1100将包括由处理器1101代表的一个或多个处理器和存储器1104代表的存储器的各种电路链接在一起。总线1100还可以将诸如外围设备、稳压器和功率管理电路等之类的各种其他电路链接在一起，这些都是本领域所公知的，因此，本文不再对其进行进一步描述。总线接口1103在总线1100和收发机1102之间提供接口。收发机1102可以是一个元件，也可以是多个元件，比如多个接收器和发送器，提供用于在传输介质上与各种其他装置通信的单元。经处理器1101处理的数据通过天线1105在无线介质上进行传输，进一步，天线1105还接收数据并将数据传送给处理器1101。
处理器1101负责管理总线1100和通常的处理，还可以提供各种功能，包括定时，外围接口，电压调节、电源管理以及其他控制功能。而存储器1104可以被用于存储处理器1101在执行操作时所使用的数据。
可选的，处理器1101可以是中央处埋器(CPU)、专用集成电路(Application Specific Integrated Circuit，ASIC)、现场可编程门阵列(Field－Programmable Gate Array，FPGA)或复杂可编程逻辑器件(Complex Programmable Logic Device，CPLD)。
如图12所示，本发明实施例五的MME包括：
处理器1201，用于读取存储器1204中的程序，执行下列过程：
通过收发机1202在用户设备进行网络附着过程中收到的来自接入网的身份验证请求发送给HSS，并将来自HSS的身份验证响应消息发送给接入网；以及通过收发机1202在针对用户设备进行远程会话建立过程中，将收到的来自接入网的会话建立请求消息发送给核心网网关，并将来自核心网网关的会话建立响应消息发送给接入网。
收发机1202，用于在处理器1201的控制下接收和发送数据。
在图12中，总线架构(用总线1200来代表)，总线1200可以包括任意数量的互联的总线和桥，总线1200将包括由处理器1201代表的一个或多个处理器和存储器1204代表的存储器的各种电路链接在一起。总线1200还可以将诸如外围设备、稳压器和功率管理 电路等之类的各种其他电路链接在一起，这些都是本领域所公知的，因此，本文不再对其进行进一步描述。总线接口1203在总线1200和收发机1202之间提供接口。收发机1202可以是一个元件，也可以是多个元件，比如多个接收器和发送器，提供用于在传输介质上与各种其他装置通信的单元。经处理器1201处理的数据通过天线1205在无线介质上进行传输，进一步，天线1205还接收数据并将数据传送给处理器1201。
处理器1201负责管理总线1200和通常的处理，还可以提供各种功能，包括定时，外围接口，电压调节、电源管理以及其他控制功能。而存储器1204可以被用于存储处理器1201在执行操作时所使用的数据。
可选的，处理器1201可以是CPU、ASIC、FPGA或CPLD。
基于同一发明构思，本发明实施例中还提供了进行数据包传输的方法，由于该方法对应的设备是本发明实施例信道进行数据包传输的系统中的设备，并且该方法解决问题的原理与该设备相似，因此该方法的实施可以参见系统的实施，重复之处不再赘述。
如图13所示，本发明实施例六进行数据传输的方法包括：
步骤1301、接入网在用户设备进行网络附着过程中对用户设备的移动性和连接进行管理；
步骤1302、所述接入网在需要为用户设备进行会话建立时，为所述用户设备建立会话，并发送收到的所述用户设备的数据。
其中，步骤1301和步骤1302没有必然的时序关系，在需要进行网络附着时，执行步骤1301；
在需要为用户设备进行会话建立S时，执行步骤1302。
较佳地，所述接入网在用户设备进行网络附着过程中对用户设备的移动性和连接进行管理，包括：
所述接入网在所述用户设备附着过程中为用户设备建立上下文信息，并为所述用户设备分配在所述用户设备的服务基站中唯一标识所述用户设备的UE ID和用于进行上行资源请求的SR。
较佳地，所述接入网在用户设备进行网络附着过程中对用户设备的移动性和连接进行管理，还包括：
所述接入网在用户设备进行网络附着过程中为所述用户设备配置用于在上行发送过程中进行时间调整的TA。
较佳地，所述接入网在所述用户设备附着过程中保存来自核心网的所述用户设备的上下文信息，并为所述用户设备分配在所述用户设备的服务基站中唯一标识所述用户设备的UE ID和用于进行上行资源请求的SR，包括：
所述接入网在收到来自用户设备的附着请求消息后，向核心网发送身份验证请求消 息；
所述接入网在收到来自核心网的针对所述用户设备的安全上下文和签约信息后，为所述用户设备建立上下文信息；
所述接入网向所述用户设备返回包含所述UE ID和所述SR的附着响应消息。
较佳地，所述接入网在需要为用户设备进行会话建立时，为所述用户设备建立会话，包括：
所述接入网根据收到的来自用户设备的APN在确定需要为用户设备进行本地会话建立后，为所述用户设备分配进行本地传输的第一地址；
所述接入网根据收到的来自用户设备的APN在确定需要为用户设备进行远程会话后，向核心网发送会话建立请求；
所述接入网将所述核心网为所述用户设备分配的进行远程传输的第二地址，发送给用户设备。
较佳地，所述接入网发送收到的所述用户设备的数据，包括：
若进行本地会话，所述核心网在收到来自所述用户设备的数据包后，根据所述用户设备的上下文信息对所述数据包进行完整性验证，并在完整性验证通过后根据所述上下文信息进行解密，将解密后的数据包发送给本地网络；
若进行远程会话，所述核心网在收到来自所述用户设备的数据包后，根据所述用户设备的上下文信息对所述数据包进行完整性验证，并在完整性验证通过后根据所述上下文信息进行解密，将解密后的数据包发送给核心网。
如图14所示，本发明实施例七进行数据传输的方法包括：
步骤1401、MME在用户设备进行网络附着过程中收到的来自接入网的身份验证请求发送给HSS，并将来自HSS的身份验证响应消息发送给接入网；以及
步骤1402、所述MME在针对用户设备进行远程会话建立过程中，将收到的来自接入网的会话建立请求消息发送给核心网网关，并将来自核心网网关的会话建立响应消息发送给接入网。
下面以基站和本地网关合在一个实体为例对本发明的方案进行说明，本发明实施例的系统中各个模块在多个实体中的方式与在一个实体中的类似，在此不再赘述。
例一、用户设备附着。
该过程包括：
完成空口密钥分配。
基站为用户设备分配本基站内唯一标示UE ID。
基站为用户设备配置TA用于用户设备进行后续上行发送进行时间调整。
基站为用户设备配置SR用于用户设备后续进行上行资源请求过程。
用户设备建立于网络侧连接，并在附着过程完成后一直保持RRC连接状态。
如图15所示，发明实施例八用户设备附着过程包括下列步骤：
步骤1：用户设备发送附着请求消息给基站，附着请求消息中携带“固定和/或牧游”指示信息。
固定和/或牧游指示的目的是为了基站确定采用什么工作模式，这里假设基站同时支持出传统用户设备接入，因此在用户设备接入是基站需要确定当前用户设备的工作模式。实际上基站也可以从其他角度判断用户设备接入的类型，例如采用的协议栈或消息的封转方式，这里采用指示的方式只是一种指示的方法。并非本发明必须采用的方法。
如果基站不需要选择采用什么工作模式，也可以不对用户设备的类型进行判断。
步骤2：基站发送针对用户设备的身份验证请求消息给MME，其中携带用户设备固定标识IMSI。
步骤3：MME将从基站收到的身份验证请求消息转发给鉴权中心HSS。
步骤4：HSS对用户设备身份进行验证，并通过身份验证响应消息将用户设备的安全上下文信息和用户设备的签约信息发送给MME。
步骤5：MME将从HSS收到的用户设备的上下文信息和用户设备的签约信息转发给基站。
步骤6：基站为用户设备建立上下文信息包括安全上下文信息(例如密钥信息)和签约信息，并将附着响应消息将基站为用户设备分配基站内唯一的UE ID并将UE ID一同发送给用户设备。此外基站发送给用户设备TA配置，以使用户设备在后续上行数据发送过程中进行TA调整。此外基站还为用户设备配置了SR用于用户进行上行资源请求。用户设备收到该消息后，将UE ID以及TA配置和SR配置信息保存起来供后续上行数据发送过程使用。
步骤7：用户设备保存从基站收到的配置参数后，发送附着完成消息给基站，基站收到附着消息后一直保持用户设备始终处于RRC连接状态。
例二、本地会话建立。
通过本地会话建立过程，基站为用户设备选择本地网关进行服务，本地网关负责为用户设备分配本地IP地址并负责对用户设备接入本地网络的IP数据进行路由。
如图16所示，发明实施例九本地会话建立方法包括下列步骤：
步骤1：用户设备发送本地会话建立请求消息给基站，基站根据APN确定需要建立本地会话。
步骤2：基站为用户设备分配IP地址，基站将本地网关为用户设备分配的IP地址通过本地会话建立完成消息发送给用户设备。
这里如果基站和本地网关不在一个实体中，并且基站与多个本地网关连接，则基站在 确定需要建立本地会话后，还会为用户设备选择本地网关Local GW为用户设备进行服务。
本发明实施例为用户设备选择网关可采用现有的几种方式：一种是网络保存一个“Default APN(默认接入点名)”,用户设备附着过程中MME(现有网络中负责网关选择的实体)，根据APN查询可选网关，并从中优选一个。另一种是，用户设备接入携带一个APN，网络根据用户设备上报的APN为用户设备进行网关选择。这两种方法可以重用，对于是选择核心网网关还是接入网本地网关，一种方式是在APN中携带.global、.local字段来辅助查询。
例三、远程会话建立。
通过远程会话建立过程，MME为用户设备选择核心网网关(例如SGW和PGW)，核心网网关PGW负责为用户设备分配IP地址并负责对用户设备接入远程网络的IP数据进行路由。
如图17所示，本明实施例十远程会话建立过程包括下列步骤：
步骤1：用户设备发送PDN会话理解建立请求，其中携带APN。
步骤2：基站判断用户设备发起PDN连接是针对远程网络，则基站发送会话建立请求给MME。
步骤3：根据APN，MME为用户设备选择核心网网关SGW+PGW，并发送会话建立请求消息给核心网网关。
步骤4：核心网网关SGW+PGW为用户设备建立PDN连接并分配用于访问远程网络的IP地址，并发送会话建立响应消息给MME其中携带为用户设备PDN连接分配的IP地址。
步骤5：MME将从核心网网关SGW+PGW收到的IP地址通过会话建立响应消息发送给基站。
步骤6：基站保存用户设备PDN连接建立信息，并将IP地址发送给用户设备。
例四、针对本地网络的上行数据传输。
上行数据到达后，用户设备根据使用附着过程中获得的SR(Schedule Request)配置(其中SR配置包括SR使用的物理层资源，基站为SR进行下行资源分配使用的无线网络临时标识(Radio Network Temporary Identifier，SR-RNTI))发送SR请求，基站收到Schedule Request后为用户设备分配上行传输上行分配(Grant)，用户设备使用SR配置中携带的SR-RNTI尝试对Grant分配进行接收，并在成功接收到上行GRANT后，用户设备根据上行Grant配置，将自身Buffer中待传输数据量大小和一个UE ID通知给基站，基站根据用户设备上报的缓存容量(BufferSize)信息为用户设备的上行数据发送分配Grant，并将上行Grant信息和随机数发送给用户设备，用户设备利用上行Grant配置，将PDCP包发送给基站，基站使用UE ID关联自身预先保存的UE上下文。基站为用户设备分配用于数据 传输的Grant，并携带UE ID作为冲突检测标识。用户设备通过比较从基站收到的UE ID判断上行Grant是否是分配给自己使用，如果一致，用户设备使用此上行Grant将PDCP包发送给基站。基站收到PDCP包后，通过关联的UE上行文中保存的密钥对，PDCP进行解密和完整性验证，并将通过验证恢复后的IP包发送给应用层网络。
如图18所示，本发明实施例十一针对本地网络的上行数据传输过程包括下列步骤：
步骤1：上行数据到达后，用户设备根据使用附着过程中获得的SR配置，在指定的物理层资源上发送SR请求。
步骤2：基站收到SR后为用户设备分配上行传输Grant，并将上行Grant分配发送给用户设备。
步骤3：用户设备使用SR配置中携带的SR-RNTI尝试对上行Grant进行接收，并在成功接收到上行Grant后，根据附着过程中获得的TA配置，用户设备对上行发送时刻进行调整，并根据步骤2分配的上行Grant配置，用户设备将自身Buffer中需要传输的数据量信息(即BufferSize)，以及基站为用户设备分配的UE ID发送给基站。
步骤4：基站根据步骤3收到的BufferSize信息为用户设备的后续数据传输分配Grant，并保存UE ID。
步骤5：基站将为用户设备分配的上行Grant以及步骤3收到的UE ID发送给用户设备。用户设备通过比较当前消息收到的UE ID和在步骤3自身发送的UE ID，确认当前消息是否是发送给自身。
步骤6：如果用户设备在步骤3发送的UE ID与用户设备在步骤5收到的UE ID一致，则用户设备使用步骤5获得的上行Grant，将PDCP包发送给基站。否则用户设备将放弃本次上行发送。
步骤7：基站根据步骤3收到的UE ID关联UE上下文信息并确定密钥对PDCP包进行完整性验证并解密。
步骤8：基站将通过完整性验证，并进行解密恢复出来的IP数据包发送给本地网络。
步骤9：根据步骤6上行发送采用的资源，基站确定下行Ack反馈采用的资源，并向用户设备发送正确(ACK)指示作为步骤6上行PDCP包成功传输的响应。
例五、针对外部网络的上行数据传输。
如图19所示，本发明实施例十二针对外部网络的上行数据传输过程包括下列步骤：
步骤1：上行数据到达后，用户设备根据使用附着过程中获得的SR配置，在指定的物理层资源上发送SR请求。
步骤2：基站收到SR后为用户设备分配上行传输Grant，并将上行Grant分配发送给用户设备。
步骤3：用户设备使用SR配置中携带的SR-RNTI尝试对上行Grant进行接收，并在 成功接收到上行Grant后，根据附着过程中获得的TA配置，用户设备对上行发送时刻进行调整，并根据步骤2分配的上行Grant配置，用户设备将自身Buffer中需要传输的数据量信息(即BufferSize)，以及基站为用户设备分配的UE ID发送给基站。
步骤4：基站根据步骤3收到的BufferSize信息为用户设备的后续数据传输分配Grant，并保存UE ID。
步骤5：基站将为用户设备分配的上行Grant以及步骤3收到的UE ID发送给用户设备。用户设备通过比较当前消息收到的UE ID和在步骤3自身发送的UE ID，确认当前消息是否是发送给自身。
步骤6：如果用户设备在步骤3发送的UE ID与用户设备在步骤5收到的UE ID一致，则用户设备使用步骤5获得的上行Grant，将PDCP包发送给基站。否则用户设备将放弃本次上行发送。
步骤7：基站根据步骤3收到的UE ID关联UE上下文信息并确定密钥对PDCP包进行完整性验证并解密。
步骤8：基站将通过完整性验证，并进行解密恢复出来的IP数据包封转成GTP包并转发给核心网SGW/PGW。
步骤9：核心网SGW/PGW收到GTP后，从其中恢复IP数据包并发送到远程网络下一条节点。
步骤10：根据步骤6上行发送采用的资源，基站确定下行Ack反馈采用的资源，并向用户设备发送ACK指示作为步骤6上行PDCP包成功传输的响应。
其中，步骤9和步骤10没有必然的时序关系，基站在执行完步骤8后就可以执行步骤10。
从上述内容可以看出：本发明实施例接入网在用户设备进行网络附着过程中对用户设备的移动性和连接进行管理；以及在需要为用户设备进行会话建立时，为所述用户设备建立会话，并发送收到的所述用户设备的数据。由于本发明实施例将用户设备的连接管理和移动性管理转移到接入网，使得核心网不再参与用户设备的连接管理和移动性管理，从而减小了控制面信令对核心网的影响，降低了核心网信令负担以及处理时延，能够更好的满足了未来海量固定、牧游式MTC设备的突发式通信需求。
显然，本领域的技术人员可以对本发明进行各种改动和变型而不脱离本发明的精神和范围。这样，倘若本发明的这些修改和变型属于本发明权利要求及其等同技术的范围之内，则本发明也意图包含这些改动和变型在内。

Claims (14)

  1. 一种进行数据传输的方法，其特征在于，该方法包括：
    接入网在用户设备进行网络附着过程中对用户设备的移动性和连接进行管理；以及
    所述接入网在需要为用户设备进行会话建立时，为所述用户设备建立会话，并发送收到的所述用户设备的数据。
  2. 如权利要求1所述的方法，其特征在于，所述接入网在用户设备进行网络附着过程中对用户设备的移动性和连接进行管理，包括：
    所述接入网在所述用户设备附着过程中为用户设备建立上下文信息，并为所述用户设备分配在所述用户设备的服务基站中唯一标识所述用户设备的用户设备标识UE ID和用于进行上行资源请求的调度请求SR。
  3. 如权利要求2所述的方法，其特征在于，所述接入网在用户设备进行网络附着过程中对用户设备的移动性和连接进行管理，还包括：
    所述接入网在用户设备进行网络附着过程中为所述用户设备配置用于在上行发送过程中进行时间调整的时间提前量TA。
  4. 如权利要求2所述的方法，其特征在于，所述接入网在所述用户设备附着过程中保存来自核心网的所述用户设备的上下文信息，并为所述用户设备分配在所述用户设备的服务基站中唯一标识所述用户设备的UE ID和用于进行上行资源请求的SR，包括：
    所述接入网在收到来自用户设备的附着请求消息后，向核心网发送身份验证请求消息；
    所述接入网在收到来自核心网的针对所述用户设备的安全上下文和签约信息后，为所述用户设备建立上下文信息；
    所述接入网向所述用户设备返回包含所述UE ID和所述SR的附着响应消息。
  5. 如权利要求2所述的方法，其特征在于，所述接入网在需要为用户设备进行会话建立时，为所述用户设备建立会话，包括：
    所述接入网根据收到的来自用户设备的接入点名APN在确定需要为用户设备进行本地会话建立后，为所述用户设备分配进行本地传输的第一地址；
    所述接入网根据收到的来自用户设备的APN在确定需要为用户设备进行远程会话后，向核心网发送会话建立请求；
    所述接入网将所述核心网为所述用户设备分配的进行远程传输的第二地址，发送给用户设备。
  6. 如权利要求2所述的方法，其特征在于，所述接入网发送收到的所述用户设备的数据，包括：
    若进行本地会话，所述核心网在收到来自所述用户设备的数据包后，根据所述用户设备的上下文信息对所述数据包进行完整性验证，并在完整性验证通过后根据所述上下文信息进行解密，将解密后的数据包发送给本地网络；
    若进行远程会话，所述核心网在收到来自所述用户设备的数据包后，根据所述用户设备的上下文信息对所述数据包进行完整性验证，并在完整性验证通过后根据所述上下文信息进行解密，将解密后的数据包发送给核心网。
  7. 一种进行数据传输的方法，其特征在于，该方法包括：
    移动性管理实体MME在用户设备进行网络附着过程中收到的来自接入网的身份验证请求发送给归属签约用户服务器HSS，并将来自HSS的身份验证响应消息发送给接入网；以及
    所述MME在针对用户设备进行远程会话建立过程中，将收到的来自接入网的会话建立请求消息发送给核心网网关，并将来自核心网网关的会话建立响应消息发送给接入网。
  8. 一种进行数据传输的系统，其特征在于，该系统包括：
    管理模块，用于在用户设备进行网络附着过程中对用户设备的移动性和连接进行管理；
    建立模块，用于在需要为用户设备进行会话建立时，为所述用户设备建立会话，并发送收到的所述用户设备的数据。
  9. 如权利要求8所述的系统，其特征在于，所述管理模块具体用于：
    在所述用户设备附着过程中为用户设备建立上下文信息，并为所述用户设备分配在所述用户设备的服务基站中唯一标识所述用户设备的UE ID和用于进行上行资源请求的SR。
  10. 如权利要求9所述的系统，其特征在于，所述管理模块还用于：
    在用户设备进行网络附着过程中为所述用户设备配置用于在上行发送过程中进行时间调整的TA。
  11. 如权利要求9所述的系统，其特征在于，所述管理模块具体用于：
    在收到来自用户设备的附着请求消息后，向核心网发送身份验证请求消息；在收到来自核心网的针对所述用户设备的安全上下文和签约信息后，为所述用户设备建立上下文信息；向所述用户设备返回包含所述UE ID和所述SR的附着响应消息。
  12. 如权利要求9所述的系统，其特征在于，所述建立模块具体用于：
    根据收到的来自用户设备的APN在确定需要为用户设备进行本地会话建立后，为所述用户设备分配进行本地传输的第一地址；根据收到的来自用户设备的APN在确定需要为用户设备进行远程会话后，向核心网发送会话建立请求；将所述核心网为所述用户设备分配的进行远程传输的第二地址，发送给用户设备。
  13. 如权利要求9所述的系统，其特征在于，所述建立模块具体用于：
    若进行本地会话，在收到来自所述用户设备的数据包后，根据所述用户设备的上下文信息对所述数据包进行完整性验证，并在完整性验证通过后根据所述上下文信息进行解密，将解密后的数据包发送给本地网络；
    若进行远程会话，在收到来自所述用户设备的数据包后，根据所述用户设备的上下文信息对所述数据包进行完整性验证，并在完整性验证通过后根据所述上下文信息进行解密，将解密后的数据包发送给核心网。
  14. 一种进行数据传输的MME，其特征在于，该MME包括：
    发送模块，用于在用户设备进行网络附着过程中收到的来自接入网的身份验证请求发送给HSS，并将来自HSS的身份验证响应消息发送给接入网；以及
    处理模块，用于在针对用户设备进行远程会话建立过程中，将收到的来自接入网的会话建立请求消息发送给核心网网关，并将来自核心网网关的会话建立响应消息发送给接入网。
PCT/CN2015/093690 2014-11-26 2015-11-03 一种进行数据传输的方法、系统和设备 WO2016082663A1 (zh)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN201410693934.8 2014-11-26
CN201410693934.8A CN105704753B (zh) 2014-11-26 2014-11-26 一种进行数据传输的方法、系统和设备

Publications (1)

Publication Number Publication Date
WO2016082663A1 true WO2016082663A1 (zh) 2016-06-02

Family

ID=56073575

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2015/093690 WO2016082663A1 (zh) 2014-11-26 2015-11-03 一种进行数据传输的方法、系统和设备

Country Status (2)

Country Link
CN (1) CN105704753B (zh)
WO (1) WO2016082663A1 (zh)

Families Citing this family (8)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2018006480A1 (zh) * 2016-07-04 2018-01-11 华为技术有限公司 传输数据的方法和设备
CN106900081B (zh) * 2016-08-23 2019-06-25 中国移动通信有限公司研究院 接入网节点粒度的用户面数据隧道传输的方法及装置
EP3595343B1 (en) * 2017-03-29 2021-08-18 Huawei Technologies Co., Ltd. Storing ciphered context information in a terminal device
CN109150808B (zh) * 2017-06-19 2021-11-09 华为技术有限公司 通信方法、装置和系统
CN109391603B (zh) 2017-08-11 2021-07-09 华为技术有限公司 数据完整性保护方法和装置
CN109510848B (zh) * 2017-09-14 2020-07-31 大唐移动通信设备有限公司 一种通信系统、会话管理方法、数据发送方法及装置
CN111065132B (zh) * 2018-10-17 2022-10-18 华为技术有限公司 无线通信方法及设备
CN112667730B (zh) * 2021-01-13 2023-04-07 永辉云金科技有限公司 一种外部数据验证方法、系统、设备及存储介质

Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20070169107A1 (en) * 2003-06-25 2007-07-19 Sampo Huttunen Method of configuring parameters of machine-to-machine module and machine-to-machine module
CN102340826A (zh) * 2011-11-17 2012-02-01 电信科学技术研究院 一种数据传输的方法和设备
CN102595373A (zh) * 2011-01-14 2012-07-18 中兴通讯股份有限公司 一种对mtc终端进行移动性管理的方法和系统
CN104349388A (zh) * 2013-07-23 2015-02-11 中兴通讯股份有限公司 一种发送小数据的方法、系统及用户设备

Patent Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20070169107A1 (en) * 2003-06-25 2007-07-19 Sampo Huttunen Method of configuring parameters of machine-to-machine module and machine-to-machine module
CN102595373A (zh) * 2011-01-14 2012-07-18 中兴通讯股份有限公司 一种对mtc终端进行移动性管理的方法和系统
CN102340826A (zh) * 2011-11-17 2012-02-01 电信科学技术研究院 一种数据传输的方法和设备
CN104349388A (zh) * 2013-07-23 2015-02-11 中兴通讯股份有限公司 一种发送小数据的方法、系统及用户设备

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
"Study on security aspects of Machine-Type Communications (MTC) and other mobile data applications communications enhancements (Release 12).", 3GPP TECHNICAL SPECIFICATION GROUP SERVICES AND SYSTEM ASPECTS., 30 June 2014 (2014-06-30), pages 73 - 82 *

Also Published As

Publication number Publication date
CN105704753A (zh) 2016-06-22
CN105704753B (zh) 2018-09-07

Similar Documents

Publication Publication Date Title
WO2016082663A1 (zh) 一种进行数据传输的方法、系统和设备
EP2523487B1 (en) Method, apparatus and system for realizing integrity protection
US20190387027A1 (en) Core network, user equipment, and communication control method for device to device communication
CN105338655B (zh) 一种用户平面承载建立的方法及装置
JP5972290B2 (ja) Ｅｐｓにおけるモバイルルータ
US20160066363A1 (en) System and Method for Communications in Communications Systems with Relay Nodes
JP7147883B2 (ja) ｇＮＢ－ＣＵ－ＵＰにおける完全性保護のハンドリング
US9113455B2 (en) Method and device relating to replay technique
US20180242198A1 (en) Mobile communication network system and control method thereof
KR20160106520A (ko) 무선 통신 시스템에서 서비스 제공 방법 및 장치
WO2017166142A1 (zh) 用于中继传输的方法和装置以及中继终端设备
EP3461216B1 (en) Multi-connection communication method and device
US20180368194A1 (en) Terminal device, network device, and data transmission method
EP3713297B1 (en) Layer 2 processing method, central unit and distributed unit
CN107005891B (zh) 一种建立承载的方法、用户设备及基站
WO2017209367A1 (ko) 무선통신 시스템에서 서비스 별로 단말의 인증을 수행하기 위한 방법 및 이를 위한 장치
EP3226648B1 (en) Method, device, and system for transmitting data packet
CN106470465B (zh) Wifi语音业务发起方法、lte通信设备、终端及通信系统
WO2015018304A1 (zh) 一种配置承载的方法和设备
WO2018202131A1 (zh) 通信方法、装置及系统
WO2011009353A1 (zh) 建立ip分流连接的实现方法和系统
WO2014056343A1 (zh) Un子帧配置方法及装置
KR101449720B1 (ko) 베어러 설정 시간을 단축하기 위한 방법 및 장치
CN106256110A (zh) 通信系统中的住宅本地突破
KR101665934B1 (ko) 다중 무선전송기술이 적용된 무선 백홀 시스템에서의 데이터 라우팅 방법

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 15862467

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE

122 Ep: pct application non-entry in european phase

Ref document number: 15862467

Country of ref document: EP

Kind code of ref document: A1