WO2016112680A1

WO2016112680A1 - Access point name processing method, device and system

Info

Publication number: WO2016112680A1
Application number: PCT/CN2015/086272
Authority: WO
Inventors: 汪钱纯
Original assignee: 中兴通讯股份有限公司
Priority date: 2015-01-15
Filing date: 2015-08-06
Publication date: 2016-07-21
Also published as: CN105848249A

Abstract

Provided are an access point name (APN) processing method, device and system, the method comprising: transmitting to, by an evolved packet data gateway (ePDG), an authentication, authorization and accounting (AAA) server the indication information for indicating an address type of a user equipment (UE); receiving, by the ePDG, the contracting APN context selected by the AAA server according to the indication information; and according to the selected contracting APN context, executing, by the ePDG, an operation of accessing the UE to the ePDG. The present invention addresses the problem in which the ePDG has to refuse the access of a user when the UE does not carry an APN and a carried PDN type is inconsistent with the PDN type in the contracting default APN context in the related techniques, thus improving user experiences.

Description

Method, device and system for processing access point name APN

Technical field

The present invention relates to the field of communications, and in particular, to a method, an apparatus, and a system for processing an access point name APN.

Background technique

The 3rd Generation Partnership Project (3GPP) evolved Evolved Packet System (EPS) is derived from the Evolved Universal Terrestrial Radio Access Network (Evolved Universal Terrestrial Radio Access Network). E-UTRAN), Mobility Management Entity (MME), Serving Gateway (S-GW), Packet Data Network Gateway (P-GW or PDN GW), It is composed of a Home Subscriber Server (HSS), a Policy and Charging Rules Function (PCRF) entity, and other supporting nodes.

1 is a structural block diagram of an EPS system supporting interworking with a non-3GPP system in the related art. As shown in FIG. 1, the EPS system supports interworking with a non-3GPP system, and an anchor point between the 3GPP and the non-3GPP system is a P-GW. Non-3GPP systems are classified into trusted non-3GPP IP access and untrusted non-3GPP IP access. The trusted non-3GPP IP access can be directly connected to the P-GW through the S2a interface; the untrusted non-3GPP IP access needs to be connected to the PDN GW through an Evolved Packet Data Gateway (ePDG), ePDG and PDN The interface between GWs is S2b.

In FIG. 1, the MME mobility management unit is responsible for control planes such as mobility management, non-access stratum signaling processing, and user mobility management context management; the S-GW is an access gateway device connected to the E-UTRAN. Forwarding data between E-UTRAN and P-GW, and responsible for buffering paging waiting data; P-GW is a border gateway of EPS and Packet Data Network (PDN), responsible for PDN Accessing and forwarding data between the EPS and the PDN; the PCRF is a policy and charging rule function entity, which is connected to the service network protocol (Internet Protocol, IP for short) service network through the receiving interface Rx to obtain service information. It is connected to the gateway device in the network through the Gx/Gxa/Gxc interface, and is responsible for initiating the establishment of the IP bearer, ensuring the quality of service (QoS) of the service data, and performing charging control.

The UE may sign one or more APN contexts in the HSS, and each subscribed APN context includes a packet. Information such as Packet Data Network Type (PDN type) and APN. The UE is connected to the EPS through the untrusted access system, and needs to perform APN selection to know which contracted APN context is allowed to be used.

The APN selection adopted in the related art is implemented by the following method, and the method includes the following steps:

Step S102: The UE accesses the ePDG, carries the UE's IP address type, that is, the PDN type, carries the APN, or does not carry the APN;

Step S104: If the UE carries the APN to the ePDG, the ePDG notifies the 3GPP AAA server of the APN carried by the UE, otherwise the ePDG does not carry the APN to the 3GPP AAA server;

Step S106: After obtaining the subscription data of the UE from the HSS, the 3GPP AAA server determines that the default APN subscription context is brought to the ePDG if the ePDG does not carry the APN. Otherwise, the carried APN has the corresponding subscription APN context or the subscription APN. Then selecting the contracted APN context to bring to the ePDG;

Step S108: The ePDG determines that the PDN type carried by the UE is the same as the PDN type in the APN subscription context delivered by the 3GPP AAA server, and then allows the user to access, otherwise the user access is denied;

It can be seen that if the UE does not carry the APN and the carried PDN type is inconsistent with the PDN type in the default APN context of the subscription, if the UE carries the PDN type as IPv4, the PDN type in the default APN context of the subscription is IPv6, and the ePDG only It can deny user access and affect the end user experience.

In the related art, when the UE does not carry the APN, and the PDN type carried by the UE is inconsistent with the PDN type in the default APN context of the subscription, the ePDG can only reject the user access problem, and no effective solution has been proposed yet.

Summary of the invention

The main purpose of the embodiments of the present invention is to provide a method, an apparatus, and a system for processing an access point name APN, so as to at least solve the PDN in the default APN context in which the UE does not carry the APN, and carries the PDN type and the subscribed default APN context. When the type is inconsistent, ePDG can only reject the problem of user access.

According to an aspect of the embodiments of the present invention, a method for processing an access point name APN is provided, including: evolving packet data gateway ePDG is sent to an authentication, authorization, and accounting (Authentication, Authorization, Accounting for AAA) server. The indication information indicating the type of the address of the user equipment; the ePDG receives the subscription APN context selected by the AAA server according to the indication information; and the ePDG performs the operation of the UE accessing the ePDG according to the selected subscription APN context. .

Optionally, the indication information carries a packet data network type PDN type, or the indication information The PDN type and the APN are carried in the middle.

Optionally, the evolved packet data gateway ePDG sends the indication information indicating the address type of the user equipment to the AAA server, where the ePDG sends an extended verification protocol Diameter of the application verification, authorization, and accounting basic protocol to the AAA server. a request message of the EAP-Request, wherein the request message carries the indication information.

According to another aspect of the embodiments of the present invention, a method for processing an access point name APN is provided, including: an authentication, authorization, and accounting AAA server receiving an address type sent by an evolved packet data gateway ePDG for indicating a user equipment The AAA server selects a subscription APN context according to the indication information, where the subscription APN context is used to instruct the ePDG to perform an operation of the UE accessing the ePDG.

Optionally, the indication information carries a packet data network type PDN type, or the indication information carries the PDN type and an APN.

Optionally, the AAA server selects the subscription APN context according to the indication information, and the AAA server selects the subscription APN context from the user subscription data stored by the home subscriber server according to the indication information.

According to still another aspect of the embodiments of the present invention, a processing apparatus for an access point name APN is provided, which is applied to an evolved packet data gateway ePDG side, and includes: a sending module, configured to send to an authentication, authorization, and accounting AAA server. The indication information is used to indicate the type of the address of the user equipment; the first receiving module is configured to receive the contracted APN context selected by the AAA server according to the indication information; and the first selection module is configured to: according to the selected subscription APN context Performing an operation of the UE accessing the ePDG.

Optionally, the sending module is further configured to send, to the AAA server, a request message of an extended authentication protocol Diameter-EAP-Request of an application verification, authorization, and accounting basic protocol, where the request message carries Indicate the indication information.

According to still another aspect of the embodiments of the present invention, a processing apparatus for an access point name APN is provided, which is applied to an authentication, authorization, and accounting AAA server side, and includes: a second receiving module configured to receive an evolved packet data gateway. And the second selection module is configured to select the subscription APN context according to the indication information, where the subscription APN context is used to instruct the ePDG to perform the UE access location, where the ePDG sends the indication information of the address type of the user equipment. The operation of the ePDG.

Optionally, the second selection module is further configured to select the subscription APN context from the user subscription data stored by the home subscriber server according to the indication information.

According to still another aspect of the embodiments of the present invention, a processing system for an access point name APN is provided, including: an evolved packet data gateway ePDG and an authentication, authorization, and accounting AAA server; and an evolved packet data gateway ePDG, configured to Sending, to the authentication, authorization, and accounting AAA server, indication information indicating an address type of the user equipment; the AAA server, configured to send, to the ePDG, a contracted APN context selected according to the indication information; the ePDG, further And being configured to perform an operation of the UE accessing the ePDG according to the selected subscription APN context.

Optionally, the evolved packet data gateway ePDG sends indication information indicating an address type of the user equipment to the AAA server by: sending, by the ePDG, the extended verification of the application verification, authorization, and accounting basic protocol to the AAA server. The request message of the protocol Diameter-EAP-Request, wherein the request message carries the indication information.

Optionally, the system further includes: a home subscriber server, where the home subscriber server is configured to store user subscription data, where the subscriber subscription data includes: the subscription APN context.

In the embodiment of the present invention, after the AAA server receives the indication information indicating the address type of the user equipment that is sent by the ePDG, the AAA server selects the subscription APN context according to the indication information, and sends the subscription APN context to the ePDG. The ePDG does not need to check whether the type of the address type and the APN subscription context are the same, and directly uses the subscription APN context to perform the operation of the UE to access the ePDG, and solves the related technology that the UE does not carry the APN and carries the PDN. When the type is inconsistent with the PDN type in the default APN context of the subscription, the ePDG can only reject the user access problem and improve the user experience.

DRAWINGS

The drawings described herein are intended to provide a further understanding of the invention, and are intended to be a part of the invention. In the drawing:

1 is a structural block diagram of an EPS system supporting interworking with a non-3GPP system in the related art;

2 is a flowchart 1 of a method for processing an access point name APN according to an embodiment of the present invention;

3 is a second flowchart of a method for processing an access point name APN according to an embodiment of the present invention;

4 is a structural diagram 1 of a processing apparatus for an access point name APN according to an embodiment of the present invention;

FIG. 5 is a second structural block diagram of a processing apparatus for an access point name APN according to an embodiment of the present invention; FIG.

6 is a structural block diagram of a processing system of an access point name APN according to an embodiment of the present invention;

7 is a block diagram showing an optional structure of a processing system of an access point name APN according to an embodiment of the present invention;

FIG. 8 is a flowchart of a method for a UE to implement UE access without an APN according to an optional embodiment of the present invention; FIG.

FIG. 9 is a flowchart of a method for a UE to implement UE access by using an APN according to an optional embodiment of the present invention.

detailed description

It should be noted that the embodiments in the present application and the features in the embodiments may be combined with each other without conflict. The invention will be described in detail below with reference to the drawings in conjunction with the embodiments.

This embodiment provides a method for processing an access point name APN. FIG. 2 is a flowchart 1 of a method for processing an access point name APN according to an embodiment of the present invention. As shown in FIG. 2, the steps of the method include:

Step S202: The evolved packet data gateway ePDG sends indication information indicating an address type of the user equipment to the authentication, authorization, and accounting AAA server;

Step S204: The ePDG receives the subscribed APN context selected by the AAA server according to the indication information.

Step S206: The ePDG performs an operation of the UE accessing the ePDG according to the selected subscription APN context.

With the embodiment, after the AAA server receives the indication information indicating the address type of the user equipment that is sent by the ePDG, the AAA server selects the contracted APN context according to the indication information, and sends the contracted APN context to the ePDG. The ePDG does not need to check whether the type of the address type and the APN subscription context are consistent, and directly uses the contracted APN context to perform the operation of the UE to access the ePDG, and solves the related art in which the UE does not carry the APN and carries the PDN type and When the PDN types in the default APN context of the contract are inconsistent, the ePDG can only reject the user access problem and improve the user experience.

It should be noted that the AAA server involved in this embodiment is preferably a 3GPP AAA server. Of course, other types of AAA servers are also within the protection scope of the present invention.

The indication information involved in this embodiment may carry a packet data network type PDN type, or carry a PDN type and an APN.

In addition, the manner in which the evolved packet data gateway ePDG sends the indication information indicating the type of the address of the user equipment to the AAA server in the embodiment may be various, and in an optional implementation manner of this embodiment, the following may be adopted. The method is implemented as follows: The ePDG sends a Diameter-EAP-Request to the AAA server, where the request message carries the indication information.

FIG. 3 is a second flowchart of a method for processing an access point name APN according to an embodiment of the present invention. As shown in FIG. 3, the steps of the method include:

Step S302: The authentication, authorization, and accounting AAA server receives the indication information sent by the evolved packet data gateway ePDG for indicating the type of the address of the user equipment.

Step S304: The AAA server selects the subscription APN context according to the indication information, where the subscription APN context is used to instruct the ePDG to perform the operation of the UE accessing the ePDG.

Optionally, the indication information related to the embodiment may carry a packet data network type PDN type, or carry a PDN type and an APN.

In addition, in an optional implementation manner of this embodiment, the manner in which the AAA server selects the subscription APN context according to the indication information may be implemented by: the AAA server selecting the subscription APN context from the user subscription data stored by the home subscriber server according to the indication information. .

The processing device of the access point name APN is also provided in the embodiment, and the device is used to implement the foregoing embodiment and the optional implementation manner, and details are not described herein. As used below, the term "module" may implement a combination of software and/or hardware of a predetermined function. Although the apparatus described in the following embodiments is preferably implemented in software, hardware, or a combination of software and hardware, is also possible and contemplated.

4 is a block diagram of a processing device of an access point name APN according to an embodiment of the present invention. The device is applied to an ePDG side of an evolved packet data gateway. As shown in FIG. 4, the device includes: a sending module 42 configured to The authentication, authorization, and accounting AAA server sends the indication information indicating the type of the address of the user equipment; the first receiving module 44 is coupled to the sending module 42 and configured to receive the contracted APN context selected by the AAA server according to the indication information; The selection module 46 is coupled to the first receiving module 44 and configured to perform the operation of the UE accessing the ePDG according to the selected subscription APN context.

The indication information involved in the embodiment may carry the packet data network type PDN type, or the indication information carries the PDN type and the APN.

Optionally, in an optional implementation manner of this embodiment, the sending module 42 is further configured to send a request message of an extended authentication protocol Diameter-EAP-Request of an application authentication, authorization, and accounting basic protocol to an AAA server. Wherein the request message carries the indication information.

FIG. 5 is a block diagram of a processing device of an access point name APN according to an embodiment of the present invention. The device is applied to an authentication, authorization, and accounting AAA server side. As shown in FIG. 5, the device includes: a second receiving module 52. And the second selection module 54 is coupled to the second selection module 54 and configured to select the contracted APN context according to the indication information, where the second selection module 54 is configured to receive the indication information of the address type of the user equipment. The contracted APN context is used to instruct the ePDG to perform an operation of the UE accessing the ePDG.

Optionally, the indication information carries the packet data network type PDN type, or the indication information carries the PDN type and the APN.

In addition, in an optional implementation manner of this embodiment, the second selection module 54 may be further configured to select a subscription APN context from the user subscription data stored by the home subscriber server according to the indication information.

6 is a structural block diagram of a processing system of an access point name APN according to an embodiment of the present invention. As shown in FIG. 6, the system includes an evolved packet data gateway ePDG 62 and an authentication, authorization, and accounting AAA server coupled to the ePDG 62. 64;

An evolved packet data gateway ePDG 62, configured to send indication information indicating an address type of the user equipment to the authentication, authorization, and accounting AAA server 64;

The AAA server 64 is configured to send the contracted APN context selected according to the indication information to the ePDG 62.

The ePDG 62 is further configured to perform an operation of the UE accessing the ePDG 62 according to the selected subscription APN context.

Optionally, the indication information in this embodiment may carry a packet data network type PDN type, or carry a PDN type and an APN.

In an optional implementation manner of this embodiment, the evolved packet data gateway ePDG may send indication information indicating an address type of the user equipment to the AAA server by: sending, by the ePDG, Diameter-EAP- to the AAA server. The request message of the Request, wherein the request message carries the indication information.

FIG. 7 is a block diagram showing an optional structure of a processing system for access point name APN according to an embodiment of the present invention. As shown in FIG. 7, the system further includes: a home subscriber server HSS 72 coupled to the AAA server 64;

The HSS 72 is configured to store user subscription data, where the user subscription data includes: a contracted APN context.

The invention is exemplified by an alternative embodiment of the invention;

The present invention provides a method for APN access selection, which is applicable to a scenario in which an APN is selected when a UE connects to an EPS through an untrusted access system. The steps of the method include:

Step S11: The ePDG notifies the 3GPP AAA server of the PDN type carried by the UE;

Step S21: The 3GPP AAA server selects a matching contracted APN context notification to the ePDG according to the PDN type carried by the ePDG and the optionally carried APN in the subscribed APN context.

Step S31: The ePDG directly uses the subscribed APN context brought by the 3GPP AAA server, and does not check whether the PDN type carried by the UE and the PDN type in the APN subscription context delivered by the 3GPP AAA server are consistent.

With the optional embodiment, the limitation of the APN selection when the UE connects to the EPS through the untrusted access system is overcome in the related art, the user access success rate is improved, and the user experience is improved.

The present invention will be exemplified below in conjunction with the accompanying drawings and alternative embodiments of the alternative embodiments;

Alternative embodiment 1

FIG. 8 is a flowchart of a method for a UE to implement UE access without an APN according to an optional embodiment of the present invention. As shown in FIG. 8, the UE connects to an EPS through an untrusted non-3GPP access system. In the process, the UE and the UE In the process of creating an Internet Key Exchange Protocol (EDVG) tunnel, the ePDG carries the PDN type and does not carry the APN. The ePDG notifies the 3GPP AAA server of the PDN type carried by the UE, and carries the 3GPP AAA server according to the ePDG. The PDN type selects a matching contracted APN context notification to the ePDG in the subscribed APN context.

Step S801: an authentication and authorization process of the non-3GPP access system;

In this process, the 3GPP AAA server may send the relevant policy information and subscription information of the operator to the access network;

Step S802: The UE and the ePDG exchange the first pair of messages IKE_SA_INIT to negotiate an encryption algorithm, perform exchange of random numbers, and the like;

Step S803: interaction of identity authentication information performed by the UE through the ePDG and the AAA server;

The UE carries the PDN type in the IKE_AUTH request message, and does not carry the APN.

Step S804: The UE sends an IKE_AUTH request to the ePDG.

The UE sends an Internet Key Exchange Authentication (IKE_AUTH) request message including an EAP message to the ePDG to the ePDG, and responds to the authentication challenge received during the identity authentication interaction process;

Step S805: The ePDG sends a Diameter-EAP-Request to the 3GPP AAA server, where the PDN type is included, and the APN is not included.

Step S806: The 3GPP AAA server acquires user subscription data from the home subscriber server.

Step S807: The 3GPP AAA-Server selects a matching contracted APN context in the subscribed APN context according to the PDN type carried by the ePDG.

Step S808: The 3GPP AAA-Server sends a Diameter-EAP-Answer to the ePDG, where the selected one of the selected contracted APN contexts is included;

Step S809: The ePDG directly uses the contracted APN context brought by the 3GPP AAA server;

The PDN type carried by the UE and the PDN type in the APN subscription context delivered by the 3GPP AAA server are not consistent.

Step S810: The ePDG returns an IKE_AUTH response message to the UE.

Step S811: The ePDG performs an IKE_AUTH interaction process with the UE, and authenticates the first and second IKE_SA_INIT message flows, and the IPSec tunnel is established.

Optional implementation method 2

9 is a flowchart of a method for a UE to implement UE access by using an APN according to an optional embodiment of the present invention. As shown in FIG. 9, the UE is connected to an EPS through an untrusted non-3GPP access system. In the process, the UE and the evolved. The packet data gateway (ePDG) is in the process of creating an Internet Key Exchange Protocol (IKEv2) tunnel. The UE carries the PDN type and carries the APN. The ePDG notifies the 3GPP AAA server of the PDN type and APN carried by the UE, and carries the 3GPP AAA server according to the ePDG. The PDN type and the APN select a matching contracted APN context notification to the ePDG in the subscribed APN context.

Step S901: The UE connects to the non-3GPP access system to perform authentication and authorization for non-3GPP access.

Step S902: The UE and the ePDG exchange the first pair of messages IKE_SA_INIT to negotiate an encryption algorithm, perform exchange of random numbers, and the like;

Step S903: The UE performs the interaction of the identity authentication information by the ePDG and the AAA server, where the UE carries the PDN type in the IKE_AUTH request message, and carries the APN;

Step S904: The UE sends an IKE_AUTH request to the ePDG.

Step S905: The ePDG sends a Diameter-EAP-Request to the 3GPP AAA server, where the Diameter-EAP-Request includes the PDN type and the APN.

Step S906: The 3GPP AAA server acquires user subscription data from the home subscriber server.

Step S907: The 3GPP AAA-Server selects a matching contracted APN context in the subscribed APN context according to the PDN type and the APN carried by the ePDG.

Step S908: The 3GPP AAA-Server sends a Diameter-EAP-Answer to the ePDG, where the selected one of the selected contracted APN contexts is included;

Step S909: The ePDG directly uses the contracted APN context brought by the 3GPP AAA server;

Step S910: The ePDG sends an IKE_AUTH response to the UE.

Step S911: The ePDG performs an IKE_AUTH interaction process with the UE, and authenticates the first and second IKE_SA_INIT message flows, and the IPSec tunnel is established.

With the optional embodiment, the ePDG does not check whether the PDN type carried by the UE and the PDN type in the APN subscription context delivered by the 3GPP AAA server are consistent, and directly uses the contracted APN context brought by the 3GPP AAA server to solve the problem that the UE passes. When the trusted access system is connected to the EPC, the limitation of the APN selection improves the user experience.

In another embodiment, software is also provided for performing the technical solutions described in the above embodiments and alternative embodiments.

In another embodiment, a storage medium is further provided, wherein the software includes the above-mentioned software, including but not limited to: an optical disk, a floppy disk, a hard disk, an erasable memory, and the like.

It will be apparent to those skilled in the art that the various modules or steps of the present invention described above can be implemented by a general-purpose computing device that can be centralized on a single computing device or distributed across a network of multiple computing devices. Alternatively, they may be implemented by program code executable by the computing device such that they may be stored in the storage device by the computing device and, in some cases, may be different from the order herein. The steps shown or described are performed, or they are separately fabricated into individual integrated circuit modules, or a plurality of modules or steps thereof are fabricated as a single integrated circuit module. Thus, the invention is not limited to any specific combination of hardware and software.

The above is only an alternative embodiment of the present invention and is not intended to limit the present invention, and is for those skilled in the art. The invention is susceptible to various modifications and changes. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and scope of the present invention are intended to be included within the scope of the present invention.

Industrial applicability

As described above, the present invention solves the problem that the ePDG can only reject the user access when the PDN type of the host does not carry the APN and the carried PDN type is inconsistent with the signed default APN context. The user experience.

Claims

A method for processing an access point name APN, including:

The evolved packet data gateway ePDG sends indication information indicating an address type of the user equipment to the authentication, authorization, and accounting AAA server;

Receiving, by the ePDG, the contracted APN context selected by the AAA server according to the indication information;

The ePDG performs an operation of the UE accessing the ePDG according to the selected subscription APN context.
The method according to claim 1, wherein the indication information carries a packet data network type PDN type, or the indication information carries the PDN type and an APN.
The method according to claim 1, wherein the indication information that the evolved packet data gateway ePDG sends an address type indicating the user equipment to the AAA server includes:

The ePDG sends a request message of an extended authentication protocol Diameter-EAP-Request of an application authentication, authorization, and accounting basic protocol to the AAA server, where the request message carries the indication information.
A method for processing an access point name APN, including:

The authentication, authorization, and accounting AAA server receives the indication information sent by the evolved packet data gateway ePDG for indicating the type of the address of the user equipment;

The AAA server selects a subscription APN context according to the indication information, where the subscription APN context is used to instruct the ePDG to perform an operation of the UE accessing the ePDG.
The method according to claim 4, wherein the indication information carries a packet data network type PDN type, or the indication information carries the PDN type and an APN.
The method of claim 5, wherein the selecting, by the AAA server, the contracted APN context according to the indication information comprises:

The AAA server selects the subscription APN context from the user subscription data stored by the home subscriber server according to the indication information.
A processing device for the access point name APN is applied to the ePDG side of the evolved packet data gateway, and includes:

a sending module, configured to send, to the authentication, authorization, and accounting AAA server, indication information indicating an address type of the user equipment;

a first receiving module, configured to receive a subscription selected by the AAA server according to the indication information APN context;

The first selection module is configured to perform an operation of the UE accessing the ePDG according to the selected subscription APN context.
The device according to claim 7, wherein the indication information carries a packet data network type PDN type, or the indication information carries the PDN type and an APN.
The apparatus according to claim 7, wherein

The sending module is further configured to send, to the AAA server, a request message of an extended authentication protocol Diameter-EAP-Request of an application authentication, authorization, and accounting basic protocol, where the request message carries the indication information.
A processing device for access point name APN, applied to the authentication, authorization, and accounting AAA server side, including:

a second receiving module, configured to receive indication information that is sent by the evolved packet data gateway ePDG to indicate an address type of the user equipment;

And a second selection module, configured to select a subscription APN context according to the indication information, where the subscription APN context is used to instruct the ePDG to perform an operation of the UE accessing the ePDG.
The device according to claim 10, wherein the indication information carries a packet data network type PDN type, or the indication information carries the PDN type and an APN.
The apparatus according to claim 11, wherein

The second selection module is further configured to select the subscription APN context from the user subscription data stored by the home subscriber server according to the indication information.
A processing system for an access point name APN, comprising: an evolved packet data gateway ePDG and a verification, authorization, and accounting AAA server;

An evolved packet data gateway ePDG, configured to send indication information indicating an address type of the user equipment to the authentication, authorization, and accounting AAA server;

The AAA server is configured to send, to the ePDG, a contracted APN context selected according to the indication information;

The ePDG is further configured to perform an operation of the UE accessing the ePDG according to the selected subscription APN context.
The system according to claim 13, wherein the indication information carries a packet data network type PDN type, or the indication information carries the PDN type and an APN.
The system of claim 14, wherein the evolved packet data gateway ePDG transmits indication information indicating an address type of the user equipment to the AAA server in the following manner:

The ePDG sends a request message of an extended authentication protocol Diameter-EAP-Request of an application authentication, authorization, and accounting basic protocol to the AAA server, where the request message carries the indication information.
The system of claim 14 wherein said system further comprises: a home subscriber server;

The home subscriber server is configured to store user subscription data, where the subscriber subscription data includes: the subscription APN context.