WO2016131297A1 - 一种限制非许可用户设备接入家庭网关的方法和装置 - Google Patents

一种限制非许可用户设备接入家庭网关的方法和装置 Download PDF

Info

Publication number
WO2016131297A1
WO2016131297A1 PCT/CN2015/092439 CN2015092439W WO2016131297A1 WO 2016131297 A1 WO2016131297 A1 WO 2016131297A1 CN 2015092439 W CN2015092439 W CN 2015092439W WO 2016131297 A1 WO2016131297 A1 WO 2016131297A1
Authority
WO
WIPO (PCT)
Prior art keywords
aaa server
request message
hgw
user equipment
response message
Prior art date
Application number
PCT/CN2015/092439
Other languages
English (en)
French (fr)
Inventor
王飞
杨昕
Original Assignee
中兴通讯股份有限公司
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 中兴通讯股份有限公司 filed Critical 中兴通讯股份有限公司
Publication of WO2016131297A1 publication Critical patent/WO2016131297A1/zh

Links

Images

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/06—Authentication
    • H04W12/069—Authentication using certificates or pre-shared keys
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
    • H04L63/0892—Network architectures or network communication protocols for network security for authentication of entities by using authentication-authorization-accounting [AAA] servers or protocols
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W48/00—Access restriction; Network selection; Access point selection
    • H04W48/02—Access restriction performed under specific conditions
    • H04W48/04—Access restriction performed under specific conditions based on user or terminal location or mobility data, e.g. moving direction, speed
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L61/00—Network arrangements, protocols or services for addressing or naming
    • H04L61/50—Address allocation
    • H04L61/5007—Internet protocol [IP] addresses
    • H04L61/5014—Internet protocol [IP] addresses using dynamic host configuration protocol [DHCP] or bootstrap protocol [BOOTP]
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
    • H04L63/0876—Network architectures or network communication protocols for network security for authentication of entities based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/10—Network architectures or network communication protocols for network security for controlling access to devices or network resources

Definitions

  • Embodiments of the present invention relate to, but are not limited to, communication technologies, and in particular, to a method and apparatus for restricting access to a home gateway by an unlicensed user equipment.
  • the home gateway provided by the telecommunication operator is used as an external access network connection.
  • the interface device to the user's home is compatible with a variety of external broadband network access methods, connecting and controlling all networkable devices within the user's home, becoming the network connection center and control center of the home.
  • the user side interface types of the HGW include: local area network ( LocalAreaNetwork, LAN), ordinary telephone interface and Wi-Fi (wireless LAN interface), HGW's wireless routing module converts the wired network into a wireless network, and various mobile terminals such as mobile phones and tablet computers in the user's home can pass Wi-Fi.
  • the wireless network connects to the home gateway's wireless network to access the Internet.
  • the related art HGW generally allows the wireless terminal to access through a pre-shared key (PSK), that is, as long as the user knows the username and password, any wireless terminal can connect to the HGW and directly connect to the data public.
  • PSK pre-shared key
  • the network does data business.
  • the wireless bandwidth in each HGW is limited. Under the condition of a certain bandwidth, the more terminals accessing the HGW, the smaller the bandwidth that each accessed wireless terminal can obtain, thereby affecting the user's online experience.
  • the user's network speed will become slower, which will seriously affect the user's experience, and will also make the user's evaluation of the operator worse.
  • Embodiments of the present invention provide a method and apparatus for restricting access to a home gateway by an unlicensed user equipment. It can prevent unlicensed users from connecting to the home gateway to access the Internet, thereby improving the online experience when the home internal users connect to the home gateway.
  • An embodiment of the present invention provides a method for restricting an unlicensed user equipment from accessing a home gateway, including:
  • the home gateway HGW receives a DHCP request message sent by the user equipment UE after initiating a dynamic host setup protocol DHCP process to the HGW, where the DHCP request message carries the identifier information of the UE;
  • the HGW sends the identifier information of the UE to the AAA server through the wireless access gateway WAG, and requests the AAA server to determine the identity of the UE, where the identity of the UE includes: the UE belongs to the licensed user equipment or the Said UE belongs to an unlicensed user equipment;
  • the HGW After the AAA server determines the identity information of the UE according to the received identifier information of the UE, the HGW receives the judgment result determined by the AAA server by using the WAG;
  • the HGW And sending, by the HGW, a DHCP response message for replying to the DHCP request message to the UE according to the determination result included in the response message; when the determining result is that the UE belongs to a licensed user equipment,
  • the DHCP response message includes an Internet Protocol IP address.
  • the DHCP response message does not include an IP address.
  • the identifier information of the UE includes:
  • IMSI International Mobile Subscriber Identity
  • IMEI mobile device international identity code
  • the HGW sends the identifier information of the UE to the AAA server by using the WAG, and requests the AAA server to determine the identity of the UE, including:
  • the HGW sends a request message for checking the identity of the UE to the WAG, where the request message carries the identifier information of the UE;
  • the WAG After receiving the request message, the WAG sends an access request message to the AAA server, where the access request message carries the identifier information of the UE.
  • the HGW receives the judgment result of the AAA server by using the WAG, and includes:
  • the AAA server After the AAA server determines the identity of the UE according to the identifier information of the UE included in the access request message received from the WAG, the AAA server sends the AAA server to the WAG for sending Responding to the access response message of the access request message, where the access response message carries the judgment result determined by the AAA server, and after receiving the access response message, the WAG sends the access response message to the HGW. And a response message for replying to the request message for checking the identity of the UE, where the response message carries the determination result.
  • the AAA server determines, according to the identifier information of the UE that is included in the access request message that is received from the WAG, the identity of the UE, including:
  • the AAA server searches for the identification information of the UE in the storage unit of the AAA server or the storage unit of the home location register HLR; wherein the HLR stores the identification information of all the licensed user equipments;
  • the AAA server determines that the UE belongs to the licensed user equipment
  • the AAA server determines that the UE belongs to the unlicensed user equipment.
  • the method further includes:
  • the HGW saves the identifier information of the UE in the DHCP request message, and binds the identifier information of the UE to a wireless logical channel that is connected to the UE by the HGW;
  • the HGW sends a DHCP response message for replying to the DHCP request message to the UE according to the judgment result included in the response message; when the judgment result is that the UE belongs to the licensed user equipment,
  • the DHCP response message includes an Internet Protocol (IP) address; when the result of the determination is that the UE belongs to the non-permission user device, the DHCP response message does not include an IP address, and includes:
  • IP Internet Protocol
  • the HGW initiates a point-to-point protocol PPPoE connection request on the Ethernet to the broadband remote access server BRAS by using a wireless logical channel bound to the identification information of the UE and After the PPPoE connection request is successful, the PPPoE connection is bound to the HGW and the wireless logical channel, and a DHCP response message including an IP address is sent to the UE;
  • the HGW sends a DHCP response message that does not include an IP address to the UE.
  • the embodiment of the invention further provides a home gateway HGW, including:
  • a first receiving unit configured to receive a DHCP request message sent by the user equipment UE after initiating a dynamic host setup protocol DHCP process to the HGW, where the DHCP request message carries the identifier information of the UE;
  • the first sending unit is configured to send the identifier information of the UE to the AAA server by using the wireless access gateway WAG, and request the AAA server to determine the identity of the UE, where the identity of the UE includes: the UE belongs to the licensed The user equipment or the UE belongs to an unlicensed user equipment;
  • a second receiving unit configured to: after the AAA server determines the identity information of the UE according to the received identifier information of the UE, receive, by using the WAG, a determination result that is determined by the AAA server;
  • a second sending unit configured to send, according to the determining result included in the response message, a DHCP response message for replying to the DHCP request message to the UE; when the determining result is that the UE belongs to a licensed user In the device, the DHCP response message includes an Internet Protocol IP address. When the judgment result is that the UE belongs to an unlicensed user equipment, the DHCP response message does not include an IP address.
  • the identifier information of the UE includes:
  • IMSI International Mobile Subscriber Identity
  • IMEI mobile device international identity code
  • the first sending unit is configured to:
  • the home gateway further includes:
  • a saving unit configured to save the identifier information of the UE in the DHCP request message, and bind the identifier information of the UE to a wireless logical channel connected to the UE by the HGW;
  • the second sending unit is set to:
  • the wireless logical channel bound to the identification information of the UE is used to initiate a point-to-point protocol PPPoE connection request on the Ethernet to the broadband remote access server BRAS and After the PPPoE connection request is successful, the PPPoE connection is bound to the HGW and the wireless logical channel, and a DHCP response message including an IP address is sent to the UE;
  • a DHCP response message not containing an IP address is sent to the UE.
  • the embodiment of the present invention further provides a method for restricting access to a home gateway by an unlicensed user equipment, where the operations performed by the wireless access gateway WAG include:
  • the WAG receives a request message that is sent by the home gateway HGW to check the identity of the UE, where the request message carries the identifier information of the UE;
  • the WAG sends an access request message to the AAA server, where the access request message carries the identifier information of the UE;
  • the WAG receives an access response message sent by the AAA server to reply to the access request message, where the access response message carries the AAA server to the UE according to the identifier information of the UE. The judgment result after the identity is judged;
  • the WAG sends a response message to the HGW to reply to the request message for checking the identity of the UE, where the response message carries the determination result.
  • the embodiment of the invention further provides a wireless access gateway WAG, including:
  • a third receiving unit configured to receive a request message that is sent by the home gateway HGW to check the identity of the UE, where the request message carries the identifier information of the UE;
  • the third sending unit is configured to send an access request message to the AAA server, where the access request message carries the identifier information of the UE;
  • the third receiving unit is further configured to receive an access response message that is sent by the AAA server to reply to the access request message, where the access response message carries the AAA server according to the UE a determination result after the identification information determines the identity of the UE;
  • the third sending unit is further configured to send, to the HGW, a response message for replying to the request message for checking the identity of the UE, where the response message carries the determination result.
  • the embodiment of the present invention further provides a method for restricting an unlicensed user equipment from accessing a home gateway, where the operations performed by the AAA server include:
  • the AAA server receives an access request message sent by the wireless access gateway WAG server, where the access request message carries the identifier information of the UE;
  • the identity of the UE includes: the UE belongs to a licensed user equipment or the The UE belongs to an unlicensed user equipment;
  • the AAA server sends an access response message for replying to the access request message to the wireless access gateway WAG, where the access response message carries the AAA server to the UE according to the identifier information of the UE. The judgment result after the judgment of the identity.
  • the AAA server determines, according to the identifier information of the UE that is included in the received access request message, the identity of the UE, including:
  • the identifier information of the UE is found in the storage unit of the AAA server or the storage unit of the home location register HLR, it is determined that the UE belongs to the licensed user equipment;
  • the UE is determined to belong to the unlicensed user equipment.
  • An embodiment of the present invention further provides an AAA server, including:
  • the fourth receiving unit is configured to receive an access request message sent by the WAG server, where the access request message carries the identifier information of the UE;
  • the determining unit is configured to determine, according to the received identifier information of the UE included in the access request message, the identity of the UE, where the identity of the UE includes: the UE belongs to a licensed user equipment or Said UE belongs to an unlicensed user equipment;
  • a fourth sending unit configured to send, to the wireless access gateway WAG, an access response message for replying to the access request message, where the access response message carries the AAA server according to the identifier information of the UE The judgment result of the judgment of the identity of the UE.
  • the determining unit is configured to:
  • the identifier information of the UE is found in the storage unit of the AAA server or the storage unit of the home location register HLR, it is determined that the UE belongs to the licensed user equipment;
  • the identification information of the UE is not found in the storage unit of the AAA server and the storage unit of the home location register HLR, it is determined that the UE belongs to the unlicensed user equipment.
  • the embodiment of the invention further provides a computer readable storage medium storing program instructions, which can be implemented when the program instructions are executed.
  • the method and device for limiting access to a home gateway by an unlicensed user equipment are provided by the embodiment of the present invention.
  • the method includes: the home gateway HGW receives a DHCP sent by the user equipment UE after initiating a dynamic host setup protocol DHCP process to the HGW. a request message, where the DHCP request message carries the identification information of the UE; the HGW sends the identifier information of the UE to the AAA server through the wireless access gateway WAG, and requests the AAA server to determine the body of the UE.
  • the identity of the UE includes: the UE belongs to the licensed user equipment or the UE belongs to the unlicensed user equipment; when the AAA server determines the identity information of the UE according to the received identifier information of the UE After the HGW receives the judgment result of the AAA server by using the WAG, the HGW sends a DHCP for replying to the DHCP request message to the UE according to the determination result included in the response message. a response message; when the result of the determination is that the UE belongs to the licensed user equipment, the DHCP response message includes an Internet Protocol IP address; when the determination result is that the UE belongs to an unlicensed user equipment, The DHCP response message does not contain an IP address.
  • the solution of the embodiment of the present invention can prevent an unlicensed user from connecting to the home gateway to access the Internet, thereby improving the online experience when the home internal user connects to the home gateway.
  • 1 is a network architecture diagram in the related art
  • FIG. 2 is a network architecture diagram of a technical solution according to an embodiment of the present invention.
  • FIG. 3 is a schematic flowchart of a method for restricting an unlicensed user equipment from accessing a home gateway according to an embodiment of the present disclosure
  • FIG. 5 is a schematic structural diagram 1 of a home gateway HGW according to an embodiment of the present disclosure.
  • FIG. 6 is a schematic structural diagram 2 of a home gateway HGW according to an embodiment of the present disclosure.
  • FIG. 7 is a schematic structural diagram of a wireless access gateway WAG according to an embodiment of the present disclosure.
  • FIG. 8 is a schematic structural diagram of an AAA server according to an embodiment of the present invention.
  • FIG. 1 is a schematic diagram of the architecture of the related technical solution, in which the HGW initiates a PPP over Ethernet (PPPoE) connection request on the Ethernet to the Broadband Remote Access Server (BRAS), and the user equipment (User Equipment) After the user equipments of the UEs 1, 2, and 3 are connected to the HGW through the Wi-FI, a dynamic host configuration protocol (DHCP) process is initiated. If the PPPoE connection request initiated by the HGW is successful, the user equipment is connected to the user equipment 1, 2. The user equipments such as 3 allocate Internet Protocol (IP) addresses to enable each user equipment to access the Internet using the corresponding IP address.
  • IP Internet Protocol
  • FIG. 2 is a schematic structural diagram of an embodiment of the present invention.
  • a wireless access gateway WAG
  • HLR home location register
  • AAA Authentication, Authorization, Accounting
  • An embodiment of the present invention provides a method for restricting access to a home gateway by an unlicensed user equipment. Based on the HGW side, as shown in FIG. 3, the method includes:
  • Step 100 The HGW receives a DHCP request message sent by the user equipment UE after initiating a dynamic host setup protocol DHCP process to the HGW, where the DHCP request message carries the identifier information of the UE.
  • the identifier information of the UE includes:
  • IMSI International Mobile Subscriber Identification Number
  • IMEI International Mobile Equipment Identity
  • Step 102 The HGW sends the identifier information of the UE to the AAA server through the wireless access gateway WAG, and requests the AAA server to determine the identity of the UE.
  • the identity of the UE includes: the UE belongs to the licensed user. The device or the UE belongs to an unlicensed user device;
  • step 102 may include:
  • the WAG After receiving the request message, the WAG sends an access request message to the AAA server, where the access request message carries the identifier information of the UE.
  • Step 103 After the AAA server determines the identity information of the UE according to the received identifier information of the UE, the HGW receives the judgment result determined by the AAA server by using the WAG.
  • step 103 may include:
  • the AAA server After the AAA server determines the identity of the UE according to the identifier information of the UE included in the access request message received from the WAG, the AAA server sends the AAA server to the WAG for sending Responding to the access response message of the access request message, where the access response message carries the judgment result determined by the AAA server, and after receiving the access response message, the WAG sends the access response message to the HGW. And a response message for replying to the request message for checking the identity of the UE, where the response message carries the determination result.
  • the determining, by the AAA server, the identity of the UE according to the identifier information of the UE that is included in the access request message received from the WAG may include:
  • the AAA server searches for the identification information of the UE in the storage unit of the AAA server or the storage unit of the home location register HLR; wherein the HLR stores the identification information of all the licensed user equipments;
  • the AAA server determines that the UE belongs to the licensed user equipment
  • the AAA server determines that the UE belongs to the unlicensed user equipment.
  • the AAA server can generally store data of some user equipments in a short time, and the data stored in the HLR is all user equipments.
  • the AAA server searches for data of the user equipment, it generally searches in its own storage unit. If found, the HLR can be requested to find data of the user equipment.
  • Step 104 The HGW sends a DHCP response message for replying to the DHCP request message to the UE according to the judgment result included in the response message; when the judgment result is that the UE belongs to a licensed user equipment, The DHCP response message includes an Internet Protocol IP address. When the judgment result is that the UE belongs to an unlicensed user equipment, the DHCP response message does not include an IP address.
  • the method may further include:
  • Step 101 The HGW saves the identifier information of the UE in the DHCP request message, and binds the identifier information of the UE to a wireless logical channel that is connected to the UE by the HGW.
  • step 104 can include:
  • the HGW initiates a point-to-point protocol PPPoE connection request on the Ethernet to the broadband remote access server BRAS by using a wireless logical channel bound to the identification information of the UE and After the PPPoE connection request is successful, the PPPoE connection is bound to the HGW and the wireless logical channel, and a DHCP response message including an IP address is sent to the UE;
  • the HGW sends a DHCP response message that does not include an IP address to the UE.
  • the above operation means that each licensed user equipment connected to the HGW through the wireless logical channel needs to initiate a PPPoE connection request to the BRAS separately and can access the Internet after the PPPoE connection request is successful.
  • the licensed user equipment may be a peer-to-peer user equipment of the broadband service provider.
  • the mobile network using China Telecom is used.
  • the mobile phone provides the same-network user equipment of the operator for the broadband service;
  • the non-permitted user equipment may be the different-network user equipment that provides the operator by using the broadband service, for example, when the home broadband is China Telecom, the mobile network using China Mobile
  • the mobile phone provides the operator with the different network user equipment for the broadband service.
  • the home gateway can only provide the Internet access service for the same-network user equipment, thereby effectively improving the user experience of the home user accessing the home gateway through the wireless connection, and effectively eliminating the user experience.
  • Network The occurrence of the pieces and the effective use of the home gateway are of great importance to the maintenance of the user's own interests and the reputation of the operators.
  • a method for restricting an unlicensed user equipment from accessing a home gateway includes: a home gateway HGW receiving a DHCP request message sent by a user equipment UE after initiating a dynamic host setup protocol DHCP process to the HGW,
  • the DHCP request message carries the identifier information of the UE;
  • the HGW sends the identifier information of the UE to the AAA server through the wireless access gateway WAG, and requests the AAA server to determine the identity of the UE, where the UE
  • the identity includes: the UE belongs to the licensed user equipment or the UE belongs to the unlicensed user equipment; after the AAA server determines the identity information of the UE according to the received identifier information of the UE, the HGW passes The WAG receives the judgment result of the AAA server, and the HGW sends a DHCP response message for replying to the DHCP request message to the UE according to the judgment result included in the response message;
  • the judgment result is that the UE belongs to the licensed user equipment, the
  • the HGW is mainly configured to provide a Wi-Fi wireless link to the user equipment UE, so as to ensure that the mobile phone can access the network side through the Wi-Fi to perform data services.
  • the WAG is mainly configured to process authentication signaling from the UE, and manage the authentication session, and supports the HGW to query the authentication result of the UE.
  • the AAA server is mainly configured to provide authentication data and authentication data for the WAG, and charge the accessed UE.
  • the HLR is mainly configured to allocate and deliver user authentication data.
  • the BRAS located at the edge layer of the backbone network, is set up for access to broadband data of the HGW.
  • the embodiment includes the following steps:
  • the UE needs to register with the HLR to allow the terminal to use the wifi service function for the subsequent UE.
  • the basis for the inspection provides a basis.
  • the HGW needs to be processed as follows:
  • the Wi-Fi module of the HGW After receiving the DHCP Request option 60 message of the UE, the Wi-Fi module of the HGW saves the IMSI or IMEI therein, and binds it to the wireless logical channel of the Wi-Fi allocated to the UE, and continues to perform with the UE. Connection processing
  • the HGW initiates a check user request to the WAG to check the user request
  • the WAG After receiving the check user request from the HGW, the WAG initiates an access request Access request message to the AAA server, and waits for the access response of the AAA server to respond to the Access Response message;
  • the AAA server After receiving the Access Request message of the WAG, the AAA server checks whether the IMSI or IMEI of the user can be found.
  • the HLR initiates a download data request Insert data request, and the HLR returns a download data response Insert data response message to the AAA server (download the UE data from the HLR to the AAA server), and then check the user's IMSI or IMEI, and then return the WAG to the Access response message;
  • the WAG After receiving the Access response message from the AAA server, the WAG checks the user back to the HGW. Responding to the Check user response message;
  • the HGW gateway is handled as follows:
  • a PPPoE connection request is sent to the BRAS, and after the connection request with the BRAS is successful, only the PPPoE link is bound to the Wi-Fi channel connected to the UE, and the The UE responds with a DHCP response DHCP response message including the dynamically assigned IP address;
  • the UE After receiving the DHCP response message from the HGW, the UE performs the following processing:
  • IP address If there is a dynamically assigned IP address, use the IP address to do data related browsing Internet or WeChat chat services;
  • the BRAS is handled as follows:
  • the normal PPPoE dial-up connection process After receiving the PPPoE dialing request message from the HGW, the normal PPPoE dial-up connection process is performed. If the connection is successful, the connection is successful. If the connection cannot be successful, the HGW is instructed to fail the PPPoE connection.
  • the registration of the UE in the HLR needs to be completed in advance; the HGW confirms that the UE is a licensed device and initiates a PPPoE dialing request to the BRAS, which needs to be completed before the connection between the UE and the HGW is established, after the foregoing operation is completed.
  • the data function of the HGW can be used immediately after the connection between the UE and the HGW is successful.
  • a home gateway HGW 10, as shown in FIG. 5, includes:
  • the first receiving unit 11 is configured to receive a DHCP request message sent by the user equipment UE after initiating a dynamic host setup protocol DHCP process to the HGW, where the DHCP request message carries Identification information with the UE;
  • the first sending unit 12 is configured to send the identifier information of the UE to the AAA server by using the wireless access gateway WAG, and request the AAA server to determine the identity of the UE, where the identity of the UE includes: the UE belongs to the The licensed user equipment or the UE belongs to an unlicensed user equipment;
  • the second receiving unit 13 is configured to: after the AAA server determines the identity information of the UE according to the received identifier information of the UE, receive, by using the WAG, the determination result after the AAA server determines;
  • the second sending unit 14 is configured to send, according to the determination result included in the response message, a DHCP response message for replying to the DHCP request message to the UE; when the determining result is that the UE belongs to the license In the user equipment, the DHCP response message includes an Internet Protocol IP address; when the judgment result is that the UE belongs to an unlicensed user equipment, the DHCP response message does not include an IP address.
  • the identifier information of the UE includes:
  • IMSI International Mobile Subscriber Identity
  • IMEI mobile device international identity code
  • the first sending unit 12 is configured to:
  • the WAG After receiving the request message, the WAG sends an access request message to the AAA server, where the access request message carries the identifier information of the UE.
  • the second receiving unit 13 is configured to
  • the AAA server After the AAA server determines the identity of the UE according to the identifier information of the UE included in the access request message received from the WAG, the AAA server sends the AAA server to the WAG for sending Responding to the access response message of the access request message, where the access response message carries the judgment result determined by the AAA server, and after receiving the access response message, the WAG sends the access response message to the HGW. And a response message for replying to the request message for checking the identity of the UE, where the response message carries the determination result.
  • the home gateway HGW 10 further includes:
  • the saving unit 15 is configured to save the identifier information of the UE in the DHCP request message, and bind the identifier information of the UE to a wireless logical channel connected to the UE by the HGW;
  • the second sending unit 14 is configured to:
  • the wireless logical channel bound to the identification information of the UE is used to initiate a point-to-point protocol PPPoE connection request on the Ethernet to the broadband remote access server BRAS and After the PPPoE connection request is successful, the PPPoE connection is bound to the HGW and the wireless logical channel, and a DHCP response message including an IP address is sent to the UE;
  • a DHCP response message not containing an IP address is sent to the UE.
  • FIG. 6 is a schematic diagram of another structure of an HGW according to an embodiment of the present invention.
  • the HGW includes a wireless routing module 201, a broadband module 202, and a logic control (Logic Contrl) module 203.
  • the wireless routing module 201 is mainly configured to establish a Wi with a terminal. -Fi connection;
  • the broadband module 202 is mainly configured to establish a connection with the BRAS and acquire data from the BRAS;
  • the logic control module 203 is mainly configured to determine the validity of the user and the control of the data channel, and to control whether the terminal is allowed to be connected or not.
  • the Wi-Fi channel initiates a PPPoE dialing request to the BRAS.
  • the operation of the home gateway HGW in the method for restricting the access of the unlicensed user equipment to the home gateway is provided by the home gateway HGW, and the home gateway HGW receives the user equipment UE, after sending the dynamic host setup protocol DHCP process to the HGW.
  • the HGW sends the identifier information of the UE to the AAA server through the wireless access gateway WAG, and requests the AAA server to determine the UE
  • the identity of the UE includes: the UE belongs to the licensed user equipment or the UE belongs to the unlicensed user equipment; when the AAA server determines the identity information of the UE according to the received identifier information of the UE
  • the HGW sends a DHCP response message for replying to the DHCP request message to the UE according to the judgment result included in the response message; when the judgment result is the UE
  • the DHCP response message includes an Internet Protocol IP address.
  • the DHCP response message does not include an IP address.
  • the solution of the embodiment of the present invention can prevent an unlicensed user from connecting to the home gateway to access the Internet, thereby improving the online experience when the home internal user connects to the home gateway.
  • the embodiment of the present invention further provides a wireless access gateway WAG 20, the operation of the WAG 20 in the method for restricting the access of the unlicensed user equipment to the home gateway, including: the WAG receiving the check by the home gateway HGW to check the UE An identity request message, where the request message carries the identifier information of the UE; the WAG sends an access request message to the AAA server, where the access request message carries the identifier information of the UE; Receiving, by the AAA server, an access response message for replying to the access request message, where the access response message carries the AAA server to determine the identity of the UE according to the identifier information of the UE. The result of the subsequent determination; the WAG sends a response message to the HGW for replying to the request message for checking the identity of the UE, where the response message carries the determination result.
  • the WAG 20 includes:
  • the receiving unit 21 is configured to receive a request message that is sent by the home gateway HGW to check the identity of the UE, where the request message carries the identifier information of the UE;
  • the sending unit 22 is configured to send an access request message to the AAA server, where the access request message carries the identifier information of the UE;
  • the receiving unit 21 is further configured to receive an access response message that is sent by the AAA server to reply to the access request message, where the access response message carries the identifier of the AAA server according to the UE a judgment result after the information is judged by the identity of the UE;
  • the sending unit 22 is further configured to send, to the HGW, a response message for replying to the request message for checking the identity of the UE, where the response message carries the determination result.
  • the embodiment of the present invention further provides an AAA server 30.
  • the AAA server 30 performs operations in a method for restricting access to a home gateway by an unlicensed user equipment, including: the AAA server receives a connection sent by a wireless access gateway WAG server.
  • the request message, the access request message carries the identifier information of the UE; the AAA server performs the identity of the UE according to the identifier information of the UE included in the received access request message.
  • Determining that the identity of the UE includes: the UE belongs to a licensed user equipment or the UE belongs to an unlicensed user equipment; the AAA server sends an access for replying to the access request message to the wireless access gateway WAG And the response message, the access response message carries a determination result that the AAA server determines the identity of the UE according to the identifier information of the UE.
  • the AAA server determines the identity of the UE according to the identifier information of the UE that is included in the received access request message, including:
  • the identifier information of the UE is found in the storage unit of the AAA server or the storage unit of the home location register HLR, it is determined that the UE belongs to the licensed user equipment;
  • the identification information of the UE is not found in the storage unit of the AAA server and the storage unit of the home location register HLR, it is determined that the UE belongs to the unlicensed user equipment.
  • the AAA server 30 includes:
  • the receiving unit 31 is configured to receive an access request message sent by the WAG server, where the access request message carries the identifier information of the UE;
  • the determining unit 32 is configured to determine, according to the received identifier information of the UE included in the access request message, the identity of the UE, where the identity of the UE includes: the UE belongs to a licensed user equipment or The UE belongs to an unlicensed user equipment;
  • the sending unit 33 is configured to send, to the wireless access gateway WAG, an access response message for replying to the access request message, where the access response message carries the AAA server according to the Determining a result of judging the identity of the UE by the identification information of the UE.
  • the determining unit 32 is configured to:
  • the identifier information of the UE is found in the storage unit of the AAA server or the storage unit of the home location register HLR, it is determined that the UE belongs to the licensed user equipment;
  • the identification information of the UE is not found in the storage unit of the AAA server and the storage unit of the home location register HLR, it is determined that the UE belongs to the unlicensed user equipment.
  • the division of modules is only a logical function division, and there may be another division manner in actual implementation.
  • the modules shown or discussed may be connected to each other through some interface, and may be in electrical, mechanical or other form.
  • the individual modules may or may not be physically separate, and may or may not be physical units. Some or all of the modules may be selected according to actual needs to achieve the purpose of the solution of the embodiment.
  • each functional module in each embodiment of the present invention may be integrated into one processing module, or each module may be physically included separately, or two or more modules may be integrated into one module.
  • the above integrated modules can be implemented in the form of hardware or in the form of hardware plus software function modules. Embodiments of the invention are not limited to any specific form of combination of hardware and software.
  • the above-described integrated modules implemented in the form of software functional units can be stored in a computer readable storage medium.
  • the software functional modules described above are stored in a storage medium and include instructions for causing a computer device (which may be a personal computer, server, or network device, etc.) to perform some of the steps of the methods described in various embodiments of the present invention.
  • the foregoing storage medium includes: a USB flash drive, a mobile hard disk, a read-only memory (ROM), and a random access memory (Random).
  • ROM read-only memory
  • Random random access memory
  • the solution of the embodiment of the present invention can prevent an unlicensed user from connecting to the home gateway to access the Internet, thereby improving the online experience when the home internal user connects to the home gateway.

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Computer Hardware Design (AREA)
  • Computing Systems (AREA)
  • General Engineering & Computer Science (AREA)
  • Power Engineering (AREA)
  • Business, Economics & Management (AREA)
  • Accounting & Taxation (AREA)
  • Mobile Radio Communication Systems (AREA)

Abstract

本发明实施例公开了一种限制非许可用户设备接入家庭网关的方法和装置，所述方法包括：HGW接收UE发起DHCP流程后发送的DHCP请求消息，DHCP请求消息中携带有UE的标识信息；HGW通过WAG将UE的标识信息发送给AAA服务器并请求AAA服务器判断UE的身份；当AAA服务器根据接收的UE的标识信息对UE的身份信息进行判断后，HGW通过WAG接收AAA服务器的判断结果；HGW根据响应消息中包含的判断结果向UE发送用于回复DHCP请求消息的DHCP响应消息；当判断UE属于被许可用户设备时，DHCP响应消息中包含有互联网协议IP地址；当判断UE属于非许可用户设备时，DHCP响应消息中不包含IP地址。

Description

一种限制非许可用户设备接入家庭网关的方法和装置 技术领域
本发明实施例涉及但不限于通信技术，尤指一种限制非许可用户设备接入家庭网关的方法和装置。
背景技术
目前，随着宽带的广泛普及，用户可以通过与电信运营商签订使用协议，然后由电信运营商为用户提供宽带服务，电信运营商提供的家庭网关(Home Gateway，HGW)作为外部接入网连接到用户家庭内部的接口设备，兼容多种外部宽带网络接入方式，连接并控制用户家庭内部所有可联网设备，成为家庭内部的网络连接中心和控制中心，HGW的用户侧接口类型包括：局域网(LocalAreaNetwork，LAN)、普通电话接口以及Wi-Fi(无线局域网接口)，HGW的无线路由模块将有线网络转换为无线网络，用户家里的各种移动终端例如手机、平板电脑等终端可以通过Wi-Fi无线网络连接家庭网关的无线网络来上网。
相关技术的HGW一般都是通过预共享密钥模式(pre-shared key，PSK)让无线终端接入，即只要用户知道用户名和密码，任何无线终端就可以连接到HGW，进而直接连入数据公网做数据业务。然而每个HGW中的无线带宽是有限的，在带宽一定的条件下，接入HGW的终端越多，那么每个接入的无线终端所能够获得的带宽就越小，从而影响用户的上网体验；另外，如果再被其他人通过破解无线网络的软件蹭网的话，用户的网速会变的更慢，严重影响用户的体验，同时也会使用户对运营商的评价变差。
发明内容
以下是对本文详细描述的主题的概述。本概述并非是为了限制权利要求的保护范围。
本发明实施例提供了一种限制非许可用户设备接入家庭网关的方法和装 置，能够阻止非许可用户连接家庭网关上网，从而提高家庭内部用户连接家庭网关上网时的上网体验。
本发明实施例提供了一种限制非许可用户设备接入家庭网关的方法，包括：
家庭网关HGW接收用户设备UE在向所述HGW发起动态主机设置协议DHCP流程后发送的DHCP请求消息，所述DHCP请求消息中携带有所述UE的标识信息；
所述HGW通过无线接入网关WAG将所述UE的标识信息发送给AAA服务器并请求所述AAA服务器判断所述UE的身份，所述UE的身份包括：所述UE属于被许可用户设备或所述UE属于非许可用户设备；
当所述AAA服务器根据接收的所述UE的标识信息对所述UE的身份信息进行判断后，所述HGW通过所述WAG接收所述AAA服务器判断后的判断结果；
所述HGW根据所述响应消息中包含的所述判断结果向所述UE发送用于回复所述DHCP请求消息的DHCP响应消息；当所述判断结果为所述UE属于被许可用户设备时，所述DHCP响应消息中包含有互联网协议IP地址；当所述判断结果为所述UE属于非许可用户设备时，所述DHCP响应消息中不包含IP地址。
可选地，其中，所述UE的标识信息包括：
所述UE的国际移动用户识别码IMSI或所述UE的移动设备国际身份码IMEI。
可选地，其中，所述HGW通过WAG将所述UE的标识信息发送给AAA服务器并请求AAA服务器判断所述UE的身份，包括：
所述HGW向WAG发送检查所述UE的身份的请求消息，所述请求消息中携带有所述UE的标识信息；
所述WAG接收到所述请求消息后，向所述AAA服务器发送接入请求消息，所述接入请求消息中携带有所述UE的标识信息。
可选地，其中，所述当所述AAA服务器根据接收的所述UE的标识信息 对所述UE的身份信息进行判断后，所述HGW通过所述WAG接收所述AAA服务器判断后的判断结果，包括：
当所述AAA服务器根据从所述WAG处接收到的所述接入请求消息中包括的所述UE的标识信息对所述UE的身份进行判断后，所述AAA服务器向所述WAG发送用于回复所述接入请求消息的接入响应消息，所述接入响应消息中携带有所述AAA服务器判断后的判断结果，所述WAG接收到所述接入响应消息后，向所述HGW发送用于回复所述检查所述UE的身份的请求消息的响应消息，所述响应消息中携带有所述判断结果。
可选地，其中，所述AAA服务器根据从所述WAG处接收到的所述接入请求消息中包括的所述UE的标识信息对所述UE的身份进行判断，包括：
所述AAA服务器在所述AAA服务器的存储单元或者归属位置寄存器HLR的存储单元中查找所述UE的标识信息；其中，所述HLR中存储有所有的被许可用户设备的标识信息；
若所述AAA服务器在所述AAA服务器的存储单元或者归属位置寄存器HLR的存储单元中查找到所述UE的标识信息，则所述AAA服务器判断所述UE属于被许可用户设备；
若所述AAA服务器在所述AAA服务器的存储单元和归属位置寄存器HLR的存储单元中均未查找到所述UE的标识信息，则所述AAA服务器判断所述UE属于非许可用户设备。
可选地，在所述家庭网关HGW接收用户设备在向所述HGW发起动态主机设置协议DHCP流程后发送的DHCP请求消息之后，所述方法还包括：
所述HGW保存所述DHCP请求消息中的所述UE的标识信息，并将所述UE的标识信息与所述HGW的和所述UE连接的无线逻辑通道绑定；
相应的，所述HGW根据所述响应消息中包含的所述判断结果向所述UE发送用于回复所述DHCP请求消息的DHCP响应消息；当所述判断结果为所述UE属于被许可用户设备时，所述DHCP响应消息中包含有互联网协议IP地址；当所述判断结果为所述UE属于非许可用户设备时，所述DHCP响应消息中不包含IP地址，包括：
当所述判断结果为所述UE属于被许可用户设备时，所述HGW利用与所述UE的标识信息绑定的无线逻辑通道向宽带远程接入服务器BRAS发起以太网上的点对点协议PPPoE连接请求并在所述PPPoE连接请求成功后，将所述PPPoE连接和所述HGW和所述无线逻辑通道绑定，并向所述UE发送包含有IP地址的DHCP响应消息；
当所述判断结果为所述UE属于非许可用户设备时，所述HGW向所述UE发送不包含IP地址的DHCP响应消息。
本发明实施例还提供一种家庭网关HGW，包括：
第一接收单元，设置为接收用户设备UE在向所述HGW发起动态主机设置协议DHCP流程后发送的DHCP请求消息，所述DHCP请求消息中携带有所述UE的标识信息；
第一发送单元，设置为通过无线接入网关WAG将所述UE的标识信息发送给AAA服务器并请求所述AAA服务器判断所述UE的身份，所述UE的身份包括：所述UE属于被许可用户设备或所述UE属于非许可用户设备；
第二接收单元，设置为当所述AAA服务器根据接收的所述UE的标识信息对所述UE的身份信息进行判断后，通过所述WAG接收所述AAA服务器判断后的判断结果；以及
第二发送单元，设置为根据所述响应消息中包含的所述判断结果向所述UE发送用于回复所述DHCP请求消息的DHCP响应消息；当所述判断结果为所述UE属于被许可用户设备时，所述DHCP响应消息中包含有互联网协议IP地址；当所述判断结果为所述UE属于非许可用户设备时，所述DHCP响应消息中不包含IP地址。
可选地，其中，所述UE的标识信息包括：
所述UE的国际移动用户识别码IMSI或所述UE的移动设备国际身份码IMEI。
可选地，其中，所述第一发送单元是设置为：
向WAG发送检查所述UE的身份的请求消息，所述请求消息中携带有所 述UE的标识信息。
可选地，所述家庭网关还包括：
保存单元，设置为保存所述DHCP请求消息中的所述UE的标识信息，并将所述UE的标识信息与所述HGW的和所述UE连接的无线逻辑通道绑定；
所述第二发送单元是设置为：
当所述判断结果为所述UE属于被许可用户设备时，利用与所述UE的标识信息绑定的无线逻辑通道向宽带远程接入服务器BRAS发起以太网上的点对点协议PPPoE连接请求并在所述PPPoE连接请求成功后，将所述PPPoE连接和所述HGW和所述无线逻辑通道绑定，并向所述UE发送包含有IP地址的DHCP响应消息；
当所述判断结果为所述UE属于非许可用户设备时，向所述UE发送不包含IP地址的DHCP响应消息。
本发明实施例还提供一种限制非许可用户设备接入家庭网关的方法，其中，无线接入网关WAG执行的操作包括：
所述WAG接收家庭网关HGW发送的检查所述UE的身份的请求消息，所述请求消息中携带有所述UE的标识信息；
所述WAG向AAA服务器发送接入请求消息，所述接入请求消息中携带有所述UE的标识信息；
所述WAG接收所述AAA服务器发送的用于回复所述接入请求消息的接入响应消息，所述接入响应消息中携带有所述AAA服务器根据所述UE的标识信息对所述UE的身份进行判断后的判断结果；
所述WAG向所述HGW发送用于回复所述检查所述UE的身份的请求消息的响应消息，所述响应消息中携带有所述判断结果。
本发明实施例还提供一种无线接入网关WAG，包括：
第三接收单元，设置为接收家庭网关HGW发送的检查所述UE的身份的请求消息，所述请求消息中携带有所述UE的标识信息；以及
第三发送单元，设置为向AAA服务器发送接入请求消息，所述接入请求消息中携带有所述UE的标识信息；
所述第三接收单元，还设置为接收所述AAA服务器发送的用于回复所述接入请求消息的接入响应消息，所述接入响应消息中携带有所述AAA服务器根据所述UE的标识信息对所述UE的身份进行判断后的判断结果；
所述第三发送单元，还设置为向所述HGW发送用于回复所述检查所述UE的身份的请求消息的响应消息，所述响应消息中携带有所述判断结果。
本发明实施例还提供一种限制非许可用户设备接入家庭网关的方法，其中，AAA服务器执行的操作包括：
所述AAA服务器接收无线接入网关WAG服务器发送的接入请求消息，所述接入请求消息中携带有所述UE的标识信息；
所述AAA服务器根据接收到的所述接入请求消息中包括的所述UE的标识信息对所述UE的身份进行判断；所述UE的身份包括：所述UE属于被许可用户设备或所述UE属于非许可用户设备；
所述AAA服务器向无线接入网关WAG发送用于回复所述接入请求消息的接入响应消息，所述接入响应消息中携带有所述AAA服务器根据所述UE的标识信息对所述UE的身份进行判断后的判断结果。
可选地，其中，所述AAA服务器根据接收到的所述接入请求消息中包括的所述UE的标识信息对所述UE的身份进行判断，包括：
在所述AAA服务器的存储单元或者归属位置寄存器HLR的存储单元中查找所述UE的标识信息；其中，所述HLR中存储有所有的被许可用户设备的标识信息；
若在所述AAA服务器的存储单元或者归属位置寄存器HLR的存储单元中查找到所述UE的标识信息，则判断所述UE属于被许可用户设备；
若在所述AAA服务器的存储单元和归属位置寄存器HLR的存储单元中 均未查找到所述UE的标识信息，则判断所述UE属于非许可用户设备。
本发明实施例还提供一种AAA服务器，包括：
第四接收单元，设置为接收WAG服务器发送的接入请求消息，所述接入请求消息中携带有所述UE的标识信息；
判断单元，设置为根据接收到的所述接入请求消息中包括的所述UE的标识信息对所述UE的身份进行判断；所述UE的身份包括：所述UE属于被许可用户设备或所述UE属于非许可用户设备；以及
第四发送单元，设置为向无线接入网关WAG发送用于回复所述接入请求消息的接入响应消息，所述接入响应消息中携带有所述AAA服务器根据所述UE的标识信息对所述UE的身份进行判断后的判断结果。
可选地，其中，所述判断单元是设置为：
在所述AAA服务器的存储单元或者归属位置寄存器HLR的存储单元中查找所述UE的标识信息；其中，所述HLR中存储有所有的被许可用户设备的标识信息；
若在所述AAA服务器的存储单元或者归属位置寄存器HLR的存储单元中查找到所述UE的标识信息，则判断所述UE属于被许可用户设备；
若在所述AAA服务器的存储单元和归属位置寄存器HLR的存储单元中均未查找到所述UE的标识信息，则判断所述UE属于非许可用户设备。
本发明实施例还提供一种计算机可读存储介质，存储有程序指令，当该程序指令被执行时可实现上述方法。
本发明实施例提供的一种限制非许可用户设备接入家庭网关的方法和装置，所述方法包括：家庭网关HGW接收用户设备UE在向所述HGW发起动态主机设置协议DHCP流程后发送的DHCP请求消息，所述DHCP请求消息中携带有所述UE的标识信息；所述HGW通过无线接入网关WAG将所述UE的标识信息发送给AAA服务器并请求所述AAA服务器判断所述UE的身 份，所述UE的身份包括：所述UE属于被许可用户设备或所述UE属于非许可用户设备；当所述AAA服务器根据接收的所述UE的标识信息对所述UE的身份信息进行判断后，所述HGW通过所述WAG接收所述AAA服务器判断后的判断结果；所述HGW根据所述响应消息中包含的所述判断结果向所述UE发送用于回复所述DHCP请求消息的DHCP响应消息；当所述判断结果为所述UE属于被许可用户设备时，所述DHCP响应消息中包含有互联网协议IP地址；当所述判断结果为所述UE属于非许可用户设备时，所述DHCP响应消息中不包含IP地址。通过本发明实施例的方案，能够阻止非许可用户连接家庭网关上网，从而提高家庭内部用户连接家庭网关上网时的上网体验。
在阅读并理解了附图和详细描述后，可以明白其他方面。
附图概述
图1为相关技术中的网络架构图；
图2为本发明实施例提供的技术方案的网络架构图；
图3为本发明实施例提供的一种限制非许可用户设备接入家庭网关的方法的流程示意图；
图4为本发明应用实施例提供的流程交互示意图；
图5为本发明实施例提供的家庭网关HGW的结构示意图一；
图6为本发明实施例提供的家庭网关HGW的结构示意图二；
图7为本发明实施例提供的无线接入网关WAG的结构示意图；
图8为本发明实施例提供的AAA服务器的结构示意图。
本发明的实施方式
下文中将结合附图对本发明实施例进行详细说明。需要说明的是，在不冲突的情况下，本申请中的实施例及实施例中的特征可以相互任意组合。
在附图的流程图示出的步骤可以在诸如一组计算机可执行指令的计算机 系统中执行。并且，虽然在流程图中示出了逻辑顺序，但是在某些情况下，可以以不同于此处的顺序执行所示出或描述的步骤。
图1所示为相关技术方案的架构示意图，其中，HGW向宽带远程接入服务器(Broadband Remote Access Server，BRAS)发起以太网上的点对点协议(PPP over Ethernet，PPPoE)连接请求，用户设备(User Equipment，UE)1、2、3等用户设备通过Wi-FI连接HGW后发起动态主机配置协议(Dynamic Host Configuration Protocol，DHCP)流程，如果HGW发起的PPPoE连接请求成功，则向用户设备1、2、3等用户设备分配互联网协议(Internet Protocol，IP)地址以使每个用户设备使用对应的IP地址接入互联网。
图2所示为本发明实施例的架构示意图，相比图1，增加了无线接入网关(Wileless Access Gateway，WAG)、归属位置寄存器(Home Location Register，HLR)以及鉴权、认证、计费(Authentication、Authorization、Accounting，AAA)服务器，对于以上增加的网元的功能在以下的实施例中进行介绍。
本发明实施例提供一种限制非许可用户设备接入家庭网关的方法，基于HGW侧，如图3所示，该方法包括：
步骤100、HGW接收用户设备UE在向所述HGW发起动态主机设置协议DHCP流程后发送的DHCP请求消息，所述DHCP请求消息中携带有所述UE的标识信息；
可选地，所述UE的标识信息包括：
所述UE的国际移动用户识别码(International Mobile Subscriber Identification Number，IMSI)或所述UE的移动设备国际身份码(International Mobile Equipment Identity，IMEI)。
步骤102、所述HGW通过无线接入网关WAG将所述UE的标识信息发送给AAA服务器并请求所述AAA服务器判断所述UE的身份，所述UE的身份包括：所述UE属于被许可用户设备或所述UE属于非许可用户设备；
可选地，步骤102可以包括：
所述HGW向WAG发送检查所述UE的身份的请求消息，所述请求消息 中携带有所述UE的标识信息；
所述WAG接收到所述请求消息后，向所述AAA服务器发送接入请求消息，所述接入请求消息中携带有所述UE的标识信息。
步骤103、当所述AAA服务器根据接收的所述UE的标识信息对所述UE的身份信息进行判断后，所述HGW通过所述WAG接收所述AAA服务器判断后的判断结果；
可选地，步骤103可以包括：
当所述AAA服务器根据从所述WAG处接收到的所述接入请求消息中包括的所述UE的标识信息对所述UE的身份进行判断后，所述AAA服务器向所述WAG发送用于回复所述接入请求消息的接入响应消息，所述接入响应消息中携带有所述AAA服务器判断后的判断结果，所述WAG接收到所述接入响应消息后，向所述HGW发送用于回复所述检查所述UE的身份的请求消息的响应消息，所述响应消息中携带有所述判断结果。
其中，所述AAA服务器根据从所述WAG处接收到的所述接入请求消息中包括的所述UE的标识信息对所述UE的身份进行判断，可以包括：
所述AAA服务器在所述AAA服务器的存储单元或者归属位置寄存器HLR的存储单元中查找所述UE的标识信息；其中，所述HLR中存储有所有的被许可用户设备的标识信息；
若所述AAA服务器在所述AAA服务器的存储单元或者归属位置寄存器HLR的存储单元中查找到所述UE的标识信息，则所述AAA服务器判断所述UE属于被许可用户设备；
若所述AAA服务器在所述AAA服务器的存储单元和归属位置寄存器HLR的存储单元中均未查找到所述UE的标识信息，则所述AAA服务器判断所述UE属于非许可用户设备。
需要说明的是，AAA服务器一般可以短时间存储部分用户设备的数据，HLR中存储的是所有用户设备的数据，AAA服务器查找用户设备的数据时一般会先在自身的存储单元中查找，若未查到则可向HLR申请查找该用户设备的数据。
步骤104、所述HGW根据所述响应消息中包含的所述判断结果向所述UE发送用于回复所述DHCP请求消息的DHCP响应消息；当所述判断结果为所述UE属于被许可用户设备时，所述DHCP响应消息中包含有互联网协议IP地址；当所述判断结果为所述UE属于非许可用户设备时，所述DHCP响应消息中不包含IP地址。
可选地，在步骤100之后，所述方法还可以包括：
步骤101、所述HGW保存所述DHCP请求消息中的所述UE的标识信息，并将所述UE的标识信息与所述HGW的和所述UE连接的无线逻辑通道绑定。
相应的，步骤104可以包括：
当所述判断结果为所述UE属于被许可用户设备时，所述HGW利用与所述UE的标识信息绑定的无线逻辑通道向宽带远程接入服务器BRAS发起以太网上的点对点协议PPPoE连接请求并在所述PPPoE连接请求成功后，将所述PPPoE连接和所述HGW和所述无线逻辑通道绑定，并向所述UE发送包含有IP地址的DHCP响应消息；
当所述判断结果为所述UE属于非许可用户设备时，所述HGW向所述UE发送不包含IP地址的DHCP响应消息。
需要说明的是，上述操作意味着每个通过无线逻辑信道与HGW连接的被许可用户设备均需要单独向BRAS发起PPPoE连接请求并在PPPoE连接请求成功后才能接入互联网。
值得一提的是，在本实施例的一种应用场景下，被许可用户设备可以是宽带服务提供运营商的同网用户设备，例如家庭宽带是中国电信的情况下，使用中国电信的移动网络的手机即为宽带服务提供运营商的同网用户设备；非许可用户设备可以是使用宽带服务提供运营商的异网用户设备，例如家庭宽带是中国电信的情况下，使用中国移动的移动网络的手机即为宽带服务提供运营商的异网用户设备。通过实施本发明实施例提供的技术方案，可以使得家庭网关只为同网用户设备提供接入互联网的服务，从而能够有效提升家庭用户通过无线连接家庭网关上网的用户体验，同时也能够有效杜绝蹭网事 件的发生、有效提升家庭网关的使用安全，对于维护用户自身利益及运营商的口碑都有很重要的作用。
本发明实施例提供的一种限制非许可用户设备接入家庭网关的方法，包括：家庭网关HGW接收用户设备UE在向所述HGW发起动态主机设置协议DHCP流程后发送的DHCP请求消息，所述DHCP请求消息中携带有所述UE的标识信息；所述HGW通过无线接入网关WAG将所述UE的标识信息发送给AAA服务器并请求所述AAA服务器判断所述UE的身份，所述UE的身份包括：所述UE属于被许可用户设备或所述UE属于非许可用户设备；当所述AAA服务器根据接收的所述UE的标识信息对所述UE的身份信息进行判断后，所述HGW通过所述WAG接收所述AAA服务器判断后的判断结果；所述HGW根据所述响应消息中包含的所述判断结果向所述UE发送用于回复所述DHCP请求消息的DHCP响应消息；当所述判断结果为所述UE属于被许可用户设备时，所述DHCP响应消息中包含有互联网协议IP地址；当所述判断结果为所述UE属于非许可用户设备时，所述DHCP响应消息中不包含IP地址。通过本发明实施例的方案，能够阻止非许可用户连接家庭网关上网，从而提高家庭内部用户连接家庭网关上网时的上网体验。
为了使本领域技术人员能够更清楚地理解本发明实施例提供的技术方案，下面通过应用实施例，对本发明实施例提供的技术方案进行详细说明：
应用实施例
在本实施例中，HGW主要设置为给用户设备UE提供Wi-Fi无线链路，保证手机能够通过Wi-Fi接入到网络侧进行数据业务。WAG主要设置为处理来自UE的认证信令，并管理认证会话，并且支持HGW对UE的认证结果的查询。AAA服务器主要设置为为WAG提供鉴权数据、认证数据，并对接入的UE进行计费。HLR主要设置为用户鉴权数据的分配与下发。BRAS，位于骨干网的边缘层，设置为HGW的宽带数据的接入。
如图4所示，本实施例包括以下步骤：
1、HLR上处理：
UE需要先在HLR注册允许终端使用wifi的业务功能，为后续UE的身 份的检查提供依据。
2、UE上的处理：
(1)UE上打开Wi-Fi开关后，扫描到有HGW的无线信号，自动发起连接；
(2)读取自身的IMSI或者IMEI，并通过DHCP流程从HWG自动获取IP地址时，在DHCP Request option60消息中携带自身的IMSI或者IMEI信息给HGW；
(3)UE等待HGW的DHCP response消息；
3、HGW要做的处理如下：
(1)HGW的Wi-Fi模块收到UE的DHCP Request option60消息后，保存其中的IMSI或者IMEI，并和给该UE分配的Wi-Fi的无线逻辑通道绑定起来，并继续和该UE进行连接处理；
(2)HGW向WAG发起检查用户请求Check user request；
4、WAG要做的处理如下：
WAG收到来自HGW的检查用户请求Check user request后，向AAA服务器发起接入请求Access request消息，并等待AAA服务器的接入响应Access Response消息；
5、AAA服务器要做的处理如下：
AAA服务器收到WAG的Access Request消息后，检查是否能够查到该用户的IMSI或IMEI；
(1)如果能够查到就给WAG回接入响应Access Response消息；
(2)如果不能查到，就向HLR发起下载数据请求Insert data request，HLR给AAA服务器返回下载数据响应Insert data response消息(把该UE的数据从HLR下载到AAA服务器)后，检查该用户的IMSI或IMEI，再给WAG回Access response消息；
6、WAG要做的处理如下：
WAG收到AAA服务器的Access response消息后，给HGW回检查用户 响应Check user response消息；
7、HGW网关的处理如下：
根据收到的Check user response中的检查结果，做如下处理：
(1)如果检查该UE是一个被许可用户设备，就向BRAS发PPPoE连接请求，和BRAS的连接请求成功后，只允许该PPPoE链接和该UE连接的Wi-Fi通道绑定，并给该UE回应包含有动态分配的IP地址的DHCP响应DHCP response消息；
(2)如果检查该UE是一个非许可用户设备，就不用向BRAS发起PPPoE连接请求，给终端回应的DHCP Response消息中也不用携带动态分配的IP地址；
8、UE侧的处理如下：
UE收到HGW的DHCP response消息后，做如下处理：
(1)如果有动态分配的IP地址，则用该IP地址做数据相关的浏览internet网或者微信聊天等业务；
(2)如果没有动态分配的IP地址，则就终止和HGW的Wi-Fi连接；
9、BRAS的处理如下：
当收到来自HGW的PPPoE拨号请求消息后，进行正常的PPPoE拨号连接处理，如果能连接成功，就连接成功；如果不能连接成功，就给HGW指示PPPoE连接失败。
需要说明的是，在上述流程中，UE在HLR的注册需要提前完成；HGW确认UE为被许可设备后向BRAS发起PPPoE拨号请求需要在UE和HGW的连接建立之前完成，在前述操作完成之后再做UE和HGW的连接，则UE和HGW的连接成功之后就立刻能够使用HGW的数据功能。
本发明实施例还提供的一种家庭网关HGW10，如图5所示，包括：
第一接收单元11，设置为接收用户设备UE在向所述HGW发起动态主机设置协议DHCP流程后发送的DHCP请求消息，所述DHCP请求消息中携 带有所述UE的标识信息；
第一发送单元12，设置为通过无线接入网关WAG将所述UE的标识信息发送给AAA服务器并请求所述AAA服务器判断所述UE的身份，所述UE的身份包括：所述UE属于被许可用户设备或所述UE属于非许可用户设备；
第二接收单元13，设置为当所述AAA服务器根据接收的所述UE的标识信息对所述UE的身份信息进行判断后，通过所述WAG接收所述AAA服务器判断后的判断结果；以及
第二发送单元14，设置为根据所述响应消息中包含的所述判断结果向所述UE发送用于回复所述DHCP请求消息的DHCP响应消息；当所述判断结果为所述UE属于被许可用户设备时，所述DHCP响应消息中包含有互联网协议IP地址；当所述判断结果为所述UE属于非许可用户设备时，所述DHCP响应消息中不包含IP地址。
可选地，所述UE的标识信息包括：
所述UE的国际移动用户识别码IMSI或所述UE的移动设备国际身份码IMEI。
可选地，所述第一发送单元12是设置为于：
向WAG发送检查所述UE的身份的请求消息，所述请求消息中携带有所述UE的标识信息；
所述WAG接收到所述请求消息后，向所述AAA服务器发送接入请求消息，所述接入请求消息中携带有所述UE的标识信息。
可选地，所述第二接收单元13是设置为
当所述AAA服务器根据从所述WAG处接收到的所述接入请求消息中包括的所述UE的标识信息对所述UE的身份进行判断后，所述AAA服务器向所述WAG发送用于回复所述接入请求消息的接入响应消息，所述接入响应消息中携带有所述AAA服务器判断后的判断结果，所述WAG接收到所述接入响应消息后，向所述HGW发送用于回复所述检查所述UE的身份的请求消息的响应消息，所述响应消息中携带有所述判断结果。
可选地，如图5所示，所述家庭网关HGW10还包括：
保存单元15，设置为保存所述DHCP请求消息中的所述UE的标识信息，并将所述UE的标识信息与所述HGW的和所述UE连接的无线逻辑通道绑定；
相应的，所述第二发送单元14是设置为：
当所述判断结果为所述UE属于被许可用户设备时，利用与所述UE的标识信息绑定的无线逻辑通道向宽带远程接入服务器BRAS发起以太网上的点对点协议PPPoE连接请求并在所述PPPoE连接请求成功后，将所述PPPoE连接和所述HGW和所述无线逻辑通道绑定，并向所述UE发送包含有IP地址的DHCP响应消息；
当所述判断结果为所述UE属于非许可用户设备时，向所述UE发送不包含IP地址的DHCP响应消息。
本实施例用于实现上述方法实施例，本实施例中各个单元的工作流程和工作原理参见上述方法实施例中的描述，在此不再赘述。
图6所示为本发明实施例提供的HGW的另一结构示意图，该HGW包括无线路由模块201、宽带模块202和逻辑控制(Logic Contrl)模块203；无线路由模块201主要设置为和终端建立Wi-Fi连接；宽带模块202主要设置为和BRAS建立连接，并从BRAS上获取数据；逻辑控制模块203主要设置为判断用户的合法性及数据通道的控制，由它来控制是否允许和终端连接的Wi-Fi通道向BRAS发起PPPoE拨号请求。
本发明实施例提供的家庭网关HGW在实现限制非许可用户设备接入家庭网关的方法中的操作，包括：家庭网关HGW接收用户设备UE在向所述HGW发起动态主机设置协议DHCP流程后发送的DHCP请求消息，所述DHCP请求消息中携带有所述UE的标识信息；所述HGW通过无线接入网关WAG将所述UE的标识信息发送给AAA服务器并请求所述AAA服务器判断所述UE的身份，所述UE的身份包括：所述UE属于被许可用户设备或所述UE属于非许可用户设备；当所述AAA服务器根据接收的所述UE的标识信息对所述UE的身份信息进行判断后，所述HGW通过所述WAG接收所述 AAA服务器判断后的判断结果；所述HGW根据所述响应消息中包含的所述判断结果向所述UE发送用于回复所述DHCP请求消息的DHCP响应消息；当所述判断结果为所述UE属于被许可用户设备时，所述DHCP响应消息中包含有互联网协议IP地址；当所述判断结果为所述UE属于非许可用户设备时，所述DHCP响应消息中不包含IP地址。通过本发明实施例的方案，能够阻止非许可用户连接家庭网关上网，从而提高家庭内部用户连接家庭网关上网时的上网体验。
本发明实施例还提供一种无线接入网关WAG 20，该WAG20在实现限制非许可用户设备接入家庭网关的方法中的操作，包括：所述WAG接收家庭网关HGW发送的检查所述UE的身份的请求消息，所述请求消息中携带有所述UE的标识信息；所述WAG向AAA服务器发送接入请求消息，所述接入请求消息中携带有所述UE的标识信息；所述WAG接收所述AAA服务器发送的用于回复所述接入请求消息的接入响应消息，所述接入响应消息中携带有所述AAA服务器根据所述UE的标识信息对所述UE的身份进行判断后的判断结果；所述WAG向所述HGW发送用于回复所述检查所述UE的身份的请求消息的响应消息，所述响应消息中携带有所述判断结果。
如图7所示，所述WAG20包括：
接收单元21，设置为接收家庭网关HGW发送的检查所述UE的身份的请求消息，所述请求消息中携带有所述UE的标识信息；以及
发送单元22，设置为向AAA服务器发送接入请求消息，所述接入请求消息中携带有所述UE的标识信息；
所述接收单元21，还设置为接收所述AAA服务器发送的用于回复所述接入请求消息的接入响应消息，所述接入响应消息中携带有所述AAA服务器根据所述UE的标识信息对所述UE的身份进行判断后的判断结果；
所述发送单元22，还设置为向所述HGW发送用于回复所述检查所述UE的身份的请求消息的响应消息，所述响应消息中携带有所述判断结果。
本实施例用于实现上述方法实施例，本实施例中各个单元的工作流程和 工作原理参见上述方法实施例中的描述，在此不再赘述。
本发明实施例还提供一种AAA服务器30，所述AAA服务器30在实现限制非许可用户设备接入家庭网关的方法中的操作，包括：所述AAA服务器接收无线接入网关WAG服务器发送的接入请求消息，所述接入请求消息中携带有所述UE的标识信息；所述AAA服务器根据接收到的所述接入请求消息中包括的所述UE的标识信息对所述UE的身份进行判断；所述UE的身份包括：所述UE属于被许可用户设备或所述UE属于非许可用户设备；所述AAA服务器向无线接入网关WAG发送用于回复所述接入请求消息的接入响应消息，所述接入响应消息中携带有所述AAA服务器根据所述UE的标识信息对所述UE的身份进行判断后的判断结果。
其中，所述AAA服务器根据接收到的所述接入请求消息中包括的所述UE的标识信息对所述UE的身份进行判断，包括：
在所述AAA服务器的存储单元或者归属位置寄存器HLR的存储单元中查找所述UE的标识信息；其中，所述HLR中存储有所有的被许可用户设备的标识信息；
若在所述AAA服务器的存储单元或者归属位置寄存器HLR的存储单元中查找到所述UE的标识信息，则判断所述UE属于被许可用户设备；
若在所述AAA服务器的存储单元和归属位置寄存器HLR的存储单元中均未查找到所述UE的标识信息，则判断所述UE属于非许可用户设备。
如图8所示，所述AAA服务器30包括：
接收单元31，设置为接收WAG服务器发送的接入请求消息，所述接入请求消息中携带有所述UE的标识信息；
判断单元32，设置为根据接收到的所述接入请求消息中包括的所述UE的标识信息对所述UE的身份进行判断；所述UE的身份包括：所述UE属于被许可用户设备或所述UE属于非许可用户设备；以及
发送单元33，设置为向无线接入网关WAG发送用于回复所述接入请求消息的接入响应消息，所述接入响应消息中携带有所述AAA服务器根据所 述UE的标识信息对所述UE的身份进行判断后的判断结果。
可选地，所述判断单元32是设置为：
在所述AAA服务器的存储单元或者归属位置寄存器HLR的存储单元中查找所述UE的标识信息；其中，所述HLR中存储有所有的被许可用户设备的标识信息；
若在所述AAA服务器的存储单元或者归属位置寄存器HLR的存储单元中查找到所述UE的标识信息，则判断所述UE属于被许可用户设备；
若在所述AAA服务器的存储单元和归属位置寄存器HLR的存储单元中均未查找到所述UE的标识信息，则判断所述UE属于非许可用户设备。
本实施例用于实现上述方法实施例，本实施例中各个单元的工作流程和工作原理参见上述方法实施例中的描述，在此不再赘述。
以上所描述的装置实施例仅仅是示意性的，例如，模块的划分，仅仅为一种逻辑功能划分，实际实现时可以有另外的划分方式。另一点，所显示或讨论的模块相互之间的连接可以是通过一些接口，可以是电性，机械或其它的形式。所述各个模块可以是或者也可以不是物理上分开的，可以是或者也可以不是物理单元。可以根据实际的需要选择其中的部分或者全部模块来实现本实施例方案的目的。
另外，在本发明各个实施例中的各功能模块可以集成在一个处理模块中，也可以是各个模块单独物理包括，也可以两个或两个以上模块集成在一个模块中。上述集成的模块既可以采用硬件的形式实现，也可以采用硬件加软件功能模块的形式实现。本发明实施例不限制于任何特定形式的硬件和软件的结合。
上述以软件功能单元的形式实现的集成的模块，可以存储在一个计算机可读取存储介质中。上述软件功能模块存储在一个存储介质中，包括若干指令用以使得一台计算机设备(可以是个人计算机，服务器，或者网络设备等)执行本发明各个实施例所述方法的部分步骤。而前述的存储介质包括：U盘、移动硬盘、只读存储器(Read-Only Memory，ROM)、随机存取存储器(Random  Access Memory，RAM)、磁碟或者光盘等各种可以存储程序代码的介质。
工业实用性
通过本发明实施例的方案，能够阻止非许可用户连接家庭网关上网，从而提高家庭内部用户连接家庭网关上网时的上网体验。

Claims (17)

  1. 一种限制非许可用户设备接入家庭网关的方法，包括：
    家庭网关HGW接收用户设备UE在向所述HGW发起动态主机设置协议DHCP流程后发送的DHCP请求消息，所述DHCP请求消息中携带有所述UE的标识信息；
    所述HGW通过无线接入网关WAG将所述UE的标识信息发送给AAA服务器并请求所述AAA服务器判断所述UE的身份，所述UE的身份包括：所述UE属于被许可用户设备或所述UE属于非许可用户设备；
    当所述AAA服务器根据接收的所述UE的标识信息对所述UE的身份信息进行判断后，所述HGW通过所述WAG接收所述AAA服务器判断后的判断结果；
    所述HGW根据所述响应消息中包含的所述判断结果向所述UE发送用于回复所述DHCP请求消息的DHCP响应消息；当所述判断结果为所述UE属于被许可用户设备时，所述DHCP响应消息中包含有互联网协议IP地址；当所述判断结果为所述UE属于非许可用户设备时，所述DHCP响应消息中不包含IP地址。
  2. 根据权利要求1所述的方法，其中，所述UE的标识信息包括：
    所述UE的国际移动用户识别码IMSI或所述UE的移动设备国际身份码IMEI。
  3. 根据权利要求1所述的方法，其中，所述HGW通过WAG将所述UE的标识信息发送给AAA服务器并请求AAA服务器判断所述UE的身份，包括：
    所述HGW向WAG发送检查所述UE的身份的请求消息，所述请求消息中携带有所述UE的标识信息；
    所述WAG接收到所述请求消息后，向所述AAA服务器发送接入请求消息，所述接入请求消息中携带有所述UE的标识信息。
  4. 根据权利要求3所述的方法，其中，所述当所述AAA服务器根据接 收的所述UE的标识信息对所述UE的身份信息进行判断后，所述HGW通过所述WAG接收所述AAA服务器判断后的判断结果，包括：
    当所述AAA服务器根据从所述WAG处接收到的所述接入请求消息中包括的所述UE的标识信息对所述UE的身份进行判断后，所述AAA服务器向所述WAG发送用于回复所述接入请求消息的接入响应消息，所述接入响应消息中携带有所述AAA服务器判断后的判断结果，所述WAG接收到所述接入响应消息后，向所述HGW发送用于回复所述检查所述UE的身份的请求消息的响应消息，所述响应消息中携带有所述判断结果。
  5. 根据权利要求4所述的方法，其中，所述AAA服务器根据从所述WAG处接收到的所述接入请求消息中包括的所述UE的标识信息对所述UE的身份进行判断，包括：
    所述AAA服务器在所述AAA服务器的存储单元或者归属位置寄存器HLR的存储单元中查找所述UE的标识信息；其中，所述HLR中存储有所有的被许可用户设备的标识信息；
    若所述AAA服务器在所述AAA服务器的存储单元或者归属位置寄存器HLR的存储单元中查找到所述UE的标识信息，则所述AAA服务器判断所述UE属于被许可用户设备；
    若所述AAA服务器在所述AAA服务器的存储单元和归属位置寄存器HLR的存储单元中均未查找到所述UE的标识信息，则所述AAA服务器判断所述UE属于非许可用户设备。
  6. 根据权利要求1所述的方法，在所述家庭网关HGW接收用户设备在向所述HGW发起动态主机设置协议DHCP流程后发送的DHCP请求消息之后，所述方法还包括：
    所述HGW保存所述DHCP请求消息中的所述UE的标识信息，并将所述UE的标识信息与所述HGW的和所述UE连接的无线逻辑通道绑定；
    相应的，所述HGW根据所述响应消息中包含的所述判断结果向所述UE发送用于回复所述DHCP请求消息的DHCP响应消息；当所述判断结果为所述UE属于被许可用户设备时，所述DHCP响应消息中包含有互联网协议IP 地址；当所述判断结果为所述UE属于非许可用户设备时，所述DHCP响应消息中不包含IP地址，包括：
    当所述判断结果为所述UE属于被许可用户设备时，所述HGW利用与所述UE的标识信息绑定的无线逻辑通道向宽带远程接入服务器BRAS发起以太网上的点对点协议PPPoE连接请求并在所述PPPoE连接请求成功后，将所述PPPoE连接和所述HGW和所述无线逻辑通道绑定，并向所述UE发送包含有IP地址的DHCP响应消息；
    当所述判断结果为所述UE属于非许可用户设备时，所述HGW向所述UE发送不包含IP地址的DHCP响应消息。
  7. 一种家庭网关HGW，包括：
    第一接收单元，设置为接收用户设备UE在向所述HGW发起动态主机设置协议DHCP流程后发送的DHCP请求消息，所述DHCP请求消息中携带有所述UE的标识信息；
    第一发送单元，设置为通过无线接入网关WAG将所述UE的标识信息发送给AAA服务器并请求所述AAA服务器判断所述UE的身份，所述UE的身份包括：所述UE属于被许可用户设备或所述UE属于非许可用户设备；
    第二接收单元，设置为当所述AAA服务器根据接收的所述UE的标识信息对所述UE的身份信息进行判断后，通过所述WAG接收所述AAA服务器判断后的判断结果；以及
    第二发送单元，设置为根据所述响应消息中包含的所述判断结果向所述UE发送用于回复所述DHCP请求消息的DHCP响应消息；当所述判断结果为所述UE属于被许可用户设备时，所述DHCP响应消息中包含有互联网协议IP地址；当所述判断结果为所述UE属于非许可用户设备时，所述DHCP响应消息中不包含IP地址。
  8. 根据权利要求7所述的家庭网关，其中，所述UE的标识信息包括：
    所述UE的国际移动用户识别码IMSI或所述UE的移动设备国际身份码IMEI。
  9. 根据权利要求7所述的家庭网关，其中，所述第一发送单元是设置为：
    向WAG发送检查所述UE的身份的请求消息，所述请求消息中携带有所述UE的标识信息。
  10. 根据权利要求7所述的家庭网关，所述家庭网关还包括：
    保存单元，设置为保存所述DHCP请求消息中的所述UE的标识信息，并将所述UE的标识信息与所述HGW的和所述UE连接的无线逻辑通道绑定；
    所述第二发送单元是设置为：
    当所述判断结果为所述UE属于被许可用户设备时，利用与所述UE的标识信息绑定的无线逻辑通道向宽带远程接入服务器BRAS发起以太网上的点对点协议PPPoE连接请求并在所述PPPoE连接请求成功后，将所述PPPoE连接和所述HGW和所述无线逻辑通道绑定，并向所述UE发送包含有IP地址的DHCP响应消息；
    当所述判断结果为所述UE属于非许可用户设备时，向所述UE发送不包含IP地址的DHCP响应消息。
  11. 一种无线接入网关WAG，包括：
    第三接收单元，设置为接收家庭网关HGW发送的检查所述UE的身份的请求消息，所述请求消息中携带有所述UE的标识信息；以及
    第三发送单元，设置为向AAA服务器发送接入请求消息，所述接入请求消息中携带有所述UE的标识信息；
    所述第三接收单元，还设置为接收所述AAA服务器发送的用于回复所述接入请求消息的接入响应消息，所述接入响应消息中携带有所述AAA服务器根据所述UE的标识信息对所述UE的身份进行判断后的判断结果；
    所述第三发送单元，还设置为向所述HGW发送用于回复所述检查所述UE的身份的请求消息的响应消息，所述响应消息中携带有所述判断结果。
  12. 一种AAA服务器，包括：
    第四接收单元，设置为接收WAG服务器发送的接入请求消息，所述接入请求消息中携带有所述UE的标识信息；
    判断单元，设置为根据接收到的所述接入请求消息中包括的所述UE的标识信息对所述UE的身份进行判断；所述UE的身份包括：所述UE属于被许可用户设备或所述UE属于非许可用户设备；以及
    第四发送单元，设置为向无线接入网关WAG发送用于回复所述接入请求消息的接入响应消息，所述接入响应消息中携带有所述AAA服务器根据所述UE的标识信息对所述UE的身份进行判断后的判断结果。
  13. 根据权利要求12所述的AAA服务器，其中，所述判断单元是设置为：
    在所述AAA服务器的存储单元或者归属位置寄存器HLR的存储单元中查找所述UE的标识信息；其中，所述HLR中存储有所有的被许可用户设备的标识信息；
    若在所述AAA服务器的存储单元或者归属位置寄存器HLR的存储单元中查找到所述UE的标识信息，则判断所述UE属于被许可用户设备；
    若在所述AAA服务器的存储单元和归属位置寄存器HLR的存储单元中均未查找到所述UE的标识信息，则判断所述UE属于非许可用户设备。
  14. 一种限制非许可用户设备接入家庭网关的方法，其中，无线接入网关WAG执行的操作包括：
    所述WAG接收家庭网关HGW发送的检查所述UE的身份的请求消息，所述请求消息中携带有所述UE的标识信息；
    所述WAG向AAA服务器发送接入请求消息，所述接入请求消息中携带有所述UE的标识信息；
    所述WAG接收所述AAA服务器发送的用于回复所述接入请求消息的接入响应消息，所述接入响应消息中携带有所述AAA服务器根据所述UE的标识信息对所述UE的身份进行判断后的判断结果；
    所述WAG向所述HGW发送用于回复所述检查所述UE的身份的请求消息的响应消息，所述响应消息中携带有所述判断结果。
  15. 一种限制非许可用户设备接入家庭网关的方法，其中，AAA服务器执行的操作包括：
    所述AAA服务器接收无线接入网关WAG服务器发送的接入请求消息，所述接入请求消息中携带有所述UE的标识信息；
    所述AAA服务器根据接收到的所述接入请求消息中包括的所述UE的标识信息对所述UE的身份进行判断；所述UE的身份包括：所述UE属于被许可用户设备或所述UE属于非许可用户设备；
    所述AAA服务器向无线接入网关WAG发送用于回复所述接入请求消息的接入响应消息，所述接入响应消息中携带有所述AAA服务器根据所述UE的标识信息对所述UE的身份进行判断后的判断结果。
  16. 根据权利要求15所述的方法，其中，所述AAA服务器根据接收到的所述接入请求消息中包括的所述UE的标识信息对所述UE的身份进行判断，包括：
    在所述AAA服务器的存储单元或者归属位置寄存器HLR的存储单元中查找所述UE的标识信息；其中，所述HLR中存储有所有的被许可用户设备的标识信息；
    若在所述AAA服务器的存储单元或者归属位置寄存器HLR的存储单元中查找到所述UE的标识信息，则判断所述UE属于被许可用户设备；
    若在所述AAA服务器的存储单元和归属位置寄存器HLR的存储单元中均未查找到所述UE的标识信息，则判断所述UE属于非许可用户设备。
  17. 一种计算机可读存储介质，存储有程序指令，当该程序指令被执行时可实现权利要求1-6任一项所述的方法。
PCT/CN2015/092439 2015-07-10 2015-10-21 一种限制非许可用户设备接入家庭网关的方法和装置 WO2016131297A1 (zh)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN201510408346.XA CN106341374B (zh) 2015-07-10 2015-07-10 一种限制非许可用户设备接入家庭网关的方法和装置
CN201510408346.X 2015-07-10

Publications (1)

Publication Number Publication Date
WO2016131297A1 true WO2016131297A1 (zh) 2016-08-25

Family

ID=56688655

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2015/092439 WO2016131297A1 (zh) 2015-07-10 2015-10-21 一种限制非许可用户设备接入家庭网关的方法和装置

Country Status (2)

Country Link
CN (1) CN106341374B (zh)
WO (1) WO2016131297A1 (zh)

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2018095200A1 (zh) * 2016-11-24 2018-05-31 华为技术有限公司 一种用于管理用户设备的方法和装置

Families Citing this family (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
PT3574623T (pt) * 2017-01-30 2022-05-30 Ericsson Telefon Ab L M Métodos e dispositivos para troca de parâmetros durante acesso de emergência
CN110324215A (zh) * 2018-03-30 2019-10-11 云丁智能科技（北京）有限公司 智能门锁绑定方法、智能门锁、网关、服务器及绑定系统

Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN102457847A (zh) * 2010-10-21 2012-05-16 中兴通讯股份有限公司 一种固定网络感知用户接入的方法和系统
CN102752746A (zh) * 2011-04-21 2012-10-24 中兴通讯股份有限公司 一种认证通知方法及系统
CN104754689A (zh) * 2013-12-31 2015-07-01 中兴通讯股份有限公司 家庭网关接入管理方法和系统

Family Cites Families (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101335668B (zh) * 2007-06-27 2012-02-08 中兴通讯股份有限公司 基于gpon接入的宽带网络和用户管理方法
JP5051055B2 (ja) * 2008-08-12 2012-10-17 富士通株式会社 シグナリングを伴うインターネットサービスにおけるネットワーク障害発生時の影響範囲特定のための方法、プローブ装置、及び集計サーバ装置
CN103002443A (zh) * 2011-09-16 2013-03-27 中兴通讯股份有限公司 一种接纳控制方法和系统
CN102694879B (zh) * 2012-05-21 2016-06-08 中国联合网络通信集团有限公司 业务识别方法、设备和系统

Patent Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN102457847A (zh) * 2010-10-21 2012-05-16 中兴通讯股份有限公司 一种固定网络感知用户接入的方法和系统
CN102752746A (zh) * 2011-04-21 2012-10-24 中兴通讯股份有限公司 一种认证通知方法及系统
CN104754689A (zh) * 2013-12-31 2015-07-01 中兴通讯股份有限公司 家庭网关接入管理方法和系统

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2018095200A1 (zh) * 2016-11-24 2018-05-31 华为技术有限公司 一种用于管理用户设备的方法和装置
US11212253B2 (en) 2016-11-24 2021-12-28 Huawei Technologies Co., Ltd. User equipment management method and apparatus

Also Published As

Publication number Publication date
CN106341374B (zh) 2020-09-29
CN106341374A (zh) 2017-01-18

Similar Documents

Publication Publication Date Title
US8189567B2 (en) Method and nodes for registering a terminal
KR101971167B1 (ko) 이주자에 의해 야기된 코어 네트워크 트래픽의 감소
US11032743B1 (en) Methods and apparatus for supporting devices of different types using a residential gateway
US9967738B2 (en) Methods and arrangements for enabling data transmission between a mobile device and a static destination address
US8094651B2 (en) Emergency call services for wireless network roaming
WO2019017840A1 (zh) 网络验证方法、相关设备及系统
JP5982389B2 (ja) クロスアクセスログインコントローラ
CN105981345B (zh) Wi-fi/分组核心网接入的合法侦听
EP3225071B1 (en) Infrastructure-based d2d connection setup using ott services
EP3614649A1 (en) Ip address allocation method and device
WO2016161832A1 (zh) 一种通过托管sim卡实现移动通信的系统及相应的方法
WO2015032253A1 (zh) 业务权限确定方法和装置
TWI516151B (zh) 通訊方法與通訊系統
US8948754B2 (en) Method and apparatus for establishing a communication connection
WO2016131297A1 (zh) 一种限制非许可用户设备接入家庭网关的方法和装置
WO2017107739A1 (zh) 数据业务处理方法及装置
CN116210252A (zh) 接收用于边缘计算的用户同意的网络操作
WO2015100874A1 (zh) 家庭网关接入管理方法和系统
JP2013074606A (ja) 親の無線端末に従属する子の無線端末のアクセスを規制する無線ルータ、プログラム及びアクセス方法
CN107046568B (zh) 一种认证方法和装置
CN108307683B (zh) 通讯方法、微基站、微基站控制器、终端和系统
CN110582085B (zh) 一种通信方法、装置和系统
JP5855987B2 (ja) 通信装置及び基地局装置
KR100610198B1 (ko) 모바일 브리지를 이용한 인터넷 접속 방법 및 시스템
CN114339769A (zh) 一种wifi用户接入核心网方法及系统

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 15882436

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE

122 Ep: pct application non-entry in european phase

Ref document number: 15882436

Country of ref document: EP

Kind code of ref document: A1