WO2018196503A1

WO2018196503A1 - Method for processing authentication information, terminal, and system

Info

Publication number: WO2018196503A1
Application number: PCT/CN2018/079448
Authority: WO
Inventors: 丁晓磊
Original assignee: 中兴通讯股份有限公司
Priority date: 2017-04-24
Filing date: 2018-03-19
Publication date: 2018-11-01
Also published as: CN108738018B; CN108738018A

Abstract

Disclosed in the present invention is an method for processing authentication information: when implementing point-to-point protocol PPP dial-up networking, a mobile terminal respectively compares a second access point name APN and second user authentication information acquired during the PPP dial-up networking with a first APN and second user authentication information used by the mobile terminal when registering to the mobile network; when determining that the first APN and the second APN are the same but the first user authentication information and the second user authentication information are different, the mobile terminal issues a request to the mobile network to release a first packet data network PDN connection; and, after the mobile network releases the first PDN connection, the mobile terminal uses the second APN and the second user authentication information to establish a second PDN connection with the mobile network. Also disclosed in the present invention are a mobile terminal and system for processing authentication information.

Description

Method, terminal and system for processing authentication information

Technical field

The present invention relates to a PPP dialing technology in the field of communications, and in particular, to a method and a terminal for processing authentication information.

Background technique

Point-to-Point Protocol (PPP) dialing (also known as Dial Up Networking (DUN), also known as Remote Access Service (RAS) dialing in Windows) is based on the PPP protocol. A method of establishing a PPP link between a terminal equipment (TE) and a mobile terminal (MT) to implement dialing. The terminal device can be a general personal computer or a device with an embedded Linux system (such as a tablet computer, a home wireless router, etc.). The mobile terminal can be a mobile phone. For PPP dialup, it needs to be initiated by the terminal device, and then the terminal device and the mobile terminal complete related interaction actions, and trigger the signaling interaction between the mobile terminal and the mobile network until the dialing is completed.

A mobile terminal under a mobile network usually automatically registers a network, completes an attach procedure using an existing Access Point Name (APN) and user authentication parameters stored therein, and establishes a packet data network with the mobile network ( Packet Data Network, PDN) connection. After the PDN connection is established, the mobile network allocates related resources and information such as an Internet Protocol (IP) address and a Domain Name System (DNS) address to the mobile terminal. In the PPP dialing process, after receiving the PPP dialing request from the terminal device, if the APN specified by the current dialing is the same as the APN used for the connection, the mobile terminal does not re-initiate the establishment of the PDN connection, but uses the existing PDN connection (ie, PDN connection established when attached). However, if the APNs are the same but the user authentication parameters are different, the mobile terminal still uses the PDN connection established at the time of attachment, and assigns the corresponding IP address and DNS address to the terminal device to complete the PPP dialing process.

In this case, the user authentication parameters sent by the terminal device to the mobile terminal during the PPP dialing process are not used by the mobile terminal to establish a PDN connection. Therefore, this may result in the user authentication parameters set on the terminal device side may not be used, that is, the incorrect user authentication parameters may actually be used.

For this problem, although this may not be affected under most networks, under some operators' networks, because the user authentication parameters are checked strictly, the mobile terminal may be required to use the current customer identification module (Subscriber Identification). Module, SIM) card user name, password, and authentication mode. These user authentication parameters are used to establish a PDN connection to ensure that users can access the Internet normally. Otherwise, problems such as inaccessibility to the network may occur.

Summary of the invention

In view of this, embodiments of the present invention are expected to provide a method, a mobile terminal, and a system for authentication information processing, which can enable a mobile terminal to use correct user authentication parameters.

According to an aspect of the present invention, a method for processing authentication information is provided, including: when performing PPP dialing, the second APN and the second user authentication information acquired by the mobile terminal when dialing PPP respectively are Comparing the first APN used when registering the mobile network with the first user authentication information; determining that the first APN and the second APN are the same and the first user authentication information and the second user authentication When the information is different, the mobile terminal initiates a request to release the first PDN connection to the mobile network; and after the mobile network releases the first PDN connection, the mobile terminal uses the second APN and the second user authentication information and moves The network establishes a second PDN connection.

According to another aspect of the present invention, a mobile terminal for processing authentication information is provided, including a determination module, a determination module, and a connection module. The determining module is configured to: when performing PPP dialing, respectively, the second APN and the second user authentication information acquired during the PPP dialing and the first APN and the first user authentication information used by the mobile terminal when registering the mobile network Compare. The determining module is configured to initiate release of the first PDN connection to the mobile network when it is determined that the first APN and the second APN are the same and the first user authentication information and the second user authentication information are different Request. The connection module is configured to establish a second PDN connection with the mobile network using the second APN and the second user authentication information after the mobile network releases the first PDN connection.

According to another aspect of the present invention, there is also provided a system for processing authentication information, including a terminal device, a mobile terminal, and a mobile network. The terminal device is configured to initiate a PPP dialing request to the mobile terminal, send the second APN and the second user authentication information when the PPP dialing is performed to the mobile terminal, and request the IP address configuration information from the mobile terminal. The mobile terminal is configured to perform, when performing PPP dialing, respectively performing the second APN and the second user authentication information acquired during the PPP dialing, and the first APN and the first user authentication information used by the mobile terminal when registering the network. For example, when it is determined that the first APN and the second APN are the same and the first user authentication information and the second user authentication information are different, the mobile terminal initiates release of the first PDN connection to the mobile network. Requesting, and after the mobile network releases the first PDN connection, the mobile terminal establishes a second PDN connection with the mobile network using the second APN and the second user authentication information. Receiving, by the mobile network, a request initiated by the mobile terminal to release the first PDN connection, and releasing a first PDN connection established with the mobile terminal according to the request, and using the second APN and the second user authentication information The mobile terminal establishes a second PDN connection.

According to another aspect of the present invention, a mobile terminal is provided, comprising: a communication interface configured to communicate with other devices; a storage medium configured to store a computer program; a processor respectively associated with the communication interface and The storage medium is connected, and is configured to perform at least the following steps by running the computer program: when PPP dialing is performed, the second APN and the second user authentication information acquired when dialing PPP respectively and the mobile terminal are registered to move Comparing the first APN used by the network with the first user authentication information; determining that the first APN and the second APN are the same and the first user authentication information and the second user authentication information are not Simultaneously, a request to release the first PDN connection is initiated to the mobile network; and after the mobile network releases the first PDN connection, establishing a second PDN connection with the mobile network using the second APN and the second user authentication information .

According to another aspect of the present invention, there is also provided a computer storage medium storing a computer program, the computer program being executed by a processor to perform a processing method of authentication information according to the present invention.

DRAWINGS

1 is a schematic diagram of an interaction process between a terminal device, a mobile terminal, and a mobile network in a PPP dialing process on a 2G/3G network;

2 is a schematic diagram of an interaction process between a terminal device, a mobile terminal, and a mobile network in a PPP dialing process under a 4G network;

FIG. 3 is a schematic flowchart diagram of a method for processing authentication information according to an embodiment of the present invention; FIG.

FIG. 4 is a schematic flowchart of a specific implementation process of an authentication information processing method according to an embodiment of the present invention; FIG.

5 is a schematic diagram of an interaction process between a terminal device, a mobile terminal, and a mobile network in a PPP dialing process according to an embodiment of the present invention;

FIG. 6 is a schematic structural diagram of a mobile terminal processing authentication information according to an embodiment of the present invention; FIG.

7 is a schematic diagram showing the structure of a system for processing authentication information according to an embodiment of the present invention;

FIG. 8 is a schematic structural diagram of a structure of a mobile terminal according to an embodiment of the present invention.

detailed description

In the embodiment of the present invention, when the point-to-point protocol (PPP) dialing is performed, the mobile terminal first determines the second APN and the second user authentication information acquired when the PPP is dialed, and when the mobile terminal registers the mobile network. Whether the first APN used and the first user authentication information are the same. If the first APN and the second APN are the same, but the first user authentication information and the second user authentication information are different, the mobile terminal initiates release of the current packet data network to the mobile network (Packet Data Network, PDN) Connect the request to release the current PDN connection. After the mobile network releases the PDN connection, the mobile terminal re-establishes the PDN connection using the second APN and the second user authentication information, ie, establishes a second PDN connection.

It should be noted that, in PPP dialing, the main purpose of signaling interaction between the mobile terminal and the mobile network is to establish a logical path of data transmission and activate the interconnection protocol between the mobile networks to ensure that the data can be IP packets. The form is transmitted to the gateway node of the mobile network. In the second generation communication technology and the third generation communication system (The 2nd Generation communication system, 2G/3G), it is embodied as the activation of the Packet Data Protocol (PDP) context, and in the fourth The 4th Generation communication system (4G) is embodied as the establishment of a PDN connection.

The process of activating a PDP context and the process of establishing a PDN connection are both that the mobile terminal sends a series of related parameters to the mobile network, and then the mobile network completes the registration of the user information and the allocation of related resources, and allocates the network through the signaling response. The IP address, DNS address, and the like are sent to the mobile terminal. After these signaling interactions are completed, a logical channel is formed between the mobile terminal and the mobile network. This logical channel is an active PDP context at 2G/3G and a PDN connection at 4G. In the process of establishing a PDN connection, the parameters sent by the mobile terminal to the mobile network include APN and user authentication information. Figure 1 and Figure 2 respectively illustrate the interaction process between mobile terminals, terminal devices and mobile networks in the PPP dialing process under 2G/3G and 4G networks.

In order to more fully understand the features and technical details of the present invention, the implementation of the present invention will be described in detail below with reference to the accompanying drawings.

FIG. 3 is a schematic flowchart diagram of a method for processing authentication information according to an embodiment of the present invention.

As shown in FIG. 3, the authentication information processing method according to an embodiment of the present invention may include steps S301 to S303.

In step S301, when performing PPP dialing, the second access point name APN and the second user authentication information acquired by the mobile terminal for PPP dialing respectively and the first APN and the first user used when the mobile terminal registers the mobile network The authentication information is compared.

In step S302, when it is determined that the first APN and the second APN are the same and the first user authentication information and the second user authentication information are different, the mobile terminal initiates release of the first PDN connection to the mobile network. Request.

In step S303, after the mobile network releases the first PDN connection, the mobile terminal establishes a second PDN connection with the mobile network by using the second APN and the second user authentication information.

The basic flow of the above authentication information processing method will be described in detail below.

Before step S301, the mobile terminal receives the PPP dialing request initiated by the terminal device, and performs information interaction with the terminal device. The mobile terminal acquires the second APN and the second user authentication information delivered by the terminal device according to the information received during the information interaction with the terminal device. According to an embodiment of the present invention, the terminal device may be a general personal computer or a device with an embedded Linux system (such as a tablet computer, a home wireless router, etc.). The mobile terminal can be a mobile phone. For convenience of explanation, a personal computer (PC) may be used herein to represent the terminal device, but the inventive concept is not limited thereto.

The PC initiates a PPP dialing request to the mobile terminal. The PC can set the APN for PPP dialing to the mobile terminal through the modem command language AT command. For example, the PC can do this with the standard AT command "+CGDCONT" specified in the communication protocol 3GPP TS 27.007. When the PC sends the AT command to set the APN, in addition to specifying the APN in the parameter, the PC needs to give the Context Identification (CID) parameter. The CID parameter is a positive integer indicating which file the APN sent to the mobile terminal is to store in the mobile terminal, that is, the index number of the file. After receiving the PPP dialing request initiated by the PC, the mobile terminal reads the APN from the corresponding file according to the CID for the PPP dialing process.

The PC can also set the user authentication information to a profile in the mobile terminal by means of an AT command or the like, and also needs to specify the index number of the file by the CID parameter.

It should be appreciated that although the PC can set the user authentication information to the file in the mobile terminal by means of an AT command or the like, this is not a necessary operation before the PPP dialing. If the PC does not perform this operation, the user authentication parameters within the mobile terminal may be some uncertain value. During the PPP dialup process, the PC sends the user authentication information set or input by the user on the PC to the mobile terminal through the PPP authentication protocol. The mobile terminal should use this set of user authentication parameters to complete the dialing process. The user authentication parameter may include a user name, a password, an authentication mode, and the like of the current user, that is, user authentication information.

The mobile terminal receives the PPP dialing request initiated by the terminal device, and the process of performing information interaction with the terminal device may include the following steps (1) to (3).

In step (1), the PC sends an AT command ATD*99# to the mobile terminal, and the mobile terminal returns a connection response (CONNECT). "*99#" is a dial string, or it can be in the form of "*99***N#" (N is a positive integer), which is used to specify the CID used when dialing PPP. If the dial string is "*99#", the CID takes the default value of 1. As described above, the mobile terminal can read information such as APN in the corresponding file stored therein according to the CID.

In step (2), the PPP link is configured. The PPP Link Control Protocol (PPP LCP) Configuration Request (Config Request) and the PPP Link Control Protocol Configuration Confirmation (PPP LCP Config Ack) are used for signaling interaction between the PC and the mobile terminal to complete the PPP link configuration.

In step (3), the PPP is authenticated. The PC sends the user authentication parameter input by the user or configured in advance to the mobile terminal through a PPP authentication request (PPP Auth Request). After receiving, the mobile terminal returns a PPP Auth Ack response. The user authentication parameter is user authentication information used when dialing PPP, that is, second user authentication information.

In step S301, the PC initiates a PPP IPCP Request (PPP IPCP Request), and the mobile terminal acquires the second APN and the second user authentication information delivered by the PC. The second APN can be set by the PC to the mobile terminal by using an AT command, and the mobile terminal can read the APN information in the corresponding file stored internally. The second user authentication information may be sent by the PC to the mobile terminal through the PPP authentication request.

After the mobile terminal acquires the second APN and the second user authentication information, the second APN and the second user authentication information are registered with the mobile terminal as the first APN and the first user authentication information. Compare separately. The first APN and the first user authentication information may be existing APN information and user authentication information built in the mobile terminal. After the mobile terminal is powered on, the first APN and the first user authentication information are used to initiate an attach request to the mobile network, and establish a first PDN connection with the mobile network.

When the mobile terminal determines that the first APN and the second APN are the same and the first user authentication information and the second user authentication information are different, the mobile terminal initiates a request to release the current first PDN connection to the mobile network. That is, when the mobile terminal establishes a PDN connection in the process of attaching to the mobile network, although the PPN dialed APN is used, the user authentication information that needs to be used due to the user authentication information used and the PPP dialing initiated by the PC may be Different, so there may be problems with surfing the Internet based on the PDN connection at this time. The mobile terminal may initiate a detach request to the mobile network to request release of the current first PDN connection.

In step S303, after receiving the detach accept response sent by the mobile network, the mobile terminal re-initiates an attach request to the mobile network. The mobile terminal establishes a second PDN connection by using the second APN obtained when the PPP is dialed and the second user authentication information. At this point, the mobile terminal establishes a PDN connection with the mobile network using the correct APN and user authentication information.

After the mobile terminal initiates the request to establish the second PDN connection using the second APN and the second user authentication information, the mobile network sends an attach accept to the mobile terminal. The mobile terminal acquires IP address configuration information of the second PDN connection from the accept attachment response, constructs an IPCP response of the PPP dialup according to the IP address configuration information of the second PDN connection, and sends the IP address configuration information of the second PDN connection by using the IPCP response. To the terminal device. The IP address configuration information may include an IP address, a DNS address, and the like.

Further, when it is determined that the first APN and the second APN are the same and the first user authentication information and the second user authentication information are the same, that is, the mobile terminal establishes the PDN with the mobile network by using the correct APN and the user authentication information. Connected, the mobile terminal maintains a first PDN connection established with the mobile network, and the mobile terminal acquires IP address configuration information of the first PDN connection directly from the mobile network. Then, the mobile terminal constructs an IPCP response of the PPP dialing according to the IP address configuration information of the first PDN connection, and sends the IP address configuration information of the first PDN connection to the terminal device by using an IPCP response.

Further, when it is determined that the first APN and the second APN are different, regardless of whether the user authentication information is the same, the mobile terminal uses the APN at this time to perform Internet access, and an error occurs. Therefore, the mobile terminal establishes a third PDN connection with the mobile network using the second APN and the second user authentication information. After the third PDN connection establishment is completed, the mobile terminal acquires IP address configuration information of the third PDN connection from the mobile network, constructs an IPCP response of the PPP dialup according to the IP address configuration information of the third PDN connection, and responds the third PDN by the IPCP response. The connected IP address configuration information is sent to the terminal device.

After receiving the IP address configuration information sent by the mobile terminal, the PC completes the address configuration, that is, the PPP dialing is completed.

FIG. 4 is a schematic flowchart of a specific implementation process of an authentication information processing method according to an embodiment of the present invention.

As shown in FIG. 4, the authentication information processing method according to an embodiment of the present invention may include steps S401 to S416.

In step S401, the mobile terminal starts the registration network, and establishes a first PDN connection pdn1 with the mobile network, wherein the APN and user authentication information used to establish the first PDN connection pdn1 are apn1 and auth_info1, respectively.

After the mobile terminal is powered on, the network is usually automatically registered. The attach process is completed when you register your mobile network. The attach procedure of the mobile terminal under the 4G network needs to establish a PDN connection by using information such as APN and user authentication parameters, which is different from the case of the 2G/3G network. This is because, under the 2G/3G network, the mobile terminal does not need to use this information when registering the network, but needs to activate the PDP context with the mobile network when dialing PPP, and then the APN and user authentication parameters, etc. will be Information is sent to the mobile network.

Since the registration network is a spontaneous behavior of the mobile terminal, under the 4G network, the mobile terminal usually initiates an attach request to the mobile network using the existing APN and user authentication parameters stored internally. After receiving the attach request, the mobile network establishes a PDN connection with the mobile terminal. After the PDN connection is established, the mobile network allocates relevant resources, IP address, DNS address and other information (ie, IP address configuration information) to the mobile terminal, and sends an accept attachment response to the mobile terminal. The PDN connection established at this time may be referred to as a “first PDN connection” in the present application, and may be pdn1. The APN and user authentication parameters (ie, user authentication information) used to establish the first PDN connection pdn1 may be respectively Apn1 and auth_info1. The IP address configuration information assigned by the mobile network in this case may be ip_info1.

In step S402, the mobile terminal acquires the APN delivered by the PC when performing PPP dialing as apn2.

The PPP dialing starts, and the mobile terminal receives the ATD command sent by the PC, for example, it can be ATD*99#. According to the dialing string in the ATD command, the mobile terminal parses out the CID and reads the corresponding APN (ie, apn2) stored in the mobile terminal according to the CID, which is the APN to be used when dialing PPP. The mobile terminal then returns a connection response.

In step S403, the mobile terminal receives the user authentication information auth_info2 sent by the PC.

The mobile terminal receives the PPP authentication request that is sent by the PC and carries the user authentication information. The mobile terminal obtains the user authentication information auth_info2 for PPP dialing, which may include information such as a username, a password, and an authentication method, which is user authentication information to be used when performing PPP dialing.

In step S404, the mobile terminal determines whether the currently registered mobile network is a 4G network. If it is a 4G network, step S405 is performed; if it is not a 4G network (for example, a 2G/3G network), step S411 is performed.

In step S405, the mobile terminal determines whether apn1 and apn2 are the same. If the APN at the time of registration is the same as the APN obtained when the PPP is dialed (ie, apn1=apn2), step S406 is performed; if the APN at the time of registration is different from the APN obtained when the PPP is dialed (ie, apn1≠apn2), execution is performed. Step S413.

In step S406, the mobile terminal determines whether auth_info1 is the same as auth_info2. If the user authentication information at the time of registration is different from the user authentication information obtained when the PPP is dialed (ie, auth_info1≠auth_info2), step S407 is performed; if the user authentication information at the time of registration and the user authentication information obtained when the PPP is dialed The same (ie, auth_info1 = auth_info2), step S410 is performed.

In the above steps S405 and S406, it is determined whether apn1 and apn2 are the same, and whether auth_info1 and auth_info2 are the same, the purpose of which is to determine whether a situation occurs in which the mobile terminal establishes a PDN connection in the attaching process (ie, the first The APN (apn1) used by the PDN connection pdn1) is the APN (apn2) to be used when dialing PPP (ie, apn1=apn2), and the user authentication information (auth_info1) used in the attach procedure is different from that used when dialing PPP. User authentication information (auth_info2). If this happens, there may be a problem with the PDN connection established at the time of attachment (ie, the first PDN connection pdn1). In this case, according to an embodiment of the present invention, the mobile terminal releases the current PDN connection and re-establishes the PDN (ie, the second PDN connection pdn2) using the APN and user authentication information (auth_info2) used in PPP dialing. It should be appreciated that steps S405 and S406 do not have a specific sequence of requirements.

In step S407, the mobile terminal initiates a release attach request, that is, the mobile terminal initiates a release attach request to the mobile network to release the current first PDN connection pdn1.

At step S408, the mobile terminal re-initiates the attach procedure to the mobile network using apn2 and auth_info2 to re-establish the PDN connection pdn2.

In step S409, the mobile terminal constructs an IPCP response (IPCP Ack) using the IP address configuration information of pdn2. The mobile terminal fills the IP address and DNS address of the pdn2 into the corresponding field in the IPCP Ack, and then performs step S415.

In step S410, the mobile terminal constructs an IPCP Ack using the IP address configuration information of pdn1. The mobile terminal fills the IP address and DNS address of the pdn1 into the corresponding field in the IPCP Ack, and then performs step S415.

In step S411, the mobile terminal activates the PDP context pdp1 using apn2 and auth_info2.

In step S412, the mobile terminal constructs an IPCP Ack using the IP address configuration information of pdp1. The mobile terminal fills the IP address and DNS address of the pdp1 into the corresponding field in the IPCP Ack, and then performs step S415.

In step S413, the mobile terminal newly establishes the PDN connection pdn3 using apn2 and auth_info2.

At step S414, the mobile terminal constructs an IPCP Ack using the IP address configuration information of pdn3. The mobile terminal fills the IP address and DNS address of the pdn3 into the corresponding field in the IPCP Ack.

At step S415, the mobile terminal sends the constructed IPCP Ack response to the PC.

At step S416, the PPP dialing is completed.

The PC parses the IP address and DNS address from the received IPCP Ack to complete the configuration, and the PPP dialing is completed.

FIG. 5 is a schematic diagram of an interaction process between a terminal device, a mobile terminal, and a mobile network in a PPP dialing process according to an embodiment of the present invention.

As shown in FIG. 5, the PPP dialing interaction process according to an embodiment of the present invention may include steps S501 to S508.

In step S501, the mobile terminal starts up registration.

After the mobile terminal is powered on, the built-in existing user authentication information and the APN information are used to initiate an attach request to the mobile network to establish a PDN connection with the mobile terminal. After the PDN connection is established, the mobile network allocates related resources, IP address, DNS address and other information (ie, IP address configuration information) ip_info1 to the mobile terminal, and returns an accept attachment response to the mobile terminal. The APN and user authentication information used at this time are apn1 and auth_info1, respectively.

At step S502, dialing starts.

The mobile terminal receives the command ATD*99# or ATD*99***N# sent by the PC, and according to the dial string, parses the CID specified by the PPP dialing, and reads the APN used for dialing, which can be recorded as apn2. The mobile terminal then returns a connection response.

In step S503, the PPP link is configured.

The PPP link configuration request and the PPP link configuration confirmation signaling interaction between the PC and the mobile terminal complete the PPP link configuration.

At step S504, the PPP is authenticated.

The PC sends the user authentication parameter input by the user or configured in advance to the mobile terminal through the PPP authentication request, and the mobile terminal returns a PPP authentication confirmation response after receiving. The user authentication parameter is the user authentication information to be dialed, that is, the second user authentication information can be recorded as auth_info2.

At step S505, an address is requested.

The PC initiates a PPP dialing IP control protocol request to the mobile terminal, requests the IP address configuration, and the mobile terminal determines whether the following conditions are met: the APN used for powering on the registration is the same as the APN specified by the PC through the PPP dialing string, and the user profile used for registration The weight parameter is different from the user authentication parameter acquired in step S504, that is, apn1=apn2 and auth_info1≠auth_info2.

At step S506, the attachment is released.

If the condition in step S505 is satisfied, it means that when the mobile terminal establishes a PDN connection with the mobile network, although the PPN dialed APN is used, since the user authentication information used is different from the user authentication information used for PPP dialing, Using the PDN connection at this time to access the Internet may cause problems. Therefore, the mobile terminal initiates a release attach request to the mobile network. After receiving the release attachment request, the mobile network releases the PDN connection currently established with the mobile terminal, and returns a acceptance release attachment response to the mobile terminal.

At S507, reattach.

The mobile terminal initiates an attach request to the network using the user authentication parameters and APNs (ie, auth_info2 and anp2) delivered by the PC during PPP dialing, and then re-establishes a PDN connection with the mobile network. The mobile network assigns IP address configuration information (ip_info2) to the mobile terminal and sends an accept attachment response to the mobile network.

At S508, the address is responsive.

The mobile terminal will re-attach the IP address configuration information such as the obtained IP address and DNS address, and determine the response to the PC through the PPP IP control protocol. Then the PC completes the address configuration and the PPP dialing is completed.

FIG. 6 is a schematic structural diagram of a mobile terminal processing authentication information according to an embodiment of the present invention.

As shown in FIG. 6, the mobile terminal processing the authentication information according to the embodiment of the present invention may include a determining module 601, a determining module 602, and a connecting module 603.

The determining module 601 is configured to perform, when performing PPP dialing, respectively performing the second APN and the second user authentication information acquired during the PPP dialing with the first APN and the first user authentication information used by the mobile terminal when registering the mobile network. Comparison.

The determining module 602 is configured to initiate release of the first PDN to the mobile network when it is determined that the first APN and the second APN are the same and the first user authentication information and the second user authentication information are different. The request to connect.

The connection module 603 is configured to establish a second PDN connection with the mobile network using the second APN and the second user authentication information after the mobile network releases the first PDN connection.

The mobile terminal according to an embodiment of the present invention may further include a communication module 604 and an acquisition module 605.

The communication module 604 is configured to receive a PPP dialing request initiated by the terminal device, and perform information interaction with the terminal device.

The obtaining module 605 is configured to acquire the second APN and the second user authentication information delivered by the terminal device according to the information received during the information interaction with the terminal device.

According to an embodiment of the present invention, the obtaining module 605 is further configured to acquire IP address configuration information of the second PDN connection from the mobile network, and the communication module 604 is further configured to be based on the IP address of the second PDN connection. The configuration information constructs an IPCP protocol IPCP response of the PPP dialing, and sends the IP address configuration information of the second PDN connection to the terminal device by using the IPCP response.

According to an embodiment of the present invention, the determining module 602 is further configured to: when it is determined that the first APN and the second APN are the same and the first user authentication information and the second user authentication information are the same, The first PDN connection established with the mobile network, the obtaining module 605 is further configured to acquire IP address configuration information of the first PDN connection from the mobile network, and the communication module 604 is further configured according to the first PDN The IP address configuration information of the connection constructs an IPCP response of the PPP dialing, and the IP address configuration information of the first PDN connection is sent to the terminal device by using the IPCP response.

According to the embodiment of the present invention, when the determining module 602 determines that the first APN and the second APN are different, the connection module 603 is further configured to use the second APN and the second user authentication information, and The mobile network establishes a third PDN connection, the obtaining module 605 is further configured to acquire IP address configuration information of the third PDN connection from the mobile network, and the communication module 604 is further configured to be configured according to the IP of the third PDN connection The address configuration information constructs an IPCP response of the PPP dialing, and sends the IP address configuration information of the third PDN connection to the terminal device by using the IPCP response.

Specifically, when the mobile terminal is powered on, the mobile network is automatically registered. The connection module 603 uses the existing APN and user authentication parameters stored internally to complete the establishment of the PDN connection in the attach process. At this time, the established PDN connection may be referred to as a first PDN connection, and may be recorded as pdn1. The user authentication parameter used is user authentication information, and the APN and user authentication information may be recorded as apn1 and auth_info1, respectively.

When the PPP dialing starts, the communication module 604 of the mobile terminal receives the ATD command sent by the PC, and the obtaining module 605 parses the CID according to the dialing string, and reads the corresponding APN stored in the mobile terminal according to the CID, which can be recorded as Apn2, this is the APN to be used when dialing PPP. Then, the communication module 604 receives the PPP authentication request sent by the PC, where the user authentication information is carried, and the obtaining module 605 obtains the user authentication information for the PPP dialing, including the user name, the password, and the authentication mode. It can be recorded as auth_info2, which is the user authentication information to be used when dialing PPP.

The determining module 601 determines whether the second APN and the second user authentication information acquired during the PPP dialing are the same as the first APN and the first user authentication information used when registering the mobile network. When the determining module 602 determines that the first APN and the second APN are the same and the first user authentication information and the second user authentication information are different, a request to release the first PDN connection is initiated to the mobile network. After the mobile network releases the first PDN connection, the connection module 603 establishes a second PDN connection with the second APN and the second user authentication information. The obtaining module 605 acquires the IP address configuration information of the second PDN connection from the mobile network, and the communication module 604 transmits the IP address configuration information of the second PDN connection to the terminal device.

When the determining module 602 determines that the first APN and the second APN are the same and the first user authentication information and the second user authentication information are the same, the originally established first PDN connection is maintained. The obtaining module 605 acquires the IP address configuration information of the first PDN connection from the mobile network, and the communication module 605 sends the IP address configuration information of the first PDN connection to the terminal device.

When the determining module 602 determines that the first APN is different from the second APN, the connection module 603 uses the second APN and the second user authentication information to establish a third PDN connection with the mobile network. The obtaining module 605 acquires the IP address configuration information of the third PDN connection from the mobile network, and the communication module 604 transmits the IP address configuration information of the third PDN connection to the terminal device.

FIG. 7 is a schematic diagram showing the structure of a system for processing authentication information according to an embodiment of the present invention.

As shown in FIG. 7, a system for processing authentication information according to an embodiment of the present invention may include a terminal device 701, a mobile terminal 702, and a mobile network 703.

The terminal device 701 is configured to initiate a PPP dialing request to the mobile terminal 702, transmit the second APN and the second user authentication information when performing PPP dialing to the mobile terminal, and request the mobile terminal 702 for IP address configuration information.

The mobile terminal is configured to compare the second APN and the second user authentication information acquired during PPP dialing with the first APN and the first user authentication information used when registering the network, when the PPP dialing is performed, when determining that the When the first APN and the second APN are the same and the first user authentication information and the second user authentication information are different, a request to release the first PDN connection is initiated to the mobile network 703, and when the mobile network releases the location After the first PDN connection, the second PDN connection is established with the mobile network using the second APN and the second user authentication information.

The mobile network 703 receives the release of the first PDN connection request initiated by the mobile terminal 702, and releases the first PDN connection established with the mobile terminal according to the request, and establishes with the mobile terminal 702 using the second APN and the second user authentication information. The second PDN connection.

According to an embodiment of the present invention, the mobile terminal 702 is further configured to acquire IP address configuration information of the second PDN connection from the mobile network 703, and construct an IPCP protocol IPCP response of the PPP dialing according to the IP address configuration information of the second PDN connection. And transmitting, by the IPCP response, the IP address configuration information of the second PDN connection to the terminal device 701.

The mobile network 703 transmits the IP address configuration information of the second PDN connection to the mobile terminal 702.

According to the embodiment of the present invention, after the mobile terminal 702 is powered on, the mobile terminal 702 initiates an attach request to the mobile network 703 using the built-in existing first APN and the first user authentication information, and establishes a first PDN connection with the mobile network 703. The terminal device 701 initiates a PPP dialing request to the mobile terminal 702, and transmits the second APN and the second user authentication information to the mobile terminal 702 during the information interaction with the mobile terminal 702. In addition, the mobile device 701 also requests an IP address from the mobile terminal 702. After receiving the IP address request sent by the terminal device 701, the mobile terminal 702 acquires the second APN and the second user authentication information sent by the terminal device 701, and respectively the first APN and the first user authentication information and the second APN. Compare with the second user authentication information. When the first APN is the same as the second APN and the first user authentication information is different from the second user authentication information, the mobile terminal 702 sends a request to release the first PDN connection to the mobile network 703. The mobile network 703 accepts the request to release the first PDN connection and releases the first PDN connection with the mobile terminal 702. The mobile terminal 702 then establishes a second PDN connection with the mobile network 703 using the second APN and the second user authentication information. After the second PDN connection is established, the mobile terminal 702 requests an IP address from the mobile network 703, and the mobile network 703 transmits the IP address configuration of the second PDN to the mobile terminal 702, and the mobile terminal 702 configures the IP address again through the IP address. The response information is sent to the terminal device 701. The terminal device 701 obtains information such as an IP address and a DNS address, and completes address configuration to complete PPP dialing.

As shown in FIG. 8, a mobile terminal according to an embodiment of the present invention may include a communication interface 801, a storage medium 802, and a processor 803.

Communication interface 801 is configured to communicate with other devices. Communication interface 801 can include a serial interface and a parallel interface including, but not limited to, RS-232, RS-485, RS-422, and the like.

Storage medium 802 is configured to store a computer program. The storage medium 801 may include a random storage medium and a read-only storage medium including, but not limited to, a compact flash (CF) card, a Secure Digital Memory (SD) card, and a smart media (Smart Media, SM) Cards, memory sticks, etc. have application entities that store data functions.

The processor 803 is respectively connected to the communication interface 801 and the storage medium 802, and is configured to perform at least the executable step by running the computer program: when performing PPP dialing, respectively authenticating the second APN and the second user acquired during PPP dialing The information is compared with the first APN and the first user authentication information used when registering the mobile network; when it is determined that the first APN and the second APN are the same and the first user authentication information and the second user When the authentication information is different, a request to release the current first PDN connection is initiated to the mobile network; and after the mobile network releases the first PDN connection, the second APN and the second user authentication information are used to establish with the mobile network The second PDN connection.

According to the embodiment of the present invention, the processor 803 may further perform: receiving a PPP dialing request initiated by the terminal device, and performing information interaction with the terminal device; and performing information interaction with the terminal device. Obtaining, acquiring, by the terminal device, the second APN and the second user authentication information; after establishing the second PDN connection with the mobile network by using the second APN and the second user authentication information, acquiring the second PDN connection from the mobile network IP address configuration information of the second PDN connection; constructing an IP control protocol IPCP response of the PPP dialing according to the IP address configuration information of the second PDN connection, and responding to the IP address of the second PDN connection by using the IPCP response The configuration information is sent to the terminal device.

According to an embodiment of the present invention, by running the computer program, the processor 803 may further perform: determining that the first APN and the second APN are the same and the first user authentication information and the second user profile When the rights information is the same, the first PDN connection established with the mobile network is maintained; the IP address configuration information of the first PDN connection is obtained from the mobile network; and the PPP dialing is constructed according to the IP address configuration information of the first PDN connection. The IPCP responds, and transmits the IP address configuration information of the first PDN connection to the terminal device by using the IPCP response.

According to an embodiment of the present invention, by running the computer program, the processor 803 may further perform: when determining that the first APN and the second APN are different, using the second APN and the second user authentication information The mobile network establishes a third PDN connection; acquires IP address configuration information of the third PDN connection from the mobile network; constructs an IPCP response of the PPP dialing according to the IP address configuration information of the third PDN connection, and responds by using the IPCP The IP address configuration information of the third PDN connection is sent to the terminal device.

It should be noted that the communication interface, the storage medium, and the processor all have many application entities, and the above description is only for illustrative purposes, and does not limit the scope of the present invention.

The embodiment of the present invention further provides a computer storage medium, where the computer storage medium stores a computer program, and when the computer program is executed by the processor, when the PPP dialing is performed, the second APN obtained when dialing PPP respectively And comparing the first user authentication information with the first APN and the first user authentication information used when registering the mobile network; and determining that the first APN and the second APN are the same and the first user authentication information And requesting to release the current first PDN connection to the mobile network when the second user authentication information is different; and using the second APN and the second user authentication after the mobile network releases the first PDN connection The information establishes a second PDN connection with the mobile network.

According to an embodiment of the present invention, when the computer program is executed by the processor, the second APN and the second user authentication information acquired when dialing PPP respectively and the first APN and the first used when registering the mobile network may be performed. Before the user authentication information is compared, the PPP dialing request initiated by the terminal device is received, and the information is exchanged with the terminal device; and the information received by the terminal device is obtained according to the information received during the information interaction with the terminal device. The second APN and the second user authentication information.

According to an embodiment of the present invention, when the computer program is executed by the processor, the computer program may be further configured to: acquire the second PDN connection from the mobile network after establishing the second PDN connection with the mobile network by using the second APN and the second user authentication information IP address configuration information of the second PDN connection; and constructing an IP control protocol IPCP response of the PPP dialing according to the IP address configuration information of the second PDN connection, and configuring the IP address configuration information of the second PDN connection by using the IPCP response Send to the terminal device.

According to an embodiment of the present invention, when the computer program is executed by the processor, the method may further be performed: when determining that the first APN and the second APN are the same and the first user authentication information and the second user authentication When the information is the same, the first PDN connection established with the mobile network is maintained; and the IP address configuration information of the first PDN connection is obtained from the mobile network;

And configuring an IPCP response of the PPP dialing according to the IP address configuration information of the first PDN connection, and sending the IP address configuration information of the first PDN connection to the terminal device by using the IPCP response.

According to an embodiment of the present invention, when the computer program is executed by the processor, the method further comprises: when determining that the first APN and the second APN are different, using the second APN and the second user authentication information and moving Establishing a third PDN connection by the network; acquiring IP address configuration information of the third PDN connection from the mobile network; and constructing an IPCP response of the PPP dialing according to the IP address configuration information of the third PDN connection, and responding by using the IPCP The IP address configuration information of the third PDN connection is sent to the terminal device.

The determining module 601, the determining module 602, and the connecting module 603 and the communication module 604 shown in FIG. 6 may each be a Central Processing Unit (CPU), a Micro Processor Unit (MPU) located in the mobile terminal, Digital signal processor (DSP), or Field Programmable Gate Array (FPGA) implementation.

The method, the mobile terminal, and the system for authenticating information processing provided by the embodiment of the present invention, when performing PPP dialing, if it is determined that the second APN obtained when dialing PPP is the same as the first APN when registering the mobile network, but When the two user authentication information and the first user authentication information are different, the mobile terminal requests to release the first PDN connection, and re-establishes the PDN connection by using the correct user authentication information, that is, the mobile terminal uses the second APN and the second user. The authentication information establishes a second PDN connection with the mobile network. Therefore, the mobile terminal establishes a PDN connection by using user authentication information such as a correct user name, password, and authentication mode. Even when the user authentication parameter check is strict, the user can ensure normal Internet access and improve PPP dialing. Accuracy and success rate.

The above is only the preferred embodiment of the present invention and is not intended to limit the scope of the present invention.

Claims

A method for processing authentication information, comprising:

The second access point name APN and the second user authentication information obtained by the mobile terminal when dialing the PPP, and the first APN and the first user profile used by the mobile terminal when registering the mobile network, respectively. The right information is compared;

When it is determined that the first APN and the second APN are the same and the first user authentication information and the second user authentication information are different, the mobile terminal initiates release of the first packet data network PDN connection to the mobile network. Request; and

After the mobile network releases the first PDN connection, the mobile terminal establishes a second PDN connection with the mobile network using the second APN and the second user authentication information.
The method according to claim 1, wherein the second APN and the second user authentication information acquired when the mobile terminal respectively dials the PPP and the first APN and the first user profile used by the mobile terminal when registering the mobile network Before the step of comparing the rights information, the method further includes:

Receiving, by the mobile terminal, a PPP dialing request initiated by the terminal device, and performing information interaction with the terminal device;

The mobile terminal acquires the second APN and the second user authentication information delivered by the terminal device according to the information received during the information exchange with the terminal device.
The method of claim 1, wherein after the step of the mobile terminal establishing a second PDN connection with the mobile network using the second APN and the second user authentication information, the method further comprises:

Obtaining, by the mobile terminal, the Internet Protocol IP address configuration information of the second PDN connection from the mobile network;

The mobile terminal constructs an IP control protocol IPCP response of the PPP dialing according to the IP address configuration information of the second PDN connection, and the mobile terminal sends the IP address configuration information of the second PDN connection to the IPCP response to the mobile terminal The terminal device.
The method of claim 1 further comprising:

When it is determined that the first APN and the second APN are the same, and the first user authentication information and the second user authentication information are the same, the mobile terminal maintains the first PDN connection established with the mobile network ;

Obtaining, by the mobile terminal, the Internet Protocol IP address configuration information of the first PDN connection from the mobile network;

The mobile terminal constructs an IP control protocol IPCP response of the PPP dialing according to the IP address configuration information of the first PDN connection, and the mobile terminal sends the IP address configuration information of the first PDN connection to the IPCP response to the mobile terminal The terminal device.
The method of claim 1 further comprising:

When it is determined that the first APN is different from the second APN, the mobile terminal establishes a third PDN connection with the mobile network by using the second APN and the second user authentication information;

Obtaining, by the mobile terminal, the Internet Protocol IP address configuration information of the third PDN connection from the mobile network;

The mobile terminal constructs an IP control protocol IPCP response of the PPP dialing according to the IP address configuration information of the third PDN connection, and the mobile terminal sends the IP address configuration information of the third PDN connection to the IPCP response by the mobile terminal The terminal device.
A mobile terminal for processing authentication information, comprising a determining module, a determining module and a connecting module, wherein

The determining module is configured to: when performing point-to-point protocol PPP dialing, respectively, the second access point name APN and the second user authentication information acquired during PPP dialing and the first APN used by the mobile terminal when registering the mobile network The first user authentication information is compared;

The determining module is configured to initiate release of the first packet data to the mobile network when it is determined that the first APN and the second APN are the same and the first user authentication information and the second user authentication information are different a request for a network PDN connection; and

The connection module is configured to establish a second PDN connection with the mobile network using the second APN and the second user authentication information after the mobile network releases the first PDN connection.
The mobile terminal of claim 6, further comprising a communication module and an acquisition module, wherein

The communication module is configured to receive a PPP dialing request initiated by the terminal device, and perform information interaction with the terminal device;

The acquiring module is configured to acquire the second APN and the second user authentication information delivered by the terminal device according to the information received during the information interaction with the terminal device.
The mobile terminal of claim 7, wherein the obtaining module is further configured to acquire internet protocol IP address configuration information of the second PDN connection from the mobile network;

The communication module is further configured to construct an IP control protocol IPCP response of the PPP dialing according to the IP address configuration information of the second PDN connection, and send, by using the IPCP response, the IP address configuration information of the second PDN connection to the Said terminal equipment.
The mobile terminal of claim 7, wherein the determining module is further configured to: when determining that the first APN and the second APN are the same and the first user authentication information and the second user authentication When the information is the same, the first PDN connection established with the mobile network is maintained;

The obtaining module is further configured to acquire, from the mobile network, the Internet Protocol IP address configuration information of the first PDN connection; and

The communication module is further configured to construct an IP control protocol IPCP response of the PPP dialing according to the IP address configuration information of the first PDN connection, and send, by using the IPCP response, the IP address configuration information of the first PDN connection to the Said terminal equipment.
The mobile terminal according to claim 7, wherein when the determining module determines that the first APN and the second APN are different, the connection module is further configured to use the second APN and the second User authentication information, establishing a third PDN connection with the mobile network;

The obtaining module is further configured to acquire, from the mobile network, the Internet Protocol IP address configuration information of the third PDN connection; and

The communication module is further configured to construct an IP control protocol IPCP response of the PPP dialing according to the IP address configuration information of the third PDN connection, and send, by using the IPCP response, the IP address configuration information of the third PDN connection to the Said terminal equipment.
A system for processing authentication information, including a terminal device, a mobile terminal, and a mobile network, where

The terminal device is configured to initiate a point-to-point protocol PPP dialing request to the mobile terminal, send the second access point name APN and the second user authentication information when performing PPP dialing to the mobile terminal, and request the internet terminal protocol IP from the mobile terminal. Address configuration information;

The mobile terminal is configured to: when performing PPP dialing, respectively, the second APN and the second user authentication information acquired during PPP dialing and the first APN and the first user authentication information used by the mobile terminal when registering the mobile network Comparing, when it is determined that the first APN and the second APN are the same and the first user authentication information and the second user authentication information are different, the mobile terminal initiates release of the first packet data to the mobile network. a request for a network PDN connection, and after the mobile network releases the first PDN connection, the mobile terminal establishes a second PDN connection with the mobile network using the second APN and the second user authentication information;

Receiving, by the mobile network, a request initiated by the mobile terminal to release the first PDN connection, and releasing a first PDN connection established with the mobile terminal according to the request, and using the second APN and the second user authentication information The mobile terminal establishes a second PDN connection.
The system according to claim 10, wherein said mobile terminal is further configured to acquire IP address configuration information of said second PDN connection from a mobile network, and construct PPP dialing according to IP address configuration information of said second PDN connection The IP control protocol IPCP responds, and transmits the IP address configuration information of the second PDN connection to the terminal device by the IPCP response;

The mobile network sends the IP address configuration information of the second PDN connection to the mobile terminal.
A mobile terminal includes:

Communication interface, set to communicate with other devices;

a storage medium, configured to store a computer program;

a processor coupled to the communication interface and the storage medium, respectively, and configured to perform at least the following steps by running the computer program:

The second access point name APN and the second user authentication information acquired when the PPP is dialed, and the first APN and the first user authentication information used by the mobile terminal when registering the mobile network, when the PPP dialing is performed by the point-to-point protocol. Compare;

When it is determined that the first APN and the second APN are the same and the first user authentication information and the second user authentication information are different, requesting to release the first packet data network PDN connection to the mobile network is initiated; as well as

After the mobile network releases the first PDN connection, the second PDN connection is established with the mobile network using the second APN and the second user authentication information.
A computer storage medium storing a computer program that, when executed by a processor, performs the method of any one of claims 1 to 5.