WO2021109753A1 - 一种应用于极简网络的机卡验证方法和相关设备 - Google Patents

一种应用于极简网络的机卡验证方法和相关设备 Download PDF

Info

Publication number
WO2021109753A1
WO2021109753A1 PCT/CN2020/124204 CN2020124204W WO2021109753A1 WO 2021109753 A1 WO2021109753 A1 WO 2021109753A1 CN 2020124204 W CN2020124204 W CN 2020124204W WO 2021109753 A1 WO2021109753 A1 WO 2021109753A1
Authority
WO
WIPO (PCT)
Prior art keywords
sim card
card information
imei
wbap
wbcpe
Prior art date
Application number
PCT/CN2020/124204
Other languages
English (en)
French (fr)
Inventor
曾正洋
李世昆
胡力
靳维生
Original Assignee
华为技术有限公司
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 华为技术有限公司 filed Critical 华为技术有限公司
Priority to EP20896212.6A priority Critical patent/EP4057658A4/en
Publication of WO2021109753A1 publication Critical patent/WO2021109753A1/zh

Links

Images

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/12—Detection or prevention of fraud
    • H04W12/126—Anti-theft arrangements, e.g. protection against subscriber identity module [SIM] cloning
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/06—Authentication
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/06—Authentication
    • H04W12/069—Authentication using certificates or pre-shared keys
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/40—Security arrangements using identity modules
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/40—Security arrangements using identity modules
    • H04W12/48—Security arrangements using identity modules using secure binding, e.g. securely binding identity modules to devices, services or applications
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/60—Context-dependent security
    • H04W12/69—Identity-dependent
    • H04W12/71—Hardware identity

Definitions

  • This application relates to the field of communication technology, and in particular to a card verification method and related equipment applied to a minimalist network.
  • the wireless broadband access controller can configure the wireless broadband access point (wide-band access point, WBAP), and the wireless broadband client device (wide-band Customer premises equipment (WBCPE) can perform signaling interaction with WBAP and WBAC to realize the online account opening process.
  • WBAC wide-band access point controller
  • WBCPE wide-band Customer premises equipment
  • SIM subscriber identity module
  • the present application provides a machine card verification method applied to a minimalist network, which can verify the WBCPE and SIM card in the minimalist network, thereby reducing the problem of SIM card fraud and improving the security of the SIM card.
  • the first aspect provides a machine card verification method applied to a minimalist network.
  • WBAP After WBCPE sends a registration request to WBAP, WBAP generates a request IMEI indication according to the registration request, and sends the request IMEI indication to WBCPE; WBCPE responds to the request IMEI indication, and sends IMEI and first SIM card information to WBAC through WBAP; WBAC verifies the IMEI and the first SIM card information according to the preset binding information.
  • IMEI is the International Mobile Equipment Identity of WBCPE.
  • the first SIM card information is the SIM card information currently configured by the WBCPE.
  • the SIM card information includes at least one of the following information: International Mobile Subscriber Identity Code IMSI, NAI, and certificate name.
  • the preset binding information includes the corresponding relationship between the IMEI and the preset SIM card.
  • WBAC can verify the IMEI and the first SIM card information from WBCPE according to the preset binding information.
  • the IMEI and the first SIM card information are inconsistent with the preset binding information, it is determined that the WBCPE does not match the first SIM card information, indicating that the first SIM card information is not the legal SIM card information of the WBCPE, and registration is refused.
  • the WBCPE cannot access the minimalist network through the first SIM card, so the risk of the SIM card being stolen can be reduced, and the security of the minimalist network can be improved.
  • the SIM card information includes IMSI, NAI, certificate name, or a combination thereof. This can improve the reliability of verification.
  • WBCPE before WBCPE sends a registration request to WBAP, WBCPE binds the pre-configured SIM card information and IMEI; WBCPE sends the SIM card information and IMEI binding information to WBAC via WBAP, so that WBAC saves SIM card information and IMEI binding information.
  • the pre-configured SIM card information and IMEI are both legal IMEI and SIM card information.
  • WBAC before verifying the IMEI and the first SIM card information, WBAC can obtain the legal IMEI and SIM card information binding information from WBCPE and save it in WBAC.
  • WBAC binds IMEI and SIM card information, and then allocates IMEI and SIM card information to WBCPE, and WBCPE then initiates a registration request based on the allocated IMEI and SIM card information.
  • WBAC determines that the first SIM card information does not match WBCPE
  • WBAC sends a verification failure message to WBAP.
  • the verification failure message is used to indicate that the first SIM card information does not match WBCPE
  • WBAP can A registration rejection message is generated according to the verification event message, and the registration rejection message is sent to the WBCPE to prompt that the first SIM card information does not match the WBCPE.
  • the request IMEI indication is carried in the security mode command, and both the IMEI and the first SIM card information are carried in the security mode completion message.
  • the IMEI and the first SIM card information are acquired during the NAS SMC process, thereby providing a specific implementation method.
  • the second aspect provides a machine card verification method applied to a minimalist network.
  • the wireless broadband access controller WBAC receives the IMEI and the first SIM card information sent by WBAP; WBAC determines the second SIM card information corresponding to the IMEI according to the preset binding information; when the first SIM card information matches the first SIM card information When the two SIM card information is the same, WBAC determines that the first SIM card information matches the WBCPE; when the first SIM card information is different from the second SIM card information, WBAC determines that the first SIM card information does not match the WBCPE.
  • the preset binding information includes the corresponding relationship between SIM card information and IMEI.
  • WBAC determines that the WBCPE does not match the first SIM card information, indicating that the first SIM card information is not the legal SIM card information of the WBCPE. Decline to register. The WBCPE cannot access the minimalist network through the first SIM card, so the risk of the SIM card being stolen can be reduced, and the security of the minimalist network can be improved.
  • the method before WBAC receives the IMEI and the first SIM card information sent by WBAP, the method further includes: after WBCPE sends the binding information of the SIM card information and IMEI to WBAP, WBAC receives the information sent by WBAP SIM card information and IMEI binding information; WBAC saves SIM card information and IMEI binding information.
  • WBAC can obtain legal binding information between IMEI and SIM card information from WBCPE and save it in WBAC.
  • the stored IMEI and SIM card information binding information can be used as the preset binding information in the machine card verification method.
  • the above method further includes: when the WBAC determines that the first SIM card information does not match the WBCPE, generating a verification failure message; and sending the verification failure message to the WBAP.
  • WBAP can reject the registration request of WBCPE according to the verification failure message, so that WBCPE cannot access the network according to the first SIM card.
  • the third aspect provides a WBCPE, which has the function of realizing the machine card verification method of any one of the implementation manners in the first aspect.
  • This function can be realized by hardware, or by hardware executing corresponding software.
  • the hardware or software includes one or more modules corresponding to the above-mentioned functions.
  • the fourth aspect provides a WBAC, which has the function of realizing the card verification method of any one of the embodiments in the second aspect.
  • This function can be realized by hardware, or by hardware executing corresponding software.
  • the hardware or software includes one or more modules corresponding to the above-mentioned functions.
  • a fifth aspect provides a computer storage medium.
  • the computer-readable storage medium stores instructions. When the instructions are executed on a computer, the computer executes the methods in the above aspects.
  • the sixth aspect of the present application provides a computer program product containing instructions, which when run on a computer, causes the computer to execute the method in the above aspects.
  • Figure 1 is a schematic diagram of the minimalist network in this application.
  • Figure 2 is a schematic diagram of signaling interaction of the machine card verification method in this application.
  • FIG. 3 is a schematic diagram of the structure of the wireless broadband client device in this application.
  • FIG. 4 is a schematic structural diagram of the wireless broadband access controller in this application.
  • FIG. 5 is another schematic diagram of the structure of the wireless broadband client device in this application.
  • Fig. 6 is another schematic diagram of the structure of the wireless broadband access controller in this application.
  • This application provides a machine card verification method.
  • the configuration method can be applied to a minimalist network in industrial communication, and the industrial communication may specifically be but not limited to industrial communication or power grid communication.
  • minimalist networks include but are not limited to WBCPE103, WBAP102, and WBAC101.
  • Each WBAP102 can be connected to one or more WBCPE103, and each WBAC101 can be connected to one or more WBAP102.
  • WBCPE103 and WBAP102 are connected through the WB-Uu interface.
  • WBAP102 and WBAC101 are connected through the WB-1 interface.
  • the WB-Uu interface adopts the 3rd Generation Partnership Project (3rd Generation Partnership Project, 3GPP) air interface standard.
  • WBAP102 and WBAC101 communicate according to the control and provisioning of wireless access points protocol specification (CAPWAP) protocol, that is, the protocol of the WB-1 interface is the CAPWAP protocol.
  • CAPWAP wireless access points protocol specification
  • Non-access stratum (NAS) messages can be transmitted between WBCPE103 and WBAP102.
  • the NAS message sent by WBCPE103 ends in WBAP.
  • WBAP102 provides access management functions, authentication functions, mobility management functions, and session management functions.
  • WBAP serves as an egress gateway for locally forwarding data to connect to an external PDN network, and can also be considered as an anchor point for data connection when WBCPE moves.
  • WBAP is also used to terminate air interface signaling.
  • WBAC101 provides user subscription storage functions, user subscription management functions, mobility management functions, policy control functions, and configuration management WBAP functions.
  • WBAC serves as an egress gateway for centralized data forwarding to connect with external PDN networks, and as another anchor point for data connection when WBCPE moves.
  • WBAC includes online registration server and home authentication authorization and accounting server (home authentication authorization and accounting server, HAAA).
  • this application provides a machine card verification method applied to the minimalist network to reduce the problem of SIM card embezzlement in the minimalist network and improve the security of the minimalist network.
  • an embodiment of the machine card verification method provided by the present application includes:
  • Step 201 WBCPE sends a registration request to WBAP.
  • WBCPE when WBCPE needs to access the network, WBCPE sends a registration request to WBAP.
  • Step 202 WBCPE receives an international mobile equipment identity (IMEI) request sent by WBAP.
  • IMEI international mobile equipment identity
  • WBAP After receiving the registration request sent by WBCPE, WBAP generates a request IMEI indication in response to the registration request, and sends the request IMEI indication to WBCPE.
  • the request IMEI indication is carried in a security mode command (SMC).
  • Step 203 WBCPE sends IMEI and first SIM card information to WBAP.
  • the first SIM card information is the SIM card information currently configured by the WBCPE.
  • both the IMEI and the first SIM card information are carried in a security mode complete message (security mode complete).
  • the SIM card information includes an international mobile subscriber identity (IMSI), a network access identifier (NAI), or a certificate name.
  • IMSI international mobile subscriber identity
  • NAI network access identifier
  • the SIM card information includes IMSI and certificate name.
  • the SIM card information includes IMSI and NAI.
  • the SIM card information includes NAI and certificate name.
  • the SIM card information includes IMSI, NAI, and certificate name.
  • Step 204 WBAP sends the IMEI and the first SIM card information to WBAC.
  • WBAP After receiving the IMEI and the first SIM card information, WBAP sends the IMEI and the first SIM card information to WBAC.
  • Step 205 The WBAC determines the second SIM card information corresponding to the IMEI according to the preset binding information.
  • the preset binding information includes the correspondence between SIM card information and IMEI.
  • the binding information may be an information combination formed by SIM card information and IMEI, for example ⁇ IMSI, NAI, IMEI ⁇ . It is understandable that the above SIM card information and IMEI are both legal information.
  • Step 206 WBAC judges whether the first SIM card information is the same as the second SIM card information, if yes, then step 207 is executed, if not, step 208 is executed.
  • Step 207 WBAC determines that the first SIM card information matches WBCPE.
  • WBAC determines that the first SIM card information matches the WBCPE.
  • WBAC can also send a verification success message to WBCPE through WBAP.
  • Step 208 The WBAC determines that the first SIM card information does not match the WBCPE.
  • WBAC determines that the first SIM card information does not match the WBCPE.
  • WBAC determines that the first SIM card information does not match WBCPE
  • WBAC generates a verification failure message and sends the verification failure message to WBAP
  • WBAP generates a registration rejection message based on the verification failure message sent by WBAC, and registration is rejected The message is sent to WBCPE.
  • WBCPE receives the registration rejection message sent by the WBAP, the user can know that the WBCPE does not match the first SIM card currently configured.
  • WBAC determines that the WBCPE does not match the first SIM card information, indicating that the first SIM card information is not the legal SIM card information of the WBCPE , Refused to register. In this way, the WBCPE cannot access the minimalist network through the first SIM card, so the risk of the SIM card being stolen can be reduced, and the security of the minimalist network can be improved.
  • the SIM card information includes one or more of IMSI, NAI, and certificate name
  • IMSI, NAI, certificate name in the first SIM card information
  • IMSI, NAI, certificate name in the second SIM card information Only if they are consistent can they pass the verification.
  • the SIM card information to be verified in this application is more and more comprehensive, which can improve the reliability of verification.
  • WBCPE Before registering for WBCPE, WBCPE communicates with WBAC through WBAP and executes the online contract process. In the online contract process, WBCPE obtains contract information from WBAC. And, WBCPE and WBAC can realize mutual authentication based on IMEI and key.
  • the above machine card verification method before WBCPE sends a registration request to WBAP, the above machine card verification method further includes: WBCPE binds pre-configured SIM card information with IMEI; WBCPE binds SIM card information with IMEI binding information Send to WBAC through WBAP, WBAC saves the binding information of SIM card information and IMEI.
  • the WBAC before verifying the IMEI and the first SIM card information, the WBAC can obtain the legal binding information between the IMEI and the SIM card information from the WBCPE, and save it in the WBAC, which can be specifically stored in the HAAA.
  • WBAC may obtain legal SIM card information and IMEI from WBCPE, and then bind the legal IMEI and SIM card information.
  • the above-mentioned machine card verification method further includes:
  • WBCPE, WBAP and WBAC negotiate authentication methods.
  • WBCPE and WBAP determine the encryption algorithm, and then use the encryption algorithm to encrypt the signaling between WBCPE and WBAP (such as SMC messages). This can improve the security of WBCPE and WBAP transmission signaling.
  • this application provides a WBCPE300, which can implement the function of the WBCPE in the embodiment shown in FIG. 2 or an optional embodiment.
  • the WBCPE300 includes:
  • the sending module 301 is used to send a registration request to WBAP;
  • the receiving module 302 is configured to receive the request IMEI indication sent by WBAP;
  • the sending module 301 is also used to send IMEI and first SIM card information to WBAC via WBAP.
  • the first SIM card information includes at least one of the following information: IMSI, NAI, and certificate name, so that WBAC can pair according to preset binding information
  • the IMEI and the first SIM card information are verified.
  • a processing module configured to bind the pre-configured SIM card information and IMEI before the sending module sends a registration request to the WBAP;
  • the sending module 301 is also used to send the binding information between the SIM card information and the IMEI to WBAC via WBAP, so that the WBAC saves the binding information between the SIM card information and the IMEI.
  • the receiving module 302 is also configured to receive a registration rejection message sent by WBAP.
  • the registration rejection message is generated by WBAP according to the verification failure message sent by WBAC.
  • the request IMEI indication is carried in the security mode command, and both the IMEI and the first SIM card information are carried in the security mode completion message.
  • This application provides a WBAP, which can implement the function of the WBAP in the embodiment shown in FIG. 2 or an optional embodiment.
  • the WBAP includes:
  • the receiving module is used to receive the registration request sent by WBCPE;
  • the processing module is used to generate the request IMEI indication according to the registration request
  • the sending module is used to send the request IMEI instruction to WBCPE;
  • the receiving module is also used to receive IMEI and first SIM card information sent by WBCPE;
  • the sending module is also used to send the IMEI and the first SIM card information to WBAC, so that the WBAC verifies the IMEI and the first SIM card information according to the preset binding information.
  • the receiving module is also used to receive the binding information of SIM card information and IMEI sent by WBCPE;
  • the sending module is also used to send the binding information of the SIM card information and the IMEI to WBAC.
  • the receiving module is also used to receive the verification failure message sent by WBAC;
  • the processing module is also used to generate a registration rejection message according to the verification failure message
  • the sending module is also used to send the registration rejection message to WBCPE.
  • the WBAC400 includes:
  • the receiving module 401 is configured to receive IMEI and first SIM card information sent by WBAP.
  • the IMEI and first SIM card information are sent to the WBAP by the wireless broadband client device WBCPE.
  • the first SIM card information includes the following information At least one of: IMSI, NAI and certificate name;
  • the processing module 402 is configured to determine the second SIM card information corresponding to the IMEI according to the preset binding information, where the preset binding information includes the corresponding relationship between the SIM card information and the IMEI;
  • the processing module 402 is further configured to determine that the first SIM card information matches the WBCPE when the first SIM card information is the same as the second SIM card information; when the first SIM card information is different from the second SIM card information, determine the first SIM card information The SIM card information does not match WBCPE.
  • the receiving module 401 is also used to receive the binding information of the SIM card information and the IMEI sent by the WBAP before the receiving module receives the IMEI and the first SIM card information sent by the WBAP.
  • the binding information of the SIM card information and the IMEI is sent by the WBCPE to WBAP;
  • WBAC400 also includes:
  • the storage module is used to store the binding information between the SIM card information and the IMEI.
  • the processing module 402 is further configured to generate a verification failure message when the WBAC determines that the first SIM card information does not match the WBCPE;
  • WBAC400 also includes a sending module, which is used to send verification failure messages to WBAP.
  • FIG. 5 another embodiment of WBCPE500 provided by this application includes:
  • Transceiver 501 Transceiver 501, processor 502, and memory 503.
  • the transceiver 501, the processor 502, and the memory 503 are connected by a bus 504.
  • the transceiver 501 is used to communicate with other devices through wireless communication. Specifically, after receiving the downlink information of the WBAP, it is processed by the processor 502; or the uplink data is sent to the WBAP.
  • the transceiver 501 includes, but is not limited to, an antenna, an amplifier, a transceiver, a coupler, a low noise amplifier (LNA), a duplexer, and the like. Wireless communication can use WiFi protocol.
  • the processor 502 may include one or more processing units; preferably, the processor 502 may integrate an application processor and a modem processor, where the application processor mainly processes the operating system, user interface, application programs, etc., and the modem The processor mainly deals with wireless communication. It can be understood that the foregoing modem processor may not be integrated into the processor 502.
  • the memory 503 may include a high-speed random access memory, and may also include a non-volatile memory, such as at least one magnetic disk storage device, a flash memory device, or other volatile solid-state storage devices.
  • a non-volatile memory such as at least one magnetic disk storage device, a flash memory device, or other volatile solid-state storage devices.
  • the processor 502 is used to execute the function of the WBCPE in the embodiment shown in FIG. 2 or the optional embodiment.
  • FIG. 6 is a schematic diagram of a server structure provided by the present application.
  • the server 600 may have relatively large differences due to different configurations or performance, and may include one or more central processing units (CPU) 622 (for example, one Or more than one processor) and memory 632, and one or more storage media 630 for storing application programs 642 or data 644 (for example, one or more storage devices with a large amount of storage).
  • the memory 632 and the storage medium 630 may be short-term storage or persistent storage.
  • the program stored in the storage medium 630 may include one or more modules (not shown in the figure), and each module may include a series of command operations on the server.
  • the central processing unit 622 may be configured to communicate with the storage medium 630, and execute a series of instruction operations in the storage medium 630 on the server 600.
  • the server 600 may also include one or more power supplies 626, one or more wired or wireless network interfaces 650, one or more input and output interfaces 658, and/or one or more operating systems 641, such as Windows ServerTM, Mac OS XTM, UnixTM, LinuxTM, FreeBSDTM, etc.
  • operating systems 641 such as Windows ServerTM, Mac OS XTM, UnixTM, LinuxTM, FreeBSDTM, etc.
  • the present application provides a computer-readable storage medium, including instructions, which when run on a computer, cause the computer to execute a method as in any one of the above embodiments.
  • the computer program product includes one or more computer instructions.
  • the computer may be a general-purpose computer, a special-purpose computer, a computer network, or other programmable devices.
  • the computer instructions may be stored in a computer-readable storage medium or transmitted from one computer-readable storage medium to another computer-readable storage medium.
  • the computer instructions may be transmitted from a website, computer, server, or data center. Transmission to another website site, computer, server or data center via wired (such as coaxial cable, optical fiber, digital subscriber line (DSL)) or wireless (such as infrared, wireless, microwave, etc.).
  • wired such as coaxial cable, optical fiber, digital subscriber line (DSL)
  • wireless such as infrared, wireless, microwave, etc.
  • the computer-readable storage medium may be any available medium that can be stored by a computer or a data storage device such as a server or a data center integrated with one or more available media.
  • the usable medium may be a magnetic medium, (for example, a floppy disk, a hard disk, and a magnetic tape), an optical medium (for example, a DVD), or a semiconductor medium (for example, a solid state disk (SSD)).

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Telephone Function (AREA)
  • Mobile Radio Communication Systems (AREA)

Abstract

一种应用于极简网络的机卡验证方法包括：WBCPE向WBAP发送注册请求后，WBAP根据注册请求生成请求IMEI指示，WBAP将请求IMEI指示发送给WBCPE，WBCPE响应请求IMEI指示，通过WBAP向WBAC发送IMEI和第一SIM卡信息，第一SIM卡信息包括以下信息中的至少一项：国际移动用户识别码IMSI、网络访问标识NAI、证书名；WBAC根据预设绑定信息对IMEI和第一SIM卡信息进行验证。上述机卡验证方法对IMEI和SIM卡信息进行验证，从而减少SIM卡被盗用的风险，提高极简网络的安全性。本申请还提供能够实现上述方法的相关设备。

Description

一种应用于极简网络的机卡验证方法和相关设备
本申请要求于2019年12月05日提交中国专利局、申请号为201911234613.0、申请名称为“一种应用于极简网络的机卡验证方法和相关设备”的中国专利申请的优先权，其全部内容通过引用结合在本申请中。
技术领域
本申请涉及通信技术领域，尤其涉及一种应用于极简网络的机卡验证方法和相关设备。
背景技术
随着通信技术的发展，网络架构越来越复杂。为了降低网络的复杂性，目前提出了一种极简网络。
在极简网络中，无线宽带接入控制器(wide-band access point controller，WBAC)对无线宽带接入点(wide-band access point，WBAP)可以进行配置，无线宽带客户端设备(wide-band customer premises equipment，WBCPE)可以与WBAP和WBAC进行信令交互，实现在线开户流程。
在实际应用中，当用户身份识别模块(subscriber identity modula，SIM)卡信息被盗后，非法用户设备使用该SIM卡信息可以接入极简网络，因此极简网络存在安全风险。
发明内容
有鉴于此，本申请提供一种应用于极简网络的机卡验证方法，能够对极简网络中的WBCPE和SIM卡进行验证，从而减少SIM卡被盗用的问题，提高SIM卡的安全性。
第一方面提供一种应用于极简网络的机卡验证方法。在该方法中，WBCPE向WBAP发送注册请求后，WBAP根据注册请求生成请求IMEI指示，将请求IMEI指示发送给WBCPE；WBCPE响应请求IMEI指示，通过WBAP向WBAC发送IMEI和第一SIM卡信息；然后WBAC根据预设绑定信息对IMEI和第一SIM卡信息进行验证。IMEI是WBCPE的国际移动设备识别码。第一SIM卡信息是WBCPE当前配置的SIM卡信息。SIM卡信息包括以下信息中的至少一项：国际移动用户识别码IMSI、NAI、证书名。预设绑定信息包括IMEI和预设SIM卡的对应关系。
依此实施，WBAC可以根据预设的绑定信息，对来自WBCPE的IMEI和第一SIM卡信息进行验证。当IMEI和第一SIM卡信息与预设绑定信息不一致时，确定WBCPE与第一SIM卡信息不匹配，表示第一SIM卡信息并不是该WBCPE的合法SIM卡信息，拒绝注册。该WBCPE就不能通过第一SIM卡接入极简网络，因此能够减少SIM卡被盗用的风险，提高极简网络的安全性。并且，SIM卡信息包括IMSI、NAI、证书名或者它们的组合。这样能够提高验证的可靠性。
在一种可能的实现方式中，在WBCPE向WBAP发送注册请求之前，WBCPE将预先配置的SIM卡信息和IMEI进行绑定；WBCPE将SIM卡信息与IMEI的绑定信息通过WBAP发送给WBAC， 使得WBAC保存SIM卡信息与IMEI的绑定信息。其中，预先配置的SIM卡信息和IMEI均为合法IMEI和SIM卡信息。依此实施，在验证IMEI和第一SIM卡信息之前，WBAC可以从WBCPE获取合法的IMEI和SIM卡信息绑定信息，将其保存在WBAC。
在另一种可能的实现方式中，WBAC将IMEI和SIM卡信息进行绑定之后，然后将IMEI和SIM卡信息分配给WBCPE，WBCPE再根据分配的IMEI和SIM卡信息发起注册请求。
在另一种可能的实现方式中，在WBAC确定第一SIM卡信息与WBCPE不匹配之后，WBAC向WBAP发送验证失败消息，验证失败消息用于表示第一SIM卡信息与WBCPE不匹配，WBAP可以根据验证事变消息生成拒绝注册消息，将该拒绝注册消息发送给WBCPE，以提示第一SIM卡信息与WBCPE不匹配。
在另一种可能的实现方式中，请求IMEI指示携带于安全模式命令，IMEI和第一SIM卡信息均携带于安全模式完成消息。依此实施，在NAS SMC过程中获取IMEI和第一SIM卡信息，从而提供了一种具体的实现方式。
第二方面提供一种应用于极简网络的机卡验证方法。在该方法中，无线宽带接入控制器WBAC接收WBAP发送的IMEI和第一SIM卡信息；WBAC根据预设绑定信息确定与IMEI对应的第二SIM卡信息；当第一SIM卡信息与第二SIM卡信息相同时，WBAC确定第一SIM卡信息与WBCPE匹配；当第一SIM卡信息与第二SIM卡信息不同时，WBAC确定第一SIM卡信息与WBCPE不匹配。其中，预设绑定信息包括SIM卡信息和IMEI的对应关系。依此实施，当IMEI和第一SIM卡信息与预设绑定信息不一致时，那么WBAC确定WBCPE与第一SIM卡信息不匹配，表示第一SIM卡信息并不是该WBCPE的合法SIM卡信息，拒绝注册。该WBCPE就不能通过第一SIM卡接入极简网络，因此能够减少SIM卡被盗用的风险，提高极简网络的安全性。
在一种可能的实现方式中，在WBAC接收WBAP发送的IMEI和第一SIM卡信息之前，该方法还包括：WBCPE将SIM卡信息与IMEI的绑定信息发送给WBAP之后，WBAC接收WBAP发送的SIM卡信息与IMEI的绑定信息；WBAC保存SIM卡信息与IMEI的绑定信息。WBAC可以从WBCPE获取合法的IMEI与SIM卡信息的绑定信息，将其保存在WBAC。上述保存的IMEI和SIM卡信息绑定信息可以作为机卡验证方法中的预设绑定信息。
在另一种可能的实现方式中，上述方法还包括：当所述WBAC确定所述第一SIM卡信息与所述WBCPE不匹配时，生成验证失败消息；将验证失败消息发送给所述WBAP。WBAP根据验证失败消息可以拒绝WBCPE的注册请求，使WBCPE不能根据第一SIM卡接入网络。
第三方面提供一种WBCPE，该WBCPE具有实现第一方面中任一种实施方式的机卡验证方法的功能。该功能可以通过硬件实现，也可以通过硬件执行相应的软件实现。硬件或软件包括一个或多个与上述功能相对应的模块。
第四方面提供一种WBAC，该WBAC具有实现第二方面中任一种实施方式的机卡验证方法的功能。该功能可以通过硬件实现，也可以通过硬件执行相应的软件实现。硬件或软件包括一个或多个与上述功能相对应的模块。
第五方面提供一种计算机存储介质，计算机可读存储介质中存储有指令，当指令在计算机上运行时，计算机执行以上方面的方法。
本申请的第六方面提供了一种包含指令的计算机程序产品，当其在计算机上运行时，使得计算机执行以上方面的方法。
附图说明
图1为本申请中极简网络的一个示意图；
图2为本申请中机卡验证方法的一个信令交互示意图；
图3为本申请中无线宽带客户端设备的一个结构示意图；
图4为本申请中无线宽带接入控制器的一个结构示意图；
图5为本申请中无线宽带客户端设备的另一个结构示意图；
图6为本申请中无线宽带接入控制器的另一个结构示意图。
具体实施方式
本申请提供一种的机卡验证方法。该配置方法能够应用于行业通信中的极简网络，行业通信具体可以是但不限于工业通信或者电网通信。
参阅图1，极简网络包括但不限于WBCPE103、WBAP102和WBAC101。每个WBAP102可以连接一个或多个WBCPE103，每个WBAC101可以连接一个或多个WBAP102。WBCPE103和WBAP102通过WB-Uu接口连接。WBAP102和WBAC101通过WB-1接口连接。WB-Uu接口采用第三代合作伙伴计划(3rd Generation Partnership Project，3GPP)空口制式。具体的，WBAP102和WBAC101根据无线接入点的控制和配置协议(control and provisioning of wireless access points protocol specification，CAPWAP)协议进行通信，即WB-1接口的协议为CAPWAP协议。
WBCPE103和WBAP102之间可以传输非接入层(non-access stratum，NAS)消息。WBCPE103发送的NAS消息终结在WBAP。
WBAP102提供接入管理功能，鉴权认证功能，移动性管理功能，会话管理功能。WBAP作为本地转发数据的出口网关与外部PDN网络连接，也可以认为是在WBCPE移动时进行数据连接的锚点。除了NAS消息之外，WBAP还用于终结空口信令。
WBAC101提供用户签约存储功能，用户签约管理功能，移动性管理功能，策略控制功能，配置管理WBAP的功能。WBAC作为集中转发数据的出口网关与外部PDN网络联系，以及作为WBCPE移动时进行数据连接的另一锚点。WBAC包括在线注册服务器和归属地认证授权计费服务器(home authentication authorization and accounting server，HAAA)。
为了解决极简网络缺少机卡验证机制的问题，本申请提供一种应用于极简网络的机卡验证方法，以减少极简网络中SIM卡被盗用的问题，提高极简网络的安全性。
参阅图2，本申请提供的机卡验证方法的一个实施例包括：
步骤201、WBCPE向WBAP发送注册请求。
本实施例中，当WBCPE需要接入网络时，WBCPE向WBAP发送注册请求。
步骤202、WBCPE接收WBAP发送的请求国际移动设备识别码(international mobile equipment identity，IMEI)指示。
WBAP收到WBCPE发送的注册请求后，响应注册请求生成请求IMEI指示，将请求IMEI指示发送给WBCPE。可选的，请求IMEI指示携带于安全模式命令(security mode command，SMC)。
步骤203、WBCPE将IMEI和第一SIM卡信息发送给WBAP。
第一SIM卡信息是WBCPE当前配置的SIM卡信息。可选的，IMEI和第一SIM卡信息均携带于安全模式完成消息(security mode complete)。
可选的，SIM卡信息包括国际移动用户识别码(international mobile subscriber identity，IMSI)、网络访问标识(network access identifier，NAI)或证书名。或者，SIM卡信息包括IMSI和证书名。或者，SIM卡信息包括IMSI和NAI。或者，SIM卡信息包括NAI和证书名。或者，SIM卡信息包括IMSI、NAI和证书名。
步骤204、WBAP将IMEI和第一SIM卡信息送给WBAC。
WBAP收到IMEI和第一SIM卡信息后，将IMEI和第一SIM卡信息发送给WBAC。
步骤205、WBAC根据预设绑定信息确定与IMEI对应的第二SIM卡信息。
预设绑定信息包括SIM卡信息和IMEI的对应关系。绑定信息可以是SIM卡信息和IMEI形成的信息组合，例如{IMSI,NAI,IMEI}。可以理解的是，上述SIM卡信息和IMEI均为合法信息。
步骤206、WBAC判断第一SIM卡信息与第二SIM卡信息是否相同，若是，则执行步骤207，若否，则执行步骤208。
步骤207、WBAC确定第一SIM卡信息与WBCPE匹配。
当第一SIM卡信息与第二SIM卡信息相同时，WBAC确定第一SIM卡信息与WBCPE匹配。当WBAC确定第一SIM卡信息与WBCPE匹配时，WBAC还可以通过WBAP将验证成功消息发送给WBCPE。
步骤208、WBAC确定第一SIM卡信息与WBCPE不匹配。
当第一SIM卡信息与第二SIM卡信息不同时，WBAC确定第一SIM卡信息与WBCPE不匹配。可选的，在WBAC确定第一SIM卡信息与WBCPE不匹配的情况下，WBAC生成验证失败消息，将验证失败消息发送给WBAP；WBAP根据WBAC发送的验证失败消息生成拒绝注册消息，将拒绝注册消息发送给WBCPE。在WBCPE接收WBAP发送的拒绝注册消息的情况下，用户可以知晓WBCPE与当前配置的第一SIM卡不匹配。
本实施例中，当IMEI和第一SIM卡信息与预设绑定信息不一致时，那么WBAC确定WBCPE与第一SIM卡信息不匹配，表示第一SIM卡信息并不是该WBCPE的合法SIM卡信息，拒绝注册。这样该WBCPE就不能通过第一SIM卡接入极简网络，因此能够减少SIM卡被盗用的风险，提高极简网络的安全性。
其次，由于SIM卡信息包括IMSI，NAI和证书名中的一项或多项，因此只有第一SIM卡信息中的IMSI，NAI、证书名与第二SIM卡信息中的IMSI、NAI、证书名都一致，才能通过验证。与验证IMSI相比，本申请需要验证的SIM卡信息更多更全面，这样能够提高验证的可靠性。
在注册WBCPE之前，WBCPE通过WBAP与WBAC进行通信，执行在线签约流程。在线签 约流程中，WBCPE从WBAC获取签约信息。以及，WBCPE与WBAC可以基于IMEI和密钥实现双向认证。
在一个可选实施例中，在WBCPE向WBAP发送注册请求之前，上述机卡验证方法还包括：WBCPE将预先配置的SIM卡信息和IMEI进行绑定；WBCPE将SIM卡信息与IMEI的绑定信息通过WBAP发送给WBAC，WBAC保存SIM卡信息与IMEI的绑定信息。
本实施例中，在验证IMEI和第一SIM卡信息之前，WBAC可以从WBCPE获取合法的IMEI与SIM卡信息的绑定信息，将其保存在WBAC，具体可存储于HAAA。
或者，在步骤201之前，WBAC可以从WBCPE获取合法的SIM卡信息和IMEI，然后将合法的IMEI和SIM卡信息进行绑定。
在一个可选实施例中，在步骤201之后，在步骤202之前，上述机卡验证方法还包括：
WBCPE、WBAP和WBAC进行认证方式协商。
在认证方式协商完成后，WBCPE和WBAP确定加密算法，然后使用该加密算法加密WBCPE和WBAP之间的信令(如SMC消息)。这样可以提高WBCPE和WBAP传输信令的安全性。
需要说明的是，以上实施例中由WBAC执行的功能可以由HAAA完成。
以上对本申请的机卡验证方法进行了介绍，下面对本申请中用于实现上述机卡验证方法的装置进行介绍。
参阅图3，本申请提供一种WBCPE300，该WBCPE300能够实现图2所示实施例或可选实施例中WBCPE的功能。在一个实施例中，该WBCPE300包括：
发送模块301，用于向WBAP发送注册请求；
接收模块302，用于接收WBAP发送的请求IMEI指示；
发送模块301，还用于通过WBAP向WBAC发送IMEI和第一SIM卡信息，第一SIM卡信息包括以下信息中的至少一项：IMSI、NAI和证书名，使WBAC根据预设绑定信息对IMEI和第一SIM卡信息进行验证。
在一个可选实施例中，
处理模块，用于在所述发送模块向所述WBAP发送注册请求之前，预先配置的SIM卡信息和IMEI进行绑定；
发送模块301，还用于将SIM卡信息与IMEI的绑定信息通过WBAP发送给WBAC，使得WBAC保存SIM卡信息与IMEI的绑定信息。
在另一个可选实施例中，
接收模块302，还用于接收WBAP发送的拒绝注册消息，拒绝注册消息是WBAP根据WBAC发送的验证失败消息生成的。
在另一个可选实施例中，请求IMEI指示携带于安全模式命令，IMEI和第一SIM卡信息均携带于安全模式完成消息。
本申请提供一种WBAP，该WBAP能够实现图2所示实施例或可选实施例中WBAP的功能。
在一个实施例中，该WBAP包括：
接收模块，用于接收WBCPE发送的注册请求；
处理模块，用于根据注册请求生成请求IMEI指示；
发送模块，用于将请求IMEI指示发送给WBCPE；
接收模块，还用于接收WBCPE发送的IMEI和第一SIM卡信息；
发送模块，还用于将IMEI和第一SIM卡信息发送给WBAC，使得WBAC根据预设绑定信息对IMEI和第一SIM卡信息进行验证。
在一个可选实施例中，
接收模块，还用于接收WBCPE发送的SIM卡信息与IMEI的绑定信息；
发送模块，还用于将SIM卡信息与IMEI的绑定信息发送给WBAC。
在另一个可选实施例中，
接收模块，还用于接收WBAC发送的验证失败消息；
处理模块，还用于根据验证失败消息生成拒绝注册消息；
发送模块，还用于将拒绝注册消息发送给WBCPE。
本申请提供一种WBAC，该WBAC能够实现图2所示实施例或可选实施例中WBAC的功能。参阅图4，在一个实施例中，该WBAC400包括：
接收模块401，用于接收WBAP发送的IMEI和第一SIM卡信息，所述IMEI和第一SIM卡信息是无线宽带客户端设备WBCPE发送给所述WBAP的，第一SIM卡信息包括以下信息中的至少一项：IMSI、NAI和证书名；
处理模块402，用于根据预设绑定信息确定与IMEI对应的第二SIM卡信息，预设绑定信息包括SIM卡信息和IMEI的对应关系；
处理模块402，还用于当第一SIM卡信息与第二SIM卡信息相同时，确定第一SIM卡信息与WBCPE匹配；当第一SIM卡信息与第二SIM卡信息不同时，确定第一SIM卡信息与WBCPE不匹配。
在一个可选实施例中，
接收模块401，还用于在接收模块接收WBAP发送的IMEI和第一SIM卡信息之前，接收WBAP发送的SIM卡信息与IMEI的绑定信息，SIM卡信息与IMEI的绑定信息由WBCPE发送给WBAP；
WBAC400还包括：
存储模块，用于保存SIM卡信息与IMEI的绑定信息。
在另一个可选实施例中，
处理模块402，还用于当WBAC确定第一SIM卡信息与WBCPE不匹配时，生成验证失败消息；
WBAC400还包括发送模块，发送模块用于将验证失败消息发送给WBAP。
参阅图5，本申请提供的WBCPE500的另一个实施例包括：
收发器501、处理器502和存储器503。收发器501、处理器502和存储器503通过总线504连接。
收发器501用于通过无线通信与其他设备进行通信。具体的，将WBAP的下行信息接收后，给处理器502处理；或者将上行数据发送给WBAP。收发器501包括但不限于天线、放大器、收发信机、耦合器、低噪声放大器(Low Noise Amplifier，LNA)、双工器等。无线 通信可以使用WiFi协议。
处理器502可包括一个或多个处理单元；优选的，处理器502可集成应用处理器和调制解调处理器，其中，应用处理器主要处理操作系统、用户界面和应用程序等，调制解调处理器主要处理无线通信。可以理解的是，上述调制解调处理器也可以不集成到处理器502中。
存储器503可以包括高速随机存取存储器，还可以包括非易失性存储器，例如至少一个磁盘存储器件、闪存器件、或其他易失性固态存储器件。
通过调用存储器503存储的程序或指令，处理器502用于执行图2所示实施例或可选实施例中WBCPE的功能。
图6是本申请提供的一种服务器结构示意图，该服务器600可因配置或性能不同而产生比较大的差异，可以包括一个或一个以上中央处理器(central processing units，CPU)622(例如，一个或一个以上处理器)和存储器632，一个或一个以上存储应用程序642或数据644的存储介质630(例如一个或一个以上海量存储设备)。其中，存储器632和存储介质630可以是短暂存储或持久存储。存储在存储介质630的程序可以包括一个或一个以上模块(图示没标出)，每个模块可以包括对服务器中的一系列指令操作。更进一步地，中央处理器622可以设置为与存储介质630通信，在服务器600上执行存储介质630中的一系列指令操作。
服务器600还可以包括一个或一个以上电源626，一个或一个以上有线或无线网络接口650，一个或一个以上输入输出接口658，和/或，一个或一个以上操作系统641，例如Windows ServerTM，Mac OS XTM，UnixTM,LinuxTM，FreeBSDTM等等。
上述实施例中由WBAC所执行的步骤可以基于该图6所示的服务器结构。
本申请提供一种计算机可读存储介质，包括指令，当其在计算机上运行时，使得计算机执行如以上实施例中任意一个实施例的方法。
在上述实施例中，可以全部或部分地通过软件、硬件、固件或者其任意组合来实现。当使用软件实现时，可以全部或部分地以计算机程序产品的形式实现。
所述计算机程序产品包括一个或多个计算机指令。在计算机上加载和执行所述计算机程序指令时，全部或部分地产生按照本申请实施例所述的流程或功能。所述计算机可以是通用计算机、专用计算机、计算机网络、或者其他可编程装置。所述计算机指令可以存储在计算机可读存储介质中，或者从一个计算机可读存储介质向另一计算机可读存储介质传输，例如，所述计算机指令可以从一个网站站点、计算机、服务器或数据中心通过有线(例如同轴电缆、光纤、数字用户线(DSL))或无线(例如红外、无线、微波等)方式向另一个网站站点、计算机、服务器或数据中心进行传输。所述计算机可读存储介质可以是计算机能够存储的任何可用介质或者是包含一个或多个可用介质集成的服务器、数据中心等数据存储设备。所述可用介质可以是磁性介质，(例如软盘、硬盘、磁带)、光介质(例如DVD)、或者半导体介质(例如固态硬盘(Solid State Disk，SSD))等。
以上实施例仅用以说明本申请的技术方案，而非对其限制；尽管参照前述实施例对本申请进行了详细的说明，本领域的普通技术人员应当理解：其依然可以对前述各实施例记 载的技术方案进行修改，或者对其中部分技术特征进行等同替换；而这些修改或者替换，并不使相应技术方案的本质脱离本申请各实施例的技术方案的范围。

Claims (15)

  1. 一种应用于极简网络的机卡验证方法，其特征在于，包括：
    无线宽带客户端设备WBCPE向无线宽带接入点WBAP发送注册请求；
    所述WBCPE接收所述WBAP发送的请求国际移动设备识别码IMEI指示，所述请求IMEI指示是所述WBAP根据所述注册请求生成的；
    所述WBCPE通过所述WBAP向WBAC发送IMEI和第一SIM卡信息，所述第一SIM卡信息包括以下信息中的至少一项：国际移动用户识别码、网络访问标识和证书名，使所述WBAC根据预设绑定信息对所述IMEI和所述第一SIM卡信息进行验证。
  2. 根据权利要求1所述的方法，其特征在于，在所述WBCPE向所述WBAP发送注册请求之前，所述方法还包括：
    所述WBCPE将预先配置的SIM卡信息和IMEI进行绑定；
    所述WBCPE将SIM卡信息与IMEI的绑定信息通过所述WBAP发送给所述WBAC，使得所述WBAC保存所述SIM卡信息和所述IMEI的绑定信息。
  3. 根据权利要求1或2所述的方法，其特征在于，所述方法还包括：
    所述WBCPE接收所述WBAP发送的拒绝注册消息，所述拒绝注册消息是所述WBAP根据所述WBAC发送的验证失败消息生成的。
  4. 根据权利要求1或2所述的方法，其特征在于，所述请求IMEI指示携带于安全模式命令，所述IMEI和第一SIM卡信息均携带于安全模式完成消息。
  5. 一种应用于极简网络的机卡验证方法，其特征在于，包括：
    无线宽带接入控制器WBAC接收无线宽带接入点WBAP发送的IMEI和第一SIM卡信息，所述IMEI和第一SIM卡信息是无线宽带客户端设备WBCPE发送给所述WBAP的，第一SIM卡信息包括以下信息中的至少一项：国际移动用户识别码、网络访问标识、证书名；
    所述WBAC根据预设绑定信息确定与所述IMEI对应的第二SIM卡信息，所述预设绑定信息包括SIM卡信息和IMEI的对应关系；
    当所述第一SIM卡信息与所述第二SIM卡信息相同时，所述WBAC确定所述第一SIM卡信息与所述WBCPE匹配；
    当所述第一SIM卡信息与所述第二SIM卡信息不同时，所述WBAC确定所述第一SIM卡信息与所述WBCPE不匹配。
  6. 根据权利要求5所述的方法，其特征在于，在所述WBAC接收所述WBAP发送的IMEI和第一SIM卡信息之前，所述方法还包括：
    所述WBAC接收所述WBAP发送的SIM卡信息与IMEI的绑定信息，所述SIM卡信息与IMEI的绑定信息是所述WBCPE发送给所述WBAP的；
    所述WBAC保存所述SIM卡信息和所述IMEI的绑定信息。
  7. 根据权利要求5或6所述的方法，其特征在于，所述方法还包括：
    当所述WBAC确定所述第一SIM卡信息与所述WBCPE不匹配时，生成验证失败消息；
    所述WBAC将验证失败消息发送给所述WBAP。
  8. 一种无线宽带客户端设备WBCPE，其特征在于，包括：
    发送模块，用于向无线宽带接入点WBAP发送注册请求；
    接收模块，用于接收所述WBAP发送的请求国际移动设备识别码IMEI指示；
    所述发送模块，还用于通过所述WBAP向WBAC发送IMEI和第一SIM卡信息，所述第一SIM卡信息包括以下信息中的至少一项：国际移动用户识别码、网络访问标识和证书名，使所述WBAC根据预设绑定信息对所述IMEI和所述第一SIM卡信息进行验证。
  9. 根据权利要求8所述的WBCPE，其特征在于，所述WBCPE还包括：
    处理模块，用于在所述发送模块向所述WBAP发送注册请求之前，将预先配置的SIM卡信息和IMEI进行绑定；
    所述发送模块，还用于将SIM卡信息与IMEI的绑定信息通过所述WBAP发送给所述WBAC，使得所述WBAC保存所述SIM卡信息与IMEI的绑定信息。
  10. 根据权利要求8或9所述的WBCPE，其特征在于，
    所述接收模块，还用于接收所述WBAP发送的拒绝注册消息，所述拒绝注册消息是所述WBAP根据所述WBAC发送的验证失败消息生成的。
  11. 根据权利要求8或9所述的WBCPE，其特征在于，所述请求IMEI指示携带于安全模式命令，所述IMEI和第一SIM卡信息均携带于安全模式完成消息。
  12. 一种无线宽带接入控制器WBAC，其特征在于，包括：
    接收模块，用于接收无线宽带接入点WBAP发送的IMEI和第一SIM卡信息，所述IMEI和第一SIM卡信息是无线宽带客户端设备WBCPE发送给所述WBAP的，所述第一SIM卡信息包括国际移动用户识别码和以下信息中的至少一项：网络访问标识和证书名；
    处理模块，用于根据预设绑定信息确定与所述IMEI对应的第二SIM卡信息，所述预设绑定信息包括SIM卡信息与IMEI的对应关系；
    所述处理模块，还用于当所述第一SIM卡信息与所述第二SIM卡信息相同时，确定所述第一SIM卡信息与所述WBCPE匹配；当所述第一SIM卡信息与所述第二SIM卡信息不同时，确定所述第一SIM卡信息与所述WBCPE不匹配。
  13. 根据权利要求12所述的WBAC，其特征在于，
    所述接收模块，还用于在所述接收模块接收所述WBAP发送的IMEI和第一SIM卡信息之前，接收所述WBAP发送的SIM卡信息与IMEI的绑定信息，所述SIM卡信息与IMEI的绑定信息是所述WBCPE发送给所述WBAP的；
    所述WBAC还包括：
    存储模块，用于保存所述SIM卡信息和所述IMEI的绑定信息。
  14. 根据权利要求12或13所述的WBAC，其特征在于，
    所述处理模块，还用于当所述处理模块确定所述第一SIM卡信息与所述WBCPE不匹配时，生成验证失败消息；
    所述WBAC还包括：
    发送模块，用于将验证失败消息发送给所述WBAP。
  15. 一种计算机存储介质，包括指令，其特征在于，当所述指令在计算机上运行时，使得所述计算机执行如权利要求1至7中任一项所述的方法。
PCT/CN2020/124204 2019-12-05 2020-10-28 一种应用于极简网络的机卡验证方法和相关设备 WO2021109753A1 (zh)

Priority Applications (1)

Application Number Priority Date Filing Date Title
EP20896212.6A EP4057658A4 (en) 2019-12-05 2020-10-28 MACHINE BOARD VERIFICATION METHOD APPLIED TO A MINIMALIST NETWORK, AND RELATED DEVICE

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN201911234613.0A CN112929881A (zh) 2019-12-05 2019-12-05 一种应用于极简网络的机卡验证方法和相关设备
CN201911234613.0 2019-12-05

Publications (1)

Publication Number Publication Date
WO2021109753A1 true WO2021109753A1 (zh) 2021-06-10

Family

ID=76161306

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2020/124204 WO2021109753A1 (zh) 2019-12-05 2020-10-28 一种应用于极简网络的机卡验证方法和相关设备

Country Status (3)

Country Link
EP (1) EP4057658A4 (zh)
CN (1) CN112929881A (zh)
WO (1) WO2021109753A1 (zh)

Cited By (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN114339689A (zh) * 2021-12-30 2022-04-12 天翼物联科技有限公司 一种物联网机卡绑定池管控方法、装置及相关介质
CN114390509A (zh) * 2021-12-28 2022-04-22 天翼物联科技有限公司 基于物联网的机卡绑定池实现方法、装置、设备及介质
CN114666790A (zh) * 2022-04-08 2022-06-24 深圳市欧瑞博科技股份有限公司 配网方法、智能设备和终端

Families Citing this family (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN113301570B (zh) * 2021-06-29 2023-04-07 展讯通信（上海）有限公司 Sim卡的防盗方法和装置

Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1541015A (zh) * 2003-10-31 2004-10-27 大唐微电子技术有限公司 应用国际移动设备识别码实现手机防盗的方法及其系统
US20160165663A1 (en) * 2014-12-09 2016-06-09 Verizon Patent And Licensing Inc. Secure connected device control and monitoring system
CN109151820A (zh) * 2018-08-24 2019-01-04 安徽讯飞智能科技有限公司 一种基于“一人一机一卡一号”的安全认证方法和装置

Family Cites Families (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
FI103469B (fi) * 1996-09-17 1999-06-30 Nokia Telecommunications Oy Kopioidun tilaajatunnuksen väärinkäytön estäminen matkaviestinjärjeste lmässä
CN106464525B (zh) * 2015-10-19 2019-09-03 华为技术有限公司 控制策略确定方法、装置及系统
CN105848153A (zh) * 2016-06-07 2016-08-10 宇龙计算机通信科技(深圳)有限公司 嵌入式sim卡注册、嵌入式sim卡鉴权方法及对应系统
US10257702B2 (en) * 2017-09-08 2019-04-09 At&T Intellectual Property I, L.P. Validating international mobile equipment identity (IMEI) in mobile networks
US20220248360A1 (en) * 2019-05-14 2022-08-04 Beijing Xiaomi Mobile Software Co., Ltd. Network registration method, apparatus, system, and storage medium

Patent Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1541015A (zh) * 2003-10-31 2004-10-27 大唐微电子技术有限公司 应用国际移动设备识别码实现手机防盗的方法及其系统
US20160165663A1 (en) * 2014-12-09 2016-06-09 Verizon Patent And Licensing Inc. Secure connected device control and monitoring system
CN109151820A (zh) * 2018-08-24 2019-01-04 安徽讯飞智能科技有限公司 一种基于“一人一机一卡一号”的安全认证方法和装置

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
NOKIA ET AL.: "On wider band aspects", 3GPP TSG-RAN WG1 MEETING #88B R1-1705200, 7 April 2017 (2017-04-07), XP051250627 *

Cited By (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN114390509A (zh) * 2021-12-28 2022-04-22 天翼物联科技有限公司 基于物联网的机卡绑定池实现方法、装置、设备及介质
CN114390509B (zh) * 2021-12-28 2023-12-05 天翼物联科技有限公司 基于物联网的机卡绑定池实现方法、装置、设备及介质
CN114339689A (zh) * 2021-12-30 2022-04-12 天翼物联科技有限公司 一种物联网机卡绑定池管控方法、装置及相关介质
CN114339689B (zh) * 2021-12-30 2023-12-22 天翼物联科技有限公司 一种物联网机卡绑定池管控方法、装置及相关介质
CN114666790A (zh) * 2022-04-08 2022-06-24 深圳市欧瑞博科技股份有限公司 配网方法、智能设备和终端

Also Published As

Publication number Publication date
EP4057658A4 (en) 2023-01-04
EP4057658A1 (en) 2022-09-14
CN112929881A (zh) 2021-06-08

Similar Documents

Publication Publication Date Title
WO2021109753A1 (zh) 一种应用于极简网络的机卡验证方法和相关设备
US20230007475A1 (en) Method for Performing Verification by Using Shared Key, Method for Performing Verification by Using Public Key and Private Key, and Apparatus
US11082838B2 (en) Extensible authentication protocol with mobile device identification
US7370350B1 (en) Method and apparatus for re-authenticating computing devices
TWI433556B (zh) 無線網路認證設備及方法
US8543814B2 (en) Method and apparatus for using generic authentication architecture procedures in personal computers
US9380038B2 (en) Bootstrap authentication framework
WO2011017924A1 (zh) 无线局域网的认证方法、系统、服务器和终端
US10462671B2 (en) Methods and arrangements for authenticating a communication device
EP2957114B1 (en) Method and network node for obtaining a permanent identity of an authenticating wireless device
CN101986598B (zh) 认证方法、服务器及系统
US20040010713A1 (en) EAP telecommunication protocol extension
US11277399B2 (en) Onboarding an unauthenticated client device within a secure tunnel
CN108738019B (zh) 融合网络中的用户认证方法及装置
WO2019056971A1 (zh) 一种鉴权方法及设备
US20230035970A1 (en) Method for Protecting Terminal Parameter Update and Communication Apparatus
CN113543121A (zh) 一种终端参数更新的保护方法和通信装置
CN116368833A (zh) 针对边缘计算服务的安全连接的建立和认证的方法和系统
CN113973301B (zh) 用于专用网络接入的自主设备认证
CN101272297B (zh) 一种WiMAX网络用户EAP认证方法
WO2014117524A1 (zh) Wlan接入网络中传递成对主密钥的方法和系统
WO2019141135A1 (zh) 支持无线网络切换的可信服务管理方法以及装置
WO2018137239A1 (zh) 一种鉴权方法、鉴权服务器和核心网设备
WO2021103599A1 (zh) 一种签约信息的处理方法、装置及设备
CN115913611A (zh) 无账号体系iot设备的绑定方法及存储介质

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 20896212

Country of ref document: EP

Kind code of ref document: A1

ENP Entry into the national phase

Ref document number: 2020896212

Country of ref document: EP

Effective date: 20220610

NENP Non-entry into the national phase

Ref country code: DE