Detailed Description
In the scheme for realizing network switching provided by the embodiment of the invention, a target access network switched by a terminal is selected to acquire safety information corresponding to the terminal from an authentication and authorization server, wherein the authentication and authorization server is used for authenticating the target access network and an access terminal in a service access network of the terminal; and the target access network provides access service for the terminal switched to the target access network by using the acquired safety information. Therefore, the time consumed by the corresponding authentication process can be avoided, so that the access processing process of the switching terminal accessed into the target access network can be accelerated, and the switching time delay is reduced.
In the above processing process, since the corresponding authentication and authorization server is not changed in the process of the terminal switching between the two networks, that is, the target access network and the service access network both correspond to the same authentication and authorization server, the corresponding authentication information can be shared before and after the terminal switching; for example, the terminal and the authentication and authorization server may use the same rule to regenerate the key information as the corresponding security information for the target access network, so that the terminal may complete the access processing procedure in the target access network.
In the embodiment of the present invention, the target access network may specifically request the authentication and authorization server to acquire the security information corresponding to the terminal after receiving the handover notification sent by the service access network of the terminal; for example, after triggering handover or handover preparation, the serving access network may transfer the context of the terminal to the target access network, where the corresponding context includes, but is not limited to, an identifier, an IP address, or a PDN GW or HA address of the terminal, so as to inform the target access network to initiate a handover operation for the terminal or prepare for the terminal to handover to the target access network. Or, after the target access network determines that there is no security information of the corresponding terminal locally, the target access network requests the authentication and authorization server to acquire the security information corresponding to the terminal.
In order to further accelerate the switching process, after the target access network receives the notification of triggering switching or the notification of switching preparation of the terminal, the resource reservation can be carried out for the access of the terminal, so that the terminal can utilize the reserved resource to quickly establish a corresponding bearer after being switched into the target access network, and the speed of accessing the target access network is improved.
In the embodiment of the invention, in order to facilitate the target access network to accurately perform the policy charging operation on the switched terminal, the corresponding target access network can also request to acquire the corresponding policy charging rule of the terminal in the target access network, and perform the policy charging operation on the switched and accessed terminal according to the acquired policy charging rule.
That is to say, in the embodiment of the present invention, during or after the preparation for terminal handover, the target access network may obtain the policy charging rule corresponding to the terminal from the policy charging rule entity, where the policy charging rule entity is configured to perform policy authorization and policy charging rule generation operations on the target access network and the terminal; and the target access network can use the acquired policy charging rule to perform resource reservation and access bearer pre-establishment for the terminal switched to the target access network and install the policy charging rule for bearer charging after the terminal is switched to the target network.
Optionally, in the embodiment of the present invention, after the terminal completes the operation of switching to the target access network, the target access network or the terminal may further notify the service access network of the terminal to release the resource corresponding to the terminal, and delete the information corresponding to the terminal.
Taking the handover between the 3G network and the WiMAX network as an example, after triggering the handover or the handover pre-preparation, the process of the serving access network triggering the target access network to perform the handover pre-preparation may specifically include:
(1) an MME (mobility management entity) of a target access network 3G network or an SGSN or ASN GW (access gateway) of a WiMAX network requests security information of terminal access from an authentication and authorization server for authenticating the terminal, the request carries an identifier of the terminal and/or target access network information so that the authentication and authorization server can index corresponding security information, wherein the security information of the MME or the SGSN requesting the terminal can be a secret key KASMEThe security information of the ASN GW request terminal may be MSK (master session key) or EMSK (extended master session key), and the corresponding authentication and authorization server may be HSS (home subscriber server)/AAA (authentication, accounting) server, etc.;
the authentication authorization server generates new key information used in a target access network according to the information of the last authentication of the terminal;
(2) a Policy and Charging Enforcement Function (PCEF) of a target access network requests a policy and charging Rule (PCC) Rule of a terminal in the target access network from a Policy and Charging Rule Function (PCRF) entity; the request carries the identifier of the terminal, the IP address and/or the target access network information (such as the access network type, the address of the policy enforcement entity or the access network bearer information), so that the PCRF can regenerate the corresponding PCC rule (such as authorized QoS information, a classifier template or a charging rule) according to the target access network information and send the PCC rule to the PCEF, so that the PCEF installs the PCC rule and reserves the access network resources and performs access network bearer pre-establishment.
In the embodiment of the invention, if the terminal moves faster and the target access network cannot perform switching preparation, the terminal can perform normal network reentry after being switched to the target access network, and after the target access network detects that the security information of the terminal does not exist locally, the terminal triggers the acquisition operation of the corresponding security information, for example, requests the security information to MME or SGSN, and requests a key K of the terminal from HSS (home subscriber server)/AAA (authentication, charging) server by MME or SGSNASMEAfter HSS/AAA receives the key request message, it uses IK (integrity Key)/CK (encryption Key) to generate KASMEAnd sent to MME, and finally MME receives KASMEAnd generating a key required by an air interface and sending the key to the radio network subsystem RNS so as to be used as a key used in the air interface information interaction process.
A corresponding switching system structure is shown in fig. 3, and a processing flow of an implementation scheme provided by an embodiment of the present invention is shown in fig. 4, which mainly includes the following steps:
step 1, after a terminal detects a signal of a target network, if the detected signal strength reaches a preset threshold value, the terminal starts to perform switching preparation;
the specific pre-preparation process may include: a terminal sends a switching request or a switching pre-preparation message to a service access network, the switching request message carries suggested target base station related information, such as base station identification, signal strength and the like, and can carry estimated switching starting time; the service access network may be but is not limited to a WiMAX access network or a 3G UTRAN or LTE network;
step 2 to step 5, the service access network indicates the corresponding target access network to prepare for switching the terminal;
specifically, context information including an identifier, an IP address, a PDN GW address, and the like of a terminal may be transferred from a service access network to a target access network through an interface between access networks or an interworking function, and the corresponding target access network is instructed to acquire security information, a PCC rule, and the like corresponding to the terminal, and then, corresponding resource reservation and bearer establishment operations are performed; the corresponding target access network may be, but is not limited to, a 3G UTRAN network or a WiMAX access network or an LTE network;
the corresponding handover preparation may specifically include the following steps:
(1) the target access network requests the security information of terminal access to a server for authenticating the terminal, the request message carries the identifier of the terminal and the access network information, and the corresponding server for authenticating the terminal can be but is not limited to an HSS (home subscriber server) or an AAA server; for example, the key K of the terminal may be specifically requested for the MME in the 3G network as the target access networkASMEAs the security information, or, as the security information, an access gateway ASN GW in a WiMAX network serving as a target access network may request a master session key MSK of a terminal;
(2) a policy enforcement entity (PCEF) of a target access network requests a policy charging Rule (PCC) Rule in the target access network from a PCRF;
the corresponding processing procedure may specifically be: the PCEF sends a request message to the PCRF, wherein the request message carries an identifier, an IP address and target access network information of a terminal, and the target access network information can comprise an access network type, an address of a policy enforcement entity, access network bearing information and the like; after receiving the request message, the PCRF regenerates a PCC Rule according to the target access network information, wherein the PCC Rule can but not limited to comprise authorized QoS information, a classifier template or charging rules and the like; and issuing the corresponding PCC Rule to the PCEF, installing the PCC Rule by the PCEF, reserving access network resources and carrying out access network bearing pre-establishment.
And 6, after the target access network completes the switching preparation operation in the steps 2 to 5, sending a response message to the service access network to indicate that the switching preparation process is completed, and the corresponding terminal can initiate the switching operation.
Step 7, after receiving the response message sent by the target access network, the service access network continues to send the switching message to the terminal;
the corresponding handover message carries related information of handover preparation, and the corresponding information includes but is not limited to: one or more items of information such as the preparation result, identification information of the related entity, context information of the related target network, resource reservation condition or security context acquisition condition, and the like.
Optionally, the corresponding handover response message may carry a target access network identifier, such as a base station identifier, to which the terminal selected by the serving access network for the terminal may be handed over; alternatively, a plurality of target access network identifiers, such as a plurality of base station identifiers, may also be carried in the corresponding handover response message.
Step 8, after receiving the response message in the target access network, the service access network can send a confirmation message to the target access network;
step 9, after receiving the response message sent in step 7, the terminal can execute a corresponding switching process according to the target access network identifier carried in the response message, and after the terminal completes the normal access process with the target access network, the target access network activates the previously pre-established bearer;
if the handover response message sent in step 7 carries multiple target access network identifiers, the terminal may select a target access network with the best signal according to the detected signal strength to perform a handover operation; if the switching response message sent in step 7 carries the selected target access network identifier, the terminal directly adopts the corresponding target access network to perform switching operation;
in this step, after the terminal completes the selection of the target network and prepares to switch to the target network, it may also send an indication message to the service access network to notify the service access network of the resources occupied by the terminal before the release, the service access network starts a timer for reserving resources for the terminal at this time, and the service access network automatically releases all reserved resources for the terminal after the timer is overtime;
in this step, after the terminal accesses the target access network, the target access network may send a message to the service access network to confirm that the terminal is switched to the target network, and the message carries an indication that the terminal has successfully switched; after receiving the message, the service access network deletes all the information reserved for the terminal and releases the resources allocated to the terminal by the service access network.
In the above step 9, if there is no reserved resource or pre-established bearer, the target access network performs resource allocation and bearer establishment in this step; if resources have been reserved before but no bearer has been established, a bearer is established in this step.
In step 9, if the terminal notifies the service access network to cancel or reject the handover, after receiving the handover indication message of canceling or rejecting the handover, the service access network notifies the selected target access network to notify the target access network to release the uplink access resource pre-allocated to the terminal and the pre-established bearer, and delete the security information or charging rule and other information corresponding to the terminal.
In the foregoing handover processing procedure, if the terminal is not ready to complete the handover preparation operation described in step 2 to step 5, step 2 to step 5 may also be performed after the terminal is handed over to the target network and normally accesses the network, which may be specifically as shown in fig. 5, and the corresponding processing procedure may include:
step 1, a terminal detects a signal of a target access network meeting requirements, initiates a switching request to the target access network and switches the target access network;
step 2, the terminal initiates network reentry operation to the target access network;
step 3, step 4, after the target access network receives the message that the terminal initiates the reentry operation, the security information and PCC rule of the terminal are obtained;
specifically, the AAA server may be requested to acquire security information corresponding to the terminal, and the PCRF may be requested to acquire a PCC rule corresponding to the terminal in the target access network;
and step 5, the target access network performs resource reservation and bearer pre-establishment operation for the terminal initiating the handover according to the acquired information such as the security information, the PCC rule and the like, and then, the established bearer can provide access service for the terminal in the target access network, thereby completing corresponding handover operation.
Step 6, after the target access network completes the corresponding switching operation, the target access network sends a switching completion message to the service access network so as to inform the service access network of the information of the terminal switching to the target access network;
and 7, after receiving the switching completion message sent by the target access network, the service access network releases the load and reserved resources established for the switching terminal locally, and deletes the stored terminal information, such as security information, PCC rule information and the like.
For facilitating understanding of the embodiments of the present invention, the following will describe in detail a specific application of the embodiments of the present invention by taking a handover processing procedure between a WiMAX network and a 3G network as an example with reference to the accompanying drawings.
Example one
In the first embodiment, assuming that the terminal is switched from WiMAX to a 3G network, a corresponding switching process is as shown in fig. 6, and may specifically include the following steps:
step 1, when a terminal detects a signal of a UTRAN (terrestrial radio access network) network and the signal strength reaches a preset threshold value, the terminal starts to perform handover preparation;
specifically, the terminal may send a message to an ASN GW or an interworking function entity in the WiMAX access network, and the message may carry a proposed Target BS and may carry an estimated time to start handover;
step 2 to step 4, an ASN GW or an interoperation functional entity in the WiMAX access network sends a switching request to an MME or an SGSN entity of the 3G network through an interface between the access networks so as to inform the MME entity of performing switching preparation, wherein the switching request message comprises the context of the identifier, the IP address, the PDNGW address and the like of the terminal;
the specific implementation process of the corresponding handover preparation may include:
(1) the MME successfully requests a key accessed by the terminal from a server (such as an HSS or an AAA server) for authenticating the terminal, and the request message carries the identifier of the terminal and target access network information, so that the HSS/AAA server indexes IK and CK of the terminal according to the identifier of the terminal, generates a corresponding key according to the IK and the CK, and sends the key to the MME or the SGSN;
(2) MME or SGSN initiates bearing establishment and PDP context establishment to PDN GW or Serving GW, PCEF in PDN GW or Serving GW requests PCC Rule of terminal in target access network from PCRF, carries terminal identification, IP address and target access network information (such as access network type, address of policy enforcement entity or access network bearing information and the like) in corresponding request, so that PCRF regenerates PCC Rule (such as authorized QoS information, classifier template or charging Rule and the like) according to the target access network information and sends down the PCC Rule to policy enforcement entity PCEF. And the PCEF reserves the resources of the UTRAN access network according to the PCC rules and performs the pre-establishment operation of the access network load.
Step 5, the terminal initiates a switching process;
the specific implementation process of the step can comprise the following steps:
(1) after the step 2 to the step 4 are executed, the target access network sends a response message to the WiMAX access network serving as the service access network to indicate that the switching preparation process is completed, and the terminal can initiate the switching;
(2) after receiving the response message, the WiMAX access network sends a response message to the terminal, and the response message carries the base station of the target access network which can be switched by the terminal selected by the network; the WiMAX access network sends a confirmation message to a target access network selected for switching;
(3) after receiving the handover response message, the terminal may execute a corresponding handover process, where if the handover response message carries multiple base station identifiers, the terminal may select a base station with the best signal for handover according to the detected signal strength.
Step 6, the terminal executes the network re-entry operation to access the target access network;
step 7, activating context and service flow of the terminal by the target access network, and performing PMIP registration to PDN GW by Serving GW (Serving gateway) to establish MIP tunnel with PDN GW; or a GTP protocol is adopted between the PDN GW and the Serving GW to establish a GTP tunnel;
the method specifically comprises the following steps: after the terminal completes the normal access process with the UTRAN access network, the target access network activates the pre-established bearer; and if the load is not pre-established before, the target access network establishes the load for the terminal according to the reserved resources.
Step 8, the target access network informs the WiMAX access network to release corresponding resources;
the method specifically comprises the following steps: the target access network sends a message carrying the successful switching indication of the terminal to the WiMAX access network, and after receiving the message, the WiMAX access network deletes all the information reserved for the switching terminal and releases the resources allocated to the terminal by the WiMAX access network.
Step 8 above may also be replaced by: after receiving the switching response, the terminal sends an indication message to the WiMAX access network to inform the WiMAX access network to release the resources of the terminal if determining that the switching to the target access network is to be initiated;
the method specifically comprises the following steps: after receiving the indication message, the WiMAX access network starts a timer for reserving resources for the terminal, waits for the timeout of the timer, and automatically releases all reserved resources for the terminal.
In the above processing procedure, the terminal may also notify the WiMAX access network to cancel or reject the handover through the indication message, and if the terminal cancels or rejects the handover, the WiMAX access network receives an indication to cancel or reject the handover and then notifies the selected target access network to release the access resource pre-allocated to the terminal and delete information such as the context of the terminal.
Example two
In the second embodiment, still taking a handover processing procedure of the terminal from WiMAX to the 3G network as an example, the corresponding handover processing procedure is similar to the first embodiment, except that before the terminal is handed over, there is no signaling interaction between the WiMAX access network and the UTRAN access network, that is, there is no operation to prepare for handover for the arrival of the terminal in advance and to perform operations such as security information acquisition, resource reservation, bearer establishment and the like of the terminal in advance in the UTRAN access network.
The switching operation provided by the second embodiment is shown in fig. 7, and mainly includes the following steps:
step 1, a terminal is switched to a target network under the condition that switching pre-funding preparation operation is not executed;
the method specifically comprises the following steps: after the terminal is switched to a target UTRAN access network, normal network re-entry operation is carried out, re-authentication operation aiming at the terminal is not carried out in the re-entry process, and IK (integrity key)/CK (encryption key) generated by current authentication is directly utilized, namely, a message authentication code generated by adopting the key IK/CK is sent to a target RNS (radio network subsystem) of the target access network;
step 2, step 3, acquiring the security information of the terminal through MME or SGSN;
after receiving a message authentication code which is sent by a terminal and generated by adopting a key IK/CK, an RNS detects that the RNS does not have the safety information of the terminal, and then requests corresponding safety information from an MME or an SGSN; the MME or the SGSN requests the HSS/AAA server for the security information of the terminal after receiving the request, and the HSS/AAA server generates a security key by adopting IK/CK after receiving the key request message and sends the security key to the MME or the SGSN; after receiving the key, the MME or SGSN generates a key required by an air interface and sends the key to the target RNS, so that the operation of authentication encryption and the like can be conveniently carried out by using a message authentication code sent by the terminal of the MME or SGSN.
Step 4, after MME or SGSN transmits the corresponding key to the target RNS, the MME or SGSN receives the service flow establishment request of the terminal, at this time, MME or SGSN initiates the load establishment and PDP context establishment to PDN GW or Serving GW;
the method specifically comprises the following steps: the PCEF in the PDN GW requests the PCRF for a PCC Rule of the terminal in the target access network, where the corresponding request needs to carry an identifier, an IP address, and target access network information (such as an access network type, an address of a policy enforcement entity, or access network bearer information, etc.), so that the PCRF regenerates a PCC Rule (such as authorized QoS information, a classifier template, or a charging Rule, etc.) according to the target access network information and issues the PCC Rule to the PCEF, so that the PCEF reserves UTRAN access network resources according to the PCC Rule, and performs PDP context creation and access network bearer establishment.
The other subsequent processing steps are the same as those provided in the first embodiment, and therefore will not be repeated.
EXAMPLE III
In the third embodiment, the terminal is switched from the 3G access network to the WiMAX access network, and the MME or SGSN entity in the 3G access network notifies the ASN GW to perform handover preparation; ASN GW requests MSK of terminal master session key from HSS or AAA server, HSS or AAA server generates MSK or EMSK according to key generated by terminal authentication, and sends MSK or EMSK to ASN GW; and finally, the ASN GW reserves WiMAX access network resources for the terminal and pre-establishes a data channel to the base station.
In the third embodiment, a corresponding handover process is shown in fig. 8, and may specifically include:
step 1, when a terminal detects a signal of a WiMAX access network and the signal intensity reaches a preset threshold value, the terminal sends a switching request or a switching pre-preparation message to the WiMAX network through a 3G network, the message carries a proposed target access network and can carry estimated time for starting switching;
step 2 to step 4, the MME or SGSN entity in the 3G network sends the switching request or switching pre-preparation message to the ASN GW entity of the WiMAX access network to inform the ASN GW entity to perform switching pre-preparation;
the specific implementation process of the corresponding handover preparation may include:
(1) the ASN GW requests a key accessed by the terminal from a server (such as an HSS or an AAA server) for authenticating the terminal, the request message carries an identifier of the terminal and target access network information, so that the HSS/AAA indexes IK and CK corresponding to the terminal according to the identifier of the terminal, generates a key context of the terminal in a target network according to the IK and the CK, and sends the key context to the ASN GW;
(2) the ASN GW requests the PCRF for PCC Rule of the terminal in the target access network, and carries the identifier, IP address, and target access network information (such as access network type, address of policy enforcement entity, or access network bearer information, etc.) of the terminal in the corresponding request, so that the PCRF regenerates PCC rules (such as authorized QoS information, classifier template, charging rules, etc.) according to the target access network information and issues the PCC rules to the ASN GW. And the ASN GW performs the reservation of WiMAX access network resources and the pre-establishment operation carried by the access network according to the PCC rules.
Step 5, the terminal initiates a switching process;
step 6, the terminal executes the network re-entry operation to access into the WiMAX access network;
step 7, WiMAX access network activates context and service flow of terminal, ASN GW registers PMIP to PDNGW, builds MIP tunnel between PDN GW and MIP tunnel is established to transfer information for terminal after switching;
the method specifically comprises the following steps: after the terminal completes the normal access process with the WiMAX access network, the target access network activates the pre-established bearer; if the bearer is not pre-established before, the WiMAX access network establishes the bearer for the terminal according to the reserved resources.
Step 8, the WiMAX access network informs the 3G access network to release the corresponding resource;
step 8 above may also be replaced by: after receiving the handover response, the terminal notifies the 3G access network to release the resources of the terminal, for example, after receiving the corresponding notification, the 3G access network starts a timer for reserving resources for the terminal, and when waiting for the timer to be overtime, all reserved resources for the terminal are released.
In the above processing procedure, the terminal may further notify the 3G access network to cancel or reject the handover, and if the terminal cancels or rejects the handover, the 3G access network will notify the selected WiMAX access network to release the uplink access resource pre-allocated to the terminal and delete information such as the context of the terminal after receiving an instruction to cancel or reject the handover.
The above process is similar to the process described in the first embodiment, and therefore, will not be described in detail.
Example four
In the fourth embodiment, the terminal is switched from the 3G access network to the WiMAX access network, and the ASN GW requests the HSS/AAA server for the master session key MSK of the terminal, the HSS/AAA server generates the MSK/EMSK according to the key generated by the terminal authentication, and sends the MSK/EMSK to the ASN GW; and finally, the ASN GW reserves WiMAX access network resources for the terminal and pre-establishes a data channel to the base station.
In the fourth embodiment, a corresponding handover procedure is shown in fig. 9, and may specifically include:
step 1, a terminal (namely UE) is switched into a target access network under the condition that a switching pre-resource preparation operation is not executed, namely the terminal is switched into a target WiMAX access network, normal network re-access operation is carried out, re-authentication operation aiming at the terminal is not carried out in the re-access process, and instead, the IK/CK generated by current authentication is directly used for generating an MSK/EMSK and an air interface key;
step 2, the terminal and the BS adopt the generated new MSK/EMSK and the air interface key to carry out the interaction of the air interface signaling;
step 3, after the BS/ASN GW detects that the terminal does not have the secret key of the terminal, the BS/ASN GW requests to acquire the safety information corresponding to the terminal;
after BS/ASN GW receives the message sent by the terminal, if it detects that the terminal has no safety information, it obtains the corresponding safety information from the Authenticator, and the Authenticator requests the HSS/AAA server for the safety information (MSK/EMSK) of the terminal, after the HSS/AAA server receives the key request message, it uses IK/CK to generate the corresponding MSK/EMSK, and sends it to the Authenticator; after receiving the corresponding MSK/EMSK, the authenticator continues to send it to the BS/ASN GW.
And 4, after the BS/ASN GW receives the corresponding MSK/EMSK, performing corresponding resource reservation in the WiMAX access network, and performing operations of PDP context creation and access network bearer establishment.
The above process is similar to the process described in the second embodiment, and therefore, will not be described in detail.
It should be noted that, in the above embodiment, both the WiMAX access network and the 3G access network are required to handle the handover procedure between different systems, that is, the WiMAX access network (such as ASN GW) and the 3G access network (such as MME or SGSN) need to support corresponding functions for handover between different systems. In actual deployment, a function that needs to support inter-system handover may also be abstracted to form a new functional entity, and a corresponding functional entity is independently set, where an interface between the corresponding functional entity and each access network may be, but is not limited to, an interface between general WiMAX network entities (e.g., R4/R6 interface, etc.) or an interface between general 3G network entities (e.g., S1, Gn interface, etc.). Thus, from the perspective of each system, the handover between different systems is similar to the handover between two access networks of the same system, except that the corresponding handover is performed by an intermediate entity (i.e., the new functional entity). In an actual network deployment, the intermediate entity may distribute settings such as: setting a corresponding entity in the WiMAX network for switching other systems to the WiMAX network, and setting a corresponding entity in the 3G access network for switching other systems to the 3G network; alternatively, the intermediate entities may be integrated between two networks to implement corresponding handover operations.
An embodiment of the present invention further provides a system for implementing network handover, where a specific implementation structure of the system is shown in fig. 10, and the specific implementation structure may specifically include:
(1) the authentication and authorization server is used for performing authentication operation on a target access network corresponding to the switching terminal and a terminal in the service access network, and storing security information corresponding to the authenticated terminal, and the authentication and authorization server can be specifically an HSS (home subscriber server) or an AAA (authentication, authorization and accounting) server and the like;
(2) the target access network is used for acquiring security information, such as key information and the like, corresponding to the terminal from the authentication and authorization server after the terminal is switched, and providing access service for the terminal switched to the target access network by using the acquired security information; the corresponding operation of requesting to acquire the security information corresponding to the terminal may be triggered locally or notified by the service access network.
Optionally, the system may further include a service access network, configured to notify the target access network after the terminal initiates the handover operation, so that the target access network starts an operation of requesting to acquire security information corresponding to the terminal.
In order to reliably delete the relevant information in the serving access network after the terminal is handed over to the target access network, the serving access network may further include the following units:
a switching completion notification receiving unit, configured to receive a switching completion notification sent by a target access network;
a timer, configured to start the timer after the handover completion notification receiving unit receives the handover completion notification, where a timer duration of a corresponding timer may be determined according to a longest time that the corresponding resource and information are expected to be stored in the service access network;
and the resource releasing and information deleting unit is used for releasing the resources corresponding to the terminal in the service access network and deleting the information corresponding to the terminal after the timer is overtime.
A specific implementation structure of a corresponding access network device in a corresponding target access network will be described below with reference to fig. 10.
Referring to fig. 10, a specific structure of the access network device includes the following units:
(1) a security information obtaining unit, configured to obtain security information corresponding to a terminal from an authentication authorization server that performs an authentication operation on the terminal after the terminal is switched to a target access network device (i.e., an access network where the access device is located);
according to different triggering modes for acquiring the security information, the security information acquiring unit may specifically include any one of the following units:
the first acquisition unit is used for requesting the authentication and authorization server to acquire the security information corresponding to the terminal after receiving a switching notification sent by a service access network of the terminal;
and the second acquisition unit is used for requesting the authentication and authorization server to acquire the security information corresponding to the terminal after determining that the security information corresponding to the terminal switched to the local does not exist.
(2) And the access processing unit is used for providing access service for the terminal switched to the access network equipment by using the security information acquired by the security information acquisition unit.
Optionally, the access network device may further include a resource reservation unit, configured to perform resource reservation for the terminal after receiving a handover notification sent by a service access network of the terminal, so that the terminal that is handed over to the target access network may quickly and reliably access the target access network, and thus complete a corresponding handover operation with a relatively short handover delay.
Optionally, the access network device may further include a handover cancel or reject notification receiving unit, configured to release the predetermined resource and delete the information corresponding to the terminal when receiving a handover cancel or reject notification sent by the service access network, so as to ensure that the target access network can release the corresponding resource and delete the corresponding information in time after the terminal cancels or rejects the handover, thereby saving a storage space in the target access network device and improving a corresponding resource utilization rate.
Optionally, to ensure that the terminal handed over to the local in the target network performs the policy charging operation by using the accurate policy charging rule, the access network device may further include:
a policy charging rule obtaining unit, configured to request to obtain a policy charging rule corresponding to the terminal in the target access network, and specifically, request to obtain a new policy charging rule corresponding to the terminal according to information such as a type of the target access network;
and the policy charging operation unit is used for performing policy charging operation on the switched-in terminal according to the policy charging rule acquired by the policy charging rule acquisition unit.
Optionally, the access network device may further include a handover completion notification unit, configured to notify a service access network of the terminal to release a resource corresponding to the terminal and delete information corresponding to the terminal after the terminal completes an operation of performing handover to the target access network.
The embodiment of the present invention further provides another system for implementing network switching, and a specific implementation structure of the system is shown in fig. 11, which may specifically include:
(1) switching processing device
The device is used for acquiring the safety information corresponding to the terminal from the authentication and authorization server after the terminal is switched to the target access network equipment, and sending the safety information to the target access network;
the switching processing device may specifically include the following units:
the security information acquisition unit is used for acquiring security information corresponding to the terminal from the authentication and authorization server after the terminal is switched to the target access network equipment;
and the safety information transmission unit is used for sending the safety information acquired by the safety information acquisition unit to the target access network.
(2) Target access network
And the terminal switching device is used for receiving the safety information sent by the switching processing device after the terminal is switched and providing access service for the terminal switched to the target access network by using the safety information.
It should be noted that the above embodiments of the present invention are not only applicable to the handover process between different versions of WiMAX and 3G networks, but also applicable to the handover operation between other WiMAX and non-WiMAX networks, such as the handover between WiMAX and 3GPP 2.
In summary, it can be known from the above description of each embodiment of the present invention that, in the handover processing procedure between access networks of a common core network, taking the handover between 3GPP and WiMAX as an example, the corresponding handover procedure can fully utilize the complete security mechanisms of the 3GPP network and WiMAX network, and ensure the security of signaling or data through WiMAX network; moreover, the corresponding switching processing process provided by the embodiment of the invention can effectively accelerate the network access process after switching, thereby reducing the switching time delay and ensuring the continuity of data and service as much as possible.
The above description is only for the preferred embodiment of the present invention, but the scope of the present invention is not limited thereto, and any changes or substitutions that can be easily conceived by those skilled in the art within the technical scope of the present invention are included in the scope of the present invention. Therefore, the protection scope of the present invention shall be subject to the protection scope of the claims.