CN102625305A - Method for accessing evolved packet system and system thereof - Google Patents

Method for accessing evolved packet system and system thereof Download PDF

Info

Publication number
CN102625305A
CN102625305A CN2011100333824A CN201110033382A CN102625305A CN 102625305 A CN102625305 A CN 102625305A CN 2011100333824 A CN2011100333824 A CN 2011100333824A CN 201110033382 A CN201110033382 A CN 201110033382A CN 102625305 A CN102625305 A CN 102625305A
Authority
CN
China
Prior art keywords
address
local
gateway
eps
network
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Granted
Application number
CN2011100333824A
Other languages
Chinese (zh)
Other versions
CN102625305B (en
Inventor
毕以峰
刘国燕
周晓云
宗在峰
霍玉臻
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
ZTE Corp
Original Assignee
ZTE Corp
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by ZTE Corp filed Critical ZTE Corp
Priority to CN201110033382.4A priority Critical patent/CN102625305B/en
Priority to PCT/CN2011/084314 priority patent/WO2012100611A1/en
Publication of CN102625305A publication Critical patent/CN102625305A/en
Application granted granted Critical
Publication of CN102625305B publication Critical patent/CN102625305B/en
Expired - Fee Related legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04WWIRELESS COMMUNICATION NETWORKS
    • H04W12/00Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/06Authentication
    • H04W12/069Authentication using certificates or pre-shared keys

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Mobile Radio Communication Systems (AREA)

Abstract

The invention discloses a method for accessing an evolved packet system. The method comprises the following steps that: UE (user equipment) takes a non-3GPP (3rd generation partnership project) access gateway and a non-3GPP access network AAA server as an agent network element of authentication, and sends an authentication message of user access based on 3GPP to the non-3GPP access gateway through a local gateway; after being triggered by the authentication message, the non-3GPP access gateway establishes a binding relation to P-GW(packet data network gateway) of the EPS (evolved packet system); the P-GW notifies a trusted non-3GPP gateway of IP addresses distributed for the UE, and the trusted non-3GPP gateway sends the IP addresses distributed by the P-GW to the local gateway through the authentication message; the local gateway notifies the IP addresses distributed by the P-GW to the UE, or the local gateway distributes local IP addresses for the UE and notifies the local IP addresses to the UE. The invention also discloses a system for accessing the EPS. The system can realize the above method. By using the method and the system of the invention, the access capability of the UE can be developed and a plurality of access modes are provided for a UE user.

Description

Insert the method and system of evolved packet system
Technical field
The present invention relates to a kind of through the non-third generation partner program of trusted (3GPP; 3rd GenerationPartnership Project) network insertion is to evolved packet system (EPS; Evolved Packet Core) technology; Relate in particular to the method and system of a kind of subscriber equipment (UE, User Equipment) through access evolved packet systems such as non-3GPP network of trusted such as WLANs (WLAN, Wireless Local Area Network).
Background technology
The EPS of 3GPP is by the Universal Terrestrial Radio Access Network (E-UTRAN of evolution; Evolved UniversalTerrestrial Radio Access Network), mobile management unit (MME; Mobility ManagementEntity), gateway (S-GW; Serving Gateway), grouped data network gateway (P-GW, PacketData Network Gateway) and home subscriber server (HSS, Home Subscriber Server) are formed.
EPS supports and the intercommunication of non-3 GPP system that Fig. 1 is for the Organization Chart of UE through non-3GPP network insertion mobile core network trusty, and is as shown in Figure 1.Wherein, the intercommunication with non-3 GPP system realizes that through the S2a/S2b/S2c interface P-GW is as the anchor point between 3GPP and non-3 GPP system.In the system architecture diagram of EPS, non-3 GPP system inserts and is divided into trustless non-3GPP access and the non-3GPP access of trusted; Wherein, trustless non-3GPP inserts the packet data gateway (ePDG, EvolvedPacket Data Gateway) that needs through evolution and links to each other with P-GW, and the interface between ePDG and P-GW is S2b; The non-3GPP of trusted inserts and can directly be connected with P-GW through the S2a interface, and the S2a interface adopts PMIP/GTP to carry out information interaction; In addition; The S2c interface provides UE and user plane relevant control and mobility support between the P-GW; The mobility management protocol of its support is for supporting the mobile IP v 6 (DSMIPv6 of two stacks; Mobile IPv6 Support for Dual Stack Hosts and Routers), it can be used for trustless non-3GPP and the non-3GPP access of trusted.
WLAN (WLAN, Wireless Local Area Network) can be used as the non-3GPP of trusted and inserts EPS.Because wlan network itself has two kinds of networking models; Being respectively home gateway (RG, Residential Gateway) is that bridge mode and RG are route pattern, so; When WLAN and EPS intercommunication, need consider the specification requirement of different networking models and EPS intercommunication respectively.
Wherein, when RG is bridge mode, wideband network gateway (BNG; Broadband Network Gateway)/broadband networks RAS (BRAS, Broadband Remote Access Server) needs support proxy-mobile IP (PMIP, Proxy Mobile IP)/GPRS Tunnel Protocol (GTP; GPRS TunnelingProtocol); And can the mobile network be returned to UE for the UE addresses distributed, under this scene, how UE is linked into evolved packet system (EPS through fixed network as non-3 GPP access network trusty; EvolvedPacket System) EPC realizes at present.
Fig. 2 is linked into the Organization Chart of mobile core network for UE through fixed network, and is as shown in Figure 2, when RG is route pattern; During UE visit fixed network services, the concrete steps of flow process are: at first, BNG/BRAS is the IP address that RG distributes fixed network; Be ustomer premises access equipment (CPE, Customer Premise Equipment) address, RG is as DHCP (DHCP then; Dynamic Host Configuration Protocol) Server is through dhcp message, for UE distributes an IP address (being generally privately owned address); UE obtains after this IP address, promptly can be through BNG/BRAS visit fixed network services, wherein; RG has played network address translation (NAT, Network Address Translation) function.But; If UE is through WLAN access mobile core network; The existing message mechanism of route pattern can't trigger BNG/BRAS and send PMIP/GTP message through the S2a interface to mobile core network, is with follow-up operation: the business that to obtain it from mobile core network be the UE IP address allocated, adopt this IP accessed mobile operator to provide all can't be accomplished.
Summary of the invention
In view of this, main purpose of the present invention is to provide a kind of method and system that insert evolved packet system, can make UE pass through network insertions such as fixed network in EPS, has realized the access flexibly and fast of UE to external network and EPS.
For achieving the above object, technical scheme of the present invention is achieved in that
A kind of method that inserts evolved packet system comprises:
UE close with non-3 GPP access network and the non-3 GPP access network aaa server as the agent network element of authentication, initiate authentication that user based on 3GPP insert as authenticating party to the EPS system with local gateway;
Said non-3 GPP access network closes to receive sets up binding relationship to the P-GW of EPS after authentication triggers;
Said P-GW will notify said trusted non-3GPP gateway for the UE IP address allocated for said, and the non-3GPP gateway of said trusted sends to said local gateway through authentication message with said P-GW IP address allocated;
Said local gateway is notified said UE with said P-GW IP address allocated, and perhaps, said local gateway is that said UE distributes local ip address, and notifies said UE with said local ip address.
Preferably, said method also comprises:
Said UE carries out Operational Visit through said P-GW IP address allocated and/or said local ip address.
Preferably, connect based on peer-peer protocol PPP between said UE and the said local gateway.
Preferably, said local gateway is said UE when distributing local ip address, and said method also comprises:
Said local gateway is set the mapping relations and the storage of said local ip address and said P-GW IP address allocated.
Preferably, said UE carries out Operational Visit through said P-GW IP address allocated and/or said local ip address and is specially:
During as the address of access service, packet sends to external network through EPS to said UE with said P-GW IP address allocated;
Perhaps, said local gateway receives after said UE is the packet of source address with said P-GW IP address allocated, sends to external network by non-3 GPP access network after according to local policy said P-GW IP address allocated being replaced by the CPE address;
Perhaps; Said local gateway receives after said UE is the packet of source address with said local ip address; Send to external network according to local policy by non-3 GPP access network, perhaps the source address in the said packet is replaced by said P-GW IP address allocated and is sent to external network through said EPS.
Preferably, said local gateway is home gateway RG, and described non-3 GPP access network closes and is: wideband network gateway BNG/ broadband networks RAS BRAS.
Preferably, after said BNG/BRAS receives the triggering of authentication success message, initiate strategy session and set up; Said strategy session comprises the fixed network strategy session between said BNG/BRAS and the BPCF, and, the S9* session between said BPCF and the said PCRF.
Preferably, said binding relationship is:
When being connected based on PMIP between said BNG/BRAS and the said P-GW, said BNG/BRAS initiates to set up the PMIP tunnel binding through sending PBU message to said P-GW;
When being connected based on GTP between said BNG/BRAS and the said P-GW, said BNG/BRAS sends to said P-GW and creates conversation request message and initiate to set up GTP tunnel and bind.
A kind of system that inserts evolved packet system, said system comprises: UE, non-3 GPP access network, EPS, non-3 GPP access network comprise that local gateway, aaa server and non-3 GPP access network close; EPS comprises P-GW; Non-3 GPP access network closes through non-3 GPP access network and is connected with EPS; Wherein,
UE is used for non-third generation partner program 3GPP IAD and the non-3 GPP access network aaa server agent network element as authentication, initiates authentication that user based on 3GPP insert as authenticating party to evolved packet system EPS system with local gateway;
Said non-3 GPP access network closes, and is used for after receiving the authentication triggering, setting up binding relationship to the P-GW of EPS; And, receiving after P-GW is the UE IP address allocated, said P-GW IP address allocated is sent to said local gateway through authentication message;
Said P-GW is used for notifying said trusted non-3GPP gateway for said for the UE IP address allocated;
Said local gateway is used for notifying said UE with said P-GW IP address allocated, perhaps,, be used to said UE and distribute local ip address, and notify said UE said local ip address.
Preferably, said UE also is used for carrying out Operational Visit through said P-GW IP address allocated and/or said local ip address;
Connect based on PPP between said UE and the said local gateway.
Preferably, said local gateway is said UE when distributing local ip address, and said local gateway also is used to set the mapping relations of said local ip address and said P-GW IP address allocated and store.
Preferably, during as the address of access service, packet sends to external network through EPS to said UE with said P-GW IP address allocated;
Perhaps, said local gateway receives after said UE is the packet of source address with said P-GW IP address allocated, sends to external network by non-3 GPP access network after according to local policy said P-GW IP address allocated being replaced by the CPE address;
Perhaps; Said local gateway receives after said UE is the packet of source address with said local ip address; Send to external network according to local policy by non-3 GPP access network, perhaps the source address in the said packet is replaced by said P-GW IP address allocated and is sent to external network through said EPS.。
Preferably, said local gateway is home gateway RG, and described non-3 GPP access network closes and is: BNG/BRAS.
Among the present invention, when realizing being linked into EPS by UE through fixed networks such as WLAN, at first the gateway through fixed network carries out authentication to the HSS/AAA of EPS, and after authentication was passed through, EPS can distribute an IP address that can be linked into EPS for UE.UE is when initiating to insert; The fixed network gateway can be made according to the source address information in the business of UE and inserted judgement, current business directly is linked into external network or is linked into external network through EPS, wherein; When carrying EPS in the service access request of UE when being the UE IP address allocated; The fixed network gateway generally can be linked into EPS with UE, and carry fixed network be UE distribute local ip address the time, can UE be linked into outer net.The present invention has realized being linked into EPS through fixed network, as far as UE optional access network is provided, and makes things convenient for UE user also can realize being linked into EPS through LANs such as fixed networks and realizes and mobile network user business such as converse.Technical scheme of the present invention has realized the fusion of fixed network and EPS well, has expanded the access capability of UE, for UE user provides plurality of access modes.
Description of drawings
Fig. 1 is the Organization Chart of UE through non-3GPP network insertion mobile core network trusty;
Fig. 2 is linked into the Organization Chart of mobile core network through fixed network for UE;
Fig. 3 inserts the flow chart of the method for evolved packet system for the present invention.
Embodiment
For making the object of the invention, technical scheme and advantage clearer, below lift embodiment and, the present invention is done further explain with reference to accompanying drawing.
In the present invention, RG is called local gateway, and BNG/BRAS is called non-3 GPP access network and closes.
Fig. 3 inserts the flow chart of the method for evolved packet system for the present invention; As shown in Figure 3; The method that this present invention inserts evolved packet system is that RG is under the route pattern; WLAN moves the scene of UE through S2a interface access mobile core net (EPC) as non 3GPP network trusty, and wherein the S2a interface adopts PMIP interface or GTP interface.Wherein, fixed network and mobile network (EPS) are respectively UE and distribute an IP address, and perhaps only (EPS is UE distributing IP address by the mobile network.In UE, preserve two or an IP address.Optional employing DHCP agreement between RG and the BNG/BRAS.The method that the present invention inserts evolved packet system specifically may further comprise the steps:
Step S301 carries out peer-peer protocol (PPP, Point-to-PointProtocol) negotiation and verification process between RG and the BNG/BRAS; In the ppp negotiation process; BNG/BRAS is that RG distributes local ip address, i.e. ustomer premises access equipment (CPE, Customer Premises Equipment) IP.
Step S302 carries out the DHCP negotiations process between UE and the RG, in the DHCP negotiations process, RG is that UE distributes an IP address, is generally private network IP, is called IP2 among the present invention.
More than two steps all be the operation of just having supported in the existing network, therefore need not network is strengthened (upgrading etc.).In the present invention, if UE not from the demand of WLAN by-pass shunt, this step S302 can omit, and does not carry out.If UE only is implemented to the access of EPS through fixed network such as WLAN etc., then need not execution in step S302, in the time of promptly need not passing through the fixed network access external network, needn't execution in step S302.
Step S303 carries out PPP LCP and consults between UE and the RG, and selected authentication mode.Need adopt the EAP authentication because the 3GPP regulation inserts the non-3 GPP access network of EPC, authentication mode selected in this LCP consults is the EAP authentication.
Step S304, RG, BNG/BRAS are as the agency (proxy) of EAP authentication, and also as the agency of EAP authentication, UE inserts through fixed network with mobile network (user among the EPS) identity BBF AAA, and is accomplished to the Certificate Authority of 3GPP HSS/AAA, and authentication mode is EAP.
Step S305, HSS/AAA is to the response message of BPCF transmission EAP authentication success, and BPCF transmits this authentication success message to BNG/BRAS.
Step S306, BNG/BRAS receive the triggering of authentication success message, initiate strategy session and set up.Wherein strategy session comprises the fixed network strategy session between BNG/BRAS and the BPCF, the S9* session between BPCF and the PCRF.This step can be carried out or omitted in different scene.Specifically need be according to connection also is based on the GTP connection and determine whether to omit this step based on PMIP between BNG/BRAS and the P-GW, if connect based on PMIP between BNG/BRAS and the P-GW, then this step is essential step; If connect based on GTP between BNG/BRAS and the P-GW, this step can be omitted.
Step S307, BNG/BRAS receive the triggering of authentication success message, to P-GW request tunnel binding.
If the S2a interface between BNG/BRAS and the P-GW is based on the interface of PMIP, then BNG/BRAS sends PBU message to P-GW; If the S2a interface between BNG/BRAS and the P-GW is based on the interface of GTP, then BNG/BRAS sends to P-GW and creates conversation request message.
Comprise in the wherein above-mentioned tunnel binding request message: APN (APN; Access PointName); International mobile subscriber identity information such as (IMSI, International Mobile Subscriber Identity) is to ask IP address assignment to P-GW.
Step S308, P-GW receive PBU message or create after the conversation request message, carry out the foundation of IP-CAN session between meeting and the PCRF.
Step S309, P-GW carry out the renewal of P-GW sign to HSS.
Step S310, the establishment conversational response message that P-GW replys PBA or GTP to BNG/BRAS, carrying P-GW in this message is the UE IP address allocated, is called IP1.
Step S311, BNG/BRAS receive PBA/ and create after the conversational response message, from message, obtain after the IP1, send to RG through EAP authentication success message.
RG sends authentication success message to UE, wherein can carry address ip 1 in this authentication success message, also can not carry address ip 1.Here, do not carry IP1, then can store this IP1 information, and can distribute the IP address of private network, be referred to herein as IP3, and the mapping relations between IP3 and the IP1 are set to UE at RG if RG sends in the authentication success message to UE.Certainly, aforesaid operations also can carry out in BNG/BRAS, and promptly BNG/BRAS is the IP3 that UE distributes private network, and mapping (Mapping) relation between IP3 and the IP1 is set, and this IP3 information is sent to UE through RG.Its implementation and RG storing IP 1 and IP3 is set and IP1 between mapping relations basic identical.It will be appreciated by those skilled in the art that above-mentioned only is to replenish as what technical scheme of the present invention is realized carry out, is not to be used to limit the present invention.
Step S312 is to step S313, and RG obtains the IP1 address.And the IP1 address is sent to UE through the PPP ipcp negotiation, perhaps, the IP3 address corresponding with IP1 sent to UE.
Wherein, after RG obtains address ip 1, can store this address earlier, wait UE to ask again this address ip 1 to be sent to UE after the ipcp negotiation; Perhaps RG stores this address, and after UE request ipcp negotiation, is the IP3 that UE distributes a private network, on RG, safeguards the mapping relations of IP1 and IP3, and through IPCP message the IP3 address is sent to UE.In step S311, carried out respective description.
Step S314, if the updating strategy of needs is arranged, then PCRF can trigger and can carry out the policy update operation between self and BPCF, BNG/BRAS and the BPCF.
Step S315, UE can carry out transfer of data according to from the distributing strategy that network side/this locality configuration is obtained, and is specific as follows:
A) streamed data (specifically referring to step S315): if UE has obtained the IP2 address, UE can select with IP2 address and PERCOM peripheral communication, and data can be passed through the direct and outer net interconnecting of BNG/BRAS like this.That is to say that if UE selects the IP2 address to carry out Operational Visit as source address, then the fixed network gateway will make UE pass through the direct and outer net interconnecting of BNG/BRAS, realize that promptly the general service of fixed network inserts.
The data (specifically referring to step S316) of b) visiting from mobile network (EPS): need visit through the mobile network when UE judges this business datum, then UE can fill out the IP source address of this service message and be that IP1, destination address are the real purpose address of message; RG, BNG/BRAS and mobile network's equipment all carries out routing forwarding to data and gets final product.That is to say that when UE needs directly through the fixed network access external network, generally select the source address of IP2 address as business, the function that so just realizes like existing fixed network directly is linked into external network; And when UE need visit EPS, select the source address of IP1 as business, like this, the fixed network gateway will be linked into EPS with UE when confirming that professional source address is IP1.
If that UE obtains is IP3, then UE can fill out IP source address that should business and be that IP3, destination address are the real purpose address of message; RG is after receiving this message, and according to the IP1 of this locality preservation and the mapping table of IP3, the IP source address of revising message is IP1, carries out routing forwarding then.That is to say that when UE had only obtained the IP3 address, can only be implemented to the access of EPS this moment.
Step 316: will
Among the present invention,, and only obtained the IP3 address, also can realize data distribution at step S313 if UE does not obtain the IP2 address at step S302.At this moment can dispose corresponding distributing strategy at RG; When UE communicates by letter with outer net with IP3; Which IP stream RG can determine directly be linked into outer net from BNG/BRAS according to strategy; Being replaced by the address ip 3 of this part IP stream by BNG/BRAS is the CPE address (upstream is done inverse operation for downstream) that RG distributes, promptly typical NAT operation; Decision needs the IP stream of access mobile core net (EPS) route for RG, is IP1 address (upstream is done inverse operation for downstream) with the IP3 address substitution of corresponding data bag, can realize being linked into EPS.Here, distributing strategy can be to determine according to the type of business should directly insert outer net or insert EPS, as for the business of setting type, can only be linked into EPS, and set the business outside the type for this, inserts EPS or outer net and all can.For example, also can make corresponding access measuring shunt according to the destination address of business, for example, when the address information in the destination address was the address of setting in the tabulation, business can only be linked into EPS, otherwise business can be linked into EPS or outer net.
Certainly, as a kind of feasible implementation, the action that above-mentioned RG carries out also can and realize by the alternative RG of BNG/BRAS.
Below, through concrete application examples, further illustrate the essence of technical scheme of the present invention.
Application examples one
In the present embodiment, through flow process shown in Figure 3, UE has obtained an IP address ip 1 (not execution in step S302).In step 312 and step 313, RG directly sends to UE with the IP1 address, does not have the IP3 address.All the other flow processs are all identical with above-mentioned illustrated flow process, and its details here repeats no more.
UE has obtained the IP1 address, communicates by letter with external network (inserting through EPS).For upstream data, the encapsulation format of packet is as shown in table 1 below:
Source IP:IP1 Purpose IP Data message
When table 1 packet process RG, BNG/BRAS all is this form, and RG and BNG/BRAS only do general routing function.For downstream data flow, source address and destination address exchange.That is to say,, only carry out the access of EPS if UE has only obtained the IP1 address.
Formulated corresponding distributing strategy if RG is last,, formulated corresponding distributing strategy on the RG though promptly UE has only obtained the IP1 address.Like this, the UE encapsulated data packet is shown in above-mentioned table 1, and packet has arrived after the RG, and RG makes amendment to the source IP address of packet or do not revise, and is concrete, during modification, as shown in table 2 below:
Figure BDA0000046254980000101
Table 2
Concrete, when RG according to distributing strategy, when confirming that the current business packet need send to outer net, will the packet as shown in table 1 that received be revised as structure as shown in table 2.RG is according to distributing strategy, when confirming that the current business packet need send to EPS, with can not making amendment to packet as shown in table 1, but directly sends to BNG/BRAS.
After packet has arrived BNG/BRAS; If BNG/BRAS finds that the source address of packet is the CPE address, then BNG/BRAS directly is routed to outer net with this packet, if BNG/BRAS finds that the source address of packet is IP1; Then this packet is enclosed the tunnel of S2a interface, issued P-GW.For downstream data flow, address substitution is done above-mentioned inverse operation and is got final product, and its realization details that repeats no more here it will be appreciated by those skilled in the art that and realizes that above-mentioned inverse operation is to realize easily.
Application examples two
In the present embodiment, through flow process shown in Figure 3, UE has obtained two IP address: IP2 and IP3.In the present embodiment, above-mentioned flow process comprises step S302.Among step S312 and the step S313, RG is to send to UE behind the IP3 with the IP1 map addresses, and the IP1 address terminates in RG.
UE has obtained the IP2 address, and when communicating with external network, for upstream data, the encapsulation format of packet is as shown in table 4:
Source IP:IP2 Purpose IP Data message
During table 3 packet process RG, RG carries out nat feature, is the CPE address with the IP2 address substitution, as above shown in the table 2.In this case, BNG/BRAS just carries out general routing function, routes a data packet to outer net.For downstream data flow, address substitution is done above-mentioned inverse operation and is got final product, and its realization details that repeats no more here it will be appreciated by those skilled in the art that and realizes that above-mentioned inverse operation is to realize easily.
UE has obtained the IP3 address, and UE communicates by letter with outer net (EPS) through mobile core network with this IP address.The form of UE encapsulated data packet is as shown in table 4:
Source IP:IP3 Purpose IP Data message
Table 4
After packet arrived RG, the source address IP3 address substitution in the RG packet was IP1, as above shown in the table 1.After packet had arrived BNG/BRAS, BNG/BRAS found that the source address of packet is IP1, then this packet was enclosed the tunnel of S2a interface, issued P-GW.For downstream data flow, address substitution is done above-mentioned inverse operation and is got final product, and its realization details that repeats no more here it will be appreciated by those skilled in the art that and realizes that above-mentioned inverse operation is to realize easily.
Application examples three
In the present embodiment, through flow process shown in Figure 3, UE has obtained two IP address: IP2 and IP1.Its operating process is referring to flow chart 3.In the present embodiment, above-mentioned flow process comprises step S302.In step S312 and step S313, RG directly sends to UE with IP1.
UE has obtained the IP2 address, when communicating with external network, because this partial data belongs to streamed data (through the direct access external network of fixed network).For upstream data, the encapsulation format of packet is as shown in table 3.During packet process RG, RG carries out nat feature, and the IP2 address substitution is the CPE address, and is as shown in table 2.BNG/BRAS only does general routing function, routes a data packet to outer net.For downstream data flow, address substitution is made above-mentioned inverse operation and is got final product.
UE has obtained the IP1 address; If desired business data packet is sent to EPS (inserting EPS), then for upstream data, the form of UE encapsulated data packet is like table; Packet all is this form through RG, BNG/BRAS; BNG/BRAS finds that the source address of packet is IP1 after receiving packet, then this packet is enclosed the tunnel of S2a interface, issues P-GW.For downstream data flow, carry out inverse operation and get final product.
Application examples four
In the above-mentioned application examples two, RG has done the mapping of IP1 address and IP3 address, and as a kind of additional realization, this function also can be realized by BNG/BRAS.Be that BNG/BRAS distributed an IP3 address, and supply UE is sent out in this address after the IP1 address arrived BNG/BRAS by P-GW.The last corresponding relation of having safeguarded IP1 and IP3 of BNG/BRAS, when the packet of up-downgoing passed through BNG/BRAS, BNG/BRAS did the IP address substitution according to the encapsulation that the corresponding relation of IP1 and IP3 is done packet, can realize above-mentioned functions equally.
The present invention has also put down in writing a kind of system that inserts evolved packet system, comprising: UE, non-3 GPP access network, EPS, non-3 GPP access network comprise that local gateway, aaa server and non-3 GPP access network close; EPS comprises P-GW; Non-3 GPP access network closes through non-3 GPP access network and is connected with EPS; Wherein,
UE is used for non-third generation partner program 3GPP IAD and the non-3 GPP access network aaa server agent network element as authentication, initiates authentication that user based on 3GPP insert as authenticating party to evolved packet system EPS system with local gateway;
Said non-3 GPP access network closes, and is used for after receiving the authentication triggering, setting up binding relationship to the P-GW of EPS; And, receiving after P-GW is the UE IP address allocated, said P-GW IP address allocated is sent to said local gateway through authentication message;
Said P-GW is used for notifying said trusted non-3GPP gateway for said for the UE IP address allocated;
Said local gateway is used for notifying said UE with said P-GW IP address allocated, perhaps,, be used to said UE and distribute local ip address, and notify said UE said local ip address.
Need to prove that the system of access evolved packet system of the present invention mainly is the fusion that realizes fixed network and EPS, promptly how be implemented to the access of EPS through fixed network.Therefore; The system of access evolved packet system of the present invention, network configuration and the network element that constitutes above-mentioned network configuration all are identical with existing network configuration and existing network element; Its main distinction is; Function and existing elements that above-mentioned each network element is realized are different, and above-mentioned each network element is also different to the mode of Message Processing.Below, with mainly describing with the difference in functionality that existing network element is realized.
During as the address of access service, packet sends to external network through EPS to said UE with said P-GW IP address allocated;
Perhaps, said local gateway receives after said UE is the packet of source address with said P-GW IP address allocated, sends to external network by non-3 GPP access network after according to local policy said P-GW IP address allocated being replaced by the CPE address;
Perhaps; Said local gateway receives after said UE is the packet of source address with said local ip address; Send to external network according to local policy by non-3 GPP access network, perhaps the source address in the said packet is replaced by said P-GW IP address allocated and is sent to external network through said EPS.
The non-3GPP gateway of above-mentioned trusted comprises RG, and BNG/BRAS; Said RG is connected with external network or said EPS through said BNG/BRAS.
Above-mentioned UE also is used for,
Carry out authentication based on the authentication mode of 3GPP to the HSS/AAA of said EPS through the non-3GPP gateway of said trusted;
Said BNG/BRAS also is used for, after the authentication success that receives said EPS triggers, to the grouped data network gateway P-GW of said EPS request tunnel binding; And reception is from the said EPS IP address allocated of said P-GW.
It will be appreciated by those skilled in the art that above-mentioned network configuration can be referring to the interaction flow between the network configuration of existing protocol and each network element shown in Figure 3 and understand.As long as can realize technique scheme of the present invention, do not limit concrete implementation structure.The function that each network element in the system of the present invention can be realized specifically can be referring to the interaction flow between aforementioned each network element shown in Figure 3 and understand.
The above is merely preferred embodiment of the present invention, is not to be used to limit protection scope of the present invention.

Claims (13)

1. a method that inserts evolved packet system is characterized in that, said method comprises:
User equipment (UE) is with non-third generation partner program 3GPP IAD and the non-3 GPP access network authentication charging aaa server agent network element as authentication, initiates authentication that user based on 3GPP insert as authenticating party to evolved packet system EPS system with local gateway;
Said non-3 GPP access network closes to receive sets up binding relationship to the P-GW of EPS after authentication triggers;
Said P-GW will notify said trusted non-3GPP gateway for the UE IP address allocated for said, and the non-3GPP gateway of said trusted sends to said local gateway through authentication message with said P-GW IP address allocated;
Said local gateway is notified said UE with said P-GW IP address allocated, and perhaps, said local gateway is that said UE distributes local ip address, and notifies said UE with said local ip address.
2. method according to claim 1 is characterized in that, said method also comprises:
Said UE carries out Operational Visit through said P-GW IP address allocated and/or said local ip address.
3. method according to claim 1 is characterized in that, connects based on peer-peer protocol PPP between said UE and the said local gateway.
4. method according to claim 1 is characterized in that, said local gateway is said UE when distributing local ip address, and said method also comprises:
Said local gateway is set the mapping relations and the storage of said local ip address and said P-GW IP address allocated.
5. method according to claim 2 is characterized in that, said UE carries out Operational Visit through said P-GW IP address allocated and/or said local ip address and is specially:
During as the address of access service, packet sends to external network through EPS to said UE with said P-GW IP address allocated;
Perhaps, said local gateway receives after said UE is the packet of source address with said P-GW IP address allocated, sends to external network by non-3 GPP access network after according to local policy said P-GW IP address allocated being replaced by the CPE address;
Perhaps; Said local gateway receives after said UE is the packet of source address with said local ip address; Send to external network according to local policy by non-3 GPP access network, perhaps the source address in the said packet is replaced by said P-GW IP address allocated and is sent to external network through said EPS.
6. according to each described method of claim 1 to 5, it is characterized in that said local gateway is home gateway RG, described non-3 GPP access network closes and is: wideband network gateway BNG/ broadband networks RAS BRAS.
7. method according to claim 6 is characterized in that, after said BNG/BRAS receives the triggering of authentication success message, initiates strategy session and sets up; Said strategy session comprises the fixed network strategy session between said BNG/BRAS and the BPCF, and, the S9* session between said BPCF and the said PCRF.
8. method according to claim 1 is characterized in that, said binding relationship is:
When being connected based on PMIP between said BNG/BRAS and the said P-GW, said BNG/BRAS initiates to set up the PMIP tunnel binding through sending PBU message to said P-GW;
When being connected based on GTP between said BNG/BRAS and the said P-GW, said BNG/BRAS sends to said P-GW and creates conversation request message and initiate to set up GTP tunnel and bind.
9. a system that inserts evolved packet system is characterized in that, said system comprises: UE, non-3 GPP access network, EPS, non-3 GPP access network comprise that local gateway, aaa server and non-3 GPP access network close; EPS comprises P-GW; Non-3 GPP access network closes through non-3 GPP access network and is connected with EPS; Wherein,
UE is used for non-third generation partner program 3GPP IAD and the non-3 GPP access network aaa server agent network element as authentication, initiates authentication that user based on 3GPP insert as authenticating party to evolved packet system EPS system with local gateway;
Said non-3 GPP access network closes, and is used for after receiving the authentication triggering, setting up binding relationship to the P-GW of EPS; And, receiving after P-GW is the UE IP address allocated, said P-GW IP address allocated is sent to said local gateway through authentication message;
Said P-GW is used for notifying said trusted non-3GPP gateway for said for the UE IP address allocated;
Said local gateway is used for notifying said UE with said P-GW IP address allocated, perhaps,, be used to said UE and distribute local ip address, and notify said UE said local ip address.
10. system according to claim 9 is characterized in that, said UE also is used for carrying out Operational Visit through said P-GW IP address allocated and/or said local ip address;
Connect based on PPP between said UE and the said local gateway.
11. system according to claim 9 is characterized in that, said local gateway is said UE when distributing local ip address, and said local gateway also is used to set the mapping relations of said local ip address and said P-GW IP address allocated and store.
12. system according to claim 10 is characterized in that, during as the address of access service, packet sends to external network through EPS to said UE with said P-GW IP address allocated;
Perhaps, said local gateway receives after said UE is the packet of source address with said P-GW IP address allocated, sends to external network by non-3 GPP access network after according to local policy said P-GW IP address allocated being replaced by the CPE address;
Perhaps; Said local gateway receives after said UE is the packet of source address with said local ip address; Send to external network according to local policy by non-3 GPP access network, perhaps the source address in the said packet is replaced by said P-GW IP address allocated and is sent to external network through said EPS.。
13., it is characterized in that said local gateway is home gateway RG according to each described system of claim 9 to 12, described non-3 GPP access network closes and is: BNG/BRAS.
CN201110033382.4A 2011-01-30 2011-01-30 Access the method and system of evolved packet system Expired - Fee Related CN102625305B (en)

Priority Applications (2)

Application Number Priority Date Filing Date Title
CN201110033382.4A CN102625305B (en) 2011-01-30 2011-01-30 Access the method and system of evolved packet system
PCT/CN2011/084314 WO2012100611A1 (en) 2011-01-30 2011-12-21 Method and system for accessing evolved packet system

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201110033382.4A CN102625305B (en) 2011-01-30 2011-01-30 Access the method and system of evolved packet system

Publications (2)

Publication Number Publication Date
CN102625305A true CN102625305A (en) 2012-08-01
CN102625305B CN102625305B (en) 2017-05-31

Family

ID=46564950

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201110033382.4A Expired - Fee Related CN102625305B (en) 2011-01-30 2011-01-30 Access the method and system of evolved packet system

Country Status (2)

Country Link
CN (1) CN102625305B (en)
WO (1) WO2012100611A1 (en)

Cited By (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2013166817A1 (en) * 2012-09-07 2013-11-14 中兴通讯股份有限公司 Data message transmission method, pdn connection identification processing method, and device
CN103906055A (en) * 2012-12-24 2014-07-02 中兴通讯股份有限公司 Service data distribution method and service data distribution system
CN106664558A (en) * 2015-05-15 2017-05-10 华为技术有限公司 Method and apparatus for establishing connection
CN108616612A (en) * 2018-04-09 2018-10-02 海能达通信股份有限公司 A kind of downlink data transmission method and device
CN108737580A (en) * 2017-04-13 2018-11-02 电信科学技术研究院 A kind of IP address configuration method and device
CN109788578A (en) * 2017-11-14 2019-05-21 北京佰才邦技术有限公司 A kind of method, the network equipment and terminal device that LTE polymerize with WIFI

Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101414998A (en) * 2007-10-15 2009-04-22 华为技术有限公司 Communication method, system and equipment based on authentication mechanism conversion
CN101778446A (en) * 2009-01-09 2010-07-14 中兴通讯股份有限公司 Multiple access control method and device and multiple access indicating method in development grouping system
WO2010081554A1 (en) * 2009-01-15 2010-07-22 Telefonaktiebolaget Lm Ericsson (Publ) PROXY MOBILE IPv6 SUPPORT IN RESIDENTIAL NETWORKS

Family Cites Families (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101420792B (en) * 2007-10-23 2010-07-07 华为技术有限公司 Gateway anchor point distributing method, network side device and user terminal

Patent Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101414998A (en) * 2007-10-15 2009-04-22 华为技术有限公司 Communication method, system and equipment based on authentication mechanism conversion
CN101778446A (en) * 2009-01-09 2010-07-14 中兴通讯股份有限公司 Multiple access control method and device and multiple access indicating method in development grouping system
WO2010081554A1 (en) * 2009-01-15 2010-07-22 Telefonaktiebolaget Lm Ericsson (Publ) PROXY MOBILE IPv6 SUPPORT IN RESIDENTIAL NETWORKS

Cited By (13)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN103686846A (en) * 2012-09-07 2014-03-26 中兴通讯股份有限公司 Data message transmission method, and PDN (Public Data Network) connection identifier processing method and device
CN103686846B (en) * 2012-09-07 2019-04-05 中兴通讯股份有限公司 Data message transmission method, PDN connection identifier processing method and device
WO2013166817A1 (en) * 2012-09-07 2013-11-14 中兴通讯股份有限公司 Data message transmission method, pdn connection identification processing method, and device
CN103906055A (en) * 2012-12-24 2014-07-02 中兴通讯股份有限公司 Service data distribution method and service data distribution system
US9825951B2 (en) 2012-12-24 2017-11-21 Xi'an Zhongxing New Software Co.Ltd. Method and system for distributing service data
CN103906055B (en) * 2012-12-24 2017-12-26 中兴通讯股份有限公司 Business datum shunt method and system
CN106664558B (en) * 2015-05-15 2020-01-10 华为技术有限公司 Method and device for establishing a connection
CN106664558A (en) * 2015-05-15 2017-05-10 华为技术有限公司 Method and apparatus for establishing connection
CN108737580B (en) * 2017-04-13 2021-05-07 电信科学技术研究院 IP address configuration method and device
CN108737580A (en) * 2017-04-13 2018-11-02 电信科学技术研究院 A kind of IP address configuration method and device
CN109788578A (en) * 2017-11-14 2019-05-21 北京佰才邦技术有限公司 A kind of method, the network equipment and terminal device that LTE polymerize with WIFI
CN108616612A (en) * 2018-04-09 2018-10-02 海能达通信股份有限公司 A kind of downlink data transmission method and device
CN108616612B (en) * 2018-04-09 2021-11-02 海能达通信股份有限公司 Downlink data transmission method and device

Also Published As

Publication number Publication date
CN102625305B (en) 2017-05-31
WO2012100611A1 (en) 2012-08-02

Similar Documents

Publication Publication Date Title
CN101227391B (en) method for selecting function entity of tactics and charging rules under non-roaming condition
CN101150782B (en) A selection method for policy billing control server
CN103348717B (en) Mobile router in EPS
US10432632B2 (en) Method for establishing network connection, gateway, and terminal
CN101150418B (en) A selection method for policy billing control server
CN104618891B (en) A kind of communication means, terminal and core network entity
CN102340866B (en) A kind of method and system of reporting access information of fixed network
CN102695236B (en) A kind of data routing method and system
JP5192047B2 (en) Communication control system, communication system, and communication control method
CN102217363A (en) System and method for name binding for multiple packet data network access
US9113436B2 (en) Method and system for information transmission
CN103313344B (en) The core net and its cut-in method of fusion
TW200803301A (en) Automatic selection of a home agent
US20120113968A1 (en) Multiple access method and system of terminal in evovled packet system
CN102625305A (en) Method for accessing evolved packet system and system thereof
CN103517249A (en) Method, device and system of strategy control
CN103813288A (en) Method, system, and network element for achieving network as a service (NaaS) based on mobile network
CN103428800A (en) Route selection method and functional network element
CN102480528B (en) IAD system of selection and device
CN102347892B (en) A kind of method and system of acquiring user access information by network equipment
CN103188667A (en) WLAN access method, WAG and network fusion system
CN103188657A (en) Method and system for assigning IP addresses to UE
CN103975641B (en) A kind of session establishing method and device
CN101426240B (en) Method and apparatus for controlling switching of control node between heterogeneous access networks
CN101399855B (en) System, apparatus and method for obtaining home address

Legal Events

Date Code Title Description
C06 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
GR01 Patent grant
GR01 Patent grant
CF01 Termination of patent right due to non-payment of annual fee
CF01 Termination of patent right due to non-payment of annual fee

Granted publication date: 20170531

Termination date: 20190130