CN108882224B - User identity information distribution method and access service router - Google Patents

User identity information distribution method and access service router Download PDF

Info

Publication number
CN108882224B
CN108882224B CN201710335966.4A CN201710335966A CN108882224B CN 108882224 B CN108882224 B CN 108882224B CN 201710335966 A CN201710335966 A CN 201710335966A CN 108882224 B CN108882224 B CN 108882224B
Authority
CN
China
Prior art keywords
identity
user
temporary identifier
identity information
user terminal
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
CN201710335966.4A
Other languages
Chinese (zh)
Other versions
CN108882224A (en
Inventor
陈春蕾
刘晴
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
ZTE Corp
Original Assignee
ZTE Corp
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by ZTE Corp filed Critical ZTE Corp
Priority to CN201710335966.4A priority Critical patent/CN108882224B/en
Publication of CN108882224A publication Critical patent/CN108882224A/en
Application granted granted Critical
Publication of CN108882224B publication Critical patent/CN108882224B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W8/00—Network data management
    • H04W8/26—Network addressing or numbering for mobility support
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L43/00—Arrangements for monitoring or testing data switching networks
    • H04L43/08—Monitoring or testing based on specific metrics, e.g. QoS, energy consumption or environmental parameters
    • H04L43/0823—Errors, e.g. transmission errors
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L43/00—Arrangements for monitoring or testing data switching networks
    • H04L43/10—Active monitoring, e.g. heartbeat, ping or trace-route
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L43/00—Arrangements for monitoring or testing data switching networks
    • H04L43/16—Threshold monitoring
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L45/00—Routing or path finding of packets in data switching networks
    • H04L45/74—Address processing for routing
    • H04L45/741—Routing in networks with a plurality of addressing schemes, e.g. with both IPv4 and IPv6
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L61/00—Network arrangements, protocols or services for addressing or naming
    • H04L61/50—Address allocation
    • H04L61/5007—Internet protocol [IP] addresses
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L67/00—Network arrangements or protocols for supporting network services or applications
    • H04L67/14—Session management
    • H04L67/141—Setup of application sessions
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L69/00—Network arrangements, protocols or services independent of the application payload and not provided for in the other groups of this subclass
    • H04L69/16—Implementation or adaptation of Internet protocol [IP], of transmission control protocol [TCP] or of user datagram protocol [UDP]
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/06—Authentication
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W48/00—Access restriction; Network selection; Access point selection
    • H04W48/02—Access restriction performed under specific conditions

Abstract

The invention discloses a method for distributing user identity information and an access service router, which comprises the following steps: after receiving an online request message carrying user identity information requesting for distribution sent by a user terminal, an access service router judges whether an identity location register can be reached; and if the identity position register is not reachable, the access service router acquires the assignable temporary identifier and sends the temporary identifier to the user terminal, wherein the temporary identifier is used for identifying the temporary user identity information of the user terminal. According to the invention, the temporary identifier is allocated to the user terminal when the identity position register is not reachable, so that the user terminal can access the network at any time, the successful online probability of the user terminal is improved, and the user experience is improved.

Description

User identity information distribution method and access service router
Technical Field
The present invention relates to the field of mobile communications technologies, and in particular, to a method for allocating user identity information and an access service router.
Background
An IP address in a Transmission Control Protocol/Internet Protocol (TCP/IP, Transmission Control Protocol/Internet Protocol) Protocol widely used by the existing Internet has a dual function, and is used as a position identifier of a communication terminal host network interface of a network layer in a network topology and also as an identity identifier of a host network interface of a Transmission layer. With the development of mobile networks, when the movement of end hosts becomes more and more common, the defect of dual functions of the IP address becomes more and more obvious, and the routing expandability of the internet and the continuity of communication services are directly affected.
The purpose of the identity identification and location separation technology is to separate the dual functions of the IP address in order to solve the problems of semantic overload, serious routing load and the like of the IP address, thereby perfecting the mechanisms in the aspects of mobility management, routing, safety and the like and providing support for the problems of mutual access and the like among different network areas in the next generation of Internet.
Fig. 1 is a Network architecture of an id and location Separation technology system, and for convenience of description, this Subscriber identity and location Separation Network (sisn, Subscriber identity & location Separation Network) is referred to as an id and location Separation Network, and mobile nodes in the Network have two types of identifiers: an identity Identifier (AID) and a Routing-Location Identifier (RID). The SILSN configures a unique AID for each user in the network, which remains unchanged throughout the move; the network is divided into an access layer and a core layer, and in the data forwarding process, AID can be used only in the access layer, and RID can be used only in the core layer; and when the application layer communication is carried out between the user terminals, the AID is used for identifying the opposite terminal.
As shown in fig. 1, the identity location separation network mainly includes: a User Equipment (UE), an Access Service Router (ASR), an Identity Location Register (ILR), and the like. Wherein:
the UE may be a terminal with a fixed location, or an access device with a mobile location;
ASR is mainly responsible for user terminal access authentication, AID allocation inquiry to ILR, identification mapping conversion, data packet encapsulation/decapsulation and the like;
the ILR is mainly responsible for maintaining the mapping relation between the user identity identifier and the routing position identifier in the network, and processing AID/RID mapping relation registration of the ASR and inquiring AID distribution requests.
However, since the id location register is a remote server accessing the service router, when the ILR is not reachable, for example, the routing between the ASR and the ILR is not through or the ILR is down, the user terminal cannot acquire the id AID, and further cannot access the network, which affects the normal internet work of the user.
Disclosure of Invention
In order to solve the technical problem, the invention provides a method for distributing user identity information and an access service router, which ensure that a user terminal can access a network when ILR is not reachable.
In order to achieve the purpose of the invention, the technical scheme of the embodiment of the invention is realized as follows:
the embodiment of the invention provides a method for distributing user identity information, which comprises the following steps:
after receiving an online request message carrying user identity information requesting for distribution sent by a user terminal, an access service router judges whether an identity location register can be reached;
and if the identity position register is not reachable, the access service router acquires the assignable temporary identifier and sends the temporary identifier to the user terminal, wherein the temporary identifier is used for identifying the temporary user identity information of the user terminal.
Further, the method further comprises:
after receiving an online notification message carrying the user identity information sent by the user terminal, the access service router judges whether the user identity information is a temporary identifier;
if the user identity information is not the temporary identifier, the access service router maps the user identity information with preset routing position identification information and sends the mapping relation to the identity position register.
Further, the method further comprises:
when the access service router judges whether the user identity information is the temporary identifier, the access service router also judges whether the identity position register is reachable;
if the user identity information is a temporary identifier and the identity location register is reachable, or if the user identity information is not a temporary identifier and the identity location register is not reachable, the access service router sends a negative confirmation message to the user terminal, wherein the negative confirmation message is used for notifying the user terminal to re-request the allocation of the user identity information.
Further, the method further comprises:
when the access service router judges whether the user identity information is the temporary identifier, the access service router also judges whether the identity position register is reachable;
and if the user identity information is a temporary identifier and the identity position register can be reached, the access service router sends a confirmation message to the user terminal, and the confirmation message is used for informing the user terminal of successful online.
Further, the determining whether the identity location register is reachable specifically includes:
the access service router starts a timer for maintaining a preset waiting time when sending an inquiry request message for inquiring user identification information to an identity position register or sending a mapping relation between the user identification information and the routing position identification information each time;
the access service router judges whether a response message returned by the identity position register is received or not within a waiting time preset by a timer, and if the response message returned by the identity position register is received within the waiting time, the identity position register is judged to be reachable; and if the response message returned by the identity position register is not received within the waiting time, judging that the identity position register is unreachable.
Further, the determining whether the identity location register is reachable specifically includes:
the access service router sends an ICMP request message or a TCP on-line request message to the identity location register and detects whether a response message returned by the identity location register is received;
if a response message returned by the identity position register is received, judging that the identity position register can be reached; and if the response message returned by the identity position register is not received, judging that the identity position register is not reachable.
Further, the determining whether the identity location register is reachable specifically includes:
the access service router sends an ICMP request message to the identity location register and detects whether a response message returned by the identity location register and the packet loss rate of the response message are received;
if a response message returned by the identity position register is received and the packet loss rate of the response message is less than or equal to a preset maximum packet loss rate threshold value, judging that the identity position register can be reached; and if the response message returned by the identity position register is not received or the packet loss rate of the response message is greater than the preset maximum packet loss rate threshold value, judging that the identity position register is unreachable.
The embodiment of the invention also provides an access service router, which comprises a processor, a memory and a communication bus, wherein the processor is in communication connection with the memory through the communication bus; wherein the content of the first and second substances,
the memory is used for storing a user identity information distribution program;
the processor is used for calling the user identity information distribution program stored in the memory and executing the following steps:
after receiving an online request message which is sent by a user terminal and carries user identity information requesting to be distributed, judging whether an identity position register can be reached or not;
and if the identity position register is not reachable, acquiring a distributable temporary identifier, and sending the temporary identifier to the user terminal, wherein the temporary identifier is used for identifying the temporary user identity information of the user terminal.
Further, after the step of sending the temporary identifier to the user terminal, the processor is further configured to invoke the user identity information assignment program to perform the following steps:
judging whether the user identity information is a temporary identifier or not after receiving an online notification message which is sent by the user terminal and carries the user identity information;
and if the user identity information is not the temporary identifier, mapping the user identity information and preset routing position identification information, and sending the mapping relation to the identity position register.
Further, after the step of determining whether the user identity information is a temporary identifier, the processor is further configured to invoke the user identity information allocation program to perform the following steps:
judging whether the identity position register is reachable:
and if the user identity information is a temporary identifier and the identity location register is reachable, or if the user identity information is not the temporary identifier and the identity location register is not reachable, sending a negative confirmation message to the user terminal, wherein the negative confirmation message is used for notifying the user terminal to re-request the allocation of the user identity information.
The technical scheme of the invention has the following beneficial effects:
according to the user identity information distribution method and the access service router provided by the invention, the temporary identifier is distributed to the user terminal when the identity position register is not accessible, so that the user terminal can be accessed to the network at any time, the successful online probability of the user terminal is improved, and the user experience is improved.
Drawings
The accompanying drawings, which are included to provide a further understanding of the invention and are incorporated in and constitute a part of this application, illustrate embodiment(s) of the invention and together with the description serve to explain the invention without limiting the invention. In the drawings:
fig. 1 is a schematic structural diagram of a conventional identity and location separation network;
fig. 2 is a schematic flow chart of a once-completed successful user terminal online in an existing identity and location separation network;
fig. 3 is a schematic flow chart of a method for distributing user identity information according to an embodiment of the present invention;
fig. 4 is a schematic structural diagram of an access service router according to an embodiment of the present invention;
fig. 5 is a schematic diagram of an online process of a user terminal using the first embodiment of the method for distributing user identity information according to the present invention;
fig. 6 is a schematic diagram of an online process of a user terminal using a second embodiment of the method for distributing user identity information according to the present invention;
fig. 7 is a schematic diagram of an online process of a user terminal using a third embodiment of the method for allocating user identity information according to the present invention;
fig. 8 is a schematic diagram of an online process of a user terminal using a fourth embodiment of the method for allocating user identity information in the present invention.
Detailed Description
In order to make the objects, technical solutions and advantages of the present invention more apparent, embodiments of the present invention will be described in detail below with reference to the accompanying drawings. It should be noted that the embodiments and features of the embodiments in the present application may be arbitrarily combined with each other without conflict.
Referring to fig. 2, a once complete successful user terminal online process in the existing identity and location separation network includes the following steps:
step 201: a user terminal initiates an online request message to an ASR, wherein the online request message carries identity information of a request distribution user;
step 202: after receiving the on-line request message, the ASR requests the ILR to inquire a user identifier AID, wherein the message carries user identity information (user name or/and MAC);
step 203: the ILR sends an AID query response message to the ASR, wherein the AID query response message carries a user identifier AID;
step 204: the ASR sends an online response ACK to the user terminal, wherein the online response ACK carries a user identifier AID;
step 205: a user terminal initiates an online notification message to an ASR, wherein the online notification message carries a user identifier AID;
step 206: the ASR maps the user identification AID and a preset routing location identification RID, and sends the mapping relation to the ILR so as to facilitate other user terminals to inquire and access;
step 207: the ILR sends a notification response message to the ASR;
step 208: and the ASR sends an ACK confirmation message to the user terminal to inform the user terminal of successful online.
Referring to fig. 3, an embodiment of the present invention provides a method for allocating user identity information, including the following steps:
after receiving an online request message carrying user identity information requesting for distribution sent by a user terminal, an access service router judges whether an identity location register can be reached;
and if the identity position register is not reachable, the access service router acquires the assignable temporary identifier and sends the temporary identifier to the user terminal, wherein the temporary identifier is used for identifying the temporary user identity information of the user terminal.
It should be noted that the temporary identifier in the present invention cannot be overlapped with the identity identifier AID stored in the identity location register, so as to avoid occupying the identity identifiers of other network devices. Specifically, a temporary identifier segment to be allocated may be stored in the storage unit in advance, and the temporary identifier segment and the identifier segment in the identifier location register are not overlapped with each other.
Optionally, the temporary identifier is an IP address.
Further, the allocation method further comprises:
after receiving an online notification message carrying user identity information sent by a user terminal, the access service router judges whether the user identity information is a temporary identifier;
and if the user identity information is not the temporary identifier, the access service router maps the user identity information with preset routing position identification information and sends the mapping relation to an identity position register.
It should be noted that, after receiving the mapping relationship between the user identity information and the routing location identification information AID-RID, the identity location register records the mapping relationship between the user identity information and the routing location identification information AID-RID, and returns a notification response message, and after receiving the notification response message, the access service router sends an acknowledgement ACK message to the user terminal, where the acknowledgement ACK message is used to notify the user terminal that the access service is successful.
Further, the allocation method further comprises:
when the access service router judges whether the user identity information is a temporary identifier, the access service router also judges whether the identity position register is reachable;
if the user identity information is a temporary identifier and the identity location register is reachable, or if the user identity information is not a temporary identifier and the identity location register is not reachable, the access service router sends a Negative Acknowledgement (NAK) message to the user terminal, wherein the NAK message is used for informing the user terminal to request the allocation of the user identity information again.
Further, the allocation method further comprises:
when the access service router judges whether the user identity information is a temporary identifier, the access service router also judges whether the identity position register is reachable;
and if the user identity information is a temporary identifier and the identity position register can be reached, the access service router sends an Acknowledgement (ACK) message to the user terminal, wherein the ACK message is used for informing the user terminal of successful online.
It is worth to be noted that, in the invention, for the user terminal to which the temporary identifier has been allocated, when the status of the identity location register changes from unreachable to reachable, a negative acknowledgement NAK message can be sent to the user terminal, the user is forced to be offline, and the user identity information is requested to be allocated again; the ACK message may also be sent to the user terminal, without forcing the user to go offline, and at this time, the ACK message may be directly sent to the user terminal instead of sending the second online notification packet carrying the mapping relationship between the user identity information and the routing location identification information AID-RID to the identity location register, so as to notify the user terminal that the online is successful.
Further, the specific method for determining whether the identity location register is reachable includes: the access service router starts a timer for maintaining a preset waiting time when sending an inquiry request message for inquiring user identification information to an identity position register or sending a mapping relation between the user identification information and the routing position identification information each time;
judging whether a response message returned by the identity position register is received or not within a preset waiting time of a timer, and judging that the identity position register can reach the end if the response message returned by the identity position register is received within the waiting time; and if the response message returned by the identity position register is not received within the waiting time, judging that the identity position register is unreachable.
Further, the access service router judges whether the identity location register is reachable or not in a Ping manner.
Specifically, the access service router sends an ICMP (Internet Control Message Protocol) request Message to the identity location register, and if a response Message returned by the identity location register is received, it is determined that the identity location register is reachable; otherwise, it is not reachable.
Further, when the access service router sends an ICMP request message to the identity location register, whether a response message returned by the identity location register is received or not and the packet loss rate of the response message are detected;
if a response message returned by the identity position register is received and the packet loss rate of the response message is less than or equal to a preset maximum packet loss rate threshold value, judging that the identity position register can be reached; and if the response message returned by the identity position register is not received or the packet loss rate of the response message is greater than the preset maximum packet loss rate threshold value, judging that the identity position register is unreachable.
Further, the access service router determines whether the id location register is reachable by establishing a Transmission Control Protocol (TCP) connection with the id location register.
Specifically, the access service router sends a TCP connection request message to the identity location register, and detects whether a response message returned by the identity location register is received;
if a response message returned by the identity position register is received, judging that the identity position register can be reached; and if the response message returned by the identity position register is not received, judging that the identity position register is not reachable.
Further, the TCP connection request packet sent by the access service router to the identity location register is a heartbeat (heartbeat Alive) packet, where the heartbeat packet is used to detect whether the TCP connection is valid and is sent every preset fixed time threshold.
It should be noted that the access service router may also determine whether the id location register is reachable by establishing a User Datagram Protocol (UDP) connection with the id location register. In addition, the method for distributing the user identity information can be used in an access service router and can also be used in other equipment needing to distribute the identity information for the user terminal.
Referring to fig. 4, an embodiment of the present invention further provides an access service router 400, where the access service router 400 includes a processor 401, a memory 402, and a communication bus 403, and the processor 401 and the memory 402 are communicatively connected through the communication bus 403; wherein the content of the first and second substances,
the memory 402 is used for storing a user identity information distribution program;
the processor 401 is configured to invoke the user identity information allocation program stored in the memory, and execute the following steps:
after receiving an online request message which is sent by a user terminal and carries user identity information requesting to be distributed, judging whether an identity position register can be reached or not;
and if the identity position register is not reachable, acquiring a distributable temporary identifier, and sending the temporary identifier to the user terminal, wherein the temporary identifier is used for identifying the temporary user identity information of the user terminal.
It should be noted that the temporary identifier in the present invention cannot be overlapped with the identity identifier AID stored in the identity location register, so as to avoid occupying the identity identifiers of other network devices. Specifically, a temporary identifier segment to be allocated may be stored in the storage unit in advance, and the temporary identifier segment and the identifier segment in the identifier location register are not overlapped with each other.
Optionally, the temporary identifier is an IP address.
Further, after the step of sending the temporary identifier to the user terminal, the processor 401 is further configured to invoke the user identity information allocation program to perform the following steps:
judging whether the user identity information is a temporary identifier or not after receiving an online notification message which is sent by the user terminal and carries the user identity information;
and if the user identity information is not the temporary identifier, mapping the user identity information and preset routing position identification information, and sending the mapping relation to the identity position register.
It should be noted that, after receiving the mapping relationship between the user identity information and the routing location identification information AID-RID, the identity location register records the mapping relationship between the user identity information and the routing location identification information AID-RID, and returns a notification response message, and after receiving the notification response message, the access service router sends an acknowledgement ACK message to the user terminal, where the acknowledgement ACK message is used to notify the user terminal that the access service is successful.
Further, after the step of determining whether the user identity information is a temporary identifier, the processor 401 is further configured to invoke the user identity information allocation program to perform the following steps:
judging whether the identity position register is reachable:
if the user identity information is a temporary identifier and the identity location register is reachable, or if the user identity information is not a temporary identifier and the identity location register is not reachable, sending a Negative Acknowledgement (NAK) message to the user terminal, wherein the NAK message is used for informing the user terminal to re-request the allocation of the user identity information.
Further, after the step of determining whether the user identity information is a temporary identifier, the processor 401 is further configured to invoke the user identity information allocation program to perform the following steps:
judging whether the identity position register is reachable:
and if the user identity information is a temporary identifier and the identity position register can be reached, the access service router sends an Acknowledgement (ACK) message to the user terminal, wherein the ACK message is used for informing the user terminal of successful online.
It is worth to be noted that, in the invention, for the user terminal to which the temporary identifier has been allocated, when the status of the identity location register changes from unreachable to reachable, a negative acknowledgement NAK message can be sent to the user terminal, the user is forced to be offline, and the user identity information is requested to be allocated again; the ACK message may also be sent to the user terminal, without forcing the user to go offline, and at this time, the ACK message may be directly sent to the user terminal instead of sending the second online notification packet carrying the mapping relationship between the user identity information and the routing location identification information AID-RID to the identity location register, so as to notify the user terminal that the online is successful.
Further, the specific method for determining whether the identity location register is reachable includes: the access service router starts a timer for maintaining a preset waiting time when sending an inquiry request message for inquiring user identification information to an identity position register or sending a mapping relation between the user identification information and the routing position identification information each time;
judging whether a response message returned by the identity position register is received or not within a preset waiting time of a timer, and judging that the identity position register can reach the end if the response message returned by the identity position register is received within the waiting time; and if the response message returned by the identity position register is not received within the waiting time, judging that the identity position register is unreachable.
Further, the access service router judges whether the identity location register is reachable or not in a Ping manner.
Specifically, the access service router sends an ICMP (Internet Control Message Protocol) request Message to the identity location register, and if a response Message returned by the identity location register is received, it is determined that the identity location register is reachable; otherwise, it is not reachable.
Further, when the access service router sends an ICMP request message to the identity location register, whether a response message returned by the identity location register is received or not and the packet loss rate of the response message are detected;
if a response message returned by the identity position register is received and the packet loss rate of the response message is less than or equal to a preset maximum packet loss rate threshold value, judging that the identity position register can be reached; and if the response message returned by the identity position register is not received or the packet loss rate of the response message is greater than the preset maximum packet loss rate threshold value, judging that the identity position register is unreachable.
Further, the access service router determines whether the id location register is reachable by establishing a Transmission Control Protocol (TCP) connection with the id location register.
Specifically, the access service router sends a TCP connection request message to the identity location register, and detects whether a response message returned by the identity location register is received;
if a response message returned by the identity position register is received, judging that the identity position register can be reached; and if the response message returned by the identity position register is not received, judging that the identity position register is not reachable.
Further, the TCP connection request packet sent by the access service router to the identity location register is a heartbeat (heartbeat Alive) packet, where the heartbeat packet is used to detect whether the TCP connection is valid and is sent every preset fixed time threshold.
It should be noted that the access service router may also determine whether the id location register is reachable by establishing a User Datagram Protocol (UDP) connection with the id location register. In addition, the method for distributing the user identity information can be used in an access service router and can also be used in other equipment needing to distribute the identity information for the user terminal.
The first embodiment is as follows:
fig. 5 is a user terminal online process when the user terminal acquires the temporary identifier and sends an online notification while the identity location register is still unreachable, referring to fig. 5, where the user online process includes the following steps:
step 501: a user terminal initiates an online request message to an ASR;
the online request message may include the following information: the user name and/or MAC of the terminal user, and the routing position identification RID of the ASR where the current terminal is on-line;
step 502: after receiving the online request message, the ASR judges whether the ILR can be reached;
in this embodiment, a method for establishing a keep-alive mechanism is used to detect whether ILR is reachable, and a tcp heartbeat packet may be specifically used.
Step 503: after the ASR judges that the ILR can not reach, applying for a temporary identifier in a temporary identifier pool stored locally;
the temporary identifier pool is used for storing temporary identifiers, and the temporary identifiers are used for being allocated to on-line user terminals when ILR is not reachable; the local temporary identifier field must not coincide with the user identifier AID field on the ILR to avoid occupying fixed identifiers of other network devices.
Step 504: the ASR sends an online response ACK to the user terminal, wherein the online response ACK carries a temporary identifier distributed by the ASR for the user;
step 505: the user terminal initiates an online notification message to the ASR, wherein the online notification message carries the acquired temporary identifier;
step 506: ASR judges whether ILR can be reached;
step 507: after the ASR judges that the ILR can not be reached, judging whether the user identification carried by the online notification message is a temporary identification or not;
the method for distinguishing the user identity AID from the user identity, wherein the method for distinguishing the user identity comprises the steps of dividing an user identity AID domain and a temporary identity domain on an ASR, and if an identity carried by an online notification message is in the user identity AID domain, the identity is a fixed identity; the temporary identifier in the online response ACK in the previous step can be stored in the ASR, and whether the identifier carried by the online notification is the temporary identifier or not can be judged by comparing whether the identifier carried by the online notification message is the same as the temporary identifier stored in the ASR or not;
step 508: and the ASR judges that the identifier carried by the online notification message is a temporary identifier, and directly sends an ACK (acknowledgement character) message to the user terminal to inform the user terminal of successful online.
Example two:
fig. 6 is a user terminal online process when the user terminal acquires the temporary identifier and the identity location register recovers to be reachable when sending the online notification, in which the user terminal continues to use the temporary identifier, according to the second embodiment of the present invention, and the user online process includes the following steps:
step 601: a user terminal initiates an online request message to an ASR;
step 602: after receiving the online request message, the ASR judges whether the ILR can be reached;
step 603: after the ASR judges that the ILR can not reach, applying for a temporary identifier in a temporary identifier pool stored locally;
step 604: the ASR sends an online response ACK to the user terminal, wherein the online response ACK carries a temporary identifier distributed by the ASR for the user;
step 605: the user terminal initiates an online notification message to the ASR, wherein the online notification message carries the acquired temporary identifier;
step 606: ASR judges whether ILR can be reached;
step 607: after the ASR judges that the ILR recovery can be reached, judging whether the user identification carried by the online notification message is a temporary identification;
step 608: and the ASR judges that the identifier carried by the online notification message is a temporary identifier, and directly sends an ACK (acknowledgement character) message to the user terminal to inform the user terminal of successful online.
Example three:
fig. 7 is a user terminal online process when an identity location register recovers to be reachable when a user terminal sends an online notification after acquiring a temporary identifier according to a third embodiment of the present invention, in which the user terminal re-applies for a user identifier, referring to fig. 7, the user online process includes the following steps:
step 701: a user terminal initiates an online request message to an ASR;
step 702: after receiving the online request message, the ASR judges whether the ILR can be reached;
step 703: after the ASR judges that the ILR can not reach, applying for a temporary identifier in a temporary identifier pool stored locally;
step 704: the ASR sends an online response ACK to the user terminal, wherein the online response ACK carries a temporary identifier distributed by the ASR for the user;
step 705: the user terminal initiates an online notification message to the ASR, wherein the online notification message carries the acquired temporary identifier;
step 706: ASR judges whether ILR can be reached;
step 707: after the ASR judges that the ILR recovery can be reached, judging whether the user identification carried by the online notification message is a temporary identification;
step 708: and the ASR judges that the identifier carried by the online notification message is a temporary identifier, sends a negative acknowledgement NAK message to the user terminal, and after receiving the NAK message, the user can automatically initiate an online request message and restart the process of applying for the user identifier AID.
Example four:
fig. 8 is a user terminal online process when the status of an identity location register becomes unreachable when an online notification is sent after a user terminal acquires a user identifier AID according to a fourth embodiment of the present invention, referring to fig. 8, where the user online process includes the following steps:
step 801: a user terminal initiates an online request message to an ASR;
step 802: after receiving the online request message, the ASR judges whether the ILR can be reached;
step 803: after the ASR judges that the ILR can be reached, the ASR requests the ILR to inquire the user identification AID;
step 804: the ILR sends an AID query response message to the ASR, wherein the message carries a user identifier AID;
step 805: the ASR sends an online response ACK to the user terminal, wherein the online response ACK carries a user identifier AID;
step 806: a user terminal initiates an online notification message to an ASR, wherein the online notification message carries the user identifier AID;
step 807: ASR judges whether ILR can be reached;
step 808: after the ASR judges that the ILR can not be reached, judging whether the user identification carried by the online notification message is a temporary identification or not;
step 809: and the ASR judges that the identifier carried by the online notification message is not a temporary identifier, sends a negative acknowledgement NAK message to the user terminal, and the user can automatically initiate an online request message and restart the process of applying for the user identifier AID after receiving the NAK message.
It will be understood by those skilled in the art that all or part of the steps of the above methods may be implemented by instructing the relevant hardware through a program, and the program may be stored in a computer readable storage medium, such as a read-only memory, a magnetic or optical disk, and the like. Alternatively, all or part of the steps of the foregoing embodiments may also be implemented by using one or more integrated circuits, and accordingly, each module/unit in the foregoing embodiments may be implemented in the form of hardware, and may also be implemented in the form of a software functional module. The present invention is not limited to any specific form of combination of hardware and software.
The above description is only a preferred embodiment of the present invention and is not intended to limit the present invention, and various modifications and changes may be made by those skilled in the art. Any modification, equivalent replacement, or improvement made within the spirit and principle of the present invention should be included in the protection scope of the present invention.

Claims (10)

1. A method for distributing user identity information is characterized by comprising the following steps:
after receiving an online request message carrying user identity information requesting for distribution sent by a user terminal, an access service router judges whether an identity location register can be reached;
and if the identity position register is not reachable, the access service router acquires a distributable temporary identifier and sends the temporary identifier to the user terminal, wherein the temporary identifier is used for identifying the temporary user identity information of the user terminal, and the temporary identifier is not superposed with the identity identifier stored in the identity position register.
2. The method of claim 1, further comprising:
after receiving an online notification message carrying the user identity information sent by the user terminal, the access service router judges whether the user identity information is a temporary identifier;
if the user identity information is not the temporary identifier, the access service router maps the user identity information with preset routing position identification information and sends the mapping relation to the identity position register.
3. The method of claim 2, further comprising:
when the access service router judges whether the user identity information is the temporary identifier, the access service router also judges whether the identity position register is reachable;
if the user identity information is a temporary identifier and the identity location register is reachable, or if the user identity information is not a temporary identifier and the identity location register is not reachable, the access service router sends a negative confirmation message to the user terminal, wherein the negative confirmation message is used for notifying the user terminal to re-request the allocation of the user identity information.
4. The method of claim 2, further comprising:
when the access service router judges whether the user identity information is the temporary identifier, the access service router also judges whether the identity position register is reachable;
and if the user identity information is a temporary identifier and the identity position register can be reached, the access service router sends a confirmation message to the user terminal, and the confirmation message is used for informing the user terminal of successful online.
5. The method of claim 1, wherein the determining whether the identity location register is reachable comprises:
the access service router starts a timer for maintaining a preset waiting time when sending an inquiry request message for inquiring user identification information to an identity position register or sending a mapping relation between the user identification information and the routing position identification information each time;
the access service router judges whether a response message returned by the identity position register is received or not within a waiting time preset by a timer, and if the response message returned by the identity position register is received within the waiting time, the identity position register is judged to be reachable; and if the response message returned by the identity position register is not received within the waiting time, judging that the identity position register is unreachable.
6. The method of claim 1, wherein the determining whether the identity location register is reachable comprises:
the access service router sends an ICMP request message or a TCP on-line request message to the identity location register and detects whether a response message returned by the identity location register is received;
if a response message returned by the identity position register is received, judging that the identity position register can be reached; and if the response message returned by the identity position register is not received, judging that the identity position register is not reachable.
7. The method of claim 1, wherein the determining whether the identity location register is reachable comprises:
the access service router sends an ICMP request message to the identity location register and detects whether a response message returned by the identity location register and the packet loss rate of the response message are received;
if a response message returned by the identity position register is received and the packet loss rate of the response message is less than or equal to a preset maximum packet loss rate threshold value, judging that the identity position register can be reached; and if the response message returned by the identity position register is not received or the packet loss rate of the response message is greater than the preset maximum packet loss rate threshold value, judging that the identity position register is unreachable.
8. An access service router, wherein the access service router comprises a processor, a memory and a communication bus, and the processor and the memory are communicatively connected through the communication bus; wherein the content of the first and second substances,
the memory is used for storing a user identity information distribution program;
the processor is used for calling the user identity information distribution program stored in the memory and executing the following steps:
after receiving an online request message which is sent by a user terminal and carries user identity information requesting to be distributed, judging whether an identity position register can be reached or not;
and if the identity position register is not reachable, acquiring a distributable temporary identifier and sending the temporary identifier to the user terminal, wherein the temporary identifier is used for identifying the temporary user identity information of the user terminal, and the temporary identifier is not superposed with the identity identifier stored in the identity position register.
9. The access service router of claim 8, wherein after the step of sending the temporary identifier to the user terminal, the processor is further configured to invoke the user identity information assignment procedure to perform the steps of:
judging whether the user identity information is a temporary identifier or not after receiving an online notification message which is sent by the user terminal and carries the user identity information;
and if the user identity information is not the temporary identifier, mapping the user identity information and preset routing position identification information, and sending the mapping relation to the identity position register.
10. The access service router of claim 9, wherein after the step of determining whether the user identity information is a temporary identifier, the processor is further configured to invoke the user identity information allocation procedure to perform the following steps:
judging whether the identity position register is reachable:
and if the user identity information is a temporary identifier and the identity location register is reachable, or if the user identity information is not the temporary identifier and the identity location register is not reachable, sending a negative confirmation message to the user terminal, wherein the negative confirmation message is used for notifying the user terminal to re-request the allocation of the user identity information.
CN201710335966.4A 2017-05-12 2017-05-12 User identity information distribution method and access service router Active CN108882224B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN201710335966.4A CN108882224B (en) 2017-05-12 2017-05-12 User identity information distribution method and access service router

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201710335966.4A CN108882224B (en) 2017-05-12 2017-05-12 User identity information distribution method and access service router

Publications (2)

Publication Number Publication Date
CN108882224A CN108882224A (en) 2018-11-23
CN108882224B true CN108882224B (en) 2022-05-03

Family

ID=64319865

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201710335966.4A Active CN108882224B (en) 2017-05-12 2017-05-12 User identity information distribution method and access service router

Country Status (1)

Country Link
CN (1) CN108882224B (en)

Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN102014114A (en) * 2010-07-09 2011-04-13 北京哈工大计算机网络与信息安全技术研究中心 Method and device for protecting location privacies of objects in Internet of things
CN102025602A (en) * 2009-09-17 2011-04-20 中兴通讯股份有限公司 Method and system for interacting access service nodes with mapping forward plane
CN105379312A (en) * 2013-05-06 2016-03-02 康维达无线有限责任公司 Device triggering

Patent Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN102025602A (en) * 2009-09-17 2011-04-20 中兴通讯股份有限公司 Method and system for interacting access service nodes with mapping forward plane
CN102014114A (en) * 2010-07-09 2011-04-13 北京哈工大计算机网络与信息安全技术研究中心 Method and device for protecting location privacies of objects in Internet of things
CN105379312A (en) * 2013-05-06 2016-03-02 康维达无线有限责任公司 Device triggering

Also Published As

Publication number Publication date
CN108882224A (en) 2018-11-23

Similar Documents

Publication Publication Date Title
US8125993B2 (en) Network element having a DHCP lease timer
JP5402926B2 (en) COMMUNICATION DEVICE, COMMUNICATION METHOD, AND COMMUNICATION CONTROL PROGRAM
US8230067B2 (en) DHCP proxy in a subscriber environment
EP2879419B1 (en) Ipv6 address stateless auto-configuration system, data card, and implementation method thereof
EP2408144A1 (en) Method, system and device for implementing identity identifier and location separation
JPH11122301A (en) Address conversion connection device
JPH11308273A (en) Mobile computer device, device and method for mobile computer management and communication control method
WO2008138242A1 (en) Management method, apparatus and system of session connection
WO2012079474A1 (en) Address allocation processing method, apparatus, and system
EP2469962A1 (en) Methods and systems for implementing inter-network roam, querying and attaching network
US8605736B2 (en) Method, system and apparatus for heterogeneous addressing mapping
WO2014086167A1 (en) Mobile terminal and address allocation method and system thereof
WO2017107871A1 (en) Access control method and network device
WO2012109849A1 (en) Method and apparatus for mac address allocation
CN107707689B (en) DHCP message processing method, DHCP server and gateway equipment
US8705471B2 (en) Method and system for implementing ID/locator mapping
CN113038594B (en) Network management registration method and device for MESH extended equipment
US20060193330A1 (en) Communication apparatus, router apparatus, communication method and computer program product
EP2999244A1 (en) Data transmission method and gateway
CN108882224B (en) User identity information distribution method and access service router
EP2568666A1 (en) Ip address obtaining method and network access device
WO2012103755A1 (en) Method and system for obtaining a terminal id
WO2012089030A1 (en) Method, access device and authentication device for network access by multiple access methods
US8738038B2 (en) Method and system for implementing information interaction in a next generation network
KR100513296B1 (en) Apparatus, system and method for controlling network access

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
GR01 Patent grant
GR01 Patent grant