WO2009043284A1

WO2009043284A1 - Method, network entity and terminal for the handover between heterogeneous wireless networks

Info

Publication number: WO2009043284A1
Application number: PCT/CN2008/072498
Authority: WO
Inventors: Yuankui Zhao; Junxiang Guo
Original assignee: Huawei Technologies Co., Ltd.
Priority date: 2007-09-29
Filing date: 2008-09-24
Publication date: 2009-04-09
Also published as: CN101400089A

Abstract

A method, network entity and terminal for handover between heterogeneous wireless networks is disclosed. At first, the pre-authentication information required during the pre-authentication is determined, and the pre-authentication of the target network is originated based on the determined pre-authentication information; once the pre-authentication is complete, the handover between heterogeneous wireless networks is executed. Because the pre-authentication is executed before the handover between heterogeneous wireless networks, the Mobile Node MN's handover procedure between heterogeneous wireless networks is accelerated, so that a rapid handover between heterogeneous wireless networks is achieved and the system performance is improved.

Description

说明书一种异构无线网络之间进行切换的方法、网络实体及终端 Method, network entity and terminal for switching between heterogeneous wireless networks

[I] 技术领域 [I] Technical field

[2] 本发明属于无线通信***领域，特别涉及一种异构无线网络之间进行切换的方法、网络实体及终端。 [2] The present invention belongs to the field of wireless communication systems, and in particular, to a method, a network entity, and a terminal for switching between heterogeneous wireless networks.

[3] 发明背景 [3] Background of the invention

[4] 目前，随着计算机和通信技术的发展，无线广域网 (如 GPRS、 UMTS等)、无线局域网 (如 IEEE802. 11)、卫星通信网、蓝牙网络等多种无线网络***正逐步代替传统有线网络成为互联网接入的最后一跳。如何将这些异构无线网络融合在一起，提供覆盖广、带宽高、移动性高且费用低廉的互联网接入，将是下一代移动通信*** (如 B3G、 4G等)的发展方向。 [4] At present, with the development of computer and communication technologies, wireless wide area networks (such as GPRS, UMTS, etc.), wireless local area networks (such as IEEE802.11), satellite communication networks, Bluetooth networks and other wireless network systems are gradually replacing traditional wired networks. The Internet has become the last hop of Internet access. How to integrate these heterogeneous wireless networks to provide Internet access with wide coverage, high bandwidth, high mobility and low cost will be the development direction of next-generation mobile communication systems (such as B3G, 4G, etc.).

[5] 在异构无线网络融合的***框架中，多种无线网络***之间具有很好的互补特性，因此它们之间的无缝融合受到广泛关注。将异构无线网络无缝融合在一起，发挥出各自网络的优势，需要解决一系列难题。其中，如何能在切换过程中保持业务的连续性是一个关键问题。 [5] In the system framework of heterogeneous wireless network convergence, many wireless network systems have good complementary characteristics, so the seamless integration between them has received extensive attention. Seamlessly merging heterogeneous wireless networks to take advantage of their respective networks requires solving a series of challenges. Among them, how to maintain business continuity during the handover process is a key issue.

[6] 在现有技术的方案中，由于不同的网络其要求的入网方式不同，跨异构网络切换都必然的要求伴随着安全、 QoS协商 /设定等诸多问题，这样单纯的或纯粹的 I ETF的 FMIP模型就不能简单的使移动节点无缝的在异构网络之间漫游，从而当移动节点发生异构网络间切换吋，无法实现异构网络的快速切换，降低了*** 性能。 [6] In the prior art scheme, since different networks require different network access modes, the inevitable requirements for switching across heterogeneous networks are accompanied by many problems such as security, QoS negotiation/setting, and so on, pure or pure. The FMIP model of I ETF can't simply make mobile nodes roam seamlessly between heterogeneous networks. When the mobile nodes switch between heterogeneous networks, the fast switching of heterogeneous networks cannot be achieved, which reduces system performance.

[7] 发明内容 [7] Summary of the invention

[8] 本发明实施例所要解决的技术问题在于提供了一种异构无线网络之间进行切换的方法、网络实体及终端。能够在移动节点发生异构网络间切换吋，实现异构网络的快速切换，提高了***运行的性能。 [8] The technical problem to be solved by the embodiments of the present invention is to provide a method, a network entity, and a terminal for switching between heterogeneous wireless networks. It can switch between heterogeneous networks on the mobile node, realize fast switching of heterogeneous networks, and improve system performance.

[9] 本发明实施例提供了一种异构无线网络之间进行切换的方法，包括： [9] The embodiment of the present invention provides a method for switching between heterogeneous wireless networks, including:

[10] 确定预认证吋所需的预认证信息； [10] Determine the pre-certification information required for pre-certification;

[I I] 根据所确定的预认证信息，发起目标网络的预认证； [12] 当所述预认证通过后，在异构网络之间进行切换。 [II] initiating pre-authentication of the target network according to the determined pre-authentication information; [12] After the pre-authentication is passed, switching between heterogeneous networks.

[13] 本发明实施例还提供一种异构无线网络之间进行切换的网络实体，包括： [13] The embodiment of the present invention further provides a network entity that performs handover between heterogeneous wireless networks, including:

[14] 第一获取模块：用于获取目标网络能力支持的预认证信息； [14] First acquisition module: pre-authentication information for obtaining target network capability support;

[15] 第一下发模块：用于向移动节点下发所述第一获取模块所获取的预认证信息。 [15] The first sending module is configured to send the pre-authentication information acquired by the first acquiring module to the mobile node.

[16] 本发明实施例还提供了一种异构无线网络之间进行切换的网络实体，包括： [16] The embodiment of the present invention further provides a network entity for performing handover between heterogeneous wireless networks, including:

[17] 接收模块：用于接收移动节点上报其能力支持的预认证信息； [17] receiving module: for receiving pre-authentication information reported by the mobile node for its capability support;

[18] 选取模块：用于根据所述接收模块接收的预认证信息进行选择，选取出与所述移动节点匹配的预认证信息，并将所选取出的预认证信息提供给第二下发模块 [18] a selection module: configured to select, according to the pre-authentication information received by the receiving module, select pre-authentication information that matches the mobile node, and provide the selected pre-authentication information to the second delivery module.

[19] 第二下发模块：用于向所述移动节点通告所述选取模块提供的预认证信息。 [19] The second sending module is configured to notify the mobile node of the pre-authentication information provided by the selecting module.

[20] 本发明实施例还提供了一种异构无线网络之间进行切换的网络实体，包括： [21] 第二获取模块：用于获取移动节点能力支持的预认证信息； [20] The embodiment of the present invention further provides a network entity for performing handover between heterogeneous wireless networks, including: [21] a second acquiring module: pre-authentication information for acquiring mobile node capability support;

[22] 传递模块：用于通过上下文传递机制，向目标网络实体传递所述第二获取模块所获取的预认证信息。 [22] The delivery module is configured to: pass the pre-authentication information acquired by the second acquiring module to the target network entity by using a context delivery mechanism.

[23] 本发明实施例还提供了一种异构无线网络之间进行切换的移动节点，包括： [24] 确定模块：用于确定预认证吋所需的预认证信息； [23] The embodiment of the present invention further provides a mobile node that performs handover between heterogeneous wireless networks, including: [24] determining module: pre-authentication information required for determining pre-authentication;

[25] 预认证模块：用于根据所述确定模块所确定的预认证信息，发起目标网络的预认证； [25] The pre-authentication module is configured to initiate pre-authentication of the target network according to the pre-authentication information determined by the determining module;

[26] 切换模块：用于在所述预认证模块所发起的预认证通过后，在异构网络之间进行切换。 [26] The switching module is configured to switch between heterogeneous networks after the pre-authentication initiated by the pre-authentication module is passed.

[27] 由上述本发明所提供的具体实施方案可以看出，首先确定预认证吋所需的预认证信息，并根据所确定的预认证信息，发起目标网络的预认证；在所述预认证通过后，在异构网络之间进行切换。这样由于在异构无线网络之间进行切换之前进行了预认证，加速了移动节点在异构网络的切换过程，从而实现了异构网络的快速切换，提高了***的运行性能。 [27] It can be seen from the specific implementation provided by the foregoing invention that the pre-authentication information required for pre-authentication is first determined, and pre-authentication of the target network is initiated according to the determined pre-authentication information; After passing, switch between heterogeneous networks. In this way, pre-authentication is performed before switching between heterogeneous wireless networks, which accelerates the handover process of the mobile node in the heterogeneous network, thereby realizing the fast switching of the heterogeneous network and improving the running performance of the system.

[28] 附图简要说明 [28] BRIEF DESCRIPTION OF THE DRAWINGS

[29] 图 1为本发明提供的第一实施例方法流程图； 1 is a flow chart of a method according to a first embodiment of the present invention;

[30] 图 2为本发明提供的第二实施例方法流程图； [31] 图 3为本发明提供的第三实施例方法流程图； 2 is a flow chart of a method according to a second embodiment of the present invention; 3 is a flowchart of a method according to a third embodiment of the present invention;

[32] 图 4为本发明提供的第三实施例方法中进行预认证过程的方法流程图； 4 is a flowchart of a method for performing a pre-authentication process in a method according to a third embodiment of the present invention;

[33] 图 5为本发明提供的第四实施例网络实体结构图； FIG. 5 is a structural diagram of a network entity according to a fourth embodiment of the present invention; FIG.

[34] 图 ₆为本发明提供的第五实施例网络实体结构图； _{6 is a} structural diagram of a network entity according to a fifth embodiment of the present invention;

[35] 图 7为本发明提供的第六实施例网络实体结构图； FIG. 7 is a structural diagram of a network entity according to a sixth embodiment of the present invention; FIG.

[36] 图 8为本发明提供的第七实施例移动节点结构图。 FIG. 8 is a structural diagram of a mobile node according to a seventh embodiment of the present invention.

[37] 实施本发明的方式 [37] Mode for carrying out the invention

[38] 本发明提供的第一实施例是一种异构无线网络之间进行切换的方法，移动节点

[38] The first embodiment provided by the present invention is a method for switching between heterogeneous wireless networks, a mobile node

Node, 移动节点）移动出无线局域网 AP所覆盖范围，进入无线广域网的基站覆盖区准备进行切换，该方法流程如图 1所示，包括： Node, mobile node) moves out of the coverage area of the wireless local area network AP, and enters the coverage area of the wireless wide area network to prepare for handover. The method flow is shown in FIG. 1 and includes:

[39] 步骤 101 : 服务网络（如无线局域网）网络侧实体（如 AP) 向 MN下发关于目标网络（如无线广域网）能力支持的预认证信息。 [39] Step 101: Service network (such as WLAN) The network side entity (such as AP) sends pre-authentication information about the capability support of the target network (such as wireless WAN) to the MN.

[40] 步骤 102: MN根据网络侧实体下发的预认证信息，确定与其匹配的预认证信息[40] Step 102: The MN determines the pre-authentication information matching the pre-authentication information delivered by the network-side entity.

，发起目标网络的预认证。 , initiate pre-authentication of the target network.

[41] 步骤 103: 预认证通过后， MN在异构网络之间进行切换。 [41] Step 103: After the pre-authentication is passed, the MN switches between heterogeneous networks.

[42] 根据上述步骤可见，正是由于 MN在异构无线网络之间进行切换之前， MN获取了关于目标网络能力支持的预认证信息，并进行了预认证，加速了移动节点在异构网络的切换过程。 [42] According to the above steps, it is obvious that the MN obtains pre-authentication information about the target network capability support and performs pre-authentication, which accelerates the mobile node in the heterogeneous network, before the MN switches between the heterogeneous wireless networks. The switching process.

[43] 其中预认证信息为：预切换过程中需要预先协商的参数和能力信息集。服务网络的网络侧实体向 MN下发的关于目标网络的预认证信息可以是以下的任意一种或组合： [43] The pre-authentication information is: a parameter and capability information set that needs to be negotiated in advance during the pre-switching process. The pre-authentication information about the target network delivered by the network side entity of the service network to the MN may be any one or combination of the following:

[44] 目标网络的接入类型：如 Wifi,Wimax,3GPP,3GPP2等； [44] Access type of the target network: such as Wifi, Wimax, 3GPP, 3GPP2, etc.;

[45] 目标网络的接入认证方式：如 EAP，X.509等； [45] Access authentication methods of the target network: such as EAP, X.509, etc.;

[46] 目标网络需要的密钥生成算法：如 MD5，SHA等； [46] Key generation algorithms required by the target network: eg MD5, SHA, etc.;

[47] 目标网络是否支持预认证：是或否。 [47] Does the target network support pre-authentication: Yes or No.

[48] 具体的下发可以通过路由器通告消息、 DHCP消息、 PPP消息、 EAP消息、媒体无关的消息或专用的预认证信令等来实现。 [49] 本发明提供的第二实施例是一种异构无线网络之间进行切换的方法，当 MN在异构无线网络之间准备进行切换，方法流程如图 2所示，包括： [48] The specific delivery may be implemented by a router advertisement message, a DHCP message, a PPP message, an EAP message, a media-independent message, or a dedicated pre-authentication signaling. The second embodiment of the present invention provides a method for performing handover between heterogeneous wireless networks. When the MN is ready to perform handover between heterogeneous wireless networks, the method flow is as shown in FIG. 2, including:

[50] 步骤 201 : 服务网络的网络侧实体接收 MN上报该 MN能力支持的目标网络的预认证信息。 [00] Step 201: The network side entity of the service network receives the pre-authentication information of the target network supported by the MN to the MN.

[51] 步骤 202: 服务网络的网络侧实体根据 MN上报的目标网络的预认证信息对目标网络能力支持的预认证信息进行选择，仅将该 MN能力支持的目标网络的预认证信息选择出来，并发送给 MN。或者网络侧实体仅向 MN发送一个确认信息，表示服务网络的网络侧实体预下发的给 MN的目标网络的预认证信息与 MN上报的目标网络的预认证信息相同。 [51] Step 202: The network side entity of the service network selects the pre-authentication information supported by the target network capability according to the pre-authentication information of the target network reported by the MN, and selects only the pre-authentication information of the target network supported by the MN capability. And sent to the MN. Or the network side entity only sends an acknowledgment message to the MN, indicating that the pre-authentication information of the target network pre-delivered to the MN by the network side entity of the service network is the same as the pre-authentication information of the target network reported by the MN.

[52] 步骤 203: MN根据网络侧实体下发的预认证信息或确认信息，就获得了与其匹配的预认证信息，发起目标网络的预认证。 [52] Step 203: The MN obtains the pre-authentication information matched with the network according to the pre-authentication information or the confirmation information delivered by the network-side entity, and initiates pre-authentication of the target network.

[53] 步骤 204: 预认证通过后， MN在异构网络之间进行切换。 [53] Step 204: After the pre-authentication is passed, the MN switches between heterogeneous networks.

[54] 因为 MN首先主动上报其能力支持的目标网络的预认证信息，这样服务网络的网络侧实体可以根据移动节点主动上报的信息进行选择，仅选择与该 MN匹配的目标网络的预认证信息发给 MN，釆用这种方法， MN可以缺省判定，网络侧实体下发的预认证信息，就是与其匹配的预认证信息。这样网络侧实体不必将所有和 MN匹配及不匹配的信息都下发给 MN, 让 MN进行选择确认。 [54] Because the MN firstly reports the pre-authentication information of the target network supported by the capability, the network side entity of the service network can select according to the information actively reported by the mobile node, and select only the pre-authentication information of the target network that matches the MN. To the MN, in this way, the MN can determine by default that the pre-authentication information delivered by the network-side entity is the pre-authentication information matched with it. In this way, the network side entity does not have to send all the information that matches and does not match the MN to the MN, and allows the MN to perform the selection confirmation.

[55] 步骤 201中 MN上报其能力支持的目标网络的预认证信息包括：如目标网络的接入类型、目标网络的接入认证方式、目标网络需要的密钥生成算法、目标网络是否支持预认证及相关认证优先级的任意一种或组合，如： MN上报其可支持的信息有：目标网络的接入类型： [55] The pre-authentication information of the target network that the MN reports in the step 201 includes: the access type of the target network, the access authentication mode of the target network, the key generation algorithm required by the target network, and whether the target network supports the pre-preparation. Any one or combination of authentication and related authentication priorities, such as: The information that the MN reports can support: The access type of the target network:

Wimax,3GPP; 目标网络的接入认证方式： EAP; 目标网络需要的密钥生成算法： MD5; 目标网络是否支持预认证：是。 Wimax, 3GPP; Access authentication mode of the target network: EAP; Key generation algorithm required by the target network: MD5; Whether the target network supports pre-authentication: Yes.

[56] 在步骤 202中，服务网络的网络侧实体从目标网络的预认证信息如： "目标网络的接入类型： Wifi,Wimax,3GPP,3GPP2; 目标网络的接入认证方式： ΕΑΡ,Χ.509 ；目标网络需要的密钥生成算法： [56] In step 202, the network side entity of the service network obtains pre-authentication information from the target network such as: "Access type of the target network: Wifi, Wimax, 3GPP, 3GPP2; access authentication mode of the target network: ΕΑΡ, Χ .509 ; Key generation algorithm required by the target network:

MD5,SHA; 目标网络是否支持预认证：是或否" MD5, SHA; Does the target network support pre-authentication: Yes or No"

中进行选择，选择与 MN上报的可支持的预认证信息相匹配的信息： "目标网络的接入类型： Select to select the information that matches the pre-authentication information that can be supported by the MN: "Target network Access type:

Wimax,3GPP; 目标网络的接入认证方式： EAP; 目标网络需要的密钥生成算法 Wimax, 3GPP; access authentication mode of the target network: EAP; key generation algorithm required by the target network

MD5; 目标网络是否支持预认证：是"，并通过路由器通告消息、 DHCP (Dyna mic host configuration protocol动态主机酉己置 1"办议) 消息、 PPP(Point to point Protocol点对点协议 )消息、 EAP(Extensible Authentication Protocol MD5; Whether the target network supports pre-authentication: Yes, and through the router advertisement message, DHCP (Dyna mic host configuration protocol) message, PPP (Point to Point Protocol) message, EAP ( Extensible Authentication Protocol

可扩展鉴别协议)消息、媒体无关的消息或专用的预认证信令等将上述信息即： " 目标网络的接入类型： Extensible authentication protocol) messages, media-independent messages or dedicated pre-authentication signaling, etc. The above information is: "Access type of the target network:

MD5; 目标网络是否支持预认证：是"发送给 MN。其中媒体无关的消息包括但不限于：媒体无关的获取网络信息消息或媒体无关的网络査询消息。 MD5; Whether the target network supports pre-authentication: It is "sent to the MN. The media-independent messages include but are not limited to: media-independent access network information messages or media-independent network query messages.

[57] 在上面的例子中， MN上报其能力支持的目标网络的预认证信息还可以是以下的任意一种或组合： [57] In the above example, the pre-authentication information of the target network that the MN reports to its capability support may also be any one or combination of the following:

[58] 目标网络的接入类型：如 Wifi,Wimax,3GPP,3GPP2等； [58] Access type of the target network: such as Wifi, Wimax, 3GPP, 3GPP2, etc.;

[59] 目标网络的接入认证方式：如 EAP，X.509等； [59] Access authentication methods of the target network: such as EAP, X.509, etc.;

[60] 目标网络需要的密钥生成算法：如 MD5，SHA等； [60] Key generation algorithms required by the target network: eg MD5, SHA, etc.;

[61] 目标网络是否支持预认证：是或否。 [61] Does the target network support pre-authentication: Yes or No.

[62] 如 MN上报其能力支持的目标网络的预认证信息可以只需包括： "目标网络的接入类型为 Wimax和支持预认证，而目标网络的接入认证方式和目标网络需要的密钥生成算法，可以根据目标网络的接入类型按照预定策略缺省确定。不同的应用中具体的实现方式可能不同，此处不再赞述。 [62] If the MN reports the pre-authentication information of the target network that its capability supports, it may only need to include: "The access type of the target network is Wimax and support pre-authentication, and the access authentication mode of the target network and the key required by the target network. The generation algorithm may be determined by default according to the access type of the target network. The specific implementation manners of different applications may be different, and are not mentioned here.

[63] 步骤 204中， MN在异构网络之间进行切换吋，可釆用预测式的切换过程，或者反应式的切换过程。 [63] In step 204, the MN switches between heterogeneous networks, and may use a predictive handover procedure or a reactive handover procedure.

[64] 根据上面的 2个实施例可以看出，无论是实施例 1中的服务网络的网络侧实体向 MN下发关于目标网络能力支持的预认证信息的技术方案，还是实施例 2中的 MN 上报预认证信息的技术方案，都是移动节点确定预认证吋所需的预认证信息的一种具体实现方法，该移动节点根据实施例 1或实施例 2中的方法确定预认证信息后，或者 MN还可以通过和核心网络实体进行信息交互确定预认证信息后，就可以发起目标网络的预认证，在预认证通过后，移动节点就可以在异构网络之间进行快速切换了。 [64] According to the above two embodiments, it can be seen that the network side entity of the service network in the first embodiment delivers the pre-authentication information about the target network capability support to the MN, or the method in the second embodiment. The technical solution for the MN to report the pre-authentication information is a specific implementation method for the mobile node to determine the pre-authentication information required for the pre-authentication, and the mobile node determines the pre-authentication letter according to the method in Embodiment 1 or Embodiment 2. After the information is received, the MN can also initiate pre-authentication of the target network by performing pre-authentication information interaction with the core network entity. After the pre-authentication is passed, the mobile node can quickly switch between the heterogeneous networks. .

[65] MN在异构网络中工作吋，由于移动频繁，会经常在不同网络之间切换，在 MN 在异构网络之间切换吋，通过上下文传递机制，服务网络的网络侧实体向目标网络实体传递移动节点能力支持的预认证信息，目标网络实体根据 MN能力支持的预认证信息选择出与 MN匹配的预认证信息，并向 MN通告其所选择的预认证信息。具体的传递机制包括通过媒体无关的切换资源査询请求消息、切换指示实现传递或通过其它上下文传递机制实现传递。 [65] MN works in heterogeneous networks. Because of frequent mobility, it often switches between different networks. After the MN switches between heterogeneous networks, the network side entity of the service network moves to the target network through the context transfer mechanism. The entity transmits pre-authentication information supported by the mobile node capability, and the target network entity selects pre-authentication information matching the MN according to the pre-authentication information supported by the MN capability, and notifies the MN of the pre-authentication information selected by the MN. The specific delivery mechanism includes a media-independent switching resource query request message, a handover indication implementation delivery, or a delivery through other context delivery mechanisms.

[66] 通过该方法也可实现 MN获取其匹配的目标网络的预认证信息。在目标网络实体向 MN通告其所选择的预认证信息吋，可以通过服务网络的网络侧实体进行转发，此吋服务网络的网络侧实体只是对该预认证信息进行转发而不做其它处理，即通过先通告服务网络的网络侧实体，然后在服务网络中由服务网络的网络侧实体向 MN通告目标网络实体所选择的预认证信息，或者目标网络实体直接向 MN通告其所选择的预认证信息。 [66] By this method, the MN can also obtain pre-authentication information of the target network to which it matches. After the target network entity advertises the selected pre-authentication information to the MN, the network side entity of the service network may forward the network, and the network side entity of the service network only forwards the pre-authentication information without other processing, that is, By first notifying the network side entity of the service network, and then in the service network, the network side entity of the service network notifies the MN of the pre-authentication information selected by the target network entity, or the target network entity directly advertises the selected pre-authentication information to the MN. .

[67] MN也可能不和服务网络或目标网络进行预认证信息确认的交互，而是直接以 MN自身能力支持的预认证信息作为预认证吋所需的预认证信息，进而发起目标网络的预认证，这样就有可能存在，移动节点能力支持的预认证信息和目标网络能力支持的预认证信息不兼容的情况，如： MN自身能力支持目标网络的接入认证方式为 EAP，而目标网络能力支持的接入认证方式为 X.509, 在这种情况下，目标网络实体会向移动节点发送一个用于表示彼此预认证信息不兼容的信息， M N获知其无法实现与该目标网络之间的预认证， MN可以向新的目标网络发起预认证。 [67] The MN may not perform pre-authentication information confirmation interaction with the service network or the target network, but directly use the pre-authentication information supported by the MN's own capabilities as the pre-authentication information required for pre-authentication, and then initiate the pre-authentication of the target network. Authentication, it is possible that the pre-authentication information supported by the mobile node capability is incompatible with the pre-authentication information supported by the target network capability, such as: The MN's own capability supports the access authentication mode of the target network as EAP, and the target network capability The supported access authentication mode is X.509. In this case, the target network entity sends a message to the mobile node indicating that the mutual authentication information is incompatible, and the MN knows that it cannot be implemented with the target network. Pre-authentication, the MN can initiate pre-authentication to the new target network.

[68] 当然，如果 MN按照前述实施例中提到方法或其他方法和服务网络或目标网络进行预认证信息确认的交互，也可能发生与目标网络预认证信息不兼容的情况，在这种情况下，目标网络实体会向移动节点发送一个用于表示彼此预认证信息不兼容的信息，此吋 MN也获知其无法实现与该目标网络之间的预认证，并可以向新的目标网络发起预认证。下面结合 IEEE802.21的支持快速预认证的快速 MIP切换过程做进一步说明。快速 MIP切换过程，包括预测式和反应式两种。但是，无论釆用何种方式，和 IEEE 802.21结合吋，应将预认证过程先完成后，如果成功再实施后续的 MIP快速切换过程。下面以预测式快速 MIP切换过程为例说明这一过程。 [68] Of course, if the MN performs the pre-authentication information confirmation interaction according to the method mentioned in the foregoing embodiment or other methods and the service network or the target network, the case may be incompatible with the target network pre-authentication information, in which case Next, the target network entity sends a message to the mobile node indicating that the mutual authentication information is incompatible, and the MN is also aware that it cannot implement pre-authentication with the target network, and may initiate a pre-authentication to the new target network. Certification. The following is further described in conjunction with the fast MIP handover procedure of IEEE 802.21 supporting fast pre-authentication. Fast MIP switching process, including predictive and reactive. However, no matter what method is used, in combination with IEEE 802.21, the pre-authentication process should be completed first, and if the subsequent MIP fast switching process is successfully implemented. The following describes the process by taking the predictive fast MIP switching process as an example.

本发明提供的第三实施例是一种异构无线网络之间进行切换的方法，方法流程如图 3所示，包括： The third embodiment of the present invention provides a method for switching between heterogeneous wireless networks. The method flow is as shown in FIG. 3, and includes:

步骤 301 : MN (如图 3中的 Mobile Node, 其中的 MIHF为该 Mobile Step 301: MN (as in Figure 3, Mobile Node, where MIHF is the Mobile

Node的一个功能模块）从信息服务器（如图 3中的 MIIS A functional module of Node) from the information server (such as MIIS in Figure 3)

Server) 处获取到周围邻居网络（包括前文描述的目标网络实体，如图 3中的 Can didate Networkl) 的信息。此吋釆用的消息就是媒体无关的获取网络信息消息。步骤 302: MN发起到候选网络 (Candidate Network Server) obtains information about the neighbor network (including the target network entity described above, Can didate Networkl in Figure 3). The message used here is the media-independent access to network information messages. Step 302: MN initiates to the candidate network (Candidate Network

1) 即前文中对应的目标网络实体的资源査询请求，以査询候选网络的资源可获得性。此吋釆用的消息就是媒体无关的网络査询消息。 1) The resource query request of the corresponding target network entity in the foregoing, to query the resource availability of the candidate network. The message used here is a media-independent network query message.

Network) 的路由发现过程。可选地可以由移动节点发送路由主动请求信令给服务网络，以要求服务网络发代理路由通告消息给 MN (此步可与资源可获得性査询同吋进行）。 Network) route discovery process. Optionally, the mobile node may send route active request signaling to the service network to request the service network to send a proxy route advertisement message to the MN (this step may be performed in conjunction with the resource availability query).

在步骤 301、步骤 302或步骤 303中 MN与网络侧实体都有信息交互进行。以这些信息为载体，在这些信息交互的基础上即可实现上述实施例 1中步骤 101所完成的：服务网络的网络侧实体向 MN下发预认证信息。或者实施例 2中步骤 201及步骤 202所完成的： MN上报与预认证信息，以及网络侧实体根据 MN上报的预认证信息进行选择，仅将该 MN能力支持的目标网络的预认证信息选择出来，并发送给 MN。上面的实例只是一种优选的方案，本方案并不限于某种具体的信令，任何可以承载步骤 101中服务网络的网络侧实体向 MN下发的关于目标网络的预认证信息的信令，都可实现对本方案的支持，本领域技术人员通过上述描述，就可在具体实施过程中根据应用环境修改具体的信令，或自定义新的专用的预认证信令来实现对本方案的支持。对于步骤 201及步骤 202所要交互确定的预认证信息同样并不局限于具体的信令，此处不再赞述。 [75] 步骤 304: 移动节点选定切换的目标网络。 In step 301, step 302 or step 303, the MN interacts with the network side entity. With the information as the carrier, the network 101 of the service network can deliver the pre-authentication information to the MN. Or the completion of the step 201 and the step 202 in the second embodiment: the MN reports and the pre-authentication information, and the network-side entity selects according to the pre-authentication information reported by the MN, and selects only the pre-authentication information of the target network supported by the MN capability. And sent to the MN. The above example is only a preferred solution. The solution is not limited to a specific signaling. Any signaling that can carry the pre-authentication information about the target network sent by the network side entity of the service network in step 101 to the MN. Supporting the solution can be implemented. Those skilled in the art can modify the specific signaling according to the application environment in the specific implementation process, or customize the new dedicated pre-authentication signaling to implement the support of the solution. The pre-authentication information determined to be interactively determined in step 201 and step 202 is also not limited to specific signaling, and is not mentioned here. [75] Step 304: The mobile node selects the target network to be handed over.

[76] 接下来的步骤 305、步骤 306、步骤 307步不要求一定要顺序进行，但是从网络安全和预认证的目的角度考虑建议进行完步骤 305后再进行步骤 306、步骤 307。 [76] The next step 305, step 306, step 307 steps are not required to be performed sequentially, but it is recommended to perform step 305 and step 307 after performing step 305 from the perspective of network security and pre-authentication.

[77] 步骤 305: 移动节点进行 NCoA的配置。 [77] Step 305: The mobile node performs NCoA configuration.

[78] 步骤 306: 根据前述过程 MN从网络侧获得的有关目标网络的预认证信息或 MN 通过与网络侧的交互确定的预认证信息， MN和目标网络进行预认证过程。具体预认证过程对底层透明。 IEEE802.21的信令提供承载将上层认证信令进行封装，通过标识告知服务网络传递给目标网络进行预认证，并将认证结果返回给 MN。具体的过程我们以 Wimax移动节点入网所需的认证过程为例进行说明。 [78] Step 306: According to the foregoing process, the MN obtains pre-authentication information about the target network obtained from the network side or the pre-authentication information determined by the MN through interaction with the network side, and the MN and the target network perform a pre-authentication process. The specific pre-certification process is transparent to the underlying layer. The signaling of the IEEE 802.21 provides a bearer to encapsulate the upper layer authentication signaling, and the preamble is transmitted to the target network by the notification service network, and the authentication result is returned to the MN. The specific process is described by taking the authentication process required for the Wimax mobile node to access the network as an example.

[79] 定义新的消息 MIH_MN_HO_Pre-auth.Transfer。通过其中指示的目标网络信息判断是本网络处理还是继续转给目标网络。 EAP具体信令可釆用现有的标准信令，如图 4所示， EAP具体信令过程从略。这里只示意其过程的起始。其主要原理为将 EAP信令封装在 MIH_MN_HO_Pre-auth.Transfer中。并进而完成预认证过程。当目标网络根据指示信息判断属于该网络处理从而将 EAP信令解封装并与 AA A进行交互。直至结束。然后产生双方所需密钥。进而进行后续入网过程。通过是否成功的判断可以获知该移动节点是否被允许进入目标网络，从而可以及吋选择合适网络进行接入。 [79] Define a new message MIH_MN_HO_Pre-auth.Transfer. It is judged by the target network information indicated therein whether the network processes or continues to transfer to the target network. EAP specific signaling can use existing standard signaling. As shown in Figure 4, the EAP specific signaling process is omitted. This only shows the beginning of the process. The main principle is to encapsulate EAP signaling in MIH_MN_HO_Pre-auth.Transfer. And then complete the pre-certification process. When the target network judges that it belongs to the network processing according to the indication information, the EAP signaling is decapsulated and interacts with the AA A. Until the end. Then generate the required keys for both parties. Then proceed to the subsequent network access process. Whether or not the mobile node is allowed to enter the target network can be obtained through successful judgment, so that the appropriate network can be selected for access.

[80] 本过程可以在决定了目标网络之后进行，也可以在决定目标网络前想所有候选网络都发起本过程。具体选择视具体场景决定。 [80] This process can be performed after the target network is determined, or all candidate networks can be initiated before the target network is determined. The specific choice is determined by the specific scene.

[81] MIH_MN_HO_Pre-auth.Transfer消息的具体信令格式可以为： [81] The specific signaling format of the MIH_MN_HO_Pre-auth.Transfer message may be:

[82] MIH_MN_HO_Pre-auth.Transfer ( [82] MIH_MN_HO_Pre-auth.Transfer (

[83] Sourceldentifier, [83] Sourceldentifier,

[84] Destinationldentifier, [84] Destinationldentifier,

[85] PreAuthenticationContainer [85] PreAuthenticationContainer

[86] ) [86] )

[87] 其中参数的描述如表 1 : [88] [87] The description of the parameters is shown in Table 1: [88]

名称类型描述 Name Type Description

Sourceldentifier MIHF标识符消息发起方的 MIHF功能实体单元的标识，用于标识该消息的发起方 Sourceldentifier MIHF identifier The MIHF function of the message originator. The identity of the entity unit that identifies the originator of the message.

Destinationldentifier, MIHF标识符远端 MIHF功能实体单元的标识，用于标识该消息的目的地 Destinationldentifier, MIHF identifier The identifier of the remote MIHF functional entity unit that identifies the destination of the message.

PreAuthenticationContai TBD 消息容器，用于封装媒体 ner 相关的预鉴权消息 PreAuthenticationContai TBD message container for encapsulating media ner related pre-authentication messages

[89] 表 1 [89] Table 1

[90] 在预认证通过后，通过后续步骤实现 MN在异构网络之间进行切换。 [90] After the pre-authentication is passed, the MN switches between heterogeneous networks through subsequent steps.

[91] 步骤 307: _MN发切换请求到服务网络，消息里携带要预留目标网络的预认证信息资源的信息。服务网络将该信息转发给目标网络，请求目标网络预留资源，并且做切换相关的准备工作。目标网络预留资源和准备完成后，服务网络向 MN 发切换响应消息，指示 MN建立到目标网络的层 2的连接。 [91] Step 307: The _MN sends a handover request to the service network, where the message carries information about the pre-authentication information resource of the target network to be reserved. The service network forwards the information to the target network, requests the target network to reserve resources, and performs preparatory work related to handover. After the target network reserves resources and preparations are completed, the service network sends a handover response message to the MN, instructing the MN to establish a connection to layer 2 of the target network.

[92] 步骤 308: MN发起快速移动 IP绑定过程，在服务网络和目标网络间建立数据通道。服务网络进行快速绑定确认，并且将缓存数据包转发给目标网络。 [92] Step 308: The MN initiates a fast mobile IP binding procedure to establish a data channel between the serving network and the target network. The service network performs fast binding confirmation and forwards the cached packets to the target network.

[93] 步骤 309: MN建立到目标网络的层 2连接。 [93] Step 309: The MN establishes a layer 2 connection to the target network.

[94] 步骤 310: 层 2连接建立完成，链路激活。 [94] Step 310: Layer 2 connection is established and the link is activated.

[95] 步骤 311 : MN恢复到目标网络的 IP连接。 [95] Step 311: The MN reverts to the IP connection of the target network.

[96] 步骤 312: MN请求目标网络下发缓存的数据包，目标网络将从服务网络处转移过来的数据包下发给 MN。 [96] Step 312: The MN requests the target network to send the buffered data packet, and the target network sends the data packet transferred from the service network to the MN.

[97] 步骤 313: MN进行 MIP的注册 /绑定更新。 [97] Step 313: The MN performs MIP registration/binding update.

[98] 步骤 314: 切换完成，目标网络通知服务网络清除资源，目标网络成为 MN的当前服务网络。 [98] Step 314: After the handover is completed, the target network notifies the service network to clear the resources, and the target network becomes the current service network of the MN.

[99] 以上步骤 307至步骤 314只是 MN在异构网络之间进行切换的一种优选方案，为了实现异构网络之间进行切换，不同机制下的切换方案可能会有所不同，此处不再赞述。 [99] The above steps 307 to 314 are only a preferred scheme for the MN to switch between heterogeneous networks. In order to implement handover between heterogeneous networks, the handover scheme under different mechanisms may be different. No longer praise.

[100] 本发明提供的第四实施例是一种异构无线网络之间进行切换的网络实体，其结构如图 5所示，包括： The fourth embodiment of the present invention provides a network entity for switching between heterogeneous wireless networks. The structure is as shown in FIG. 5, and includes:

[101] 第一获取模块 401 : 用于获取目标网络能力支持的预认证信息； [101] a first obtaining module 401: pre-authentication information for acquiring target network capability support;

[102] 第一下发模块 402: 用于向移动节点下发第一获取模块 401所获取的预认证信息 The first sending module 402 is configured to send the pre-authentication information acquired by the first acquiring module 401 to the mobile node.

[103] 进一步，第一下发模块 402还包括第一下发子模块 4021 : 用于在 [103] Further, the first sending module 402 further includes a first sending submodule 4021:

[104] 移动节点选取与其匹配的预认证信息作为预认证吋所需的预认证信息； [104] The mobile node selects the pre-authentication information matched with it as the pre-authentication information required for pre-authentication;

[105] 移动节点根据所确定的预认证信息，发起目标网络的预认证； [105] The mobile node initiates pre-authentication of the target network according to the determined pre-authentication information;

[106] 预认证通过后，移动节点在异构网络之间进行切换；之前 [106] After the pre-authentication is passed, the mobile node switches between heterogeneous networks;

[107] 向移动节点下发第一获取模块 401所获取的预认证信息。 [107] The pre-authentication information acquired by the first obtaining module 401 is delivered to the mobile node.

[108] 本发明提供的第五实施例是一种异构无线网络之间进行切换的网络实体，其结构如图 6所示，包括： The fifth embodiment of the present invention provides a network entity for switching between heterogeneous wireless networks. The structure is as shown in FIG. 6, and includes:

[109] 接收模块 501 : 用于接收移动节点上报其能力支持的预认证信息； [109] The receiving module 501 is configured to receive pre-authentication information that the mobile node reports its capability support.

[110] 选取模块 502: 用于根据接收模块 501接收的预认证信息进行选择，选取出与移动节点匹配的预认证信息，并将选取出的预认证信息提供给第二下发模块； [111] 第二下发模块 503: 用于向移动节点通告选取模块 502提供的预认证信息。 [110] The selecting module 502 is configured to: select, according to the pre-authentication information received by the receiving module 501, select pre-authentication information that matches the mobile node, and provide the selected pre-authentication information to the second sending module; The second sending module 503 is configured to notify the mobile node of the pre-authentication information provided by the selecting module 502.

[112] 进一步第二下发模块 503还包括第二下发子模块 5031 : 用于在 [112] Further second sending module 503 further includes a second sending submodule 5031: for

[113] 移动节点以通告信息作为预认证吋所需的预认证信息； [113] The mobile node uses the advertisement information as pre-authentication information required for pre-authentication;

[114] 移动节点根据所确定的预认证信息，发起目标网络的预认证； [114] The mobile node initiates pre-authentication of the target network according to the determined pre-authentication information;

[115] 预认证通过后，移动节点在异构网络之间进行切换；之前 [115] After the pre-authentication is passed, the mobile node switches between heterogeneous networks;

[116] 向移动节点通告选取模块 502提供的预认证信息。 [116] Notifying the mobile node of the pre-authentication information provided by the selection module 502.

[117] 本发明提供的第六实施例是一种异构无线网络之间进行切换的网络实体，其结构如图 7所示，包括： The sixth embodiment of the present invention provides a network entity for switching between heterogeneous wireless networks. The structure is as shown in FIG. 7, and includes:

[118] 第二获取模块 601 : 用于获取移动节点能力支持的预认证信息； [118] a second obtaining module 601: pre-authentication information for obtaining mobile node capability support;

[119] 传递模块 602: 用于通过上下文传递机制，向目标网络实体传递所述获取模块 6[119] The delivery module 602: for transmitting the acquisition module to the target network entity by a context transfer mechanism.

01获取的预认证信息。 01 Pre-authentication information obtained.

[120] 进一步传递模块 602还包括传递子模块 6021 : 用于在 [121] 目标网络实体根据服务网络的网络侧实体所传递的预认证信息，选取出与移动节点匹配的预认证信息，并向移动节点通告其所选择的预认证信息； [120] The further delivery module 602 also includes a delivery sub-module 6021: for [121] The target network entity selects pre-authentication information matching the mobile node according to the pre-authentication information transmitted by the network-side entity of the service network, and notifies the mobile node of the pre-authentication information selected by the mobile node;

[122] 移动节点以目标网络实体所选择的预认证信息作为预认证吋所需的预认证信息 [122] The mobile node uses the pre-authentication information selected by the target network entity as the pre-authentication information required for pre-authentication.

[123] 移动节点根据所确定的预认证信息，发起目标网络的预认证； [123] The mobile node initiates pre-authentication of the target network according to the determined pre-authentication information;

[124] 预认证通过后，移动节点在异构网络之间进行切换；之前 [124] After the pre-authentication is passed, the mobile node switches between heterogeneous networks;

[125] 通过上下文传递机制，向目标网络实体传递所述获取模块 601获取的预认证信息。 [125] The pre-authentication information acquired by the obtaining module 601 is delivered to the target network entity through a context delivery mechanism.

[126] 本发明提供的第七实施例是一种异构无线网络之间进行切换的移动节点，其结构如图 8所示，包括： The seventh embodiment of the present invention provides a mobile node for switching between heterogeneous wireless networks. The structure is as shown in FIG. 8, and includes:

[127] 确定模块 701 : 用于确定预认证吋所需的预认证信息； [127] determining module 701: pre-authentication information required for determining pre-authentication;

[128] 预认证模块 702: 用于根据确定模块 701所确定的预认证信息，发起目标网络的预认证； [128] The pre-authentication module 702: is configured to initiate pre-authentication of the target network according to the pre-authentication information determined by the determining module 701;

[129] 切换模块 703: 用于根据预认证模块 702提供的预认证通过信息，在异构网络之间进行切换。 [129] The switching module 703: is configured to switch between heterogeneous networks according to the pre-authentication pass information provided by the pre-authentication module 702.

[130] 另外，本领域普通技术人员可以理解实现上述实施例所述的异构无线网络之间进行切换的方法中的全部或部分步骤是可以通过程序来指令相关的硬件完成的，所述的程序可以存储于一种计算机可读存储介质中，该程序在运行吋，执行包括上述方法实施例的部分或全部步骤。上述提到的存储介质可以是只读存储器，磁盘或光盘等。 [130] In addition, those skilled in the art may understand that all or part of the steps of implementing the handover between the heterogeneous wireless networks described in the foregoing embodiments may be performed by a program to instruct related hardware. The program may be stored in a computer readable storage medium, which, after being executed, performs some or all of the steps including the above method embodiments. The storage medium mentioned above may be a read only memory, a magnetic disk or an optical disk or the like.

[131] 综上所述，本发明实施例可以在移动节点发生异构网络间切换吋，实现异构网络的快速切换，从而提高了***的运行性能。 In summary, the embodiment of the present invention can switch between heterogeneous networks on the mobile node to implement fast switching of the heterogeneous network, thereby improving the running performance of the system.

[132] 显然，本领域的技术人员可以对本发明进行各种改动和变型而不脱离本发明的精神和范围。这样，倘若本发明的这些修改和变型属于本发明权利要求及其等同技术的范围之内，则本发明也意图包含这些改动和变型在内。 [132] It will be apparent to those skilled in the art that various modifications and changes can be made in the present invention without departing from the spirit and scope of the invention. Thus, it is intended that the present invention cover the modifications and the modifications of the invention

Claims

权利要求书 Claim

[1] 一种异构无线网络之间进行切换的方法，其特征在于，包括： [1] A method for switching between heterogeneous wireless networks, comprising:

确定预认证吋所需的预认证信息； Determine the pre-certification information required for pre-certification;

根据所确定的预认证信息，发起目标网络的预认证； Initiating pre-authentication of the target network according to the determined pre-authentication information;

当所述预认证通过后，在异构网络之间进行切换。 After the pre-authentication is passed, switching between heterogeneous networks is performed.

[2] 如权利要求 1所述的方法，其特征在于，所述确定预认证吋所需的预认证信息，具体包括： [2] The method according to claim 1, wherein the determining the pre-authentication information required for the pre-authentication includes:

接收服务网络的网络侧实体下发的，由服务网络的网络侧实体所获取的目标网络能力支持的预认证信息； Receiving pre-authentication information supported by the target network capability acquired by the network side entity of the service network delivered by the network side entity of the service network;

选取与移动节点匹配的预认证信息作为预认证吋所需的预认证信息。 The pre-authentication information matching the mobile node is selected as the pre-authentication information required for pre-authentication.

[3] 如权利要求 2所述的方法，其特征在于，所述服务网络的网络侧实体通过路由器通告消息、 DHCP消息、 PPP消息、 EAP消息、媒体无关的消息或专用的预认证信令来下发预认证信息。 [3] The method according to claim 2, wherein the network side entity of the service network uses a router advertisement message, a DHCP message, a PPP message, an EAP message, a media-independent message or a dedicated pre-authentication signaling. Issue pre-authentication information.

[4] 如权利要求 2或 3所述的方法，其特征在于，所述服务网络的网络侧实体下发的预认证信息包括以下任意一种或组合： [4] The method according to claim 2 or 3, wherein the pre-authentication information delivered by the network-side entity of the service network includes any one or combination of the following:

目标网络的接入类型信息、目标网络的接入认证方式信息、目标网络需要的密钥生成算法信息和目标网络预认证能力信息。 The access type information of the target network, the access authentication mode information of the target network, the key generation algorithm information required by the target network, and the target network pre-authentication capability information.

[5] 如权利要求 1所述的方法，其特征在于，所述确定预认证吋所需的预认证信息，具体包括： [5] The method according to claim 1, wherein the determining the pre-authentication information required for the pre-authentication includes:

向服务网络的网络侧实体上报移动节点能力支持的预认证信息；接收所述服务网络的网络侧实体的通告信息，所述通告信息表示了服务网络的网络侧实体根据所上报的预认证信息选取出的与所述移动节点匹配的预认证信息； And transmitting the pre-authentication information supported by the mobile node to the network-side entity of the service network; receiving the advertisement information of the network-side entity of the service network, where the notification information indicates that the network-side entity of the service network selects the pre-authentication information according to the reported Pre-authentication information matching the mobile node;

以所述通告信息作为预认证吋所需的预认证信息。 The notification information is used as pre-authentication information required for pre-authentication.

[6] 如权利要求 5所述的方法，其特征在于，所述接收所述服务网络的网络侧实体的通告信息，具体包括： [6] The method according to claim 5, wherein the receiving the notification information of the network side entity of the service network specifically includes:

接收所述服务网络的网络侧实体所选取的与所述移动节点匹配的预认证信息。 Receiving pre-authentication information selected by the network side entity of the service network that matches the mobile node.

[7] 如权利要求 5所述的方法，其特征在于，所述接收所述服务网络的网络侧实体的通告信息，具体包括： [7] The method according to claim 5, wherein the receiving the notification information of the network side entity of the service network specifically includes:

接收所述服务网络的网络侧实体下发的确认信息，所述确认信息用于表示该网络侧实体预下发的预认证信息与所上报的预认证信息相同。 The acknowledgment information sent by the network side entity of the service network is received, and the acknowledgment information is used to indicate that the pre-authentication information pre-delivered by the network-side entity is the same as the pre-authentication information reported.

[8] 如权利要求 5所述的方法，其特征在于，所述向服务网络的网络侧实体上报移动节点能力支持的预认证信息，具体包括： [8] The method according to claim 5, wherein the reporting the pre-authentication information supported by the mobile node capability to the network-side entity of the service network comprises:

通过路由器请求消息、 DHCP消息、 PPP消息、 EAP消息、媒体无关的消息 Request messages, DHCP messages, PPP messages, EAP messages, media-independent messages through routers

、或专用的预认证信令向服务网络的网络侧实体上报与移动节点匹配的目标网络的预认证信息。 The pre-authentication information of the target network matching the mobile node is reported to the network side entity of the service network.

[9] 如权利要求 5至 8任意一项所述的方法，其特征在于，所述向服务网络的网络侧实体上报移动节点能力支持的预认证信息包括以下任意一种或组合：目标网络的接入类型信息、目标网络的接入认证方式信息、目标网络需要的密钥生成算法信息和目标网络预认证能力信息中的。 [9] The method according to any one of claims 5 to 8, wherein the pre-authentication information for reporting the mobile node capability support to the network side entity of the service network includes any one or combination of the following: The access type information, the access authentication mode information of the target network, the key generation algorithm information required by the target network, and the target network pre-authentication capability information.

[10] 如权利要求 1所述的方法，其特征在于，所述确定预认证吋所需的预认证信息，具体包括： [10] The method according to claim 1, wherein the determining the pre-authentication information required for the pre-authentication includes:

服务网络的网络侧实体获取移动节点能力支持的预认证信息；通过上下文传递机制，所述服务网络的网络侧实体向目标网络实体传递其所获取的预认证信息； The network side entity of the service network obtains pre-authentication information supported by the mobile node capability; and the network side entity of the service network transmits the pre-authentication information acquired by the network-side entity of the service network to the target network entity;

所述目标网络实体根据所述服务网络的网络侧实体所传递的预认证信息，选取出与移动节点匹配的预认证信息，并通告其所选择的预认证信息；以所述目标网络实体所选择的预认证信息作为预认证吋所需的预认证信息 And the target network entity selects pre-authentication information matching the mobile node according to the pre-authentication information transmitted by the network-side entity of the service network, and advertises the selected pre-authentication information; and selects by the target network entity. Pre-authentication information as pre-authentication information required for pre-authentication

[11] 如权利要求 10所述的方法，其特征在于，所述通告其所选择的预认证信息[11] The method of claim 10, wherein the notifying the selected pre-authentication information

，具体包括： Specifically, including:

由所述服务网络的网络侧实体向移动节点转发所述目标网络实体所选择的预认证信息。 The pre-authentication information selected by the target network entity is forwarded by the network side entity of the service network to the mobile node.

[12] 如权利要求 10所述的方法，其特征在于，所述通告其所选择的预认证信息 [12] The method of claim 10, wherein the notifying the selected pre-authentication information

，具体包括：所述目标网络实体直接向移动节点通告其所选择的预认证信息。 Specifically, including: The target network entity directly advertises the selected pre-authentication information to the mobile node.

[13] 如权利要求 1所述的方法，其特征在于，在所述确定预认证吋所需的预认证信息过程中， [13] The method according to claim 1, wherein in the process of determining pre-authentication information required for pre-authentication,

当移动节点能力支持的预认证信息和目标网络能力支持的预认证信息不兼容吋，所述目标网络实体向所述移动节点发送预认证信息不兼容的信息。 When the pre-authentication information supported by the mobile node capability and the pre-authentication information supported by the target network capability are not compatible, the target network entity sends information that the pre-authentication information is incompatible to the mobile node.

[14] 如权利要求 3或 8所述的方法，其特征在于，所述媒体无关的消息包括：媒体无关的获取网络信息消息和 /或媒体无关的网络査询消息。 [14] The method according to claim 3 or 8, wherein the media-independent message comprises: a media-independent acquisition network information message and/or a media-independent network query message.

[15] 如权利要求 1所述的方法，其特征在于，所述在异构网络之间进行切换吋，釆用预测式的切换方式或者反应式的切换方式。 [15] The method according to claim 1, wherein the switching between the heterogeneous networks is performed by using a predictive switching mode or a reactive switching mode.

[16] 一种异构无线网络之间进行切换的网络实体，其特征在于，包括： [16] A network entity for switching between heterogeneous wireless networks, comprising:

第一获取模块：用于获取目标网络能力支持的预认证信息；第一下发模块：用于向移动节点下发所述第一获取模块所获取的预认证信息。 The first obtaining module is configured to: obtain pre-authentication information supported by the target network capability; and the first sending module is configured to send the pre-authentication information acquired by the first acquiring module to the mobile node.

[17] 一种异构无线网络之间进行切换的网络实体，其特征在于，包括： [17] A network entity that performs handover between heterogeneous wireless networks, and includes:

接收模块：用于接收移动节点上报其能力支持的预认证信息；选取模块：用于根据所述接收模块接收的预认证信息进行选择，选取出与所述移动节点匹配的预认证信息，并将所选取出的预认证信息提供给第二下发模块； a receiving module: configured to receive pre-authentication information that the mobile node reports its capability support; a selection module: configured to select, according to the pre-authentication information received by the receiving module, select pre-authentication information that matches the mobile node, and The selected pre-authentication information is provided to the second delivery module;

第二下发模块：用于向所述移动节点通告所述选取模块提供的预认证信息 a second sending module: configured to notify the mobile node of pre-authentication information provided by the selecting module

[18] —种异构无线网络之间进行切换的网络实体，其特征在于，包括： [18] A network entity for switching between heterogeneous wireless networks, comprising:

第二获取模块：用于获取移动节点能力支持的预认证信息；传递模块：用于通过上下文传递机制，向目标网络实体传递所述第二获取模块所获取的预认证信息。 The second obtaining module is configured to: obtain pre-authentication information supported by the mobile node, and send the pre-authentication information obtained by the second acquiring module to the target network entity by using a context transfer mechanism.

[19] 一种异构无线网络之间进行切换的移动节点，其特征在于，包括： [19] A mobile node that switches between heterogeneous wireless networks, and includes:

确定模块：用于确定预认证吋所需的预认证信息； Determining module: Pre-authentication information required to determine pre-authentication;

预认证模块：用于根据所述确定模块所确定的预认证信息，发起目标网络的预认证；切换模块：用于在所述预认证模块所发起的预认证通过后' 在异构网络之间进行切换。 a pre-authentication module: configured to initiate pre-authentication of the target network according to the pre-authentication information determined by the determining module; The switching module is configured to: switch between heterogeneous networks after the pre-authentication initiated by the pre-authentication module passes.