CN106465096B - It accesses network and obtains method, terminal and the core net of client identification module information - Google Patents

Abstract

The embodiment of the invention discloses method, terminal and the core nets of a kind of access network and acquisition client identification module information.Terminal sends attach request to Internet of Things core net, the attach request carries the device identification of the terminal and accesses without client identification module SIM and indicates, so that Internet of Things core net adheres to according to the no SIM access instruction permission terminal and is the terminal distribution temporary identifier；The terminal receives the attachment response that the Internet of Things core net is sent；The terminal sends the request of packet message protocol PDP context activation to the Internet of Things core net, so that the Internet of Things core net receives the PDP context activation request, it is the dedicated internet Protocol IP address of the terminal distribution；The terminal receives the activation success message that the Internet of Things core net is sent, and the activation success message carries the private ip address；The terminal receives the list of server addresses that Internet of Things core net is sent.

Description

Method for accessing network and obtaining customer identification module information, terminal and core network

technical field

The embodiment of the present invention relates to communication technology, and in particular to a method for accessing a network and acquiring customer identification module information, a terminal and a core network.

Background technique

With the rise of the Internet of Things (Internet of Things, IoT), machine-to-machine (Machine to Machine, M2M) terminals are gradually being widely used. When the M2M terminal leaves the factory, a Subscriber Identity Module (SIM) needs to be preset, and the preset SIM corresponds to a certain operator. When a user needs to update SIM information, the update can be performed remotely. When the preset operator is not the operator required by the user or the preset SIM is damaged, the terminal cannot access the network.

Contents of the invention

In view of this, the embodiments of the present invention provide a method for accessing a network and obtaining customer identification module information, a terminal and a core network, so as to realize network access or obtain SIM information when the terminal does not have a SIM.

In the first aspect, a method for accessing a network is provided, including: a terminal sends an attach request to the core network of the Internet of Things, and the attach request carries the device identifier of the terminal and a SIM access indication without a customer identification module, so that the IoT The networking core network allows the terminal to attach according to the no-SIM access indication and assigns a temporary identifier to the terminal; the terminal receives an attach response sent by the Internet of Things core network, and the attach response carries the temporary identifier; The terminal sends a PDP context activation request to the Internet of Things core network, and the PDP context activation request carries the temporary identifier, so that the Internet of Things core network accepts the PDP context activation request for all The terminal is assigned a dedicated IP address; the terminal receives the activation success message sent by the core network of the Internet of Things, and the successful activation message carries the dedicated IP address; the terminal receives the server activation message sent by the core network of the Internet of Things address list.

In a first possible implementation manner of the first aspect, the device identifier of the terminal is an International Mobile Equipment Identity (IMEI), or a Universally Unique Identity (UUID), or a Media Access Control (MAC) address.

In a second possible implementation manner of the first aspect, the temporary identifier is a packet temporary mobile subscriber identity P-TMSI, or a temporary logical link identifier TLLI.

With reference to the first aspect or the first or second possible implementation manner of the first aspect, in a third possible implementation manner, receiving the server address list sent by the Internet of Things core network by the terminal includes, the terminal The server address list is received through the attach response or the activation success message.

In a fourth possible implementation manner of the first aspect, the server address list is configured locally by the Internet of Things core network, or is obtained by the Internet of Things core network from a network element outside the Internet of Things core network.

In a second aspect, a method for obtaining SIM information of a customer identification module is provided, including: the terminal sends an attach request to the core network of the Internet of Things, and the attach request carries the device identifier of the terminal and an indication of SIM access without a customer identity module, so that the core network of the Internet of Things allows the terminal to attach according to the no-SIM access indication and assigns a temporary identifier to the terminal; the terminal receives an attach response sent by the core network of the Internet of Things, and the attach response carries the Temporary identification; the terminal sends a packet message protocol PDP context activation request to the Internet of Things core network, and the PDP context activation request carries the temporary identification, so that the Internet of Things core network accepts the PDP context activation request assigning a dedicated IP address to the terminal; the terminal receives an activation success message sent by the core network of the Internet of Things, and the successful activation message carries the dedicated IP address; the terminal receives the activation success message from the core network of the Internet of Things receiving the address of the SIM delivery server; the terminal performs bidirectional authentication with the SIM delivery server, and establishes a two-way security channel; the terminal sends a SIM information request message to the SIM delivery server, and the SIM information request message carries the The device identification of the terminal, so that the SIM delivery server performs validity verification on the device identification of the terminal, and applies for SIM information for the terminal after the verification is passed; the terminal receives the SIM delivery server through the The SIM information sent by the two-way secure channel.

In the first possible implementation manner of the second aspect, the device identifier of the terminal is an International Mobile Equipment Identity (IMEI), or a Universally Unique Identity (UUID), or a Media Access Control (MAC) address.

In a second possible implementation manner of the second aspect, the temporary identifier is a packet temporary mobile subscriber identity P-TMSI, or a temporary logical link identifier TLLI.

In combination with the second aspect or the first or second possible implementation of the second aspect, in a third possible implementation, the terminal and the SIM delivery server perform bidirectional authentication, and establishing a bidirectional secure channel includes: The terminal sends a certificate-based authentication request to the SIM delivery server, so that the SIM delivery server is authenticated by a third-party certificate authentication server, and receives the third-party certificate authentication request after the third-party certificate authentication server passes the authentication. The authentication sent by the server is confirmed; the terminal establishes a secure transport layer TLS channel or a datagram secure transport layer DTLS channel with the SIM delivery server.

In a third aspect, a method for accessing a network is provided, wherein the method includes: the core network of the Internet of Things receives an attach request sent by a terminal, and the attach request carries the device identifier of the terminal and a clientless identification module SIM access indication; the Internet of Things core network allows the terminal to attach according to the no-SIM access indication, assigns a temporary identifier to the terminal, and returns an attach response to the terminal, the attach response carrying the The temporary identifier; the Internet of Things core network accepts the packet message protocol PDP context activation request of the terminal, and allocates a dedicated Internet Protocol IP address for the terminal, and the PDP context activation request carries the temporary identifier; the object The networking core network sends an activation success message to the terminal, and the activation success message carries the dedicated IP address; the IoT core network sends a server address list to the terminal.

In a first possible implementation manner of the third aspect, the device identifier of the terminal is an International Mobile Equipment Identity (IMEI), or a Universally Unique Identity (UUID), or a Media Access Control (MAC) address.

In a second possible implementation manner of the third aspect, the temporary identifier is a packet temporary mobile subscriber identity P-TMSI, or a temporary logical link identifier TLLI.

With reference to the third aspect or the first or second possible implementation of the third aspect, in a third possible implementation, the IoT core network includes a first core network element and a second core network element, The first core network element is a serving GPRS support node SGSN, and the second core network element is a gateway GPRS support node GGSN, or the first core network element is a mobility management entity MME, and the The second core network element is a packet data network gateway SPGW.

In combination with the third possible implementation of the third aspect, in a fourth possible implementation, the core network of the Internet of Things accepts the packet packet protocol PDP context activation request of the terminal, and assigns a dedicated Internet protocol to the terminal. The IP address includes: the first core network element accepts the PDP context activation request, and assigns a dedicated access point name APN to the terminal; the first core network element sends the Create a PDP context request, the create PDP context request carries the temporary identifier and the dedicated APN; the second core network element allocates a dedicated IP address for the terminal according to the APN, and responds to the created PDP context by creating a PDP context Send the dedicated IP address to the first core network element.

With reference to the fourth possible implementation manner of the third aspect, in a fifth possible implementation manner, the network element of the second core network performs access control on the terminal based on the IP address.

With reference to the fourth possible implementation manner of the third aspect, in a sixth possible implementation manner, sending the server address list to the terminal by the IoT core network includes that the IoT core network transmits the server address list through the attachment Sending the server address list to the terminal in response or the activation success message.

With reference to the sixth possible implementation of the third aspect, in a seventh possible implementation, the Internet of Things core network sending the server address list to the terminal through the attach response includes: the first core network The network element sends the server address list to the terminal through an extended information element.

With reference to the sixth possible implementation manner of the third aspect, in an eighth possible implementation manner, sending the server address list to the terminal by the Internet of Things core network through the activation success message includes that the first The second core network element sends the server list to the first core network element through the protocol configuration option PCO information element in the create PDP context response, and the first core network element sends the PCO information element The activation success message is sent to the terminal.

With reference to the third aspect, in a ninth possible implementation manner, the server address list is locally configured by the Internet of Things core network, or is configured by the Internet of Things core network from a network element outside the Internet of Things core network. Obtain.

In a fourth aspect, a terminal is provided, including a sending unit, a receiving unit, a storage unit, and a processing unit, wherein the sending unit is configured to send an attachment request to the core network of the Internet of Things under the instruction of the processing unit, and the The attachment request carries the device identifier of the terminal and a SIM-free access indication, so that the Internet of Things core network allows the terminal to attach and assigns a temporary identifier to the terminal according to the SIM-free access indication; The receiving unit is configured to receive an attachment response sent by the Internet of Things core network, the attachment response carrying the temporary identifier; the sending unit is also configured to send a packet packet protocol PDP to the Internet of Things core network A context activation request, wherein the PDP context activation request carries the temporary identifier, so that the Internet of Things core network accepts the PDP context activation request, and assigns a dedicated Internet Protocol IP address to the terminal; the receiving unit also uses For receiving the activation success message sent by the Internet of Things core network, the activation success message carries the dedicated IP address; the receiving unit is also used to receive the server address list sent by the Internet of Things core network; the storage unit, Used to store the server address list.

With reference to the fourth aspect, in a first possible implementation manner, the device identifier of the terminal is an International Mobile Equipment Identity (IMEI), or a Universally Unique Identity (UUID), or a Media Access Control (MAC) address.

With reference to the fourth aspect, in a second possible implementation manner, the temporary identifier is a packet temporary mobile subscriber identity P-TMSI, or a temporary logical link identifier TLLI.

With reference to the fourth aspect, in a third possible implementation manner, the receiving unit receiving the server address list sent by the Internet of Things core network includes receiving the server address by the terminal through the attachment response or the activation success message list.

With reference to the fourth aspect or any of the first to third possible implementation manners of the fourth aspect, in a fourth possible implementation manner, the server address list includes the address of the SIM delivery server.

With reference to the fourth possible implementation of the fourth aspect, in a fifth possible implementation, the processing unit is further configured to perform two-way authentication with the SIM delivery server and establish a two-way security channel; the sending unit is further configured to send a SIM information request message to the SIM delivery server, where the SIM information request message carries the device identifier of the terminal, so that the SIM delivery server verifies the validity of the device identifier of the terminal Applying for SIM information for the terminal after the verification is passed; the receiving unit is further configured to receive the SIM information sent by the SIM delivery server through the two-way secure channel.

With reference to the fifth possible implementation of the fourth aspect, in a sixth possible implementation, the processing unit performs bidirectional authentication with the SIM issuing server, and establishing a bidirectional security channel includes: the processing unit is configured to: Instructing the sending unit to send a certificate-based authentication request to the SIM issuing server, so that the SIM issuing server is authenticated by a third-party certificate authentication server; the receiving unit is configured to authenticate at the third-party certificate authentication server After passing, receiving the authentication pass confirmation sent by the third-party certificate authentication server; the processing unit is configured to establish a secure transport layer TLS secure channel or a datagram secure transport layer DTLS secure channel with the SIM delivery server.

In a fifth aspect, an Internet of Things core network is provided, wherein the Internet of Things core network includes a first core network element and a second core network element, wherein the first core network element is used receiving the attach request sent by the terminal, the attach request carrying the device identifier of the terminal and the SIM-less access indication, and according to the SIM-less access indication, allowing the terminal to attach, and providing the The terminal allocates a temporary identifier, and returns an attach response to the terminal, where the attach response carries the temporary identifier; the first core network element is further configured to accept a packet packet protocol PDP context activation request of the terminal, and Assigning a dedicated access point name APN to the terminal, the PDP context activation request carrying the temporary identifier; the second core network element is configured to receive the creation PDP context request sent by the first core network element , the request to create a PDP context carries the temporary identifier and the dedicated APN, and assigns a dedicated Internet Protocol IP address to the terminal according to the APN, and sends a create PDP context response to a network element of the first core network, and the create The PDP context response carries the dedicated IP address; the first core network element is further configured to send an activation success message to the terminal, and the activation success message carries the dedicated IP address; the first core network element, and is also used to send the server address list to the terminal.

In a first possible implementation manner of the fifth aspect, the device identifier of the terminal is an International Mobile Equipment Identity (IMEI), or a Universally Unique Identity (UUID), or a Media Access Control (MAC) address.

In a second possible implementation manner of the fifth aspect, the temporary identifier is a packet temporary mobile subscriber identity P-TMSI, or a temporary logical link identifier TLLI.

In a third possible implementation manner of the fifth aspect, the network element of the second core network is further configured to perform access control on the terminal according to the foregoing dedicated IP address.

With reference to the fifth aspect or the first to third possible implementation manners of the fifth aspect, in a fourth possible implementation manner, the sending of the server address list by the first core network element to the terminal includes: The first core network element is configured to send the server address list to the terminal through the attach response or the activation success message.

With reference to the fourth possible implementation manner of the fifth aspect, in a fifth possible implementation manner, sending the server address list to the terminal by the first core network element through the attach response includes, the The first core network element is configured to send the server address list to the terminal through an extended information element in the attach response.

With reference to the fourth possible implementation manner of the fifth aspect, in a sixth possible implementation manner, sending the server address list to the terminal by the network element of the first core network through the activation success message includes: The first core network element is used to receive the creation PDP context response sent by the second core network element, and the protocol configuration option PCO information element in the creation PDP context response carries the server address list; the first core network The network element is configured to send the PCO information element to the terminal through the activation success message.

With reference to the fifth aspect or the first to sixth possible implementations of the fifth aspect, in a seventh possible implementation, the first core network element is a serving GPRS support node SGSN, and the second core The network element is a gateway GPRS support node GGSN, or the first core network element is a mobility management entity MME, and the second core network element is a packet data network gateway SPGW.

In an eighth possible implementation manner of the fifth aspect, the server address list is locally configured by the network element of the first core network or the network element of the second core network, or is configured from a network element outside the core network of the Internet of Things. NE acquisition.

Through the above solution, when the terminal has no SIM or the SIM is damaged, it can complete the process of attaching and activating the PDP context by using the device identification and the no-SIM access indication, so as to access the network to perform services or further obtain SIM information.

Description of drawings

FIG. 1a is a flowchart of a method for a terminal to access a network provided by an embodiment of the present invention;

Fig. 1b is a flowchart of a method for issuing SIM information provided by an embodiment of the present invention;

FIG. 2 is a flowchart of a method for a terminal to access a network according to an embodiment of the present invention;

FIG. 3 is a flow chart of some steps of the method for issuing SIM information provided by an embodiment of the present invention;

FIG. 4 is a structural block diagram of a terminal provided by an embodiment of the present invention;

FIG. 5 is a structural block diagram of an IoT core network provided by an embodiment of the present invention.

Detailed ways

Fig. 1a is a flowchart of a method for a terminal to access a network provided by an embodiment of the present invention. The method mainly includes the following steps:

101. The terminal sends an attach request to an Internet of Things core network (IoT core), where the attach request carries a device identifier of the terminal and an indication of no-SIM access.

The device identifier of the terminal may be an International Mobile Equipment Identity (IMEI), a Universally Unique Identifier (UUID), a Media Access Control (MAC) address, and the like.

102. The core network of the Internet of Things allows the terminal to attach according to the no-SIM access indication, and assigns a temporary identifier to the terminal.

103. The IoT core network returns an attach response to the terminal, and the attach response carries the temporary identifier.

The temporary identifier of the terminal may be a packet temporary mobile subscriber identity (Packet Temperate Mobile Subscriber Identity, P-TMSI) or a temporary logical link identifier (Temporary Logical LinkIdentifier, TLLI).

104. The terminal sends a packet data protocol context (PDP context, PDP context) activation request to the Internet of Things core network, and the packet data protocol context activation request carries the temporary identifier.

105. The Internet of Things core network accepts the packet message protocol context activation request, and assigns a dedicated Internet Protocol (Internet Protocol, IP) address to the terminal.

106. The Internet of Things core network sends an activation success message to the terminal, and the activation success message carries the above-mentioned dedicated IP address.

107. The physical network core network sends the server address list to the terminal.

It should be noted that, in the embodiment of the present invention, step 107 has no strict sequence relationship with other steps, and the physical network core network sends the server list to the terminal, which can be sent through an attach response or an activation success message.

The server address list can be configured locally by the IoT core network, or obtained from other network elements.

In the embodiment of the present invention, the terminal can access the above server address list after storing it locally. The core network of the Internet of Things can perform access control on the terminal according to the above IP address.

In the embodiment of the present invention, before sending an attach request, the terminal needs to initiate random access to establish a connection with the access network.

In the embodiment of the present invention, the terminal may be a mobile station (Mobile Station, MS), a user equipment (User Equipment, UE), a subscriber station (Subscriber Station, SS) and other equipment.

In the embodiment of the present invention, when the terminal has no SIM or the SIM is damaged, the terminal can use the device identification and the no-SIM access indication to complete the process of attaching and activating the PDP context, thereby accessing the network to perform services.

In the above example, after the terminal accesses the network, further, the server address list may include the address of a SIM distribution server (SIM Distribution Server), through which the terminal may obtain new SIM information. Figure 1b is a flowchart of a method for obtaining SIM information after a terminal accesses the network, the method including:

108. The terminal performs two-way authentication with the SIM delivery server, and establishes a two-way security channel.

109. The terminal sends a SIM information request message to the SIM delivery server, where the SIM information request message carries the device identifier of the terminal.

110. The SIM issuing server verifies the validity of the above-mentioned device identification, and applies for SIM information for the terminal after the verification is passed.

111. The SIM delivery server sends the SIM information to the terminal through the above-mentioned two-way secure channel.

In step 110, according to the cooperative relationship, the effective device identification database of the terminal can be obtained from the terminal manufacturer or the M2M application provider, and the database can be stored in the SIM delivery server or other servers (such as device management server). When the SIM delivery server confirms that the terminal belongs to the partner through the above database, it applies for a SIM for the terminal.

The SIM delivery server applying for a SIM for the terminal may include: the SIM delivery server sends a SIM request to the SIM management platform; the SIM management platform allocates a SIM for the terminal, and sends the SIM information to the SIM delivery server.

In the embodiment of the present invention, the SIM information may include an International Mobile Subscriber Identity (IMSI), a Ki key, and the like.

In the embodiment of the present invention, when there is no SIM, the terminal uses the SIM-free access method to access the cellular network to establish a connection with the SIM delivery server, and uses the device identifier to remotely obtain SIM information such as IMSI and Ki password from the SIM delivery server. Keys, etc., and then through the standard network access process, you can access the network and perform subsequent services. When the terminal SIM is damaged or there is no SIM, the SIM information can be updated without manual replacement of the SIM card, which improves the efficiency of updating the terminal SIM information and reduces the maintenance cost of the terminal.

In the embodiment of the present invention, the Internet of Things core network IoT core may specifically include a Serving GPRS Support Node (SGSN), a Gateway GPRS Support Node (Gateway GPRS Support Node, GGSN), or a Mobility Management Entity (Mobility Management Entity, MME), serving and packet data network gateway (Serving Gateway/PDN Gateway, SPGW). However, the embodiment of the present invention is not limited to the above two methods, as long as the network elements that can realize the similar functions of the above network elements are within the protection scope of the present invention.

The following is a more detailed description of the above-mentioned embodiment of the terminal accessing the network. In the following, the first core network element refers to SGSN, MME or similar functional entities, and the second core network element refers to GGSN, SPGW or similar functions. entity.

FIG. 2 is a detailed flow of accessing a network provided by an embodiment of the present invention.

201. The terminal sends an attach request to a network element of the first core network, where the attach request carries a device identifier of the terminal and a no-SIM access indication.

202. (Optional) The network element of the first core network performs validity verification on the foregoing device identification.

When the network element of the first core network verifies the device identifier (for example, IMEI), it may verify through the device management server, and the device management server stores a valid device identifier database.

203. The network element of the first core network allows the terminal to attach according to the no-SIM access indication, and allocates a temporary identifier to the terminal.

The network element of the first core network may use the temporary identifier as a mobility management (Mobility Manager, MM) context identifier.

204. The network element of the first core network returns an attach response to the terminal, where the attach response carries the temporary identifier.

205. The terminal sends an attach complete message to a network element of the first core network.

For steps 203-205, if the network element of the first core network does not allow the terminal to attach, the terminal reselects another network to try to access.

206. The terminal sends a PDP context activation request to the network element of the first core network, where the PDP context activation request carries the temporary identifier of the terminal.

207. The network element of the first core network accepts the PDP context activation request, and allocates a dedicated access point name (Access Point Name, APN) to the terminal.

208. The first core network element sends a PDP context creation request to the second core network element, where the PDP context creation request carries the temporary identifier and the dedicated APN.

The network element of the first core network may use the temporary identifier as the PDP context identifier.

209. The network element of the second core network allocates a dedicated IP address for the terminal according to the foregoing APN.

The network element of the second core network can assign an IP address to the terminal in a special IP address network segment (need to be configured).

210. The second core network element sends a PDP context creation response to the first core network element, where the PDP context creation response carries the dedicated IP address.

211. The network element of the first core network sends an activation success message to the terminal, where the activation success message carries the dedicated IP address.

212. The terminal receives the server address list from the Internet of Things core network and stores it locally.

The server list received by the terminal from the IoT core network can be obtained through an attach response or an activation success message. When obtained through the attach response, the first core network element sends the server address list to the terminal through the extended information element; when obtained through the activation success message, the second core network element sends the server address list through the protocol in the create PDP context response The configuration option (Protocol Configuration Option, PCO) information element is sent to the first core network element, and the first core network element sends the PCO information element to the terminal through an activation success message.

At this time, although the PDP context has been activated, the second core network element (such as GGSN or SPGW) will enable the terminal to only access the designated destination address according to the APN and IP address.

Step 108 in the above-mentioned embodiment establishes a two-way secure channel between the terminal and the above-mentioned SIM issuing server, which may include:

301. The terminal sends a certificate-based authentication request to the SIM delivery server.

302. The SIM delivery server performs authentication through a third-party certificate authentication server.

303. After passing the authentication, the third-party certificate authentication server sends an authentication pass confirmation to the SIM delivery server.

304. The terminal establishes a transport layer security (Transport Layer Security, TLS) security channel or a datagram transport layer security (Datagram Transport Layer Security, DTLS) security channel with the SIM delivery server.

In the embodiment of the present invention, the terminal initiates a certificate-based security authentication process, the terminal and the SIM delivery server complete the two-way authentication process through a third-party certificate authentication server, and then establish a TLS/DTLS security channel. Subsequent delivery of information with high security requirements (such as IMSI, Ki key, etc.) to the terminal can be realized through this secure channel. Both the request and delivery of the SIM can be realized through this secure channel.

Embodiments of the present invention further provide device embodiments for implementing the steps and methods in the above method embodiments.

An embodiment of the present invention provides a terminal. As shown in FIG. 4 , the terminal includes: a sending unit 401 , a receiving unit 402 , a storage unit 403 , and a processing unit 404 .

The sending unit 401 is configured to send an attach request to the core network of the Internet of Things under the instruction of the processing unit 404, where the attach request carries the device identifier of the terminal and the no-SIM access indication, so that the Internet of Things core network allows the terminal according to the no-SIM access indication Attach and assign a temporary identity to the terminal;

The receiving unit 402 is configured to receive an attach response sent by the core network of the Internet of Things, where the attach response carries a temporary identifier;

The sending unit 401 is also used to send a packet message protocol PDP context activation request to the Internet of Things core network, and the PDP context activation request carries a temporary identifier, so that the Internet of Things core network accepts the PDP context activation request and assigns a dedicated Internet Protocol IP address to the terminal ;

The receiving unit 402 is also used to receive an activation success message sent by the core network of the Internet of Things, where the activation success message carries a dedicated IP address;

The receiving unit 402 is also configured to receive the server address list sent by the physical network core network;

The storage unit 403 is configured to store the server address list.

Optionally, the receiving unit 402 receives the server address list sent by the Internet of Things core network, which may be received through an attach response or an activation success message.

In the embodiment of the present invention, the terminal can access the corresponding server after storing the server address list locally. The core network of the Internet of Things can perform access control on the terminal according to the above IP address.

In the embodiment of the present invention, when the terminal has no SIM or the SIM is damaged, the terminal can use the device identification and the no-SIM access indication to complete the process of attaching and activating the PDP context, thereby accessing the network to perform services.

In the above example, after the terminal accesses the network, further, the server address list may include a SIM distribution server (SIM Distribution Server) address, and the terminal may obtain new SIM information through the server, as follows:

The processing unit 403 is also configured to perform two-way authentication with the SIM issuing server and establish a two-way security channel;

The sending unit 401 is also configured to send a SIM information request message to the SIM delivery server, where the SIM information request message carries the device identifier of the terminal, so that the SIM delivery server verifies the validity of the device identifier of the terminal, and after the verification is passed, the terminal Apply for SIM information;

The receiving unit 402 is also configured to receive the SIM information sent by the SIM delivery server through the two-way secure channel.

In the embodiment of the present invention, the processing unit performs bidirectional authentication with the SIM delivery server, and establishing a bidirectional security channel includes:

The processing unit 404 is configured to instruct the sending unit 401 to send a certificate-based authentication request to the SIM delivery server, so that the SIM delivery server is authenticated by a third-party certificate authentication server;

The receiving unit 402 is configured to receive the authentication pass confirmation sent by the third-party certificate authentication server after the third-party certificate authentication server passes the authentication;

The processing unit 404 is configured to establish a secure transport layer TLS channel or a datagram secure transport layer DTLS channel with the SIM delivery server.

In the embodiment of the present invention, when there is no SIM, the terminal uses the SIM-free access method to access the cellular network to establish a connection with the SIM delivery server, and uses the device identifier to remotely obtain SIM information such as IMSI and Ki password from the SIM delivery server. Keys, etc., and then through the standard network access process, you can access the network and perform subsequent services. When the terminal SIM is damaged or there is no SIM, the SIM information can be updated without manual replacement of the SIM card, which improves the efficiency of updating the terminal SIM information and reduces the maintenance cost of the terminal.

It should be noted that, in the above embodiments, the sending unit may be a transmitter, the receiving unit may be a receiver, the processing unit may be a processor, and the storage unit may be any available medium that can be accessed by a computer.

An embodiment of the present invention provides an Internet of Things core network. As shown in FIG. 5 , the Internet of Things core network includes a first core network element 501 and a second core network element 502 .

The first core network element 501 is configured to receive the attach request sent by the terminal, the attach request carries the device identifier of the terminal and the no-SIM access indication, and allows the terminal to attach according to the no-SIM access indication, and provides the terminal with Allocate a temporary identifier, return an attach response to the terminal, and the attach response carries the temporary identifier;

The first core network element 501 is also used for accepting the packet message protocol PDP context activation request of the terminal, and assigning a dedicated access point name APN to the terminal, where the PDP context activation request carries a temporary identifier,

The second core network element 502 is configured to receive the request for creating a PDP context sent by the first core network element 501. The request for creating a PDP context carries a temporary identifier and a dedicated APN, and allocates a dedicated IP address for the terminal according to the APN, and sends the request to the first core network. The network element 501 sends a response to create a PDP context, and the response to create a PDP context carries the above-mentioned dedicated IP address;

The first core network element 501 is further configured to send an activation success message to the terminal, where the activation success message carries the above-mentioned dedicated IP address;

The first core network element 501 is further configured to send the server address list to the terminal.

Optionally, the first core network element 501 may send the server address list to the terminal through an attach response or an activation success message. When sending through the attach response, the first core network element sends the server address list to the terminal through the extension information element in the attach response; when sending through the activation success message, the first core network element receives the server address list sent by the second core network element Create a PDP context response, create a protocol configuration option PCO information element in the PDP context response to carry a server address list, and the first core network element sends the PCO information element to the terminal through an activation success message.

The server address list can be locally configured in the network element of the first core network or the network element of the second core network, or obtained from a network element outside the IoT core network.

In the embodiment of the present invention, the first core network element may be a SGSN, MME or a similar functional entity, and the second core network element may be a GGSN, an SPGW or a similar functional entity. The first core network element and the second core network element may be virtual functional entities or physical entities.

Optionally, the first core network element 501 may also be configured to verify the validity of the device identifier of the terminal after receiving the attach request sent by the terminal.

When the network element of the first core network verifies the device identifier (for example, IMEI), it may verify through the device management server, and the device management server stores a valid device identifier database.

After the PDP context is activated, the second core network element (such as GGSN or SPGW) can be used to perform access control on the terminal according to the above-mentioned dedicated IP address.

In the embodiment of the present invention, when the terminal has no SIM or the SIM is damaged, the core network of the Internet of Things allows the terminal to complete the process of attaching and activating the PDP context, thereby accessing the network to perform services.

Through the above description of the implementation manners, those skilled in the art can clearly understand that the present invention can be implemented by hardware, firmware, or a combination thereof. When implemented in software, the functions described above may be stored on or transmitted over as one or more instructions or code on a computer-readable medium. Computer-readable media includes both computer storage media and communication media including any medium that facilitates transfer of a computer program from one place to another. A storage media may be any available media that can be accessed by a computer. By way of example but not limitation: computer-readable media may include RAM, ROM, EEPROM, CD-ROM or other optical disk storage, magnetic disk storage media or other magnetic storage devices, or may be used to carry or store information in the form of instructions or data structures desired program code and any other medium that can be accessed by a computer. also. Any connection can suitably be a computer-readable medium. For example, if the software is transmitted from a website, server, or other remote source using coaxial cable, fiber optic cable, twisted pair, digital subscriber line (DSL), or wireless technologies such as infrared, radio, and microwave, then the coaxial cable , fiber optic cable, twisted pair, DSL, or wireless technologies such as infrared, wireless, and microwave are included in the fixation of the respective media. As used herein, disk and disc include compact disc (CD), laser disc, optical disc, digital versatile disc (DVD), floppy disc, and Blu-ray disc, where discs usually reproduce data magnetically, and discs Lasers are used to optically reproduce the data. Combinations of the above should also be included within the scope of computer-readable media.

In a word, the above descriptions are only preferred embodiments of the technical solutions of the present invention, and are not intended to limit the protection scope of the present invention. Any modifications, equivalent replacements, improvements, etc. made within the spirit and principles of the present invention shall be included within the protection scope of the present invention.

Claims (35)

1. A method for accessing a network, characterized in that the method comprises: The terminal sends an attach request to the core network of the Internet of Things, and the attach request carries the device identifier of the terminal and a SIM-free access indication of the terminal, so that the Internet of Things core network allows the terminal to attach according to the SIM-free access indication. and assigning a temporary identifier to the terminal; The terminal receives an attach response sent by the IoT core network, where the attach response carries the temporary identifier; The terminal sends a PDP context activation request to the Internet of Things core network, and the PDP context activation request carries the temporary identifier, so that the Internet of Things core network accepts the PDP context activation request for all The terminal is assigned a dedicated Internet Protocol IP address; The terminal receives an activation success message sent by the Internet of Things core network, and the activation success message carries the dedicated IP address; The terminal receives the server address list sent by the Internet of Things core network. 2. The method according to claim 1, wherein the device identifier of the terminal is an International Mobile Equipment Identity (IMEI), or a Universally Unique Identity (UUID), or a Media Access Control (MAC) address. 3. The method according to claim 1, wherein the temporary identifier is a packet temporary mobile subscriber identity (P-TMSI) or a temporary logical link identifier (TLLI). 4. The method according to any one of claims 1-3, wherein the terminal receiving the server address list sent by the core network of the Internet of Things comprises that the terminal receives the server address list through the attachment response or the activation success message. address list. 5. The method according to claim 1, wherein the server address list is locally configured by the Internet of Things core network, or obtained by the Internet of Things core network from a network element outside the Internet of Things core network. 6. A method for obtaining customer identity module SIM information, characterized in that the method comprises: The terminal sends an attach request to the core network of the Internet of Things, and the attach request carries the device identifier of the terminal and a SIM-free access indication of the terminal, so that the Internet of Things core network allows the terminal to attach according to the SIM-free access indication. and assigning a temporary identifier to the terminal; The terminal receives an attach response sent by the IoT core network, where the attach response carries the temporary identifier; The terminal sends a PDP context activation request to the Internet of Things core network, and the PDP context activation request carries the temporary identifier, so that the Internet of Things core network accepts the PDP context activation request for all The terminal is assigned a dedicated Internet Protocol IP address; The terminal receives an activation success message sent by the Internet of Things core network, and the activation success message carries the dedicated IP address; The terminal receives a SIM delivery server address from the Internet of Things core network; The terminal performs two-way authentication with the SIM delivery server, and establishes a two-way security channel; The terminal sends a SIM information request message to the SIM delivery server, where the SIM information request message carries the device identifier of the terminal, so that the SIM delivery server verifies the validity of the device identifier of the terminal, Applying for SIM information for the terminal after the verification is passed; The terminal receives the SIM information sent by the SIM delivery server through the two-way secure channel. 7. The method according to claim 6, wherein the device identifier of the terminal is an International Mobile Equipment Identity (IMEI), or a Universally Unique Identity (UUID), or a Media Access Control (MAC) address. 8. The method according to claim 6, wherein the temporary identifier is a packet temporary mobile subscriber identity (P-TMSI) or a temporary logical link identifier (TLLI). 9. The method according to any one of claims 6-8, wherein the two-way authentication is performed between the terminal and the SIM delivery server, and establishing a two-way secure channel includes: The terminal sends a certificate-based authentication request to the SIM delivery server, so that the SIM delivery server is authenticated by a third-party certificate authentication server, and receives the third-party certificate authentication request after the third-party certificate authentication server passes the authentication. The authentication sent by the server is confirmed; The terminal establishes a secure transport layer TLS secure channel or a datagram secure transport layer DTLS secure channel with the SIM delivery server. 10. A method for accessing a network, characterized in that the method comprises: The core network of the Internet of Things receives the attachment request sent by the terminal, and the attachment request carries the device identification of the terminal and the SIM access indication without the customer identification module; The Internet of Things core network allows the terminal to attach according to the no-SIM access indication, assigns a temporary identifier to the terminal, and returns an attach response to the terminal, where the attach response carries the temporary identifier; The Internet of Things core network accepts the packet message protocol PDP context activation request of the terminal, and allocates a dedicated Internet Protocol IP address for the terminal, and the PDP context activation request carries the temporary identifier; The IoT core network sends an activation success message to the terminal, and the activation success message carries the dedicated IP address; The IoT core network sends the server address list to the terminal. 11. The method according to claim 10, wherein the device identifier of the terminal is an International Mobile Equipment Identity (IMEI), or a Universally Unique Identity (UUID), or a Media Access Control (MAC) address. 12. The method according to claim 10, wherein the temporary identifier is a packet temporary mobile subscriber identity (P-TMSI) or a temporary logical link identifier (TLLI). 13. The method according to any one of claims 10-12, wherein the IoT core network includes a first core network element and a second core network element, and the first core network element is a service The GPRS support node SGSN, and the second core network element is a gateway GPRS support node GGSN, or the first core network element is a mobility management entity MME, and the second core network element is a packet data network Gateway SPGW. 14. The method according to claim 13, wherein the Internet of Things core network accepts the packet message protocol PDP context activation request of the terminal, and distributing a dedicated Internet Protocol IP address for the terminal comprises: The first core network element accepts the PDP context activation request, and assigns a dedicated access point name APN to the terminal; The first core network element sends a request to create a PDP context to the second core network element, where the request to create a PDP context carries the temporary identifier and the dedicated APN; The second core network element allocates a dedicated IP address to the terminal according to the APN, and sends the dedicated IP address to the first core network element by creating a PDP context response. 15. The method according to claim 14, wherein the network element of the second core network performs access control on the terminal according to the IP address. 16. The method according to claim 13, wherein the sending of the server address list by the Internet of Things core network to the terminal comprises, the Internet of Things core network passing the attachment response or the activation success message Send the server address list to the terminal. 17. The method according to claim 16, wherein the Internet of Things core network sending the server address list to the terminal through the attach response comprises that the first core network element sends the server address list The list is sent to the terminal through extended information elements. 18. The method according to claim 16, wherein the Internet of Things core network sending the server address list to the terminal through the activation success message comprises that the second core network element sends the list of addresses to the terminal The server list is sent to the first core network network element through the protocol configuration option PCO information element in the PDP context response, and the first core network element sends the PCO information element to the activation success message. described terminal. 19. The method according to claim 10, wherein the server address list is locally configured by the Internet of Things core network, or is obtained by the Internet of Things core network from a network element outside the Internet of Things core network. 20. A terminal, characterized in that the terminal includes a sending unit, a receiving unit, a storage unit and a processing unit, wherein, The sending unit is configured to send an attach request to the core network of the Internet of Things under the instruction of the processing unit, and the attach request carries the device identification of the terminal and a SIM access indication without a customer identification module, so that the object The networking core network allows the terminal to attach and assigns a temporary identifier to the terminal according to the no-SIM access indication; The receiving unit is configured to receive an attach response sent by the IoT core network, where the attach response carries the temporary identifier; The sending unit is further configured to send a packet message protocol PDP context activation request to the Internet of Things core network, and the PDP context activation request carries the temporary identifier, so that the Internet of Things core network accepts the PDP context Activating a request to assign a dedicated Internet Protocol IP address to the terminal; The receiving unit is further configured to receive an activation success message sent by the IoT core network, where the activation success message carries the dedicated IP address; The receiving unit is also used to receive the server address list sent by the Internet of Things core network; The storage unit is configured to store the server address list. 21. The terminal according to claim 20, wherein the device identifier of the terminal is an International Mobile Equipment Identity (IMEI), or a Universally Unique Identity (UUID), or a Media Access Control (MAC) address. 22. The terminal according to claim 20, wherein the temporary identifier is a packet temporary mobile subscriber identity (P-TMSI) or a temporary logical link identifier (TLLI). 23. The terminal according to claim 20, wherein the receiving unit receiving the server address list sent by the core network of the Internet of Things comprises receiving the server address by the terminal through the attachment response or the activation success message list. 24. The terminal according to any one of claims 20-23, wherein the server address list includes addresses of SIM delivery servers. 25. The terminal according to claim 24, characterized in that, The processing unit is further configured to perform two-way authentication with the SIM delivery server and establish a two-way security channel; The sending unit is further configured to send a SIM information request message to the SIM delivery server, where the SIM information request message carries the device identifier of the terminal, so that the SIM delivery server can send the device identifier of the terminal to the SIM delivery server. Perform validity verification, and apply for SIM information for the terminal after the verification is passed; The receiving unit is further configured to receive the SIM information sent by the SIM delivery server through the two-way secure channel. 26. The terminal according to claim 25, wherein the processing unit performs two-way authentication with the SIM delivery server, and establishing a two-way secure channel includes: The processing unit is configured to instruct the sending unit to send a certificate-based authentication request to the SIM delivery server, so that the SIM delivery server is authenticated by a third-party certificate authentication server; The receiving unit is configured to receive the authentication pass confirmation sent by the third-party certificate authentication server after the third-party certificate authentication server passes the authentication; The processing unit is configured to establish a secure transport layer TLS secure channel or a datagram secure transport layer DTLS secure channel with the SIM delivery server. 27. An Internet of Things core network, characterized in that, the Internet of Things core network includes a first core network element and a second core network element, wherein, The first core network element is configured to receive an attach request sent by a terminal, where the attach request carries the device identifier of the terminal and a SIM-less access indication, and according to the SIM-less access indication, allows attaching the terminal, assigning a temporary identifier to the terminal, and returning an attach response to the terminal, where the attach response carries the temporary identifier; The first core network element is further configured to accept the packet message protocol PDP context activation request of the terminal, and assign a dedicated access point name APN to the terminal, and the PDP context activation request carries the temporary identifier ; The second core network element is configured to receive a request for creating a PDP context sent by the first core network element, where the request for creating a PDP context carries the temporary identifier and the dedicated APN, and is based on the APN The terminal allocates a dedicated Internet Protocol IP address, and sends a PDP context creation response to the first core network element, and the PDP context creation response carries the dedicated IP address; The first core network element is further configured to send an activation success message to the terminal, where the activation success message carries the dedicated IP address; The first core network element is further configured to send the server address list to the terminal. 28. The IoT core network according to claim 27, wherein the device identifier of the terminal is an International Mobile Equipment Identity (IMEI), or a Universal Unique Identity (UUID), or a Media Access Control (MAC) address. 29. The IoT core network according to claim 27, wherein the temporary identifier is a packet temporary mobile subscriber identity (P-TMSI) or a temporary logical link identifier (TLLI). 30. The IoT core network according to claim 27, wherein the second core network element is further configured to perform access control on the terminal according to the dedicated IP address. 31. The core network of the Internet of Things according to any one of claims 27-30, wherein the sending of the server address list by the first core network element to the terminal includes that the first core network element It is configured to send the server address list to the terminal through the attach response or the activation success message. 32. The core network of the Internet of Things according to claim 31, wherein the sending of the server address list to the terminal by the network element of the first core network through the attach response comprises that the first core network The network element is used to send the server address list to the terminal through the extended information element in the attach response. 33. The Internet of Things core network according to claim 31, wherein the first core network element sending the server address list to the terminal through the activation success message comprises: The first core network element is configured to receive a PDP context creation response sent by a second core network element, and the protocol configuration option PCO information element in the PDP context creation response carries the server address list; The first core network element is configured to send the PCO information element to the terminal through the activation success message. 34. The core network of the Internet of Things according to any one of claims 27-30, wherein the first core network element is a serving GPRS support node SGSN, and the second core network element is a gateway GPRS support node The node GGSN, or the first core network element is a mobility management entity MME, and the second core network element is a packet data network gateway SPGW. 35. The core network of the Internet of Things according to claim 27, wherein the server address list is locally configured by the network element of the first core network or the network element of the second core network, or is configured from the network element of the Internet of Things Obtained from network elements outside the core network.