Background technology
At 3G (Third Generation) Moblie technology (3rd-Generation, in network standard 3G) and in mobile network's standard afterwards, in order to ensure subscriber equipment (User Equipment, UE) access security during access network, when UE enters network, need carry out Authentication and Key Agreement (Authentication and Key Agreement, AKA) authentication to the information of the subscriber card that belongs to this UE.Belong to 3G or Long Term Evolution (Long Term Evolution, LTE) subscriber card of system can insert Universal Mobile Telecommunications System (Universal Mobile Telecommunications System, UMTS) network and evolved packet system (Evolved Packet System, EPS) network, when subscriber card inserts different networks, there is corresponding net element that this subscriber card is carried out the AKA authentication respectively.Be specially: when subscriber card inserts the UMTS network, attaching position register in this network (Home Location Register, HLR) subscriber card is carried out the AKA authentication, when subscriber card inserts the EPS network, (HomeSubscriber Server HSS) carries out the AKA authentication to subscriber card to home subscriber server in this network.
When UE at different inter-network roamings, and when roaming into each network, corresponding network element in this network can carry out the AKA authentication to the subscriber card that belongs to this UE, and the network element in the heterogeneous networks is when authenticating subscriber card, the capital sends to subscriber card and comprises sequence number (Sequence Number, Ciphering Key SQN) (Authentication Vector, AV).Because the network element difference that subscriber card is carried out the AKA authentication of its correspondence between different networks, so the SQN in the Ciphering Key that sends of each network element also may be inconsistent, thereby produce the heavy stationary problem of SQN probably.
The process that Fig. 1 authenticates when different inter-network roamings for subscriber card in the prior art, this process may further comprise the steps:
S101: when subscriber card entered the UMTS network, HLR sent to subscriber card and comprises SQN
aAV.
S102: subscriber card receives this and comprises SQN
aAV, and according to this SQN
aValue is SQN with the target SQN value of preserving
oComparative result, judge this SQN
aWhether in the threshold range that is provided with, when judged result when being, carry out step S103, otherwise, carry out step S107.
S103: subscriber card affirmation authentication is passed through, and inserts this UMTS network, preserves SQN simultaneously
a, and adopt this SQN
aReplacing the target SQN value of preserving is SQN
o
S104: when this subscriber card need be transformed into the EPS network by the UMTS network, HSS sent to subscriber card and comprises SQN
bAV.
S105: subscriber card receives this and comprises SQN
bAV, and according to this SQN
bWith the target SQN value of preserving be SQN
aComparative result, judge this SQN
bWhether in the threshold range that is provided with, when judged result when being, carry out step S106, otherwise, carry out step S107.
S106: subscriber card affirmation authentication is passed through, and inserts this EPS network, preserves SQN simultaneously
b, and adopt this SQN
bReplacing the target SQN value of preserving is SQN
a
S107: authentification failure, return error message to subscriber card.
The above-mentioned process that authenticates to the EPS network by the UMTS netsurfing for subscriber card, because HLR and HSS lay respectively in the networks of different type, the user's of these two network equipment storages authentication information is inequality substantially, therefore two network equipments are when subscriber card sends AV, the SQN value that comprises among this AV is different, promptly in step S105 according to this SQN
bWith the target SQN that preserves be SQN
aComparative result, general this SQN that judges
bValue is substantially all outside threshold range, because this SQN
bValue outside threshold range, thereby cause the subscriber card authentification failure, and then caused the heavy synchronous problem of SQN.Same subscriber card the heavy stationary problem of same SQN can occur too at the verification process that is carried out to the UMTS network by the EPS netsurfing.And the heavy time delay that can cause the subscriber card access network synchronously of SQN, and, therefore caused the consumption of systematic function owing to need again subscriber card to be authenticated, thus the use of system business influenced.
Summary of the invention
In view of this, the embodiment of the invention provides a kind of method, system and device that the subscriber card of heterogeneous networks internetwork roaming is authenticated, the SQN that occurs in the process that the heterogeneous networks internetwork roaming authenticates in order to solution prior art subscriber card is synchronously heavy, the time delay of the subscriber card access network that causes and systemic consumable problem.
A kind of method that the subscriber card of heterogeneous networks internetwork roaming is authenticated that the embodiment of the invention provides comprises:
Subscriber card receives Ciphering Key, and judges the network type of the network equipment correspondence that sends described Ciphering Key, comprises the SQN value in the wherein said Ciphering Key;
Described subscriber card is according to described SQN value, and the target SQN value of the corresponding described network type of preserving, and determines whether to insert the network of described network type correspondence.
A kind of system that the subscriber card of heterogeneous networks internetwork roaming is authenticated that the embodiment of the invention provides, this system comprises:
The Ciphering Key transmitting terminal is used for sending Ciphering Key to subscriber card, comprises the SQN value in the wherein said Ciphering Key;
Subscriber card, be used to receive described Ciphering Key, and judge the network type of the Ciphering Key transmitting terminal correspondence that sends described Ciphering Key, according to described SQN value, reach the target SQN value of the corresponding described network type of preserving, determine whether to insert the network of described network type correspondence.
A kind of subscriber card that the embodiment of the invention provides, this subscriber card comprises:
Receive judge module, be used to receive Ciphering Key, and judge the network type of the network equipment correspondence that sends described Ciphering Key, comprise the SQN value in the wherein said Ciphering Key;
The storage access module is used for the value according to SQN, and the target SQN value of the corresponding described network type of preserving, and determines whether to insert the network of described network type correspondence.
The embodiment of the invention provides a kind of method, system and device that the subscriber card of heterogeneous networks internetwork roaming is authenticated, this authentication method comprises: subscriber card is judged the network type of the network equipment correspondence that sends Ciphering Key, according to the SQN value in the Ciphering Key, reach the target SQN value of the described network type of the correspondence of preserving, determine whether to insert the network of described network type correspondence.Because subscriber card is at every kind of network type in embodiments of the present invention, preserve the target SQN value of this network type correspondence, when judging the network type of the network equipment correspondence that sends this Ciphering Key, the SQN value that comprises according to Ciphering Key, and preserve to target SQN value that should network type, determine whether the network of access network type correspondence, thereby can effectively solve the asynchronous problem of SQN in the verification process, and then can reduce the time delay of subscriber card access network, improve the professional efficient of using.
Embodiment
The embodiment of the invention is in order effectively to solve UE when the networks of different type internetwork roaming, the heavy synchronous problem of the SQN that occurs, subscriber card is at every kind of network type in the embodiment of the invention, preserve the target SQN value of this network type correspondence, when judging the network type of the network equipment correspondence that sends this Ciphering Key, the SQN value that comprises according to Ciphering Key, and preserve to target SQN value that should network type, determine whether the network of access network type correspondence, thereby can effectively solve the asynchronous problem of the SQN of subscriber card in verification process, and then can reduce the time delay of subscriber card access network, improve the professional efficient of using.
Below in conjunction with Figure of description, the embodiment of the invention is elaborated.
The process that Fig. 2 authenticates when the different type network internetwork roaming for subscriber card in the embodiment of the invention, this process may further comprise the steps:
S201: during the subscriber card access network, subscriber card receives the Ciphering Key that network equipment sends, and wherein, comprises the SQN value in this Ciphering Key.
When subscriber card inserts in the network of 3G network type correspondence, when for example subscriber card enters the UMTS network, HLR in the UMTS network sends the Ciphering Key that comprises the SQN value to subscriber card, when the user inserts the network of LTE network type correspondence, when for example the user inserted the EPS network, the HSS in the EPS network sent the Ciphering Key that comprises the SQN value to subscriber card.
S202: subscriber card is judged the network type of the network equipment correspondence that sends this Ciphering Key according to this Ciphering Key.
This detailed process comprises: subscriber card is according to the authentication management field that comprises in this Ciphering Key (Authentication Management Field, AMF) separating position in (separate bit), judgement sends the network type of the network equipment correspondence of this Ciphering Key.
Before carrying out this step, also comprise: expected message authentication code (the eXpected Message Authentication Code that judges the Ciphering Key that receives, XMAC) whether equal message authentication code (Message Authentication Code, MAC), when definite this XMAC equals MAC, carry out subsequent step.
In embodiments of the present invention because in the network of every kind of network type correspondence, the network equipment that sends Ciphering Key to subscriber card is determined, therefore, can judge the network equipment that sends Ciphering Key, thereby determines the network type of this network equipment correspondence.
S203: according to the SQN value that comprises in this Ciphering Key, and preserve to target SQN value that should network type, determine whether to insert the network of described network type correspondence.
Determine whether that in embodiments of the present invention the network that inserts described network type correspondence comprises: determine the SQN value that comprises in the Ciphering Key and the difference of target SQN value, judge that this difference is whether in the threshold interval scope that is provided with, according to the result who judges, determine whether to insert the network of described network type correspondence.And, in result according to judgement, when determining whether to insert the network of described network type correspondence, also comprise: when described difference is in the threshold interval scope that is provided with, described subscriber card to described network return response message (RESponse, RES), and insert the network of described network type correspondence, otherwise described subscriber card is determined authentification failure, to the error message of described network return authentication.
Wherein, this subscriber card is that (Universal SIM, USIM) card owing to only make amendment at the usim card in the LTE network, therefore can not impact prior network device general SIM in embodiments of the present invention.And when this subscriber card inserts the network of every kind of network type correspondence, owing in subscriber card,, preserve the target SQN value of corresponding every kind of network type respectively, therefore at different network types, when according to the SQN value subscriber card being authenticated, the heavy stationary problem of SQN can not appear.
In the embodiment of the invention, in order in each subscriber card, to preserve corresponding target SQN value at every kind of network type, when this subscriber card inserts a certain network type first, for example insert the UMTS network first, or insert the EPS network first, network equipment that should network type is sent Ciphering Key to this subscriber card, and this subscriber card extracts the SQN value that comprises in this Ciphering Key, described SQN value is saved as the target SQN value of corresponding described network type.
It is example that following examples insert the UMTS network first with subscriber card, and the target SQN value of subscriber card being preserved this UMTS network type correspondence describes.When subscriber card enters into the UMTS network, HLR in the UMTS network and this subscriber card carry out the information interaction of verification process, HLR sends the AV Ciphering Key that comprises the SQN value to subscriber card, subscriber card determines that it inserts the UMTS network type first, extract the SQN value in this AV Ciphering Key, described SQN value is saved as target SQN value that should the UMTS network type.Certainly, when this subscriber card judged that it inserts other network types first, this subscriber card also can be carried out said process, and corresponding these other network types that it inserts are first preserved target SQN value.
Subscriber card comprises at least two memory spaces in embodiments of the present invention, each memory space is preserved the target SQN value of map network type, and corresponding identification information is set at each memory space, and set up the corresponding relation of identification information and network type, when subscriber card is judged the network type of the network equipment correspondence that sends Ciphering Key, search its corresponding identification information according to this network type, and according to the identification information that finds, extraction is to the target SQN value of memory space stored that should identification information, according to this target SQN value of extracting, determine whether to insert the network of this network type correspondence.
The specific implementation process that the subscriber card to the heterogeneous networks internetwork roaming that Fig. 3 provides for the embodiment of the invention authenticates, this process may further comprise the steps:
S301: subscriber card enters network, receives the Ciphering Key that network equipment sends, and wherein, comprises the SQN value in this Ciphering Key;
S302: subscriber card is according to this Ciphering Key, the XMAC that detects this Ciphering Key whether equal message authentication code (Message Authentication Code MAC), when the test results is yes, carries out step S303, otherwise, carry out step S307.
S303: subscriber card is according to the AMF in the Ciphering Key, judge the network type of the network equipment correspondence that sends this Ciphering Key, when judging the network equipment correspondence UMTS network type that sends this Ciphering Key, carry out step S304, when judging the network equipment correspondence EPS network type that sends this Ciphering Key, carry out step S305.
S304: subscriber card calls the first target SQN value of the corresponding UMTS network type of preservation, determines the first target SQN value and the difference of the SQN value that receives, judges that this difference is whether in the first threshold scope of setting, when judged result when being, carry out step S306, otherwise, carry out step S307.
S305: subscriber card calls the second target SQN value of the corresponding EPS network type of preservation, determines the second target SQN value and the difference of the SQN value that receives, judges that this difference is whether in second threshold range of setting, when judged result when being, carry out step S306, otherwise, carry out step S307.
Wherein first threshold can be identical with second threshold value, also can be different, and the numerical value that each threshold value is concrete can carry out concrete setting according to the difference of network type.
S306: the network of the network type correspondence that subscriber card passes through to authentication, return RES, and insert this network.
S307: subscriber card is confirmed authentification failure, returns error message to the network of the network type correspondence of authentification failure.
In the above-described embodiments when step S304 judged result when being, before or after execution in step S306, subscriber card can also be preserved the SQN value of reception, and the first target SQN value that adopts the SQN value of this reception to replace corresponding UMTS network type.When step S305 judged result when being, before or after execution in step S306, subscriber card can also be preserved the SQN value of reception, and the second target SQN value that adopts the SQN value of this reception to replace corresponding EPS network type.
Be that UMTS network type and EPS network type are that example describes in the above-described embodiments with the network type, when having the multiple network type, also can in subscriber card, preserve its corresponding target SQN value respectively according to what the embodiment of the invention provided at different network types, when authenticating, subscriber card is according to the network type of determining, call preservation to target SQN value that should network type, determine whether to insert in the network of this network type correspondence, just do not give unnecessary details one by one at this, believe the description that those skilled in the art can the embodiment of the invention, determine concrete verification process.
A kind of system configuration schematic diagram that the subscriber card of heterogeneous networks internetwork roaming is authenticated that Fig. 4 provides for the embodiment of the invention, this system comprises:
Ciphering Key transmitting terminal 41 is used for sending Ciphering Key to subscriber card, comprises the SQN value in the wherein said Ciphering Key;
Subscriber card 42, be used to receive described Ciphering Key, and judge the network type of the Ciphering Key transmitting terminal correspondence that sends described Ciphering Key, according to described SQN value, reach the target SQN value of the corresponding described network type of preserving, determine whether to insert the network of described network type correspondence.
The structural representation of a kind of subscriber card that Fig. 5 provides for the embodiment of the invention, this subscriber card comprises:
Receive judge module 51, be used to receive Ciphering Key, and judge the network type of the network equipment correspondence that sends described Ciphering Key, comprise the SQN value in the wherein said Ciphering Key;
Storage access module 52 is used for the value according to SQN, and the target SQN value of the corresponding described network type of preserving, and determines whether to insert the network of described network type correspondence.
Described reception judge module 51 comprises:
Receiving element 511 is used to receive Ciphering Key;
First judging unit 512 is used for the authentication management field AMF that comprises according to described Ciphering Key, judges the network type of the network equipment correspondence that sends described Ciphering Key.
Described storage access module 52 comprises:
Preserve unit 521, be used to preserve the target SQN value of every kind of network type correspondence;
Second judging unit 522 is used for determining the difference of described SQN value and described target SQN value, judges that described difference is whether in the threshold interval scope of setting;
Access unit 523 is used for determining whether to insert the network of described network type correspondence according to the result who judges.
Described preservation unit 521 also is used for,
When determining in the threshold interval scope that described difference is being provided with, corresponding described network type adopts described SQN value to replace the described target SQN value of preserving.
Described preservation unit 521 also is used for,
When Ciphering Key that the network equipment of determining to be linked into first corresponding described network type sends, extract the SQN value that comprises in the described Ciphering Key, described SQN value is saved as the target SQN value of corresponding described network type.
The embodiment of the invention provides a kind of method, system and device that the subscriber card of heterogeneous networks internetwork roaming is authenticated, this authentication method comprises: subscriber card is judged the network type of the network equipment correspondence that sends Ciphering Key, according to the SQN value in the Ciphering Key, reach the target SQN value of the described network type of the correspondence of preserving, determine whether to insert the network of described network type correspondence.Because subscriber card is at every kind of network type in embodiments of the present invention, preserve the target SQN value of this network type correspondence, when judging the network type of the network equipment correspondence that sends this Ciphering Key, the SQN value that comprises according to Ciphering Key, and preserve to target SQN value that should network type, determine whether the network of access network type correspondence, thereby can effectively solve the asynchronous problem of SQN in the verification process, and then can reduce the time delay of subscriber card access network, improve the professional efficient of using.
Obviously, those skilled in the art can carry out various changes and modification to the present invention and not break away from the spirit and scope of the present invention.Like this, if of the present invention these are revised and modification belongs within the scope of claim of the present invention and equivalent technologies thereof, then the present invention also is intended to comprise these changes and modification interior.