CN1319344C - Method for receiving external network data by target user equipment - Google Patents

Abstract

The invention discloses a method for a destination user equipment to receive external network data. When a data packet sent by the external network arrives at a PDG, the PDG inquires routing information of the AS to which the UE belongs according to the address information of the destination UE in the data packet; Then, the PDG sends an external data notification message containing the user identifier, wireless LAN access point, and packet data gateway IP address to the AS to which the UE belongs according to the routing information obtained from the route registration device; after the AS receives the external data notification message , check whether the UE user ID is stored in itself, if yes, return a confirmation message to the PDG, and send a message requesting the user to receive data to the UE, the tunnel establishment process between the PDG and the UE is completed, and finally the PDG passes the data packet of the external network through the Tunnel sent to UE. This enables the external network to send data to the UE through the WLAN-3GPP interworking network.

Description

Method for destination user equipment to receive external network data

technical field

The present invention relates to wireless local area network and third generation partnership project (WLAN-3GPP) network intercommunication technology, in particular to a method for destination user equipment to receive external network data under the condition of WLAN-3GPP network intercommunication.

Background technique

With the rise and development of WLAN technology, WLAN and wireless mobile communication networks, including Global System for Mobile Communications (GSM), Code Division Multiple Access (CDMA), Wideband Code Division Multiple Access (WCDMA), Time Division Synchronous Code Division Multiple Access (TD -SCDMA) and the convergence of networks such as CDMA 2000 are becoming the focus of current research. Among them, GSM, CDMA, WCDMA, and TD-SCDMA have been included in 3GPP, and CDMA 2000 belongs to 3GPP2.

3GPP TS23.234 stipulates for WLAN-3GPP interworking scenario 3: After the UE passes the service authorization of the 3GPP home network, the tunnel establishment process is performed between the UE and the PDG. At this time, the subscription information and tunnel information of the UE are stored in the PDG. and other related information, this procedure is a Mobile Originated (MO) procedure. The non-roaming and roaming conditions of interworking scenario 3 are described as follows:

Referring to FIG. 1 , it is a schematic diagram of a simplified network structure in the case of non-roaming in Scenario 3 of WLAN and 3GPP network interworking. The WLAN access network 102 is directly connected to the external Internet (internet) or intranet (intranet) 104, and the user equipment (UE) 101 is respectively connected to the 3GPP authentication and authorization plan of the 3GPP home network (3GPP Home Network) through the WLAN access network 102 The fee server (AS, 3GPP AAA Server) 103 is connected to the packet data gateway (PDG, Packet Data Gateway) 105, and the PDG 105 is connected to the packet data network (PDN, Packet Data Network) belonging to the external network part through the Wi interface. Normally, when the UE 101 wishes to directly access the Internet/Intranet 104 through the WLAN access network 102, it can apply to the 3GPP home network for the service of the interworking scenario 2. If the UE 101 also wishes to access 3GPP Packet Switching (PS) domain services and accesses the PDN through the WLAN-3GPP network, it can further apply to the 3GPP home network for the services of interworking scenario 3. That is, the UE 101 initiates a service authorization process request for the interworking scenario 3 to the AS 103 of the 3GPP home network, and the AS 103 of the 3GPP home network performs service authentication and authorization on the service request. If successful, the AS 103 sends an access permission message to the user, The AS 103 allocates a corresponding PDG 105 to the UE 101, and a tunnel is established between the UE 101 and the allocated PDG 105. And, Charging Gateway (CGw) 107a/Charging Information Collection System (CCF) 107a/Online Charging System (OCS) 107b records charging information according to the network usage of UE 101. The tunnel established for the non-roaming case is UE-WLAN-PDG. At this time, UE 101 can access 3GPP PS domain services, and UE 101 can communicate with PDNs belonging to external networks through the tunnel with PDG 105. PDNs include all packet data networks other than mobile networks such as Internet and Intranet.

The roaming situation in the WLAN access network and 3GPP interworking scenario 3 is similar to the non-roaming situation, and its simplified network structure is shown in FIG. 2 . In the case of roaming, the WLAN access network 102 is connected to the 3GPP home network through a 3GPP visited network (3GPP Visited Network). WLAN access network 102 is connected with UE 101, 3GPP AAA server proxy (AS Proxy) 201, Internet/Intranet 104 and wireless access gateway (WAG) 202. The UE 101 can apply to the 3GPP home network through the 3GPP access network to access the Internet/Intranet 104 for interworking scenario 2 services. If UE 101 still wants to apply for interworking scene 3 services and access to 3GPP PS domain services, UE 101 needs to initiate a service authorization process to the 3GPP home network through the 3GPP access network, and this process is also between UE 101 and AS 103 of the 3GPP home network After the authorization is successful, the AS 103 assigns the corresponding home PDG 105 to the UE 101, and the UE 101 establishes a tunnel between the WAG 202 in the 3GPP access network and the assigned PDG 105. For the roaming case, the established tunnel is UE-WLAN-WAG-PDG. At this time, UE 101 can access the 3GPP PS domain service of the home network.

In the above two cases, after the tunnel between the UE and the PDG is established, the UE can access the PS domain service of the 3GPP through the PDG. After the data sent by the UE reaches the PDG through the tunnel, the PDG decapsulates the data, and then sends the data to the external network through the Wi interface. However, the existing standard does not specify the mobile station termination (MT) process, that is, the UE is in the WLAN-3GPP interworking scenario 2, and the UE has signed a contract with the HPLMN to access the 3GPP PS domain service, but the UE has not yet communicated with the PDG In the case of establishing an external network communication tunnel, a method for a target UE to receive external network service data through a WLAN-3GPP interworking network.

Contents of the invention

In view of this, the main purpose of the present invention is to provide a method for a target user equipment to receive data from an external network. In the case of WLAN-3GPP network interworking, the target UE can receive data sent by the external network through the WLAN-3GPP interworking network.

A method for receiving external network data by a target user equipment of the present invention, in the case of intercommunication between a wireless local area network and a third generation partnership project network, includes the following steps:

a) The external network connected to the WLAN-3GPP network sends the data packet to the packet data gateway, and the packet data gateway searches the route storage device for the routing information of the authentication server to which the destination user equipment belongs according to the address information of the destination user equipment in the data packet ;

b) The route storage device searches in itself, and if found, returns the routing information of the authentication server to which the destination user equipment belongs to the packet data gateway, and enters step c), otherwise, returns the failure of the search to the packet data gateway message to end the data receiving process;

c) The packet data gateway sends an external data notification message including user identification, wireless local area network access point name and packet data gateway address information to the authentication server to which the destination user equipment belongs according to the obtained route;

d) After receiving the external data notification message, the authentication server to which the destination user equipment belongs checks whether it contains the user identifier, and if so, sends an external network data response message to the packet data gateway, and sends a request user ID message to the user equipment. Receive the data message; otherwise, send a failure message to the packet data gateway to end the data receiving process;

e) A tunnel is established between the user equipment and the packet data gateway, and the packet data gateway sends the data packet sent by the external network to the user equipment through the established tunnel.

In step a) of the method, the packet data gateway querying the routing information of the authentication server to which the destination user equipment belongs specifically includes: a11) pre-establishing a binding relationship between the user equipment IP address and the user identifier in the packet data gateway; a12) packet data The gateway searches for the user identification corresponding to the IP address in itself according to the IP address of the destination user equipment contained in the data packet, and sends a route query request that includes the user identification to the routing depository device; the routing deposit described in step b) The device's search in itself specifically includes: the routing depository device searches for the routing information of the authentication server to which the current target user equipment belongs according to the binding relationship between the user identifier of the subscriber equipment and the routing information of the authentication server established in itself.

The method step a) further includes: a21) Pre-store the IP address of the WLAN access network user equipment, the user identifier, the wireless local area network access point name of the user equipment, the protocol type or the quality of service, or a combination thereof in the packet data gateway relationship; a22) After the packet data gateway receives the data packet, it judges whether one or more information in the IP address of the user equipment in the data packet, the wireless local area network access point name of the user equipment, the protocol type or the quality of service is consistent with that in itself The stored ones are the same, if yes, query the route registration device for the routing information of the authentication server to which the destination user equipment belongs, otherwise, discard the data packet, and end the data receiving process.

The method further includes: the packet data gateway saves the destination user equipment IP address, source address, protocol type, wireless local area network access point name (W-APN) of the UE, or a combination thereof in the failed data packet; then step a ) further includes: the packet data gateway analyzes the data packet, if one or more information of the destination user equipment IP address, source address, protocol type, W-APN of the UE in the data packet and the information stored by itself If they are the same, the data packet is discarded and the process ends.

The method further includes: the packet data gateway saves the routing information of the authentication server to which the destination user equipment belongs returned by the route registration device, and establishes a binding relationship between the address information of the destination user equipment and the routing information of the authentication server to which it belongs; step a ) further includes: the packet data gateway queries the routing information of the authentication server that has a binding relationship with the user equipment address according to the destination user equipment address information contained in the data packet, and if found, sends the routing information to the authentication server to which the destination user equipment belongs The external data notification message, otherwise, query the routing information of the authentication server to which the destination user equipment belongs in the route storage device.

In this method, the destination user equipment address information is the IP address of the user equipment.

In step d) of the method, the message requesting the user to receive data includes: the access point name of the wireless local area network or the address of the packet data gateway, or a combination thereof.

The address information of the packet data gateway in step c) of the method is the IP address of the packet data gateway or the identifier of the packet data gateway.

In this method, the authentication server is an AS, and the routing information of the authentication server is the address of the AS.

In the method, the routing registration device is a home location register (HLR), a home subscriber server (HSS) or an AS connected to a packet data gateway.

It can be seen from the above solution that the present invention initiates a tunnel establishment process at the packet data gateway, and further realizes that the data of the external network is transmitted to the target UE through the WLAN-3GPP interworking network. Moreover, the present invention also establishes a data packet inspection and filtering mechanism in the packet data gateway, which can filter data packets entering the internal network of data packets, thereby reducing the network burden and ensuring the security of the internal network.

Description of drawings

FIG. 1 is a schematic structural diagram of WLAN and 3GPP network interworking scenario 3 non-roaming situation;

FIG. 2 is a schematic structural diagram of roaming in Scenario 3 of WLAN and 3GPP network interworking;

Fig. 3 is a working flow diagram of a preferred embodiment of the present invention.

Detailed ways

The present invention will be further described in detail below in conjunction with the accompanying drawings and specific embodiments.

The premise of the present invention is that the UE is in the WLAN-3GPP interworking scenario 2, that is, the UE has passed the authentication of the AS, and the UE can access the Internet/Intranet through the WLAN access network. The UE has signed a contract with the 3GPP home network to access the 3GPP PS domain service, that is, the UE can access the 3GPP PS domain service. In addition, the external network knows the IP address of the UE, and the IP address may adopt the format of IPV4 or IPV6.

The solution of the present invention is that when the external network needs to send service data to the UE through the WLAN-3GPP interworking network, the data packet sent by the external network will first arrive at the PDG through the Wi interface, and after the PDG receives the data packet, it will initiate a tunnel establishment process activated on the network side . During this process, the PDG queries the route registration device for the routing information of the AS to which the UE belongs according to the destination UE address information in the data packet; then, according to the routing information obtained from the route registration device, the PDG sends a message to the AS to which the UE belongs The external data notification message of the identification, WLAN access point name, and IP address of the packet data gateway; after receiving the external data notification message, the AS returns a confirmation message to the PDG, and sends a request to the user to receive the data message to the UE, and the tunnel between the PDG and the UE The establishment process is completed, and finally the PDG sends the data packets of the external network to the UE through the tunnel.

The preferred embodiment workflow of the present invention is shown in Fig. 3:

Step 301, the external network sends a data packet containing the IP address of the destination UE to the PDG through the Wi interface.

In step 302, the PDG inquires, according to the address information of the destination UE in the data packet, the routing information of the AS to which the UE belongs to the route storage device.

Among them, this step specifically includes:

a) After the UE signs a service contract with the 3GPP access network to allow access to the 3GPP PS domain service, store the UE's IP address and user ID in the PDG, and establish the binding relationship between the UE's IP address and the user ID. Wherein, the user identity refers to the user's International Temporary Mobile Subscriber Identity (IMSI) or WLAN Temporary Mobile Subscriber Identity (W-TMSI). It can further store information such as UE's W-APN, protocol type, and quality of service (QoS), and can establish a binding relationship table between these information and UE's IP address and user ID. The protocol type refers to network protocols such as TCP, UDP, or PPP.

b) When the PDG receives the data packet sent by the external network, it first analyzes the data packet, and checks whether the IP address and protocol type of the destination UE of the data packet, the W-APN of the UE, QoS and other information are consistent with the binding relationship table Listed in the same, so as to determine whether the data packet can initiate the tunnel establishment process, if yes, then enter step c), otherwise, the data packet is discarded, and the tunnel establishment process activated on the network side is stopped.

c) According to the IP address of the UE in the data packet, the PDG finds out the user identifier of the UE through the binding relationship table established by itself, and sends a query request message including the user identifier to the routing depository device.

Wherein, the above-mentioned step b) is only for the consideration of network security and reducing the processing burden of the internal network, the added PDG filters the data packets, therefore, the content in the binding relationship table established in step a) can be arbitrarily increased or decreased as required, In step b), only one or several items of information in the data packet may be checked, or step b) may be omitted.

In step 303, the routing depository device searches for the requested routing information in itself, and if found, returns a PDG response message containing the routing information; otherwise, returns a response message indicating that the search fails.

Wherein, the routing storage device in the present invention can adopt HLR or HSS, this is because after the WLAN access network UE has passed the access authentication of the AS, the user identifier of the UE and the address of the AS to which the UE will be stored in the HLR/HSS For the binding relationship, etc., for the HLR, the AS address to which the UE belongs is stored in the address position of the Mobile Switching Center (MSC) or the Serving General Packet Radio System Support Node (SGSN) of the 3GPP network. In addition, an AS that has a connection relationship with the PDG can also be used as a route registration device, and the address of the AS to which the UE belongs is stored in the AS in advance, and a binding relationship between the user ID of the UE and the route of the AS to which the UE belongs is established. It may also happen to be the AS to which the target UE belongs. Step 303 specifically includes: according to the user identifier contained in the query request message, the routing registration device searches for the AS route to which the user belongs through the binding relationship established in itself, and returns the AS route containing the AS if the route of the AS to which the UE belongs is found. Routing query response information, otherwise, return the response information of search failure.

In step 304, the PDG analyzes the response information returned by the route registration device. If the response information returned is the response information of search failure, the tunnel establishment process activated on the network side is ended; The AS to which the UE belongs sends a PDG external data notification message including at least the user identifier of the UE.

Wherein, the external data notification message may further include address information of the PDG such as the UE's W-APN and the IP address of the PDG or the PDG identifier. In order to be forwarded by the AS to the target UE in step 305.

Step 305: After receiving the external data notification message, the AS to which the destination UE belongs checks whether it contains the user identifier, and if so, sends an external network data response message to the packet data gateway, and sends a request to the user equipment to receive the data message; otherwise, send a failure message to the packet data gateway to end the data receiving process.

Wherein, if the UE has passed the access authentication of the AS, the user identifier of the UE will be stored in the information table of the AS to which the UE belongs. Therefore, in step 305, after receiving the external data notification message, the AS to which the UE belongs queries its own information table, compares the user identification contained in the external data notification message with the content in the information table, and if the information table contains the user identification, An external network data response message is sent to the PDG, and a message requesting the user to receive data is sent to the user equipment.

In step 306, if the PDG receives the external network data response message from the AS, the UE establishes a data transmission tunnel with the PDG; if the PDG receives the external network data notification response failure message, it stops the tunnel establishment process activated on the network side.

Wherein, the process of establishing a tunnel between the UE and the PDG is established through a standard MO process. The specific process can be described as: the UE sends a service reception request message including the UE's identity and W-APN to the PDG connected to it through the WLAN network; after receiving the message, the PDG forwards the message to the AS to which the UE belongs; ID and W-APN determine whether the UE is allowed to use the service, if yes, return a service permission message to the PDG, otherwise, return a service rejection message to the PDG; if the PDG receives the service permission message, assign an access message to the UE The IP address of the external network and the PDG address corresponding to the specified service, that is, a PDG address connected to the external network requesting to send data, and the information is sent to the UE through a service acceptance message; the UE and the PDG specified by the PDG address parameter Send a tunnel establishment request message, which contains information such as the UE's identity and W-APN. After receiving the message, the PDG sends a tunnel establishment response message to the UE. The message contains parameters such as the tunnel identifier. Create a tunnel.

In step 307, the PDG sends the external network data to the target UE through the established tunnel.

In the present invention, the PDG can further temporarily save and identify identification information such as the IP address, source address, protocol type, and W-APN of the UE of the destination UE of the data packet that failed to be sent, so as to use it for the data sent by the external network During a period of time, when the data packets sent by the external network are sent to the PDG again, the PDG can directly discard or reject the data packets containing one or more of the above identification information by checking the above identification information It enters the internal network. The specific length of time can be set by the operator.

In addition, the PDG can further store the found routing information of the AS to which the UE belongs. When the data of the external network arrives at the PDG within a period of time, and the tunnel established between the UE and the PDG has been cancelled, the PDG It is not necessary to inquire about the route of the AS to which the UE belongs to the route registration device, but directly send an external data notification message to the AS to which the UE belongs to perform a tunnel establishment process.

The above descriptions are only preferred embodiments of the present invention, and are not intended to limit the present invention. Any modifications, equivalent replacements, improvements, etc. made within the spirit and principles of the present invention shall be included in the scope of the present invention. within the scope of protection.

Claims (10)

1. A method for receiving external network data by a target user equipment, in the case of wireless local area network and the third generation partnership project WLAN-3GPP network intercommunication, it is characterized in that, comprising the following steps: a) The external network connected to the WLAN-3GPP network sends the data packet to the packet data gateway, and the packet data gateway searches the route storage device for the routing information of the authentication server to which the destination user equipment belongs according to the address information of the destination user equipment in the data packet ; b) The route storage device searches in itself, and if found, returns the routing information of the authentication server to which the destination user equipment belongs to the packet data gateway, and enters step c), otherwise, returns the failure of the search to the packet data gateway message to end the data receiving process; c) The packet data gateway sends an external data notification message including user identification, wireless local area network access point name and packet data gateway address information to the authentication server to which the destination user equipment belongs according to the obtained route; d) After receiving the external data notification message, the authentication server to which the destination user equipment belongs checks whether it contains the user identifier, and if so, sends an external network data response message to the packet data gateway, and sends a request user ID message to the user equipment. Receive the data message; otherwise, send a failure message to the packet data gateway to end the data receiving process; e) A tunnel is established between the user equipment and the packet data gateway, and the packet data gateway sends the data packet sent by the external network to the user equipment through the established tunnel. 2. The method for receiving external network data by the destination user equipment according to claim 1, characterized in that, in step a), the packet data gateway querying the routing information of the authentication server to which the destination user equipment belongs specifically includes: a11) pre-establishing a binding relationship between the IP address of the user equipment and the user identifier in the packet data gateway; a12) The packet data gateway searches for the user identification corresponding to the IP address in itself according to the IP address of the destination user equipment contained in the data packet, and sends a route query request containing the user identification to the routing depository device; In step b), the routing registration device searches in itself specifically includes: the routing registration device searches for the authentication server to which the current target user equipment belongs according to the binding relationship between the user identification of the subscriber user equipment established in itself and the routing information of the authentication server to which the routing registration device belongs. Authorization server routing information. 3. The method for receiving external network data by the destination user equipment according to claim 1, characterized in that step a) further comprises: a21) Pre-store the WLAN access network user equipment IP address, user identifier, wireless local area network access point name, protocol type or service quality of the user equipment in the packet data gateway, or a combined binding relationship; a22) After the packet data gateway receives the data packet, it judges whether one or more information in the IP address of the user equipment in the data packet, the wireless local area network access point name of the user equipment, the protocol type or the quality of service is consistent with the information stored in itself If yes, query the routing information of the authentication server to which the destination user equipment belongs in the route storage device; otherwise, discard the data packet and end the data receiving process. 4. The method for receiving external network data by the destination user equipment according to claim 1, characterized in that the method further comprises: the packet data gateway sends the destination user equipment IP address, source address, protocol type, The WLAN access point name (W-APN) of the user equipment, or its combination is stored; Then step a) further includes: the packet data gateway analyzes the data packet, if one or more information in the destination user equipment IP address, source address, protocol type, user equipment W-APN in the data packet is consistent with itself If the stored information is the same, the data packet is discarded and the process ends. 5. The method for receiving external network data by the destination user equipment according to claim 1, characterized in that the method further comprises: the packet data gateway storing the routing information of the authentication server to which the destination user equipment belongs returned by the routing registration device, and Establish a binding relationship between the address information of the destination user equipment and the routing information of the authentication server to which it belongs; Step a) further includes: the packet data gateway queries the routing information of the authentication server that has a binding relationship with the address of the user equipment according to the address information of the destination user equipment contained in the data packet, and if found, then authenticates to the destination user equipment. The server sends an external data notification message, otherwise, queries the route registration device for routing information of the authentication server to which the destination user equipment belongs. 6. The method for receiving external network data by the destination user equipment according to claim 1, wherein the address information of the destination user equipment is the IP address of the user equipment. 7. The method for receiving external network data by the destination user equipment according to claim 1, characterized in that, in step d), the message requesting the user to receive data includes: the access point name of the wireless local area network or the address of the packet data gateway, or a combination thereof. 8. The method for receiving external network data by the destination user equipment according to claim 1, wherein the packet data gateway address information in step c) is the IP address of the packet data gateway or the packet data gateway identifier. 9. The method for receiving external network data by the destination user equipment according to claim 1, 2, 3 or 5, wherein the authentication server is a 3GPP authentication, authorization and accounting server (AS), and the authentication server's The routing information is the address of the AS. 10. The method for receiving external network data by the destination user equipment according to claim 1, 2, 3 or 5, characterized in that, the routing depository device is a Home Location Register (HLR), a Home Subscriber Server (HSS) or a A 3GPP authentication, authorization and accounting server (AS) connected to the packet data gateway.

Images