CN1578487A - Method for mobile terminal switching in packet network - Google Patents

Abstract

The invention discloses a method for a mobile terminal to access a packet network: A. assign a fixed access point name to the mobile terminal in advance and set a user name containing the identifier of the packet network provider to be accessed by the mobile terminal; B. after receiving After the request of the mobile terminal to access the packet network, the packet network provider is resolved according to the identifier in the user name; C. If the resolved packet network provider indicates the enterprise that provides the private network of the enterprise, the mobile terminal accesses the packet network according to the identifier The private network of the enterprise; if the packet network provider obtained by parsing represents a mobile operator, an IP address is assigned to the mobile terminal by the mobile gateway support node according to the fixed access point name, and then according to the access set by the mobile terminal The network destination address or network protocol connects the mobile terminal to the corresponding packet network provided by the mobile operator. The method simplifies the process of the mobile terminal user surfing the Internet, and reduces the complexity of the operator's network configuration.

Description

A method for a mobile terminal to access a packet network

technical field

The invention relates to the access technology of the mobile communication network and the packet network, in particular to a method for a mobile terminal to access the packet network.

Background technique

With the further development of mobile technology, the main body of current mobile communication services is gradually shifting from voice services to packet data services. Currently, the systems that can carry packet data services include General Packet Radio Service (GPRS) and Wideband Code Division Multiple Access (WCDMA) wait. Mobile terminals in GPRS or WCDMA can connect to the packet network through wireless Internet access, and browse data services.

Fig. 1 is the structural diagram of the mobile terminal accessing packet network of GPRS in the prior art, can find out from Fig. 1 that the process of current mobile terminal accessing packet network comprises:

Step 1, the mobile terminal sets the access point name (APN), initiates the activation process, and the mobile terminal uses the APN as the domain name is used on the Internet (Internet) to determine which packet network the mobile terminal accesses;

Step 2, the activation request message with the APN information is sent to the serving GPRS support node (SGSN) through the base station subsystem, and the domain name server (DNS) of the GPRS support node resolves which gateway GPRS support node (GGSN) needs to access packet network;

Step 3, after determining which packet network the GGSN accesses, notify the GGSN to create a packet data protocol (PDP) context to activate the packet network, so that the mobile terminal described in step 1 selects a different packet network to access according to the set APN.

An example is given below to illustrate that a certain operator launches two services: one is Wireless Application Protocol Network (WAP), and the other is Internet, and the two different APNs corresponding to two different packet networks are respectively "wap" and "internet", when a GPRS mobile terminal wants to browse the web on the Internet, it needs to set the APN on the mobile terminal to "internet". If the GPRS mobile terminal wants to perform WAP services, it needs to set the APN on the mobile terminal to "waps". After the mobile terminal connects to different networks according to the APN, it connects to different websites by setting different destination addresses or different access protocol types, and browses the webpage.

If a mobile terminal of the mobile communication system needs to access WAP, browse webpages on the Internet, or visit a private network of an enterprise, it is necessary to constantly switch the APN on the mobile terminal. APN is a professional configuration parameter. Configuring APN or switching APN to connect to different networks requires professional technical training. For ordinary users, it is very difficult to operate mobile terminals to access different networks.

In order to launch different services, mobile operators will build more and more packet networks, and they need to continuously increase APNs. Every time an APN is added, it is necessary to update the configuration parameters of a large number of related devices in the GPRS or WCDMA system, such as: belonging Account opening data of the user in the location register (HLR), domain name resolution configuration parameters in the domain name server (DNS), routing configuration information in the SGSN, and the like. These tasks greatly increase the complexity and cost of mobile operator network management.

Contents of the invention

In view of this, the main purpose of the present invention is to provide a method for a mobile terminal to access a packet network, which not only simplifies the process of surfing the Internet for mobile terminal users, but also reduces the complexity of operator network configuration.

According to above-mentioned purpose, technical scheme of the present invention is achieved like this:

A method for a mobile terminal to access a packet network, the method comprising:

A. Pre-distribute the name of the fixed access point to the mobile terminal and set the user name containing the identification of the packet network provider to be accessed by the mobile terminal;

B. After receiving the request of the mobile terminal to access the packet network, resolve the packet network provider according to the identifier in the user name;

C, if the packet network provider obtained by parsing represents an enterprise that provides the private network of the enterprise, an Internet Protocol (IP) address is allocated to the mobile terminal according to the identification, and the mobile terminal is connected to the private network of the enterprise;

If the analyzed packet network provider represents a mobile operator, assign an IP address range to the mobile terminal according to the fixed access point name, and within the IP address range, the mobile gateway support node dynamically assigns an IP address to the mobile terminal , and then access the mobile terminal to the corresponding packet network provided by the mobile operator according to the network access destination address or network protocol set by the mobile terminal.

Before the mobile terminal is connected to the private network of the enterprise or the packet network provided by the mobile operator, the authentication operation is performed on the mobile terminal.

Before the mobile terminal is connected to the private network of the enterprise, the authentication server of the corresponding network is found according to the actual access point name represented by the packet network provider parsed by the mobile gateway support node, and the user name and user password of the mobile terminal are authenticated. right.

Before connecting the mobile terminal to the packet network provided by the mobile operator, the mobile terminal initiates an authentication request, and the authentication server returns the destination address range that the mobile terminal is allowed to access the network. If it is within the range of the destination address of the access network, access to the network is allowed, otherwise, access is not allowed.

Before connecting the mobile terminal to the packet network provided by the mobile operator, the mobile terminal initiates an authentication request, and the authentication server returns the protocol type that the mobile terminal is allowed to access the network. If the protocol type that the mobile terminal wants to access the network is authentication If the protocol type returned by the authorization server allows the mobile terminal to access the network, the access to the network is allowed; otherwise, the access is not allowed.

The authentication server is integrated in the mobile gateway support node.

Before the mobile terminal accesses the packet network provided by the mobile operator, the mobile terminal performs authentication at the authentication server of the packet network to be accessed.

The packet network provided by the mobile operator in step C is the Internet or a wireless application protocol network.

The method provided by the present invention makes each mobile terminal only need to set one APN, instead of setting different APNs according to different packet networks, so it is not necessary to continuously change the configuration on all devices of the mobile communication network as the packet network increases Data, especially without modifying the configuration data on the SGSN, reduces operating costs; the method provided by the invention enables the mobile terminal to distinguish different enterprise networks or networks provided by operators according to different user names, and mobile terminal users do not need to undergo technical training The user name can be directly set to connect to the group network, which reduces the difficulty for mobile terminal users to access the Internet; therefore, the present invention simplifies the process of mobile terminal users accessing the Internet and reduces the complexity of operator network configuration.

Description of drawings

FIG. 1 is a structural diagram of an existing GPRS mobile terminal accessing a packet network.

Fig. 2 is a flow chart of the process of the mobile terminal accessing the packet network according to the present invention.

Fig. 3 is a block diagram of mobile terminal users accessing different packet networks in the GPRS network according to the present invention.

FIG. 4 is a schematic diagram of authentication for a mobile terminal user to access a private network of an enterprise.

FIG. 5 is a schematic diagram of authentication for a mobile terminal user to access a mobile operator network.

Detailed ways

In order to make the object, technical solution and advantages of the present invention clearer, the present invention will be further described in detail by citing the following embodiments and referring to the accompanying drawings.

The present invention divides the external network accessed by the mobile terminal into two categories: one is the network provided by the operator, such as WAP and Internet; the other is the private network of the enterprise, such as the private network of the bank system.

The present invention provides a fixed APN number for all mobile terminals, instead of allocating different APN numbers according to the accessed packet network. When the mobile terminal wants to access the packet network, a user name is set for the mobile terminal, and there is an identifier in the user name, which corresponds to the provider of the packet network to which the mobile terminal is connected. For example, the user name of the mobile terminal is set to David @BANKNAME, the user name corresponds to the private network of BANKNAME; if the user name of the mobile terminal is set to David@MCPNAME, the user name corresponds to the network provided by the mobile operator, and the mobile terminal accesses the Internet provided by the mobile operator Whether the network or the WAP network is determined according to the destination address of the network that the mobile terminal is set to access or the type of protocol set.

As shown in Figure 2, Figure 2 is a flow chart of the process of mobile terminal accessing the packet network of the present invention, and its specific steps are:

Step 200, pre-assigning a fixed APN to all mobile terminals, when the mobile terminal wants to access the packet network, set a user name, which contains the identification information of the access packet network provider;

Step 201, in the GGSN, analyze the real name APN (Username-APN) of the accessed packet network according to the user name of the mobile terminal;

Step 202, when parsing out the Username-APN of the accessed packet network indicates a private network, the GGSN assigns an IP address to the mobile terminal according to the Username-APN and accesses the private network; when parsing out the Username of the accessed packet network When -APN represents a network provided by a mobile operator, the GGSN allocates an IP address range to the mobile terminal according to the fixed APN assigned to the mobile terminal, and within this IP address range, the GGSN dynamically allocates the IP address to the mobile terminal, and according to Username-APN accesses the network provided by the mobile operator, and then accesses the WAP or Internet provided by the mobile operator according to the access destination network address or destination network protocol set by the mobile terminal.

When the mobile terminal accesses the packet network, the packet network can also perform authentication on the mobile terminal, and the mobile terminal can only access the packet network through authentication.

The present invention will be specifically described below.

For enterprise private networks, mobile terminal users set a unified APN name, and mobile terminal users distinguish between different access packet network providers by setting different user names on the mobile terminal. For example, users of private company systems set the user name as David @COMPANYNAME, the bank system user is Jene@BANKNAME, when the mobile terminal user accesses the data network, GPRS will analyze the real APN in GGSN according to the user name information used by the mobile terminal user to log in, such as David@COMPANYNAME The real APN is "COMPANYNAME", according to which the user is allowed to access the private network of COMEPANY.

For the mobile operator's own network, the mobile terminal user sets a unified APN and a unified user name. The user name indicates that the mobile terminal accesses the network provided by the mobile operator, such as: David@MCPNAME, and the GGSN parses out the real APN is a mobile operator, and the mobile terminal uses the existing technology to set the destination address of the access or the protocol type of the access to determine access to different networks provided by the mobile operator.

But no matter which type of network needs to be accessed, the APN name used by a mobile terminal user is fixed, such as: set to "SingleAPN". This APN name will be configured and managed as the only APN in HLR account opening and DNS database, which greatly facilitates the maintenance and management of HLR and DNS.

When a mobile terminal wants to access a packet network, the GGSN must assign an IP address to the mobile terminal. If the mobile terminal user uses a fixed APN name, how to allocate the IP address of the mobile terminal user?

For mobile terminal users accessing the enterprise's private network, the IP address allocation method and allocation address pool for mobile terminal users are determined by the enterprise. In actual operation, GGSN obtains the real Username-APN by analyzing the user name, and this APN can directly represent and distinguish different enterprises. Therefore, the address allocation method and allocation address pool organization can be configured based on the Username-APN that is resolved from the username. For example: when the user name set by the mobile terminal user is Jene@BANKNAME, and the Username-APN analyzed by the GGSN is BANKNAME, then the GGSN assigns an IP address to the mobile terminal according to the BANKNAME.

For mobile terminal users accessing the packet network provided by the mobile operator, since the mobile operator not only provides one packet network to the mobile terminal user, the mobile operator can provide multiple packet networks to the mobile terminal, so it cannot be resolved according to the GGSN Username-APN assigns IP addresses to mobile terminal users. The mobile operator uniformly configures the IP address of the mobile terminal according to the fixed APN pre-assigned to the mobile terminal, that is, the mobile operator allocates an IP address range according to the APN, that is, allocates the address pool where the mobile terminal is located, and dynamically configures the IP address in the IP range. Assign an IP address to the mobile terminal, for example: when the APN set by the mobile terminal user is APN1, the GGSN assigns the mobile terminal an IP address range of 211.0.0.1 to 211.0.0.100 according to the APN1, within this address range Assign an IP address to the mobile terminal user.

Fig. 3 is the block diagram that mobile terminal user accesses different packet networks in GPRS network of the present invention, in Fig. 3:

Set the APN of GPRS user A to SingleAPN1, when GPRS user A sets the user name as David@COMPANYNAME, then the activation request message of SingleAPN1 with user A is sent to the GGSN through the base station subsystem and SGSN, GGSN according to the activation request message The user name David@COMPANYNAME in the user A resolves the Username-APN, which is COMPANYNAME, and COMPANYNAME represents a different enterprise network. According to this COMPANYNAME, the GGSN configures a fixed IP address for the user A and connects to the enterprise network. That is, a private company private network connection.

Set the APN of GPRS user A to SingleAPN1. When GPRS user A sets the user name as David@MCPNAME, the activation request message with user A’s user name David@MCPNAME and SingleAPN1 is sent to the GGSN through the base station subsystem and SGSN, and the GGSN According to the user name David@MCPNAME in the user A in the activation request message, the Username-APN, namely MCPNAME, is parsed out. MCPNAME represents the network provided by the mobile operator. According to the MCPNAME, the packet network provided by the mobile operator is learned. , GGSN allocates an IP address to user A according to the SingleAPN1 of the user A in the activation request message, so that user A can connect to the network provided by the mobile operator, and then according to the destination address or protocol type of access set by user A Make sure you are connected to the WAP or Internet provided by your mobile operator.

Set the APN of GPRS user B to SingleAPN1. When GPRS user B sets the user name as Jene@MCPNAME, the activation request message with user B’s user name Jene@MCPNAME and SingleAPN2 is sent to the GGSN through the base station subsystem and SGSN, and the GGSN According to the user name Jene@MCPNAME in the user B in the activation request message, the Username-APN is parsed out, that is, MCPNAME. MCPNAME represents the network provided by the mobile operator. According to the MCPNAME, the packet network provided by the mobile operator is learned. , GGSN allocates an IP address range to user B according to the SingleAPN1 of the user B in the activation request message, and dynamically allocates an IP address to user B within the IP address range, so that user B can connect to the network provided by the operator, and then According to the access destination address or access protocol type set by user B, it is determined whether to connect to the WAP or the Internet provided by the operator.

Before the mobile terminal accesses the packet network, the mobile terminal can be authenticated, and after the authentication is passed, the mobile terminal is allowed to access the packet network. If each mobile terminal user has a fixed APN, how to authenticate the request of the mobile terminal user to access the network?

When the mobile terminal user accesses the private network of the enterprise, the GGSN parses out the Username-APN according to the mobile terminal user name, and the Username-APN is authenticated to the authentication device of the corresponding network.

Figure 4 is a schematic diagram of the authentication of a mobile terminal user accessing an enterprise private network, in Figure 4:

Set the access point name of the GPRS user to SingleAPN. When GPRS user A sets the user name to David@COMPANYNAME and the user password to AAA, the activation request message with the access point name of user A to SingleAPN is sent to GGSN, GGSN resolves Usernname-APN according to the user name in the activation request message, that is, COMPANYNAME. This COMPANYNAME represents a different enterprise network, and uses the corresponding private network authentication server to authenticate COMPANYNAME, that is, to verify the GPRS user’s Whether the user name David@COMPANYNAME and user password AAA are correct, if correct, the user can access the private enterprise private network, otherwise, the user cannot access the private enterprise private network.

When a mobile terminal user accesses a network provided by a mobile operator, there are four optional different authentication methods: the first one is to conduct centralized access authentication according to the IP address of the network visited by the mobile terminal user by extending the RADIUS protocol, that is, The authentication result returned by the authentication server after receiving the authentication request from the mobile terminal is the range of network destination IP addresses that the mobile terminal is allowed to access and the range of network destination IP addresses that are not allowed to be accessed. If the IP address is within the scope of the allowed network destination IP address, the network can be accessed, otherwise, the network cannot be accessed; the second method is to expand the RADIUS interface according to the protocol type of the data packet sent by the mobile terminal user Perform centralized access authentication, that is, the authentication result returned by the authentication server after receiving the authentication request from the mobile terminal is the type of network protocol that is allowed to access and the type of network protocol that is not allowed to access. If the mobile terminal wants to access the network If the protocol type is a network protocol type that is allowed to be accessed, the network can be accessed; otherwise, the network cannot be accessed; the third type is to integrate the RADIUS authentication server function on the GGSN for centralized authentication of mobile terminal user access, and the GGSN Configure the authority of the mobile terminal. The authority configuration can be configured separately according to the destination IP address or protocol type; the fourth is to disperse the authentication of the services sent by the mobile terminal user, that is, if the mobile terminal wants to access network A, it will go to network A for authentication certified.

As shown in Figure 5, Figure 5 is a schematic diagram of an authentication embodiment when a mobile terminal accesses a mobile operator network, in the figure:

When a GPRS user requests to access a certain network, the GPRS user performs access authentication on the GGSN, and the GGSN sends an authentication request to the authentication server. The authentication request includes the GPRS user's APN number, username and password. Process and send an authentication response to the GGSN, which includes the name of the destination network that the GPRS user is allowed to access and the name of the destination network that is not allowed to be accessed, and the GPRS user accesses the destination network that is allowed to be accessed through the GGSN.

GGSN also can not pre-authenticate the identity of the GPRS user, that is, not authenticate the APN number and user name password of the GPRS user. After the GPRS user accesses the packet network, it directly goes to the network that the GPRS user wants to visit to perform decentralized authentication. As shown in Figure 5, when what the GPRS user visits is to provide the network of streaming media service, carry out APN number and user name password authentication of GPRS user to the network that provides streaming media service, if pass, just allow to visit; When GPRS user visits When the Internet is the Internet, go to the Internet network to authenticate the GPRS user's APN number and user name password, and if it passes, the access is allowed; Authenticate the APN number and username and password of the GPRS user, if not passed, access is not allowed.

The method provided by the invention reduces the complexity of operator network configuration, and does not need to modify the configuration data on all devices when accessing a new packet network, but only needs to modify the configuration data of the GGSN, which reduces operating costs; the method provided by the invention The method reduces the complexity of settings for mobile terminal users in the process of surfing the Internet. In most cases, only one user name needs to be set to enjoy all the services provided by the operator. way to reduce configuration difficulty.

The above descriptions are only preferred embodiments of the present invention, and are not intended to limit the present invention. Any modifications, equivalent replacements and improvements made within the spirit and principles of the present invention should be included in the scope of the present invention. within the scope of protection.

Claims (8)

1. A method for a mobile terminal to access a packet network, characterized in that the method comprises: A. Pre-distribute the name of the fixed access point to the mobile terminal and set the user name containing the identification of the packet network provider to be accessed by the mobile terminal; B. After receiving the request of the mobile terminal to access the packet network, resolve the packet network provider according to the identifier in the user name; C, if the packet network provider obtained by parsing represents an enterprise that provides the private network of the enterprise, an Internet Protocol (IP) address is allocated to the mobile terminal according to the identification, and the mobile terminal is connected to the private network of the enterprise; If the analyzed packet network provider represents a mobile operator, assign an IP address range to the mobile terminal according to the fixed access point name, and within the IP address range, the mobile gateway support node dynamically assigns an IP address to the mobile terminal , and then access the mobile terminal to the corresponding packet network provided by the mobile operator according to the network access destination address or network protocol set by the mobile terminal. 2. The method according to claim 1, further comprising: performing an authentication operation on the mobile terminal before connecting the mobile terminal to the private network of the enterprise or the packet network provided by the mobile operator. 3. The method of claim 2, wherein: Before the mobile terminal is connected to the private network of the enterprise, the authentication server of the corresponding network is found according to the actual access point name represented by the packet network provider parsed by the mobile gateway support node, and the user name and user password of the mobile terminal are authenticated. right. 4. The method of claim 2, wherein: Before connecting the mobile terminal to the packet network provided by the mobile operator, the mobile terminal initiates an authentication request, and the authentication server returns the destination address range that the mobile terminal is allowed to access the network. If it is within the range of the destination address of the access network, access to the network is allowed, otherwise, access is not allowed. 5. The method of claim 2, wherein: Before connecting the mobile terminal to the packet network provided by the mobile operator, the mobile terminal initiates an authentication request, and the authentication server returns the protocol type that the mobile terminal is allowed to access the network. If the protocol type that the mobile terminal wants to access the network is authentication If the protocol type returned by the authorization server allows the mobile terminal to access the network, the access to the network is allowed; otherwise, the access is not allowed. 6. The method according to claim 4 or 5, characterized in that said authentication server is integrated in a mobile gateway support node. 7. The method of claim 2, wherein: Before the mobile terminal accesses the packet network provided by the mobile operator, the mobile terminal performs authentication at the authentication server of the packet network to be accessed. 8. The method according to claim 1, characterized in that the packet network provided by the mobile operator in the step C is the Internet or a wireless application protocol network.

Images