CN1949755B - Method for inquiring access network user message - Google Patents

Abstract

The invention relates to an access network user information inquiring method in the network communication technical field, transmitting user service identification to access network at the time of network access attestation or user network parameter setting, making service control layer able to use user service identification as keyword to find user related information in the access network. And it can make service control layer able to inquire access user related information by using service layer user identification as keyword, effectively overcoming hostNAT problem and not utilizing service control layer to obtain IP address, improving the universality.

Description

A method for accessing network user information query

technical field

The invention relates to the technical field of network communication, in particular to a method for querying information of users accessing a network. the

Background technique

At present, the rapidly developing next-generation network has attracted more and more attention from the industry. The network consists of three logical layers, as shown in Figure 1, which are data bearer layer, bearer control layer, and service control layer. the

The data bearer layer is used to carry user service data flow;

The bearer control layer is used to impose control behaviors on each network element of the data bearer layer, so that the network is manageable and operable, and at the same time, the bearer control layer provides a unified access interface for the service control layer, shielding differences between different networks;

The business control layer is mainly responsible for business-related control, which provides users with management of various services, and the business control layer stores the mutual information of the user's business layer, which is called user business access data;

In the TISPAN (Telecommunications and Internet Converged Services and Protocols for Advanced Network Interconnection) standard draft, the bearer control layer is mainly divided into two systems: NASS (Network Access Attachment Subsystem) and RACS (Resource Admission Control Subsystem). );

NASS is used to store user subscription information, and is mainly responsible for access authentication and billing of access users, address allocation, user network parameter configuration, and client device management. Called user network access data;

RACS is mainly responsible for QOS control and management;

In the existing TISPAN standard draft, the (user IP address, address domain) pair is used as the unique association identifier to associate user data between the service control layer and the bearer control layer. The specific process is as follows:

1) TE (terminal equipment) accesses the network, is assigned an IP address, and stores the user's address and user's network access related information in NASS;

2) TE interacts with the AF of the service control layer through the high-level protocol. In the high-level protocol, the TE passes the allocated network IP address to the AF;

3) AF uses the user IP address and the obtained user address domain information as an association identifier pair (user IP address, address domain), and the address domain is used as a collection of IP addresses in the same management domain by AF to determine For the area to which the IP address belongs, the service control layer AF sends a query to the bearer control layer, and carries this association identifier pair in the query;

4) According to the association identification pair, the bearer control layer queries the user network access data and returns relevant information to the service control layer through a response message. The service control layer and the bearer control layer can establish data association about this user. the

From the above description, it can be seen that the current scheme has the following disadvantages:

(1) High-level protocols, such as the IP address carried in the SIP (Initiation Session Protocol) message sometimes cannot uniquely identify a user, because TE may use a private network address. At this time, NAT (Network Address Translation) traversal needs to be considered The problem;

Due to the different locations of NAT, it can be divided into two situations: one is that NAT is located at the network boundary of the operator, and the NAT conversion function is completed by the equipment of the operator; the other is that NAT is located in the network environment of the user end, that is, between the user equipment TE and Between network entities of an operator, such as a CNG (Customer Gateway), the latter case is called Hosted NAT. At this time, the end user equipment TE uses the private network IP address assigned by the CNG instead of the bearer control layer The IP address assigned by the NASS;

In the case of Hosted NAT, the IP address information carried by the user's high-level protocol is different from the IP address allocated by NASS. The AF at the service control layer needs to obtain their mapping relationship and perform address conversion of the high-level information header field. the

In the case of Hosted NAT, since the CNG may not be controlled by the operator, this mapping relationship cannot be obtained. Therefore, in this case, the IP address can no longer be used as the user data association identifier of the service control layer and the bearer control layer. the

(2) This solution does not consider the availability of address domain information in the application control layer; because high-level protocols do not currently have the ability to transmit address domain information, IP address domain information exists in the bearer control layer, while the application control layer It is relatively independent from the bearer control layer. the

Contents of the invention

In view of the problems existing in the above-mentioned prior art, the object of the present invention is to provide a method for querying access network user information, which transmits the service identifier of the user to the access network during network access, so that the service control layer can pass the user The service identifier is used as a keyword to search the relevant information of the requesting user in the access network. the

The purpose of the present invention is achieved by the following technical solutions:

A method for querying access network user information. The service control layer uses the service layer user identifier of the user as a keyword to interact with the bearer control layer to query related information of the access network user. The service layer user identifier is the service control layer pair The identification used to access the service used by the user for authentication management, the method includes:

A. When the user terminal equipment accesses the network, when performing network access authentication or user network parameter configuration, the user's own business layer user identification is transmitted to the access network;

B. The user terminal equipment interacts with the application function entity AF, and transmits the service layer user identifier to the AF;

C. The AF sends a query request message carrying the user identifier of the service layer to the bearer control layer;

D. The bearer control layer acquires service-related information according to the service-layer user ID and sends it to the AF. the

The method for transmitting the service layer user identification to the access network in the step A includes:

When the user applies for a network address through the Dynamic Host Configuration Protocol DHCP, it is transmitted through the DHCP protocol option; or,

When the user accesses the network through the point-to-point communication protocol PPP or Ethernet PPP protocol, the IP control protocol IPCP extension option or IPCPv6 extension option is passed; or,

When the user is authenticated through the Extensible Authentication Protocol (EAP), the request message of the response network carries the user identifier of the service layer by using the extension type or option. the

When the user uses a client gateway to implement NAT, the step A includes:

A1. When the user equipment applies for a local IP address from the user gateway, it reports its service layer user ID to the user gateway device;

A2, the user gateway device assigns an IP address to the user, and records the user identification of the service layer at the same time;

A3. The user gateway transmits the user identifier of the service layer to the access network. the

Described step D specifically comprises:

The bearer control layer uses the user identifier of the service layer as a key to query the relevant information of the access user. the

The access user related information includes: user ID, user IP address, user physical logical access line identifier or user location information. the

It can be seen from the above-mentioned technical solution provided by the present invention that the present invention enables the service control layer to query the relevant information of the access user by using the user identifier of the service layer as a keyword, effectively overcomes the hostNAT problem, and does not use the service control layer to obtain IP address, which improves the generality of the method. the

Description of drawings

Figure 1 is a schematic diagram of three levels of the existing technology next generation network;

Fig. 2 is a flowchart of the operation of the method of the present invention. the

Detailed ways

The core idea of the present invention is to provide a method for querying access network user information, which transmits the user's service ID to the access network during network access, so that the service control layer can use the user's service ID as a keyword to access the network. Search for relevant information about access users in the network. the

The present invention provides a method for accessing network user information query, the operation flow chart of which is shown in Figure 2. Referring to Figure 2, the method specifically includes the following steps:

Step 10: The user terminal equipment TE accesses the network, and transmits the service layer user identification of the user itself to the access network when performing network access authentication or user network parameter configuration;

The service layer user identification is: when the user uses various services on the network, he needs to be authenticated and managed at the service control layer, and needs an identification for service authentication and management, and the identification is the service described in the present invention. Layer user identification, the service layer user identification is the unique identification of the user in the service control layer, which includes but not limited to: a NAI (Network Access Identifier) type, an email address, a FQND (full name domain name), a SIP URI (SIP Uniform Resource Identifier);

The method for the terminal device to transmit the user identifier of the service layer to the access network includes:

a) The user passes through the DHCP (Dynamic Host Configuration Protocol) protocol option;

When the user uses the DHCP protocol to apply for IP address allocation, or after applying for the address, the user puts his service layer user ID into an option of DHCP and passes it to the corresponding entity of the bearer control layer. The DHCP option can use option60, option61, option82 wait;

b) The user realizes through extended options such as IPCP (IP Control Protocol), IPCPv6;

When a user accesses the network through PPPOE (PPP over Ethernet) or PPP (Point-to-Point Communication Protocol), the corresponding extension options in these protocols carry the service layer user ID and pass it to the corresponding entity of the bearer control layer;

c) The user is implemented through the EAP (Extensible Authentication Protocol) protocol extension type;

When the user is authenticated by the network using EAP, the network device sends an EAP request (EAP request) message to inquire about the service layer user ID, and the user carries the service layer user ID in the response message and reports it to the bearer control layer;

When a user uses a client gateway and implements NAT, the process of reporting the user ID of the service layer includes:

1) When the user applies for a local IP address from the user gateway, he reports his service layer user ID to the user gateway device; the specific methods include:

When using the DHCP protocol, you can use the DHCP request (request) message or DHCP inform (notification) message to carry options, the options include option 60, option 61, option 82, etc.;

For the DHCPv6 protocol, use the renew (renew), rebind (rebind), information_request (information request) message to carry options, the options include: client idoption (1) (customer identification option), user class option (15) (user class information option), verdor_specific information option(17) (vendor specific information option);

2) The user gateway device assigns an IP address to the user, and simultaneously records the user identification of the service layer;

3) The user gateway transmits the user identifier of the service layer to the access network, and this transmission process may be during network access or after network access. the

Step 11: TE interacts with AF (Application Functional Entity) through a high-level protocol, and transmits the service layer user identification information to AF;

Step 12: The AF interacts with the NASS through the interface between the service control layer and the NASS, and queries the relevant information of the access user, and the query message carries the user identification information of the service layer;

Step 13: NASS uses the received service layer user ID as a key to search for user network access data authorized by the bearer control layer, including user ID, user IP address, user physical logical access line ID, user positioning information, etc.;

Step 14: The bearer control layer transmits the found information to the service control layer through a response message, and completes the exchange of user data between the bearer control layer and the service control layer. the

In summary, the present invention enables the service control layer to use the user service identifier as a keyword to query the relevant information of the access user by using the user identifier of the service layer, effectively overcomes the hostNAT problem, and does not use the service control layer to obtain the IP address, thereby improving the generality of this method. the

The above is only a preferred embodiment of the present invention, but the scope of protection of the present invention is not limited thereto. Any person skilled in the art within the technical scope disclosed in the present invention can easily think of changes or Replacement should be covered within the protection scope of the present invention. Therefore, the protection scope of the present invention should be determined by the protection scope of the claims. the

Claims (5)

1. A method for accessing network user information query, characterized in that, the service control layer utilizes the user's service layer user identification as a keyword to interact with the bearer control layer to inquire about the relevant information of the access network user, and the service layer user The identification is the identification used by the service control layer to perform authentication management on the service used by the access user, and the method includes: A. The user terminal equipment accesses the network, and transmits the user's own business layer user identification to the access network when performing network access authentication or user network parameter configuration; B. The user terminal equipment interacts with the application function entity AF, and transmits the service layer user identifier to the AF; C. The AF sends a query request message carrying the user identifier of the service layer to the bearer control layer; D. The bearer control layer acquires service-related information according to the service-layer user ID and sends it to the AF. 2. A kind of method for accessing network user information query as claimed in claim 1, is characterized in that, in the described step A, the method for transmitting the service layer user identification to the accessing network comprises: When the user applies for a network address through the Dynamic Host Configuration Protocol DHCP, it is transmitted through the DHCP protocol option; or, When the user accesses the network through the point-to-point communication protocol PPP or Ethernet PPP protocol, the IP control protocol IPCP extension option or IPCPv6 extension option is passed; or, When the user is authenticated through the Extensible Authentication Protocol (EAP), the request message of the response network carries the user identifier of the service layer by using the extension type or option. 3. A kind of method for accessing network user information inquiry as claimed in claim 1, is characterized in that, when the user uses a client gateway to realize network address translation NAT, said step A comprises: A1. When the user equipment applies for a local IP address from the user gateway, it reports its service layer user identification to the user gateway device; A2, the user gateway device assigns an IP address to the user, and records the user identifier of the service layer at the same time; A3. The user gateway transmits the user identifier of the service layer to the access network. 4. A method for querying access network user information as claimed in claim 1, wherein said step D specifically comprises: The bearer control layer uses the user identifier of the service layer as a key to query the relevant information of the access user. 5. A method for querying access network user information according to any one of claims 1 to 4, wherein said access user related information includes: user ID, user IP address, user physical logical connection Enter the line ID or user location information.