CN1968090B - Method and system for realizing data business service center obtaining user terminal authentication information - Google Patents

Abstract

This invention provides a method and system for a data service center to obtain user terminal authentication information. The method involves pre-setting a mapping relationship between IMSI, user terminal IP address, and MDN on system network elements. The data service center obtains the corresponding user terminal's MDN through information exchange with the PDSN and system network elements. The system provided by this invention includes a PDSN, system network elements, and a data service center. This invention solves the problem in CDMA networks where data service centers fail to authenticate user terminals due to the inability to obtain user terminal MDN information, enabling user terminals to be authenticated by the data service center without special customization.

Description

Method and system for realizing data business service center obtaining user terminal authentication information

technical field

The invention relates to the field of authentication in communication technology, in particular to a method and system for realizing authentication information of a user terminal obtained by a data business service center.

Background technique

In the Code Division Multiple Access (CDMA) system, since the mapping relationship between the International Mobile Subscriber Identity (IMSI) or the user terminal Internet Protocol (IP) address and the Mobile Subscriber Directory Number (MDN) has not been realized, the MDN is exactly It is the authentication information needed by the data service center to authenticate the user terminal. Therefore, all data services have the problem that the data service center cannot obtain the user terminal authentication information, which will eventually lead to the data service center being unable to realize the authentication of the user terminal. Terminal authentication.

Taking the MMS service as an example, when the MMS mobile phone terminal sends the MMS service request message to the Packet Data Serving Node (PDSN) through the wireless core network, the PDSN directly sends the MMS service request message to the MMS service through the hypertext transfer protocol (http). Center (MMSC), because in the upstream http message code stream of the multimedia message, the parameter X-MSISDN of the http header data does not have the mobile phone MDN required for the authentication of the multimedia message service, so the MMSC cannot realize the authentication of the mobile phone terminal.

In order to realize the authentication of the user terminal by the data service service center, in the user terminal such as a mobile phone terminal in the prior art, the authentication information required for the data service service center to realize the authentication of the user terminal is written into the user identification card (UIM) of the mobile phone. ), write the MDN information into the UIM card of the mobile phone, when the mobile terminal sends a data service request message through the wireless core network, the data service request message carrying the MDN is sent to the PDSN, and the data service center passes the information with the PDSN The MDN of the mobile terminal is obtained interactively, and the authentication of the mobile terminal is realized. However, this technical solution needs to customize a special mobile phone terminal, which is difficult to realize for mobile phone terminals that have already been put into operation.

Contents of the invention

The technical problem to be solved by the present invention is to provide a method and system for the data service center to obtain user terminal authentication information, so that the user terminal can obtain the user terminal authentication information required by the data service center without special customization. Information.

For this reason, the present invention provides a kind of method that realizes data business service center to obtain user terminal authentication information, and this method is:

The packet data serving node PDSN initiates a data service request;

According to the mapping relationship between the IMSI, IP address and MDN preset in the system network element, search for the authentication information MDN required for the data service service center to authenticate the mobile user;

The data service service center obtains the authentication information MDN.

Among them, there are four methods for realizing that the data service service center obtains the corresponding user terminal MDN:

Method 1 is:

Step 1a: The system network element and the PDSN perform information interaction, find out the MDN of the corresponding user terminal, and send the service message containing the MDN to the data service center;

Step 1b: After receiving the PDSN service request message, the data service center obtains the MDN of the corresponding user terminal according to the service message containing the MDN sent by the system network element.

Method 2 is:

Step 2a: PDSN interacts with system network element information to obtain the MDN of the corresponding user terminal;

Step 2b: PDSN sends the service request message containing the corresponding user terminal MDN to the data service service center;

Step 2c: The data service service center receives the service request information sent by the PDSN, and obtains the MDN for the user terminal.

Method 3 is:

Step 3a: The system network element interacts with the PDSN information to obtain the MDN of the corresponding user terminal, and forwards the service message containing the MDN of the corresponding user terminal to the wireless integrated service gateway WISG;

Step 3b: PDSN sends a service request message to the data service center, and the data service center interacts with WISG information according to the service request message to obtain the MDN of the corresponding user terminal.

Method 4 is:

According to the received PDSN service request message, the data service service center obtains the MDN of the corresponding user terminal from the system network element.

Wherein, before method 1, method 2, and step 1a, 2a, 3a described in method 3, further include:

The user terminal sends a service request message to the PDSN through the wireless core network, and the PDSN authenticates the request message, and initiates a user data service request if the authentication passes.

Wherein, in method 4, before the data service service center receives the PDSN service request, the method further includes:

The user terminal sends a service request message to the PDSN through the wireless core network, and the PDSN authenticates the request message, and initiates a user data service request if the authentication passes.

Wherein, the system network element is an authorization, authentication and accounting center AAA or an independently set database.

Wherein, the Radius protocol is used for information exchange between the PDSN, the AAA and the data service center.

The present invention also provides a system for realizing the data business service center to obtain user terminal authentication information, and the system includes:

PDSN, according to the request of the user terminal, initiates a data service request message to the system network element or data service center;

The system network element presets the mapping relationship between MDN, IMSI and IP address, finds the MDN of the corresponding user terminal according to the received request for searching authentication information, and enables the data service center to obtain the corresponding MDN information through data interaction;

The data service service center performs data service authentication according to the obtained user terminal MDN information.

Wherein, the system network element is an authorization, authentication and accounting center AAA or an independently set database.

Wherein, the Radius protocol is used for information exchange between the PDSN, the AAA and the data service center.

Since the present invention presets the mapping relationship between the IMSI, the user terminal IP address, and the MDN on the system network element, the data service center can obtain information for the data service service center in the information interaction with the PDSN and the system network element. The MDN information required for user terminal authentication solves the problem that the data service service center in the CDMA network cannot obtain the MDN information required for user terminal authentication, which leads to the failure of user terminal authentication, so that users do not need to use specially customized The terminal can realize the authentication of the user terminal by the data service service center.

Further, since the present invention also provides four methods for realizing the data service data service center to obtain the user terminal MDN, the present invention is flexible in application, easy to realize in combination with different business situations and system architectures, and the present invention uses existing network The AAA network element saves the mapping relationship, achieving compatibility with the existing network system and avoiding changes to the existing network architecture.

The present invention also provides a system required for the data business service center to obtain authentication information. The system solves the problem that the data business service center fails to authenticate the user terminal due to the inability to obtain the user terminal MDN information, so that the user does not need to The authentication of the user terminal by the data service service center can be realized by using a special customized terminal.

Description of drawings

FIG. 1 is a signaling flow chart of Embodiment 1 of the present invention;

FIG. 2 is a signaling flow chart of Embodiment 2 of the present invention;

FIG. 3 is a signaling flow chart of Embodiment 3 of the present invention;

FIG. 4 is a signaling flowchart of Embodiment 4 of the present invention.

Detailed ways

The core idea of the present invention is: preset the mapping relationship between IMSI, user terminal IP address, and MDN on the CDMA system network element, so that the data service service center can obtain the MDN of the corresponding user terminal through information interaction with the system network element, thereby The problem of authentication of the user terminal by the data service service center is solved.

Next, taking the MMS service of a mobile phone as an example, the method for obtaining the MDN of a mobile terminal by a data service service center of the present invention will be described in detail in conjunction with the accompanying drawings.

Example 1

Referring to Fig. 1, the mapping relationship of IMSI or user terminal IP address and MDN is stored in authorization, verification, and billing center (AAA) network element, and the method for MMSC to obtain corresponding mobile phone terminal MDN is as follows:

Steps 101 to 102: the mobile terminal initiates a multimedia message (MMS) request message, which arrives at the PDSN through the wireless core network, and after being authenticated by the PDSN, the PDSN sends a billing request message to the mobile terminal to the AAA;

Wherein, the charging request message includes the IMSI or IP address of the mobile terminal, MMSC information, and corresponding service information;

Step 103: AAA is configured as Radius Proxy mode. After AAA receives the charging request message from PDSN, it obtains the MDN of the corresponding mobile terminal according to the mapping relationship between the IMSI, IP address, and MDN stored locally; AAA puts the obtained MDN into Billing request message, and forwarded to MMSC through Radius protocol;

Wherein, the data business service center in this embodiment is MMSC, and may also be other data business service centers that require MDN information, wireless application protocol gateways (WAPGW) that require MDN information, wireless integrated service gateways (WISG), etc. in actual networks. The network element does not affect the realization of the present invention;

Step 104: MMSC saves locally after obtaining the charging message forwarded by AAA, and then sends a response message back to AAA;

In this way, the IMSI or IP address of the mobile terminal and the MDN information of the corresponding mobile terminal are stored in the MMSC;

Step 105: AAA sends a response message to the PDSN after obtaining the response message sent back by the MMSC;

Step 106: After receiving the response message from the AAA, the PDSN sends an MMS service request message to the MMSC, and the MMSC obtains the MDN of the corresponding mobile terminal according to the billing request message forwarded by the previously stored AAA;

So far, MMSC has obtained the MDN of the corresponding mobile terminal.

Example 2

Referring to Figure 2, the mapping relationship between IMSI, user terminal IP address, and MDN is preset in the AAA network element, and the method for MMSC to obtain the corresponding mobile terminal MDN is as follows:

Steps 201 to 202: the mobile terminal initiates an MMS request message, which reaches the PDSN through the wireless core network, and after being authenticated by the PDSN, the PDSN sends a billing request message for the mobile terminal to the AAA;

Wherein, the charging request message includes the IMSI or IP address of the mobile terminal, MMSC information, and corresponding service information;

Step 203: After receiving the charging request message from the PDSN, AAA obtains the MDN of the corresponding mobile terminal according to the mapping relationship between the IMSI or IP address of the mobile terminal stored locally and the MDN, and then puts the obtained MDN into the response message Send back to PDSN;

Step 204: After receiving the response message sent back by the AAA, the PDSN puts the MDN of the corresponding mobile terminal obtained from the interactive response message with the AAA into the MMS request message and sends it to the MMSC;

Based on this, MMSC obtains the MDN of the corresponding mobile terminal.

Wherein, the data business service center in this embodiment is MMSC, and may also be other data business service centers that require MDN information, wireless application protocol gateways (WAPGW) that require MDN information, wireless integrated service gateways (WISG), etc. in actual networks. The network element does not affect the realization of the present invention.

Example 3

Referring to Figure 3, the mapping relationship between IMSI, user terminal IP address, and MDN is preset in the AAA network element, and the method for the MMSC to obtain the MDN of the corresponding mobile terminal is as follows:

Steps 301 to 302: The mobile terminal initiates an MMS request message, which reaches the PDSN through the wireless core network, and after being authenticated by the PDSN, the PDSN sends the MMS request message to the MMSC;

Wherein, the data business service center in this embodiment is MMSC, and may also be other data business service centers that require MDN information, wireless application protocol gateways (WAPGW) that require MDN information, wireless integrated service gateways (WISG), etc. in actual networks. The network element does not affect the realization of the present invention;

Step 303: AAA is configured as a Radius Proxy mode, and the MMSC sends a request to obtain an MDN to the AAA through the Radius protocol after receiving the MMSC service request message sent by the PDSN;

Wherein, the request message for obtaining the MDN includes at least the IMSI or IP address corresponding to the mobile terminal, and MMSC information;

Step 304: After receiving the MDN request message from the MMSC, the AAA obtains the MDN corresponding to the mobile terminal according to the IMSI or IP address corresponding to the locally stored mobile terminal and the MDN mapping relationship, and then puts the obtained MDN into the corresponding response The message is sent back to the MMSC through the Radius protocol, and the MMSC obtains the MDN of the corresponding mobile terminal according to the received response message;

So far, MMSC has obtained the MDN of the corresponding mobile terminal.

Example 4

Referring to Fig. 4, under the situation that there is WISG in CDMA network, the method for MMSC to obtain the MDN of corresponding mobile phone terminal, the steps are as follows:

Preset the mapping relationship between IMSI, user terminal IP address, and MDN in the AAA network element;

Steps 401 to 402: The mobile terminal initiates an MMS request message, which reaches the PDSN through the wireless core network, and after being authenticated by the PDSN, the PDSN sends an accounting request message to the AAA;

Step 403: AAA is configured as a Radius Proxy mode. After receiving the charging request message from the PDSN, the AAA obtains the MDN corresponding to the mobile terminal according to the IMSI or IP address corresponding to the locally stored mobile terminal and the mapping relationship with the MDN, and then sends the Put the obtained MDN into the billing request message, and forward the billing request message to WISG through the Radius protocol;

Step 404: WISG receives the billing request message containing the MDN corresponding to the mobile terminal forwarded by AAA, saves the message locally, and then sends back a response message to AAA;

In this way, the IMSI or IP address corresponding to the mobile terminal and the MDN information of the corresponding mobile terminal are stored in the service center WISG;

Step 405: AAA sends a corresponding response message to the PDSN after receiving the response message sent back by the WISG;

Step 406: After receiving the AAA response message, the PDSN sends an MMS request message to the MMSC;

Wherein, the data business service center in this embodiment is MMSC, and may also be other data business service centers that require MDN information, wireless application protocol gateways (WAPGW) that require MDN information, wireless integrated service gateways (WISG), etc. in actual networks. The network element does not affect the realization of the present invention;

Step 407: After receiving the MMS request message from the PDSN, the MMSC sends an MDN query request to the WISG;

Wherein, the MDN query request at least includes the IMSI or IP address corresponding to the mobile terminal to be queried, WISG information, and other corresponding business information;

Step 408: After receiving the query MDN request message sent by the MMSC, the WISG obtains the corresponding MDN of the mobile terminal according to the billing request message forwarded by the previously stored AAA, and adds it to the corresponding response message and sends it back to the MMSC;

Based on this, the MMSC obtains the MDN corresponding to the mobile terminal.

It can be seen that the method of the present invention can realize the authentication of the mobile terminal by the multimedia service center without writing its corresponding MDN in the UIM of the mobile terminal. By presetting the mapping relationship between MDN, IMSI, and user terminal IP address in the system network element AAA, the data service center can obtain information for the data service center to use in the information interaction with the PDSN and system network elements. The MDN information required for user terminal authentication solves the problem that the data service service center in the CDMA network cannot obtain the MDN information required for user terminal authentication, which leads to the failure of user terminal authentication, so that users do not need to use specially customized The terminal can realize the authentication of the user terminal by the data service service center.

The present invention also provides a system for realizing the data business service center to obtain user terminal authentication information, and the system includes:

PDSN, according to the request of the user terminal, initiates a data service request message to the AAA network element or the data service service center;

The AAA network element presets the mapping relationship between MDN, IMSI and IP address, and configures it in RadiusProxy mode. According to the received authentication information search request, it finds the MDN of the corresponding user terminal and enables the data service service center to obtain it through data interaction. Corresponding MDN information;

Wherein, the search authentication information request can be initiated by the PDSN, or can be initiated by the data service service center, which does not affect the realization of the present invention;

The data service service center performs data service authentication according to the obtained user terminal MDN information.

Wherein, the Radius protocol is used for information exchange between the PDSN, the AAA and the data service center.

It can be seen that the system presets the mapping relationship between MDN, IMSI and user terminal IP address on the system network element AAA, so that the data service center can obtain the information used for the data exchange between the PDSN and the system network element. The MDN information required by the business service center for user terminal authentication solves the problem that the data service service center cannot obtain the MDN information required for user terminal authentication in the CDMA network, which leads to the failure of user terminal authentication, so that users do not need to The authentication of the user terminal by the data service service center can be realized by using a specially customized terminal.

The above descriptions are only preferred embodiments of the present invention, and are not intended to limit the present invention. Any modifications, equivalent replacements, improvements, etc. made within the spirit and principles of the present invention shall be included in the scope of the present invention. within the scope of protection.

Claims (7)

1. realize that data service service centre obtains the method for subscriber terminal authority information for one kind, it is characterized in that,

Packet data serving node PDSN initiates the data service request;

According to the mapping relations between the international mobile subscriber identity IMSI that presets in system's network element, mobile subscriber's international agreement IP address and the Mobile Directory Number MDN, search and be used for the MDN required of data service service centre mobile phone user authentication, wherein, MDN is the data service service centre authentication information required to mobile phone user authentication;

Data service service centre obtains described MDN, specifically comprises:

System's network element and PDSN carry out information interaction, find out the MDN of relative users terminal, and the service message that will contain MDN sends to data service service centre; After data service service centre received the PDSN business request information, the service message of sending according to system's network element that contains MDN obtained the MDN of relative users terminal;

Or

PDSN and system's network element carry out information interaction, obtain the MDN of relative users terminal; The business request information that PDSN will comprise the MDN of relative users terminal sends to data service service centre; Data service service centre receives the service requesting information that PDSN sends, and obtains the MDN of respective user terminal;

Or

System's network element and PDSN information interaction obtain the MDN of relative users terminal, and the service message that will contain the MDN of relative users terminal is forwarded to wireless integrated service gateway WISG; PDSN sends business request information to data service service centre, and data service service centre with the information interaction of WISG, obtains the MDN of relative users terminal according to this business request information;

Or

After the business request information that the PDSN that data service service centre receives sends, send the request of the MDN that obtains user terminal to system's network element; After system's network element receives the MDN request message that obtains user terminal that data service service centre sends, IMSI or the IP address and the MDN mapping relations of the user terminal correspondence of depositing according to this locality, obtain the MDN of user terminal correspondence, the MDN of user terminal is carried in the response message sends to data service service centre by the Radius agreement; Data service service centre obtains the MDN of user terminal according to the response message that receives.

2. method according to claim 1 is characterized in that, data service service centre obtains further to comprise before the described MDN:

User terminal sends business request information to PDSN by wireless core network, and PDSN authenticates this request message, if authentication is passed through, then initiates the user data service request.

3. method according to claim 2 is characterized in that, described system network element is Authorization, Authentication and Accounting center AAA or the independent database that is provided with.

4. method according to claim 3 is characterized in that, adopts the Radius agreement to carry out information interaction between described PDSN, AAA and the data service service centre.

5. realize that data service service centre obtains the system of subscriber terminal authority information, is characterized in that this system comprises for one kind:

PDSN initiates the data service request message to system's network element or data service service centre according to the request of user terminal;

System's network element presets the mapping relations between MDN, IMSI and the IP address, and wherein, MDN is the data service service centre authentication information required to mobile phone user authentication; Carry out information interaction with PDSN, find out the MDN of relative users terminal, and the service message that will contain MDN sends to data service service centre, make data service service centre obtain corresponding M DN information; Or, carry out information interaction with PDSN, make PDSN obtain the MDN of relative users terminal, so that will comprising the business request information of the MDN of relative users terminal, PDSN sends to data service service centre, make data service service centre obtain corresponding M DN information; Or, MDN with PDSN information interaction acquisition relative users terminal, the service message that will contain the MDN of relative users terminal is forwarded to wireless integrated service gateway WISG, so that data service service centre is after the business request information that receives the PDSN transmission, according to the information interaction of this business request information and WISG, obtain the MDN of relative users terminal; Or, the request of the MDN that obtains user terminal that reception data service service centre sends after the business request information that the PDSN that receives sends, IMSI or the IP address and the MDN mapping relations of the user terminal correspondence of depositing according to this locality, obtain the MDN of user terminal correspondence, the MDN of user terminal is carried in the response message sends to data service service centre, make data service service centre obtain the MDN of user terminal according to the response message that receives by the Radius agreement;

Data service service centre according to the MDN information of the user terminal that obtains, carries out data business right discriminating.

6. system according to claim 5 is characterized in that, described system network element is Authorization, Authentication and Accounting center AAA or the independent database that is provided with.

7. system according to claim 6 is characterized in that, adopts the Radius agreement to carry out information interaction between described PDSN, AAA and the data service service centre.

Images