WO2008148348A1 - Communication method, system, and home bs - Google Patents

Abstract

A method, a system, and a home BS for communication are provided. The communication method include: a user communicates with a network through the user ID code of the home BS, the user ID code of the home BS is stored in a BSID card, the BSID card is detachly installed in the BS main body.

Description

 Communication method and system, and home base station

 The present invention relates to a communication technology, and more particularly to a communication method and system, and a home base station. Background technique

 With the rapid development of Internet (Internet) services and the wide application of broadband access networks and wireless networks, high-speed and convenient access to the network is the goal pursued by people. In order to better utilize the resources of the existing network and protect the cost of network equipment operators, the concept of a home base station is introduced in the 3GPP (3rd Generation Partnership Project). A home base station usually refers to a small, small base station for home or office use. It may be completely private. It can also be opened to the public for use with different priorities and permissions. Its ownership is private, not government. Or the operator; its use of the object may be a small range of users, but also a wide range of users.家用Using home base stations to achieve wireless access, can better utilize existing network resources, save more network equipment operators' costs, and combine the advantages of mobile access networks and fixed access networks.

 For the home base station, the device identity of the home base station is used to identify the user group that uses the home base station, and only after the user group using the home base station is registered, the member of the user group can use the home base station. In addition, since the home base station is a base station purchased by the user and placed at the user, that is, the home base station is under the control of the operator, so that when the home base station accesses the mobile network, it needs to be connected with the mobile network. Mutual authentication is performed to identify the legitimacy of the home base station, and a symmetric key is used in the authentication process.

Since the user identifier of the home base station is used to identify the user group using the home base station, the following problems occur: (1) Since the identifier is the identifier of the home base station, it is provided by the manufacturer, and if the identifier is to be modified, It becomes very difficult; (2) When the identifier is used to find the relevant node of the network, because the device identifier is provided by the device provider and cannot contain routing information, the device identifier of the home base station is used in the mobile network to find the corresponding node. HSS (Home Subscriber Server) can be cumbersome. At the same time, since the user of the home base station can only use the service provided by the home base station to which he is registered, when the user of the home base station is in the field, if he enjoys the service provided by the home base station to which he is registered, the home base station must be carried with him, therefore, The mobility of the home base station is very poor for the user. Summary of the invention

 The embodiments of the present invention provide a communication method and system, and a home base station, which enhance the mobility of the home base station and facilitate the user.

 An embodiment of the present invention provides a communication method, including:

 The home base station user identification code is stored in the base station identity identification card by the home base station user identification code, and the base station identity identification card is detachably mounted on the base station body.

 Embodiments of the present invention also provide a communication system including a home base station and a network side entity.

 The home base station is configured to communicate with a network side entity by using a home base station user identification code, where the home base station includes a base station body and a base station identity identification card, where the user identification code is stored in a base station identity identification card, and the base station identity is The identification card is detachably mounted on the base station body.

 An embodiment of the present invention further provides a home base station, including a base station body and a base station identity card.

 The base station body includes: a first sending unit, configured to send a read home base station user identification code request to the base station identity identification card, where the first receiving unit is configured to receive the home base station user identification code sent by the base station identity identification card a confirmation message, configured to communicate with the network side by using the home base station user identification code;

The base station identity card is detachably mounted on the base station body, and includes a first storage unit, configured to store a home base station user identification code, and a first receiving unit, configured to receive a read home base station user identifier sent by the base station body And a first sending unit, configured to send, to the base station body, an acknowledgement message including a home base station user identification code. The embodiment of the present invention enhances the mobility of the home base station by separating the home base station into a base station body and a BSIM (Base Station Identifier Module) card, so that the user can use any other home base station through the BSIM card. In addition, since the BSIM card is easy to carry, when the user goes to the outside, the BSIM card only needs to be carried, and the BSIM card is installed on the base station body, and the network side can communicate with the network side, thereby greatly facilitating the user. DRAWINGS

 1 shows the structure of a BSIM ID (Home Base Station User Identification Code) according to an embodiment of the present invention;

 FIG. 2 is a flowchart showing an authentication process of a home base station in a PLMN (Public Land Mobile Network) according to Embodiment 1 of the present invention;

 FIG. 3 is a diagram showing a scenario in which a home base station is managed by an MME (Mobile Management Entity) in a SAE (System Architecture Evolution)/LTE (Long Term Evolution) network according to Embodiment 2 of the present invention. Authentication process;

 4 is a flowchart showing an authentication process of a home base station in a UMTS (Universal Mobile Telecommunication System) network according to Embodiment 3 of the present invention;

 FIG. 5 is a diagram showing another authentication process of a home base station in a UMTS network according to Embodiment 4 of the present invention;

 6 is a flowchart showing an authentication process when a home base station is managed by an intermediate gateway GW in a SAE/LTE network or a UMTS network according to Embodiment 5 of the present invention;

 Fig. 7 shows a communication system of an embodiment of the present invention. detailed description

 In order to facilitate a person skilled in the art to understand and implement the present invention, the embodiments of the present invention are described in conjunction with the accompanying drawings.

In the embodiment of the present invention, the entire home base station is composed of two parts: that is, the base station body and BSIM card. The base station body stores the BS Number (home base station body number) of the home base station, and the BSIM card stores the subscriber identity BSIM ID (home base station user identification code) of the home base station, and can also store related security parameters, and the related security. The parameter may be a related parameter based on a symmetric key system, such as a basic key, and some authentication algorithms and a derivative key generation algorithm (hereinafter referred to as a key generation algorithm), or may be related parameters based on an asymmetric key system. Such as digital certificates. The BSIM ID can be used to uniquely identify a group of users using a certain base station. Other communication-related information may also be stored in the B SIM card, such as user data (such as a telephone number, etc.) and network data of each user using the home base station (for example, a list of users who are allowed to use the home base station, and a home base station when the last registration is used) The location identification number, the derived key life cycle, etc.; the other communication-related information can be dynamically changed during the communication process.

 When you open an account, you will get a BSIM card. After the BSIM card is obtained, the BSIM card can be detachably installed in any base station body. When the base station body is powered on, the BSIM ID of the BSIM card can be used to register and authenticate to the mobile network. When the registration authentication is successful, The home base station can communicate with the network in various ways. The BSIM ID and related service information are stored in the BSIM card, so the BSIM ID and related service information can be flexibly modified through the detachable installation of the BSIM card.

 As shown in FIG. 1, the BSIM ID can be composed of the following three parts:

 a mobile country code (MCC) that uniquely identifies the country in which the home base station is located; a mobile network code (MNC) that identifies the home network to which the home base station belongs;

 A mobile home base station identification code (MBIN) identifies a home base station within a home network and may identify a home subscriber server HSS to which the home base station belongs. So you can find the corresponding HSS based on the MBIN of the BSIM ID.

 MNC and MBIN are combined to form the National Mobile Home Base Station Identity (NMBI).

The allocation of the MCC can be managed by the ITU. NMBI can be accounted for by each operator or national policy department.

 The BSIM ID can also be composed in other ways as long as it can satisfy the user group that uniquely identifies the use of a certain base station.

The embodiment of the invention discloses a communication method, which comprises: The home base station user identification code communicates with the network side, and the home base station user identification code is stored in the base station identity identification card, and the base station identity identification card is detachably installed on the base station body. Before communicating with the network side, the base station body sends the home base station user identification code request information to the base station identity identification card, and receives the home base station user identification code returned by the base station identity identification card. The base station identity card also stores related security parameters for the home base station to authenticate with the network side. The authentication of the home base station and the network side includes: the home base station sends the home base station user identification code to the network side, so that the network side performs an authentication algorithm according to the received home base station user identification code, obtains the first authentication result, and returns the reference. Receiving a second authentication result according to the authentication request message and the security parameter; sending an authentication response message to the network side, the authentication response message includes a second authentication result; and causing the network side to perform the first authentication result according to the The second authentication result in the authentication response message is authenticated. The communication method further includes: the home base station transmitting the home base station user identification code to the network side by using a registration request message; the home base station receiving the registration response message, and the registration response message is determined by the network side according to the first authentication result and the second authentication The result of the right is sent after authentication. Since the home base station is divided into the base station body and the BSIM card, the communication process change is mainly reflected in the authentication process of the home base station and the network side, and the registration authentication in various networks is respectively described by the first embodiment to the fifth embodiment. process.

 Embodiment 1

 This embodiment describes a registration authentication method of a home base station in a PLMN operator network. In FIG. 2, the home base station includes the base station body and the BSIM card. As shown in FIG. 2, the registration authentication process of the home base station is as follows:

 Step 201: The home base station is powered on, and sends a registration request message including a BSIM ID to the network side.

 Step 202: After receiving the registration request message, the network side finds a corresponding basic key according to the BSIM ID in the registration request message, and then executes an authentication algorithm according to the BSIM ID and the basic key, and sends an authentication request message to the home base station.

 Step 203: After receiving the authentication request message, the home base station performs an authentication algorithm by using the basic key in the BSIM card, and sends an authentication response message to the network.

In step 202 and step 203, a derived key may be generated by using a basic key, the derivative The birth key can be used as a pre-shared key for IKE (Internet Key Exchange) in IPSec (Network Layer Security Protocol) to establish a security association (SA) in IPSEC. It can be used as a key to protect data transmitted between the home base station and the network.

 Step 204: The network side authenticates the home base station. If the authentication succeeds, the user using the home base station is a legitimate user, and the network can provide a subscription service for the user through the home base station, and the network sends a registration response message to the home base station.

 In step 201 to step 204, an authentication method is simply exemplified, and those skilled in the art can know that other authentication methods can also be used for authentication.

 After receiving the subscription service provided by the network through the home base station, the user can perform other corresponding processes by using the BSIM ID in the BSIM card according to the requirements of the network side, for example, adding or deleting users in the user list that can use the home base station.

 The home base station according to the embodiment of the present invention is also suitable for other networks, such as UMTS network, SAE/LTE, etc., and the following describes the home base station in the UMTS network, SAE/LTE by using Embodiment 2 to Embodiment 5 with reference to FIG. 3 to FIG. The authentication process in the case of power-on registration in the network is similar to the authentication process in other cases, and will not be described here. In FIG. 3 to FIG. 6, BSIM denotes a BSIM card, MME denotes a mobility management entity, when the network is an SAE/LTE network, an MME node is used; SGSN is a serving GPRS support node, when the network is UMTS , using the SGSN node. The HSS is a home subscriber server, which is used to store the BSIM ID of the home base station, and the corresponding basic key. In FIG. 6, the intermediate gateway (GW) may be a security gateway or a sink node, and may share part of the network side and part. The function of the wireless control node.

 Embodiment 2

 As shown in FIG. 3, this embodiment describes an authentication process when the home base station is managed by the MME in the SAE/LTE network.

 Step 301: After the base station body is powered on, send the home base station user identification code request information to the BSIM card, for example, send a request message for reading the B SIM ID.

Step 302: The BSIM card returns BSIM ID information to the base station body, for example, sending an acknowledgement message, where the message includes the BSIM ID of the BSIM card. Step 303: The base station body sends a registration request message (Register) to the MME, where the registration request message includes a BSIM ID.

 Step 304: The MME sends an authentication information request message (AuthlnfoReq) to the HSS to request authentication information from the HSS, where the authentication information request message includes a BSIM ID.

 Step 305: After receiving the authentication information request message, the HSS finds a corresponding basic key according to the BSIM ID in the authentication information request message, and generates a random number (Rand) according to the basic key, where the basic key and the random number are The parameter, the authentication algorithm is executed, and the authentication result Resultl is generated; at the same time, the HSS can also generate the derived key according to the basic key, the random number and the specific key generation algorithm, and then the HSS sends an authentication information response message (AuthlnfoResp) to the MME, Sending the authentication result Resultl, the random number, and the derived key to step 306, the MME sends an authentication request message (AuthChallenge) to the BSIM card, and sends the random number to the BSIM card;

 Step 307: The BSIM card generates an authentication result Result2 according to the received random number and the basic key stored in the BSIM card using the same authentication algorithm as that in step 305, or may be used according to the basic key and the random number in step 305. The same key generation algorithm generates a derivative key. Then, the BSIM card sends an authentication response message to the MME, and sends the authentication result Result2 to the MME. The derived key generated in step 305 and step 307 can be used as the IPSec. The pre-shared key of IKE in the network layer security protocol is used to establish a security association (SA) in IPSEC, and can also be used as a key for protecting data transmitted between the home base station and the network.

 Step 308: The MME compares the authentication result Result2 with the authentication result Resultl transmitted by the HSS. If the authentication fails, the authentication fails. Otherwise, the authentication succeeds, and the MME sends a registration confirmation message RegisterAck to the base station entity.

 In step 301 to step 308, only one authentication method is simply mentioned, and those skilled in the art can know that other authentication methods can also be used for authentication.

 Embodiment 3

As shown in FIG. 4, this embodiment describes an authentication process at the time of power-on registration of a home base station in a UMTS network. Step 401: After the base station body is powered on, send the home base station user identification code request information to the BSIM card, for example, a request message for reading the BSIM ID.

 Step 402: The BSIM card returns BSIM ID information to the base station body, for example, sending an acknowledgement message, where the message includes the BSIM ID of the BSIM card.

 Step 403: The base station body sends a registration request message (Register) to the RNC, where the registration request message includes a BSIM ID.

 Step 404: The RNC sends an authentication information request message (AuthlnfoReq) to the HSS to request authentication information from the HSS, where the authentication information request message includes a BSIM ID.

 Step 405: After receiving the authentication information request message, the HSS finds the corresponding basic key according to the BSIM ID in the authentication information request message, and generates a random number according to the basic key, and performs the authentication by using the basic key and Rand as parameters. The weight algorithm generates the authentication result Resultl; at the same time, the HSS can also generate the derived key according to the basic key, the random number and the specific key generation algorithm, and then the HSS sends an authentication information response message (AuthlnfoResp) to the RNC, and the authentication result is obtained. The Resultl, the random number, and the derived key are sent to the RNC, and the authentication information response message includes an authentication result Resultl, a random number, and a derived key.

 Step 406: The RNC sends an authentication request message (AuthChallenge) to the BSIM card, and sends the random number to the BSIM card.

 Step 407: The BSIM card generates the authentication result Result2 according to the random number and the basic key stored in the BSIM card using the same authentication algorithm as that in step 405, and may also use the same secret as in step 405 according to the basic key and the random number. The key generation algorithm generates a derivative key, and then the BSIM card sends an authentication response message to the RNC, and sends the authentication result Result2 to the RNC; the derived key generated in step 405 and step 407 can be used as the pre-shared secret of IKE in IPSec. The key, used to establish a security association (SA) in IPSEC, can also be used as a key to protect data transmitted between the home base station and the network.

 Step 408: The RNC compares the authentication result Result2 with the authentication result Resultl transmitted by the HSS. If the authentication fails, the authentication fails. Otherwise, the authentication succeeds, and the RNC sends a registration confirmation message Register Ack to the base station entity.

In step 401 to step 408, only one authentication method is simply mentioned, and those skilled in the art can know that other authentication methods can also be used for authentication. Embodiment 4

 As shown in Fig. 5, this embodiment describes an authentication process at the time of another boot registration of a home base station in a UMTS network.

 Step 501: After the base station body is powered on, send the home base station user identification code request information to the BSIM card, for example, a request message for reading the BSIM ID.

 Step 502: The BSIM card returns BSIM ID information to the base station body, for example, sending an acknowledgement message, where the message includes a BSIM ID of the BSIM card.

 Step 503: The base station body sends a registration request message (Register) to the RNC, where the registration request message includes a BSIM ID.

 Step 504: The RNC sends an authentication information request message (AuthlnfoReq) to the SGSN to request authentication information, where the authentication information request message includes a BSIM ID.

 Step 505: The SGSN sends an authentication information request message (AuthlnfoReq) to the HSS to request authentication information from the HSS, where the authentication information request message includes a BSIM ID.

 Step 506: After receiving the authentication information request message, the HSS finds the corresponding basic key according to the BSIM ID in the authentication information request message, and generates a random number, and performs an authentication algorithm by using the basic key and the Rand as parameters. The authentication result Resultl; at the same time, the HSS can also generate the derived key according to the basic key, the random number and the specific key generation algorithm, and then the HSS sends an authentication information response message (AuthlnfoResp) to the RNC, and the authentication result Resultl, the random number And the derived key is sent to the SGSN.

 Step 507: The SGSN sends an authentication information response message (AuthlnfoResp) to the RNC, and sends the random number to the RNC.

 Step 508: The RNC sends an authentication request message (AuthChallenge) to the BSIM card, and sends the random number to the BSIM card, where the authentication request message includes a random number.

Step 509: After receiving the authentication request message, the BSIM card generates the authentication result Result2 according to the random number in the authentication request message and the basic key stored in the BSIM card using the same authentication algorithm as that in step 505. The basic key and the random number use the same key generation algorithm as in step 505 to generate the derived key, and the BSIM card sends an authentication response message to the RNC, and sends the authentication result Result2 to the RNC; the derivative generated in step 506 and step 509 The key can be used as a pre-shared key for IKE in IPSec, used to establish The Security Association (SA) in IPSEC can also be used as a key to protect data transmitted between the home base station and the network.

 Step 510: The RNC sends an authentication result comparison request (CompResultReq) to the SGSN, and sends the authentication result Result2 to the SGSN.

 Step 511: The SGSN compares the authentication result Result2 with the authentication result Resultl transmitted by the HSS. If different, the authentication fails, otherwise the authentication succeeds, and the SGSN sends an authentication result comparison response (CompResultReq) to the RNC.

 In step 512, the RNC will send a registration confirmation message (RegisterAck) to the base station body. In step 501 to step 512, only one authentication method is simply mentioned, and those skilled in the art can know that other authentication methods can also be used for authentication.

 Embodiment 5

 As shown in FIG. 6, this embodiment describes an authentication process when the home base station is managed by the intermediate gateway GW in the SAE/LTE network or the UMTS network.

 Step 601: After the base station body is powered on, send the home base station user identification code request information to the BSIM card, for example, send a request message for reading the B SIM ID.

 Step 602: The BSIM card returns BSIM ID information to the base station body, for example, sending an acknowledgement message, where the message includes a BSIM ID of the BSIM card.

 Step 603: The base station body sends a registration request message (Register) to the intermediate gateway, where the registration request message includes a BSIM ID.

 Step 604: The intermediate gateway sends an authentication information request message (AuthlnfoReq) to the HSS to request authentication information from the HSS, where the authentication information request message includes a BSIM ID.

Step 605: After receiving the authentication information request message, the HSS finds the corresponding basic key according to the BSIM ID in the authentication information request message, and generates a random number according to the basic key, and performs the authentication by using the basic key and Rand as parameters. The weight algorithm generates the authentication result Resultl; at the same time, the HSS can also generate the derived key according to the basic key, the random number and the specific key generation algorithm, and then the HSS sends an authentication information response message (AuthlnfoResp) to the intermediate gateway, and the authentication is performed. The Resultl, the random number and the derived key are sent to the intermediate gateway, and the authentication information response message includes the authentication result Resultl, the random number and the derivative. Raw key.

 Step 606: The intermediate gateway sends an authentication request message to the BSIM card.

( AuthChallenge ) , sends the random number to the BSIM card.

 Step 607: The BSIM card generates the authentication result Result2 by using the same authentication algorithm as that in step 605 according to the random number and the basic key stored in the BSIM card, and may also use the same secret as in step 605 according to the basic key and the random number. The key generation algorithm generates a derivative key. Then, the BSIM card sends an authentication response message to the intermediate gateway, and sends the authentication result Result2 to the intermediate gateway. The derived key generated in step 605 and step 607 can be used as the IKE pre-preparation in IPSec. Shared key, used to establish security associations in IPSEC

(SA) can also be used as a key to protect data transmitted between the home base station and the network.

 Step 608: The intermediate gateway compares the authentication result Result2 with the authentication result Resultl transmitted by the HSS. If the authentication fails, the authentication fails. Otherwise, the authentication succeeds, and the intermediate gateway sends a registration confirmation message RegisterAck to the base station entity.

 In step 601 to step 608, only one authentication method is simply mentioned, and those skilled in the art can know that other authentication methods can also be used for authentication.

 Embodiment 6

 As shown in FIG. 7, this embodiment discloses a communication system including a home base station 100 and a network side entity 200.

 The home base station 100 is configured to communicate with the network side entity 200 by using a home base station user identification code. The home base station 100 includes a base station body 110 and a base station identity card 120. The user identification code is stored in the base station identity card 120, and the base station identity card 120 is stored. It is detachably mounted on the base station main body 110. The network side entity 200 is configured to communicate with the home base station 100.

The home base station 100 includes a base station body 110 and a base station identity card 120, which may be a home base station or an AP (Access Point) in the UMTS network, or may be a home base station or a Home eNB in the SAE/LTE network. The network side entity 200 may be an RNC in a UMTS network, or may be an MME or a GW in an SAE/LTE network. The base station main body 110 includes a first transmitting unit 111, a first receiving unit 113, and a communication unit 112.

 The first sending unit 111 is configured to send the home base station user identification code request information to the base station identity card 120, for example, send a home base station user identification code request; the first receiving unit 113 is configured to receive the home base station user identification code, for example, receive The confirmation message sent by the base station identity card with the home base station user identification code; the communication unit 112 is configured to communicate with the network side entity 200 by using the home base station user identification code. For example, in the authentication process, the communication unit 112 transmits a registration request message to the network side entity 200, and receives a registration confirmation message from the network side entity 200.

 A base station identity card 120, detachably mounted on the base station body 110, includes a first storage unit 123, a second receiving unit 121, a second transmitting unit 124, and a second storage unit 122.

 The first storage unit 123 is configured to store related security parameters; the second storage unit 122 is configured to store the home base station user identification code; and the second receiving unit 121 is configured to receive the home base station user identification code request information sent by the base station body 110. For example, the receiving home base station subscriber identity code request message is received; the second sending unit 124 is configured to send the home base station subscriber identity code to the base station body 110, for example, send an acknowledgement message including the home base station subscriber identity code.

 According to the embodiment of the present invention, by dividing the home base station into the base station body and the BSIM card, since the BSIM ID and the basic key are stored on the BSIM card, since the basic key is stored on the BSIM card, the user does not have to re-replace the home base station. The key is burned to the equipment operator, and the home base station user is also provided with more choices of the base station main body, which greatly facilitates the user and saves the user's investment in the base station main body.

 When the user uses the service provided by the home base station that he is registered in the field, the BSIM card can be carried, and the base station body does not need to be carried, which improves the mobility of the user and brings convenience to the user.

 While the invention has been described by the embodiments of the invention, the invention Request to limit.

Claims

Rights request A communication method, comprising:  The home base station user identification code is stored in the base station identity identification card by the home base station user identification code, and the base station identity identification card is detachably mounted on the base station body.  2. The communication method according to claim 1, further comprising: before communicating with the network side, further comprising:  The base station body sends the home base station user identification code request information to the base station identity identification card, and receives the home base station user identification code returned by the base station identity identification card.  The communication method according to claim 1, wherein the base station identity identification card further stores an associated security parameter for the home base station to authenticate with the network side.  The communication method according to claim 3, wherein the authenticating the home base station and the network side comprises:  Sending the home base station user identification code to the network side, so that the network side performs an authentication algorithm according to the received home base station user identification code, obtains a first authentication result, and returns an authentication request message;  Obtaining a second authentication result according to the authentication request message and the security parameter; sending an authentication response message to the network side, where the authentication response message includes the second authentication result; The side performs authentication according to the first authentication result and the second authentication result in the authentication response message.  The communication method according to claim 4, wherein the home base station user identification code is transmitted to the network side by a registration request message.  The communication method according to claim 4, further comprising receiving a registration response message, wherein the registration response message is performed by the network side according to the first authentication result and the second authentication result. Sent after authentication. The communication method according to any one of claims 1 to 6, The user base station user identification code includes:  Moving the country code, uniquely identifying the country where the home base station is located; a mobile network code identifying the home network of the home base station;  The mobile home base station identification code identifies a home base station in a home network, and may identify a home subscriber server to which the home base station belongs.  8. A communication system, comprising:  a home base station, configured to communicate with a network side entity by using a home base station user identification code, including a base station body and a base station identity identification card, where the home base station user identification code is stored in the base station identity identification card, the base station identity identification card Removably mounted on the base station body;  A network side entity, configured to communicate with a home base station.  The communication system according to claim 8, wherein the base station body is further configured to send the home base station user identification code request information to the base station identity identification card, and receive the identifier from the base station identity identification card. Home base station user identification code.  The communication system according to claim 8, wherein the base station identity identification card is configured to store related security parameters, and the security parameters are used by the home base station to authenticate with the network side.  A home base station, comprising: a base station body and a base station identity card,  The base station body includes: a first sending unit, configured to send a home base station user identification code request information to a base station identity identification card; a first receiving unit, configured to receive a home base station user identification code from the base station identity identification card; a unit, configured to communicate with the network side by using the home base station user identification code;  The base station identity card is detachably installed on the base station body, and includes: a first storage unit, configured to store a home base station user identification code; and a second receiving unit, configured to receive the home base station sent by the base station body User identification code request information; a second sending unit, configured to send a home base station user identification code to the base station body.  12. The home base station according to claim 11, wherein: In the authentication process, the communication unit is configured to send a registration request to the network side. And receive a registration confirmation message from the network side.  The home base station according to claim 11, wherein the base station identity identification card further comprises:  And a second storage unit, configured to store related security parameters, where the security parameter is used by the home base station to perform authentication with the network side.