CN101018238B - User identification system, registration, service and route configuration method - Google Patents

Abstract

The present invention provides a user identification system, including: a personal user agent unit, a universal communication identifier data center unit, a server system agent unit and a universal communication identifier management center unit, wherein the personal user agent unit and the universal communication identifier data The central units correspond one-to-one. The invention also provides a registration method, service and routing configuration method of the user identification of the next generation network. Based on the existing standards of ITU-T and ETSI, the present invention establishes a complete set of user identification system, which can be used universally for various access users, can uniquely identify users, ensures high security, is easy to manage and Operation, which is conducive to the expansion of new services, separates users from devices, and is used to identify users without being restricted by the physical location of devices.

Description

User identification system and registration, service and routing configuration method

technical field

The invention relates to the field of network identification, in particular to a user identification system and registration, service and routing configuration methods. the

Background technique

NGN (Next Generation Networks) is a broad category aimed at reforming the infrastructure of the existing telecommunications network and information industry to support a wider range of services. The network can be composed of fixed networks, mobile networks, IP networks and access networks. Therefore, NGN can support various services and realize intercommunication with existing networks. the

The NGN network is divided by function into: application layer, network control layer, transmission layer and management layer, and different layers can communicate with each other. Among them, the application layer implements functions such as authentication, billing, directory, security, browsing, search, navigation, and format conversion; the application layer not only provides services to public users, but also provides service support to operation support systems and service providers; network control Layer: Provide end-to-end call/session control, and control and signaling processing functions for the underlying automatic switching transmission network; the transport layer provides layer-1 switching and transmission, layer-2 switching and switching, and layer-3 switching and/or or routing functions; the management plane provides remote and local management functions. the

Although NGN combines voice data and multimedia services and is an innovation to traditional network technology, it also brings some new features in user management. For example, how to implement effective user access authentication in the NGN network system, ensure user service security, and implement fast and effective user maintenance. the

However, in the prior art, NGN uniquely identifies a user through a device port, that is, each user line or port is regarded as a user, and is identified by an E.164 number, and the user number corresponds to a physical interface or line. No verification is required when users and numbers are not moving, and their user data is stored in the call server in a decentralized manner. However, the NGN system has downplayed user location information, so it is of little significance to identify users through location information. the

In addition, in the field of NGN, most of the existing solutions are for equipment identification. Due to the access of various user equipment brought about by the interconnection of various networks in the NGN network, NGN must have good access capabilities. Therefore, in the ITU -T Y.2001 proposes that individual users establish transmissions by means of a name/number translation from a name/number to a routable effective address. These methods include E.164 encoding method, URL (Uniform Resource Locator, Uniform Resource Locator), UNS (Uniform Name System, Uniform Naming System), URI (Uniform Resource Identifier, Uniform Resource Identifier) and other methods. the

The above-mentioned technologies use routable addresses as device identifiers, which lack guarantees in terms of security, and are relatively easy to fake and deceive; moreover, although addresses and names, as device identifiers, can represent users to a certain extent, they cannot make users and The equipment is separated, does not have good mobility and portability, and cannot directly attach other business or intelligent functions to the logo. the

In view of the shortcomings of the above equipment identification technology, the concept of UCI (Universal Communications Identifier, Universal Communications Identifier) is proposed in the prior art. Use UCI to identify users in NGN, and introduce personal user agents and server system agents, so that they are not restricted by location. the

However, this technology is only designed for the hierarchical structure and business process of UCI itself, without considering the overall network layout of the next generation network; in addition, there are security deficiencies in the process of registration and authentication of NGN users; Issues such as management of individual user agents and routing updates are also not discussed. the

Contents of the invention

The problem to be solved by the present invention is to provide a user identification system and a registration, service and route configuration method to overcome the defect that the existing technology cannot form a network through the user identification. the

In order to solve the above problems, the present invention provides a user identification system, including: a personal user agent unit, a universal communication identifier data center unit, a server system agent unit, and a universal communication identifier management center unit, wherein the personal user agent unit and One-to-one correspondence between universal communication identifier data center units,

The personal user agent unit communicates with the user terminal with the general communication identifier information through the load network, and performs preliminary identification and/or capability negotiation on the user terminal;

The universal communication identifier data center unit is used to pre-store the universal communication identifier information of the user terminal for calling and processing by the personal user agent unit;

The server system agent unit provides corresponding services according to the information of the individual user agent unit;

The general communication identifier management center unit is used for unified management of individual user agent units, and realizes business and routing management. the

The system realizes the internal information transmission of the system through the internal interface, including:

Uup interface, for the user terminal with the universal communication identifier information to communicate with the individual user agent unit;

Upp interface, used for communication between individual user agent units;

Upi interface for communication between individual user agent units and UCI data center units;

Ups interface, used for personal user agent unit and server system agent unit communication;

The Ump interface is used for the communication between the universal communication identifier management center unit and the individual user agent unit. the

The system communicates with the outside through external interfaces, including:

Upr interface, used for individual user agent unit to communicate with resource access control subsystem;

and/or Upc interface for communication between the individual user agent unit and the service call session control function;

And/or Usg interface, used for communication between the agent unit of the server system and the gateway. the

The general communication identifier information includes: unified user number, user name and password. the

The capability negotiation includes: the functions supported by the user terminal and/or the load capacity and/or bandwidth of the local network. the

The load network includes: an IP network, and/or a mobile network, and/or a telecommunication network. the

The present invention also provides a method for registering a user terminal in a user identification system, comprising the following steps:

A. The user terminal with universal communication identifier information sends registration request information to the personal user agent unit;

B. The personal user agent unit specifies the server system agent unit according to the registration request information;

C. The user terminal initiates a binding request to the server system agent unit;

D. The server system agent unit confirms the user terminal to the personal user agent unit. the

Between step A and step B also include:

The personal user agent unit verifies the information of the user terminal. the

The information of the user terminal includes user information and service information. the

The user information includes a unified user number, user name and password; the service information includes authority parameters for accessing specific services. the

The permission parameter for accessing a specific service includes a service identifier and a service access permission identifier. the

Between step B and step C also include:

The personal user agent unit notifies the user terminal that the registration is successful. the

Before the personal user agent unit notifies the user terminal that the registration is successful, the method further includes: the personal user agent unit notifies the server system agent unit that the user terminal is about to access. the

Before the user terminal sends a binding request to the proxy unit of the server system, a time delay is set, and only binding requests arriving within the time delay are processed. the

After step D also include:

The proxy unit of the server system sends a binding success response to the user terminal. the

The present invention also provides a service configuration method of a user identification system, comprising the following steps:

When a new type of business is added to the general communication identifier management center unit;

The general communication identifier management center unit notifies the individual user agent unit to register the service;

The individual user agent unit informs the server system agent unit to configure the service. the

The present invention also provides a routing configuration method for a user identification system, comprising the following steps:

When a new personal user agent unit is added to the system, the personal user agent unit notifies the general communication identifier management center unit;

The universal communication identifier management center unit records the basic information of newly added personal user agent units; the universal communication identifier management center unit broadcasts the personal user agent unit address and routing information to all individual user agent units. the

The basic information of the personal user agent unit includes: location, local network load capacity and/or usage time. the

Compared with prior art, the present invention has the following advantages:

The invention transforms from the identification of equipment in the past to the identification of users, so that users can correspond to cards instead of equipment, and have high mobility and portability. In the authentication process, the data of the universal communication identifier is put into the data center of the universal communication identifier, which is called by the individual user agent, and the processing function and the storage function are separated, which improves the efficiency of the whole process; The identifier management center is used to manage distributed individual user agents, which enables the combination of distributed management and centralized management, and facilitates business process management and routing management. the

Furthermore, due to the password design of the UCID card itself and the reasonable design of the registration process, the security of user access can be effectively guaranteed. the

Furthermore, the cooperation between the individual user agent and the server system agent facilitates the operation of the operator and adds new services. the

In addition, the present invention comprehensively considers each network, which is different from the identification of individual places, and realizes the overall user identification; at the same time, considering the smooth transition of the traditional mobile network and telecommunication network, in the entire identification system , is more practical. the

Description of drawings

A specific network structure of the user identification system in Fig. 1 the present invention;

Fig. 2 is the deployment diagram of the system synthesis of the present invention in NGN network;

Fig. 3 is an interface structure diagram of the user identification system in Fig. 2;

Fig. 4 is the registration flowchart of the user terminal with UCI information in the present invention;

Fig. 5 is a business configuration flowchart of the UCI management center unit;

Fig. 6 is the routing configuration flowchart of UCI management center unit;

Fig. 7 is a service flow diagram of realizing call establishment by using the present invention. the

Detailed ways

Specific embodiments of the present invention will be described below in conjunction with the accompanying drawings. the

The invention embodies UCI on an identification card, and establishes a unified identification system on the basis of this. Certain data, parameters, and passwords are stored on the UCI card, which are used to uniquely identify the user, and have certain business interaction capabilities and relatively high security. Then the user terminal with UCI card is inserted in the user identification system of the present invention through various load networks. the

A specific network structure of the user identification system in the present invention is shown in Figure 1, including: individual user agent unit 1, individual user agent unit 2, individual user agent unit 3, UCI data center unit 1, UCI data center unit 2, UCI Data center unit 3, server system agent unit 1, server system agent unit 2, server system agent unit 3, UCI management center unit; the mobile terminal with UCI information is connected to the personal user agent unit in the user identification system through the mobile network 1 and the server system agent unit 1, the PC with UCI information is connected to the personal user agent unit 2 and the server system agent unit 2 in the user identification system through the IP network, and the telecommunication network terminal with UCI information is connected through the telecommunication network To the personal user agent unit 3 and the server system agent unit 3 in the user identification system. the

In this embodiment, the personal user agent unit, the UCI data center unit and the server system agent unit are all distributed, that is, one personal user agent unit corresponds to one UCI data center unit and one server system agent unit. Among them, the distributed UCI data center unit is used as a database to pre-store the universal communication identifier information of the user terminal, and provide the personal user agent unit with original data such as addition, deletion, update, and query of the universal communication identifier information , where the universal communication identifier information includes unified user number, user name, password, location parameters, authority parameters for accessing specific services, local terminal capability identification, etc., where the unified user number, user name, and password are mandatory, and the location Parameters, permission parameters for accessing specific services, and local terminal capability identification are optional. Compared with the above-mentioned distributed design, a centralized universal communication identifier management center unit is set in this embodiment, and the distributed management of individual user agent units is realized through the unified management and change coordination of each individual user agent unit by the management center unit. A combination of deployment and centralized deployment can facilitate business process management and routing management. the

Among them, the server system proxy unit corresponds to the functions provided by traditional operators; the main functions of the personal user proxy unit include initial identification of the user terminal and interaction with the user. During this process, the personal user proxy unit can negotiate capabilities with the user terminal , determine the location of the terminal, supported functions and/or the load capacity and/or bandwidth of the local network, provide some simple local functions for the user terminal (such as user terminal access and registration authentication, etc.), and accept some user Service requests (such as business identification and business application, etc.), and find the appropriate server system agent unit for these services, and forward it to the corresponding server system agent unit; and the server system agent unit sends according to the individual user agent unit Match the incoming request with the corresponding service in its own network, and provide these services for the user terminal through the personal user agent unit. the

Next, combined with the structure of NGN, such as IMS (IP Multimedia Subsystem), the system of the present invention is comprehensively deployed, and the structure is shown in FIG. 2 . Among them, the user terminal can be regarded as the user holder of UCI; the interaction with the outside is mainly the personal user agent unit and the resource access control subsystem, the personal user agent unit and the S-CSCF (service call session control function), and the server system agent unit with the gateway. the

In Fig. 2, CSCF (Call Session Control Function) is responsible for resource allocation, session state, sequence of user services, querying user authentication and service data, and executing session processing tasks. The CSCF is divided into a P-CSCF (Proxy Call Session Control Function) and a home network CSCF. P-CSCF is the user's first point of contact in the IMS and is the proxy of the CSCF in the home network. The CSCF in the home network can be further divided into I-CSCF (Incoming Call Session Control Function) and S-CSCF (Serving Call session control function), the I-CSCF is the entrance of the network, responsible for allocating the S-CSCF serving the user, and the S-CSCF is the device that actually processes the session state. the

MGCF (Media Gateway Control Function, Media Gateway Control Function) provides the ability to control media gateways through standard interfaces, and controls the call status of media channel connection control, resource allocation and release, and resource changes. BGCF (Breakout Gateway Control Function, breakout gateway control function) connects the call to PSTN (public switched telephone network, public switched telephone network), selects the network exporting to PSTN and selects MGCF in this network. BGCF and MGCF can be in any home, visited and third-party networks. AS (Application Server, application server) provides value-added IP multimedia services to users. the

Although both HSS (Home Subscriber Server, local signing server) and UCI data center units are used as databases for user data storage, most of the user data information in HSS is initially set by the user before joining the network, and there is no addition or deletion of data, but only data Updates (such as business customization information, etc.), and insufficient support for cross-network access and operations for the same users; while the data of the UCI data center involves a series of new user additions and registration identification after obtaining UCI At the same time, UCI can support and complete the cross-network access of the same user on multiple terminals by providing data to PUA. the

The interface concept is introduced in FIG. 2, and the connection relationship of the network entities in this embodiment is described in detail. According to the range of interacting entities, interfaces can be further divided into internal interfaces and external interfaces, as shown in Figure 3:

Including five internal reference points: Uup interface, Upp interface, Upi interface, Ups interface and Ump interface, where,

The Uup interface is an interface between a user terminal with UCI information and a personal user agent unit. Its functions include: preliminary identification and location determination of the user terminal by the personal user agent unit, as well as negotiation and interaction between the network where the user terminal is located and the capabilities of the terminal used and the personal user agent unit. the

The Upp interface is an interface for interaction between individual user agent units, and its functions are mainly mutual capability negotiation and location routing, so as to find the most appropriate access for the user terminal. the

The Upi interface is the interface between the personal user agent unit and the UCI data center unit, and its main functions are: the UCI data center unit provides user information to the personal user agent unit for processing by the personal user agent unit, and the personal user agent unit calls the CUI data center unit The data in the user terminal is initially identified, and the relevant information is stored in the UCI data center unit. the

The Ups interface is the interface between the individual user agent unit and the server system agent unit, and its functions include: the individual user agent unit searches for the corresponding server system agent unit, submits the data negotiated with the user to the server system agent unit, and the individual user agent unit Register and use the service with the server system agent unit, and the server system agent unit provides corresponding services for the individual user agent unit through the load network. During the service process, the individual user agent unit and the server system agent unit are bound status. the

The Ump interface is the interface between the UCI management center unit and the individual user agent unit. Its functions include: UCI management center unit broadcasts new service definitions to all PUAs; PUA number additions and deletions are notified to the UCI management center, and UCI sends notifications to the UCI management center. Other individual user agent units broadcast and reconfigure routing. the

Three external interfaces include: Upr interface, and/or Upc interface, and/or Usg interface; where,

The Upr interface is the interface between the individual user agent unit and the resource access control subsystem, and its functions include: the individual user agent unit calls the capability negotiation function in the resource access control subsystem, and the resource access control subsystem calls the individual user agent unit The support of the negotiation function is mainly the capability interaction process, including checking resource availability, and the admission control function checks whether the requested bandwidth is consistent with the predetermined bandwidth and the bandwidth used by the user. the

The Upc interface is the interface between the personal user agent unit and the S-CSCF (serving call session control function), and its functions include: after the communication logical channel is established, the personal user agent unit sends a notification to the serving CSCF, and the serving CSCF confirms it , so as to enter the session business process, and after the end, there will be an opposite link teardown. the

The Usg interface is the interface between the server system agent unit and the gateway. Its main function is that the server system agent unit accesses the corresponding load network through the gateway, obtains relevant services from the operation network, and the network provides services to the server through the gateway. The system proxy unit, so that the service can be bound at the server system proxy unit. the

In order to further describe the mutual functions and cooperation between entities in the user identification system, the present invention uses the following flow chart of registration of a user terminal with UCI information to make a more specific description, as shown in Figure 4, including the following steps:

A. The user terminal with universal communication identifier information sends registration request information to the personal user agent unit;

B. The personal user agent unit verifies the information of the user terminal; when the user terminal is accessing the network, the personal user agent will assign a customer number to it, and the system will transmit the encrypted parameter group to the client, and the terminal After receiving the parameters, it is compared with the unified user ID stored in the general communication identifier through the same algorithm, and the verification is passed if the result is the same. the

C. The personal user agent unit designates the server system agent unit according to the above business information; for example, a user terminal holds a universal communication identifier, accesses the next generation network through an IP device, and wants to realize the video transmission function with a certain mobile phone , the individual user agent in the local network processes its request, and finds an operating network that provides this function, and designates a server system agent unit in the operating network. the

D. The personal user agent unit notifies the user terminal that the registration is successful;

E. The user terminal initiates a binding request to the server system agent unit;

F. The agent unit of the server system verifies the legitimacy of the binding request, and compares the permission parameter of accessing a specific service in the general communication identifier with the service request. If the service request is within the scope of the permission parameter, it is legal, and sends The individual user agent unit identifies the user terminal. Wherein, the permission parameter for accessing a specific service includes a service identifier, a service access permission identifier, and the like. the

G. The proxy unit of the server system sends a binding success response to the user terminal. the

Among them, the data required by the personal user agent unit in the confirmation process are all extracted from the UCI data center unit. In addition, after the personal user agent unit confirms the service information of the user terminal, in addition to notifying the user terminal of successful registration, the personal user agent unit also sends a message to the server system agent unit to inform the user that the user is about to access. This process is performed before the user terminal sends a binding request to the agent unit of the server system. A time delay can be agreed upon, and only binding requests arriving within the time delay are processed, thereby improving the security of the agent unit of the server system. the

The present invention achieves a combination of distributed deployment and centralized deployment of PUA through the management of user data by the UCI management center, and can conveniently perform business process management and routing management. the

The UCI management center unit has a very good operation configuration capability for new services (including new services generated by the improvement of network and terminal equipment capabilities, or new service qualifications generated by the adjustment of user qualifications). Figure 5 describes the service configuration process of the UCI management center unit: when the UCI management center unit defines a new type of service capability, the UCI management center unit notifies the individual user agent unit to register the service, so that it can be verified when the user terminal accesses service; then the individual user agent unit notifies the server system agent unit to configure the service, and at the same time configure the network and terminal equipment capabilities, user qualifications, etc. For example, the original UCI management center unit defines a new mobile terminal video service. Through this service configuration process, it notifies the individual user unit to register the video service, and notifies the server system unit to configure it. the

When the route changes, such as when a new personal user agent unit joins the network, or the personal user agent unit terminates or exits the network due to various reasons, the UCI management center unit can manage the route. Fig. 6 has described UCI management center unit routing management process: when new personal user agent unit joins network, notify UCI management center unit; Universal Communication Identifier management center unit records the basic information of new personal user agent unit, and monitors this individual User agent unit operating status and update status, wherein basic information includes: location, and/or local network load capacity, and/or use time; UCI management center unit broadcasts the address of the individual user agent unit, and the relevant individual user agent unit configures its route information. the

Utilize the present invention to realize the service process of call set-up as shown in Figure 7, the calling party has the user terminal 1 of UCI information to identify in individual user agent unit 1; Processing, confirming the user terminal 1; the personal user agent unit 1 of the calling party confirms the target user terminal 2, and contacts the personal user agent unit 2 of the target user; the personal user agent unit 2 calls the data of the UCI data center unit 2 and processing, confirming the user terminal 2; the individual user agent unit 2 responds to the individual user agent unit 1, and provides necessary information (such as protocol application and channel parameters, etc.) for channel establishment and maintenance; the calling party individual user The proxy unit 1 provides necessary information (such as authority information and business parameters) to the server system proxy unit 1 to keep the channel open. Among them, X, Y, and Z indicate that before, during, and after the establishment of the channel, the status of the terminal and the service can be interacted between each entity; the thick solid line in the figure indicates the service channel, and the thin solid line indicates the signaling channel . In addition, a complete service process can be completed by one bearer network or multiple bearer networks according to different situations. the

The above is only a preferred embodiment of the present invention, it should be pointed out that for those of ordinary skill in the art, without departing from the principle of the present invention, some improvements and modifications can also be made, and these improvements and modifications should also be It is regarded as the protection scope of the present invention. the

Claims (6)

1. A user identification system, characterized in that it comprises: a personal user agent unit, a general communication identifier data center unit, a server system agent unit, a general communication identifier management center unit, wherein the personal user agent unit and the general communication identifier One-to-one correspondence between data center units, The personal user agent unit communicates with the user terminal with the general communication identifier information through the load network, and performs preliminary identification and/or capability negotiation on the user terminal; The universal communication identifier data center unit is used to pre-store the universal communication identifier information of the user terminal for calling and processing by the personal user agent unit; The server system agent unit provides corresponding services according to the information of the individual user agent unit; The general communication identifier management center unit is used for unified management of individual user agent units, and realizes business and routing management. 2. The user identification system according to claim 1, characterized in that the system realizes internal system information transmission through an internal interface, including: Uup interface, for the user terminal with the universal communication identifier information to communicate with the individual user agent unit; Upp interface for communication between individual user agent units; Upi interface for communication between individual user agent units and UCI data center units; The Ups interface is used for communication between the individual user agent unit and the server system agent unit; The Ump interface is used for the communication between the universal communication identifier management center unit and the individual user agent unit. 3. The user identification system according to claim 1, wherein the system communicates with the outside through an external interface, including: Upr interface for communication between the individual user agent unit and the resource access control subsystem; and/or an Upc interface for the individual User Agent unit to communicate with the Serving Call Session Control Function; And/or Usg interface, used for communication between the agent unit of the server system and the gateway. 4. The user identification system according to claim 1, wherein the general communication identifier information includes: a unified user number, user name and password. 5. The user identification system according to claim 1, wherein the capability negotiation includes: functions supported by the user terminal and/or load capacity and/or bandwidth of the local network. 6. The user identification system according to claim 1, wherein the load network comprises: an IP network, and/or a mobile network, and/or a telecommunication network.

Images