CN102026163B - Method and device for selecting access to Internet through wireless fidelity access network - Google Patents
Method and device for selecting access to Internet through wireless fidelity access network Download PDFInfo
- Publication number
- CN102026163B CN102026163B CN 200910173724 CN200910173724A CN102026163B CN 102026163 B CN102026163 B CN 102026163B CN 200910173724 CN200910173724 CN 200910173724 CN 200910173724 A CN200910173724 A CN 200910173724A CN 102026163 B CN102026163 B CN 102026163B
- Authority
- CN
- China
- Prior art keywords
- address
- terminal
- iwk
- connection mode
- dhcp
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
- 238000000034 method Methods 0.000 title claims abstract description 77
- 238000012790 confirmation Methods 0.000 claims description 22
- 230000004044 response Effects 0.000 claims description 8
- 238000005516 engineering process Methods 0.000 abstract description 13
- 230000008569 process Effects 0.000 description 26
- 230000005540 biological transmission Effects 0.000 description 12
- 238000000060 site-specific infrared dichroism spectroscopy Methods 0.000 description 12
- 238000012546 transfer Methods 0.000 description 7
- 238000010586 diagram Methods 0.000 description 5
- 230000003993 interaction Effects 0.000 description 4
- 230000008901 benefit Effects 0.000 description 3
- 230000011664 signaling Effects 0.000 description 3
- 238000013475 authorization Methods 0.000 description 2
- 230000000295 complement effect Effects 0.000 description 2
- 230000007246 mechanism Effects 0.000 description 2
- 230000004048 modification Effects 0.000 description 2
- 238000012986 modification Methods 0.000 description 2
- 230000009286 beneficial effect Effects 0.000 description 1
- 238000004891 communication Methods 0.000 description 1
- 230000006872 improvement Effects 0.000 description 1
- 230000006855 networking Effects 0.000 description 1
- 230000008054 signal transmission Effects 0.000 description 1
- 238000001228 spectrum Methods 0.000 description 1
- 230000001052 transient effect Effects 0.000 description 1
- 238000013519 translation Methods 0.000 description 1
Images
Landscapes
- Mobile Radio Communication Systems (AREA)
Abstract
The invention provides a method and a device for selecting an access to the Internet through a wireless fidelity (WiFi) access network. In the method, a dual-mode terminal carries out initial access authentication in the WiFi access network and acquires an IWK (Interworking function) address; the terminal acquires a local IP address allocated by a WiFi access network DHCP (Dynamic Host Configuration Protocol) server and used for a direct IP connection mode; the terminal acquires a remote IP address allocated by a WiMAX (World Interoperability for Microwave Access) network DHCP server and used for a WiMAX IP connection mode according to the IWK address and the local IP address; and the terminal receives the selection of a user to the direct IP connection mode or the WiMAX IP connection mode and completes different types of Internet access according to the selected IP connection mode. The invention provides flexible Internet access, improves user experience and solves the problem that the user experience is influenced due to great influence because the upgrading of the entire traditional WiFi network is required in related technologies.
Description
Technical Field
The invention relates to the field of communication, in particular to a method and a device for selecting to access the Internet through a WiFi access network.
Background
WiMAX (World Interoperability for Microwave Access, worldwide Interoperability for Microwave Access) is a broadband wireless Access technology based on IEEE 802.16 standard, and can effectively utilize limited wireless spectrum resources to obtain a larger air-interface bandwidth (up to 70Mbps data transmission capacity) and a wider transmission coverage (up to 60 km wireless signal transmission distance). WiFi (Wireless Fidelity) networks are also Wireless networks capable of providing higher bandwidth, and are now widely deployed in offices, homes, hotels, etc. However, WiFi is a short-range wireless technology, and its network coverage is small (about 100 meters or so), and generally can only be used as a complement to other wireless technology networking. However, WiFi networks have the advantages of low cost and easy deployment, and WiMAX, if constructed to cover the whole country, will have very high investment cost, so WiFi and WiMAX networks will coexist for a long time. Considering WiMAX as a wireless metropolitan area network technology, it may connect Wi-Fi hotspots to the internet. The intercommunication of WiMAX and WiFi can help the advantages of the two networks to complement each other, and enlarge the coverage area, so that the mobile user can utilize the different characteristics of the two networks and obtain consistent service access in a wider geographical range in different wireless access network environments.
The network intercommunication between the WiMAX system and the WiFi system is beneficial to the advantage complementation of the two networks, the coverage area of the networks is enlarged, and the mobile user equipment obtains consistent service access by utilizing the different characteristics of the two networks in different wireless access network environments. Fig. 1 shows a block diagram of a structure of an MS/STA (Mobile Station/Station) accessing a WiMAX core network through a WiMAX radio access network and through a WiFi access network under a non-roaming condition, which includes the following elements:
IWK (Interworking Function node): the terminal is responsible for initially accessing the WiMAX network through the WiFi network and coordinating the switching of the terminal from the WiMAX access network to the WiFi access network;
WiFi SFF (WiFi Signal Forward Function, WiFi signaling forwarding Function): the terminal is responsible for establishing an IP tunnel to the terminal through the WiMAX network when the terminal is switched to the WiFi access network, and forwarding a pre-registration signaling of the WiFi access sent by the terminal through the IP tunnel;
WiMAX SFF (WiMAX Signal Forward Function, WiMAX signaling transfer Function): the terminal is responsible for a pre-registration process of WiMAX access through a WiFi network, and the terminal executes the function of simulating a source BS for switching to the WiMAX network;
AP (Access Point, wireless Access node): the hub is positioned in a WiFi access network, is a hub with a wireless signal transmitting function and can provide session tandem for a plurality of wireless internet access devices. Corresponding to a hub or switch in a wired network;
home AAA (Authentication, authorization and Accounting, Authentication authorization Accounting) proxy: the wireless local area network (WiFi) access network is responsible for forwarding a Remote Authentication Dial In User Service (RADIUS) authentication and charging data packet;
AC (Access Controller ): and the gateway is positioned in the WiFi access network, plays a gateway function between the WiFi and the Internet, and converges data from different APs and accesses the Internet. The AC as a client can complete the functions of access authentication, authentication and the like for the user through the network mark;
the system also comprises an AAA Server, a DHCP Server (Dynamic host configuration Protocol Server), an HA/LMA (Home Agent/Local Mobility Anchor), and the like.
In the interworking network architecture of fig. 1, the WiFi access network provides a home routing mode to the WiMAX home network through the IWK, and also provides a local access mode in which the WiFi access network directly accesses the Internet. For the local access mode, the data stream does not need to pass through a user plane channel of the WiMAX network, and the load of the data stream of the WiMAX network can be reduced. The operator can provide services to the user in a more flexible and efficient manner, thereby improving the user experience.
Related art provides a method for selecting to access the Internet through a WiFi access network, and referring to fig. 2, the method provides two Internet access methods for a user: the direct IP connection mode and the WiMAX IP connection mode, i.e. the WiFi access network, may provide various connection options, such as connecting to a WiMAX service network, or directly connecting to an Internet network through the WiFi access network in a conventional manner. The WiFi access network configures a virtual AP mode with a plurality of SSIDs (service SetIdentitysj), if the WiFi operator supports the interworking with WiMAX, one of the SSIDs is configured to be an SSID identification which can be identified by the user and is interworked with the WiMAX, such as WiMAX IWK. If the user selects the SSID which is communicated with WiMAX, the WiFi access network accesses the user service to a WiMAX CSN (Common services network) network; if the user selects the common SSID, the WiFi access network directly accesses the user service to the Internet network. The method is provided.
The inventor finds that in the related art, the method for selecting to access the Internet through the WiFi access network needs to support a plurality of virtual APs, each virtual AP is configured with different SSIDs, and different local area network connections are configured according to different SSIDs, so that the whole network upgrading needs to be performed on the traditional WiFi network, the influence is great, and after a user selects the SSID communicated with the WiMAX to be routed through the WiMAX network, if the user wants to switch to the local access, the WiFi access network needs to be rescanned, and the non-intercommunicated SSID is selected, so that the network access efficiency is low, the real-time performance of data transmission is poor, and the user experience is influenced.
Disclosure of Invention
The invention aims to provide a method and a device for selecting to access the Internet through a WiFi access network, which can solve the problems that the method in the related technology needs to carry out whole-network upgrading on the traditional WiFi network, the influence is huge, the network access efficiency is low, the real-time performance of data transmission is poor, and the user experience is influenced.
In order to achieve the above object, according to one aspect of the present invention, there is provided a method for selecting access to the Internet through a WiFi access network, comprising the steps of: the dual-mode terminal supporting WiFi access and WiMAX access performs initial access authentication under a WiFi access network and acquires an IWK address of IWK; the terminal acquires a local IP address distributed by a first DHCP server of a WiFi access network, wherein the local IP address is used for Internet access in a direct IP connection mode; the terminal acquires a far-end IP address distributed by a second DHCP server of the WiMAX network according to the IWK address and the local IP address, wherein the far-end IP address is used for Internet access in a WiMAXIP connection mode; the terminal receives the selection of the user direct IP connection mode or WiMAX IP connection mode, and completes Internet access according to the IP address corresponding to the selected IP connection mode.
Preferably, in the above method, the acquiring the IWK address specifically includes: the terminal obtains the IWK address through the Authentication of an Extensible Authentication Protocol (EAP).
Preferably, in the above method, the acquiring the IWK address specifically includes: the terminal acquires the IWK address through a DHCP request.
Preferably, in the above method, the acquiring the IWK address specifically includes: the terminal acquires the IWK address through a Domain Name System (DNS) query.
Preferably, in the method, the acquiring, by the terminal, the local IP address allocated by the first DHCP server of the WiFi access network specifically includes: the terminal sends a first DHCP discovery message to the WiFi access network; the WiFi access network sends a first DHCP providing message to the terminal through a first DHCP server, wherein the first DHCP providing message comprises a local IP address; the terminal sends a first DHCP request message to the WiFi access network, wherein the first DHCP request message comprises a local IP address; the WiFi access network sends a first DHCP confirmation message to the terminal, wherein the first DHCP confirmation message comprises a local IP address and a first configuration parameter.
Preferably, in the method, the obtaining, by the terminal according to the IWK address and the local IP address, the remote IP address allocated by the second DHCP server of the WiMAX network specifically includes: the terminal establishes an IP tunnel to the IWK according to the IWK address and the local IP address; and the terminal acquires the far-end IP address distributed by the second DHCP server of the WiMAX network through the IP tunnel.
Preferably, in the method, the acquiring, by the terminal through the IP tunnel, the remote IP address allocated by the second DHCP server of the WiMAX network specifically includes: the terminal sends a second DHCP discovery message to the IWK through the IP tunnel; IWK sends mobile Internet protocol MIP (Mobile Internet protocol) registration request message/agent binding update message to HA/LMA of WiMAX network; HA/LMA returns MIP registration response message/agent binding confirmation message to IWK, MIP registration response message/agent binding confirmation message includes far-end IP address; the IWK returns a second DHCP providing message to the terminal through the IP tunnel, wherein the second DHCP providing message comprises a remote IP address; the terminal sends a second DHCP request message to the IWK, wherein the second DHCP request message comprises a remote IP address; and the IWK sends a second DHCP confirmation message to the terminal, wherein the second DHCP confirmation message comprises the remote IP address and the second configuration parameter.
Preferably, in the method, the receiving, by the terminal, a selection of the direct IP connection mode or the WiMAX IP connection mode by the user, and completing Internet access according to an IP address corresponding to the selected IP connection mode specifically includes: when a terminal initiates a service application, prompting a user to select an IP connection mode, wherein the IP connection mode comprises a direct IP connection mode and a WiMAX IP connection mode; if the user selects the direct IP connection mode, the terminal sets the local IP address as the source address of the service data and realizes the Internet direct access through the WiFi access network.
Preferably, in the method, the receiving, by the terminal, a selection of the direct IP connection mode or the WiMAX IP connection mode by the user, and completing Internet access according to an IP address corresponding to the selected IP connection mode specifically includes: when a terminal initiates a service application, prompting a user to select an IP connection mode, wherein the IP connection mode comprises a direct IP connection mode and a WiMAX IP connection mode; if the user selects the WiMAX IP connection mode, the terminal sets the far-end IP address as the source address of the service data and realizes the Internet access to the WiMAX network through the tunnel between the terminal and the IWK.
In order to achieve the above object, according to another aspect of the present invention, there is provided an apparatus for selecting access to the Internet via a WiFi access network, including: an IWK address acquisition module, which is used for supporting a dual-mode terminal of WiFi access and worldwide interoperability for microwave access WiMAX access to perform initial access authentication under a WiFi access network and acquiring an IWK address of the IWK; the local IP address acquisition module is used for acquiring a local IP address distributed by a first DHCP server of the WiFi access network by the terminal, wherein the local IP address is used for Internet access in a direct IP connection mode; a far-end IP address obtaining module, which is used for the terminal to obtain the far-end IP address distributed by the second DHCP server of the WiMAX network according to the IWK address and the local IP address, wherein the far-end IP address is used for Internet access in the WiMAX IP connection mode; and the access module is used for the terminal to receive the selection of the direct IP connection mode or the WiMAX IP connection mode from the user and complete Internet access according to the IP address corresponding to the selected IP connection mode.
Preferably, in the above apparatus, the IWK address obtaining module specifically includes: and the Extensible Authentication Protocol (EAP) authentication unit is used for acquiring the IWK address through EAP authentication by the terminal.
Preferably, in the above apparatus, the IWK address obtaining module specifically includes: and the DHCP request unit is used for the terminal to acquire the IWK address through a DHCP request.
Preferably, in the above apparatus, the IWK address obtaining module specifically includes: and the domain name system DNS query unit is used for the terminal to acquire the IWK address through DNS query.
The WiFi access network terminal in the above embodiment first obtains the IWK address in the initial access authentication process, then obtains the local IP address allocated by the first DHCP server of the WiFi access network, then obtains the remote IP address allocated by the second DHCP server of the WiMAX network according to the IWK address and the local IP address, and finally receives the selection of the user on the local IP address or the remote IP address, and completes Internet access according to the selected IP address. The terminal acquires the local IP address and the far-end IP address in sequence, so that the user can select the two IP addresses in a direct IP connection mode and a WiMAX IP connection mode, the terminal can conveniently complete Internet access according to the corresponding IP addresses, the network access efficiency and the data transmission real-time performance are improved, and the user experience is improved. Because the Internet access is realized without the aid of the virtual AP with the SSID, the problems that the traditional WiFi network needs to be upgraded in the whole network, the influence is huge, the network access efficiency is low, the real-time performance of data transmission is poor and the user experience is influenced in the Internet access method for the WiFi access network in the related technology are solved.
Drawings
The accompanying drawings, which are included to provide a further understanding of the invention and are incorporated in and constitute a part of this application, illustrate embodiment(s) of the invention and together with the description serve to explain the invention without limiting the invention. In the drawings:
FIG. 1 shows a block diagram of a MS/STA in a non-roaming situation accessing a WiMAX core network through a WiMAX access network and through a WiFi access network;
FIG. 2 is a diagram illustrating a method of selecting access to the Internet according to the related art;
FIG. 3 is a flowchart illustrating a method of selecting access to the Internet according to a first embodiment of the present invention;
FIG. 4 is a flowchart illustrating a method of selecting access to the Internet according to a second embodiment of the present invention;
FIG. 5 is a flowchart illustrating a method of selecting access to the Internet according to a third embodiment of the present invention;
fig. 6 is a block diagram showing an Internet device selectively accessed according to a fourth embodiment of the present invention.
Detailed Description
The present invention will be described in detail below with reference to the accompanying drawings in conjunction with embodiments.
Fig. 3 shows a flowchart of a method of selecting access to the Internet according to a first embodiment of the present invention, which includes the steps of:
In this embodiment, the dual-mode terminal supporting the WiFi access and the WiMAX access first acquires an IWK address in an initial access authentication process in the WiFi access network, then acquires a local IP address for a direct IP connection mode allocated by a first DHCP server in the WiFi access network, then acquires a remote IP address for a WiMAX IP connection mode allocated by a second DHCP server in the WiMAX network according to the IWK address and the local IP address, and finally receives a selection of a user for the direct IP connection mode or the WiMAX IP connection mode, and completes Internet access according to an IP address corresponding to the selected IP connection mode. The embodiment is applied to the interworking architecture of the WiMAX network and the WiFi network, wherein the terminal is a dual-mode terminal supporting WiFi access and WiMAX access. The terminal acquires the local IP address and the far-end IP address in sequence, so that the user can select the two IP addresses in a direct IP connection mode and a WiMAX IP connection mode, the terminal can conveniently complete Internet access according to the corresponding IP addresses, the network access efficiency and the data transmission real-time performance are improved, and the user experience is improved. Because the Internet access is realized without the aid of the virtual AP with the SSID, the problems that the traditional WiFi network needs to be upgraded in the whole network, the influence is huge, the network access efficiency is low, the real-time performance of data transmission is poor and the user experience is influenced in the Internet access method for the WiFi access network in the related technology are solved.
Preferably, in the above method, the acquiring the IWK address specifically includes: the terminal obtains the IWK address through EAP authentication. In this embodiment, the terminal obtains the IWK address through EAP authentication, which specifically includes generating a master Session key MSK (master Session key) in the terminal and the AAA server in the EAP authentication process, the AAA server transmitting the MSK to the WiFi access network, and the IWK carrying the address (i.e., the IWK) to the terminal through an EAP message in the EAP authentication process. The embodiment makes full use of the EAP authentication process of the terminal, improves the acquisition efficiency of the IWK address and saves network resources.
Preferably, in the above method, the acquiring the IWK address specifically includes: the terminal acquires the IWK address through a DHCP request. In this embodiment, the terminal acquires the IWK address through a DHCP request, that is, the terminal acquires the IWK address through performing DHCP message interaction with the IWK. By doing so, the acquisition of the IWK address is made simple and easy.
Preferably, in the above method, the acquiring the IWK address specifically includes: the terminal acquires the IWK address through DNS query. By doing so, the acquisition of the IWK address is made simple and easy.
Preferably, in the above method, step 302 specifically includes: the terminal sends a first DHCP discovery message to the WiFi access network; the WiFi access network sends a first DHCP providing message to the terminal through a first DHCP server, wherein the first DHCP providing message comprises a local IP address; the terminal sends a first DHCP request message to the WiFi access network, wherein the first DHCP request message comprises a local IP address; the WiFi access network sends a first DHCP confirmation message to the terminal, wherein the first DHCP confirmation message comprises a local IP address and a first configuration parameter.
In this embodiment, the terminal first sends a first DHCP discover message to the WiFi access network for discovering the DHCP server to perform host IP configuration, the WiFi access network sends a first DHCP offer message including a local IP address to the terminal through the first DHCP server, the terminal then sends a first DHCP request message to the WiFi access network, and finally the WiFi access network sends a first DHCP acknowledge message to the terminal to acknowledge the use of the local IP address, and simultaneously, other configuration parameters related to the direct access mode are also carried in the DHCP offer message and transmitted to the terminal. The embodiment realizes that the terminal acquires the local IP address and the related configuration parameters, and provides a precondition for a direct access mode through a WiFi access network.
Preferably, in the above method, step 303 specifically includes: the terminal establishes an IP tunnel to the IWK according to the IWK address and the local IP address; and the terminal acquires the far-end IP address distributed by the second DHCP server of the WiMAX network through the IP tunnel.
In this embodiment, the terminal first establishes an IP tunnel to the IWK according to the IWK address acquired in step 301 and the local IP address acquired in step 302, and then acquires the remote IP address through the IP tunnel. Just because of the function of the IWK in interworking between the WiFi access network and the WiMAX network, the present embodiment establishes an IP tunnel with the IWK to establish a channel with the WiMAX network to obtain the far-end IP address.
Preferably, in the method, the acquiring, by the terminal through the IP tunnel, the remote IP address allocated by the second DHCP server of the WiMAX network specifically includes: the terminal sends a second DHCP discovery message to the IWK through the IP tunnel; IWK sends MIP register request message/agent binding update message to HA/LMA of WiMAX network; HA/LMA returns MIP registration response message/agent binding confirmation message to IWK, MIP registration response message/agent binding confirmation message includes far-end IP address; the IWK returns a second DHCP providing message to the terminal through the IP tunnel, wherein the second DHCP providing message comprises a remote IP address; the terminal sends a second DHCP request message to the IWK, wherein the second DHCP request message comprises a remote IP address; and the IWK sends a second DHCP confirmation message to the terminal, wherein the second DHCP confirmation message comprises the remote IP address and the second configuration parameter.
In this embodiment, the terminal implements obtaining of the far-end IP address through the above message interaction, wherein after the IWK and the HA/LMA perform MIP registration/Proxy binding message interaction, the IWK and the HA/LMA establish a MIP/PMIP (Proxy Mobile internet protocol) tunnel, and the MIP/PMIP tunnel and the IP tunnel are both transmission paths of service data packets when a WiMAX IP access manner is adopted, so that this embodiment ensures that when a service of a user arrives in the WiMAX network, the service can be normally provided to the user. The embodiment realizes the acquisition of the far-end IP address and the related configuration parameters by the terminal, and provides a precondition for the WiMAX IP access mode through the WiFi access network.
Preferably, in the above method, step 304 specifically includes: when a terminal initiates a service application, prompting a user to select an IP connection mode, wherein the IP connection mode comprises a direct IP connection mode and a WiMAX IP connection mode; if the user selects the direct IP connection mode, the terminal sets the local IP address as the source address of the service data and realizes the Internet direct access through the WiFi access network.
In this embodiment, a user selects a direct IP connection mode, at this time, the terminal uses the local IP Address as the source Address of the service data, the WiFi access network directly routes the service data packet to the Internet directly connected to the WiFi access network, and the WiFi access network may use a network Address translation (nat) technology to translate the local IP Address into a valid IP Address in the external IP network. The embodiment simply and conveniently realizes Internet access in a direct IP connection mode through the WiFi access network.
Fig. 4 shows a flowchart of an Internet access method according to a second embodiment of the present invention, the method comprising the steps of:
step 401, the terminal is started and the WiFi access network is found and selected;
step 402, the terminal executes the association process to the selected WiFi access network;
step 403, the terminal uses 802.1X/EAPOL and selected EAP method, and executes EAP authentication process to the AAA server through the WiFi access network, in the EAP authentication process, MSK generated in the terminal and the AAA server, the AAA server transfers MSK to the WiFi access network, and the interworking IWK carries its address to the terminal through EAP message in the EAP authentication process, the IWK can also transfer to the terminal through mechanisms such as DHCP information request or DNS query except that the IWK transfers the IWK address to the terminal in the EAP authentication process;
step 404, after the EAP authentication process is completed, the WiFi access network derives a pairwise Master key pmk (pairwise Master key) according to the MSK;
step 405, the terminal and the authenticator in the WiFi access network execute a 4-way handshake process; in the 4-way handshake process, the authentication devices of the terminal and the WiFi access network derive a Pairwise Temporary Key (PTK) (Pairwise Transient Key) according to the PMK;
step 406, after the 4-way handshake is completed, the WiFi access network opens an 802.1x port;
step 407, the terminal sends a DHCP discover message to the WiFi access network for discovering a DHCP server to perform host IP configuration;
step 408, the WiFi access network allocates a local IP address for the terminal through a local DHCP server and provides a message to return to the terminal through DHCP;
step 409, the terminal sends a DHCP request message to the WiFi access network, and the DHCP request message carries the IP address obtained from the DHCP providing message;
step 410, the WiFi access network returns a DHCP confirmation message to the terminal, confirms the use of the IP address and carries other configuration parameters to the terminal;
step 411, the terminal uses the home terminal IP address to establish an IP tunnel to the IWK according to the IWK address returned in the EAP authentication process of step 403;
step 412, the terminal sends a DHCP discover message through the IP tunnel, for requesting a remote IP address to a DHCP server of the WiMAX network;
step 413, after receiving the DHCP discover message through the IP tunnel, the IWK sends an MIP registration request message/proxy binding update message to the HA/LMA of the WiMAX CSN network;
step 414, the HA/LMA of the WiMAX CSN network returns an MIP registration response message/proxy binding update confirmation message, which contains the remote IP address applied for the terminal; thus, an MIP/PMIP tunnel is established between the HA/LMA and the IWK;
step 415, the IWK returns a DHCP offer message to the terminal through the IP tunnel, wherein the DHCP offer message includes a remote IP address applied by the WiMAX network for the terminal;
step 416, the terminal sends a DHCP request message to the IWK through the IP tunnel, carrying the remote IP address obtained from the DHCP offer message;
step 417, the IWK returns a DHCP acknowledge message to the terminal through the IP tunnel, confirms the use of the IP address and carries other configuration parameters to the terminal, and the purpose of establishing the HA/LMA connection to the WiMAX network by the terminal in step 411-417 is to ensure that the terminal can be normally provided to the user when the service of the user is reached in the WiMAX network;
step 418, when the user initiates the service application through the terminal, the terminal prompts the service selection mode to the user: a direct IP mode or a WiMAX IP mode;
step 419, if the user selects the direct IP mode, the terminal uses the home terminal address as the source address of the service data, and the WiFi access network directly routes the service data packet to the external IP network directly connected thereto; the WiFi access network may use NAT technology to translate the local IP address to a legitimate IP address in the external IP network.
In the embodiment, when a dual-mode terminal supporting WiMAX access and WiFi access accesses through a WiFi access network in a WiMAX network and WiFi network interworking architecture, access to an external Internet network is achieved by adopting a direct IP connection manner.
Preferably, in the above method, step 304 specifically includes: when a terminal initiates a service application, prompting a user to select an IP connection mode, wherein the IP connection mode comprises a direct IP connection mode and a WiMAX IP connection mode; if the user selects the WiMAX IP connection mode, the terminal sets the far-end IP address as the source address of the service data and realizes the Internet access to the WiMAX network through the tunnel between the terminal and the IWK.
In this embodiment, a case that a user selects a WiMAX IP connection mode is presented, at this time, a terminal uses a remote IP address allocated by a WiMAX network as a source address of service data, the service data packet is forwarded to an IWK through an IP tunnel of a WiFi access network, and then the IWK sends the IWK to an HA/LMA through an MIP/PMIP tunnel, and the HA/LMA routes the service data packet to an external IP network connected to the WiMAX network; the WiFi access network may use NAT technology to translate the local IP address to a legitimate IP address in the external IP network. The embodiment simply and conveniently realizes the Internet access in the WiMAX IP connection mode.
Fig. 5 shows a flowchart of an Internet access method according to a third embodiment of the present invention, the method comprising the steps of:
step 501, the terminal is started and WiFi access networks are found and selected;
step 502, the terminal executes the association process to the selected WiFi access network;
step 503, the terminal uses 802.1X/EAPOL and the selected EAP method, and executes an EAP authentication process to the AAA server through the WiFi access network, in the EAP authentication process, the MSK generated in the terminal and the AAA server, the AAA server transfers the MSK to the WiFi access network, and the interworking IWK carries its address to the terminal through an EAP message in the EAP authentication process, and the IWK can transfer the IWK address to the terminal through a mechanism such as DHCP information request or DNS query, except that the IWK transfers the IWK address to the terminal in the EAP authentication process;
step 504, after the EAP authentication process is completed, the WiFi access network deduces the PMK according to the MSK;
step 505, the terminal and the authenticator in the WiFi access network execute a 4-way handshake process; in the 4-way handshake process, the terminal and the authenticator of the WiFi access network derive the PTK according to the PMK;
step 506, after the 4-way handshake is completed, the WiFi access network opens an 802.1x port;
step 507, the terminal sends a DHCP discovery message to the WiFi access network for discovering a DHCP server to perform host IP configuration;
step 508, WiFi access network distributes a local IP address for terminal station through the local DHCP server and provides the message to return to the terminal station through DHCP;
step 509, the terminal sends a DHCP request message to the WiFi access network, carrying the IP address obtained from the DHCP offer message;
step 510, the WiFi access network returns a DHCP acknowledge message to the terminal, confirms the use of the IP address and carries other configuration parameters to the terminal;
step 511, the terminal uses the home terminal IP address to establish an IP tunnel to the IWK according to the IWK address returned in the EAP authentication process in step 403;
step 512, the terminal sends a DHCP discover message through the IP tunnel, which is used to request a remote IP address from a DHCP server of the WiMAX network;
step 513, after receiving the DHCP discover message through the IP tunnel, the IWK sends an MIP registration request message/proxy binding update message to the HA/LMA of the WiMAX CSN network;
step 514, the HA/LMA of the WiMAX CSN network returns an MIP registration response message/proxy binding update confirmation message, which includes the remote IP address applied for the terminal; thus, an MIP/PMIP tunnel is established between the HA/LMA and the IWK;
step 515, the IWK returns a DHCP offer message to the terminal through the IP tunnel, wherein the DHCP offer message includes a remote IP address applied by the WiMAX network for the terminal;
step 516, the terminal sends a DHCP request message to the IWK through the IP tunnel, carrying the remote IP address obtained from the DHCP offer message;
step 517, the IWK returns a DHCP confirmation message to the terminal through the IP tunnel, confirms the use of the IP address and carries other configuration parameters to the terminal, and the purpose of establishing HA/LMA connection to the WiMAX network in the step 411-417 is to ensure that the terminal can be normally provided for the user when the service of the user is reached in the WiMAX network;
step 518, when the user initiates the service application through the terminal, the terminal prompts the service selection mode to the user: a direct IP mode or a WiMAX IP mode;
step 519, if the user selects the WiMAX IP mode, the terminal needs to acquire the IP address allocated by the WiMAX network as the remote address, and performs a service through the address. Specifically, the terminal uses the far-end IP address allocated by the WiMAX network as the source address of the service data, the service data packet is forwarded to the IWK through the IP tunnel of the WiFi access network, then the IWK is sent to the HA/LMA through the MIP/PMIP tunnel, and the HA/LMA routes the service data packet to the external IP network connected with the WiMAX network. The WiFi access network may use NAT technology to translate the local IP address to a legitimate IP address in the external IP network.
In the embodiment, when a dual-mode terminal supporting WiMAX access and WiFi access accesses through a WiFi access network in a WiMAX network and WiFi network interworking architecture, access to an external Internet network is achieved in a WiMAX IP manner.
Fig. 6 is a block diagram showing an Internet access apparatus according to a fourth embodiment of the present invention, the apparatus comprising:
an IWK address acquisition module 601, configured to perform initial access authentication on a terminal in a WiFi access network, and acquire an IWK address of the IWK;
a local IP address obtaining module 602, configured to obtain, by a terminal, a local IP address allocated by a first DHCP server of a WiFi access network;
a far-end IP address obtaining module 603, configured to obtain, by the terminal, a far-end IP address allocated by a second DHCP server of the WiMAX network according to the IWK address and the local IP address;
the access module 604 is configured to receive, by the terminal, a selection of the local IP address or the remote IP address from the user, and complete Internet access according to the selected IP address.
In this embodiment, the dual-mode terminal supporting WiFi access and WiMAX access first uses the IWK address obtaining module 601 to obtain the IWK address in the initial access authentication process in the WiFi access network, then uses the local IP address obtaining module 602 to obtain the local IP address for the direct IP connection mode allocated by the first DHCP server in the WiFi access network, then uses the remote IP address obtaining module 603 to obtain the remote IP address for the WiMAX IP connection mode allocated by the second DHCP server in the WiMAX network according to the IWK address and the local IP address, and finally uses the access module 604 to receive the selection of the user for the direct IP connection mode or the WiMAX IP connection mode, and completes Internet access according to the IP address corresponding to the selected IP connection mode. The embodiment is applied to the interworking architecture of the WiMAX network and the WiFi network, wherein the terminal is a dual-mode terminal supporting WiFi access and WiMAX access. The terminal acquires the local IP address and the far-end IP address in sequence, so that the user can select the two IP addresses in a direct IP connection mode and a WiMAX IP connection mode, the terminal can conveniently complete Internet access according to the corresponding IP addresses, the network access efficiency and the data transmission real-time performance are improved, and the user experience is improved. Because the Internet access is realized without the aid of the virtual AP with the SSID, the problems that the traditional WiFi network needs to be upgraded in the whole network, the influence is huge, the network access efficiency is low, the real-time performance of data transmission is poor and the user experience is influenced in the Internet access method for the WiFi access network in the related technology are solved.
Preferably, in the above apparatus, the IWK address obtaining module 601 specifically includes: and the EAP authentication unit is used for obtaining the IWK address through EAP authentication by the terminal. In this embodiment, the terminal acquires the IWK address by using the EAP authentication unit, which specifically includes generating an MSK in the terminal and the AAA server during the EAP authentication, transmitting the MSK to the WiFi access network by the AAA server, and carrying the address (i.e., the IWK) of the IWK to the terminal through an EAP message during the EAP authentication. The embodiment makes full use of the EAP authentication process of the terminal, improves the acquisition efficiency of the IWK address and saves network resources.
Preferably, in the above apparatus, the IWK address obtaining module 601 specifically includes: and the DHCP request unit is used for the terminal to acquire the IWK address through a DHCP request. In this embodiment, the terminal acquires the IWK address by using a DHCP request unit, that is, the terminal acquires the IWK address by performing DHCP message interaction with the IWK. By doing so, the acquisition of the IWK address is made simple and easy.
Preferably, in the above apparatus, the IWK address obtaining module 601 specifically includes: and the DNS query unit is used for the terminal to acquire the IWK address through DNS query. By doing so, the acquisition of the IWK address is made simple and easy.
From the above description, it can be seen that the above embodiments of the present invention provide flexible Internet access, improve the efficiency of network access and the real-time performance of data transmission, and improve the user experience.
It will be apparent to those skilled in the art that the modules or steps of the present invention described above may be implemented by a general purpose computing device, they may be centralized on a single computing device or distributed across a network of multiple computing devices, and they may alternatively be implemented by program code executable by a computing device, such that they may be stored in a storage device and executed by a computing device, or fabricated separately as individual integrated circuit modules, or fabricated as a single integrated circuit module from multiple modules or steps. Thus, the present invention is not limited to any specific combination of hardware and software.
The above description is only a preferred embodiment of the present invention and is not intended to limit the present invention, and various modifications and changes may be made by those skilled in the art. Any modification, equivalent replacement, or improvement made within the spirit and principle of the present invention should be included in the protection scope of the present invention.
Claims (12)
1. A method for selecting to access Internet through a WiFi access network is characterized by comprising the following steps:
the dual-mode terminal supporting WiFi access and worldwide interoperability for microwave access WiMAX access performs initial access authentication under a WiFi access network and acquires an IWK address of an interworking function node IWK;
the terminal acquires a local IP address distributed by a first Dynamic Host Configuration Protocol (DHCP) server of the WiFi access network, wherein the local IP address is used for Internet access in a direct IP connection mode;
the terminal acquires a far-end IP address distributed by a second DHCP server of a worldwide interoperability for microwave access WiMAX network according to the IWK address and the local IP address, wherein the far-end IP address is used for Internet access in a WiMAX IP connection mode;
the terminal receives the selection of the user to the direct IP connection mode or the WiMAX IP connection mode, and completes Internet access according to the IP address corresponding to the selected IP connection mode;
wherein,
the acquiring, by the terminal, the remote IP address allocated by the second DHCP server of the WiMAX network according to the IWK address and the local IP address specifically includes: the terminal establishes an IP tunnel to the IWK according to the IWK address and the local IP address; the terminal acquires a far-end IP address distributed by a second DHCP server of the WiMAX network through the IP tunnel;
and completing Internet access according to the IP address corresponding to the selected IP connection mode specifically comprises the following steps: and if the user selects the direct IP connection mode, the terminal sets the local IP address as a source address of service data and realizes Internet direct access through the WiFi access network.
2. The method of claim 1, wherein obtaining the IWK address specifically comprises:
and the terminal acquires the IWK address through the authentication of an Extensible Authentication Protocol (EAP).
3. The method of claim 1, wherein obtaining the IWK address specifically comprises:
and the terminal acquires the IWK address through a DHCP request.
4. The method of claim 1, wherein obtaining the IWK address specifically comprises:
and the terminal acquires the IWK address through Domain Name System (DNS) query.
5. The method of claim 1, wherein the acquiring, by the terminal, the local IP address allocated by the first DHCP server of the WiFi access network specifically comprises:
the terminal sends a first DHCP discovery message to the WiFi access network;
the WiFi access network sends a first DHCP providing message to the terminal through the first DHCP server, and the first DHCP providing message comprises the local IP address;
the terminal sends a first DHCP request message to the WiFi access network, wherein the first DHCP request message comprises the local IP address;
and the WiFi access network sends a first DHCP confirmation message to the terminal, wherein the first DHCP confirmation message comprises the local IP address and a first configuration parameter.
6. The method of claim 1, wherein the acquiring, by the terminal through the IP tunnel, the remote IP address allocated by the second DHCP server of the WiMAX network specifically includes:
the terminal sends a second DHCP discovery message to the IWK through the IP tunnel;
the IWK sends a mobile internet protocol MIP registration request message/agent binding update message to a home agent/regional mobile anchor HA/LMA of the WiMAX network;
the HA/LMA returns MIP registration response message/agent binding confirmation message to the IWK, and the MIP registration response message/agent binding confirmation message comprises the far-end IP address;
the IWK returns a second DHCP providing message to the terminal through the IP tunnel, wherein the second DHCP providing message comprises the far-end IP address;
the terminal sends a second DHCP request message to the IWK, wherein the second DHCP request message comprises the far-end IP address;
and the IWK sends a second DHCP confirmation message to the terminal, wherein the second DHCP confirmation message comprises the remote IP address and a second configuration parameter.
7. The method of claim 1, wherein the terminal receiving the user's selection of the direct IP connection mode or the WiMAX IP connection mode and completing Internet access according to the IP address corresponding to the selected IP connection mode specifically comprises:
when the terminal initiates a service application, prompting the user to select an IP connection mode, wherein the IP connection mode comprises a direct IP connection mode and a WiMAXIP connection mode;
and if the user selects the direct IP connection mode, the terminal sets the local IP address as a source address of service data and realizes Internet direct access through the WiFi access network.
8. The method of claim 1, wherein the receiving, by the terminal, the selection of the direct IP connection mode or the WiMAX IP connection mode by the user specifically comprises:
and when the terminal initiates a service application, prompting the user to select an IP connection mode, wherein the IP connection mode comprises a direct IP connection mode and a WiMAXIP connection mode.
9. A device for selecting to access Internet through WiFi access network, which is characterized in that the device comprises:
an interworking function node IWK address acquisition module, which is used for supporting a dual-mode terminal of WiFi access and worldwide interoperability for microwave access WiMAX access to perform initial access authentication under a WiFi access network and acquire an IWK address of the IWK;
a local IP address obtaining module, configured to obtain, by the terminal, a local IP address allocated by a first Dynamic Host Configuration Protocol (DHCP) server of the WiFi access network, where the local IP address is used for Internet access in a direct IP connection mode;
a far-end IP address obtaining module, configured to obtain, by the terminal, a far-end IP address allocated by a second DHCP server of a WiMAX network according to the IWK address and the local IP address, where the far-end IP address is used for Internet access in a WiMAX IP connection mode; the acquiring, by the terminal, the remote IP address allocated by the second DHCP server of the WiMAX network according to the IWK address and the local IP address specifically includes: the terminal establishes an IP tunnel to the IWK according to the IWK address and the local IP address; the terminal acquires a far-end IP address distributed by a second DHCP server of the WiMAX network through the IP tunnel;
and the access module is used for receiving the selection of the direct IP connection mode or the WiMAX IP connection mode by the user and completing Internet access according to the IP address corresponding to the selected IP connection mode.
10. The apparatus according to claim 9, wherein the IWK address obtaining module specifically comprises:
and the Extensible Authentication Protocol (EAP) authentication unit is used for acquiring the IWK address by the terminal through EAP authentication.
11. The apparatus according to claim 9, wherein the IWK address obtaining module specifically comprises:
and the DHCP request unit is used for the terminal to acquire the IWK address through a DHCP request.
12. The apparatus according to claim 9, wherein the IWK address obtaining module specifically comprises:
and the domain name system DNS query unit is used for the terminal to acquire the IWK address through DNS query.
Priority Applications (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
CN 200910173724 CN102026163B (en) | 2009-09-10 | 2009-09-10 | Method and device for selecting access to Internet through wireless fidelity access network |
Applications Claiming Priority (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
CN 200910173724 CN102026163B (en) | 2009-09-10 | 2009-09-10 | Method and device for selecting access to Internet through wireless fidelity access network |
Publications (2)
Publication Number | Publication Date |
---|---|
CN102026163A CN102026163A (en) | 2011-04-20 |
CN102026163B true CN102026163B (en) | 2013-06-12 |
Family
ID=43866886
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
CN 200910173724 Active CN102026163B (en) | 2009-09-10 | 2009-09-10 | Method and device for selecting access to Internet through wireless fidelity access network |
Country Status (1)
Country | Link |
---|---|
CN (1) | CN102026163B (en) |
Families Citing this family (8)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN102387608B (en) * | 2011-10-21 | 2014-12-10 | 大唐移动通信设备有限公司 | Access method of WiFi (Wireless Fidelity) access point (AP), WiFi AP and WiFi system |
CN103188753B (en) * | 2011-12-27 | 2016-05-25 | 中国移动通信集团山东有限公司 | Carry out method and the device of transfer of data based on different links between heterogeneous network |
KR102005771B1 (en) * | 2012-02-24 | 2019-10-01 | 삼성전자주식회사 | Method and apparatus for providing ip address in wireless communication network |
CN102655646B (en) * | 2012-04-19 | 2016-09-21 | 深圳都好看互动电视有限公司 | A kind of method and device managing multiple hotspot |
US9801124B2 (en) | 2012-05-01 | 2017-10-24 | Qualcomm Incorporated | Systems and methods for configuring connectivity in a wireless network |
CN103347266B (en) * | 2013-07-26 | 2017-03-08 | 薛海强 | A kind of method for network access, apparatus and system |
CN104023001B (en) * | 2013-12-25 | 2017-04-26 | 上海寰创通信科技股份有限公司 | Method for AC equipment to forward unauthorized message information |
CN106249646A (en) * | 2016-08-11 | 2016-12-21 | 廖金能 | A kind of internet of things equipment monitoring system based on WIFI and data processing method thereof |
Citations (4)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN1713629A (en) * | 2004-06-25 | 2005-12-28 | 杭州华为三康技术有限公司 | Realization of user login name and IP address binding |
CN1909739A (en) * | 2006-08-24 | 2007-02-07 | 华为技术有限公司 | Wireless switch-in network, method for grouped transmission and method for terminal switch |
CN1992637A (en) * | 2005-12-31 | 2007-07-04 | 华为技术有限公司 | Wimax network control and management system and method |
CN101489223A (en) * | 2007-10-26 | 2009-07-22 | 日立通讯技术株式会社 | Communication system and gateway apparatus |
Family Cites Families (1)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US20060047835A1 (en) * | 2004-07-02 | 2006-03-02 | Greaux Jeffrey E | Method and System for LAN and WLAN access to e-commerce sites via Client Server Proxy |
-
2009
- 2009-09-10 CN CN 200910173724 patent/CN102026163B/en active Active
Patent Citations (4)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN1713629A (en) * | 2004-06-25 | 2005-12-28 | 杭州华为三康技术有限公司 | Realization of user login name and IP address binding |
CN1992637A (en) * | 2005-12-31 | 2007-07-04 | 华为技术有限公司 | Wimax network control and management system and method |
CN1909739A (en) * | 2006-08-24 | 2007-02-07 | 华为技术有限公司 | Wireless switch-in network, method for grouped transmission and method for terminal switch |
CN101489223A (en) * | 2007-10-26 | 2009-07-22 | 日立通讯技术株式会社 | Communication system and gateway apparatus |
Also Published As
Publication number | Publication date |
---|---|
CN102026163A (en) | 2011-04-20 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
CN102026163B (en) | Method and device for selecting access to Internet through wireless fidelity access network | |
JP4927939B2 (en) | Automatic home agent selection | |
US8769626B2 (en) | Web authentication support for proxy mobile IP | |
EP2451213B1 (en) | Roaming method for mobile terminal in wireless local area network, related access controller and access point device | |
US10419994B2 (en) | Non-access stratum based access method and terminal supporting the same | |
RU2495541C2 (en) | Method for handover between networks, communication system and corresponding devices | |
WO2010127597A1 (en) | Handoff method, device and system | |
KR20140018266A (en) | Mobile router in eps | |
CN104540185A (en) | Network access method, access gateway and access control device | |
WO2012149783A1 (en) | Method, device, and user equipment applicable in accessing mobile network | |
US10595254B2 (en) | Non-access stratum based access method and terminal supporting the same | |
JP2015525992A (en) | Method, apparatus and system for accessing a mobile network | |
CN102892170A (en) | Method and system for terminal to acquire core network internet protocol (IP) address | |
CN101420792B (en) | Gateway anchor point distributing method, network side device and user terminal | |
EP2299748B1 (en) | Method and system for supporting mobility security in the next generation network | |
WO2011015091A1 (en) | Method, device, system and authentication authorization accounting (aaa) server for home node base station accessing | |
CN101790146B (en) | Method for allocating address information, network equipment and network system | |
CN101998399A (en) | Method and system for quickly switching terminal | |
CN101730040B (en) | Method for cross-network switching session binding and WiMAX connection service network | |
CN100591032C (en) | Method for the transmission of information via IP networks | |
CN101998403A (en) | Method and system for implementing internetwork access authentication | |
CN101938735B (en) | Method for accessing terminal to a WiMAX core network through WiFi network and interworking network | |
CN101998569A (en) | Network interworking method, system and IWK (Issuer Working Key) for WiMAX (Worldwide Interoperability for Microwave Access) and WiFi (Wireless Fidelity) | |
Korhonen et al. | HIP based network access protocol in operator network deployments | |
CN103428779B (en) | Transmission method, system and the fixed network access gateway of quality of service information |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
C06 | Publication | ||
PB01 | Publication | ||
C10 | Entry into substantive examination | ||
SE01 | Entry into force of request for substantive examination | ||
C14 | Grant of patent or utility model | ||
GR01 | Patent grant | ||
TR01 | Transfer of patent right | ||
TR01 | Transfer of patent right |
Effective date of registration: 20210105 Address after: 276800 west head of Shanghai Road, Rizhao Development Zone, Shandong Province Patentee after: Runfeng Construction Group Co.,Ltd. Address before: 518057 No. 55 South Science and technology road, Shenzhen, Guangdong, Nanshan District Patentee before: ZTE Corp. |