CN102685667A - Method, device and system for transmitting and acquiring position information of access user - Google Patents

Abstract

The invention provides a method, device and system for sending and acquiring location information of an access user. The sending of the location information of the access user includes: the AP device obtains the location information of the access user; the AP device carries the location information of the access user in an EAP-SIM message and sends it to the broadband remote access server BRAS, The BRAS obtains the location information of the access user according to the EAP-SIM message and completes the EAP-SIM protocol authentication. The invention provides a method, device and system for sending and acquiring location information of an access user, which can realize that the BRAS acquires the user location information during authentication.

Description

Method, device and system for sending and acquiring location information of access users

technical field

The invention relates to network communication technology, in particular to a method, device and system for sending and acquiring location information of an access user, belonging to the field of communication technology.

Background technique

Thin wireless access points (Access Point, AP) are only used for wireless access functions, also known as wireless bridges or wireless gateways, which do not have the wide area network (WAN, Wide Area Network) and local area network (Local Area Network, LAN) interface, does not support security functions such as dynamic host configuration protocol (Dynamic Host Configuration Protocol, DHCP) server, computer domain name system (Domain Name System, DNS) server and firewall. Therefore, the thin AP architecture meets the requirements of operators for centralized control and centralized management of large-scale telecommunication networks, and has unique advantages in the frequency and power control of the entire network equipment, user traffic balance, security, etc., so it is widely used in wireless In the local area network (Wireless Local Area Networks, WLAN).

In a WLAN network with a thin AP architecture, the wireless access controller (Access Controller, AC) is usually responsible for managing AP and user services, including deployment locations, interface types and quantities, and authentication and billing methods. The Broadband Remote Access Server (Broadband Remote Access Access Server, BRAS) is responsible for implementing authentication, accounting and authorization functions. Under the existing WLAN network structure, end users do not directly access the BRAS equipment, but access the network through APs. In this networking situation, the BRAS cannot obtain user location information, which greatly limits extended service services based on user location information, such as BRAS information push.

Contents of the invention

The invention provides a method, device and system for sending and acquiring location information of an access user, which are used to realize that a BRAS obtains user location information during authentication.

On the one hand, an embodiment of the present invention provides a method for sending location information of an access user, including:

The AP device obtains the location information of the access user;

The AP device carries the location information of the access user in the EAP-SIM message and sends it to the BRAS, so that the BRAS obtains the location information of the access user according to the EAP-SIM message and completes the EAP -SIM protocol authentication.

On the one hand, an embodiment of the present invention provides a method for obtaining location information of an access user, including:

The BRAS receives the EAP-SIM message sent by the AP device, and the EAP-SIM message carries the location information of the access user;

The BRAS parses the EAP-SIM message, acquires the location information of the access user and completes the EAP-SIM protocol authentication.

In one aspect, an embodiment of the present invention provides a wireless access point device, including:

The first location information obtaining module is used to obtain the location information of the access user;

A location information sending module, configured to carry the location information of the access user in an EAP-SIM message and send it to the broadband remote access server BRAS, so that the BRAS obtains the access information according to the EAP-SIM message. Enter the user's location information and complete the EAP-SIM protocol authentication.

On the one hand, an embodiment of the present invention provides a broadband remote access server, including:

The location information receiving module is used to receive the EAP-SIM message sent by the AP device, and the EAP-SIM message carries the location information of the access user;

The second location information acquisition module is configured to parse the EAP-SIM message, acquire the location information of the access user and complete the EAP-SIM protocol authentication.

On the one hand, an embodiment of the present invention provides a communication system, including the wireless access point device provided in the embodiment of the present invention and the broadband remote access server provided in the embodiment of the present invention, wherein the wireless access point device and the broadband Remote access server communication.

According to the method, device and system for sending and obtaining the location information of the access user provided by the present invention, when the UE accesses the network through the AP device, the AP device provides the access information to the BRAS during the user's EAP-SIM protocol authentication process. The location information of the access user enables the BRAS to obtain the location information of the access user, so that the extended service based on the location information of the access user can be realized.

Description of drawings

FIG. 1 is a system architecture diagram of a typical thin AP architecture WLAN network.

FIG. 2 is a schematic flowchart of a method for sending location information of an access user according to an embodiment of the present invention.

Fig. 3 is a signaling diagram of an example of a method for sending location information of an access user according to an embodiment of the present invention.

Fig. 4 is a schematic flowchart of a method for sending location information of an access user according to another embodiment of the present invention.

FIG. 5 is a schematic flowchart of a method for acquiring location information of an access user according to an embodiment of the present invention.

FIG. 6 is a schematic structural diagram of an AP device according to an embodiment of the present invention.

FIG. 7 is a schematic structural diagram of a BRAS according to an embodiment of the present invention.

Detailed ways

FIG. 1 is a system architecture diagram of a typical thin AP architecture WLAN network. As shown in Figure 1, it includes the UE, the AP connected to the UE, the AC connected to the AP through the Controlling and Provisioning of Wireless Access Point (CAPWAP) pipeline, the BRAS connected to the AP, and the BRAS connected The authentication server used to authenticate and authorize the UE is, for example, a Radios server. Taking the WLAN network shown in FIG. 1 as an example, the location information of the access user, the method for obtaining it, and the device in the embodiment of the present invention will be described in detail below. However, those skilled in the art can understand that the WLAN network architecture is not used as a limitation to the embodiment of the present invention, and the location information, acquisition method and equipment of the access user in the embodiment of the present invention are applicable to any other network systems including APs and BRASs .

Embodiment one

The method for sending location information of an access user in this embodiment is executed by an AP device. The method for sending location information of an access user in this embodiment will be described in detail below from the perspective of an AP device.

FIG. 2 is a schematic flowchart of a method for sending location information of an access user according to an embodiment of the present invention. As shown in Figure 2, the method for sending the location information of the access user includes:

Step S201, the AP device obtains the location information of the access user;

Step S202, the AP device carries the location information of the access user in an Extensible Authentication Protocol Method for GSM Subscriber Identity Module (EAP-SIM) message and sends it to the BRAS, so that the BRAS according to The EAP-SIM message obtains the location information of the access user and completes the EAP-SIM protocol authentication.

Among them, the AP device can obtain the location information of the access user through any method in the prior art, such as using the location information of the AP as the location information of the access user, or when the UE can determine the location information through its own positioning device When the UE location coordinates are used, the AP obtains the UE location coordinates and the like through signaling interaction with the UE. And, in the process of performing EAP-SIM authentication on the access user, the obtained location information of the access user is carried in the EAP-SIM message and sent to the BRAS.

Specifically, FIG. 3 is a signaling diagram of an example of a method for sending location information of an access user according to an embodiment of the present invention. As shown in Figure 3, the following steps are included:

Step S301, when the UE accesses the AP device, send an EAPOL start signal to the AP device;

Step S302, the AP device feeds back information to the UE according to the start signal of the extended authentication protocol based on the local area network (EAP OVER LAN, EAPOL), and requires the UE to provide EAP request information (EAP-RequestIdentify);

Step S303, the UE provides the AP device with EAP request information (the EAP request information is EAP-SIM protocol information);

Step S304, the AP device encapsulates the user location information in the EAP request information, and obtains the EAP-SIM protocol information encapsulated with the user location information;

Step S305, pushing the EAP-SIM protocol information encapsulating the user location information to the BRAS;

Step S306, the BRAS obtains the encapsulated user location information from the EAP-SIM protocol information;

Step S307, the BRAS sends the EAP-SIM protocol information to the Radios server, and proposes a Radios access request;

Preferably, after the BRAS unit intercepts the EAP-SIM protocol information and obtains the encapsulated user location information from the EAP-SIM protocol information, standardizes and repackages the EAP-SIM protocol information and sends it to the Radios server; when the BRAS adopts this method, Since standardized EAP-SIM protocol information is provided to the Radios server, EAP-SIM authentication can be implemented without modifying the Radios server.

Step S308, the Radios server initiates a Radios access challenge according to the received EAP-SIM protocol information;

Step S309, the UE performs a series of EAP-SIM authentication process actions such as Radios information interaction with the Radios server through the BRAS. The interaction process is the same as the existing authentication process, so it will not be repeated here;

In step S310, the Radios server returns an authentication result to the UE. For example, the Radios server returns a Radios acceptance message to the BRAS, and the BRAS returns an EAP-SIM authentication success message to the AP, and the AP sends the EAP-SIM authentication success message to the UE.

According to the method for sending the location information of the access user in the embodiment of the present invention, when the UE accesses the network through the AP device, the AP device provides the location information of the access user to the BRAS during the user's EAP-SIM protocol authentication process , so that the BRAS can obtain the location information of the access user, so as to realize the extended service based on the location information of the access user.

Embodiment two

On the basis of the method for sending the location information of the access user in the above-mentioned embodiment 1, in the above step S202, the AP device carrying the location information of the access user in an EAP-SIM message and sending it to the BRAS specifically includes:

Obtain the encapsulated EAP-SIM message sent by the access user;

Analyzing the encapsulated EAP-SIM message;

In the EAP-SIM message obtained by parsing, add the location information of the access user;

re-encapsulating the EAP-SIM message added with the location information of the access user;

Send the re-encapsulated EAP-SIM message to the BRAS.

Specifically, FIG. 4 is a schematic flowchart of a method for sending location information of an access user according to another embodiment of the present invention. As shown in Figure 4, the following steps are included:

Step S401, the UE initiates a user authentication request, and the authentication request type is EAP-SIM authentication;

Step S402, the AP device responds to the UE request, and requests the UE for authentication information;

Step S403, the UE sends EAP request information (the EAP request information is EAP-SIM protocol information) to the AP device;

Step S404, the AP device decapsulates the EAP request information received from the UE;

Step S405, the AP device adds user location information in the EAP request information;

More specifically, when modifying the standard EAP request information, for example, according to the message definition of the standard EAP-SIM protocol, choose to add the address (Address) attribute to the attribute field (ATTRIBUTEFIELD) in the standard EAP-SIM protocol, and assign Its value, its value is the user location information. Table 1 shows the added message format:

Table 1

In addition, the user location information may also be carried in the EAP-SIM protocol information in other ways, such as adding a new address part.

Step S406, the AP repackages the EAP-SIM protocol authentication information added with the user location information;

Step S407, the AP sends the repackaged EAP-SIM protocol authentication information to the BRAS;

Step S408, the BRAS decapsulates the received EAP-SIM protocol authentication message, and intercepts the user location information therefrom;

Step S409, the BRAS repackages the intercepted information according to the standardized EAP-SIM protocol mode and sends it to the Radios server;

Specifically, the EAP-SIM protocol packet function module in the BRAS unit will add the Address attribute in the increased ATTRIBUTE FIELD part and delete it, so that the message of the EAP-SIM protocol message is changed back to the standard format, as shown in Table 2, for example, Table 2 is the standard EAP-SIM protocol information format:

Table 2

Step S410, the Radios server starts the authentication process;

Step S411, if the authentication is successful, it ends; if it is not successful, it returns to the UE that the user authentication fails and re-authentication is possible, that is, returns to step S401.

Embodiment three

The method for obtaining location information of an access user in this embodiment is performed by the BRAS. The method for obtaining location information of an access user in this embodiment will be described in detail below from the perspective of the BRAS.

FIG. 5 is a schematic flowchart of a method for acquiring location information of an access user according to an embodiment of the present invention. As shown in Figure 5, the method for obtaining the location information of the access user includes:

Step S501, the BRAS receives the EAP-SIM message sent by the AP device, and the EAP-SIM message carries the location information of the access user;

Step S502, the BRAS parses the EAP-SIM message, obtains the location information of the access user and completes the EAP-SIM protocol authentication.

The method for obtaining the location information of the access user in this embodiment is the same as the process in which the BRAS obtains the location information of the access user from the EAP-SIM message received from the AP device in any of the foregoing embodiments, so details are not repeated here.

According to the method for obtaining the location information of the access user in this embodiment, when the UE accesses the network, the BRAS can obtain the location information of the access user during the process of authenticating the UE through the EAP-SIM protocol, thereby realizing Extended business services based on the location information of the access user.

Further, the BRAS parses the EAP-SIM message, obtains the location information of the access user and completes the EAP-SIM protocol authentication, specifically including:

The BRAS parses the EAP-SIM message;

Obtain the location information of the access user from the EAP-SIM message obtained by parsing;

Deleting the location information of the access user in the EAP-SIM message obtained by the analysis, and repackaging the deleted EAP-SIM message;

Send the re-encapsulated EAP-SIM message to the authentication server, so as to complete the EAP-SIM protocol authentication.

Further, the obtaining the location information of the access user from the EAP-SIM message obtained by parsing specifically includes:

Extracting the address attribute of the attribute field in the EAP-SIM message obtained by parsing, and determining the location information of the access user according to the address attribute;

Correspondingly, deleting the location information of the access user in the EAP-SIM message obtained by the analysis, and re-encapsulating the deleted EAP-SIM message specifically includes:

Deleting the address attribute in the EAP-SIM message obtained through the analysis, and repackaging the deleted EAP-SIM message according to the standardized EAP-SIM protocol.

When the BRAS adopts this method, because it provides standardized EAP-SIM protocol information to the Radios server, authentication can be realized without modifying the Radios server.

Embodiment Four

FIG. 6 is a schematic structural diagram of an AP device according to an embodiment of the present invention. As shown in Figure 6, including:

The first location information acquiring module 61 is configured to acquire the location information of the access user;

The location information sending module 62 is configured to carry the location information of the access user in the EAP-SIM message and send it to the broadband remote access server BRAS, so that the BRAS obtains the Access the user's location information and complete the EAP-SIM protocol authentication.

The flow of the AP device sending the location information of the access user to the BRAS in this embodiment is the same as the flow of the method for sending the location information of the access user in the foregoing embodiment, so details are not repeated here.

According to the AP device of this embodiment, when the UE accesses the network through the AP device, the AP device provides the location information of the access user to the BRAS during the user's EAP-SIM protocol authentication process, so that the BRAS can obtain the access user's location information. The location information of the incoming user can be used to realize the extended business service based on the location information of the incoming user.

Further, the location information sending module includes:

An information interception submodule, configured to obtain the encapsulated EAP-SIM message sent by the access user;

A first parsing submodule, configured to parse the encapsulated EAP-SIM message;

The information adding submodule is used to add the location information of the access user in the EAP-SIM message obtained by parsing;

The first encapsulation submodule is used to re-encapsulate the EAP-SIM message added with the location information of the access user;

The information sending sub-module is used to send the re-encapsulated EAP-SIM message to the BRAS.

Further, the information adding submodule is specifically configured to add an address attribute to the attribute field of the EAP-SIM message obtained through the parsing, and set the address attribute according to the location information of the access user.

Embodiment five

FIG. 7 is a schematic structural diagram of a BRAS according to an embodiment of the present invention. As shown in Figure 6, including:

The location information receiving module 71 is used to receive the EAP-SIM message sent by the AP device, and the EAP-SIM message carries the location information of the access user;

The second location information acquiring module 72 is configured to parse the EAP-SIM message, acquire the location information of the access user and complete the EAP-SIM protocol authentication.

The flow of the BRAS in this embodiment to obtain the location information of the access user is the same as the flow of the method for obtaining the location information of the access user in the foregoing embodiments, so details are not repeated here.

According to the BRAS of this embodiment, when the UE accesses the network, the BRAS can obtain the location information of the access user during the process of authenticating the UE through the EAP-SIM protocol, so that the location information based on the access user can be realized extended business services

Further, the second location information acquisition module specifically includes:

The second parsing submodule is used to parse the EAP-SIM message;

An information extraction submodule, configured to obtain the location information of the access user from the EAP-SIM message obtained by parsing;

The second encapsulation submodule is configured to delete the location information of the access user in the EAP-SIM message obtained by the analysis, and re-encapsulate the deleted EAP-SIM message;

The authentication submodule is configured to send the re-encapsulated EAP-SIM message to the authentication server, so as to complete the EAP-SIM protocol authentication.

Further, the information extraction submodule is specifically configured to extract the address attribute of the attribute field in the EAP-SIM message obtained by parsing, and determine the location information of the access user according to the address attribute;

Correspondingly, the second encapsulation submodule is specifically configured to delete the address attribute in the EAP-SIM message obtained by the parsing, and re-delete the deleted EAP-SIM message according to the standardized EAP-SIM protocol. encapsulation.

Embodiment six

This embodiment provides a communication system, including the wireless access point device and the broadband remote access server according to the embodiment of the present invention, wherein the wireless access point device communicates with the broadband remote access server.

According to the communication system of this embodiment, when the UE accesses the network through the AP device, the AP device provides the location information of the accessing user to the BRAS during the user's EAP-SIM protocol authentication process, so that the BRAS can obtain the accessing user's location information. The location information of the incoming user can be used to realize the extended business service based on the location information of the incoming user.

Finally, it should be noted that: the above embodiments are only used to illustrate the technical solutions of the present invention, rather than limiting them; although the present invention has been described in detail with reference to the foregoing embodiments, those of ordinary skill in the art should understand that: It is still possible to modify the technical solutions described in the foregoing embodiments, or perform equivalent replacements for some or all of the technical features; and these modifications or replacements do not make the essence of the corresponding technical solutions deviate from the technical solutions of the various embodiments of the present invention. scope.

Claims (13)

1. one kind is inserted the user position information sending method, it is characterized in that, comprising:

Wireless access point AP equipment obtains the access user position information;

Said AP equipment is carried on said access user position information in the Extensible Authentication Protocol subscriber identification module EAP-SIM message and is sent to Broadband Remote Access Server BRAS, so that said BRAS obtains said access user position information and accomplishes the EAP-SIM protocol authentication according to said EAP-SIM message.

2. position information transfer method according to claim 1 is characterized in that, said AP equipment is carried on the EAP-SIM message with said access user position information and is sent to BRAS and specifically comprises:

Obtain the EAP-SIM message of the encapsulation of said access user transmission;

EAP-SIM message to said encapsulation is resolved;

In resolving the EAP-SIM message that obtains, add said access user position information;

EAP-SIM message to being added with said access user position information encapsulates again;

The EAP-SIM message of encapsulation again is sent to said BRAS.

3. position information transfer method according to claim 2 is characterized in that, and is said in resolving the EAP-SIM message that obtains, and adds said access user position information and specifically comprises:

The attribute field of the EAP-SIM message that obtains in said parsing adds address properties, and according to said access user position information said address properties is set.

4. one kind is inserted the user position information acquisition methods, it is characterized in that, comprising:

BRAS receives the EAP-SIM message that AP equipment sends, and said EAP-SIM message carries the access user position information;

Said BRAS resolves said EAP-SIM message, obtains said access user position information and accomplishes the EAP-SIM protocol authentication.

5. access user position information acquisition methods according to claim 4 is characterized in that said BRAS resolves said EAP-SIM message, obtains said access user position information and accomplish the EAP-SIM protocol authentication specifically to comprise:

Said BRAS resolves said EAP-SIM message;

From resolve the EAP-SIM message that obtains, obtain said access user position information;

Delete the said access user position information in the EAP-SIM message that said parsing obtains, and the EAP-SIM message after the deletion is encapsulated again;

The EAP-SIM message of encapsulation again is sent to certificate server, to accomplish said EAP-SIM protocol authentication.

6. access user position information acquisition methods according to claim 4 is characterized in that, saidly from the EAP-SIM message that resolve to obtain, obtains said access user position information and specifically comprises:

Extract the address properties of resolving attribute field in the EAP-SIM message that obtains, and confirm said access user position information according to said address properties;

Correspondingly, delete the said access user position information in the EAP-SIM message that said parsing obtains, and the EAP-SIM message after the deletion encapsulated specifically again comprise:

Delete the said address properties in the EAP-SIM message that said parsing obtains, and encapsulate again according to the EAP-SIM message of standardized EAP-SIM agreement after to deletion.

7. a wireless access point device is characterized in that, comprising:

Primary importance information acquisition module is used to obtain the access user position information;

The positional information sending module; Be used for that said access user position information is carried on the EAP-SIM message and be sent to Broadband Remote Access Server BRAS, so that said BRAS obtains said access user position information and accomplishes the EAP-SIM protocol authentication according to said EAP-SIM message.

8. wireless access point device according to claim 7 is characterized in that, said positional information sending module comprises:

The information acquisition submodule is used to obtain the EAP-SIM message of the encapsulation that said access user sends;

First analyzing sub-module is used for the EAP-SIM message of said encapsulation is resolved;

Information is added submodule, is used for adding said access user position information at the EAP-SIM message of resolving acquisition;

The first encapsulation submodule is used for the EAP-SIM message that is added with said access user position information is encapsulated again;

Information is sent submodule, is used for the EAP-SIM message of encapsulation again is sent to said BRAS.

9. wireless access point device according to claim 7; It is characterized in that; Said information is added submodule and specifically is used for the attribute field interpolation address properties at the EAP-SIM message of said parsing acquisition, and according to said access user position information said address properties is set.

10. a Broadband Remote Access Server is characterized in that, comprising:

The positional information receiver module is used to receive the EAP-SIM message that AP equipment sends, and said EAP-SIM message carries the access user position information;

Second place information acquisition module is used to resolve said EAP-SIM message, obtains said access user position information and accomplishes the EAP-SIM protocol authentication.

11. Broadband Remote Access Server according to claim 10 is characterized in that, said second place information acquisition module specifically comprises:

Second analyzing sub-module is used to resolve said EAP-SIM message;

The information extraction submodule is used for obtaining said access user position information from resolving the EAP-SIM message that obtains;

The second encapsulation submodule is used for deleting the said access user position information of the EAP-SIM message that said parsing obtains, and the EAP-SIM message after the deletion is encapsulated again;

Authentication sub module is used for the EAP-SIM message of encapsulation again is sent to certificate server, to accomplish said EAP-SIM protocol authentication.

12. Broadband Remote Access Server according to claim 11; It is characterized in that; Said information extraction submodule specifically is used for extracting the address properties of resolving the EAP-SIM message attribute field that obtains, and confirms said access user position information according to said address properties;

Correspondingly, the said second encapsulation submodule specifically is used for deleting the said address properties of the EAP-SIM message that said parsing obtains, and encapsulates again according to the EAP-SIM message of standardized EAP-SIM agreement after to deletion.

13. communication system; It is characterized in that; Comprise arbitrary described wireless access point device of claim 7-9 and the arbitrary described Broadband Remote Access Server of claim 10-12, wherein said wireless access point device is communicated by letter with said Broadband Remote Access Server.

Images