CN105142097A - Method and system for realizing terminal access - Google Patents

Abstract

The invention discloses a method and system for realizing terminal access, including: in the Internet of Things network, a mobile communication gateway is used as a relay gateway, and further includes: assigning a mobile communication access identifier and authentication to the terminal through the relay gateway code; the terminal performs authentication and data encryption through the assigned access ID and authentication code. The method of the present invention uses the mobile communication gateway as a relay gateway to allocate mobile communication access identifiers and authentication codes for terminals to perform data encryption, and improves the efficiency of Internet of Things data transmission under the premise of ensuring low power consumption and low cost of Internet of Things terminals. Security: authentication is performed through the access identification and authentication code of mobile communication, which reduces the complexity of network deployment.

Description

A method and system for realizing terminal access

technical field

The present invention relates to the technology of Internet of things, especially a method and system for realizing terminal access.

Background technique

Low cost and low power consumption are two advantages of IoT technology, and short-range wireless technology can meet the cost and power consumption requirements of IoT technology. At present, in the Internet of Things network, M2M terminals realize network access through gateways after short-distance wireless connections such as WIFI or Zigbee. In this terminal access method, after the M2M terminal aggregates the data to the gateway, the gateway can obtain the aggregated and transferred plaintext information; in addition, the short-distance wireless technology is an unlicensed frequency band, which has poor security. To ensure data security, user authentication information needs to be set , which increases the cost of network deployment, and more human participation also makes network deployment more complicated.

Contents of the invention

In order to solve the above technical problems, the present invention provides a method and system for realizing terminal access, which can improve network security, reduce network deployment costs and simplify network deployment under the premise of ensuring low cost and low power consumption of the Internet of Things.

In order to achieve the purpose of the present invention, the present invention provides a method for realizing terminal access. In the Internet of Things network, the mobile communication gateway is used as the relay gateway, including:

Assigning an access identifier and an authentication code for mobile communication to the terminal through the relay gateway;

The terminal performs authentication and data encryption through the assigned access ID and authentication code.

Further, before distributing the access identification and the authentication code of the mobile communication to the terminal, the method also includes:

The relay gateway converts the inter-terminal short-distance wireless communication protocol into a mobile communication protocol.

Further, data encryption through the assigned access ID and authentication code includes:

The terminal encrypts data at the network layer through the assigned access ID and authentication code.

Further, the mobile communication gateway is:

The third generation mobile communication technology 3G gateway or the fourth generation mobile communication technology 4G gateway.

On the other hand, the present application also provides a system for realizing terminal access, including: a relay gateway and several terminals; wherein,

The relay gateway is a mobile communication gateway, which is used to assign mobile communication access identifiers and authentication codes to terminals;

The terminal is used to perform authentication and data encryption through the assigned access ID and authentication code.

Further, the relay gateway is also used to convert the short-distance wireless communication protocol between terminals into a mobile communication protocol before allocating mobile communication access identifiers and authentication codes to the terminals.

Further, the terminal is specifically configured to encrypt data at the network layer through the allocated access identifier and authentication code.

Compared with the prior art, the technical solution of the present application includes: in the Internet of Things network, the mobile communication gateway is used as the relay gateway, and further includes: assigning the access identification and authentication code of the mobile communication to the terminal through the relay gateway; The assigned access ID and authentication code are authenticated and data encrypted. The method of the present invention uses the mobile communication gateway as a relay gateway to allocate mobile communication access identifiers and authentication codes for terminals to encrypt data, and improves the efficiency of data transmission in the Internet of Things under the premise of ensuring low power consumption and low cost of Internet of Things terminals. Security: authentication is performed through the access identification and authentication code of mobile communication, which reduces the complexity of network deployment.

Description of drawings

The accompanying drawings described here are used to provide a further understanding of the present invention and constitute a part of the application. The schematic embodiments of the present invention and their descriptions are used to explain the present invention and do not constitute improper limitations to the present invention. In the attached picture:

FIG. 1 is a flowchart of a method for implementing terminal access in the present invention;

FIG. 2 is a structural diagram of a system for realizing terminal access in the present invention;

FIG. 3 is a flow chart of the M2M terminal completing network registration through the relay gateway.

Detailed ways

In order to make the purpose, technical solution and advantages of the present invention more clear, the embodiments of the present invention will be described in detail below in conjunction with the accompanying drawings. It should be noted that, in the case of no conflict, the embodiments in the present application and the features in the embodiments can be combined arbitrarily with each other.

Fig. 1 is the flow chart of the method for realizing terminal access of the present invention, as shown in Fig. 1, in the Internet of things network, take mobile communication gateway as relay gateway, include:

Step 100, assigning an access identifier and an authentication code for mobile communication to the terminal through the relay gateway;

Before distributing the access identification and the authentication code of the mobile communication for the terminal, the method of the present invention also includes:

The relay gateway converts the short-distance wireless communication protocol between terminals into a mobile communication protocol.

It should be noted that converting the short-distance wireless communication protocol between terminals into a mobile communication protocol is a common technical means for those skilled in the art. For example, the home gateway can convert the data reported by the household appliances using the WIFI protocol into a mobile communication protocol and transmit it to the background application server.

Step 101, the terminal performs authentication and data encryption through the assigned access ID and authentication code.

In this step, data encryption through the assigned access ID and authentication code includes:

The terminal encrypts data at the network layer through the assigned access ID and authentication code.

The mobile communication gateway is: a third-generation mobile communication technology (3G) gateway or a fourth-generation mobile communication technology (4G) gateway.

It should be noted that the mobile communication gateway can also be a transitional communication technology gateway between 3G gateways or 4G gateways, or a new gateway developed by evolution, or other communication technologies that meet the data transmission requirements of the Internet of Things gateway.

The method of the present invention uses the mobile communication gateway as a relay gateway to allocate mobile communication access identifiers and authentication codes for terminals to encrypt data, and improves the efficiency of data transmission in the Internet of Things under the premise of ensuring low power consumption and low cost of Internet of Things terminals. Security: authentication is performed through the access identification and authentication code of mobile communication, which reduces the complexity of network deployment.

Fig. 2 is a structural diagram of the system for realizing terminal access in the present invention, as shown in Fig. 2, including: a relay gateway and several terminals; wherein,

The relay gateway is a mobile communication gateway, which is used to assign mobile communication access identifiers and authentication codes to terminals;

The terminal is used to perform authentication and data encryption through the assigned access ID and authentication code.

The terminal is specifically used to encrypt data at the network layer through the assigned access ID and authentication code.

The relay gateway is also used to convert the short-distance wireless communication protocol between terminals into a mobile communication protocol before allocating mobile communication access identifiers and authentication codes to the terminals.

The method of the present invention will be clearly and detailedly described below through specific examples, and the examples are only used to illustrate the present invention, and are not intended to limit the protection scope of the method of the present invention.

Example 1

This embodiment describes the partial implementation of the specific implementation process of the embodiment of the present invention from the paging process, the location update process and the network registration process.

1. Paging process

The MME sends a paging message, and the paging message pages the M2M terminal and carries the information of the relay gateway to which it belongs;

The base station (eNB) receives the paging message sent by the MME for paging the M2M terminal: obtains information about the paging M2M terminal and the relay gateway to which the M2M terminal belongs;

After receiving the paging message sent by the MME, the base station sends a paging message to the relay gateway, and the message carries the information of the M2M terminal.

The relay gateway receives the message of paging the relay gateway sent by the base station, and judges whether the paging message carries the information of the M2M terminal; if so, sends the paging message to the M2M terminal according to the information of the carried M2M terminal; Paging configuration, paging the M2M terminal on the M2M short-distance wireless link.

The M2M terminal monitors the paging message on the short-distance wireless link according to its own paging configuration.

2. Location update process:

The relay gateway sends a location area update request (TAURequest) command, which carries M2M terminal information, indicating that the equipment authentication (TA) of the M2M terminal is updated.

The relay gateway forwards the received TAU Accept command to the M2M terminal.

3. Network registration process

Figure 3 is a flow chart of the M2M terminal completing network registration through the relay gateway, as shown in Figure 3,

Steps 300 to 305 authenticate the connection process. If there is already a radio resource control (RRC) connection between the relay gateway and the eNB, then steps 301 to 305 can be omitted, and use step 306b to send a network access service (NAS) message; otherwise , execute steps 301-305, and use step 306a to send the NAS message;

In step 305, the relay gateway transmits the radio bearer (RB) configuration to the M2M terminal, so that the M2M terminal can use the RB configuration to transmit the NAS message, so that the relay gateway uses the same RB configuration to forward the NAS message of the M2M terminal;

In step 306a, the M2M terminal sends an attachment request (Attach request) and a public data connection request (PDN CONNECTIVITY REQUEST) to the relay gateway.

In step 306b, the RRC connection is established.

In step 306a or 306b, the relay gateway may indicate that the registration process of the M2M terminal is currently being performed;

Step 307, initialize terminal information.

Step 308, the base station sends identity (Identity), authentication (Authentication), and security (Security) confirmation information to the M2M terminal.

The security process performed in step 308 is between the M2M terminal and the network, and the relay gateway will not obtain the key information of the M2M terminal;

Step 309, a request for establishing an identity environment.

Step 310, the base station sends a terminal capability query to the M2M terminal.

Step 311, the M2M terminal feeds back terminal capability information to the base station.

Step 312, the base station sends the terminal capability information indication to the MME.

Step 313, the M2M terminal sends a security mode request (SecurityModeCommand) to the base station.

Step 314, the base station sends a security mode confirmation to the M2M terminal.

Step 315, the base station sends RRC connection reconfiguration to the MME.

Step 316, the M2M terminal sends an RRC connection reconfiguration confirmation to the base station.

Step 317, the base station sends an initialization context setup response (Initialcontextsetupresponse) to the mobility management entity.

Step 318, the M2M terminal sends HTML tag information transmission (including AttachComplete, ActivatedefaultEPSbearercontextaccept) to the base station.

Step 319, the base station sends an uplink (UPLINK) network access service (NAS) transmission to the MME.

It should be noted that after step 309, the eNB needs to perform mapping between the S1 bearer between the eNB and the S-GW, and the data radio bearer (DRB) between the relay gateway and the eNB, and the above S1 bearer and DRB are both It is related to the M2M terminal; since the security process has been enabled after step 314, the subsequent message relay gateway will not be able to read, step 315 can establish an M2M bearer between the M2M terminal and the relay gateway, but the M2M terminal needs to be in step 316 The relevant configuration is sent to the relay gateway, so that the DRB of the M2M terminal is established between the relay gateway and the eNB, and the relay gateway needs to establish the mapping between the M2M bearer and the DRB.

Although the embodiments disclosed in the present invention are as above, the described content is only an embodiment adopted for understanding the present invention, and is not intended to limit the present invention. Anyone skilled in the field of the present invention can make any modifications and changes in the form and details of the implementation without departing from the spirit and scope disclosed by the present invention, but the patent protection scope of the present invention must still be The scope defined by the appended claims shall prevail.

Claims (7)

1. A method for realizing terminal access is characterized in that a mobile communication gateway is used as a relay gateway in an Internet of things network, and comprises the following steps:

distributing an access identifier and an authentication code of mobile communication for the terminal through the relay gateway;

and the terminal performs authentication and data encryption through the distributed access identification and the authentication code.

2. The method of claim 1, wherein before assigning the access identity and the authentication code for the mobile communication to the terminal, the method further comprises:

the relay gateway converts the short-distance wireless communication protocol between the terminals into a mobile communication protocol.

3. The method according to claim 1 or 2, wherein the data encryption by the assigned access identification and authentication code comprises:

and the terminal encrypts data at a network layer through the distributed access identification and the authentication code.

4. The method of claim 1, wherein the mobile communication gateway is:

a third generation mobile communication technology 3G gateway or a fourth generation mobile communication technology 4G gateway.

5. A system for enabling access to a terminal, comprising: a relay gateway and a plurality of terminals; wherein,

the relay gateway is a mobile communication gateway and is used for distributing an access identifier and an authentication code of mobile communication for the terminal;

and the terminal is used for carrying out authentication and data encryption through the distributed access identification and the authentication code.

6. The system of claim 5, wherein the trunking gateway is further configured to convert the inter-terminal short-range wireless communication protocol to the mobile communication protocol before assigning the access identifier and the authentication code of the mobile communication to the terminal.

7. The system according to claim 1 or 2, characterized in that the terminal is specifically configured to encrypt data at the network layer by means of the assigned access identity and authentication code.