CN1949755B

CN1949755B - Method for inquiring access network user message

Info

Publication number: CN1949755B
Application number: CN2005101127388A
Authority: CN
Inventors: 黄勇
Original assignee: Huawei Technologies Co Ltd
Current assignee: Huawei Technologies Co Ltd
Priority date: 2005-10-12
Filing date: 2005-10-12
Publication date: 2011-04-06
Anticipated expiration: 2025-10-12
Also published as: CN1949755A; WO2007041925A1

Abstract

The invention relates to an access network user information inquiring method in the network communication technical field, transmitting user service identification to access network at the time of network access attestation or user network parameter setting, making service control layer able to use user service identification as keyword to find user related information in the access network. And it can make service control layer able to inquire access user related information by using service layer user identification as keyword, effectively overcoming hostNAT problem and not utilizing service control layer to obtain IP address, improving the universality.

Description

A kind of method of inquiring access network user message

Technical field

The present invention relates to network communications technology field, relate in particular to a kind of method of inquiring access network user message.

Background technology

At present, the next generation network that develops rapidly more and more receives the concern of industry, and this network is made up of three logic aspects, as shown in Figure 1, is respectively Data-carrying layer, bearer control layer, service control layer.

Described Data-carrying layer is used to carry user service data stream;

Described bearer control layer is used for each network element of data bearing bed is applied the control behavior, makes network possess can to manage and can run feature, and bearer control layer provides unified access interface to service control layer simultaneously, the difference of shielding heterogeneous networks;

Described service control layer mainly is responsible for professional relevant control, and it provides the management of various services for the user, and service control layer is preserved the mutual information of user's operation layer, is referred to as customer service and inserts data;

In TISPAN (telecommunications and internet fused business and the agreement that are used for the high-level network interconnection) draft standard, bearer control layer mainly is divided into two NASS of system (subsystem is adhered in network insertion) and RACS (Resource and Admission Control Sub-system);

NASS is used to store user's CAMEL-Subscription-Information, main responsible access user's access authentication accounting, address assignment, user network parameter configuration, client equipment management etc., preserve the relevant CAMEL-Subscription-Information of user's bearer control layer among the NASS, be referred to as user network and insert data;

RACS mainly is responsible for QOS control and management;

In the existing TISPAN standard rough draft, adopt (IP address, address field) to as unique association identification, carry out the related of service control layer and bearer control layer user data, detailed process is:

1) TE (terminal equipment) access network is assigned with the IP address, and user's address, user's network insertion relevant information are stored among the NASS;

2) TE is mutual by the AF of upper-layer protocol and service control layer, and TE passes to AF with the network ip address of distributing in upper-layer protocol;

3) AF uses IP address and the user's that obtained address domain information, as association identification to (IP address, address field), address field wherein is as the set that is positioned at the IP address of same management domain, be used for determining zone under the IP address by AF, service control layer AF sends inquiry to bearer control layer, and it is right to carry this association identification in inquiry;

4) right according to association identification, bearer control layer inquires user network and inserts data and relevant information is returned to service control layer by response message.Service control layer just can be set up about this user's data related with bearer control layer.

From above narration as can be known, there is following shortcoming in this scheme at present:

(1), upper-layer protocol, the IP address of carrying as SIP (initial session protocol) message sometimes can not user of unique identification, reason is that TE might use private net address, at this moment, needs the problem of considering that NAT (network address translation) pass through;

Because the position difference that NAT exists is divided into two kinds of situations: a kind of NAT of being is positioned at the network boundary of operator, finishes the NAT translation function by the equipment of operator; Another kind is that NAT is positioned at the user side network environment, promptly between subscriber equipment TE and carrier network entity, such as a CNG (user gateway), latter event is called as Hosted NAT, at this moment, what end user device TE used is the private network IP address that CNG distributes, and no longer is the NASS IP address allocated of bearer control layer;

Under Hosted NAT situation, the IP address information that user's upper-layer protocol carries is different with the NASS IP address allocated, and the AF of service control layer need obtain their mapping relations, and carries out the address transition of high layer information header field.

Under Hosted NAT situation, because CNG is controlled by operator, this mapping relations are unavailable.So in this case, can not re-use the user data association identification of IP address as service control layer and bearer control layer.

(2), this scheme is not deeply considered the availability at application controls layer address domain information; Because upper-layer protocol does not have the ability of transfer address domain information at present, the IP address domain information is present in bearer control layer, and application controls layer and bearer control layer are relatively independent.

Summary of the invention

In view of above-mentioned existing in prior technology problem, the object of the present invention is to provide a kind of method of inquiring access network user message, user's service identification is passed to access network when the network insertion, make service identification that service control layer can be by the user relevant information as keyword search request user in the access network.

The objective of the invention is to be achieved through the following technical solutions:

A kind of method of inquiring access network user message, service control layer utilizes user's operation layer user ID mutual as keyword and bearer control layer, inquiry access network user's relevant information, described operation layer user ID is that the business that service control layer butt joint access customer uses is carried out the employed sign of authentication management, and described method comprises:

A, subscriber terminal equipment access network when carrying out network access authentication or user network parameter configuration, send user's operation layer user ID itself to access network;

B, subscriber terminal equipment and Application Function AF are mutual, send described operation layer user ID to described AF;

C, described AF send and carry the inquiry request message of described operation layer user ID to bearer control layer;

D, bearer control layer obtain service related information according to described operation layer user ID and send AF to.

The method that sends described operation layer user ID to access network in the described steps A comprises:

The user transmits by the DHCP protocol option by dynamic host configuration protocol DHCP log on address the time; Or,

The user transmits by IP control protocol IPCP scaling option or IPCPv6 scaling option by point to point protocol PPP or Ethernet ppp protocol access network the time; Or,

When the user authenticates by Extensible Authentication Protocol EAP,, utilize expansion type or option to carry described operation layer user ID by the request message of response to network.

When the user used a user side gateway to realize network address translation NAT, described steps A comprised:

A1, subscriber equipment report user gateway equipment with oneself operation layer user ID when user gateway application local ip address;

A2, user gateway equipment are given user's distributing IP address, write down described operation layer user ID simultaneously;

A3, user gateway pass to access network with described operation layer user ID.

Described step D specifically comprises:

Bearer control layer uses described operation layer user ID as keyword, inquires about described access user's relevant information.

Described access user related information comprises: user ID, IP address, user's physical logic line attachment sign or user's locating information.

As seen from the above technical solution provided by the invention, the present invention makes service control layer can inquire about the relevant information that inserts the user by using the operation layer user ID as keyword, effectively overcome the hostNAT problem, and do not utilize service control layer to obtain the IP address, improved the versatility of this method.

Description of drawings

Fig. 1 is three aspect schematic diagrames of prior art next generation network;

Fig. 2 is the method for the invention operational flowchart.

Embodiment

Core concept of the present invention provides a kind of method of inquiring access network user message, user's service identification is passed to access network when the network insertion, make service control layer in access network, search the relevant information that inserts the user as keyword by user's service identification.

The invention provides a kind of method of inquiring access network user message, its operational flowchart specifically comprises the steps: with reference to this method of Fig. 2 as shown in Figure 2

Step 10: subscriber terminal equipment TE access network when carrying out network access authentication or user network parameter configuration, sends user's operation layer user ID itself to access network;

Described operation layer user ID is: the user is on using network during miscellaneous service, need be at service control layer certified and management, need a sign that is used for business authentication and management, described sign is operation layer user ID of the present invention, this operation layer user ID is the unique identification of user at service control layer, it includes but not limited to: a NAI (network access identifier) type, e-mail address, a FQND (full name domain name), a SIP URI (SIP unified resource identifier);

Terminal equipment transport service layer user ID comprises for the method for access network:

A) user transmits by DHCP (DHCP) protocol option;

When the user utilizes DHCP agreement application distributing IP address, or behind applied address, the user puts into the option of DHCP to the operation layer user ID of oneself, is delivered to the bearer control layer corresponding entity, and DHCP option can adopt option60, option61, option82 etc.;

B) user realizes by scaling options such as IPCP (IP control protocol), IPCPv6;

When the user passes through PPPOE (PPP on the Ethernet) or PPP (point to point protocol) access network, carry the operation layer user ID by respective extension option in these agreements, be delivered to the bearer control layer corresponding entity;

C) user realizes by EAP (Extensible Authentication Protocol) protocol extension type;

When the user was used the EAP authentication by network, the network equipment sent EAP request (EAP request) message inquiry facility layer user ID, and the user carries the operation layer user ID in response message, report bearer control layer;

When the user used a user side gateway and realizes NAT, the process of its reporting service layer user ID comprised:

1) user is to user gateway application local ip address the time, and oneself operation layer user ID is reported user gateway equipment; Concrete grammar comprises:

When adopting the DHCP agreement, can utilize DHCP request (request) message or DHCPinform (notice) message to carry option, option comprises option 60, option 61, option 82 etc.;

For the DHCPv6 agreement, utilize renew (heavily upgrading), rebind (heavily binding), information_request (information request) message to carry option, option comprises: client idoption (1) (customer ID option), user class option (15) (user class information option), verdor_specific information option (17) (the peculiar information option of manufacturer);

2) user gateway equipment is given user's distributing IP address, writes down described operation layer user ID simultaneously;

3) user gateway passes to access network with the operation layer user ID, and this transmittance process can be when network insertion, also can be after network insertion.

Step 11:TE is mutual by upper-layer protocol and AF (Application Function), and the operation layer user totem information is passed to AF;

Step 12:AF is mutual by interface and the NASS of service control layer and NASS, and inquiry inserts user's relevant information, carries the operation layer user totem information in the described query messages;

Step 13:NASS uses the described operation layer user ID that receives as keyword, search bearer control layer authorized users network insertion data, comprise as user ID, IP address, user's physical logic line attachment sign, user's locating information etc.;

Step 14: bearer control layer sends the information that finds to service control layer by receiveing the response, and finishes the exchange of bearer control layer and service control layer user data.

In sum, the present invention makes service control layer can insert user's relevant information by user service identification as keyword query by using the operation layer user ID, effectively overcome the hostNAT problem, and do not utilized service control layer to obtain the IP address, improved the versatility of this method.

The above; only for the preferable embodiment of the present invention, but protection scope of the present invention is not limited thereto, and anyly is familiar with those skilled in the art in the technical scope that the present invention discloses; the variation that can expect easily or replacement all should be encompassed within protection scope of the present invention.Therefore, protection scope of the present invention should be as the criterion with the protection range of claim.

Claims

1. the method for an inquiring access network user message, it is characterized in that, service control layer utilizes user's operation layer user ID mutual as keyword and bearer control layer, inquiry access network user's relevant information, described operation layer user ID is that the business that service control layer butt joint access customer uses is carried out the employed sign of authentication management, and described method comprises:

2. the method for a kind of inquiring access network user message as claimed in claim 1 is characterized in that, the method that sends described operation layer user ID to access network in the described steps A comprises:

3. the method for a kind of inquiring access network user message as claimed in claim 1 is characterized in that, when the user used a user side gateway to realize network address translation NAT, described steps A comprised:

A3, user gateway pass to access network with described operation layer user ID.

4. the method for a kind of inquiring access network user message as claimed in claim 1 is characterized in that, described step D specifically comprises:

5. as the method for each described a kind of inquiring access network user message in the claim 1 to 4, it is characterized in that described access user related information comprises: user ID, IP address, user's physical logic line attachment sign or user's locating information.