WO2014063554A1

WO2014063554A1 - Method, server, gateway, and system for acquiring mab terminal access position

Info

Publication number: WO2014063554A1
Application number: PCT/CN2013/084379
Authority: WO
Inventors: 周俊超
Original assignee: 中兴通讯股份有限公司
Priority date: 2012-10-24
Filing date: 2013-09-27
Publication date: 2014-05-01
Also published as: CN102932913B; CN102932913A

Abstract

A method for acquiring an MAB terminal access position comprises: an AAA server buffering, in the local, wireless local area network position information of an MAB terminal that is carried in a Wa-interface-based access authentication request message; the AAA server adding, in a Wm-interface-based authentication response, the wireless local area network position information of the MAB terminal that is buffered in the local, and returning the authentication response to an Integrated Service Gateway (ISGW); and the ISGW reporting the wireless local area network position information of the MAB terminal to a core network element. Through the present invention, a network side can obtain the wireless local area network position information accessed by the MAB terminal, so as to provide the basis of access control for the network side. Also disclosed are a wireless local area network access server, an AAA server, an ISGW, and a system for acquiring an MAB terminal access position.

Description

Method, server, gateway and system for acquiring MAB terminal access location

Technical field

The present invention relates to the field of mobile communications technologies, and in particular, to a method for obtaining access locations of multiple access binding terminals MABs, a wireless local area network access server, an AAA server, an integrated service gateway, and a plurality of access bindings. A system in which the terminal MAB accesses the location.

Background technique

Faced with the development of mobile Internet and the long-term coexistence of multiple access, multiple Access and Binding (MAB) technologies have emerged. This technology implements multiple authentication methods for multiple access methods. Incoming bandwidth aggregation and binding enhances user access bandwidth and improves the user's mobile data service experience.

As shown in FIG. 1 , in the existing MAB solution, the authentication, authorization, and accounting server AAA server is applied to the packet data service access of the 3G/4G/wireless local area network, and the user is authenticated based on the Wa port/Wm port. Authorization and billing operations. The home location register HLR is connected to the AAA server and is responsible for storing user subscription information and authentication information. MAB-based terminals can pass 3G

In the Local Area Networks, the WLAN access point AP and the access server access the packet data service network (for example, the Inernet service or the operator's proprietary packet service), wherein the commonly used access servers include: access control AC (Access Controller), Broadband Access Server (BAS) or Broadband Access Server BRAS (Broad Radio Access Server).

The process of accessing the MAB terminal through the 3G/4G access network includes: the MAB terminal accesses the Integrated Service Gateway (ISGW) via the NodeB/eNodeB via the radio network controller (RNC), and is based on the WGW by the ISGW. The interface (the interface between the ISGW and the AAA server) initiates an authentication request to the AAA server. After the authentication is passed, the AAA server responds to the response message to the ISGW, and the ISGW notifies the user to allow access through the 3G/4G access network.

The process of accessing the MAB terminal through the wireless local area network includes: the MAB terminal passes through the wireless local area network The access point AP (Access Point) and the access server (AC/B AS/BRAS) are based on the Wa port (the interface between the access server and the AAA server) to the AAA server for authentication request, and the AAA server responds to the WLAN access after the authentication is passed. The message is allowed to the access server, the user is allowed to access through the wireless local area network, and then the access server accesses the integrated service gateway ISGW (International Service Gateway). The ISGW initiates an authentication request to the AAA server based on the Wm interface protocol. After the authentication is passed, The AAA server responds to the response message to the ISGW, and the ISGW notifies the user via the access server to allow access via the wireless local area network.

The integrated service gateway ISGW is used for terminal access management, and reports the traffic and resource usage of the terminal to the core network. In the MAB architecture, the network element of the core network includes the User Behavior Analysis System (UBAS). And the Policy and Charging Rules Function (PCRF), the ISGW reports the access information and the traffic information of the terminal to the UBAS. The UBAS generates statistics according to the information reported by the ISGW, and provides the report to the operator or other network elements. For example, UBAS sends a statistically good user online information report to the PCRF, and the PCRF formulates corresponding control policies (for example, access control policies, flow control policies, and QoS control policies) to control the user's online behavior.

In the related art, when the MAB terminal accesses the packet service through the 3G/4G access network, the ISGW can obtain the cell location information of the base station accessed by the terminal according to the protocol standard, but when the MAB terminal accesses the packet through the wireless local area network, In the service, the core network in the related technology cannot know which WLAN access point the MAB terminal accesses the network, thereby limiting the core network to balance the network load between different WLAN access points, and also limits the core. The network balances the network load between the WLAN and the 3G/4G access network, which limits the further improvement of network resource utilization.

Summary of the invention

The technical problem to be solved by the present invention is to provide a method for acquiring access positions of multiple access binding terminals MAB, a wireless local area network access server, an AAA server, an integrated service gateway, and a plurality of access binding terminals MAB. In the system of accessing the location, the network side can obtain the location information of the wireless local area network accessed by the MAB terminal, thereby providing a basis for the network side to perform access control. In order to solve the above technical problem, the present invention provides a method for obtaining access positions of multiple access binding terminals, and the method includes: After the authentication, authorization, and accounting server AAA server receives the access port-based access authentication request message sent by the access server in the WLAN, if the authentication based on the port is passed, the AAA server will be carried in the port based on the port. The wireless local area network location information of the multiple access binding MAB terminals in the authentication request message is cached locally;

Receiving, by the AAA server, the MAB terminal forwarded by the integrated service gateway ISGW

After the access authentication request message of the Wm interface, if the Wm interface-based authentication is passed and the wireless local area network location information of the MAB terminal is locally queried, the wireless local area network location information of the MAB terminal is carried in the Wm-based authentication response. Returned to the ISGW;

The ISGW sends the wireless LAN location information of the MAB terminal to the core network element. Preferably, after the ISGW sends the wireless LAN location information of the MAB terminal to the core network element, the core network element formulates an access policy of the MAB terminal in the ISGW according to the wireless local area network location information of the MAB terminal. .

Preferably, the core network element defines an access policy of the MAB terminal in the ISGW according to the wireless local area network location information of the MAB terminal, and the method includes: the core network element calculates the MAB according to the wireless local area network location information of the MAB terminal. The load of the wireless local area network accessed by the terminal; the core network element compares the load of the wireless local area network accessed by the MAB terminal with the load of other access networks under the ISGW, and formulates the MAB terminal under the ISGW. The access policy is used to control the access of the MAB terminal under the ISGW from a small load access network.

Preferably, the other access network comprises any one of the following access networks: a 3G access network, a 4G access network or other wireless local area network other than the wireless local area network accessed by the MAB terminal.

Preferably, the ISGW sends the wireless local area network location information of the MAB terminal to the core network element, including: the ISGW reports the wireless of the MAB terminal to the policy and charging rule function entity PCRF through the user behavior analysis system UB AS LAN location information;

The core network element defines an access policy of the MAB terminal in the ISGW according to the wireless local area network location information of the MAB terminal, and the method includes: the PCRF formulates an access policy of the MAB terminal in the ISGW according to the wireless local area network location information of the MAB terminal. .

Preferably, the wireless local area network location information of the MAB terminal includes: the MAB terminal The MAC address of the WLAN access point that the endpoint requests to access. In order to solve the above technical problem, the present invention also provides a wireless local area network access server, including:

The receiving module is configured to: receive an access request of the plurality of access binding MAB terminals forwarded by the WLAN access point, and enable the reporting module;

The Wa port reporting module is configured to: carry the wireless LAN location information of the MAB terminal in the Wa interface-based access authentication request message and send the information to the authentication, authorization, and accounting server AAA server.

Preferably, the wireless local area network location information of the MAB terminal includes: a MAC address of a wireless local area network access point that the MAB terminal requests to access. In order to solve the above technical problem, the present invention also provides an AAA server, including:

The Wa interface authentication module is configured to: after the authentication, authorization, and accounting server AAA server receives the Wa interface-based access authentication request message sent by the access server in the WLAN, if the authentication based on the Wa interface is passed, the AAA server will carry The wireless local area network location information of the multiple access binding MAB terminals in the Wa interface-based access authentication request message is cached locally;

The Wm interface authentication module is configured to: after receiving the Wm interface-based access authentication request message of the MAB terminal forwarded by the integrated service gateway ISGW, the AAA server passes the authentication based on the Wm interface and locally queries the MAB terminal. The wireless local area network location information is carried, and the wireless local area network location information of the MAB terminal is carried in the Wm port based authentication response and returned to the ISGW.

Preferably, the wireless local area network location information of the MAB terminal includes: a MAC address of a wireless local area network access point that the MAB terminal requests to access. In order to solve the above technical problem, the present invention also provides an integrated service gateway, including:

The Wm interface authentication module is configured to: receive a Wm-based authentication response message of the MAB terminal returned by the AAA server, and enable the reporting module; the authentication response message carries the wireless local area network location information of the MAB terminal;

The upper module is set to: 4 to the core network element of the wireless LAN location of the MAB terminal Information, open the policy receiving module;

The policy receiving module is configured to: receive an access policy of the MAB terminal under the integrated service gateway according to the wireless local area network location information of the MAB terminal, and enable the sending module.

The sending module is configured to: deliver the access policy to the MAB terminal under the integrated service gateway.

Preferably, the wireless local area network location information of the MAB terminal includes: a MAC address of a wireless local area network access point that the MAB terminal requests to access.

Preferably, the other access network includes any one of the following access networks: a 3G access network, a 4G access network, or other wireless local area network other than the wireless local area network accessed by the MAB terminal. In order to solve the above technical problem, the present invention also provides a system for acquiring access locations of multiple access binding terminals, the system comprising: the wireless local area network access server as described above, the AAA server as described above, and the above The integrated services gateway. The method for obtaining the MAB access location of the multiple access binding terminals is provided by the AAA server, and the AAA server obtains the wireless local area network location information of the MAB terminal by using the Wa interface-based authentication process, and the location information is passed through the Wm interface. The authentication process is sent to the ISGW, and the ISGW reports the wireless LAN location information of the MAB terminal to the core network element for the core network element to calculate the load of the wireless local area network accessed by the MAB terminal. The embodiment of the invention further provides a wireless local area network access server, an AAA server, an integrated service gateway, and a system for acquiring access positions of multiple access binding terminals MABs. The network side of the embodiment of the present invention can obtain the location information of the wireless local area network accessed by the MAB terminal, thereby providing a basis for the network side to perform access control. BRIEF abstract

1 is a schematic diagram of a network structure of a MAB architecture in the related art;

2 is a flow chart of a method for obtaining access locations of multiple access binding terminals according to an embodiment of the present invention;

3 is a schematic structural diagram of a wireless local area network access server according to an embodiment of the present invention; FIG. 4 is a schematic structural diagram of an AAA server according to an embodiment of the present invention;

FIG. 5 is a schematic structural diagram of an integrated service gateway according to an embodiment of the present invention. Preferred embodiment of the invention

Embodiments of the present invention will be described in detail below with reference to the accompanying drawings. It should be noted that, in the case of no conflict, the features in the embodiments and the embodiments in the present application may be arbitrarily combined with each other. As shown in FIG. 2, an embodiment of the present invention provides a method for obtaining access locations of multiple access binding terminals, where the method includes:

S10, the authentication, authorization, and accounting server AAA server receives the Wa interface-based access authentication request message sent by the access server in the WLAN, and if the authentication is based on the Wa interface, the AAA server is carried in the Wa-based port. The wireless local area network location information of the multiple access binding MAB terminals in the access authentication request message is cached locally;

S20, after receiving the Wm interface-based access authentication request message of the MAB terminal that is forwarded by the integrated service gateway ISGW, if the AAA server passes the authentication based on the Wm interface and locally queries the wireless local area network location information of the MAB terminal, Transmitting the wireless local area network location information of the MAB terminal to the ISGW according to the Wm interface-based authentication response;

S30. The ISGW sends the wireless LAN location information of the MAB terminal to the core network element. The method further includes the following features:

The wireless local area network location information of the MAB terminal includes: a MAC address of the wireless local area network access point AP that the MAB terminal requests to access.

The ISGW sends a wireless local area network location letter of the MAB terminal to the core network element. After the information, the core network element formulates an access policy of the MAB terminal under the ISGW according to the wireless local area network location information of the MAB terminal. For example, the core network element defines an access policy of the MAB terminal under the ISGW according to information such as the wireless LAN location information, the traffic, the time period, and the load of the MAB terminal.

The core network element formulates the location according to the wireless local area network location information of the MAB terminal.

The access policy of the MAB terminal in the ISGW, including:

The core network element calculates a load of the wireless local area network accessed by the MAB terminal according to the wireless local area network location information of the MAB terminal;

The core network element compares the load of the wireless local area network that the MAB terminal accesses with the load of the other access network under the ISGW, and formulates an access policy of the MAB terminal under the ISGW;

The access policy is used to control the access of the MAB terminal under the ISGW from a small load network.

The other access network under the ISGW includes any one of the following access networks: a 3G access network under the ISGW, a 4G access network under the ISGW, or a MAB in the ISGW. Other wireless LANs outside the wireless LAN that the terminal accesses.

The ISGW sends the wireless LAN location information of the MAB terminal to the core network element, including: the ISGW uses the user behavior analysis system UBAS to send the wireless to the MAB terminal to the policy and charging rule function entity PCRF. LAN location information;

For example, the UBAS can comprehensively analyze and generate a 3G/4G access network and a WLAN network load state analysis by using the data of the wireless LAN location information of the MAB terminal reported by the ISGW, for example: within a specified time period, the 3G network Active user volume, active location, PS service duration per user, PS traffic, network resource load (ie bandwidth occupancy, ISGW CPU/memory occupancy, etc.); Active subscribers of the WLAN network during a specified time period, Active location, PS service duration per user, PS traffic, network resource load (ie bandwidth usage) Situation, CPU/memory occupancy, etc.);

Then, the PCRF formulates a traffic off policy according to the active users of the 3G network or the WLAN network, the bandwidth occupation, the CPU/memory occupancy of the ISGW, the PS traffic, and the active location of the user. For example: If the WLAN network load of a certain location is too high within a specified time period, the policy is to set the user to need to access through 3G or 4G in the time range; when a certain time period is found, 3G of a certain location or If the load on the 4G network is too high, the policy is set to be the user of the location in the period to access the WLAN. For example, the PCRF finds that the number of active users is smaller and the PS service traffic is smaller under an AP in the WLAN network. If the value is small, the policy is set to connect the terminal near the location to the PS network through the AP to circumvent other APs. As shown in FIG. 3, an embodiment of the present invention provides a wireless local area network access server, including: a receiving module, configured to receive an access request of multiple access binding MAB terminals forwarded by a wireless local area network access point, and start reporting Module

The Wa port reporting module is configured to carry the wireless LAN location information of the MAB terminal in the Wa interface-based access authentication request message to the authentication, authorization, and accounting server AAA server. The WLAN access server further includes the following features:

The wireless local area network location information of the MAB terminal includes: a MAC address of a wireless local area network access point that the MAB terminal requests to access.

Among them, commonly used WLAN access servers include: access controller AC (Access Controller), broadband access server BAS (Broad Access Server) or broadband remote access server BRAS (Broad Radio Access Server). As shown in FIG. 4, an embodiment of the present invention further provides an AAA server, including:

The Wa interface authentication module is configured to be used by the authentication, authorization, and accounting server AAA server to receive the Wa interface-based access authentication request message sent by the access server in the WLAN, and if the authentication is based on the Wa interface, the AAA server will carry The wireless local area network location information of the multiple access binding MAB terminals in the access interface request message based on the port is cached locally;

The Wm interface authentication module is configured to: after the AAA server receives the Wm interface-based access authentication request message of the MAB terminal that is forwarded by the integrated service gateway ISGW, If the WLAN server obtains the WLAN location information of the MAB terminal, the wireless LAN location information of the MAB terminal is carried in the Wm-based authentication response and returned to the ISGW. The AAA server further includes the following features:

The wireless local area network location information of the MAB terminal includes: a MAC address of a wireless local area network access point that the MAB terminal requests to access. As shown in FIG. 5, an embodiment of the present invention further provides an integrated service gateway, including:

The Wm interface authentication module is configured to receive a Wm-based authentication response message of the MAB terminal that is returned by the AAA server, and enable the reporting module; the authentication response message carries the wireless local area network location information of the MAB terminal;

The upper module is used to open the policy receiving module to the wireless LAN location information of the MAB terminal on the core network element;

And a policy receiving module, configured to receive an access policy of the MAB terminal in the integrated service gateway, where the core network element is configured according to the wireless local area network location information of the MAB terminal, and enable the sending module;

And a sending module, configured to send the access policy to the MAB terminal under the integrated service gateway. The integrated services gateway also includes the following features:

The access policy of the MAB terminal in the ISGW, including:

The core network element compares the load of the wireless local area network that the MAB terminal accesses with the load of the other access network under the ISGW, and formulates an access policy of the MAB terminal under the ISGW; The access policy is used to control access of the MAB terminal under the ISGW from a small load access network; The other access network includes any one of the following access networks: a 3G access network, a 4G access network, or other wireless local area network other than the wireless local area network accessed by the MAB terminal.

The ISGW sends the wireless local area network location information of the MAB terminal to the core network element, and the ISGW sends the wireless local area network location of the MAB terminal to the policy and charging rule function entity PCRF through the user behavior analysis system UBAS. The core network element defines an access policy of the MAB terminal in the ISGW according to the wireless local area network location information of the MAB terminal, and the method includes: the PCRF determines the connection of the MAB terminal in the ISGW according to the wireless local area network location information of the MAB terminal. Into the strategy.

The embodiment of the present invention further provides a system for controlling access to a network by multiple access binding terminals, and the system includes: a wireless local area network access server, an AAA server, and an integrated service gateway in the foregoing embodiment.

One of ordinary skill in the art will appreciate that all or a portion of the above steps may be accomplished by a program instructing the associated hardware, such as a read-only memory, a magnetic disk, or an optical disk. Optionally, all or part of the steps of the foregoing embodiments may also be implemented by using one or more integrated circuits. Accordingly, each module/unit in the foregoing embodiment may be implemented in the form of hardware, or may use software functions. The form of the module is implemented. The invention is not limited to any specific form of combination of hardware and software.

It is to be understood that the invention may be embodied in other forms and modifications without departing from the spirit and scope of the invention. Industrial Applicability The method for obtaining the MAB access location of multiple access binding terminals is provided by the foregoing embodiment, and the AAA server obtains the wireless local area network location information of the MAB terminal by using the Wa interface-based authentication process, and the location information is based on the location information. The authentication process of the Wm interface is sent to the ISGW, and the ISGW reports the wireless LAN location information of the MAB terminal to the core network element for the core network element to calculate the load of the wireless local area network accessed by the MAB terminal. The foregoing embodiment further provides a wireless local area network access server, an AAA server, an integrated service gateway, and a system for acquiring access positions of multiple access binding terminals MABs. The network side of the foregoing embodiment can obtain the location information of the wireless LAN accessed by the MAB terminal, thereby providing a basis for the network side to perform access control.

Claims

Claim

A method for obtaining multiple access binding terminal access locations, the method comprising: the authentication, authorization, and accounting server AAA server receiving a Wa interface-based access authentication request sent by an access server in a wireless local area network After the message is passed, if the authentication based on the Wa interface is passed, the wireless local area network location information of the multiple access binding MAB terminals that are carried in the Wa interface-based access authentication request message is cached locally;

After receiving the Wm interface-based access authentication request message of the MAB terminal forwarded by the integrated service gateway ISGW, if the AAA server passes the Wm interface-based authentication and locally queries the wireless local area network location information of the MAB terminal, The wireless local area network location information of the MAB terminal is carried in the Wm interface-based authentication response and returned to the ISGW;

The ISGW sends the wireless LAN location information of the MAB terminal to the core network element.

2. The method of claim 1 wherein

After the ISGW sends the wireless LAN location information of the MAB terminal to the core network element, the core network element formulates an access policy of the MAB terminal in the ISGW according to the wireless local area network location information of the MAB terminal.

3. The method of claim 2, wherein

The core network element defines an access policy of the MAB terminal in the ISGW according to the wireless local area network location information of the MAB terminal, including:

4. The method of claim 3, wherein The other access network includes any one of the following access networks: a 3G access network, a 4G access network, or other wireless local area network other than the wireless local area network accessed by the MAB terminal.

5. The method of claim 2, wherein

The ISGW sends the wireless LAN location information of the MAB terminal to the core network element, including: the ISGW passes the user behavior analysis system UBAS to the policy and charging rule function entity PCRF to determine the wireless LAN location of the MAB terminal. Information

6. The method according to claim 1 or 2, wherein

The wireless local area network location information of the MAB terminal includes: a MAC address of the wireless local area network access point that the MAB terminal requests to access.

7. A wireless LAN access server, comprising:

8. The wireless local area network access server according to claim 7, wherein

9. An AAA server, comprising:

The Wa interface authentication module is configured to: after the authentication, authorization, and accounting server AAA server receives the Wa interface-based access authentication request message sent by the access server in the WLAN, if the authentication based on the Wa interface is passed, the AAA server will carry The wireless local area network location information of the multiple access binding MAB terminals in the Wa interface-based access authentication request message is cached locally; The Wm interface authentication module is configured to: after receiving the Wm interface-based access authentication request message of the MAB terminal forwarded by the integrated service gateway ISGW, the AAA server passes the authentication based on the Wm interface and locally queries the MAB terminal. The wireless local area network location information is carried, and the wireless local area network location information of the MAB terminal is carried in the Wm port based authentication response and returned to the ISGW.

10. The AAA server according to claim 9, wherein

11. An integrated services gateway, including:

The Wm interface authentication module is set to: Receive the MAB terminal based on the AAA server.

The authentication response message of the Wm port, the reporting module is enabled; the authentication response message carries the wireless local area network location information of the MAB terminal;

The upper module is set to: to the wireless network location information of the MAB terminal on the core network element, and enable the policy receiving module;

The policy receiving module is configured to: receive an access policy of the MAB terminal under the integrated service gateway according to the wireless local area network location information of the MAB terminal, and enable the sending module;

12. The integrated services gateway of claim 11, wherein

13. The integrated services gateway according to claim 11 or 12, wherein

The core network element calculates the MAB according to the wireless local area network location information of the MAB terminal The load of the wireless LAN accessed by the terminal;

14. The integrated services gateway of claim 13, wherein

The other access network includes any one of the following access networks: a 3G access network, a 4G access network, or other wireless local area networks other than the wireless local area network to which the MAB terminal accesses.

A system for obtaining access locations of a plurality of access binding terminals, the system comprising: the wireless local area network access server according to any one of claims 7-8; and, in claims 9-10 Any of the AAA servers described; and,

The integrated services gateway of any of claims 11-14.