WO2007041925A1

WO2007041925A1 - A method for inquiring access network user information

Info

Publication number: WO2007041925A1
Application number: PCT/CN2006/002205
Authority: WO
Inventors: Yong Huang
Original assignee: Huawei Technologies Co., Ltd.
Priority date: 2005-10-12
Filing date: 2006-08-28
Publication date: 2007-04-19
Also published as: CN1949755B; CN1949755A

Abstract

A method for inquiring access network user information, comprises the steps: the user’s service ID (identification) is transferred to the access network at the time of network access authentication or user network parameter configuration, so as to enable the service control layer to inquiry the information associated with the requesting user with the user’s service ID as keyword. The invention enables the service control layer to inquiry the information associated with the accessing user with the service layer user ID as keyword, efficiently overcomes the issue of hostNAT, without utilizing the service control layer to acquire IP address, so that the versatility of the method is improved.

Description

Method for accessing network user information query

Technical field

The present invention relates to the field of network communication technologies, and in particular, to a method for accessing network user information queries. Background of the invention

At present, the rapidly developing next-generation network is getting more and more attention from the industry. The network consists of three logical layers, as shown in Figure 1, which are the data bearer layer, the bearer control layer, and the service control layer.

The data bearer layer is configured to carry a user service data stream;

The bearer control layer is configured to apply control actions to each network element of the data bearer layer, so that the network has manageable and operational features, and the bearer control layer provides a unified access interface to the service control layer to block differences of different networks;

The service control layer is mainly responsible for service-related control, which provides management for various services for the user, and the service control layer stores mutual information of the user's service layer, which is called user service access data;

In the draft standard of TISPAN (Telecommunications and Internet Converged Services and Protocols for Advanced Network Interconnection), the bearer control layer is mainly divided into two systems NASS (Network Access Attachment Subsystem) and RACS (Resource Admission Control Subsystem). );

The NASS is used to store the user's subscription information, and is mainly responsible for access authentication and accounting, address allocation, user network parameter configuration, and client device management of the access user. The NASS stores the relevant subscription information of the user's bearer control layer. Called user network access data;

RACS is mainly responsible for QOS control and management;

In the existing draft of the TISPAN standard, the user (user IP address, address domain) is used as the unique association identifier to associate the service control layer with the bearer control layer user data. The specific process is -

1) TE (terminal equipment) accesses the network, is assigned an IP address, and stores the user's address and the user's network access related information in the NASS;

2) The TE interacts with the AF (application function entity) of the service control layer through the upper layer protocol, and the TE transmits the assigned network IP address to the AF in the upper layer protocol;

3) The AF uses the user IP address and the obtained user's address domain information as the association identifier pair (user IP address, local area), where the address domain is used as a set of IP addresses located in the same administrative domain, and is used by the AF. Determining the area to which the IP address belongs, and the service control layer AF sends a query to the bearer control layer, and carries the association identifier pair in the query;

4) According to the association identifier pair, the bearer control layer queries the user network access data and returns related information to the service control layer through the response message. The service control layer and the bearer control layer can establish a data association with this user. As can be seen from the above description, the current solution has the following disadvantages:

(-), Layer protocol, such as the IP address carried by the SIP (Initial Session Protocol) message, sometimes does not uniquely identify a user, because the TE may use the private network address. In this case, NAT (Network Address Translation) needs to be considered. Crossing problem

There are two situations in which the location of the NAT is different. One is that the NAT is located at the network boundary of the carrier, and the NAT function is implemented by the device of the carrier. The other is that the NAT is located in the network environment of the user, that is, located at the user equipment TE and Between the carrier network entities, such as a CNG (User Gateway), the latter case is called Hosted NAT. At this time, the end user equipment TE uses the private network IP address assigned by the CNG, and is no longer the bearer control layer. IP address assigned by NASS;

In the case of Hosted NAT, the IP address information carried by the user's upper layer protocol is different from the IP address assigned by the NASS. The AF of the service control layer needs to obtain their mapping relationship and perform address translation of the upper information header field.

In the case of Hosted NAT, since the CNG may not be controlled by the operator, this mapping relationship is not available. Therefore, in this case, the IP address can no longer be used as the user data association identifier of the service control layer and the bearer control layer.

(2) This scheme does not deeply consider the availability of information in the application control layer address domain; since the upper layer protocol does not currently have the ability to transmit address domain information, the IP address domain information exists in the bearer control layer, and the application control layer And the bearer control layer is relatively independent.

Summary of the invention

The object of the present invention is to provide a method for accessing a network user information query, and the service identifier of the user is transmitted to the access network when the network is accessed, so that the service control layer can use the service identifier of the user as a key to the connection. Find information about the requesting user in the network.

The object of the invention is achieved by the following technical solutions:

A method for accessing network user information, the service control layer uses the user layer of the user layer as a keyword to interact with the bearer control layer to query related information of the access network user.

The service layer user identifier is an identifier used by the service control layer to perform authentication management on the service used by the access user.

The method includes -

A. The user terminal equipment accesses the network, and when the network access authentication or the user network parameter configuration is performed, the user layer user identity of the user is transmitted to the access network; B. The user terminal device interacts with the service control layer application function entity AF, and transmits the service layer user identifier to the application function entity;

C. The AF sends a query request message carrying a service layer user identifier to the bearer control layer;

D. The bearer control layer obtains service related information according to the service layer user identifier and transmits the information to the AF.

The method for transmitting the service layer user identifier to the access network in the step A includes: when the user applies for the network address through the dynamic host configuration protocol, the DHCP protocol option is used to transmit; or

When the user accesses the network through the peer-to-peer communication protocol PPP and the Ethernet PPP protocol, the PPPOE is transmitted through the IP control protocol IPCP and IPCPv6 extension options; or

When the user authenticates through the EAP authentication, the user layer carries the service layer user identifier by using the extension type or option in response to the request packet of the network. .

When the user implements network address translation NAT by using a client gateway, the step A includes:

A user equipment reports the user ID of the service layer to the user gateway device when applying for the local IP address to the user gateway.

A2. The user gateway device allocates an IP address to the user, and records the service layer user identifier.

A3. The user gateway transmits the service layer user identifier to the access network.

The step D specifically includes:

The bearer control layer uses the service layer user identifier as a keyword to query related information of the access user. The information about the access user includes: a user ID, a user IP address, a user physical logical access line identifier, or user location information.

It can be seen from the technical solution provided by the present invention that the service layer can query the related information of the access user by using the service layer user identifier as a key, effectively overcoming the host NAT problem, and not using the service control layer. Obtaining an IP address improves the versatility of the method.

BRIEF DESCRIPTION OF THE DRAWINGS

Figure 1 is a schematic diagram of three levels of a prior art next generation network;

2 is a flow chart showing the operation of the method of the present invention.

Mode for carrying out the invention

The core idea of the present invention is to provide a method for accessing a network user information query, and the service identifier of the user is transmitted to the access network when the network is accessed, so that the service control layer can use the service identifier of the user as a key to the connection. Enter the network to find information about access users. The present invention provides a method for accessing network user information, and an operation flowchart of an embodiment is shown in FIG. 2. Referring to FIG. 2, the method specifically includes the following steps:

Step 10: The user terminal device TE accesses the network, and when the network access authentication or the user network parameter configuration is performed, the user layer user identity of the user is transmitted to the access network;

The service layer user identifier is: When the user uses various services on the network, the user needs to be authenticated and managed at the service control layer, and an identifier for service authentication and management is required, and the identifier is the service described in the present invention. Layer user identifier, the service layer user identifier is a unique identifier of the user at the service control layer, including but not limited to: an NAI (Network Access Identifier) type, an email address, an FQND (full name domain name), or a SIP URI (SIP Uniform Resource Identifier);

The method for the terminal device to transmit the service layer user identifier to the access network includes:

a) the user is delivered via the DHCP (Dynamic Host Configuration Protocol) protocol option;

When the user applies for the IP address by using the DHCP protocol, or after applying for the address, the user puts the user ID of the service layer into an option of the DHCP and sends it to the corresponding entity of the bearer control layer. The DHCP option can be used by option60, option61, and option82. Wait;

b) The user implements through extended options such as IPCP (IP Control Protocol) and IPCPv6;

When a user accesses the network through PPPOE (PPP over Ethernet) or PPP (Peer-to-Peer Communication Protocol), the service layer user identity is carried in the corresponding extended option in these protocols, and is delivered to the corresponding entity of the bearer control layer; c) the user passes the EAP ( Extensible authentication protocol) protocol extension type implementation;

When the user is used by the network to use the EAP authentication, the network device sends an EAP request (EAP Request) message to the service layer user identifier, and the user carries the service layer user identifier in the response packet, and reports the message to the bearer control layer.

When a user uses a client gateway and implements NAT, the process of reporting the user ID of the service layer includes: 1) The user reports the user ID of the service layer to the user gateway device when applying for the local IP address to the user gateway; Include - When using the DHCP protocol, you can use DHCP request (request) message or DHCP inform (message) message carrying options, options include option 60, option 61, option 82, etc.

For the DHCPv6 protocol, use the renew (re-update), rebind (re-binding), information-request (information request) message carrying options, options include: client id option(l) (customer identification option), user class option(15) (user class information option), verdor_specific information option(17) (vendor-specific information option);

2) The user gateway device allocates an IP address to the user, and records the service layer user identifier; 3) The user gateway transmits the service layer user identifier to the access network, and the transmission process may be performed when the network is accessed or after the network is accessed.

Step 11: The TE interacts with the AF (application function entity) of the service control layer through the upper layer protocol, and transmits the service layer user identification information to the AF.

Step 12: The AF interacts with the NASS through the interface between the service control layer and the NASS in the bearer control layer to query related information of the access user, where the query message carries the service layer user identification information;

Step 13: The NASS uses the received service layer user identifier as a key to search for user network access data that has been authorized by the bearer control layer, including, for example, user ID, user IP address, user physical logical access line identifier, and user. Positioning information, etc.

Step 4: The bearer control layer transmits the found information to the service control layer through the response message, and completes the exchange of user data between the bearer control layer and the service control layer. '

In summary, the present invention uses the service layer user identifier to enable the service control layer to query the related information of the access user by using the user service identifier as a key, effectively overcoming the host NAT problem, and not using the service control layer to obtain an IP address. Improve the versatility of the method.

The above is only a preferred embodiment of the present invention, but the scope of the present invention is not limited thereto, and any person skilled in the art can easily think of changes or within the technical scope disclosed by the present invention. Alternatives are intended to be covered by the scope of the present invention. Therefore, the scope of protection of the present invention should be determined by the scope of the claims.

Claims

Rights request

A method for accessing a network user information query, wherein the service control layer uses the user layer of the user layer as a key to interact with the bearer control layer to query related information of the access network user.

The method for querying access network user information according to claim 1, wherein the service layer user identifier is an identifier used by the service control layer to perform authentication management on a service used by the access user.

The method for accessing a network user information query according to claim 1, wherein the method comprises:

A. The user terminal equipment accesses the network, and when the network access authentication or the user network parameter configuration is performed, the user layer user identity of the user is transmitted to the access network;

B. The user terminal device interacts with the service control layer application function entity AF, and transmits the service layer user identifier to the application function entity;

The method for accessing the network user information query according to claim 3, wherein the method for transmitting the service layer user identifier to the access network in the step A includes:

When the user applies for a network address through the Dynamic Host Configuration Protocol (DHCP), the DHCP protocol option is used to transmit; or,

When the user authenticates through the EAP authentication, the user layer carries the service layer user identifier by using the extension type or option in response to the request packet of the network.

The method for accessing a network user information query according to claim 3, wherein when the user uses a client gateway to implement network address translation NAT, the step A includes:

When the user equipment applies for the local IP address to the user gateway, the user equipment reports the user ID of the service layer to the user gateway device.

The method for accessing the user information of the access network according to claim 3, wherein the step D specifically includes:

The bearer control layer uses the service layer user identifier as a keyword to query related information of the access user.

The method for accessing the user information of the access network according to any one of claims 1 to 6, wherein the information about the access user includes: a user ID, a user IP address, and a physical physical connection of the user. Incoming line identification or user positioning information.