WO2017129101A1

WO2017129101A1 - Routing control method, apparatus and system

Info

Publication number: WO2017129101A1
Application number: PCT/CN2017/072272
Authority: WO
Inventors: 周星月; 宗在峰
Original assignee: 中兴通讯股份有限公司
Priority date: 2016-01-26
Filing date: 2017-01-23
Publication date: 2017-08-03
Also published as: CN106998552A

Abstract

Provided are a routing control method, apparatus and system. The method comprises: a network-side device receiving first indication information sent by a terminal, the first indication information being used for indicating that the terminal requests establishment of a long term evolution (LTE) network and wireless local area network (WLAN) aggregation (LWA) connection or indicating that the terminal has the capability to support the LWA connection, the LWA connection being a connection of the terminal from a WLAN to a base station in an LTE; the network-side device generating second indication information according to local pre-configuration information of the network-side device or user subscription information, the second indication information being used for indicating allowance or refusal of the LWA connection of the terminal; and the network-side device sending the second indication information to the terminal. The present invention solves the problem that a network does not know whether to allow a UE to be connected to an eNB through the current WLAN, thereby enhancing control of the network over access routing of a terminal.

Description

Route control method, device and system

Technical field

The present invention relates to the field of communications, and in particular to a routing control method, apparatus, and system.

Background technique

With the increasing maturity of Wireless Local Area Networks (WLAN) access technologies and the demand for high-speed wireless access networks, domestic and foreign operators are vigorously developing WLAN services. The Evolved Packet System (EPS) supports interworking with non-3rd generation mobile communication partner program authentication and authorization charging 3GPP networks (e.g. WLAN) through the S2a/S2b/S2c interface. The 3rd Generation Partnership Project (3GPP) network includes a trusted non-3GPP network and a non-trusted non-3GPP network, so the WLAN access network to the 3GPP Evolved Packet Core Network (EPC) It is also divided into a trusted WLAN access network (TWAN) and an untrusted WLAN access network. The trusted WLAN access network can be directly connected to the Packet Data Network Gateway (PDN GW) through the S2a interface; the untrusted WLAN access network must pass the Evolved Packet Data Gateway (ePDG). Connected to the PDN GW, the interface between the ePDG and the PDN GW is S2b. The trusted WLAN and untrusted WLAN access to the EPC network architecture are shown in Figure 1.

The WLAN access EPC architecture in Figure 1 is implemented by TWAN or ePDG. The data flow switching between Long-Term Evolution (LTE) and WLAN requires a large number of core network signaling interactions and long time. Delay, and support for LTE and WLAN for a service is also limited (although a scheme such as Multi-Path Transmission Control Protocol (TCP)) can implement one service at the same time, but it cannot be used according to LTE. Dynamic adjustment of real-time conditions such as network load of WLAN). Based on the above considerations, 3GPP began to study LTE/WLAN tight coupling operation in the Rel-13 phase. As shown in Figure 2, the WLAN access point function is integrated on the eNB, and the data on the air interface through LTE or WLAN is unified by the packet data convergence protocol ( The Packet Data Convergence Protocol (PDCP) layer is processed from the S1-U interface to the core network. The scheme of Figure 2 does not support the WLAN AP access with traditional deployment. Many operators have strong requirements for supporting traditional WLAN APs. Therefore, related vendors have initiated tightly coupled operation tasks that support traditional APs.

FIG. 3 is a structural diagram of a LTE/WLAN Aggregation (LWA) supporting a legacy WLAN access network in the related art. In this architecture, an eNB provides a WLAN to a User Equipment (UE). The information is equivalent to the Internet Protocol Security (IPSec) gateway module. After the UE connects to the traditional WLAN to obtain the local IP address, the UE initiates an IPSec tunnel to the IPSec gateway on the eNB. Thus, the PDCP data packet of the UE is connected to the eNB through the WLAN IPSec tunnel path and then connected to the core network through the S1-U interface.

The LTE/WLAN tightly coupled scenario supports the LWA IPSec scheme of the traditional WLAN access. The eNB does not allow the UE to access the current WLAN-related user sign. When the UE performs the WLAN access authentication, the network does not know whether to allow the UE to connect to the eNB through the current WLAN, or whether the UE can access the EPC through the S2a or S2b mode, and the network lacks control of the UE access route.

In response to the above technical problems, no effective solution has been proposed yet.

Summary of the invention

The present invention provides a route control method, apparatus and system to at least solve the problem in the related art that the network does not know whether to allow the UE to connect to the eNB through the current WLAN.

According to an aspect of the embodiments of the present invention, a routing control method is provided, including: a network side device receiving first indication information sent by a terminal, where the first indication information is used to indicate that the terminal requests to establish a long term evolution LTE network and wireless The local area network WLAN is tightly coupled to the LWA connection or indicates that the terminal has the capability of supporting the LWA connection; wherein the LWA connection is the connection of the terminal to the LTE base station through the WLAN access network; the network side device according to the network side device local pre-configuration information or the user subscription information Generating second indication information, where the second indication information is used to indicate that the terminal is allowed or denied to perform an LWA connection; and the network side device sends the second indication information to the terminal.

In the embodiment of the present invention, the local pre-configuration information is pre-configured by the operator or the network equipment vendor on the network side device; the user subscription information is the network side device from the home subscriber server (HSS). The obtained subscription information; wherein, when the local pre-configuration information or the user subscription information is to allow the terminal to perform the LWA connection, the second indication information is indication information that allows the terminal to perform the LWA connection; the local pre-configuration information or the user subscription information is When the terminal is not allowed to perform the LWA connection, the second indication information is indication information for denying the terminal to perform the LWA connection.

In the embodiment of the present invention, in the case that the local pre-configuration information or the user subscription information is to allow the terminal to perform the LWA connection, the method further includes: the network side device sets the address information of the LWA security gateway and/or the local internet protocol IP of the terminal. The address is sent to the terminal.

In the embodiment of the present invention, the method is applied to the terminal for performing WLAN access authentication and authorization in the case that the network side device is a 3GPP mobile communication partner plan 3GPP authentication and authorization (AAA) server. in the process of.

In the embodiment of the present invention, when the network side device is a 3GPP AAA server, the network side device receiving the first indication information sent by the terminal includes: the network side device receiving the extensible identity verification protocol EAP response message sent by the terminal or enhancing The type authentication and key agreement mechanism challenges the AKA'-Challenge message to receive the first indication information.

In the embodiment of the present invention, when the network side device is the base station, the network side device generates the second indication information according to the user subscription information, and the network side device receives the mobile management entity MME according to the user subscription information and/or the location information of the terminal. The second indication message sent.

According to another aspect of the present invention, a routing control method is provided, including: a terminal sending first indication information to a network side device, where the first indication information is used to indicate that the terminal requests to establish a long term evolution LTE network And none The line local area network WLAN is tightly coupled to the LWA connection or indicates that the terminal has the capability of supporting the LWA connection; wherein the LWA connection is a connection of the terminal to the LTE base station through the WLAN access network; the terminal receives the second indication information sent by the network side device; The second indication information is generated by the network side device according to the network side device local pre-configuration information or the user subscription information, to indicate that the terminal is allowed or denied to perform the LWA connection.

In the embodiment of the present invention, the local pre-configuration information is information pre-configured by the operator or the network equipment vendor on the network side device; the user subscription information is the subscription information acquired by the network side device from the home subscriber server HSS; In the case that the local pre-configuration information or the user subscription information is to allow the terminal to perform the LWA connection, the second indication information is the indication information that allows the terminal to perform the LWA connection; the local pre-configuration information or the user subscription information is not allowed to perform the LWA connection by the terminal. The second indication information is indication information that denies the terminal to perform an LWA connection.

In the embodiment of the present invention, in the case that the local pre-configuration information or the user subscription information is to allow the terminal to perform the LWA connection, the method further includes: the terminal receiving the address information of the LWA security gateway sent by the network side device and/or the locality of the terminal. Internet Protocol IP address.

In the embodiment of the present invention, in the case that the network side device is the third generation mobile communication partner plan authentication and authorization charging 3GPP AAA server, the foregoing method is applied to the process in which the terminal performs the WLAN access authentication and authorization.

In the embodiment of the present invention, when the network side device is a 3GPP AAA server, the terminal sends the first indication information to the network side device, where the terminal sends an Extensible Authentication Protocol (EAP) to the network side device. The first indication information is sent by a response message or an Authentication and Key Agreement Protocol (Challenge, AKA-Challenge) message.

According to another aspect of the present invention, a routing control apparatus is provided, where the apparatus is applied to a network side device, and includes: a receiving module, configured to receive first indication information sent by the terminal; wherein the first indication information is used by Instructing the terminal to request to establish a long-term evolution LTE network and a wireless local area network WLAN tightly coupled LWA connection or to indicate that the terminal has the capability of supporting an LWA connection; wherein the LWA connection is a connection of the terminal to the LTE base station through the WLAN access network; the generating module is set to The second indication information is generated according to the network side device local pre-configuration information or the user subscription information, where the second indication information is used to indicate that the terminal is allowed or denied to perform an LWA connection, and the sending module is configured to send the second indication information to the terminal.

In the embodiment of the present invention, the sending module is further configured to send the address information of the LWA security gateway and/or the local internet protocol IP address of the terminal in the case that the local pre-configuration information or the user subscription information is to allow the terminal to perform the LWA connection. Give the terminal.

According to another aspect of the present invention, a routing control apparatus is provided, where the apparatus is applied to a terminal, including: The sending module is configured to send the first indication information to the network side device, where the first indication information is used to indicate that the terminal requests to establish a long term evolution LTE network and a wireless local area network WLAN tightly coupled LWA connection or to indicate that the terminal has the capability of supporting the LWA connection; The LWA connection is a connection of the terminal to the LTE base station through the WLAN access network, and the receiving module is configured to receive the second indication information sent by the network side device, where the second indication information is that the network side device is locally pre-configured according to the network side device. The configuration information or the user subscription information is generated to indicate that the terminal is allowed or denied to perform an LWA connection.

In the embodiment of the present invention, the receiving module is further configured to receive the address information of the LWA security gateway sent by the network side device and/or the terminal when the local pre-configuration information or the user subscription information is to allow the terminal to perform the LWA connection. Local internet protocol IP address.

According to another aspect of the present invention, a routing control system is provided, including: a terminal, a wireless local area network WLAN access network device, a third generation mobile communication partner plan authentication and authorization charging 3GPP AAA server, and a home user server HSS, The terminal is configured to send a scalable authentication protocol EPA response message or an enhanced authentication and key agreement mechanism to the 3GPP AAA server through the WLAN access network device to challenge the AKA'-Challenge message to establish a long-term evolution LTE network and a wireless local area network WLAN tightly coupled LWA Connecting or instructing the terminal to have the capability of supporting the LWA connection; wherein the LWA connection is a connection of the terminal to the LTE base station through the WLAN access network; the 3GPP AAA server is configured to acquire the user subscription information of the terminal from the HSS; wherein the user subscription information includes permission Or rejecting the terminal to perform the LWA connection; and in the case that the user subscription information is to allow the terminal to perform the LWA connection, the WLAN access network device transmits the indication information for allowing the terminal to perform the LWA connection to the terminal; and the user subscription information is the rejected terminal for the LWA. In the case of a connection, the device accessing the network through the WLAN will refuse The indication information that the terminal performs the LWA connection is sent to the terminal.

According to another aspect of the present invention, a routing control system is provided, including: a terminal, a mobility management entity MME, and a base station; the MME is configured to acquire user subscription information of the terminal from the home subscriber server HSS, and according to the user subscription information or The terminal location information provides the base station with indication information that allows or denies the terminal to perform the LWA connection; wherein, in the case that the user subscription information is to allow the terminal to perform the LWA connection, the indication information is information indicating that the terminal is allowed to perform the LWA connection; In the case that the terminal is denied the LWA connection, the indication information is information indicating that the terminal is denied to perform the LWA connection; wherein the LWA connection is a connection of the terminal to the long-term evolution LTE network base station through the WLAN access network; the base station will indicate the information Send to the terminal.

With the embodiment of the present invention, the network side device is used to generate the indication information for instructing or denying the terminal to perform the LWA connection, so that the network can know whether to allow the terminal to perform the LWA connection, thereby solving the problem that the network does not know whether to allow the UE to connect through the current WLAN. The problem of the eNB enhances the control of the network access route to the terminal.

DRAWINGS

The drawings described herein are intended to provide a further understanding of the invention, and are intended to be a part of the invention. In the drawing:

1 is an architectural diagram of a trusted WLAN and an untrusted WLAN accessing to an EPC network in the related art;

2 is a structural diagram of a base station in LTE in LTE/WLAN Tightly Coupled Operation (LWA) in the related art;

3 is a structural diagram of a related art LTE/WLAN Tightly Coupled Operation (LWA) supporting a legacy WLAN access network;

4 is a flowchart 1 of a routing control method according to an embodiment of the present invention;

FIG. 5 is a second flowchart of a route control method according to an embodiment of the present invention; FIG.

6 is a flowchart of a route control method according to Embodiment 1 of the present invention;

7 is a flowchart of a route control method according to Embodiment 2 of the present invention;

8 is a flowchart of a route control method according to Embodiment 3 of the present invention;

9 is a flowchart of a route control method according to Embodiment 4 of the present invention;

FIG. 10 is a structural block diagram 1 of a routing control apparatus according to an embodiment of the present invention; FIG.

11 is a structural block diagram 2 of a routing control apparatus according to an embodiment of the present invention;

12 is a structural block diagram 1 of a routing control system according to an embodiment of the present invention;

13 is a structural block diagram 2 of a routing control system according to an embodiment of the present invention;

FIG. 14 is a structural diagram of connecting from a WLAN access network to an eNB according to an embodiment of the present invention.

detailed description

The invention will be described in detail below with reference to the drawings in conjunction with the embodiments. It should be noted that the embodiments in the present application and the features in the embodiments may be combined with each other without conflict.

It is to be understood that the terms "first", "second" and the like in the specification and claims of the present invention are used to distinguish similar objects, and are not necessarily used to describe a particular order or order.

A routing control method is provided in this embodiment. FIG. 4 is a flowchart 1 of a routing control method according to an embodiment of the present invention. As shown in FIG. 4, the process includes the following steps:

Step S402: The network side device receives the first indication information sent by the terminal, where the first indication information is used to indicate that the terminal requests to establish a long-term evolution LTE network and a wireless local area network WLAN tightly coupled LWA connection or indicate that the terminal has the capability of supporting the LWA connection. Wherein the LWA connection is a connection of the terminal to the LTE base station through the WLAN access network;

Step S404, the network side device generates the second indication information according to the network side device local pre-configuration information or the user subscription information, where the second indication information is used to indicate that the terminal is allowed or denied to perform the LWA connection;

Step S406: The network side device sends the second indication information to the terminal.

It should be noted that the foregoing local pre-configuration information is information pre-configured by the operator or the network equipment vendor on the network side device; the user subscription information is the subscription information acquired by the network side device from the home subscriber server HSS; In the case that the configuration information or the user subscription information is to allow the terminal to perform the LWA connection, the second indication information is the indication information for allowing the terminal to perform the LWA connection; if the local pre-configuration information or the user subscription information is not allowing the terminal to perform the LWA connection, The second indication information is indication information that denies the terminal to perform an LWA connection. It should be noted that the foregoing local pre-configuration information may be set by the network side device when it is shipped from the factory, or may be set by the operator, but is not limited thereto.

Through the above steps, the network side device generates indication information for indicating whether to allow or deny the terminal to perform the LWA connection, so that the network can know whether to allow the terminal to perform the LWA connection, thereby solving the problem that the network does not know whether to allow the UE to connect to the eNB through the current WLAN. The problem is to enhance the control of the network to the terminal access route.

It should be noted that, when the network can know whether to allow the UE to connect to the eNB through the current WLAN, since the terminal has the capability of connecting to the eNB through the current WLAN, the terminal can connect to the eNB through the current WLAN, and thus can connect through the LWA connection. To the Evolved Packet Core Network EPC.

In an embodiment of the present invention, in the case that the local pre-configuration information or the user subscription information is to allow the terminal to perform the LWA connection, the method may further include: the network side device, the address information of the LWA security gateway and/or the locality of the terminal. The internet protocol IP address is sent to the terminal.

It should be noted that the foregoing LWA security gateway may be an IPSec gateway, but is not limited thereto. In the case that the LWA security gateway is an IPSec gateway, an IPSec tunnel establishment process may be initiated to the base station according to the address of the IPSec gateway, and an LWA connection is established.

It should be noted that the network side device may include at least one of the following: a 3GPP AAA server server and a base station.

In the case that the network side device is a 3GPP AAA server, the foregoing method may be applied to a process in which the terminal performs WLAN access authentication and authorization. Before the foregoing step S402, the method may further include: the network side device sends a message including the trust identifier of the WLAM to the terminal; wherein the trust identifier is used to indicate whether the WLAN is a trusted WLAN network or an untrusted WLAN network. The message containing the trust identifier of the WLAM may be an AKA'-Challenge message, but is not limited thereto. The foregoing step S402 can be implemented in the following manner: the network side device receives the first indication information by receiving an EAP response message or an AKA'-Challenge message sent by the terminal. The network side device can transmit the address information of the LWA security gateway to the terminal through an AKA'-notification (AKA'-notification) message.

In the case that the network side device is a base station, the method may further include: the network side device providing the terminal with a trust identifier of the WLAN; wherein the trust identifier is used to indicate whether the WLAN is a trusted WLAN network or an untrusted WLAN network. The generating, by the network side device, the second indication information according to the user subscription information of the terminal acquired by the home subscriber server HSS may include: the network side device receiving the second indication information that is sent by the mobility management entity MME according to the user subscription information and/or the location information of the terminal.

In this embodiment, a route control method is provided, and FIG. 5 is a flow of a route control method according to an embodiment of the present invention. As shown in Figure 5, the process includes the following steps:

Step S502: The terminal sends the first indication information to the network side device, where the first indication information is used to indicate that the terminal requests to establish a long-term evolution LTE network and a wireless local area network WLAN tightly coupled LWA connection or indicate that the terminal has an LWA connection. Capability; wherein the LWA connection is a connection of the terminal to the LTE base station through the WLAN access network;

Step S504: The terminal receives the second indication information sent by the network side device, where the second indication information is generated by the network side device according to the network side device local pre-configuration information or the user subscription information, to indicate that the terminal is allowed or denied to perform the LWA connection.

In the above steps, the network side device is used to generate the indication information for instructing or denying the terminal to perform the LWA connection, so that the network can know whether to allow the terminal to perform the LWA connection, thereby solving the problem that the network does not know whether to allow the UE to connect to the eNB through the current WLAN. The problem is to enhance the control of the network to the terminal access route.

In an embodiment of the present invention, in the case that the local pre-configuration information or the user subscription information is to allow the terminal to perform the LWA connection, the method further includes: the terminal receiving the address information and/or the terminal of the LWA security gateway sent by the network side device. Local internet protocol IP address.

In the case that the network side device is a 3GPP AAA server, the foregoing method is applied to a process in which the terminal performs WLAN access authentication and authorization. Before the step S502, the method further includes: the terminal receiving the trust identifier of the WLAM sent by the network side device; wherein the trust identifier is used to indicate whether the WLAN is a trusted WLAN network or a non-trusted WLAN network. The message containing the trust identifier of the WLAM may be an AKA'-Challenge message, but is not limited thereto. The foregoing step S502 can be implemented in the following manner: the terminal sends the first indication information by sending an EAP response message or an AKA'-Challenge message to the network side device. Moreover, the terminal can receive the address information of the LWA security gateway sent by the network side device by using the AKA'-notification message.

In the case that the network side device is a base station, the method may further include: the terminal receiving the trust identifier of the WLAN provided by the network side device; wherein the trust identifier is used to indicate whether the WLAN is a trusted WLAN network or an untrusted WLAN network.

For a better understanding of the invention, the invention is further explained in conjunction with the preferred embodiments.

Example 1

The UE supports the LTE WLAN tightly coupled UE to discover the WLAN access network, the UE performs the WLAN access authentication and authorization process, the UE sends a request to the network or supports the LWA connection indication information, and the network permits the UE to perform the LWA connection according to the UE user subscription information. And provide the UE with the IPSec gateway address of the LWA connection. The flow chart is shown in Figure 6. The specific implementation steps are as follows:

Step 601: The user equipment UE and the WLAN access network establish an IEEE 802.11-based connection.

Steps 602-603, the WLAN access network and the UE exchange an EAP Identity message, and perform identity authentication access configuration information interaction processing;

Steps 604-607, the WLAN access network sends a Diameter authentication authorization request message to the 3GPP AAA server server, and the 3GPP AAA server sends an EAP request (Request)/AKA'-Challenge to the UE, AKA' after acquiring the authentication vector from the HSS. The -Chllenge message may include a trust identifier of the WLAN network, indicated as a trusted WLAN network or an untrusted WLAN network;

Steps 608-610, the UE sends an EAP Reply/AKA'-Challenge message to the 3GPP AAA server to request the LWA connection or instructs the UE to support the LWA connection; the 3GPP AAA server registers with the HSS to obtain the user user subscription information, and the 3GPP AAA server signs the subscription according to the user. The information content or the local pre-configuration information determines that the UE can make an LWA connection from the current WLAN access network.

Steps 611-612, the 3GPP AAA server will allow the UE to perform the indication information of the LWA connection, and may also provide the address information of the LWA IPSec gateway to the UE, and send the information to the UE through the AKA'-notification message.

Steps 613-618, the UE completes the subsequent authentication and authorization process, and the authentication and authorization is successful. The WLAN allocates a local IP address to the UE through DHCP or other network configuration protocols. The UE initiates an IPSec tunnel establishment process to the LWA IPSec gateway address provided by the network, and establishes an LWA connection.

Example 2

A UE that supports LTE WLAN tight coupling has established a connection from the 3GPP access and acquires information about the WLAN and the IPSec gateway from the eNB. The UE discovers the WLAN access network, the process of the UE performing the WLAN access authentication and authorization, the request sent by the UE to the network or the LWA connection indication information, and the network rejects the UE LWA connection request according to the UE user subscription information. The flow chart is shown in Figure 7. The specific implementation steps are as follows:

Step 701: The UE accesses the network from the 3GPP, and establishes an RRC connection with the eNB. The eNB provides the WLAN and the IPSec gateway address and other information to the UE through the RRC message.

Step 702: The user equipment UE and the WLAN access network establish an IEEE 802.11-based connection.

Steps 703-704, the WLAN access network and the UE exchange EAP Identity messages, and perform identity authentication access configuration information interaction processing;

Steps 705-708, the WLAN access network sends a Diameter authentication authorization request message to the 3GPP AAA server server, and the 3GPP AAA server sends an EAP Request/AKA'-Challenge to the UE after obtaining the authentication vector from the HSS, and the AKA'-Chllenge message may include a trust identifier of the WLAN network, indicated as a trusted WLAN network or an untrusted WLAN network;

Steps 709-711, the UE sends an EAP Response/AKA'-Challenge message to the 3GPP AAA server to request an LWA connection or instructs the UE to support the LWA connection; the 3GPP AAA server registers with the HSS to obtain user user subscription information, and the 3GPP AAA server server according to the user subscription information content Or the local pre-configuration information, determining that the UE prohibits the LWA connection from the current WLAN access network;

In steps 712-713, the 3GPP AAA server sends the indication information that the UE performs the LWA connection to the UE through the AKA'-notification message.

In steps 714-717, the UE completes the subsequent authentication process, and the EAP authentication fails.

Example 3

A UE that supports LTE WLAN tight coupling has established a connection from the 3GPP access and a WLAN from the eNB. The UE discovers the WLAN access network, the process of the UE performing the authentication and authorization of the WLAN access, the request sent by the UE to the network, or the LWA connection indication information, and the network grants the UE the LWA connection according to the user subscription information of the UE, and provides the local IP to the UE. Address and IPSec gateway address of the LWA connection. The flow chart is shown in Figure 8. The specific implementation steps are as follows:

Step 801: The UE accesses the network from the 3GPP, and establishes an RRC connection with the eNB. The eNB provides the UE with the information of the WLAN access network through the RRC message.

Step 802, the user equipment UE and the WLAN establish an IEEE 802.11-based connection;

Steps 803 to 804, the WLAN access network and the UE exchange EAP Identity messages, and perform identity authentication access configuration information interaction processing;

Steps 805-808, the WLAN access network sends a Diameter authentication authorization request message to the 3GPP AAA server server, and the 3GPP AAA server sends an EAP Request/AKA'-Challenge to the UE after obtaining the authentication vector from the HSS, and the AKA'-Chllenge message may include a trust identifier of the WLAN network, indicated as a trusted WLAN network or an untrusted WLAN network;

Steps 809-811, the UE sends an EAP Response/AKA'-Challenge message to the 3GPP AAA server to request the LWA connection or instructs the UE to support the LWA connection; the 3GPP AAA server registers with the HSS to obtain the user subscription information, and the 3GPP AAA server according to the user subscription information content or local Pre-configuration information, determining that the UE can proceed from the current WLAN access network LWA connection.

Steps 812-813, the 3GPP AAA server will allow the UE to perform the indication information of the LWA connection, and may also provide the UE with the address information of the LWA IPSec gateway and/or the local IP address of the UE, and send the message to the UE through the AKA'-notification message.

Steps 814-818: The UE completes the subsequent authentication and authorization process, and the authentication and authorization is successful. The UE initiates an IPSec tunnel establishment process to the LWA IPSec gateway address provided by the network, and establishes an LWA connection.

Example 4

The LTE WLAN tightly coupled UE is attached to the 3GPP access, and the MME has the UE user subscription information acquired from the HSS. The eNB provides the LWA connection information for the UE according to the UE user subscription information and the local configuration. The flow chart is shown in Figure 9. The specific implementation steps are as follows:

Step 901: The UE attaches from the 3GPP access, and the MME acquires the UE user subscription information from the HSS.

Step 902: The eNB and the MME exchange an S1-AP message, and the eNB reports the UE LWA capability to the MME, and the MME provides the UE with the UE according to the UE subscription information and/or the UE location information (such as the eNB cell identifier) and/or the local pre-configuration information. Whether to allow the execution of LWA instructions;

Step 903: The eNB sends an indication to the UE whether to permit the UE to perform the LWA connection according to the information obtained in step 902. If the UE is permitted to perform the LWA connection, the information provided by the eNB includes but is not limited to the identifier of the WLAN access network and/or the LWA on the eNB. Address information of a security gateway (such as an IPSec gateway);

Through the description of the above embodiments, those skilled in the art can clearly understand that the method according to the above embodiment can be implemented by means of software plus a necessary general hardware platform, and of course, by hardware, but in many cases, the former is A better implementation. Based on such understanding, the technical solution of the present invention, which is essential or contributes to the prior art, may be embodied in the form of a software product stored in a storage medium (such as ROM/RAM, disk, The optical disc includes a number of instructions for causing a terminal device (which may be a cell phone, a computer, a server, or a network device, etc.) to perform the methods described in various embodiments of the present invention.

In the embodiment, a routing control device is also provided, which is used to implement the foregoing embodiments and preferred embodiments, and has not been described again. As used below, the term "module" may implement a combination of software and/or hardware of a predetermined function. Although the apparatus described in the following embodiments is preferably implemented in software, hardware, or a combination of software and hardware, is also possible and contemplated.

FIG. 10 is a structural block diagram of a routing control apparatus according to an embodiment of the present invention. The apparatus is applied to a network side device. As shown in FIG. 10, the apparatus includes:

The receiving module 1000 is configured to receive first indication information sent by the terminal, where the first indication information is used to indicate that the terminal requests to establish a long-term evolution LTE network and a wireless local area network WLAN tightly coupled LWA connection or indicate that the terminal has the capability of supporting an LWA connection. Wherein the LWA connection is a connection of the terminal to the LTE base station through the WLAN access network;

The generating module 1002 is connected to the receiving module 1000, and is configured to generate the second indication information according to the network side device local pre-configuration information or the user subscription information, where the second indication information is used to indicate that the terminal is allowed or denied to perform the LWA connection;

The sending module 1004 is connected to the generating module 1002 and configured to send the second indication information to the terminal.

Through the foregoing device, the generating module 1002 is used to generate the indication information that is set to indicate that the terminal is allowed to perform the LWA connection, so that the network side device can know whether to allow the terminal to perform the LWA connection, thereby solving the problem that the network does not know whether to allow the UE to connect through the current WLAN. The problem of the eNB enhances the control of the network access route to the terminal.

In an embodiment of the present invention, the sending module 1004 is further configured to: if the local pre-configuration information or the user subscription information is to allow the terminal to perform an LWA connection, the address information of the LWA security gateway and/or the local Internet of the terminal. The protocol IP address is sent to the terminal.

It should be noted that the LWA connection is an LTE/WLAN tight coupling operation, and specifically, the terminal may be connected to the base station through the current WLAN, but is not limited thereto. The LWA security gateway may be an IPSec gateway, but is not limited thereto. In the case that the LWA security gateway is an IPSec gateway, the terminal may initiate an IPSec tunnel establishment process to the base station according to the address of the IPSec gateway, and establish an LWA connection.

It should be noted that the network side device may be a 3GPP AAA server or a base station, but is not limited thereto.

In the case that the network side device is a 3GPP AAA server, the foregoing apparatus may be applied to a process in which the terminal performs WLAN access authentication and authorization.

In the embodiment of the present invention, another routing control device is provided, which is applied to a terminal. FIG. 11 is a structural block diagram 2 of a routing control device according to an embodiment of the present invention. The device is applied to a network side device, as shown in FIG. Show that the device includes:

The sending module 1100 is configured to send the first indication information to the network side device, where the first indication information is used to indicate that the terminal requests to establish a Long Term Evolution (LTE) network and a wireless local area network WLAN tightly coupled LWA connection or to indicate that the terminal has an LWA connection. Capability; wherein the LWA connection is a connection of the terminal to the LTE base station through the WLAN access network;

The receiving module 1102 is connected to the sending module 1100, and is configured to receive the second indication information sent by the network side device. The second indication information is used by the network side device according to the network side device local pre-configuration information or the user subscription information. Indicates to allow or deny the terminal to make an LWA connection.

The receiving device 1102 is configured to receive the second indication information sent by the network side device, where the second indication information is generated by the network side device according to the preset policy, to indicate that the terminal is allowed or denied to perform the LWA connection, so that the network side device is configured. It can be known whether the terminal is allowed to perform the LWA connection, thereby solving the problem that the network does not know whether to allow the UE to connect to the eNB through the current WLAN, and enhances the control of the network access route to the terminal.

In an embodiment of the present invention, the receiving module 1102 is further configured to receive the address information of the LWA security gateway sent by the network side device, if the local pre-configuration information or the user subscription information is to allow the terminal to perform the LWA connection. Or the local internet protocol IP address of the terminal.

In the embodiment of the present invention, a routing control system is provided. FIG. 12 is a structural block diagram of a routing control system according to an embodiment of the present invention. As shown in FIG. 12, the method includes: a terminal 1202, a WLAN access network of a wireless local area network. Device 1204, 3GPP AAA server 1206, home subscriber server HSS 1208;

The terminal 1202 is configured to send an EPA response message or an AKA '-Challenge message to the 3GPP AAA server 1206 through the WLAN access network device 1204 to request to establish a Long Term Evolution (LTE) network and a WLAN tightly coupled LWA connection or to indicate that the terminal has the capability to support the LWA connection. Wherein the LWA connection is a connection of the terminal from the WLAN to the base station in the LTE; the 3GPP AAA server 1206 is configured to acquire the user subscription information of the terminal from the HSS 88; wherein the user subscription information includes allowing or denying the terminal to perform the LWA connection; If the information is to allow the terminal to perform the LWA connection, the WLAN access network device 1204 sends the indication information that allows the terminal to perform the LWA connection to the terminal; and when the user subscription information is the rejected terminal for the LWA connection, the WLAN access network is used. The device sends an indication that the terminal refuses to perform the LWA connection to the terminal.

Through the above system, the 3GPP AAA server 1206 is used to acquire the user subscription information of the terminal from the HSS 1208, and send the indication information for allowing the terminal to perform the LWA connection to the terminal 1202 through the WLAN access network device 1204 according to the user subscription information; so that the network can know whether to allow or not The terminal performs the LWA connection, thereby solving the problem that the network does not know whether to allow the UE to connect to the eNB through the current WLAN, and enhances the control of the network access route to the terminal.

It should be noted that the 3GPP AAA server 1206 is further configured to send the address information of the LWA security gateway to the terminal 1202 through the AKA'-notification message.

In the embodiment of the present invention, another routing control system is provided. FIG. 13 is a structural block diagram 2 of a routing control system according to an embodiment of the present invention. As shown in FIG. 13, the method includes: a terminal 1300, a mobility management entity MME 1302, Base station 1304;

The MME 1302 is configured to acquire the user subscription information of the terminal from the home subscriber server HSS, and provide the base station 1304 with the indication information for allowing or denying the terminal 1300 to perform the LWA connection according to the user subscription information or the terminal location information; wherein, the user subscription information is allowed for the terminal. In the case of the LWA connection, the indication information is information indicating that the terminal 1300 is allowed to perform the LWA connection; and in the case where the user subscription information is the LWA connection by the rejection terminal 1300, the indication information is information indicating that the rejection terminal 1300 performs the LWA connection; The LWA connection is a connection of the terminal to the long-term evolution LTE network base station through the WLAN access network of the wireless local area network;

The base station 1304 is configured to send the indication information to the terminal 1300.

In the above system, the base station 1304 obtains the indication information for instructing or denying the terminal 1300 to perform the LWA connection through the MME 1302, so that the network can know whether to allow the terminal to perform the LWA connection, thereby solving the problem that the network does not know whether to allow the UE to connect to the eNB through the current WLAN. The problem is to enhance the network's control over terminal access routing.

It should be noted that, in the case that the terminal 1300 is allowed to perform the LWA connection, the base station 1304 can provide the terminal 1300 with the identifier of the WLAN access network and/or the LWA security gateway.

14 is a schematic diagram of the connection from the WLAN access network to the eNB provided by the present invention. As shown in FIG. 14, the WLAN access network may be a trusted WLAN, and the WLAN access network has an S2a interface connected to the PGW. The UE may be connected to the ePDG through the WLAN access network, and the ePDG may be connected to the PGW through the S2b interface. The UE supporting the LWA may also connect to the IPSec gateway on the eNB through the WLAN access network, that is, the LWA is supported at this time. The UE can connect to the PGGW gateway on the eNB through the WLAN access network, and then connect to the PGW through the serving gateway SGW.

It should be noted that the corresponding device in the system shown in FIG. 12 and the corresponding device shown in FIG. 14 can implement the actions performed by the corresponding devices shown in Embodiments 1 to 3 above, as shown in FIG. The corresponding device in the system can implement the actions performed by the corresponding device shown in the foregoing embodiment 4, and details are not described herein again.

It should be noted that each of the foregoing modules may be implemented by software or hardware. For the latter, the foregoing may be implemented by, but not limited to, the foregoing modules are all located in the same processor; or, the above modules are different. The combination is in a different processor.

Embodiments of the present invention also provide a storage medium. Optionally, in the embodiment, the foregoing storage medium may be configured to store program code for performing the following steps:

S1. The first indication information sent by the terminal is received, where the first indication information is used to indicate that the terminal requests to establish a long-term evolution LTE network and a wireless local area network WLAN tightly coupled LWA connection or indicates that the terminal has the capability of supporting an LWA connection; The LWA connection is a connection of the terminal from the WLAN to the base station in the LTE;

S2. The second indication information is generated according to the network side device local pre-configuration information or the user subscription information, where the second indication information is used to indicate that the terminal is allowed or denied to perform an LWA connection.

S3. Send the second indication information to the terminal.

Optionally, in this embodiment, the foregoing storage medium may include, but not limited to, a USB flash drive, a Read-Only Memory (ROM), a Random Access Memory (RAM), a mobile hard disk, and a magnetic memory. A variety of media that can store program code, such as a disc or a disc.

For example, the specific examples in this embodiment may refer to the examples described in the foregoing embodiments and the optional embodiments, and details are not described herein again.

It will be apparent to those skilled in the art that the various modules or steps of the present invention described above can be implemented by a general-purpose computing device that can be centralized on a single computing device or distributed across a network of multiple computing devices. Alternatively, they may be implemented by program code executable by the computing device such that they may be stored in the storage device by the computing device and, in some cases, may be different from the order herein. The steps shown or described are performed, or they are separately fabricated into individual integrated circuit modules, or a plurality of modules or steps thereof are fabricated as a single integrated circuit module. Thus, the invention is not limited to any specific combination of hardware and software.

The above description is only the preferred embodiment of the present invention, and is not intended to limit the present invention, and various modifications and changes can be made to the present invention. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and scope of the present invention are intended to be included within the scope of the present invention.

Industrial applicability

Based on the foregoing technical solution provided by the preferred embodiment of the present invention, the network side device is used to generate indication information for indicating that the terminal is allowed to perform the LWA connection, so that the network can know whether to allow the terminal to perform the LWA connection, thereby solving the problem that the network does not know whether to allow or not. The problem that the UE connects to the eNB through the current WLAN enhances the control of the network access route to the terminal.

Claims

A routing control method includes:

The network side device receives the first indication information sent by the terminal, where the first indication information is used to indicate that the terminal requests to establish a long term evolution LTE network and a wireless local area network WLAN tightly coupled LWA connection or that the terminal has an LWA connection supported. The LWA connection is a connection of the terminal to the LTE base station through the WLAN access network;

The network side device generates the second indication information according to the network side device local pre-configuration information or the user subscription information, where the second indication information is used to indicate that the terminal is allowed or denied to perform the LWA connection;

The network side device sends the second indication information to the terminal.
The method of claim 1 wherein

The local pre-configuration information is information pre-configured by the operator or the network equipment vendor on the network side device;

The user subscription information is subscription information acquired by the network side device from the home subscriber server HSS;

Wherein, in the case that the local pre-configuration information or the user subscription information is to allow the terminal to perform the LWA connection, the second indication information is indication information that allows the terminal to perform the LWA connection; In the case that the local pre-configuration information or the user subscription information is not allowed to perform the LWA connection by the terminal, the second indication information is indication information for rejecting the terminal to perform the LWA connection.
The method of claim 2, wherein, in the case that the local pre-configuration information or the user subscription information is to allow the terminal to perform the LWA connection, the method further includes:

The network side device sends the address information of the LWA security gateway and/or the local internet protocol IP address of the terminal to the terminal.
The method according to any one of claims 1 to 3, wherein, in a case where the network side device is a third generation mobile communication partner plan authentication and authorization charging 3GPP AAA server, the method is applied to the terminal In the process of performing WLAN access authentication and authorization.
The method according to any one of claims 1 to 3, wherein, when the network side device is a 3GPP AAA server, the network side device receiving the first indication information sent by the terminal includes:

The network side device receives the first indication information by receiving an enhanced authentication and key agreement mechanism challenge message AKA'-Challenge message or an extensible identity verification protocol EAP response message sent by the terminal.
The method according to claim 2, wherein, in the case that the network side device is a base station, the generating, by the network side device, the second indication information according to the user subscription information comprises: the network side device receiving the mobility management entity MME according to the method The second indication information sent by the user subscription information and/or the location information of the terminal.
A routing control method includes:

The terminal sends the first indication information to the network side device, where the first indication information is used to indicate the terminal Requesting to establish a long term evolution LTE network and a wireless local area network WLAN tightly coupled LWA connection or to indicate that the terminal has the capability of supporting an LWA connection; wherein the LWA connection is a connection of the terminal from a WLAN to a base station in LTE;

The terminal receives the second indication information that is sent by the network side device, where the second indication information is used by the network side device according to the network side device local pre-configuration information or the user subscription information to indicate permission or rejection. The terminal performs the LWA connection.
The method of claim 7 wherein

The local pre-configuration information of the network side device is pre-configured by the operator or the network equipment vendor on the network side device;

The user subscription information is subscription information acquired by the network side device from the home subscriber server HSS;

Wherein, in the case that the local pre-configuration information or the user subscription information is to allow the terminal to perform the LWA connection, the second indication information is indication information that allows the terminal to perform the LWA connection; In the case that the local pre-configuration information or the user subscription information is not allowed to perform the LWA connection by the terminal, the second indication information is indication information for rejecting the terminal to perform the LWA connection.
The method of claim 8, wherein, in the case that the local pre-configuration information or the user subscription information is to allow the terminal to perform the LWA connection, the method further includes:

The terminal receives address information of an LWA security gateway sent by the network side device and/or a local internet protocol IP address of the terminal.
The method according to any one of claims 7 to 9, wherein, in a case where the network side device is a third generation mobile communication partner plan authentication and authorization charging 3GPP AAA server, the method is applied to the terminal In the process of performing WLAN access authentication and authorization.
The method according to any one of claims 7 to 9, wherein, when the network side device is a 3GPP AAA server, the sending, by the terminal, the first indication information to the network side device includes:

The terminal sends the first indication information by sending an enhanced authentication and key agreement mechanism challenge message AKA'-Challenge message or an extensible identity verification protocol EAP response message to the network side device.
A routing control device, the device being applied to a network side device, comprising:

The receiving module is configured to receive the first indication information sent by the terminal, where the first indication information is used to indicate that the terminal requests to establish a long-term evolution LTE network and a wireless local area network WLAN tightly coupled LWA connection or to indicate that the terminal has support The capability of the LWA connection; wherein the LWA connection is a connection of the terminal to the LTE base station through the WLAN access network;

a generating module, configured to generate second indication information according to the network side device local pre-configuration information or the user subscription information, where the second indication information is used to indicate that the terminal is allowed or denied to perform the LWA connection;

And a sending module, configured to send the second indication information to the terminal.
The device according to claim 12, wherein

The local pre-configuration information is information pre-configured by the operator or the network equipment vendor on the network side device;

The user subscription information is subscription information acquired by the network side device from the home subscriber server HSS;

Wherein, in the case that the local pre-configuration information or the user subscription information is to allow the terminal to perform the LWA connection, the second indication information is indication information that allows the terminal to perform the LWA connection; In the case that the local pre-configuration information or the user subscription information is not allowed to perform the LWA connection by the terminal, the second indication information is indication information for rejecting the terminal to perform the LWA connection.
The apparatus according to claim 13, wherein the sending module is further configured to: when the local pre-configuration information or the user subscription information is to allow the terminal to perform the LWA connection, to the LWA security gateway The address information and/or the local internet protocol IP address of the terminal is sent to the terminal.
A routing control device, the device being applied to a terminal, comprising:

a sending module, configured to send first indication information to the network side device, where the first indication information is used to indicate that the terminal requests to establish a long term evolution LTE network and a wireless local area network WLAN tightly coupled LWA connection or to indicate that the terminal has The capability of supporting an LWA connection; wherein the LWA connection is a connection of the terminal to a LTE base station through a WLAN access network;

The receiving module is configured to receive the second indication information sent by the network side device, where the second indication information is used by the network side device according to the network side device local pre-configuration information or the user subscription information to indicate permission Or rejecting the terminal to perform the LWA connection.
The device according to claim 15, wherein

The local pre-configuration information of the network side device is pre-configured by the operator or the network equipment vendor on the network side device;

The user subscription information is subscription information acquired by the network side device from the home subscriber server HSS;

Wherein, in the case that the local pre-configuration information or the user subscription information is to allow the terminal to perform the LWA connection, the second indication information is indication information that allows the terminal to perform the LWA connection; In the case that the local pre-configuration information or the user subscription information is not allowed to perform the LWA connection by the terminal, the second indication information is indication information for rejecting the terminal to perform the LWA connection.
The apparatus according to claim 16, wherein the receiving module is further configured to receive the network if the local pre-configuration information or the user subscription information is to allow the terminal to perform the LWA connection. The address information of the LWA security gateway sent by the side device and/or the local internet protocol IP address of the terminal.
A routing control system, comprising: a terminal, a wireless local area network WLAN access network device, a third generation mobile communication partner plan authentication and authorization charging 3GPP AAA server, and a home user server HSS, wherein

The terminal is configured to send a scalable identity verification protocol EPA response message or an enhanced authentication and key agreement mechanism to the 3GPP AAA server by using the WLAN access network device to challenge the AKA'-Challenge message to establish a long term evolution LTE network and The wireless local area network WLAN is tightly coupled to the LWA connection or indicates that the terminal has the capability of supporting an LWA connection; wherein the LWA connection is a connection of the terminal to the LTE base station through the WLAN access network;

The 3GPP AAA server is configured to acquire user subscription information of the terminal to the HSS, where the user subscription information includes allowing or denying the terminal to perform the LWA connection; and the user subscription information is allowed When the terminal performs the LWA connection, the WLAN access network device sends indication information that allows the terminal to perform an LWA connection to the terminal; and the user subscription information is rejected by the terminal. In the case of the LWA connection, the WLAN access network device sends the indication information rejecting the terminal to perform the LWA connection to the terminal.
A routing control system includes: a terminal, a mobility management entity MME, and a base station;

The MME is configured to acquire user subscription information of the terminal from the home subscriber server HSS, and provide indication information for allowing or rejecting the terminal to perform an LWA connection according to the user subscription information or terminal location information; In the case that the user subscription information is to allow the terminal to perform the LWA connection, the indication information is information indicating that the terminal is allowed to perform the LWA connection; and the user subscription information is to reject the terminal. In the case of the LWA connection, the indication information is information indicating that the terminal is refused to perform an LWA connection; wherein the LWA connection is a connection of the terminal to the long-term evolution LTE network base station through the WLAN access network of the wireless local area network;

The base station is configured to send the indication information to the terminal.