WO2013123849A1

WO2013123849A1 - Resource admission and control method, bng, and pdp

Info

Publication number: WO2013123849A1
Application number: PCT/CN2013/071248
Authority: WO
Inventors: 尤建洁; 宗在峰; 范亮
Original assignee: 中兴通讯股份有限公司
Priority date: 2012-02-24
Filing date: 2013-02-01
Publication date: 2013-08-29
Also published as: CN103297964A; CN103297964B

Abstract

A resource admission and control method, a Broadband Network Gateway (BNG), and a Policy Decision Point (PDP). The resource admission and control method comprises: a network element acquiring, after authentication of a user equipment succeeds, information about a fixed network resource that a physical link where the user equipment is located allows a mobile user equipment to use, the network element being the BNG or the PDP; after receiving a request from the mobile user equipment on the physical link, the network element determining, according to the information about a fixed network resource, whether a fixed network resource that a physical link where the mobile user equipment is located allows the mobile user equipment to use meets the request; and if yes, admitting the request. By means of the resource admission and control method, the BNG, and the PDP, it is determined, according to information about a fixed network resource that a mobile user is allowed to use, whether to admit a request from a mobile user equipment, thereby desirably solving the problem that a mobile user excessively consumes bandwidth resources of a fixed network, and improving the service experience of a user in a fixed network.

Description

Resource admission control method, BNG and PDP

Technical field

The present invention relates to the field of communications, and in particular, to a resource admission control method, a Broadband Network Gateway (BNG), and a Fixed Network Policy Server (PDP). Background technique

With the development of network technology and the demand of users for services, terminal devices in home networks are gradually diversified and more intelligent. The Residential Gateway (RG), as a centralized intelligent interface, connects the home network to the external network to provide connectivity, control and coordination for the home network.

Currently, the International Standards Organization Broadband Forum (BBF) is working on the standardization of Fixed Mobile Convergence (FMC), including the Third Generation Partnership Project (3GPP) User Equipment (UE). The RG accesses the network.

In the related art, the RG acts as an 802. lx client to initiate access authentication to an AN (Access Node), and the AN acts as an 802. lx authenticator and a remote user dialing authentication system.

The (RADIUS) client initiates an authentication request to the AAA (Authentication Authorization Accounting, Authentication, Authorization, and Accounting Server). If the RG is authenticated and works in routing mode, the device terminals in the home network can access the network through the RG without authentication. If the RG selects the bridging mode access for the UE, the UE itself needs to be authenticated to access the network. For 3GPP UEs attempting to access the network from the RG, in order to facilitate policy control and traffic statistics for its service data flow, the BBF network hopes to be aware of the existence of the 3GPP UE, that is, the 3GPP UE supports explicit access authentication on the BBF network. .

However, at present, mobile users consume too much bandwidth resources of the fixed network, which affects the service experience of the fixed network users themselves. Summary of the invention

The embodiment of the invention provides a resource admission control method, a BNG and a PDP, to solve the mobile The problem of users consuming too much bandwidth resources of the fixed network.

An embodiment of the present invention provides a resource admission control method, where the method includes:

After the user equipment is successfully authenticated, the network element obtains fixed network resource information that is allowed to be used by the mobile user equipment; the network element is a broadband network gateway (BNG) or a fixed network policy server (PDP);

After receiving the request from the mobile user equipment of the physical link, the network element determines, according to the fixed network resource information, whether the physical network link where the mobile user equipment is located allows the fixed network resource used by the mobile user equipment to meet the The request, if satisfied, accepts the request.

Preferably, the fixed network resource information includes one or more of a commitment rate, a peak rate, a time period, and a service type.

Preferably, when the network element is a BNG, the acquiring, by the network element, the fixed network resource information that the physical link of the user equipment is allowed to use by the mobile user equipment after the user equipment is successfully authenticates includes: the BNG receiving the fixed network authentication The fixed network server (AAA) transmits the fixed network resource information used by the mobile user equipment on the physical link where the fixed network user equipment is located after the fixed network user equipment passes the fixed network authentication;

Receiving, by the BNG, the fixed network resource information used by the mobile user equipment that is sent by the fixed network AAA after the mobile user equipment is authenticated by the fixed network, to allow the mobile user equipment to use; or the BNG querying the fixed network AAA Obtaining fixed network resource information that the fixed network user equipment or the mobile user equipment is located to allow the mobile user equipment to use.

Preferably, when the network element is a PDP, the acquiring, by the network element, the fixed network resource information that the physical link of the user equipment is allowed to use by the mobile user equipment after the user equipment is successfully authenticated includes:

The PDP receives the fixed network resource information that the fixed network authentication and authorization accounting server (AAA) allows the mobile user equipment to use after the fixed network user equipment passes the fixed network authentication;

Receiving, by the PDP, the fixed network resource information used by the mobile user equipment to be used by the mobile user equipment after the mobile user equipment is authenticated by the fixed network, and the PDP querying the fixed network The AAA obtains fixed network resource information that the fixed network user equipment or the mobile user equipment is located to allow the mobile user equipment to use. Preferably, the fixed network user equipment or the link where the mobile user equipment is located allows the fixed network resource information used by the mobile user equipment to be subscribed in the fixed network AAA.

The embodiment of the present invention further provides a broadband network gateway (BNG), where the BNG includes: an obtaining module, configured to: acquire a fixed network resource used by the mobile user equipment by the physical link where the user equipment is located after the user equipment is successfully authenticated. Information

The admission control module is configured to: after receiving the request from the mobile user equipment of the physical link, determine, according to the fixed network resource information, whether the fixed network resource used by the mobile user equipment is allowed to be used by the mobile user equipment The request is satisfied, and if so, the request is accepted.

Preferably, the acquiring module is configured to:

Receiving the fixed network authentication and authorization accounting server (AAA), the fixed network resource information used by the mobile user equipment that is sent by the fixed network user equipment after the fixed network user equipment passes the fixed network authentication;

Receiving, by the fixed network AAA, the fixed network resource information used by the mobile user equipment that is sent by the mobile user equipment after the mobile user equipment is authenticated by the fixed network; or

Querying the fixed network AAA to obtain the fixed network resource information used by the fixed network user equipment or the mobile user equipment to allow the mobile user equipment to use.

The embodiment of the present invention further provides a fixed network policy server (PDP), where the PDP includes: an obtaining module, configured to: obtain a fixed network that allows the mobile user equipment to be used by the physical link where the user equipment is located after the user equipment is successfully authenticated. Resource information

Preferably, the acquiring module is configured to: Receiving a fixed network authentication and authorization accounting server (AAA), the fixed network resource information used by the mobile user equipment, where the physical link of the fixed network user equipment is sent after the fixed network user equipment passes the fixed network authentication;

The resource admission control method, the BNG, and the PDP, according to the obtained fixed network resource information that allows the mobile user to use, determine whether to access the mobile user equipment, and better solve the problem that the mobile user consumes the bandwidth resources of the fixed network excessively. Improve the business experience of fixed network users themselves. BRIEF abstract

Figure 1 is a schematic diagram of an access authentication scenario of an RG;

2 is a signaling flowchart of Embodiment 1 of the RG access authentication according to the present invention;

3 is a schematic diagram of an access authentication scenario of a 3GPP UE;

4 is a signaling flowchart of a 3GPP UE access authentication embodiment of the present invention;

5 is a signaling flowchart of Embodiment 1 of a resource admission control method of the present invention;

6 is a signaling flowchart of Embodiment 2 of the RG access authentication according to the present invention;

7 is a signaling flowchart of Embodiment 2 of the resource admission control method of the present invention;

Figure 8 is a schematic structural view of an embodiment of a BNG of the present invention;

Fig. 9 is a schematic structural view of an embodiment of a PDP of the present invention. Preferred embodiment of the invention

Embodiments of the present invention will be described in detail below with reference to the accompanying drawings. It should be noted that, in the case of no conflict, the features in the embodiments and the embodiments in the present application may be arbitrarily combined with each other.

Step 1: After the user equipment is successfully authenticated, the network element obtains the physical link of the user equipment. The fixed network resource information used by the mobile user equipment; the network element is a broadband network gateway (BNG) or a fixed network policy server (PDP);

The fixed network resource information includes one or more of a commitment rate, a peak rate, a time period, and a service type.

The network element obtains the fixed network resource information that the user is located on the physical link to allow the mobile user to use after the user is authenticated: the receiving the fixed network authentication and authorization accounting server (AAA) is sent after the fixed network user equipment passes the fixed network authentication. The physical link where the fixed network user equipment is located allows the fixed network resource information used by the mobile user equipment; and the physical link of the mobile user equipment that is sent by the fixed network AAA after the mobile user equipment passes the fixed network authentication allows the mobile link to be moved. The fixed network resource information used by the user equipment; or the fixed network AAA is obtained by obtaining the fixed network resource information that the fixed network user equipment or the mobile user equipment is located to allow the mobile user equipment to use.

Step 2: After receiving the request from the mobile user equipment of the physical link, the network element determines, according to the fixed network resource information, whether the fixed network resource used by the mobile user equipment is allowed to be used by the mobile user equipment The request is satisfied, and if so, the request is accepted.

Figure 1 is a schematic diagram of an access authentication scenario of an existing RG. In this scenario, RG is

802. lx client, the access node (AN) is the 802. lx authenticator and the RADIUS client, and the AAA is the authentication server. The RG access authentication process is as follows: The RG initiates an access authentication (ie, sends an authentication protocol start (EAPoL Start) message), and the AN acts as an 802.1x authenticator and the RADIUS client sends an authentication request to the AAA (ie, sends an authentication access request). (RADIUS Access Request) message).

As shown in FIG. 2, it is a signaling flowchart of the RG access authentication embodiment of the present invention. The RG performs access authentication on the fixed network, and after the authentication succeeds, the AAA sends the link information of the RG to the broadband network gateway. (BNG). The process includes the following steps:

Step 201: The RG sends an EAPoL-Start message to the AN to start the 802. lx authentication access. Step 202: The AN sends an EAP-Identity-Request message to the RG, requesting the RG to report the user name.

Step 203: The RG replies with an EAP-Identity-Response (EAP-Identity-Response) to the AN, where the user name is included; Step 204: The AN encapsulates the EAP frame into a RADIUS-Access-Request packet and sends the packet to the BNG.

Step 205. Further, the BNG acts as a RADIUS proxy (Proxy), and sends the RADIUS-Access-Request to the BBF AAA.

Step 206: The BBF AAA replies to a RADIUS access response (RADIUS-Access-Response), where the EAP challenge is included;

Step 207: The BNG forwards the RADIUS-Access-Response to the AN.

Step 208: The AN unpacks the EAP frame and sends it to the RG. The RG responds, and the reply message includes a Challenged Password.

Step 209: The AN encapsulates the received EAP frame into a RADIUS-Access-Request packet, where the Challenged Password is included.

Step 210: The BNG forwards the RADIUS-Access-Request to the BBF AAA.

Step 211: If the authentication is successful, the BBF AAA replies to the RADIUS-Access-Accept; and carries the resource parameter used by the link where the RG is located to allow the mobile network user to use in the reply message;

The RG is a type of fixed network user equipment;

Specifically, the resource parameters allowed by the mobile network user include: a committed rate, and/or a peak rate, and/or a time period, and/or a service type.

Step 212: The BNG saves the resource parameter and forwards the RADIUS-Access-Accept;

Step 213: The AN unpacks the EAP frame, and sends an EAP-Success to the RG.

As shown in FIG. 3, it is a schematic diagram of an access authentication scenario of a 3GPP UE. In this scenario, the 3GPP UE is an 802. lx client, the RG is an 802. lx authenticator and a RADIUS client, and the BBF AAA is an authentication server. The access authentication procedure of the 3GPP UE is: The 3GPP UE initiates an access authentication (ie, an EAPoL Start message) to the RG, and the RG acts as an 802. lx authenticator and the RADIUS client initiates an authentication request to the AAA (ie, sends the authentication). Access Request (RADIUS Access Request) message).

As shown in FIG. 4, it is a signaling flowchart of a 3GPP UE access authentication embodiment of the present invention, and a 3GPP UE. After the authentication is successful, the AAA sends the link information of the 3GPP UE to the BNG. The process includes the following steps:

Step 401: The 3GPP UE sends an EAPoL-Start message to the RG to start 802. lx authentication access.

Step 402: The RG sends an EAP-Identity-Request packet to the UE, and requests the UE to report the username.

Step 403: The UE replies with an EAP-Identity-Response to the RG, including the user name. Step 404: The RG encapsulates the EAP frame into a RADIUS-Access-Request packet and sends the packet to the BNG.

Step 405: The BNG sends the RADIUS-Access-Request message to the BBF AAA. Step 406: Further, the BBF AAA sends the RADIUS-Access-Request to the home according to the Network Access Identifier (NAI). AAA; Step 407, Home AAA replies to RADIUS-Access-Response, which includes EAP Challenge;

Step 408: The BBF AAA forwards the RADIUS-Access-Response to the BNG.

Step 409, the BNG transfers the RADIUS-Access-Response to the RG;

Step 410: The RG decapsulates the EAP frame and sends the message to the UE. The UE sends a reply, and the reply message includes a Challenged Password.

Step 411: The RG encapsulates the received EAP frame into a RADIUS-Access-Request packet, where the Challenged Password is included.

Step 412: The BNG forwards the RADIUS-Access-Request to the BBF AAA.

Step 413: The BBF AAA forwards the RADIUS-Access-Request to the Home AAA. Step 414: If the authentication succeeds, the Home AAA replies to the RADIUS-Access-Accept;

Step 415: The BBF AAA forwards the RADIUS-Access-Accept to the BNG; and adds, in the message, the resource parameter that the link where the 3GPP UE is located allows the mobile network user to use;

Specifically, the resource parameters that are allowed to be used by the mobile network user include: a committed rate, and/or a peak rate, and/or a time period, and/or a service type. Step 416, the BNG forwards the RADIUS-Access-Accept to the RG;

Step 417: The RG decapsulates the EAP frame and sends an EAP-Success to the UE.

As shown in FIG. 5, it is a signaling flowchart of the implementation of the resource admission control method of the present invention. After receiving a service request from an application function (AF), the fixed network policy server (PDP) sends a resource request to the BNG. The BNG determines whether the request is accepted. The process includes the following steps:

Step 501: After receiving the mobile user service request from the AF, the PDP performs an initial admission decision (such as determining whether the user subscription information QoS is legal), and sends a resource request to the BNG to request the corresponding resource.

Step 502: Optionally, after the BNG receives the resource request message, if the resource request is from a mobile user, and the local policy does not use the fixed network resource for the mobile user, the BBF AAA is configured to allow the mobile user to use the fixed network resource. Information, BBF AAA reply to relevant information;

The fixed network user or the mobile user's link allows the fixed network resource information used by the mobile user to sign in the BBF AAA.

Step 503: The BNG performs admission control on the resource request.

Specifically, the BNG determines whether the resource parameter used by the mobile user is allowed to meet the resource request of the current mobile user. If the current resource is available, the BNG accepts the resource request and executes the relevant policy rule.

Step 504: The BNG replies with a response message to the PDP. If not, the BDP replies with a refusal message to the PDP, where the refusal message is carried, where the current resource request exceeds the resource parameter used by the mobile network user in the link where the mobile user is located.

As shown in FIG. 6, the signaling flow chart of the second embodiment of the RG access authentication is performed. The RG performs access authentication on the fixed network, and after the authentication succeeds, the AAA pushes the link information of the RG to the PDP. The process includes the following steps:

Step 601: The RG sends an authentication request message to the BNG. Step 602: Further, after receiving the authentication request, the BNG checks the validity of the user to the BBF AAA.

Step 603: If the user is legal, the AAA pushes the resource parameter used by the mobile network user to the PDP.

The PDP saves relevant information.

Step 604: The AAA sends an authentication response message to the BNG.

Step 605: The BNG sends an authentication response message to the RG.

As shown in FIG. 7, it is a signaling flowchart of the second implementation of the resource admission control method of the present invention. After receiving the service request from the AF, the PDP performs an admission decision to determine whether to accept the request. The process includes the following steps:

Step 701: The PDP receives a mobile user service request trigger from the AF.

Step 702: Optionally, after the PDP receives the service request message, if the service request is from the mobile user, and the local policy does not use the fixed network resource for the mobile user, the BBF AAA is configured to allow the mobile user to use the fixed network resource information. , BBF AAA replies with relevant information;

Step 703: The PDP performs admission control on the service request.

Specifically, the PDP determines whether the resource parameter used by the mobile user to allow the mobile user to use meets the resource request of the current mobile user. If the resource request is satisfied, and the current resource is available, the PDP accepts the service request and executes the relevant policy rule.

Step 704: After the PDP formulates the relevant policy rules, it is sent to the BNG for execution.

The foregoing resource admission control method solves the problem that the mobile user excessively consumes the bandwidth resources of the fixed network according to the obtained request for determining whether to access the mobile user equipment by using the fixed network resource information used by the mobile user, and improves the fixed network. The user's own business experience. The embodiment of the present invention further provides a broadband network gateway (BNG). As shown in FIG. 8, the BNG includes an obtaining module 81 and an admission control module 82, where:

An acquiring module, configured to acquire, after the user equipment is successfully authenticated, the physical network link where the user equipment is located, the fixed network resource information that is allowed to be used by the mobile user equipment;

The admission control module is configured to: after receiving the request from the mobile user equipment of the physical link, determine, according to the fixed network resource information, whether the fixed network resource used by the mobile user equipment is allowed to be used by the mobile user equipment The request, if satisfied, accepts the request.

Further, the acquiring module is specifically configured to: receive a fixed network authentication and authorization accounting server (AAA), and the physical link of the fixed network user equipment that is sent by the fixed network user equipment after the fixed network user equipment is allowed to allow the mobile user equipment to use The fixed network resource information; receiving the fixed network resource information used by the mobile user equipment that is sent by the fixed network AAA after the mobile user equipment is authenticated by the fixed network, and allowing the mobile user equipment to use the physical network link; or querying the fixed network The AAA obtains fixed network resource information that the fixed network user equipment or the mobile user equipment is located to allow the mobile user equipment to use.

The above BNG better solves the problem that mobile users consume too much bandwidth resources of the fixed network, and improves the service experience of the fixed network users themselves.

An embodiment of the present invention further provides a PDP. As shown in FIG. 9, the PDP includes an acquiring module.

91 and admission control module 92, wherein:

The fixed network resource information includes one or more of a commitment rate, a peak rate, a time period, and a service type. Further, the acquiring module is specifically configured to: receive a fixed network authentication and authorization accounting server

(AAA) the fixed network resource information used by the mobile network device to be transmitted by the fixed network user equipment after the fixed network user equipment is authenticated by the fixed network; receiving the fixed network AAA in the mobile user equipment to pass the fixed network authentication The physical link of the mobile user equipment that is sent later allows the fixed network resource information used by the mobile user equipment; or the AAA is obtained by the fixed network AAA to obtain the link of the fixed network user equipment or the mobile user equipment. The information about the fixed network resources used by the device.

The above PDP better solves the problem that mobile users consume too much bandwidth resources of the fixed network, and improves the service experience of the fixed network users themselves.

One of ordinary skill in the art will appreciate that all or a portion of the above steps may be accomplished by a program that instructs the associated hardware to be stored in a computer readable storage medium, such as a read only memory, a magnetic disk, or an optical disk. Alternatively, all or part of the steps of the above embodiments may also be implemented using one or more integrated circuits. Correspondingly, each module/unit in the above embodiment may be implemented in the form of hardware or in the form of a software function module. The invention is not limited to any specific form of combination of hardware and software.

The above embodiments are only intended to illustrate the technical solutions of the present invention and are not to be construed as limiting the invention. It should be understood by those skilled in the art that the present invention may be modified or equivalently substituted without departing from the spirit and scope of the invention.

Industrial applicability

The resource admission control method, the BNG, and the PDP, according to the obtained fixed network resource information that allows the mobile user to use, determine whether to access the mobile user equipment, and better solve the problem that the mobile user consumes the bandwidth resources of the fixed network excessively. Improve the business experience of fixed network users themselves.

Claims

Claim

1. A resource admission control method, the method comprising:

2. The method according to claim 1, wherein

3. The method according to claim 1, wherein

When the network element is a BNG, the network element obtains the fixed network resource information that is allowed to be used by the mobile user equipment after the user equipment is successfully authenticated by the user equipment, including:

The BNG receiving the fixed network authentication and authorization accounting server (AAA) allows the fixed network resource information used by the mobile user equipment to be transmitted by the physical link of the fixed network user equipment sent by the fixed network user equipment after the fixed network user equipment is authenticated;

4. The method according to claim 1, wherein

When the network element is a PDP, the network element obtains the fixed network resource information that is allowed to be used by the mobile user equipment after the user equipment is successfully authenticated by the user equipment, including:

The PDP receives the fixed network resource information of the fixed network authentication and authorization accounting server (AAA) that is allowed to be used by the mobile user equipment by the physical link where the fixed network user equipment is located after the fixed network user equipment passes the fixed network authentication; Receiving, by the PDP, the fixed network resource information used by the mobile user equipment to be used by the mobile user equipment after the mobile user equipment is authenticated by the fixed network, and the PDP querying the fixed network The AAA obtains fixed network resource information that the fixed network user equipment or the mobile user equipment is located to allow the mobile user equipment to use.

5. The method according to claim 3 or 4, wherein

The fixed network user equipment or the link where the mobile user equipment is located allows the fixed network resource information used by the mobile user equipment to be subscribed in the fixed network AAA.

6. A broadband network gateway (BNG), the BNG comprising:

The obtaining module is configured to: acquire, after the user equipment is successfully authenticated, the fixed network resource information that the physical link where the user equipment is located allows the mobile user equipment to use;

7. The BNG according to claim 6, wherein

8. The BNG according to claim 6, wherein

The obtaining module is set to:

9. A fixed network policy server (PDP), the PDP comprising:

Obtain the module, set to: obtain the physics of the user equipment after the user equipment is successfully authenticated. The link allows fixed network resource information used by the mobile user equipment;

10. The PDP according to claim 9, wherein

11. The PDP according to claim 9, wherein

The obtaining module is set to: