Identification distribution and separate-storage method, identification replacing transmission method and system

Abstract

The invention discloses an identification distribution and separate-storage method, an identification replacing transmission method and system, relating to the field of network safety. The identification distribution and separate-storage method comprises the following steps of: dividing a heterogeneous wireless network by function into a user domain, an access domain, a service domain and an attribution domain, wherein the service domain comprises at least one access domain, the access domain comprises at least one user domain, and the attribution domain and the service domain are the same network when in local service; and after the successful authentication of a terminal, allocating the attribution domain, the service domain and the access domain with domain identifications domain by domain. Based on the access authentication of the heterogeneous wireless network, the invention provides a mechanism of the identification distribution, the separate storage and the replacing transmission of the identification. In the transmission process of the domain identification in the user domain, the access domain, the service domain and the attribution domain, the real identity and the location information of a terminal can be effectively concealed through the retrieval and the replacement among domains and the dynamic update at different identification mapping servers, thereby enhancing the credible access of the heterogeneous wireless network and the safety protection capacity on mobility problems.

Description

technical field [0001] The present invention relates to the field of network security, in particular to an identifier distribution and separate storage method, an identifier replacement transmission method and a system. Background technique [0002] With the rapid development of mobile communication technology, many wireless networks have been standardized and commercialized, such as 3G, WLAN, WiMAX and so on. However, these networks are basically a mode in which the network supports a major service. They have different coverage areas and bandwidths, and have their own network architecture and access authentication technology, and it is difficult to replace each other for a while. Therefore, under the general use and high-quality service requirements, the integration between heterogeneous networks is quite important. On the basis of the existing wireless communication facilities, general intelligent terminals can be used to access various network platforms to meet different...

AI Technical Summary

Problems solved by technology

[0003] In the current access authentication and communication process of heterogeneous wireless networks, the problem of terminal identification redundancy is relatively serious: for the case where the terminal identification and address identification are combined, for example, the IP address simultaneously identifies the identity and address of the terminal, Will cause redundancy in the identification function

In order to solve the redundancy of the identification function, the identity identification and address identification functions of the terminal can be separated. For example, the IP address is only used as the address identification of the terminal, and the identity of the terminal is identified by IMSI, terminal name, etc., but in the live network is usually The identity and address of the terminal, the real identity and the temporary identity are bound to be used, stored and transmitted in the network. This kind of identity binding not only has redundancy in the number of identifiers, but also causes waste of resources. Leakage of terminal sensitive information in the Internet, bringing a series of security issues

On the other hand, at present, different access authentication technologies are often used between different heterogeneous wireless networks, and terminals must maintain multiple sets of authentication identifiers in different formats, so that they can provide corresponding authentication information when accessing heterogeneous networks, and realize heterogeneous This not only brings redundancy in the form of identification, but also increases the handover delay of the terminal during mobile roaming, which greatly affects the effect of seamless roaming

Images