Mobile network authentication method and system

Abstract

The invention provides a mobile network authentication method and a mobile network authentication system. The method comprises that: after receiving an authentication request from a terminal, a mobility management entity (MME) forwards the authentication request to an authentication, authorization and accounting (AAA) server; and after receiving the authentication request, the AAA server acquires an authentication vector from a home subscriber server (HSS), saves the authentication vector, and initiates the authentication request to the terminal according to the authentication vector, or the MME initiates the authentication request to the terminal according to the authentication vector acquired from the AAA server. By the method, interaction with the HSS is realized by the AAA server in both non-third generation partnership project (3GPP) access and 3GPP access to reduce the authentication load of the MME, separate the mobility management function and authentication function of the MME and unify an authentication flow.

Description

technical field [0001] The present invention relates to the field of communication technology, in particular to a mobile network authentication method and system. Background technique [0002] The 3rd Generation Partnership Project (3rd Generation Partnership Project, 3GPP for short) network supports heterogeneous network access, inter-network roaming and seamless handover. The 3GPP network is divided into 3GPP access and non-3GPP network access. Non-3GPP access includes trusted non-3GPP access and untrusted non-3GPP access. Whether to trust depends on the operator's policy. [0003] When an operator deploys non-3GPP access and 3GPP access at the same time and trusts the non-3GPP access, according to the current authentication scheme, the Mobile Management Entity (MME for short) is required to have an authentication function. see figure 1 , which shows the authentication process for a terminal accessing from a 3GPP network in the prior art, including the following steps:...

AI Technical Summary

Problems solved by technology

[0019] From the above different access scenarios, it can be seen that different types of access networks will require different networks to interact with the HSS in the authentication process, and the authentication process is not uniform, which increases the complexity of the network. In some access scenarios, Requiring MME to undertake the certification work increases the burden on MME

Images