Method, user equipment and packet access gateway for secure access to Internet services

Abstract

The invention discloses a method for secure access to Internet services. In a packet access network, the control problem caused when the current technology does not consider the user access to specific target application is solved. After UE (User Equipment) successfully accesses to the Internet, when a certain target application is to be accessed, the method comprises the following steps of: checking a service request for the target application by an SAIN (Secure Access Identity Number) checking point according to an SAIN check policy, and when the SAIN checking point determines that the service request needs the SAIN check, prompting a user to input an SAIN by the UE; and if the SAIN checking point determines that the input SAIN result is correct, transferring the target application service request, and if not, refusing the service request. By introducing the SAIN, the secure inspection and protection of the corresponding data stream are applied to a target Internet, thereby the access security of the Internet application is improved. The method especially aims at a scene of Internet access in a user identification mode.

Description

technical field [0001] The invention relates to the technical field of data communication, in particular to a method for securely accessing Internet services. Background technique [0002] The Internet has been widely used and has achieved great success. With the widespread deployment of high-speed mobile packet networks and the popularization of smart mobile terminals, Internet services will become more abundant. [0003] figure 1 shows a schematic diagram of Internet access, for figure 1 The description of each entity in is as follows: [0004] User Equipment 101 (User Equipment, referred to as UE), located on the user side, supports the Internet Protocol (Internet Protocol, referred to as IP). If the identity and location separation technology is adopted, the UE uses the user access identity instead of the IP address to access the Internet. Other user equipment and services are provided for communication. [0005] The access control function 102 (Access Control Functi...

AI Technical Summary

Problems solved by technology

[0012] The above control method is relatively simple. In the process of implementing policy control, users do not directly participate, which cannot meet the needs of some services with relatively high security levels.

For example, IP Multimedia Subsystem (IMS for short), instant messaging, micropayment, virtual community, etc., use the user's IP address or identity to identify the user's identity and derive services, so that when the user's user equipment is Others use, because the existing protection mechanism is relatively simple, the user can use the user equipment to carry out the above business at will, which poses a great threat to user security and privacy

[0013] From the above analysis, it can be seen that because the current technology does not consider the security issues of Internet access for users, it may lead to Internet access and business application security issues, as well as privacy issues. Therefore, it is necessary to adopt new technologies to improve Internet access security and provide more Various Security Services

Images