A roaming access method based on optimal path selection

Abstract

The application discloses a roaming access method based on optimal path selection, and an access point name mapping module is used for planning a unified access point name for users with an industry mobile service network, and mapping APN and DNN independently planned in different conditions to the industry mobile service network identifier. A front-end component uses the attribute value of the APN / DNN username, and realizes the consistency of the information of the industry front-end, the back-end and the operator core network according to the format of the industry mobile service network identifier, the application access identifier, the communication user authentication server identifier and the communication user identifier. The operator side can select the optimal access mode of the UE based on the industry mobile service network identifier and the application access identifier information. A roaming user authentication module calls a home communication user authentication interface based on the communication user authentication server identifier in the APN / DNN username, and completes the communication user authentication of the roaming user UE, so that the access communication link of the roaming place is constructed for the legal user without reducing the security level.

Description

Technical Field

[0001] This invention relates to the field of data communication technology, and more specifically to a roaming access method based on optimal path selection. Background Technology

[0002] Users in sectors such as public safety, water conservancy, and power rely on dedicated APN / DNN provided by operators to build their mobile applications. These mobile applications run in a private network environment, and most cannot connect to the internet. This ensures that information related to national public infrastructure such as public safety, water conservancy, and power is isolated from the internet, thus ensuring the security of critical infrastructure.

[0003] In the 4G era, large industry users would establish cross-regional networks, but applications were primarily non-distributed, monolithic applications. After operators implemented roaming access for their internet and communication services, roaming-related fees were eliminated. Dedicated APNs / DNNs for industry users were built independently by each region, lacking unified planning, and consistently used home-area access. This home-area access for roaming users caused traffic to be routed through the operator's network. Even if application service nodes existed at branch offices in the roaming location, they still needed to be routed through the home network, increasing latency, reducing user experience, and increasing the burden on the operator's transmission equipment.

[0004] With the widespread adoption of 5G technology, large-scale industries are demanding distributed applications, such as instant messaging, video conferencing, and drone video surveillance. Distributed applications can reduce the number of applications installed on user devices (UEs), improve the quality of mobile applications, and enable more efficient and convenient communication channels. However, if distributed applications still rely on the home-based access method, high-bandwidth traffic will have to detour around the operator's network, increasing the burden on the transmission network and increasing end-to-end transmission latency, leading to a decline in user experience.

[0005] In summary, existing roaming access solutions have the following drawbacks:

[0006] 1) The user experience of real-time services is poor, such as high latency and low resolution.

[0007] Local access can lead to high end-to-end transmission latency and poor reliability for audio and video applications. Generally, industry users have insufficient bandwidth for cross-network interconnection links. To increase the number of concurrent users, a bandwidth threshold needs to be set for each user, preventing industry users from achieving cross-network high-definition video conferencing and real-time communication.

[0008] 2) It leads to redundant development of mobile applications in the industry, which is not conducive to the prosperity and development of large-scale mobile applications.

[0009] Many internet applications are already distributed across the country, building business nodes in different regions to achieve nationwide business coverage. Local area access prevents industry users from developing new 5G applications, keeping industry mobile applications confined to small-scale, standalone applications.

[0010] 3) Increased load on operator transmission networks.

[0011] Local area access increases the transmission distance for roaming users' business traffic, leading to a greater load on operators' transmission equipment. As the market for 5G networks targeting vertical industry users continues to expand, the load on operators' backbone transmission networks will increase, and operation and maintenance costs will rise accordingly. Summary of the Invention

[0012] To address the shortcomings of existing technologies, this invention aims to provide a roaming access method based on optimal path selection.

[0013] To achieve the above objectives, the present invention adopts the following technical solution:

[0014] A roaming access method based on optimal path selection, wherein the roaming user UE uses a SIM card that is a subscriber to the home core network system; the specific process of the method is as follows:

[0015] Step 1: The roaming user UE starts the front-end component and sets the application access identifier according to the application access requirements. If it needs to access the roaming distributed application, the application access identifier is set to 1; otherwise, it is set to 0.

[0016] Step 2: The front-end component is filled with the APN username or DNN username. The APN username or DNN username consists of the industry mobile service network identifier, application access identifier, communication user authentication server identifier, and communication user identifier. Under 4G network, the front-end component is filled with the APN username, and under 5G network, the front-end component is filled with the DNN username. APN represents the access point name, and DNN represents the data network name.

[0017] Step 3: The roaming user UE initiates a network connection request and completes attachment and AKA authentication on the operator's network; AKA stands for authentication and key agreement;

[0018] Step 4: The Access Point Name Mapping (APN) module on the roaming SMF side receives the UE's network connection request. SMF stands for Session Management Function. The APN or DNN username is extracted, including the industry mobile service network identifier and application access identifier, and the following determination is made:

[0019] 1) If the industry mobile service network identifier in the APN username or DNN username is the same as the industry mobile service network identifier of the roaming location, and the user has signed up for the roaming APN or DNN, first map the user to a unified access point name, address according to the roaming APN or DNN, the communication user authentication server on the roaming industry mobile service platform side authenticates the UE user and passes the authentication, and the program ends; the access point name is set to the industry mobile service network identifier;

[0020] 2) If the industry mobile network identifier in the APN username or DNN username is the same as the industry mobile network identifier of the roaming location, and the user's subscription is not to the roaming APN or DNN, there are two processing methods:

[0021] Method 1: Identify the application access identifier and map it accordingly:

[0022] a. If the application access identifier is 1, the user is mapped to a unified access point name. The roaming user authentication module on the roaming industry mobile service platform side authenticates the UE user and passes the authentication, and the program ends. The access point name is set to the industry mobile service network identifier.

[0023] b. If the application access identifier is 0, no mapping is performed, and the UE user is authenticated by the communication user authentication server on the home industry mobile service platform side according to the contracted APN / DNN address, and the program ends.

[0024] Method 2: Application access identifiers are not recognized; mapping is performed solely based on industry mobile service network identifiers.

[0025] c. If the application access identifier is not recognized, the user is mapped to a unified access point name, and the roaming user authentication module on the roaming industry mobile service platform side authenticates the UE user and passes the authentication, and the process ends; the unified access point name is set to the industry mobile service network identifier.

[0026] 3) If the industry mobile network identifier in the APN username or DNN username is different from the industry mobile network identifier of the roaming location, the user is an illegal user and the process ends.

[0027] Furthermore, the specific process of step three is as follows:

[0028] For 4G networks, network access requests reach the roaming MME via the E-UTRAN network for AKA authentication. The roaming MME interacts with the home HSS to complete AKA authentication for the user. After successful authentication, the SGW and PGW initiate network access requests carrying the APN username and password information. E-UTRAN stands for Evolved Universal Terrestrial Radio Access Network; MME stands for Mobility Management Entity; HSS stands for Home Subscriber Server; SGW stands for Serving Gateway; and PGW stands for Data Network Gateway.

[0029] For 5G networks, network access requests reach the roaming AMF via the RAN network for AKA authentication. The roaming AMF interacts with the home UDM to complete AKA authentication for the user. After successful authentication, the roaming UPF initiates a network access request carrying the APN username and password information. AMF stands for Mobility Management Function, UDM stands for User Data Management, UPF stands for User Plane Function, and RAN stands for Radio Access Network.

[0030] Furthermore, in scenario a of method 1, the specific process by which the roaming user authentication module on the roaming location's industry mobile service platform authenticates and approves the UE user according to the roaming location's APN / DNN addressing is as follows:

[0031] a1. The core network system sends an authentication request carrying APN / DNN username and password information to the roaming user authentication module on the roaming industry mobile service platform side;

[0032] a2. The roaming user authentication module on the roaming industry mobile service platform authenticates the UE user and passes the authentication, and the local user communication link is successfully created.

[0033] Furthermore, in scenario b of method 1, the specific process by which the communication user authentication server on the home industry mobile service platform authenticates and approves the UE user according to the signed APN / DNN addressing is as follows:

[0034] b1. The core network system sends an authentication request carrying APN / DNN username and password information to the communication user authentication server on the home industry mobile service platform side.

[0035] b2. The communication user authentication server on the home industry mobile service platform side authenticates the UE and passes the authentication, and the roaming user communication link is successfully created.

[0036] Furthermore, in scenario c of method 2, the specific process by which the roaming user authentication module on the roaming industry mobile service platform authenticates and approves the UE user according to the roaming location's APN / DNN addressing is as follows:

[0037] c1. The core network system sends an authentication request carrying APN / DNN username and password information to the roaming user authentication module on the roaming industry mobile service platform side.

[0038] c2. The roaming user authentication module on the roaming industry mobile service platform authenticates the UE user and passes the authentication, and the roaming user communication link is successfully created.

[0039] The beneficial effects of this invention are as follows:

[0040] To address the issues of high latency and low efficiency caused by home-based access for roaming users, this invention proposes a roaming access method based on optimal path selection. This method can achieve the optimal roaming access method based on industry mobile service network identifiers, application access identifiers, and communication user authentication server identifiers.

[0041] To achieve roaming access, the Access Point Names (APNs / DNNs) of industry mobile service networks must first be standardized. However, this is difficult to achieve in practice because APNs are inherited downwards; as long as a subscriber exists, the APN cannot be deleted. Large-scale renaming of APNs requires huge investment and yields no benefits. Currently, operators have not yet planned a unified APN / DNN for the industry. In this invention, the Access Point Name Mapping module plans a unified APN for users with industry mobile service networks, namely, the industry mobile service network identifier. Under different conditions, the independently planned APNs and DNNs in various regions are mapped to this industry mobile service network identifier.

[0042] To achieve roaming access, the industry user (UE), the operator's core network, and the corresponding industry mobile service platform need to be interconnected. In this invention, the front-end component utilizes the APN / DNN username attribute value and plans according to the format of industry mobile service network identifier, application access identifier, communication user authentication server identifier, and communication user identifier to achieve information consistency between the industry front-end, back-end, and operator's core network. The operator can then select the optimal access method for the UE based on the industry mobile service network identifier and application access identifier information.

[0043] To achieve roaming access, the issue of communication user authentication for roaming users also needs to be addressed. In this invention, the roaming user authentication module calls the home location's communication user authentication interface based on the communication user authentication server identifier in the APN / DNN username to complete the communication user authentication for the roaming user UE, thus establishing a communication link for legitimate users to access the roaming area without compromising security. Attached Figure Description

[0044] Figure 1 This is a schematic diagram illustrating the roaming access of an industry mobile terminal in a 4G network according to an embodiment of the present invention.

[0045] Figure 2 This is a schematic diagram illustrating the roaming access of an industry mobile terminal in a 5G network according to an embodiment of the present invention.

[0046] Figure 3 This is a schematic diagram illustrating the format of the APN / DNN username in an embodiment of the present invention;

[0047] Figure 4 This is a schematic diagram of the overall process of the method according to an embodiment of the present invention;

[0048] Figure 5 This is a business timing diagram of the method in an embodiment of the present invention. Detailed Implementation

[0049] The present invention will be further described below with reference to the accompanying drawings. It should be noted that this embodiment is based on the present technical solution and provides detailed implementation methods and specific operation processes, but the protection scope of the present invention is not limited to this embodiment.

[0050] This embodiment provides a roaming access method based on optimal path selection. The following is a brief explanation of some of the terminology:

[0051] AKA: Authentication and Key Agreement

[0052] AMF: Mobility Management Function

[0053] APN: Access Point Name

[0054] DNN: Data Network Name

[0055] E-UTRAN: Evolved Universal Terrestrial Radio Access Network

[0056] HPLMN: Home Public Land Mobile Network

[0057] HSS: Home Subscriber Server

[0058] H-PCF: Home Policy Control Function

[0059] H-PCRF: Home Policy and Charging Rules Function

[0060] MME: Mobile Management Entity

[0061] PGW: Packet Data Network Gateway

[0062] RAN: Radio Access Network

[0063] SGW: Service Gateway

[0064] SIM: Subscriber Identity Module, the module for identifying subscribers.

[0065] SMF: Session Management Function

[0066] UDM: User Data Management

[0067] UE: User Equipment

[0068] UPF: User Plane Functionality

[0069] VPLMN: Visiting Public Land Mobile Network

[0070] V-PCF: Visiting Policy Control Function

[0071] V-PCRF: Visiting Policy and Charging Rules Function.

[0072] The method in this embodiment involves three components: 1) the front-end component on the roaming user UE side; 2) the access point name mapping module on the operator's core network side; and 3) the roaming user authentication module on the industry mobile service platform side.

[0073] The service flow in this embodiment of the method in a 4G network is as follows: Figure 1As shown. The SIM card used by the roaming user UE is a subscriber to the home core network system (HPLMN). The APP that the UE wants to access is a distributed application, with service nodes deployed on the industry mobile service platform in the roaming location. The UE wants to conduct business through this APP. The UE initiates a network connection request, and the front-end component fills in the APN username. The APN username consists of the industry mobile service network identifier, application access identifier, communication user authentication server identifier, and communication user identifier, such as... Figure 3 As shown. The application access identifier needs to be selected by the UE. The network request reaches the MME via the E-UTRAN network for AKA authentication. The MME interacts with the home HSS to complete AKA authentication for the user. After successful authentication, the SGW and PGW initiate a network request carrying the APN username and password. The Access Point Name Mapping module receives the network request, extracts the industry mobile service network identifier and application access identifier from the APN username, and determines whether to map the APN to the industry-unified access point name (which can be set to the industry mobile service network identifier) ​​based on these two values. When the application access identifier is 1 or not recognized, the network request carrying the APN username and password is sent to the roaming area's industry mobile service platform entry point via the roaming PGW. After the roaming user authentication module authenticates the UE, the roaming access communication link is successfully established.

[0074] The service flow in this embodiment of the method in a 5G network is as follows: Figure 2 As shown. The SIM card used by the roaming user (UE) is a subscriber to the home network core network system (HPLMN). The APP that the UE wants to access is a distributed application, with service nodes deployed on the industry mobile service platform in the roaming location. The UE wants to conduct business through this APP. The UE (roaming user) initiates a network connection request. The front-end component fills in the DNN username, which consists of the industry mobile service network identifier, application access identifier, communication user authentication server identifier, and communication user identifier. The application access identifier needs to be selected by the UE user. The network connection request reaches the roaming location AMF via the RAN network for AKA authentication. The AMF interacts with the home UDM to complete the AKA authentication for the user. After successful authentication, the roaming location UPF initiates a network connection request carrying the DNN username and password. The access point name mapping module receives the network connection request, extracts the industry mobile service network identifier and application access identifier, and decides whether to map the DNN to the industry-unified access point name (which can be set to the industry mobile service network identifier) ​​based on these two values. When the application access identifier is 1 or the application access identifier is not recognized, the network request carrying information such as the DNN username and password will be sent to the roaming area's industry mobile service platform entry through the roaming area's UPF. After the roaming user authentication module authenticates the UE, the communication link accessed by the roaming area is successfully established.

[0075] In summary, such as Figure 4-5 As shown, the specific process of the method in this embodiment is as follows:

[0076] Step 1: The roaming user UE starts the front-end component and sets the application access identifier according to the application access requirements. If it needs to access the roaming distributed application, the application access identifier is set to 1; otherwise, it is set to 0.

[0077] Step 2: The front-end component is filled with the APN username or DNN username. The APN username or DNN username consists of the industry mobile service network identifier, application access identifier, communication user authentication server identifier, and communication user identifier. The front-end component is filled with the APN username under 4G network and with the DNN username under 5G network.

[0078] Step 3: The roaming user UE initiates a network connection request and completes attachment and AKA authentication on the operator's network.

[0079] For 4G networks, the network connection request reaches the roaming MME via the E-UTRAN network for AKA authentication. The roaming MME interacts with the home HSS to complete the AKA authentication for the user. After successful authentication, the SGW and PGW initiate the network connection request carrying information such as the APN username and password.

[0080] For 5G networks, network requests reach the roaming AMF via the RAN network for AKA authentication. The roaming AMF then interacts with the home UDM to complete AKA authentication for the user. After successful authentication, the roaming UPF initiates a network request carrying information such as the APN username and password.

[0081] Step 4: The Access Point Name Mapping (APN) module on the roaming SMF side receives the UE's network connection request, extracts information from the APN username or DNN username, including the industry mobile service network identifier and application access identifier, and performs the following determination:

[0082] 1) If the industry mobile service network identifier in the APN username or DNN username is the same as the industry mobile service network identifier of the roaming location, and the user has signed up for the roaming APN or DNN, first map the user to a unified access point name, address according to the roaming APN or DNN, the communication user authentication server on the roaming industry mobile service platform side authenticates the UE user and passes the authentication, and the program ends; the access point name is set to the industry mobile service network identifier;

[0083] 2) If the industry mobile network identifier in the APN username or DNN username is the same as the industry mobile network identifier of the roaming location, and the user's subscription is not to the roaming APN or DNN, there are two processing methods:

[0084] Method 1: Identify the application access identifier and map it accordingly:

[0085] a. If the application access identifier is 1, the user is mapped to a unified access point name. Following the roaming APN / DNN addressing, the roaming user authentication module on the roaming industry mobile service platform authenticates the UE user. Once successful, the process ends. The access point name is set to the industry mobile service network identifier. The specific operation process is as follows:

[0086] a1. The core network system sends an authentication request carrying APN / DNN username and password information to the roaming user authentication module on the roaming industry mobile service platform side.

[0087] a2. The roaming user authentication module on the roaming industry mobile service platform authenticates the UE user and passes the authentication, and the local user communication link is successfully created.

[0088] b. If the application access identifier is 0, no mapping is performed, and the UE user is authenticated by the communication user authentication server on the home industry mobile service platform side according to the subscribed APN / DNN addressing. Once the authentication is successful, the process ends. The specific operation process is as follows:

[0089] b1. The core network system sends an authentication request carrying the APN / DNN username and password information to the communication user authentication server on the home industry mobile service platform side.

[0090] b2. The communication user authentication server on the home industry mobile service platform side authenticates the UE and passes the authentication, and the roaming user communication link is successfully created.

[0091] Method 2: Application access identifiers are not recognized; mapping is performed solely based on industry mobile service network identifiers.

[0092] c. If the application access identifier is not recognized, the user is mapped to a unified access point name. Addressing is performed according to the roaming location's APN / DNN. The roaming user authentication module on the roaming location's industry mobile service platform authenticates the UE user and, upon successful authentication, the process ends. The unified access point name is set to the industry mobile service network identifier. The specific operation process is as follows:

[0093] c1. The core network system sends an authentication request carrying APN / DNN username and password information to the roaming user authentication module on the roaming industry mobile service platform side.

[0094] c2. The roaming user authentication module on the roaming industry mobile service platform authenticates the UE user and passes the authentication, and the roaming user communication link is successfully created.

[0095] 3) If the industry mobile network identifier in the APN username or DNN username is different from the industry mobile network identifier of the roaming location, the user is an illegal user and the process ends.

[0096] For those skilled in the art, various corresponding changes and modifications can be made based on the above technical solutions and concepts, and all such changes and modifications should be included within the protection scope of the claims of this invention.

Claims

1. A roaming access method based on optimal path selection, characterized in that, The SIM card used by the roaming user (UE) is a subscription user of the home core network system; the specific process of the method is as follows: Step 1: The roaming user UE starts the front-end component and sets the application access identifier according to the application access requirements. If it needs to access the roaming distributed application, the application access identifier is set to 1; otherwise, it is set to 0. Step 2: The front-end component is filled with the APN username or DNN username. The APN username or DNN username consists of the industry mobile service network identifier, application access identifier, communication user authentication server identifier, and communication user identifier. Under 4G network, the front-end component is filled with the APN username, and under 5G network, the front-end component is filled with the DNN username. APN represents the access point name, and DNN represents the data network name. Step 3: The roaming user UE initiates a network connection request and completes attachment and AKA authentication on the operator's network; AKA stands for authentication and key agreement; Step 4: The Access Point Name Mapping (APN) module on the roaming SMF side receives the UE's network connection request. SMF stands for Session Management Function. The APN or DNN username is extracted, including the industry mobile service network identifier and application access identifier, and the following determination is made: 1) If the industry mobile service network identifier in the APN username or DNN username is the same as the industry mobile service network identifier of the roaming location, and the user has signed up for the roaming APN or DNN, first map the user to a unified access point name, address according to the roaming APN or DNN, the communication user authentication server on the roaming industry mobile service platform side authenticates the UE user and passes the authentication, and the program ends; the access point name is set to the industry mobile service network identifier; 2) If the industry mobile network identifier in the APN username or DNN username is the same as the industry mobile network identifier of the roaming location, and the user's subscription is not to the roaming APN or DNN, there are two processing methods: Method 1: Identify the application access identifier and map it accordingly: a. If the application access identifier is 1, the user is mapped to a unified access point name. The roaming user authentication module on the roaming industry mobile service platform side authenticates the UE user and passes the authentication, and the program ends. The access point name is set to the industry mobile service network identifier. b. If the application access identifier is 0, no mapping is performed, and the UE user is authenticated by the communication user authentication server on the home industry mobile service platform side according to the contracted APN / DNN address, and the program ends. Method 2: Application access identifiers are not recognized; mapping is performed solely based on industry mobile service network identifiers. c. If the application access identifier is not recognized, the user is mapped to a unified access point name, and the roaming user authentication module on the roaming industry mobile service platform side authenticates the UE user and passes the authentication, and the process ends; the unified access point name is set to the industry mobile service network identifier. 3) If the industry mobile network identifier in the APN username or DNN username is different from the industry mobile network identifier of the roaming location, the user is an illegal user and the process ends.

2. The method according to claim 1, characterized in that, The specific process of step three is as follows: For 4G networks, network access requests reach the roaming MME via the E-UTRAN network for AKA authentication. The roaming MME interacts with the home HSS to complete AKA authentication for the user. After successful authentication, the SGW and PGW initiate network access requests carrying APN username and password information. E-UTRAN stands for Evolved Universal Terrestrial Radio Access Network; MME stands for Mobility Management Entity. HSS indicates the server to which the subscriber belongs; SGW stands for Service Gateway, and PGW stands for Data Network Gateway. For 5G networks, network access requests reach the roaming AMF via the RAN network for AKA authentication. The roaming AMF interacts with the home UDM to complete AKA authentication for the user. After successful authentication, the roaming UPF initiates a network access request carrying the APN username and password information. AMF stands for Mobility Management Function, UDM stands for User Data Management, UPF stands for User Plane Function, and RAN stands for Radio Access Network.

3. The method according to claim 1, characterized in that, In scenario a of method 1, the specific process by which the roaming user authentication module on the roaming location's industry mobile service platform authenticates and approves the UE user according to the roaming location's APN / DNN addressing is as follows: a1. The core network system sends an authentication request carrying APN / DNN username and password information to the roaming user authentication module on the roaming industry mobile service platform side; a2. The roaming user authentication module on the roaming industry mobile service platform authenticates the UE user and passes the authentication, and the local user communication link is successfully created.

4. The method according to claim 1, characterized in that, In scenario b of method 1, the specific process by which the communication user authentication server on the home industry mobile service platform authenticates and approves the UE user according to the signed APN / DNN addressing is as follows: b1. The core network system sends an authentication request carrying APN / DNN username and password information to the communication user authentication server on the home industry mobile service platform side. b2. The communication user authentication server on the home industry mobile service platform side authenticates the UE and passes the authentication, and the roaming user communication link is successfully created.

5. The method according to claim 1, characterized in that, In scenario c of method 2, the specific process by which the roaming user authentication module on the roaming location's industry mobile service platform authenticates and approves the UE user, based on the roaming location's APN / DNN addressing, is as follows: c1. The core network system sends an authentication request carrying APN / DNN username and password information to the roaming user authentication module on the roaming industry mobile service platform side. c2. The roaming user authentication module on the roaming industry mobile service platform authenticates the UE user and passes the authentication, and the roaming user communication link is successfully created.

Images