A method, apparatus and storage medium for establishing a service connection

Abstract

The application provides a method and device for establishing a service connection and a storage medium, relates to the technical field of communication, and aims at solving the problem that the use position of a service cannot be limited in the prior art. The method comprises the following steps: obtaining user feature information of a user before service transmission. Then, a request message for requesting the establishment of a service connection is received. The request message comprises terminal feature information of a terminal. Then, whether to establish the service connection is determined according to a matching result of the terminal feature information and the user feature information. Therefore, the application can reasonably control the communication service.

Description

[0001] This application is a divisional application. The original application was an invention patent application filed with the State Intellectual Property Office on December 8, 2021, with application number 202111493591.7 and title "A method, apparatus and storage medium for establishing a business connection", the entire contents of which are incorporated herein by reference. Technical Field

[0002] This application relates to the field of communication technology, and in particular to a method, apparatus and storage medium for establishing a service connection. Background Technology

[0003] Currently, the main technologies providing gigabit networks include: mobile communication technology, wireless fidelity (Wi-Fi), and fiber-to-the-x (FTTx) access to fixed broadband networks. With the convergence of mobile networks, Wi-Fi, and fixed broadband networks, voice over Wi-Fi (VoWiFi) has emerged. VoWiFi terminals can use non-3GPP network access standards defined in the 3rd Generation Partnership Project (3GPP) specifications to establish a trusted wireless local area network (WLAN), or they can use the untrusted WLAN access mode to establish a communication connection with the operator's evolved packet core (EPC). Afterwards, the terminal can transmit service data with the established EPC.

[0004] However, when VoWiFi terminals authenticate and transmit services through Wi-Fi / WLAN access points (APs), they typically do not carry user location information. This makes it impossible for operators to limit the location where VoWiFi services are used, collect the location of users when using VoWiFi services, and consequently, to reasonably manage the terminal's communication services and provide emergency call services to users in accordance with industry regulatory requirements. Summary of the Invention

[0005] This application provides a method, apparatus, and storage medium for establishing a service connection, which addresses the problem in the prior art that the location of service usage cannot be limited.

[0006] To achieve the above objectives, this application adopts the following technical solution:

[0007] Firstly, a method for establishing a service connection is provided, comprising: obtaining user characteristic information of a user before performing service transmission; then, receiving a request message from a terminal requesting the establishment of a service connection. The request message includes terminal characteristic information of the terminal. Next, based on the matching result between the terminal characteristic information and the user characteristic information, determining whether to establish a service connection.

[0008] Optionally, the method for determining whether to establish a service connection based on the matching results of terminal feature information and user feature information specifically includes: establishing a service connection when the matching result indicates that the terminal feature information matches the user feature information.

[0009] Optionally, the user characteristic information also includes preset user service parameters; the method further includes: sending a service authentication message for user authentication to the authentication device of the upper layer network; and sending the preset user service parameters to the service device of the upper layer network after successful user authentication.

[0010] Optionally, the upper-layer network is a mobile core network; the authentication equipment of the upper-layer network is the authentication, authorization, and accounting equipment of the mobile core network; the service equipment of the upper-layer network is Internet Protocol Multimedia Subsystem equipment; the preset user service parameter is: the user's location information.

[0011] Optionally, the user's location information is "administrative area code + country code + local network area code"; the method of sending preset user service parameters to the service equipment of the upper-layer network specifically includes: sending "administrative area code + country code + local network area code" to the Internet Protocol Multimedia Subsystem (IPS) device, so that after the IPS device receives the user's emergency call message, it routes the emergency call message to the emergency call agent corresponding to "administrative area code + country code + local network area code".

[0012] Optionally, the user characteristic information is: the public Internet Protocol address after the broadband network gateway performs network address translation on the user's home gateway's Internet Protocol address; the terminal characteristic information is: the terminal's public Internet Protocol address; the terminal and the home gateway are connected via Wi-Fi.

[0013] Optionally, methods for obtaining user characteristic information may include receiving user characteristic information sent by authentication, authorization, and accounting devices of a fixed broadband network.

[0014] Optionally, user characteristic information may also include: user business identification information.

[0015] Secondly, an apparatus for establishing a service connection is provided, comprising: an acquisition unit, a receiving unit, and a determination unit; the acquisition unit is used to acquire user characteristic information of a user; the receiving unit is used to receive a request message from a terminal requesting to establish a service connection; the request message includes terminal characteristic information of the terminal; and the determination unit is used to determine whether to establish a service connection based on the matching result between the terminal characteristic information received by the receiving unit and the user characteristic information acquired by the acquisition unit.

[0016] Optionally, the determining unit is specifically used to: establish a service connection when the matching result indicates that the terminal feature information matches the user feature information.

[0017] Optionally, the user characteristic information also includes preset user service parameters; the device for establishing a service connection also includes: a sending unit; the sending unit is used to send a service authentication message for user authentication to the authentication device of the upper layer network; the sending unit is also used to send the preset user service parameters to the service device of the upper layer network after successful user authentication.

[0018] Optionally, the upper-layer network is a mobile core network; the authentication equipment of the upper-layer network is the authentication, authorization, and accounting equipment of the mobile core network; the service equipment of the upper-layer network is Internet Protocol Multimedia Subsystem equipment; the preset user service parameter is: the user's location information.

[0019] Optionally, the user's location information is "administrative area code + country code + local network area code"; the sending unit is specifically used to: send "administrative area code + country code + local network area code" to the Internet Protocol Multimedia Subsystem device, so that after the Internet Protocol Multimedia Subsystem device receives the user's emergency call message, it routes the emergency call message to the emergency call agent corresponding to "administrative area code + country code + local network area code".

[0020] Optionally, the user characteristic information is: the public Internet Protocol address after the broadband network gateway performs network address translation on the user's home gateway's Internet Protocol address; the terminal characteristic information is: the terminal's public Internet Protocol address; the terminal and the home gateway are connected via Wi-Fi.

[0021] Optionally, the receiving unit is specifically used to receive user characteristic information sent by the authentication, authorization, and accounting devices of the fixed broadband network.

[0022] Optionally, user characteristic information may also include: user business identification information.

[0023] Thirdly, an apparatus for establishing a service connection is provided, comprising a memory and a processor; the memory is used to store computer-executed instructions, and the processor is connected to the memory via a bus; when the apparatus for establishing a service connection is running, the processor executes the computer-executed instructions stored in the memory, so that the apparatus for establishing a service connection performs the method for establishing a service connection described in the first aspect.

[0024] The apparatus for establishing a service connection can be a network device or a component of a network device, such as a chip system within the network device. This chip system supports the network device in implementing the functions involved in the first aspect and any of its possible implementations, such as acquiring, determining, and transmitting data and / or information involved in the aforementioned method for establishing a service connection. The chip system includes a chip, but may also include other discrete devices or circuit structures.

[0025] Fourthly, a computer-readable storage medium is provided, comprising computer-executable instructions that, when executed on a computer, cause the computer to perform the method for establishing a business connection as described in the first aspect.

[0026] Fifthly, a computer program product is also provided, comprising computer instructions that, when executed on a means for establishing a business connection, cause the means for establishing a business connection to perform the method for establishing a business connection as described in the first aspect above.

[0027] It should be noted that the aforementioned computer instructions may be stored, in whole or in part, on the first computer-readable storage medium. The first computer-readable storage medium may be packaged together with the processor of the device establishing the service connection, or it may be packaged separately from the processor of the device establishing the service connection; this application embodiment does not limit this.

[0028] The descriptions of the second, third, fourth, and fifth aspects in this application can be referenced to the detailed description of the first aspect; and the beneficial effects of the second, third, fourth, and fifth aspects can be referenced to the analysis of the beneficial effects of the first aspect, which will not be repeated here.

[0029] In the embodiments of this application, the names of the devices for establishing service connections do not limit the devices or functional modules themselves. In actual implementation, these devices or functional modules may appear under other names. As long as the functions of each device or functional module are similar to those of this application, they fall within the scope of the claims of this application and their equivalents.

[0030] These or other aspects of this application will become more readily apparent in the following description.

[0031] The technical solution provided in this application brings at least the following beneficial effects:

[0032] Based on any of the above aspects, this application proposes a method for establishing a service connection. Before service transmission, user characteristic information of the user is obtained. Then, a request message from the terminal requesting the establishment of a service connection is received. The request message includes the terminal's terminal characteristic information. Next, based on the matching result between the terminal characteristic information and the user characteristic information, it is determined whether to establish a service connection. Therefore, this application can limit the establishment of service connections between the terminal and service equipment based on the matching result, thereby enabling operators to reasonably manage the terminal's communication services. Attached Figure Description

[0033] Figure 1 This is a schematic diagram of the communication system provided in an embodiment of this application;

[0034] Figure 2 A schematic diagram of a hardware structure of a communication device provided in an embodiment of this application;

[0035] Figure 3 A schematic diagram of another hardware structure of the communication device provided in the embodiments of this application;

[0036] Figure 4 A flowchart illustrating a method for establishing a business connection, provided as an embodiment of this application;

[0037] Figure 5 A flowchart illustrating another method for establishing a business connection provided in an embodiment of this application;

[0038] Figure 6 A flowchart illustrating another method for establishing a business connection provided in an embodiment of this application;

[0039] Figure 7 A flowchart illustrating another method for establishing a business connection provided in an embodiment of this application;

[0040] Figure 8 This is a schematic diagram of a device for establishing a service connection, provided in an embodiment of this application. Detailed Implementation

[0041] The technical solutions of the embodiments of this application will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of the present invention, and not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those of ordinary skill in the art without creative effort are within the scope of protection of the present invention.

[0042] It should be noted that in the embodiments of this application, the words "exemplary" or "for example" are used to indicate examples, illustrations, or explanations. Any embodiment or design scheme described as "exemplary" or "for example" in the embodiments of this application should not be construed as being more preferred or advantageous than other embodiments or design schemes. Specifically, the use of the words "exemplary" or "for example" is intended to present the relevant concepts in a specific manner.

[0043] To facilitate a clear description of the technical solutions of the embodiments of this application, the terms "first" and "second" are used in the embodiments of this application to distinguish the same or similar items with essentially the same function and effect. Those skilled in the art can understand that the terms "first" and "second" are not intended to limit the quantity or execution order.

[0044] As described in the background section, existing methods for establishing business connections cannot limit the location where the business is used.

[0045] To address the aforementioned issues, this application provides a method for establishing a service connection. Before service transmission, user characteristic information is obtained. Then, a request message from a terminal requesting the establishment of a service connection is received. This request message includes the terminal's characteristic information. Next, based on the matching result between the terminal characteristic information and the user characteristic information, it is determined whether to establish a service connection. Therefore, this application can limit the establishment of service connections between the terminal and service equipment based on the matching result, thereby enabling operators to reasonably manage the terminal's communication services.

[0046] This method for establishing service connections is applicable to communication systems. Figure 1 One structure of the communication system is shown. For example... Figure 1 As shown, the communication system includes: terminal 101, fixed broadband network equipment 102, tracing equipment 103, service gateway equipment 104, mobile core network equipment 105, service equipment 106, and business support system (BSS) equipment 107.

[0047] Terminal 101 communicates with fixed broadband network device 102 via Wi-Fi. Fixed broadband network device 102 communicates with tracing device 103 and service gateway device 104. Service gateway device 104 communicates with tracing device 103 and mobile core network device 105. Mobile core network device 105 communicates with service device 106. BSS device 107 communicates with terminal 101, fixed broadband network device 102, tracing device 103, mobile core network device 105, and service device 106.

[0048] In practical applications, fixed broadband network device 102 can connect to multiple terminals. Mobile core network device 105 can connect to multiple service devices. BSS device 107 can connect to multiple fixed broadband network devices, or multiple service devices. For ease of understanding, Figure 1 The following example illustrates the connection between a fixed broadband network device 102 and a terminal 101, a mobile core network device 105 and a service device 106, and a BSS device 107 and a fixed broadband network device 102 and a service device 106.

[0049] in, Figure 1 Terminal 101 can be a device that provides voice and / or data connectivity to a user, a handheld device with wireless connectivity, or other processing device connected to a wireless modem. The wireless terminal can communicate with one or more core networks via a radio access network (RAN). The wireless terminal can be a mobile terminal, such as a mobile phone (or "cellular" phone) and a computer with a mobile terminal, or a portable, pocket-sized, handheld, computer-embedded, or vehicle-mounted mobile device that exchanges voice and / or data with the radio access network, such as a mobile phone, tablet, laptop, netbook, or personal digital assistant (PDA). Terminal 101 can connect to either a Wi-Fi network or a cellular network. Figure 1 Terminal 101 can also connect to the base station subsystem, a component of the cellular network responsible for transcoding call channels via the air interface, allocating radio channels to mobile phones, paging, transmission, and other radio network-related tasks. The base station subsystem connects to the mobile core network equipment 105.

[0050] Figure 1 The fixed broadband network equipment 102 may include: Wi-Fi access point equipment, fixed broadband access network equipment, and metropolitan area network equipment.

[0051] Optionally, the fixed broadband access network can be a passive optical network (PON), specifically including: an optical network unit (ONU) located on the user side and an optical line terminal (OLT) located at the central office. The OLT and ONU are connected via an optical distribution network. In this embodiment, the Wi-Fi access point device and the optical network unit (ONU) can also be integrated into a single device, such as a home gateway (HGU) or an enterprise gateway. This embodiment does not impose any limitations on this.

[0052] In some literature, home gateways and ONUs are also referred to as customer premises equipment (CPE), and this application embodiment does not impose any limitations on this. In the following process, home gateways will be used to represent ONUs.

[0053] Optionally, the metropolitan area network (MAN) equipment may include a broadband network gateway (BNG). The BNG connects to the OLT and also to the authentication, authorization, and accounting (AAA) server of the fixed broadband network. The BNG manages the sessions of subscribers on the fixed broadband network. A point-to-point protocol over Ethernet client (PPPoE) connection is established between the BNG and the HGU. The BNG can also connect to the service gateway device 104.

[0054] Figure 1 The tracing device 103 is used for service authentication, service access judgment, management, and control. Optionally, the tracing device 103 can be an AAA server for the fixed broadband network. The AAA server for the fixed broadband network can be connected to the BNG. The BNG sends the user authentication information of the fixed broadband network to the AAA server of the fixed broadband network. The user authentication information of the fixed broadband network may include: the PPPoE account and corresponding password of the fixed broadband network user, the access line identifier of the fixed broadband network user, etc. Since each user of the fixed broadband network corresponds one-to-one with the home gateway HGU, the access line identifier of the fixed broadband network user is also called the access line identifier of the home gateway.

[0055] Figure 1The service gateway device 104 is used to perform functions such as heterogeneous network (device) protocol conversion and data packet forwarding.

[0056] Optionally, the service gateway device 104 can be an evolved packet data gateway (ePDG) for VoWiFi services, which performs functions such as protocol conversion between the metropolitan area network and the mobile core network, and data packet forwarding.

[0057] Optionally, the terminal establishes an Internet Protocol Security Virtual Private Network (IPsec VPN) with the 101 and ePDG. The ePDG connects the mobile core network (such as an evolved packet core (EPC)) and the metropolitan area network / Internet.

[0058] Figure 1 The mobile core network equipment 105 can be the core network equipment of the 4G mobile communication technology: EPC, or the core network equipment of the 5G mobile communication technology: the 5G core network (5GC), or a converged network of EPC and 5GC; correspondingly, the cellular network can be a 4G cellular network or a 5G cellular network. The EPC includes network elements such as a public data network (PDN) gateway (P-GW), a home subscriber server (HSS), and an AAA server for the mobile core network. The authentication, authorization, and accounting server (equipment) of the mobile core network, also known as 3GPP AAA, can be implemented according to the technical specifications (TS) 23.008 and 29.273 defined by 3GPP. This application embodiment does not impose any limitations on this. Terminal 101 can also connect to mobile core network equipment 105 through base station (subsystem) to realize cellular network communication.

[0059] Figure 1The service device 106 is used for service provisioning and execution. Depending on the service requested by the terminal 101, the service device 106 can run the corresponding service system. For example, when the service requested by the terminal 101 is a voice service such as VoWiFi, the service device 106 can be an application server running the Internet Protocol Multimedia Subsystem (IMS).

[0060] Figure 1 The BSS device 107 is used to execute all the functions corresponding to the functional modules of the Business Support System. These functional modules include: Customer Relationship Management, Data Acquisition System, Billing and Accounting, Integrated Settlement, and Marketing Support.

[0061] The basic hardware structures of the terminal 101, fixed broadband network equipment 102, tracing device 103, service gateway device 104, mobile core network equipment 105, service equipment 106, and BSS device 107 in the communication system are similar, all including Figure 2 or Figure 3 The components included in the communication device shown. The following are examples... Figure 2 and Figure 3 Taking the communication device shown as an example, the hardware structure of terminal 101, fixed broadband network device 102, traceability device 103, service gateway device 104, mobile core network device 105, service device 106, and BSS device 107 is described. Figure 2 The diagram shown is a hardware structure schematic of a communication device provided in an embodiment of this application. The communication device includes a processor 21, a memory 22, a communication interface 23, and a bus 24. The processor 21, the memory 22, and the communication interface 23 are connected via the bus 24.

[0062] Processor 21 is the control center of the communication device. It can be a single processor or a collective term for multiple processing elements. For example, processor 21 can be a general-purpose central processing unit (CPU) or other general-purpose processors. Among them, the general-purpose processor can be a microprocessor or any conventional processor.

[0063] As one embodiment, processor 21 may include one or more CPUs, for example Figure 2 CPU 0 and CPU 1 are shown in the diagram.

[0064] The memory 22 may be a read-only memory (ROM) or other type of static storage device capable of storing static information and instructions, random access memory (RAM) or other type of dynamic storage device capable of storing information and instructions, or electrically erasable programmable read-only memory (EEPROM), disk storage media or other magnetic storage devices, or any other medium capable of carrying or storing desired program code in the form of instructions or data structures and accessible by a computer, but is not limited thereto.

[0065] In one possible implementation, the memory 22 can exist independently of the processor 21. The memory 22 can be connected to the processor 21 via a bus 24 and is used to store instructions or program code. When the processor 21 calls and executes the instructions or program code stored in the memory 22, it can implement the method for establishing a service connection provided in the following embodiments of the present invention.

[0066] In this embodiment, the software programs stored in the memory 22 are different for terminal 101, fixed broadband network device 102, source tracing device 103, service gateway device 104, mobile core network device 105, service device 106, and BSS device 107. Therefore, the functions implemented by terminal 101, fixed broadband network device 102, source tracing device 103, service gateway device 104, mobile core network device 105, service device 106, and BSS device 107 are different. The functions performed by each device will be described in conjunction with the following flowchart.

[0067] In another possible implementation, the memory 22 can also be integrated with the processor 21.

[0068] Communication interface 23 is used for connecting the communication device to other devices via a communication network, which can be Ethernet, wireless access network, wireless local area network (WLAN), etc. Communication interface 23 may include a receiving unit for receiving data and a transmitting unit for sending data.

[0069] Bus 24 can be an industry standard architecture (ISA) bus, a peripheral component interconnect (PCI) bus, or an extended industry standard architecture (EISA) bus, etc. This bus can be divided into address bus, data bus, control bus, etc. For ease of representation, Figure 2 The bus is represented by a single thick line, but this does not mean that there is only one bus or one type of bus.

[0070] Figure 3 Another hardware structure of the communication device in an embodiment of the present invention is shown. For example... Figure 3 As shown, the communication device may include a processor 31 and a communication interface 32. The processor 31 is coupled to the communication interface 32.

[0071] The functions of processor 31 can be referred to in the description of processor 21 above. In addition, processor 31 also has a storage function, and can perform the functions of memory 22 mentioned above.

[0072] The communication interface 32 is used to provide data to the processor 31. The communication interface 32 can be an internal interface of the communication device or an external interface of the communication device (equivalent to communication interface 23).

[0073] It should be pointed out that, Figure 2 (or Figure 3 The structure shown in the diagram does not constitute a limitation on the communication device, except... Figure 2 (or Figure 3 In addition to the components shown in the diagram, the communication device may include more or fewer components than shown, or combine certain components, or have different component arrangements.

[0074] The method for establishing a service connection provided in the embodiments of this application will be described in detail below with reference to the accompanying drawings.

[0075] like Figure 4 As shown, the method for establishing a service connection provided in this application embodiment is applied to a terminal, fixed broadband network equipment, mobile core network equipment, BSS equipment, and service equipment, including:

[0076] S401. The traceability device receives a service activation request from the BSS device, which requests the user to activate the target service.

[0077] The service activation request includes: the user's service identification information, preset user service parameters, and user identification.

[0078] Among them, the user's business identification information uniquely identifies a business.

[0079] Optionally, when a user activates a fixed (broadband) network and mobile (communication) network converged service (hereinafter referred to as "converged service"), the user can be both a fixed-line broadband user and a mobile communication user.

[0080] Optionally, when a user activates a converged service for fixed (broadband) network and mobile (communication) network (hereinafter referred to as "converged service"), the user's service identification information can be: the user's VoWiFi service identifier (since one user corresponds to one home gateway, the user's VoWiFi service identifier is also called the home gateway's VoWiFi service identifier).

[0081] Optionally, when a user activates a converged service for fixed (broadband) network and mobile (communication) network (hereinafter referred to as "converged service"), the preset user service parameter is: the fixed telephone area code corresponding to the address of the user's fixed broadband home gateway (commonly known as the "installation address"), which can be in the format of "administrative area code + country code + local network area code".

[0082] The local area code is specified by the relevant national and industry standards for emergency call services.

[0083] Alternatively, the preset user service parameters can also be: the cell ID of the cellular network where the user's mobile terminal is located, or the Internet Protocol (IP) address of the user's home gateway on the public network.

[0084] Optionally, when a user activates a fixed (broadband) network service, the user's service identification information can be: fixed broadband service.

[0085] Optionally, when a user activates a fixed (broadband) network service, the preset user service parameters include: the user's broadband account and password, and the access line identifier corresponding to the address of the home gateway (compliant with the industry standard "Access Network Technical Requirements - Broadband User Access Line (Port) Identifier").

[0086] A user identifier uniquely identifies a user, and a natural person or an organization can correspond to multiple users.

[0087] Optionally, the tracing device is: the AAA server of the fixed broadband network.

[0088] S402. The traceability device obtains the user's user characteristic information.

[0089] The tracing device receives a (fixed-line broadband) message from BNG and extracts user information from that message.

[0090] Among them, the messages from BNG include: user characteristic information.

[0091] Optionally, user characteristic information includes the user's public IP address, the access line identifier corresponding to the address of the user's home gateway, and the user identifier.

[0092] Optionally, when a user's home gateway establishes a Layer 2 network connection with the BNG via the PPPoE protocol, the BNG sends a PPPoE authentication message to the service authentication provider. This message includes the user's broadband account and password, and the access line identifier corresponding to the address of the user's home gateway. After successful authentication, the BNG assigns an IP address to the user's home gateway, which can be a private network address.

[0093] Optionally, when BNG has a sufficient number of public IP addresses, the user's public IP address is the public IP address obtained by BNG after performing network address translation on the user's home gateway IP address.

[0094] Optionally, when BNG's public IP address is insufficient, BNG will perform network address translation on the user's home gateway IP address to form a public IP address and port number.

[0095] S403, The service gateway device obtains the user's user characteristic information.

[0096] The business gateway device receives user information from the traceability device and establishes a user information list.

[0097] The user information list includes: the user's service identification information, preset user service parameters, user identifier, user's public IP address, and the access line identifier corresponding to the address of the user's home gateway.

[0098] Optionally, when BNG's public IP addresses are insufficient, the public IP address can be equivalent to: public IP address and port number.

[0099] Optionally, the tracing device detects an update to the public IP address of the home gateway and sends this data to the service gateway device. The service gateway device then updates its user information list based on the data sent to the home gateway.

[0100] Optionally, a public IP address update may occur when the home gateway is powered on or off.

[0101] Optionally, when the tracing device receives a notification from the BSS that a user has disabled the service function, the tracing device deletes the relevant information of that user from the user's characteristic information and sends an instruction to the service gateway device to delete the user's information. After receiving the instruction to delete the user's information, the service gateway device deletes the relevant information of that user from the user information list.

[0102] Optionally, the service gateway device can be an ePDG.

[0103] S404. The service gateway device receives a request message from the terminal requesting the establishment of a service connection.

[0104] The request message includes the terminal's terminal characteristic information.

[0105] The service gateway device receives service access requests from terminals and extracts terminal characteristic information.

[0106] Optionally, the terminal characteristic information may be the public Internet Protocol address of the terminal.

[0107] Optionally, the request message can be an Internet Key Exchange (IKE) message, which is used by the terminal to establish an Internet Protocol Security Virtual Private Network (IPsec VPN) with the service gateway device.

[0108] S405. The service gateway device determines whether to establish a service connection based on the matching results of terminal feature information and user feature information.

[0109] It is understood that, in another embodiment, combining Figure 4 After steps S401 and S402, the service gateway device determines whether to establish a service connection based on the matching results of terminal feature information and user feature information. The methods include: S403 can be replaced by S406, and S405 can be replaced by S407-S409.

[0110] S406: The traceability device generates a user information list based on user characteristic information.

[0111] S407: The service gateway device sends the terminal's terminal characteristic information to the tracing device.

[0112] S408: The tracing device queries the user information list based on the received terminal feature information and returns the matching result of the terminal feature information and user feature information to the service gateway device.

[0113] S409: The service gateway device determines whether to establish a service connection based on the matching results of terminal feature information and user feature information.

[0114] In one embodiment, combined with Figure 4 ,like Figure 5 As shown in Figure S405, the method by which the service gateway device determines whether to establish a service connection based on the matching results of terminal feature information and user feature information specifically includes: S501.

[0115] S501. When the matching result indicates that the terminal feature information matches the user feature information, the service gateway device establishes the service connection.

[0116] Optionally, when there are enough public IP addresses in the BNG, the terminal feature information and the user feature information are matched, that is, the public IP address of the user's home gateway after performing network address translation on the Internet Protocol address is the same as the public IP address of the terminal.

[0117] Optionally, when the BNG's public IP address is insufficient, the terminal characteristic information and user characteristic information are matched, that is, the broadband network gateway converts the user's home gateway's Internet Protocol address into a public Internet Protocol address and port number, which are the same as the terminal's public IP address and port number.

[0118] The method also includes: S502-S503.

[0119] S502. The service gateway device sends service authentication messages for user authentication to the authentication device in the upper-layer network.

[0120] The service gateway device sends service authentication messages for user terminals to the authentication devices in the upper-layer network.

[0121] Optionally, the upper-layer network is the mobile core network, and the authentication device in the upper-layer network is the Authentication, Authorization, and Accounting (AAA) device of the mobile core network. The service gateway device sends the user's authentication message to the AAA of the mobile core network. The AAA of the mobile core network is used to determine whether the user (terminal) has subscribed to the VoWiFi service in the mobile network. If so, authentication is successful; otherwise, authentication fails, the AAA of the mobile core network returns a failure code to the service gateway device, and the service gateway device returns the failure code and a timer to the terminal, and attempts to re-initiate the request message to establish a service connection after the timer expires.

[0122] Optionally, S502 can be implemented by referring to the certification process specified in 3GPP TS23.008 and 29.273.

[0123] Optionally, in 4G, the authentication process of the user terminal to the core network also becomes the EPC attachment process of VoWiFi.

[0124] Optionally, the certification equipment can also be a traceability equipment.

[0125] S503. After successful user authentication, the service gateway device sends preset user service parameters to the service devices in the upper-layer network.

[0126] The service gateway device uploads the preset user service parameters to the policy and charging rules function (PCRF) or the policy control function (PCF) of the 5G core network via the P-GW of the 4G core network or the session management function of the 5G core network.

[0127] Optionally, the preset user service parameter is: the user's location information.

[0128] Optionally, the user's location information is "administrative area code + country code + local network area code".

[0129] It is understood that, in another embodiment, after the service gateway device receives the message of step S404, it can first execute S502. After the corresponding mobile core network device (such as 3GPP AAA) receives the service authentication message of S502, it returns the service authentication result to the service gateway device. If the service authentication is successful, the service gateway executes S501 and S503.

[0130] In one embodiment, combined with Figure 5 ,like Figure 6 As shown in S503, the method by which the service gateway device sends preset user service parameters to the service devices in the upper-layer network after successful user authentication specifically includes: S601.

[0131] S601. The service gateway device sends "administrative area code + country code + local network area code" to the Internet Protocol Multimedia Subsystem device so that after the Internet Protocol Multimedia Subsystem device receives the user's emergency call message, it routes the emergency call message to the emergency call agent corresponding to "administrative area code + country code + local network area code".

[0132] The service gateway device sends the user's service parameters to the service device through the PCRF or PCF of the mobile core network. These parameters can be "administrative area code + country code + local network area code" used to determine the user's location.

[0133] Optionally, the user terminal initiates a VoWiFi service call (such as a VoWiFi calling service) under the home gateway. The terminal uses the Session Initialization Protocol (SIP) to send an INVITE message to the proxy-call session control function (P-CSCF) of the IP Multimedia Subsystem through the core network. The P-CSCF can also be a Border Access Controller (BAC). The P-CSCF / BAC initiates a location query to the PCRF or PCF via Diameter AAR / AAA messages to obtain the user's location information. The basic protocol for Diameter AAR / AAA is RFC 3588. This location information can be: "administrative region code + country code + local network area code".

[0134] Based on the location information, the P-CSCF / BAC generates a new PANI header field for the INVITE message and continues the SIP call process. The application server of the IP Multimedia Subsystem forwards the INVITE message to the called terminal based on the information carried in the INVITE message.

[0135] Optionally, during a VoWiFi call, the service gateway device can send the user's service parameters to the service device via the PCRF or PCF of the mobile core network. These parameters can include: the user's home gateway's public IP address, or the user's home gateway's public IP address and port number. The P-CSCF / BAC adds the user's home gateway's public IP address and port number to the PANI header field, similarly enabling VoWiFi user traceability.

[0136] In one embodiment, combined with Figure 4 ,like Figure 7 As shown in S403, the method for the service gateway device to obtain user characteristic information specifically includes: S701.

[0137] S701, The service gateway device receives user characteristic information sent by the authentication, authorization, and accounting devices of the fixed broadband network.

[0138] The above describes the home broadband scenario. The scenarios for enterprise broadband and leased lines are similar: In enterprise broadband, the home gateway is replaced by the enterprise gateway or enterprise router; in leased line scenarios, the home gateway is replaced by an edge router and a Wi-Fi access point (AP). The access network can be PON or a transmission device. Enterprise broadband and leased line users can use either static or dynamic IP addresses.

[0139] The foregoing mainly describes the solutions provided by the embodiments of this application from a methodological perspective. To achieve the above functions, it includes corresponding hardware structures and / or software modules for executing each function. Those skilled in the art should readily recognize that, based on the units and algorithm steps of the examples described in conjunction with the embodiments disclosed herein, this application can be implemented in hardware or a combination of hardware and computer software. Whether a function is executed in hardware or by computer software driving hardware depends on the specific application and design constraints of the technical solution. Those skilled in the art can use different methods to implement the described functions for each specific application, but such implementation should not be considered beyond the scope of this application.

[0140] This application embodiment can divide the support server into functional modules according to the above method example. For example, each function can be divided into its own functional module, or two or more functions can be integrated into one processing module. The integrated module can be implemented in hardware or as a software functional module. Optionally, the module division in this application embodiment is illustrative and only represents one logical functional division; other division methods may be used in actual implementation.

[0141] like Figure 8 The diagram shown is a structural schematic of an apparatus for establishing a service connection according to an embodiment of this application. This apparatus for establishing a service connection can be used to perform... Figure 4 , Figure 5 , Figure 6 or Figure 7 The method of service transmission is shown. Figure 8 The apparatus for establishing a service connection shown includes: an acquisition unit 801, a receiving unit 802, and a determination unit 803.

[0142] The acquisition unit 801 is used to acquire the user's user characteristic information. For example, combined with... Figure 4 The acquisition unit 801 is used to execute S403.

[0143] The receiving unit 802 is used to receive a request message from the terminal requesting the establishment of a service connection. For example, combined with... Figure 4 The receiving unit 802 is used to execute S404.

[0144] The determining unit 803 is used to determine whether to establish a service connection based on the matching result between the terminal feature information received by the receiving unit 802 and the user feature information obtained by the obtaining unit 801. For example, combining... Figure 4 Unit 803 is used to execute S405.

[0145] Optionally, the determining unit 803 is specifically used to establish a service connection when the matching result indicates that the terminal feature information matches the user feature information. For example, combined with Figure 5 Unit 803 is used to execute S501.

[0146] Optionally, the means for establishing a service connection also includes: a sending unit 804.

[0147] The sending unit 804 is used to send service authentication messages for user authentication to the authentication devices of the upper-layer network. For example, combined with... Figure 5 The sending unit 804 is used to execute S502.

[0148] The sending unit 804 is also used to send preset user service parameters to the service equipment of the upper-layer network after successful user authentication. For example, combined with Figure 5 The sending unit 804 is used to execute S503.

[0149] Optionally, the sending unit 804 is specifically used to send "administrative area code + country code + local network area code" to the Internet Protocol Multimedia Subsystem (IPMS) device, so that after receiving the user's emergency call message, the IMS device routes the emergency call message to the emergency call agent corresponding to "administrative area code + country code + local network area code". For example, combined with Figure 6 The sending unit 804 is used to execute S601.

[0150] Optionally, the receiving unit 802 is specifically used to receive user characteristic information sent by the authentication, authorization, and accounting devices of the fixed broadband network. For example, in conjunction with... Figure 7 The receiving unit 802 is used to execute S701.

[0151] This application also provides a computer-readable storage medium, which includes computer-executable instructions that, when executed on a computer, cause the computer to perform the method for establishing a business connection as provided in the above embodiments.

[0152] This application also provides a computer program that can be directly loaded into a memory and contains software code. After being loaded and executed by a computer, the computer program can implement the method for establishing a business connection provided in the above embodiments.

[0153] Those skilled in the art will recognize that, in one or more of the examples above, the functions described in this invention can be implemented using hardware, software, firmware, or any combination thereof. When implemented in software, these functions can be stored in a computer-readable medium or transmitted as one or more instructions or code on a computer-readable medium. Computer-readable media include computer-readable storage media and communication media, wherein communication media include any medium that facilitates the transfer of a computer program from one place to another. Storage media can be any available medium accessible to a general-purpose or special-purpose computer.

[0154] Through the above description of the embodiments, those skilled in the art can clearly understand that, for the sake of convenience and brevity, only the division of the above functional modules is used as an example. In actual applications, the above functions can be assigned to different functional modules as needed, that is, the internal structure of the device can be divided into different functional modules to complete all or part of the functions described above.

[0155] In the several embodiments provided in this application, it should be understood that the disclosed apparatus and methods can be implemented in other ways. For example, the apparatus embodiments described above are merely illustrative; for instance, the division of modules or units is only a logical functional division, and other division methods may exist in actual implementation. For example, multiple units or components may be combined or integrated into another device, or some features may be ignored or not executed. Furthermore, the shown or discussed mutual couplings, direct couplings, or communication connections may be through some interfaces; indirect couplings or communication connections between devices or units may be electrical, mechanical, or other forms. Units described as separate components may or may not be physically separate; components shown as units may be one physical unit or multiple physical units, i.e., they may be located in one place or distributed in multiple different places. Some or all of the units can be selected to achieve the purpose of this embodiment according to actual needs.

[0156] Furthermore, the functional units in the various embodiments of this invention can be integrated into one processing unit, or each unit can exist physically separately, or two or more units can be integrated into one unit. The integrated unit can be implemented in hardware or as a software functional unit. If the integrated unit is implemented as a software functional unit and sold or used as an independent product, it can be stored in a readable storage medium. Based on this understanding, the technical solution of the embodiments of this application, in essence, or the part that contributes to the prior art, or all or part of the technical solution, can be embodied in the form of a software product. This software product is stored in a storage medium and includes several instructions to cause a device (which may be a microcontroller, chip, etc.) or processor to execute all or part of the steps of the methods described in the various embodiments of this invention. The aforementioned storage medium includes various media capable of storing program code, such as USB flash drives, portable hard drives, ROM, RAM, magnetic disks, or optical disks.

[0157] The above description is merely a specific embodiment of the present invention, but the scope of protection of the present invention is not limited thereto. Any variations or substitutions that can be easily conceived by those skilled in the art within the technical scope disclosed in the present invention should be included within the scope of protection of the present invention. Therefore, the scope of protection of the present invention should be determined by the scope of the claims.

Claims

1. A method for establishing a business connection, characterized in that, Applied to service gateway devices; the method includes: A receiving terminal sends a request message to establish a service connection; the request message includes the terminal's terminal characteristic information; the terminal characteristic information is: the terminal's public Internet Protocol address; Send the terminal feature information to the traceability device; The system receives the matching result of the terminal feature information and user feature information sent by the tracing device; the user feature information is: the public Internet Protocol address after the broadband network gateway performs network address translation on the Internet Protocol address of the user's home gateway; the terminal is connected to the home gateway via Wi-Fi. Based on the matching results, determine whether to establish the service connection; When the service connection is established, a service authentication message for user authentication is sent to the authentication, authorization, and accounting equipment of the mobile core network; Once the user authentication is successful, the "administrative area code + country code + local network area code" of the user is sent to the Internet Protocol Multimedia Subsystem (IPMS) device of the mobile core network. This enables the IMS device to receive the user's emergency call message, determine the message header field in the mobile core network based on the "administrative area code + country code + local network area code", and forward the emergency call message to the called terminal based on the message header field.

2. The method for establishing a business connection according to claim 1, characterized in that, The step of determining whether to establish the service connection based on the matching result specifically includes: When the matching result indicates that the terminal feature information matches the user feature information, the service connection is established.

3. The method for establishing a business connection according to claim 1, characterized in that, The traceability device is a verification, authorization, and accounting device for fixed broadband networks.

4. The method for establishing a business connection according to claim 1, characterized in that, The user characteristic information also includes: the user's business identification information.

5. An apparatus for establishing a business connection, characterized in that, Applied to service gateway devices; the device includes: an acquisition unit, a receiving unit, a determining unit, and a sending unit; The receiving unit is configured to receive a request message from a terminal requesting to establish a service connection; the request message includes terminal characteristic information of the terminal; the terminal characteristic information is: the public Internet Protocol address of the terminal; The sending unit is used to send the terminal feature information to the tracing device; The receiving unit is further configured to receive the matching result of the terminal feature information and user feature information sent by the tracing device; the user feature information is: the public Internet Protocol address after the broadband network gateway performs network address translation on the Internet Protocol address of the user's home gateway; the terminal is connected to the home gateway via Wi-Fi. The determining unit is used to determine whether to establish the service connection based on the matching result received by the receiving unit; The sending unit is further configured to send a service authentication message for user authentication to the authentication, authorization, and accounting equipment of the mobile core network when the service connection is established; The sending unit is further configured to send the user's "administrative area code + country code + local network area code" to the Internet Protocol Multimedia Subsystem (IPMS) device of the mobile core network after the user authentication is successful, so that after the IMS device receives the user's emergency call message, it determines the message header field in the mobile core network according to the "administrative area code + country code + local network area code", and forwards the emergency call message to the called terminal according to the message header field.

6. The apparatus for establishing a service connection according to claim 5, characterized in that, The determining unit is specifically used for: When the matching result indicates that the terminal feature information matches the user feature information, the service connection is established.

7. The apparatus for establishing a service connection according to claim 5, characterized in that, The traceability device is a verification, authorization, and accounting device for fixed broadband networks.

8. The apparatus for establishing a service connection according to claim 5, characterized in that, The user characteristic information also includes: the user's business identification information.

9. An apparatus for establishing a business connection, characterized in that, It includes a memory and a processor; the memory is used to store computer-executed instructions, and the processor is connected to the memory via a bus; when the device for establishing a service connection is running, the processor executes the computer-executed instructions stored in the memory, so that the device for establishing a service connection performs the method for establishing a service connection as described in any one of claims 1-4.

10. A computer-readable storage medium, characterized in that, The computer-readable storage medium includes computer-executable instructions that, when executed on a computer, cause the computer to perform the method for establishing a business connection as described in any one of claims 1-4.

Images