Attachment method and system for Id-Loc-Split in an NGN
First Claim
1. An attachment method for ID-Loc-Split in an NGN, comprising:
- performing a network attachment process for a User Terminal (UE) through an ID-Loc-Split Mapping Function Entity (ILSM-FE), wherein a user identification (Host ID) is used during an authentication and authorization process, the method specifically comprising;
A;
performing authentication and authorization to a user identity through the ILSM-FE during the authentication and authorization process;
B;
assigning an IP address to the user terminal through an IP address configuration process; and
C;
when location of a user changes, responding to an ID/LOC mapping request of the user identification and location identification, and performing a mapping between the Host ID and the IP address by the ILSM-FE.
0 Assignments
0 Petitions
Accused Products
Abstract
This disclosure provides an attachment method and system for ID-Loc-Split in an NGN, to implement an attachment process for an IPSPLIT-based ID-Loc-Split in an NGN, which can be combined well with various existing functional entities in the NGN, wherein a user identification is represented by a Host ID, and during the attachment process, a user is located through the Host ID, and during an authentication process, a key authentication method is provided to the Host ID; when location of the user changes due to its mobility or multihoming, the Host ID does not change; the application and connection of the transport layer is bound to the user identification, such that the application and connection will not be interrupted, and an ongoing communication session and service will not be interrupted, which guarantees the security of attachment and seamless handover when the location of a host changes due to its mobility or multihoming.
12 Citations
12 Claims
-
1. An attachment method for ID-Loc-Split in an NGN, comprising:
-
performing a network attachment process for a User Terminal (UE) through an ID-Loc-Split Mapping Function Entity (ILSM-FE), wherein a user identification (Host ID) is used during an authentication and authorization process, the method specifically comprising; A;
performing authentication and authorization to a user identity through the ILSM-FE during the authentication and authorization process;B;
assigning an IP address to the user terminal through an IP address configuration process; andC;
when location of a user changes, responding to an ID/LOC mapping request of the user identification and location identification, and performing a mapping between the Host ID and the IP address by the ILSM-FE. - View Dependent Claims (2, 3, 4, 5, 6)
-
-
7. An attachment system for ID-Loc-Split in an NGN, comprising a User Terminal (UE), an Access Management Functional Entity (AM-FE), a Network Access Configuration Functional Entity (NAC-FE), a Transport Location Management Functional Entity (TLM-FE), a Resource Admission Control Function (RACF), a Service Control Function (SCF) and a Transport Authentication and Authorization Functional Entity (TAA-FE), the system further comprising:
an ID-Loc-Split Mapping Function Entity (ILSM-FE), configured to perform authentication and authorization to a user identification (Host ID) based on security parameters transmitted by the TAA-FE, and perform a mapping between the Host ID and an IP address based on an ID/LOC mapping request transmitted from the UE or the TLM-FE. - View Dependent Claims (8, 9, 10, 11, 12)
Specification
-
- Resources
-
Current AssigneeZTE Corporation
-
Original AssigneeZTE Corporation
-
InventorsZhao, Ningxia, Wu, Qiang, Wu, Bo
-
Application NumberUS13/257,921Publication NumberTime in Patent OfficeDaysField of SearchUS Class Current726/4CPC Class CodesH04L 61/103 across network layers, e.g....H04L 61/5084 Providing for device mobili...H04W 4/02 Services making use of loca...H04W 8/26 Network addressing or numbe...H04W 80/04 Network layer protocols, e....
