摘要:
The present invention relates to mobile communications technologies, and discloses a method, device, and system for pre-authentication. A pre-authentication device receives a pre-authentication message that carries a pre-authentication option; determines a Mobile Node (MN) to be pre-authenticated according to the pre-authentication message; sends an authentication request message to an Authentication, Authorization and Accounting (AAA) server to request authentication of the MN; receives an authentication response message that is sent by the AAA server, where the authentication response message carries a pre-authentication key used between a Candidate Authenticator (CA) and the MN; and sends the pre-authentication key to the MN. Through implementation of the present invention, the pre-authentication key is obtained before the MN switches to the CA. In this way, security of communication is enhanced, and delay of switching and authentication is shortened.
摘要:
The present invention relates to mobile communications technologies, and discloses a method, device, and system for pre-authentication. A pre-authentication device receives a pre-authentication message that carries a pre-authentication option; determines a Mobile Node (MN) to be pre-authenticated according to the pre-authentication message; sends an authentication request message to an Authentication, Authorization and Accounting (AAA) server to request authentication of the MN; receives an authentication response message that is sent by the AAA server, where the authentication response message carries a pre-authentication key used between a Candidate Authenticator (CA) and the MN; and sends the pre-authentication key to the MN. Through implementation of the present invention, the pre-authentication key is obtained before the MN switches to the CA. In this way, security of communication is enhanced, and delay of switching and authentication is shortened.
摘要:
A method, a device, a system and a server for network authentication are provided. The method includes: receiving a user authentication request forwarded by a second Access Management Functional Entity (AM-FE) when a user is attached to the second AM-FE from a first AM-FE; obtaining an authentication key of a security domain of the second AM-FE according to the user authentication request; and authenticating the user by using the authentication key. The following problems are solved: packets of user services are lost and even services are temporarily interrupted because of long time consumption and poor security during intra-domain or inter-domain handover of the user. Therefore, the safe authentication of the user's intra-domain or inter-domain roaming is achieved, and thus the security and reliability of user authentication are improved.
摘要:
The present invention discloses a method, a system and an apparatus for reserving network resources. The network resource reservation method includes: directly receiving, from a mobility management control function (MMCF), a request for resource reservation on a target transport path; controlling a transport function to reserve network resources on the target transport path according to the resource reservation request; and returning a result of the network resource reservation to the MMCF. The technical solution of the present invention enables advance resource reservation on a target transport path before a network handover occurs, when a user is moving.
摘要:
The present invention discloses a method, a system and an apparatus for reserving network resources. The network resource reservation method includes: directly receiving, from a mobility management control function (MMCF), a request for resource reservation on a target transport path; controlling a transport function to reserve network resources on the target transport path according to the resource reservation request; and returning a result of the network resource reservation to the MMCF. The technical solution of the present invention enables advance resource reservation on a target transport path before a network handover occurs, when a user is moving.
摘要:
In the field of communication technologies, a route optimization method and system are provided, so as to improve the data transfer efficiency between a Mobile Node (MN) and a Corresponding Node (CN). The method includes: acquiring location information of a current access device of the CN, by a current anchor device of the MN (S201); and establishing a transmission tunnel between a current access device of the MN and the current access device of the CN (S202).
摘要:
A method for assigning network addresses is provided. When a mobile node (MN) moves to an access domain (AN) of a visited network, the method, in the visited network, includes: receiving a network access request sent by the MN; determining a home network of the MN according to user information of the MN, and sending an authentication request to the home network for authenticating the MN; receiving an authentication response returned by the home network, where the authentication response includes a local home of address (L-HoA) for identifying the AN where the MN is currently located; and assigning a local care of address (L-CoA) to the MN, where the L-CoA identifies position information of the MN in the current AN. Correspondingly, a network and a network node are provided. Thus, technical solutions can implement address assignment when the MN moves.
摘要:
A method for assigning network addresses is provided. When a mobile node (MN) moves to an access domain (AN) of a visited network, the method, in the visited network, includes: receiving a network access request sent by the MN; determining a home network of the MN according to user information of the MN, and sending an authentication request to the home network for authenticating the MN; receiving an authentication response returned by the home network, where the authentication response includes a local home of address (L-HoA) for identifying the AN where the MN is currently located; and assigning a local care of address (L-CoA) to the MN, where the L-CoA identifies position information of the MN in the current AN. Correspondingly, a network and a network node are provided. Thus, technical solutions can implement address assignment when the MN moves.
摘要:
A method, a device and a system for combination of resource admission control are provided. The system includes the policy determination combination device and multiple bearer and transmission devices. The combination device combines functions and interfaces of two or multiple kinds of arbitrary policy determination devices in systems of different standards, and has multiple interfaces to be connected with the bearer and transmission devices, and selects the corresponding interface working protocol according to the type of bearer and transmission device. Multiple bearer and transmission devices are connected with the policy determination combination device by different interfaces. By setting policy determination combination device, the combination of policy determination devices is realized with a few changes to the current network. When there are multiple types of bearer and transmission devices in a management domain, the number of the policy determination devices can be efficiently reduced, and the cost of setting up the network and maintenance can be reduced. Also, it is propitious to collaborate and combine different standards and to improve speed of industrialization.
摘要:
In the field of communication technologies, a route optimization method and system are provided, so as to improve the data transfer efficiency between a Mobile Node (MN) and a Corresponding Node (CN). The method includes: acquiring location information of a current access device of the CN, by a current anchor device of the MN (S201); and establishing a transmission tunnel between a current access device of the MN and the current access device of the CN (S202).