WO2009039719A1

WO2009039719A1 - A user identifier server, a system and method for processing the data service

Info

Publication number: WO2009039719A1
Application number: PCT/CN2008/001040
Authority: WO
Inventors: Xiaodong Duan; Juan Zhang; Shaoling Sun; Jing DANG; Jie Sun; Hong Liu; Bing Wei; Yuhong Huang
Original assignee: China Mobile Communications Corporation
Priority date: 2007-09-24
Filing date: 2008-05-28
Publication date: 2009-04-02
Also published as: CN101399853A; CN101399853B

Abstract

A user identifier server is provided. A system for processing the data service is also provided, which includes: an access gateway, for transmitting the user data to the network which bears the service application, and implementing the intercommunication between the access network and the network which bears the service application; a service gateway, which communicates with the access gateway, for providing the function of service control, and implementing that user accesses the service which needs to be beared by the service gateway; a service control platform, which communicates with the access gateway, for providing the application service which can not be beared by the service gateway to the user; a user identifier server, for storing the correspondence relation between the user identifier and the user IP address and providing the query; an application server, for providing the service which needs to be beared by the service gateway to the user. A system and method for processing the data service are also provided. By using the scheme described above, not only the bottleneck problem of current WAP gateway in mobile network is solved, but also a new solution for charging the new service such as the streaming media service and the like is provided.

Description

User identification server, data service processing system and method

The present invention relates to communication technologies, and more particularly to user identification servers, data service processing systems, and methods. Background technique

In recent years, the rapid growth of mobile data services, large-scale user access, and the generation of big data traffic services have brought tremendous challenges to the current network. How to identify users more effectively and safely is a problem that needs to be studied. In the general mobile data service electronic transaction environment, the user is authenticated by means of a user name or ID+password. An inherent user authentication method for mobile communication is to use the user's mobile phone number.

The mobile phone number (MSISDN) is automatically transmitted to the service control platform by the network, and the user name password is not required to be input by the user, which has the natural advantage of identity authentication convenience. This is a key technology for mobile operators to dominate the entire value chain. At the same time, it also greatly improves the user's feeling of using the business.

As shown in FIG. 1 , it is a schematic diagram of a network element connection in the prior art. In the figure, a mobile or fixed terminal (UE ) 91 is connected to the access gateway 92 through an access network, and a service server 93 such as a streaming media and a service gateway 94 such as a WAP are also connected. The access gateway 92 is connected, and the service gateway 94 is connected to the application server 95 on the public network.

In the current mobile data service, user service data is mostly transmitted in the form of an IP packet. Within the mobile operator's network, each user can obtain a private IP address corresponding to its own MSISDN. One of the frequently used mobile data service user identity methods is to insert a calling number through a WAP gateway. The user identification scheme is shown in the signaling diagram of Figure 2. The WAP service data processing scheme can be divided into several processes for detailed description. Procedure 1: The user requests to access the Internet, as described in Figure 1-5. .

Specifically: 1. When the user turns on the device, the gateway GPRS service node (GGSN) sends the information of the user terminal UE through the wireless network, and then sends the radius to the WAP gateway (the WAP GW). The user accesses the authentication request.

2. When the WAP GW receives the authentication request, it will issue a certificate to the GGSN.

3. After the GGSN receives the authentication/rejection message, if the authentication and authorization are passed, the GGSN will assign a private IP address to the terminal device. After the user passes the authentication and authorization, the GGSN first sends an accounting start request to the WAP GW through the authentication server (Radius Server).

4. The WAP GW obtains information such as the correspondence between the user's IP address and the MSISDN number from the charging start request and stores the information.

5. The WAP GW sends a response message to the GGSN through the Radius Server.

The user is online normally:

6. After receiving the response message, the GGSN sends the user data packet to the WAP GW;

7. After receiving the user data packet, the WAP GW will check the correspondence between the IP address and the MSISDN number stored in the local database, obtain the MSISDN number of the user, insert the MSISDN number into the HTTP of the data packet, and then apply the data packet. Forwarded to the Network Addres Translator (NAT). After receiving the data packet, the NAT will convert the private IP address of the user in the data packet into a public IP address through address translation, but the user's MSISDN number is also included, so when the NAT transmits the converted user data packet to the firewall through the firewall. When the application server is on the public network, the application server can charge the user through the MSISDN number in the data packet.

Process 2: The user goes offline normally, including:

8. During the PDP CONTEXT deactivation process, the GGSN initiates an accounting end message to the Radius server, and the Radius Server forwards the charging end message to the WAP GW.

9. The WAP GW clears the locally saved user session information, including the IP and MSISDN correspondence.

10. The WAP GW returns a charging end response message to the Radius, and the Radius returns a charging end response message to the GGSN.

Procedure 3: The user terminates the Internet abnormally. The specific terminal has two processing methods according to the capability and the abnormal operation type of the user: One is to initiate a network message normally, and the network is processed according to the normal network process of the user.

The Radius message flow is the same as the normal network process;

The GGSN normally triggers the charging end message, and the Radius message flow is normal. If the terminal does not initiate the network request, the core network determines whether to interrupt the user resource according to the timeout mechanism. If the user does not initiate the Internet access request within the set timeout period, the GGSN normally triggers the charging end message. The offline process; if the user initiates an online request again within the timeout period.

11. The GGSN will initiate a Radius charging initial request to the WAP GW through the Radius Server again.

12. At this time, the WAP GW still needs to save the user's temporary session information, so the WAP GW needs to judge according to the MSISDN condition. If there is temporary session information, the content is updated to ensure that the latest information of the user is still saved under abnormal conditions.

13. The WAP GW initiates an initial charging response to the GGSN through the Radius Server.

The above process describes a complete data service data processing process, including user identification and WAP charging. At present, most of the text-type data service traffic that needs to be charged is processed by the WAP gateway, which requires the WAP gateway to query its corresponding MSISDN number according to the source IP address of the data packet. In addition, the WAP GW needs to complete the MSISDN operation of 4 or more unpacking, so the WAP GW device has a heavy burden. For the original text service, the WSP protocol to the HTTP protocol can be converted, and the MSISDN can be inserted into the HTTP header to perform charging. However, for a large-capacity video service, since the HTTP protocol cannot be used for bearer, it is impossible to continue to process such a service through the WAP gateway. In addition, if the traffic data of a large amount of traffic still passes through the WAP gateway, the WAP gateway device is bound to become a performance bottleneck of the network, and the user's feeling of using the service is greatly reduced.

Moreover, another commonly used mobile data service user identity identification method (this method is mainly applied to services such as streaming media) is to encapsulate the user's MSISDN number by means of a built-in cookie in the terminal, thereby realizing the calculation of such a service. Fees, but the security issues in this way are outstanding and cannot guarantee the security of the business. Therefore, how to better carry out large-traffic data services such as streaming media and provide a better charging method has become an urgent problem to be solved. Summary of the invention

The purpose of the present invention is to solve the defects of the prior art. In the existing system, the user identification server is added to form a data service processing system, and the user identification server has the function of querying the correspondence between the user IP address and the user identifier in the data service flow. And the function of updating the database, so that the user identification can be performed more effectively, simply and safely, and the burden of the service gateway is reduced.

Another object of the present invention is to solve the defects of the prior art and provide a method for identifying a user identity identifier. The user identification server completes the mapping relationship between the user identifier and the IP address and updates the database, thereby realizing the identity of the user. Identification.

To achieve the above objective, the present invention provides a user identification server, including:

a database module, configured to save a correspondence between a user identifier and an IP address;

a query module, connected to the database module, for querying a correspondence between a user identifier and an IP address;

An update check module is connected to the database module for real-time updating and maintaining the database module;

The service processing module is disconnected from the database module, and is configured to delete the corresponding record in the database module after receiving the message requested by the user to download the network.

To achieve the above object, the present invention further provides a data service processing system, including: an access gateway, configured to transmit user data to a network carrying a service application, and implement interworking between the access network and the bearer service application network;

The service gateway, which is in communication with the access gateway, is configured to provide a service control function, and implement user access to services that need to be carried by the service gateway;

The service control platform is in communication with the access gateway and is configured to provide an application service that cannot be carried on the service gateway to the user;

a user identification server, the interaction information with the access gateway, the service gateway, and the service control platform, configured to store a correspondence between the user identifier and the user IP address, and provide an inquiry;

An application server, which exchanges information with the service gateway, and is used to provide a user with a service gateway. Hosted business.

The service control platform communicates with the access gateway, and is used to provide a service control function to implement user access to the service;

a user identification server, which exchanges information with the access gateway and the service control platform, and stores a correspondence between the user identifier and the user IP address, and provides an inquiry;

The application server exchanges information with the service control platform to provide services for users to be carried.

To achieve the above object, the present invention further provides a data service processing method, including: the access gateway sends a service request data packet including a user IP address to a service gateway or a service control platform;

The service gateway or the service control platform extracts the user IP address from the received service request data packet, and sends a query request including the user IP address to the user identity server;

The user identifier server queries the user identifier corresponding to the IP address according to the received query request, and returns a response message with the user identifier.

According to the above technical solution, the data service processing system consisting of a user identification server, a service gateway, a network access device, and the like, and a data service processing method based on the system provide a separation of the user information storage module from the service gateway. After being sent out, the UIBIA Server provides a unified query interface for each network element. Each network element only needs to query the UIBIA Server for the user identifier, which greatly reduces the burden on the SG.

After the user information storage module is separated from the SG, the basic streaming media service is used to implement charging by querying, so that the large-flow streaming media service does not need to query the user MSISDN through the SG to implement charging. The effective solution to the bottleneck problem of the SG. User information is uniformly maintained and updated by UIBIA Server, which facilitates network management. This way of real-time query provides a new billing solution for future streaming services. The above solution can not only solve the bottleneck problem of the current WAP gateway in the mobile network, but also provide a new solution for billing of new services such as streaming media services, and further lays a foundation for users to access data services through fixed telephones in the future. .

The present invention will be further described in detail below by way of specific embodiments and drawings. DRAWINGS

1 is a schematic diagram of a network element connection in the prior art;

2 is a signaling diagram of a prior art user identity identification method;

3 is a schematic structural diagram of a user identity server according to the present invention;

4 is a schematic structural diagram of Embodiment 1 of a data service processing system according to the present invention;

FIG. 5 is a schematic structural diagram of a user identity server according to Embodiment 1 of a data service processing system according to the present invention; FIG.

6 is a flowchart of Embodiment 1 of a method for processing a data service;

7 is a flowchart of a normal network downlink process of the user in the first embodiment of the data service processing method; FIG. 8 is a schematic structural diagram of Embodiment 2 of the data service processing system according to the present invention;

FIG. 9 is a schematic structural diagram of a user identity server according to Embodiment 2 of the data service processing system of the present invention; FIG.

10 is a flowchart of Embodiment 2 of a data service processing method according to the present invention;

FIG. 11 is a flow chart of a normal offline process of a user in the second embodiment of the data service processing method of the present invention. detailed description

As shown in FIG. 3, it is a schematic structural diagram of a user identification server according to the present invention. The user identification server includes: a database module 1 1 configured to store a correspondence between a user identifier and an IP address; and a query module 12 connected to the database module 11 Corresponding relationship for querying the user ID and the IP address; the update checking module 13 is connected to the database module 11 for real-time updating and maintaining the local database; and exiting the service processing module 14 and connected to the database module 11 for receiving Go to the user requesting the network The message deletes the corresponding record in the database module 11. The user identifier may be a terminal number, such as an MSISDN number in the mobile network, or a terminal number in the fixed line network; in the mobile network, the identifier may also use the IMSI number of the mobile phone, and the like.

In addition, if there is a high requirement for the security of the data stored by the server and the performance of the server, the following functional modules may be included: The access authentication module 15 is connected to the query module 12 for performing the need to identify the server to the user. The queried network element performs access authentication; the server only provides the query service to the network element that passes the authentication; the timeout triggering module 16 is connected to the database module 11 for periodically checking the records in the database, triggering the survival of the database. Records whose time exceeds the TTL (time to live) value are deleted to ensure that the database does not store too much junk data.

As shown in FIG. 4, it is a schematic structural diagram of Embodiment 1 of the data service processing system of the present invention. The data service processing system of this embodiment includes: an access gateway 42 (Access Gateway, referred to as AG) may be a GGSN, an access controller ( Access Controller, AC), Asymmetry Digital Subscriber Line (ADSL) equipment, Digital Subscriber Line Multiplexer (DSLAM), Broadband Remote Access Server (BRAS) And so on, communicating with the terminal device 41 through the access network, for transmitting user data to a network carrying the service application, such as a TCP/IP network or an X.25 network, and implementing interworking between the access network and the bearer service application network. The terminal device 41 can initiate a data service request. The service gateway 45 (Service Gateway, SG for short) communicates with the access gateway 42 to provide a service control function, and implements a wireless application protocol (Wireless Application Protocol, WAP). Access to services carried by the service gateway, such as WAP gateways and multimedia a service monitoring platform (MMSC), etc.; a service control platform 43 (Service Platform), which is in communication with the access gateway 42 and is configured to provide an application service that cannot be carried on a service gateway such as a WAP, such as a streaming media server; The user identification based on IP address (UIBIA server) exchanges information with the service gateway 45, the access gateway 42 and the service control platform 43 for storing the user identification number such as the MSISDN number and the user IP address in the mobile network. Corresponding relationship, the service gateway 45 and the service control platform 43 can be authenticated at the same time; the application server 46 exchanges information with the service gateway 45, The user is provided with services that need to be carried by a service gateway such as a WAP.

In addition, the service control platform 43 and the application server 46 can be combined into an application platform, and communicate with the access gateway 42, the service gateway 45, and the user identification server 44, respectively, which can provide the user with a service gateway such as a WAP. The services carried can also provide services that cannot be carried by service gateways such as WAPs.

The terminal device (UE) 41 in this embodiment includes a network terminal device that is connected by a wired terminal or a wireless terminal, such as a mobile phone terminal and an intelligent terminal. The access network is a network between the UE and the AG and provides access services for the UE, including a radio access network and a wired access network. A wireless network usually refers to a network part included between a user terminal and an AG, and is composed of a base station, a controller, and the like.

The User Identification Based on IP Address (UIBIA Server) stores the correspondence between the user ID and the IP address in the local database to provide a query service for the correspondence between the user ID and the IP address. At the same time, in order to meet the needs of users accessing the network anytime and anywhere, the accuracy of the information in the UIBIA Server must be guaranteed, and the local database should be updated and maintained in real time.

As shown in FIG. 5, it is a schematic structural diagram of a user identity server according to Embodiment 1 of the data service processing system of the present invention. The user identity server includes: a database module 51, configured to store a correspondence between a user identifier and an IP address; And the service control platform 43, the service gateway 45, and the data library module 51 are connected to provide a corresponding relationship between the query user identifier and the IP address; the update check module 53 is connected to the access gateway 42 and the database module 51, and is used for The local database is updated and maintained in real time. The exit service processing module 54 is connected to the access gateway 42 and the database module 51, and is configured to receive a message requested by the user to download the network, and delete the corresponding record in the database module 51.

If the security of the data stored by the server and the performance of the server are high, the following functional modules may be included: The access authentication module 55 is connected to the service control platform 43, the service gateway 45, and the query module 52. The access authentication is performed on the network element that needs to query the user identification server 44. The server only provides the query service to the network element that passes the authentication. The timeout triggering module 56 is connected to the database module 51 for periodically checking the database. Record, trigger the deletion of records in the database that survive more than the TTL (time to live) value to ensure that the database does not save too much junk data. The data service processing system of the foregoing embodiment newly introduces an entity UIBIA Server. The user identity server can authenticate the access to its own network element, and the UIBIA Server only returns the user identifier to the network element with access rights; and the user identity server saves The corresponding relationship between the IP address and the user identifier can provide a service for real-time query of the user identifier for each network element. This not only greatly reduces the burden on the service gateway, but also provides a new solution for billing of streaming media services. The system of the present invention provides a new business process and a new user identification acquisition method for the data service, and the newly introduced UIBIA Server can maintain the local database according to the set TTL (time to live) value. Each service gateway or service control platform in the network does not need to cache information such as user identifiers, but only needs to query the UIBIA Server in real time.

Based on the first embodiment of the foregoing data service processing system, as shown in FIG. 6, the flowchart of the first embodiment of the data service processing method of the present invention includes the following steps:

Step 101: The access gateway sends, to the service gateway or the service control platform, a service request data packet that includes a user IP address, a service gateway, or a service provided by the service control platform.

Because the service gateway is used to implement the service access that the user needs to carry through the gateway such as the WAP, it can be a WAP gateway or a multimedia message service center, so that the access gateway sends the data packet of the WAP service or the multimedia message to the service gateway. The service control platform can provide application services that cannot be carried on a service gateway such as WAP, such as a streaming media service, so that the service control platform is a streaming media server, so the access gateway sends data packets of services such as streaming media to the The business control platform processes it;

Step 102: The service gateway or the service control platform extracts the user IP address in the service request data packet of the service provided by the service, and sends the authentication information including the user IP address and the service gateway or the service control platform to the user identity server. Query request;

Step 103: The user identity server invokes the access authentication module to authenticate the service gateway or the service control platform according to the query request. If the authentication is successful, step 104 is performed; if the authentication fails, step 106 is performed;

Step 104: The user identity server invokes the query module, queries the user identification number corresponding to the IP address, and returns a response message with the user identifier. Step 105: Perform charging processing on the user, and send a service data flow to the user; if it is a service request processed by the service control platform, the service control platform charges the user, and sends a service data flow to the user; if it is a service gateway After the service request is processed, the service gateway inserts the user identification number into the service request data packet of the user, and forwards it to the application server, where the application server charges the user, and the service gateway sends the service data flow to the user.

Step 106: The user identity server returns a query failure message to the service gateway or the service control platform. The above process is a process of processing a service request of a user. Before processing the service request, it is a registration process of the user, that is, before the access gateway sends a service request packet in step 101, the user identity server is based on the received user. The request for the Internet data packet including the IP address and the user identifier, the update check module is invoked, the database is checked, updated, and a response message is returned to the access gateway. Here, the specific process of invoking the update check module to check and update the database is as follows: The user identification server queries the database according to the user ID and the IP address. If the corresponding record does not exist in the database, the obtained user ID and IP address are inserted into the database. ; If there is a corresponding record, the database is updated according to the obtained user ID and IP address.

After the above-mentioned Internet access and processing of service requests, the user also needs to go offline. There are two possibilities in the offline network, normal offline and abnormal offline. As shown in FIG. 7, the flowchart of the normal offline process of the user in the first embodiment of the data service processing method of the present invention includes the following steps:

Step 201: The access gateway sends a data packet for stopping charging to the user identity server.

Step 202: The user identity server invokes the service processing module to delete the corresponding database record, and sends a stop charging response data packet to the access gateway.

During the normal use of the service, the user will be disconnected from the service network due to the abnormal shutdown of the service area or the abnormal shutdown of the user. After the network is abnormally disconnected, the user will initiate a service request again. The following two situations are available:

First, the user initiates the service request again before the TTL value of the UIBIA Server expires. At this time, the UIBIA Server has not deleted the record corresponding to the user. Therefore, after the user is abnormally offline or has no service request for a period of time, after a period of time, The user initiates an online request again, and the service gateway or service control platform sends a query request to UIBIA Server; UIBIA Server according to IP-Address The query sets the Idle-Timeout of the queried record to 0, and returns the user ID (User-ID) to the service gateway or the service control platform and updates the database.

Second, the user initiates the service request again. After the TTL value of the UIBIA expires, the UIBIA has called the timeout triggering module to delete the related information of the user. Under normal circumstances, the access gateway also releases the IP assigned to the user. Therefore, at this time, the access gateway will re-assign the IP address to the user, so the user's online access is the same as the user re-initiating the normal Internet access.

The embodiment of the present invention is a process in which a user performs registration, charging, and finally downloads the network. Therefore, such a data service processing method and a data service processing system enable some operations of the original service gateway to be transferred to the user. The identification of the server can reduce the burden on the service gateway. In addition, after the user information storage module is separated from the service gateway, it is possible to implement charging for subsequent streaming media services by querying, so that a large-flow streaming media service is possible. It is no longer necessary to query the user MSISDN through the service gateway to implement charging, which effectively solves the bottleneck problem of the service gateway. User information is uniformly maintained and updated by UIBIA Server, which facilitates network management. This way of real-time query provides a new billing solution for future streaming services.

The above solution can not only solve the bottleneck problem of the current WAP gateway in the mobile network, but also provide a new solution for billing of new services such as streaming media services, which makes it possible for users to access data services through fixed telephones in the future.

As shown in FIG. 8 , it is a schematic structural diagram of Embodiment 2 of the data service processing system of the present invention. The data service processing system of this embodiment includes: Access Gateway 82 (referred to as AG) may be GGSN, AC, ADSL, DSL. AM, BRAS, etc., communicate with the terminal device 81 through the access network for transmitting user data to a network carrying the service application, such as a TCP/IP network or an X.25 network, to implement the access network and the bearer service application network. The interworking device, the terminal device 81 can initiate a data service request, and the service control platform 87 (Service PlatForm) can be a device such as a WAP Gateway, an MMSC, a streaming media server, and the access gateway 82, and is configured to provide a service control function. User identification based on IP address (UIBIA server), which interacts with the service control platform 87 and the access gateway 82. For storing the user identification number, such as the correspondence between the MSISDN number and the user IP address in the mobile network, and simultaneously authenticating the service control platform 87; the application server 88 interacts with the service control platform 87 to provide the user with the need to Services and billing carried by service gateways such as WAP.

As shown in FIG. 9, FIG. 9 is a schematic structural diagram of a user identity server according to Embodiment 2 of the data service processing system of the present invention. The user identity server includes: a database module 91, configured to store a correspondence between a user identifier and an IP address; and a query module 92, The service control platform 87 and the database module 91 are connected to provide a corresponding relationship between the query user identifier and the IP address. The update check module 93 is connected to the access gateway 82 and the database module 91 for real-time updating of the local database. The service processing module 94 is connected to the access gateway 82 and the database module 91, and is configured to receive a message requested by the user to download the network, and delete the corresponding record in the database module 91.

If there is a high requirement for the security of the data stored by the server and the performance of the server, the following functional modules may be included: The access authentication module 95 is connected to the service control platform 87 and the query module 92 for The user ID server 84 performs the access authentication for the network element that the query performs; the server only provides the query service to the network element that passes the authentication; the timeout triggering module 96 is connected to the database module 91 for periodically checking the records in the database, and triggering Records in the database that survive longer than the TTL (time to live) value are deleted to ensure that the database does not store too much junk data.

The terminal device (UE) 81 in this embodiment includes a network terminal device that is connected by a wired terminal or a wireless terminal, such as a mobile phone terminal and an intelligent terminal. The access network is a network between the UE and the AG and provides access services for the UE, including a radio access network and a wired access network. A wireless network usually refers to a network part included between a user terminal and an AG, and is composed of a base station, a controller, and the like.

The User Identification Based on IP Address (U1BIA Server) stores the user ID and the IP address in a local database to provide a query service for the relationship between the user ID and the IP address. At the same time, in order to meet the needs of users accessing the network anytime and anywhere, it must be guaranteed

The accuracy of the information in the UIBIA Server, real-time update and maintenance of the local database.

Data service processing system of the above embodiment introduces a new entity to the user identifier UIBIA Server ₀ server can authenticate the access to their network elements and UIBIA Server has access to only The network element returns the user identifier; and the user identifier server stores the correspondence between the IP address and the user identifier, and can provide each network element with a service for real-time querying the user identifier. This not only greatly reduces the burden, but also provides a new solution for the billing of streaming media services. The system of the present invention provides a new business process and a new user identification acquisition method for data services, and newly introduced

UIBIA Server maintains the local database based on the set TTL (time to live) value. The service control platform in the network does not need to cache information such as user identification, but only needs to query the UIBIA Server in real time.

Based on the second embodiment of the foregoing data service processing system, as shown in FIG. 10, it is a flowchart of Embodiment 2 of the data service processing method of the present invention, which specifically includes the following steps:

Step 301: The access gateway sends a service request data packet including a user IP address to the service control platform.

Because the service control platform can provide various application services, such as WAP services and streaming media services, the service control platform can be a WAP gateway, an MMSC, a streaming media server, etc., so the access gateway sends data packets of various services. Go to the business control platform for processing;

Step 302: The service control platform extracts the user IP address in the service request data packet, and sends a query, request to the user identity server, including the user IP address and the authentication information of the service control platform.

Step 303, the user identity server invokes the access authentication module according to the query request, and authenticates the service control platform. If the authentication is successful, step 304 is performed; if the authentication fails, step 306 is performed;

Step 304: The user identity server invokes the query module, queries the user identification number corresponding to the IP address, and returns a response message with the user identifier.

Step 305: Perform charging processing on the user, and send a service data flow to the user.

Because the business control platform can provide various application services, such as WAP services and streaming services. If the service control platform can directly provide data services (such as a streaming media server) to the user, the service control platform charges the user and sends the service data stream to the user; if the service control platform cannot directly provide the data service to the user (for example, WAP gateway, etc., the service control platform will be used The service identification number is inserted into the service request data packet of the user and forwarded to the application server. The application server charges the user, and the service control platform forwards the service data flow to the user.

Step 306: The user identity server returns a query failure message to the service control platform.

The above process is a process of processing a service request of a user. Before processing the service request, it is a registration process of the user, that is, before the access gateway sends the service request packet in step 301, the user identity server is based on the received user. The request for the Internet data packet including the IP address and the user identifier, the update check module is invoked, the database is checked, updated, and a response message is returned to the access gateway. Here, the specific process of invoking the update check module to check and update the database is as follows: The user identification server queries the database according to the user ID and the IP address. If the corresponding record does not exist in the database, the obtained user ID and IP address are inserted into the database. ; If there is a corresponding record, the database is updated according to the obtained user ID and IP address.

After the above-mentioned Internet access and service request processing, the user also needs to go offline. There are two possibilities for the offline network, the normal network and the abnormal network. As shown in FIG. 11, the flowchart of the normal offline process of the user in the second embodiment of the data service processing method of the present invention includes the following steps:

Step 401: The access gateway sends a data packet for stopping charging to the user identity server.

Step 402: The user identity server invokes the service processing module to delete the corresponding database record; and sends a stop charging response data packet to the access gateway.

The abnormal network is processed in the same manner as the data service processing method in the first embodiment, and is not described here.

This embodiment is a process in which a user performs registration, charging, and finally downloads the network. Therefore, such a data service processing method and a data service processing system enable some operations of the original service gateway to be transferred to the user identifier. On the server, other operations are transferred to the service control platform, which can reduce the burden. In addition, after the user information storage module is separated from the service gateway, it is possible to implement billing for subsequent streaming media services by querying. The traffic service of the traffic does not need to query the user MSISDN through the service gateway to implement charging, which effectively solves the bottleneck problem. User information is uniformly maintained and updated by UIBIA Server, which facilitates network management. This real-time query provides a new way for future streaming services. Fee solution.

It should be noted that the above embodiments are only intended to illustrate the technical solutions of the present invention and are not intended to be limiting, and the present invention will be described in detail with reference to the preferred embodiments. Modifications or equivalents are made without departing from the spirit and scope of the invention.

Claims

Rights request

A user identification server, comprising:

The user identification server according to claim 1, further comprising: an access authentication module, connected to the query module, configured to perform access authentication on a network element that needs to query the user identification server Right

The timeout triggering module is connected to the database module, and is used for periodically checking the records in the database module, and triggering deletion of the records in the database module whose survival time exceeds the survival time value.

3. A data service processing system comprising the user identity server according to claim 1 or 2, wherein the user identity server and the access gateway, the service gateway, and the service control platform exchange information, wherein:

An access gateway, configured to transmit user data to a network carrying a service application, and implement interworking between the access network and the bearer service application network;

The service control platform is configured to communicate with the access gateway, and is configured to provide an application service that cannot be carried on the service gateway to the user;

The application server exchanges information with the service gateway to provide services for users to be carried by the service gateway.

4. The data service processing system according to claim 3, wherein said service network Off: Wireless Application Protocol Gateway or Multimedia Messaging Service Center.

The data service processing system according to claim 3, wherein the service control platform is: a streaming media server.

A data service processing system comprising the user identification server according to claim 1 or 2, wherein the user identification server interacts with the access gateway and the service control platform, wherein:

The data service processing system according to claim 6, wherein the service control platform is: a wireless application protocol gateway, a multimedia message service center, or a streaming media server.

8. A data service processing method, comprising the steps of:

The access gateway sends a service request data packet including a user IP address to the service gateway or the service control platform;

The data service processing method according to claim 8, wherein the query request sent by the service gateway or the service control platform to the user identity server further includes authentication information of the service gateway or the service control platform;

The user identifier server queries the user identifier corresponding to the IP address according to the received query request, and returns a response message with the user identifier. The user identifier server performs the service gateway or the service control platform according to the received query request. Right, if the authentication is successful, query the IP address The user identifier corresponding to the address, and returns a response message with the user identifier; if the authentication fails, the user identity server returns a query failure message to the service gateway or the service control platform.

The data service processing method according to claim 8 or 9, wherein the querying the user identifier corresponding to the IP address and returning the response message with the user identifier further comprises: performing charging processing on the user And send the business data stream to the user.

The data service processing method according to claim 10, wherein the charging process is performed on the user, and the service data flow is sent to the user, where the service control platform charges the user and sends the data to the user. The service data stream is inserted into the service request data packet of the user and forwarded to the application server, where the application server charges the user, and the service gateway sends the service data stream to the user.

The data service processing method according to claim 8 or 9, wherein before the sending the service request data packet, the access gateway further includes:

The user identity server checks and updates the database according to the received user's request for the Internet data packet including the IP address and the user identity, and returns a response message to the access gateway.

The data service processing method according to claim 12, wherein the checking the database, '-new" is specifically: the user identification server queries the database according to the user identifier and the IP address, if there is no corresponding in the database The record, the obtained user ID and IP address are inserted into the database; if there is a corresponding record, the database is updated according to the obtained user ID and IP address.

The data service processing method according to claim 8 or 9, wherein the data service processing method further includes a user offline process, specifically:

The access gateway sends a data packet for stopping the charging to the user identity server;

The user identity server invokes the service processing module to delete the corresponding database record and sends a stop charging response packet to the access gateway.

The data service processing method according to claim 8, wherein the user identifier is a user identifier in a mobile network or a fixed line network.