WO2010020074A1

WO2010020074A1 - A method and device for assisting the terminal device operation within the network in access network

Info

Publication number: WO2010020074A1
Application number: PCT/CN2008/001500
Authority: WO
Inventors: 马松伟; 张青山; 姚春燕; 宾梵翔; 温海波
Original assignee: 上海贝尔股份有限公司; 阿尔卡特朗讯
Priority date: 2008-08-20
Filing date: 2008-08-20
Publication date: 2010-02-25
Also published as: CN102067527A; CN102067527B

Abstract

The invention solves the problem in the prior art that the network operation server cannot acquire the WLAN information of the network operation terminal devices requesting access or transferring data service and so on, and cannot determine their operation manners according to their WLAN, a method and apparatus for assisting the terminal device operation within the network in access network are provided, the access device acquires the WLAN identifier information of the terminal, and provides the identifier information and its network operation request to the network operation server; the network operation server receives the network operation request of the terminal device and identifier information of the WLAN from the access device, determines the operation manner of the terminal device in the network based on the identifier information of the WLAN. Further, the access device performs the associated encryption and encapsulation process corresponding with its WLAN for the data packets that the network operation access server sends to the terminal device, it can ensure the normal and secure transmission of the data packets.

Description

Used in the access network for auxiliary terminal equipment

Method and device for operating in a network

The present invention relates to an access network, and more particularly to a method and apparatus for assisting a terminal device in a wireless local area network to operate on a network in an access network. Background technique

Nowadays, with the development of Wireless Local Area Network (WLAN), telecom operators have begun to deploy wireless hotspots (Hotspot) for wireless access to user terminals in wireless hotspots via WLAN access points (Access Point). , referred to as AP) access to the Internet. For example, as shown in FIG. 1, first, the terminal device is connected to the AP of the WLAN to which it belongs; then, the AP is connected to the digital subscriber line access multiplexer through a Digital Subscriber Line (DSL) (Digital Subscriber Line) Access port of Access Multiplexer (DSLAM).

In the access network architecture, after the terminal device is connected to the specific WLAN, various operations (Operation) are performed for the telecommunication network such as the MAN (Medical Area Network, MAN). Access authentication, obtaining authorization, obtaining the IP address of the device, and exchanging data services, etc., must interact with various network operation servers in the network to obtain operational services and support provided by the operation server. For example, the terminal device needs to interact with an access server such as a remote access server (BRAS) to perform authentication, authorization, accounting, and the like, and also perform data services between the PKP protocol and the BRAS. The terminal device also needs to interact with the Dynamic Host Configuration Protocol (DHCP) server to obtain a network address such as an IP address.

In order to support the interaction between the terminal device and the network operation server, as shown in FIG. 1, the DSLAM connected to the terminal device is connected to the network operation server, and the terminal device passes through the DSLAM through the WLAN to which the terminal device belongs, and accesses the DHCP server and the BRAS. A network operation server such as a server interacts. Currently, operators hope to provide wireless access services for multiple terminal devices in multiple WLANs through a small number of APs. Therefore, the operator wants to be able to determine the corresponding network operation mode for the terminal device according to the WLAN condition to which each terminal device belongs. For example, in the process of performing authentication and communication of PPP over Ethernet (PPPoE) by the terminal device and the BRAS server, the BRAS hopes to determine the access authority and the charging rate of the terminal device according to the information of the WLAN. Etc.; In the DHCP process, DHCP wants to assign IP addresses of the same subnet to terminal devices on the same WLAN to improve Layer 2 Mobility.

However, in the prior art, multiple WLANs to which a plurality of terminal devices belong are connected through the same AP and DSLAM, and then to the telecommunication network, and the AP is generally connected to a corresponding port of the DSLAM through only one DSL. The DSLAM forwards a DHCP request from a terminal device to a network operation server, such as a PPPoE (Point-to-Point Protocol over Ethernet) discovery phase request to the BRAS, or forwards a DHCP request to the DHCP server, which uses only circuit identification ( The circuit ID or the remote ID identifies the DSL or DSLAM port to which the AP to which the terminal device belongs, but cannot provide information about the different WLANs to which the terminal device belongs to the BRAS access server or DHCP server. The server makes the network operation server unable to determine different operation modes for the terminal device according to the WLA information, and provides different operation support and services.

Further, the DSLAM cannot encrypt and encapsulate the message sent by the network operation server to the terminal device in the WLAN according to the WLAN information, thereby reducing the security and operability of the access network. Summary of the invention

In order to solve the above-mentioned shortcomings of the prior art and to make up the technical blank, the present invention proposes that the access device receives the network operation request message from the terminal device, acquires the identification information of the wireless local area network to which the access device belongs, and then the network corresponding to the network operation request message. The operation request, the identification information of the wireless local area network is provided to the network operation server corresponding to the network operation request; the network operation server receives the network operation request of the terminal device from the access device, and the identification information of the wireless local area network to which the terminal device belongs, Then based on the wireless LAN The identification information determines the operation mode of the terminal device in the network according to the network operation request.

According to an aspect of the present invention, a method for assisting a terminal device to access a network in an access device of a communication network is provided, wherein the terminal device is connected to the access device through a wireless local area network to which the terminal device belongs. The method includes: a. receiving a network access request message from the terminal device, and acquiring identification information of the wireless local area network; b. receiving a network access request corresponding to the access request message, and the wireless local area network The identification information is provided to a network access server corresponding to the network access request.

According to another aspect of the present invention, a method for assisting a terminal device to operate in a network in a network access server of a communication network is provided, wherein the terminal device passes through a wireless local area network and an access device to which the terminal device belongs Connected, the method includes: A. receiving a network operation request of the terminal device from the access device, and identifier information of a wireless local area network to which the terminal device belongs; B. based on the identifier information of the wireless local area network, according to The network operation request determines a manner in which the terminal device operates in the network.

According to a third aspect of the present invention, there is provided an apparatus for assisting a terminal device to operate in a network in an access device of a communication network, wherein the access device communicates with the wireless local area network to which the access device belongs The access device is connected, the device includes: an identifier information acquiring device, configured to receive a network operation request message from the terminal device, and obtain identification information of the wireless local area network; and first providing means, configured to operate the network And the network operation request corresponding to the request message is provided to the network operation server corresponding to the network operation request.

According to a fourth aspect of the present invention, a device for assisting a terminal device to operate in a network in a network operation server of a communication network, wherein the terminal device passes the wireless local area network and the access device to which the terminal device belongs Connected, the device includes: a first receiving device, configured to receive a network operation request of the terminal device from the access device, and identifier information of a wireless local area network to which the terminal device belongs; And determining, according to the network operation request, how the terminal device operates in the network according to the identifier information of the wireless local area network. According to the present invention, the network operation server such as the BRAS access server and the DHCP server can determine an appropriate operation mode according to the WLAN information of the terminal device, for example, determining its access authority, rate, assigning an IP address thereto, and the like. Further, the DSLAM 3⁄4 performs related processing such as encryption and encapsulation corresponding to the WLAN on the data packet sent by the network operation server to the terminal device of the WLAN according to the WLAN information, and forwards the processed data packet on an appropriate channel to ensure that Security of packet transmission. DRAWINGS

Other features, objects, and advantages of the present invention will become more apparent from the detailed description of the accompanying drawings.

FIG. 1 is a schematic diagram showing the topology of the terminal device 3a in the WLAN α interacting with the BRAS 2 through the DSLAM 1;

2 is a flow chart of a method for DSLAM 1 and BRAS 2 to assist a terminal device 3a to access a network, in accordance with an embodiment of the present invention;

3 is a flow chart showing a method of accessing a network by the DSLAM 1 and the BRAS 2 auxiliary terminal device 3a according to another embodiment of the present invention;

4 shows a block diagram of an apparatus for accessing a network by a DSLAM 1 and a BRAS 2 secondary terminal device 3a, in accordance with an embodiment of the present invention;

Figure 5 shows a block diagram of an apparatus for accessing a network by DSLAM 1 and BRAS 2 secondary terminal equipment 3a in accordance with another embodiment of the present invention.

In the figures, the same or similar reference numerals denote the same or similar components. detailed description

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS Referring now to Figures 1 to 3, a specific embodiment of the present invention will be described in detail from the perspective of a system method:

First embodiment

FIG. 1 shows a schematic diagram of a topology structure in which a terminal device in a WLAN interacts with a BRAS 2 through a DSLAM 1. The WLANs α and β may be WiFi networks based on the IEEE 802.11 standard. Those skilled in the art should understand that the present invention is not limited to FIG. The terminal device in the illustrated WiFi network interacts with the BRAS through the DSLAM. The present invention is also applicable to other types of wireless networks, access devices, and network operation servers. This specification will be hereinafter described in other operating scenarios. Explain.

2 is a flow chart of a method in which DSLAM 1 and BRAS 2 assist terminal device 3a access the network, in accordance with an embodiment of the present invention.

A method of accessing the network by the DSLAM 1 and the BRAS 2 auxiliary terminal device 3a according to the present invention will be described in detail below with reference to Figs. 1 and 2.

We know that the terminal device 3a must perform PPPoE-based interaction with the BRAS in order to access the telecommunications network such as the metropolitan area network. However, before the terminal device 3a interacts with the DSLAM 2 and the BRAS 2, it is first coupled to a WLAN and interacts with the BRAS through the WLAN. For example, both WLAN α and WLAN β are WLANs provided by a hotel through its AP 4, where WLAN a is a public WLAN for hotel guests to access freely, WLAN β is the hotel's internal WLAN. The terminal device 3a is a terminal device of the hotel guest, such as a notebook computer, a PDA, etc., which is within the coverage of the AP 4, and acquires information about the WLAN α and β that the AP 4 can provide, and the selection thereof. Free WLAN α as its suitable access network. The methods and processes for a specific terminal device to access the WLAN are well known to those skilled in the art, and the present invention is not described herein. It should be noted that the WLANs α and β provided by the AP 4 have different WLAN identifiers, such as SSID _a and SSID _{P respectively} ; after the terminal device 3a selects to access the WLAN a, it corresponds to the identifier SSID _{a of the} WLAN. The data communication between the terminal device 3a and the AP 4 carries the SSID _a information.

After accessing the WLAN a, the terminal device 3a can start access authentication based on the PPPoE and the BRAS to further access the telecommunication network. First, the terminal device 3a is to perform the operation of the PPPoE discovery phase, that is, to find the BRAS 2 for authentication, and obtain a session identifier for the session with the BRAS 2. In the first step, it generates a PPPoE Active Discovery Initiation (PADI) message to find a BRAS that can provide access services. Since the terminal device does not know the MAC (Media Access Control) address of all available BRASs including BRAS 2, it uses the broadcast address (the MAC address is ff:ff:ff:ff:ff) in the PADI message. :ff) as the The recipient of PADI. The PADI message also contains the MAC address of the terminal device 3a itself. Moreover, the terminal device 3a encapsulates the request message into a WLAN data packet, and then sends the request message to the AP 4 through a device such as a wireless network card.

After receiving the WLAN data packet sent by the terminal device 3a, the AP 4 decapsulates the WLAN data packet to obtain the PADI message. Then, the AP 4 is based on the Control and Provisioning of Wireless Access Points (CAPWAP) protocol, and provides PADI messages to the DSLAM through the DSL and DSLAM 1 port I between the DSLAM and the DSLAM 1 1. Preferably, the data packet of the CAPWAP protocol further includes an identifier SSID _{a of the} WLAN.

In step S10, the DSLAM 1 acquires a PADI message from the terminal device 3a, which also acquires the identity SSID _a of the WLAN α to which the terminal device 3a belongs. Specifically, the DSLAM 1 obtains the BRAS request message in the CAPWAP-based data packet sent by the AP 4, and obtains the identifier SSID _{a of the} WLAN a from the data packet. It can be understood by those skilled in the art that the method for the DSLAM 1 to obtain the identifier of the WLAN to which the terminal device 3a belongs is not limited to the method in which the AP 4 is included in the CAPWAP message, which may also be used in other manners, for example, by the terminal. The device 3a directly includes the SSID _{a of} the WLAN α in the PADI message it transmits.

Next, in step S11, the DSLAM 1 associates the PADI corresponding to the PADI message of the terminal device 3a with the WLAN to which the terminal device 3a belongs.

BRAS 2.

Specifically, the DSLAM 1 can augment the agent circuit ID in the existing PPPoE Tag to include the identification information of the WLAN. The extended proxy circuit identifier can be defined as follows:

Access-Node-Identifier eth&WiFi slot/port[:vlan-id] [: SSID] where Access-Node-Identifier is the identification information of the DSLAM itself; eth indicates that the AP communicates with the DSLAM based on Ethernet; WiFi indicates the WLAN in the AP The device communicates with it; slot represents the board number of the service board to which the DSL is connected between the DSLAM and the AP; port represents the port number of the service board; vkn-id is the Ethernet-related VLAN (virtual area network) identifier; and the SSID is Where the terminal device that sent the request is located WLAN identification information.

It can be understood that in addition to Ethernet, ΑΡ can also communicate with the DSLAM based on the ATM mode, in which case the extended proxy circuit identifier can become:

Access-Node-Identifier atm&W!Fi slot/port:vpi.vci [: SSID]

The atm indicates that the AP communicates with the ATM based on the ATM (Asynchronous Transfer Mode); the vpi and the vci are the virtual path identifiers and the virtual link identifiers of the ATM; the other parameters are similar to those in the Ethernet case, and are not described here.

Preferably, DSLAM 1 provides this extended proxy circuit identification to BRAS 2 using the reserved words in the PADI in the existing PPPoE. That is, the DSLAM 1 can add the proxy circuit identifier including the SSID _a to the PADI message of the terminal device 3a, and transmit the obtained PADI to the BRAS 2.

Then, in step S20, BRAS 2 from the receiving terminal device 3a of DSLAM 1 BRAS request, the WLAN α terminal device identification information belongs 3a SSID _a.

Preferably, in the foregoing DSLAM 1 augmenting the proxy circuit identification parameter identifier based on the PPPoE TAG, in the case that the identification information of the WLAN is included in the PADI, the BRAS 2 extracts the identifier of the WLAN α to which the terminal device 3a belongs in the PADI request. Information SSID _a .

It can be understood that the manner in which the above-mentioned DSLAM 1 provides the PADI corresponding to the PADI message of the terminal device 3a and the SSID _a information of the WLAN α to which the terminal device 3a belongs to the BRAS 2 is not limited to the use of the PPPoE tag in the embodiment. the way.

Then, in step S21, based on the SSID _a , the BRAS 2 determines whether it can access the network through the BRAS based on the PPPoE, the rate of its access to the network, and the like based on the PADI of the terminal device 3a. For example, according to SSID _a , it is known that the terminal device 3a is accessed through the free WLAN α, and then it determines that its rate is zero, but its access rate and access rights are limited.

Preferably, after the access mode is determined, in step S22, the BRAS 2 generates a PPPoE activity discovery provision corresponding to the PADI according to the access mode of the terminal device 3a determined in step S21, such as rate, rate, authority, etc. (PPPoE) Active Discovery Offer, PADO) message. The PADO message includes the MAC of the terminal device 3a carried in the PADI The address, so that the PADO message can be sent back to the terminal device 3a. The PADO message also includes the MAC address of the BRAS 2, so that the terminal device 3a can directly interact with the BRAS 2 according to the MAC address, and does not need to send a broadcast message. It is worth noting that the PADO message generally does not include the proxy circuit identification information provided by the DSLAM 1 including the SSID _a .

Next, in step S23, the BRAS 2 sends the generated PADO message to the DSLAM.

U

Then, in step S12, the DSLAM 1 receives the PADO message from the BRAS 2 corresponding to the PADI message of the terminal device 3a. The DSLAM 1 also acquires the identification information of the WLAN to which the terminal device 3a corresponding to the response message belongs. In the case where the PADO message does not contain the proxy circuit identifier, the DSLAM 1 previously receives the PADI of the terminal device 3a, and the information such as the MAC (Media Access Control) address of the terminal device 3a carried in the request. SSID _a ; Upon receiving the PADO message, the DSLAM 1 extracts the MAC address of the terminal device 3a carried in the PADO message, and searches for the SSID _a associated with the MAC of the terminal device 3a in the PADO.

Subsequently, in step S13, the DSLAM 1 provides the PADO corresponding to the PADO message to the terminal device 3a according to the SSID _{a of the} WLAN a. Specifically, the DSLAM 1 may associate the MAC address of the SSIDa or the terminal device 3a with the information such as the board number and the port number of the DSL connected to the AP 4 on the DSLAM. In this embodiment, because the PADO message does not contain information such as the proxy circuit identifier, the DSLAM 1 directly processes the PADO message according to the terminal device 3a or WLAN α and its agreed encryption and encapsulation manner, and the processed PADO is processed. The board and port connected to the AP 4 are sent to the AP 4, and then sent to the terminal device 3a to ensure that the PADO arrives at the terminal device 3a normally and securely.

In the above embodiment, the PADO message sent by the BRAS does not include information such as the WLAN identity, and the DSLAM obtains the corresponding WLAN identity according to the PADO message. It can be understood that the BRAS can also improve the protocol, and add information such as the WLAN identity to the PADO message, so the DSLAM can directly extract the WLAN identity from the PADO message. Then, the process of the PPPoE discovery phase continues, and the terminal device 3a determines whether to access the network through the BRAS 2 according to the PADO; if it determines to pass the BRAS 2 access, it generates a PPPoE Active Discovery Request (PPPoE Active Discovery Request) , abbreviated as PADR) message, which contains the MAC address of BRAS 2 carried in PADO. By a similar manner to the above, 3a DSLAM 1 belongs to the auxiliary WLAN terminal 3a and the terminal device PADR information supplied to the SSID _a BRAS 2; BRAS 2 PADR then the information terminal apparatus 3a according to the SSID _a, which is determined with the terminal The device 3a performs session identification information based on PPPoE communication, such as a Session ID.

The Discovery Session-confirmation (PADS) message provides the PADS information to the terminal device 3a via the DSLAM 1 in a manner similar to the above. So far, the PPPoE discovery phase of the terminal device 3a ends, which can already access the network through the BRAS 2. Specifically, the terminal device 3a performs PPPoE-based data interaction with the BRAS 2 according to the Session ID carried in the PADS, generally speaking, The PPPoE data packet between the terminal device 3a and the BRAS 2 carries the session ID.

In the above PPPoE discovery phase, the auxiliary terminal device 3a of the present invention is described by the scheme in which the DSLAM 1 interacts with the BRAS 2 to access the network. It can be understood that the present invention is also applicable to authentication and communication of ATM-based PPP (PPP over ATM, PPPoA for short). The invention can also be used in other network operation scenarios, such as the DHCP phase. According to the present invention, in the DHCP phase, the terminal device 3a interacts with the DHCP server via the DSLAM 1 to obtain an IP address to access the network. The steps performed by the devices in the DHCP phase are similar. The DSLAM 1 can extend the proxy circuit identifier of the DHCP Option 82 to carry the identification information of the WLAN to which the terminal device 3a belongs, such as the SSID, and the terminal device 3a. The DHCP request is sent to the DHCP server together; the DHCP server allocates the IP address of the same subnet to the terminal device of the same SSID according to the SSID _a , to improve Layer 2 Mobility, and generates feedback to the terminal device 3a including The DHCP response message identified by the proxy circuit; after receiving the DHCP response message with the proxy circuit identifier, the DSLAM 1 deletes the proxy circuit identifier from the message, and The remaining DHCP message information is provided to the terminal device 3a, and the user is assisted in completing the DHCP process. For those skilled in the art, the present invention can be applied to the DHCP and the steps in the PPPoE discovery phase according to the above detailed description. In other network operation scenarios. Any technical solution based on the inventive concept of performing differentiated operation services according to different WLANs to which the terminal device belongs is within the scope of the present invention and claims. Based on the foregoing solution, according to the present invention, the terminal device can further assist the terminal device to interact with the BRAS based on the PPPoE to perform data service communication with the network such as the metropolitan area network. Specifically, in the above PPPoE discovery phase, when the DSLAM 1 receives the PADS message from the BRAS 2, as shown in FIG. 3, in step S14, the DSLAM 1 extracts the session identifier of the PPPoE session from the PADS message. Information, such as Session ID.

Then, in step S15, the DSLAM 1 associates the session ID with the identification information SSID _a of the WLAN to which the terminal device 3a corresponding to the acquired PADS belongs. The manner in which the DSLAM 1 obtains the same may be similar to the manner in the foregoing step S12, and details are not described herein.

At the same time, as described above, the terminal device 3a completes its PPPoE discovery phase operation and starts a PPPoE session with the BRAS 2 based on the Session ID.

Then, in the process of performing downlink data communication between the BRAS 2 and the terminal device 3a, or other terminal device, when the DSLAM 1 receives the PPP-based data packet sent by the BRAS 2 to the terminal device, in step S16, the The session ID of the corresponding session of the packet.

Next, in step S17, the DSLAM 1 determines the identification information SSID of the WLAN associated with the session ID according to its association relationship between the storage session ID and the SSID.

Finally, in step S18, the DSLAM 1 provides the data packet to the corresponding terminal device through the corresponding WLAN according to the determined identification information SSID of the WLAN. For example, the DSLAM 1 performs related processing on the data packet according to the corresponding terminal device or the corresponding WLAN and its agreed encryption and encapsulation manner, and sends the processed data packet to the corresponding AP through the board and port connected to the corresponding AP, and then Send to the corresponding terminal device. Pass This mapping operation, the access device such as DSLAM can assist the access server such as BRAS to communicate with the terminal device belonging to the wireless local area network. The method according to the present invention has been described in detail above, and the apparatus according to the present invention will be described in detail below with reference to Figs. 4 and 5.

Second embodiment

Figure 4 shows a block diagram of an apparatus for accessing a network by DSLAM 1 and BRAS 2 assisted terminal equipment 3a in accordance with an embodiment of the present invention. The DSLAM 1 includes a device 10 for assisting a terminal device to operate in a network, and includes an identification information acquiring device 100 and a first providing device 101, and preferably, a first obtaining device 102 and a second providing device 103; 2 includes means 20 for assisting the terminal device to operate in the network, comprising a first receiving device 200 and an operational mode determining device 201, preferably further comprising a response message generating device 202 and a first transmitting device 203.

A method of accessing the network by the DSLAM 1 and the BRAS 2 auxiliary terminal device 3a according to the present invention will be described in detail below with reference to Figs. 1 and 4. It should be understood by those skilled in the art that the present invention is not limited to the terminal device in the WiFi network shown in FIG. 1 interacting with the BRAS through the DSLAM. The present invention is also applicable to other types of wireless networks, access devices, and network operation servers. This specification will be described later in the following in other operating scenarios.

We know that the terminal device 3a must perform PPPoE-based interaction with the BRAS in order to access the telecommunications network such as the metropolitan area network. However, before the terminal device 3a interacts with the DSLAM 2 and the BRAS 2, it is first coupled to a WLAN and interacts with the BRAS through the WLAN. For example, both WLAN a and WLAN β are WLANs provided by a hotel through its , 4, where WLAN α is a public WLAN for hotel guests to access freely, WLAN β is the hotel's internal WLAN. The terminal device 3a is a terminal device of the hotel guest, such as a notebook computer, a PDA, etc., which is within the coverage of the AP 4, and acquires information about the WLAN α and β that the AP 4 can provide, and the selection thereof. Free WLAN α as its suitable access network. The method and process for a specific terminal device to access the WLA through ΑΡ are well known to those skilled in the art, and the present invention does not In the narrative. It should be noted that the WLANs α and β provided by the AP 4 respectively have different WLAN identifiers, such as SSID _a and SSIDp; after the terminal device 3a selects to access the WLAN α, it corresponds to the identifier SSID _{a of the} WLAN α, The data communication between the terminal device 3a and the AP 4 carries the SSID _a information.

After accessing the WLAN a, the terminal device 3a can start access authentication based on PPPoE and BRAS to further access the telecommunication network. First, the terminal device 3a is to perform the operation of the PPPoE discovery phase, that is, to find the BRAS 2 for authentication, and obtain a session identifier for the session with the BRAS 2. In the first step, it generates a PPPoE Active Discovery Initiation (PPDI) message to find a BRAS that can provide access services. Since the terminal device does not know the MAC (Media Access Control) address of all available BRASs including BRAS 2, it uses the broadcast address (the MAC address is ff:ff:ff:ff:ff) in the PADI message. :ff) as the recipient of the PADI. The PADI message also contains the MAC address of the terminal device 3a itself. Moreover, the terminal device 3a encapsulates the request message into a WLAN data packet, and then sends the request message to the AP 4 through a device such as a wireless network card.

The identification information acquisition device 100 of the device 10 of the DSLAM 1 acquires a PADI message from the terminal device 3a, which also acquires the identification SSID _a of the WLAN α to which the terminal device 3a belongs. Specifically, the identifier information obtaining apparatus 100 acquires the BRAS request message in the CAPWAP-based data packet sent by the AP 4, and acquires the identifier SSID _{a of the} WLAN a from the data packet. It can be understood by those skilled in the art that the method for the identifier information obtaining apparatus 100 to acquire the identifier of the WLAN to which the terminal device 3a belongs is not limited to the method in which the AP 4 is included in the CAPWAP message, which may be other methods. For example, the terminal device 3a directly includes the SSID _{a of} the WLAN α in the PADI message it transmits. Medium.

Next, the first providing device 101 supplies the PADI corresponding to the PADI message of the terminal device 3a and the SSID _a information of the WLAN α to which the terminal device 3a belongs to the BRAS 2.

Specifically, the first providing device 101 may augment the agent circuit ID in the existing PPPoE Tag to include the identification information of the WLAN. The extended proxy circuit identifier can be defined as follows:

Access-Node-Identifier eth&W!Fi slot/port [: vlan-id] [: SSID] where Access-Node-Identifier is the identification information of the DSLAM itself; eth indicates that the AP communicates with the DSLAM based on Ethernet; WiFi indicates the AP's subordinate The device in the WLAN communicates with the device; the slot indicates the board number of the service board to which the DSL is connected between the DSLAM and the AP; the port indicates the port number of the service board; the vlan-id is the Ethernet-related VLAN (virtual local area network) identifier; The SSID is the identification information of the WLAN where the terminal device that sent the request is located.

It can be understood that in addition to Ethernet, the AP can communicate with the DSLAM based on the ATM mode. In this case, the extended proxy circuit identifier can become:

Access-Node-Identifier atm&WiFi slot/port:vpi.vci[:SSID]

Preferably, the first providing means 101 provides the extended proxy circuit identification to the BRAS 2 using the reserved words in the PADI in the existing PPPoE. That is, the first providing device 101 may add the proxy circuit identifier including the SSID _a to the PADI message of the terminal device 3a, and transmit the obtained PADI to the BRAS 2.

Then, the first receiving means 20 of the BRAS 200 receives the terminal apparatus 2 from the DSLAM 1 BRAS 3a of the request, the WLAN α 3a belongs terminal device identification information SSID _a.

Preferably, in the foregoing DSLAM 1 augmenting the proxy circuit identification parameter identifier based on the PPPoE TAG, in the case that the identification information of the WLAN is included in the PADI, the first receiving device 200 extracts the WLAN to which the terminal device 3a belongs in the PADI request. α Identification information SSID _a .

It can be understood that the manner in which the first providing apparatus 101 provides the PADI corresponding to the PADI message of the terminal device 3a and the SSID of the WLAN α to which the terminal device 3a belongs to the BRAS 2 is not limited to the use in the embodiment. The way of PPPoE Tag.

Then, based on the SSID _a , the operation mode determining means 201 determines whether it can access the network through the BRAS based on the PPPoE, the rate of its access to the network, and the like based on the PADI of the terminal device 3a. For example, according to SSID _a , it is known that the terminal device 3a is accessed through the free WLAN α, and then it determines that its rate is zero, but its access rate and access rights are limited.

Preferably, after the access mode is determined, the device 20 of the BRAS 2 further includes a response message generating device 202, which determines the access mode of the terminal device 3a determined by the device 201 according to the operation mode, such as a rate, a rate, a permission, etc., and generates a PADI. The corresponding PPPoE Active Discovery Offer (PADO) message is provided. The PADO message includes the MAC address of the terminal device 3a carried in the PADI so that the PADO message can be sent back to the terminal device 3a. The PADO message further includes the MAC address of the BRAS 2, so that the terminal device 3a can directly interact with the BRAS 2 after the MAC address, and no longer need to send a broadcast message. It is worth noting that the PADO message generally does not include the proxy circuit identification information provided by the DSLAM 1 including the SSID _a .

Next, the first transmitting device 203 transmits the generated PADO message to the DSLAM 1. Then, the device 10 of the DSLAM 1 further includes a first obtaining means 102 which receives a PADO message from the BRAS 2 corresponding to the PADI message of the terminal device 3a. The first obtaining device 102 also acquires the identification information of the WLAN to which the terminal device 3a corresponding to the response message belongs. In the case where the PADO message does not contain the proxy circuit identifier, when the DSLAM 1 previously receives the PADI of the terminal device 3a, it acquires information such as the MAC (Media Access Control) address of the terminal device 3a carried in the request. The SSID _a ; when receiving the PADO message, the first obtaining means 102 extracts the MAC address of the terminal device 3a carried in the PADO message, and searches for the SSID _a associated with the MAC of the terminal device 3a in the PADO.

Subsequently, the second providing device 103 according to the SSID _{a of the} WLAN a will be associated with the PADO The PADO corresponding to the message is provided to the terminal device 3a. Specifically, the DSLAM 1 may previously associate the MAC address of the SSID _a or the terminal device 3a with the information such as the board number and the port number of the DSL connected to the AP 4 on the DSLAM. In this embodiment, because the PADO message does not contain information such as the proxy circuit identifier, the second providing device 103 directly processes the PADO message according to the terminal device 3a or WLAN α and its agreed encryption and encapsulation manner, and processes the PADO message. The PADO is sent to the AP 4 on the board and port connected to the ΑΡ 4, and then sent to the terminal device 3a to ensure that the PADO arrives at the terminal device 3a normally and securely.

In the above embodiment, the PADO message sent by the BRAS does not include the WLAN identity and the like, and the first obtaining device 102 obtains the corresponding WLAN identity according to the PADO message. It can be understood that the BRAS can also improve the protocol, and add information such as the WLAN identity to the PADO message, so the first obtaining device 102 can directly extract the WLAN identity from the PADO message.

Then, the process of the PPPoE discovery phase continues, and the terminal device 3a determines whether to access the network through the BRAS 2 according to the PADO; if it determines to access through the BRAS 2, it generates a PPPoE Active Discovery Request (PPPoE Active Discovery Request, The cartridge is called a PADR message, which contains the MAC address of the BRAS 2 carried in the PADO. By a similar manner to the above, 3a DSLAM 1 belongs to the auxiliary WLAN terminal device 3a and the PADR information provided to the terminal device SSID _a BRAS 2; BRAS 2 PADR then the information terminal apparatus 3a according to the SSID _a, which is determined with the terminal The device 3a performs session identification information based on PPPoE communication, such as a Session ID.

The Discovery Session-confirmation (PADS) message provides the PADS information to the terminal device 3a via the DSLAM 1 in a manner similar to the above. So far, the PPPoE discovery phase of the terminal device 3a ends, which can already access the network through the BRAS 2. Specifically, the terminal device 3a performs PPPoE-based data interaction with the BRAS 2 according to the Session ID carried in the PADS, generally speaking, The PPPoE data packet between the terminal device 3a and the BRAS 2 carries the session ID. In the above PPPoE discovery phase, the auxiliary terminal device 3a of the present invention is described by the scheme in which the DSLAM 1 interacts with the BRAS 2 to access the network. It can be understood that the present invention is also applicable to authentication and communication of ATM-based PPP (PPP over ATM, PPPoA for short). The invention can also be used in other network operation scenarios, such as the DHCP phase. According to the present invention, in the DHCP phase, the terminal device 3a interacts with the DHCP server via the DSLAM 1 to obtain an IP address to access the network. The steps performed by the devices in the DHCP phase are similar. The DSLAM 1 can extend the proxy circuit identifier of the DHCP Option 82 to carry the identification information of the WLAN to which the terminal device 3a belongs, such as the SSID, and the terminal device 3a. The DHCP request is sent to the DHCP server together; the DHCP server allocates the IP address of the same subnet to the terminal device of the same SSID according to the SSID _a , to improve Layer 2 Mobility, and generates feedback to the terminal device 3a including The DHCP response message identified by the proxy circuit; after receiving the DHCP response message with the proxy circuit identifier, the DSLAM 1 deletes the proxy circuit identifier from the message, and provides the remaining DHCP response information to the terminal device 3a to assist the The DHCP procedure is described in detail, and those skilled in the art can apply the present invention to DHCP and other network operation scenarios according to the steps of the PPPoE discovery phase of the present invention detailed above. Any technical solution based on the inventive concept of performing differentiated operation services according to different WL ANs to which the terminal device belongs is within the scope of the present invention and claims.

On the basis of the above solution, according to the present invention, the terminal device can further assist the terminal device to interact with the BRAS based on the PPPoE to perform data service communication with the network such as the metropolitan area network. As shown in FIG. 5, the apparatus 10 of the DSLAM 1 further includes an extracting means 104, a processing means 105, a session identification acquiring means 106, an identification information determining means 107 and a third providing means 108.

Specifically, in the PPPoE discovery phase, when the DSLAM 1 receives the PADS message from the BRAS 2, the extracting device 104 extracts the session identification information of the PPPoE session, such as the Session ID, from the PADS message.

Then, the processing device 105 associates the session ID with the identification information SSID _a of the WLAN to which the terminal device 3a corresponding to the acquired PADS belongs. DSLAM 1 got this The manner of the foregoing may be similar to that of the foregoing first obtaining device 102, and details are not described herein. At the same time, as described above, the terminal device 3a completes the operation of its PPPoE discovery phase, and starts a PPPoE session with the BRAS 2 based on the Session ID.

Then, during the downlink data communication between the BRAS 2 and the terminal device 3a, or other terminal device, when the DSLAM 1 receives the PPP-based data packet sent by the BRAS 2 to the terminal device, the session identifier obtaining device 106 extracts the data packet from the terminal. The session ID of the corresponding session of the packet.

Next, the identification information determining means 107 determines the identification information SSID of the WLAN associated with the Session ID based on the association relationship between the storage session ID and the SSID.

Finally, the third providing device 108 provides the data packet to the corresponding terminal device through the corresponding WLAN according to the determined identification information SSID of the WLAN. For example, the third providing device 108 performs related processing on the data packet according to the corresponding encryption or encapsulation mode of the corresponding terminal device or the corresponding WLAN, and sends the processed data packet to the corresponding board and port connected to the corresponding AP. The AP is then sent to the corresponding terminal device. Through this mapping operation, an access device such as a DSLAM can assist an access server such as a BRAS to communicate with a terminal device belonging to a wireless local area network. The embodiments of the present invention have been described above, and it is to be understood that the present invention is not limited to the specific embodiments described above, and those skilled in the art can make various modifications and changes within the scope of the appended claims.

Claims

A method for assisting a terminal device to operate in a network in an access device of a communication network, wherein the access device is connected to the access device by a wireless local area network to which the access device belongs, the method comprising:

Receiving a network operation request message from the terminal device, and acquiring identification information of the wireless local area network;

And b. providing the network operation request corresponding to the network operation request message and the identification information of the wireless local area network to the network operation server corresponding to the network operation request.

The method according to claim 1, wherein the step of obtaining the identification information of the wireless local area network in the step a includes:

- obtaining identification information of the wireless local area network from an access node of the wireless local area network.

The method according to claim 1, wherein in the step b, the network operation request includes circuit identification information, where the circuit identification information is used to identify the wireless local area network and the local access The information of the port and/or the line connected to the device, the step b further includes:

- adding identification information of the wireless local area network to the circuit identification information, and transmitting the network operation request to the network operation server.

4. The method of any one of claims 1 to 3, wherein the method further comprises:

Receiving, by the network operation server, a network operation response message corresponding to the network operation request, and acquiring identification information of the wireless local area network to which the terminal device corresponding to the network operation response message belongs;

And providing, according to the identification information of the wireless local area network, a network operation response corresponding to the network operation response message to the terminal device.

The method according to claim 4, wherein the step d further comprises: - performing a response to the network operation response according to the identification information of the wireless local area network And processing, and transmitting the processed network operation response to the terminal device in the wireless local area.

The method according to any one of claims 1 to 5, wherein the network operation request message includes a DHCP request message, the corresponding network operation server includes a DHCP server, and the network operation response message includes DHCP reply message.

The method according to any one of claims 1 to 5, wherein the network operation request message includes a PPPoE activity discovery initialization message, and/or a PPPoE activity discovery request message, and the corresponding network operation server Including a broadband remote access server, the corresponding network operation response message includes a PPPoE activity discovery providing message, and/or a PPPoE activity discovery session confirmation message.

8. The method according to claim 7, wherein the method further comprises: e. discovering a session confirmation message from the PPPoE activity after receiving a PPPoE activity discovery session confirmation message from the broadband remote access server Extracting point-to-point protocol session identification information;

f. associating the point-to-point protocol session identification information with the identification information of the wireless local area network;

The method further includes:

And acquiring a point-to-point protocol session identification information corresponding to the data packet when receiving a data packet of a point-to-point protocol sent to the terminal device;

h. determining identification information of the wireless local area network associated with the point-to-point session identification information;

i. providing the data packet to the terminal device via the associated wireless local area network based on the determined identification information of the associated wireless local area network.

9. The method according to claim 8, wherein the step i further comprises: - supplying the data packet to the terminal device according to the identification information of the associated wireless local area network. , ^ , , ' , , , , , ^σ

10. A method for assisting a terminal device to operate in a network in a network operation server of a communication network, wherein the terminal device passes a wireless local area network to which the terminal device belongs Connected to the access device, the method includes:

Receiving a network operation request of the terminal device from the access device, and identifier information of a wireless local area network to which the terminal device belongs;

B. determining, according to the network operation request, how the terminal device operates in the network according to the identifier information of the wireless local area network.

The method according to claim 10, wherein the step A further comprises:

- extracting identification information of the wireless local area network from circuit identifications in the network operation request.

12. The method according to claim 10, wherein the method further comprises:

C. generating a corresponding network operation response message according to the determined operation mode;

D. Send the network operation response message to the access device.

The method according to any one of claims 10 to 12, wherein the network operation server comprises a DHCP server, the operation request message comprises a DHCP request message, and the operation response message comprises a DHCP response message.

The method according to any one of claims 10 to 12, wherein the operation server comprises a broadband remote access server, the operation request message comprises a PPPoE activity discovery initialization message, and/or a PPPoE activity discovery The request message, the operation response message includes a PPPoE activity discovery providing message, and/or a PPPoE activity discovery session confirmation message.

An apparatus for assisting a terminal device to operate in a network in an access device of a communication network, wherein the access device is connected to the access device by a wireless local area network to which the access device belongs, the device comprising:

- an identifier information obtaining means, configured to receive a network operation request message from the terminal device, and obtain identification information of the wireless local area network;

a first providing means, configured to provide the network operation request corresponding to the network operation request message and the identification information of the wireless local area network to a network operation server corresponding to the network operation request.

The device according to claim 15, wherein the identification information obtaining device is further configured to:

Obtaining an identification letter of the wireless local area network from an access node of the wireless local area network

The device according to claim 15, wherein the network operation request includes circuit identification information, where the circuit identification information includes a port for identifying the wireless local area network connected to the access device and/or The information of the line, the first providing device is further configured to:

And adding the identification information of the wireless local area network to the circuit identification information, and sending the network operation request to the network operation server.

The device according to any one of claims 14 to 17, wherein the device further comprises:

a first obtaining means, configured to receive a network operation response message corresponding to the network operation request from the network operation server, and obtain an identifier of the wireless local area network to which the terminal device belongs corresponding to the network operation response message Information

a second providing means for providing a network operation response corresponding to the network operation response message to the terminal device according to the identification information of the wireless local area network.

The device according to claim 18, wherein the second providing device is further configured to:

And processing, according to the identification information of the wireless local area network, the network operation response, and transmitting the processed network operation response to the terminal device in the wireless local area.

The device according to any one of claims 14 to 19, wherein the network operation request message includes a DHCP request message, the corresponding network operation server includes a DHCP server, and the network operation response message includes DHCP reply message.

The device according to any one of claims 14 to 19, wherein the network operation request message includes a PPPoE activity discovery initialization message, and/or a PPPoE activity discovery request message, and the corresponding network operation server Including a broadband remote access server, the corresponding network operation response message includes a PPPoE activity discovery providing message, And/or PPPoE activity discovery session confirmation message.

22. The device according to claim 21, wherein the device further comprises:

An extracting device, configured to: after receiving the PPPoE activity discovery session confirmation message from the broadband remote access server, extract point-to-point protocol session identification information from the PPPoE activity discovery session confirmation message;

a processing device, configured to associate the point-to-point protocol session identification information with the identification information of the wireless local area network;

The device also includes:

a session identifier obtaining means, configured to acquire a point-to-point protocol session identification letter corresponding to the data packet when receiving a data packet of a point-to-point protocol sent to the terminal device

An identification information determining means for determining identification information of the wireless local area network associated with the point-to-point session identification information;

a third providing means for determining the identity of the associated wireless local area network based on the determination. , ^: , , , , . . .

The device according to claim 22, wherein the second providing device is further configured to:

And processing the data packet according to the identification information of the associated wireless local area network, and providing the processed data packet to the terminal device through the associated wireless local area network.

24. An apparatus for assisting a terminal device to operate in a network in a network operation server of a communication network, wherein the terminal device is connected to the access device through a wireless local area network to which the terminal device belongs, the device comprising:

a first receiving device, configured to receive a network operation request of the terminal device from the access device, and identifier information of a wireless local area network to which the terminal device belongs;

The operation mode determining means is configured to determine, according to the network operation request, the operation mode of the terminal device in the network based on the identification information of the wireless local area network.

The device according to claim 24, wherein the first receiving device is further configured to:

Extracting the identification information of the wireless local area network from the circuit identifier in the network operation request.

26. The device of claim 24, wherein the device further comprises:

a response message generating means, configured to generate a corresponding network operation response message according to the determined operation mode;

- a transmitting device for transmitting the network operation response message to the access device.

The device according to any one of claims 24 to 26, wherein the network operation server comprises a DHCP server, the operation request message comprises a DHCP request message, and the operation response message comprises a DHCP response message.

The apparatus according to any one of claims 24 to 26, wherein the operation server comprises a broadband remote access server, the operation request message comprises a PPPoE activity discovery initialization message, and/or a PPPoE activity discovery The request message, the operation response message includes a PPPoE activity discovery providing message, and/or an HPPoE activity discovery session confirmation message.

An access device for a communication network, comprising: means for assisting a terminal device to operate in a network according to claims 15 to 23.

30. A network operation server for a communication network, characterized by comprising means for assisting a terminal device to operate in a network according to claims 24 to 28.