The disclosure relates to the field of mobile communications, in particular to a system, an apparatus and a method for triggering a roaming Machine Type Communication (MTC) device.
The MTC refers to the general term of a series of technologies which apply the wireless communication technology to implement machine-to-machine and machine-to-man data communication and data exchange and their combinations. The MTC has two meanings—one refers to the machine itself, wherein the machine is called an intelligent device in the embedded field, and the other refers to a machine-to-machine connection, wherein the machines are connected together by the internet. The MTC is widely applied, for example, it is applied to intelligent measurement, remote monitoring, tracking, medical treatment and the like. Due to the application of the MTC, the human life is more intelligent. Compared with the traditional man-to-man communication, the MTC devices applied by the MTC are large in number and widely applied, thereby having a great market prospect.
The system architecture of MTC can be simply described by the system architecture shown in
In the system architectures of MTC, the MTC device communicates with an MTC server through a 3rd Generation Partnership Project (3GPP) network and an MTC InterWorking Function (MTC-IWF) entity. On security grounds, when the MTC server is not in the 3GPP network, an MTC security gateway can be introduced to authenticate and authorize the MTC server so as to ensure the communication security of an IWF entity. After the MTC security gateway is introduced, the connection system architecture of the IWF entity is as shown in
The disclosure provides a system, an apparatus and a method for triggering a roaming MTC device, so as to at least solve the problem that a lot of signaling traffic may be generated in a home network when security is ensured in the process of triggering the roaming MTC device in the conventional art.
In one aspect, the disclosure provides a system for triggering a roaming MTC device, including: an MTC-IWF entity of a home network and an MTC-IWF entity of a visitor network, wherein the MTC-IWF entity of the home network is configured to receive the registration information reported by the roaming MTC device, determine the MTC-IWF entity of the visitor network to which the MTC device is currently attached according to the registration information reported by the roaming MTC device when receiving a triggering request message for triggering the roaming MTC device from an MTC server, and send the triggering request message to the MTC-IWF entity of the visitor network; and the MTC-IWF entity of the visitor network is configured to receive the triggering request message and trigger the roaming MTC device.
Preferably, the MTC-IWF entity of the home network may be further configured to receive the registration information reported by the roaming MTC device before sending the triggering request message to the MTC-IWF entity of the visitor network, and create a routing relationship between itself and the MTC-IWF entity of the visitor network according to the registration information reported by the roaming MTC device.
Preferably, the MTC-IWF entity of the home network may be further configured to perform security authentication with the MTC server of the home network after receiving the triggering request message from the MTC server, and send the triggering request message to the MTC-IWF entity of the visitor network according to the registration information after the security authentication is passed.
Preferably, the registration information includes at least one of the following: subscriber identity information of the roaming MTC device, identity information of the roaming MTC device, and network identity information of the visitor network, wherein the MTC-IWF entity of the home network saves, maintains and manages the registration information. Specifically, the MTC-IWF entity of the home network updates the saved registration information according to the registration information newly reported by the MTC device when the roaming MTC device roams to other visitor networks besides the visitor network, and deletes the saved registration information when the roaming MTC device is detached.
Preferably, the MTC-IWF entity is one of the following: an MTC security gateway, an IWF entity with an MTC security gateway function, and their combination, wherein the MTC security gateway of the MTC-IWF entity in the home network is interconnected with that of the MTC-IWF entity in the visitor network; and the IWF entity with an MTC security gateway function of the MTC-IWF entity of the home network is interconnected with that of the MTC-IWF entity in the visitor network.
In another aspect, the disclosure provides an apparatus for triggering a roaming MTC device, including: a first receiving module, configured to receive registration information reported by an MTC device which belongs to a first network (equivalent to a home network) and currently roams to a second network (equivalent to a visitor network), a second receiving module, configured to receive a triggering request message for triggering the MTC device (equivalent to the roaming MTC device) from an MTC server, and a sending module, configured to send the triggering request message to the MTC-IWF entity of the second network according to the registration information when receiving the triggering request message for triggering the MTC device from the MTC server.
Preferably, the sending module includes: an authentication unit, configured to perform security authentication with the MTC server of the first network after receiving the triggering request message, and a sending unit, configured to send the triggering request message to the MTC-IWF entity of the second network according to the registration information after the security authentication is passed.
Preferably, the registration information includes at least one of the following information: subscriber identity information of the MTC device, identity information of the MTC device and network identity information of the second network.
In another aspect, the disclosure provides an apparatus for triggering a roaming MTC device, including: a third receiving module, configured to receive a triggering request message from an IWF entity of a first network, wherein the triggering request message is used for triggering an MTC device which belongs to the first network and currently roams to a second network, and a triggering module, configured to trigger the MTC device roaming to the second network according to the triggering request message.
In another aspect, the disclosure provides a method for triggering a roaming MTC device, including the following steps that: when a triggering request message for triggering an MTC device which belongs to a first network and currently roams to a second network is received from an MTC server, the MTC-IWF entity of the first network determines the MTC-IWF entity of the second network according to the registration information reported by the MTC device; and the MTC-IWF entity of the first network sends the triggering request message to the MTC-IWF entity of the second network determined to trigger the MTC device.
Preferably, before the MTC-IWF entity of the second network is determined according to the registration information reported by the MTC device, the method for triggering the roaming MTC device may further include the steps that: when the MTC device is attached to the second network, the MTC-IWF entity of the first network receives the registration information from the MTC device and saves it; and the MTC-IWF entity of the first network creates a routing relationship between itself and the MTC-IWF entity of the second network according to the registration information.
Preferably, triggering the MTC device includes the steps that: the MTC-IWF entity of the second network triggers the MTC device according to the triggering request message after receiving the triggering request message; or, the MTC-IWF entity of the second network sends the triggering request message to a predetermined network entity in the second network after receiving the triggering request message, and the predetermined network entity in the second network triggers the MTC device according to the triggering request message after receiving the triggering request message.
Preferably, the step that the MTC-IWF entity of the first network sends the triggering request message to the MTC-IWF entity of the second network determined includes that: the MTC-IWF entity of the first network performs security authentication with the MTC server of the first network after receiving the triggering request message for triggering the MTC device from the MTC server; and after the security authentication is passed, the MTC-IWF entity of the first network sends the triggering request message to the MTC-IWF entity of the second network according to the registration information.
Preferably, the registration information includes at least one of the following information: subscriber identity information of the MTC device, identity information of the MTC device, and network identity information of the second network, wherein the MTC-IWF entity of the first network saves, maintains and manages the registration information. Specifically, the MTC-IWF entity of the first network updates the saved registration information according to the registration information newly reported by the MTC device when the MTC device roams to other visitor networks besides the visitor network, and deletes the saved registration information of the MTC device when the MTC device is detached.
Preferably, the MTC-IWF entity is one of the following entities: an MTC security gateway, an IWF entity with an MTC security gateway function, and their combination, wherein the MTC security gateway of the MTC-IWF entity of the first network is interconnected with that of the MTC-IWF entity of the second network; and the IWF entity with the MTC security gateway function of the MTC-IWF entity of the first network is interconnected with that of the MTC-IWF entity of the second network.
In the disclosure, the MTC-IWF entity of the home network receives the registration information reported by the roaming MTC device, and sends the triggering request message to the MTC-IWF entity of the visitor network according to the registration information when receiving the triggering request message for triggering the roaming MTC device from the MTC server, and the MTC-IWF entity of the visitor network sends the triggering request message to the roaming MTC device to trigger the roaming MTC device, so that the MTC-IWF entity of the home network determines the MTC-IWF entity of the visitor network to which the MTC device is currently attached according to the registration information after receiving the triggering request message and sends the triggering request message to the MTC-IWF entity of the visitor network, the triggering request message is prevented from being sent to the related nodes of the home network to be sent to the visitor network by the related nodes of the home network, and security is ensured in the process of the triggering the roaming MTC device; and moreover, the signalling traffic generated in the home network in the triggering process is reduced, and less resources of the home network are occupied, thereby improving the performance of the home network and promoting the improvement of the communication quality of the home network and the user experience.
The drawings illustrated here are to provide further understanding of the disclosure and constitute one part of the application, and the exemplary embodiments of the disclosure and the explanations thereof are intended to explain the disclosure, instead of improperly limiting the disclosure. In the drawings:
The disclosure will be described below in reference to the drawings and the embodiments in detail. It should be noted that, in case of no conflict, the embodiments of the application and features therein can be combined with one another.
In the embodiments below, the communication can be implemented by wireless connection or wired connection or their combination, which is not limited here.
Because the connection modes of MTC-IWF entities in roaming and non-roaming system architectures have a major impact on the communication security and roaming of a roaming MTC device supported by an MTC system, only the connection ways of the 3GPP network and an external interface system are described below as an example.
In the embodiment, the MTC-IWF entity 502 of the home network receives the registration information reported by the roaming MTC device, and sends a triggering request message to the MTC-IWF entity 504 of the visitor network according to the registration information when receiving the triggering request message for triggering the roaming MTC device from the MTC server 500, and the MTC-IWF entity 504 of the visitor network sends the triggering request message to the roaming MTC device to trigger the roaming MTC device, so that the MTC-IWF entity of the home network determines the MTC-IWF entity of the visitor network to which the MTC device is currently attached according to the registration information after receiving the triggering request message and sends the triggering request message to the MTC-IWF entity of the visitor network, the triggering request message is prevented from being sent to the related nodes of the home network to be sent to the visitor network by the related nodes of the home network, and security is ensured in the process of the triggering the roaming MTC device; and moreover, the signalling traffic generated in the home network in the triggering process is reduced, and less resources of the home network are occupied, thereby improving the performance of the home network and promoting the improvement of the communication quality of the home network and the user experience.
In order to send the triggering request message to the MTC-IWF entity 504 of the visitor network accurately and smoothly, in the preferred embodiment, the MTC-IWF entity 502 of the home network may be further configured to receive the registration information reported by the roaming MTC device before sending the triggering request message to the MTC-IWF entity 504 of the visitor network, and create a routing relationship between itself and the MTC-IWF entity 504 of the visitor network according to the registration information reported by the roaming MTC device.
In the preferred embodiment, before the triggering request message is sent to the MTC-IWF entity 504 of the visitor network, the routing relationship between the MTC-IWF entity 502 of the home network and the MTC-IWF entity 504 of the visitor network is created at first according to the registration information; therefore, the triggering request message can be sent to the MTC-IWF entity 504 of the visitor network according to the created routing relationship, thereby ensuring the accuracy of sending the triggering request message to the MTC-IWF entity of the visitor network.
In order to ensure the communication security of the MTC-IWF entity, in the preferred embodiment, the MTC-IWF entity 502 of the home network may be further configured to perform security authentication with the MTC server 500 of the home network after receiving the triggering request message from the MTC server 500, and send the triggering request message to the MTC-IWF entity 504 of the visitor network according to the registration information after the security authentication is passed.
In the preferred embodiment, the MTC-IWF entity 502 of the home network performs security authentication with the MTC server 500 of the home network after receiving the triggering request message and sends the triggering request message to the MTC-IWF entity 504 of the visitor network according to the registration information after the MTC server 500 is authenticated and authorized, thereby ensuring the communication security of the MTC-IWF entity; and moreover, the network topology, relay or processing signalling protocol of a mobile communication system can be shielded.
In order to meet the application requirements of different scenarios, the registration information may include at least one of the following information: subscriber identity information of the roaming MTC device, identity information of the roaming MTC device, and network identity information of the visitor network, wherein the MTC-IWF entity 502 of the home network saves, maintains and manages the registration information. Specifically, the MTC-IWF entity 502 of the home network updates the saved registration information according to the registration information newly reported by the MTC device when the roaming MTC device roams to other visitor networks besides the visitor network, and deletes the saved registration information when the roaming MTC device is detached.
Several kinds of preferred information that the registration information may include are provided in the preferred embodiment above, so that the MTC-IWF entity of the home network can send the triggering request message to the MTC-IWF entity of the visitor network according to the registration information in different application scenarios, thereby meeting the application requirements in different scenarios and promoting the improvement of the success rate of sending the triggering request message to the MTC-IWF entity of the visitor network. In addition, the MTC-IWF entity 502 of the home network saves and maintains and updates the registration information in real time; when the roaming MTC device roams to other visitor networks besides the visitor network, the MTC-IWF entity 502 of the home network updates the saved registration information according to the registration information newly reported by the MTC device to ensure that the triggering request message can be accurately sent to the MTC-IWF entity of a new visitor network according to the latest registration information; and when the roaming MTC device is detached, the MTC-IWF entity 502 of the home network deletes the saved registration information to release its own storage resources in real time.
In order to ensure the security in the process of triggering the roaming MTC device and reduce the signaling traffic generated in the home network during the triggering, as shown in
In order to ensure the security in the process of triggering the roaming MTC device and improve the efficiency of sending the triggering request message, as shown in
In the preferred embodiment, the MTC-IWF entity consists of an MTC security gateway and an IWF entity with an MTC security gateway function, so as to ensure the security in the process of triggering the roaming MTC device. Moreover, when a large number of MTC devices need triggering, the MTC server 500 can send a triggering request message to each of the MTC security gateway and the IWF entity with the MTC security gateway function; and different MTC security gateways are interconnected or different IWF entities with the MTC security gateway function are interconnected, so as to support the triggering of the roaming MTC device, improve the efficiency of sending the triggering request message, and promote the improvement of the efficiency of triggering the roaming MTC device. Preferably, the MTC server 500 can send a triggering request message to the MTC security gateway and the IWF entity with the MTC security gateway function in different forms respectively, namely, the triggering request messages sent to the MTC security gateway and the IWF entity with the MTC security gateway function can be in different formats. As shown in
Preferably, the MTC security gateway and the IWF entity with the MTC security gateway function can also be interconnected with each other as required.
Preferably, the IWF entity with the MTC security gateway function can also be an MTC security gateway.
Preferably, the MTC-IWF entity can receive a triggering request message for triggering a roaming MTC device or a triggering request message for triggering a non-roaming MTC device, so as to implement the data balance in the internet, effectively balance the network load and rationally balance the network resources. Preferably, the MTC security gateway and the IWF entity with the MTC security gateway function can save, maintain and manage the registration information of the roaming MTC device; when the roaming MTC device roams to other visitor networks besides the visitor network, the MTC-IWF entity 502 of the home network updates the stored registration information according to the registration information newly reported by the MTC device, so as to ensure that the triggering request message can be sent to the IWF entity of a new visitor network accurately according to the latest registration information; and when the roaming MTC device is detached, the MTC-IWF entity 502 of the home network deletes the saved registration information, so as to release its own storage resources in real time.
In the embodiment, after the first receiving module 802 receives the registration information reported by the MTC device which belongs to the first network and currently roams to the second network, the sending module 806 sends the triggering request message to the MTC-IWF entity of the second network according to the registration information when the second receiving module 804 receives the triggering request message for triggering the MTC device from the MTC server, and the MTC-IWF entity of the second network sends the triggering request message to the MTC device to trigger the MTC device, so that the MTC-IWF entity of the first network sends the triggering request message to the MTC-IWF entity of the second network according to the registration information after receiving the triggering request message, the triggering request message is prevented from being sent to the related nodes of the first network to be sent to the second network by the related nodes of the first network, and security is ensured in the process of the triggering the MTC device; and moreover, the signalling traffic generated in the first network in the triggering process is reduced, and less resources of the first network are occupied, thereby improving the performance of the first network and promoting the improvement of the communication quality of the first network and the user experience.
The apparatus for triggering the roaming MTC device in each preferred embodiment above can be applied to the IWF entity of the first network (equivalent to the home network).
In order to trigger the roaming MTC device, the embodiment provides an apparatus for triggering the roaming MTC device, which can be applied to the IWF entity of the second network (equivalent to the visitor network).
As shown in
In the embodiment, when the MTC device in the first network (equivalent to the home network) roams to the second network (equivalent to the visitor network), the third receiving module 902 receives the triggering request message for triggering the MTC device from the IWF entity of the first network, and the triggering module 904 triggers the MTC device according to the triggering request message, so as to trigger the roaming MTC device.
Of course, when the first network or the second network is both a home network and a visitor network (since a network is relatively a home network or a visitor network), the two devices for triggering the roaming MTC device above (as shown in
In order to ensure the communication security, as shown in
In the preferred embodiment, security authentication is performed with the MTC server of the home network after the triggering request message is received; and the triggering request message is sent to the MTC-IWF entity of the second network according to the registration information after the MTC server is authenticated and authorized, thereby ensuring the communication security; and moreover, the network topology, relay or processing signalling protocol of a mobile communication system can be shielded.
In order to meet the application requirements of different scenarios, the registration information may include at least one of the following information: subscriber identity information of the MTC device, identity information of the MTC device and network identity information of the second network.
In the preferred embodiment, several kinds of preferred information that the registration information may include are provided, so that the triggering request message can be sent to the MTC-IWF entity of the second network according to the registration information in different application scenarios, thereby meeting the application requirements of different scenarios, and promoting the increase of the success rate of sending the triggering request message to the MTC-IWF entity of the second network.
Step 1102: When a triggering request message for triggering an MTC device which belongs to a first network and currently roams to a second network is received from an MTC server, the MTC-IWF entity of the first network determines the MTC-IWF entity of the second network according to the registration information reported by the MTC device.
Step 1104: The MTC-IWF entity of the first network sends the triggering request message to the MTC-IWF entity of the second network determined to trigger the MTC device.
In the embodiment, the MTC-IWF entity of the first network receives the registration information reported by the MTC device, determines the MTC-IWF entity of the second network according to the registration information when receiving a triggering request message for triggering the MTC device from an MTC server and sends the triggering request message to the MTC-IWF entity of the second network according to the registration information; and the MTC-IWF entity of the second network sends the triggering request message to the MTC device to trigger the MTC device, so that the MTC-IWF entity of the first network sends the triggering request message to the MTC-IWF entity of the second network according to the registration information, the triggering request message is prevented from being sent to the related nodes of the first network to be sent to the second network by the related nodes of the first network, and security is ensured in the process of the triggering the roaming MTC device; and moreover, the signalling traffic generated in the first network in the triggering process is reduced, and less resources of the first network are occupied, thereby improving the performance of the first network and promoting the improvement of the communication quality of the first network and the user experience.
In order to send the triggering request message to the MTC-IWF entity of the visitor network accurately and smoothly, in the preferred embodiment, before the MTC-IWF entity of the second network is determined according to the registration information reported by the MTC device, the method for triggering the roaming MTC device may further include the following steps that: when the MTC device is attached to the second network, the MTC-IWF entity of the first network receives the registration information from the MTC device and saves it; and the MTC-IWF entity of the first network creates a routing relationship between itself and the MTC-IWF entity of the second network according to the registration information.
In the preferred embodiment, before the triggering request message is sent to the MTC-IWF entity of the visitor network, the routing relationship between the MTC-IWF entity of the home network and the MTC-IWF entity of the visitor network is created at first according to the registration information; therefore, the triggering request message can be sent to the MTC-IWF entity of the visitor network according to the created routing relationship, thereby ensuring the accuracy of sending the triggering request message to the MTC-IWF entity of the visitor network.
In order to meet the application requirements of different scenarios, in the embodiment, triggering the MTC device includes the steps that: the MTC-IWF entity of the second network triggers the MTC device according to the triggering request message after receiving the triggering request message; or, the MTC-IWF entity of the second network sends the triggering request message to a predetermined network entity in the second network after receiving the triggering request message, and the predetermined network entity in the second network triggers the MTC device according to the triggering request message after receiving the triggering request message.
In the preferred embodiment, when the MTC device in the first network (equivalent to the home network) roams to the second network (equivalent to the visitor network), after receiving a triggering request message from the MTC-IWF entity of the first network, the MTC-IWF entity of the second network can directly trigger the MTC device according to the triggering request message or send the triggering request message to a predetermined network entity in the second network (such as the related nodes in the second network), and the predetermined network entity in the second network triggers the MTC device according to the triggering request message, so as to meet the application requirements of different scenarios.
In order to ensure the communication security of the MTC-IWF entity, in the preferred embodiment, the step that the MTC-IWF entity of the first network sends the triggering request message to the MTC-IWF entity of the second network determined includes that: after receiving the triggering request message for triggering the MTC device from the MTC server, the MTC-IWF entity of the first network performs security authentication with the MTC server of the first network; and after the security authentication is passed, the MTC-IWF entity of the first network sends the triggering request message to the MTC-IWF entity of the second network according to the registration information.
In the preferred embodiment, after receiving the triggering request message, the MTC-IWF entity of the first network performs security authentication with the MTC server of the first network, and sends the triggering request message to the MTC-IWF entity of the second network according to the registration information after the MTC server is authenticated and authorized, thereby ensuring the communication security of the MTC-IWF entity; and moreover, the network topology, relay or processing signalling protocol of a mobile communication system can be shielded.
In order to meet the application requirements of different scenarios, the registration information includes at least one of the following information: subscriber identity information of the MTC device, identity information of the MTC device, and network identity information of the second network, wherein the MTC-IWF entity of the first network saves, maintains and manages the registration information. Specifically, the MTC-IWF entity of the first network updates the saved registration information according to the registration information newly reported by the MTC device when the MTC device roams to other visitor networks besides the second network, and deletes the saved registration information of the MTC device when the MTC device is detached.
In the preferred embodiments, several kinds of preferred information that the registration information may include are provided, so that the MTC-IWF entity of the first network can send the triggering request message to the MTC-IWF entity of the second network according to the registration information in different application scenarios, so as to meet the application requirements in different scenarios and promote the increase of success rate of sending the triggering request message to the MTC-IWF entity of the second network. In addition, the MTC-IWF entity of the home network saves and maintains and updates the registration information in real time; when the roaming MTC device roams to other visitor networks besides the visitor network, the MTC-IWF entity of the home network updates the saved registration information according to the registration information newly reported by the MTC device to ensure that the triggering request message can be sent to the IWF entity of a new visitor network accurately according to the latest registration information; and when the roaming MTC device is detached, the MTC-IWF entity of the home network deletes the saved registration information to release its own storage resources in real time.
In order to ensure the security in the process of triggering the roaming MTC device and reduce the signaling traffic generated in the home network during the triggering, as shown in
In order to ensure the security in the process of triggering the roaming MTC device and improve the efficiency of sending the triggering request message, as shown in
In the preferred embodiment, the MTC-IWF entity consists of an MTC security gateway and an IWF entity with an MTC security gateway function, so as to ensure the security in the process of triggering the MTC device. Moreover, when a large number of MTC devices need triggering, the MTC server can send a triggering request message to the MTC security gateway and the IWF entity with the MTC security gateway function, so that different MTC security gateways are interconnected and different IWF entities with the MTC security gateway function are interconnected, so as to support the triggering of the roaming MTC device, improve the efficiency of sending the triggering request message, and promote the increase of efficiency of triggering the MTC device. Preferably, the MTC server can send a triggering request message to the MTC security gateway and the IWF entity with the MTC security gateway function in different message forms respectively, namely, the triggering request messages sent to the MTC security gateway and the IWF entity with the MTC security gateway function can be in different formats. As shown in
Preferably, the MTC security gateway and the IWF entity with the MTC security gateway function can also be interconnected as required.
Preferably, the IWF entity with the MTC security gateway function can also be an MTC security gateway.
Preferably, the MTC-IWF entity can receive a triggering request message for triggering a roaming MTC device or a triggering request message for triggering a non-roaming MTC device, so as to implement the data balance in the internet, effectively balance the network load and rationally balance the network resources.
Preferably, the MTC security gateway and the IWF entity with the MTC security gateway function can save, maintain and manage the registration information of the roaming MTC device; when the roaming MTC device roams to other visitor networks besides the visitor network, the MTC-IWF entity of the home network updates the stored registration information according to the registration information newly reported by the MTC device, so as to ensure that the triggering request message can be sent to the IWF entity of a new visitor network accurately according to the latest registration information; and when the roaming MTC device is detached, the MTC-IWF entity of the home network deletes the saved registration information, so as to release its own storage resources in real time.
The preferred embodiments above are described below with combination with a specific example in detail.
Step 1202: When being attached to a home network (equivalent to a first network), an MTC device needs to be further registered in the MTC-IWF entity of the home network, wherein the registration information includes the subscriber identity information of the MTC device and the identity information of the MTC device. It should be noted that the registration information may further include the network identity information of the home network.
Step 1204: When the MTC device is detached and roams, the MTC-IWF entity of the home network deletes the registration information of the MTC device.
Step 1206: After being attached to a visitor network (equivalent to a second network), the MTC device is further registered to the MTC-IWF entity of the visitor network, wherein the registration information includes the subscriber identity information of the MTC device, the identity information of the MTC device, and the network identity information of the visitor network to which the MTC device is currently attached.
Step 1208: The MTC device reports registration information (equivalent to related roaming information) to the MTC-IWF entity of the home network.
Step 1210: When needing to trigger the MTC device, the MTC server sends a triggering request message to the MTC-IWF entity of the home network at first, wherein the triggering request message at least contains the identity information of the MTC device or the subscriber identity information of the MTC device.
Step 1212: The MTC-IWF entity of the home network performs security authentication with the MTC server.
Step 1214: After the security authentication is passed, the MTC-IWF entity of the home network sends the triggering request message to the MTC-IWF entity of the visitor network according to the identity information of the MTC device or the subscriber identity information of the MTC device in the triggering request message, and the registration information saved by the MTC-IWF entity of the home network, wherein the security of connection between the MTC-IWF entity of the home network and the MTC-IWF entity of the visitor network is ensured by the security of a 3GPP core network.
Step 1216: After receiving the triggering request message, the MTC-IWF entity of the visitor network generates a triggering instruction message for the triggering request message and sends the triggering instruction message to the MTC device, wherein the triggering instruction message needs security protection, such as integrity protection.
After receiving the triggering request message, the MTC-IWF entity of the visitor network can also send the triggering request message to other nodes in the 3GPP core network, such as a Gateway General Packet Radio Service Support node (GGSN)/Packet Data Network Gateway (P-GW), a Serving GPRS Support node (SGSN)/a Mobile Management Entity (MME), and a Short Message Service-Service Center (SMS-SC)/Internet Protocol Short Message Gateway (IP-SM-GW); and these nodes generate a triggering instruction message for the triggering request message and send the triggering instruction message to the MTC device, wherein the triggering instruction message needs security protection, such as integrity protection.
Step 1218: After receiving the triggering instruction message, the MTC device starts a secure connection creation process with the MTC server in response to the triggering instruction message.
Step 1302: When being attached to a home network, an MTC device needs to be further registered in the MTC security gateway in the home network (the MTC-IWF entity of the home network is the MTC security gateway), wherein the registration information includes the subscriber identity information of the MTC device and the identity information of the MTC device. The registration information may further include the network identity information of the home network if necessary.
Step 1304: When the MTC device is detached and roams, the MTC security gateway of the home network deletes the registration information of the MTC device.
Step 1306: After being attached to a visitor network, the MTC device is further registered to the MTC security gateway in the visitor network (the MTC-IWF entity of the visitor network is the MTC security gateway), wherein the registration information includes the subscriber identity information of the MTC device, the identity information of the MTC device, and the network identity information of the visitor network to which the MTC is currently attached.
Step 1308: The MTC device reports registration information (equivalent to related roaming information) to the MTC-IWF entity of the home network.
Step 1310: When needing to trigger the MTC device, the MTC server sends a triggering request message to the MTC security gateway of the home network at first, wherein the triggering request message at least contains the identity information of the MTC device or the subscriber identity information of the MTC device.
Step 1312: The MTC security gateway of the home network performs security authentication with the MTC server.
Step 1314: After the security authentication is passed, the MTC security gateway of the home network sends the triggering request message to the MTC security gateway of the visitor network according to the identity information of the MTC device or the subscriber identity information of the MTC device in the triggering request message, and the registration information saved by the MTC security gateway of the home network; and the security of connection between the MTC security gateway of the home network and the MTC security gateway of the visitor network is ensured by the security of a 3GPP core network.
Step 1316: After receiving the triggering request message, the MTC security gateway of the visitor network generates a triggering instruction message for the triggering request message and sends the triggering instruction message to the MTC device, wherein the triggering instruction message needs security protection, such as integrity protection.
After receiving the triggering request message, the MTC security gateway of the visitor network can also send the triggering request message to other nodes in the 3GPP core network, such as GGSN/PGW, SGSN/MME and SMS-SC/IP-SM-GW; and these nodes generate a triggering instruction message for the triggering request message and send the triggering instruction message to the MTC device, wherein the triggering instruction message needs security protection, such as integrity protection.
Step 1318: After receiving the triggering instruction message, the MTC device starts a secure connection creation process with the MTC server in response to the triggering instruction message.
Step 1402: When being attached to a home network, the MTC device needs to be further registered in an IWF entity with an MTC security gateway function in the home network, wherein the registration information includes the subscriber identity information of the MTC device and the identity information of the MTC device. The registration information may further include the network identity information of the home network if necessary.
Step 1404: When the MTC device is detached and roams, the IWF entity with the MTC security gateway function in the home network deletes the registration information of the MTC device.
Step 1406: After being attached to a visitor network, the MTC device is further registered to the IWF entity with the MTC security gateway function in the visitor network, wherein the registration information includes the subscriber identity information of the MTC device, the identity information of the MTC device, and the network identity information of the visitor network to which the MTC is currently attached.
Step 1408: The MTC device reports registration information (equivalent to related roaming information) to the MTC-IWF entity of the home network.
Step 1410: When needing to trigger the MTC device, the MTC server sends a triggering request message to the IWF entity with the MTC security gateway function in the home network at first, wherein the triggering request message at least contains the identity information of the MTC device or the subscriber identity information of the MTC device.
Step 1412: The IWF entity with the MTC security gateway function in the home network performs security authentication with the MTC server.
Step 1414: After the security authentication is passed, the IWF entity with the MTC security gateway function sends a triggering request message to the IWF entity with the MTC security gateway function in the visitor network according to the identity information of the MTC device or the subscriber identity information of the MTC device in the triggering request message, and the registration information saved by the IWF entity with the MTC security gateway function in the home network, wherein the security of connection between the IWF entity with the MTC security gateway function in the home network and the IWF entity with the MTC security gateway function in the visitor network is ensured by the security of a 3GPP core network.
Step 1416: After receiving the triggering request message, the IWF entity with the MTC security gateway function in the visitor network generates a triggering instruction message for the triggering request message and sends the triggering instruction message to the MTC device, wherein the triggering instruction message needs security protection, such as integrity protection.
Step 1418: After receiving the triggering request message, the IWF entity with the MTC security gateway function in the visitor network can also send the triggering request message to other nodes in the 3GPP core network, such as GGSN/PGW, SGSN/MME and SMS-SC/IP-SM-GW; and these nodes generate a triggering instruction message for the triggering request message and send the triggering instruction message to the MTC device, wherein the triggering instruction message needs security protection, such as integrity protection. Step 1418: After receiving the triggering instruction message, the MTC device starts a secure connection creation process with the MTC server in response to the triggering instruction message.
In the embodiments, the MTC device refers to a machine-to-MTC device in the mobile communication network; a Universal Integrated Circuit Card (UICC) is installed in the MTC device; and a user identity module, such as a Subscriber Identity Module (SIM), a Universal Subscriber Identity Module (USIM), an Internet Protocol Multimedia Service Identity Module (ISIM) and the like are located in the UICC.
The MTC server is configured to provide related MTC service or business. GGSN/PGW, a Home Location Register (HLR)/a Home Subscriber Server (HSS), an SGSN/MME and an SMS-SC/IP-SM-GW.
Obviously, those skilled in the art shall understand that the modules or steps of the disclosure may be implemented by general computing apparatus and centralized in a single computing apparatus or distributed in a network consisting of multiple computing apparatus. Optionally, the modules or steps may be implemented by program codes executable by the computing apparatus, so that they may be stored in a storage apparatus and executed by the computing apparatus, and, in some cases, the steps can be executed in a sequence different from the illustrated or described sequence, or they are respectively made into the integrated circuit modules or many of them are made into a single integrated circuit module. By doing so, the disclosure is not limited to any specific combination of hardware and software.
The above are only the preferred embodiments of the disclosure and not intended to limit the disclosure. For those skilled in the art, various modifications and changes can be made in the disclosure. Any modifications, equivalent replacements, improvements and the like within the spirit and principle of the disclosure shall fall within the scope of protection of the disclosure.
| Number | Date | Country | Kind |
|---|---|---|---|
| 201210063483.0 | Mar 2012 | CN | national |
| Filing Document | Filing Date | Country | Kind | 371c Date |
|---|---|---|---|---|
| PCT/CN2012/074198 | 4/17/2012 | WO | 00 | 2/18/2015 |