阅读说明：本技术 一种通信方法、装置及系统 (Communication method, device and system ) 是由 彭书萍 陈国义 牛承光 余舟毅 于 2019-03-18 设计创作，主要内容包括：本申请公开了一种通信方法,属于通信领域。在该方法中,固移互通功能FMIF接收宽带网关BNG发送的携带包括固网设备的第一认证信息的接入请求消息,所述第一认证信息是所述BNG基于所述固网设备发送的拨号报文生成的且所述第一认证信息包括所述固网设备的标识。所述FMIF根据所述FMIF与核心网设备之间的控制面接口所支持的消息格式封装所述第一认证消息得到第二认证消息,所述FMIF通过所述控制面接口向所述核心网设备发送所述第二认证消息。所述核心网设备所述第二认证消息对所述固网设备进行认证。所述核心网设备属于的通信网络版本为5G通信网络或高于5G通信网络。(The application discloses a communication method, and belongs to the field of communication. In the method, a fixed-mobile interworking function FMIF receives an access request message which is sent by a broadband gateway BNG and carries first authentication information including fixed network equipment, wherein the first authentication information is generated by the BNG based on a dialing message sent by the fixed network equipment and comprises an identifier of the fixed network equipment. And the FMIF encapsulates the first authentication message according to a message format supported by a control plane interface between the FMIF and the core network equipment to obtain a second authentication message, and the FMIF sends the second authentication message to the core network equipment through the control plane interface. And the core network equipment authenticates the fixed network equipment through the second authentication message. The communication network version that the core network equipment belongs to is 5G communication network or is higher than 5G communication network.)

1. A method of communication, the method comprising:

the broadband gateway BNG receives a dialing message sent by the fixed network equipment;

the BNG generates first authentication information of the fixed network equipment according to the dialing message, wherein the first authentication information comprises an identifier of the fixed network equipment;

the BNG sends an access request message to a Fixed Mobile Interworking Function (FMIF), the access request message carries the first authentication information, the access request message is used for the FMIF to request core network equipment to authenticate the fixed network equipment according to the first authentication information, and the communication network version of the core network equipment is a 5G communication network or a communication network higher than the 5G communication network.

2. The method of claim 1, wherein the access request message is a remote subscriber dial authentication system Radius protocol access request message or a Diameter protocol access request message.

3. The method of claim 1 or 2, wherein after said BNG sends an access request message to a fixed mobility interworking function, FMIF, further comprising:

the BNG receives an address of the fixed network device sent by the core network device through the FMIF, where the address of the fixed network device is allocated by the core network device after receiving a session establishment request message carrying an identifier of the fixed network device, and the session establishment request message is sent by the FMIF after the core network device passes authentication on the fixed network device;

and the BNG establishes a data plane connection between the BNG and the FMIF, which corresponds to the fixed network equipment, according to the address of the fixed network equipment and the address of the FMIF.

4. A method of communication, the method comprising:

a fixed mobile interworking function FMIF receives an access request message sent by a broadband gateway BNG, wherein the access request message comprises first authentication information of fixed network equipment, the first authentication information is generated by the BNG based on a dialing message sent by the fixed network equipment, and the first authentication information comprises an identifier of the fixed network equipment;

the FMIF encapsulates the first authentication information according to a message format supported by a control plane interface to obtain second authentication information, wherein the control plane interface is an interface used for communicating with core network equipment in the FMIF, and the communication network version of the core network equipment is a 5G communication network or a communication network higher than the 5G communication network;

and the FMIF sends the second authentication information to the core network equipment through the control plane interface, wherein the second authentication information is used for the core network equipment to authenticate the fixed network equipment.

5. The method of claim 4, wherein the control plane interface comprises an N1 interface or an N2 interface, and the second authentication information is a user hidden identifier SUCI, an encrypted user hidden identifier SUPI, or a 5G globally unique temporary UE identity 5G-GUTI.

6. The method of claim 4 or 5, wherein the method further comprises:

the FMIF receives a confirmation message sent by the core network equipment after the core network equipment passes the authentication;

the FMIF sends a session establishment request message to the core network equipment, wherein the session establishment request message carries an identifier of the fixed network equipment, the session establishment request message is used for allocating session information to the core network equipment, the session information comprises an address of the fixed network equipment, a Tunnel Endpoint Identifier (TEID) of a tunnel at the core network equipment side and tunnel parameters of the tunnel, and the tunnel is a tunnel between the FMIF and the core network equipment and corresponding to the fixed network equipment;

the FMIF receives session information sent by the core network equipment;

and the FMIF establishes a data plane connection between the FMIF and the BNG corresponding to the fixed network equipment and establishes the tunnel according to the session information.

7. The method of claim 6, wherein the FMIF establishes a data plane connection between the FMIF and the BNG corresponding to the fixed network device and establishes the tunnel according to the session information, comprising:

the FMIF sends the address of the fixed network equipment to the BNG, and stores the corresponding relation between the address of the fixed network equipment and the address of the BNG in a first relation table, wherein the first relation table is used for the FMIF to transmit a downlink service message of the fixed network equipment;

the FMIF stores the corresponding relationship among the address of the fixed network equipment, the TEID of the tunnel on the FMIF side and the TEID of the tunnel on the core network equipment side in a second relationship table, wherein the second relationship table is used for the FMIF to send the uplink service message of the fixed network equipment.

8. The method of claim 6 or 7, wherein the session information further comprises a TEID of the tunnel on the FMIF side.

9. The method of claim 7, wherein before the FMIF stores the correspondence between the address of the fixed network device, the TEID of the tunnel on the FMIF side, and the TEID of the tunnel on the core network device side in the second relationship table, further comprising:

the FMIF allocates the TEID of the tunnel on the FMIF side, the TEID of the tunnel on the FMIF side is sent to the core network device, the TEID of the tunnel on the FMIF side is stored in a corresponding relation table by the core network device, the corresponding relation table comprises the address of the fixed network device, the TEID of the tunnel on the FMIF side and the TEID of the tunnel on the core network device side correspond to each other, and the corresponding relation table is used for the core network device to transmit the downlink service message of the fixed network device.

10. The method of any of claims 6 to 9, wherein the FMIF sending a session setup request message to the core network device comprises:

the FMIF sends the session establishment request message to the core network device through the control plane interface, wherein the control plane interface comprises an N1 interface or an N2 interface.

11. A method of communication, the method comprising:

the method comprises the steps that core network equipment receives a session establishment request message from a Fixed Mobile Interworking Function (FMIF), wherein the session establishment request message comprises an identifier of the fixed network equipment, and the communication network version to which the core network equipment belongs is a 5G communication network or a communication network higher than the 5G communication network;

the core network device allocates session information to the fixed network device according to the identifier of the fixed network device, wherein the session information comprises the address of the fixed network device, a Tunnel Endpoint Identifier (TEID) of a tunnel at the core network device side and tunnel parameters of the tunnel, and the tunnel is a tunnel between the FMIF and the core network device and corresponding to the fixed network device;

and the core network equipment sends and sends the session information to the FMIF, wherein the session information is used for the FMIF to establish data plane connection between the fixed network equipment and the core network equipment.

12. The method of claim 11, wherein before the core network device receives the session establishment request message from a fixed mobility interworking function, FMIF, further comprising:

the core network device receives the FMIF and sends the second authentication information, the second authentication information is obtained by encapsulating first authentication information by the FMIF according to a message format supported by a control plane interface, the control plane interface is an interface used for communicating with the core network device in the FMIF, and the first authentication information comprises an identifier of the fixed network device;

and the core network equipment authenticates the fixed network equipment according to the second authentication information.

13. The method of claim 11 or 12, wherein the session information further comprises a TEID of the tunnel on the FMIF side.

14. The method of any of claims 11 or 12, further comprising:

the core network equipment receives TEID of the tunnel on the FMIF side sent by the FMIF; the TEID of the tunnel at the FMIF side is transmitted through the session establishment request message or after the FMIF receives the session information.

15. The method of any of claims 11-14, wherein after the core network device sends the session information to the FMIF, further comprising:

and the core network equipment stores the address of the fixed network equipment, the TEID of the tunnel at the FMIF side and the TEID of the tunnel at the core network equipment side into a corresponding relation table, wherein the corresponding relation table is used for the core network equipment to transmit the downlink service message of the fixed network equipment.

16. A communication system, comprising: the system comprises a fixed-mobile interworking function FMIF and core network equipment, wherein the communication network version of the core network equipment is a 5G communication network or a communication network higher than the 5G communication network;

the FMIF is configured to receive an access request message, where the access request message includes first authentication information of a fixed network device, and the first authentication information includes an identifier of the fixed network device; packaging the first authentication information according to a message format supported by a control plane interface to obtain second authentication information, and sending the second authentication information to the core network equipment, wherein the control plane interface is an interface used for communicating with the core network equipment in the FMIF;

and the core network equipment is used for authenticating the fixed network equipment according to the second authentication information.

17. The system of claim 16, wherein the system further comprises: broadband gateway BNG;

the BNG is used for receiving a dialing message sent by the fixed network equipment; generating first authentication information of the fixed network equipment according to the dialing message, wherein the first authentication information comprises an identifier of the fixed network equipment; and sending an access request message to the FMIF, wherein the access request message carries the first authentication information.

18. The system of claim 16 or 17,

the FMIF is further configured to send a session establishment request message to the core network device, where the session establishment request message carries an identifier of the fixed network device;

the core network device is further configured to allocate session information according to the identifier of the fixed network device, where the session information includes an address of the fixed network device, a tunnel endpoint identifier TEID of a tunnel on the core network device side, and a tunnel parameter of the tunnel, and the session information is sent to the FMIF, and the tunnel is a tunnel between the FMIF and the core network device and corresponding to the fixed network device;

the FMIF is further configured to establish a data plane connection between the FMIF and the BNG, the data plane connection corresponding to the fixed network device, and establish the tunnel according to the session information.

19. A method of communication, the method comprising:

a fixed-mobile interworking function FMIF receives a first uplink service message from the fixed network equipment;

the FMIF encapsulates the first uplink service message according to a corresponding encapsulation mode of a tunnel to obtain a second uplink service message, wherein the tunnel is a tunnel between the FMIF and core network equipment and corresponds to the fixed network equipment, and the communication network version of the core network equipment is a 5G communication network or a communication network higher than the 5G communication network;

and the FMIF sends a second uplink service message to the core network equipment through the tunnel.

20. The method of claim 19, wherein the first uplink traffic packet includes an address of the fixed network device;

the FMIF encapsulates the first uplink service message according to a corresponding encapsulation mode of the tunnel to obtain a second uplink service message, and the method comprises the following steps:

the FMIF acquires a Tunnel Endpoint Identifier (TEID) of the tunnel at the FMIF side and a TEID of the tunnel at the core network device side from a second relation table according to the address of the fixed network device, wherein the second relation table is used for storing the corresponding relation between the address of the fixed network device, the TEID of the FMIF side and the TEID of the core network device side;

and the FMIF adds a message header corresponding to the tunnel to the first uplink service message according to the encapsulation mode corresponding to the tunnel to obtain a second uplink service message, wherein the message header comprises the obtained TEID of the FMIF side and the TEID of the core network equipment side.

21. The method according to claim 19 or 20, wherein before the FMIF encapsulates the first uplink service packet according to an encapsulation method corresponding to a tunnel to obtain a second uplink service packet, the method further comprises:

and the FMIF detects whether the first uplink service message is a message of a mobile network service according to a preset field in a message header of the first uplink service message, and if the first uplink service message is the message of the mobile network service, the FMIF performs the operation of encapsulating the first uplink service message according to a corresponding encapsulation mode of a tunnel to obtain a second uplink service message.

22. The method of any one of claims 19 to 21, further comprising:

the FMIF receives a first downlink service message sent to the fixed network equipment by the core network equipment;

the FMIF decapsulates the first downlink service message according to a decapsulation mode corresponding to the tunnel to obtain a second downlink service message;

and the FMIF sends the second downlink service message to the fixed network equipment through the data plane connection corresponding to the fixed network equipment between the FMIF and the BNG.

23. The method according to claim 22, wherein the FMIF decapsulates the first downlink service packet according to a decapsulation manner corresponding to the tunnel to obtain a second downlink service packet, including:

and the FMIF removes the message header corresponding to the tunnel from the first downlink service message according to the decapsulation mode corresponding to the tunnel to obtain a second downlink service message.

24. The method according to any of claims 19 to 23, wherein the tunnel is a general packet radio service technology tunneling protocol user plane, GTP-U, tunnel.

25. A method of communication, the method comprising:

a core network device receives a second uplink service message from a Fixed Mobile Interworking Function (FMIF), wherein the second uplink service message is obtained by encapsulating a first uplink service message from the fixed device by the FMIF based on an encapsulation mode corresponding to a tunnel, the tunnel is a tunnel between the FMIF and the core network device and corresponds to the fixed network device, and the communication network version of the core network device is a 5G communication network or a communication network higher than the 5G communication network;

and the core network equipment decapsulates the second uplink service message according to a decapsulation mode corresponding to the tunnel to obtain the first uplink service message.

26. The method of claim 25, wherein the method further comprises:

the UPF core network equipment acquires a second downlink service message to be sent to the fixed network equipment;

the core network equipment encapsulates the second downlink service message according to the corresponding encapsulation mode of the tunnel to obtain a first downlink service message;

and the core network equipment sends the first downlink service message to the FMIF through the tunnel.

27. The method according to claim 26, wherein the second downlink traffic packet includes an address of the fixed network device;

the core network device encapsulates the second downlink service message according to the encapsulation mode corresponding to the tunnel to obtain a first downlink service message, which includes:

the core network device obtains a Tunnel Endpoint Identifier (TEID) of the tunnel at the FMIF side and a TEID at the core network device side from a corresponding relation table according to the address of the fixed network device, wherein the corresponding relation table is used for storing the corresponding relation between the address of the fixed network device, the TEID at the FMIF side and the TEID at the core network device side;

and the core network equipment adds a message header corresponding to the tunnel to the second downlink service message according to the encapsulation mode corresponding to the tunnel to obtain the first downlink service message, wherein the message header comprises the acquired TEID of the FMIF side and the TEID of the core network equipment side.

28. The method according to any of claims 25 to 27, wherein the tunnel is a general packet radio service technology tunneling protocol user plane, GTP-U, tunnel.

29. A communication system, the system comprising: the system comprises a fixed-mobile interworking function FMIF and core network equipment, wherein the communication network version of the core network equipment is a 5G communication network or a communication network higher than the 5G communication network;

the FMIF is used for receiving a first uplink service message from the fixed network equipment; according to a corresponding encapsulation mode of the tunnel, encapsulating the first uplink service message to obtain a second uplink service message; sending a second uplink service message to the core network device through the tunnel, wherein the tunnel is a tunnel between the FMIF and the core network device and corresponds to the fixed network device;

and the core network equipment is used for decapsulating the second uplink service message according to a decapsulation mode corresponding to the tunnel to obtain the first uplink service message.

30. The system of claim 29,

the core network device is further configured to acquire a second downlink service packet to be sent to the fixed network device; according to the corresponding encapsulation mode of the tunnel, encapsulating the second downlink service message to obtain a first downlink service message; sending the first downlink service message to the FMIF through the tunnel;

the FMIF is further used for decapsulating the first downlink service message according to a corresponding decapsulation mode of the tunnel to obtain a second downlink service message; and sending the second downlink service message to the fixed network equipment.

31. The method according to claim 29 or 30, wherein the tunnel is a general packet radio service technology tunneling protocol user plane, GTP-U, tunnel.

32. A communications apparatus, the apparatus comprising:

the receiving unit is used for receiving the dialing message sent by the fixed network equipment;

the processing unit is used for generating first authentication information of the fixed network equipment according to the dialing message, wherein the first authentication information comprises an identifier of the fixed network equipment;

a sending unit, configured to send an access request message to a fixed mobile interworking function FMIF, where the access request message carries the first authentication information, and the access request message is used for the FMIF to request a core network device to authenticate the fixed network device according to the first authentication information, and a communication network version to which the core network device belongs is a 5G communication network or a communication network higher than the 5G communication network.

33. The apparatus of claim 32, wherein the access request message is a remote subscriber dial authentication system Radius protocol access request message or a Diameter protocol access request message.

34. The apparatus of claim 31 or 32,

the receiving unit is further configured to receive an address of the fixed network device sent by the core network device through the FMIF, where the address of the fixed network device is allocated by the core network device after receiving a session establishment request message carrying an identifier of the fixed network device, and the session establishment request message is sent by the FMIF after the core network device passes authentication of the fixed network device;

the processing unit is further configured to establish a data plane connection between the apparatus and the FMIF, where the data plane connection corresponds to the fixed network device, according to the address of the fixed network device and the address of the FMIF.

35. A communications apparatus, the apparatus comprising:

a receiving unit, configured to receive an access request message sent by a broadband gateway BNG, where the access request message includes first authentication information of a fixed network device, the first authentication information is generated by the BNG based on a dial-up packet sent by the fixed network device, and the first authentication information includes an identifier of the fixed network device;

a processing unit, configured to encapsulate the first authentication information according to a message format supported by a control plane interface to obtain second authentication information, where the control plane interface is an interface used for communicating with a core network device in the apparatus, and a communication network version to which the core network device belongs is a 5G communication network or a communication network higher than the 5G communication network;

and a sending unit, configured to send the second authentication information to the core network device through the control plane interface, where the second authentication information is used for the core network device to authenticate the fixed network device.

36. The apparatus of claim 35, wherein the control plane interface comprises an N1 interface or an N2 interface, the second authentication information being a user hidden identifier SUCI, an encrypted user hidden identifier SUPI, or a 5G globally unique temporary UE identity 5G-GUTI.

37. The apparatus of claim 35 or 36,

the receiving unit is further configured to receive a confirmation message sent by the core network device after the authentication passes;

the sending unit is further configured to send a session establishment request message to the core network device, where the session establishment request message carries an identifier of the fixed network device, the session establishment request message is used for the core network device to allocate session information, the session information includes an address of the fixed network device, a tunnel endpoint identifier TEID of a tunnel on the core network device side, and a tunnel parameter of the tunnel, and the tunnel is a tunnel between the apparatus and the core network device and corresponds to the fixed network device;

the receiving unit is further configured to receive session information sent by the core network device;

the processing unit is further configured to establish a data plane connection between the apparatus and the BNG and corresponding to the fixed network device according to the session information, and establish the tunnel.

38. The apparatus of claim 37,

the sending unit is further configured to send the address of the fixed network device to the BNG;

the processing unit is configured to store a correspondence between the address of the fixed network device and the address of the BNG in a first relationship table, where the first relationship table is used for the apparatus to transmit a downlink service packet of the fixed network device;

the processing unit is further configured to store, in a second relationship table, a correspondence between the address of the fixed network device, the TEID of the tunnel on the apparatus side, and the TEID of the tunnel on the core network device side, where the second relationship table is used for the apparatus to send the uplink service packet of the fixed network device.

39. The apparatus of claim 37 or 38, wherein the session information further comprises a TEID of the tunnel on the apparatus side.

40. The apparatus of claim 38,

the processing unit is further configured to assign a TEID of the tunnel on the device side;

the sending unit is further configured to send the TEID of the tunnel on the device side to the core network device, where the TEID of the tunnel on the device side is stored in a correspondence table by the core network device, the correspondence table includes an address of the fixed network device, a correspondence between the TEID of the tunnel on the device side and the TEID of the tunnel on the core network device side is used for the core network device to transmit the downlink service packet of the fixed network device.

41. The apparatus of any one of claims 37 to 40, wherein the sending unit is further configured to send the session establishment request message to the core network device through the control plane interface, and the control plane interface comprises an N1 interface or an N2 interface.

42. A communications apparatus, the apparatus comprising:

a receiving unit, configured to receive a session establishment request message from a fixed mobile interworking function FMIF, where the session establishment request message includes an identifier of a fixed network device, and a version of a communication network to which the apparatus belongs is a 5G communication network or a communication network higher than the 5G communication network;

a processing unit, configured to allocate session information to the fixed network device according to an identifier of the fixed network device, where the session information includes an address of the fixed network device, a tunnel endpoint identifier TEID of a tunnel on the device side, and a tunnel parameter of the tunnel, and the tunnel is a tunnel between the FMIF and the device and corresponding to the fixed network device;

a sending unit, configured to send and send the session information to the FMIF, where the session information is used by the FMIF to establish a data plane connection between the fixed network device and the core network device.

43. The apparatus of claim 42,

the receiving unit is further configured to receive the second authentication information sent by the FMIF, where the second authentication information is obtained by encapsulating, by the FMIF, first authentication information according to a message format supported by a control plane interface, where the control plane interface is an interface in the FMIF and used for communicating with the apparatus, and the first authentication information includes an identifier of the fixed network device;

and the processing unit is further configured to authenticate the fixed network device according to the second authentication information.

44. The apparatus of claim 42 or 43, wherein the session information further comprises a TEID of the tunnel on the FMIF side.

45. The apparatus of claim 42 or 43,

the receiving unit is further configured to receive the TEID of the tunnel on the FMIF side sent by the FMIF, where the TEID of the tunnel on the FMIF side is allocated by the FMIF.

46. The apparatus of any one of claims 42-45, wherein the processing unit is further to:

and storing the corresponding relation among the address of the fixed network equipment, the TEID of the tunnel at the FMIF side and the TEID of the tunnel at the device side into a corresponding relation table, wherein the corresponding relation table is used for the device to transmit the downlink service message of the fixed network equipment.

47. A communications apparatus, the apparatus comprising:

a processor and a memory for storing a computer program that is loaded and executed by the processor to implement the instructions of the method of any one of claims 1 to 3.

48. A communications apparatus, the apparatus comprising:

a processor and a memory for storing a computer program that is loaded and executed by the processor to implement the instructions of the method of any one of claims 4 to 10.

49. A communications apparatus, the apparatus comprising:

a processor and a memory for storing a computer program that is loaded and executed by the processor to implement the instructions of the method of any of claims 11 to 15.

50. A computer-readable storage medium for storing a computer program which is loaded and executed by a processor to implement the instructions of the method according to any one of claims 1 to 3.

51. A computer-readable storage medium for storing a computer program which is loaded and executed by a processor to implement the instructions of the method according to any one of claims 4 to 10.

52. A computer-readable storage medium for storing a computer program which is loaded and executed by a processor to implement the instructions of the method of any one of claims 11 to 15.

53. A communications apparatus, the apparatus comprising:

a receiving unit, configured to receive a first uplink service packet from the fixed network device;

a processing unit, configured to encapsulate the first uplink service packet according to a encapsulation manner corresponding to a tunnel to obtain a second uplink service packet, where the tunnel is a tunnel between the apparatus and a core network device and corresponds to the fixed network device, and a communication network version to which the core network device belongs is a 5G communication network or a communication network higher than the 5G communication network;

and the sending unit is used for sending a second uplink service message to the core network equipment through the tunnel.

54. The apparatus of claim 53, wherein the first uplink traffic packet includes an address of the fixed network device;

the processing unit is configured to obtain, according to the address of the fixed network device, a tunnel endpoint identifier TEID of the tunnel on the device side and a TEID of the tunnel on the core network device side from a second relationship table, where the second relationship table is used to store a correspondence between the address of the fixed network device, the TEID of the device side, and the TEID of the core network device side;

the processing unit is further configured to add a packet header corresponding to the tunnel to the first uplink service packet according to the encapsulation manner corresponding to the tunnel to obtain a second uplink service packet, where the packet header includes the obtained TEID of the device side and the TEID of the core network device side.

55. The apparatus of claim 53 or 54,

the processing unit is further configured to detect whether the first uplink service packet is a packet of a mobile network service according to a preset field in a packet header of the first uplink service packet, and if the first uplink service packet is a packet of a mobile network service, execute the operation of encapsulating the first uplink service packet according to a tunnel corresponding encapsulation manner to obtain a second uplink service packet.

56. The apparatus of any one of claims 53 to 55,

the receiving unit is further configured to receive a first downlink traffic message sent by the core network device to the fixed network device;

the processing unit is configured to decapsulate the first downlink service packet according to a decapsulation mode corresponding to the tunnel to obtain a second downlink service packet;

the sending unit is configured to send the second downlink service packet to the fixed network device through a data plane connection corresponding to the fixed network device between the apparatus and the BNG.

57. The apparatus according to claim 56, wherein the processing unit is configured to remove a header corresponding to the tunnel from the first downlink traffic message according to a decapsulation manner corresponding to the tunnel to obtain a second downlink traffic message.

58. The apparatus according to any of claims 53 to 57, wherein the tunnel is a general packet radio service technology tunneling protocol user plane, GTP-U, tunnel.

59. A communications apparatus, the apparatus comprising:

a receiving unit, configured to receive a second uplink service packet from a fixed mobile interworking function FMIF, where the second uplink service packet is obtained by encapsulating, by the FMIF, a first uplink service packet from the fixed device based on an encapsulation manner corresponding to a tunnel, where the tunnel is a tunnel between the FMIF and the apparatus and corresponds to the fixed network device, and a communication network version of the apparatus is a 5G communication network or a communication network higher than the 5G communication network;

and the processing unit is used for decapsulating the second uplink service message according to a decapsulation mode corresponding to the tunnel to obtain the first uplink service message.

60. The apparatus of claim 59, wherein the apparatus further comprises: a sending unit for sending the data to the receiving unit,

the processing unit is configured to acquire a second downlink service packet to be sent to the fixed network device; according to the corresponding encapsulation mode of the tunnel, encapsulating the second downlink service message to obtain a first downlink service message;

and the sending unit is used for sending the first downlink traffic message to the FMIF through the tunnel.

61. The apparatus according to claim 60, wherein the second downlink traffic packet includes an address of the fixed network device;

the processing unit is configured to obtain a tunnel endpoint identifier TEID of the tunnel on the FMIF side and a TEID on the device side from a correspondence table according to the address of the fixed network device, where the correspondence table is used to store a correspondence between the address of the fixed network device, the TEID on the FMIF side, and the TEID on the device side;

the processing unit is further configured to add a header corresponding to the tunnel to the second downlink service packet according to the encapsulation manner corresponding to the tunnel to obtain a first downlink service packet, where the header includes the obtained TEID on the FMIF side and the TEID on the device side.

62. The apparatus according to any of claims 59 to 61, wherein the tunnel is a general packet radio service technology tunneling protocol user plane, GTP-U, tunnel.

63. A communications apparatus, the apparatus comprising:

a processor and a memory for storing a computer program that is loaded and executed by the processor to implement the instructions of the method of any one of claims 19 to 24.

64. A communications apparatus, the apparatus comprising:

a processor and a memory for storing a computer program that is loaded and executed by the processor to implement the instructions of the method of any one of claims 25 to 28.

65. A computer-readable storage medium for storing a computer program which is loaded and executed by a processor to implement the instructions of the method of any one of claims 19 to 24.

66. A computer-readable storage medium for storing a computer program which is loaded and executed by a processor to implement the instructions of the method of any one of claims 25 to 28.

Technical Field

The present application relates to the field of communications, and in particular, to a communication method, apparatus, and system.

Background

Communication networks are divided into mobile networks, which allow mobile users to access, and which can send or receive data in the mobile networks, and fixed networks, which allow fixed network users to access, and which can send or receive data in the fixed networks. In the 4G communication network, the fixed network user is allowed to access the mobile network for the convenience of managing the mobile user and the fixed network user.

When accessing the mobile network, the fixed network user needs to be authenticated by the core network of the mobile network, and after the authentication is passed, the fixed network user can send or receive data in the mobile network. However, in the communication network appearing after the 4G communication network, the fixed network user cannot be authenticated in the core network, for example, in the 5G communication network appearing after the 4G communication network, the fixed network user cannot be authenticated in the core network of the 5G.

Disclosure of Invention

In order to enable a 5G core network or a core network higher than 5G to authenticate a fixed network device, embodiments of the present application provide a communication method and apparatus. The technical scheme is as follows:

in a first aspect, the present application provides a communication method, in the method, a broadband gateway BNG receives a dialing message sent by a fixed network device, and generates first authentication information of the fixed network device according to the dialing message, where the first authentication information includes an identifier of the fixed network device. And the BNG sends an access request message carrying the first authentication information to a Fixed Mobile Interworking Function (FMIF), wherein the access request message is used for the FMIF to request the core network equipment to authenticate the fixed network equipment according to the first authentication information. The communication network version that the core network equipment belongs to is 5G communication network or is higher than 5G communication network. The BNG sends the authentication information of the fixed network device to the core network device through the FMIF, so that the core network device can authenticate the fixed network device, and thus, the 5G core network or the core network higher than 5G can authenticate the fixed network device.

In an optional implementation manner, the access request message is a remote user dial authentication system Radius protocol access request message or a Diameter protocol access request message. Thus, the BNG may send the authentication information of the fixed network device to the FMIF through the Radius protocol access request message or the Diameter protocol access request message, so that the FMIF sends the authentication information of the fixed network device to the 5G core network or the core network device in the core network higher than 5G.

In an optional implementation manner, the BNG receives an address of the fixed network device sent by the core network device through the FMIF, where the address of the fixed network device is allocated by the core network device after receiving the session establishment request message carrying the identifier of the fixed network device. The session establishment request message is sent by the FMIF after the core network equipment passes the authentication of the fixed network equipment; and establishing a data plane connection between the BNG and the FMIF, which corresponds to the fixed network equipment, according to the address of the fixed network equipment and the address of the FMIF. The BNG receives the address of the fixed network device, so that a data plane connection between the BNG and the FMIF, which corresponds to the fixed network device, can be established, and thus the service message of the fixed network device can be transmitted through the data plane connection.

In a second aspect, the present application provides a communication method, in which a fixed mobile interworking function FMIF receives an access request message sent by a broadband gateway BNG, where the access request message includes first authentication information of a fixed network device, the first authentication information is generated by the BNG based on a dial-up packet sent by the fixed network device, and the first authentication information includes an identifier of the fixed network device. And the FMIF encapsulates the first authentication information according to a message format supported by a control plane interface to obtain second authentication information, and the second authentication information is sent to the core network equipment through the control plane interface. The second authentication information is used for the core network device to authenticate the fixed network device, the control plane interface is an interface used for communicating with the core network device in the FMIF, and the communication network version to which the core network device belongs is a 5G communication network or a communication network higher than the 5G communication network. The FMIF packages the first authentication information according to the message format supported by the control plane interface to obtain the second authentication information, so that the second authentication information can be sent to the 5G core network or the core network equipment higher than the 5G core network through the control plane interface, and the core network equipment is guaranteed to successfully authenticate the fixed network equipment.

In an alternative implementation, the control plane interface includes an N1 interface or an N2 interface, and the second authentication information is a hidden user identifier SUCI, an encrypted hidden user identifier SUPI, or a 5G globally unique temporary UE identity 5G-GUTI.

In an optional implementation manner, the FMIF receives a confirmation message sent by the core network device after the authentication passes; sending a session establishment request message to the core network device, where the session establishment request message carries an identifier of the fixed network device, and is used for the core network device to allocate session information, where the session information includes an address of the fixed network device, a Tunnel Endpoint Identifier (TEID) of a tunnel at the core network device side, and a tunnel parameter of the tunnel, and the tunnel is a tunnel between the FMIF and the core network device and corresponds to the fixed network device; receiving session information sent by the core network equipment; and establishing a data plane connection between the FMIF and the BNG corresponding to the fixed network equipment and establishing the tunnel according to the session information. The FMIF receives the session information, establishes a data connection corresponding to the fixed network device between the BNG and the core network device according to the session information, and establishes a tunnel corresponding to the fixed network device between the core network device and the fixed network device, thereby completing establishment of a data plane connection between the fixed network device and the core network device, so that the fixed network device can transmit a service packet using the data plane connection.

In an optional implementation manner, the FMIF sends the address of the fixed network device to the BNG, and stores a correspondence between the address of the fixed network device and the address of the BNG in a first relationship table, where the first relationship table is used for the FMIF to transmit a downlink service packet of the fixed network device; and storing the corresponding relationship among the address of the fixed network equipment, the TEID of the tunnel at the FMIF side and the TEID of the tunnel at the core network equipment side in a second relationship table, wherein the second relationship table is used for the FMIF to send the uplink service message of the fixed network equipment. Thus, the FMIF can forward the service message of the fixed network equipment through the first relation table and the second relation table.

In an optional implementation manner, the session information further includes a TEID of the tunnel on the FMIF side.

In an optional implementation manner, the FMIF allocates the TEID of the tunnel on the FMIF side, and sends the TEID of the tunnel on the FMIF side to the core network device, where the TEID of the tunnel on the FMIF side is used to trigger the core network device to store the address of the fixed network device, and a correspondence between the TEID of the tunnel on the FMIF side and the TEID of the tunnel on the core network device side is stored in a correspondence table, where the correspondence table is used for the core network device to transmit the downlink service packet of the fixed network device.

In an optional implementation manner, the FMIF sends the session establishment request message to the core network device through the control plane interface, where the control plane interface includes an N1 interface or an N2 interface.

In a third aspect, the present application provides a communication method, in which a core network device receives a session establishment request message from a fixed mobile interworking function FMIF, where the session establishment request message includes an identifier of the fixed network device, and a communication network version to which the core network device belongs is a 5G communication network or a higher than 5G communication network. The core network device distributes session information for the fixed network device according to the identifier of the fixed network device, wherein the session information comprises the address of the fixed network device, a Tunnel Endpoint Identifier (TEID) of a tunnel at the core network device side and tunnel parameters of the tunnel, and the tunnel is a tunnel between the FMIF and the core network device and corresponding to the fixed network device. And the core network equipment sends and sends the session information to the FMIF, wherein the session information is used for the FMIF to establish data plane connection between the fixed network equipment and the core network equipment. The core network device distributes the session information and sends the session information to the FMIF, so that the FMIF can establish a data connection between the BNG and the fixed network device and a tunnel between the BNG and the core network device and corresponding to the fixed network device according to the session information, thereby completing the establishment of a data plane connection between the fixed network device and the core network device, and the fixed network device can transmit service messages by using the data plane connection.

In an optional implementation manner, the core network device receives the FMIF and sends the second authentication information, where the second authentication information is obtained by encapsulating, by the FMIF, first authentication information according to a message format supported by a control plane interface, the control plane interface is an interface in the FMIF, where the interface is used for communicating with the core network device, and the first authentication information includes an identifier of the fixed network device; and authenticating the fixed network equipment according to the second authentication information. The FMIF packages the first authentication information according to the message format supported by the control plane interface to obtain the second authentication information, so that the second authentication information can be sent to the 5G core network or the core network equipment higher than the 5G core network through the control plane interface, and the core network equipment can be ensured to successfully authenticate the fixed network equipment.

In an optional implementation manner, the session information further includes a TEID of the tunnel on the FMIF side.

In an optional implementation manner, the core network device receives TEID of the tunnel on the FMIF side sent by the FMIF; the TEID of the tunnel at the FMIF side is transmitted through the session establishment request message or after the FMIF receives the session information.

In an optional implementation manner, the core network device stores a correspondence between the address of the fixed network device, the TEID of the tunnel on the FMIF side, and the TEID of the tunnel on the core network device side in a correspondence table, where the correspondence table is used for the core network device to transmit the downlink service packet of the fixed network device. Therefore, the downlink service message can be sent to the fixed network equipment through the corresponding relation table.

In a fourth aspect, an embodiment of the present application provides a communication method, in the method, a fixed mobile interworking function FMIF receives a first uplink service packet from a fixed network device; and encapsulating the first uplink service message according to a encapsulation mode corresponding to a tunnel to obtain a second uplink service message, wherein the tunnel is a tunnel between the FMIF and core network equipment and corresponding to the fixed network equipment, and the communication network version of the core network equipment is a 5G communication network or a communication network higher than the 5G communication network. And the FMIF sends a second uplink service message to the core network equipment through the tunnel. The FMIF encapsulates the first uplink service message according to the encapsulation mode corresponding to the tunnel to obtain a second uplink service message, so that the second uplink service message can be sent to the core network device through the tunnel, and the fixed network device can send the uplink service message to a 5G core network or a core network higher than 5G.

In an optional implementation manner, the first uplink service packet includes an address of the fixed network device; the FMIF acquires a Tunnel Endpoint Identifier (TEID) of the tunnel at the FMIF side and a TEID of the tunnel at the core network device side from a second relation table according to the address of the fixed network device, wherein the second relation table is used for storing the corresponding relation between the address of the fixed network device, the TEID of the FMIF side and the TEID of the core network device side; and adding a message header corresponding to the tunnel to the first uplink service message according to the encapsulation mode corresponding to the tunnel to obtain a second uplink service message, wherein the message header comprises the obtained TEID of the FMIF side and the TEID of the core network equipment side. Therefore, the first uplink service message is packaged.

In an optional implementation manner, the FMIF detects whether the first uplink service packet is a packet of a mobile network service according to a preset field in a packet header of the first uplink service packet, and if the first uplink service packet is a packet of a mobile network service, performs the operation of encapsulating the first uplink service packet according to a corresponding encapsulation manner of a tunnel to obtain a second uplink service packet. Therefore, only the service message of the mobile network can be sent to the core network equipment.

In an optional implementation manner, the FMIF receives a first downlink traffic message sent by the core network device to the fixed network device; according to the decapsulation mode corresponding to the tunnel, decapsulating the first downlink service message to obtain a second downlink service message; and sending the second downlink service message to the fixed network equipment through the data plane connection corresponding to the fixed network equipment between the FMIF and the BNG.

In an optional implementation manner, the FMIF removes a header corresponding to the tunnel from the first downlink service packet according to a decapsulation manner corresponding to the tunnel to obtain a second downlink service packet.

In an alternative implementation, the tunnel is a general packet radio service technology tunneling protocol user plane GTP-U tunnel.

In a fifth aspect, an embodiment of the present application provides a communication method, in the method, a core network device receives a second uplink service packet from a fixed mobile interworking function FMIF, where the second uplink service packet is obtained by encapsulating, by the FMIF, a first uplink service packet from a fixed device based on an encapsulation manner corresponding to a tunnel, the tunnel is a tunnel between the FMIF and the core network device and corresponds to the fixed network device, and a communication network version to which the core network device belongs is a 5G communication network or a communication network higher than the 5G communication network. And the core network equipment decapsulates the second uplink service message according to a decapsulation mode corresponding to the tunnel to obtain the first uplink service message. The FMIF encapsulates the first uplink service message according to the encapsulation mode corresponding to the tunnel to obtain the second uplink service message, so that the core network device can receive the second uplink service message sent by the FMIF through the tunnel, and the fixed network device can send the uplink service message to a 5G core network or a core network higher than 5G.

In an optional implementation manner, the core network device obtains a second downlink service packet to be sent to the fixed network device; according to the corresponding encapsulation mode of the tunnel, encapsulating the second downlink service message to obtain a first downlink service message; and sending the first downlink traffic message to the FMIF through the tunnel. Thus, the core network device can send the downlink service message to the fixed network device.

In an optional implementation manner, the second downlink service packet includes an address of the fixed network device; the core network device obtains a Tunnel Endpoint Identifier (TEID) of the tunnel at the FMIF side and a TEID at the core network device side from a corresponding relation table according to the address of the fixed network device, wherein the corresponding relation table is used for storing the corresponding relation between the address of the fixed network device, the TEID at the FMIF side and the TEID at the core network device side; and adding a message header corresponding to the tunnel to the second downlink service message according to the encapsulation mode corresponding to the tunnel to obtain a first downlink service message, wherein the message header comprises the obtained TEID of the FMIF side and the TEID of the core network equipment side. Therefore, the downlink service message is packaged.

In an alternative implementation, the tunnel is a general packet radio service technology tunneling protocol user plane GTP-U tunnel.

In a sixth aspect, the present application provides a communication method, in the method, an access gateway function AGF receives a dialing message sent by a fixed network device; and generating first authentication information of the fixed network equipment according to the dialing message, wherein the first authentication information comprises the identifier of the fixed network equipment. The AGF packages the first authentication information according to a message format supported by a control plane interface to obtain second authentication information, wherein the control plane interface is an interface used for communicating with core network equipment in the AGF, and the communication network version of the core network equipment is a 5G communication network or a communication network higher than the 5G communication network. And the AGF sends the second authentication information to the core network equipment through the control plane interface, wherein the second authentication information is used for the core network equipment to authenticate the fixed network equipment. The AGF packages the first authentication information according to the message format supported by the control plane interface to obtain the second authentication information, so that the second authentication information can be sent to the 5G core network or the core network equipment higher than the 5G core network through the control plane interface, and the core network equipment is ensured to successfully authenticate the fixed network equipment.

In an alternative implementation, the control plane interface includes an N1 interface or an N2 interface, and the second authentication information is a hidden user identifier SUCI, an encrypted hidden user identifier SUPI, or a 5G globally unique temporary UE identity 5G-GUTI.

In an optional implementation manner, the AGF receives a confirmation message sent by the core network device after the authentication passes; sending a session establishment request message to the core network device, where the session establishment request message carries an identifier of the fixed network device, the session establishment request message is used for the core network device to allocate session information, the session information includes an address of the fixed network device, a tunnel endpoint identifier TEID of a tunnel at the core network device side, and a tunnel parameter of the tunnel, and the tunnel is a tunnel between the AGF and the core network device and corresponds to the fixed network device. The AGF receives the session information sent by the core network equipment; and establishing the tunnel according to the session information. The AGF receives the session information, and establishes a tunnel corresponding to the fixed network equipment between the AGF and the core network equipment according to the session information, so that the establishment of data plane connection between the fixed network equipment and the core network equipment is completed, and the fixed network equipment can transmit service messages by using the data plane connection.

In an optional implementation manner, the AGF stores a correspondence between the address of the fixed network device, the TEID of the tunnel on the AGF side, and the TEID of the tunnel on the core network device side in a second relationship table, where the second relationship table is used for the AGF to send the uplink service packet of the fixed network device. Therefore, the AGF can forward the service message of the fixed network equipment through the second relation table.

In an optional implementation manner, the session information further includes a TEID of the tunnel on the AGF side.

In an optional implementation manner, the AGF allocates the TEID of the tunnel on the AGF side, and sends the TEID of the tunnel on the AGF side to the core network device, where the TEID of the tunnel on the AGF side is stored in a correspondence table by the core network device, the correspondence table includes an address of the fixed network device, and a correspondence between the TEID of the tunnel on the AGF side and the TEID of the tunnel on the core network device side is used for the core network device to transmit the downlink service packet of the fixed network device.

In an optional implementation manner, the AGF sends the session establishment request message to the core network device through the control plane interface, where the control plane interface includes an N1 interface or an N2 interface.

A seventh aspect provides a communication method, in which an access gateway function AGF receives a first uplink service packet from the fixed network device; and encapsulating the first uplink service message according to the encapsulation mode corresponding to the tunnel to obtain a second uplink service message. The tunnel is a tunnel between the AGF and a core network device and corresponding to the fixed network device, and the communication network version to which the core network device belongs is a 5G communication network or a communication network higher than the 5G communication network. And sending a second uplink service message to the core network equipment through the tunnel. The AGF encapsulates the first uplink service message according to the encapsulation mode corresponding to the tunnel to obtain the second uplink service message, so that the second uplink service message can be sent to the core network device through the tunnel, and the fixed network device can send the uplink service message to the 5G core network or the core network higher than 5G.

In an optional implementation manner, the first uplink service packet includes an address of the fixed network device; and the AGF acquires the Tunnel Endpoint Identification (TEID) of the tunnel on the AGF side and the TEID of the tunnel on the core network equipment side from a second relation table according to the address of the fixed network equipment. And the second relation table is used for storing the corresponding relation between the address of the fixed network equipment, the TEID on the AGF side and the TEID on the core network equipment side. And the AGF adds a message header corresponding to the tunnel to the first uplink service message according to the encapsulation mode corresponding to the tunnel to obtain a second uplink service message, wherein the message header comprises the obtained TEID of the AGF side and the TEID of the core network equipment side. Therefore, the first uplink service message is packaged.

In an optional implementation manner, the AGF detects whether the first uplink service packet is a packet of a mobile network service according to a preset field in a packet header of the first uplink service packet, and if the first uplink service packet is a packet of a mobile network service, performs the operation of encapsulating the first uplink service packet according to a corresponding encapsulation manner of a tunnel to obtain a second uplink service packet. Therefore, only the service message of the mobile network can be sent to the core network equipment.

In an optional implementation manner, the AGF receives a first next transaction packet sent by the core network device to the fixed network device; according to the decapsulation mode corresponding to the tunnel, decapsulating the first downlink service message to obtain a second downlink service message; and sending the second downlink service message to the fixed network equipment.

In an optional implementation manner, the AGF removes a header corresponding to the tunnel from the first downlink service packet according to a decapsulation manner corresponding to the tunnel to obtain a second downlink service packet.

In an alternative implementation, the tunnel is a general packet radio service technology tunneling protocol user plane GTP-U tunnel.

In an eighth aspect, the present application provides a core network device, which includes an access and mobility management function AMF, a session management function SMF, and a user plane function UPF.

The AMF is used for receiving a session establishment request message from a Fixed Mobile Interworking Function (FMIF), wherein the session establishment request message comprises an identifier of fixed network equipment, and the communication network version to which the core network equipment belongs is a 5G communication network or a communication network higher than the 5G communication network. And the AMF allocates session information to the fixed network equipment according to the identifier of the fixed network equipment, wherein the session information comprises the address of the fixed network equipment, a Tunnel Endpoint Identifier (TEID) of a tunnel at the core network equipment side and tunnel parameters of the tunnel, and the tunnel is a tunnel between the FMIF and the core network equipment and corresponding to the fixed network equipment.

The AMF is further used for sending and sending the session information to the FMIF and sending the session information to the UPF through the SMF. And the session information is used for establishing data plane connection between the fixed network equipment and the core network equipment by the FMIF and the UPF. The AMF distributes the session information and sends the session information to the FMIF, so that the FMIF can establish a data connection between the BNG and the fixed network equipment and establish a tunnel between the BNG and the core network equipment and corresponding to the fixed network equipment according to the session information, thereby completing the establishment of a data plane connection between the fixed network equipment and the core network equipment, and the fixed network equipment can transmit service messages by using the data plane connection. It is understood that in this solution, Access Gateway Function (AGF) may be used instead of BNG and FMIF, i.e. the functions of BNG and FMIF are merged into AGF. The other processing procedures are similar except that the interaction between FMIF and BNG becomes the internal placement processing of AGF, and are not described in detail.

In an optional implementation manner, the AMF is configured to receive the FMIF and send the second authentication information, where the second authentication information is obtained by encapsulating, by the FMIF, first authentication information according to a message format supported by a control plane interface, and the control plane interface is an interface in the FMIF, where the interface is used for communicating with a core network device, and the first authentication information includes an identifier of the fixed network device. And the AMF authenticates the fixed network equipment according to the second authentication information. The FMIF packages the first authentication information according to the message format supported by the control plane interface to obtain the second authentication information, so that the second authentication information can be sent to the 5G core network or the core network equipment higher than the 5G core network through the control plane interface, and the core network equipment can be ensured to successfully authenticate the fixed network equipment.

In an optional implementation manner, the session information further includes a TEID of the tunnel on the FMIF side.

In an optional implementation manner, the AMF receives the TEID of the tunnel on the FMIF side sent by the FMIF, and sends the TEID of the tunnel on the FMIF side to the UPF through the SMF; the TEID of the tunnel at the FMIF side is transmitted through the session establishment request message or after the FMIF receives the session information.

In an optional implementation manner, the UPF is configured to store a correspondence between an address of the fixed network device, the TEID of the tunnel on the FMIF side, and the TEID of the tunnel on the core network device side in a correspondence table, where the correspondence table is used for the UPF to transmit the downlink service packet of the fixed network device. Therefore, the downlink service message can be sent to the fixed network equipment through the corresponding relation table.

In a ninth aspect, the present application provides a core network device, which includes a core network control device and a user plane function UPF, where the core network control device includes an access and mobility management function AMF and a session management function SMF.

The AMF is used for receiving a session establishment request message which is sent by a fixed mobile interworking function FMIF and carries an identifier of fixed network equipment, and the communication network version of the core network equipment is a 5G communication network or a communication network higher than the 5G communication network. And the AMF allocates session information to the fixed network equipment according to the identifier of the fixed network equipment, wherein the session information comprises the address of the fixed network equipment, a Tunnel Endpoint Identifier (TEID) of a tunnel at the core network equipment side and tunnel parameters of the tunnel, and the tunnel is a tunnel between the FMIF and the core network equipment and corresponding to the fixed network equipment.

The AMF is further configured to send the session information to the FMIF, and send the session information to the UPF through the SMF, where the session information is used for establishing a data plane connection between the fixed network device and the core network device by the FMIF and the UPF. The AMF distributes the session information and sends the session information to the FMIF, so that the FMIF can establish a data connection between the BNG and the fixed network equipment and establish a tunnel between the BNG and the core network equipment and corresponding to the fixed network equipment according to the session information, thereby completing the establishment of a data plane connection between the fixed network equipment and the core network equipment, and the fixed network equipment can transmit service messages by using the data plane connection. It is understood that in this solution, Access Gateway Function (AGF) may be used instead of BNG and FMIF, i.e. the functions of BNG and FMIF are merged into AGF. The other processing procedures are similar except that the interaction between FMIF and BNG becomes the internal placement processing of AGF, and are not described in detail.

In an optional implementation manner, the AMF is configured to receive the FMIF and send the second authentication information, where the second authentication information is obtained by encapsulating, by the FMIF, first authentication information according to a message format supported by a control plane interface, and the control plane interface is an interface in the FMIF, where the interface is used for communicating with a core network device, and the first authentication information includes an identifier of the fixed network device; and authenticating the fixed network equipment according to the second authentication information. The FMIF packages the first authentication information according to the message format supported by the control plane interface to obtain the second authentication information, so that the second authentication information can be sent to the 5G core network or the core network equipment higher than the 5G core network through the control plane interface, and the core network equipment can be ensured to successfully authenticate the fixed network equipment.

In an optional implementation manner, the session information further includes a TEID of the tunnel on the FMIF side.

In an optional implementation manner, the AMF receives TEID of the tunnel on the FMIF side sent by the FMIF;

SMF, used for sending TEID of the tunnel on the FMIF side to the UPF; the TEID of the tunnel at the FMIF side is transmitted through the session establishment request message or after the FMIF receives the session information.

In a tenth aspect, an embodiment of the present application provides a communication apparatus, which includes a receiving unit, a processing unit, and a transmitting unit. The receiving unit is used for receiving a dialing message sent by the fixed network equipment; the processing unit is used for generating first authentication information of the fixed network equipment according to the dialing message, wherein the first authentication information comprises an identifier of the fixed network equipment; the sending unit is configured to send an access request message to a fixed mobile interworking function FMIF, where the access request message carries the first authentication information, and the access request message is used for the FMIF to request a core network device to authenticate the fixed network device according to the first authentication information, and a communication network version to which the core network device belongs is a 5G communication network or a communication network higher than the 5G communication network. The sending unit sends the authentication information of the fixed network equipment to the core network equipment through FMIF, so that the core network equipment can authenticate the fixed network equipment, and thus, the 5G core network or the core network higher than 5G can authenticate the fixed network equipment.

In an alternative implementation, the receiving unit, the processing unit and the sending unit may also be configured to perform the operations of the method in any one of the possible implementations of the first aspect, and therefore, the operations will not be described in detail here.

In an eleventh aspect, an embodiment of the present application provides a communication device, which includes a receiving unit, a processing unit, and a transmitting unit. The receiving unit is configured to receive an access request message that a broadband gateway BNG sends first authentication information that carries fixed network equipment, where the first authentication information is generated by the BNG based on a dial-up packet sent by the fixed network equipment and includes an identifier of the fixed network equipment. The processing unit is configured to encapsulate the first authentication information according to a message format supported by a control plane interface to obtain second authentication information, where the control plane interface is an interface used for communicating with core network equipment in the apparatus, and a communication network version to which the core network equipment belongs is a 5G communication network or a communication network higher than the 5G communication network. The sending unit is configured to send the second authentication information to the core network device through the control plane interface, where the second authentication information is used for the core network device to authenticate the fixed network device. The processing unit encapsulates the first authentication information according to the message format supported by the control surface interface to obtain the second authentication information, so that the sending unit can send the second authentication information to the 5G core network or the core network equipment higher than the 5G core network through the control surface interface, and the core network equipment is ensured to successfully authenticate the fixed network equipment.

In an alternative implementation, the receiving unit, the processing unit and the sending unit may also be configured to perform the operations of the method in any one of the possible implementations of the second aspect, and therefore will not be described in detail herein.

In a twelfth aspect, an embodiment of the present application provides a communication apparatus, which includes a receiving unit, a processing unit, and a transmitting unit. The receiving unit is used for receiving a session establishment request message which is sent by a fixed-mobile interworking function FMIF and carries an identifier of fixed-network equipment, and the version of a communication network to which the device belongs is a 5G communication network or a communication network higher than the 5G communication network. The processing unit is configured to allocate session information to the fixed network device according to the identifier of the fixed network device, where the session information includes an address of the fixed network device, a tunnel endpoint identifier TEID of a tunnel on the device side, and a tunnel parameter of the tunnel, and the tunnel is a tunnel between the FMIF and the device and corresponding to the fixed network device. The sending unit is configured to send the session information to the FMIF, where the session information is used by the FMIF to establish a data plane connection between the fixed network device and the core network device. Because the processing unit allocates the session information, the sending unit sends the session information to the FMIF, so that the FMIF can establish a data connection corresponding to the fixed network device between the BNG and the core network device and establish a tunnel corresponding to the fixed network device between the core network device according to the session information, thereby completing the establishment of a data plane connection between the fixed network device and the core network device, so that the fixed network device can use the data plane connection to transmit the service packet.

In an alternative implementation, the receiving unit, the processing unit and the sending unit may also be configured to perform the operations of the method in any one of the possible implementations of the third aspect, and therefore, the operations will not be described in detail here.

In a thirteenth aspect, an embodiment of the present application provides a communication apparatus, including: the device comprises a receiving unit, a processing unit and a sending unit. The receiving unit is configured to receive a first uplink service packet from the fixed network device. The processing unit is configured to encapsulate the first uplink service packet according to a encapsulation manner corresponding to a tunnel to obtain a second uplink service packet, where the tunnel is a tunnel between the apparatus and a core network device and corresponds to the fixed network device, and a communication network version to which the core network device belongs is a 5G communication network or a communication network higher than the 5G communication network. The sending unit is configured to send a second uplink service packet to the core network device through the tunnel. The processing unit encapsulates the first uplink service message according to the encapsulation mode corresponding to the tunnel to obtain the second uplink service message, so that the sending unit can send the second uplink service message to the core network device through the tunnel, and the fixed network device can send the uplink service message to the 5G core network or the core network higher than 5G.

In an alternative implementation, the receiving unit, the processing unit and the sending unit may be further configured to perform the operations of the method in any one of the possible implementations of the fourth aspect, and therefore, the operations will not be described in detail here.

In a fourteenth aspect, an embodiment of the present application provides a communication apparatus, where the apparatus includes: a receiving unit and a processing unit. The receiving unit is configured to receive a second uplink service packet from a fixed mobile interworking function FMIF, where the second uplink service packet is obtained by encapsulating, by the FMIF, a first uplink service packet from the fixed device based on an encapsulation manner corresponding to a tunnel, where the tunnel is a tunnel between the FMIF and the apparatus and corresponds to the fixed network device, and a communication network version to which the apparatus belongs is a 5G communication network or a communication network higher than the 5G communication network. And the processing unit is used for decapsulating the second uplink service message according to a decapsulation mode corresponding to the tunnel to obtain the first uplink service message. The FMIF encapsulates the first uplink service message according to the encapsulation mode corresponding to the tunnel to obtain a second uplink service message, so that the processing unit can receive the second uplink service message sent by the FMIF through the tunnel, and the fixed network equipment can send the uplink service message to a 5G core network or a core network higher than 5G.

In an alternative implementation, the receiving unit, the processing unit and the sending unit may also be configured to perform the operations of the method in any one of the possible implementations of the fifth aspect, and therefore, the operations will not be described in detail here.

In a fifteenth aspect, an embodiment of the present application provides a communication apparatus, including: the device comprises a receiving unit, a processing unit and a sending unit. The receiving unit is used for receiving a dialing message sent by the fixed network equipment; the processing unit is used for generating first authentication information of the fixed network equipment according to the dialing message, wherein the first authentication information comprises the identification of the fixed network equipment. The processing unit is further configured to encapsulate the first authentication information according to a message format supported by a control plane interface to obtain second authentication information, where the control plane interface is an interface used for communicating with core network equipment in the apparatus, and a communication network version to which the core network equipment belongs is a 5G communication network or a communication network higher than the 5G communication network. The sending unit is configured to send the second authentication information to the core network device through the control plane interface, where the second authentication information is used for the core network device to authenticate the fixed network device. The processing unit encapsulates the first authentication information according to the message format supported by the control plane interface to obtain the second authentication information, so that the sending unit can send the second authentication information to the 5G core network or the core network equipment higher than the 5G core network through the control plane interface, and the core network equipment is ensured to successfully authenticate the fixed network equipment.

In an alternative implementation, the receiving unit, the processing unit and the sending unit may be further configured to perform the operations of the method in any one of the possible implementations of the sixth aspect, and therefore, the operations will not be described in detail here.

In a sixteenth aspect, an embodiment of the present application provides a communications apparatus, including: the device comprises a receiving unit, a processing unit and a sending unit. The receiving unit is configured to receive a first uplink service packet from the fixed network device. And the processing unit is used for encapsulating the first uplink service message according to the encapsulation mode corresponding to the tunnel to obtain a second uplink service message. The tunnel is a tunnel corresponding to the fixed network device between the apparatus and a core network device, and the communication network version to which the core network device belongs is a 5G communication network or a communication network higher than the 5G communication network. The sending unit is configured to send a second uplink service packet to the core network device through the tunnel. The processing unit encapsulates the first uplink service message according to the encapsulation mode corresponding to the tunnel to obtain the second uplink service message, so that the sending unit can send the second uplink service message to the core network device through the tunnel, and the fixed network device can send the uplink service message to the 5G core network or the core network higher than 5G.

In an alternative implementation, the receiving unit, the processing unit and the sending unit may be further configured to perform the operations of the method in any one of the possible implementations of the seventh aspect, and therefore, the operations will not be described in detail here.

In a seventeenth aspect, an embodiment of the present application provides a communication apparatus, including: the processor is connected with the memory; the memory stores one or more programs configured to be executed by the processor, the one or more programs containing instructions for performing the method of the first aspect or any one of the alternative implementations of the first aspect.

In an eighteenth aspect, an embodiment of the present application provides a communication apparatus, including: the processor is connected with the memory; the memory stores one or more programs configured to be executed by the processor, the one or more programs containing instructions for performing the methods of the second aspect, the fourth aspect, any of the alternative implementations of the second aspect, or any of the alternative implementations of the fourth aspect.

In a nineteenth aspect, an embodiment of the present application provides a communication apparatus, including: the processor is connected with the memory; the memory stores one or more programs configured to be executed by the processor, the one or more programs containing instructions for performing the method of any of the third, fifth, alternative implementations of the third aspect or any of the alternative implementations of the fifth aspect.

In a twentieth aspect, an embodiment of the present application provides a communications apparatus, including: the processor is connected with the memory; the memory stores one or more programs configured to be executed by the processor, the one or more programs containing instructions for performing the methods of any of the sixth aspect, the seventh aspect, the alternative implementations of the sixth aspect, or any of the alternative implementations of the seventh aspect.

In a twenty-first aspect, an embodiment of the present application provides a non-transitory computer-readable storage medium for storing a computer program, where the computer program is loaded by a processor to execute the instructions of the method according to the first aspect, the second aspect, the third aspect, the fourth aspect, the fifth aspect, the sixth aspect, the seventh aspect, any optional implementation manner of the first aspect, any optional implementation manner of the second aspect, any optional implementation manner of the third aspect, any optional implementation manner of the fourth aspect, any optional implementation manner of the fifth aspect, any optional implementation manner of the sixth aspect, or any optional implementation manner of the seventh aspect.

In a twenty-second aspect, an embodiment provided by the present application provides a chip, where the chip includes a programmable logic circuit and/or a program instruction, and when the chip runs, is configured to implement the first aspect, the second aspect, the third aspect, the fourth aspect, the fifth aspect, the sixth aspect, the seventh aspect, any optional implementation manner of the first aspect, any optional implementation manner of the second aspect, any optional implementation manner of the third aspect, any optional implementation manner of the fourth aspect, any optional implementation manner of the fifth aspect, any optional implementation manner of the sixth aspect, or a method of any optional implementation manner of the seventh aspect.

Drawings

Fig. 1 is a schematic diagram of a network architecture provided in an embodiment of the present application;

fig. 2 is a flowchart of a communication method provided in an embodiment of the present application;

fig. 3 is a schematic diagram of a network architecture provided in an embodiment of the present application;

fig. 4 is a flowchart of another communication method provided in the embodiments of the present application;

fig. 5 is a schematic structural diagram of a communication device according to an embodiment of the present application;

fig. 6 is a schematic structural diagram of another communication device provided in the embodiment of the present application;

fig. 7 is a schematic structural diagram of another communication device provided in the embodiment of the present application;

fig. 8 is a schematic structural diagram of another communication device provided in the embodiment of the present application;

fig. 9 is a schematic structural diagram of another communication device provided in the embodiment of the present application;

fig. 10 is a schematic structural diagram of another communication device provided in the embodiment of the present application;

fig. 11 is a schematic structural diagram of another communication device provided in the embodiment of the present application;

fig. 12 is a schematic structural diagram of another communication device provided in the embodiment of the present application;

fig. 13 is a schematic structural diagram of another communication device provided in the embodiment of the present application;

fig. 14 is a schematic structural diagram of another communication device provided in the embodiment of the present application;

fig. 15 is a schematic structural diagram of another communication device according to an embodiment of the present application.

Detailed Description

Embodiments of the present application will be described in further detail below with reference to the accompanying drawings.

Referring to fig. 1, an embodiment of the present application provides a network architecture, including:

the core network device 4 may be a network element that implements an access and mobility management function (AMF) function, a Session Management Function (SMF) function, and a User Plane Function (UPF) function, where the core network device 4 includes a virtual machine for implementing an AMF function, a virtual machine for implementing an SMF function, and a virtual machine for implementing an UPF function, and the three virtual machines are respectively referred to as an AMF, an SMF, and an UPF. Alternatively, the core network device 4 may include a UPF and a core network control device for implementing the AMF function and the SMF function, in which case the UPF may be a physical device, which can implement the UPF function. The core network control device for implementing the AMF function and the SMF function includes a virtual machine for implementing the AMF function and a virtual machine for implementing the SMF function, which are respectively referred to as the AMF and the SMF.

The communication network version to which the core network device 4 belongs is a 5G communication network or a higher than 5G communication network, and the core network may be a core network of the 5G communication network or a core network higher than the 5G communication network. The fixed network device 1 may be a fixed network residential gateway (FN-RG) or the like.

The FMIF3 may communicate with the core network device 4 through a control plane interface, which may include an N1 interface or an N2 interface, and a data plane interface, which may be an N3 interface.

In the case where the core network device 4 is a network element including an AMF, an SMF, and a UPF, the FMIF3 may communicate with the AMF in the core network device 4 through a control plane interface, and the FMIF3 may communicate with the UPF in the core network device 4 through a data plane interface. The SMF and the UPF communicate using an interface between the control plane and the data plane.

In the case where the core network device 4 includes a core network control device and a UPF, the FMIF3 may communicate with the AMF in the core network control device through a control plane interface, and the FMIF3 may communicate with the UPF through a data plane interface. The SMF and the UPF in the core network control equipment use the interface communication between the control plane and the data plane.

Optionally, the interface between the control plane and the data plane may be an N4 interface or the like.

Referring to fig. 1, BNG2 includes a point-to-point protocol/dynamic host configuration protocol (PPPoE/DHCP) module 21, an authentication, authorization, accounting (AAA) module 22, and a session service forwarding module 23 on ethernet, and FMIF3 includes an encapsulation module 31 and a control plane interface adapter 32, and may further include a service check module 33.

The fixed network device 1 may request the core network device 4 to authenticate it through the BNG2 and the FMIF 3. The authentication process may be:

referring to the flow of steps 201 to 207 of fig. 2, the fixed network device 1 sends a dial message to the BNG2, the BNG2 receives the dial message, generates first authentication information of the fixed network device 1 based on the dial message, the first authentication information includes an identifier of the fixed network device, and sends an access request message to the FMIF3, where the access request message carries the first authentication information. The FMIF3 encapsulates the first authentication information according to the message format supported by the control plane interface to obtain second authentication information, and sends the second authentication information to the core network device 4 through the control plane interface; the core network device 4 authenticates the fixed network device 1 according to the second authentication information, and sends a confirmation message to the FMIF3 after the fixed network device 1 passes the authentication; FMIF3 then sends the acknowledgement message to fixed network device 1 through BNG 2.

In a specific implementation example, the identifier of the fixed network device may be a Line ID, the first authentication information includes user name information of the fixed network device 1, and may also include password information of the fixed network device 1, where the user name information includes the identifier of the fixed network device 1. The user name information and the password information of the fixed network equipment 1 are both used for the core network equipment 4 to authenticate the fixed network equipment 1.

The control plane interfaces may include an N1 interface or an N2 interface. Assuming that the control plane interface is an N1 interface, the FMIF3 encapsulates the first authentication information according to a message lattice supported by the N1 interface to obtain second authentication information, where the second authentication information may be a user hidden Identifier (sui), an encrypted user hidden Identifier (SUPI), or a 5G Globally unique temporary UE Identity (5G global unified temporal UE Identity, 5G-GUTI), and the like. SUCI, SUPI or 5G-GUTI is information defined by 3GPP for core network authentication.

In an embodiment, the fixed network device 1 accesses the BNG2 through the access network, and a connection exists between the fixed network device 1 and the BNG 2. The PPPoE/DHCP module 21 in the BNG2 receives the dial message sent by the fixed network device 1 through the connection, generates first authentication information based on the dial message, sends the first authentication information to the AAA module 22 of the BNG2, and the AAA module 22 sends an access request message carrying the first authentication information to the FMIF 3. Control plane interface adapter 32 of FMIF3 receives the access request message, encapsulates the first authentication information carried in the access request message according to the message format supported by the control plane interface to obtain second authentication information, and sends the second authentication information to core network device 4 through the control plane interface.

For the detailed process of authenticating the fixed network device 1, reference may also be made to the relevant contents in steps 201 to 207 in the embodiment shown in subsequent fig. 2, which will not be described in detail herein.

After the core network device 4 authenticates the fixed network device 1, the data plane connection between the fixed network device 1 and the core network device 4 can be established. In a specific embodiment, the process of establishing the data plane connection may be:

referring to steps 208 to 211 of fig. 2, FMIF3 sends a session establishment request message to core network device 4 through the control plane interface, where the session establishment request message carries the identifier of fixed network device 1; the core network device 4 receives the session establishment request message, allocates session information of the fixed network device 1 according to the identifier of the fixed network device 1 carried in the session establishment request message, where the session information includes an address of the fixed network device 1, a Tunnel Endpoint Identifier (TEID) of a tunnel at the core network device side, tunnel parameters of the tunnel, and the like, and the tunnel parameters may include quality of service (QoS) parameters and the like, and sends the session information to the FMIF, where the tunnel is a tunnel between the FMIF3 and the core network device 4 and corresponding to the fixed network device 1. FMFI3 receives the session information, establishes the tunnel according to the session information, and establishes a data plane connection between FMIF3 and BNG2 corresponding to the fixed network device.

It is understood that, after receiving the confirmation message, the FMIF3 may actively send a session establishment request message to the core network device 4, requesting to establish a data plane connection between the fixed network device 1 and the core network device 4; or, after receiving the confirmation message, the fixed network device 1 sends a session establishment request message to the FMIF3 through the BNG 2; FMIF3 receives the session establishment request message, and transmits the session establishment request message to core network device 4.

The tunnel between FMIF3 and core network device 4 corresponding to fixed network device 1 may be a general packet radio service tunneling protocol user plane (GTP-U tunnel, etc.).

The process of establishing the data plane connection corresponding to the fixed network device 1 between the FMIF3 and the BNG2 and the process of establishing the tunnel corresponding to the fixed network device 2 between the FMIF3 and the core network device 4 in the embodiment shown in fig. 2 may refer to the relevant contents in steps 208 to 211 in the following description, which will not be described in detail herein.

After establishing the data plane connection between the fixed network device 1 and the core network device 4 located in the core network, the fixed network device 1 may send an uplink service packet to the core network device 4, and the core network device 4 forwards the uplink service packet; or, the core network device 4 acquires the downlink service message of the fixed network device 1, and sends the downlink service message to the fixed network device 1. In a specific embodiment, the implementation process is as follows:

referring to steps 212 to 216 of fig. 2, for the uplink service packet, the fixed network device 1 sends a first uplink service packet to the BNG2, the BNG2 receives the first uplink service packet, and sends the first uplink service packet to the FMIF3 through the data plane connection between the BNG2 and the FMIF3, which corresponds to the fixed network device 1. The FMIF3 receives the first uplink service packet, encapsulates the first uplink service packet according to a encapsulation method corresponding to the tunnel to obtain a second uplink service packet, and sends the second uplink service packet to the core network device 4 through the tunnel, where the tunnel is a tunnel between the FMIF3 and the core network device 4 and corresponds to the fixed network device 1. The core network device 4 receives the second uplink service packet, decapsulates the second uplink service packet according to the decapsulation mode corresponding to the tunnel to obtain a first uplink service packet, and forwards and sends the first uplink service packet, for example, the core network device 4 may forward the first uplink service packet to the data network.

In a specific embodiment, in the process of transmitting the first uplink service packet, the session service forwarding module 23 of the BNG2 may receive the first uplink service packet, detect whether the first uplink service packet is a packet of a mobile network service according to a preset field in a packet header of the first uplink service packet, and if the first uplink service packet is a packet of a mobile network service, send the first uplink service packet to the FMIF3 through a data plane connection between the BNG2 and the FMIF3, where the data plane connection corresponds to the fixed network device 1. The encapsulation decapsulation module 31 in the FMIF3 receives the first uplink service packet, and may check, by the service check module 33, whether the first uplink service packet is a packet of a mobile network service, if the first uplink service packet is a packet of a mobile network service, encapsulate the first uplink service packet according to a encapsulation manner corresponding to a tunnel to obtain a second uplink service packet, and if the first uplink service packet is not a packet of a mobile network service, discard the first uplink service packet, where the tunnel is a tunnel between the FMIF3 and the core network device 4 and corresponds to the fixed network device 1.

In a specific embodiment, referring to steps 217 to 221 in fig. 2, for the downlink service packet, the core network device 4 obtains a second downlink service packet to be sent to the fixed network device 1, encapsulates the second downlink service packet according to a encapsulation manner corresponding to a tunnel to obtain a first downlink service packet, and sends the first downlink service packet to the FMIF3 through the tunnel, where the tunnel is a tunnel between the FMIF3 and the core network device 4 and corresponds to the fixed network device 1. The FMIF3 receives the first downlink service packet, decapsulates the first downlink service packet according to the decapsulation mode corresponding to the tunnel to obtain a second downlink service packet, and sends the second downlink service packet to the BNG2 through the data plane connection between the BNG2 and the FMIF3, which corresponds to the fixed network device 1. The BNG2 receives the second downlink service packet, sends the second downlink service packet to the fixed network device 1, and the fixed network device 1 receives the second downlink service packet.

In the process of transmitting the second downlink service packet, the encapsulation decapsulation module 31 in the FMIF3 receives the first downlink service packet, and decapsulates the first downlink service packet according to the decapsulation mode corresponding to the tunnel to obtain the second downlink service packet.

Referring to fig. 2, the present disclosure provides a communication method, which may be applied to the network architecture shown in fig. 1, and the method may be used for a fixed network device to request a core network device to authenticate the fixed network device; after the fixed network equipment passes the authentication, the method can be used for establishing data plane connection between the fixed network equipment and the core network; after the data plane connection is established, the method can be used for transmitting the uplink service message or the downlink service message of the fixed network equipment.

That is to say: the communication method comprises a communication method for authenticating fixed network equipment, a communication method for establishing session connection between the fixed network equipment and core network equipment, a communication method for transmitting an uplink service message and a communication method for transmitting a downlink service message.

Referring to fig. 2, the communication method for authenticating the fixed network device includes the following steps 201 to 207. In steps 201 to 207, respectively:

step 201: and the fixed network equipment sends a dialing message to the BNG.

The fixed network device is accessed to the BNG through the access network, that is, there is a connection between the fixed network device and the BNG, so that the fixed network device can send the dialing message to the BNG through the connection.

The dialing message may include an identifier of the fixed network device, or may not include an identifier of the fixed network device, where the identifier of the fixed network device may be a Line identifier (Line ID), and the like.

Step 202: the BNG receives the dialing message, and generates first authentication information of the fixed network equipment based on the dialing message, wherein the first authentication information comprises the identification of the fixed network equipment.

In this step, in the case that the dialing message includes the identifier of the fixed network device, the BNG may extract the identifier of the fixed network device from the dialing message, and generate the first authentication information of the fixed network device based on the identifier of the fixed network device. Alternatively, the first and second electrodes may be,

under the condition that the dialing message does not include the identifier of the fixed network device, the BNG may generate the identifier of the fixed network device according to the preset field in the dialing message, and generate the first authentication information of the fixed network device based on the identifier of the fixed network device.

The preset fields of the dial message may include at least one of DHCPv4 Option 82 exchange, PPPoE circuit and remote attribute value pair insertion, LDRA function DHCPv6 Option 18 on the access node, or Line ID Option (LIO) in RS message.

The operation of the BNG generating the first authentication information may be: the BNG generates user name information of the fixed network equipment based on the identification of the fixed network equipment, the user name information comprises the identification of the fixed network equipment, and the first authentication information comprises the user name information. The BNG may further generate password information of the fixed network device, and the first authentication information may further include the password information.

In this step, the PPPoE/DHCP module may receive a dialing message sent by the fixed network device, extract an identifier of the fixed network device from the dialing message or generate an identifier of the fixed network device according to a preset field in the dialing message, generate first authentication information of the fixed network device based on the identifier of the fixed network device, and send the first authentication information to the AAA module.

Step 203: the BNG sends an access request message to the FMIF, wherein the access request message carries the first authentication information.

The BNG may communicate with the FMIF using a communication protocol such as a remote authentication in user service (Radius) protocol or a Diameter protocol, and the access request message may be a Radius protocol access request message or a Diameter protocol access request message.

Under the condition that the BNG uses the Radius protocol FMIF for communication, the BNG sends a Radius protocol access request message to the FMIF, wherein the Radius protocol access request message carries first authentication information. In the case where the BNG communicates with the FMIF using the Diameter protocol, the BNG sends a Diameter protocol access request message to the FMIF, the Diameter protocol access request message carrying first authentication information.

The BNG includes a PPPoE/DHCP module and an AAA module, and in this step, the AAA module may receive first authentication information sent by the PPPoE/DHCP module and send an access request message carrying the first authentication information to the FMIF.

Step 204: FMIF receives the access request message, and encapsulates the first authentication information carried by the access request message according to the message format supported by the control plane interface to obtain second authentication information.

The FMIF includes a control plane interface, which is an interface in the FMIF for communicating with core network devices. In case the core network device is a network element comprising AMF, SMF and UPF, the control plane interface is an interface in FMIF for communicating with the AMF in the core network device. In case the core network device comprises a core network control device and a UPF, the control plane interface is an interface in the FMIF for communicating with the AMF in the core network control device.

The control plane interface may be an N1 interface or an N2 interface, and assuming that the control plane interface is an N1 interface, the second authentication information may be sui, SUPI or 5G-GUTI, i.e., the FMFI may encapsulate the first authentication information into sui, SUPI or 5G-GUTI according to a message format supported by the N1 interface. SUCI, SUPI or 5G-GUTI is information defined by 3GPP for core network authentication.

The FMIF includes a control plane interface adapter, and in this step, the control plane interface adapter may receive the access request message, and encapsulate the first authentication information carried in the access request message according to a message format supported by the control plane interface to obtain second authentication information.

Step 205: the FMIF sends second authentication information to the core network device through the control plane interface.

The second authentication information is obtained by encapsulating according to the message format supported by the control plane interface, so that the FMIF can send the second authentication information to the core network equipment through the control plane interface, thereby ensuring that the second authentication information can be successfully sent to the core network equipment, and providing guarantee for the core network equipment to authenticate the fixed network equipment.

For example, the control plane interface is an N1 interface, the second authentication information is sui, SUPI or 5G-GUTI, and when the core network device is a network element including AMF, SMF and UPF, the FMIF transmits the sui, SUPI or 5G-GUTI to the core network device through the N1 interface. When the core network device includes a core network control device and a UPF, the FMIF transmits SUCI, SUPI, or 5G-GUTI to the core network control device through an N1 interface.

Step 206: and the core network equipment receives the second authentication information, authenticates the fixed network equipment according to the second authentication information, and sends a confirmation message to the FMIF after the fixed network equipment is authenticated.

In this step, in the case that the core network device is a network element including an AMF, an SMF, and a UPF, the AMF in the core network device authenticates the fixed network device in an Authentication Server Function (AUSF) according to the second Authentication information, and sends a confirmation message to the FMIF after the fixed network device is authenticated. And under the condition that the core network equipment comprises the core network control equipment and the UPF, the AMF in the core network control equipment authenticates the fixed network equipment according to the second authentication information, and sends a confirmation message to the FMIF after the fixed network equipment passes the authentication.

Step 207: FMIF receives the confirmation message through control plane interface, and sends the confirmation message to fixed network equipment.

The control plane interface may be an N1 interface or an N2 interface, and the FMIF may receive the acknowledgement message through an N1 interface or an N2 interface and send the acknowledgement message to the BNG. And the BNG receives the confirmation message and forwards the confirmation message to the fixed network equipment. And the fixed network equipment receives the confirmation message to finish the authentication of the fixed network equipment.

After the fixed network device is authenticated, a data plane connection between the fixed network device and the core network device may be established, where the data plane connection between the fixed network device and the core network device includes a data plane connection between the fixed network device and the BNG, a data plane connection between the BNG and the FMIF corresponding to the fixed network device, and a tunnel between the FMIF and the core network device corresponding to the fixed network device. When the core network device is a network element including an AMF, an SMF, and a UPF, the tunnel corresponding to the fixed network device between the FMIF and the core network device is a tunnel corresponding to the fixed network device between the FMIF and the UPF in the core network device. And under the condition that the core network equipment comprises core network control equipment and UPF, the tunnel corresponding to the fixed network equipment between the FMIF and the core network equipment is the tunnel corresponding to the fixed network equipment between the FMIF and the UPF.

Because the data plane connection between the fixed network device and the BNG already exists, the data plane connection between the BNG and the FMIF corresponding to the fixed network device and the tunnel between the FMIF and the core network device corresponding to the fixed network device are established, that is, the data plane connection between the fixed network device and the core network device is established. The data plane connection between the fixed network device and the core network device may be established through the following steps 208 to 211, where the steps 208 to 211 are respectively:

step 208: FMIF sends session setup request message to core network device, the session setup request message includes identification of fixed network device.

After receiving the confirmation message, the FMIF may actively send a session establishment request message to the core network device, requesting to establish a data plane connection between the fixed network device 1 and the core network device; or after receiving the confirmation message, the fixed network equipment sends a session establishment request message to the FMIF through the BNG; FMIF receives the request message of session setup, send the request message of session setup to the apparatus of the core network.

In case that the core network device is a network element including the AMF, the SMF, and the UPF, the FMIF transmits the session establishment request message to the AMF in the core network device.

And under the condition that the core network equipment comprises core network control equipment and UPF, the FMIF sends the session establishment request message to the core network control equipment, and the FMIF sends the session establishment request message to the AMF in the core network control equipment when the session establishment request message is realized.

The FMIF sends the session establishment request message to the core network device through a control plane interface, which may be an N1 interface or an N2 interface, that is, the FMIF may send the session establishment request message to the core network device through an N1 interface or an N2 interface.

In this step, the FMIF may further allocate the TEID of the tunnel on the FMIF side, and the session establishment request message may further carry the TEID of the tunnel on the FMIF side, where the tunnel is a tunnel between the FMIF and the core network device.

Step 209: the core network device receives the session establishment request message, and allocates session information of the fixed network device according to the identifier of the fixed network device included in the session establishment request message, wherein the session information includes an address of the fixed network device, a TEID of the tunnel at the core network device side, tunnel parameters of the tunnel, and the like, and the tunnel is a tunnel corresponding to the fixed network device between the FMIF and the core network device.

In this step, the AMF in the core network device receives the session establishment request message, and allocates session information of the fixed network device according to an identifier of the fixed network device included in the session establishment request message, when the core network device is a network element including the AMF, the SMF, and the UPF.

In this step, the AMF in the core network control device receives the session establishment request message, and allocates session information of the fixed network device according to the identifier of the fixed network device included in the session establishment request message, when the core network device includes the core network control device and the UPF.

The session information allocated by the core network device may further include TEID of the tunnel on the FMIF side. The tunnel parameter may include a quality of service Flow identifier (QoS Flow ID, QFI) and other parameters.

Step 210: the core network device sends the session information to the FMIF.

In the case that the core network device is a network element including an AMF, an SMF and a UPF, the AMF in the core network device sends the session information to the FMIF, the AMF in the core network device also transmits the session information to the SMF, and the SMF transmits the session information to the UPF through an interface between the control plane and the data plane.

And in the case that the core network device comprises a core network control device and a UPF, the AMF in the core network control device sends the session information to the FMIF, the AMF in the core network control device also transmits the session information to the SMF, and the SMF in the core network control device sends the session information to the UPF through an interface between a control plane and a data plane.

The interface between the control plane and the data plane includes an N4 interface.

Step 211: the FMIF receives the session information, establishes a data plane connection between the BNG and the FMIF and corresponding to the fixed network equipment, and establishes a tunnel between the FMIF and the core network equipment and corresponding to the fixed network equipment.

When establishing the data plane connection, FMIF and BNG are required to do together. When the fixed network equipment is realized, the FMIF sends the address of the fixed network equipment to the BNG, and the corresponding relation between the address of the fixed network equipment and the address of the BNG is stored in a first relation table; the BNG receives the address of the fixed network equipment, and stores the corresponding relation between the address of the fixed network equipment and the address of the FMIF in a corresponding relation table to realize the establishment of the data plane connection.

When the tunnel is established, the FMIF and the core network device are required to be jointly completed. When implemented:

when the session information includes the address of the fixed network device, the TEID of the tunnel on the core network device side and the tunnel parameters of the tunnel, for the FMIF side, the FMIF allocates the TEID of the tunnel on the FMIF side, allocates resources to the tunnel according to the tunnel parameters, the resources may be resources such as ports and bandwidths, binds the resources with the TEID of the tunnel on the FMIF side, sends the TEID of the tunnel on the FMIF side to the core network device, and saves the correspondence among the address of the fixed network device, the TEID of the tunnel on the FMIF side and the TEID of the tunnel on the core network device side in a second relationship table.

In case that the core network device is a network element including AMF, SMF and UPF, FMIF sends TEID of the tunnel on FMIF side to AMF in the core network device. In the case where the core network device includes a core network control device and a UPF, the FMIF sends the TEID of the tunnel on the FMIF side to the AMF in the core network control device.

In the case that the session information may further include the TEID of the tunnel on the FMIF side, in this case, the FMIF does not need to allocate the TEID of the tunnel on the FMIF side, nor send the TEID of the tunnel on the FMIF side to the core network device.

For the core network device side, when the core network device includes AMF, SMF and UPF, and the session information includes the address of the fixed network device, the TEID of the tunnel on the core network device side and the tunnel parameters of the tunnel, the AMF in the core network device receives the TEID of the tunnel on the FMIF side sent by FMIF, transmits the TEID of the tunnel on the FMIF side to the SMF, and the SMF transmits the TEID of the tunnel on the FMIF side to the UPF through the interface between the control plane and the data plane. The UPF in the core network equipment receives the session information and the TEID of the tunnel at the FMIF side, allocates resources for the tunnel according to the tunnel parameters, the resources can be resources such as ports and bandwidth, the resources are bound with the TEID of the tunnel at the core network equipment side, and the address of the fixed network equipment, the TEID of the tunnel at the FMIF side and the corresponding relation between the TEID of the tunnel at the core network equipment side are stored in a corresponding relation table, so that the tunnel is established. It can be understood that, in this embodiment, after receiving the TEID of the tunnel on the FMIF side sent by the FMIF, the AMF in the core network device may send the address of the fixed network device, the TEID of the tunnel on the core network device side, the TEID of the tunnel on the FMIF side, and the tunnel parameter of the tunnel to the SMF, which transmits the session information to the UPF through the interface between the control plane and the data plane.

When the core network device comprises a core network control device and a UPF, and the session information comprises the address of the fixed network device, the TEID of the tunnel on the core network device side and the tunnel parameters of the tunnel, the AMF in the core network control device receives the TEID of the tunnel on the FMIF side sent by the FMIF, transmits the TEID of the tunnel on the FMIF side to the SMF, and the SMF sends the TEID of the tunnel on the FMIF side to the UPF through an interface between a control plane and a data plane. And the UPF receives the session information and the TEID of the tunnel at the FMIF side, allocates resources for the tunnel according to the tunnel parameters, wherein the resources can be resources such as ports, bandwidth and the like, binds the resources with the TEID of the tunnel at the core network equipment side, and stores the corresponding relation among the address of the fixed network equipment, the TEID of the tunnel at the FMIF side and the TEID of the tunnel at the core network equipment side in a corresponding relation table to realize the establishment of the tunnel. It can be understood that, in this embodiment, after receiving the TEID of the tunnel on the FMIF side sent by the FMIF, the AMF in the core network control device may send the address of the fixed network device, the TEID of the tunnel on the core network device side, the TEID of the tunnel on the FMIF side, and the tunnel parameter of the tunnel to the SMF, which are carried in the session information, and the SMF transmits the session information to the UPF through the interface between the control plane and the data plane.

In the case that the session information may further include the TEID of the tunnel on the FMIF side, in this step, the core network device or the core network control device does not need to receive the TEID of the tunnel on the FMIF side sent by the FMIF.

The FMIF may further allocate the TEID of the tunnel on the FMIF side before sending the session establishment request message, so that the session establishment request message may carry the TEID of the tunnel on the FMIF side. In this case, FMIF does not need to allocate the TEID of the tunnel on the FMIF side, nor send the TEID of the tunnel on the FMIF side to the core network device.

After the data plane connection between the BNG and the FMIF and the tunnel between the FMIF and the core network device and corresponding to the fixed network device are established, the data plane connection between the fixed network device and the core network device is established due to the fact that the data plane connection exists between the fixed network device and the FMIF.

The fixed network device may send the uplink service packet through the data plane connection between the fixed network device and the core network device, and may send the uplink service packet through the following steps 212 to 216. The steps 212 to 216 are:

step 212: and the fixed network equipment sends a first uplink service message to the BNG, wherein the first uplink service message comprises the address of the fixed network equipment.

The message header of the first uplink service message comprises a source address field, and the content carried by the source address field is the address of the fixed network equipment.

Step 213: the BNG receives the first uplink service message, and sends the first uplink service message to the FMIF through the data plane connection between the BNG and the FMIF.

The BNG is stored with a corresponding relation table, extracts the address of the fixed network equipment from the first uplink service message, acquires the corresponding address of the FMIF from the corresponding relation table according to the address of the fixed network equipment, and sends the first uplink service message to the FMIF according to the address of the FMIF.

In this step, the BNG may further detect whether the first uplink service packet is a packet of the mobile network service before sending the first uplink service packet to the FMIF, and if the first uplink service packet is a packet of the mobile network service, send the first uplink service packet to the FMIF through a data plane connection between the BNG and the FMIF.

The BNG may detect whether the first uplink service packet is a packet of the mobile network service according to a preset field in a packet header of the first uplink service packet.

The preset field may be a Service Virtual Local Area Network (S-VLAN) field, etc.

If the first uplink service message is a mobile network service message, a preset field of a message header of the first uplink service message carries preset content. In this step, the BNG may extract field content included in a preset field in a header of the first uplink service packet, detect that the first uplink service packet is a packet of the mobile network service if the field content is the preset content, and detect that the first uplink service packet is not the packet of the mobile network service if the field content is not the preset content.

The BNG includes a session service forwarding module, in this step, the session service forwarding module may detect whether the first uplink service packet is a packet of the mobile network service, and if the first uplink service packet is a packet of the mobile network service, send the first uplink service packet to the FMIF through a data plane connection between the BNG and the FMIF, the data plane connection corresponding to the fixed network device.

Step 214: FMIF receives the first uplink service message, and encapsulates the first uplink service message according to the encapsulation mode corresponding to the tunnel to obtain a second uplink service message, wherein the tunnel is a tunnel between FMIF and core network equipment and corresponds to fixed network equipment.

The FMIF receives the first uplink service message, extracts the address of the fixed network equipment from the first uplink service message, acquires the TEID of the tunnel corresponding to the fixed network equipment on the FMIF side and the TEID of the tunnel corresponding to the fixed network equipment on the core network equipment side from the second relation table according to the address of the fixed network equipment, and adds a message header corresponding to the tunnel to the first uplink service message according to the encapsulation mode corresponding to the tunnel to obtain a second uplink service message, wherein the message header comprises the acquired TEID of the FMIF side and the TEID of the core network equipment side.

Before performing the operation of encapsulating the first uplink service packet, the FMIF may detect whether the first uplink service packet is a packet of a mobile network service, and perform the operation of encapsulating the first uplink service packet if the first uplink service packet is a packet of a mobile network service.

The FMIF may detect whether the first uplink service packet is a packet of the mobile network service according to a preset field in a packet header of the first uplink service packet.

In this step, the FMIF may extract field content included in a preset field in a header of the first uplink service packet, detect that the first uplink service packet is a packet of the mobile network service if the field content is the preset content, and detect that the first uplink service packet is not a packet of the mobile network service if the field content is not the preset content.

The FMIF includes a service check module and an encapsulation decapsulation module, where the service check module may detect whether the first uplink service packet is a packet of the mobile network service, and if the first uplink service packet is a packet of the mobile network service, the encapsulation decapsulation module performs an operation of encapsulating the first uplink service packet, and if the first uplink service packet is not a packet of the mobile network service, the first uplink service packet is discarded.

Step 215: and the FMIF sends a second uplink service message to the core network equipment through the tunnel.

The FMIF includes a data plane interface, where the data plane interface is an interface in the FMIF for communicating with the core network device, and the FMIF may send the second uplink traffic packet to the core network device through the tunnel using the data plane interface.

And under the condition that the core network equipment is a network element comprising the AMF, the SMF and the UPF, the FMIF can use a data plane interface to send a second uplink service message to the UPF in the core network equipment through the tunnel.

And under the condition that the core network device comprises the core network control device and the UPF, the FMIF can use a data plane interface to send the second uplink service message to the UPF through the tunnel.

The data plane interface may be an N4 interface or the like.

Step 216: and the core network equipment receives the second uplink service message, and decapsulates the second uplink service message according to a decapsulation mode corresponding to the tunnel to obtain the first uplink service message.

In this step, the core network device receives the second uplink service packet, and removes the packet header corresponding to the tunnel from the second uplink service packet according to the decapsulation mode corresponding to the tunnel, so as to obtain the first uplink service packet.

The core network device obtains the first uplink service packet, and may forward the first uplink service packet to the data network.

And under the condition that the core network equipment is a network element comprising the AMF, the SMF and the UPF, the UPF in the core network equipment receives the second uplink service message, and removes a message header corresponding to the tunnel from the second uplink service message according to a decapsulation mode corresponding to the tunnel to obtain the first uplink service message.

And under the condition that the core network equipment comprises core network control equipment and the UPF, the UPF receives the second uplink service message, and removes a message header corresponding to the tunnel from the second uplink service message according to a decapsulation mode corresponding to the tunnel to obtain a first uplink service message.

The core network device may send the downlink service packet through the data plane connection between the core network device and the fixed network device, and may send the uplink service packet through the following steps 217 to 221. The steps 217 to 221 are:

step 217: the core network device obtains a second downlink service message to be sent to the fixed network device, and packages the second downlink service message according to a packaging mode corresponding to a tunnel to obtain a first downlink service message, wherein the tunnel is a tunnel between the FMIF and the core network device and corresponds to the fixed network device.

And the core network equipment receives a second downlink service message from the data network, wherein the second downlink service message comprises the address of the fixed network equipment. The message header of the second downlink service message comprises a destination address field, and the destination address field comprises the address of the fixed network equipment.

In this step, the core network device extracts the address of the fixed network device from the second downlink service message, obtains the TEID of the tunnel corresponding to the fixed network device on the FMIF side and the TEID of the core network device side from the corresponding relation table stored in the core network device according to the address of the fixed network device, and adds a message header corresponding to the tunnel to the second downlink service message according to the tunnel encapsulation mode to obtain the first downlink service message, where the message header includes the obtained TEID of the FMIF side and the TEID of the core network device side.

Step 218: and the core network equipment sends the first downlink service message to the FMIF through the tunnel.

And under the condition that the core network equipment is a network element comprising an AMF, an SMF and a UPF, the UPF in the core network equipment acquires a second downlink service message to be sent to the fixed network equipment, packages the second downlink service message according to a packaging mode corresponding to the tunnel to obtain a first downlink service message, and sends the first downlink service message to the FMIF through the tunnel.

And under the condition that the core network equipment comprises core network control equipment and the UPF, the UPF acquires a second downlink service message to be sent to the fixed network equipment, packages the second downlink service message according to a packaging mode corresponding to the tunnel to obtain a first downlink service message, and sends the first downlink service message to the FMIF through the tunnel.

Step 219: and the FMIF receives the first downlink service message, and decapsulates the first downlink service message according to a decapsulation mode corresponding to the tunnel to obtain a second downlink service message.

And the FMIF determines a message header corresponding to the tunnel from the first downlink service message according to the decapsulation mode corresponding to the tunnel, and removes the determined message header from the first downlink service message to obtain a second downlink service message.

The FMIF comprises an encapsulation and decapsulation module, wherein the encapsulation and decapsulation module can receive the first downlink service message and decapsulate the first downlink service message according to a decapsulation mode corresponding to the tunnel to obtain a second downlink service message.

Step 220: and the FMIF is connected with the fixed network equipment through a data plane corresponding to the fixed network equipment between the FMIF and the BNG, and sends a second downlink service message to the fixed network equipment.

FMIF extracts the address of the fixed network equipment from the second downlink service message, obtains the address of the corresponding BNG from the first relational table according to the address of the fixed network equipment, and sends the second downlink service message to the BNG according to the address of the BNG. And the BNG receives the second downlink service message and forwards the second downlink service message to the fixed network equipment.

Step 221: and the fixed network equipment receives the second downlink service message.

In the embodiment of the present application, after receiving the first authentication information of the fixed network device, the FMIF encapsulates the first authentication information according to the message format supported by the control plane interface to obtain the second authentication information. The second authentication information is obtained by encapsulating according to the message format supported by the control plane interface, so that the FMIF can send the second authentication information to the core network equipment through the control plane interface, thereby ensuring that the second authentication information can be successfully sent to the core network equipment, and providing guarantee for the core network equipment to authenticate the fixed network equipment. Because the version of the communication network to which the core network device belongs is the 5G communication network or the communication network higher than the 5G communication network, the fixed network device can be authenticated in the 5G core network or the core network higher than the 5G. After the authentication is passed, the FMIF sends a session establishment request message carrying the identifier of the fixed network equipment to the core network equipment, the core network equipment distributes session information of the fixed network equipment, and sends the session information to the FMIF, and the session information comprises the address of the fixed network equipment, the TEID of the tunnel at the core network equipment side and other contents, so that the FMIF can establish data plane connection between the fixed network equipment and the core network equipment according to the session information, and the fixed network equipment can transmit service messages with the core network equipment through the data plane connection.

Referring to fig. 3, the embodiment of the present application provides a network architecture, which is different from the network architecture shown in fig. 1 in that: the Access Gateway Function (AGF) 2 is used to replace the BNG2 and the FMIF3, i.e. the functions of the BNG2 and the FMIF3 are merged into the AGF2, which includes:

the core network device 4 comprises a virtual machine for realizing the AMF function, a virtual machine for realizing the SMF function and a virtual machine for realizing the UPF function, wherein the three virtual machines are respectively called AMF, SMF and UPF. Alternatively, the core network device 4 may include a core network control device and a UPF for implementing the AMF function and the SMF function; the UPF is a physical device, which can implement the UPF function, and the core network control device for implementing the AMF function and the SMF function includes a virtual machine for implementing the AMF function and a virtual machine for implementing the SMF function, which are respectively referred to as the AMF and the SMF.

The communication network version to which the core network device 3 belongs is a 5G communication network or a network higher than the 5G communication network, and the core network may be a core network of the 5G communication network or a core network higher than the 5G communication network. The fixed network equipment 1 can be FN-RG and the like.

The AGF2 may communicate with the core network device 3 through a control plane interface, which may include an N1 interface or an N2 interface, and a data plane interface, which may be an N3 interface.

In the case that the core network device 3 is a network element including an AMF, an SMF, and a UPF, the AGF2 may communicate with the AMF in the core network device 3 through a control plane interface, and the AGF2 may communicate with the UPF in the core network device 3 through a data plane interface. The SMF and the UPF communicate using an interface between the control plane and the data plane.

In the case where the core network device 3 includes a core network control device and a UPF, the AGF2 may communicate with the AMF in the core network control device through a control plane interface, and the AGF2 may communicate with the UPF through a data plane interface. The SMF and the UPF in the core network control equipment use the interface communication between the control plane and the data plane.

Optionally, the interface between the control plane and the data plane may be an N4 interface or the like.

The fixed network device 1 may request the core network device to authenticate it through the AGF 2. The authentication process may be:

referring to steps 401 to 406 of fig. 4, the fixed network device 1 sends a dial message to the AGF2, the AGF2 receives the dial message, generates first authentication information of the fixed network device 1 based on the dial message, where the first authentication information includes an identifier of the fixed network device, encapsulates the first authentication information according to a message format supported by the control plane interface to obtain second authentication information, and sends the second authentication information to the core network device 3 through the control plane interface; the core network device 3 authenticates the fixed network device 1 according to the second authentication information, and sends a confirmation message to the AGF2 after the fixed network device 1 passes the authentication; the AGF2 sends an acknowledgement message to the fixed network device 1.

The detailed process of the fixed network device 1 requesting the core network device 4 to perform authentication may refer to the relevant contents in steps 401 to 406 in the embodiment shown in the subsequent fig. 4, and is not described in detail here.

After the core network device passes the authentication of the fixed network device 1, the data plane connection between the fixed network device 1 and the core network device can be established. In a specific embodiment, the process of establishing the data plane connection may be:

referring to steps 408 to 410 of fig. 4, the AGF2 sends a session establishment request message to the core network device 3 through the control plane interface, where the session establishment request message carries the identifier of the fixed network device 1; the core network device 3 receives the session establishment request message, allocates session information of the fixed network device 1 according to the identifier of the fixed network device 1 included in the session establishment request message, where the session information includes an address of the fixed network device 1, a TEID of a tunnel corresponding to the fixed network device 1 between the AGF2 and the core network device 3 on the core network device 3 side, tunnel parameters of the tunnel, and the like, sends the session information to the AGF2, and the AGF2 receives the session information and establishes the tunnel according to the session information. The tunnel parameters may be QoS parameters, etc. Since there is a data plane connection between the AGF2 and the fixed network device 1, until the data plane connection between the fixed network device 1 and the core network device 3 is established at this time, the data plane connection between the fixed network device 1 and the core network device 3 includes the data plane connection between the fixed network device 1 and the AGF2 and a tunnel corresponding to the fixed network device 1 between the AGF2 and the core network device.

After receiving the confirmation message, the AGF2 may actively send a session establishment request message to the core network device 3, requesting to establish a data plane connection between the fixed network device 1 and the core network device 3; or, after receiving the confirmation message, the fixed network device 1 sends a session establishment request message to the AGF 2; the AGF2 receives the session establishment request message, and sends the session establishment request message to the core network device 3.

The tunnel corresponding to the fixed network device 1 between the AGF2 and the core network device 3 may be a GTP-U tunnel or the like.

The detailed process of establishing the data plane connection can refer to the relevant contents in steps 408 to 410 in the embodiment shown in the subsequent fig. 4, and is not described in detail here.

After establishing the data plane connection between the fixed network device 1 and the core network device 3 located in the core network, the fixed network device 1 may send an uplink service packet to the core network device 3, and the core network device 3 forwards the uplink service packet; or, the core network device 3 acquires the downlink service packet of the fixed network device 1, and sends the downlink service packet to the fixed network device 1. In a specific embodiment, the implementation process is as follows:

for the uplink service packet, referring to steps 411 to 414 in fig. 4, the fixed network device 1 sends a first uplink service packet to the AGF2, the AGF2 receives the first uplink service packet, encapsulates the first uplink service packet according to a encapsulation manner corresponding to a tunnel to obtain a second uplink service packet, and sends the second uplink service packet to the core network device 3 through the tunnel, where the tunnel is the tunnel between the AGF2 and the core network device 3 and corresponds to the fixed network device 1. And the core network equipment 3 receives the second uplink service message, and decapsulates the second uplink service message according to a decapsulation mode corresponding to the tunnel to obtain the first uplink service message.

For the downlink service packet, referring to steps 415 to 419 of fig. 4, the core network device 3 obtains a second downlink service packet to be sent to the fixed network device 1, encapsulates the second downlink service packet according to a encapsulation manner corresponding to a tunnel to obtain a first downlink service packet, and sends the first downlink service packet to the AGF2 through the tunnel, where the tunnel is a tunnel between the AGF2 and the core network device 3 and corresponds to the fixed network device 1. The AGF2 receives the first downlink service packet, decapsulates the first downlink service packet according to the decapsulation mode corresponding to the tunnel to obtain a second downlink service packet, receives the second downlink service packet to the fixed network device 1, and receives the second downlink service packet by the fixed network device 1.

Referring to fig. 4, the present disclosure provides a communication method, which may be applied to the network architecture shown in fig. 3, and the method may be used for a fixed network device to request a core network device to authenticate the fixed network device; after the fixed network equipment passes the authentication, the method can be used for establishing data plane connection between the fixed network equipment and the core network; after the data plane connection is established, the method can be used for transmitting the uplink service message or the downlink service message of the fixed network equipment.

That is to say: the communication method comprises a communication method for authenticating fixed network equipment, a communication method for establishing data plane connection between the fixed network equipment and core network equipment, a communication method for transmitting an uplink service message and a communication method for transmitting a downlink service message.

Referring to fig. 4, the communication method for authenticating a fixed network device includes the following steps 401 to 406. The steps 401 to 406 are respectively:

step 401: and the fixed network equipment sends the dialing message to the AGF.

The fixed network equipment is accessed to the AGF through the access network, namely, the fixed network equipment and the AGF are connected, so that the fixed network equipment can send the dialing message to the AGF through the connection.

The dialing message may or may not include an identifier of the fixed network device, and the identifier of the fixed network device may be a Line ID.

Step 402: and the AGF receives the dialing message and generates first authentication information of the fixed network equipment based on the dialing message, wherein the first authentication information comprises the identification of the fixed network equipment.

In this step, in the case that the dialing message includes the identifier of the fixed network device, the AGF may extract the identifier of the fixed network device from the dialing message, and generate the first authentication information of the fixed network device based on the identifier of the fixed network device. Alternatively, the first and second electrodes may be,

and under the condition that the identification of the fixed network equipment is not included in the dialing message, the AGF can generate the identification of the fixed network equipment according to the preset field in the dialing message, and generate first authentication information of the fixed network equipment based on the identification of the fixed network equipment.

The preset fields of the dial message may include at least one of DHCPv4 Option 82 exchange, PPPoE circuit and remote attribute value pair insertion, LDRA function DHCPv6 Option 18 on the access node, or Line ID Option (LIO) in RS message.

The operation of the AGF generating the first authentication information may be: the AGF generates user name information of the fixed network equipment based on the identification of the fixed network equipment, the user name information comprises the identification of the fixed network equipment, and the first authentication information comprises the user name information. The AGF may further generate password information of the fixed network device, and the first authentication information may further include the password information.

Step 403: and the AGF packages the first authentication information according to the message format supported by the control plane interface to obtain second authentication information.

The AGF includes a control plane interface, which is an interface in the AGF for communicating with the core network device. In case the core network device is a network element comprising an AMF, an SMF and a UPF, the control plane interface is an interface in the AGF for communicating with the AMF in the core network device. In case the core network device comprises a core network control device and a UPF, the control plane interface is an interface in the AGF for communicating with the AMF in the core network control device.

The control plane interface may be an N1 interface or an N2 interface, and assuming that the control plane interface is an N1 interface, the second authentication information may be sui, SUPI or 5G-GUTI, i.e., the AGF may encapsulate the first authentication information into sui, SUPI or 5G-GUTI according to a message format supported by the N1 interface.

Step 404: and the AGF sends second authentication information to the core network equipment through the control plane interface.

The second authentication information is obtained by encapsulating according to a message format supported by the control plane interface, so that the AGF can send the second authentication information to the core network device through the control plane interface, thereby ensuring that the second authentication information can be successfully sent to the core network device, and providing guarantee for the core network device to authenticate the fixed network device.

For example, the control plane interface is an N1 interface, the second authentication information is sui, SUPI, or 5G-GUTI, and the AGF transmits the sui, SUPI, or 5G-GUTI to the core network device through the N1 interface in case that the core network device is a network element including AMF, SMF, and UPF. In case that the core network device includes a core network control device and a UPF, the AGF transmits SUCI, SUPI or 5G-GUTI to the core network control device through the N1 interface.

Step 405: and the core network equipment receives the second authentication information, authenticates the fixed network equipment according to the second authentication information, and sends a confirmation message to the FMIF after the fixed network equipment is authenticated.

In this step, in the case that the core network device is a network element including an AMF, an SMF, and a UPF, the AMF in the core network device authenticates the fixed network device according to the second authentication information, and sends a confirmation message to the AGF after the fixed network device passes the authentication. And under the condition that the core network equipment comprises the core network control equipment and the UPF, the AMF in the core network control equipment authenticates the fixed network equipment according to the second authentication information, and sends a confirmation message to the AGF after the fixed network equipment passes the authentication.

Step 406: and the AGF receives the confirmation message through the control plane interface and sends the confirmation message to the fixed network equipment.

The control plane interface may be an N1 interface or an N2 interface, and the AGF may receive the acknowledgement message through the N1 interface or the N2 interface, and forward the acknowledgement message to the fixed network device. And the fixed network equipment receives the confirmation message to finish the authentication of the fixed network equipment.

After the fixed network device is authenticated, a data plane connection between the fixed network device and the core network device can be established, and the data plane connection between the fixed network device and the core network device includes a data plane connection between the fixed network device and the AGF and a tunnel between the AGF and the core network device, the tunnel corresponding to the fixed network device. And under the condition that the core network equipment is a network element comprising AMF, SMF and UPF, the tunnel corresponding to the fixed network equipment between the AGF and the core network equipment is the tunnel corresponding to the fixed network equipment between the AGF and the UPF in the core network equipment. And under the condition that the core network equipment comprises core network control equipment and UPF, the tunnel corresponding to the fixed network equipment between the AGF and the core network equipment is the tunnel corresponding to the fixed network equipment between the AGF and the UPF.

Because the data plane connection between the fixed network device and the AGF already exists, a tunnel corresponding to the fixed network device is established between the AGF and the core network device, that is, the data plane connection between the fixed network device and the core network device is established. The data plane connection between the fixed network device and the core network device may be established through the following steps 407 to 410, where the steps 407 to 410 are:

step 407: the AGF sends a session establishment request message to the core network equipment, wherein the session establishment request message comprises the identification of the fixed network equipment.

After receiving the confirmation message, the AGF may actively send a session establishment request message to the core network device, requesting to establish a data plane connection between the fixed network device and the core network device; or after receiving the confirmation message, the fixed network equipment sends a session establishment request message to the AGF; the AGF receives the session establishment request message and sends the session establishment request message to the core network equipment.

The AGF may also allocate a TEID of the tunnel on the FMIF side, where the session establishment request message also carries the TEID of the tunnel on the FMIF side, and the tunnel is a tunnel between the AGF and the core network device and corresponding to the fixed network device.

In case the core network device comprises network elements of AMF, SMF and UPF, the AGF sends the session establishment request message to the AMF in the core network control device.

And when the core network equipment comprises the core network control equipment and the UPF, the AGF sends the session establishment request message to the core network control equipment, and when the session establishment request message is realized, the AGFF sends the session establishment request message to the AMF in the core network control equipment.

The AGF sends the session establishment request message to the core network device through a control plane interface, which may be an N1 interface or an N2 interface, that is, the AGF may send the session establishment request message to the core network device through an N1 interface or an N2 interface.

Step 408: the core network device receives the session establishment request message, and allocates session information of the fixed network device according to the identifier of the fixed network device included in the session establishment request message, wherein the session information includes an address of the fixed network device, a TEID of the tunnel at the core network device side, tunnel parameters of the tunnel, and the like, and the tunnel is a tunnel corresponding to the fixed network device between the AGF and the core network device.

In this step, the AMF in the core network device receives the session establishment request message, and allocates session information of the fixed network device according to the identifier of the fixed network device included in the session establishment request message, when the core network device includes network elements of the AMF, the SMF, and the UPF.

In this step, the AMF in the core network control device receives the session establishment request message, and allocates session information of the fixed network device according to the identifier of the fixed network device included in the session establishment request message, when the core network device includes the core network control device and the UPF.

The session information allocated by the core network device may further include a TEID of the tunnel on the AGF side.

Step 409: the core network device sends the session information to the AGF.

In the case that the core network device includes network elements of an AMF, an SMF, and a UPF, the AMF in the core network device sends the session information to the AGF, the AMF in the core network device also transmits the session information to the SMF, and the SMF transmits the session information to the UPF through an interface between the control plane and the data plane.

And in the case that the core network device comprises a core network control device and a UPF, the AMF in the core network control device sends the session information to the AGF, the AMF also transmits the session information to the SMF, and the SMF in the core network control device sends the session information to the UPF through an interface between a control plane and a data plane.

The interface between the control plane and the data plane includes an N4 interface.

Step 410: and the AGF receives the session information and establishes a tunnel between the AGF and the core network equipment, wherein the tunnel corresponds to the fixed network equipment.

When the tunnel is established, AGF and core network equipment are required to be jointly completed. When implemented:

when the session information includes the address of the fixed network device, the TEID of the tunnel on the core network device side, and the tunnel parameter of the tunnel, for the AGF side, the AGF allocates the TEID of the tunnel on the AGF side, allocates the resource to the tunnel according to the tunnel parameter, where the resource may be a resource such as a port and a bandwidth, binds the resource with the TEID of the tunnel on the AGF side, sends the TEID of the tunnel on the AGF side to the core network device, and stores the correspondence between the address of the fixed network device, the TEID of the tunnel on the AGF side, and the TEID of the tunnel on the core network device side in the second relationship table.

And in the case that the core network equipment is a network element comprising AMF, SMF and UPF, the AGF sends the TEID of the tunnel on the AGF side to the AMF in the core network equipment. And under the condition that the core network equipment comprises the core network control equipment and the UPF, the AGF sends the TEID of the tunnel on the AGF side to the AMF in the core network control equipment.

The session information may further include the TEID of the tunnel on the AGF side, so that in this step, the AGF does not need to allocate the TEID of the tunnel on the AGF side, nor send the TEID of the tunnel on the AGF side to the core network device.

For the core network device side, when the session information includes the address of the fixed network device, the TEID of the tunnel on the core network device side, and the tunnel parameter of the tunnel, when the core network device is a network element including an AMF, an SMF, and a UPF, the AMF in the core network device receives the TEID of the tunnel on the AGF side sent by the FMIF, transmits the TEID of the tunnel on the FMIF side to the SMF, and the SMF transmits the TEID of the tunnel on the AGF side to the UPF through an interface between the control plane and the data plane. The UPF in the core network equipment receives the session information and the TEID of the tunnel at the AGF side, resources are allocated to the tunnel according to the tunnel parameters, the resources can be resources such as ports and bandwidth, the resources are bound with the TEID of the tunnel at the core network equipment side, and the address of the fixed network equipment, the TEID of the tunnel at the AGF side and the corresponding relation between the TEID of the tunnel at the core network equipment side are stored in a corresponding relation table, so that the tunnel is established. When the core network device includes a core network control device and a UPF, the AMF in the core network control device receives the TEID of the tunnel at the AGF side sent by the AGF, transmits the TEID of the tunnel at the AGF side to the SMF, and the SMF sends the TEID of the tunnel at the AGF side to the UPF through an interface between a control plane and a data plane. And the UPF receives the session information and the TEID of the tunnel at the FMIF side, allocates resources for the tunnel according to the tunnel parameters, wherein the resources can be resources such as ports, bandwidth and the like, binds the resources with the TEID of the tunnel at the core network equipment side, and stores the corresponding relation among the address of the fixed network equipment, the TEID of the tunnel at the FMIF side and the TEID of the tunnel at the core network equipment side in a corresponding relation table to realize the establishment of the tunnel.

The session information may further include the TEID of the tunnel on the AGF side, so that in this step, the core network device or the core network control device does not need to receive the TEID of the tunnel on the AGF side sent by the AGF.

The AGF may also allocate the TEID of the tunnel on the AGF side before sending the session establishment request message, so that the session establishment request message may carry the TEID of the tunnel on the AGF side. In this step, after receiving the session information, the AGF does not need to allocate the TEID of the tunnel on the AGF side, and does not need to send the TEID of the tunnel on the AGF side to the core network device.

After the tunnel corresponding to the fixed network device between the AGF and the core network device is established, the data plane connection between the fixed network device and the AFG is completed because the data plane connection exists between the fixed network device and the AFG.

The fixed network device may send the uplink service packet through the data plane connection between the fixed network device and the core network device, and may send the uplink service packet through the following steps 411 to 414. The steps 411 to 414 are respectively:

step 411: and the fixed network equipment sends a first uplink service message to the AGF, wherein the first uplink service message comprises the address of the fixed network equipment.

The message header of the first uplink service message comprises a source address field, and the content carried by the source address field is the address of the fixed network equipment.

Step 412: and the AGF receives the first uplink service message, and encapsulates the first uplink service message according to the encapsulation mode corresponding to the tunnel to obtain a second uplink service message, wherein the tunnel is a tunnel between the AGF and the core network equipment and corresponds to the fixed network equipment.

The AGF receives the first uplink service message, extracts the address of the fixed network equipment from the first uplink service message, acquires the TEID of the tunnel corresponding to the fixed network equipment on the AGF side and the TEID of the tunnel corresponding to the fixed network equipment on the core network equipment side from the second relation table according to the address of the fixed network equipment, and adds a message header corresponding to the tunnel to the first uplink service message according to the encapsulation mode corresponding to the tunnel to obtain a second uplink service message, wherein the message header comprises the acquired TEID of the AGF side and the TEID of the core network equipment side.

The AGF may detect whether the first uplink service packet is a packet of the mobile network service before performing an operation of encapsulating the first uplink service packet, and perform an operation of encapsulating the first uplink service packet if the first uplink service packet is a packet of the mobile network service.

The AGF may detect whether the first uplink service packet is a packet of the mobile network service according to a preset field in a packet header of the first uplink service packet.

In this step, the AGF may extract field content included in a preset field in a header of the first uplink service packet, detect that the first uplink service packet is a packet of the mobile network service if the field content is the preset content, and detect that the first uplink service packet is not a packet of the mobile network service if the field content is not the preset content.

The AGF includes a service checking module and an encapsulation decapsulation module, where the service checking module may detect whether the first uplink service packet is a packet of the mobile network service, and if the first uplink service packet is a packet of the mobile network service, the encapsulation decapsulation module performs an operation of encapsulating the first uplink service packet, and if the first uplink service packet is not a packet of the mobile network service, the first uplink service packet is discarded.

Step 413: and the AGF sends a second uplink service message to the core network equipment through the tunnel.

The AGF includes a data plane interface, where the data plane interface is an interface used for communicating with the core network device in the AGF, and the AGF may send the second uplink service packet to the core network device through the tunnel by using the data plane interface.

And under the condition that the core network equipment is a network element comprising the AMF, the SMF and the UPF, the AGF can use a data plane interface to send a second uplink service message to the UPF in the core network equipment in the tunnel.

And under the condition that the core network device comprises the core network control device and the UPF, the AGF may send the second uplink service packet to the UPF in the tunnel by using the data plane interface.

The data plane interface may be an N4 interface or the like.

Step 414: and the core network equipment receives the second uplink service message, and decapsulates the second uplink service message according to a decapsulation mode corresponding to the tunnel to obtain the first uplink service message.

In this step, the core network device receives the second uplink service packet, and removes the packet header corresponding to the tunnel from the second uplink service packet according to the decapsulation mode corresponding to the tunnel, so as to obtain the first uplink service packet.

The core network device obtains the first uplink service packet, and may forward the first uplink service packet to the data network.

And under the condition that the core network equipment is a network element comprising the AMF, the SMF and the UPF, the UPF in the core network equipment receives the second uplink service message, and removes a message header corresponding to the tunnel from the second uplink service message according to a decapsulation mode corresponding to the tunnel to obtain the first uplink service message.

And under the condition that the core network equipment comprises core network control equipment and the UPF, the UPF receives the second uplink service message, and removes a message header corresponding to the tunnel from the second uplink service message according to a decapsulation mode corresponding to the tunnel to obtain a first uplink service message.

The core network device may send the downlink traffic packet through the data plane connection between the core network device and the fixed network device, and may send the uplink traffic packet through the following steps 415 to 419. The steps 415 to 19 are respectively:

step 415: the core network device obtains a second downlink service message to be sent to the fixed network device, and packages the second downlink service message according to a packaging mode corresponding to a tunnel to obtain a first downlink service message, wherein the tunnel is a tunnel between the AGF and the core network device and corresponds to the fixed network device.

And the core network equipment receives a second downlink service message from the data network, wherein the second downlink service message comprises the address of the fixed network equipment. The message header of the second downlink service message comprises a destination address field, and the destination address field comprises the address of the fixed network equipment.

In this step, the core network device extracts the address of the fixed network device from the second downlink service message, obtains the TEID of the tunnel corresponding to the fixed network device on the AGF side and the TEID of the tunnel corresponding to the fixed network device on the core network device side from the corresponding relation table stored in the core network device according to the address of the fixed network device, and adds a message header corresponding to the tunnel to the second downlink service message according to the tunnel encapsulation mode to obtain the first downlink service message, where the message header includes the obtained TEID of the AGF side and the TEID of the core network device side.

Step 416: and the UPF sends the first business message to the AGF through the tunnel.

And under the condition that the core network equipment is a network element comprising an AMF (advanced multi-access frame), an SMF (simple message forwarding) and a UPF (unified packet flow), the UPF in the core network equipment acquires a second downlink service message to be sent to the fixed network equipment, packages the second downlink service message according to a packaging mode corresponding to the tunnel to obtain a first downlink service message, and sends the first downlink service message to the AGF through the tunnel.

And under the condition that the core network equipment comprises core network control equipment and the UPF, the UPF acquires a second downlink service message to be sent to the fixed network equipment, packages the second downlink service message according to a packaging mode corresponding to the tunnel to obtain a first downlink service message, and sends the first downlink service message to the AGF through the tunnel.

Step 417: and the AGF receives the first downlink service message, and decapsulates the first downlink service message according to a decapsulation mode corresponding to the tunnel to obtain a second downlink service message.

And the AGF determines a message header corresponding to the tunnel from the first downlink service message according to the decapsulation mode corresponding to the tunnel, and removes the determined message header from the first downlink service message to obtain a second downlink service message.

Step 418: and the AGF sends a second downlink service message to the fixed network equipment.

Step 419: and the fixed network equipment receives the second downlink service message.

In the embodiment of the present application, after generating the first authentication information of the fixed network device, the AGF encapsulates the first authentication information according to the message format supported by the control plane interface to obtain the second authentication information. The second authentication information is obtained by encapsulating according to a message format supported by the control plane interface, so that the AGF can send the second authentication information to the core network device through the control plane interface, thereby ensuring that the second authentication information can be successfully sent to the core network device, and providing guarantee for the core network device to authenticate the fixed network device. Because the version of the communication network to which the core network device belongs is the 5G communication network or the communication network higher than the 5G communication network, the fixed network device can be authenticated in the 5G core network or the core network higher than the 5G.

Referring to fig. 5, an embodiment of the present application provides a communication apparatus 500, where the apparatus 500 may be deployed in the BNG of any of the above embodiments, and includes:

a receiving unit 501, configured to receive a dialing message sent by a fixed network device;

a processing unit 502, configured to generate first authentication information of the fixed network device according to the dialing message, where the first authentication information includes an identifier of the fixed network device;

a sending unit 503, configured to send an access request message to a fixed mobile interworking function FMIF, where the access request message carries the first authentication information, and the access request message is used for the FMIF to request a core network device to authenticate the fixed network device according to the first authentication information, and a communication network version to which the core network device belongs is a 5G communication network or a communication network higher than the 5G communication network.

Optionally, the access request message is a Radius protocol access request message of a remote subscriber dial-up authentication system, or a Diameter protocol access request message.

Optionally, the detailed process of the processing unit 502 and the sending unit 503 sending the authentication information of the fixed network device to the core network device may refer to operations executed by the BNG in steps 201 to 207 in the embodiment shown in fig. 2.

Optionally, the receiving unit 501 is further configured to receive an address of the fixed network device sent by the core network device through the FMIF, where the address of the fixed network device is allocated by the core network device after receiving a session establishment request message carrying an identifier of the fixed network device, and the session establishment request message is sent by the FMIF after the core network device authenticates the fixed network device;

the processing unit 502 is further configured to establish a data plane connection between the apparatus 500 and the FMIF, where the data plane connection corresponds to the fixed network device, according to the address of the fixed network device and the address of the FMIF.

Optionally, the detailed process of the processing unit 502 for establishing the data plane connection may refer to the operations performed by the BNG in steps 208 to 211 in the embodiment shown in fig. 2.

Optionally, the receiving unit 501 is further configured to receive a first uplink service packet from the fixed network device, where the first uplink service packet includes an address of the fixed network device;

the processing unit 502 is further configured to obtain the address of the FMIF from a correspondence table according to the address of the fixed network device, where the correspondence table is used to store a correspondence between the address of the fixed network device and the address of the FMIF;

the sending unit 503 is further configured to send the first uplink service packet to the FMIF according to the address of the FMIF.

Optionally, the processing unit 502 is further configured to detect whether the first uplink service packet is a packet of a mobile network service according to a preset field in a packet header of the first uplink service packet, and if the first uplink service packet is a packet of a mobile network service, execute the operation of obtaining the address of the FMIF from a corresponding relationship table according to the address of the fixed network device. Therefore, only the service message of the mobile network can be sent to the core network equipment.

Optionally, the receiving unit 501 is further configured to receive a second downlink service packet, where the second downlink service packet includes an address of the fixed network device;

the sending unit 503 is further configured to send the second downlink service packet by the fixed network device.

Optionally, the detailed process of forwarding the first uplink traffic packet by the receiving unit 501, the processing unit 502, and the sending unit 503 may refer to the operations performed by the BNGs in steps 212 to 216 in the embodiment shown in fig. 2, and the detailed process of forwarding the second downlink traffic packet may refer to the operations performed by the BNGs in step 220 and step 221 in the embodiment shown in fig. 2.

In this embodiment, the processing unit generates authentication information of the fixed network device, and the sending unit sends the authentication information of the fixed network device to the core network device through the FMIF, so that the core network device can provide an authentication barrier for the fixed network device. Because the version of the communication network to which the core network device belongs is the 5G communication network or the communication network higher than the 5G communication network, the fixed network device can be authenticated in the 5G core network or the core network higher than the 5G. Further, after the authentication, the receiving unit receives an address of the fixed network device sent by the core network device through the FMIF, and the processing unit establishes a data plane connection between the apparatus and the FMIF, which corresponds to the fixed network device, according to the address of the fixed network device and the address of the FMIF, thereby further establishing a data plane connection between the fixed network device and the core network device, and providing a guarantee for the apparatus to send and receive service messages of the fixed network device to the 5G core network.

Referring to fig. 6, an embodiment of the present application provides a communication apparatus 600, where the apparatus 500 may be deployed in the FMIF of any of the above embodiments, and includes:

a receiving unit 601, configured to receive an access request message sent by a broadband gateway BNG, where the access request message includes first authentication information of a fixed network device, the first authentication information is generated by the BNG based on a dialing message sent by the fixed network device, and the first authentication information includes an identifier of the fixed network device;

a processing unit 602, configured to encapsulate the first authentication information according to a message format supported by a control plane interface to obtain second authentication information, where the control plane interface is an interface in the apparatus 600 for communicating with a core network device, and a communication network version to which the core network device belongs is a 5G communication network or a communication network higher than the 5G communication network;

a sending unit 603, configured to send the second authentication information to the core network device through the control plane interface, where the second authentication information is used for the core network device to authenticate the fixed network device.

Optionally, the control plane interface includes an N1 interface or an N2 interface, and the second authentication information is sui, SUPI, or 5G-GUTI.

Optionally, the detailed process of the processing unit 602 and the sending unit 503 sending the authentication information of the fixed network device to the core network device may refer to operations executed by the FMIF in steps 201 to 207 in the embodiment shown in fig. 2.

Optionally, the receiving unit 601 is further configured to receive a confirmation message sent by the core network device after the authentication passes;

the sending unit 603 is further configured to send a session establishment request message to the core network device, where the session establishment request message carries an identifier of the fixed network device, the session establishment request message is used for allocating session information to the core network device, the session information includes an address of the fixed network device, a tunnel endpoint identifier TEID of a tunnel on the core network device side, and a tunnel parameter of the tunnel, and the tunnel is a tunnel between the apparatus and the core network device and corresponds to the fixed network device;

the receiving unit 601 is further configured to receive session information sent by the core network device;

the processing unit 602 is further configured to establish a data plane connection between the apparatus and the BNG, which corresponds to the fixed network device, according to the session information, and establish the tunnel.

Optionally, the detailed process of the processing unit 602 establishing the data plane connection between the apparatus and the BNG corresponding to the fixed network device and establishing the tunnel may refer to operations performed by the FMIF in steps 208 to 211 in the embodiment shown in fig. 2.

Optionally, the sending unit 603 is further configured to send the address of the fixed network device to the BNG;

the processing unit is configured to store a correspondence between the address of the fixed network device and the address of the BNG in a first relationship table, where the first relationship table is used for the apparatus to transmit a downlink service packet of the fixed network device;

optionally, the receiving unit 601 is further configured to receive a downlink service packet of the fixed network device sent by the core network device, the processing unit 602 determines, according to the first mapping table, a BNG connected to the fixed network device, and the sending unit 603 sends the downlink service packet to the fixed network device through a data plane connection between the communication apparatus and the BNG and corresponding to the fixed network device.

The processing unit 602 is further configured to store a correspondence between the address of the fixed network device, the TEID of the tunnel on the device side, and the TEID of the tunnel on the core network device side in a second relationship table, where the second relationship table is used for the communication device to send the uplink service packet of the fixed network device, and specifically, after receiving the first uplink service packet sent by the BNG, the communication device encapsulates the first uplink service packet according to the second relationship table to obtain a second uplink service packet, and sends the second uplink service packet to the core network device through the tunnel.

Optionally, the session information further includes a TEID of the tunnel on the device side.

Optionally, the processing unit 602 is further configured to allocate a TEID of the tunnel on the device side;

the sending unit is further configured to send the TEID of the tunnel on the device side to the core network device, where the TEID of the tunnel on the device side is stored in a correspondence table by the core network device, the correspondence table includes an address of the fixed network device, and a correspondence between the TEID of the tunnel on the device side and the TEID of the tunnel on the core network device side is used by the core network device to transmit the downlink service packet of the fixed network device.

Optionally, the sending unit 603 is further configured to send the session establishment request message to the core network device through the control plane interface, where the control plane interface includes an N1 interface or an N2 interface.

In the embodiment of the present application, the processing unit encapsulates the first authentication information according to a message format supported by the control plane interface to obtain the second authentication information. The second authentication information is obtained by encapsulating according to a message format supported by the control plane interface, so that the sending unit can send the second authentication information to the core network device, thereby ensuring that the second authentication information can be successfully sent to the core network device, and providing guarantee for the core network device to authenticate the fixed network device. Because the version of the communication network to which the core network device belongs is the 5G communication network or the communication network higher than the 5G communication network, the fixed network device can be authenticated in the 5G core network or the core network higher than the 5G. Further, after the authentication, the receiving unit receives session information of the fixed network device sent by the core network device, and the processing unit establishes a data plane connection between the apparatus and the BNG corresponding to the fixed network device and a tunnel between the apparatus and the core network device corresponding to the fixed network device according to the session information, thereby establishing a data plane connection between the fixed network device and the core network device, and providing a guarantee for the communication apparatus to send and receive the service packet of the fixed network device to the 5G core network.

Referring to fig. 7, an embodiment of the present application provides a communication apparatus 700, where the apparatus 700 may be deployed in a core network device of any of the foregoing embodiments, and includes:

a receiving unit 701, configured to receive a session establishment request message from a fixed mobile interworking function FMIF, where the session establishment request message includes an identifier of a fixed network device, and a version of a communication network to which the apparatus belongs is a 5G communication network or a communication network higher than the 5G communication network;

a processing unit 702, configured to allocate session information to the fixed network device according to an identifier of the fixed network device, where the session information includes an address of the fixed network device, a tunnel endpoint identifier TEID of a tunnel on the apparatus side, and a tunnel parameter of the tunnel, and the tunnel is a tunnel between the FMIF and the apparatus and corresponding to the fixed network device;

a sending unit 703 is configured to send the session information to the FMIF, where the session information is used by the FMIF to establish a data plane connection between the fixed network device and the core network device.

Optionally, the detailed processes of allocating session information and sending session information by the processing unit 702 and the sending unit 703 may refer to operations executed by the core network device in steps 208 to 211 in the embodiment shown in fig. 2.

Optionally, the receiving unit 701 is further configured to receive the FMIF and send the second authentication information, where the second authentication information is obtained by encapsulating, by the FMIF, first authentication information according to a message format supported by a control plane interface, where the control plane interface is an interface in the FMIF, and is used for communicating with the apparatus, and the first authentication information includes an identifier of the fixed network device;

the processing unit 702 is further configured to authenticate the fixed network device according to the second authentication information.

Optionally, the detailed process of the receiving unit 701 receiving the second authentication information and the processing unit 702 authenticating the fixed network device may refer to operations executed by the core network device in steps 201 to 207 in the embodiment shown in fig. 2.

Optionally, the processing unit 702 is further configured to store a correspondence between the address of the fixed network device, the TEID of the tunnel on the FMIF side, and the TEID of the tunnel on the apparatus side in a correspondence table, where the correspondence table is used for the apparatus to transmit the downlink service packet of the fixed network device.

Optionally, the detailed process of the processing unit 702 transmitting the downlink service packet of the fixed network device may refer to the operation executed by the core network device in step 217 and step 221 in the embodiment shown in fig. 2.

Optionally, the session information further includes the TEID of the tunnel on the FMIF side or the session establishment request message further carries the TEID of the tunnel allocated by the FMIF on the FMIF side.

Optionally, the receiving unit is further configured to receive a TEID of the tunnel on the FMIF side sent by the FMIF, where the TEID of the tunnel on the FMIF side is allocated by the FMIF.

In this embodiment of the present application, since the processing unit allocates session information, where the session information includes an address of a fixed network device, a tunnel endpoint identifier TEID of a tunnel on the device side, and a tunnel parameter of the tunnel, and the sending unit sends and sends the session information to the FMIF, in this way, the FMIF can establish a data plane connection between the fixed network device and the core network device, so that a service packet of the fixed network device can be transmitted through the data plane connection.

Referring to fig. 8, an embodiment of the present application provides a communication apparatus 800, where the apparatus 800 may be deployed in the FMIF of any of the above embodiments, and includes:

a receiving unit 801, configured to receive a first uplink service packet from the fixed network device;

a processing unit 802, configured to encapsulate the first uplink service packet according to a encapsulation manner corresponding to a tunnel to obtain a second uplink service packet, where the tunnel is a tunnel between the apparatus and a core network device and corresponds to the fixed network device, and a communication network version to which the core network device belongs is a 5G communication network or a communication network higher than the 5G communication network;

a sending unit 803, configured to send the second uplink service packet to the core network device through the tunnel.

Optionally, the detailed processes of encapsulating the first uplink service packet and transmitting the second uplink service packet by the processing unit 802 and the sending unit 803 may refer to operations executed by the FMIF in steps 211 to 214 in the embodiment shown in fig. 2.

Optionally, the first uplink service packet includes an address of the fixed network device;

the processing unit 802 is configured to obtain, according to the address of the fixed network device, a tunnel endpoint identifier TEID of the tunnel on the apparatus side and a TEID of the tunnel on the core network device side from a second relationship table, where the second relationship table is used to store a correspondence between the address of the fixed network device, the TEID of the apparatus side, and the TEID of the core network device side;

the processing unit 802 is further configured to add a header corresponding to the tunnel to the first uplink service packet according to the encapsulation manner corresponding to the tunnel to obtain a second uplink service packet, where the header includes the obtained TEID of the device side and the TEID of the core network device side.

Optionally, the processing unit 802 is further configured to detect whether the first uplink service packet is a packet of a mobile network service according to a preset field in a packet header of the first uplink service packet, and if the first uplink service packet is a packet of a mobile network service, execute the operation of encapsulating the first uplink service packet according to a corresponding encapsulation manner of a tunnel to obtain a second uplink service packet.

Optionally, the receiving unit 801 is further configured to receive a first downlink traffic message sent by the core network device to the fixed network device;

the processing unit 802 is configured to decapsulate the first downlink service packet according to a decapsulation mode corresponding to the tunnel to obtain a second downlink service packet;

the sending unit 802 is configured to send the second downlink service packet to the fixed network device through a data plane connection corresponding to the fixed network device between the apparatus and the BNG.

Optionally, the processing unit 802 is configured to remove a header corresponding to the tunnel from the first downlink service packet according to a decapsulation manner corresponding to the tunnel to obtain a second downlink service packet.

Optionally, the detailed process of the receiving unit 801, the processing unit 802, and the sending unit 803 for transmitting the downlink service packet of the fixed network device may refer to operations executed by the FMIF in steps 215 to 221 in the embodiment shown in fig. 2.

Optionally, the tunnel is a gprs tunneling protocol user plane GTP-U tunnel.

In this embodiment of the present application, since the processing unit encapsulates the first uplink service packet according to the encapsulation manner corresponding to the tunnel to obtain the second uplink service packet, the sending unit sends the second uplink service packet to the core network device through the tunnel. Therefore, the uplink service message of the fixed network equipment can be sent to the 5G core network or the core network equipment higher than the 5G core network.

Referring to fig. 9, an embodiment of the present application provides a communication apparatus 900, where the apparatus 900 may be deployed in a core network device according to any of the foregoing embodiments, and 9 includes:

a receiving unit 901, configured to receive a second uplink service packet from a fixed mobile interworking function FMIF, where the second uplink service packet is obtained by encapsulating, by the FMIF, a first uplink service packet from the fixed device based on an encapsulation manner corresponding to a tunnel, where the tunnel is a tunnel between the FMIF and the apparatus and corresponds to the fixed network device, and a communication network version of the apparatus is a 5G communication network or a communication network higher than the 5G communication network;

a processing unit 902, configured to decapsulate the second uplink service packet according to a decapsulation manner corresponding to the tunnel to obtain the first uplink service packet.

Optionally, the detailed processes of the receiving unit 901 and the processing unit 902 receiving the second uplink service packet and decapsulating the second uplink service packet may refer to operations executed by the core network device in steps 211 to 214 in the embodiment shown in fig. 2.

Optionally, the apparatus 900 further includes: a sending unit 903 for sending out the data,

the processing unit 902 is configured to obtain a second downlink service packet to be sent to the fixed network device; according to the corresponding encapsulation mode of the tunnel, encapsulating the second downlink service message to obtain a first downlink service message;

the sending unit 903 is configured to send the first downlink traffic packet to the FMIF through the tunnel.

Optionally, the second downlink service packet includes an address of the fixed network device;

the processing unit 902 is configured to obtain, according to the address of the fixed network device, a tunnel endpoint identifier TEID of the tunnel on the FMIF side and a TEID on the device side from a correspondence table, where the correspondence table is used to store a correspondence between the address of the fixed network device, the TEID on the FMIF side, and the TEID on the device side;

the processing unit 902 is further configured to add a header corresponding to the tunnel to the second downlink service packet according to the encapsulation manner corresponding to the tunnel to obtain a first downlink service packet, where the header includes the obtained TEID on the FMIF side and the TEID on the device side.

Optionally, the detailed process of the sending unit 903 and the processing unit 902 for transmitting the downlink service packet of the fixed network device may refer to operations executed by the core network device in steps 215 to 221 in the embodiment shown in fig. 2.

Optionally, the tunnel is a gprs tunneling protocol user plane GTP-U tunnel.

In this embodiment of the application, since the receiving unit receives the second uplink service packet from the FMIF, the processing unit decapsulates the second uplink service packet according to a decapsulation mode corresponding to the tunnel to obtain the first uplink service packet. Therefore, the core network device which can be kan to the 5G core network or is higher than the 5G core network can receive the uplink service message of the fixed network device.

Referring to fig. 10, an embodiment of the present application provides a communication apparatus 1000, where the apparatus 1000 may be deployed in the AGF of any of the above embodiments, and includes:

a receiving unit 1001, configured to receive a dialing message sent by a fixed network device;

the processing unit is used for generating first authentication information of the fixed network equipment according to the dialing message, wherein the first authentication information comprises an identifier of the fixed network equipment; encapsulating the first authentication information according to a message format supported by a control plane interface to obtain second authentication information, where the control plane interface is an interface used for communicating with core network equipment in the device 1000, and a communication network version to which the core network equipment belongs is a 5G communication network or a communication network higher than the 5G communication network;

a sending unit 1003, configured to send the second authentication information to the core network device through the control plane interface, where the second authentication information is used for the core network device to authenticate the fixed network device.

Optionally, the detailed process of the receiving unit 1001, the processing unit 1002, and the sending unit 1003 for authenticating the fixed network device may refer to the operation executed by the AGF in step 401 and step 406 in the embodiment shown in fig. 2.

Optionally, the control plane interface includes an N1 interface or an N2 interface, and the second authentication information is a user hidden identifier SUCI, an encrypted user hidden identifier SUPI, or a 5G globally unique temporary UE identity 5G-GUTI.

Optionally, the receiving unit 1001 is further configured to receive a confirmation message sent by the core network device after the authentication passes;

the sending unit 1003 is further configured to send a session establishment request message to the core network device, where the session establishment request message carries an identifier of the fixed network device, the session establishment request message is used for the core network device to allocate session information, the session information includes an address of the fixed network device, a tunnel endpoint identifier TEID of a tunnel on the core network device side, and a tunnel parameter of the tunnel, and the tunnel is a tunnel between the apparatus 1000 and the core network device and corresponds to the fixed network device;

the receiving unit 1001 is further configured to receive session information sent by the core network device;

the processing unit 1002 is further configured to establish the tunnel according to the session information.

Optionally, the detailed process of establishing the tunnel by the receiving unit 1001, the processing unit 1002 and the sending unit 1003 may refer to the operation executed by the AGF in step 407 and 410 in the embodiment shown in fig. 2.

Optionally, the processing unit is further configured to store a correspondence between the address of the fixed network device, the TEID of the tunnel at the apparatus 1000 side, and the TEID of the tunnel at the core network device side in a second relationship table, where the second relationship table is used for the apparatus 1000 to send the uplink service packet of the fixed network device.

Optionally, the session information further includes a TEID of the tunnel on the device 1000 side.

Optionally, the processing unit 1002 is further configured to allocate the TEID of the tunnel on the device 1000 side, and send the TEID of the tunnel on the device 1000 side to the core network device, where the TEID of the tunnel on the device 1000 side is stored in a correspondence table by the core network device, the correspondence table includes an address of the fixed network device, a correspondence between the TEID of the tunnel on the device 1000 side and the TEID of the tunnel on the core network device side, and the correspondence table is used for the core network device to transmit the downlink service packet of the fixed network device.

Optionally, the AGF sends the session establishment request message to the core network device through the control plane interface, where the control plane interface includes an N1 interface or an N2 interface.

In the embodiment of the present application, the processing unit encapsulates the first authentication information according to a message format supported by the control plane interface to obtain the second authentication information. The second authentication information is obtained by encapsulating according to a message format supported by the control plane interface, so that the sending unit can send the second authentication information to the core network device, thereby ensuring that the second authentication information can be successfully sent to the core network device, and providing guarantee for the core network device to authenticate the fixed network device. Because the version of the communication network to which the core network device belongs is the 5G communication network or the communication network higher than the 5G communication network, the fixed network device can be authenticated in the 5G core network or the core network higher than the 5G. Further, after the authentication, the receiving unit receives session information of the fixed network device sent by the core network device, and the processing unit establishes a tunnel corresponding to the fixed network device between the apparatus and the core network device according to the session information, thereby establishing a data plane connection between the fixed network device and the core network device, and providing a guarantee for the communication apparatus to send and receive service messages of the fixed network device to the 5G core network.

Referring to fig. 11, an embodiment of the present application provides a communication apparatus 1100, where the apparatus 1100 may be deployed in the AGF of any of the above embodiments, and includes:

a receiving unit 1101, configured to receive a first uplink service packet from the fixed network device;

a processing unit 1102, configured to encapsulate the first uplink service packet according to a encapsulation manner corresponding to a tunnel to obtain a second uplink service packet, where the tunnel is a tunnel between the AGF and a core network device and corresponds to the fixed network device, and a communication network version to which the core network device belongs is a 5G communication network or a communication network higher than the 5G communication network;

a sending unit 1103, configured to send the second uplink service packet to the core network device through the tunnel.

Optionally, the first uplink service packet includes an address of the fixed network device;

the processing unit 1102 is configured to obtain, according to the address of the fixed network device, a tunnel endpoint identifier TEID of the tunnel on the apparatus 1100 side and a TEID of the tunnel on the core network device side from a second relationship table, where the second relationship table is used to store a correspondence between the address of the fixed network device, the TEID of the apparatus 1100 side, and the TEID of the core network device side;

the processing unit 1102 is further configured to add a header corresponding to the tunnel to the first uplink service packet according to the encapsulation manner corresponding to the tunnel to obtain a second uplink service packet, where the header includes the obtained TEID of the AGF side and the TEID of the core network device side.

Optionally, the processing unit 1102 is further configured to detect whether the first uplink service packet is a packet of a mobile network service according to a preset field in a packet header of the first uplink service packet, and if the first uplink service packet is a packet of a mobile network service, execute the operation of encapsulating the first uplink service packet according to a corresponding encapsulation manner of a tunnel to obtain a second uplink service packet.

Optionally, the detailed process of transmitting the uplink service packet of the fixed network device by the receiving unit 1101, the processing unit 1102 and the sending unit 1103 may refer to the operation executed by the AGF in step 411 and 414 in the embodiment shown in fig. 2.

Optionally, the receiving unit 1101 is further configured to receive a first downlink traffic message sent by the core network device to the fixed network device;

the processing unit 1102 is further configured to decapsulate the first downlink service packet according to a decapsulation mode corresponding to the tunnel to obtain a second downlink service packet;

the sending unit 1103 is further configured to send the second downlink service packet to the fixed network device.

The processing unit 1102 is configured to remove a header corresponding to the tunnel from the first downlink service packet according to a decapsulation manner corresponding to the tunnel to obtain a second downlink service packet.

The tunnel is a general packet radio service technology tunneling protocol user plane GTP-U tunnel.

Optionally, the detailed process of transmitting the downlink service packet of the fixed network device by the receiving unit 1101, the processing unit 1102 and the sending unit 1103 may refer to the operation executed by the AGF in step 415 and 419 in the embodiment shown in fig. 2.

In this embodiment of the present application, since the processing unit encapsulates the first uplink service packet according to the encapsulation manner corresponding to the tunnel to obtain the second uplink service packet, the sending unit sends the second uplink service packet to the core network device through the tunnel. Therefore, the uplink service message of the fixed network equipment can be sent to the 5G core network or the core network equipment higher than the 5G core network.

Referring to fig. 12, a communication apparatus 1200 according to an embodiment of the present application is schematically illustrated. The apparatus 1200 comprises a processor 1201, a memory 1202 and a transceiver 1203, the processor 1201 being coupled to the memory 1202 and the transceiver 1203.

The communication apparatus 1200 is a hardware structure apparatus, and can be used to implement the functional modules in the apparatus shown in fig. 5. For example, it will be appreciated by those skilled in the art that the processing unit 502 in the apparatus 500 shown in fig. 5 can be implemented by the processor 1201 calling code in the memory 1202, and the receiving unit 501 and the transmitting unit 503 in the apparatus 500 shown in fig. 5 can be implemented by the transceiver 1203.

Alternatively, the processor 1201 may be one or more Central Processing Units (CPUs), microprocessors, application-specific integrated circuits (ASICs), or one or more integrated circuits for controlling the execution of programs according to the present disclosure.

The processor 1201 is configured to execute the instructions stored in the memory 1202 to perform the processing steps described above as applied to the embodiment BNG shown in fig. 1, or to perform the steps implemented by the embodiment BNG shown in fig. 2.

The memory 1202, the processor 1201 and the transceiver 1203 are interconnected by a bus 1204; the bus 1204 may be a Peripheral Component Interconnect (PCI) bus, an Extended Industry Standard Architecture (EISA) bus, or the like. The bus may be divided into an address bus, a data bus, a control bus, etc.

In a specific embodiment, the transceiver 1203 is configured to receive a dialing message sent by a fixed network device; reference may be made specifically to the detailed description of step 201 in the embodiment shown in fig. 2.

The processor 1201 is configured to generate first authentication information of the fixed network device according to the dialing message, where the first authentication information includes an identifier of the fixed network device; reference may be made specifically to the detailed description of step 202 in the embodiment shown in fig. 2.

The transceiver 1203 is configured to send an access request message to a fixed mobile interworking function FMIF, where the access request message carries the first authentication information, and the access request message is used for the FMIF to request a core network device to authenticate the fixed network device according to the first authentication information, and a communication network version to which the core network device belongs is a 5G communication network or a communication network higher than the 5G communication network. Reference may be made specifically to the detailed description of step 203 in the embodiment shown in fig. 2.

In another embodiment, the communication device 1200 can further perform the steps performed by the BNG in the embodiment shown in fig. 2, such as steps 207, 211, 213, 220, and the like, respectively. And will not be described in detail herein.

Referring to fig. 13, a communication apparatus 1300 according to an embodiment of the present application is shown. The apparatus 1300 comprises a processor 1301, a memory 1302 and a transceiver 1303, the processor 1301 being connected to the memory 1302 and the transceiver 1303.

The communication apparatus 1300 is a hardware structure apparatus, and can be used to implement the functional modules in the apparatus described in fig. 6 or fig. 8. For example, those skilled in the art may think that the processing unit 602 in the apparatus 600 shown in fig. 6 or the processing unit 802 in the apparatus 800 shown in fig. 8 may be implemented by the processor 1301 calling codes in the memory 1302, and the receiving unit 601 and the transmitting unit 603 in the apparatus 600 shown in fig. 6 or the receiving unit 801 and the transmitting unit 803 in the apparatus 800 shown in fig. 8 may be implemented by the transceiver 1303.

Alternatively, the processor 1301 may be one or more Central Processing Units (CPUs), microprocessors, application-specific integrated circuits (ASICs), or one or more integrated circuits for controlling the execution of programs according to the present disclosure.

The processor 1301 is configured to execute the instructions in the memory 1302 to perform the processing steps described above as applied to the FMIF embodiment of fig. 1, or to perform the steps implemented by the FMIF embodiment of fig. 2.

The memory 1302, processor 1301, and transceiver 1303 are interconnected via bus 1304; the bus 1304 may be a Peripheral Component Interconnect (PCI) bus, an Extended Industry Standard Architecture (EISA) bus, or the like. The bus may be divided into an address bus, a data bus, a control bus, etc.

In a specific embodiment, the transceiver 1303 is configured to receive an access request message sent by a broadband gateway BNG, where the access request message includes first authentication information of a fixed network device, the first authentication information is generated by the BNG based on a dial-up packet sent by the fixed network device, and the first authentication information includes an identifier of the fixed network device; reference may be made specifically to the detailed description of step 203 in the embodiment shown in fig. 2.

The processor 1301 is configured to encapsulate the first authentication information according to a message format supported by a control plane interface to obtain second authentication information, where the control plane interface is an interface in the FMIF for communicating with a core network device, and a communication network version to which the core network device belongs is a 5G communication network or a communication network higher than the 5G communication network; reference may be made specifically to the detailed description of step 204 in the embodiment illustrated in fig. 2.

The transceiver 1303 is configured to send the second authentication information to the core network device through the control plane interface, where the second authentication information is used for the core network device to authenticate the fixed network device. Reference may be made specifically to the detailed description of step 205 in the embodiment illustrated in fig. 2.

In other embodiments, the communication device 1300 may further perform the steps performed by the FMIF in the embodiment shown in fig. 2, such as steps 207, 208, 214, 215, 219, 220, and so on. And will not be described in detail herein.

Referring to fig. 14, a communication apparatus 1400 according to an embodiment of the present application is schematically illustrated. The apparatus 1400 comprises a processor 1401, a memory 1402 and a transceiver 1403, the processor 1401 being connected to the memory 1402 and the transceiver 1403.

The apparatus 1400 is a hardware structure apparatus, and may be used to implement the functional modules in the apparatus described in fig. 7 or fig. 9. For example, those skilled in the art may appreciate that the processing unit 702 in the apparatus 700 shown in fig. 7 or the processing unit 902 in the apparatus 900 shown in fig. 9 may be implemented by the processor 1401 calling codes in the memory 1402, and the receiving unit 701 and the transmitting unit 703 in the apparatus 700 shown in fig. 7 or the receiving unit 901 and the transmitting unit 903 in the apparatus 900 shown in fig. 9 may be implemented by the transceiver 1403.

Alternatively, the processor 1401 may be one or more Central Processing Units (CPUs), microprocessors, application-specific integrated circuits (ASICs), or one or more integrated circuits for controlling the execution of programs according to the present disclosure.

The processor 1401 is configured to execute the instructions in the memory 1402, and perform the processing steps applied to the FMIF in the embodiment shown in fig. 1, or perform the steps implemented by the core network device in the embodiment shown in fig. 2.

The memory 1402, the processor 1401, and the transceiver 1403 are connected to each other by a bus 1404; the bus 1404 may be a Peripheral Component Interconnect (PCI) bus, an Extended Industry Standard Architecture (EISA) bus, or the like. The bus may be divided into an address bus, a data bus, a control bus, etc.

In a specific embodiment, the transceiver 1403 is configured to receive a session establishment request message from a fixed mobile interworking function FMIF, where the session establishment request message includes an identifier of a fixed network device, and a version of a communication network to which the core network device belongs is a 5G communication network or a communication network higher than the 5G communication network; reference may be made specifically to the detailed description of step 205 in the embodiment illustrated in fig. 2.

The processor 1401 is configured to allocate session information to the fixed network device according to the identifier of the fixed network device, where the session information includes an address of the fixed network device, a tunnel endpoint identifier TEID of a tunnel on the core network device side, and a tunnel parameter of the tunnel, and the tunnel is a tunnel between the FMIF and the core network device and corresponds to the fixed network device; reference may be made specifically to the detailed description of step 206 in the embodiment shown in fig. 2.

The transceiver 1403 is configured to send and send the session information to the FMIF, where the session information is used by the FMIF to establish a data plane connection between the fixed network device and the core network device. Reference may be made specifically to the detailed description of step 206 in the embodiment shown in fig. 2.

In another embodiment, the communication device 1400 may further perform the steps implemented by the core network device in the embodiment shown in fig. 2, such as steps 209, 210, 216 and 218, respectively. And will not be described in detail herein.

Referring to fig. 15, a communication apparatus 1500 according to an embodiment of the present application is shown. The apparatus 1500 includes a processor 1501, a memory 1502, and a transceiver 1503, the processor 1501 being coupled to the memory 1502 and the transceiver 1503.

The communication apparatus 1500 is a hardware configuration apparatus, and can be used to implement the functional modules in the apparatus described in fig. 10 or fig. 11. For example, those skilled in the art may appreciate that the processing unit 1002 in the apparatus 1000 shown in fig. 10 or the processing unit 1102 in the apparatus 1100 shown in fig. 11 may be implemented by the processor 1501 calling codes in the memory 1502, and the receiving unit 1001 and the transmitting unit 1003 in the apparatus 1000 shown in fig. 10 or the receiving unit 1101 and the transmitting unit 1103 in the apparatus 1100 shown in fig. 11 may be implemented by the transceiver 1503.

Alternatively, the processor 1501 may be one or more Central Processing Units (CPUs), microprocessors, application-specific integrated circuits (ASICs), or one or more integrated circuits for controlling the execution of programs according to the present application.

The processor 1501 is configured to execute the instructions in the memory 1502 to perform the processing steps applied to the AGF of the embodiment shown in fig. 3, or to perform the steps implemented by the AGF of the embodiment shown in fig. 4.

The memory 1502, processor 1501 and transceiver 1503 are interconnected by a bus 1504; the bus 1504 may be a Peripheral Component Interconnect (PCI) bus, an Extended Industry Standard Architecture (EISA) bus, or the like. The bus may be divided into an address bus, a data bus, a control bus, etc.

In a specific embodiment, the transceiver 1503 is configured to receive a dialing message sent by a fixed network device; reference may be made specifically to the detailed description of step 401 in the embodiment shown in fig. 4.

The processor 1501 is configured to generate first authentication information of the fixed network device according to the dialing message, where the first authentication information includes an identifier of the fixed network device; packaging the first authentication information to obtain second authentication information; in particular, reference may be made to the detailed description of steps 402-403 in the embodiment shown in fig. 4.

The transceiver 1503 is configured to send the second authentication information to a core network device, where the second authentication information is used for the access network device to authenticate the fixed network device, and a communication network version of the core network device is a 5G communication network or a communication network higher than the 5G communication network. Reference may be made specifically to step 404 in the embodiment illustrated in fig. 2.

In another embodiment, the communication device 1500 may further perform the steps performed by the AGF in the embodiment shown in fig. 4, such as the steps 405-. And will not be described in detail herein.

It will be understood by those skilled in the art that all or part of the steps for implementing the above embodiments may be implemented by hardware, or may be implemented by a program instructing relevant hardware, where the program may be stored in a computer-readable storage medium, and the above-mentioned storage medium may be a read-only memory, a magnetic disk or an optical disk, etc.

The above description is only exemplary of the present application and should not be taken as limiting, as any modification, equivalent replacement, or improvement made within the spirit and principle of the present application should be included in the protection scope of the present application.