Multipath establishment method and apparatus

Patent metadata

Field	Value
Publication number	US-2020367306-A1
Application number	US-202016983708-A
Country	US
Kind code	A1
Filing date	Aug 3, 2020
Priority date	Feb 6, 2018
Publication date	Nov 19, 2020
Grant date	—

Abstract

A multipath establishment method and apparatus which relate to the field of communications technologies. The method includes: performing identity authentication on a terminal that accesses a first network via a first network access device, where the first network implements communication by using a base station; performing an admission check on the terminal that accesses a second network via a second network access device; and after both the identity authentication and the admission check of the terminal succeed, establishing a first path between the terminal and a service server via the first network, and establishing a second path between the terminal and the service server via the second network, where the first path and the second path are used to perform data transmission between the terminal and the service server.

First claim

1 . A method, applied to a proxy device, wherein the method comprises:
performing identity authentication on a terminal that accesses a first network via a first network access device, wherein the first network implements communication by using a base station; performing an admission check on the terminal that accesses a second network via a second network access device; and after both the identity authentication and the admission check of the terminal succeed, establishing a first path between the terminal and a service server via the first network, and establishing a second, path between the terminal and the service server via the second network, wherein the first path and the second path are used to perform data transmission between the terminal and the service server.

2 . The method according to claim 1 , wherein the performing identity authentication on the terminal that accesses the first network via the first network access device comprises:
receiving an identity authentication request that carries a first network address and that is sent by the first network access device, wherein the first network address is allocated by the first network access device to, the terminal; and performing identity authentication on the terminal based on the first network address, to obtain an identity authentication result of the terminal.

3 . The method according to claim 1 , wherein the performing the admission check on the terminal that accesses the second network via the second network access device comprises:
receiving a first admission check request that carries a physical address of the terminal and that is sent by the second network access device; sending a login status query request carrying the physical address to an authentication server, so that the authentication server queries a login status of the physical address; receiving the login status that is of the physical address and that is sent by the authentication server; and determining an admission check result of the terminal based on the login status of the physical address.

4 . The method according to claim 3 , wherein after the establishing the first path between the terminal and the service server via the first network, and establishing the second path between the terminal and the service server via the second network, the method further comprises:
if detected that no data is transmitted on the second path within a preset duration, sending the login status query request carrying the physical address to the authentication server, so that the authentication server queries the login status of the physical address; receiving the login status that is of the physical address and that is sent by the authentication server; and deleting the second path if the login status of the physical address is an offline state.

5 . The method according to claim 1 , wherein the performing the admission check on the terminal that accesses the second network via the second network access device comprises:
receiving a second admission check request that carries a second network address and that is sent by the second network access device, wherein the second network address is a network address allocated by the second network access device to the terminal; and determining an admission check result of the terminal based on the second network address and a preset admission address range.

6 . The method according to claim 1 , wherein the establishing the first path between the terminal and the service server via the first network, and establishing the second path between the terminal and the service server via the second network comprises:
receiving a network address of the service server that is sent by the terminal; determining a stored service whitelist comprises the network address of the service server; and establishing the first path between the terminal and the service server via the first network, and establishing the second path between the terminal and the service server via the second network.

7 . The method according to claim 1 , wherein the establishing the first path between the terminal and the service server via the first network, and establishing the second path between the terminal and the service server via the second network comprises:
receiving a network address of the service server that is sent by the terminal; and determining a stored service blacklist does not comprise the network address of the service server; and establishing the first path between the terminal and the service server via the first network, and establishing the second path between the terminal and the service server via the second network.

8 . The method according to claim 1 , wherein the first network is a long term evolution (LTE) network, and the second network is a digital subscriber line DSL network or a wireless fidelity (Wi-Fi) network.

9 . A method, applied to a terminal, wherein the method comprises:
after a first network is accessed via a first network access device, performing identity authentication by using a proxy device, wherein the first network implements communication by using a base station; after a second network is accessed via a second network access device, performing an admission check by using the proxy device; after both the identity authentication and the admission check succeed; establishing a first path to a service server via the first network, and establishing a second path to the service server via the second network, wherein a service whitelist or a service blacklist is obtained from the proxy device; and performing data transmission with the service server by using the first path and the second path.

10 . A multipath establishment apparatus, comprising:
a processor; a memory storing a program and coupled with the processor, the processor is configured to execute the program stored in the memory and the multipath establishment apparatus is caused to: perform identity authentication on a terminal that accesses a first network via a first network access device, wherein the first network implements communication by using a base station; perform an admission check on the terminal that accesses a second network via a second network access device; and after both the identity authentication and the admission check of the terminal succeed, establish a first path between the terminal and a service server via the first network, and establish a second path between the terminal and the service server via the second network, wherein the first path and the second path are used to perform data transmission between the terminal and the service server.

11 . The apparatus according to claim 10 , wherein the performing identity authentication on the terminal that accesses the first network via the first network access device comprises:
receiving an identity authentication request that carries a first network address and that is sent by the first network access device, wherein the first network address is a network address allocated by the first network access device to the terminal; and performing identity authentication on the terminal based on the first network address, to obtain an identity authentication result of the terminal.

12 . The apparatus according to claim 10 , wherein the performing the admission check on the terminal that accesses the second network via the second network access device comprises:
receiving a first admission check request that carries a physical address of the terminal and that is sent by the second network access device; sending a login status query request carrying the physical address to an authentication server, so that the authentication server queries a lo

Assignees

• Huawei Tech Co Ltd

Inventors

• Wang Shujun

Classifications

• H04W12/06

  Authentication · CPC title

• H04L63/101

  Access control lists [ACL] · CPC title

• H04W76/38

  triggered by timers · CPC title

• H04W76/16 Primary

  Involving different core network technologies, e.g. a packet-switched [PS] bearer in combination with a circuit-switched [CS] bearer · CPC title

• H04L63/0884 Primary

  by delegation of authentication, e.g. a proxy authenticates an entity to be authenticated on behalf of this entity vis-à-vis an authentication entity · CPC title