搜索
異質無線網路整合、互通、漫遊及換手之基本觀念此投影片源自交通大學資工系曹孝櫟教授，唯內容已作部分調整HeterogeneousWirelessNetworkIntegration(1/4)•GenericArchitectureMulti-mode&HeterogeneousFixedMobileConvergenceWLAN/WLANmesh3G/B3GNewAir/4GBT/UWBWiMAX/WiMAXrelay…AllIPMobileTerminalRadioAccessNetworkCoreNetworkServiceNetworkHeterogeneous&overlayBroadband&IPIMS/SIPAAANetwork•IETF(InternetEngineeringTaskForce)PerspectiveMulti-mode&HeterogeneousIP-basedapplicationsWLAN/WLANmesh3G/B3GNewAir/4GBT/UWBWiMAX/WiMAXrelay…AllIP+ApplicationMobilityOrAllIP+NetworkMobilityHeterogeneousAccessNetworks(ANs)IPv4orIPv6MobilityHeterogeneousWirelessNetworkIntegration(2/4)•IEEEPerspective–IEEE802.21(Media-IndependentHandover)Spec.Multi-mode&HeterogeneousIP-basedapplicationsWLAN/WLANmesh3G/B3GNewAir/4GBT/UWBWiMAX/WiMAXrelay…AllIP+ApplicationMobilityOrAllIP+NetworkMobilityHeterogeneousANsIPv4orIPv6MobilityIEEE802.21IEEE802.21HeterogeneousWirelessNetworkIntegration(3/4)•3GPP/WiMAXPerspective3GPP/WLAN/WiMAXTerminalCSCF/…WLANANWiMAXAN3GPPANIPCore3GPP/WLAN/WiMAXAN3GPP/WiMAX&IPCoreNetworkIMS/SIP3GPPCoreWiMAXCorePDGUMAHeterogeneousWirelessNetworkIntegration(4/4)2020-01-176802.21:KeyServicesLinkLayerTriggersStateChangePredictiveNetworkInitiatedNetworkInformationAvailableNetworksNeighborMapsNetworkServicesHandoverCommandsClientInitiatedNetworkInitiatedVerticalHandovers802.21usesmultipleservicestooptimizeverticalhandovers802.21MIHFunctionProtocolandDeviceHardwareApplications(VoIP/RTP)ConnectionManagementWLANCellularWMANL2TriggersandEventsInformationServiceMobilityManagementProtocolsSmartTriggersInformationServiceHandoverMessagesHandoverManagementHandoverPolicyHandoverMessagesIEEE802.21IETF802.21Overview:UserEquipmentPLMN:PublicLandMobileNetwork(指電信網路)SimplifiedReferenceModelUEWLANAccessControlWLANsystemAPWLANAccessAuthenticationChargingMWLANAccessControlWLANsystemAPWLANAccessAuthenticationCharging.3GPPSystem3GPPSystem3GPPSystemPSDomainUENode-B/BTSHLRAccessAuthenticationChargingEncryptionMobility3GPPPSServices(e.g.IMS)PSTN1.NExternalIPNetworksWLANAccessControlWLANsystemAPWLANAccessAuthenticationCharging.CSDomainWLANAccessControlWLANsystemAPWLANAccessAuthenticationCharging2WLANAccessControlWLANsystemAPAccessAuthenticationChargingMobility1UTRAN/GERAN3GPPBillingSystem3GPPBillingSystem3GPPBillingSystemWLANUEUEWLANAccessControlWLANsystemAPWLANAccessAuthenticationChargingMWLANAccessControlWLANsystemAPWLANWLANAccessAuthenticationChargingMWLANAccessControlWLANsystemAPWLANAccessAuthenticationCharging.WLANAccessControlWLANsystemAPWLANWLANAccessAuthenticationCharging.3GPPSystem3GPPSystem3GPPSystemPSDomainUEUENode-B/BTSHLRAccessAuthenticationChargingEncryptionMobility3GPPPSServices(e.g.IMS)PSTN1.NExternalIPNetworksWLANAccessControlWLANsystemAPWLANAccessAuthenticationCharging.WLANAccessControlWLANsystemAPWLANWLANAccessAuthenticationCharging.CSDomainWLANAccessControlWLANsystemAPWLANAccessAuthenticationCharging2WLANAccessControlWLANAPWLANWLANAccessAuthenticationCharging2WLANAccessControlWLANAPAccessAuthenticationChargingMobility1UTRAN/GERAN3GPPBillingSystem3GPPBillingSystem3GPPBillingSystem3GPPBillingSystem3GPPBillingSystem3GPPBillingSystemNetworkPS:PacketSwitchingCS:CircuitSwitchingUTRAN:UMTSTerrestrialRadioAccessNetworkGERAN:GSM/EDGERadioAccessNetworkEDGE:EnhancedData-ratesforGSMHLR:HomeLocationRegisterPSTN:PublicSwitchedTelephoneNetwork.The'phonesystem'名詞釋意•AAA=Authentication,Authorization,Accounting•Authentication–Recognizetheuser–Whoareyou?(showproof)•Authorization–Enforceaccesscontrolanddeliverservices–Whatcanyouaccess?•Accounting–Trackuser’susageofnetworkresources–Howlong/muchdatahaveyouaccessed?–ForbillingpurposeAAARoamingAccessprotocolflowAAALNAS(attendant)AAAHjklmnoHomedomainAAAprotocolflowSA1SA2SA3Securityassociation(SA)Identity&credentials•GenericmodelAAAL:LocalAAAAAAH:HomeAAAAAARoaming—名詞釋意•NetworkAccessServer(NAS)–Asinglepointofaccesstoaremoteresource–Actasagatewaytoguardaccesstoaprotectedresource.Thiscanbeanythingfromatelephonenetwork,toprinters,totheInternet–TheclientconnectstotheNAS.TheNASthenconnectstoanotherresourceaskingwhethertheclient'ssuppliedcredentialsarevalid.BasedonthatanswertheNASthenallowsordisallowsaccesstotheprotectedresource.–TheNAScontainsnoinformationaboutwhatclientscanconnectorwhatcredentialsarevalid.AlltheNASdoesissendthecredentialstheclientsuppliedtoaresourcewhichdoesknowhowtoprocessthecredentials.AAARoaming—名詞釋意•NetworkAccessIdentifier(NAI)–Astandardwayofidentifyinguserswhorequestaccesstoanetwork–Standardsyntaxis“user@realm”(類似e-mail地址格式)•Securityassociation(SA)–Establishmentofsharedsecurityinformationbetweentwonetworkentitiestosupportsecurecommunication–AnSAmayincludecryptographickeys,initializationvectorsordigitalcertificates.–AnSAisaone-waychannelandlogicalconnectionwhichendorsesandprovidesasecuredataconnectionbetweenthenetworkdevices.實現AAA的通訊協定•實現AAA的通訊協定主要有二種–RADIUS:RemoteAuthenticationDial-InUserService–Diameter•RADIUS–RFCs(IETFRequestforComments)2865,2866•Diameter–RFC3588–Applications:RFCs4004,4005,4072,400