Abstract: Embodiments of the present invention provide a method, device and system for carrying out a service in a network. The control apparatus comprises: an orchestrator unit, configured to receive a service request for requesting to carry out a service, wherein the service request comprises service deployment information for requesting to deploy a first service, service flow identification information for identifying a first packet flow and service flow steering information; and a control unit, configured to send the service deployment information to a computing apparatus, and send the service flow identification information and the service flow steering information to an identifying and steering apparatus. Technical solutions of the present invention provide a new service mode, which can meet developing needs of OTT applications.

Abstract: Embodiments of the present invention provide a method, device and system for carrying out a service in a network. The control apparatus comprises: an orchestrator unit, configured to receive a service request for requesting to carry out a service, wherein the service request comprises service deployment information for requesting to deploy a first service, service flow identification information for identifying a first packet flow and service flow steering information; and a control unit, configured to send the service deployment information to a computing apparatus, and send the service flow identification information and the service flow steering information to an identifying and steering apparatus. Technical solutions of the present invention provide a new service mode, which can meet developing needs of OTT applications.

Abstract: The present invention discloses a method, a system and an apparatus for reserving network resources. The network resource reservation method includes: directly receiving, from a mobility management control function (MMCF), a request for resource reservation on a target transport path; controlling a transport function to reserve network resources on the target transport path according to the resource reservation request; and returning a result of the network resource reservation to the MMCF. The technical solution of the present invention enables advance resource reservation on a target transport path before a network handover occurs, when a user is moving.

Abstract: A method, a device and a system for combination of resource admission control are provided. The system includes the policy determination combination device and multiple bearer and transmission devices. The combination device combines functions and interfaces of two or multiple kinds of arbitrary policy determination devices in systems of different standards, and has multiple interfaces to be connected with the bearer and transmission devices, and selects the corresponding interface working protocol according to the type of bearer and transmission device. Multiple bearer and transmission devices are connected with the policy determination combination device by different interfaces. By setting policy determination combination device, the combination of policy determination devices is realized with a few changes to the current network.

Abstract: A method for assigning network addresses is provided. When a mobile node (MN) moves to an access domain (AN) of a visited network, the method, in the visited network, includes: receiving a network access request sent by the MN; determining a home network of the MN according to user information of the MN, and sending an authentication request to the home network for authenticating the MN; receiving an authentication response returned by the home network, where the authentication response includes a local home of address (L-HoA) for identifying the AN where the MN is currently located; and assigning a local care of address (L-CoA) to the MN, where the L-CoA identifies position information of the MN in the current AN. Correspondingly, a network and a network node are provided. Thus, technical solutions can implement address assignment when the MN moves.

Abstract: The present invention relates to mobile communications technologies, and discloses a method, device, and system for pre-authentication. A pre-authentication device receives a pre-authentication message that carries a pre-authentication option; determines a Mobile Node (MN) to be pre-authenticated according to the pre-authentication message; sends an authentication request message to an Authentication, Authorization and Accounting (AAA) server to request authentication of the MN; receives an authentication response message that is sent by the AAA server, where the authentication response message carries a pre-authentication key used between a Candidate Authenticator (CA) and the MN; and sends the pre-authentication key to the MN. Through implementation of the present invention, the pre-authentication key is obtained before the MN switches to the CA. In this way, security of communication is enhanced, and delay of switching and authentication is shortened.

Abstract: In the field of communication technologies, a route optimization method and system are provided, so as to improve the data transfer efficiency between a Mobile Node (MN) and a Corresponding Node (CN). The method includes: acquiring location information of a current access device of the CN, by a current anchor device of the MN (S201); and establishing a transmission tunnel between a current access device of the MN and the current access device of the CN (S202).

Abstract: The present invention relates to mobile communications technologies, and discloses a method, device, and system for pre-authentication. A pre-authentication device receives a pre-authentication message that carries a pre-authentication option; determines a Mobile Node (MN) to be pre-authenticated according to the pre-authentication message; sends an authentication request message to an Authentication, Authorization and Accounting (AAA) server to request authentication of the MN; receives an authentication response message that is sent by the AAA server, where the authentication response message carries a pre-authentication key used between a Candidate Authenticator (CA) and the MN; and sends the pre-authentication key to the MN. Through implementation of the present invention, the pre-authentication key is obtained before the MN switches to the CA. In this way, security of communication is enhanced, and delay of switching and authentication is shortened.

Abstract: A method, system, and Mobile Access Gateway (MAG) for local routing optimization are provided. After receiving a packet sent from a Mobile Node (MN) to a Correspondent Node (CN), an MAG queries for a binding update entry corresponding to the MN. When an MAG local routing flag is set in the binding update entry, the packet is sent to the CN; and when a Local Mobile Anchor (LMA) local routing flag is set in the binding update entry, the packet is sent to an MAG of the CN. With the present invention, the delay in sending the packet from an MN to a CN is shortened, the communication efficiency is increased and the user experience is improved.

Abstract: The present invention discloses a method, a system and an apparatus for reserving network resources. The network resource reservation method includes: directly receiving, from a mobility management control function (MMCF), a request for resource reservation on a target transport path; controlling a transport function to reserve network resources on the target transport path according to the resource reservation request; and returning a result of the network resource reservation to the MMCF. The technical solution of the present invention enables advance resource reservation on a target transport path before a network handover occurs, when a user is moving.

Abstract: In the field of communication technologies, a route optimization method and system are provided, so as to improve the data transfer efficiency between a Mobile Node (MN) and a Corresponding Node (CN). The method includes: acquiring location information of a current access device of the CN, by a current anchor device of the MN (S201); and establishing a transmission tunnel between a current access device of the MN and the current access device of the CN (S202).

Abstract: A method, a device, a system and a server for network authentication are provided. The method includes: receiving a user authentication request forwarded by a second Access Management Functional Entity (AM-FE) when a user is attached to the second AM-FE from a first AM-FE; obtaining an authentication key of a security domain of the second AM-FE according to the user authentication request; and authenticating the user by using the authentication key. The following problems are solved: packets of user services are lost and even services are temporarily interrupted because of long time consumption and poor security during intra-domain or inter-domain handover of the user. Therefore, the safe authentication of the user's intra-domain or inter-domain roaming is achieved, and thus the security and reliability of user authentication are improved.

Abstract: A method for assigning network addresses is provided. When a mobile node (MN) moves to an access domain (AN) of a visited network, the method, in the visited network, includes: receiving a network access request sent by the MN; determining a home network of the MN according to user information of the MN, and sending an authentication request to the home network for authenticating the MN; receiving an authentication response returned by the home network, where the authentication response includes a local home of address (L-HoA) for identifying the AN where the MN is currently located; and assigning a local care of address (L-CoA) to the MN, where the L-CoA identifies position information of the MN in the current AN. Correspondingly, a network and a network node are provided. Thus, technical solutions can implement address assignment when the MN moves.

Abstract: A method, a device and a system for combination of resource admission control are provided. The system includes the policy determination combination device and multiple bearer and transmission devices. The combination device combines functions and interfaces of two or multiple kinds of arbitrary policy determination devices in systems of different standards, and has multiple interfaces to be connected with the bearer and transmission devices, and selects the corresponding interface working protocol according to the type of bearer and transmission device. Multiple bearer and transmission devices are connected with the policy determination combination device by different interfaces. By setting policy determination combination device, the combination of policy determination devices is realized with a few changes to the current network.

Abstract: A method for authentication based on NASS is disclosed. UAAF authenticates the accessing of CNG. UAAF produces the management authentication credential between CNG and CNGCF, and sends the management authentication credential to CNGCF. CNG obtains the management authentication credential. CNG authenticates CNGCF by the obtained management authentication credential and CNGCF authenticates CNG by the management authentication credential. A system for authentication based on NASS is also disclosed. The authentication credential can be automatically produced, distributed and modified. And the operation cost is reduced and the operation efficiency is enhanced.