Communication System, Mobile Terminal and Authentication Server
A technique that employs, for the purpose, the allocation of the optimal home agent (HA) for a mobile terminal (MN) that has moved between domain networks is disclosed. According to this technique, when a MN 10 has performed a handover between domain networks (e.g., a handover from an external domain network 23 to an external domain network 33 ), an authentication server (AAAh server 400 ) present in a home domain network 43 of the MN transmits a request to a plurality of authentication servers that have a roaming relationship for measuring a HA selection condition transmitted by a MN 10 , and selects the optimal HA based on the obtained HA selection condition information (the measurement results for the HA selection condition). Further, a HA that is most suitable for a condition can also be selected by referring to a roaming condition relative to each authentication server.
1 . A communication system, which, when a mobile terminal is moved among a plurality of domain networks that are connected by an IP network and that provide a service for securing mobility for the mobile terminal, authenticates the mobile terminal and dynamically allocates, for the mobile terminal, a moving destination management server for managing a moving destination, comprising:
first authentication means, belonging to a first domain network included in the plurality of domain networks and having a mobile terminal authentication function;
second authentication means, belonging to a second domain network, which is included in the plurality of domain networks and which is a home network for the mobile terminal, and having a mobile terminal authentication function; and
third authentication means, belonging to a third domain network, for which a roaming relationship is established with the second domain network, and having a mobile terminal authentication function,
wherein, when the mobile terminal is moved from an arbitrary domain network to the first domain network, the second authentication means receives an authentication request message from the mobile terminal through the authentication means, performs an authentication for the mobile terminal, transmits a moving destination management server allocation request message to the third authentication means, employs information, which is based on the moving destination management server allocation request message, for enabling/disabling allocation for the mobile terminal of a moving destination management server that belongs to the third domain network, and selects a moving destination management server, to be allocated for the mobile terminal.
2 . The communication system according to claim 1 , wherein the second authentication means transmits to the third authentication means the moving destination management server allocation request message, including a moving destination management server selection condition determined by the second authentication means.
3 . The communication system according to claim 1 , wherein the second authentication means transmits to the third authentication means the moving destination management server allocation request message, including a moving destination management server selection condition determined by the first authentication means.
4 . The communication system according to claim 1 , wherein the second authentication means transmits to the third authentication means the moving destination management server allocation request message, including a moving destination management server selection condition that is received from the mobile terminal through the first authentication means.
5 . The communication system according to claim 4 , wherein the moving destination management server selection condition received by the second authentication means is provided for the authentication request message transmitted by the mobile terminal.
6 . The communication system according to claim 1 , wherein the second authentication means transmits to the third authentication means the moving destination management server allocation request message, including a plurality of selection conditions, chosen from among moving destination management server selection conditions determined by the second authentication means, a moving destination management server selection condition determined by the first authentication means, and a moving destination management server selection condition received from the mobile terminal through the first authentication means.
7 . The communication system according to claim 1 , wherein the second authentication means selects a moving destination management server, to be allocated to the mobile terminal, by employing the allocation enabling/disabling information and roaming information related to the plurality of domain networks.
8 . The communication system according to claim 1 , wherein the second authentication means transmits to the third authentication means the moving destination management server allocation request message, including a moving destination management server selection condition; and
wherein the third authentication means obtains selection condition information related to the moving destination management server selection conditions for the third domain network, and transmits the selection condition information as the allocation enabling/disabling information to the second authentication means.
9 . A mobile terminal, which is capable of moving among a plurality of domain networks connected by an IP network and which is capable of being connected to a communication system that includes: first authentication means, belonging to a first domain network included in the plurality of domain networks and having a mobile terminal authentication function; second authentication means, belonging to a second domain network that is included in the plurality of domain networks and is a home network for the mobile terminal, and having a mobile terminal authentication function; and third authentication means, belonging to a third domain network, for which a roaming relationship is established with the second domain network, and having a mobile terminal authentication function, and to which a moving destination management server that manages a moving destination is to be dynamically allocated, comprising:
message transmission means, for transmitting, when the mobile terminal is moved from an arbitrary domain to the first domain network, an authentication request message through the first authentication means to the second authentication means; and
information acquisition means for obtaining, from the second authentication means through the first authentication means, information for the moving destination management server allocated by the second authentication means.
10 . The mobile terminal according to claim 9 , further comprising:
selection condition provision means, for providing a moving destination management server selection condition for the authentication request message.
11 . An authentication server, which is included in a communication system that, when a mobile terminal is moved between a plurality of domain networks that are connected by an IP network and that provide a service for obtaining mobility for the mobile terminal, authenticates the mobile terminal and dynamically allocates to the mobile terminal a moving destination management server for managing a moving destination, comprising:
authentication request message reception means, for receiving an authentication request message from the mobile terminal;
authentication means, for employing the authentication request message to authenticate the mobile terminal;
allocation request message transmission means for transmitting, after authentication by the authentication means is completed, a moving destination management server allocation request message to a different authentication server;
allocation enabling/disabling information reception means, for receiving, from the different authentication server, allocation enabling/disabling information about the moving destination management server relative to the mobile terminal;
moving destination management server selection means, for employing the allocation enabling/disabling information to select the moving destination management server to be allocated to the mobile terminal; and
moving destination management server notification means, for notifying the mobile terminal of the selected moving destination management server.
12 . The authentication server according to claim 11 , further comprising:
selection condition provision means, for providing a moving destination management server selection condition for the moving destination management server allocation request message.
13 . The authentication server according to claim 12 , further comprising:
selection condition determination means, for determining the moving destination management server selection condition and for notifying the selection condition provision means of the moving destination management server selection condition.
14 . The authentication server according to claim 13 , wherein the moving destination management server selection condition is included in the authentication request message.
15 . The authentication server according to claim 13 , further comprising:
selection condition generation means, for voluntarily generating the moving destination management server selection condition.
16 . The authentication server according to claim 13 , wherein the selection condition determination means determines the moving destination management server selection condition, employing both a first moving destination management server selection condition, included in the authentication request message, and a second moving destination management server selection condition, voluntarily generated by the selection condition generation means.
17 . The authentication server according to claim 11 , wherein the moving destination management server selection means selects the moving destination management server to be allocated to the mobile terminal, using the allocation enabling/disabling information and roaming information related to the plurality of domain networks.