CN103123731B - The electricity-selling system that flows is carried out based on 3G communications wireless network - Google Patents

Abstract

The invention relates to the fields of communication technology and information technology, in particular to a system for mobile electricity selling based on a 3G communication wireless network. A mobile electricity selling system based on 3G communication wireless network. Mobile electricity selling terminals (laptops and small printers) carry out information transmission and information exchange with the main station network information equipment of Xintong Company through the 3G wireless network of the telecommunications company. It can quickly establish a remote communication link with the marketing business system of the provincial company headquarters anytime, anywhere, and transmit various information such as marketing business data. At the same time, it solves the problem of inconvenient and difficult payment of traditional Taiwan collection or bank collection and payment. Using this system, only a notebook computer and a small printer can be used to realize card meter electricity sales, payment, invoice printing and business acceptance. And other functions, with small size, light weight, easy to carry, easy to use and so on. Improve the flexibility, reliability and convenience of electric power sales electricity payment.

Description

Mobile electricity sales system based on 3G communication wireless network

technical field

The present invention relates to the field of communication technology, in particular to a system for mobile electricity sales based on a 3G communication wireless network.

Background technique

Under the traditional method of Qinghai Electric Power, the majority of users pay electricity bills, basically through bank collection and electric power business halls. However, due to the relatively small amount of electricity bill payment, banks are not very active in paying electricity bills; the number of power business halls is relatively small, and the business pressure is high, which will inevitably cause difficulties in paying electricity bills for the majority of users. In addition, Qinghai has a vast territory, sparsely populated, and the distribution is extremely uneven. In the vast pastoral areas, herdsmen often have to run dozens or even hundreds of kilometers to pay the electricity bill, which is extremely inconvenient and greatly affects the service brand and reputation of the power company. service quality. However, there is no record of the mobile electricity sales system based on the 3G communication wireless network that is dedicated to the characteristics of the Qinghai-Tibet Plateau region.

Contents of the invention

The technical problem to be solved by the present invention is to provide a mobile electricity selling system dedicated to the areas where the wired information network cannot reach and the 3G communication wireless network can cover.

The present invention is a system for mobile electricity sales based on 3G communication wireless network, which is realized through the following technical solutions: A method for mobile electricity sales based on 3G communication wireless network includes mobile electricity sales terminals, telecom 3G wireless access routers, 3G wireless base stations, LAC switching routers, LAC AAA security authentication servers on the telecom side, IP private networks, LNS aggregation switches, LNS AAA security authentication servers, telecom-side border routers, power-side border routers, power-side firewalls, wireless power sales application servers and The database server, the mobile electricity sales terminal module is connected with the 3G wireless access router module, and then uses IPSEC security encryption technology to connect with the network of the telecom operation and maintenance provider. The telecom operation and maintenance provider network mainly includes 3G wireless base stations connected to the LAC switch router and After passing the security authentication of the LAC AAA security authentication server, and then connecting to the LNS aggregation switch through the telecom IP private network. After passing the security authentication of the LNS AAA security authentication server, it reaches the border router on the telecom side and connects to the border router on the power side, and the border router on the power side connects to the firewall on the power side , the power side firewall is connected to the wireless power sales application server and the database server respectively to complete the power sales data transmission.

Compared with the prior art, a system for mobile electricity sales based on a 3G communication wireless network of the present invention has the following beneficial effects: 1. A system for mobile electricity sales based on a 3G communication wireless network of the present invention passes through the 3G wireless network of a telecommunications company Carry out information transmission and information exchange with the main station network information equipment of Xintong Company. It can quickly establish a remote communication link with the marketing business system of the provincial company headquarters anytime, anywhere, and transmit various information such as marketing business data.

2. The purpose of this invention is a system for mobile electricity sales based on 3G communication wireless network to solve the problem of inconvenient and difficult payment of traditional Taiwan collection or bank collection and payment. To use this system, only a notebook computer and a A small printer can realize the functions of card meter electricity sales, payment, invoice printing, and business acceptance. It has the characteristics of small size, light weight, easy to carry, and convenient to use. Improve the flexibility, reliability and convenience of power marketing.

3. The present invention is based on a 3G communication wireless network for mobile electricity sales. The system is connected to the enterprise intranet through a wireless channel. Therefore, the design must first ensure access security and not allow any impact on the security of the enterprise intranet. This time we The 3G VPDN private network of China Telecom was rented for research and testing. In terms of security, access authentication and end-to-end The security principles of privacy, end-to-end security encryption, and firewall technology are adopted on the power company side. Ensure the safe transmission of power marketing data.

Description of drawings

Figure 1 is a schematic diagram of the connection state of a system for mobile electricity sales based on the 3G communication wireless network of the present invention; wherein: 1. Mobile electricity sales terminal; 2. Telecom 3G wireless access router; 3. 3G wireless base station; 4. LAC Switch router; 5. Telecom side LAC AAA security authentication server; 6. IP private network; 7. LNS aggregation switch; 8. LNS AAA security authentication server; 9. Telecom side border router; 10. Power side border router; side firewall, 12, wireless power sales application server ; 13 database server.

detailed description

The following will further describe the technical scheme of a mobile electricity selling system based on a 3G communication wireless network of the present invention in conjunction with the accompanying drawings and embodiments.

As shown in Figure 1, a system for mobile electricity sales based on a 3G communication wireless network in the present invention includes a mobile electricity sales terminal 1, a telecom 3G wireless access router 2, a 3G wireless base station 3, a LAC switching router 4, and a telecom side LAC AAA Security authentication server 5, IP private network 6, LNS aggregation switch 7, LNS AAA security authentication server 8, telecommunications side border router 9, power side border router 10, power side firewall 11, wireless power vending application server 12 and database server 13, The mobile electricity vending terminal 1 module is connected to the 3G wireless access router 2 module, and then IPSEC security encryption technology is used to connect to the network of the telecom operation and maintenance provider. The telecom operation and maintenance provider network mainly includes 3G wireless base stations 3 connected to LAC switching routers 4 And pass the security authentication of LAC AAA security authentication server 5, and then connect to the LNS aggregation switch 7 through the telecom IP private network 6. After passing the security authentication of LNS AAA security authentication server 8, it reaches the border router 9 on the telecom side and connects to the border router 10 on the power side. The border router 10 is connected to the power side firewall 11, and the power side firewall 11 is respectively connected to the wireless power sales application server 12 and the database server 13 to complete power sales data transmission.

The mobile power selling terminal 1 is connected to the internal network of the electric power company through the telecommunications wireless network.

The system uses IPSEC to realize end-to-end encryption.

Example 1.

3G is the third generation mobile communication technology, which refers to the cellular mobile communication technology that supports high-speed data transmission. 3G service can transmit voice and data information at the same time. The main difference from 2G is the increase in the speed of transmission of voice and data. The rate is generally above several hundred kbps. There are currently four 3G standards: CDMA2000, WCDMA, TD-SCDMA, and WiMAX.

VPDN is Virtual Private Dial-up Networks in English, also known as virtual private dial-up network. The specific implementation of VPDN is to use tunnel technology, that is, the data of the enterprise network is encapsulated in the tunnel for transmission. Through VPDN, users can realize the remote management of branches from the headquarters, remote monitoring, business applications and other data transmission requirements, saving users' time and effort. The cost of communication improves the efficiency of enterprise management and operation, and also provides a good guarantee for the expansion of customer business. The branch enterprise uses the VPDN special account to dial into the enterprise headquarters to upload local data to the data center of the enterprise headquarters, realize information sharing, interaction and processing of related business applications.

With the continuous popularization of 3G network services, operators have launched 3G VPDN services in response to the needs of enterprise users for "3G mobile private networks", namely: virtual private dial-up network services based on 3G wireless access methods, which use L2TP tunnels By using a transmission protocol, a virtual private channel free from external interference can be built on the existing dial-up network, so as to access corporate intranet resources in a way similar to using a wired private network.

From the above analysis, we can use the technology based on 3G VPDN private network to design mobile electricity sales system. The use of this technology firstly reduces the cost of manpower and equipment, because ISP can be used to provide a ready-made network platform, which greatly reduces the investment in manpower and equipment; secondly, it improves the business processing speed, and 3G network has higher The 3G VPDN system can also promote the improvement of management information services, the power supply bureau can use this system to improve the payment process, and improve the service brand and service level from the perspective of user convenience; 3G network has the ability to access anytime, anywhere It only needs a laptop + 3G wireless network card to conduct mobile electricity sales and improve the work efficiency of power supply marketers.

1. System networking description: This system adopts the B/S structure, and the mobile electricity sales terminal equipment adopts "wireless network card + notebook + printer". The account dials into a dedicated authentication server to obtain authentication. After the security authentication is passed, it can access the VPDN server to obtain the professional address of Qinghai marketing business system, and obtain the authority to access the corporate network (if the account has not passed the authentication, it will not have the function of networking).

We also installed routers and firewalls on the power side, and made a security policy on the firewall to allow only designated ports to access the wireless power sales front-end processor in the DMZ area. After receiving the instruction, the wireless power sales front-end The database interacts with the data and feeds the data back to the mobile electricity vending terminal.

2. System security solutions Since the Qinghai Electric Power wireless payment system is connected to the enterprise intranet through a wireless channel, the design must first ensure access security and not allow any impact on the security of the enterprise intranet. Therefore, the solution to the system security problem is 3G wireless The key to the application of network mobile electricity sales system.

This time we rented China Telecom's 3G VPDN private network for research and testing. In terms of security, we mainly use proprietary APN + binding access authentication, L2TP private tunnel, and IPSEC security encryption technology to realize access authentication, The security principle of end-to-end privacy and end-to-end security encryption, the specific deployment plan is as follows: Proprietary APN+ binding access authentication When deploying 3G wireless access at mobile terminal outlets, the private network APN (Access Point Name) assigned by the operator is firstly assigned. The terminal outlets are accessed by 3G routers, and the operator will store the IMSI information of the outlet users (IMSI is a number that uniquely identifies a mobile user in the operator's network, consisting of 15 digits, and stored in the SIM card), the terminal user's account number and The password is configured on the carrier authentication server in advance. When the 3G router at the outlet initiates a wireless connection, only users with legal binding information are allowed to access the 3G private network after passing the AAA authentication of the user name and password to prevent illegal SIM card users from dialing into the user's 3G private network.

In addition, the PIN code protection function of the SIM card can be further set through the 3G router. Only knowing the PIN code of the SIM card can trigger 3G dialing, preventing illegal users from illegal operations after obtaining the user’s SIM card, and ensuring the safety of the SIM card.

● L2TP + IPSEC VPN private tunnel

In order to ensure the privacy of the data services of 3G access points transmitted in the operator's IP core network, we apply to the operator for the 3G VPDN service of enterprise group users, and build a virtual network on the existing dial-up network that is not protected from the outside world. Dedicated channel for interference, so as to securely access corporate intranet resources.

Operators will provide L2TP LAC end routers and supporting AAA (Authentication verification, Authorization authorization, Accounting accounting) servers. We use a router as the LNS end of L2TP at the aggregation layer of the enterprise's primary network or secondary network, and deploy an AAA server. The LAC router is mainly responsible for the access authentication of the 3G user, and establishes an L2TP tunnel with the private LNS of the enterprise to which the user belongs. The AAA server converged on the primary network or secondary network of the enterprise mainly stores the user name and password required when the network router establishes a connection. The format of the user name is XX@XX.COM, where the string in front of @ can be defined by the client, and the string behind @ is the domain name. The carrier's AAA server confirms the user's access rights through the domain name. The user name and password of the carrier AAA server and enterprise AAA server must be the same.

For the principle of end-to-end security encryption, as mentioned above, 3G technology has its own encryption verification technology, but 3G encryption verification technology is only for the wireless part, and in the IP core network part, the L2TP tunnel from LAC to LNS is Without encryption, the data is still transmitted in clear text. From the LAC to the network, the operator's IP network will also pass through. In order to achieve end-to-end encrypted transmission, IPSEC needs to be used between the point of sale and the power headquarters router to achieve end-to-end encryption.

Claims (3)

1. A mobile electricity selling system based on 3G communication wireless network, including mobile electricity selling terminal (1), telecom 3G wireless access router (2), 3G wireless base station (3), LAC switching router (4), telecom Side LAC AAA security authentication server (5), IP private network (6), LNS aggregation switch (7), LNS AAA security authentication server (8), telecommunications side border router (9), power side border router (10), power side firewall (11), wireless electricity vending application server (12), and database server (13), characterized in that: the mobile electricity vending terminal (1) module is connected to the 3G wireless access router (2) module, and then adopts IPSEC security encryption technology is connected to the network of the telecom operation and maintenance provider. The network of the telecom operation and maintenance provider mainly includes 3G wireless base stations (3) connected to the LAC switch router (4) and passed the security authentication of the LAC AAA security authentication server (5), and then passed the telecom IP The private network (6) is connected to the LNS aggregation switch (7) and after passing the security authentication of the LNS AAA security authentication server (8), it reaches the telecom side border router (9) and connects with the power side border router (10), and the power side border router (10) It is connected with the power side firewall (11), and the power side firewall (11) is respectively connected with the wireless power sales application server (12) and the database server (13) to complete the power sales data transmission. 2. The system for mobile electricity sales based on 3G communication wireless network according to claim 1, characterized in that: the mobile electricity sales terminal (1) is connected to the internal network of the power company through the telecommunications wireless network. 3. The system for mobile electricity sales based on 3G communication wireless network according to claim 1, characterized in that: the system adopts IPSEC to realize end-to-end encryption.