CN102056266A

CN102056266A - Method and system for access control of machine type communication (MTC) terminal

Info

Publication number: CN102056266A
Application number: CN2009102212598A
Authority: CN
Inventors: 李志军; 王志海; 施晓峰; 谢宝国
Original assignee: ZTE Corp
Current assignee: ZTE Corp
Priority date: 2009-11-06
Filing date: 2009-11-06
Publication date: 2011-05-11
Anticipated expiration: 2029-11-06
Also published as: CN102056266B; WO2011054300A1

Abstract

The invention discloses a method and system for access control of a machine type communication (MTC) terminal. In the access control method, firstly, a mobility management network element (MMNE) reports MTC terminal information currently requesting to be adhered to a network or currently adhered to the network to an access control network element (NE); the access control NE judges that the MTC terminal is not allowed to access in accordance with the MTC terminal information, and then sends an instruction of refusing the MTC terminal to access to the MMNE; and the MMNE receives the instruction, and refuses the MTC terminal to access to the network in accordance with the instruction. According to the access control method, only the MTC Server which is allowed to access to the network can access to a core network, and an illegal MTC Server is refused to access to the core network, thus ensuring the safety of the core network.

Description

The connection control method of MTC terminal and system

Technical field

The present invention relates to the communications field, in particular to a kind of connection control method and system of machine class communicating terminal.

Background technology

In traditional mobile network's service, Human To Human's (Human To Human abbreviates H2H as) communication has occupied main position.In the H2H communication, because the both sides that participate in are the people with behavior control ability, so in fact session is controlled by people's behavior.Development along with mobile network's service and automated control technology at present, a kind of new mobile communication mode occurred, and promptly (in this communication modes, the both sides of communication are machinery equipment to machine for Machine To Machine, communication M2M) to machine.

The M2M definition of narrow sense is the communication of machine to machine, but M2M comprises that with the machine terminal intelligent interaction be application and service core, networking in a broad sense.M2M is the access means based on the intelligence machine terminal, with multiple communication mode, and the informatization resolve scheme that can provide for the client is used to satisfy the information system requirement of client to aspects such as monitoring, command scheduling, data acquisition and measurements.M2M (for example can be applied to sector application, traffic monitoring, warning system, rescue at sea, automatic vending machine, driving paying etc.), domestic. applications (for example, automatic data logging, temperature control etc.) and individual's application (for example, life detection, far-end diagnosis etc.) etc.

With the most basic different being of Human To Human's communication, the communication object of M2M is a machine, and the communication behavior is automation control, i.e. some accesses in the initiation of communication, the termination of communication, the communication process and the control of restriction all are behaviors of automation.This behavior depends in the M2M communication machine (being the terminal in the M2M communication) covenant of works bundle and control, and the behavior of the terminal in the M2M communication is subjected to the service contracting data constraint, and network based service contracting data manage the terminal in the M2M communication.

The M2M communication, be also referred to as machine class communication (Machine Type Communication, abbreviate MTC as), most typical is communication between terminal and the application server, this terminal is called as MTC terminal (MTC User Equipment, abbreviate MTC UE as), application server is called as MTC server (MTC Server).

Under 2G/3G/LTE inserts, the M2M communication mainly with grouping (Packet Service abbreviates PS as) network as the bottom bearer network, realize the operation layer communication between MTC terminal and the MTC server.Fig. 1 is the configuration diagram of the M2M communication entity grouping system (Evolved Packet System abbreviates EPS as) that is linked into evolution.

In Fig. 1, the bottom bearer network comprises: the universal mobile telecommunications system land radio access web of evolution (Evolved Universal Terrestrial Radio Access Network, abbreviate E-UTRAN as), mobile management unit (Mobility Management Entity, abbreviate MME as), gateway (Serving Gateway, abbreviate S-GW as, or SGW), grouped data network gateway (Packet Data Network Gateway, abbreviate PDN GW as, or P-GW, or PGW), home subscriber server (Home Subscriber Server, abbreviate HSS as), "Policy and Charging Rules Function entity (Policy and Charging RulesFunction abbreviates PCRF as).Wherein, the main network element of E-UTRAN is eNodeB (Evolved NodeB base station).

In Fig. 1, MME is responsible for the related work of chain of command such as contextual management in the processing of mobile management, Non-Access Stratum signaling and the user's mobile management; S-GW is the accessing gateway equipment that links to each other with E-UTRAN, transmits data between E-UTRAN and P-GW, and is responsible for pending datas such as paging are carried out buffer memory; P-GW then is the borde gateway of EPS and packet data network (Packet Data Network abbreviates PDN as), and the access of being responsible for PDN reaches functions such as transmitting data between EPS and PDN; PCRF is the "Policy and Charging Rules Function entity, it is by receiving interface Rx and carrier network agreement (InternetProtocol, abbreviating IP as) business network links to each other, obtain business information, in addition, it can also link to each other with gateway device in the network by the Gx interface, be responsible for initiating the foundation of IP carrying, guarantee the service quality (Quality of Service abbreviates QoS as) of business datum, and the control of chargeing.HSS provides user's management of subscription data and the management that the user is linked into the important contextual information in the network.

In Fig. 1, MTC UE is linked in the EPS network by E-UTRAN (eNodeB), after being assigned with the IP address, can set up IP tunnel between MTC UE and the MTC Server, thus the upper-layer service communication between realization and the MTC Server.The IP tunnel of being set up between MTC UE and the MTC Server is an IP tunnel in logic, its physical pathway process: eNodeB, S-GW, P-GW.

At present, a kind of mode that realizes the M2M communication is to set up an operation layer interface protocol on the IP tunnel between MTC UE and the MTC Server, by this operation layer interface protocol, MTC UE and MTC Server interactive service data, simultaneously, MTC Server is also by the control of this operation layer agreement realization to MTC UE.

Fig. 2 describes the flow process that this kind mode realizes the M2M communication, and as shown in Figure 2, MTC UE realizes that setting up communication with MTC Server is connected mainly and may further comprise the steps by the PS network insertion in this mode:

S201, MTC UE initiates to adhere to request to MME;

S202, MME receive the above-mentioned request of adhering to, and send position updating request to HSS, and in this step, HSS wherein comprises the subscription data part that is used for the M2M access control to the subscription data that MME downloads MTC UE;

S203, MME sends the load creating request to SGW/PGW, and request SGW/PGW creates suitable carrying for MTC UE;

S204, if PGW need be from PCC acquisition strategy data to set up suitable carrying in view of the above, PGW and PCC are alternately to obtain the PCC strategy;

S205, PGW return the load creating response for MTC UE creates carrying;

S206, MME send to MTC UE and adhere to response;

Behind the step S206, MTC UE has been attached to the PS network, has been assigned with the IP address, and foundation and suitable carrying, thereby can initiate the registration of operation layer to MTC Server.

S207, MTC UE initiate the registration of operation layer to MTC Server;

S208, MTC Server accepts the registration of MTC UE, returns the registration response;

S209 passes through operation layer protocol interaction data between follow-up MTC UE and the MTC Server.

By flow process shown in Figure 2, MTC UE is linked into the PS network, set up and MTCServer between IP connect, thereby can realize operation layer communication between follow-up and the MTC Server.

In some cases, operation layer need limit the access of MTC terminal equipment, promptly only allows to insert under the condition of appointment, refuses the access of MTC terminal equipment if condition does not allow.

For example, in some M2M business, owing to exist MTC equipment to be stolen the situation stolen with SIM card, because international member identification code (International MobileSubscriber Identification Number, abbreviate IMSI as) be present on the SIM card, be the open identify label of MTC UE, distribute by operator.And international mobile equipment identification number (International Mobile Equipment Identity, abbreviate IMEI as) be present in the terminal equipment merchant, can only use specific I MSI and IMEI to be linked into network if define the MTC terminal equipment, then can when access network, judge, if IMSI and IMEI pairing do not match, illustrate that then MTC equipment or SIM card are stolen, refuse the access of this MTC terminal equipment.

Perhaps, in some M2M business, the MTC terminal is applied in the fixing band of position, exceeds this band of position and will not allow its use.Therefore, need the on-position of restriction MTC terminal equipment, if when inserting in the band of position that is not allowed to, move in the band of position that is not allowed to after perhaps inserting, then need to limit it and be linked into system.

Perhaps, in some M2M business, the MTC terminal is limited in being linked into system in time of appointment, exceeds this time will not allow the system of being linked into.Therefore, the turn-on time of restriction MTC terminal equipment,, then need to limit it and be linked into system if exceeded the time that is allowed after in the unallowed time period, perhaps inserting turn-on time.

Though above-mentioned service management demand can be controlled at Access Layer, for example, under E-UTRAN inserts, control by MME, need MME to make various inspections and judgement like this, thereby cause the complexity of core net greatly to increase at various regulatory requirements.

Summary of the invention

At causing the problem that the complexity of core net increases to the access control of MTC terminal and propose the present invention by Access Layer in the prior art, for this reason, main purpose of the present invention is to provide a kind of access control scheme of improved M2M terminal, one of to address the above problem at least.

To achieve these goals, according to an aspect of the present invention, provide a kind of connection control method of MTC terminal.

Connection control method according to MTC terminal of the present invention comprises:

Mobile management network element is attached to network or the current MTC terminal information that has been attached to network to access control reported by network elements current request;

Judgement does not allow the MTC terminal to insert to the access control network element according to the MTC terminal information, sends the indication that refusal MTC terminal inserts to mobile management network element;

Mobile management network element receives indication, is linked into network according to indication refusal MTC terminal.

To achieve these goals, according to a further aspect in the invention, provide a kind of access control system of MTC terminal.

Access control system according to MTC terminal of the present invention comprises: user contracting data memory, mobile management network element and access control network element.Wherein,

The user contracting data memory is used for the subscription data of the MTC terminal in the saved system;

Mobile management network element, be connected with the user contracting data memory, be used to receive the current request that the user contracting data memory issues and be attached to network or the current subscription data that has been attached to the MTC terminal of network, and provide MTC terminal information to the access control network element;

The access control network element, be connected with mobile management network element, be used for terminal information according to MTC, judge whether to allow the MTC terminal to insert, and under the situation that does not allow the MTC terminal to insert, send the indication that refusal MTC terminal inserts to mobile management network element, so that mobile management network element refusal MTC terminal is linked into network.

By the present invention, the access control network element of operation layer obtains the MTC terminal information by mobile management network element, and judge whether to allow this MTC terminal to insert according to this MTC terminal information, thereby can carry out access control to the MTC terminal by operation layer, thereby solved in the prior art problem that need cause the complexity of core net to increase to the access control of MTC terminal by Access Layer, and then reduced the cost of network struction.

Description of drawings

Accompanying drawing described herein is used to provide further understanding of the present invention, constitutes the application's a part, and illustrative examples of the present invention and explanation thereof are used to explain the present invention, do not constitute improper qualification of the present invention.In the accompanying drawings:

Fig. 1 is the configuration diagram that the M2M communication entity is linked into EPS in the correlation technique;

Fig. 2 is that MTC UE sets up the flow chart that communication is connected by the PS network insertion and with the MTC server in the correlation technique;

Fig. 3 is the access control system structural representation according to the MTC UE of the embodiment of the invention;

Fig. 4 is the Organization Chart that inserts realization M2M communication according to the MTC UE of the embodiment of the invention by the EPS system;

Fig. 5 is the Organization Chart that inserts realization M2M communication according to the MTC UE of the embodiment of the invention by gprs system;

Fig. 6 is the flow chart according to the connection control method of the MTC terminal of the embodiment of the invention;

Fig. 7 initiatively reports the flow chart of the information of MTCUE to MTC Server for a kind of MME in the embodiment of the invention;

Fig. 8 initiatively reports the flow chart of the information of MTCUE to MTC Server for another kind of MME in the present embodiment;

Fig. 9 sends query requests flow chart with the information of obtaining MTC UE by MTC GW to MME for MTC Server in the present embodiment;

Figure 10 is the flow chart of the dependent event of MTC Server in the present embodiment by subscribing to MTC UE to MME with the information of obtaining this MTC UE;

Figure 11 for the MTC GW method of employinging one in the present embodiment obtain the sign of MTC UE, for the address of the MTC Server of this MTC UE service and be the flow chart of the corresponding relation between the address of the MME of this MTC UE distribution;

Figure 12 obtains the flow chart of above-mentioned corresponding relation for MTC GW in the present embodiment adopts method two;

Figure 13 obtains the flow chart of above-mentioned corresponding relation for MTC GW employing method three in the present embodiment;

Figure 14 is the inventive method embodiment one flow chart;

Figure 15 is the flow chart of the inventive method embodiment two.

Embodiment

Functional overview

The requirement of access control flexibly when the MTC terminal being linked into network in order to satisfy, be reduced to caused complexity transformation to core net when supporting this class access limit service simultaneously, the embodiment of the invention provides a kind of access control scheme of improved MTC terminal as far as possible.In embodiments of the present invention, consider that MTC Server may not be the network entity of operator's management, and might be deployed in outside the core net, therefore, consider the access security when MTC Server is linked into core net, the embodiment of the invention increases MTC gateway (MTC GW) in core-network side, make the access of all MTC Server all by this MTC gateway, this MTC gateway can hide by the internal network topological structure, MTC Server is inserted means such as authenticate and realize that MTC Server is linked into the safety assurance of core net.And, obtain the information of the bottom Access Layer of this MTC terminal by operation layer (MTC Server or newly-increased MTC gateway) by mobile management network element in embodiments of the present invention, and then the access of this MTC terminal is controlled according to the MTC terminal information of obtaining.

Hereinafter will describe the present invention with reference to the accompanying drawings and in conjunction with the embodiments in detail.Need to prove that under the situation of not conflicting, embodiment and the feature among the embodiment among the application can make up mutually.

System embodiment

According to embodiments of the invention, provide a kind of control system of MTC terminal.

Fig. 3 is the structural representation according to the access control system of the MTC terminal of the embodiment of the invention, as shown in Figure 3, the access control system according to the MTC terminal of the embodiment of the invention mainly comprises: user contracting data memory 1, mobile management network element 3 and access control network element 5.Respectively above-mentioned each network element is described below.

Wherein, user contracting data memory 1 is used for the subscription data of the MTC terminal in the saved system;

Mobile management network element 3, be connected with user contracting data memory 1, be used to receive the current request that user contracting data memory 1 issues and be attached to network or the current subscription data that has been attached to the MTC terminal of network, and provide this MTC terminal information to access control network element 5;

In concrete the application, when MTC UE request is attached to network, MTC UE will send to mobile management network element 3 and adhere to request, mobile management network element 3 receive MTCUE adhere to request after, send position updating request to user contracting data memory 1, user contracting data memory 1 issues the subscription data of this MTC UE to mobile management network element 3 after receiving position updating request, mobile management network element 3 receives also stores this subscription data.And, after MTC UE is attached to network, if the subscription data of this MTC UE changes, the subscription data of this MTC UE that user contracting data memory 1 will be after mobile management network element 3 issues renewal then.

Access control network element 5, be connected with mobile management network element 3, the MT reconnaissance C terminal information that provides according to mobile management network element 3 is provided, judge whether to allow this MTC terminal to insert, and under the situation that does not allow this MTC terminal to insert, send the indication that this MTC terminal of refusal inserts to mobile management network element 3, so that mobile management network element 3 these MTC terminals of refusal are linked into network.And mobile management network element 3 is after the indication that receives from MTC server 5, if current MTC terminal is request and is attached to network that then refuse the request of adhering to of this MTC terminal, returning refusal to the MTC terminal adheres to response; If current MTC terminal has been attached to network, then mobile management network element 3 is initiated attachment removal flow process, this MTC terminal of attachment removal.

In specific implementation process, above-mentioned access control network element 5 can be the newly-increased MTC gateway of core-network side in the embodiment of the invention, this MTC gateway is connected between MTC server and the mobile management network element, the predetermined condition that inserts according to the MTC UE of this locality storage except this MTC gateway or from the predetermined condition that this MTC UE that core net is obtained inserts is controlled the access of MTC terminal, also the MTC server is carried out safety verification, and a MTC gateway can be served a plurality of MTC servers.

Perhaps, above-mentioned access control network element 5 also can be the MTC server, the MTC server is controlled the access of MTC terminal according to the predetermined condition of the MTC UE access of this locality storage or from the predetermined condition that this MTC UE that core net is obtained inserts, and, between this MTC server and mobile management network element 3, be connected with the MTC gateway, this MTC gateway is mainly used in the data of transmitting between MTC server and the mobile management network element 3, may also need to carry out necessary protocol conversion work, and this MTC gateway is also carried out safety verification to the MTC server.

Preferably, when MTC UE was linked into the E-UTRAN network, above-mentioned user contracting data memory 1 was HSS, and mobile management network element 3 is MME; When MTC UE was linked into the GERAN/UTRAN network, user contracting data memory 1 was HLR, and mobile management network element 3 is SGSN.

Below by specific embodiment the said system that the embodiment of the invention provides is described.

System embodiment one

Present embodiment utilizes the EPS system to realize that inserting (being that MTC UE is linked into the E-UTRAN network) is that example describes with MTC UE.

Fig. 4 is that MTC UE inserts the Organization Chart of realizing the M2M communication in the present embodiment by the EPS system, as shown in Figure 4, in the present embodiment, between MTC gateway and the MME, and realized being connected between MTC gateway and the MTC server, so that the MTC server obtains bottom Access Layer/loaded information of MTC UE, to judge the behavior of MTC UE.

As shown in Figure 4, in this Organization Chart, MTC GW is deployed in the core net, and MTCServer may be deployed in outside the core net of operator, also may be deployed in the core net.A MTC GW can serve a plurality of MTC Server.

In this Organization Chart, MTC GW and MME have set up interface, for convenience of description, in the present embodiment, this interface are referred to as M2M-MME.By this interface, MTC GW can inquire about the information of certain MTC UE to MME, for example, and the current location zone of the subscription data of MTC UE, MTC UE, the current state of MTC UE etc.; Perhaps, by this interface, MTC GW can subscribe to the incident of the Access Layer/carrying relevant with certain MTC UE to MME, and for example, MTC UE is attached to PS network, MTC UE from the attachment removal of PS network, MTC UE have taken place that the position is moved the PS network etc. incident; Perhaps, by this interface, MME can be with the incident of the bottom Access Layer relevant with certain MTC UE, and MTC GW is given in proactive notification.

And, MTC GW is after information that gets access to certain MTC UE or bottom Access Layer incident, predetermined condition that can insert according to the MTC UE that is stored among this MTC GW or the access that judges whether to allow this MTC UE from the predetermined condition that this MTC UE that core net is obtained inserts, under the situation that does not allow this MTC UE to insert, send refuse information to MME, to refuse the access of this MTC UE.

Perhaps, in this framework, MTC GW is as the intermediary (similar agency) of communication between MTC Server and the MME, accepts the performed inquiry to MTC UE information of MTC Server, to the subscription of the Access Layer incident relevant with MTC UE, and request is transmitted to MME.Before the request of transmitting, MTC GW need carry out fail safe to MTC Server and detect, and under the situation that detection is passed through, transmits request, and in the process of the request of transmitting, MTCGW may need to carry out necessary protocol conversion work.Simultaneously, MTC GW is transmitted to MTC Server with the information of the MTC UE of MME transmission.

And, MTC Server is after the relevant information of obtaining certain MTC UE, predetermined condition that can insert or the predetermined condition that inserts from this MTC UE that core net is obtained according to the MTC UE of this locality storage, judge whether to allow the access of this MTC UE, judging under the situation that does not allow this MTC UE access, send refuse information by MTC GW to MME, to refuse the access of this MTC UE.

Alternatively, in this framework, MTC GW can also set up interface with HSS, for convenience of description, in the present embodiment, this interface is referred to as M2M-HSS.By this interface, MTC GW can inquire the subscription data of MTC UE from HSS; Perhaps, by this interface, MTC GW can inquire the address of the MME that distributes into MTC UE from HSS.

Perhaps, alternatively, if do not set up the M2M-HSS interface between MTC GW and the HSS, then MTC GW can by and MME between the M2M-MME interface, obtain the subscription data of MTC UE.MTC GW can be initiatively to the subscription data of MME inquiry MTC UE, MME also can be initiatively sends to MTCGW with the subscription data of MTC UE.

System embodiment two

It is that example describes that present embodiment is linked into the GERAN/UTRAN network with MTC UE.

Fig. 5 is the Organization Chart that MTC UE realizes the M2M communication in the present embodiment by the GERAN/UTRAN network insertion, as shown in Figure 5, present embodiment is basic similar to said system embodiment one, difference is, SGSN in the GERAN/UTRAN network is equivalent to MME in the E-UTRAN network, be used for the access control in PS territory, the mobile management function, and (the GatewayGPRS Support Node of the Gateway GPRS Support Node in the GERAN/UTRAN network, abbreviate GGSN as) be equivalent to SGW and PGW in the E-UTRAN network, the HLR among the GERAN/UTRAN is equivalent to the HSS in the E-UTRAN network.The function of its concrete connection and each network element is similar to said system embodiment one, does not repeat them here.

Method embodiment

According to the embodiment of the invention, the connection control method of a kind of MTC UE also is provided, this method can realize by the said system that provides according to the embodiment of the invention.

Fig. 6 is the flow chart according to the connection control method of the MTC UE of the embodiment of the invention, as shown in Figure 6, mainly may further comprise the steps (step S601-step S605) according to the connection control method of the MTC UE of the embodiment of the invention:

Step S601: mobile management network element is attached to network or the current MTC terminal information that has been attached to network to access control reported by network elements current request;

Step S603: judgement does not allow this MTC terminal to insert to the access control network element according to MT reconnaissance C terminal information, sends the indication that this MTC terminal of refusal inserts to mobile management network element;

Step S605: mobile management network element receives above-mentioned indication, is linked into network according to this indication refusal MT reconnaissance C terminal.

Further the processing of above steps is described below.

(1) step S601

In specific implementation process, mobile management network element reports the MTC terminal information to include but not limited to following three kinds of methods to the MTC server:

(1) mobile management network element is initiatively to the access control reported by network elements

Particularly, when mobile management network element can take place in the Access Layer incident of certain MTC UE, proactive notification access control network element, perhaps, when mobile management network element adhered in MTC UE request, active was to the information of this MTC UE of access control reported by network elements.

(2) the access control network element is inquired about to mobile management network element

The access control network element is to the information of mobile management network element inquiry MTC UE, after mobile management network element receives the query requests of access control network element, to the information of the pairing MTC UE of access control reported by network elements.

(3) the access control network element is subscribed to the dependent event notice of MTC UE to mobile management network element

The access control network element is subscribed to the Access Layer incident relevant with a certain MTC UE to mobile management network element, and mobile management network element is when the Access Layer incident generation of subscribing to, and proactive notification access control network element includes the information of the MTC UE of correspondence in the notice.

In specific implementation process, above-mentioned access control network element can be the MTC gateway, also can be the MTC server, is example with the MTC server below, and three kinds of methods above-mentioned access control network element being obtained the information of MTC UE describe.

(A) mobile management network element is initiatively to the access control reported by network elements

Particularly, when mobile management network element can take place in the Access Layer incident of certain MTC UE, initiatively send event notice to the MTC gateway, perhaps, mobile management network element can receive the request back initiatively reports the information from this MTC UE to the MTC gateway of adhering to of MTC UE transmission; The MTC gateway sends to the MTC server with event notice or the MTC UE information that reports after the information of the MTC UE that receives event notice or report.

Particularly, when mobile management network element initiatively reported the information of MTC UE, mobile management network element was according to the indication of carrying from this MTC UE that the user contracting data memory obtains, and initiatively reported the information of MTC UE to MTC Server by MTC GW.Particularly, the mobile management network element subscription data that obtains this MTC UE from the user contracting data memory comprises: the indication mobile management network element to MTC Server report MTC UE indication information (specifically can indicate information such as comprising the opportunity that reports, the parameter that reports), be the information of the MTC Server of this MTC UE service.

In specific implementation process, mobile management network element can initiatively report the information of this MTC UE to MTC Server by MTC GW when MTC UE initiates to adhere to request, also can be after MTC UE be attached to network, when the Access Layer incident relevant with this MTC UE takes place, initiatively pass through MTC GW to MTC Server reported event notice, in event notice, carry the current information of MTC UE.

Be that MME is an example below with the mobile management network element, report describe opportunity at these two kinds to the flow process that MTC Server reports to MME.

(1) when MTC UE initiates to adhere to request, MME initiatively reports the information of this MTC UE to MTC Server by MTC GW

Fig. 7 is in this case, MME initiatively reports the flow chart of the information of MTC UE to MTC GW by MTC GW, as shown in Figure 7, when MTC UE initiated to adhere to request, MME initiatively reported the information spinner of MTC UE may further comprise the steps by MTC GW to MTC Server:

S701, MTC UE initiates to adhere to request to MME;

S702, MME sends position updating request to HSS;

S703, HSS upgrades response to the MME home position, upgrade the subscription data that response carries MTC UE in this position, comprise in this subscription data: indication MME to MTCServer report the information of this MTC UE indication information, for the information of the MTC Server of this MTC UE service (particularly, this information can be the IP address of MTC Server, also can be the information such as service identifiers of MTC Server);

S704, MME go out the address of this MTC Server according to the information analysis of the MTC Server that serves for this MTC UE;

S705, MME reports the information of MT reconnaissance C UE to MTC GW, and MME also comprises the address of the MTCServer that parses among the step S704 in the information that MTC GW reports;

S706, MTC GW sends to the MTC Server corresponding with above-mentioned address with the information of MT reconnaissance C UE.

(2) after MTC UE is attached to network, MME initiatively reports the information of MTC UE to MTC Server by MTC GW

Fig. 8 is in this case, MME initiatively reports the flow chart of the information of MTC UE to MTC Server by MTC GW, as shown in Figure 8, after MTC UE was attached to network, MME initiatively reported the information spinner of MTC UE may further comprise the steps by MTC GW to MTC Server:

S801, MTC UE is attached to the PS network;

Be attached in the process of PS network at MTC UE, MME has obtained the subscription data of MTC UE from HSS, comprising the subscription data that is used for the M2M service part.In these M2M service contracting data, be included as the address (also can be the identification information of MTC Server) of the MTC Server of this MTC UE service, request MME initiatively reports indication from the scheduled event relevant with this MTC UE to MTC Server, promptly ask MME when scheduled event takes place this MTC UE, send event notice to MTC Server;

Wherein, above-mentioned scheduled event is the Access Layer incident relevant with this MTC UE, and particularly, above-mentioned scheduled event includes but not limited to one of following or its combination in any:

(1) subscription data of MTC UE changes; Behind the subscription data of HSS change MTC UE, HSS need issue new subscription data again to MME, after MME receives new subscription data, can notify this subscription data of MTC Server to change or directly new subscription data is sent to MTC Server;

(2) state variation of MTC UE; For example, MTC UE be attached to network, MTCUE from network attachment removal, MTC UE by connected state change to Idle state, MTC UE changes to connected state by Idle state;

(3) variation of the band of position of MTC UE; For example, MTC UE has taken place that the position is moved etc., and when MTC UE occurrence positions moved, MTC UE can send location update message to MME, the position has taken place moves thereby make MME can capture MTC UE;

(4) network change of MTC UE; For example, the switching of base station, network has taken place in MTC UE, and in this case, MTC UE can send to MME and switch message, thereby makes MME can capture the network change incident that MTC takes place.

S802, above-mentioned scheduled event, promptly relevant with MTC UE Access Layer incident takes place;

S803, MME initiatively notify the generation of this scheduled event to MTC GW, particularly, MME includes the current information of MTC UE in the event notice that MTC GW sends;

S804, the address of the mobile management network element that MTC GW distributes according to the sign of the MTC UE that obtains in advance, for this MTCUE and be the corresponding relation of the address of the MTCServer of this MTC UE service is retrieved as the address of the MTC Server that this MTC UE serves;

S805, MTC GW sends to this MTC Server with above-mentioned event notice.

It is pointed out that in flow process shown in Figure 8 the Access Layer incident of S802 may occur among the step S801, for example, this incident is one and adheres to incident that then MME should send event notice to MTC Server when MTC UE is attached to network.

Particularly, in the flow process of above-mentioned Fig. 7 and Fig. 8, the information of the MTC UE that MME reports to MTC Server includes but not limited to one of following or its combination in any:

A) MME is from the MTC UE current business subscription data of HSS acquisition;

B) the employed IMSI of MTC UE, IMEI; Wherein, the employed IMSI of MTC carries adhering in the message of sending when being attached to network of MTC UE, IMEI then may be MTC UE when adhering to by offering network, also may be obtaining of network based needs to MTC UE inquiry;

C) contextual information of MTC UE on MME, for example, the current location zone of MTC UE and/or the current state of MTC UE;

Wherein, the current location zone of MTC UE can be: the tracing area of MTC UE (Tracking Area, abbreviate TA as), the current Cell sub-district of MTC UE, and the current state of MTCUE may be a kind of in attachment state, attachment removal state, connection status, the idle condition etc.

D) the current mobility event that takes place of this MTC UE, for example, MTC UE is attached to network, MTC UE from network attachment removal, the renewal of MTC UE position, MTC UE base station switching, the switching of MTC UE generation network etc. takes place.

(B) the access control network element is inquired about to mobile management network element

Particularly, after MTC UE is attached to network, MTC Server sends query requests by MTC GW to mobile management network element, the information of this MTC UE of request inquiry, mobile management network element is after receiving this query requests, report the information of this MTC UE to MTC GW, MTC GW sends to MTC Server with the information of this MTC UE again.

In specific implementation process, MTC GW is after the query requests that receives MTC Server transmission, need earlier this MTC Server to be carried out safety verification, particularly, the information that MTC GW can allow the MTC Server that inserts according to the core net of obtaining (for example, service identifiers, IP address etc.), judge that this MTC Server is whether in the scope of the MTCServer that inserts of allow, if, then continue to handle this query requests, sign according to the MTC UE that obtains in advance, the address of the mobile management network element that distributes for this MTC UE and be corresponding relation between the address of the MTC Server that serves of this MTC UE, be retrieved as the address of the mobile management network element of this MTC UE distribution, and query requests is transmitted to this mobile management network element; Otherwise MTC GW refuses this query requests.

Particularly, with the E-UTARN network is example, Fig. 9 sends query requests by MTCGW to MME for MTC Server, flow chart with the information of the Access Layer that obtains MTC UE, as shown in Figure 9, MTC Server sends query requests by MTC GW to MME, and the information spinner that obtains MTC UE will may further comprise the steps:

S901, MTC UE is attached to the PS network;

S902, MTC UE initiates the operation layer registration to MTC Server;

S903, after MTC UE was registered to MTC Server, if the purpose that MTC Server controls for business, MTC UE decision needed the current information (mainly referring to an access a layer information) of inquiry MTC UE;

In this step, MTC Server may need obtain the information of MTCUE for multiple possibility purpose, for example:

Whether MTC Server wishes to learn the employed IMSI of MTC UE, IMEI situation, stolen to verify as the SIM card that MTC UE is equipped with, and promptly whether IMSI, IMEI binding relationship be normal; Perhaps,

Whether MTC Server wishes to learn the current position information (as TA zone, Cell sub-district etc.) of MTC UE, insert in the band of position that is not allowed to judge MTC UE, perhaps whether moves to the band of position that is not allowed to;

S904, MTC Server sends the information of query requests with inquiry MTC UE to MTC GW, can carry the sign of MTC UE and the information such as address of this MTC Server in this query requests;

S905, MTC GW receives above-mentioned query requests, and this MTC Server is carried out legal authentication, determines that this MTC Server is legal;

S906, the address of the MME that MTC GW distributes according to the sign of the MTC UE that obtains in advance, for this MTCUE and be the corresponding relation between the address of the MTC Server of this MTC UE service is retrieved as the address of the MME of this MTC UE distribution;

S907, MTC GW is transmitted to MME with above-mentioned query requests;

S908, MME be according to the current context of MTC UE, returns the current information of MTC UE to MTC GW, and MTC GW sends to MTC Server with the current information of this MTC UE.

By step S903-S908, MTC Server has obtained the current information of MTC UE by MTC GW from MME, thereby can judge the current behavior of MTC UE according to the current information of MTC UE, further can make control to the behavior of MTC UE.

Particularly, in above-mentioned steps, MTC Server includes but not limited to one of following or its combination in any to the information of the MTC UE of MME request:

A) MME is from the MTC UE current business subscription data of HSS acquisition.

B) the employed IMSI of MTC UE, IMEI; Particularly, the employed IMSI of MTC UE is that MTC UE must carry in adhering to message when being attached to network, MME can obtain the IMSI that MTC UE uses from adhere to message, IMEI then may be that MTC UE offers network when adhering to, and also may be obtaining to MTC UE inquiry of network based needs.

C) contextual information of MTC UE on MME, for example, the current state (as: MTC UE is current to be attachment state, connection status, idle condition etc.) of the current location zone of MTC UE (these bands of position can be: TA zone, Cell sub-district) and/or MTCUE.

(C) the access control network element is subscribed to the dependent event notice of MTC UE to mobile management network element

Because the needs of service management, MTC Server need in time be known the incident that the bottom Access Layer sends (as MTC UE from network attachment, attachment removal, position change etc.), and make corresponding decision-making according to these incidents, behavior with control MTC UE, therefore, MTCServer can subscribe to these Access Layer incidents to mobile management network element by MTC GW, mobile management network element is then when corresponding Access Layer incident takes place, in time to MTC Server reported event notice, carry the current information of MTC UE by MTC GW in this event notice.

Under this kind situation, the processing of the processing of MTC Server and above-mentioned (C) is basic identical, MTC Server is after sending the query requests of the dependent event of subscribing to MTC UE to MTC GW, MTC GW also needs this MTC Server is carried out safety verification, verify and again this query requests is transmitted to the mobile management network element that distributes into this MTC UE after legal, concrete grammar is same as described above, does not repeat them here.And before forwarding, MTCGW also needs to be retrieved as the address of the mobile management network element that this MTC UE distributes.

Be with the difference of above-mentioned (C), the query requests that MTC Server sends to mobile management network element by MTC GW is the dependent event that is used to subscribe to MTC UE, promptly ask mobile management network element when the Access Layer incident relevant with MTC UE takes place, notify to MTC Server reported event by MTC GW.

Figure 10 is for being example with the E-UTRAN network, the dependent event that MTC Server subscribes to MTCUE to MME is with the flow chart of the information of obtaining this MTC UE, as shown in figure 10, MTC Server will may further comprise the steps with the information spinner that obtains this MTC UE to the dependent event that MME subscribes to MTC UE:

S101, MTC UE is attached to the PS network;

S102, MTC UE initiates the operation layer registration to MTC Server;

S103, after MTC UE was registered to MTC Server, according to the needs of service management, MTC Server need in time be known the incident relevant with this MTC UE that the bottom Access Layer takes place, and therefore, determined to subscribe to these incidents to MME;

S104, MTC Server send the query requests of subscribing to the Access Layer incident relevant with MTC UE to MTC GW;

It should be explicitly made clear at this point that MTC Server can once only subscribe to one or a class Access Layer incident, also can once subscribe to a plurality of or multiclass Access Layer incident.

S105, MTC GW receives above-mentioned query requests, and this MTC Server is carried out safety verification, verifies that this MTC Server is legal;

S106, MTC GW is according to the address of the MME that distributes according to the sign of the MTC UE that obtains in advance, for this MTC UE and be the corresponding relation between the address of the MTC Server of this MTC UE service, is retrieved as the address of the MME that this MTC UE distributes;

S107, MTC GW is transmitted to MME with above-mentioned query requests, subscribes to the Access Layer incident relevant with MTC UE to MME;

S108, the corresponding Access Layer incident ordered with MTC Server takes place;

S109, MME initiatively report the event notice of these Access Layer incidents to MTC GW after the Access Layer incident takes place, carry the current relevant information of MTC UE in this event notice;

The above-mentioned event notice that S110, MTC GW will receive sends to MTC Server.

In flow process shown in Figure 10, the ordered Access Layer incident relevant with MTC UE of MTC Server takes place, and can be a kind of in the following incident or some kinds:

A) variation of the subscription data of MTC UE; Behind the subscription data of HSS change MTC UE, HSS need issue new subscription data again to MME, after MME receives new subscription data, can notify this subscription data of MTC Server to change or directly new subscription data is sent to MTC Server;

B) state variation of MTC UE; For example, MTC UE be attached to network, from the network attachment removal, change to Idle state, change to connected state etc. by Idle state by connected state;

C) variation of the band of position of MTC UE; For example, MTC UE has taken place that the position is moved etc., has sent location update message etc. to MME;

D) network change of MTC UE; For example, the switching of base station, network has taken place in MTC UE, has sent switching message etc. to MME.

In specific implementation process, the method for above-mentioned (B), (C) the described MTC of obtaining UE can be used separately, also can be used in combination.Particularly, in above-mentioned flow process shown in Figure 9, in step S903, may further include in the information of the MTC UE of MTC Server request inquiry:

D) mobility event that taken place of this MTC UE, for example, MTC UE is attached to that network, MTC UE upgrade from network attachment removal, MTC UE position, MTC UE takes place that switch the base station, network switching etc. takes place MTC UE.

Then when above-mentioned incident takes place, MME will send event notice to MTC Server by MTC GW, thereby make MTC Server know the current event of this MTC UE, and the current information of this MTC UE.

MTC Server also can be behind the step S908 of Fig. 9, after getting access to the current information of MTC UE, step S103 among further execution Figure 10 and step afterwards thereof, perhaps, behind above-mentioned steps S902, while execution in step S903 and step S103, subscribing to the dependent event of MTC UE, thereby when these incidents take place, the event notice that reports by MME, know the generation of these incidents, and further obtain the current information of MTC UE.

To flow process shown in Figure 10, MTC Server can be the subscription data of MTC UE, the current state of MTC UE, the position area information of MTC UE etc. by the information of MTCGW from MME acquisition MTC UE particularly by above-mentioned Fig. 7.This obtains the mode of MTC UE information, can be that MTC Server initiatively inquires about to MME by MTC GW, also can be after MTC Server subscribes to the incident of being correlated with by MTC GW to MME, MME notifies MTC Server when incident takes place, perhaps, can also be MME according to the indication in the subscription data of MTC UE, initiatively the Access Layer incident is notified to MTC Server by MTC GW.

Obtained the information of MTC UE from the bottom Access Layer as MTC Server, MTCServer can rely on these information, can further judge the behavior of MTC UE, and (for example make a policy with the behavior of control MTC UE according to business, when MTC UE inserted in the non-permission time, MTC Server can require this MTC UE of attachment removal; When MTCUE moved to non-permission zone, MTC Server can require this MTC UE of attachment removal etc.).

In said method, in order to realize the data interaction between MTC Server and the mobile management network element, the address of the mobile management network element that MTC GW need obtain and preserve the sign of MTC UE, distribute for this MTCUE and be the corresponding relation between the address of the MTCServer of this MTC UE service, in specific implementation process, MTC Server obtains this corresponding relation and includes but not limited to following three kinds of methods:

Method one, MTC Server sends the registration notification message of the identification information of the mobile management network element that carries promising this MTC UE distribution to MTC GW;

Particularly, after MTC UE is attached to network, when MTC UE sends register requirement to MTC Server, in this register requirement, carry the identification information of the mobile management network element that distributes into this MTC UE, MTC Server sends registration notification message to MTCGW after receiving this register requirement, carry the identification information of the mobile management network element that distributes into this MTC UE in this message, by this registration notification message, MTC GW can obtain above-mentioned corresponding relation.

For example, in the EPS network, MTC UE can carry global unique temporary identity (the GlobalUnique Temporary Identity of network for this MTC UE in the registration message that sends to MTC Server, abbreviate GUTI as), and comprise the id information of the MME that promising MTC UE distributes among the GUTI, MTC Server is carried at this GUTI and sends to MTC GW in the registration notification message, MTC GW is by resolving this GUTI, the address of the MME of this MTC UE distribution can be retrieved as, thereby above-mentioned corresponding relation can be obtained;

Method two, the mobile management network element that distributes for MTC UE and for the MTC Server of this MTC UE service initiatively notifies its address separately to MTC GW, MTC GW sets up above-mentioned corresponding relation after receiving the information that both report;

Method three, MTC GW is by the interface between itself and the user contracting data memory, be retrieved as the address of the mobile management network element of MTC UE distribution from the user contracting data memory, and be retrieved as the relevant information of this MTCServer of the MTC Server proactive notification of this MTC UE service, thereby set up above-mentioned corresponding relation.

Be example with the E-UTRAN network below, the acquisition methods of the address of above-mentioned three kinds of mobile management network elements is described.

Method one

The flow chart of the corresponding relation between the address of the MME that Figure 11 describes sign that MTC GW adopts this method MTC UE, distribute for the address of the MTC Server of this MTC UE service and for this MTC UE, as shown in figure 11, MTC GW obtains this corresponding relation and mainly may further comprise the steps:

S111, MTC UE is attached to the PS network, and MTC UE has been assigned with a GUTI in attaching process, and this GUTI is comprised in to adhere to and sends to MTC UE in the response;

According to the formation of GUTI under the prior art, comprise the id information of the MME of promising MTC UE distribution among the GUTI, according to this MME ID, can be addressed to the MME that distributes into MTC UE.

S112, MTC UE initiate the application layer registration to MTC Server after being linked into the PS network, carry GUTI information in registration message;

S113, MTC Server send registration notification message to MTCGW after the register requirement that receives MTC UE;

In this registration notification message, carry: the information of the information of MTC UE, MTC Server, GUTI information (being GUTI information).The information of this MTC UE comprises: the IP address of the IMSI of MTC UE and/or MTC UE; The information of this MTC Server comprises: the IP address of the service identifiers of this MTC Server and/or MTC Server.

S114, MTC GW be according to the GUTI information of carrying in the registration notification message, resolve the address of the MME that distributes for MTC UE;

Simultaneously, MTC GW preserve in this locality MTC UE sign, be this MTC UE service MTC Server the address and be the corresponding relation between the address of the MME of this MTC UE distribution, thereby can realize three's association.

S115 allows MTC UE registration if MTC Server judges according to business datum, then returns the registration response.In this registration response, may carry some operation layer parameters and give MTC UE.

Method two

The flow process of the corresponding relation between the address of the MME that Figure 12 describes MTC GW and adopts this method MTC UE, distributes for the address of the MTC Server of this MTC UE service and for this MTC UE, as shown in figure 12, MTC GW obtains this corresponding relation and mainly may further comprise the steps:

S211, MTC UE send to network and adhere to request, and MTC UE sends to MME and adheres to request particularly;

S212, MME sends position updating request to HSS;

S213, HSS send the position to MME and upgrade response;

In this process, HSS issues the subscription data of MTC UE to MME, comprising the M2M subscription data, in the M2M subscription data, the information that has comprised the MTC Server that serves this MTC UE (may be a domain name, also may be an IP address), the address that can resolve correspondingly MTC Server according to this information.

S214, MME indication SGW/PGW creates suitable carrying for MTC UE;

S215, MME send to MTC UE and adhere to response;

S216, MME sends a notification message to MTC GW, informs the address of the MME that distributes into MTC UE;

And, alternatively, MME can be also contained in the address for the MTC Server of MTC UE service in the notification message, thus make MTC GW by this notification message promptly can obtain MTC UE, corresponding relation between the address of the MME that distributes for the address of the MTC Server of this MTC UE service and for this MTC UE.

Particularly, above-mentioned notification message can be an independently notification message, also may reside in MME (for example, when MTC UE adhered to, MME sent to MTC GW and adheres to reporting events) in other message that MTC GW sends.In this notification message, comprise following information: the identification information of MTC UE (specifically can comprise: the IP address of the sign of MTC UE (as IMSI) and/or MTC UE) and the identification information of MME (specifically can comprise: the IP address of the sign of MME and/or MME).According to the corresponding relation of the identification information of MTC UE that carries in this notification message and MME, MTCGW can be known as the address information of the MME that MTC UE distributes.

S217, MTC UE initiate the registration of operation layer to MTC Server;

S218, MTC Server sends registration notification message to MTC GW;

Particularly, the parameter that MTC Server carries in this notification message comprises: the identification information of MTC UE and this MTC Server, particularly, the identification information of MTC UE can comprise: the sign of MTC UE (for example, IMSI) and/or the IP address of MTC UE, the identification information of MTCServer can comprise: the service identifiers of this MTC Server and/or IP address.

MTC GW is after receiving above-mentioned registration notification message, the address of the MME that can obtain the address of the MTC Server that served for MTC UE, distribute for MTC UE, thus set up the sign of MTC UE, the corresponding relation between the MME three that distributes for the address of the MTC Server of this MTC UE service and for this MTC UE.

In flow process shown in Figure 12, it is pointed out that above-mentioned S216 step can send after the S215 step, also can after the S213 step, send, specifically after what step, send, have equal effect, do not limit in the present invention.

Method three

The flow process of the corresponding relation between the address of the MME that Figure 13 describes MTC GW and adopts this method MTC UE, distributes for the address of the MTC Server of this MTC UE service and for this MTC UE, as shown in figure 13, MTC GW obtains this corresponding relation and mainly may further comprise the steps:

S311, MTC UE is attached to the PS network;

Be attached in the process of network at MTC UE, preserved the address of the MME that distributes for MTC UE among the HSS.

S312, MTC UE initiates the operation layer registration to MTC Server;

S313, MTC Server sends registration notification message to MTC GW;

Carry the identification information of MTC UE and the identification information of MTCServer in this registration notification message, wherein, the identification information of MTC UE comprises: the sign of MTC UE (for example, IMSI) and/or the IP address, the identification information of MTC Server comprises: the service identifiers of MTC Server and/or IP address.

S314, MTC GW is to the address of HSS inquiry for the MME of MTC UE distribution, and HSS is returned as the address of the MME of MTC UE distribution;

Thereby by step S313 and S314, MTC GW has obtained the corresponding relation between the address three of the sign of MTC UE, the MME that distributes for the address of the MTC Server of this MTC UE service and for this MTC UE.

S315, MTC Server sends the registration response to MTC UE;

In flow process shown in Figure 13, it is pointed out that MTC GW to the address of HSS inquiry for the MME of MTC UE distribution, can be: MTC GW is to the subscription data of HSS inquiry MTC UE, HSS returns to the address of the MME of MTC UE distribution in the subscription data that returns MTC UE; Also can be: MTC GW be to the address of HSS inquiry for the MME of MTC UE distribution, and HSS only is returned as the address of the MME of MTC UE distribution.

Above-mentioned is that the MTC server is that example describes with the access control network element, if the access control network element is the MTC gateway, then in said method (A), the MTC gateway only need carry out alternately with mobile management network element, and do not need to carry out mutual step with the MTC server, and in said method (B) and said method (C), the MTC server is when receiving the register requirement of MTC UE transmission, can send registration notification message to the MTC gateway, the MTC gateway is after receiving registration notification message, information or Access Layer incident to mobile management network element inquiry or subscription MTC UE can obtain from above-mentioned flow process in its specific implementation process, specifically repeat no more.

(2) step S603

In concrete the application, the access control network element can be by obtaining the bottom Access Layer from mobile management network element the information of MTC UE, judge whether MTC UE satisfies predetermined condition, thereby judge whether to allow MTC UE to insert, and judging under the situation that does not allow MTC UE access, send the indication that this MTC UE of refusal inserts to mobile management network element, with the access of control MTC UE.

Particularly, above-mentioned predetermined condition includes but not limited to one of following or its combination in any: allow time that MTC UE inserts, allow the band of position that MTC UE inserts, allow IMSI that MTC UE uses and IMEI binding relationship, allow the network that MTC UE adheres to, the number of times that allows MTC UE access etc.

In specific implementation process, the subscription data that above-mentioned predetermined condition can be used as MTC UE is kept in the user contracting data memory, also can be kept in the access control network element.

For example, if some conditions are in the predetermined condition: it is 24 hours that the duration that MTC UE inserted in one month time is no more than, then can rule be preserved as the subscription data of this MTC UE by the user contracting data memory, write down total duration that this MTCUE inserted by the access control network element in one month, particularly, the access control network element can obtain the subscription data of this MTC UE from mobile management network element, and calculate the each duration that inserts of MTC UE according to the time difference of adhering to event notice and attachment removal event notice that receives, and according to this duration, write down total duration that this MTC UE inserted in this month, and judge that in view of the above whether total duration that this MTC UE inserts in this month is above 24 hours, thereby receive when adhering to event notice in next time, judge whether not allow this MTC UE to insert.

Equally, for other predetermined condition, the access control network element can judge that also concrete deterministic process can be carried out according to concrete condition according to the current information of this MTCUE.Particularly, the access control network element judges in the situation that includes but not limited to one of following or its combination in any and does not allow MTC UE to insert:

(1) judges that request is attached to network to MTC UE in the non-permission time;

(2) judge that MTC UE is attached to network in non-permission band of position request;

(3) judge that MTC UE surpasses the number of times that allows access;

(4) judge that MTC UE is attached to network with the IMSI that is not allowed to and the binding relationship request of IMEI;

(5) judge that MTC UE moves to the unallowed band of position;

(6) judge that the time that MTC UE is attached to network has exceeded the turn-on time that is allowed;

(7) judge that MTC UE switches to unallowed network.

Further, if the access control network element is to judge when request is adhered at MTC UE not allow this MTC UE to insert that then the access control network element sends the indication that this MTC UE of refusal adheres to mobile management network element; And if the access control network element is to have judged not allow this MTC UE to insert after MTC UE has been attached to network, then the access control network element sends the indication of this MTC UE of attachment removal to mobile management network element.

In specific implementation process, if the access control network element is the MTC gateway, then the MTC gateway can judge do not allow MTC UE access network after, directly send indication to mobile management network element; If the access control network element is the MTC server, then the MTC server judge do not allow MTC UE access network after, send indication by the MTC gateway to mobile management network element.

(3) step S605

In specific implementation process, after the mobile management network element above-mentioned indication that the access control network element sends in receiving step S603,, carry out operation accordingly according to this indication.Particularly, if mobile management network element is to initiate to adhere in the process of request at MTC UE, receive above-mentioned indication (access control this moment network element indication refusal MTC UE adheres to), then mobile management network element is refused adhering to of MTC UE, returns to MTC UE and adheres to the refusal response; And mobile management network element is to receive above-mentioned indication (this MTC UE of access control this moment network element indication attachment removal) after MTC UE is attached to network in this way, and then mobile management network element is carried out attachment removal flow process, this MTC UE of attachment removal.

For further understanding the technique scheme that the embodiment of the invention provides, be example with the EPS network below, by specific embodiment such scheme is described.

Method embodiment one

Present embodiment has been described MTC Server and has been utilized after MTC UE adheres to, the information of the MTC UE that obtains from MME, the flow process that the access of MTC UE is controlled.

Figure 14 is for after MTC UE adheres to, and MTC Server is according to this MTC UE information that inquires, the flow chart of this MTC UE of attachment removal, and as shown in figure 14, MTC Server is according to this MTC UE information that inquires, and this MTC UE of attachment removal mainly may further comprise the steps:

S401, MTC UE is linked into network;

S402, MTC UE initiates the operation layer registration to MTC Server;

S403, MTC Server perhaps subscribes to the Access Layer incident relevant with this MTC UE to MTC GW to the information of MTC GW inquiry MTC UE, and MTC GW sends to MME with described inquiry, subscribe request;

If by MTC GW the access of MTC UE is controlled, then in step S403, MTC Server can be a registration notification message to MTC GW transmission, and MTC GW sends inquiry or subscribe request to MME after receiving registration notification message.

S404, the Access Layer incident relevant with MTC UE takes place;

After this step occurs in MTC Server subscription Access Layer incident.

S405, MME returns the information of the MTC UE that is inquired about to MTC GW, or works as MTC Server and subscribe to the Access Layer incident by MTC GW to MME, and after the Access Layer incident generation (S404), MME is to MTC GW notice Access Layer incident.MTC GW sends to MTC Server with institute's information inquiring or event notice;

S406, when MTC Server has obtained the information of MTC UE, or after having obtained the event notice of Access Layer, MTC Server is according to the service management needs, and judging needs this MTC UE of attachment removal;

S407, MTC Server sends detach request to MTC GW, and MTC GW sends detach request to MME;

S408 after MME receives detach request, carries out the attachment removal flow process, this MTC UE of attachment removal;

S409, MME sends the attachment removal response to MTC GW, and MTC GW sends to MTC Server with the attachment removal response.

In above-mentioned flow process, if for whether MTC GW carries out attachment removal MTC UE, then in above-mentioned steps S405, MTC GW get access to the information of the MTC UE that MME returns or the event notice that reports after, can be according to the service management needs, need to judge whether this MTC UE of attachment removal, if, then send detach request to MEE, execution in step S408 and S409 then, and MTC GW can send to MTC Server with the attachment removal response in S409, also can not send the attachment removal response to MTC Server.

Method embodiment two

Present embodiment has been described MTC Server and has been utilized when MTC UE, the information of the MTC UE that obtains from MME, the flow process that the access of MTC UE is controlled.

As a rule, in the M2M communication to the control of MTC UE, have one very part and parcel be: access control comprises: the turn-on time of control MTC UE, insert number of times, on-position etc.If the current access of MTC UE is not in allowed band, then network should be refused adhering to of this MTC UE, perhaps this MTC UE of attachment removal, and also can further issue indication and give network, when analogue took place, network can be refused the request of adhering to of this MTC UE voluntarily.

Under this application, MME can initiatively send and adhere to event notice to MTC GW when MTC UE adhere to, and MTC GW sends to MTC Server with this event notice, judges to adhere to whether allow by MTC Server.Similarly, MTC GW can not send to MTC Server with this event notice yet, and directly according to this event notice, judges whether adhering to of MTCUE allows.

When Figure 15 adhered to for MTC UE, MME sent to MTC GW and adheres to event notice, was judged whether as shown in figure 15, mainly to may further comprise the steps the schematic flow sheet that allows MTC UE to adhere to by MTC GW/MTC Server:

S501, MTC UE send to network and adhere to request, send to MME particularly and adhere to request;

S502, MME receive after this adheres to request, send the position to HSS and upgrade, and in this process, HSS issues the subscription data of MTC UE to MME;

S503, MME send to MTC GW and adhere to event notice;

S504, alternatively, if judge to adhere to whether allow by MTC GW, then MTCGW receive adhere to event notice after according to the service management needs, judge whether to allow this MTC UE to adhere to, in the present embodiment, MTC GW judges not allow this MTC UE to adhere to according to the service management needs;

In adhering to incident, MME may comprise some information that this time adhered to, for example: IMSI that the time of the network of access, the position of access, access, this MTC UE use and the binding relationship of IMEI etc.MTC GW is according to the information of the permission access of this MTC UE, for example, this MTC UE allows the time of inserting, the band of position that permission inserts, the number of times that permission inserts, the network that allows access, the IMSI that allows use and the binding relationship of IMEI etc., this that judge this MTC UE surpassed the IMSI that allows the number of times that inserts or MTC UE to use not to be allowed to and IMEI or MTC UE request and has been attached to the network that is not allowed to etc. attached to non-permission time or the non-permission band of position or the current access number of times of MTC UE, then MTC GW judgement does not allow this MTC UE to adhere to.

MTC GW judge do not allow this MTC UE to adhere to after, execution in step S508.

Following step S505 for to judge whether to allow this MTC UE to adhere to performed step by MTC Server, under the situation of execution in step S505-step S507, does not carry out above-mentioned steps S504 to step S506.

S505, MTC GW sends described event notice to MTC Server;

S506, MTC Server receive that MME reports adhere to incident after, according to the service management needs, judgement should be refused the access of this MTC UE;

S507, MTC Server sends refusal to MTC GW and inserts indication;

S508, MTC GW sends refusal to MME and inserts indication;

S509, MME refuse the access of MTC UE after receiving and refusing to adhere to indication, return to MTC UE and adhere to the refusal response.

Because MTC GW is operator's control, therefore, in the present embodiment, can be if judge so that operator has the power of access control more flexibly by MTC GW.

Though be that example is described with E-UTRAN (EPS) network in the above-described embodiments, in fact, GPRS for the GERAN/UTRAN network inserts, SGSN in the GERAN/UTRAN network is equivalent to MME in the E-UTRAN network, access control, the mobile management function of serving as the PS territory, and the GGSN in the GERAN/UTRAN network is equivalent to the SGW+PGW in the E-UTRAN network, and the HLR among the GERAN/UTRAN is equivalent to the HSS in the E-UTRAN network.Therefore, according to the foregoing description of the embodiment of the invention, the technique scheme that those skilled in the art can directly provide the embodiment of the invention is applied to the PS territory in the GERAN/UTRAN network.

Need to prove, can in computer system, carry out in the step shown in the flow chart of accompanying drawing such as a set of computer-executable instructions, and, though there is shown logical order in flow process, but in some cases, can carry out step shown or that describe with the order that is different from herein.

As mentioned above, in embodiments of the present invention, the access control network element of operation layer (MTCGW/MTC Server) obtains the information of the MTC UE of Access Layer from mobile management network element, and then can control effectively according to the access to MTC UE of the information of the MTC UE that obtains.Simultaneously, in embodiments of the present invention, can also carry out safety verification to MTC Server, have only to allow the MTC Server that inserts to be linked into core net by MTC GW, then refuse access for illegal MTC Server, thereby can guarantee the fail safe of core net.And, in embodiments of the present invention, can also control the access of MTC UE, thereby make when MTC Server is the network element of non-operator by MTC GW, operator can control the access of MTC UE flexibly.

Obviously, those skilled in the art should be understood that, above-mentioned each module of the present invention or each step can realize with the general calculation device, they can concentrate on the single calculation element, perhaps be distributed on the network that a plurality of calculation element forms, alternatively, they can be realized with the executable program code of calculation element, thereby, they can be stored in the storage device and carry out by calculation element, perhaps they are made into each integrated circuit modules respectively, perhaps a plurality of modules in them or step are made into the single integrated circuit module and realize.Like this, the present invention is not restricted to any specific hardware and software combination.

The above is the preferred embodiments of the present invention only, is not limited to the present invention, and for a person skilled in the art, the present invention can have various changes and variation.Within the spirit and principles in the present invention all, any modification of being done, be equal to replacement, improvement etc., all should be included within protection scope of the present invention.

Claims

1. the connection control method of a machine class communication MTC terminal is characterized in that, comprising:

Described access control network element does not allow described MTC terminal to insert according to described MTC terminal information judgement, sends the indication that the described MTC terminal of refusal inserts to described mobile management network element;

Described mobile management network element receives described indication, refuses described MTC terminal according to described indication and is linked into network.

2. method according to claim 1 is characterized in that, described mobile management network element comprises to the described MTC terminal information of described access control reported by network elements:

Described mobile management network element is according to the indication of the subscription data of the described MTC terminal of obtaining from the user contracting data memory, to the described MTC terminal information of described access control reported by network elements.

3. method according to claim 2 is characterized in that, comprises in the described subscription data: indicate described mobile management network element described MTC terminal information to be reported first indication information of described access control network element;

Then described mobile management network element comprises to the described MTC terminal information of described access control reported by network elements:

Described mobile management network element is after receiving the renewal response of described position, according to the indication of described first indication information that comprises in the described subscription data, to the described MTC terminal information of described access control reported by network elements.

4. method according to claim 2, it is characterized in that, also comprise in the described subscription data: indicate described mobile management network element when the Access Layer incident relevant with described MTC terminal takes place, to send second indication information of event notice to described access control network element;

The Access Layer incident relevant with described MTC terminal when taking place in described mobile management network element, indication according to described second indication information, send event notice to described access control network element, wherein, carry current described MTC terminal information in the described event notice.

5. method according to claim 1 is characterized in that, described mobile management network element comprises to the described MTC terminal information of described access control reported by network elements:

After described MTC UE was attached to network, described access control network element sent query requests to described mobile management network element, the described MTC terminal information of request inquiry;

After described mobile management network element receives described query requests, to the described MTC terminal information of described access control reported by network elements.

6. method according to claim 1 is characterized in that, described mobile management network element comprises to the described MTC terminal information of described access control reported by network elements:

After described MTC UE was attached to network, described access control network element sent query requests to described mobile management network element, and the Access Layer incident relevant with described MTC terminal pulls subscription;

Described mobile management network element sends the Access Layer event notice to described access control network element when described Access Layer incident takes place, wherein, carry described MTC terminal information in the described Access Layer event notice.

7. according to claim 4 or 6 described methods, it is characterized in that the Access Layer incident relevant with described MTC terminal comprises one of following or its combination in any:

The subscription data of described MTC terminal changes;

The state of described MTC terminal changes;

The network of described MTC terminal changes.

8. according to each described method in the claim 1 to 6, it is characterized in that described MTC terminal information comprises one of following or its combination in any:

The service contracting data that described MTC terminal is current;

Described MTC terminal employed international member identification code IMSI and international mobile equipment identification number IMEI;

The contextual information of described MTC terminal on described mobile management network element.

9. method according to claim 8 is characterized in that, the contextual information of described MTC terminal on described mobile management network element comprises: the current location area information of described MTC terminal and/or the current state information of described MTC terminal.

10. method according to claim 8 is characterized in that, described access control network element judges that not allowing described MTC terminal to insert comprises:

Described access control network element judges whether the described MTC terminal information of obtaining satisfies predetermined condition, is judging under the ungratified situation, determines not allow described MTC terminal to insert;

Wherein, described predetermined condition comprises one of following or its combination in any: allow time that described MTC terminal inserts, allow the band of position that described MTC terminal inserts, allow IMSI that described MTC terminal uses and IMEI binding relationship, allow the network that described MTC terminal adheres to, the number of times that allows described MTC terminal access.

11. method according to claim 10 is characterized in that, described access control network element judges in the situation of one of following or its combination in any and does not allow described MTC terminal to insert:

Judge that request is attached to network to described MTC terminal in the non-permission time;

Judge that described MTC terminal is attached to network in non-permission band of position request;

Judge that described MTC terminal surpasses the number of times that allows access;

Judge that described MTC terminal is attached to network with the IMSI that is not allowed to and the bind request of IMEI;

Judge that described MTC terminal moves to the unallowed band of position;

Judge that the time that described MTC terminal is attached to network has exceeded the turn-on time that is allowed;

Judge that described MTC terminal switches to unallowed network.

12., it is characterized in that if described MTC terminal current request is attached to network, the indication of then refusing described MTC terminal access comprises: refuse the indication that described MTC terminal is adhered to according to each described method in the claim 1 to 6;

Described mobile management network element is refused described MTC terminal according to described indication and is linked into network and comprises:

Described mobile management network element is refused adhering to of described MTC terminal, returns to described MTC terminal and adheres to the refusal response.

13., it is characterized in that if the current network that has been attached to of described MTC terminal, the indication of then refusing described MTC terminal access comprises: the indication of the described MTC terminal of attachment removal according to each described method in the claim 1 to 6;

Described mobile management network element is carried out attachment removal flow process, the described MTC terminal of attachment removal.

14. according to each described method in the claim 1 to 6, it is characterized in that described mobile management network element comprises: service universal packet wireless business affair support node SGSN or mobile management unit MME.

15., it is characterized in that described user contracting data memory comprises according to claim 2 or 3 described methods: attaching position register HLR or home subscriber server HSS.

16., it is characterized in that described access control network element comprises according to each described method in the claim 1 to 6: MTC gateway or MTC server.

17., it is characterized in that according to the described method of claim claim 16, be under the situation of described MTC server at described access control network element, carry out communication by the MTC gateway between described MTC server and the described mobile management network element.

18. the access control system of a MTC terminal is characterized in that, comprising: user contracting data memory, mobile management network element and access control network element, wherein, described user contracting data memory is used for the subscription data of the MTC terminal in the saved system;

Described mobile management network element, be connected with described user contracting data memory, be used to receive the current request that described user contracting data memory issues and be attached to network or the current subscription data that has been attached to the MTC terminal of network, and provide described MTC terminal information to described access control network element;

Described access control network element, be connected with described mobile management network element, be used for according to described MTC terminal information, judge whether to allow described MTC terminal to insert, and under the situation that does not allow described MTC terminal to insert, send the indication that the described MTC terminal of refusal inserts to described mobile management network element, be linked into network so that described mobile management network element is refused described MTC terminal.

19. system according to claim 18 is characterized in that, described access control network element is the MTC gateway.

20. system according to claim 18 is characterized in that, described access control network element is the MTC server, and then described system also comprises:

The MTC gateway is connected between described MTC server and the described mobile management network element, is used to transmit the data between described MTC server and the described mobile management network element, and described MTC server is carried out safety verification.