CN105991515B - A kind of implementation method, terminal and the base station of communication system traffic isolation - Google Patents
A kind of implementation method, terminal and the base station of communication system traffic isolation Download PDFInfo
- Publication number
- CN105991515B CN105991515B CN201510043880.5A CN201510043880A CN105991515B CN 105991515 B CN105991515 B CN 105991515B CN 201510043880 A CN201510043880 A CN 201510043880A CN 105991515 B CN105991515 B CN 105991515B
- Authority
- CN
- China
- Prior art keywords
- mme
- permission
- information
- terminal
- utran
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Expired - Fee Related
Links
Landscapes
- Mobile Radio Communication Systems (AREA)
Abstract
The present invention discloses implementation method, terminal and the base station of a kind of communication system traffic isolation, the described method includes: terminal sends the first attach request information to the wireless access network E-UTRAN of evolution, first attach request information includes that the MME allowed is identified, and the MME of permission is identified as the mark of MME corresponding with terminal pre-set business type；Terminal receives in the attachment for receiving E-UTRAN transmission after information, MME corresponding with the MME of permission mark is interacted by E-UTRAN, it is after E-UTRAN identifies the second attach request information of corresponding MME transmission to the MME of permission that attachment, which receives information, the MME of the permission received identifies the attachment that corresponding MME is sent and receives information, and the second attach request information includes the information of terminal.When the present invention accesses E-UTRAN by terminal, the service type information belonging to oneself is carried, E-UTRAN searches and is linked into the MME for being responsible for transmitting the type of service, realizes the isolation between the business of different service types.
Description
Technical field
The present invention relates to fields of communication technology, and in particular to the implementation method of communication system traffic isolation a kind of, terminal and
Base station.
Background technique
With flourishing for technology of Internet of things, communication network is widely applied to every profession and trade as a kind of base support technology
Dedicated network in.And timesharing long term evolution (Time Division Long Term Evolution, TD-LTE) technology conduct
Forth generation wireless broadband communication technology is also applied in Internet of Things industry.As communication network is in the application of every profession and trade, safety
Property become dedicated network an important issue.
Fig. 1 is 3GPP LTE Universal Communication System framework, be may be directly applied in dedicated network.Wherein UE (User
Equipment) i.e. user terminal be dedicated network business demand executor；E-UTRAN (Evolved UTRAN) i.e. evolution
Wireless access network is made of the NodeB (Evolved NodeB, eNodeB) of evolution, for providing radio resource for UE access；
The core net of EPC (Evolved Packet Core) i.e. evolution, including mobility management entity (Mobility Management
Entity, MME) access control when being accessed from E-UTRAN of control plane context management and responsible UE of being responsible for UE and mobile
The work such as property management；Gateway (Serving Gateway, S-GW) and packet data network gateway (Packet Data
Network Gateway, P-GW), it is responsible for the functions such as user plane bearer management, routing user data, accessing group data net.It is logical
It is convenient for management with type of business in communication network based on personal characteristics, an EPC centralized management can be used.
With the business of different service types in dedicated network, type of service is based on concrete application, different service types
Business can not be managed collectively, the business of each type of service may need independent process, and for security consideration, each
The business of type of service cannot be interfered between each other.According to function of the EPC in 3GPP LTE communication network, if directly used
One EPC carries out service management and is not obviously able to satisfy dedicated network to the isolation and safety between the business of different service types
Property.
Summary of the invention
The technical problem to be solved by the present invention is in dedicated network with different service types business, type of service with
Based on concrete application, the business of different service types can not be managed collectively, and the business of each type of service may need independent place
Reason, and for security consideration, the business of each type of service cannot be interfered between each other.It is logical in 3GPP LTE according to EPC
Function in communication network, if directly carrying out service management using an EPC is not obviously able to satisfy dedicated network to different business
The problem of isolation and safety between the business of type.
For this purpose, in a first aspect, the present invention proposes a kind of implementation method of communication system traffic isolation, the method packet
It includes:
Terminal UE sends the first attach request information, first attach request to the wireless access network E-UTRAN of evolution
Information includes that the mobility management entity MME allowed is identified, and the MME of the permission is identified as and the terminal UE pre-set business class
The mark of the corresponding MME of type；
MME mark pair of the terminal UE after receiving the attachment that the E-UTRAN is sent and receiving information, with the permission
The MME answered is interacted by the E-UTRAN, wherein it is the E-UTRAN to the permission that the attachment, which receives information,
After MME identifies the second attach request information of corresponding MME transmission, the MME of the permission received identifies corresponding MME hair
The attachment sent receives information, and the second attach request information includes the information of the terminal UE.
Optionally, the obtaining step of the MME mark of the permission is as follows:
Terminal UE sends first to the E-UTRAN and obtains MME identification information；
Terminal UE checks whether to receive the permission access information that the E-UTRAN is sent or refusal access information, if
Permission access information is received, then extracts MME mark from the permission access information, and saves as the MME mark of permission；
If receiving refusal access information, MME mark is extracted from the refusal access information, and save as and forbid
MME mark, terminal UE to the E-UTRAN send second obtain MME identification information, it is described second obtain MME identification information
Forbid MME to identify including described, until terminal UE receives permission access information, is then extracted from the permission access information
MME mark, and save as the MME mark of permission.
Second aspect, the present invention also propose a kind of implementation method of communication system traffic isolation, which comprises
The wireless access network E-UTRAN of evolution receives the first attach request information that terminal UE is sent, wherein described first
Attach request information includes that the mobility management entity MME allowed is identified, and the MME of the permission is identified as pre- with the terminal UE
If the mark of the corresponding MME of type of service；
The E-UTRAN extracts the MME mark of the permission from the first attach request information, and to the permission
MME identify corresponding MME and send the second attach request information, the second attach request information includes the letter of the terminal UE
Breath；
The E-UTRAN is identified after the attachment that corresponding MME is sent receives information in the MME for receiving the permission,
The attachment is received into information and is sent to the terminal UE, so that the terminal UE passes through the E-UTRAN and the permission
MME identifies corresponding MME and interacts.
Optionally, the obtaining step of the MME mark of the permission is as follows:
The E-UTRAN is after receive terminal UE transmission first obtains MME identification information, at random from predetermined number
MME in choose a MME, and to the MME of selection send the second attach request, wherein it is every in the MME of the predetermined number
A MME corresponds to a kind of preset type of service, and the second attach request information includes the information of the terminal UE；
The E-UTRAN checks whether the permission access information that the MME for receiving the selection is sent or refusal access letter
Breath, if the E-UTRAN receives permission access information, sends the terminal UE for the permission access information, with
The MME for making the terminal UE obtain permission from the permission access information is identified；
If the E-UTRAN receives refusal access information, the terminal is sent by the refusal access information
UE, and receive the terminal UE is sent second and obtain MME identification information；
The E-UTRAN is after the MME mark that the second acquisition MME identification information extraction is forbidden, at random from residue
MME in choose a MME, and the second attach request is sent to the MME of selection, until the remaining MME is empty or described
E-UTRAN receives permission access information, then the E-UTRAN according to the remaining MME be it is empty or it is described allow to access believe
Breath, executes corresponding movement, so that the MME that the terminal UE obtains permission from the permission access information is identified, wherein institute
Stating remaining MME is that the MME forbidden described in exclusion from the MME of the predetermined number identifies the remaining MME of corresponding MME.
Optionally, the E-UTRAN is sky according to the remaining MME, corresponding movement is executed, so that the terminal UE
The MME that permission is obtained from the permission access information is identified, comprising:
The E-UTRAN sends connection release message to the terminal UE, and the connection release message includes without suitable MME
Information, so that the terminal UE after receiving the connection release message, empties the MME mark of storage forbidden,
And turn back on the obtaining step for carrying out the MME mark of the permission.
Optionally, the E-UTRAN executes corresponding movement according to the permission access information, so that the end
The MME that end UE obtains permission from the permission access information is identified, comprising:
The permission access information is sent the terminal UE by the E-UTRAN, so that the terminal UE permits from described
Perhaps the MME mark of permission is obtained in access information.
The third aspect, the present invention also propose that a kind of terminal, the terminal include:
Transmission unit, for sending the first attach request information to the wireless access network E-UTRAN of evolution, described first is attached
Solicited message include that the mobility management entity MME allowed is identified, the MME of the permission is identified as default with the terminal UE
The mark of the corresponding MME of type of service；
Interactive unit, after receiving information in the attachment for receiving the E-UTRAN transmission, with the permission
MME identifies corresponding MME and interacts by the E-UTRAN, wherein the attachment receive information for the E-UTRAN to
After the MME of the permission identifies the second attach request information of corresponding MME transmission, the MME of the permission received is identified
The attachment that corresponding MME is sent receives information, and the second attach request information includes the information of the terminal UE.
Optionally, the transmission unit, which is also used to send first to the E-UTRAN, obtains MME identification information and second
Obtain MME identification information；
Correspondingly, the terminal UE further include:
Processing unit, after being used to send the first acquisition MME identification information to the E-UTRAN in the transmission unit,
It checks whether to receive the permission access information or refusal access information that the E-UTRAN is sent, if receiving allows to access
Information then extracts MME mark from the permission access information, and saves as the MME mark of permission；
If receiving refusal access information, MME mark is extracted from the refusal access information, and save as and forbid
MME mark, and by the transmission unit to the E-UTRAN send second obtain MME identification information, it is described second obtain
MME identification information forbids MME to identify described in including, until the processing unit receives permission access information, then permits from described
Perhaps MME mark is extracted in access information, and saves as the MME mark of permission.
Fourth aspect, the present invention also propose that a kind of base station, the base station include:
Receiving unit, for receiving the first attach request information of terminal UE transmission, wherein the first attach request letter
Breath includes that the mobility management entity MME allowed is identified, and the MME of the permission is identified as and the terminal UE pre-set business type
The mark of corresponding MME；
First processing units, the MME for extracting the permission from the first attach request information are identified, and to institute
The MME for stating permission identifies corresponding MME and sends the second attach request information, and the second attach request information includes the terminal
The information of UE；
The second processing unit receives information for identifying the attachment that corresponding MME is sent in the MME for receiving the permission
Later, the attachment is received into information and is sent to the terminal UE, so that the terminal UE passes through the base station and the permission
MME identify corresponding MME and interact.
Optionally, the receiving unit is also used to after receive terminal UE transmission first obtains MME identification information,
A MME is chosen from the MME of predetermined number at random, and sends the second attach request to the MME of selection, wherein is described default
Each MME in the MME of number corresponds to a kind of preset type of service, and the second attach request information includes the terminal UE
Information；
Correspondingly, the base station further include:
Third processing unit, the permission access information or refusal sent for checking whether the MME for receiving the selection
Access information sends the terminal UE for the permission access information, so that described if receiving permission access information
The MME that terminal UE obtains permission from the permission access information is identified；
If receiving refusal access information, the terminal UE is sent by the refusal access information, and receive institute
State terminal UE transmission second obtains MME identification information；
The third processing unit from it is described second acquisition MME identification information extract forbid MME mark after, at random from
Choose a MME in remaining MME, and send the second attach request to the MME of selection, until the remaining MME be it is empty or
The third processing unit receives permission access information, then the third processing unit according to the remaining MME be it is empty or
The permission access information, executes corresponding movement, so that the terminal UE obtains permission from the permission access information
MME mark, wherein the remaining MME is corresponding for the MME mark forbidden described in the exclusion from the MME of the predetermined number
MME remaining MME.
Compared with the prior art, implementation method, terminal and the base station of communication system traffic of the invention isolation are according to dedicated
The business characteristic (i.e. the number of type of service) of network is divided into multiple service areas (the corresponding type of service of a service area),
Each service area is equivalent to an independent network, and does not interfere with each other between each service area, to guarantee that business datum is complete
Isolation.And in order to make full use of the limited physical frequencies resource of dedicated network, each service area shares an E-UTRAN.Net
Each terminal in network is specified which kind of type of service specifically handled by operator.The type of service of terminal by MME identify into
Row identification.When terminal accesses E-UTRAN, terminal carries the service type information belonging to oneself, and E-UTRAN takes according to access terminal
The corresponding MME of service area information searching of band is linked into the MME for being responsible for transmitting affiliated business, realizes the business of different service types
Between isolation.
Detailed description of the invention
Fig. 1 shows 3GPP LTE Universal Communication System architecture diagram；
Fig. 2 shows a kind of implementation method flow charts of communication system traffic isolation；
Fig. 3 shows a kind of implementation method flow chart of communication system traffic isolation；
Fig. 4 shows a kind of terminal structure figure；
Fig. 5 shows a kind of base station structure diagram；
Fig. 6 shows a kind of dedicated network networking mode；
Fig. 7 shows the flow diagram that terminal UE accesses network for the first time.
Specific embodiment
In order to make the object, technical scheme and advantages of the embodiment of the invention clearer, below in conjunction with the embodiment of the present invention
In attached drawing, technical solution in the embodiment of the present invention is explicitly described, it is clear that described embodiment is the present invention
A part of the embodiment, instead of all the embodiments.Based on the embodiments of the present invention, those of ordinary skill in the art are not having
Every other embodiment obtained under the premise of creative work is made, shall fall within the protection scope of the present invention.
As shown in Fig. 2, the present embodiment discloses a kind of implementation method of communication system traffic isolation, the method may include with
Lower step:
101, terminal UE sends the first attach request information, first attachment to the wireless access network E-UTRAN of evolution
Solicited message includes that the mobility management entity MME allowed is identified, and the MME of the permission, which is identified as, presets industry with the terminal UE
The mark of the corresponding MME of service type；
102, terminal UE is marked after receiving the attachment that the E-UTRAN is sent and receiving information with the MME of the permission
Know corresponding MME to interact by the E-UTRAN, wherein it is that the E-UTRAN permits to described that the attachment, which receives information,
Perhaps after MME identifies the second attach request information of corresponding MME transmission, the MME mark of the permission received is corresponding
The attachment that MME is sent receives information, and the second attach request information includes the information of the terminal UE.
In the present embodiment, the obtaining step of the MME mark of the permission is as follows:
Terminal UE sends first to the E-UTRAN and obtains MME identification information；
Terminal UE checks whether to receive the permission access information that the E-UTRAN is sent or refusal access information, if
Permission access information is received, then extracts MME mark from the permission access information, and saves as the MME mark of permission；
If receiving refusal access information, MME mark is extracted from the refusal access information, and save as and forbid
MME mark, terminal UE to the E-UTRAN send second obtain MME identification information, it is described second obtain MME identification information
Forbid MME to identify including described, until terminal UE receives permission access information, is then extracted from the permission access information
MME mark, and save as the MME mark of permission.
As shown in figure 3, a kind of implementation method of communication system traffic isolation is also disclosed in the present embodiment, which comprises
201, the wireless access network E-UTRAN of evolution receives the first attach request information that terminal UE is sent, wherein described
First attach request information includes that the mobility management entity MME allowed is identified, and the MME of the permission is identified as and the terminal
The mark of the corresponding MME of UE pre-set business type；
202, the E-UTRAN extracts the MME mark of the permission from the first attach request information, and to described
The MME of permission identifies corresponding MME and sends the second attach request information, and the second attach request information includes the terminal UE
Information；
203, the E-UTRAN the MME for receiving the permission identify the attachment that corresponding MME is sent receive information it
Afterwards, the attachment is received into information and is sent to the terminal UE, so that the terminal UE passes through the E-UTRAN and the permission
MME identify corresponding MME and interact.
In the present embodiment, the obtaining step of the MME mark of the permission is as follows:
The E-UTRAN is after receive terminal UE transmission first obtains MME identification information, at random from predetermined number
MME in choose a MME, and to the MME of selection send the second attach request, wherein it is every in the MME of the predetermined number
A MME corresponds to a kind of preset type of service, and the second attach request information includes the information of the terminal UE；
The E-UTRAN checks whether the permission access information that the MME for receiving the selection is sent or refusal access letter
Breath, if the E-UTRAN receives permission access information, sends the terminal UE for the permission access information, with
The MME for making the terminal UE obtain permission from the permission access information is identified；
If the E-UTRAN receives refusal access information, the terminal is sent by the refusal access information
UE, and receive the terminal UE is sent second and obtain MME identification information；
The E-UTRAN is after the MME mark that the second acquisition MME identification information extraction is forbidden, at random from residue
MME in choose a MME, and the second attach request is sent to the MME of selection, until the remaining MME is empty or described
E-UTRAN receives permission access information, then the E-UTRAN according to the remaining MME be it is empty or it is described allow to access believe
Breath, executes corresponding movement, so that the MME that the terminal UE obtains permission from the permission access information is identified, wherein institute
Stating remaining MME is that the MME forbidden described in exclusion from the MME of the predetermined number identifies the remaining MME of corresponding MME.
In the present embodiment, the E-UTRAN is sky according to the remaining MME, corresponding movement is executed, so that the end
The MME that end UE obtains permission from the permission access information is identified, comprising:
The E-UTRAN sends connection release message to the terminal UE, and the connection release message includes without suitable MME
Information, so that the terminal UE after receiving the connection release message, empties the MME mark of storage forbidden,
And turn back on the obtaining step for carrying out the MME mark of the permission.
In the present embodiment, the E-UTRAN executes corresponding movement according to the permission access information, so that institute
State the MME mark that terminal UE obtains permission from the permission access information, comprising:
The permission access information is sent the terminal UE by the E-UTRAN, so that the terminal UE permits from described
Perhaps the MME mark of permission is obtained in access information.
As shown in figure 4, a kind of terminal is also disclosed in the present embodiment, the terminal includes:
Transmission unit, for sending the first attach request information to the wireless access network E-UTRAN of evolution, described first is attached
Solicited message include that the mobility management entity MME allowed is identified, the MME of the permission is identified as default with the terminal UE
The mark of the corresponding MME of type of service；
Interactive unit, after receiving information in the attachment for receiving the E-UTRAN transmission, with the permission
MME identifies corresponding MME and interacts by the E-UTRAN, wherein the attachment receive information for the E-UTRAN to
After the MME of the permission identifies the second attach request information of corresponding MME transmission, the MME of the permission received is identified
The attachment that corresponding MME is sent receives information, and the second attach request information includes the information of the terminal UE.
In the present embodiment, the transmission unit be also used to the E-UTRAN send first obtain MME identification information and
Second obtains MME identification information；
Correspondingly, the terminal UE further include:
Processing unit, after being used to send the first acquisition MME identification information to the E-UTRAN in the transmission unit,
It checks whether to receive the permission access information or refusal access information that the E-UTRAN is sent, if receiving allows to access
Information then extracts MME mark from the permission access information, and saves as the MME mark of permission；
If receiving refusal access information, MME mark is extracted from the refusal access information, and save as and forbid
MME mark, and by the transmission unit to the E-UTRAN send second obtain MME identification information, it is described second obtain
MME identification information forbids MME to identify described in including, until the processing unit receives permission access information, then permits from described
Perhaps MME mark is extracted in access information, and saves as the MME mark of permission.
As shown in figure 5, a kind of base station is also disclosed in the present embodiment, the base station includes:
Receiving unit, for receiving the first attach request information of terminal UE transmission, wherein the first attach request letter
Breath includes that the mobility management entity MME allowed is identified, and the MME of the permission is identified as and the terminal UE pre-set business type
The mark of corresponding MME；
First processing units, the MME for extracting the permission from the first attach request information are identified, and to institute
The MME for stating permission identifies corresponding MME and sends the second attach request information, and the second attach request information includes the terminal
The information of UE；
The second processing unit receives information for identifying the attachment that corresponding MME is sent in the MME for receiving the permission
Later, the attachment is received into information and is sent to the terminal UE, so that the terminal UE passes through the base station and the permission
MME identify corresponding MME and interact.
In the present embodiment, the receiving unit is also used to obtain MME identification information in receive terminal UE transmission first
Later, a MME is chosen from the MME of predetermined number at random, and sends the second attach request to the MME of selection, wherein is described
Each MME in the MME of predetermined number corresponds to a kind of preset type of service, and the second attach request information includes the end
Hold the information of UE；
Correspondingly, the base station further include:
Third processing unit, the permission access information or refusal sent for checking whether the MME for receiving the selection
Access information sends the terminal UE for the permission access information, so that described if receiving permission access information
The MME that terminal UE obtains permission from the permission access information is identified；
If receiving refusal access information, the terminal UE is sent by the refusal access information, and receive institute
State terminal UE transmission second obtains MME identification information；
The third processing unit from it is described second acquisition MME identification information extract forbid MME mark after, at random from
Choose a MME in remaining MME, and send the second attach request to the MME of selection, until the remaining MME be it is empty or
The third processing unit receives permission access information, then the third processing unit according to the remaining MME be it is empty or
The permission access information, executes corresponding movement, so that the terminal UE obtains permission from the permission access information
MME mark, wherein the remaining MME is corresponding for the MME mark forbidden described in the exclusion from the MME of the predetermined number
MME remaining MME.
As shown in fig. 6, the present embodiment discloses a kind of dedicated network networking mode, which realizes two kinds of business, industry
Business area 1 and service area 2 will be realized completely isolated.UE1 realizes business 1, and UE2 realizes business 2, and two service areas share an E-
UTRAN.The flow diagram that the terminal UE 1 that Fig. 7 shows accesses network for the first time (accesses UE2 the process of network for the first time
It is identical as UE1), i.e., the acquisition flow diagram of the MME mark allowed in above-described embodiment, steps are as follows:
1, UE1 sends first to E-UTRAN and obtains MME identification information；
2, E-UTRAN is after receive UE1 transmission first obtains MME identification information, at random from the MME of predetermined number
One MME (MME1 is chosen in the present embodiment) of middle selection, and the second attach request, the second attach request packet are sent to MME1
Include the information of UE1；Wherein, E-UTRAN can select a MME by load sharing, the MME for selecting UE access quantity most；
3, MME1 checks whether UE1 belongs to the service area, after determination is not belonging to the service area, sends to E-UTRAN
Refuse access information, includes MME1 mark in the information；
4, E-UTRAN is sent to UE1 for access information is refused, so that UE1 extracts MME1 mark from refusal access information,
And save as the MME mark forbidden；
5, UE1 sends second to E-UTRAN and obtains MME identification information, includes the MME mark forbidden in the information, i.e.,
MME1 mark；
6, E-UTRAN sends the second attachment to MME2 after receive UE1 transmission second obtains MME identification information
Request, the second attach request information includes the information of UE1；
7, MME2 checks whether UE1 belongs to the service area, after determination belongs to the service area, sends and permits to E-UTRAN
Perhaps access information includes MME2 mark in the information；
8, E-UTRAN will allow access information to be sent to UE1, identify so that UE1 extracts MME2 from permission access information,
And save as the MME mark of permission.
9, UE1 is interacted by E-UTRAN with MME2.
The embodiment is only there are two MME, the case where for multiple MME, can repeat the above steps, until UE1 is found pair
The MME answered.
In a particular application, operator's type of service fixed to UE configuration, and subregion is carried out to type of service, it is different
EPC is responsible for different types of service, and the UE and EPC of each type of service share an E-UTRAN network.UE is accessed in first time
When, E-UTRAN is that UE randomly chooses a service area according to the algorithm of load sharing, if not being linked into correct EPC,
The EPC carries MME mark in the refusal access message of return, and UE thinks that the MME is the MME forbidden after receiving the message,
And MME mark is stored in non-volatile storage equipment, and access process is re-initiated, E-UTRAN is from the MME in addition to forbidding
A MME access is selected in other MME in list again, repeats above step, until being linked into correct EPC, UE is saved
The MME in access information is allowed to identify, it is believed that be registration MME.After UE is successfully accessed, cause to access again for some reason,
UE directly carries the MME information of the registration in the first attach request information, then E-UTRAN directly selects the MME and accessed.
If operator is to the service area information configuration mistake of UE or not to UE progress business subregion, E-UTRAN is in the institute to configuration
After thering is MME to be accessed and still fail, the UE is discharged, and the warning information of UE access failure is reported to operator, while UE will
The registration MME of preservation and the MME list forbidden all are removed, and re-start access.
Implementation method, terminal and the base station of communication system traffic isolation in above-described embodiment are according to the business of dedicated network
Feature (i.e. the number of type of service) is divided into multiple service areas (the corresponding type of service of a service area), each service area
It is equivalent to an independent network, and is not interfere with each other between each service area, to guarantee that business datum is completely isolated.And it is
The limited physical frequencies resource of dedicated network is made full use of, each service area shares an E-UTRAN.Each end in network
All specify which kind of type of service specifically handled by operator in end.The type of service of terminal is identified by MME.Terminal connects
When entering E-UTRAN, terminal carries the service type information belonging to oneself, and E-UTRAN believes according to the service area that access terminal carries
Breath searches corresponding MME and is linked into the MME for being responsible for transmitting affiliated business, realizes the isolation between the business of different service types.
It should be noted that, in this document, " first ", " second " and " third " is used merely to a statement and another
One statement distinguishes, rather than implies the relationship or sequence between these statements.
It will be understood by those skilled in the art that can be adaptively changed to the module in the equipment in embodiment
And they are provided in the different one or more equipment of the embodiment.It can be the block combiner in embodiment at one
A module, and furthermore they can be divided into a plurality of submodules or subunits or subassembliess.In addition to such feature and/or mistake
At least some of journey or unit are mutually exclusive places, can be using any combination to all spies disclosed in this specification
All process or units of sign and so disclosed any method or apparatus are combined.Unless expressly stated otherwise, originally
Each feature disclosed in specification can be replaced with an alternative feature that provides the same, equivalent, or similar purpose.
In addition, it will be appreciated by those of skill in the art that although some embodiments described herein include other embodiments
In included certain features rather than other feature, but the combination of the feature of different embodiments mean it is of the invention
Within the scope of and form different embodiments.
Various component embodiments of the invention can be implemented in hardware, or to run on one or more processors
Software module realize, or be implemented in a combination thereof.It will be understood by those of skill in the art that can be used in practice
In the equipment of microprocessor or digital signal processor (DSP) to realize a kind of browser terminal according to an embodiment of the present invention
Some or all components some or all functions.The present invention is also implemented as executing side as described herein
Some or all device or device programs (for example, computer program and computer program product) of method.It is such
It realizes that program of the invention can store on a computer-readable medium, or can have the shape of one or more signal
Formula.Such signal can be downloaded from an internet website to obtain, and perhaps be provided on the carrier signal or with any other shape
Formula provides.
Although the embodiments of the invention are described in conjunction with the attached drawings, but those skilled in the art can not depart from this hair
Various modifications and variations are made in the case where bright spirit and scope, such modifications and variations are each fallen within by appended claims
Within limited range.
Claims (6)
1. a kind of implementation method of communication system traffic isolation, which is characterized in that the described method includes:
Terminal UE sends the first attach request information, the first attach request information to the wireless access network E-UTRAN of evolution
Mobility management entity MME mark including permission, the MME of the permission are identified as and the terminal UE pre-set business type phase
The mark of corresponding MME；
Terminal UE is corresponding with the MME of permission mark after receiving the attachment that the E-UTRAN is sent and receiving information
MME is interacted by the E-UTRAN, wherein it is MME of the E-UTRAN to the permission that the attachment, which receives information,
After identifying the second attach request information of corresponding MME transmission, the MME of the permission received identifies corresponding MME and sends
Attachment receive information, the second attach request information includes the information of the terminal UE；
The obtaining step of the MME mark of the permission is as follows:
Terminal UE sends first to the E-UTRAN and obtains MME identification information；
Terminal UE checks whether to receive the permission access information or refusal access information that the E-UTRAN is sent, if received
To access information is allowed, then MME mark is extracted from the permission access information, and save as the MME mark of permission；
If receiving refusal access information, MME mark is extracted from the refusal access information, and save as and forbid
MME mark, terminal UE send second to the E-UTRAN and obtain MME identification information, and described second obtains MME identification information packet
Forbid MME to identify described in including, until terminal UE receives permission access information, then extracts MME from the permission access information
Mark, and save as the MME mark of permission.
2. a kind of implementation method of communication system traffic isolation, which is characterized in that the described method includes:
The wireless access network E-UTRAN of evolution receives the first attach request information that terminal UE is sent, wherein first attachment
Solicited message includes that the mobility management entity MME allowed is identified, and the MME of the permission, which is identified as, presets industry with the terminal UE
The mark of the corresponding MME of service type；
The E-UTRAN extracts the MME mark of the permission from the first attach request information, and to the permission
MME identifies corresponding MME and sends the second attach request information, and the second attach request information includes the letter of the terminal UE
Breath；
The E-UTRAN is after the attachment that the MME for receiving the permission identifies corresponding MME transmission receives information, by institute
It states attachment and receives information and be sent to the terminal UE, so that the terminal UE passes through the E-UTRAN and the MME of the permission is marked
Know corresponding MME to interact；
The obtaining step of the MME mark of the permission is as follows:
The E-UTRAN is after receive terminal UE transmission first obtains MME identification information, at random from predetermined number
A MME is chosen in MME, and sends the second attach request to the MME of selection, wherein each of the MME of the predetermined number
MME corresponds to a kind of preset type of service, and the second attach request information includes the information of the terminal UE；
The E-UTRAN checks whether the permission access information that the MME for receiving the selection is sent or refusal access information, such as
E-UTRAN described in fruit receives permission access information, then the terminal UE is sent by the permission access information, so that described
The MME that terminal UE obtains permission from the permission access information is identified；
If the E-UTRAN receives refusal access information, the terminal UE is sent by the refusal access information, and
It receives the terminal UE is sent second and obtains MME identification information；
The E-UTRAN is after the MME mark that the second acquisition MME identification information extraction is forbidden, at random from remaining MME
One MME of middle selection, and the second attach request is sent to the MME of selection, until the remaining MME is the empty or described E-
UTRAN receives permission access information, then the E-UTRAN is the empty or described permission access information according to the remaining MME,
Corresponding movement is executed, so that the MME that the terminal UE obtains permission from the permission access information is identified, wherein described
Remaining MME is that the MME forbidden described in exclusion from the MME of the predetermined number identifies the remaining MME of corresponding MME.
3. according to the method described in claim 2, it is characterized in that, the E-UTRAN according to the remaining MME be sky, hold
The corresponding movement of row, so that the MME that the terminal UE obtains permission from the permission access information is identified, comprising:
The E-UTRAN sends connection release message to the terminal UE, and the connection release message includes without suitable MME letter
Breath, so that the terminal UE after receiving the connection release message, empties the MME mark of storage forbidden, and
Turn back on the obtaining step for carrying out the MME mark of the permission.
4. according to the method described in claim 2, it is characterized in that, the E-UTRAN is executed according to the permission access information
Corresponding movement, so that the MME that the terminal UE obtains permission from the permission access information is identified, comprising:
The permission access information is sent the terminal UE by the E-UTRAN, so that the terminal UE allows to connect from described
Enter to obtain the MME mark of permission in information.
5. a kind of terminal, which is characterized in that the terminal includes:
Transmission unit, for sending the first attach request information to the wireless access network E-UTRAN of evolution, first attachment is asked
Seeking information includes that the mobility management entity MME allowed is identified, and the MME of the permission is identified as and the terminal UE pre-set business
The mark of the corresponding MME of type；
Interactive unit, for being marked with the MME of the permission after receiving the attachment that the E-UTRAN is sent and receiving information
Know corresponding MME to interact by the E-UTRAN, wherein it is that the E-UTRAN permits to described that the attachment, which receives information,
Perhaps after MME identifies the second attach request information of corresponding MME transmission, the MME mark of the permission received is corresponding
The attachment that MME is sent receives information, and the second attach request information includes the information of the terminal UE；
The transmission unit is also used to send first to the E-UTRAN and obtains MME identification information and the second acquisition MME mark
Information；
Correspondingly, the terminal UE further include:
Processing unit, for checking after the transmission unit sends the first acquisition MME identification information to the E-UTRAN
Whether permission access information or refusal access information that the E-UTRAN send is received, if receiving permission access information,
MME mark is then extracted from the permission access information, and saves as the MME mark of permission；
If receiving refusal access information, MME mark is extracted from the refusal access information, and save as and forbid
MME mark, and send second to the E-UTRAN by the transmission unit and obtain MME identification information, described second obtains
MME identification information forbids MME to identify described in including, until the processing unit receives permission access information, then permits from described
Perhaps MME mark is extracted in access information, and saves as the MME mark of permission.
6. a kind of base station, which is characterized in that the base station includes:
Receiving unit, for receiving the first attach request information of terminal UE transmission, wherein the first attach request packet
The mobility management entity MME mark of permission is included, the MME of the permission is identified as opposite with the terminal UE pre-set business type
The mark of the MME answered；
First processing units, the MME for extracting the permission from the first attach request information is identified, and is permitted to described
Perhaps MME identifies corresponding MME and sends the second attach request information, and the second attach request information includes the terminal UE
Information；
The second processing unit, for identified in the MME for receiving the permission attachment that corresponding MME is sent receive information it
Afterwards, the attachment is received into information and is sent to the terminal UE, so that the terminal UE passes through the base station and the permission
MME identifies corresponding MME and interacts；
The receiving unit is also used to after receive terminal UE transmission first obtains MME identification information, at random from default
A MME is chosen in the MME of number, and sends the second attach request to the MME of selection, wherein in the MME of the predetermined number
Each MME correspond to a kind of preset type of service, the second attach request information includes the information of the terminal UE；
Correspondingly, the base station further include:
Third processing unit, for checking whether to receive permission access information or the refusal access of the MME transmission of the selection
Information sends the terminal UE for the permission access information, so that the terminal if receiving permission access information
The MME that UE obtains permission from the permission access information is identified；
If receiving refusal access information, the terminal UE is sent by the refusal access information, and receive the end
Hold the second acquisition MME identification information that UE is sent；
The third processing unit is after the MME mark that the second acquisition MME identification information extraction is forbidden, at random from residue
MME in choose a MME, and the second attach request is sent to the MME of selection, until the remaining MME is empty or described
Third processing unit receives permission access information, then the third processing unit is empty or described according to the remaining MME
Allow access information, execute corresponding movement, so that the MME that the terminal UE obtains permission from the permission access information is marked
Know, wherein the remaining MME identifies corresponding MME institute for the MME forbidden described in the exclusion from the MME of the predetermined number
Remaining MME.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201510043880.5A CN105991515B (en) | 2015-01-28 | 2015-01-28 | A kind of implementation method, terminal and the base station of communication system traffic isolation |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201510043880.5A CN105991515B (en) | 2015-01-28 | 2015-01-28 | A kind of implementation method, terminal and the base station of communication system traffic isolation |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN105991515A CN105991515A (en) | 2016-10-05 |
| CN105991515B true CN105991515B (en) | 2019-04-19 |
Family
ID=57034237
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201510043880.5A Expired - Fee Related CN105991515B (en) | 2015-01-28 | 2015-01-28 | A kind of implementation method, terminal and the base station of communication system traffic isolation |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN105991515B (en) |
Families Citing this family (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN108206748B (en) * | 2016-12-19 | 2021-01-15 | 普天信息技术有限公司 | Core network backup method applied to TD-LTE (time division-Long term evolution) Internet of things service isolation environment |
| CN108616956B (en) * | 2017-01-16 | 2020-10-20 | 普天信息技术有限公司 | Method for service isolation in electric power wireless private network |
| CN111465018B (en) * | 2019-01-21 | 2021-12-31 | 华为技术有限公司 | Method, equipment and system for enhancing cross-network access security |
| CN114269004B (en) * | 2020-09-16 | 2024-01-30 | 中国电信股份有限公司 | Attachment method and communication method of terminal of Internet of things and corresponding system |
Citations (6)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN1561042A (en) * | 2004-02-17 | 2005-01-05 | 中兴通讯股份有限公司 | Method of managing mobile terminal by radio local network insertion point equipment |
| CN101778388A (en) * | 2009-01-13 | 2010-07-14 | 华为技术有限公司 | Communication system, access control entity and method for controlling access of user equipment |
| CN103548376A (en) * | 2011-05-23 | 2014-01-29 | 瑞典爱立信有限公司 | Implementing EPC in a cloud computer with OPENFLOW data plane |
| CN103686649A (en) * | 2013-12-26 | 2014-03-26 | 上海粱江通信系统股份有限公司 | Region communication management and control system and method based on wireless network and core network interface signaling |
| CN104105086A (en) * | 2013-04-11 | 2014-10-15 | 中兴通讯股份有限公司 | Selection method and device of Prose Server, and user registration method and device |
| WO2014169950A1 (en) * | 2013-04-16 | 2014-10-23 | Nokia Solutions And Networks Oy | Mobility management entity (mme) triggered detach and re-attach to a specific target mme |
-
2015
- 2015-01-28 CN CN201510043880.5A patent/CN105991515B/en not_active Expired - Fee Related
Patent Citations (6)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN1561042A (en) * | 2004-02-17 | 2005-01-05 | 中兴通讯股份有限公司 | Method of managing mobile terminal by radio local network insertion point equipment |
| CN101778388A (en) * | 2009-01-13 | 2010-07-14 | 华为技术有限公司 | Communication system, access control entity and method for controlling access of user equipment |
| CN103548376A (en) * | 2011-05-23 | 2014-01-29 | 瑞典爱立信有限公司 | Implementing EPC in a cloud computer with OPENFLOW data plane |
| CN104105086A (en) * | 2013-04-11 | 2014-10-15 | 中兴通讯股份有限公司 | Selection method and device of Prose Server, and user registration method and device |
| WO2014169950A1 (en) * | 2013-04-16 | 2014-10-23 | Nokia Solutions And Networks Oy | Mobility management entity (mme) triggered detach and re-attach to a specific target mme |
| CN103686649A (en) * | 2013-12-26 | 2014-03-26 | 上海粱江通信系统股份有限公司 | Region communication management and control system and method based on wireless network and core network interface signaling |
Also Published As
| Publication number | Publication date |
|---|---|
| CN105991515A (en) | 2016-10-05 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN106465212B (en) | Cell selection and reselection method for LC-MTC communication UE and user equipment | |
| CN104272806B (en) | Special block and escape order | |
| EP3668134A1 (en) | Wireless communication method, network device, and terminal device | |
| US11096232B2 (en) | Enhancements to connection rejection procedures | |
| US9408231B2 (en) | Extended access barring mechanisms for machine type communications | |
| CN112203336B (en) | Wireless access control method, device and system | |
| CN105991515B (en) | A kind of implementation method, terminal and the base station of communication system traffic isolation | |
| US10448286B2 (en) | Mobility in mobile communications network | |
| CN108307695A (en) | Network node, wireless device and method therein for manipulating the radio access network in cordless communication network (RAN) contextual information | |
| CN110431860A (en) | Cellular telecommunication network | |
| JP6043430B2 (en) | User classification method and apparatus | |
| CN105850183B (en) | Wireless network access control method, device and system | |
| CN115426653A (en) | Method and device for determining category information | |
| EP3866506A1 (en) | Method and device for controlling terminal and network connection | |
| CN105165068A (en) | Entity and a method of operating an entity of a wireless local area network | |
| US11005740B2 (en) | Data transmission method, device, and network system | |
| KR20180016525A (en) | Resource allocation method, UE, and base station | |
| CN103731919A (en) | Paging method and device based on priorities | |
| WO2019030731A1 (en) | Selection of beams to be included in the measurement report | |
| US20180027488A1 (en) | Transmission Method and Apparatus of Discovery Information and Communications System | |
| CN103974331B (en) | A kind of load-balancing method of heterogeneous network, equipment and system | |
| US10341986B2 (en) | Method for transmitting a paging message to a terminal using a virtual network node | |
| CN107182045B (en) | Method and device for mobility management of communication network system | |
| CN105682082B (en) | Terminal identification method and device | |
| CN107948995A (en) | The detection method and device of LTE network access result, computer-readable storage medium |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant | ||
| CF01 | Termination of patent right due to non-payment of annual fee | ||
| CF01 | Termination of patent right due to non-payment of annual fee |
Granted publication date: 20190419 |