WO2011069423A1

WO2011069423A1 - Method, device and system for license control

Info

Publication number: WO2011069423A1
Application number: PCT/CN2010/079292
Authority: WO
Inventors: 张勇
Original assignee: 华为技术有限公司
Priority date: 2009-12-10
Filing date: 2010-11-30
Publication date: 2011-06-16
Also published as: CN101741833A

Abstract

The present invention relates to the field of communications technology, and discloses a method, device and system for license control. The method includes: a License Control Center (LCC) loads and analyzes a license file, and the license item acquired by the LCC is obtained; the LCC confirms the license content required to be executed by a license executing device; the LCC sends the license content carried by a license control message to the license executing device. With the technical solution provided by the present invention, the efficiency of license control can be improved.

Description

Method, device and system for license control

The present application claims priority to Chinese Patent Application No. 200910188858.4, the entire disclosure of which is hereby incorporated by reference in its entirety in its entirety in in. TECHNICAL FIELD The present invention relates to the field of communications technologies, and in particular, to a method, device, and system for implementing license control. BACKGROUND OF THE INVENTION A license is a form of contract for a supplier/operator to authorize/authorize the range of products sold/purchased. Through the license, the operator can obtain the corresponding service promised by the supplier. The method of authorizing and selling according to the contract is called selling by license; the technology for ensuring the effective implementation of the license is called License technology. By purchasing a specific license, operators can flexibly choose the network functions and capacity that are appropriate for a particular stage to maximize investment protection.

The license is usually in the form of a license file. The license file usually contains the device information of the license file to bind the device to the license file. In this way, on the one hand, the license of the operator cannot be stolen by others, and the interests of the operator are protected; on the other hand, the license file cannot be abused by the operator to protect the interests of the equipment manufacturer.

Currently, the license control mode is implemented by distributing the corresponding license file to each device to implement function control or resource control. However, the use of this license control method is inefficient. SUMMARY OF THE INVENTION A technical problem to be solved by embodiments of the present invention is to provide a method, device, and system for license control to improve the efficiency of license control. In order to solve the above technical problem, the object of the present invention is achieved by the following technical solutions: In an aspect of the present invention, a license control method is provided, including: the license control center LCC loads and parses a license file, and obtains the LCC acquisition. The license item includes the license content; the LCC determines the license content required to license the implementation of the device; and the LCC carries the license content in the license control message to the license enforcement device.

In another aspect of the present invention, another license control method is provided, including: the license implementation device receives a license control message sent by the license control center LCC; the license implementation device acquires the license content that needs to be implemented from the license control message; The device implements license control based on the licensed content that needs to be implemented.

A further aspect of the embodiments of the present invention provides a license control device, including: a parsing module, configured to load and parse a license file, obtain a license item acquired by the license control device, where the license item includes a license content; And a sending processing module, configured to carry the licensed content in the license control message and send the license content to the license implementing device.

According to still another aspect of the embodiments of the present invention, a license implementation apparatus is provided, including: a receiving module, configured to receive a permission control message sent by a license control center LCC; and an acquiring module, configured to acquire a requirement from a license control message received by the receiving module The license content of the implementation; the implementation module, configured to implement the license control according to the license content that needs to be implemented by the acquisition module.

According to still another aspect of the present invention, a license control system is provided, comprising: the foregoing license control device, and the foregoing license implementation device.

It can be seen from the above technical solution that since the license content required to implement the device implementation can be obtained from the loading file, the license content required to implement the device implementation is sent to the license implementation device using the format of the message, compared to the prior art distribution license. The technical solution of the file does not need to send a large amount of redundant information, so the effective information ratio is high, the transmission efficiency is improved, and the occupation of transmission resources is reduced. BRIEF DESCRIPTION OF THE DRAWINGS In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings to be used in the embodiments or the description of the prior art will be briefly described below, and obviously, in the following description The drawings are only some embodiments of the invention, which will be apparent to those of ordinary skill in the art In other words, other drawings can be obtained based on these drawings without paying for creative labor.

1 is a flow chart of a license control method according to an embodiment of the present invention;

2 is a flow chart of a license control method according to an embodiment of the present invention;

3 is a flow chart of signaling interaction of a license control method according to an embodiment of the present invention;

4 is a flow chart of signaling interaction of a license control method according to an embodiment of the present invention;

FIG. 5 is a schematic diagram of a connection relationship between an AP and an AHR according to an embodiment of the present invention; FIG.

6 is a schematic diagram of a connection relationship between an AP and a MN in the embodiment of the present invention;

Figure Ί is a schematic diagram showing the connection relationship between an AP and an AG in the embodiment of the present invention;

8 is a schematic structural diagram of a license control device according to an embodiment of the present invention;

9 is a schematic structural diagram of a license implementation device according to an embodiment of the present invention;

FIG. 10 is a schematic structural diagram of a license implementation device according to an embodiment of the present invention. The technical solutions in the embodiments of the present invention are clearly and completely described in the following with reference to the accompanying drawings in the embodiments of the present invention. It is obvious that the described embodiments are only a part of the embodiments of the present invention, and not all of the embodiments. example. All other embodiments obtained by a person of ordinary skill in the art based on the embodiments of the present invention without creative efforts are within the scope of the present invention.

The embodiments of the present invention provide a method, a device, and a system for implementing the license control, which can improve the efficiency of implementing the license control and reduce the occupation of the transmission resources, especially when the L i cens e implementation device is large. A plurality of embodiments will be described below to explain the technical solutions of the embodiments of the present invention. It should be noted that the numbers of the embodiments are used for convenience of description only, and are not used as a basis for comparison between the embodiments.

Embodiment 1

1 is a schematic flowchart of a license control method according to an embodiment of the present invention. Referring to FIG. 1, the method includes the following steps:

1 01: The license control center LCC loads and parses the license file to obtain the license item acquired by the LCC; in this embodiment, it can pass a license control center (L i cens e Con t ro l Cent er , The LCC is referred to as the license file. If the license file is encrypted, it can be decrypted by the LCC first, and then the decrypted license file is loaded. If the license file was not encrypted before, it can be loaded directly. After that, the analysis is performed to obtain the license item acquired by the LCC. It can be understood that the license item includes the license content.

1 02: LCC determines the license content required to license the implementation of the device;

In this step, the LCC can determine which license content needs to be sent to the license implementation device through different implementations.

Specifically, this step can have different implementations, such as:

method one:

If the license implementation device has previously reported the license item information supported by the license implementation device (which can be implemented by reporting the license control request message), the license item information supported by the license implementation device may be combined to determine that the license implementation is required. Licensed content for device implementation.

The specific process may be: the LCC determines, according to the license item acquired by the LCC, the license item information supported by the license implementation device, and determines the license content required to implement the implementation of the device, for example, the intersection of the two, or the part of the intersection. License item.

Method 2:

If the LCC does not know the license item information supported by the license implementation device, the LCC can independently select the license item acquired by the LCC and send it to the license implementation device.

The specific process may be: After obtaining the license item acquired by the LCC, the LCC may select part or all of the license items acquired by the LCC as the license content required to implement the implementation of the device. In this case, after the license content is sent to the license implementation device, the license implementation device can perform the reselection according to its own support capability or its own needs.

1 03: The determined license content is carried in the license control message to the license enforcement device. In this step, the license content can be directly carried in the license control message to the license implementation device.

Optionally, based on the security considerations, before the permission control message is sent, the determined license content may be encrypted first, and then the encrypted license content is carried in the license control message for transmission.

The encryption algorithm used in the encryption process can be determined in various ways. For example: 1) The LCC receives a license control request message sent by the license implementation device, and the license control request message includes: License implementation of the encryption algorithm set information supported by the device. After receiving the license control request message,

The LCC can select an encryption algorithm supported by the LCC from the encryption algorithm set information as the encryption algorithm to be used. In addition, the LCC may also transmit the identifier of the selected encryption algorithm to the license implementing device in the form of a license control response message, so that the license implementing device may decrypt the received encrypted license content accordingly. This method can be understood as the encryption algorithm that the LCC and the license implementation device negotiate to determine the common support during the license control process. For example: 2) The encryption algorithm supported by the LCC and the license implementation device can be specified statically, that is, the default encryption algorithm. Mode 2) can be adopted directly, or it can be adopted if the negotiation is unsuccessful or there is no negotiation result.

In the prior art, since the distribution of files is in a private network, security issues are not considered, but as the technology develops, the License control starts to be used in the public network, and the Licens file distribution process becomes very Unsafe, easy to intercept and decipher. In the technical solution of the embodiment of the present invention, the license content may be further encrypted on the basis of using the message format to carry the license content, thereby ensuring that the license content is private during the delivery process, and further protecting the security of the license content, in particular It is aimed at the current use of Licensing in the public network, to avoid the license content being easily intercepted and deciphered.

On the other hand, optionally, based on the data integrity consideration, the determined permission content may be first processed before the permission control message is sent, and then the integrity processed license content is carried in the permission control message. Send in.

The integrity algorithm used for integrity processing can be determined in a variety of ways. For example: 1) The LCC receives the license control request message sent by the license implementation device, and the license control request message includes: the integrity algorithm set information supported by the license implementation device. After receiving the permission control request message, the LCC may select an integrity algorithm supported by the LCC from the integrity algorithm set information as the integrity algorithm to be used. In addition, the LCC may also send the identifier of the selected integrity algorithm to the license implementation device in the form of a license control response message, so that the license implementation device can perform integrity verification on the received integrity content after receiving the integrity. deal with. This approach can be understood as the LCC and the license implementation device negotiate to determine the commonly supported integrity algorithm during the license control process. For example: 2) The integrity algorithm supported by the LCC and the license implementation device, that is, the default integrity algorithm, can be specified in a static manner. Mode 2) can be adopted directly, or it can be adopted if the negotiation is unsuccessful or there is no negotiation result. It can be understood that integrity is a feature that data cannot be changed without authorization, that is, information that remains unmodified, uncorrupted, and lost during storage or transmission. Through the integrity processing of the licensed content, the probability of errors in the data transmission process of the licensed content can be reduced, and the accuracy of the transmission of the licensed content is improved.

The above encryption algorithm and integrity algorithm may be executed independently or together. The permission control request message carrying the encryption algorithm set information and the integrity algorithm set information may be that the same message carries two kinds of algorithm set information, or may be separately sent two messages respectively.

It can be seen from the technical description of the embodiment of the present invention that, in the license control method provided by the embodiment of the present invention, the license content that needs to be licensed to implement the device is determined from the loading file, and then the determined license content is determined by using the format of the message. The transmission to the license implementation device does not require sending a large amount of redundant information compared to the technical solution of the prior art distribution license file, so the effective information ratio is high, the transmission efficiency is improved, and the occupation of the transmission resource is reduced. Encryption and integrity processing further protect the security and integrity of the licensed content. Embodiment 2

FIG. 2 is a schematic flowchart of a license control method according to an embodiment of the present invention. Referring to FIG. 2, the method includes the following steps:

201: The license implementation device receives the license control message sent by the license control center LCC; in this embodiment, since the LCC sends the license content in the form of a license control message, the license implementation device may receive the license control message;

202: The license implementation device obtains the license content that needs to be implemented from the license control message; in this step, the license implementation device may parse the license control message to obtain the license content carried in the message;

If the license content to be implemented is the license content of the encryption and/or integrity processing performed by the LCC using the encryption algorithm and/or integrity algorithm supported by the LCC and the license implementation device, then, in this step, the license implementation device may be based on The encryption algorithm and/or integrity algorithm supported by the LCC and the license enforcement device performs corresponding decryption and/or integrity verification processing on the encrypted content after the encryption and/or integrity processing to obtain the license content that needs to be implemented.

For details on how to determine the encryption algorithm, the integrity algorithm, and the corresponding decryption algorithm and the integrity verification algorithm, refer to the description in the first embodiment, and details are not described herein again. On the other hand, if the license implementation device has previously sent the license information supported by itself to the LCC through the license control request message, the LCC has incorporated the support capability of the license implementation device in the process of selecting the license content, correspondingly, The license content carried in the license control message in step 201 can be understood as all the license items supported by the license implementation device. In this case, the license implementing device may use all of the license contents carried in the license control message as the license content to be implemented. Of course, you can also select a part of it as a license content that needs to be implemented. On the other hand, if the license item supported by the license implementation device is not known before the LCC sends the license control message, a part of the license content in the license control message sent by the LCC may not be supported by the license implementation device. In this case, the license implementation device may obtain the license item acquired by the LCC from the license control message, and combine the license item information supported by the license implementation device to select an intersection of the two (may be all or part of the intersection). Thereby determining the license content that needs to be implemented.

203: The license implementation device implements the license control according to the licensed content that is required to be implemented. In this step, the license implementation device may perform permission control according to the obtained license content that needs to be implemented, for example, perform function control or resource control of the device.

Alternatively, the license implementation result may be returned to the LCC after the license control is implemented as needed for the licensed content.

It can be understood that, in the license control method provided by the embodiment of the present invention, the sending and receiving of the licensed content is performed by using the format of the message, which avoids a large amount of redundant information compared to the technical solution of the prior art distributing the license file. The transmission and reception, therefore, the proportion of effective information is higher, the transmission efficiency is improved, and the occupation of transmission resources is reduced. If the license content is encrypted and integrity processed on the LCC side, the license content can be decrypted and integrity verified on the license enforcement device side, thus further protecting the security and integrity of the licensed content.

In addition, the solutions of the foregoing Embodiment 1 and Embodiment 2 can be periodically executed, and the L i cense content is updated in time to meet the requirements of real-time performance of the system.

Furthermore, the solutions of the first embodiment and the second embodiment described above are described by only one license implementation device. It is worth noting that in the actual scenario, the licensed implementation equipment may be massive and the distribution is relatively scattered. Embodiment 3 In an actual network, there are many license implementation devices, such as base station devices. Specifically, in an indoor coverage scenario, various types of miniaturized access devices can be implemented as license implementation devices, such as Universal Mobile Telecommunications System (UMTS, Access Point), global Mobile System (GSM, Global System for Mobile communication) AP, GSM (Pico) device, Long Term Evolution (LTE), LTE Pico, Code Diviation Multiple Access (C-Division) AP, CDMA pico, Worldwide Interoperability for Microwave Access (wimax, AP, wimax pico, etc.).

The embodiment of the present invention provides a method for granting control. In this embodiment, the license implementation device is a medical TS AP, and the LCC module is deployed in an AP Home Register (AHR, AP Home Register), that is, the AHR is used as the LCC. In addition, in this embodiment, the license is controlled by the medical TS AP.

FIG. 3 is a flowchart of signaling interaction of a license control method according to an embodiment of the present invention. As shown in FIG. 3, the method includes:

301. The LCC decrypts, loads, and parses the obtained license file.

In this step, the LCC obtains the license file first. The method can be obtained from the license production center. Specifically, the license production center creates a license file for the LCC and sends it to the LCC. The steps to obtain a license file are not necessarily performed each time. For example, you can save it once and save it for later use. Of course, it is also possible to execute the license control once each time.

In addition, in this embodiment, the license file is encrypted, and the LCC needs to decrypt the license file first, and then the decrypted license file is loaded into the LCC device. The license file may have a lot of information, such as file format information, control information, etc., where the control information represents a license item. The LCC parses the loaded license file to obtain the license item sent by the license production center to the LCC, that is, the license item obtained by the LCC. For example, the license items acquired by the LCC are: A: uplink IP packet multiplexing, B: downlink receiving function, C: PS downlink rate maximum, D: PS uplink rate maximum. Among them, A and B can be understood as function licenses, and C and D can be understood as resource licenses.

302. The AP sends a license control request message to the LCC.

In this embodiment, the AP actively requests the license control from the LCC. Specifically, in this step, the AP may send a Li cense control request message to the LCC, and the Li cense control request message may carry one or a combination of the following information: the license item information supported by the AP (ie, the capability to support Li cense), the AP Supported encryption algorithm set information, integrity algorithm set information supported in the AP.

The license item information supported by the AP may be embodied in the form of a function list, and the license item information may indicate the license control capability that the LCC can implement, and the license content that is not in the list, even if sent to the AP, the AP also Can't achieve it. In this embodiment, the information of the Li cense item supported by the AP that is sent to the LCC is (C, D, E, F), which are: C: the maximum downlink rate of the PS, the maximum value of the uplink rate of the D: Maximum number of admitted users, and F: Local Iur function.

In addition, the encryption algorithm set information supported by the AP embodies the encryption algorithm that the AP can support, and can be used as the basis for selecting the encryption algorithm by the LCC. The integrity algorithm set information supported by the AP reflects the integrity algorithm supported by the AP and can be used as the basis for the LCC selection integrity algorithm. In the embodiment of the present invention, the following three kinds of information are carried in the Li cense control request message as an example for description.

303. The LCC determines the license content according to the license control request message, and performs encryption and integrity processing.

In this step, the LCC may take two pieces of license information (C, D, E, F) supported by the AP carried by the Li cense control request message, and the license item information (A, B, C, D) obtained by the LCC, and take two The intersection (C, D) is the license content that needs to be implemented by the AP.

The license content may be encrypted and integrity processed before being sent to the AP.

The algorithm used for encryption and integrity processing can be dynamically negotiated. Specifically: Since the LCC has learned the encryption algorithm and integrity algorithm supported by the AP according to the Li cense control request message, the LCC can support itself according to its own support. The encryption algorithm and the integrity algorithm select the encryption algorithm and the integrity algorithm supported by both to encrypt and integrity the licensed content. Alternatively, the encryption and integrity processing of this step can also use the default encryption algorithm and integrity algorithm. The default algorithm can be used if there is no result of negotiation or the negotiation is unsuccessful, or it can be used directly. Of course, if the default algorithm is used directly, the LI cense control request message sent by the AP to the LCC may not carry the algorithm set information.

304. The LCC returns a Li cense control response message to the AP.

In this embodiment, the Li cense control response message is a license content that carries the required AP implementation. License control message.

The Li cense control response message includes: an encryption algorithm identifier and an integrity algorithm identifier selected by the LCC; and a license content implemented by the AP, which has been processed by a selected or default encryption algorithm and an integrity algorithm.

305. The AP performs Li cense control according to the information in the Li cense control response message. In this step, the AP selects the encryption algorithm identifier in the Li cense control response message, and selects a corresponding decryption algorithm to decrypt the encrypted license content. The AP selects a corresponding integrity verification algorithm according to the integrity algorithm identifier in the Li cense control response message, and performs integrity verification on the integrity content of the integrity processing. If the data can pass the integrity verification, the AP can be used as the content of the AP implementation license.

The license content obtained after the decryption and integrity verification in this step is: (C, D), where C is the maximum downlink rate of the PS and D is the maximum value of the uplink rate of the PS. , License control is performed on the corresponding resources of the AP device.

306. The AP feeds back the result of the Li cense implementation to the LCC.

Optionally, after the Li cense control is implemented on the AP, the result of the Li cense implementation can be sent to the LCC.

It can be understood that, in the license control method provided by the embodiment of the present invention, the transmission and reception of the license content is performed using the format of the message, and the license content is the control information which is really useful in the license file, that is, the license item information. Compared with the technical solutions for distributing license files in the prior art, transmission and reception of a large amount of redundant information (such as file format information and other irrelevant information) are avoided, so that the effective information ratio is high and the transmission efficiency is improved. , reducing the occupation of transmission resources. For example, in the prior art, when the control information is small, the file format information is not reduced, and the corresponding efficiency is lower. With the development of technology, there are more and more Li cense implementation devices in the same system. The more devices implemented by Li Cense, the lower the transmission efficiency. For the AP scenario, because the number of APs is very large, and the distribution is relatively scattered, the advantages of the solution provided by the embodiment of the present invention are more obvious, and batch remote Licens control can be performed on a large number of APs distributed in the user's home, without going to the door. Turning certain features on or off reduces maintenance costs.

Moreover, the AP actively sends a request message to the LCC, and the request message carries the license item information, the encryption algorithm, and the integrity algorithm information supported by the AP, and the license function negotiation can be completed in advance to ensure that the license content sent to the AP can be implemented. And; can be completed in advance The algorithm negotiates and processes it using an algorithm supported by both parties. In general, the AP actively sends a license request, which can be processed according to the actual situation of the specific AP. The license control is more targeted and improves the efficiency of the license control.

In addition, the encryption and integrity processing of the licensed content guarantees the privacy and integrity of the licensed content (ie, truly useful control messages) during delivery. Embodiment 4

The embodiment of the present invention provides a method for granting control. In this embodiment, the L i cense implementation device is a medical TS AP, and the LCC module is deployed to the AHR, that is, the AHR is used as the LCC device. In addition, in this embodiment, the LCC actively issues a license item, and the AP selects a license item supported by the AP according to its own support capability to implement Li cense control.

FIG. 4 is a flowchart of signaling interaction of a license control method according to an embodiment of the present invention. As shown in FIG. 4, the method includes:

401. The LCC decrypts, loads, and parses the obtained L i cense file.

This step is similar to step 301 and will not be described in detail. In addition, the license items obtained by LCC are also set to (A, B, C, D), specifically, A: uplink IP packet multiplexing, B: downlink receiving function, C: PS downlink rate maximum, D: PS uplink The maximum rate.

402. The LCC determines the license content, and performs encryption and integrity processing;

In this embodiment, since the LCC does not know the license item information supported by the AP, the LCC can automatically select the license item acquired by the LCC. The specific process may be: After the LCC obtains the license items (A, B, C, D) obtained by the LCC, part or all of the license items acquired by the LCC may be selected as the license content required for the AP implementation. This embodiment assumes that the LCC uses (A, B, C, D) as the permitted contents.

In addition, the license content may be encrypted and integrity processed before being sent to the AP.

The algorithm used in the encryption and integrity processing may be determined by dynamic negotiation before the content of the license is sent, or the integrity algorithm supported by the LCC and the AP, that is, the default integrity algorithm, may be specified in a static manner. It can be understood that the steps of determining the algorithm are not necessarily performed every time, and there is no necessary context with step 401, as long as the algorithm is determined before the encryption and integrity processing. 403. The LCC sends a L i cense control indication message to the AP.

In this embodiment, the L i cens e control indication message is a permission control message carrying the licensed content required to be implemented by the AP.

The L i cense control indication message includes: a license content that needs to be implemented by the AP.

If the method of dynamically negotiating the encryption algorithm and the integrity algorithm is adopted, the message may further include an encryption algorithm identifier and an integrity algorithm identifier selected by the LCC. Of course, if the AP has already learned the algorithm to be used before the sending, the AP does not need to carry the LCC selected encryption algorithm identifier and integrity algorithm identifier in the L i cense control indication message.

404. The AP selects a license item and implements L i cense control;

In this step, the AP may first perform decryption and integrity verification processing on the licensed content. For the specific process, refer to the previous embodiment. It is worth noting that since the licenses sent by the LCC are not necessarily supported by the AP, in this step, the AP needs to select the license items according to the capabilities supported by the AP. Specifically, assuming that the AP supports C and D, but does not support A and B, the selected licenses can be C and D.

After the AP selects the license item, it can perform resource control or function control based on this.

405. The AP feeds back the L i cense implementation result to the LCC.

Optionally, after the AP implements the L i cense control, the result of the L i cense implementation can be sent to the LCC.

It can be understood that, in the license control method provided by the embodiment of the present invention, the transmission and reception of the license content is performed using the format of the message, and the license content is the control information which is really useful in the license file, that is, the license item information. Compared with the technical solutions for distributing license files in the prior art, transmission and reception of a large amount of redundant information (such as file format information and other irrelevant information) are avoided, so that the effective information ratio is high and the transmission efficiency is improved. , reducing the occupation of transmission resources.

Moreover, the LCC actively delivers the license item in the message format, which can reduce the information exchange between the AP and the LCC, save signaling overhead, simplify the process, and improve the processing efficiency.

In addition, the encryption and integrity processing of the licensed content ensures the privacy and integrity of the licensed content (ie, truly useful control messages) during delivery. It should be noted that the foregoing Embodiment 3 and Embodiment 4 are deployed in the AHR by using the LCC module. The implementation is described as an example. A schematic diagram of the connection relationship between the AP and the AHR can be seen in FIG. 5. As shown in FIG. 5, the access point 504, the access point 505, and the access point 506 are connected to the access point home register AHR50L through a security gateway (SeGW, Security Gateway) 503 and an access gateway (AG, Access Gateway) 502.

In addition, the LCC module can also be deployed in a small base station management system (Li S, Home NodeB)

On the management system, FIG. 6 is a schematic diagram of the connection relationship between the HMS and the AP. As shown in FIG. 6, the access point 603, the access point 604, and the access point 605 are connected to the small base station management system 601 through the security gateway 602. .

Alternatively, the LCC module can also be deployed in the AG. Figure 7 shows an example of the connection relationship between the AG and the AP. As shown in the figure, the access point 703, the access point 704, and the access point 705 are connected to the access gateway 701 through the security gateway 702. Embodiment 5

The embodiment of the present invention further provides a license control device, and FIG. 8 is a schematic structural diagram of the license control device. As shown in FIG. 8, the device includes: a parsing module 801, configured to load and parse a license file, to obtain a license item acquired by the license control device; a determining module 802, configured to determine a license content that needs to be licensed to implement the device implementation; and, send The processing module 803 is configured to carry the license content in the license control message and send the content to the license implementation device.

Optionally, if the license implementation device sends a license control request to the license control device, the license control device may further include: a receiving module 804, configured to receive a license control request message sent by the license implementation device, where the license control request message is This includes: License information for license implementation device support. Correspondingly, the determining module 802 may be configured to: select, according to the license item acquired by the license control device obtained by the parsing module 801, the license item supported by the license implementation device received by the receiving module 804, and select the license content that needs to be licensed to implement the device implementation.

For example, the AP sends the license information of the license to the LCC through the license control request message. The license item supported by the AP is (C, D, E, F). The LCC obtains the license item (A, B, C, D), and the determination module 802 can select the intersection (C, D) of the two as the license content required for the AP implementation. For specific implementation details, refer to the description of the method embodiments.

Optionally, if the manner in which the license control device actively delivers the control is adopted, the determining module 802 For: Selecting part or all of the license items acquired by the license control device obtained from the parsing module 801 as the license content required to implement the device implementation. For example, if the license implementation device is an AP and the license control device is an LCC, the LCC may select some or all of (A, B, C, D) and send it to the AP. For specific implementation details, refer to the description of the method embodiments.

Further, the sending processing module 803 may be specifically implemented by, for example, an algorithm processing unit 8031, configured to encrypt the licensed content by using an encryption algorithm and/or an integrity algorithm supported by the LCC and the license implementing device. Or integrity processing; the sending unit 8032, configured to carry the license content processed by the algorithm processing unit in the license control message to the license implementation device.

In addition, the admission control device is deployed in the access point home register, or deployed in the small base station management system device, or deployed in the access gateway of the access point system. Embodiment 6

The embodiment of the present invention further provides a license implementation device, and FIG. 9 is a schematic structural diagram of the license implementation device. As shown in FIG. 9, the device includes: a receiving module 901, configured to receive a permission control message sent by a license control center LCC, and an obtaining module 902, configured to obtain, from a license control message received by the receiving module, a license content that needs to be implemented; The module 903 is configured to implement the license control according to the license content that needs to be implemented by the acquisition module.

Optionally, if the license implementation device adopts a method for actively sending a license control request message to the LCC, the license implementation device may further include: a requesting module 904, configured to send, to the LCC, a license control request message, where the license control request message includes One or a combination of the following information: License item information supported by the license implementation device, encryption algorithm set information supported by the device implementation license, and integrity algorithm set information supported by the device implementation device.

In addition, if the license content to be implemented is the license content that needs to be implemented after the encryption and/or integrity processing is performed by the LCC and the encryption algorithm and/or the integrity algorithm supported by the LCC and the license implementation device, the corresponding acquisition module The 902 may be specifically implemented by the following unit, including: a decryption unit 9021, configured to perform corresponding decryption processing on the content that needs to be implemented after the encryption process according to an encryption algorithm supported by the LCC and the license implementation device; and/or, complete The verification unit 9022 is configured to perform corresponding integrity verification processing on the content that needs to be implemented after the integrity processing according to the integrity algorithm supported by the LCC and the license implementation device. On the other hand, if the LCC does not know the license support capability of the license enforcement device before sending the license control message, the license entry in the license control message may not be supported by the license enforcement device. FIG. 10 is a schematic structural diagram of the license implementation device. Referring to FIG. 10, the device includes: a receiving module 1 001, configured to receive a permission control message sent by a license control center LCC; and an acquiring module 1 002, configured to receive from the receiving module The license control message obtains the license content that needs to be implemented; the implementation module 003 is configured to implement the license control according to the license content that needs to be implemented by the acquisition module. The obtaining module 1 002 may be specifically implemented by the following unit: an obtaining unit 1 0021, configured to obtain a license item obtained by the LCC from the permission control message, and a determining unit 1 0022, configured to acquire according to the LCC acquired by the obtaining unit 1 002 1 The license item, together with the license item information supported by the license implementation device, determines the license content that needs to be implemented. In fact, the obtaining unit 1 0021 can be implemented by the above-described decryption unit and integrity verification unit, that is, after the decryption process and the integrity verification process, the LCC acquired license item can be obtained.

Optionally, the license implementation device may further include a reporting unit, configured to report the result of the license implementation to the license control device. Example 7

The embodiment of the present invention further provides a license implementation system including the license control device and the license implementation device in the foregoing embodiments.

The license implementation device may be: a base station or other device that can implement the license, and in the case of an indoor coverage scenario, it may be a miniaturized access device of various standards, such as an AP. The license control device can be an AHR, HMS or AG device that integrates the LCC module. It can be understood that, in the technical solutions of the license control device, the license implementation device, and the license control system provided by the embodiments of the present invention, the content of the message is used for sending and receiving the license content, and the license content is really useful in the license file. Control information, that is, license item information. Compared with the technical solutions for distributing license files in the prior art, transmission and reception of a large amount of redundant information (such as file format information and other irrelevant information) are avoided, so that the effective information ratio is high and the transmission efficiency is improved. , reducing the occupation of transmission resources.

If the license implementation device (such as an AP) actively sends a request message to the LCC, and the request message carries the license item information, the encryption algorithm, and the integrity algorithm information supported by the AP, The negotiation of the license function is completed to ensure that the license content sent to the AP is implementable; and the algorithm negotiation can be completed in advance, so as to be processed by an algorithm supported by both parties. In general, the license implementation device actively sends a license request, which can implement corresponding processing according to the actual situation of the specific license implementation device, and the license control is more targeted, and the efficiency of the license control is improved.

If the LCC actively delivers the license in the message format, the information exchange between the license implementation device (such as the AP) and the LCC can be reduced, signaling overhead is saved, the process is simplified, and the processing efficiency is improved.

In addition, the encryption and integrity processing of the licensed content guarantees the privacy and integrity of the licensed content (ie, truly useful control messages) during delivery.

Furthermore, the LCC module can be installed in a variety of network devices, so that the license control device can be implemented in a plurality of network devices, and the operator can be provided with multiple implementations to flexibly respond to specific network scenarios and requirements.

A person skilled in the art can clearly understand that, for the convenience and brevity of the description, the specific working process of the system, the device, the module and the unit described above can refer to the corresponding process in the foregoing method embodiment, and details are not described herein again.

Through the description of the above embodiments, those skilled in the art can clearly understand that the present invention can be implemented by means of software plus a necessary general hardware platform, and of course, can also be through hardware, but in many cases, the former is a better implementation. the way. Based on such understanding, the technical solution of the present invention, which is essential or contributes to the prior art, may be embodied in the form of a software product stored in a storage medium, including a plurality of instructions for making a A computer device (which may be a personal computer, server, or network device, etc.) performs all or part of the steps of the methods described in various embodiments of the present invention. The foregoing storage medium includes: a medium such as a USB flash drive, a removable hard disk, a read only memory (ROM), a random access memory (RAM), a magnetic disk, or an optical disk, which can store program codes.

In the several embodiments provided in the present application, it should be understood that the disclosed systems, devices, and methods may be implemented in other manners without departing from the scope of the present application. For example, the device embodiments described above are merely illustrative. For example, the division of the modules or units is only a logical function division. In actual implementation, there may be another division manner, for example, multiple units or components may be used. Combined or can be integrated into another system, or some features can be ignored, Or not. The units described as separate components may or may not be physically separated, and the components displayed as the units may or may not be physical units, that is, may be located in one place, or may be distributed to multiple network units. . Some or all of the modules may be selected according to actual needs to achieve the purpose of the solution of the embodiment. Those of ordinary skill in the art can understand and implement without any creative effort.

In addition, the described systems, devices, and methods, and the schematic diagrams of various embodiments, may be combined or integrated with other systems, modules, techniques or methods without departing from the scope of the present application. In addition, the mutual coupling or direct coupling or communication connection shown or discussed may be an indirect coupling or communication connection through some interface, device or unit, and may be in electronic, mechanical or other form.

The above is only the specific embodiment of the present invention, but the scope of the present invention is not limited thereto, and any person skilled in the art can easily think of changes or substitutions within the technical scope of the present invention. It should be covered by the scope of the present invention. Therefore, the scope of the invention should be determined by the scope of the claims.

Claims

Rights request

A license control method, characterized in that it comprises:

The license control center LCC loads and parses the license file to obtain the license item acquired by the LCC, and the license item includes the license content;

The LCC determines a license content that requires permission to implement device implementation;

The LCC carries the licensed content in an admission control message to the license enforcement device.

2. The method according to claim 1, wherein the LCC determines that the license content required to implement the implementation of the device comprises:

Determining, according to the license item acquired by the LCC, the license item information supported by the license implementation device, the license content required to be implemented by the license implementation device;

The method further includes:

The LCC receives the license control request message sent by the license implementation device, where the license control request message includes: license item information supported by the license implementation device.

3. The method according to claim 1, wherein the LCC determines that the license content required to implement the implementation of the device comprises:

The LCC selects part or all of the license items acquired by the LCC as the license content required to implement the license implementation.

The method according to any one of claims 1 to 3, wherein the transmitting the license content in the license control message to the license enforcement device comprises:

The LCC encrypts and/or performs integrity processing on the licensed content by using an encryption algorithm and/or an integrity algorithm supported by the LCC and the license implementation device, and encrypts and/or integrity The license content is carried in the license control message to the license enforcement device.

The method according to claim 4, wherein the encryption algorithm and/or integrity algorithm adopts a default encryption algorithm and/or an integrity algorithm, or is determined by dynamic negotiation;

When the method is determined by dynamic negotiation, the method further includes:

The LCC receives a license control request message sent by the license implementation device, the license The control request message includes: an encryption algorithm set information and/or an integrity algorithm set information supported by the license implementation device;

The LCC selects an encryption algorithm and an integrity algorithm supported by the LCC and the license implementation device according to the encryption algorithm set information and/or the integrity algorithm set information supported by the license implementation device.

6. A method of license control, characterized in that it comprises:

The license implementation device receives the license control message sent by the license control center LCC;

The license implementation device acquires license content that needs to be implemented from the license control message; the license implementation device implements license control according to the license content that needs to be implemented.

7. The method of claim 6, further comprising:

The license implementation device sends a license control request message to the LCC, where the license control request message includes one or a combination of the following information:

The license implementation information supported by the license implementation device, the encryption algorithm set information supported by the implementation implementation device, and the integrity algorithm set information supported by the implementation implementation device.

The method according to claim 6 or 7, wherein the license content that needs to be implemented is an encryption algorithm and/or an integrity algorithm supported by the LCC using the LCC and the license implementation device. Licensed content after encryption and/or integrity processing;

And obtaining, by the license implementation device, the license content that needs to be implemented from the license control message, including:

The license implementation device decrypts the content that needs to be implemented after the encryption and/or integrity processing according to an encryption algorithm and/or an integrity algorithm supported by the LCC and the license implementation device. / or integrity verification processing, get the license content that needs to be implemented.

The method according to claim 6, wherein the license implementation device acquires the license content that needs to be implemented from the license control message, and includes:

The license implementation device obtains the license item acquired by the LCC from the license control message, and obtains the license content that needs to be implemented in conjunction with the license item information supported by the license implementation device itself.

The method according to any one of claims 6 to 9, further comprising: the license implementing device returning the license implementation to the LCC after performing the license control according to the license content implemented as needed result.

11. A license control device, comprising:

a parsing module, configured to load and parse the license file, to obtain a license item acquired by the license control device, where the license item includes the license content;

a determination module for determining a license content that requires permission to implement device implementation;

And a sending processing module, configured to carry the licensed content in an admission control message to the licensed implementation device.

The device according to claim 11, further comprising: a receiving module, configured to receive a license control request message sent by the license implementing device, where the license control request message includes: License item information;

The determining module is configured to: select, according to the license item acquired by the license control device obtained by the parsing module, the license item information that is required by the license implementation device, in combination with the license item information supported by the license implementation device received by the receiving module content.

The device according to claim 11, wherein the determining module is configured to: select some or all of the license items acquired by the license control device obtained by the parsing module, as the license implementation is required Licensed content for device implementation.

The device according to any one of claims 11 to 13, wherein the sending processing module comprises:

An algorithm processing unit, configured to perform encryption and/or integrity processing on the license content by using an encryption algorithm and/or an integrity algorithm supported by the license control device and the license implementation device;

And a sending unit, configured to carry the licensed content processed by the algorithm processing unit in the license control message to the license implementing device.

The device according to any one of claims 11 to 14, wherein the device is deployed in an access point home register, or deployed in a small cell management system device, or deployed in an access point system. In the access gateway.

16. A license implementation device, comprising:

a receiving module, configured to receive a license control message sent by the license control center LCC, and an obtaining module, configured to obtain, from the license control message received by the receiving module, the license content that needs to be implemented;

An implementation module, configured to implement, according to the license content acquired by the obtaining module controllable.

The device of claim 16, further comprising:

And a requesting module, configured to send a license control request message to the LCC, where the license control request message includes one or a combination of the following information:

The license item information supported by the license implementation device, the encryption algorithm set information supported by the license implementation device, and the integrity algorithm set information supported by the license implementation device.

The device according to claim 16, wherein the license content to be implemented is encrypted by the LCC using an encryption algorithm and/or an integrity algorithm supported by the LCC and the license implementation device. And/or the content of the license after the integrity processing;

The obtaining module includes:

a decryption unit, configured to perform corresponding decryption processing on the content that needs to be implemented after the encryption process according to an encryption algorithm supported by the LCC and the license implementation device; and/or,

The integrity verification unit is configured to perform corresponding integrity verification processing on the content that needs to be implemented after the integrity processing according to the integrity algorithm supported by the LCC and the license implementation device.

The device according to any one of claims 16 to 18, wherein the obtaining module comprises:

An obtaining unit, configured to obtain, from the license control message, a license item acquired by the LCC; a determining unit, configured to use, according to the license item acquired by the LCC acquired by the acquiring unit, in combination with the license implementation device itself Supported license information to determine the license content that needs to be implemented.

20. A license control system, comprising:

The license control device according to any one of claims 11 to 15, and

A license enforcing device according to any one of claims 16 to 19.