WO2016177158A1

WO2016177158A1 - Terminal access method, system, terminal, network device, and computer storage medium

Info

Publication number: WO2016177158A1
Application number: PCT/CN2016/076929
Authority: WO
Inventors: 王曦
Original assignee: 中兴通讯股份有限公司
Priority date: 2015-09-21
Filing date: 2016-03-21
Publication date: 2016-11-10
Also published as: CN106550363A

Abstract

Disclosed is a terminal access method, comprising: receiving an access request message transmitted by a terminal, where the access request message carries an identifier of the terminal; and, when the identifier of the terminal is on a preset list, transmitting a connection establishment message to the terminal. Also disclosed are a network device, a terminal, a terminal access system, and a computer storage medium.

Description

Terminal access method, system, terminal, network device and computer storage medium

Technical field

The present invention relates to access technologies for wireless networks, and in particular, to a terminal access method, a system terminal, a network device, and a computer storage medium.

Background technique

With the increasing role of wireless networks in various fields of human life, the security of wireless networks is becoming more and more serious, especially for illegal terminal intrusion. For the problem of illegal terminal intrusion, the current technologies for preventing illegal terminal access are: After collecting the mobile device international identity code (IMEI, International Mobile Equipment Identity) of the terminal, the wireless network sends the IMEI to the Equipment Identity Register (EIR), and the EIR determines the IMEI according to its stored data and filtering principle. Whether it is in the gray/blacklist, if not, it is determined that the IMEI is whitelisted. The terminal to which the IMEI belongs can communicate freely. If it is a blacklist, you cannot make calls or even access the network.

However, in the above method, the IMEI number must be determined after the terminal accesses the network. If the IMEI of the terminal is illegal, the interaction between the terminal and the wireless network becomes meaningless before the IMEI is determined to be illegal, and the wireless resource is wasted.

Summary of the invention

To solve the above technical problem, an embodiment of the present invention is to provide a terminal access method, system, terminal, network device, and computer storage medium.

The technical solution of the embodiment of the present invention is implemented as follows:

The first aspect provides a terminal access method, including:

Receiving an access request message sent by the terminal, where the access request message carries the terminal Identification

When the identifier of the terminal is in the preset list, the connection establishment message is sent to the terminal.

Optionally, the identifier of the terminal includes a temporary identifier of the terminal and a unique identifier of the terminal that is different from the other terminal, and the corresponding preset list is a whitelist that includes a preset unique identifier, where the method further includes:

When the unique identifier of the terminal is not in the whitelist, the terminal sends a first reject message to notify the terminal to refuse to establish a connection.

Optionally, the identifier of the terminal is a temporary identifier of the terminal, and the corresponding preset list is a preset temporary identifier list, where the method further includes:

When the temporary identifier of the terminal is not in the preset temporary identifier list, the terminal sends a second reject message to the terminal, where the second reject message is used to notify the terminal to refuse to establish a connection, and trigger the terminal to send and carry There is an access request message that the terminal is uniquely distinguished from other terminals.

Optionally, the temporary identifier is a System Architecture Evolution Temporary Mobile Station Identifier (S-TMSI), and the unique identifier is an IMEI.

A second aspect provides a terminal access method, where the method includes:

Sending an access request message to the network device, where the access request message carries an identifier of the terminal;

Receiving a connection establishment message sent by the network device;

Establishing a connection with the wireless network based on the connection setup message.

Optionally, the method further includes:

Receiving, by the network device, a first reject message for notifying that the connection is refused to be established;

Obtaining a public land mobile network (PLMN, Public Land Mobile Network) of a wireless network;

The PLMN is added to a PLMN list, which is a PLMN set that does not need to be searched at the time of PLMN search.

Optionally, the method further includes:

Receiving a second reject message sent by the network device, where the second reject message is used to notify the terminal to refuse to establish a connection, and trigger the terminal to send an access request that carries the unique identifier of the terminal different from other terminals. Message

Sending an access request message carrying the unique identifier to the network device.

In a third aspect, a network device is provided, including:

a receiving unit, configured to receive an access request message sent by the terminal, where the access request message carries an identifier of the terminal;

The sending unit is configured to send a connection establishment message to the terminal when the identifier of the terminal is in the preset list.

Optionally, the identifier of the terminal includes a temporary identifier of the terminal and a unique identifier of the terminal that is different from the other terminal, and the corresponding preset list is a whitelist that includes a preset unique identifier, and the sending unit is further configured. for:

Optionally, the identifier of the terminal is a temporary identifier of the terminal, and the corresponding preset list is a preset temporary identifier list, where the sending unit is further configured to:

When the temporary identifier of the terminal is not in the preset temporary identifier list, the terminal sends a second reject message to the terminal, where the second reject message is configured to notify the terminal to refuse to establish a connection, and trigger the terminal to send and carry There is an access request message that the terminal is uniquely distinguished from other terminals.

Optionally, the temporary identifier is an S-TMSI, and the unique identifier is an IMEI.

A fourth aspect provides a terminal, where the terminal includes:

a sending unit, configured to send an access request message to the network device, where the access request message carries an identifier of the terminal;

a receiving unit, configured to receive a connection establishment message sent by the network device;

Establishing a unit configured to establish a connection with the wireless network according to the connection establishment message.

Optionally, the receiving unit is further configured to receive, by the network device, a first reject message for notifying that the connection is refused to be established;

The terminal further includes:

An obtaining unit configured to acquire a public land mobile network PLMN of the wireless network;

The joining unit is configured to join the PLMN to the PLMN list, which is a PLMN set that does not need to be searched when the PLMN searches.

Optionally, the receiving unit is further configured to receive a second reject message sent by the network device, where the second reject message is used to notify the terminal to refuse to establish a connection, and trigger the terminal to send and carry the The terminal is distinguished from the uniquely identified access request message of the other terminal;

The sending unit is further configured to send, to the network device, an access request message carrying the unique identifier.

A fifth aspect provides a terminal access system, where the system includes:

The terminal is configured to send an access request message to the network device, where the access request message carries an identifier of the terminal, receives a connection establishment message sent by the network device, and establishes a connection with the wireless network according to the connection establishment message. Connection;

The network device is configured to receive an access request message sent by the terminal, where the access request message carries an identifier of the terminal, and when the identifier of the terminal is in a preset list, send a connection establishment message to the terminal. .

According to a sixth aspect, a computer storage medium is provided, the computer storage medium comprising a set of instructions, when executed, causing at least one processor to execute a terminal access method on the network device side, or performing the terminal side Terminal access method.

The embodiment of the present invention provides a terminal access method, a system, a terminal, a network device, and a computer storage medium, and receives an access request message sent by the terminal, where the access request message carries the identifier of the terminal; When the list is preset, a connection establishment message is sent to the terminal. In this way, the terminal and the wireless network can be connected before determining whether the identifier of the terminal carried in the access request message is in the preset list. In this way, it can be ensured that each terminal that is accessed is a legal terminal, and the access is legal access. Therefore, the legal terminal can be accessed, and the interaction between the terminal and the wireless network is meaningful interaction, thereby reducing wireless. Waste of resources.

DRAWINGS

In the drawings, which are not necessarily to scale, the Like reference numerals with different letter suffixes may indicate different examples of similar components. The drawings generally illustrate the various embodiments discussed herein by way of example and not limitation.

FIG. 1 is a flowchart of a terminal access method according to an embodiment of the present invention;

2 is a flowchart of still another method for accessing a terminal according to an embodiment of the present invention;

FIG. 3 is a flowchart of still another terminal access method according to an embodiment of the present invention;

FIG. 4 is a schematic structural diagram of a network device according to an embodiment of the present disclosure;

FIG. 5 is a schematic structural diagram of a terminal according to an embodiment of the present disclosure;

FIG. 6 is a schematic structural diagram of another terminal according to an embodiment of the present disclosure;

FIG. 7 is a schematic structural diagram of a terminal access system according to an embodiment of the present invention.

detailed description

The technical solutions in the embodiments of the present invention will be clearly and completely described in the following with reference to the accompanying drawings.

In various embodiments of the present invention, the network device receives an access request message sent by the terminal, where the access request message carries the identifier of the terminal; when the identifier of the terminal is in the preset list, The network device sends a connection establishment message to the terminal.

Embodiment 1

The embodiment of the invention provides a terminal access method, which is applied to a network device. As shown in FIG. 1 , the method includes:

Step 101: Receive an access request message sent by the terminal.

Here, the access request message carries an identifier of the terminal. Among them, the identifier of the terminal can be divided into two types. The identifier of one terminal includes a temporary identifier and a unique identifier different from other terminals; the identifier of another terminal includes only the temporary identifier. In actual application, the temporary identifier may be the S-TMSI of the terminal or a random value, and the unique identifier may be an IMEI. Here, the temporary identification is a variable identification, and the unique identification is fixed and immutable and is used to indicate the unique identification of the terminal.

Step 102: When the identifier of the terminal is in the preset list, send a connection establishment message to the terminal.

Here, the preset list is a list of identifiers of terminals that can access the wireless network.

In this way, the terminal and the wireless network can be connected after determining whether the identifier of the terminal carried in the access request message is in the preset list. In this way, each terminal that is accessed is a legal terminal, and the access is legal access. Therefore, the interaction between the terminal and the wireless network is a meaningful interaction, thereby reducing the waste of wireless resources.

In an embodiment, when the identifier of the terminal includes the temporary identifier of the terminal and the unique identifier of the terminal that is different from the other terminal, and the corresponding preset list is a whitelist that includes the preset unique identifier, the method may further include: When the unique identifier is not in the whitelist, a first reject message for notifying the terminal to refuse to establish a connection is sent to the terminal.

In an embodiment, when the identifier of the terminal is a temporary identifier of the terminal, and the corresponding preset list is a preset temporary identifier list, the method may further include: when the temporary identifier of the terminal is not in the preset temporary identifier list. Sending a second reject message to the terminal, the second reject message is used to notify the terminal to refuse to establish a connection, and trigger the terminal to send an access request message carrying a unique identifier of the terminal different from other terminals. In other words, the second reject message is used to notify the terminal to reject The connection is established, and is also used to trigger the terminal to send an access request message carrying a unique identifier different from the other terminal.

Embodiment 2

An embodiment of the present invention provides a terminal access method, which is applied to a terminal. As shown in FIG. 2, the method includes:

Step 201: Send an access request message to the network device.

Here, the access request message carries the identifier of the terminal.

Step 202: Receive a connection establishment message sent by the network device.

Here, the connection establishment message is a message that is sent when the identifier of the terminal is determined to be in a preset list.

Step 203: Establish a connection with the wireless network according to the connection establishment message.

In an embodiment, the method may further include: the receiving network device sends a first reject message for notifying the establishment of the connection; acquiring the PLMN of the wireless network; adding the PLMN to the PLMN list, where the PLMN list is during the PLMN search There is no need to search for PLMN collections.

In an embodiment, the method may further include: receiving a second reject message sent by the network device, where the second reject message is used to notify the terminal to refuse to establish a connection, and trigger the terminal to send the terminal that is different from other terminals. A uniquely identified access request message; an access request message carrying the unique identifier is sent to the network device. in other words. The second reject message is used to notify the terminal to refuse to establish a connection, and is also used to trigger the terminal to send an access request message carrying the unique identifier of the terminal different from other terminals.

Embodiment 3

An embodiment of the present invention provides a terminal access method, which is applied to a terminal access system (wireless network), where the terminal is a smart phone, and the terminal access system (wireless network) includes a smart phone and is used for managing terminal access. Network equipment. In the scenario where the smart phone is not yet connected to the wireless network, for example, the smart phone is in a scene such as just starting up. As shown in FIG. 3, the method may include:

Step 301: The smart phone sends an access request message to the network device.

The access request message in this embodiment is a Radio Resource Control (RRC) connection request message.

The RRC connection request may include S-TMSI, connection reason, and IMEI; and may include only S-TMSI and connection reason.

Step 302: The network device determines whether the access request message carries the IMEI. If yes, go to step 303; if no, go to step 309.

Step 303: The network device determines whether the IMEI is in the white list. If yes, go to step 304; if no, go to step 306.

The whitelist is generally stored in the core network. Therefore, the network device can obtain the whitelist in the core network and then judge. The network device can send the IMEI or S-TMSI to the device in the core network to save the whitelist for judgment. This embodiment is not limited.

Step 304: The network device sends a connection establishment message to the smart phone.

The connection setup message in this embodiment is an RRC connection setup message.

Step 305: The smart phone establishes an RRC connection according to the connection setup message, and ends the process.

Step 306: The network device sends a first reject message to the smart phone.

Here, the first reject message of this embodiment is an RRC Connection Reject message. Because the RRC connection reject message in the existing 3rd Generation Partnership Project (3GPP, 3rd Generation Partnership Project) 36.331 has only two valid parameters: wait time (waitTime) and priority order (deprioritisationReq), the RRC connection reject message is used. Make the following improvements, add the parameter first Reject Cause value to the message, when the first reason is rejected When the value indicates that the IMEI of the terminal (the smartphone in this embodiment) is illegal, it indicates that the network determines that the IMEI of the current terminal is not in the white list, and denies the access of the terminal.

Step 307: The smart phone acquires a PLMN of the wireless network.

Step 308: The smartphone adds the PLMN to the PLMN list.

Here, the PLMN joining the list can be ignored by the search in the subsequent PLMN search, and the flow is ended. If the network registration process is initiated again (step 301), a cell under a certain PLMN needs to be registered. If there is no suitable PLMN, the terminal enters a sleep state.

Step 309: The network device determines whether the S-TMSI is in the preset temporary identifier list. If yes, go to step 304; if no, go to step 310.

Here, when the RRC connection request includes only the S-TMSI and the connection reason, step 309 is performed.

Step 310: The network device sends a second reject message to the smart phone.

Here, the second reject message is a modified RRC Connection Reject message, which can trigger the retransmission of the connection setup message carrying the unique identifier. Because the RRC connection reject message in the 3GPP 36.331 protocol has only two valid parameters: wait time (waitTime) and priority order (deprioritisationReq), this patent improves the RRC connection reject message and adds the second parameter to the RRC Connection Reject message. The reason value is rejected, and the second reject reason value indicates that the network requires the terminal (the smartphone in this embodiment) to initiate the RRC connection request again, and attaches the IMEI of the terminal to the request.

Step 311: The smart phone sends an access request message carrying the IMEI to the network device, and step 302 is performed.

Embodiment 4

The embodiment of the present invention provides a network device 40. As shown in FIG. 4, the network device 40 includes:

The receiving unit 401 is configured to receive an access request message sent by the terminal, where the access request message carries an identifier of the terminal;

The sending unit 402 is configured to send the identifier of the terminal to the terminal when the identifier of the terminal is in the preset list. Send a connection setup message.

In an embodiment, when the identifier of the terminal includes the temporary identifier of the terminal and the unique identifier of the terminal different from the other terminal, and the corresponding preset list is a whitelist including a preset unique identifier, The sending unit 402 is also configured to:

When the unique identifier of the terminal is not in the whitelist, a first reject message for notifying the terminal to refuse to establish a connection is sent to the terminal.

In an embodiment, when the identifier of the terminal is a temporary identifier of the terminal, and the corresponding preset list is a preset temporary identifier list, the sending unit 402 is further configured to:

When the temporary identifier of the terminal is not in the preset temporary identifier list, the second reject message is sent to the terminal, where the second reject message is used to notify the terminal to refuse to establish a connection, and trigger the terminal to send and carry the The terminal is distinguished from the uniquely identified access request message of other terminals. In other words, the second reject message is used to notify the terminal to refuse to establish a connection, and is also used to trigger the terminal to send an access request message carrying a unique identifier different from the other terminal.

In actual application, the temporary identifier is S-TMSI, and the unique identifier is IMEI.

In practical applications, the sending unit 402 and the receiving unit 401 may each be a central processing unit (CPU, Central Processing Unit), a microprocessor (MPU, a digital processor unit), a digital signal processor (located in the network device 40). DSP (Digital Signal Processor), or Field Programmable Gate Array (FPGA) is implemented in combination with a transceiver.

Embodiment 5

The embodiment of the present invention provides a terminal 50. As shown in FIG. 5, the terminal 50 may include:

The sending unit 501 is configured to send an access request message to the network device, where the access request message carries an identifier of the terminal;

The receiving unit 502 is configured to receive a connection establishment message sent by the network device.

The establishing unit 503 is configured to establish a connection with the wireless network according to the connection establishment message.

The connection establishment message is a message that is sent when the identifier of the terminal is determined to be in the preset list.

In an embodiment, the receiving unit 502 is further configured to receive, by the network device, a first reject message for notifying that the connection is refused to be established;

As shown in FIG. 6, the terminal 50 may further include:

The obtaining unit 504 is configured to acquire a PLMN of the wireless network;

The joining unit 505 is configured to add the PLMN to the PLMN list, where the PLMN list is a PLMN set that does not need to be searched when the PLMN searches;

In an embodiment, the receiving unit 502 is further configured to receive a second reject message sent by the network device, where the second reject message is used to notify the terminal to refuse to establish a connection, and trigger the terminal to send and carry the bearer. There is an access request message that the terminal is uniquely distinguished from other terminals. in other words. The second reject message is used to notify the terminal to refuse to establish a connection, and is also used to trigger the terminal to send an access request message carrying the unique identifier of the terminal different from other terminals.

The sending unit 501 is further configured to send, to the network device, an access request message carrying the unique identifier.

In an actual application, the sending unit 501, the receiving unit 502, and the obtaining unit 504 may be The CPU, the MPU, the DSP, the FPGA, and the like located in the terminal 50 are implemented in combination with the transceiver; the establishing unit 503 and the adding unit 505 can be implemented by a CPU, an MPU, a DSP, or an FPGA located in the terminal 50.

Embodiment 6

The embodiment of the present invention provides a terminal access system 60. As shown in FIG. 7, the terminal access system 60 includes:

Network device 40;

And terminal 50.

The network device 40 is configured to receive an access request message sent by the terminal, where the access request message carries the identifier of the terminal, and when the identifier of the terminal is in the preset list, send a connection establishment message to the terminal. .

The terminal 50 is configured to send an access request message to the network device, receive a connection establishment message sent by the network device, and establish a connection with the wireless network according to the connection establishment message.

The specific processing procedure of the network device 40 and the terminal 50 has been described in detail above, and details are not described herein again.

Those skilled in the art will appreciate that embodiments of the present invention can be provided as a method, system, or computer program product. Accordingly, the present invention can take the form of a hardware embodiment, a software embodiment, or a combination of software and hardware. Moreover, the invention can take the form of a computer program product embodied on one or more computer-usable storage media (including but not limited to disk storage and optical storage, etc.) including computer usable program code.

The present invention has been described with reference to flowchart illustrations and/or block diagrams of methods, apparatus (system), and computer program products according to embodiments of the invention. It will be understood that each flow and/or block of the flowchart illustrations and/or FIG. These computer program instructions can be provided to a processor of a general purpose computer, a special purpose computer, an embedded processor or other programmable data processing device to produce a machine such that Instructions executed by a processor of a computer or other programmable data processing device generate means for implementing the functions specified in a block or blocks of a flow or a flow and/or a block diagram of the flowchart.

The computer program instructions can also be stored in a computer readable memory that can direct a computer or other programmable data processing device to operate in a particular manner, such that the instructions stored in the computer readable memory produce an article of manufacture comprising the instruction device. The apparatus implements the functions specified in one or more blocks of a flow or a flow and/or block diagram of the flowchart.

These computer program instructions can also be loaded onto a computer or other programmable data processing device such that a series of operational steps are performed on a computer or other programmable device to produce computer-implemented processing for execution on a computer or other programmable device. The instructions provide steps for implementing the functions specified in one or more of the flow or in a block or blocks of a flow diagram.

Based on this, an embodiment of the present invention further provides a computer storage medium, where the computer storage medium includes a set of instructions, when executed, causing at least one processor to execute a terminal access method on the network device side, or The terminal access method on the terminal side is performed.

The above is only the preferred embodiment of the present invention and is not intended to limit the scope of the present invention.

Claims

A terminal access method, the method comprising:

Receiving an access request message sent by the terminal, where the access request message carries an identifier of the terminal;

When the identifier of the terminal is in the preset list, the connection establishment message is sent to the terminal.
The method according to claim 1, wherein the identifier of the terminal comprises a temporary identifier of the terminal and a unique identifier of the terminal different from other terminals, and the corresponding preset list is a white list including a preset unique identifier. The method further includes:

When the unique identifier of the terminal is not in the whitelist, the terminal sends a first reject message to notify the terminal to refuse to establish a connection.
The method according to claim 1, wherein the identifier of the terminal is a temporary identifier of the terminal, and the corresponding preset list is a preset temporary identifier list, and the method further includes:

When the temporary identifier of the terminal is not in the preset temporary identifier list, the terminal sends a second reject message to the terminal, where the second reject message is used to notify the terminal to refuse to establish a connection, and trigger the terminal to send and carry There is an access request message that the terminal is uniquely distinguished from other terminals.
The method of claim 2 or 3, wherein the temporary identity is a System Architecture Evolution Temporary Mobile Subscriber Identity S-TMSI, the unique identity being a Mobile Device International Identity Code IMEI.
A terminal access method, the method comprising:

Sending an access request message to the network device, where the access request message carries an identifier of the terminal;

Receiving a connection establishment message sent by the network device;

Establishing a connection with the wireless network based on the connection setup message.
The method of claim 5 wherein the method further comprises:

Receiving, by the network device, a first reject message for notifying that the connection is refused to be established;

Obtaining a public land mobile network PLMN of a wireless network;

The PLMN is added to a PLMN list, which is a PLMN set that does not need to be searched at the time of PLMN search.
The method of claim 5 wherein the method further comprises:

Receiving a second reject message sent by the network device, where the second reject message is used to notify the terminal to refuse to establish a connection, and trigger the terminal to send an access request that carries the unique identifier of the terminal different from other terminals. Message

Sending an access request message carrying the unique identifier to the network device.
A network device, the network device comprising:

a receiving unit, configured to receive an access request message sent by the terminal, where the access request message carries an identifier of the terminal;

The sending unit is configured to send a connection establishment message to the terminal when the identifier of the terminal is in the preset list.
The network device according to claim 8, wherein the identifier of the terminal includes a temporary identifier of the terminal and a unique identifier of the terminal different from other terminals, and the corresponding preset list is white including a preset unique identifier. The list, the sending unit is further configured to:

When the unique identifier of the terminal is not in the whitelist, the terminal sends a first reject message to notify the terminal to refuse to establish a connection.
The network device according to claim 8, wherein the identifier of the terminal is a temporary identifier of the terminal, and the corresponding preset list is a preset temporary identifier list, and the sending unit is further configured to:

When the temporary identifier of the terminal is not in the preset temporary identifier list, the terminal sends a second reject message to the terminal, where the second reject message is used to notify the terminal to refuse to establish a connection, and trigger the terminal to send and carry There is an access request that is uniquely identified by the terminal from other terminals. Message.
The network device according to claim 9 or 10, wherein the temporary identifier is S-TMSI and the unique identifier is IMEI.
A terminal, the terminal comprising:

a sending unit, configured to send an access request message to the network device, where the access request message carries an identifier of the terminal;

a receiving unit, configured to receive a connection establishment message sent by the network device;

Establishing a unit configured to establish a connection with the wireless network according to the connection establishment message.
The terminal according to claim 12, wherein the receiving unit is further configured to receive, by the network device, a first reject message for notifying that the connection is refused to be established;

The terminal further includes:

An obtaining unit configured to acquire a public land mobile network PLMN of the wireless network;

The joining unit is configured to join the PLMN to the PLMN list, which is a PLMN set that does not need to be searched when the PLMN searches.
The terminal according to claim 12, wherein

The receiving unit is further configured to receive a second reject message sent by the network device, where the second reject message is used to notify the terminal to refuse to establish a connection, and trigger the terminal to send the terminal to be different from other The uniquely identified access request message of the terminal;

The sending unit is further configured to send, to the network device, an access request message carrying the unique identifier.
A terminal access system, the system comprising:

The terminal is configured to send an access request message to the network device, where the access request message carries an identifier of the terminal, receives a connection establishment message sent by the network device, and establishes a connection with the wireless network according to the connection establishment message. Connection;

The network device is configured to receive an access request message sent by the terminal, where the access request is The message carries the identifier of the terminal; when the identifier of the terminal is in the preset list, the connection establishment message is sent to the terminal.
A computer storage medium comprising a set of instructions that, when executed, cause at least one processor to perform the terminal access method of any one of claims 1 to 4, or to perform the right The terminal access method of any one of 5 to 7 is required.