WO2023138335A1

WO2023138335A1 - Differentiated control method and apparatus for user terminal, and related device

Info

Publication number: WO2023138335A1
Application number: PCT/CN2022/142966
Authority: WO
Inventors: 沈骁; 邵震; 钮颖彬; 纪同军; 黄国瑾
Original assignee: 中国电信股份有限公司
Priority date: 2022-01-21
Filing date: 2022-12-28
Publication date: 2023-07-27
Also published as: CN116527733A

Abstract

The present disclosure relates to the technical field of communications. Provided are a differentiated control method and apparatus for a user terminal, and a device, a storage and a computer program product. The method comprises: when a residential gateway receives an attachment request from one or more user terminals, applying for a virtual identifier for each user terminal; storing the physical address of each user terminal and a corresponding virtual identifier in the residential gateway in an associated manner; and performing differentiated control on each user terminal under the residential gateway according to the physical address of each user terminal and the corresponding virtual identifier, which are stored in the residential gateway in the associated manner. In the present disclosure, the physical address of a user terminal is associated with a corresponding virtual identifier, such that a mobile core network can distinguish a user terminal which accesses a gateway, thereby facilitating differentiated control and management of the user terminal.

Description

User terminal differentiated control method, device and related equipment

Cross References to Related Applications

This disclosure claims the priority of the Chinese patent application with application number 202210069544.8 and titled "Differential control method and device, equipment and storage for user terminals" filed on January 21, 2022. The entire content of the Chinese patent application is incorporated herein by reference.

technical field

The present disclosure relates to the field of communication technologies, and in particular to a user terminal differential control method, device, equipment, storage and computer program product.

Background technique

In the prior art, the non-3rd Generation Partnership Project (3GPP, 3rd Generation Partnership Project) access to the fifth generation mobile communication technology core network (5G core network, 5th Generation Mobile Communication Technology Core Network) scheme can use wired access. Wired access refers to the manufacturer that inserts a 5G Subscriber Identity Module (SIM, Subscriber Identity Module) gateway to access 5GC.

In the prior art wired access solution, the gateway of the 5G subscriber identity card acts as a separate user, and the 5GC performs access control on it. However, 5GC does not consider the policy control of user terminals connected to the gateway, and cannot perform differentiated control and management of user terminals connected to the gateway. In practical applications, there are many scenarios that require differentiated policy control for individual users. For example, the residential gateway (RG, Residential Gateway) used by the library needs to provide high quality of service (QoS, Quality of Service) guarantees for administrators and low quality of service guarantees for tourists, and for example, the home gateway provides high service quality guarantees for family members and low service quality guarantees for visitors.

It should be noted that the information disclosed in the above background section is only for enhancing the understanding of the background of the present disclosure, and therefore may include information that does not constitute the prior art known to those of ordinary skill in the art.

Contents of the invention

The present disclosure provides a user terminal differentiated control method, device, device, storage and computer program product, which overcomes at least to a certain extent the problem in the related art that the mobile core network cannot perform differentiated control and management of user terminals accessing gateways.

Other features and advantages of the present disclosure will become apparent from the following detailed description, or in part, be learned by practice of the present disclosure.

According to one aspect of the present disclosure, a differentiated control method for user terminals is provided, including: when a home gateway receives an attachment request from one or more user terminals, apply for a virtual ID for each user terminal; associate and store the physical addresses and corresponding virtual IDs of each user terminal in the home gateway; perform differentiated control on each user terminal under the home gateway according to the physical addresses and corresponding virtual IDs of each user terminal associated and stored in the home gateway.

In one embodiment of the present disclosure, when the home gateway receives attachment requests from one or more user terminals, applying for a virtual ID for each user terminal includes: when the home gateway receives attachment requests from one or more user terminals, initiate a virtual ID application request for each user terminal to the home gateway virtual ID management RVIM platform through the home gateway, wherein multiple virtual IDs are pre-deployed in the RVIM platform, and the virtual ID application request includes: the gateway ID of the home gateway and the physical address of each user terminal; receiving the response from the RVIM platform through the home gateway The virtual identification of each user terminal, wherein the RVIM platform is also used to associate and store the physical address, virtual identification and gateway identification of each user terminal, and synchronize them to the core network.

In an embodiment of the present disclosure, performing differentiated control on each user terminal under the home gateway according to the physical addresses and corresponding virtual identities of each user terminal associated and stored in the home gateway includes: when the home gateway receives a service request initiated by one or more user terminals, obtaining the corresponding virtual identities according to the physical addresses of each user terminal; and initiating a session establishment request to the core network according to the virtual identities of each user terminal.

According to another aspect of the present disclosure, a differentiated control method for a user terminal is provided, including: receiving a virtual ID application request from a home gateway, wherein the virtual ID application request is used to apply for a corresponding virtual ID for one or more user terminals attached to the home gateway, the virtual ID application request includes: the gateway ID of the home gateway and the physical address of each user terminal; according to the virtual ID application request, returning the virtual ID of each user terminal to the home gateway, wherein the home gateway associates and stores the physical address of each user terminal and the corresponding virtual ID to the home gateway Differentiated control is performed on each user terminal under the network.

In an embodiment of the present disclosure, after returning one or more virtual IDs to the home gateway according to the virtual ID application request, the method further includes: associating and storing the physical address of each user terminal, the virtual ID and the gateway ID.

In one embodiment of the present disclosure, a differentiated control system for user terminals is provided, which is characterized in that it includes: a core network, a home gateway virtual identity management RVIM platform, a home gateway, and one or more user terminals attached to the home gateway; wherein the home gateway is configured to initiate a virtual identity application request for each user terminal to the RVIM platform when receiving an attachment request from one or more user terminals; the RVIM platform is configured to allocate a virtual identity for each user terminal according to the received virtual identity application request, and return to the home gateway; The network communicates with the home gateway, and is used for performing differentiated control on each user terminal under the home gateway according to the physical address and the corresponding virtual identifier of each user terminal under the home gateway.

According to another aspect of the present disclosure, there is provided an electronic device, including: a processor; and a memory configured to store executable instructions of the processor; wherein the processor is configured to execute the above-mentioned differentiated control method for a user terminal by executing the executable instructions.

According to yet another aspect of the present disclosure, a computer-readable storage medium is provided, on which a computer program is stored, and when the computer program is executed by a processor, the above-mentioned differentiated control method for a user terminal is implemented.

According to another aspect of the present disclosure, there is also provided a computer program product, including a computer program, and when the computer program is executed by a processor, any one of the above-mentioned differentiated control methods for a user terminal is implemented.

The user terminal differentiated control method, device, equipment, storage and computer program product provided by the embodiments of the present disclosure apply for a virtual identifier for each user terminal, associate the physical address of each user terminal with the corresponding virtual identifier, and then perform differentiated control on each user terminal according to the difference in the virtual identifier. In the embodiment of the present disclosure, since the physical address of the user terminal is associated with the corresponding virtual identifier, the mobile core network can distinguish the user terminal accessing the gateway, thereby facilitating differentiated control and management of the user terminal.

It is to be understood that both the foregoing general description and the following detailed description are exemplary and explanatory only and are not restrictive of the present disclosure.

Description of drawings

The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate embodiments consistent with the disclosure and together with the description serve to explain the principles of the disclosure. Apparently, the drawings in the following description are only some embodiments of the present disclosure, and those skilled in the art can obtain other drawings according to these drawings without creative efforts.

FIG. 1 shows a schematic diagram of a differentiated control system structure of a user terminal in an embodiment of the present disclosure;

FIG. 2 shows a flowchart of a differentiated control method for a user terminal in an embodiment of the present disclosure;

FIG. 3 shows a flowchart of another differentiated control method for user terminals in an embodiment of the present disclosure;

FIG. 4 shows a schematic diagram of a differentiated control system for a user terminal in an embodiment of the present disclosure;

FIG. 5 shows a schematic diagram of a differentiated control system architecture of a user terminal in an embodiment of the present disclosure;

FIG. 6 shows an operation flow chart of a differentiated control system for a user terminal in an embodiment of the present disclosure;

FIG. 7 shows a home gateway authentication process in a differentiated control method for user terminals in an embodiment of the present disclosure;

FIG. 8 shows a user terminal authentication process in a user terminal differentiated control method in an embodiment of the present disclosure;

FIG. 9 shows a schematic diagram of a differentiated control device for a user terminal in an embodiment of the present disclosure;

FIG. 10 shows a schematic diagram of another differentiated control device for a user terminal in an embodiment of the present disclosure;

FIG. 11 shows a structural block diagram of an electronic device in an embodiment of the present disclosure;

FIG. 12 shows a schematic diagram of a computer-readable storage medium in an embodiment of the present disclosure.

Detailed ways

Example embodiments will now be described more fully with reference to the accompanying drawings. Example embodiments may, however, be embodied in many forms and should not be construed as limited to the examples set forth herein; rather, these embodiments are provided so that this disclosure will be thorough and complete, and will fully convey the concept of example embodiments to those skilled in the art. The described features, structures, or characteristics may be combined in any suitable manner in one or more embodiments.

Furthermore, the drawings are merely schematic illustrations of the present disclosure and are not necessarily drawn to scale. The same reference numerals in the drawings denote the same or similar parts, and thus repeated descriptions thereof will be omitted. Some of the block diagrams shown in the drawings are functional entities and do not necessarily correspond to physically or logically separate entities. These functional entities may be implemented in software, or in one or more hardware modules or integrated circuits, or in different network and/or processor means and/or microcontroller means.

For ease of understanding, before introducing the embodiments of the present disclosure, several nouns involved in the embodiments of the present disclosure are explained as follows:

Home gateway: Residential Gateway, RG.

Residential Gateway Virtual Identity Management: Residential Gateway Virtual-IMSI Management, RVIM.

International Mobile Subscriber Identity: IMSI, International Mobile Subscriber Identity, is an identification code used to distinguish different users in a cellular network that is not repeated in all cellular networks.

User equipment: User Equipment, UE.

Physical address: Media Access Control, MAC, the storage unit in the physical address memory of the network card corresponds to the actual address, called the physical address, which corresponds to the logical address.

Wireless access network gateway function: Wireline Access Gateway Function, W-AGF.

User plane function: User Plane Function, UPF, as a 5GC network user plane network element, mainly supports UE service data routing and forwarding, data and service identification, action and policy execution, etc.

Unified data storage and management equipment: unified data manager, UDM.

Authentication server: Authentication Server Function, AUSF.

Extensible Authentication Protocol: Extensible Authentication Protocol, EAP, is a commonly used authentication framework protocol that supports multiple authentication methods, mainly used for network access authentication. EAP can be applied to wireless and wired networks.

Wireless network communication technology: Wi-Fi, which is the trademark of the Wi-Fi Alliance manufacturer as a product brand certification, is used to connect network-connectable devices to each other wirelessly.

The third generation partnership project: 3rd Generation Partnership Project, 3GPP.

Quality of Service: Quality of Service, QoS, refers to a network that can use various basic technologies to provide better service capabilities for specified network communications. It is a security mechanism of the network and a technology used to solve problems such as network delay and congestion.

Protocol data unit: Protocol Data Unit, PDU.

Protocol Data Unit Session: Protocol Data Unit Session is a new abstract concept in the 5G system, providing a service for PDU transfer between UE and DN.

Data network: Data Network, such as operator business, Internet or third-party business, etc.

The exemplary implementation manner will be described in detail below in conjunction with the accompanying drawings and embodiments.

First, FIG. 1 shows a schematic diagram of an exemplary system architecture of a differentiated control method for a user terminal or an apparatus for a differentiated control method for a user terminal that can be applied to an embodiment of the present disclosure.

As shown in FIG. 1 , a system architecture 100 may include a terminal device 101 , a network 102 and a server 103 .

Wherein, the terminal device 101 sends an attach request to the server 103 through the network 102 . When server 103 receives the attachment request of one or more terminal equipments, apply for a virtual identification for each terminal equipment; Server 103 stores the physical address and corresponding virtual identification of each terminal equipment in association with server 103;

In an embodiment of the present disclosure, the above-mentioned server 103 is also used for: when the server receives the attachment request of one or more terminal devices, the server 103 initiates a virtual identification application request for each terminal device to the home gateway virtual identification management RVIM platform, wherein the RVIM platform is pre-deployed with a plurality of virtual identifications, and the virtual identification application request includes: the gateway identification of the server 103 and the physical address of each terminal device; the virtual identification of each terminal device returned by the RVIM platform is received by the server 103, wherein the RVIM platform is also used for each terminal The physical address, virtual ID and gateway ID of the device are stored in association and synchronized to the core network.

In an embodiment of the present disclosure, the server 103 is further configured to: when the server receives a service request initiated by each terminal device, obtain a corresponding virtual ID according to the physical address of each terminal device; initiate a session establishment request to the core network according to the virtual ID of each terminal device.

It should be noted that the medium used by the above-mentioned network 102 to provide a communication link between the terminal device 101 and the server 103 may be a wired network or a wireless network.

Optionally, the aforementioned wireless network or wired network uses standard communication technologies and/or protocols. The network is usually the Internet, but can also be any network, including but not limited to Local Area Network (LAN), Metropolitan Area Network (MAN), Wide Area Network (Wide Area Network, WAN), mobile, wired or wireless network, private network or any combination of virtual private network). In some embodiments, data exchanged over a network is represented using technologies and/or formats including Hyper Text Mark-up Language (HTML), Extensible Markup Language (XML), and the like. In addition, conventional encryption technologies such as Secure Socket Layer (Secure Socket Layer, SSL), Transport Layer Security (Transport Layer Security, TLS), Virtual Private Network (Virtual Private Network, VPN), Internet Protocol Security (Internet Protocol Security, IPsec) can be used to encrypt all or some links. In some other embodiments, customized and/or dedicated data communication technologies may also be used to replace or supplement the above data communication technologies.

The terminal device 101 may be various electronic devices, including but not limited to smartphones, tablet computers, laptop computers, desktop computers, wearable devices, augmented reality devices, virtual reality devices, and the like.

In some embodiments, clients of application programs installed on different terminal devices 101 are the same, or clients of the same type of application programs based on different operating systems. Based on different terminal platforms, the specific form of the client of the application program may also be different, for example, the client of the application program may be a mobile phone client, a PC client, and the like.

The server 103 may be a server that provides various services, for example, a background management server that provides support for devices operated by the user using the terminal device 101 . The background management server can analyze and process the received data such as requests, and feed back the processing results to the terminal device.

In some embodiments, the server can be an independent physical server, a residential gateway (Residential Gateway, RG), or a server cluster or distributed system composed of multiple physical servers, or a cloud server that provides basic cloud computing services such as cloud services, cloud databases, cloud computing, cloud functions, cloud storage, network services, cloud communications, middleware services, domain name services, security services, CDN (Content Delivery Network, content distribution network), and big data and artificial intelligence platforms. The terminal may be a smart phone, a tablet computer, a laptop computer, a desktop computer, a smart speaker, a smart watch, etc., but is not limited thereto. The terminal and the server may be connected directly or indirectly through wired or wireless communication, which is not limited in this application.

Those skilled in the art may know that the numbers of terminal devices, networks and servers in FIG. 1 are only illustrative, and there may be any number of terminal devices, networks and servers according to actual needs. The embodiment of the present disclosure does not limit this.

Embodiments of the present disclosure provide a differentiated control method for a user terminal, and the method may be executed by any electronic device capable of computing and processing.

FIG. 2 shows a flowchart of a differentiated control method for a user terminal in an embodiment of the present disclosure. As shown in FIG. 2 , the differentiated control method for a user terminal provided in an embodiment of the present disclosure includes the following steps:

S202. When the home gateway receives attachment requests from one or more user terminals, apply for a virtual identity for each user terminal.

It should be noted that the above-mentioned home gateway RG is a device that allows a local area network (Local Area Network, LAN) to connect to a wide area network (Wide Area Network, WAN) in a telecommunications network. The aforementioned user terminal may be a smart phone, a tablet computer, a notebook computer, a desktop computer, a smart speaker, a smart watch, etc., but is not limited thereto. The English name of the above attachment request is Attach Request, which is a kind of NAS (Non Access Stratum, non-access stratum) signaling. When the home gateway does not establish a default bearer, it transmits data with the user terminal through the NAS signaling. The aforementioned virtual identifier may be a string of characters, marking different user terminals and used to distinguish user terminals.

In one embodiment of the present disclosure, when the home gateway receives attachment requests from one or more user terminals, applying for a virtual ID for each user terminal may include: when the home gateway receives attachment requests from one or more user terminals, initiate a virtual ID application request for each user terminal to the home gateway virtual ID management RVIM platform through the home gateway, wherein multiple virtual IDs are pre-deployed in the RVIM platform, and the virtual ID application request includes: the gateway ID of the home gateway and the physical address of each user terminal; receiving the ID of each user terminal returned by the RVIM platform through the home gateway Virtual ID, wherein the RVIM platform is also used to associate and store the physical address, virtual ID and gateway ID of each user terminal, and synchronize them to the core network.

For example, in one example, when the user terminal UE registers, the RG applies for a virtual identity from the RVIM. First, the RG identifies whether the identity of the online user terminal is an administrator or a visitor (for example, the RG maintains a database in which the MAC address of the administrator device is stored. If the MAC address of the online user terminal is not in the database, it is identified as a tourist). In this way, when the RG applies for a virtual ID, it can carry a label indicating the quality of service. The administrator device applies for a high-QOS virtual ID, and the tourist device applies for a low-QOS virtual ID. The virtual identifier itself can represent different QoS through a different bit, so that when the subsequent user terminal UE performs data services, the 5GC can directly judge whether to provide high QOS or low QOS for the user terminal UE according to the virtual identifier.

In the embodiments of the present disclosure, by assigning virtual identifiers to user terminals, different user terminals are distinguished by using the virtual identifiers, thereby facilitating differentiated control and management of user terminals.

S204. Associate and store the physical address of each user terminal and the corresponding virtual identifier in the home gateway.

It should be noted that the above-mentioned user terminal may be a smart phone, a tablet computer, a notebook computer, a desktop computer, a smart speaker, a smart watch, etc., but is not limited thereto. The above physical address may be a MAC address, which is the address of the host computer of the user terminal that sends data when transmitting data. The above corresponding virtual identifier is a string of characters assigned to each user terminal, and is used to distinguish different user terminals.

In the embodiments of the present disclosure, by storing the association relationship between the physical address of each user terminal and the corresponding virtual ID in the home gateway, it is helpful to perform differentiated control and management on the user terminal when the home gateway establishes a session.

S206. Perform differentiated control on each user terminal under the home gateway according to the physical address and the corresponding virtual identifier of each user terminal associated and stored in the home gateway.

It should be noted that the above-mentioned home gateway is a device that allows a local area network (Local Area Network, LAN) to connect to a wide area network (Wide Area Network, WAN) in a telecommunications network. The aforementioned user terminal may be a smart phone, a tablet computer, a notebook computer, a desktop computer, a smart speaker, a smart watch, etc., but is not limited thereto. The above physical address may be a MAC address, which is the address of the host computer of the user terminal that sends data when transmitting data. The above corresponding virtual identifier is a string of characters assigned to each user terminal, and is used to distinguish different user terminals. The above differentiated control means that different user terminals can be managed differently according to the virtual identifiers corresponding to the user terminals.

In an embodiment of the present disclosure, the differentiated control of each user terminal under the home gateway according to the physical address of each user terminal and the corresponding virtual ID stored in the home gateway may include: when the home gateway receives a service request initiated by each user terminal, obtain the corresponding virtual ID according to the physical address of each user terminal; initiate a session establishment request to the core network according to the virtual ID of each user terminal.

For example, in a 5GC scenario in a library, many users will connect to the RG of the 5GC through Wi-Fi. Among them, the mobile phone of the librarian (equivalent to the above-mentioned user terminal) needs a high QS, and a number with the sixth digit of the IMSI (equivalent to the above-mentioned virtual identity) is assigned. The library visitor’s mobile phone needs a low QS, so a number with the sixth digit of the IMSI is assigned, so as to differentiate between the administrator’s mobile phone and the visitor’s mobile phone (equivalent to the above-mentioned user terminals) under the RG.

In the embodiment of the present disclosure, the mobile core network can perform differentiated control and management on the user terminals accessing the gateway through the physical addresses and corresponding virtual identities of each user terminal associated and stored in the home gateway.

In an embodiment of the present disclosure, as shown in FIG. 3 , the embodiment of the present disclosure also provides a differentiated control method for a user terminal, including the following steps:

S302. Receive a virtual identity application request from the home gateway, where the virtual identity application request is used to apply for a corresponding virtual identity for one or more user terminals attached to the home gateway, and the virtual identity application request includes: the gateway identity of the home gateway and the physical address of each user terminal.

It should be noted that the above-mentioned home gateway is a device that allows a local area network to connect to a wide area network in a telecommunications network. The aforementioned virtual identifier may be a string of characters, marking different user terminals and used to distinguish user terminals. The aforementioned user terminal may be a smart phone, a tablet computer, a notebook computer, a desktop computer, a smart speaker, a smart watch, etc., but is not limited thereto. The gateway identified above is IMSI. The above-mentioned physical address is a MAC address, which is the address of the user terminal that sends data when transmitting data.

In the embodiment of the present disclosure, different user terminals are distinguished by using virtual identifiers, thereby facilitating differentiated control and management of user terminals.

S304. According to the virtual identity application request, return the virtual identity of one or more user terminals to the home gateway, wherein the home gateway associates and stores the physical address of each user terminal with the corresponding virtual identity, so as to perform differential control on each user terminal under the home gateway.

It should be noted that the aforementioned virtual identifier may be a string of characters, marking different user terminals and used to distinguish user terminals. The aforementioned residential gateway, in a telecommunications network, is a device that allows a local area network to connect to a wide area network.

In the embodiments of the present disclosure, the mobile core network can control and manage the user terminals accessing the gateway in a differentiated manner by associating and storing the physical addresses and corresponding virtual identities of each user terminal in the home gateway.

In an embodiment of the present disclosure, as shown in FIG. 4 , the embodiment of the present disclosure also provides a schematic diagram of a differentiated control system for user terminals, including a core network 401, a home gateway virtual identity management RVIM platform 402, a home gateway 403, and one or more user terminals 404 attached to the home gateway.

Wherein, the home gateway is used to initiate a virtual identification application request of each user terminal to the RVIM platform when receiving the attachment request of one or more user terminals;

The RVIM platform is used to assign a virtual identity to each user terminal according to the received virtual identity application request, and return it to the home gateway;

The core network communicates with the home gateway, and is used to control each user terminal under the home gateway in a differentiated manner according to the physical address and the corresponding virtual identifier of each user terminal under the home gateway.

In an embodiment of the present disclosure, as shown in FIG. 5 , the embodiment of the present disclosure also provides a schematic diagram of a differentiated control system architecture of a user terminal, which includes:

5G RG502 is connected with UE501, RVIM503 and W-AGF504 respectively, W-AGF is connected with AMF505 and UPF506 respectively, RVIM is connected with UDM507, UDM is connected with AUSF508, and AUSF is connected with AMF.

RVIM503 is used to set up a certain number of temporary number (IMSI) pools and synchronize them to UDM in real time. In the RG registration process, when the registration is successful, UDM needs to notify the RVIM platform that the RG has been accessed through New Interface1. RVIM saves a list of currently authenticated numbers and updates them in real time. When the UE/Device (equivalent to the above user terminal) attaches to the 5G-RG through the Y1 interface, the 5G-RG applies to the RVIM for a virtual identity (carrying, carrying 5 GRG's IMSI and UE/Device's MAC address). The RVIM is used to allocate a temporary number (equivalent to the above-mentioned virtual identity) to the above-mentioned UE/Device, and save the binding relationship between the temporary number and the MAC address of the device.

5G-RG is used for when UE/Device attaches to 5G-RG through Y1 interface, 5G-RG applies for a virtual identity (carrying IMSI of 5G RG and MAC address of UE/Device) to RVIM through New Interface1. After obtaining the temporary number from RVIM, 5G-RG also establishes a binding relationship between the temporary number and the MAC address of the device. 5G-RG supports the ability to initiate multiple authentications to W-AGF with multiple IMSIs and establish multiple PDU Sessions.

UDM is used to synchronize all temporary numbers in RVIM in real time, and notify the RVIM platform that the 5G-RG has been accessed after the 5G-RG authentication is successful.

In one embodiment, in the 5G RG registration process, when the registration is successful, the UDM notifies the RVIM that the RG has been authenticated, and the RVIM should save a list of currently authenticated numbers and update it in real time. When the UE/Device attaches to the 5G-RG through the Y1 interface, the 5G-RG applies to the RVIM for a virtual identity (carrying the IMSI of the 5G RG and the MAC address of the UE/Device) through the New Interface1. RVIM assigns a temporary number to the UE/Device, and saves the binding relationship between the temporary number and the MAC address of the device. After the RG obtains the temporary number, it also establishes a binding relationship between the temporary number and the MAC address of the device. Subsequently, the RG initiates registration with the W-AGF again with the temporary number. When the UE/Device initiates a data service through the Y1 interface, the 5G-RG uses the PDU Session initiated to the W-AGF to establish.

In an embodiment of the present disclosure, as shown in FIG. 6 , the embodiment of the present disclosure also provides FIG. 6 , which is a flow chart of the operation of a differentiated control system for user terminals, including:

S601, RVIM and UDM synchronize temporary number information in real time;

S602, 5G RG (equivalent to the above-mentioned home gateway RG) goes online, and executes the RG certification process;

S603, the Device (equivalent to the above-mentioned user terminal) attaches to the 5G RG, executes the Device authentication process, and the 5G RG binds the Device MAC address (equivalent to the physical address of the above-mentioned user terminal) with the temporary number (equivalent to the above-mentioned virtual identity);

S604. The Device initiates a data service, and the 5G RG uses the temporary number to initiate a session establishment process to the W-AGF. After the session is established, the data service can be transmitted in the session;

S605. When multiple Devices initiate data services, the RG allocates different temporary numbers to each Device and establishes different sessions, so as to implement differentiated management of different Devices.

In the embodiment of the present disclosure, the Device MAC address is bound to the temporary number through the 5G RG, so that the RGC can perform differentiated control and management on different Devices that access the gateway.

In an embodiment of the present disclosure, as shown in FIG. 7 , the embodiment of the present disclosure also provides an RG authentication process in a user terminal differentiated control method, including the following steps:

S701, 5G RG goes online and establishes connection with W-AGF;

S702, 5G RG and W-AGF implement standard EAP authentication;

S703, 5G RG has been certified by W-AGF and AMF to implement the standard EAP;

S704, 5G RG has been certified by W-AGF and AUSF to implement the standard EAP;

S705, AMF and AUSF exchange user subscription information (specific service information ordered by the user when activating the service);

S706, AUSF sends EAP authentication success to AMF;

S707, the AMF sends the EAP authentication success to the W-AGF;

S708, W-AGF sends EAP authentication success to 5G RG;

S709, 5G RG and W-AGF implement standard NAS certification;

S710, 5G RG has been certified by W-AGF and AMF to implement standard NAS;

S711, 5G RG has been certified by the standard NAS between W-AGF and AUSF;

S712, 5G RG is certified by standard NAS between W-AGF and UDM;

S713. The UDM notifies the RVIM of the authentication result of the 5G RG, and the RVIM obtains the message that the RG has completed the authentication.

Among them, S702 to S708, 5G RG is certified by standard EAP between W-AGF and AMF/AUSF/UDM.

From S709 to S712, 5G RG is certified by standard NAS between W-AGF and AMF/AUSF/UDM.

In an embodiment of the present disclosure, as shown in FIG. 8 , the embodiment of the present disclosure also provides a user terminal authentication process in a user terminal differentiated control method, including the following steps:

S801, 802.1x user attachment;

S802, requesting to assign a temporary number (carrying Device MAC address, RG IMSI);

S803, RG certification result;

S804, assigning a temporary number;

S805, storing the binding relationship between RG IMSI, Device MAC address and temporary number;

S806, saving the binding relationship between RG IMSI, Device MAC address and temporary number;

S807. Perform authentication again by using the temporary number.

For example, in one embodiment of the present disclosure, the Device is successfully attached to the 5G RG; the 5G RG carries the Device MAC address and the RG IMSI to apply for a temporary number from the RVIM; the RVIM queries the stored RG authentication results, allocates a temporary number to the 5G RG, and saves the binding relationship between the RG IMSI, Device MAC address and the temporary number; AGF initiates authentication again.

Based on the same inventive concept, embodiments of the present disclosure also provide a differentiated control device for user terminals, as described in the following embodiments. Since the problem-solving principle of this device embodiment is similar to that of the above-mentioned method embodiment, the implementation of this device embodiment can refer to the implementation of the above-mentioned method embodiment, and repeated descriptions will not be repeated.

FIG. 9 shows a schematic diagram of a differentiated control device for a user terminal in an embodiment of the present disclosure. As shown in FIG. 9, the device includes:

The number application module 901 is configured to apply for a virtual ID for each user terminal when the home gateway receives an attachment request from one or more user terminals;

The number association module 902 is configured to associate and store the physical address of each user terminal and the corresponding virtual identification in the home gateway;

The differentiated control module 903 is configured to perform differentiated control on each user terminal under the home gateway according to the physical addresses and corresponding virtual identities of each user terminal associated and stored in the home gateway.

In an embodiment of the present disclosure, the number application module 901 is specifically configured to: when the home gateway receives an attachment request from one or more user terminals, initiate a virtual identity application request for each user terminal to the home gateway virtual identity management RVIM platform through the home gateway, wherein multiple virtual identities are pre-deployed in the RVIM platform, and the virtual identity application request includes: the gateway identity of the home gateway and the physical address of each user terminal; receive the virtual identity of each user terminal returned by the RVIM platform through the home gateway, wherein the RVIM platform is also used to apply the physical address of each user terminal Addresses, virtual IDs, and gateway IDs are stored in association and synchronized to the core network.

In an embodiment of the present disclosure, the differentiation control module 903 is specifically configured to: when the home gateway receives a service request initiated by each user terminal, obtain a corresponding virtual identifier according to the physical address of each user terminal; initiate a session establishment request to the core network according to the virtual identifier of each user terminal.

FIG. 10 shows a schematic diagram of another differentiated control device for user terminals in an embodiment of the present disclosure. As shown in FIG. 10 , the device includes:

The request receiving module 1001 is configured to receive a virtual identity application request from a home gateway, wherein the virtual identity application request is used to apply for a corresponding virtual identity for one or more user terminals attached to the home gateway, and the virtual identity application request includes: the gateway identity of the home gateway and the physical address of each user terminal;

The response module 1002 is configured to return the virtual ID of each user terminal to the home gateway according to the virtual ID application request, wherein the home gateway associates and stores the physical address of each user terminal with the corresponding virtual ID, so as to perform differential control on each user terminal under the home gateway.

In one embodiment, the device further includes: an associated storage module 1003 configured to associate and store the physical address, virtual identifier and gateway identifier of each user terminal.

Those skilled in the art can understand that various aspects of the present disclosure can be implemented as a system, method or program product. Therefore, various aspects of the present disclosure can be embodied in the following forms, that is: a complete hardware implementation, a complete software implementation (including firmware, microcode, etc.), or a combination of hardware and software implementations, which can be collectively referred to as "circuits", "modules" or "systems" herein.

An electronic device 1100 according to this embodiment of the present disclosure is described below with reference to FIG. 11 . The electronic device 1100 shown in FIG. 11 is only an example, and should not limit the functions and scope of use of the embodiments of the present disclosure.

As shown in FIG. 11 , electronic device 1100 takes the form of a general-purpose computing device. Components of the electronic device 1100 may include, but are not limited to: at least one processing unit 1110, at least one storage unit 1120, and a bus 1130 connecting different system components (including the storage unit 1120 and the processing unit 1110).

Wherein, the storage unit stores program codes, and the program codes can be executed by the processing unit 1110, so that the processing unit 1110 executes the steps according to various exemplary embodiments of the present disclosure described in the “Exemplary Method” section above.

For example, the processing unit 1110 may perform the following steps in the above method embodiment: when the home gateway receives an attachment request from one or more user terminals, apply for a virtual identifier for each user terminal; associate and store the physical addresses of each user terminal and the corresponding virtual identifiers in the home gateway; perform differentiated control on each user terminal under the home gateway according to the physical addresses and corresponding virtual identifiers of each user terminal associated and stored in the home gateway.

For example, when the processing unit 1110 executes the step of applying for a virtual identity for each user terminal when the home gateway receives the attachment request of one or more user terminals, it may also include: when the home gateway receives the attachment request of one or more user terminals, initiate a virtual identity application request for each user terminal to the home gateway virtual identity management RVIM platform through the home gateway. The virtual identification of each user terminal, wherein the RVIM platform is also used to associate and store the physical address, virtual identification and gateway identification of each user terminal, and synchronize them to the core network.

For example, when the processing unit 1110 executes the step of performing differentiated control on each user terminal under the home gateway according to the physical address of each user terminal associated and stored in the home gateway and the corresponding virtual identifier, it may further include: when the home gateway receives a service request initiated by each user terminal, obtain the corresponding virtual identifier according to the physical address of each user terminal; initiate a session establishment request to the core network according to the virtual identifier of each user terminal.

For example, the processing unit 1110 may perform the following steps in the above method embodiment: receiving a virtual ID application request from the home gateway, wherein the virtual ID application request is used to apply for a corresponding virtual ID for one or more user terminals attached to the home gateway, and the virtual ID application request includes: the gateway ID of the home gateway and the physical address of each user terminal; according to the virtual ID application request, return the virtual ID of one or more user terminals to the home gateway, wherein the home gateway associates and stores the physical address of each user terminal and the corresponding virtual ID, so that each user terminal under the home gateway Differential control.

For example, after the processing unit 1110 executes the step of returning one or more virtual IDs to the home gateway according to the virtual ID application request, it may further include: associating and storing the physical address of each user terminal, the virtual ID and the gateway ID.

The storage unit 1120 may include a readable medium in the form of a volatile storage unit, such as a random access storage unit (RAM) 11201 and/or a cache storage unit 11202 , and may further include a read-only storage unit (ROM) 11203 .

Storage unit 1120 may also include a program/utility 11204 having a set (at least one) of program modules 11205, such program modules 11205 including but not limited to: an operating system, one or more application programs, other program modules, and program data, each or some combination of which may include the implementation of a network environment.

Bus 1130 may represent one or more of several types of bus structures, including a memory cell bus or memory cell controller, a peripheral bus, an accelerated graphics port, a processing unit, or a local bus using any of a variety of bus structures.

The electronic device 1100 may also communicate with one or more external devices 1140 (e.g., keyboards, pointing devices, Bluetooth devices, etc.), and with one or more devices that enable a user to interact with the electronic device 1100, and/or with any device that enables the electronic device 1100 to communicate with one or more other computing devices (e.g., routers, modems, etc.). Such communication may occur through input/output (I/O) interface 1150 . Moreover, the electronic device 1100 can also communicate with one or more networks (such as a local area network (LAN), a wide area network (WAN) and/or a public network such as the Internet) through the network adapter 1160 . As shown, the network adapter 1160 communicates with other modules of the electronic device 1100 through the bus 1130 . It should be understood that although not shown in the figure, other hardware and/or software modules may be used in conjunction with the electronic device 1100, including but not limited to: microcode, device drivers, redundant processing units, external disk drive arrays, RAID systems, tape drives, and data backup storage systems, among others.

Through the description of the above implementations, those skilled in the art can easily understand that the example implementations described here can be implemented by software, or by combining software with necessary hardware. Therefore, the technical solution according to the embodiments of the present disclosure can be embodied in the form of a software product, which can be stored in a non-volatile storage medium (which can be a CD-ROM, a U disk, a mobile hard disk, etc.) or on a network, and includes several instructions so that a computing device (which can be a personal computer, a server, a terminal device, or a network device, etc.) executes the method according to the embodiments of the present disclosure.

In particular, according to an embodiment of the present disclosure, the process described above with reference to the flowchart can be implemented as a computer program product, and the computer program product includes: a computer program, when the computer program is executed by a processor, the above-mentioned differentiated control method for a user terminal is implemented.

In an exemplary embodiment of the present disclosure, a computer-readable storage medium is also provided, and the computer-readable storage medium may be a readable signal medium or a readable storage medium. FIG. 12 shows a schematic diagram of a computer-readable storage medium in an embodiment of the present disclosure. As shown in FIG. 12 , the computer-readable storage medium 1200 stores a program product capable of implementing the above method of the present disclosure. In some possible implementation manners, various aspects of the present disclosure may also be implemented in the form of a program product, which includes program code, and when the program product is run on a terminal device, the program code is used to cause the terminal device to execute the steps according to various exemplary embodiments of the present disclosure described in the above "Exemplary Method" section of this specification.

For example, when the program product in the embodiment of the present disclosure is executed by the processor, the following steps are implemented: when the home gateway receives an attachment request from one or more user terminals, apply for a virtual ID for each user terminal; associate and store the physical addresses of each user terminal and the corresponding virtual IDs in the home gateway; perform differentiated control on each user terminal under the home gateway according to the physical addresses and corresponding virtual IDs of each user terminal associated and stored in the home gateway.

Further, in some embodiments, when the program product in the embodiments of the present disclosure is executed by the processor, the following steps can also be implemented: when the home gateway receives an attachment request from one or more user terminals, the home gateway initiates a virtual identity application request for each user terminal to the home gateway virtual identity management RVIM platform, wherein, the RVIM platform is pre-deployed with multiple virtual identities, and the virtual identity application request includes: the gateway identity of the home gateway and the physical address of each user terminal; receiving the virtual identity of each user terminal returned by the RVIM platform through the home gateway, wherein, the RV The IM platform is also used to associate and store the physical address, virtual ID and gateway ID of each user terminal, and synchronize them to the core network.

Further, in some embodiments, when the program product in the embodiment of the present disclosure is executed by the processor, the following steps can also be implemented: when the home gateway receives a service request initiated by each user terminal, obtain the corresponding virtual identifier according to the physical address of each user terminal; initiate a session establishment request to the core network according to the virtual identifier of each user terminal.

In some embodiments, when the program product in the embodiment of the present disclosure is executed by the processor, the following steps can also be implemented: receiving a virtual ID application request from a home gateway, wherein the virtual ID application request is used to apply for a corresponding virtual ID for one or more user terminals attached to the home gateway, and the virtual ID application request includes: the gateway ID of the home gateway and the physical address of each user terminal; according to the virtual ID application request, return the virtual ID of one or more user terminals to the home gateway, wherein the home gateway associates and stores the physical address of each user terminal and the corresponding virtual ID to the home gateway Differentiated control is performed on each user terminal under the network.

Further, in some embodiments, when the program product in the embodiment of the present disclosure is executed by the processor, the following steps can also be implemented: after one or more virtual identities are returned to the home gateway according to the virtual id application request, the physical address of each user terminal, the virtual identities, and the gateway identities are associated and stored.

More specific examples of a computer-readable storage medium in the present disclosure may include, but are not limited to, an electrical connection with one or more wires, a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the foregoing.

In the present disclosure, a computer-readable storage medium may include a data signal carrying readable program code in baseband or as part of a carrier wave traveling as a data signal. Such propagated data signals may take many forms, including but not limited to electromagnetic signals, optical signals, or any suitable combination of the foregoing. A readable signal medium may also be any readable medium other than a readable storage medium that can transmit, propagate, or transport a program for use by or in conjunction with an instruction execution system, apparatus, or device.

In some embodiments, program code embodied on a computer readable storage medium may be transmitted using any suitable medium, including but not limited to wireless, wireline, optical cable, RF, etc., or any suitable combination of the above.

In practice, the program code for performing the operations of the present disclosure may be written in any combination of one or more programming languages, including object-oriented programming languages—such as Java, C++, etc., and conventional procedural programming languages—such as “C” language or similar programming languages. The program code may execute entirely on the user computing device, partly on the user device, as a stand-alone software package, partly on the user computing device and partly on a remote computing device, or entirely on the remote computing device or server. In cases involving a remote computing device, the remote computing device may be connected to the user computing device through any kind of network, including a local area network (LAN) or a wide area network (WAN), or alternatively, may be connected to an external computing device (e.g., via the Internet using an Internet service provider).

It should be noted that although several modules or units of the device for action execution are mentioned in the above detailed description, this division is not mandatory. Actually, according to the embodiment of the present disclosure, the features and functions of two or more modules or units described above may be embodied in one module or unit. Conversely, the features and functions of one module or unit described above can be further divided to be embodied by a plurality of modules or units.

In addition, while steps of the methods of the present disclosure are depicted in a particular order in the figures, there is no requirement or implication that the steps must be performed in that particular order, or that all illustrated steps must be performed, to achieve desirable results. Additionally or alternatively, certain steps may be omitted, multiple steps may be combined into one step for execution, and/or one step may be decomposed into multiple steps for execution, etc.

Through the description of the above embodiments, those skilled in the art can easily understand that the example embodiments described here can be implemented by software, or by combining software with necessary hardware. Therefore, the technical solution according to the embodiments of the present disclosure can be embodied in the form of a software product, which can be stored in a non-volatile storage medium (which can be a CD-ROM, a U disk, a mobile hard disk, etc.) or on a network, and includes several instructions so that a computing device (which can be a personal computer, a server, a mobile terminal, or a network device, etc.) executes the method according to the embodiments of the present disclosure.

Other embodiments of the present disclosure will be readily apparent to those skilled in the art from consideration of the specification and practice of the invention disclosed herein. The present disclosure is intended to cover any modification, use or adaptation of the present disclosure, which follow the general principles of the present disclosure and include common knowledge or conventional technical means in the technical field not disclosed in the present disclosure. The specification and examples are to be considered exemplary only, with the true scope and spirit of the disclosure indicated by the appended claims.

Claims

A differentiated control method for a user terminal, comprising:

When the home gateway receives attachment requests from one or more user terminals, apply for a virtual identity for each user terminal;

Associating and storing the physical address of each user terminal and the corresponding virtual ID in the home gateway;

Differentiated control is performed on each user terminal under the home gateway according to the physical address and the corresponding virtual identifier of each user terminal associated and stored in the home gateway.
The differentiated control method for user terminals according to claim 1, wherein, when the home gateway receives attachment requests from one or more user terminals, applying for a virtual identity for each user terminal includes:

When the home gateway receives an attachment request from one or more user terminals, the home gateway initiates a virtual identity application request for each user terminal to the home gateway virtual identity management RVIM platform, wherein a plurality of virtual identities are pre-deployed in the RVIM platform, and the virtual identity application request includes: the gateway identity of the home gateway and the physical address of each user terminal;

The virtual identifier of each user terminal returned by the RVIM platform is received through the home gateway, wherein the RVIM platform is also used to associate and store the physical address, virtual identifier and gateway identifier of each user terminal, and synchronize them to the core network.
The differentiated control method for user terminals according to claim 1, wherein, according to the physical addresses and corresponding virtual identities of each user terminal associated and stored in the home gateway, performing differentiated control on each user terminal under the home gateway includes:

When the home gateway receives a service request initiated by each user terminal, it acquires a corresponding virtual identifier according to the physical address of each user terminal;

Initiate a session establishment request to the core network according to the virtual identifier of each user terminal.
A differentiated control method for user terminals, including:

Receive a virtual identity application request from a home gateway, wherein the virtual identity application request is used to apply for a corresponding virtual identity for one or more user terminals attached to the home gateway, and the virtual identity application request includes: the gateway identity of the home gateway and the physical address of each user terminal;

According to the virtual identity application request, return the virtual identity of one or more user terminals to the home gateway, wherein the home gateway associates and stores the physical address of each user terminal with the corresponding virtual identity, so as to perform differentiated control on each user terminal under the home gateway.
The differentiated control method for user terminals according to claim 4, wherein, after returning one or more virtual identities to the home gateway according to the virtual id application request, the method further comprises:

The physical address, virtual ID and gateway ID of each user terminal are associated and stored.
A differentiated control system for user terminals, including: a core network, a home gateway virtual identity management RVIM platform, a home gateway, and one or more user terminals attached to the home gateway;

Wherein, the home gateway is configured to initiate a virtual identity application request for each user terminal to the RVIM platform when receiving an attachment request from one or more user terminals;

The RVIM platform is configured to assign a virtual identity to each user terminal according to the received virtual identity application request, and return it to the home gateway;

The core network communicates with the home gateway, and is configured to perform differentiated control on each user terminal under the home gateway according to the physical addresses and corresponding virtual identities of each user terminal under the home gateway.
A differentiated control device for a user terminal, comprising:

The number application module is used to apply for a virtual ID for each user terminal when the home gateway receives an attachment request from one or more user terminals;

A number association module, configured to associate and store the physical address of each user terminal and the corresponding virtual ID in the home gateway;

A differentiated control module, configured to perform differentiated control on each user terminal under the home gateway according to the physical address and the corresponding virtual identifier of each user terminal associated and stored in the home gateway.
A differentiated control device for a user terminal, comprising:

The request receiving module is configured to receive a virtual identity application request from a home gateway, wherein the virtual identity application request is used to apply for a corresponding virtual identity for one or more user terminals attached to the home gateway, and the virtual identity application request includes: the gateway identity of the home gateway and the physical address of each user terminal;

The response module is configured to return the virtual ID of each user terminal to the home gateway according to the virtual ID application request, wherein the home gateway associates and stores the physical address of each user terminal with the corresponding virtual ID, so as to perform differentiated control on each user terminal under the home gateway.
An electronic device comprising:

processor; and

a memory for storing executable instructions of the processor;

Wherein, the processor is configured to execute the user terminal differentiated control method according to any one of claims 1-5 by executing the executable instruction.
A computer-readable storage medium, on which a computer program is stored, and when the computer program is executed by a processor, the differentiated control method for a user terminal according to any one of claims 1-5 is implemented.
A computer program product, comprising a computer program, when the computer program is executed by a processor, the differentiated control method for a user terminal according to any one of claims 1-5 is implemented.