CN101741833A - Method, equipment and system for license control - Google Patents

Method, equipment and system for license control Download PDF

Info

Publication number
CN101741833A
CN101741833A CN200910188858A CN200910188858A CN101741833A CN 101741833 A CN101741833 A CN 101741833A CN 200910188858 A CN200910188858 A CN 200910188858A CN 200910188858 A CN200910188858 A CN 200910188858A CN 101741833 A CN101741833 A CN 101741833A
Authority
CN
China
Prior art keywords
permission
facilities
equipments
lcc
licensed content
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Pending
Application number
CN200910188858A
Other languages
Chinese (zh)
Inventor
张勇
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Huawei Technologies Co Ltd
Original Assignee
Huawei Technologies Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Huawei Technologies Co Ltd filed Critical Huawei Technologies Co Ltd
Priority to CN201310079937.8A priority Critical patent/CN103152348B/en
Priority to CN200910188858A priority patent/CN101741833A/en
Publication of CN101741833A publication Critical patent/CN101741833A/en
Priority to PCT/CN2010/079292 priority patent/WO2011069423A1/en
Pending legal-status Critical Current

Links

Images

Landscapes

  • Mobile Radio Communication Systems (AREA)
  • Storage Device Security (AREA)

Abstract

The invention relates to the technical field of communication, in particular to method, equipment and system for realizing license control, wherein the method for license control comprises the following steps of: uploading and analyzing a license file by using a license control center (LCC) to obtain a license item acquired by the LCC; determining license contents implemented by license implementing equipment by using the LCC; and carrying the license contents in the license control center and then sending to the license implementing equipment by using the LCC. Through adopting the technical scheme of the invention, the efficiency of the license control can be enhanced.

Description

The method, apparatus and system of permission control
Technical field
The present invention relates to communication technical field, relate in particular to a kind of method, apparatus and system that realize permitting control.
Background technology
Permission (License) a kind of contract form that to be supplier and operator authorize/be authorized to the product scope of application of selling/buying, by License, operator can obtain the respective service that supplier promises to undertake.Authorize and be called by License to operator and sell according to the method that contract is sold; Guarantee that the technology that license Agreement is effectively implemented is called the License technology.The network function and the capacity of moment can be selected to be suitable for flexibly by buying specific License by operator, with at utmost protection investment.
Generally meeting is with the form appearance of the License file of an encryption for License, and the License file generally can comprise the facility information of implementing the License file, so that the binding of realization equipment and License file.Like this, guarantee that the License of operator can not be usurped by other people on the one hand, the protection benefits of operators; Guarantee that on the other hand the License file can not be abused by operator, the interests of protection equipment vendor.
At present the License control mode be by will and corresponding License file distributing in each equipment, with function control or the resource control that realizes equipment.But, adopt this License control mode efficient lower.
Summary of the invention
The technical problem that the embodiment of the invention will solve provides a kind of method, apparatus and system of permitting control, to improve the efficient of permission control.
For solving the problems of the technologies described above, the objective of the invention is to be achieved through the following technical solutions:
The embodiment of the invention provides a kind of permission control method on the one hand, comprising: the permission LCC of control centre loads license file; LCC resolves the license file that loads, and determines to permit the licensed content that facilities and equipments are implemented; Licensed content is carried in the permission control messages to the transmission of permission facilities and equipments.
The embodiment of the invention provides another permission control method on the other hand, comprising: the permission facilities and equipments receive the permission control messages that the permission LCC of control centre sends; The permission facilities and equipments are obtained the licensed content that needs enforcement from the permission control messages; The licensed content that the permission facilities and equipments are implemented is as required implemented permission control.
The embodiment of the invention on the one hand, provides a kind of permission control appliance again, and comprising: load-on module is used to load license file; Parsing module is used to resolve the license file of record, and need to determine the licensed content of permission facilities and equipments enforcement; Send processing module, be used for that licensed content is carried at the permission control messages and send to the permission facilities and equipments.
The another aspect of the embodiment of the invention provides a kind of permission facilities and equipments, comprising: receiver module is used to receive the permission control messages that the permission LCC of control centre sends; Acquisition module is used for obtaining the licensed content that needs are implemented from the permission control messages that receiver module receives; Implement module, the licensed content that the needs that are used for obtaining according to acquisition module are implemented is implemented permission control.
The embodiment of the invention on the one hand, provides a kind of permission control system again, comprising: aforesaid permission control appliance, and, aforesaid permission facilities and equipments.
As can be seen from the above technical solutions, owing to can from load document, obtain the licensed content that needs the permission facilities and equipments to implement, the form that re-uses message will need the licensed content of facilities and equipments enforcement to send to the permission facilities and equipments, the technical scheme of distributing license file compared to existing technology, do not need to send a large amount of redundant informations, therefore the effective information ratio is higher, has improved transmitting efficiency, has reduced taking transfer resource.
Description of drawings
In order to be illustrated more clearly in the embodiment of the invention or technical scheme of the prior art, to do to introduce simply to the accompanying drawing of required use in embodiment or the description of the Prior Art below, apparently, accompanying drawing in describing below only is some embodiments of the present invention, for those of ordinary skills, under the prerequisite of not paying creative work, can also obtain other accompanying drawing according to these accompanying drawings.
Fig. 1 is a kind of permission control method flow chart of the embodiment of the invention;
Fig. 2 is a kind of permission control method flow chart of the embodiment of the invention;
Fig. 3 is the Signalling exchange flow chart of a kind of permission control method of the embodiment of the invention;
Fig. 4 is the Signalling exchange flow chart of a kind of permission control method of the embodiment of the invention;
Fig. 5 is the annexation schematic diagram of AP and AHR in the embodiment of the invention;
Fig. 6 is the annexation schematic diagram of AP and HMS in the embodiment of the invention;
Fig. 7 is the annexation schematic diagram of AP and AG in the embodiment of the invention;
Fig. 8 is a kind of structural representation of permitting control appliance of the embodiment of the invention;
Fig. 9 is a kind of structural representation of permitting facilities and equipments of the embodiment of the invention;
Figure 10 is a kind of structural representation of permitting facilities and equipments of the embodiment of the invention.
Embodiment
Below in conjunction with the accompanying drawing in the embodiment of the invention, the technical scheme in the embodiment of the invention is clearly and completely described, obviously, described embodiment only is the present invention's part embodiment, rather than whole embodiment.Based on the embodiment among the present invention, those of ordinary skills belong to the scope of protection of the invention not making the every other embodiment that is obtained under the creative work prerequisite.
The embodiment of the invention provides a kind of method, apparatus and system that realize permitting control, can improve the efficient that realizes permission control, reduce the taking of transfer resource, especially in the License facilities and equipments more for a long time.To describe a plurality of embodiment below, describe with technical scheme to the embodiment of the invention.What deserves to be explained is that the numbering of embodiment is just used for the convenience of describing, and not as the right foundation of odds between the embodiment.
Embodiment one
Fig. 1 is the schematic flow sheet of a kind of permission control method of providing of the embodiment of the invention, and referring to Fig. 1, this method comprises the steps:
101: the permission LCC of control centre loads and resolves license file, obtains the permission item that LCC obtains;
In the present embodiment, can handle license file by a permission control centre (License Control Center is called for short LCC).If license file is encrypted, then can be decrypted processing to it earlier by LCC, load the license file after deciphering then.If do not encrypt before the license file, then can directly load.Resolve afterwards, obtain the permission item that LCC obtains.
102:LCC need to determine the licensed content of permission facilities and equipments enforcement;
In this step, LCC can determine which licensed content is to send to the permission facilities and equipments by different implementations.
Concrete, this step can have different implementations, such as:
Mode one:
If the permission item information (can adopt and report the mode of permission control request message to realize) that has reported these permission facilities and equipments to be supported before the permission facilities and equipments, then can permit the permission item information that facilities and equipments are supported, with the licensed content of determining to need these permission facilities and equipments to implement in conjunction with this.
Concrete process can be: the permission item that LCC obtains according to this LCC, in conjunction with the permission item information that the permission facilities and equipments are supported, determine to permit the licensed content that facilities and equipments are implemented, such as, get both common factors, perhaps, the part of getting in occuring simultaneously is permitted item.
Mode two:
If LCC does not know the permission item information of permitting that facilities and equipments are supported, then LCC can independently select the permission item that this LCC obtains, and then sends to the permission facilities and equipments.
Concrete process can be for after: LCC obtains permission item that LCC obtains, can select permission item that LCC obtains partly or entirely, the licensed content of implementing as needs permission facilities and equipments.In such cases, with licensed content send to the permission facilities and equipments after, can by the permission facilities and equipments again according to tenability of self or the needs of self, select once more.
103: the licensed content of determining is carried in the permission control messages to the transmission of permission facilities and equipments.
In this step, licensed content directly can be carried in the permission control messages to the transmission of permission facilities and equipments.
Optionally,, can also before sending the permission control messages, carry out encryption earlier, then the licensed content after the encryption is carried in the permission control messages and send the licensed content of determining based on the consideration of fail safe.
And the cryptographic algorithm that encryption is adopted can have multiple definite mode.Such as: 1) LCC receives the permission control request message that the permission facilities and equipments send, and comprises in this permission control request message: the algorithm set information that the permission facilities and equipments are supported.After receiving this permission control request message, LCC just can be from this algorithm set information, and the cryptographic algorithm of selecting this LCC also to support is as the cryptographic algorithm that will adopt.In addition, LCC can also be by the form of permission control response message, and the sign of the cryptographic algorithm selected is sent to the permission facilities and equipments, and like this, the permission facilities and equipments just can be decrypted processing to the licensed content after the encryption that receives in view of the above.This kind mode can be understood as LCC and consults to determine the common cryptographic algorithm of supporting with the permission facilities and equipments in the permission control procedure.Again such as: 2) can specify the cryptographic algorithm of LCC and the common support of permission facilities and equipments institute, i.e. default encryption algorithm by static mode.Mode 2) can directly adopt, also can fail to consultations merit or do not have to adopt under the situation of negotiation result.
In the prior art, because the distribution of file all is in dedicated network, do not consider safety issue still along with the development of technology, License control beginning is used in public network, it is very dangerous that License file distributing process just becomes, and is blocked decoding easily.And in the technical scheme of the embodiment of the invention; on the basis of adopting message format carrying licensed content; further licensed content is carried out encryption; can guarantee that licensed content is a secret at transmittance process; the further fail safe of protection licensed content; especially be controlled at situation about using in the public network at present License, avoid licensed content to be decoded by interception easily.
On the other hand, optionally, based on the consideration of data integrity, can also the licensed content of determining be carried out integrality earlier handle before send the permission control messages, the licensed content after then integrality being handled is carried in the permission control messages and sends.
And integrality is handled the integral algorithm that is adopted, and multiple definite mode can be arranged.Such as: 1) LCC receives the permission control request message that the permission facilities and equipments send, and comprises in this permission control request message: the integral algorithm aggregate information that the permission facilities and equipments are supported.After receiving this permission control request message, LCC just can be from this integral algorithm aggregate information, and the integral algorithm of selecting this LCC also to support is as the integral algorithm that will adopt.In addition, LCC can also be by the form of permission control response message, and the sign of the integral algorithm selected is sent to the permission facilities and equipments, and like this, the permission facilities and equipments just can be decrypted processing to the licensed content after the integrality that receives in view of the above.This kind mode can be understood as LCC and consults to determine the common integral algorithm of supporting with the permission facilities and equipments in the permission control procedure.Again such as: 2) can specify the integral algorithm of LCC and the common support of permission facilities and equipments institute, promptly give tacit consent to integral algorithm by static mode.Mode 2) can directly adopt, also can fail to consultations merit or do not have to adopt under the situation of negotiation result.
Be understandable that integrality is the characteristic that data can not change without permission, i.e. the information characteristic that maintenance is not modified, is not destroyed and loses in storage or transmission course.Handle by integrality, can reduce error appears in licensed content in data transmission procedure probability, improved the accuracy of licensed content transmission licensed content.
Above-mentioned cryptographic algorithm and integral algorithm can independently be carried out, and also can carry out together.Carrying the permission control request message of algorithm set information and integral algorithm aggregate information, can be that same message is carried two kinds of algorithm set information, also can be to send two message respectively to carry respectively.
From the technical description of the embodiment of the invention as can be seen: because the permission control method that the embodiment of the invention provides, from load document, determine the licensed content that needs the permission facilities and equipments to implement, and then use the form of message that the licensed content of determining is sent to the permission facilities and equipments, the technical scheme of distributing license file compared to existing technology, do not need to send bulk redundancy information, therefore the effective information ratio is higher, transmitting efficiency is improved, and has reduced taking transfer resource.And encrypt and the integrality processing, can further protect the fail safe and the integrality of licensed content.
Embodiment two
Fig. 2 is the schematic flow sheet of a kind of permission control method of providing of the embodiment of the invention, and referring to Fig. 2, this method comprises the steps:
201: the permission facilities and equipments receive the permission control messages that the permission LCC of control centre sends;
In the present embodiment, because LCC permits that with the form transmission licensed content of permission control messages facilities and equipments can receive this permission control messages;
202: the permission facilities and equipments are obtained the licensed content that needs enforcement from the permission control messages;
In this step, the permission facilities and equipments can be resolved this permission control messages, obtain the licensed content of carrying in this message;
If desired the licensed content of Shi Shiing be that LCC adopts LCC and the common cryptographic algorithm of supporting of permission facilities and equipments institute and/or integral algorithm is encrypted and/or the integrality processing after licensed content, so, in this step, the permission facilities and equipments can be according to the cryptographic algorithm and/or the integral algorithm of the common support of LCC and permission facilities and equipments institute, to encrypting and/or the licensed content of integrality after handling deciphered accordingly and/or integrity verification is handled, need to obtain the licensed content of implementing.
And how to determine cryptographic algorithm, integral algorithm, and corresponding decipherment algorithm and integrity verification algorithm, can repeat no more referring to the description among the embodiment one herein.
On the other hand, if the permission item information of self supporting is sent to LCC by permission control request message before the permission facilities and equipments, so, LCC has combined the tenability of permission facilities and equipments in the process that licensed content is selected, accordingly, the licensed content of carrying in the permission control messages in the step 201, can be understood as is the permission item that these permission facilities and equipments are supported all.In such cases, the permission facilities and equipments can will be permitted the licensed content of implementing as needs all of the licensed content of carrying in the control messages.Certainly, also can therefrom select a part, as the licensed content of needs enforcement.Otherwise, if before LCC sends the permission control messages and do not know the permission item of permitting that facilities and equipments are supported, then in the licensed content in the permission control messages that sends of LCC, have a part and be these permission facilities and equipments unsupported.In such cases, the permission facilities and equipments can obtain the permission item that LCC obtains from the permission control messages, the permission item information of being supported in conjunction with this permission facilities and equipments body is selected both common factors (can be occur simultaneously all or part of) again, thereby need to determine the licensed content of enforcement.
203: the licensed content that the permission facilities and equipments are implemented according to the needs that obtain is implemented permission control.
In this step, the permission facilities and equipments can be permitted control according to the licensed content that the needs that obtain are implemented, such as, carry out the function control or the resource control of this equipment.
Optionally, after the licensed content of implementing is as required implemented permission control, can return the permission result of implementation to LCC.
Be understandable that, because in the permission control method that the embodiment of the invention provides, use the form of message to carry out the transmission and the reception of licensed content, the technical scheme of distributing license file compared to existing technology, transmission and reception have been avoided to bulk redundancy information, therefore the effective information ratio is higher, and transmitting efficiency is improved, and has reduced taking transfer resource.If licensed content has been carried out encryption and integrality processing in the LCC side, then can be decrypted and the integrity verification processing licensed content in permission facilities and equipments side, like this, can further protect the fail safe and the integrality of licensed content.
In addition, the scheme of the foregoing description one and embodiment two can periodically be carried out, and with the License content that upgrades in time, satisfies the requirement of system real time.
Moreover the scheme of the foregoing description one and embodiment two only is illustrated with permission facilities and equipments.What deserves to be explained is that under the actual scene, the permission facilities and equipments may be magnanimity, and the relatively dispersion that distributes.
Embodiment three
In real network, the permission facilities and equipments have a variety of, such as base station equipment.Concrete, under indoor covering scene, the miniaturization access device of various standards can be as the License facilities and equipments, for example: Universal Mobile Telecommunications System (UMTS, Universal Mobile Telecommunications System) access point (AP, Access Point), global system for mobile communications (GSM, Global System for Mobilecommunication) AP, GSM miniature (Pico) equipment, Long Term Evolution (LTE, Long TermEvolution) AP, LTE Pico, code division multiple access (CDMA, Code Division Multiple Access) AP, CDMA pico, micro-wave access global inter communication (wimax, Worldwide Interoperability forMicrowave Access) AP, wimax pico or the like.
The embodiment of the invention provides a kind of method of permitting control, and among this embodiment, the License facilities and equipments are UMTS AP, and the LCC module is deployed in the AP home location register (AHR, AP Home Register), promptly by AHR as LCC.In addition, among this embodiment, control by UMTS AP active request License.
The Signalling exchange flow chart of the permission control method that Fig. 3 provides for the embodiment of the invention, as shown in Figure 3, this method comprises:
301, the License file that LCC deciphering, loading and parsing are obtained;
In this step, LCC at first obtains the License file, the method for obtaining can for: obtain from License making center, concrete, License making center is after LCC makes the License file, to send to LCC.Obtain the step of License file and not necessarily all will carry out at every turn, such as, preserved after can obtaining once, for follow-up use.Certainly, also can carry out License control all carries out once at every turn.
In addition, hypothesis License file is encrypted in the present embodiment, and then LCC needs earlier this License file to be decrypted, and the License file load after will deciphering afterwards is to LCC equipment.Wherein, this License file can have a lot of information, and such as file format information, control information etc., wherein, the permission item has been represented in control information.The license file that LCC resolve to load just can obtain the permission item that License making center sends to LCC, i.e. the permission item that obtains of LCC, such as; The permission item that LCC obtains is: A: up IP cladding usefulness, B: descending receiving function, C:PS downstream rate maximum, D:PS upstream rate maximum.Wherein, A and B can be understood as the function permission, and C and D can be understood as resource grant.
302, AP sends License control request message to LCC.
In the present embodiment, AP is initiatively to LCC request License control.
Specific in this step, AP can send License control request message to LCC, can carry the permission item information (promptly supporting the ability of License) that one of following information or its combination: AP self supports in the License control request message, the algorithm set information that AP supports, the integral algorithm aggregate information of supporting among the AP.
Wherein, the permission item information that AP self supports can embody with the form of feature list, the permission control ability that this permission item information can indicate this AP of LCC to realize, and the licensed content in this tabulation scope not, even send to AP, AP can not realize.In the present embodiment, suppose to issue License item information that the AP of LCC supports for (E F), is respectively for C, D: C:PS downstream rate maximum, D:PS upstream rate maximum, E: access number of users maximum and F: local Iur function.
In addition, the algorithm set information that AP supports has embodied the cryptographic algorithm that AP can support, can be used as the foundation that LCC selects cryptographic algorithm.The integral algorithm aggregate information that AP supports has embodied the integral algorithm that AP can support, can be used as the foundation that LCC selects integral algorithm.In the embodiment of the invention, be that example describes to carry above-mentioned three kinds of information in this License control request message simultaneously.
303, LCC determines licensed content according to License control request message, and encrypts with integrality and handle;
In this step, and the permission item information that the AP self that LCC can carry according to License control request message supports (C, D, E, F), and the permission item information obtained of LCC (A, B, C, D), (C is D) as the licensed content that needs AP to implement to get that both occur simultaneously.
Before this licensed content is sent to AP, can encrypt with integrality this licensed content earlier and handle.
And encryption and integrality are handled the algorithm that is adopted, can adopt the mode of dynamic negotiation, concrete: because LCC has been known cryptographic algorithm and the integral algorithm that AP supports according to License control request message, so, LCC can be again according to cryptographic algorithm and the integral algorithm self supported, select both common cryptographic algorithm and integral algorithms of supporting, licensed content is encrypted with integrality handle.Perhaps, encryption of this step and integrality are handled, and also can use default encryption algorithm and integral algorithm.Adopt default algorithm, can under the situation of merit of consulting to come to nothing or fail to consultations, use, also can directly use.Certainly, if directly use default algorithm, then AP sends in the License control request message of LCC and just can not carry algorithm set information.
304, LCC returns License control response message to AP;
Among this embodiment, License control response message is the permission control messages of carrying the licensed content that needs AP enforcement.
Comprise in the License control response message: cryptographic algorithm sign that LCC selects and integral algorithm sign; The licensed content that needs AP to implement, these licensed content have been passed through cryptographic algorithm selection or that give tacit consent to and the processing of integral algorithm.
305, AP implements License control according to the information in the License control response message;
In this step, AP selects corresponding decipherment algorithm that the licensed content of encrypting is decrypted according to the sign of the cryptographic algorithm in the License control response message; AP selects corresponding integrity verification algorithm according to the sign of the integral algorithm in the License control response message, and the licensed content that integrality is handled is carried out integrity verification, if data can be passed through integrity verification, then can be used as the content that AP implements permission.
Suppose in this step to be through the licensed content that obtains behind deciphering and the integrity verification: (C, D), wherein, C is a PS downstream rate maximum, and D is a PS upstream rate maximum, and then AP can permit control to the respective resources of this AP equipment according to licensed content.
306, AP feeds back to LCC with the License result of implementation.
Optionally, after AP has implemented License control, can report LCC to the result that License implements.
Be understandable that,, promptly permit an information owing in the permission control method that the embodiment of the invention provides, use the form of message to carry out the transmission and the reception of licensed content, and licensed content is real useful control information in the license file.The technical scheme of distributing license file compared to existing technology, avoided transmission and reception, so the effective information ratio is higher to bulk redundancy information (such as file format information, and other irrelevant informations etc.), transmitting efficiency is improved, and has reduced taking transfer resource.Such as, in the prior art, more after a little while, file format information can not reduce yet in control information, and corresponding efficient is also just lower.And along with the development of technology, the License facilities and equipments that are in same system are also more and more, and the License facilities and equipments are many more, and transmitting efficiency can be low more.At the AP scene, because the quantity of AP is very many, and the relatively dispersion that distributes, the advantage of the scheme that the embodiment of the invention provides is just more obvious, can carry out the long-range License control of batch to the AP that is distributed in subscriber household in a large number, need not call and just can open or close some function, reduce maintenance cost.
And, adopt AP initiatively to send a request message to LCC, in request message, carry permission item information, cryptographic algorithm and integral algorithm information that AP supports, can finish the negotiation of licensing function in advance, can implement to guarantee the licensed content that sends to AP; And, can finish negotiating algorithm in advance, thereby the algorithm that adopts both sides all to support is handled.Generally, adopt AP initiatively to send the mode of license request, can realize carrying out respective handling according to the actual conditions of specific AP, the specific aim of permission control is stronger, has improved the efficient of permission control.
In addition, encryption and integrality that licensed content is carried out are handled, can be guaranteed privacy and the integrality of licensed content (promptly real useful control messages) in transmittance process.
Embodiment four
The embodiment of the invention provides a kind of method of permitting control, and among this embodiment, the License facilities and equipments are UMTS AP, and the LCC module is deployed among the AHR, promptly by AHR as LCC equipment.In addition, among this embodiment, initiatively issue the permission item,, control to realize License by the permission item that AP self supports according to the tenability selection of oneself by LCC.
The Signalling exchange flow chart of the permission control method that Fig. 4 provides for the embodiment of the invention, as shown in Figure 4, this method comprises:
401, the License file that LCC deciphering, loading and parsing are obtained;
This step is similar with step 301, is not described in detail.In addition, suppose equally permission item that LCC obtains for (A, B, C, D) concrete, A: up IP cladding usefulness, B: descending receiving function, C:PS downstream rate maximum, D:PS upstream rate maximum.
402, LCC determines licensed content, and encrypts with integrality and handle;
In the present embodiment, because LCC does not know the permission item information that AP supports, then LCC can independently select the permission item that this LCC obtains.Concrete process can for: LCC obtain the permission item that LCC obtains (A, B, C, D) after, can select permission item that LCC obtains partly or entirely, as the licensed content that needs AP to implement.LCC will (C be D) as licensed content for A, B for the present embodiment hypothesis.
In addition, before this licensed content is sent to AP, can encrypt with integrality this licensed content earlier and handle.
And encrypt and integrality is handled the algorithm that is adopted, can before sending licensed content, adopt the mode of dynamic negotiation to determine, perhaps, by static mode specify LCC and AP the integral algorithm of support jointly, promptly give tacit consent to integral algorithm.Be understandable that, determine that the step of algorithm is not necessarily all carried out at every turn, and do not have inevitable context, need only definite good algorithm before encryption and integrality processing with step 401.
403, LCC sends License control Indication message to AP;
Among this embodiment, License control Indication message is the permission control messages of carrying the licensed content that needs AP enforcement.
Comprise in the License control Indication message: the licensed content that needs AP to implement.
If adopt the mode of dynamic negotiation cryptographic algorithm and integral algorithm, then can also comprise cryptographic algorithm sign and integral algorithm sign that LCC selects in this message.Certainly, if just passed through Signalling exchange before sending, AP has known the algorithm that needs employing, and the cryptographic algorithm that then need not carry the LCC selection in this License control Indication message identifies and the integral algorithm sign.
404, AP selects the permission item, and implements License control;
In this step, AP can be decrypted with integrity verification licensed content earlier and handle, and detailed process can be referring to previous embodiment.What deserves to be explained is since the permission item that sends over of LCC not necessarily AP supported, so in this step, AP need be according to the ability of self supporting, therefrom select permission.Concrete, suppose that AP supports C and D, but do not support A and B that the permission item after then selecting can be C and D.
AP selects after the permission item, can carry out resource control or function control in view of the above.
405, AP feeds back to LCC with the License result of implementation.
Optionally, after AP has implemented License control, can report LCC to the result that License implements.
Be understandable that,, promptly permit an information owing in the permission control method that the embodiment of the invention provides, use the form of message to carry out the transmission and the reception of licensed content, and licensed content is real useful control information in the license file.The technical scheme of distributing license file compared to existing technology, avoided transmission and reception, so the effective information ratio is higher to bulk redundancy information (such as file format information, and other irrelevant informations etc.), transmitting efficiency is improved, and has reduced taking transfer resource.
And, adopt LCC initiatively to issue the scheme of permitting item with message format, can reduce the information interaction of AP and LCC, save signaling consumption, simplify flow process, improve treatment effeciency.
In addition, encryption and integrality that licensed content is carried out are handled, can be guaranteed privacy and the integrality of licensed content (promptly real useful control messages) in transmittance process.
What deserves to be explained is that the foregoing description three and embodiment four are deployed to the LCC module and are embodied as example among the AHR and are illustrated, the annexation schematic diagram of AP and AHR can be referring to Fig. 5.As shown in Figure 5, access point 504, access point 505, access point 506 are connected to access point home location register AHR501 by security gateway (SeGW, Security Gateway) 503, IAD (AG, Access Gateway) 502.
In addition, the LCC module also can be deployed in little base station management system (HMS, Home NodeBManagement System) on the equipment, Fig. 6 is the annexation schematic diagram between HMS and the AP, as shown in Figure 6, access point 603, access point 604, access point 605 are connected to little base station management system 601 by security gateway 602.
Perhaps, the LCC module also can be deployed among the AG, and Fig. 7 is the annexation example between AG and the AP.As shown in Figure 7, access point 703, access point 704, access point 705 are connected to IAD 701 by security gateway 702.
Embodiment five
The embodiment of the invention also provides a kind of permission control appliance, and Fig. 8 is the structural representation of this permission control appliance.As shown in Figure 8, this equipment comprises: parsing module 801, be used for loading and resolving license file, and obtain the permission item of permitting that control appliance obtains; Determination module 802 is used for the licensed content of determining that needs permission facilities and equipments are implemented; And, send processing module 803, be used for that licensed content is carried at the permission control messages and send to the permission facilities and equipments.
Optionally, if the permission facilities and equipments initiatively send the permission control request to the permission control appliance, so, this permission control appliance can also comprise: receiver module 804, be used to receive the permission control request message that the permission facilities and equipments send, comprise in this permission control request message: the permission item information that the permission facilities and equipments are supported.Accordingly, above-mentioned determination module 802 can be used for: the permission item that the permission control appliance that obtains according to parsing module 801 obtains, in conjunction with the permission item information that the permission facilities and equipments of receiver module 804 receptions are supported, need to select the licensed content of permission facilities and equipments enforcement.
With the permission facilities and equipments is that AP, permission control appliance are that LCC is an example, such as, AP issues LCC to the License item information of oneself supporting by permission control request message, the License item that AP supports is (C, D, E, F), and the permission item that LCC obtains is (A, B, C, D), then determination module 802 can choose both common factor (C, D), as the licensed content that needs AP to implement.Concrete some realize that details can be referring to the description of method embodiment.
Optionally, if adopt the permission control appliance initiatively to issue the mode of control, then determination module 802 is used for: the permission item that the permission control appliance that obtains from parsing module 801 obtains is selected partly or entirely, as the licensed content of needs permission facilities and equipments enforcement.Be that AP, permission control appliance are that LCC is an example still with the permission facilities and equipments, LCC can select (A, B, C, D) partly or entirely, send to AP.Concrete some realize that details can be referring to the description of method embodiment.
Further, sending processing module 803 can be specifically by realizing with lower unit, such as algorithm process unit 8031, be used to adopt common cryptographic algorithm and/or the integral algorithm of supporting of LCC and permission facilities and equipments institute, licensed content is encrypted and/or the integrality processing; Transmitting element 8032 is used for that the licensed content that the algorithm process cell processing is crossed is carried at the permission control messages and sends to the permission facilities and equipments.
In addition, this permission control appliance is deployed in the access point home location register, or is deployed in the little base station management system equipment, or, be deployed in the IAD of access point system.
Embodiment six
The embodiment of the invention also provides a kind of permission facilities and equipments, and Fig. 9 is the structural representation of these permission facilities and equipments.As shown in Figure 9, this equipment comprises: receiver module 901 is used to receive the permission control messages that the permission LCC of control centre sends; Acquisition module 902 is used for obtaining the licensed content that needs are implemented from the permission control messages that receiver module receives; Implement module 903, the licensed content that the needs that are used for obtaining according to acquisition module are implemented is implemented permission control.
Optionally, if the permission facilities and equipments adopt and initiatively send the mode of permission control request message to LCC, then these permission facilities and equipments can also comprise: request module 904, be used for sending permission control request message to LCC, comprise one of following information or its combination in this permission control request message: the permission item information that the permission facilities and equipments are supported, the algorithm set information that the permission facilities and equipments are supported, the integral algorithm aggregate information that the permission facilities and equipments are supported.
In addition, the licensed content of Shi Shiing is that LCC adopts LCC and the common cryptographic algorithm of supporting of permission facilities and equipments institute and/or integral algorithm is encrypted and/or the licensed content of the needs enforcement of integrality after handling if desired, then corresponding, acquisition module 902 specifically can be by realizing as lower unit, comprise: decrypting device 9021, be used for the common cryptographic algorithm of supporting, the content of carrying out the needs enforcement after the encryption is carried out corresponding decryption processing according to LCC and permission facilities and equipments institute; And/or integrity verification unit 9022 is used for the common integral algorithm of supporting according to LCC and permission facilities and equipments institute, and the content that the needs that carry out after integrality is handled are implemented is carried out corresponding integrity verification processing.
On the other hand, if LCC sends the permission tenability of permitting before the control messages and not knowing to permit facilities and equipments, permit that then the permission item in the control messages may be that this permission facilities and equipments institute is unsupported.Figure 10 is the structural representation of these permission facilities and equipments, and referring to Figure 10, this equipment comprises: receiver module 1001 is used to receive the permission control messages that the permission LCC of control centre sends; Acquisition module 1002 is used for obtaining the licensed content that needs are implemented from the permission control messages that receiver module receives; Implement module 1003, the licensed content that the needs that are used for obtaining according to acquisition module are implemented is implemented permission control.Wherein, acquisition module 1002 can be specifically by realizing as lower unit: acquiring unit 10021 is used for obtaining the permission item that LCC obtains from the permission control messages; Determining unit 10022 is used for the permission item that obtains according to the LCC that acquiring unit 10021 obtains, and in conjunction with the permission item information that the permission facilities and equipments are supported self, need to determine the licensed content of implementing.In fact, this acquiring unit 10021 can be realized by above-mentioned decrypting device and integrity verification unit, that is, be decrypted after the processing of processing and integrity verification, just can obtain the permission item that LCC obtains.
Optionally, these permission facilities and equipments can also comprise and report the unit, and the result who is used for will permission implementing reports the permission control appliance.
Embodiment seven
The embodiment of the invention also provides a kind of permission implementation system, has comprised permission control appliance in the previous embodiment and permission facilities and equipments.
These permission facilities and equipments can be: base station or other equipment that can implement to permit under indoor covering scene, can be the miniaturization access devices of various standards, such as AP.Equipment such as AHR, the HMS of LCC module that this permission control appliance can be integrated or AG.
Be understandable that, because in the technical scheme of the permission control appliance that the embodiment of the invention provides, permission facilities and equipments and permission control system, use the form of message to carry out the transmission and the reception of licensed content, and licensed content is real useful control information in the license file, i.e. a permission information.The technical scheme of distributing license file compared to existing technology, avoided transmission and reception, so the effective information ratio is higher to bulk redundancy information (such as file format information, and other irrelevant informations etc.), transmitting efficiency is improved, and has reduced taking transfer resource.
If adopt permission facilities and equipments (such as AP) initiatively to send a request message to LCC, in request message, carry permission item information, cryptographic algorithm and integral algorithm information that AP supports, can finish the negotiation of licensing function in advance, can implement to guarantee the licensed content that sends to AP; And, can finish negotiating algorithm in advance, thereby the algorithm that adopts both sides all to support is handled.Generally, adopt the permission facilities and equipments initiatively to send the mode of license request, can realize carrying out respective handling according to the actual conditions of specific permission facilities and equipments, the specific aim of permission control is stronger, has improved the efficient of permission control.
If adopt LCC initiatively to issue the scheme of permission item with message format, can reduce the information interaction of permitting facilities and equipments (such as AP) and LCC, save signaling consumption, simplify flow process, improve treatment effeciency.
In addition, encryption and integrality that licensed content is carried out are handled, can be guaranteed privacy and the integrality of licensed content (promptly real useful control messages) in transmittance process.
Moreover the LCC module can be arranged in the multiple network equipment, thereby makes the permission control appliance to realize in multiple network equipment, can provide multiple implementation to operator, to tackle concrete network scenarios and demand flexibly.
The those skilled in the art can be well understood to, and is the convenience described and succinct, and the concrete course of work of the system of foregoing description, equipment, module and unit can not repeat them here with reference to the corresponding process among the preceding method embodiment.
By the description of above embodiment, the those skilled in the art can be well understood to the present invention and can realize by the mode that software adds essential general hardware platform, can certainly pass through hardware, but the former is better execution mode under a lot of situation.Based on such understanding, the part that technical scheme of the present invention contributes to prior art in essence in other words can embody with the form of software product, this computer software product is stored in the storage medium, comprise that some instructions are with so that a computer equipment (can be a personal computer, server, the perhaps network equipment etc.) carry out all or part of step of the described method of each embodiment of the present invention.And aforesaid storage medium comprises: various media that can be program code stored such as USB flash disk, portable hard drive, read-only memory (ROM), random-access memory (ram), magnetic disc or CD.
In several embodiment that the application provided, should be understood that disclosed system, equipment and method not surpassing in the application's the scope, can realize in other way.For example, device embodiment described above only is schematic, for example, the division of described module or unit, only be that a kind of logic function is divided, during actual the realization other dividing mode can be arranged, for example a plurality of unit or assembly can in conjunction with or can be integrated into another system, or some features can ignore, or do not carry out.Wherein said unit as the separating component explanation can or can not be physically to separate also, the parts that show as the unit can be or can not be physical locations also, promptly can be positioned at a place, perhaps also can be distributed on a plurality of network element.Can select wherein some or all of module to realize the purpose of present embodiment scheme according to the actual needs.Those of ordinary skills promptly can understand and implement under the situation of not paying creative work.
In addition, the schematic diagram of institute's descriptive system, equipment and method and different embodiment, in the scope that does not exceed the application, can with other system, module, technology or method in conjunction with or integrated.Another point, the shown or coupling each other discussed or directly to be coupled or to communicate to connect can be by some interfaces, the indirect coupling of device or unit or communicate to connect can be electronics, machinery or other form.
The above; only be the specific embodiment of the present invention, but protection scope of the present invention is not limited thereto, anyly is familiar with those skilled in the art in the technical scope that the present invention discloses; can expect easily changing or replacing, all should be encompassed within protection scope of the present invention.Therefore, protection scope of the present invention should be as the criterion by described protection range with claim.

Claims (20)

1. a permission control method is characterized in that, comprising:
The permission LCC of control centre loads and resolves license file, obtains the permission item that described LCC obtains;
Described LCC need to determine the licensed content of permission facilities and equipments enforcement;
Described LCC is carried at described licensed content in the permission control messages and sends to described permission facilities and equipments.
2. the method for claim 1 is characterized in that, described LCC determines that the licensed content that needs the permission facilities and equipments to implement comprises:
The permission item that described LCC obtains according to described LCC in conjunction with the permission item information that described permission facilities and equipments are supported, is determined the licensed content that needs described permission facilities and equipments to implement;
Described method also comprises:
Described LCC receives the permission control request message that described permission facilities and equipments send, and comprises in the described permission control request message: the permission item information that the permission facilities and equipments are supported.
3. the method for claim 1 is characterized in that, described LCC determines that the licensed content that needs the permission facilities and equipments to implement comprises:
Described LCC select permission item that described LCC obtains partly or entirely, the licensed content of implementing as the described permission facilities and equipments of needs.
4. as each described method of claim 1 to 3, it is characterized in that described described licensed content is carried in the permission control messages sends to described permission facilities and equipments, comprising:
Described LCC adopt described LCC and described permission facilities and equipments common cryptographic algorithm and/or the integral algorithm of supporting, described licensed content is encrypted and/or the integrality processing, the licensed content after encryption and/or the integrality processing is carried in the permission control messages to described permission facilities and equipments transmission.
5. method as claimed in claim 4 is characterized in that, described cryptographic algorithm and/or integral algorithm adopt the cryptographic algorithm and/or the integral algorithm of acquiescence, perhaps, adopts the mode of dynamic negotiation to determine;
When the mode that adopts dynamic negotiation was certain, described method also comprised:
Described LCC receives the permission control request message that described permission facilities and equipments send, and comprises in the described permission control request message: algorithm set information and/or integral algorithm aggregate information that the permission facilities and equipments are supported;
Algorithm set information and/or integral algorithm aggregate information that described LCC supports according to described permission facilities and equipments are selected the cryptographic algorithm and the integral algorithm of the common support of described LCC and described permission facilities and equipments institute.
6. a permission control method is characterized in that, comprising:
The permission facilities and equipments receive the permission control messages that the permission LCC of control centre sends;
Described permission facilities and equipments are obtained the licensed content that needs enforcement from described permission control messages;
The licensed content that described permission facilities and equipments are implemented according to described needs is implemented permission control.
7. method as claimed in claim 6 is characterized in that, also comprises:
Described permission facilities and equipments send permission control request message to described LCC, comprise one of following information or its combination in the described permission control request message:
The permission item information that the permission facilities and equipments are supported, the algorithm set information that the permission facilities and equipments are supported, the integral algorithm aggregate information that the permission facilities and equipments are supported.
8. as claim 6 or 7 described methods, it is characterized in that, the described licensed content of need implementing be that described LCC adopts the common cryptographic algorithm of supporting of described LCC and described permission facilities and equipments institute and/or integral algorithm is encrypted and/or the integrality processing after licensed content;
Described permission facilities and equipments are obtained the licensed content that needs enforcement from described permission control messages, comprising:
Described permission facilities and equipments according to described LCC and described permission facilities and equipments common cryptographic algorithm and/or the integral algorithm of supporting, encrypt and/or content that the needs of integrality after handling are implemented is deciphered accordingly and/or integrity verification is handled described, need to obtain the licensed content of implementing.
9. method as claimed in claim 6 is characterized in that, described permission facilities and equipments are obtained the licensed content that needs enforcement from described permission control messages, comprising:
Described permission facilities and equipments obtain the permission item that described LCC obtains from described permission control messages, in conjunction with the permission item information that described permission facilities and equipments are supported self, obtain the licensed content that needs enforcement.
10. as claim 6,7 or 9 described methods, it is characterized in that, also comprise:
Described permission facilities and equipments are returned the permission result of implementation to described LCC after the licensed content of implementing according to described needs is implemented permission control.
11. a permission control appliance is characterized in that, comprising:
Parsing module is used for loading and resolving license file, obtains the permission item that described permission control appliance obtains;
Determination module is used for the licensed content of determining that needs permission facilities and equipments are implemented;
Send processing module, be used for that described licensed content is carried at the permission control messages and send to described permission facilities and equipments.
12. equipment as claimed in claim 11 is characterized in that, also comprises: receiver module, be used to receive the permission control request message that described permission facilities and equipments send, comprise in the described permission control request message: the permission item information that the permission facilities and equipments are supported;
Described determination module is used for: the permission item that the described permission control appliance that obtains according to described parsing module obtains, in conjunction with the permission item information that the permission facilities and equipments of described receiver module reception are supported, select the licensed content that needs described permission facilities and equipments to implement.
13. equipment as claimed in claim 11, it is characterized in that, described determination module is used for: the permission item that the described permission control appliance that obtains from described parsing module obtains is selected partly or entirely, as the licensed content of the described permission facilities and equipments enforcement of needs.
14. equipment as claimed in claim 11 is characterized in that, described transmission processing module comprises:
The algorithm process unit, be used to adopt described permission control appliance and described permission facilities and equipments common cryptographic algorithm and/or the integral algorithm of supporting, described licensed content is encrypted and/or integrality is handled;
Transmitting element is used for that the licensed content that described algorithm process cell processing is crossed is carried at the permission control messages and sends to described permission facilities and equipments.
15., it is characterized in that described deployed with devices or is deployed in the little base station management system equipment as each described equipment of claim 11 to 14 in the access point home location register, or, be deployed in the IAD of access point system.
16. permission facilities and equipments is characterized in that, comprising:
Receiver module is used to receive the permission control messages that the permission LCC of control centre sends;
Acquisition module is used for obtaining the licensed content that needs are implemented from the permission control messages that described receiver module receives;
Implement module, the licensed content that the needs that are used for obtaining according to described acquisition module are implemented is implemented permission control.
17. equipment as claimed in claim 16 is characterized in that, also comprises:
Request module is used for sending permission control request message to described LCC, comprises one of following information or its combination in the described permission control request message:
The permission item information that described permission facilities and equipments are supported, the algorithm set information that described permission facilities and equipments are supported, the integral algorithm aggregate information that described permission facilities and equipments are supported.
18. equipment as claimed in claim 16, it is characterized in that, the described licensed content of need implementing be that described LCC adopts the common cryptographic algorithm of supporting of described LCC and described permission facilities and equipments institute and/or integral algorithm is encrypted and/or the integrality processing after licensed content;
Described acquisition module comprises:
Decrypting device, be used for according to described LCC and described permission facilities and equipments the common cryptographic algorithm of supporting, the content that the described needs that carry out after the encryption are implemented is carried out corresponding decryption processing; And/or,
The integrity verification unit, be used for according to described LCC and described permission facilities and equipments the common integral algorithm of supporting, the content that the described needs that carry out after integrality is handled are implemented is carried out corresponding integrity verification and is handled.
19., it is characterized in that described acquisition module comprises as claim 16 or 18 described equipment:
Acquiring unit is used for obtaining the permission item that described LCC obtains from described permission control messages;
Determining unit is used for the permission item that obtains according to the described LCC that described acquiring unit obtains, and in conjunction with the permission item information that described permission facilities and equipments are supported self, need to determine the licensed content of implementing.
20. a permission control system is characterized in that, comprising:
As each described permission control appliance of claim 11 to 15, and,
As each described permission facilities and equipments of claim 16 to 19.
CN200910188858A 2009-12-10 2009-12-10 Method, equipment and system for license control Pending CN101741833A (en)

Priority Applications (3)

Application Number Priority Date Filing Date Title
CN201310079937.8A CN103152348B (en) 2009-12-10 2009-12-10 The method, apparatus and system of admissions control
CN200910188858A CN101741833A (en) 2009-12-10 2009-12-10 Method, equipment and system for license control
PCT/CN2010/079292 WO2011069423A1 (en) 2009-12-10 2010-11-30 Method, device and system for license control

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN200910188858A CN101741833A (en) 2009-12-10 2009-12-10 Method, equipment and system for license control

Related Child Applications (1)

Application Number Title Priority Date Filing Date
CN201310079937.8A Division CN103152348B (en) 2009-12-10 2009-12-10 The method, apparatus and system of admissions control

Publications (1)

Publication Number Publication Date
CN101741833A true CN101741833A (en) 2010-06-16

Family

ID=42464723

Family Applications (1)

Application Number Title Priority Date Filing Date
CN200910188858A Pending CN101741833A (en) 2009-12-10 2009-12-10 Method, equipment and system for license control

Country Status (2)

Country Link
CN (1) CN101741833A (en)
WO (1) WO2011069423A1 (en)

Cited By (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2011069423A1 (en) * 2009-12-10 2011-06-16 华为技术有限公司 Method, device and system for license control
CN104243420A (en) * 2013-06-18 2014-12-24 沈阳中科博微自动化技术有限公司 Data encryption method for communication between integrated circuit factory automation system and equipment
CN111970319A (en) * 2020-06-22 2020-11-20 联想(北京)有限公司 Distribution control method of software License and network equipment

Family Cites Families (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1874218A (en) * 2006-01-05 2006-12-06 华为技术有限公司 Method, system and equipment for license management
CN101163104B (en) * 2007-11-13 2010-10-27 华为技术有限公司 Permission implementing method, equipment and system of sharing switch node
CN101188522B (en) * 2007-12-06 2011-04-13 华为技术有限公司 License management method and system
CN101741833A (en) * 2009-12-10 2010-06-16 华为技术有限公司 Method, equipment and system for license control

Cited By (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2011069423A1 (en) * 2009-12-10 2011-06-16 华为技术有限公司 Method, device and system for license control
CN104243420A (en) * 2013-06-18 2014-12-24 沈阳中科博微自动化技术有限公司 Data encryption method for communication between integrated circuit factory automation system and equipment
CN111970319A (en) * 2020-06-22 2020-11-20 联想(北京)有限公司 Distribution control method of software License and network equipment

Also Published As

Publication number Publication date
WO2011069423A1 (en) 2011-06-16

Similar Documents

Publication Publication Date Title
US10237722B2 (en) System and method for multi-SIM profiles or embedded SIM
CN103441997A (en) Content sharing method, device and system
CN101854625B (en) Selective processing method and device of security algorithm, network entity and communication system
CN102036230B (en) Method for implementing local route service, base station and system
CN101990211B (en) Method for network access, device and system
US20120076300A1 (en) Key information management method, content transmission method, key information management apparatus, license management apparatus, content transmission system, and terminal apparatus
CN102695168A (en) Terminal equipment, encrypted gateway and method and system for wireless network safety communication
CN102202299A (en) Realization method of end-to-end voice encryption system based on 3G/B3G
CN101820629A (en) Identity authentication method, device and system in wireless local area network (WLAN)
CN104380773A (en) A virtual card download method, a terminal and intermediate equipment
US10172003B2 (en) Communication security processing method, and apparatus
CN102223631B (en) Data encryption transmission method, device and system in M2M (man to machine, machine to machine and machine to man)
CN103222290B (en) For the method and apparatus sending and receiving secure data and non-secure data
CN101711028B (en) Method for automatically protecting user data on mobile terminal
CN103139769A (en) Wireless communication method and network subsystem
CN102571328B (en) The service calling method of user terminal, system and user terminal
CN101741833A (en) Method, equipment and system for license control
CN101047945B (en) Mobile communication system and customer temporary identity distribution method
CN103152348A (en) Method, equipment and system for license control
CN105554711A (en) Short message protection method and apparatus, and terminal
CN101588237A (en) Method, device and system for encrypting terminal communication based on active network technology
CN105721144A (en) Password storage method of wireless network access point and terminal
CN101999240A (en) Communication method, device and communication system between base stations
EP3219066B1 (en) Radio device hardware security system for wireless spectrum usage
KR101836835B1 (en) Removable network security appratus and method for encrypting and decrypting network packet

Legal Events

Date Code Title Description
C06 Publication
PB01 Publication
C10 Entry into substantive examination
SE01 Entry into force of request for substantive examination
C12 Rejection of a patent application after its publication
RJ01 Rejection of invention patent application after publication

Application publication date: 20100616