It is the priority that 201110040450.X, denomination of invention are the Chinese patent application of " a kind of method of access control and device " that the application requires to submit Patent Office of the People's Republic of China, application number on February 18th, 2011, and its full content is by reference in conjunction with in this application.
Summary of the invention
The embodiment of the present invention provides a kind of method and device of access control, for realizing good access control.
A method for access control, is applied to network side, comprises the following steps:
The session management request Session Management Request message that core network control node receiving terminal sends;
Core network control node determines that this node is in the time of overload, sends session management back off time information Session Management back-off timer to terminal.
A message treatment method in access procedure, is applied to end side, comprises the following steps:
Terminal sends session management request Session Management Request message;
Terminal receives the session management back off time information Session Management back-off timer that core network control node sends;
Terminal no longer sends session management request message before timer expiry corresponding to session management back off time information.
A kind of core network control node equipment, comprising:
Interface module, the session management request Session Management Request message sending for receiving terminal;
Control module, for determining that this node is when the overload, indication interface module sends session management back off time information Session Management back-off timer to terminal.
A kind of terminal equipment, comprising:
Interface module, for sending session management request Session Management Request message, and receives the session management back off time information Session Management back-off timer that core network control node sends;
Control module, for no longer sending session management request message before timer expiry corresponding to session management back off time information.
In the embodiment of the present invention, core network control node is received after session management request (Session Management Request) message, determine that this node is in overload (overload) state, just can refuse the request of terminal, and send session management back off time information (Session Management back-off timer) to terminal, no longer need the APN whether congested (congestion) that judges that session management request message is corresponding.; in the embodiment of the present invention, core network control node, in the time of overload, is refused all NAS request messages, comprises MM request message and SM request message; effectively realize access control, perfect Session Management Congestion Control mechanism.
Embodiment
In the embodiment of the present invention, core network control node is received after session management request (Session Management Request) message, determine that this node is in overload (overload) state, just can refuse the request of terminal, and send session management back off time information (Session Management back-off timer) to terminal, no longer need the APN whether congested (congestion) that judges that session management request message is corresponding.; in the embodiment of the present invention, core network control node, in the time of overload, is refused all NAS request messages, comprises MM request message and SM request message; effectively realize access control, perfect Session Management Congestion Control mechanism.
In the present embodiment, the overload of core network control node is mainly the overload of establishing because of the traffic overload of core network control node, and the traffic overload of core network control node can be the various possible reason of over-loads such as CPU overload or message queue overload.
Referring to Fig. 1, in the present embodiment, in access control, the method flow of core network control node side is as follows:
Step 101: the session management request message that core network control node receiving terminal sends.Session management request message at least comprises one of following message: activate packet data protocol context request ACTIVATE PDP CONTEXT REQUEST message, activate secondary data packets data protocol contexts request ACTIVATE SECONDARY PDP CONTEXT REQUEST message, packet data network connection request PDN CONNECTIVITY REQUEST message, bearing resource configuring request BEARER RESOURCE ALLOCATION REQUEST message.
Step 102: core network control node determines that this node is in the time of overload, sends session management back off time information to terminal.Concrete, core network control node can carry session management back off time information by session management refuse information.In message, can also carry the indication information that represents core network control node overload.Preferably, can represent this indication information by Reason For Denial, a for example newly-increased cause value represents SGSN or MME overload.Represent the indication information of core network control node overload by the value of expansion Reason For Denial.
Relative with network side, shown in Figure 2, in the present embodiment, in access procedure, the method flow of end side is as follows:
Step 201: terminal sends session management request message.
Step 202: terminal receives the session management back off time information that core network control node sends.
Step 203: terminal no longer sends session management request message before timer expiry corresponding to session management back off time information.
In access procedure, core network control node side and end side all have multiple implementation, as mode one: core network control node before timer expiry corresponding to session management back off time information, must not send the session management request for any access point network APN by session management back off time information indicating terminal; Now terminal no longer sends session management request message to any APN.Or, as mode two: core network control node judges allly have the APN of annexation all congested with this node according to the overload of this node, and according to the request of the congestion state refusal terminal of APN; Now terminal can send request again for other APN, but core network control node is without judgement, directly refuses the request of terminal according to the congestion state of APN.Introduce in detail implementation procedure below by two embodiment.
Referring to Fig. 3, the method flow for the access control of mode one in the present embodiment is as follows:
Whether core network control node is prejudged this node and is transshipped, and if so, enters overload.
Step 301: terminal sends PDN Connectivity Request (packet data network connection request) message.Session management request message has multiple, and the present embodiment describes as an example of PDN Connectivity Request message example.
Step 302: core network control node judges that whether this node is in overload, if so, continues step 303, otherwise process ends, the flow processing when not transshipping in prior art.
Step 303: core network control node arranges session management back off time information for the PDN Connectivity Request message of receiving.Core network control node can specifically arrange session management back off time information with reference to factors such as overload degree, reason for claim and access priorities.Especially, core network control node, according to the signaling load state of this node, is determined the value of session management back off time information, and preferably, core network control node further contemplates the randomization of value., core network control node, according to the signaling load state of this node, adopts random fashion to determine value, the especially core network control node random value in default feasible span of session management back off time information.For example, signaling load state is divided into underload, heavy duty and overload Three Estate, the corresponding span of each grade, and in corresponding span, random value is to determine session management back off time information.
Step 304: core network control node sends PDN Connectivity Reject (packet data network the connects refusal) message that carries session management back off time information to terminal.This message can also be carried the indication information that represents core network control node overload.Core network control node before timer expiry corresponding to session management back off time information, must not send the session management request for any access point network APN by session management back off time information indicating terminal.
Core network control node, sending after back off time, before timer expiry corresponding to this back off time, is refused the session management request message of receiving.
Step 305: terminal starts the timer corresponding with session management back off time information.Concrete, terminal is associated with timer corresponding to session management back off time information the wild cardAPN of wildcard, before timer expiry corresponding to session management back off time information, no longer sends session management request message to any APN.Or timer corresponding to session management back off time information is associated with all APN by terminal, before timer expiry corresponding to session management back off time information, no longer send session management request message to any APN.
In the time that terminal needs again initiation session management request, continue step below.
Step 306: terminal need send PDN Connectivity Request message again.
Step 307: whether terminal judges timer is overtime, if so, continues step 309, otherwise continues step 308.For example, whether the timer that terminal judges wild cardAPN is corresponding is overtime, or whether the corresponding timer of APN corresponding to this PDN Connectivity Request message of terminal judges be overtime.
Step 308: terminal ends to send PDN Connectivity Request message.In the present embodiment, terminal ends to send session management request message, and preferably, terminal ends to send the session management request message of non-Emergency/Priority Service (urgent or priority service).
Step 309: terminal sends PDN Connectivity Request message.
Referring to Fig. 4, the method flow for the access control of mode two in the present embodiment is as follows:
Whether core network control node is prejudged this node and is transshipped, and if so, enters overload, and judges that all APN are all in congestion state.
Step 401: terminal sends PDN Connectivity Request (packet data network connection request) message.Session management request message has multiple, and the present embodiment describes as an example of PDN Connectivity Request message example.
Step 402: core network control node judges that APN corresponding to PDN Connectivity Request message, whether in congestion state, if so, continues step 403, otherwise process ends, the flow processing when not transshipping in prior art.
Step 403: core network control node arranges session management back off time information for the PDN Connectivity Request message of receiving.Core network control node can specifically arrange session management back off time information with reference to factors such as overload degree, reason for claim and access priorities.
Step 404: core network control node sends PDN Connectivity Reject (packet data network the connects refusal) message that carries session management back off time information to terminal.This message can also be carried the indication information that represents core network control node overload.Core network control node before timer expiry corresponding to session management back off time information, must not send the session management request for any access point network APN by session management back off time information indicating terminal.
Step 405: terminal starts the timer corresponding with session management back off time information.Concrete, timer corresponding to session management back off time information is associated with the APN that session management request message is corresponding by terminal, before timer expiry corresponding to session management back off time information, no longer sends session management request message to this APN.
In the time that terminal needs again initiation session management request, continue step below.
Step 406: terminal need send PDN Connectivity Request message again.
Step 407: whether the corresponding timer of APN corresponding to terminal judges PDN Connectivity Request message be overtime, if so, continues step 409, otherwise continue step 408.For example, whether the timer that terminal judges wild cardAPN is corresponding is overtime, or whether the corresponding timer of APN corresponding to this PDN Connectivity Request message of terminal judges be overtime.
Step 408: terminal ends to send PDN Connectivity Request message.In the present embodiment, terminal ends to send session management request message, and preferably, terminal ends to send the session management request message of non-Emergency/Priority Service.
Step 409: terminal sends PDN Connectivity Request message.
Understood the implementation procedure of access control by above description, this process is mainly realized by core network control node and terminal, is introduced below for internal structure and the function of these two equipment.
Referring to Fig. 5, in the present embodiment, core network control node equipment comprises: interface module 501 and control module 502.Core network control node equipment can be specially SGSN or MME etc.
Interface module 501, is connected with external equipment, for receiving and send various message, as session management request (the Session Management Request) message of receiving terminal transmission.
Control module 502 is for determining that core network control node equipment is when the overload, and indication interface module sends session management back off time information (Session Management back-offtimer) to terminal.Control module 502 is also for according to session management request message being the session management back off time information that terminal arranges session management layer (SM layer).Control module 502 determines that core network control node equipment is in the time of overload, is also used to indicate interface module and sends the indication information that represents core network control node overload to terminal.Concrete, for mode one, control module 502 before timer expiry corresponding to session management back off time information, must not send the session management request for any access point network APN by session management back off time information indicating terminal.Control module 502, also for sending after back off time, before timer expiry corresponding to this back off time, is refused the session management request message of receiving.Or for mode two, control module 502 also, for judging whether core network control node equipment transships, if so, enters overload, and judges that all APN are all in congestion state; Control module 502 determines that core network control node equipment is in the time of overload, determines that the corresponding APN of session management request receiving is in congestion state, indicates interface module 501 to send session management back off time information to terminal.
Referring to Fig. 6, in the present embodiment, terminal equipment comprises: interface module 601 and control module 602.Terminal equipment can be specially subscriber equipment (UE) or MS (mobile terminal).
Interface module 601 is for sending session management request (Session Management Request) message, and the session management back off time information (Session Management back-off timer) of reception core network control node transmission.
Control module 602 for no longer sending session management request message before timer expiry corresponding to session management back off time information.Concrete, timer corresponding to session management back off time information is associated with the APN that session management request message is corresponding by control module 602, before timer expiry corresponding to session management back off time information, no longer sends session management request message to this APN; Or, timer corresponding to session management back off time information is associated with to the wild card APN of wildcard, before timer expiry corresponding to session management back off time information, no longer send session management request message to any APN; Or, timer corresponding to session management back off time information is associated with to all APN, before timer expiry corresponding to session management back off time information, no longer send session management request message to any APN.Preferably, control module 602 no longer sends the session management request message for non-Emergency/Priority Service before timer expiry corresponding to session management back off time information.
In the embodiment of the present invention, core network control node is received after session management request (Session Management Request) message, determine that this node is in overload (overload) state, just can refuse the request of terminal, and send session management back off time information (Session Management back-off timer) to terminal, no longer need the APN whether congested (congestion) that judges that session management request message is corresponding.; in the embodiment of the present invention, core network control node, in the time of overload, is refused all NAS request messages, comprises MM request message and SM request message; effectively realize access control, perfect Session Management Congestion Control mechanism.The embodiment of the present invention provides multiple embodiment, core network control node is in the time determining this node overload, directly judge that all APN are all congested, in the time of the request of receiving terminal, can directly refuse according to the congestion state of APN the request of terminal, no longer need to judge according to the judgment mechanism of APN.In addition, core network control node can no longer send the session management request for any APN by session management back off time information indicating terminal, has saved signaling process.
Those skilled in the art should understand, embodiments of the invention can be provided as method, system or computer program.Therefore, the present invention can adopt complete hardware implementation example, completely implement software example or the form in conjunction with the embodiment of software and hardware aspect.And the present invention can adopt the form at one or more upper computer programs of implementing of computer-usable storage medium (including but not limited to magnetic disc store and optical memory etc.) that wherein include computer usable program code.
The present invention is with reference to describing according to flow chart and/or the block diagram of the method for the embodiment of the present invention, equipment (system) and computer program.Should understand can be by the flow process in each flow process in computer program instructions realization flow figure and/or block diagram and/or square frame and flow chart and/or block diagram and/or the combination of square frame.Can provide these computer program instructions to the processor of all-purpose computer, special-purpose computer, Embedded Processor or other programmable data processing device to produce a machine, the instruction that makes to carry out by the processor of computer or other programmable data processing device produces the device for realizing the function of specifying at flow process of flow chart or multiple flow process and/or square frame of block diagram or multiple square frame.
These computer program instructions also can be stored in energy vectoring computer or the computer-readable memory of other programmable data processing device with ad hoc fashion work, the instruction that makes to be stored in this computer-readable memory produces the manufacture that comprises command device, and this command device is realized the function of specifying in flow process of flow chart or multiple flow process and/or square frame of block diagram or multiple square frame.
These computer program instructions also can be loaded in computer or other programmable data processing device, make to carry out sequence of operations step to produce computer implemented processing on computer or other programmable devices, thereby the instruction of carrying out is provided for realizing the step of the function of specifying in flow process of flow chart or multiple flow process and/or square frame of block diagram or multiple square frame on computer or other programmable devices.
Obviously, those skilled in the art can carry out various changes and modification and not depart from the spirit and scope of the present invention the present invention.Like this, if within of the present invention these are revised and modification belongs to the scope of the claims in the present invention and equivalent technologies thereof, the present invention is also intended to comprise these changes and modification interior.