CN102316494A

CN102316494A - Resource authorization method and system

Info

Publication number: CN102316494A
Application number: CN2010102238302A
Authority: CN
Inventors: 霍玉臻; 周晓云; 宗在峰; 毕以峰; 蒋陶
Original assignee: ZTE Corp
Current assignee: ZTE Corp
Priority date: 2010-07-07
Filing date: 2010-07-07
Publication date: 2012-01-11
Anticipated expiration: 2030-07-07
Also published as: CN102316494B

Abstract

The invention relates to a resource authorization method and system. The resource authorization method comprises the steps: an SeGW (Security Gateway) monitors a signaling on an interface S1 or Iuh, and sends a resource authorization, resource modification or resource release message to an H(e)NB PF (Home evolved Node B) through an interface T1 when monitoring the resource authorization, resource modification or resource release request message, and the H(e)NB PF forwards the resource authorization, resource modification or resource release message to a BPCF (Broadband Forum Policy Control Function), wherein the resource authorization, resource modification or resource release message carries request authorization, modification and release resource information and tunnel information; and the BPCF makes access control according to the tunnel information and the resource information and returns an access control result to the H(e)NB PF, the H(e)NB PF returns the access control result to the SeGW, and the SeGW carries out access processing according to the access control result. Through arranging the interface T1 between the SeGW and the H(e)NB PF, the invention realizes access management and resource management on users, and can be used for carrying out QoS control on all UE accessed through a home base station.

Description

The resource authorization method and system

Technical field

The present invention relates to the communications field, be specifically related to a kind of resource authorization method and system.

Background technology

Third generation partner program (3rd Generation Partnership Project; Abbreviate 3GPP as) grouping system (the Evolved Packet System of evolution; Abbreviate EPS as) by Universal Terrestrial Radio Access Network (the Evolved Universal Terrestrial Radio Access Network of evolution; Abbreviate E-UTRAN as), Mobility Management Entity (Mobility ManagementEntity; Abbreviate MME as), gateway (Serving Gateway; Abbreviate S-GW as), grouped data network gateway (Packet DataNetwork Gateway abbreviates P-GW as), home subscriber server (Home Subscriber Server abbreviates HSS as) form.

Fig. 1 be in the prior art under the non-roaming scene HeNB insert the configuration diagram of EPS, Fig. 2 be in the prior art under the non-roaming scene HNB insert the configuration diagram of UMTS through fixed network.As depicted in figs. 1 and 2, wherein, base station from home (Home NodeB abbreviates HNB as) and family's evolved base station (Home evolved NodeB abbreviates HeNB as) are referred to as base station from home H (e) NB in this application.The framework that HeNB under the roaming scence (local route or local break-out) inserts EPS is mainly reflected on the EPS network, and the framework signal of the HNB access UMTS under the roaming scence is similar with Fig. 2, repeats no more at this.

Mobility Management Entity is responsible for the related work of chains of command such as processing and the contextual management of user's mobile management of mobile management, Non-Access Stratum signaling; S-GW is the accessing gateway equipment that links to each other with E-UTRAN, between E-UTRAN and P-GW, transmits data, and is responsible for pending datas such as paging are carried out buffer memory; P-GW then is the borde gateway of EPS and packet data network (Packet Data Network abbreviates PDN as) network, and the access of being responsible for PDN reaches functions such as between EPS and PDN, transmitting data; S-GW and P-GW belong to the core net gateway.In the UTRAN system, the core net gateway can be GGSN.

Control (the Policy and Charging Control if EPS system support policy charges; Abbreviate PCC as); Then "Policy and Charging Rules Function (Policy and Charging Rules Function abbreviates PCRF as) carries out the formulation of strategy and charging regulation, and it is through receiving interface Rx and carrier network agreement (InternetProtocol; Abbreviate IP as) application function (ApplicationFunction in the business network; Abbreviate AF as) link to each other, obtain business information, be used to generate the business information of PCC strategy.When the S5 interface between S-GW and the P-GW adopts the GTP agreement, resident strategy and charge execution function (Policy and Charging Enforcement Function abbreviates PCEF as) among the P-GW; Pass through Gx interface exchange message between PCRF and P-GW; Be responsible for initiating the foundation of carrying, revise and release, guarantee service quality (the Quality ofService of business datum; Abbreviate QoS as), and the control of chargeing.When the S5 of S-GW and P-GW interface adopts proxy-mobile IP (Proxy Mobile IP abbreviates PMIP as), (the Bearer Binding and Event ReportFunction of resident bearing binding and event reporting function among the S-GW; Abbreviate BBERF as); And through Gxc interface exchange message, be responsible for the foundation initiating to carry between S-GW and the PCRF, revise and discharge by BBERF; Guarantee the service quality of business datum, by the PCEF control of chargeing.

Base station from home is a kind of small-sized, lower powered base station; Be deployed in indoor places such as family and office; Main effect is in order higher service rate to be provided to the user and to reduce and use the needed expense of high rate services, remedying the deficiency that existing distributed cellular radio communication system covers simultaneously.The advantage of base station from home is economical, convenient, low-power output, plug and play etc.

Base station from home can be applied in EPS (as shown in Figure 1) or 3G (as shown in Figure 2) mobile communications network among the 3GPP.For the ease of base station from home is managed, new network element, i.e. a home base-station gateway have been introduced at wireless access network.The function that home base-station gateway is mainly carried out is: the fail safe of checking base station from home; Handle the registration of base station from home; Base station from home is carried out operation maintenance management,, be responsible for the data of exchcange core net and base station from home according to Carrier Requirements configuration and control base station from home.For 3G network, home base-station gateway is essential deployment, is used for shielding the influence of introducing behind the base station from home terminal and network side.For the EPS network; Home base-station gateway is optional deployment, so base station from home is connected with dual mode with core net in the EPS network: a kind of is that base station from home directly links to each other with core network element, and another kind is that base station from home passes through home base-station gateway and links to each other with core network element; Home base-station gateway can not integrated user plane functions; Directly set up user plane between base station from home and core net user plane gateway, can make the user plane flattening like this, data transmission delay reduces.

Base station from home inserts the core net of EPS usually through the fixed network circuit of renting, as shown in Figure 1.In order to ensure the safety of access, to introduce security gateway (Security Gateway abbreviates SeGW as) in the core net and shield, the data between HeNB and the SeGW will adopt IPSec to encapsulate.HeNB can be directly connected to the MME and the S-GW of core net through the ipsec tunnel that HeNB and SeGW set up, and also can be connected to MME and S-GW through HeNB GW again.

In addition, UMTS (Universal Mobile Telecommunications System abbreviates UMTS as) is also supported the access of Home node base station HNB (HomeNodeB), and is as shown in Figure 2.Framework among Fig. 2 and the framework of Fig. 1 are similar; Different is; Use service universal packet wireless business affair support node (Serving General packet radio service support node; Abbreviate SGSN as) replaced S-GW, use ggsn (Gateway General PacketRadio Service Supporting Node abbreviates GGSN as) to replace P-GW.

Under the situation of family expenses base station, must consider that a plurality of base station from home (for example, HeNB, HNB) insert the scene of 3GPP core net through a signatory fixed network circuit through signatory fixed network circuit access.Because the QoS of the fixed network circuit that base station from home inserts normally receives the owner and the fixed network operator's of base station from home signatory restriction; Therefore when 3GPP UE inserts 3GPP core net access service through base station from home; Required QoS can not surpass the QoS that contracts of the fixed network circuit that the fixed network operator can provide; Otherwise the QoS of UE access service will can not get ensureing that particularly guaranteed bandwidth (Guaranteed Bitrate abbreviates GBR as) is professional all the more so.

At present, prior art has proposed a kind of framework that is used for the control of base station from home access strategy, like Fig. 1, shown in Figure 2.Broadband forum policy control functions entity (BroadBand Forum Policy ControlFunction; Abbreviate BPCF as) be a controlled function entity of managing fixed network resource; Through on BPCF, adding interface; And be connected to SeGW or the HeNB GW of 3GPP HeNB, and the intercommunication strategy, realize user access administration and resource management.Yet prior art only provides a rough framework, and how carrying out policy control still is a problem to be solved.Therefore the present invention is intended to propose a kind of policy control scheme based on H (e) NB PF, and the Operational Visit of the UE that inserts through base station from home is carried out policy control.

Summary of the invention

The technical problem that the present invention will solve provides a kind of resource authorization method and system, realizes all UE that insert through base station from home are carried out QoS control the QoS that the signatory fixed network circuit that makes the QoS aggregate demand be no more than the base station from home access can provide.

For solving the problems of the technologies described above, the invention provides a kind of resource authorization method, be provided with interface T1 between security gateway SeGW and base station from home policy functional entity H (e) the NB PF, comprising:

Signaling on steps A, SeGW monitor-interface S1 or the Iuh; When monitoring resource authorization, resource modifying or resource release request message; SeGW sends resource authorization, resource modifying or resource release request message through interface T1 to H (e) NB PF; Resource information and tunnel information that the request of carrying in the said message is authorized, revised or discharge, H (e) NB PF transmits said message to the policy control functions entity B PCF of broadband forum;

Step B, BPCF do admittance control according to said tunnel information and resource information, and will admit the control result to return to H (e) NB PF, and H (e) NB PF returns to admit to SeGW and controls the result, and SeGW controls the result according to said admittance and carries out admission processing.

Further, comprise that also base station from home H (e) NB and SeGW set up the step of ipsec tunnel before the said steps A.

Further, also comprise H (e) NB identification information in said resource authorization, resource modifying or the resource release request message.Said tunnel information comprises the IP address information of H (e) NB, and said H (e) NB identification information is to be used to identify H (e) NB on-position.

Further, said H (e) NB and SeGW set up ipsec tunnel and comprise:

H (e) NB powers on, and accomplishes authentication and obtains the IP address;

H (e) NB and SeGW set up the IPsec tunnel.

Further, said H (e) NB and SeGW set up ipsec tunnel and also comprise:

SeGW gives H (e) NB PF the tunnel information in said IPsec tunnel and H (e) NB identification-information reporting through interface T1;

H (e) NB PF preserves said tunnel information and H (e) NB identification information.

Further, said H (e) NB and SeGW set up ipsec tunnel and also comprise: after said H (e) NB PF receives tunnel information and H (e) NB identification information, give BPCF with this report information.

Further, said steps A can comprise:

Core net is triggered, and initiates resource authorization or resource modifying flow process;

Core net is sent resource authorization or resource modifying request message to H (e) NB, carries the resource information of request mandate or resource modifying in the message;

Signaling on SeGW monitor-interface S1 or the Iuh, when monitoring resource authorization or resource modifying request message, SeGW is triggered;

SeGW sends resource authorization or resource modifying request message through interface T1 to H (e) NB PF, resource information and tunnel information that the request of carrying in the said message is authorized or revised;

H (e) NB PF transmits resource authorization or resource modifying request message through interface S9* to BPCF.

Further, said steps A also can comprise:

Core net is triggered, and initiates resource release flow;

Core net is sent resource release request message to H (e) NB, carries the resource information that request resource discharges in the message;

SeGW transmits resource release request message to H (e) NB;

Radio Resource discharges;

Signaling on SeGW monitor-interface S1 or the Iuh, when monitoring resource release request message, SeGW is triggered;

SeGW sends resource release request message through interface T1 to H (e) NB PF, resource information and tunnel information that the request of carrying in the said message discharges;

H (e) NB PF transmits resource release request message through interface S9* to BPCF.

On aforementioned techniques scheme basis, said step B comprises:

BPCF receives resource authorization or resource modifying request message, navigates to H (e) NB broadband access position according to H (e) NB identification information, and the broadband line current available resource situation that inserts according to H (e) NB judges whether the resource of asking or revising can be provided;

In judged result is request to be provided or during the resource revised, BPCF returns resource authorization response or resource modifying response message through interface S9* to H (e) NB PF, and authorization by direction is successfully or revise successfully in said message;

H (e) NB PF transmits said resource authorization response or resource modifying response message through interface T1 to SeGW;

SeGW sends resource authorization request or resource modifying request to H (e) NB, carries the resource information of authorizing through BPCF in this request;

Radio-resource-configuration;

H (e) NB returns resource authorization response or resource modifying response to core net;

Continue to trigger the flow process of resource authorization or resource modifying.

On aforementioned techniques scheme basis, said step B comprises:

In judged result is that BPCF returned resource authorization response or resource modifying response message to H (e) NB PF when the resource of request or modification cannot be provided, and authorization by direction, modification are failed or inadequate resource in said message;

After SeGW received response of said resource authorization or resource modifying response message, refusal should business;

SeGW returns resource authorization response or resource modifying response to core net, and authorization by direction, modification are failed or inadequate resource in said message;

On aforementioned techniques scheme basis, said step B comprises:

In judged result is when the part requested resource can only be provided, and BPCF returns resource authorization response or resource modifying response message through interface S9* to H (e) NBPF, and in said message, indicates inadequate resource, and carries the resource information that BPCF can authorize;

The resource information that SeGW can authorize according to said BPCF is seized the resource of existing business;

SeGW sends resource authorization request or resource modifying request to H (e) NB;

Radio-resource-configuration;

H (e) NB returns resource authorization response or resource modifying response to core net.

Further, the resource information that said SeGW can authorize according to said BPCF is seized in the resource of existing business, and the comprehensive factor of SeGW comprises: pattern, GBR and CSG that H (e) NB inserts.

Further, also comprise:

SeGW discharges resource through interface T1 notice H (e) NBPF;

H (e) NB PF discharges resource through S9* interface notice BPCF;

Fixed network discharges related resource;

On aforementioned techniques scheme basis, said step B comprises:

BPCF receives resource release message, discharges related resource according to tunnel information;

BPCF returns resource through interface S9* to H (e) NB PF and discharges response message;

H (e) NB PF returns resource through interface T1 to SeGW and discharges response message;

H (e) NB returns resource to core net and discharges response.

For solving the problems of the technologies described above; The present invention also provides a kind of resource authorization system; Comprise the interface T1 that is provided with between security gateway SeGW, base station from home policy functional entity H (e) NB PF, the policy control functions entity B PCF of broadband forum and SeGW and H (e) the NB PF, wherein

Said SeGW is used for the signaling on monitor-interface S1 or the Iuh; When monitoring resource authorization, resource modifying or resource release request message; SeGW sends resource authorization, resource modifying or resource release request message through interface T1 to H (e) NB PF, resource information and tunnel information that the request of carrying in the said message is authorized, revised or discharge; The admittance control result that said SeGW also is used for returning according to H (e) NB PF carries out admission processing;

Said H (e) NB PF is used for transmitting said resource authorization, resource modifying or resource release request message to BPCF; After receiving the admittance control result that BPCF returns, send to SeGW and to admit the control result;

Said BPCF is used for doing admittance control according to said tunnel information and resource information, and will admit the control result to return to H (e) NB PF.

Further, also comprise base station from home H (e) NB, said H (e) NB and SeGW establish ipsec tunnel.

Further, said BPCF does according to said tunnel information and resource information and admits control to comprise: BPCF receives resource authorization or resource modifying request message, judges whether the resource that request can be provided or revise according to the current available resource situation; In judged result is request to be provided or during the resource revised, BPCF returns resource authorization response or resource modifying response message to H (e) NB PF, and authorization by direction success or revise successfully in said message.

Further, said BPCF does according to said tunnel information and resource information and admits control to comprise: BPCF receives resource authorization or resource modifying request message, judges whether the resource that request can be provided or revise according to the current available resource situation; In judged result is that BPCF returned resource authorization response or resource modifying response message to H (e) NB PF when the resource of request or modification cannot be provided, and authorization by direction, modification are failed or inadequate resource in said message.

Further, said BPCF does according to said tunnel information and resource information and admits control to comprise: BPCF receives resource authorization or resource modifying request message, judges whether the resource that request can be provided or revise according to the current available resource situation; In judged result is when the part requested resource can only be provided, and BPCF returns resource authorization response or resource modifying response message to H (e) NB PF, and in said message, indicates inadequate resource, and carries the resource information that BPCF can authorize.

Further, said BPCF does according to said tunnel information and resource information and admits control to comprise: BPCF receives resource release message, according to tunnel information release related resource.

The technical problem that the present invention will solve provides a kind of resource authorization method and system; Through between SeGW and H (e) NB PF, being provided for intercommunication policy interface T1; Realization is to user access administration and resource management; Solved the problem that the signatory QoS that uncontrollable shared same signatory fixed network circuit has still selected total demand of the subscriber equipment of different PCRF to be no more than this signatory fixed network circuit in the correlation technique ensures; And then can carry out QoS control, the QoS that the signatory fixed network circuit that makes the QoS aggregate demand be no more than the base station from home access can provide to all UE that insert through base station from home.

Description of drawings

Fig. 1 be in the prior art under the non-roaming scene HeNB insert the configuration diagram of EPS;

Fig. 2 be in the prior art under the non-roaming scene HNB insert the configuration diagram of UMTS through fixed network;

Fig. 3 a is a kind of configuration diagram of resource authorization of the present invention system;

Fig. 3 b is the another kind of configuration diagram of resource authorization of the present invention system;

Fig. 4 is the flow chart of resource authorization method of the present invention;

Fig. 5 is the flow chart that SeGW reports ipsec tunnel information in the inventive method;

Fig. 6 is the process chart that sends resource authorization or resource modifying message in the inventive method;

Fig. 7 is the flow chart that BPCF admits control in the inventive method in the time can requested resource being provided;

Fig. 8 is the flow chart that BPCF admits control in the inventive method in the time can not requested resource being provided;

Fig. 9 is the flow chart that BPCF discharges related resource in the inventive method;

Figure 10 is the flow chart that BPCF admits control in the inventive method when inadequate resource.

Embodiment

Below in conjunction with accompanying drawing, technical scheme of the present invention is explained further details.Need to prove that under the situation of not conflicting, embodiment and the characteristic among the embodiment among the application can make up each other.

Defective to prior art; For 3GPP network and fixed network; It is machine-processed to set up a cover uniform resource management, thereby the QoS aggregate demand of controlling the Operational Visit of all UE that insert through base station from home is no more than the signatory QoS guarantee of fixed network circuit that this HeNB inserts, in other words; The resource management mechanism of being set up reasonably the managing fixed network resource, can accomplish rational management and control to user and business, the GBR business of guarantee to authorize setting up can have enough bandwidth.For this reason; Insert on EPS or the framework basis of HNB at existing HeNB through fixed network access UMTS; The present invention is through being provided with interface between security gateway SeGW and base station from home policy functional entity H (e) NB PF (H (e) HB Policy Function); And the intercommunication strategy, realize user access administration and resource management.

Fig. 3 a is a kind of configuration diagram of resource authorization of the present invention system; Fig. 3 b is the another kind of configuration diagram of resource authorization of the present invention system; Framework shown in Fig. 3 a is applicable to that the terminal passes through HeNB and insert the EPS system, and framework shown in Fig. 3 b is applicable to that the terminal passes through HNB and insert the 3G system.Shown in Fig. 3 a and 3b, resource authorization of the present invention system comprises the interface T1 that is provided with between security gateway SeGW, base station from home policy functional entity H (e) NBPF, the policy control functions entity B PCF of broadband forum and SeGW and H (e) the NB PF, wherein,

SeGW is used for the signaling on monitor-interface S1 or the Iuh; When monitoring resource authorization, resource modifying or resource release request message; SeGW sends resource authorization, resource modifying or resource release request message through interface T1 to H (e) NB PF, resource information and tunnel information that the request of carrying in the said message is authorized, revised or discharge; The admittance control result that SeGW also is used for returning according to H (e) NB PF carries out admission processing;

H (e) NB PF is used for transmitting resource authorization, resource modifying or resource release request message to BPCF; After receiving the admittance control result that BPCF returns, send to SeGW and to admit the control result;

BPCF is used for doing admittance control according to tunnel information and resource information, and will admit the control result to return to H (e) NB PF.

Further, resource authorization of the present invention system also comprises base station from home H (e) NB, and H (e) NB and SeGW establish ipsec tunnel.

Alternatively, SeGW gives H (e) NB PF the tunnel information in IPsec tunnel and H (e) NB identification-information reporting through interface T1, and H (e) NB PF preserves tunnel information and H (e) NB identification information.Further alternatively, H (e) NB PF gives BPCF this report information.Wherein, tunnel information comprises the IP address information of H (e) NB, and H (e) NB identification information is meant the information that can be used to identify H (e) NB on-position, like H (e) NB sign, H (e) NB address, cell ID, CSG etc.

In technique scheme, BPCF does the following several kinds of situation that relate to of controlling of admitting according to said tunnel information and resource information:

1, BPCF receives resource authorization or resource modifying request message, judges whether the resource that request can be provided or revise according to the current available resource situation; In judged result is request to be provided or during the resource revised, BPCF returns resource authorization response or resource modifying response message to H (e) NB PF, and authorization by direction success or revise successfully in said message.Correspondingly; SeGW comprises according to admitting the control result to carry out admission processing: H (e) NB PF transmits said resource authorization response or resource modifying response message through interface T1 to SeGW; After SeGW received said resource authorization response or resource modifying response message, SeGW sent resource authorization request or resource modifying request to H (e) NB, carries the resource information of authorizing through BPCF in this request; Radio-resource-configuration, H (e) NB returns resource authorization response or resource modifying response to core net.

2, BPCF receives resource authorization or resource modifying request message, judges whether the resource that request can be provided or revise according to the current available resource situation; In judged result is that BPCF returned resource authorization response or resource modifying response message to H (e) NB PF when the resource of request or modification cannot be provided, and authorization by direction, modification are failed or inadequate resource in said message.Correspondingly; SeGW comprises according to admitting the control result to carry out admission processing: H (e) NB PF transmits said resource authorization response or resource modifying response message through interface T1 to SeGW; After SeGW receives said resource authorization response or resource modifying response message; Refusal should business, and SeGW returns resource authorization response or resource modifying response to core net, and in said message authorization by direction, revise failure or inadequate resource.

3, BPCF receives resource authorization or resource modifying request message, judges whether the resource that request can be provided or revise according to the current available resource situation; In judged result is when the part requested resource can only be provided, and BPCF returns resource authorization response or resource modifying response message to H (e) NB PF, and in said message, indicates inadequate resource, and carries the resource information that BPCF can authorize.Correspondingly; SeGW comprises according to admitting the control result to carry out admission processing: H (e) NB PF transmits said resource authorization response or resource modifying response message through interface T1 to SeGW, and the resource information that SeGW can authorize according to BPCF in the response message is seized the resource of existing business.Wherein, the comprehensive factor of the prior art of SeGW, such as CSG and ARP etc., the resource of existing business is seized in decision, thereby is new business foundation/modification carrying.

4, BPCF receives resource release message, discharges related resource according to tunnel information, and returns resource release response message to H (e) NBPF.Correspondingly, SeGW comprises according to admitting the control result to carry out admission processing: H (e) NB PF returns resource through interface T1 to SeGW and discharges response message, and H (e) NB returns resource to core net and discharges response.

Can find out that from technique scheme from the angle of interface T1, the interface T1 that the present invention is arranged between SeGW and H (e) NBPF has following effect:

1, be used to make SeGW to give H (e) NB PF the tunnel information in IPsec tunnel and H (e) NB identification-information reporting;

2, be used to make SeGW to send resource authorization, resource modifying or resource release request message to H (e) NB PF;

3, after BPCF returns resource authorization, resource modifying or resource release response message, be used to make H (e) NB PF to transmit said resource authorization, resource modifying or resource and discharge response message to SeGW.

Fig. 4 is the flow chart of resource authorization method of the present invention, comprising:

Step 1, as H (e) when NB powers on, accomplish authentication and obtain to set up ipsec tunnel with SeGW after the IP address, SeGW sends message through the T1 interface to H (e) NB PF, comprises tunnel information and H (e) NB identification information in the message.

Optional, this information of H (e) NB PF notice BPCF.

After step 2, user insert EPS or 3G network; Signaling on SeGW monitor-interface S1 or the Iuh; When SeGW monitors resource authorization, resource modifying or resource when discharging relevant signaling; SeGW sends resource authorization, resource modifying or resource release request message through the T1 interface to H (e) NB PF, carries tunnel information and the resource information of asking to authorize, revise or discharge in the message, and H (e) NB PF transmits resource authorization, resource modifying or resource release request message to BPCF.

Wherein, in resource authorization, resource modifying or the resource release request message described in this step, carry out the different triggering flow process of resource authorization, resource modifying or resource release flow, the related news in can corresponding corresponding flow process according to triggering core net.

Step 3, BPCF do admittance control according to tunnel information and resource information, and will admit the control result to return to H (e) NB PF, and H (e) NB PF returns to admit to SeGW and controls the result, and SeGW controls the result according to said admittance and carries out admission processing.

Specify the technical scheme of resource authorization method of the present invention below through specific embodiment.

First embodiment

Fig. 5 is the flow chart that H in the inventive method (e) NB reports ipsec tunnel information, is suitable in EPS system or the 3G system.In technical scheme shown in Figure 4, said step 1 comprises:

Step 11, H (e) NB power on, access fixed network, and fixed network is the IP address that H (e) NB distributes a this locality through related mechanism, this address is as the outside ip address of the packet of ipsec tunnel encapsulation between follow-up H (e) NB and the SeGW.

Step 12, H (e) NB and SeGW set up the IPsec tunnel, to guarantee fail safe and the integrality of data in transmission course.

Step 13, SeGW give H (e) NB PF the tunnel information in said IPsec tunnel and H (e) NB identification-information reporting through interface T1.

Step 14, H (e) NB PF preserve said tunnel information and H (e) NB identification information.

In the present embodiment, tunnel information and H (e) NB identification information is promptly to notify the PF to H (e) NB by SeGW after H (e) NB powers on.

Alternatively; Present embodiment can further include: after H (e) NB PF receives tunnel information and H (e) NB identification information; H (e) NB PF gives BPCF this report information, and BPCF judges the fixed network position at this H (e) NB place through this tunnel information and/or H (e) NB identification information; Like concrete line identification etc., and conclude the fixed network backhaul network (Backhaul) that this H (e) NB place fixed network.In this process, BPCF may carry out with other network element in the broadband access alternately, thereby the resource that can obtain the broadband line of H (e) NB access can be used situation.Through this flow process, H (e) NB PF and BBF BPCF can judge the position at this H (e) NB place, and conclude the fixed network Backhual at this HeNB place.

In the present techniques scheme, tunnel information comprises the IP address information of H (e) NB, and H (e) NB identification information is meant the information that can be used to identify H (e) NB on-position, like H (e) NB sign, H (e) NB address, cell ID, CSG etc.

Second embodiment

In the present embodiment, the step 1 in the technical scheme shown in Figure 4 comprises:

Different with first embodiment is that the H of present embodiment (e) NB identification information is to bring H (e) NB PF when SeGW sends resource authorization, resource modifying or resource release request message in flow.

The 3rd embodiment

Fig. 6 is the process chart that sends resource authorization or resource modifying message in the inventive method, and in technical scheme shown in Figure 4, said step 2 comprises:

Step 211, core net are triggered, and initiate resource authorization or resource modifying flow process.

In the present techniques scheme, core net is EPS network or 3G network.For resource authorization or resource modifying, the triggering that core net receives includes but not limited to scenario: default bearing is set up flow process in the EPS network attachment flow process, and default bearing was set up flow process during EPS network terminal request establishment PDN connected; Proprietary bearing activation flow process in the EPS network; Bearing modification flow process in the EPS network, PDP context activation flow process in the 3G network, PDP Context secondary activating flow process in the 3G network; PDP context modification flow process in the 3G network, switching flow in EPS network and the 3G network.

Step 212, core net are sent resource authorization or resource modifying request message to H (e) NB; Carry the resource information of request mandate or resource modifying in the message, like beared information, qos policy information etc.

For resource authorization or resource modifying request message, according to triggering flow processs different in the step 211, have the related news in the corresponding corresponding flow process, for example,

In the EPS network attachment flow process: initial context is set up request;

In the EPS network PDN connection building process, dedicated bearing activates: carry the request of setting up (E-RAB sets up request);

The EPS network carrying is revised: the bearing modification request;

Switch: handoff request, re-positioning request;

In the 3G network: the RAB assignment request.

Signaling on step 213, SeGW monitor-interface S1 or the Iuh, when monitoring resource authorization or resource modifying request message, SeGW is triggered.

Step 214, SeGW send resource authorization or resource modifying request message through interface T1 to H (e) NB PF, resource information and tunnel information that the request of carrying in this message is authorized or revised.

Step 215, H (e) NB PF transmit resource authorization or resource modifying request message through interface S9* to BPCF.

In the

present embodiment step

214 and 215, can also carry H (e) NB identification information in the message.If the front flow process adopts first embodiment; SeGW has sent H (e) NB identification information to H (e) NB PF and BPCF, then can no longer H (e) NB identification information be arranged in the

present embodiment step

214 and 215 and bring H (e) NB PF and BPCF in resource authorization or the resource modifying request message.If the front flow process adopts second embodiment; Because H (e) NB PF and BPCF do not obtain H (e) NB identification information as yet, then need H (e) NB identification information be arranged in the

present embodiment step

214 and 215 and bring H (e) NB PF and BPCF in resource authorization or the resource modifying request message.

The 4th embodiment

Fig. 7 is the flow chart that BPCF admits control in the inventive method in the time can requested resource being provided, and is suitable for the flow process that has triggered resource authorization or resource modifying in EPS system or the 3G system, and the BPCF admittance is controlled to be acceptance.In order more clearly to reflect technical scheme of the present invention, also comprised preceding afterflow journey in the flow process shown in Figure 7.

In technical scheme shown in Figure 4, said step 3 comprises:

Step 311, BPCF receive resource authorization or resource modifying request message; Navigate to H (e) NB broadband access position according to H (e) NB identification information; Broadband line current available resource situation according to H (e) NB inserts is carried out resource and admission, promptly judges whether the resource that request can be provided or revise.

In this step, judge whether that it is to judge that whether remaining available resources are more than or equal to request resource that the resource of request or modification can be provided.If remaining available resources are more than or equal to request resource, then BPCF receives the request of H (e) NB PF, and will from the broadband line current available resource, deduct request; If remaining available resources are less than request, then BPCF refuses the request of H (e) NB PF.

Step 312, be request to be provided or during the resource revised, BPCF returns resource authorization response or resource modifying response message through interface S9* to H (e) NB PF, and authorization by direction is successfully or revise successfully in said message in judged result.

Step 313, H (e) NB PF transmit said resource authorization response or resource modifying response message through interface T1 to SeGW.

After step 314, SeGW received said resource authorization response or resource modifying response message, SeGW sent resource authorization request or resource modifying request to H (e) NB, carries the resource information of authorizing through BPCF in this request.

Step 315, radio-resource-configuration.

Step 316, H (e) NB return resource authorization response or resource modifying response to core net.

In the present embodiment, resource authorization or resource modifying request message according to triggering flow processs different in the 3rd embodiment step 211, have the related news in the corresponding corresponding flow process, for example,

In the EPS network attachment flow process: initial context is set up response;

In the EPS network PDN connection building process, dedicated bearing activates: carry and set up response (E-RAB sets up request);

The EPS network carrying is revised: the bearing modification response;

Switch: handoff response, relocation response;

In the 3GEPS network: RAB assigns response.

Step 317, continuation trigger the flow process of resource authorization or resource modifying.

The 5th embodiment

Fig. 8 is the flow chart that BPCF admits control in the inventive method in the time can not requested resource being provided, and is suitable for the flow process that has triggered resource authorization or resource modifying in EPS system or the 3G system, and the BPCF admittance is controlled to be refusal.In order more clearly to reflect technical scheme of the present invention, also comprised preceding afterflow journey in the flow process shown in Figure 7.

In technical scheme shown in Figure 4, said step 3 comprises:

Step 321, BPCF receive resource authorization or resource modifying request message; Navigate to H (e) NB broadband access position according to H (e) NB identification information; Broadband line current available resource situation according to H (e) NB inserts is carried out resource and admission, promptly judges whether the resource that request can be provided or revise.

Step 322, be request to be provided or during the resource revised, BPCF returns resource authorization response or resource modifying response message to H (e) NB PF in judged result, and in said message authorization by direction, revise failure or inadequate resource.

Step 323, H (e) NB PF transmit said resource authorization response or resource modifying response message through interface T1 to SeGW.

After step 324, SeGW received said resource authorization response or resource modifying response message, refusal should business.

Step 325, SeGW return resource authorization response or resource modifying response to core net, and authorization by direction, modification are failed or inadequate resource in said message.

In the present embodiment, resource authorization response or resource modifying response message according to triggering flow processs different in the 3rd embodiment step 211, have the related news in the corresponding corresponding flow process, for example,

In the EPS network attachment flow process: failure of establishing initial context;

In the EPS network PDN connection building process, dedicated bearing activates: carry and set up response (E-RAB sets up request), carry the carrying that foundation is failed in the message;

The EPS network carrying is revised: the bearing modification response, carry the carrying of revising failure in the message;

Switch: handoff failure, reorientation failure;

In the 3G network: RAB assigns response, carries the carrying of setting up failure or revising failure in the message.

Step 326, continuation trigger the flow process of resource authorization or resource modifying.

The 6th embodiment

Fig. 9 is the flow chart that BPCF discharges related resource in the inventive method, is suitable for and has triggered the flow process that resource discharges in EPS system or the 3G system.This flow process has comprised the flow process of step 2 and step 3 in the technical scheme shown in Figure 4.

Step 221, core net are triggered, and initiate resource release flow.

The triggering that core net receives includes but not limited to scenario: Detach flow process, dedicated bearing deactivate flow process, and PDP Context deactivates flow process.

Step 222, core net are sent resource release request message to H (e) NB, carry the resource information that request resource discharges in the message, like qos policy information etc.

Resource release message described in this step, according to different triggering flow processs, the related news in the corresponding corresponding flow process of meeting.

Step 223, SeGW transmit resource release request message to H (e) NB.

Step 224, Radio Resource discharge.

Signaling on step 225, SeGW monitor-interface S1 or the Iuh, when monitoring resource release request message, SeGW is triggered.

Step 226, SeGW send resource release request message through interface T1 to H (e) NB PF, carry resource information (like qos policy information) and tunnel information in the message.Alternatively, can also comprise H (e) NB identification information.

Step 227, H (e) NB PF transmit resource release request message through interface S9* to BPCF.

Step 331, BPCF receive resource release request message, discharge related resource according to tunnel information.

Step 332, BPCF return resource through interface S9* to H (e) NB PF and discharge response message.

Step 333, H (e) NB PF return resource through interface T1 to SeGW and discharge response message.

Step 334, H (e) NB return resource to core net and discharge response.

In the practical application, step 225 need just not begin to carry out after step 224, can with step 223 executed in parallel, step 334 just can have been carried out in step 224 back, need not wait until step 333 end.

The 7th embodiment

Figure 10 is the flow chart that BPCF admits control in the inventive method when inadequate resource, is suitable for the flow process that has triggered resource authorization or resource modifying in EPS system or the 3G system, and the BPCF admittance is controlled to be inadequate resource.In order more clearly to reflect technical scheme of the present invention, also comprised preceding afterflow journey in the flow process shown in Figure 7.

In technical scheme shown in Figure 4, said step 3 comprises:

Step 341, BPCF receive resource authorization or resource modifying request message; Navigate to H (e) NB broadband access position according to H (e) NB identification information; Broadband line current available resource situation according to H (e) NB inserts is carried out resource and admission, promptly judges whether the resource that request can be provided or revise.

Step 342, be when the part requested resource can only be provided in judged result; BPCF returns resource authorization response or resource modifying response message through interface S9* to H (e) NB PF; And in said message, indicate inadequate resource, and carry the fixed network resource situation, i.e. the resource that can authorize of BPCF.

Step 343, H (e) NB PF transmit said resource authorization response or resource modifying response message through interface T1 to SeGW.

The resource information that step 344, SeGW can authorize according to BPCF in the response message is seized the resource of existing business.

In this step, the comprehensive factor of the prior art of SeGW, such as CSG and ARP etc., the resource of existing business is seized in decision, thereby is new business foundation/modification carrying.Relate to following situation:

(a1) if the pattern that H (e) NB inserts is an open mode; Other GBR that SeGW will carry according to ARP and this user oneself sets up carries and compares through other GBR carrying that other user that same broadband line inserts sets up; If this carrying can't be seized other bearing resource, then carry out step 324 and flow thereof among the 5th embodiment.If this carrying can be seized the resource of other carrying; And can seize the resource of other carrying and delegatable resource sum that BPCF returns more than or equal to this carrying request or revise the resource of (request that mainly is meant increases resource) here; Then execution in step 345 and subsequent step, SeGW need notify core net to discharge and seized user's resource simultaneously; Otherwise, then carry out step 324 and flow thereof among the 5th embodiment.

(a2) if the pattern that H (e) NB inserts is a mixed mode, and the member relation of the UE of this carrying correspondence is non-CSG user

(a21) if having other GBR carrying that other GBR of this user oneself foundation carried or passed through other non-CSG user's foundation of same broadband line access; SeGW will carry with other carrying according to ARP and compare so; If this carrying can't be seized the resource of other carrying, then carry out step 324 and flow thereof among the 5th embodiment.If this carrying can be seized the resource of other carrying; And can seize the resource of other carrying and delegatable resource sum that BPCF returns more than or equal to this carrying request or revise the resource of (request that mainly is meant increases resource) here; Then execution in step 345 and subsequent step, SeGW need notify core net to discharge and seized user's resource simultaneously; Otherwise, then carry out step 324 and flow thereof among the 5th embodiment.

(a22) other GBR of this user oneself foundation carries or through other GBR carrying that other non-CSG user that same broadband line inserts sets up, then carry out step 324 and flow thereof among the 5th embodiment if do not have.

(a3) if the access module of H (e) NB is a mixed mode, and the member relation of the UE of this carrying correspondence is CSG user

(a31) carry if having other GBR of other the non-CSG user's foundation that inserts through same broadband line; And the resource that can seize the carrying that other non-CSG user sets up and the delegatable resource sum that BPCF returns are more than or equal to this carryings request or revise the resource of (mainly be meant and ask the increase resource) here; Then execution in step 345 and subsequent step, SeGW need notify core net to discharge and seized user's resource simultaneously.Ask or revise the resource of (mainly being meant request increase resource here) less than this carrying as if the resource of the carrying that can seize other non-CSG user's foundation and the delegatable resource sum that BPCF returns; SeGW further will carry with other GBR carrying of this user oneself foundation or other carrying of setting up through other CSG user that same broadband line inserts according to ARP and compare fruit so; If this carrying can't be seized the resource of other carrying, then carry out step 324 and flow thereof among the 5th embodiment; If this carrying can be seized the resource of other carrying of CSG user's foundation; And can seize the resource of other carrying and delegatable resource sum that BPCF returns more than or equal to this carrying request or revise the resource of (request that mainly is meant increases resource) here; Then execution in step 345 and subsequent step, SeGW need notify core net to discharge and seized user's resource simultaneously.

(a32) do not carry if do not have other GBR of the non-CSG user's foundation that inserts through same signatory fixed network circuit; SeGW will carry with other GBR carrying of this user oneself foundation or other carrying of setting up through other CSG user that same broadband line inserts according to ARP and compare so; If this carrying can't be seized the resource of other carrying, then carry out step 324 and flow thereof among the 5th embodiment.If this carrying can be seized the resource of other carrying; And can seize the resource of other carrying and delegatable resource sum that BPCF returns more than or equal to this carrying request or revise the resource of (request that mainly is meant increases resource) here; Then execution in step 345 and subsequent step, SeGW need notify core net to discharge and seized user's resource simultaneously.

(a4) if the access module of H (e) NB is a closed mode; Other GBR that HeNB GW will carry according to ARP and this user oneself sets up so carries or compares through the GBR carrying that other user that same broadband line inserts sets up; If this carrying can't be seized the resource of other carrying, then carry out step 324 and flow thereof among the 5th embodiment.If this carrying can be seized the resource of other carrying; And can seize the resource of other carrying and delegatable resource sum that BPCF returns more than or equal to this carrying request or revise the resource of (request that mainly is meant increases resource) here; Then execution in step 345 and subsequent step, SeGW need notify core net to discharge and seized user's resource simultaneously.

Step 345, SeGW send resource authorization request or resource modifying request to H (e) NB.

Step 346, radio-resource-configuration.

Step 347, H (e) NB return resource authorization response or resource modifying response to core net.

Step 348, when core net carries out being discharged by preempting resources, shown in the 6th embodiment, can trigger SeGW notice BPCF and discharge corresponding fixed network resource, SeGW discharges resource through interface T1 notice H (e) NB PF.

Step 349, H (e) NB PF discharge resource through S9* interface notice BPCF.

Step 350, fixed network discharge related resource.

Step 351, continuation trigger the flow process of resource authorization or resource modifying.

In the present embodiment, step 348～step 350 discharges the resource trigger flow in step 344 back by core net, can walk abreast with step 345～step 347 and carry out.

In sum; The above embodiment of the present invention is through being provided for intercommunication policy interface T1 between SeGW and H (e) NB PF; Realization is to user access administration and resource management; Solved the problem that the signatory QoS that uncontrollable shared same signatory fixed network circuit has still selected total demand of the subscriber equipment of different PCRF to be no more than this signatory fixed network circuit in the correlation technique ensures; And then can carry out QoS control, the QoS that the signatory fixed network circuit that makes the QoS aggregate demand be no more than the base station from home access can provide to all UE that insert through base station from home.

Obviously, it is apparent to those skilled in the art that above-mentioned each module of the present invention or each step can realize with the general calculation device; They can concentrate on the single calculation element; Perhaps be distributed on the network that a plurality of calculation element forms, alternatively, they can be realized with the executable program code of calculation element; Thereby; Can they be stored in the storage device and carry out, and in some cases, can carry out step shown or that describe with the order that is different from here by calculation element; Perhaps they are made into each integrated circuit modules respectively, perhaps a plurality of modules in them or step are made into the single integrated circuit module and realize.Like this, the present invention is not restricted to any specific hardware and software combination.

The above is merely the preferred embodiments of the present invention, is not limited to the present invention, and for a person skilled in the art, the present invention can have various changes and variation.All within spirit of the present invention and principle, any modification of being done, be equal to replacement, improvement etc., all should be included within protection scope of the present invention.

Claims

1. a resource authorization method is characterized in that, is provided with interface T1 between security gateway SeGW and base station from home policy functional entity H (e) the NB PF, comprising:

2. resource authorization method as claimed in claim 1 is characterized in that, comprises that also base station from home H (e) NB and SeGW set up the step of ipsec tunnel before the said steps A.

3. resource authorization method as claimed in claim 1 is characterized in that, also comprises H (e) NB identification information in said resource authorization, resource modifying or the resource release request message.

4. resource authorization method as claimed in claim 3 is characterized in that, said tunnel information comprises the IP address information of H (e) NB, and said H (e) NB identification information is to be used to identify H (e) NB on-position.

5. resource authorization method as claimed in claim 2 is characterized in that, said H (e) NB and SeGW set up ipsec tunnel and comprise:

H (e) NB powers on, and accomplishes authentication and obtains the IP address;

H (e) NB and SeGW set up the IPsec tunnel.

6. resource authorization method as claimed in claim 5 is characterized in that, said H (e) NB and SeGW set up ipsec tunnel and also comprise:

7. resource authorization method as claimed in claim 6 is characterized in that, said H (e) NB and SeGW set up ipsec tunnel and also comprise: after said H (e) NB PF receives tunnel information and H (e) NB identification information, give BPCF with this report information.

8. resource authorization method as claimed in claim 1 is characterized in that, said steps A comprises:

9. resource authorization method as claimed in claim 1 is characterized in that, said steps A comprises:

Core net is triggered, and initiates resource release flow;

SeGW transmits resource release request message to H (e) NB;

Radio Resource discharges;

10. like the arbitrary described resource authorization method of claim 1～8, it is characterized in that said step B comprises:

Radio-resource-configuration;

11., it is characterized in that said step B comprises like the arbitrary described resource authorization method of claim 1～8:

12., it is characterized in that said step B comprises like the arbitrary described resource authorization method of claim 1～8:

Radio-resource-configuration;

13. resource authorization method as claimed in claim 12 is characterized in that, the resource information that said SeGW can authorize according to said BPCF is seized in the resource of existing business, and the comprehensive factor of SeGW comprises: pattern, GBR and CSG that H (e) NB inserts.

14. resource authorization method as claimed in claim 12 is characterized in that, also comprises:

SeGW discharges resource through interface T1 notice H (e) NB PF;

H (e) NB PF discharges resource through S9* interface notice BPCF;

Fixed network discharges related resource;

15., it is characterized in that said step B comprises like claim 1～7,9 arbitrary described resource authorization methods:

H (e) NB returns resource to core net and discharges response.

16. a resource authorization system is characterized in that, comprises the interface T1 that is provided with between security gateway SeGW, base station from home policy functional entity H (e) NB PF, the policy control functions entity B PCF of broadband forum and SeGW and H (e) the NB PF, wherein,

17. resource authorization as claimed in claim 16 system is characterized in that also comprise base station from home H (e) NB, said H (e) NB and SeGW establish ipsec tunnel.

18. like claim 16 or 17 described resource authorization systems; It is characterized in that; Said BPCF does according to said tunnel information and resource information and admits control to comprise: BPCF receives resource authorization or resource modifying request message, judges whether the resource that request can be provided or revise according to the current available resource situation; In judged result is request to be provided or during the resource revised, BPCF returns resource authorization response or resource modifying response message to H (e) NB PF, and authorization by direction success or revise successfully in said message.

19. like claim 16 or 17 described resource authorization systems; It is characterized in that; Said BPCF does according to said tunnel information and resource information and admits control to comprise: BPCF receives resource authorization or resource modifying request message, judges whether the resource that request can be provided or revise according to the current available resource situation; In judged result is that BPCF returned resource authorization response or resource modifying response message to H (e) NB PF when the resource of request or modification cannot be provided, and authorization by direction, modification are failed or inadequate resource in said message.

20. like claim 16 or 17 described resource authorization systems; It is characterized in that; Said BPCF does according to said tunnel information and resource information and admits control to comprise: BPCF receives resource authorization or resource modifying request message, judges whether the resource that request can be provided or revise according to the current available resource situation; In judged result is when the part requested resource can only be provided, and BPCF returns resource authorization response or resource modifying response message to H (e) NB PF, and in said message, indicates inadequate resource, and carries the resource information that BPCF can authorize.

21., it is characterized in that said BPCF does according to said tunnel information and resource information and admits control to comprise: BPCF receives resource release message, according to tunnel information release related resource like claim 16 or 17 described resource authorization systems.