CN102316494B

CN102316494B - resource authorization method and system

Info

Publication number: CN102316494B
Application number: CN201010223830.2A
Authority: CN
Inventors: 霍玉臻; 周晓云; 宗在峰; 毕以峰; 蒋陶
Original assignee: ZTE Corp
Current assignee: ZTE Corp
Priority date: 2010-07-07
Filing date: 2010-07-07
Publication date: 2015-09-16
Anticipated expiration: 2030-07-07
Also published as: CN102316494A

Abstract

The present invention relates to a kind of resource authorization method and system.Resource authorization method comprises: the signaling on SeGW monitor-interface S1 or Iuh, when monitoring resource authorization, resource modifying or Resource Release Request message, SeGW sends described message by interface T1 to H (e) NB PF, carry request mandate, amendment or the resource information discharged and tunnel information in described message, H (e) NB PF forwards described message to BPCF; BPCF does call access control according to described tunnel information and resource information, and call access control result is returned to H (e) NB PF, H (e) NB PF returns call access control result to SeGW, and SeGW carries out admission processing according to described call access control result.The present invention, by arranging interface T1 between SeGW and H (e) NB PF, is realized user access administration and resource management, can carry out QoS control to all UE accessed by base station from home.

Description

Resource authorization method and system

Technical field

The present invention relates to the communications field, be specifically related to a kind of resource authorization method and system.

Background technology

Third generation partner program (3rd Generation Partnership Project, referred to as 3GPP) grouping system (the Evolved Packet System of evolution, referred to as EPS) by Universal Terrestrial Radio Access Network (the Evolved Universal Terrestrial Radio Access Network of evolution, referred to as E-UTRAN), Mobility Management Entity (Mobility ManagementEntity, referred to as MME), gateway (Serving Gateway, referred to as S-GW), grouped data network gateway (Packet DataNetwork Gateway, referred to as P-GW), home subscriber server (Home Subscriber Server, referred to as HSS) composition.

Fig. 1 is that in prior art, under non-roaming scene, HeNB accesses the configuration diagram of EPS, and Fig. 2 is that in prior art, under non-roaming scene, HNB accesses the configuration diagram of UMTS by fixed network.As depicted in figs. 1 and 2, wherein, base station from home (Home NodeB, referred to as HNB) and family's evolved base station (Home evolved NodeB, referred to as HeNB) are referred to as base station from home H (e) NB in this application.The framework that HeNB under roaming scence (local route or local break-out) accesses EPS is mainly reflected on EPS network, and the framework signal that the HNB under roaming scence accesses UMTS is similar with Fig. 2, does not repeat them here.

Mobility Management Entity is responsible for the related work of the chain of command such as process and the contextual management of user's mobile management of mobile management, Non-Access Stratum signaling; S-GW is the accessing gateway equipment be connected with E-UTRAN, forwarding data between E-UTRAN and P-GW, and is responsible for carrying out buffer memory to pending datas such as pagings; P-GW is then the borde gateway of EPS and packet data network (Packet Data Network, referred to as PDN) network, be responsible for PDN access and between EPS and PDN the function such as forwarding data; S-GW and P-GW belongs to core network gateway.In UTRAN system, core network gateway can be GGSN.

If the charging of EPS support policy controls (Policy and Charging Control, referred to as PCC), then "Policy and Charging Rules Function (Policy and Charging Rules Function, referred to as PCRF) carry out formulation that is tactful and charging regulation, it is by receiving interface Rx and carrier network agreement (InternetProtocol, referred to as IP) application function (ApplicationFunction in business network, referred to as AF) be connected, obtain business information, for generating the business information of PCC strategy.When S5 interface between S-GW and P-GW adopts GTP agreement, strategy and charge execution function (Policy and Charging Enforcement Function is resided in P-GW, referred to as PCEF), by Gx interface exchange message between PCRF and P-GW, be responsible for the foundation initiating carrying, amendment and release, ensure service quality (the Quality ofService of business datum, referred to as QoS), and carry out charging control.When the S5 interface of S-GW and P-GW adopts proxy-mobile IP (Proxy Mobile IP, referred to as PMIP) time, resident bearing binding and event reporting function (Bearer Binding and Event ReportFunction in S-GW, referred to as BBERF), and by Gxc interface exchange message between S-GW and PCRF, be responsible for by BBERF the foundation initiating carrying, amendment and release, ensure the service quality of business datum, carry out charging by PCEF and control.

Base station from home is a kind of small-sized, lower powered base station, be deployed in the indoor place such as family and office, Main Function is to provide higher service rate to user and reduce the expense used required for high rate services, making up the deficiency that existing distributed cellular radio communication system covers simultaneously.The advantage of base station from home is economical, convenient, low-power output, plug and play etc.

In 3GPP, base station from home can be applied in EPS (as shown in Figure 1) or 3G (as shown in Figure 2) mobile communications network.For the ease of managing base station from home, introduce new network element, i.e. a home base-station gateway at wireless access network.The function that home base-station gateway mainly performs is: the fail safe of checking base station from home, the registration of process base station from home, operation maintenance management is carried out to base station from home, according to Carrier Requirements configuration and control base station from home, is responsible for the data of exchcange core net and base station from home.For 3G network, home base-station gateway is essential deployment, is used for shielding the impact introduced on terminal and network side after base station from home.For EPS network, home base-station gateway is optional deployment, therefore in EPS network, base station from home and core net are connected with two kinds of modes: one is that base station from home is directly connected with core network element, another kind is that base station from home is connected with core network element by home base-station gateway, home base-station gateway can not integrated user plane functions, directly set up user face between base station from home and core network user veil close, can make the flattening of user face like this, data transmission delay reduces.

Base station from home accesses the core net of EPS usually by the fixed network circuit rented, as shown in Figure 1.In order to ensure the safety of access, introduce security gateway (Security Gateway, referred to as SeGW) in core net and shield, employing IPSec encapsulates by the data between HeNB and SeGW.The ipsec tunnel that HeNB can be set up by HeNB and SeGW is directly connected to MME and S-GW of core net, also can be connected to MME and S-GW by HeNB GW again.

In addition, universal mobile telecommunications system (Universal Mobile Telecommunications System, referred to as UMTS) also supports the access of Home node base station HNB (HomeNodeB), as shown in Figure 2.Framework in Fig. 2 and the framework of Fig. 1 similar, unlike, use service universal packet wireless business business support node (Serving General packet radio service support node, referred to as SGSN) instead of S-GW, ggsn (Gateway General PacketRadio Service Supporting Node, referred to as GGSN) is used to instead of P-GW.

When base station from home is by signing fixed network circuit access, the scene of multiple base station from home (such as, HeNB, HNB) by a signing fixed network circuit access 3GPP core net must be considered.Because the QoS of the fixed network circuit of base station from home access is normally subject to the owner of base station from home and the signing restriction of fixed network operator, therefore when 3GPP UE is by base station from home access 3GPP core net access service, required QoS can not exceed the signing QoS of the fixed network circuit that fixed network operator can provide, otherwise the QoS of UE access service will can not get ensureing, particularly ensure that the business of bandwidth (Guaranteed Bitrate, referred to as GBR) is all the more so.

At present, prior art proposes a kind of framework controlled for base station from home access strategy, as shown in Figure 1 and Figure 2.Broadband Forum policy control functions entity (BroadBand Forum Policy ControlFunction, referred to as BPCF) be a controlling functions entity of managing fixed network resource, by adding interface on BPCF, and be connected to SeGW or the HeNB GW of 3GPP HeNB, and intercommunication strategy, realize user access administration and resource management.But prior art only provides a rough framework, how to carry out policy control or a problem to be solved.Therefore the present invention is intended to propose a kind of policy control scheme based on H (e) NB PF, carries out policy control to the Operational Visit of the UE accessed by base station from home.

Summary of the invention

The technical problem to be solved in the present invention is to provide a kind of resource authorization method and system, and all UE realized being accessed by base station from home carry out QoS control, the QoS that the signing fixed network circuit making QoS aggregate demand be no more than base station from home access can provide.

For solving the problems of the technologies described above, the invention provides a kind of resource authorization method, being provided with interface T1 between security gateway SeGW and home base station policy function entity H (e) NB PF, comprising:

Signaling on steps A, SeGW monitor-interface S1 or Iuh, when monitoring resource authorization, resource modifying or Resource Release Request message, SeGW sends resource authorization, resource modifying or Resource Release Request message by interface T1 to H (e) NB PF, carry request mandate, amendment or the resource information discharged and tunnel information in described message, H (e) NB PF forwards described message to Broadband Forum policy control functions entity B PCF;

Step B, BPCF do call access control according to described tunnel information and resource information, and call access control result is returned to H (e) NB PF, H (e) NB PF returns call access control result to SeGW, and SeGW carries out admission processing according to described call access control result.

Further, the step that base station from home H (e) NB and SeGW sets up ipsec tunnel is also comprised before described steps A.

Further, H (e) NB identification information is also comprised in described resource authorization, resource modifying or Resource Release Request message.Described tunnel information comprises the IP address information of H (e) NB, and described H (e) NB identification information is for identifying H (e) NB on-position.

Further, described H (e) NB and SeGW sets up ipsec tunnel and comprises:

H (e) NB powers on, and completes certification and obtains IP address;

H (e) NB and SeGW sets up IPsec tunnel.

Further, described H (e) NB and SeGW sets up ipsec tunnel and also comprises:

SeGW by interface T1 the tunnel information in described IPsec tunnel and H (e) NB identification-information reporting to H (e) NB PF;

H (e) NB PF preserves described tunnel information and H (e) NB identification information.

Further, described H (e) NB and SeGW sets up ipsec tunnel and also comprises: after described H (e) NB PF receives tunnel information and H (e) NB identification information, by this information reporting to BPCF.

Further, described steps A can comprise:

Core net is triggered, and initiates resource authorization or resource modifying flow process;

Core net sends resource authorization or resource modifying request message to H (e) NB, carries the resource information of request mandate or resource modifying in message;

Signaling on SeGW monitor-interface S1 or Iuh, when monitoring resource authorization or resource modifying request message, SeGW is triggered;

SeGW sends resource authorization or resource modifying request message by interface T1 to H (e) NB PF, carries resource information and the tunnel information of request mandate or amendment in described message;

H (e) NB PF forwards resource authorization or resource modifying request message by interface S9* to BPCF.

Further, described steps A also can comprise:

Core net is triggered, and initiates resource release flow;

Core net sends Resource Release Request message to H (e) NB, carries the resource information of request resource release in message;

SeGW forwards Resource Release Request message to H (e) NB;

Release radio resource;

Signaling on SeGW monitor-interface S1 or Iuh, when monitoring Resource Release Request message, SeGW is triggered;

SeGW sends Resource Release Request message by interface T1 to H (e) NB PF, carries resource information and the tunnel information of request release in described message;

H (e) NB PF forwards Resource Release Request message by interface S9* to BPCF.

On preceding solution basis, described step B comprises:

BPCF receives resource authorization or resource modifying request message, navigate to H (e) NB broadband access position according to H (e) NB identification information, judge whether to provide the resource of asking or revising according to the broadband line current available resource situation that H (e) NB accesses;

When judged result is the resource that can provide request or amendment, BPCF returns resource authorization response or resource modifying response message by interface S9* to H (e) NB PF, and authorization by direction is successful or successfully modified in described message;

H (e) NB PF forwards the response of described resource authorization or resource modifying response message by interface T1 to SeGW;

SeGW sends resource authorization request or resource modifying request to H (e) NB, carries the resource information of authorizing through BPCF in this request;

Radio-resource-configuration;

H (e) NB returns resource authorization response or resource modifying response to core net;

Continue the flow process of triggers resource mandate or resource modifying.

On preceding solution basis, described step B comprises:

When judged result is the resource that cannot provide request or amendment, BPCF returns resource authorization response or resource modifying response message to H (e) NB PF, and authorization by direction, amendment failure or inadequate resource in described message;

SeGW refuses this business after receiving the response of described resource authorization or resource modifying response message;

SeGW returns resource authorization response or resource modifying response to core net, and authorization by direction, amendment failure or inadequate resource in described message;

Continue the flow process of triggers resource mandate or resource modifying.

On preceding solution basis, described step B comprises:

When judged result is the resource that can only provide component requests, BPCF returns resource authorization response or resource modifying response message by interface S9* to H (e) NBPF, and indicate inadequate resource in described message, and carry the resource information that BPCF can authorize;

SeGW seizes the resource of existing business according to the resource information that described BPCF can authorize;

SeGW sends resource authorization request or resource modifying request to H (e) NB;

Radio-resource-configuration;

H (e) NB returns resource authorization response or resource modifying response to core net.

Further, described SeGW seizes in the resource of existing business according to the resource information that described BPCF can authorize, and the comprehensive factor of SeGW comprises: pattern, GBR and CSG that H (e) NB accesses.

Further, also comprise:

SeGW notifies H (e) NBPF releasing resource by interface T1;

H (e) NB PF is by S9* interface notification BPCF releasing resource;

Fixed network release related resource;

Continue the flow process of triggers resource mandate or resource modifying.

On preceding solution basis, described step B comprises:

BPCF receives resource release message, according to tunnel information release related resource;

BPCF returns resource release response message by interface S9* to H (e) NB PF;

H (e) NB PF returns resource release response message by interface T1 to SeGW;

H (e) NB returns resource release response to core net.

For solving the problems of the technologies described above, present invention also offers a kind of resource authorization system, comprise the interface T1 arranged between security gateway SeGW, home base station policy function entity H (e) NB PF, Broadband Forum policy control functions entity B PCF and SeGW and H (e) NB PF, wherein

The signaling of described SeGW on monitor-interface S1 or Iuh, when monitoring resource authorization, resource modifying or Resource Release Request message, SeGW passes through interface T1 and sends resource authorization, resource modifying or Resource Release Request message to H (e) NB PF, carries request mandate, amendment or the resource information discharged and tunnel information in described message; The call access control result of described SeGW also for returning according to H (e) NB PF carries out admission processing;

Described H (e) NB PF is used for forwarding described resource authorization, resource modifying or Resource Release Request message to BPCF; After receiving the call access control result that BPCF returns, send call access control result to SeGW;

Described BPCF is used for doing call access control according to described tunnel information and resource information, and call access control result is returned to H (e) NB PF.

Further, also comprise base station from home H (e) NB, described H (e) NB and SeGW sets up ipsec tunnel.

Further, described BPCF does call access control according to described tunnel information and resource information and comprises: BPCF receives resource authorization or resource modifying request message, judges whether the resource that can provide request or amendment according to current available resource situation; When judged result is the resource that can provide request or amendment, BPCF returns resource authorization response or resource modifying response message to H (e) NB PF, and authorization by direction is successful or successfully modified in described message.

Further, described BPCF does call access control according to described tunnel information and resource information and comprises: BPCF receives resource authorization or resource modifying request message, judges whether the resource that can provide request or amendment according to current available resource situation; When judged result is the resource that cannot provide request or amendment, BPCF returns resource authorization response or resource modifying response message to H (e) NB PF, and authorization by direction, amendment failure or inadequate resource in described message.

Further, described BPCF does call access control according to described tunnel information and resource information and comprises: BPCF receives resource authorization or resource modifying request message, judges whether the resource that can provide request or amendment according to current available resource situation; When judged result is the resource that can only provide component requests, BPCF returns resource authorization response or resource modifying response message to H (e) NB PF, and indicates inadequate resource in described message, and carries the resource information that BPCF can authorize.

Further, described BPCF does call access control according to described tunnel information and resource information and comprises: BPCF receives resource release message, according to tunnel information release related resource.

The technical problem to be solved in the present invention is to provide a kind of resource authorization method and system, by arranging the interface T1 being used for intercommunication strategy between SeGW and H (e) NB PF, realize user access administration and resource management, solve and uncontrollablely in correlation technique share same signing fixed network circuit but the problem that ensures of the signing QoS that the total demand that have selected the subscriber equipment of different PCRF is no more than this signing fixed network circuit, and then QoS control can be carried out to all UE accessed by base station from home, the QoS that the signing fixed network circuit making QoS aggregate demand be no more than base station from home access can provide.

Accompanying drawing explanation

Fig. 1 is that in prior art, under non-roaming scene, HeNB accesses the configuration diagram of EPS;

Fig. 2 is that in prior art, under non-roaming scene, HNB accesses the configuration diagram of UMTS by fixed network;

Fig. 3 a is a kind of configuration diagram of resource authorization system of the present invention;

Fig. 3 b is the another kind of configuration diagram of resource authorization system of the present invention;

Fig. 4 is the flow chart of resource authorization method of the present invention;

Fig. 5 is the flow chart that in the inventive method, SeGW reports ipsec tunnel information;

Fig. 6 is the process chart sending resource authorization or resource modifying message in the inventive method;

Fig. 7 is the flow chart that in the inventive method, BPCF carries out call access control when providing the resource of request;

Fig. 8 is the flow chart that in the inventive method, BPCF carries out call access control when not providing the resource of request;

Fig. 9 is the flow chart that in the inventive method, BPCF discharges related resource;

Figure 10 is the flow chart that in the inventive method, BPCF carries out call access control when inadequate resource.

Embodiment

Below in conjunction with accompanying drawing, technical solution of the present invention is described in further details.It should be noted that, when not conflicting, the embodiment in the application and the feature in embodiment can combine mutually.

For the defect of prior art, for 3GPP network and fixed network, need to set up a set of unified resource management mechanism, thus the QoS that the fixed network circuit that the QoS aggregate demand controlling the Operational Visit of all UE accessed by base station from home is no more than this HeNB access is contracted ensures, in other words, the resource management mechanism set up should be able to reasonably managing fixed network resource, rational management and control can be accomplished to user and business, ensure authorize set up GBR traffic can have enough bandwidth.For this reason, access on the framework basis of EPS or HNB by fixed network access UMTS at existing HeNB, the present invention by arranging interface between security gateway SeGW and home base station policy function entity H (e) NB PF (H (e) HB Policy Function), and intercommunication strategy, realize user access administration and resource management.

Fig. 3 a is a kind of configuration diagram of resource authorization system of the present invention, Fig. 3 b is the another kind of configuration diagram of resource authorization system of the present invention, shown in Fig. 3 a, framework is applicable to terminal and accesses EPS by HeNB, and framework shown in Fig. 3 b is applicable to terminal and accesses 3G system by HNB.As best shown in figures 3 a and 3b, resource authorization system of the present invention comprises the interface T1 arranged between security gateway SeGW, home base station policy function entity H (e) NBPF, Broadband Forum policy control functions entity B PCF and SeGW and H (e) NB PF, wherein

The signaling of SeGW on monitor-interface S1 or Iuh, when monitoring resource authorization, resource modifying or Resource Release Request message, SeGW passes through interface T1 and sends resource authorization, resource modifying or Resource Release Request message to H (e) NB PF, carries request mandate, amendment or the resource information discharged and tunnel information in described message; The call access control result of SeGW also for returning according to H (e) NB PF carries out admission processing;

H (e) NB PF is used for forwarding resource authorization, resource modifying or Resource Release Request message to BPCF; After receiving the call access control result that BPCF returns, send call access control result to SeGW;

BPCF is used for doing call access control according to tunnel information and resource information, and call access control result is returned to H (e) NB PF.

Further, resource authorization system of the present invention also comprises base station from home H (e) NB, and H (e) NB and SeGW sets up ipsec tunnel.

Alternatively, SeGW preserves tunnel information and H (e) NB identification information the tunnel information in IPsec tunnel and H (e) NB identification-information reporting to H (e) NB PF, H (e) NB PF by interface T1.Further alternatively, H (e) NB PF this information reporting to BPCF.Wherein, tunnel information comprises the IP address information of H (e) NB, H (e) NB identification information refers to the information that may be used for identifying H (e) NB on-position, as H (e) NB mark, H (e) NB address, cell ID, CSG etc.

In technique scheme, BPCF does call access control according to described tunnel information and resource information and relates to following several situation:

1, BPCF receives resource authorization or resource modifying request message, judges whether the resource that can provide request or amendment according to current available resource situation; When judged result is the resource that can provide request or amendment, BPCF returns resource authorization response or resource modifying response message to H (e) NB PF, and authorization by direction is successful or successfully modified in described message.Correspondingly, SeGW carries out admission processing according to call access control result and comprises: H (e) NB PF forwards the response of described resource authorization or resource modifying response message by interface T1 to SeGW, after SeGW receives the response of described resource authorization or resource modifying response message, SeGW sends resource authorization request or resource modifying request to H (e) NB, the resource information of authorizing through BPCF is carried in this request, radio-resource-configuration, H (e) NB returns resource authorization response or resource modifying response to core net.

2, BPCF receives resource authorization or resource modifying request message, judges whether the resource that can provide request or amendment according to current available resource situation; When judged result is the resource that cannot provide request or amendment, BPCF returns resource authorization response or resource modifying response message to H (e) NB PF, and authorization by direction, amendment failure or inadequate resource in described message.Correspondingly, SeGW carries out admission processing according to call access control result and comprises: H (e) NB PF forwards the response of described resource authorization or resource modifying response message by interface T1 to SeGW, after SeGW receives the response of described resource authorization or resource modifying response message, refuse this business, SeGW returns resource authorization response or resource modifying response to core net, and authorization by direction, amendment failure or inadequate resource in described message.

3, BPCF receives resource authorization or resource modifying request message, judges whether the resource that can provide request or amendment according to current available resource situation; When judged result is the resource that can only provide component requests, BPCF returns resource authorization response or resource modifying response message to H (e) NB PF, and indicates inadequate resource in described message, and carries the resource information that BPCF can authorize.Correspondingly, SeGW carries out admission processing according to call access control result and comprises: H (e) NB PF forwards the response of described resource authorization or resource modifying response message by interface T1 to SeGW, and SeGW seizes the resource of existing business according to the resource information that BPCF in response message can authorize.Wherein, the comprehensive factor of the prior art of SeGW, such as CSG and ARP etc., determine the resource seizing existing business, thus are new business foundation/amendment carrying.

4, BPCF receives resource release message, according to tunnel information release related resource, and returns resource release response message to H (e) NBPF.Correspondingly, SeGW carries out admission processing according to call access control result and comprises: H (e) NB PF returns resource release response message by interface T1 to SeGW, and H (e) NB returns resource release response to core net.

As can be seen from technique scheme, from the angle of interface T1, the interface T1 that the present invention is arranged between SeGW and H (e) NBPF has following effect:

1, for making SeGW the tunnel information in IPsec tunnel and H (e) NB identification-information reporting to H (e) NB PF;

2, for making SeGW send resource authorization, resource modifying or Resource Release Request message to H (e) NB PF;

3, after BPCF returns resource authorization, resource modifying or resource release response message, described resource authorization, resource modifying or resource release response message is forwarded for making H (e) NB PF to SeGW.

Fig. 4 is the flow chart of resource authorization method of the present invention, comprising:

Step 1, when H (e) NB powers on, after completing certification acquisition IP address, set up ipsec tunnel with SeGW, SeGW sends message by T1 interface to H (e) NB PF, comprises tunnel information and H (e) NB identification information in message.

Optionally, H (e) NB PF notifies this information of BPCF.

After step 2, user access EPS or 3G network, signaling on SeGW monitor-interface S1 or Iuh, when SeGW monitors resource authorization, resource modifying or resource release related signaling, SeGW sends resource authorization, resource modifying or Resource Release Request message by T1 interface to H (e) NB PF, the resource information carrying tunnel information in message and ask mandate, amendment or discharge, H (e) NB PF forwards resource authorization, resource modifying or Resource Release Request message to BPCF.

Wherein, in the resource authorization described in this step, resource modifying or Resource Release Request message, carry out the different trigger flow of resource authorization, resource modifying or resource release flow according to triggering core net, the related news in the corresponding corresponding flow process of meeting.

Step 3, BPCF do call access control according to tunnel information and resource information, and call access control result is returned to H (e) NB PF, H (e) NB PF returns call access control result to SeGW, and SeGW carries out admission processing according to described call access control result.

The technical scheme of resource authorization method of the present invention is described in detail below by specific embodiment.

First embodiment

Fig. 5 is the flow chart that in the inventive method, H (e) NB reports ipsec tunnel information, is suitable in EPS or 3G system.In technical scheme shown in Fig. 4, described step 1 comprises:

Step 11, H (e) NB power on, access fixed network, fixed network is that H (e) NB distributes a local IP address by related mechanism, and this address is as the outside ip address of the packet of ipsec tunnel encapsulation between follow-up H (e) NB and SeGW.

Step 12, H (e) NB and SeGW set up IPsec tunnel, to ensure the fail safe of data in transmitting procedure and integrality.

Step 13, SeGW by interface T1 the tunnel information in described IPsec tunnel and H (e) NB identification-information reporting to H (e) NB PF.

Step 14, H (e) NB PF preserve described tunnel information and H (e) NB identification information.

In the present embodiment, tunnel information and H (e) NB identification information namely inform H (e) NB PF by SeGW after H (e) NB powers on.

Alternatively, the present embodiment can further include: after H (e) NB PF receives tunnel information and H (e) NB identification information, H (e) NB PF this information reporting to BPCF, BPCF is by this tunnel information and/or H (e) NB identification information, judge the fixed network position at this H (e) NB place, as concrete line identification etc., and conclude the fixed network backhaul network (Backhaul) this H (e) NB place fixed network.In this process, BPCF may carry out with other network element in broadband access alternately, thus can obtain the resource applicable of the broadband line that H (e) NB accesses.By this flow process, H (e) NB PF and BBF BPCF can judge the position at this H (e) NB place, and concludes the fixed network Backhual at this HeNB place.

In technical scheme, tunnel information comprises the IP address information of H (e) NB, H (e) NB identification information refers to the information that may be used for identifying H (e) NB on-position, as H (e) NB mark, H (e) NB address, cell ID, CSG etc.

Second embodiment

In the present embodiment, the step 1 in technical scheme shown in Fig. 4 comprises:

Bring H (e) NB PF when SeGW sends resource authorization, resource modifying or Resource Release Request message in follow-up flow process with the first embodiment unlike H (e) the NB identification information of, the present embodiment.

3rd embodiment

Fig. 6 is the process chart sending resource authorization or resource modifying message in the inventive method, and in technical scheme shown in Fig. 4, described step 2 comprises:

Step 211, core net are triggered, and initiate resource authorization or resource modifying flow process.

In technical scheme, core net is EPS network or 3G network.For resource authorization or resource modifying, the triggering that core net is subject to includes but not limited to following situations: default bearing Establishing process in EPS network attachment flow process, the request of the EPS network terminal creates default bearing Establishing process in PDN connection, proprietary bearing activation flow process in EPS network, bearing modification flow process in EPS network, PDP context activation flow process in 3G network, PDP Context secondary activating flow process in 3G network, PDP context modification flow process in 3G network, switching flow in EPS internet and 3G network.

Step 212, core net send resource authorization or resource modifying request message to H (e) NB; The resource information of request mandate or resource modifying is carried, as beared information, qos policy information etc. in message.

For resource authorization or resource modifying request message, according to trigger flow different in step 211, there are the related news in corresponding corresponding flow process, such as,

In EPS network attachment flow process: initial context sets up request;

In EPS network PDN connection building process, dedicated bearing activate: carrying set up request (E-RAB sets up request);

The EPS network carrying is revised: bearing modification request;

Switch: handover request, re-positioning request;

In 3G network: RAB assignment request.

Signaling on step 213, SeGW monitor-interface S1 or Iuh, when monitoring resource authorization or resource modifying request message, SeGW is triggered.

Step 214, SeGW send resource authorization or resource modifying request message by interface T1 to H (e) NB PF, carry resource information and the tunnel information of request mandate or amendment in this message.

Step 215, H (e) NB PF forward resource authorization or resource modifying request message by interface S9* to BPCF.

In the present embodiment step 214 and 215, H (e) NB identification information in message, can also be carried.If flow process adopts the first embodiment above, SeGW have sent H (e) NB identification information to H (e) NB PF and BPCF, then no longer can be arranged in resource authorization or resource modifying request message by H (e) NB identification information in the present embodiment step 214 and 215 and bring H (e) NB PF and BPCF.If flow process adopts the second embodiment above, because H (e) NB PF and BPCF not yet obtains H (e) NB identification information, then need H (e) NB identification information to be arranged in resource authorization or resource modifying request message in the present embodiment step 214 and 215 to bring H (e) NB PF and BPCF.

4th embodiment

Fig. 7 is the flow chart that in the inventive method, BPCF carries out call access control when providing the resource of request, is suitable for the flow process triggering resource authorization or resource modifying in EPS or 3G system, and BPCF call access control is for accepting.In order to more clearly reflect technical scheme of the present invention, in flow process shown in Fig. 7, further comprises front and continued flow process.

In technical scheme shown in Fig. 4, described step 3 comprises:

Step 311, BPCF receive resource authorization or resource modifying request message, H (e) NB broadband access position is navigated to according to H (e) NB identification information, carry out resource and admission according to the broadband line current available resource situation that H (e) NB accesses, namely judge whether the resource that request or amendment can be provided.

In this step, judge whether that the resource that can provide request or amendment judges whether remaining available resources are more than or equal to request resource.If remaining available resources are more than or equal to request resource, then BPCF receives the request of H (e) NB PF, and will deduct request from broadband line current available resource; If remaining available resources are less than request, then BPCF refuses the request of H (e) NB PF.

Step 312, when judged result is the resource that can provide request or amendment, BPCF returns resource authorization by interface S9* to H (e) NB PF and responds or resource modifying response message, and authorization by direction is successful or successfully modified in described message.

Step 313, H (e) NB PF forward the response of described resource authorization or resource modifying response message by interface T1 to SeGW.

After step 314, SeGW receive the response of described resource authorization or resource modifying response message, SeGW sends resource authorization request or resource modifying request to H (e) NB, carries the resource information of authorizing through BPCF in this request.

Step 315, radio-resource-configuration.

Step 316, H (e) NB return resource authorization response or resource modifying response to core net.

In the present embodiment, resource authorization or resource modifying request message, according to trigger flow different in the 3rd embodiment step 211, have the related news in corresponding corresponding flow process, such as,

In EPS network attachment flow process: initial context sets up response;

In EPS network PDN connection building process, dedicated bearing activate: carrying set up response (E-RAB sets up request);

The EPS network carrying is revised: bearing modification responds;

Switch: handoff response, relocation response;

In 3GEPS network: RAB assigns response.

Step 317, the flow process of triggers resource mandate or resource modifying of continuing.

5th embodiment

Fig. 8 is the flow chart that in the inventive method, BPCF carries out call access control when not providing the resource of request, is suitable for the flow process triggering resource authorization or resource modifying in EPS or 3G system, and BPCF call access control is refusal.In order to more clearly reflect technical scheme of the present invention, in flow process shown in Fig. 7, further comprises front and continued flow process.

In technical scheme shown in Fig. 4, described step 3 comprises:

Step 321, BPCF receive resource authorization or resource modifying request message, H (e) NB broadband access position is navigated to according to H (e) NB identification information, carry out resource and admission according to the broadband line current available resource situation that H (e) NB accesses, namely judge whether the resource that request or amendment can be provided.

Step 322, when judged result is the resource that cannot provide request or amendment, BPCF returns resource authorization response or resource modifying response message to H (e) NB PF, and authorization by direction, amendment failure or inadequate resource in described message.

Step 323, H (e) NB PF forward the response of described resource authorization or resource modifying response message by interface T1 to SeGW.

Step 324, SeGW refuse this business after receiving the response of described resource authorization or resource modifying response message.

Step 325, SeGW return resource authorization response or resource modifying response to core net, and authorization by direction, amendment failure or inadequate resource in described message.

In the present embodiment, resource authorization response or resource modifying response message, according to trigger flow different in the 3rd embodiment step 211, have the related news in corresponding corresponding flow process, such as,

In EPS network attachment flow process: failure of establishing initial context;

In EPS network PDN connection building process, dedicated bearing activates: response (E-RAB sets up request) is set up in carrying, carries the failed carrying of foundation in message;

The EPS network carrying is revised: bearing modification responds, and carries the carrying that amendment is failed in message;

Switch: handoff failure, reorientation failure;

In 3G network: RAB assigns response, carry in message and set up unsuccessfully or revise failed carrying.

Step 326, the flow process of triggers resource mandate or resource modifying of continuing.

6th embodiment

Fig. 9 is the flow chart that in the inventive method, BPCF discharges related resource, is suitable in EPS or 3G system the flow process triggering resource release.This flow process includes the flow process of step 2 and step 3 in technical scheme shown in Fig. 4.

Step 221, core net are triggered, and initiate resource release flow.

The triggering that core net is subject to includes but not limited to following situations: Detach flow process, dedicated bearing deactivation flow process, PDP Context deactivation flow process.

Step 222, core net send Resource Release Request message to H (e) NB, carry the resource information of request resource release, as qos policy information etc. in message.

Resource release message described in this step, according to different trigger flow, the related news in the corresponding corresponding flow process of meeting.

Step 223, SeGW forward Resource Release Request message to H (e) NB.

Step 224, Release radio resource.

Signaling on step 225, SeGW monitor-interface S1 or Iuh, when monitoring Resource Release Request message, SeGW is triggered.

Step 226, SeGW send Resource Release Request message by interface T1 to H (e) NB PF, carry resource information (as qos policy information) and tunnel information in message.Alternatively, H (e) NB identification information can also be comprised.

Step 227, H (e) NB PF forward Resource Release Request message by interface S9* to BPCF.

Step 331, BPCF receive Resource Release Request message, according to tunnel information release related resource.

Step 332, BPCF return resource release response message by interface S9* to H (e) NB PF.

Step 333, H (e) NB PF return resource release response message by interface T1 to SeGW.

Step 334, H (e) NB return resource release response to core net.

In practical application, step 225 does not need just to start after step 224 to perform, can with step 223 executed in parallel, step 334 just can perform after step 224, does not need to wait until that step 333 terminates.

7th embodiment

Figure 10 is the flow chart that in the inventive method, BPCF carries out call access control when inadequate resource, is suitable for the flow process triggering resource authorization or resource modifying in EPS or 3G system, and BPCF call access control is inadequate resource.In order to more clearly reflect technical scheme of the present invention, in flow process shown in Fig. 7, further comprises front and continued flow process.

In technical scheme shown in Fig. 4, described step 3 comprises:

Step 341, BPCF receive resource authorization or resource modifying request message, H (e) NB broadband access position is navigated to according to H (e) NB identification information, carry out resource and admission according to the broadband line current available resource situation that H (e) NB accesses, namely judge whether the resource that request or amendment can be provided.

Step 342, when judged result is the resource that can only provide component requests, BPCF returns resource authorization response or resource modifying response message by interface S9* to H (e) NB PF, and inadequate resource is indicated in described message, and carry fixed network resource situation, i.e. the resource that can authorize of BPCF.

Step 343, H (e) NB PF forward the response of described resource authorization or resource modifying response message by interface T1 to SeGW.

Step 344, SeGW seize the resource of existing business according to the resource information that BPCF in response message can authorize.

In this step, the comprehensive factor of the prior art of SeGW, such as CSG and ARP etc., determine the resource seizing existing business, thus are new business foundation/amendment carrying.Relate to following situation:

(a1) if the pattern that H (e) NB accesses is open mode, other GBR that other user that other GBR that this carrying and this user oneself are set up is carried according to ARP and accessed by same broadband line by SeGW sets up carries and compares, if this carrying cannot seize other bearing resource, then perform the step 324 in the 5th embodiment and follow-up flow process thereof.If this carrying can seize the resource of other carrying, and the resource that resource of other carrying and the delegatable resource sum that returns of BPCF are more than or equal to this carrying request or amendment (mainly refer to and ask to increase resource) herein can be seized, then perform step 345 and subsequent step, SeGW needs to notify that core net release is preempted the resource of user simultaneously; Otherwise, then the step 324 in the 5th embodiment and follow-up flow process thereof is performed.

(a2) if the pattern that H (e) NB accesses is mixed mode, and the member relation of the UE of this carrying correspondence is non-CSG user

(a21) if other GBR having this user oneself foundation carries or carried by other GBR that other non-CSG user that same broadband line accesses sets up, so carrying and other to carry according to ARP and compare by SeGW, if this carrying cannot seize the resource of other carrying, then perform the step 324 in the 5th embodiment and follow-up flow process thereof.If this carrying can seize the resource of other carrying, and the resource that resource of other carrying and the delegatable resource sum that returns of BPCF are more than or equal to this carrying request or amendment (mainly refer to and ask to increase resource) herein can be seized, then perform step 345 and subsequent step, SeGW needs to notify that core net release is preempted the resource of user simultaneously; Otherwise, then the step 324 in the 5th embodiment and follow-up flow process thereof is performed.

(a22) other GBR if there is no having this user oneself to set up is carried or is carried by other GBR that other non-CSG user that same broadband line accesses sets up, then perform the step 324 in the 5th embodiment and follow-up flow process thereof.

(a3) if the access module of H (e) NB is mixed mode, and the member relation of the UE of this carrying correspondence is CSG user

(a31) if other GBR having other the non-CSG user's foundation accessed by same broadband line is carried, and the resource that delegatable resource sum that the resource of the carrying that other non-CSG user sets up and BPCF return is more than or equal to this carrying request or amendment (mainly refer to and ask to increase resource) herein can be seized, then perform step 345 and subsequent step, SeGW needs to notify that core net release is preempted the resource of user simultaneously.The delegatable resource sum that the resource of the carrying that other non-CSG user sets up and BPCF return if can seize is less than the resource of this carrying request or amendment (mainly refer to and ask to increase resource) herein, other CSG user that so other GBR that this carrying and this user oneself are set up is carried according to ARP or accessed by same broadband line by SeGW further set up other carry compare fruit, if this carrying cannot seize the resource of other carrying, then perform the step 324 in the 5th embodiment and follow-up flow process thereof; If this carrying can seize the resource of other carrying that CSG user sets up, and the resource that resource of other carrying and the delegatable resource sum that returns of BPCF are more than or equal to this carrying request or amendment (mainly refer to and ask to increase resource) herein can be seized, then perform step 345 and subsequent step, SeGW needs to notify that core net release is preempted the resource of user simultaneously.

(a32) other GBR set up by the non-CSG user of same signing fixed network circuit access is if there is no had to carry, so SeGW according to ARP, other GBR that carrying is set up with this user oneself is carried or is set up by other CSG user that same broadband line accesses other carry and compare, if this carrying cannot seize the resource of other carrying, then perform the step 324 in the 5th embodiment and follow-up flow process thereof.If this carrying can seize the resource of other carrying, and the resource that resource of other carrying and the delegatable resource sum that returns of BPCF are more than or equal to this carrying request or amendment (mainly refer to and ask to increase resource) herein can be seized, then perform step 345 and subsequent step, SeGW needs to notify that core net release is preempted the resource of user simultaneously.

(a4) if the access module of H (e) NB is closed mode, the GBR that other user that so other GBR that this carrying and this user oneself are set up is carried according to ARP or accessed by same broadband line by HeNB GW sets up carries and compares, if this carrying cannot seize the resource of other carrying, then perform the step 324 in the 5th embodiment and follow-up flow process thereof.If this carrying can seize the resource of other carrying, and the resource that resource of other carrying and the delegatable resource sum that returns of BPCF are more than or equal to this carrying request or amendment (mainly refer to and ask to increase resource) herein can be seized, then perform step 345 and subsequent step, SeGW needs to notify that core net release is preempted the resource of user simultaneously.

Step 345, SeGW send resource authorization request or resource modifying request to H (e) NB.

Step 346, radio-resource-configuration.

Step 347, H (e) NB return resource authorization response or resource modifying response to core net.

Step 348, when core net carries out being preempted resource release, as shown in the 6th embodiment, can trigger SeGW and notify that BPCF discharges corresponding fixed network resource, SeGW notifies H (e) NB PF releasing resource by interface T1.

Step 349, H (e) NB PF are by S9* interface notification BPCF releasing resource.

Step 350, fixed network release related resource.

Step 351, the flow process of triggers resource mandate or resource modifying of continuing.

In the present embodiment, step 348 ~ step 350 by core net releasing resource trigger flow, can walk abreast with step 345 ~ step 347 and carry out after step 344.

In sum, the above embodiment of the present invention by arranging the interface T1 being used for intercommunication strategy between SeGW and H (e) NB PF, realize user access administration and resource management, solve and uncontrollablely in correlation technique share same signing fixed network circuit but the problem that ensures of the signing QoS that the total demand that have selected the subscriber equipment of different PCRF is no more than this signing fixed network circuit, and then QoS control can be carried out to all UE accessed by base station from home, the QoS that the signing fixed network circuit making QoS aggregate demand be no more than base station from home access can provide.

Obviously, those skilled in the art should be understood that, above-mentioned of the present invention each module or each step can realize with general calculation element, they can concentrate on single calculation element, or be distributed on network that multiple calculation element forms, alternatively, they can realize with the executable program code of calculation element, thus, they can be stored and be performed by calculation element in the storage device, and in some cases, step shown or described by can performing with the order be different from herein, or they are made into each integrated circuit modules respectively, or the multiple module in them or step are made into single integrated circuit module to realize.Like this, the present invention is not restricted to any specific hardware and software combination.

The foregoing is only the preferred embodiments of the present invention, be not limited to the present invention, for a person skilled in the art, the present invention can have various modifications and variations.Within the spirit and principles in the present invention all, any amendment done, equivalent replacement, improvement etc., all should be included within protection scope of the present invention.

Claims

1. a resource authorization method, is characterized in that, is provided with interface T1, comprises between security gateway SeGW and home base station policy function entity H (e) NB PF:

2. resource authorization method as claimed in claim 1, is characterized in that, also comprise the step that base station from home H (e) NB and SeGW sets up ipsec tunnel before described steps A.

3. resource authorization method as claimed in claim 1, is characterized in that, also comprise H (e) NB identification information in described resource authorization, resource modifying or Resource Release Request message.

4. resource authorization method as claimed in claim 3, it is characterized in that, described tunnel information comprises the IP address information of H (e) NB, and described H (e) NB identification information is for identifying H (e) NB on-position.

5. resource authorization method as claimed in claim 2, it is characterized in that, described H (e) NB and SeGW sets up ipsec tunnel and comprises:

H (e) NB powers on, and completes certification and obtains IP address;

H (e) NB and SeGW sets up ipsec tunnel.

6. resource authorization method as claimed in claim 5, it is characterized in that, described H (e) NB and SeGW sets up ipsec tunnel and also comprises:

SeGW by interface T1 the tunnel information of described ipsec tunnel and H (e) NB identification-information reporting to H (e) NB PF;

7. resource authorization method as claimed in claim 6, it is characterized in that, described H (e) NB and SeGW sets up ipsec tunnel and also comprises: after described H (e) NB PF receives tunnel information and H (e) NB identification information, by this information reporting to BPCF.

8. resource authorization method as claimed in claim 1, it is characterized in that, described steps A comprises:

9. resource authorization method as claimed in claim 1, it is characterized in that, described steps A comprises:

Core net is triggered, and initiates resource release flow;

SeGW forwards Resource Release Request message to H (e) NB;

Release radio resource;

H (e) NB PF forwards Resource Release Request message by interface S9* to BPCF.

10. the resource authorization method as described in as arbitrary in claim 1 ~ 8, it is characterized in that, described step B comprises:

Radio-resource-configuration;

Continue the flow process of triggers resource mandate or resource modifying.

11. as arbitrary in claim 1 ~ 8 as described in resource authorization method, it is characterized in that, described step B comprises:

When judged result is the resource that cannot provide request or amendment, BPCF returns resource authorization response or resource modifying response message to H (e) NB PF, and in described message, indicate authorization failure, amendment failure or inadequate resource;

After SeGW receives the response of described resource authorization or resource modifying response message, refusal provides the resource of request or amendment;

SeGW returns resource authorization response or resource modifying response to core net, and in described message, indicate authorization failure, amendment failure or inadequate resource;

Continue the flow process of triggers resource mandate or resource modifying.

12. as arbitrary in claim 1 ~ 8 as described in resource authorization method, it is characterized in that, described step B comprises:

When judged result is the resource that can only provide component requests, BPCF returns resource authorization response or resource modifying response message by interface S9* to H (e) NB PF, and indicate inadequate resource in described message, and carry the resource information that BPCF can authorize;

Radio-resource-configuration;

13. resource authorization methods as claimed in claim 12, it is characterized in that, described SeGW seizes in the resource of existing business according to the resource information that described BPCF can authorize, and the comprehensive factor of SeGW comprises: the pattern that H (e) NB accesses, ensure bandwidth GBR and closed subscriber group (CSG).

14. resource authorization methods as claimed in claim 12, is characterized in that, also comprise:

SeGW notifies H (e) NB PF releasing resource by interface T1;

H (e) NB PF is by S9* interface notification BPCF releasing resource;

Fixed network release related resource;

Continue the flow process of triggers resource mandate or resource modifying.

15. as claim 1 ~ 7,9 arbitrary as described in resource authorization method, it is characterized in that, described step B comprises:

BPCF returns resource release response message by interface S9* to H (e) NB PF;

H (e) NB PF returns resource release response message by interface T1 to SeGW;

H (e) NB returns resource release response to core net.

16. 1 kinds of resource authorization systems, it is characterized in that, comprise the interface T1 arranged between security gateway SeGW, home base station policy function entity H (e) NB PF, Broadband Forum policy control functions entity B PCF and SeGW and H (e) NB PF, wherein

17. resource authorization systems as claimed in claim 16, is characterized in that, also comprise base station from home H (e) NB, and described H (e) NB and SeGW sets up ipsec tunnel.

18. resource authorization systems as described in claim 16 or 17, it is characterized in that, described BPCF does call access control according to described tunnel information and resource information and comprises: BPCF receives resource authorization or resource modifying request message, judges whether the resource that can provide request or amendment according to current available resource situation; When judged result is the resource that can provide request or amendment, BPCF returns resource authorization response or resource modifying response message to H (e) NB PF, and authorization by direction is successful or successfully modified in described message.

19. resource authorization systems as described in claim 16 or 17, it is characterized in that, described BPCF does call access control according to described tunnel information and resource information and comprises: BPCF receives resource authorization or resource modifying request message, judges whether the resource that can provide request or amendment according to current available resource situation; When judged result is the resource that cannot provide request or amendment, BPCF returns resource authorization response or resource modifying response message to H (e) NB PF, and in described message, indicate authorization failure, amendment failure or inadequate resource.

20. resource authorization systems as described in claim 16 or 17, it is characterized in that, described BPCF does call access control according to described tunnel information and resource information and comprises: BPCF receives resource authorization or resource modifying request message, judges whether the resource that can provide request or amendment according to current available resource situation; When judged result is the resource that can only provide component requests, BPCF returns resource authorization response or resource modifying response message to H (e) NB PF, and indicates inadequate resource in described message, and carries the resource information that BPCF can authorize.

21. resource authorization systems as described in claim 16 or 17, it is characterized in that, described BPCF does call access control according to described tunnel information and resource information and comprises: BPCF receives resource release message, according to tunnel information release related resource.