CN102316529B

CN102316529B - Method and system for controlling service access

Info

Publication number: CN102316529B
Application number: CN201010265934.XA
Authority: CN
Inventors: 毕以峰; 周晓云; 宗在峰; 霍玉臻; 蒋陶
Original assignee: ZTE Corp
Current assignee: Global Innovation Polymerization LLC
Priority date: 2010-07-09
Filing date: 2010-08-19
Publication date: 2015-06-03
Anticipated expiration: 2030-08-19
Also published as: CN102316529A; WO2012003781A1

Abstract

The invention discloses a method and system for controlling service access. The method comprises the steps: a security gateway sends information of a security tunnel and a resource reconfiguration request initiated by a home base station after receiving policy information sent by a wireless network side to a home base station policy function entity; and the home base station policy function entity informs the information of the security tunnel and the resource reconfiguration request of a fixed network policy control function entity, the fixed network policy control function entity judges whether a fixed network link corresponding to the information of the security tunnel meets the contents of the resource reconfiguration request and feeds back a judgment result to the home base station, and the home base station makes an access control policy according to a feedback result. According to the invention, performance of controlling the service access by the system can be enhanced and resource management capacity of the system is improved.

Description

The method and system that a kind of service control is received

Technical field

The present invention relates to wireless communication field, in particular to the method and system that a kind of business admission controls.

Background technology

Third generation partner program (3rd Generation Partnership Project, referred to as 3GPP) grouping system (the Evolved Packet System of evolution, referred to as EPS) by Universal Terrestrial Radio Access Network (the Evolved Universal Terrestrial Radio Access Network of evolution, referred to as E-UTRAN), mobile management unit (Mobility Management Entity, referred to as MME), gateway (Serving Gateway, referred to as S-GW), grouped data network gateway (Packet DataNetwork Gateway, referred to as P-GW), home subscriber server (Home Subscriber Server, referred to as HSS) composition, Fig. 1 is according to evolution Home eNodeB (the Home evolved NodeB under the non-roaming scene of correlation technique, referred to as HeNB) access the configuration diagram of EPS, the framework that HeNB under roaming scence (local route or local break-out) accesses EPS is mainly reflected on EPS network, little with this invention relation, here do not introduce.

MME and EUTRAN, S-GW are connected with femto gateway (HeNB GW), the related work of the chains of command such as the process of responsible mobile management, Non-Access Stratum signaling and the contextual management of user's mobile management; S-GW is the accessing gateway equipment be connected with E-UTRAN, forwarding data between E-UTRAN and P-GW, and is responsible for carrying out buffer memory to pending datas such as pagings; P-GW is then the borde gateway of EPS and packet data network (Packet Data Network, referred to as PDN) network, be responsible for PDN access and between EPS and PDN the function such as forwarding data.

If the charging of EPS support policy controls (Policy and Charging Control, referred to as PCC), then "Policy and Charging Rules Function (Policy and Charging Rules Function, referred to as PCRF) carry out formulation that is tactful and charging regulation, it is by interface Rx and carrier network agreement (Internet Protocol, referred to as IP) application function (Application Function in business network, referred to as AF) be connected, obtain business information, for generating the business information of PCC strategy.When S5 interface between S-GW and P-GW adopts GTP agreement, strategy and charge execution function (Policy and Charging Enforcement Function is resided in P-GW, referred to as PCEF), by Gx interface exchange message between PCRF and P-GW, be responsible for the foundation initiating carrying, amendment and release, ensure service quality (the Quality of Service of business datum, referred to as QoS), and carry out charging control.When the S5 interface of S-GW and P-GW adopts proxy-mobile IP (Proxy Mobile IP, referred to as PMIP) time, resident bearing binding and event reporting function (Bearer Binding and Event ReportFunction in S-GW, referred to as BBERF), and by Gxc interface exchange message between S-GW and PCRF, be responsible for by BBERF the foundation initiating carrying, amendment and release, ensure the service quality of business datum, carry out charging by PCEF and control.

EPS supports the access of HeNB, and HeNB is a kind of small-sized, lower powered base station, is deployed in the indoor place such as family and office.Closed user group (Closed Subscriber Group, referred to as CSG) is the new ideas proposed after introducing Home eNodeB.The user of usual one family or an enterprises forms a closed user group, and this closed user group CSG ID identifies.For the Home eNodeB of user's service in this closed user group has identical CSG ID.When a closed user group is only served by one family base station, this closed user group also directly can adopt Home eNodeB to identify (such as, BS ID) and identify.According to the gerentocratic wish of Home eNodeB, CSG user and/or non-CSG user can distinguish different grades, and different then its service priority enjoyed of priority, enjoys service quality and class of service can be different.User by contracting the Home eNodeB that can be linked into corresponding to multiple closed user group with operator, such as, the office space, family etc. of user.Therefore the concept allowing closed subscriber group list is introduced.This list is kept in the terminal of user and the user data server of network side.

The using forestland of Home eNodeB is divided into three kinds: closed mode, mixed mode and open mode.When Home eNodeB is closed mode time, only have CSG contracted user belonging to this Home eNodeB can access this base station and enjoy the business that base station provides.When Home eNodeB is open mode time, any operator contracted user can access this base station, and Home eNodeB is now equal to macro base station and uses.When Home eNodeB is mixed mode time, the any operator contracted user of same permission or roamer access use, but rank that will be different according to the data separation of the whether signing CSG of user, that is the user of this CSG signing has higher service priority when use mixed type Home eNodeB, enjoys better service quality and class of service.

When user carries out initialization access time, the closed user group of the permission access that the user data server of network side can be contracted user is sent to the Mobility Management Entity of core net.Core network mobility management entity can utilize this information to carry out access control to UE.If UE is from undelegated closed mode Home eNodeB access core net, so core net can refuse the access of such user.

HeNB accesses the core net of EPS usually by the fixed network circuit rented, as shown in Figure 1.In order to ensure the safety of access, introduce security gateway (Security Gateway, referred to as SeGW) in core net and shield, employing IPSec encapsulates by the data between HeNB and SeGW.The ipsec tunnel that HeNB can be set up by HeNB and SeGW be directly connected to MME and S-GW of core net, also can be connected to MME and S-GW by SeGW again, and namely HeNB GW is an optional network element, but whether this network element adopts and do not affect this invention.Meanwhile, in order to realize managing HeNB, introduce network element home base station management system (Home eNodeB Management System, referred to as HeMS), because little with relation of the present invention, thus not shown in FIG..

In addition, universal mobile telecommunications system (Universal Mobile Telecommunications System, referred to as UMTS) supports the access of Home eNodeB HNB (Home NodeB).Fig. 2 is the configuration diagram accessing UMTS according to the HNB under the non-roaming scene of correlation technique, and the framework signal that the HNB under roaming scence accesses UMTS is similar, does not do tired stating at this.Framework in Fig. 2 and the framework of Fig. 1 similar, unlike, use service universal packet wireless business business support node (ServingGeneral Packet Radio Service Support Node, referred to as SGSN) instead of S-GW, ggsn (Gateway General Packet Radio ServiceSupporting Node, referred to as GGSN) is used to instead of P-GW.

The QoS of fixed network circuit due to HeNB/HNB access is normally subject to the owner of HeNB/HNB and the signing restriction of fixed network operator.Therefore, when the usual HeNB/HNB of 3GPP UE accesses 3GPP core net access service, required QoS can not exceed the signing QoS of the fixed network circuit that fixed network operator can provide.Otherwise the QoS of UE access service will can not get ensureing, particularly ensure that the business of bit rate (Guaranteed Bitrate, referred to as GBR) is all the more so.Therefore, for 3GPP network and fixed network, a set of unified mechanism of control must be had to carry out the receiving of management and control fixed network resource and business.For example: in time having new business to initiate, fixed network needs to ensure enough resource/bandwidth to support this business, if fixed network can not provide this resource/bandwidth, this business just can not be initiated, even if 3GPP can provide enough resource/bandwidth, as long as fixed network can not ensure resource/bandwidth, this business (particularly GBR) still can not be guaranteed.Thus the QoS that the fixed network circuit that the QoS aggregate demand controlling the Operational Visit of all UE accessed by HeNB/HNB is no more than this HeNB/HNB access is contracted ensures, in other words, can reasonably managing fixed network resource, rational management and control can be accomplished to user and business, ensure authorize set up GBR traffic can have enough bandwidth.

In current flow of research, there is the tentative programme of some architectural.As shown in Figure 1 (HeNB situation).Interconnection network element HeNB PF (Policy Function, policy functional entity), be arranged at 3GPPHeNB subsystem (by SeGW, HeNB GW and other network elements, the formations such as such as HeMS) and BBF BPCF (BroadBand Forum Policy Control Function, Broadband Forum policy control functions entity) between, realize business admission management and resource management.

Under HeNB scene, specifically how to realize business admission management and resource management, and how management resource when scene accesses to HNB, be the problem needing to solve, the present invention is exactly the solution proposed for this problem.

Summary of the invention

In order to solve the problems of the technologies described above, the invention provides the method and system that a kind of service control is received, improve the performance of Systematical control business admission.

In order to solve the problems of the technologies described above, the invention provides a kind of method that business admission controls, comprising: the resource reconfiguration request that security gateway is initiated after the information of secure tunnel and described Home eNodeB being received the policy information that wireless network side issues is sent to Home eNodeB policy functional entity; The information of described secure tunnel and described resource reconfiguration request notify to fixed network policy control functions entity by described Home eNodeB policy functional entity, described fixed network policy control functions entity judges whether fixed network link corresponding to the information of described secure tunnel can meet the content of described resource reconfiguration request, and judged result is fed back to described Home eNodeB, Home eNodeB makes call access control decision-making according to described feedback result.

Further, said method can also have following characteristics:

After described security gateway and described Home eNodeB set up secure tunnel, set up the special session with Home eNodeB policy functional entity, and in the process setting up this special session, described secure tunnel information is sent to described Home eNodeB policy functional entity, or after setting up secure tunnel with described Home eNodeB, only send described secure tunnel information and be sent to described Home eNodeB policy functional entity; After described security gateway receives described resource reconfiguration request, this resource reconfiguration request is mapped in the special session corresponding with the secure tunnel at described security gateway place and is sent to described Home eNodeB policy functional entity, or after receiving described resource reconfiguration request, this resource reconfiguration request is conventionally routed directly to described Home eNodeB policy functional entity.

Further, said method can also have following characteristics:

The information of described secure tunnel, after the described resource reconfiguration request receiving the transmission of described Home eNodeB, is together sent to described Home eNodeB policy functional entity together with described resource reconfiguration request by described security gateway.

Further, said method can also have following characteristics:

It is one in following message reciprocal process that wireless network side issues process that described policy information and Home eNodeB initiate resource reconfiguration request: Home eNodeB described in wireless network side direction issues carrying and sets up request message and carry policy information in this message, and described Home eNodeB sends resource reconfiguration request and is used for request dispatching resource; Home eNodeB described in wireless network side direction issues bearing modification request message and carry policy information in this message, and described Home eNodeB sends resource reconfiguration request and redistributes or releasing resource for request; Home eNodeB described in wireless network side direction issues session management request message and carry policy information in this message, and described Home eNodeB sends resource reconfiguration request and is used for request dispatching or redistributes resource; Home eNodeB described in wireless network side direction issues carrying deactivation request message and carry policy information in this message, and described Home eNodeB sends resource release request for asking releasing resource.

Further, said method can also have following characteristics:

Described fixed network policy control functions entity judges that the content whether fixed network link corresponding to the information of described secure tunnel can meet described resource reconfiguration request refers to: described fixed network policy control entity judges whether the link of described fixed network can provide described Home eNodeB the required bandwidth resources of distributing or redistributing, or judges whether the link of described fixed network accepts to discharge the bandwidth resources of the required release of described Home eNodeB.

Further, said method can also have following characteristics:

Described Home eNodeB is made call access control decision-making according to described feedback result and is referred to: if the fixed network link that feedback result indicates the information of described secure tunnel corresponding can meet the content of described resource reconfiguration request, and described Home eNodeB receives new task; Otherwise, described Home eNodeB refusal new business.

Further, said method can also have following characteristics:

When fixed network link corresponding to the information of described secure tunnel can not meet the content of described resource reconfiguration request, described Home eNodeB determines to seize existing business resource, and notifies described policy control functions entity.

In order to solve the problems of the technologies described above, the invention provides the system that a kind of business admission controls, this system comprises wireless network side apparatus, security gateway, Home eNodeB, Home eNodeB policy functional entity, fixed network policy control functions entity; Described wireless network side apparatus, for Home eNodeB distributing policy information; Described Home eNodeB, for initiating resource reconfiguration request after receiving the policy information that wireless network side apparatus issues; Also whether can meet the result of the content of described resource reconfiguration request for the fixed network link that the information of the described secure tunnel according to described fixed network policy control functions Entity feedback is corresponding, make call access control decision-making; Described security gateway, for being sent to Home eNodeB policy functional entity by the information of secure tunnel and described resource reconfiguration request; Described Home eNodeB policy functional entity, for the information of described secure tunnel and described resource reconfiguration request notice to fixed network policy control functions entity; Described fixed network policy control functions entity, for judging according to the information of described secure tunnel whether fixed network link corresponding to the information of described secure tunnel can meet the content of described resource reconfiguration request, and feeds back to described Home eNodeB by judged result.

Further, said system can also have following characteristics:

Described security gateway, also for after setting up secure tunnel with described Home eNodeB, set up the special session with Home eNodeB policy functional entity, and in the process setting up this special session, described secure tunnel information is sent to described Home eNodeB policy functional entity, or after setting up secure tunnel with described Home eNodeB, only send described secure tunnel information and be sent to described Home eNodeB policy functional entity; Also for after receiving described resource reconfiguration request, this resource reconfiguration request is mapped in the special session corresponding with the secure tunnel at described security gateway place and is sent to described Home eNodeB policy functional entity, or after receiving described resource reconfiguration request, this resource reconfiguration request is conventionally routed directly to described Home eNodeB policy functional entity.

Further, said system can also have following characteristics:

Described security gateway, also for after the described resource reconfiguration request receiving the transmission of described Home eNodeB, together sends to described Home eNodeB policy functional entity by the information of described secure tunnel together with described resource reconfiguration request.

Further, said system can also have following characteristics:

Described Home eNodeB, also for when knowing that the link of described fixed network can not provide bandwidth needed for described Home eNodeB, determining to seize fixed network existing business resource, and seizing successfully, notifying described policy control functions entity.

Further, said system can also have following characteristics:

Described wireless network side apparatus comprises equipment of the core network and the evolution femto gateway of the grouping system of evolution; Or described wireless network side apparatus comprises universal mobile telecommunications system equipment of the core network and femto gateway.

In order to solve the problem, based on another aspect of the present invention, additionally provide a kind of method that business admission controls, comprise, secure tunnel information is sent to Home eNodeB policy functional entity by security gateway, described Home eNodeB policy functional entity by the message notice of described secure tunnel to fixed network policy control functions entity; Home eNodeB initiates resource reconfiguration request to Home eNodeB policy functional entity after receiving the policy information that wireless network side issues, described Home eNodeB policy functional entity by the context notification of described resource reconfiguration request to fixed network policy control functions entity; Described fixed network policy control functions entity judges whether fixed network link corresponding to the information of described secure tunnel can meet the content of described resource reconfiguration request, and judged result is fed back to described Home eNodeB, Home eNodeB makes call access control decision-making according to described feedback result.

Further, the message notice of described secure tunnel in the process of fixed network policy control functions entity, also comprises by described Home eNodeB policy functional entity: set up intercommunication strategy session between Home eNodeB policy functional entity and fixed network policy control functions entity.

Further, described secure tunnel information comprises:

The mark of the end points Home eNodeB of secure tunnel, outer IP address or outer IP address add the corresponding relation that port numbers, the mark of Home eNodeB and outer IP address or IP address add port numbers; Or,

Internal layer IP address or internal layer IP address add port numbers, outer IP address or outer IP address and add port numbers, and ectonexine IP address or IP address add the corresponding relation of port numbers; Or,

The mark of the end points Home eNodeB of secure tunnel, internal layer IP address or internal layer IP address add port numbers, outer IP address or outer IP address and add port numbers, the mark of Home eNodeB and outer IP address or IP address and add the corresponding relation that the corresponding relation of port numbers, ectonexine IP address or IP address add port numbers.

Further, described Home eNodeB policy functional entity by the context notification of described resource reconfiguration request to fixed network policy control functions entity, specifically comprise: the mark that described Home eNodeB policy functional entity adds the internal layer IP address of resource reconfiguration request or internal layer IP address port numbers or Home eNodeB becomes outer IP address or outer IP address according to the secure tunnel information MAP that it stores and adds port numbers, then the content of resource reconfiguration request and outer IP address thereof or outer IP address are added port numbers be together sent to fixed network policy control functions entity; Or, described Home eNodeB policy functional entity adds the mark of port numbers or Home eNodeB according to the internal layer IP address of resource reconfiguration request or internal layer IP address, by the content map of resource reconfiguration request on the intercommunication strategy session of correspondence, send it to fixed network policy control functions entity.

Further, wireless network side issues the process that described policy information and Home eNodeB initiate resource reconfiguration request is one in following message reciprocal process:

Home eNodeB described in wireless network side direction issues carrying and sets up request message and carry policy information in this message, and described Home eNodeB sends resource reconfiguration request and is used for request dispatching resource;

Home eNodeB described in wireless network side direction issues bearing modification request message and carry policy information in this message, and described Home eNodeB sends resource reconfiguration request and redistributes or releasing resource for request;

Home eNodeB described in wireless network side direction issues session management request message and carry policy information in this message, and described Home eNodeB sends resource reconfiguration request and is used for request dispatching or redistributes resource;

Home eNodeB described in wireless network side direction issues carrying deactivation request message and carry policy information in this message, and described Home eNodeB sends resource release request for asking releasing resource.

Further, described fixed network policy control functions entity judges that the content whether fixed network link corresponding to the information of described secure tunnel can meet described resource reconfiguration request refers to: described fixed network policy control entity judges whether the link of described fixed network can provide described Home eNodeB the required bandwidth resources of distributing or redistributing, or judges whether the link of described fixed network accepts to discharge the bandwidth resources of the required release of described Home eNodeB.

Further, described Home eNodeB is made call access control decision-making according to described feedback result and is referred to: if the fixed network link that feedback result indicates the information of described secure tunnel corresponding can meet the content of described resource reconfiguration request, and described Home eNodeB receives new task; Otherwise, described Home eNodeB refusal new business.

Further, when fixed network link corresponding to the information of described secure tunnel can not meet the content of described resource reconfiguration request, described Home eNodeB determines to seize existing business resource, and notifies described policy control functions entity.

In order to solve the problem, based on another aspect of the present invention, additionally provide the system that a kind of business admission controls, this system comprises wireless network side apparatus, security gateway, Home eNodeB, Home eNodeB policy functional entity, fixed network policy control functions entity; Described wireless network side apparatus, for Home eNodeB distributing policy information; Described Home eNodeB, for initiating resource reconfiguration request to Home eNodeB policy functional entity after receiving the policy information that wireless network side issues; Also whether can meet the result of the content of described resource reconfiguration request for the fixed network link that the information of the described secure tunnel according to described fixed network policy control functions Entity feedback is corresponding, make call access control decision-making; Described security gateway, for being sent to Home eNodeB policy functional entity by the information of secure tunnel; Described Home eNodeB policy functional entity, the context notification of the resource reconfiguration request sent for the information of secure tunnel that sent by described security gateway and described Home eNodeB is to fixed network policy control functions entity; Described fixed network policy control functions entity, for judging according to the information of described secure tunnel whether fixed network link corresponding to the information of described secure tunnel can meet the content of described resource reconfiguration request, and feeds back to described Home eNodeB by judged result.

Further, described Home eNodeB policy functional entity also for, in the message notice of the secure tunnel sent by described security gateway in the process of fixed network policy control functions entity, and set up intercommunication strategy session between fixed network policy control functions entity.

Further, described Home eNodeB policy functional entity also for, at the context notification of the resource reconfiguration request that described Home eNodeB is sent in the process of fixed network policy control functions entity, the mark internal layer IP address of resource reconfiguration request or internal layer IP address being added port numbers or Home eNodeB becomes outer IP address or outer IP address according to the secure tunnel information MAP that it stores and adds port numbers, then the content of resource reconfiguration request and outer IP address thereof or outer IP address are added port numbers is together sent to fixed network policy control functions entity; Or,

Add the mark of port numbers or Home eNodeB according to the internal layer IP address of resource reconfiguration request or internal layer IP address, by the content map of resource reconfiguration request on the intercommunication strategy session of correspondence, send it to fixed network policy control functions entity.

Further, described Home eNodeB, also for when knowing that the link of described fixed network can not provide bandwidth needed for described Home eNodeB, determining to seize fixed network existing business resource, and seizing successfully, notifying described policy control functions entity.

Further, described wireless network side apparatus comprises equipment of the core network and the evolution femto gateway of the grouping system of evolution; Or described wireless network side apparatus comprises universal mobile telecommunications system equipment of the core network and femto gateway.

The present invention can improve the performance of Systematical control business admission, improves the resource management capacity of system simultaneously.

Accompanying drawing explanation

Fig. 1 is the configuration diagram accessing EPS according to the HeNB under the non-roaming scene of correlation technique;

Fig. 2 is according to the configuration diagram of the HNB under the non-roaming scene of correlation technique by fixed network access UMTS;

Fig. 3 is the configuration diagram of embodiment one;

Fig. 4 is the configuration diagram of embodiment two;

Fig. 5 is the flow chart that the Home eNodeB in embodiment sets up T1 session when powering on;

Fig. 6 is the method schematic diagram that in specific embodiment one, service control is received;

Fig. 7 is the method schematic diagram that in specific embodiment two, service control is received;

Fig. 8 is the method schematic diagram that in specific embodiment three, service control is received;

Fig. 9 is the method schematic diagram that in specific embodiment four, service control is received;

Figure 10 is the method schematic diagram that in specific embodiment five, service control is received.

Embodiment

The system that in embodiment, business admission controls comprises: wireless network side apparatus, security gateway, Home eNodeB, Home eNodeB policy functional entity, fixed network policy control functions entity.

Wireless network side apparatus comprises equipment of the core network and the evolution femto gateway of the grouping system of evolution; Or wireless network side apparatus comprises universal mobile telecommunications system equipment of the core network and femto gateway.

Wireless network side apparatus is used for Home eNodeB distributing policy information.

Home eNodeB is used for initiating resource reconfiguration request after receiving the policy information that wireless network side apparatus issues; Also whether can meet the result of the content of described resource reconfiguration request for the fixed network link that the information of the described secure tunnel according to described fixed network policy control functions Entity feedback is corresponding, make call access control decision-making.

Security gateway is used for the information of the secure tunnel between Home eNodeB and security gateway and described resource reconfiguration request to be sent to Home eNodeB policy functional entity.

Home eNodeB policy functional entity is used for the information of described secure tunnel and described resource reconfiguration request notice to fixed network policy control functions entity.

Fixed network policy control functions entity is used for judging whether fixed network link corresponding to the information of described secure tunnel can meet the content of described resource reconfiguration request according to the information of described secure tunnel, and judged result is fed back to described Home eNodeB.

Can realize in the following manner when in native system, security gateway sends the information of secure tunnel:

Described security gateway is also for after setting up secure tunnel with described Home eNodeB, set up the special session with Home eNodeB policy functional entity, and in the process setting up this special session, described secure tunnel information is sent to described Home eNodeB policy functional entity; Or after setting up secure tunnel with described Home eNodeB, only send described secure tunnel information and be sent to described Home eNodeB policy functional entity; Also for after receiving described resource reconfiguration request, this resource reconfiguration request is mapped in the special session corresponding with the secure tunnel at described security gateway place and is sent to described Home eNodeB policy functional entity, or after receiving described resource reconfiguration request, this resource reconfiguration request is conventionally routed directly to described Home eNodeB policy functional entity.Described special session is the session that (when carrying out system initialization after such as powering on) is set up by special purpose interface with described security gateway when carrying out system initialization of described Home eNodeB.This special purpose interface can be described as T1 interface.

Can also realize in the following manner when in native system, security gateway sends the information of secure tunnel:

Security gateway is used for, after the described resource reconfiguration request receiving the transmission of described Home eNodeB, the information of secure tunnel together being sent to described Home eNodeB policy functional entity together with resource reconfiguration request.

It is one in following message reciprocal process that wireless network side apparatus issues process that described policy information and Home eNodeB initiate resource reconfiguration request:

Wireless network side apparatus is used for issuing carrying to described Home eNodeB and sets up request message and carry policy information in this message; Home eNodeB is for sending resource reconfiguration request for request dispatching resource.

Wireless network side apparatus is used for issuing bearing modification request message to described Home eNodeB and carry policy information in this message; Home eNodeB is redistributed or releasing resource for request for sending resource reconfiguration request.

Wireless network side apparatus is used for issuing session management request message to described Home eNodeB and carry policy information in this message; Home eNodeB is for sending resource reconfiguration request for request dispatching or redistribute resource.

Wireless network side apparatus is used for issuing carrying deactivation request message to described Home eNodeB and carry policy information in this message; Home eNodeB is for sending resource release request for asking releasing resource.

Fixed network policy control functions entity judges that the content whether fixed network link corresponding to the information of described secure tunnel can meet described resource reconfiguration request refers to: described fixed network policy control entity judges whether the link of described fixed network can provide described Home eNodeB the required bandwidth resources of distributing or redistributing, or judges whether the link of described fixed network accepts to discharge the bandwidth resources of the required release of described Home eNodeB.

Home eNodeB, also for when knowing that fixed network link corresponding to the information of described secure tunnel can not meet the content of described resource reconfiguration request, determining to seize existing business resource, and notifying described policy control functions entity.

Said system is applicable to the system that the system applying Home eNodeB (HNB) is also applicable to the Home eNodeB (HeNB) applying evolution.Corresponding device relevant in system is that HeNB corresponds to HNB, and HeNBGW/MME corresponds to HNB GW, HeNB PF and corresponds to HNB PF.

Based on embodiments of the invention, present invention also offers a kind of system, this system comprises wireless network side apparatus, security gateway, Home eNodeB, Home eNodeB policy functional entity, fixed network policy control functions entity; Wherein, described wireless network side apparatus, for Home eNodeB distributing policy information; Described Home eNodeB, for initiating resource reconfiguration request to Home eNodeB policy functional entity after receiving the policy information that wireless network side issues; Also whether can meet the result of the content of described resource reconfiguration request for the fixed network link that the information of the described secure tunnel according to described fixed network policy control functions Entity feedback is corresponding, make call access control decision-making; Described security gateway, for being sent to Home eNodeB policy functional entity by the information of the secure tunnel between Home eNodeB and security gateway; Described Home eNodeB policy functional entity, the context notification of the resource reconfiguration request sent for the information of secure tunnel that sent by described security gateway and described Home eNodeB is to fixed network policy control functions entity; Described fixed network policy control functions entity, for judging according to the information of described secure tunnel whether fixed network link corresponding to the information of described secure tunnel can meet the content of described resource reconfiguration request, and feeds back to described Home eNodeB by judged result.

As shown in Figure 3, the method that business admission controls comprises: the resource reconfiguration request that security gateway is initiated after the information of the secure tunnel between Home eNodeB and security gateway and described Home eNodeB being received the policy information that wireless network side issues is sent to Home eNodeB policy functional entity; The information of described secure tunnel and described resource reconfiguration request notify to fixed network policy control functions entity by described Home eNodeB policy functional entity, described fixed network policy control functions entity judges whether fixed network link corresponding to the information of described secure tunnel can meet the content of described resource reconfiguration request, and judged result is fed back to described Home eNodeB, Home eNodeB makes call access control decision-making according to described feedback result.

Between HeNB and HeNB PF, special purpose interface T2 can be set, for the information interaction in the present embodiment between HeNB and HeNB PF.Via SeGW when HeNB and HeNB PF carries out interacting message by this T2 interface, the session on this T2 interface is called T2 session.T2 session between HeNB and HeNB PF is encapsulated by IP sec between SeGW and HeNB, after SeGW receives the signaling of this session, peels the encapsulation header of ipsec tunnel off, then sends to HeNB PF's; The message that HeNB PF sends to HeNB, by the reverse transmission of same mechanism, repeats no more herein.

Security gateway can realize when sending the information of secure tunnel in the following manner: after described security gateway and described Home eNodeB set up secure tunnel, set up the special session with Home eNodeB policy functional entity, and in the process setting up this special session, described secure tunnel information is sent to described Home eNodeB policy functional entity; After described security gateway receives described resource reconfiguration request, this resource reconfiguration request is mapped in the special session corresponding with the secure tunnel at described security gateway place and is sent to described Home eNodeB policy functional entity.Described special session is that described Home eNodeB is when carrying out system initialization and the session set up by special purpose interface of described security gateway.As shown in Figure 4, arrange T1 interface and be special purpose interface between SeGW and HeNB PF, SeGW and HeNB PF can according to this special purpose interface interactive information.

Security gateway can realize when sending the information of secure tunnel in the following manner: after described security gateway and described Home eNodeB set up secure tunnel, described secure tunnel information is sent to described Home eNodeB policy functional entity by T1 interface, does not set up proprietary session.

Security gateway can also realize when sending the information of secure tunnel in the following manner: the information of described secure tunnel, after the described resource reconfiguration request receiving Home eNodeB transmission, is together sent to Home eNodeB policy functional entity together with described resource reconfiguration request by security gateway.In this mode, security gateway is undertaken by passage available between SeGW and HeNB PF in prior art.

It is one in following message reciprocal process that wireless network side issues process that described policy information and described safety initiates resource reconfiguration request:

Fixed network policy control functions entity can be the information that can fixed network provide requested resource to Home eNodeB feedback result, or the use information of fixed network Current resource or fixed network reshuffle resource success or failed information.If when feedback result is " success of fixed network releasing resource ", can select to perform, when not sending this feedback result, the success of Home eNodeB acquiescence fixed network releasing resource.

When fixed network links and can not provide bandwidth needed for described Home eNodeB, described Home eNodeB can also determine to seize fixed network existing business resource, and is seizing successfully, notification strategy controlling functions entity.

Fixed network link described in this method can refer to backhaul (Backhaul) link.

Embodiment one:

Fig. 3 is the configuration diagram of the embodiment of the present invention one.

Interface T2 is set between HeNB and HeNB PF.

When network side has qos policy to be issued to HeNB GW/MME (or initiatively initiated by network side, or UE applies for), qos policy is handed down to HeNB by HeNB GW or/MME, HeNB sends resource allocation request message by T2 interface to HeNB PF and is used for request resource, this resource allocation request message is through SeGW, by SeGW, secure tunnel (IPsectunnel) information between SeGW and HeNB is together sent to HeNB PF together with this resource allocation request message, then pass through S9 by HeNB PF ^*interface is advertised to BPCF, and BPCF finds the back haul link at this HeNB place according to this tunnel information, and checks whether the back haul link at this HeNB place can provide the HeNB resource of asking.If this back haul link can provide HeNB requested resource, then BPCF is to HeNB PF feedback resources request success message, and HeNB PF is to HeNB feedback resources request success message, and HeNB receives this business; If this Backhaul can not provide HeNB requested resource, then BPCF is to HeNB PF feedback resources request failure message, and HeNB PF is to HeNB feedback resources request failure message, and HeNB refuses this business.

Wherein, because the mode that 3GPP with BBF describes the service quality of business is different, the parameter adopted is also distinct, and the parameter information therefore in resource allocation request/response message is at HeNB PF, or BPCF has carried out by the mapping of 3GPP to BBF or reverse mapping.

Wherein, described secure tunnel information includes but not limited to the one in following combination:

The mark of the end points Home eNodeB of secure tunnel and outer IP address or outer IP address add port numbers; Or

Internal layer IP address or internal layer IP address add port numbers and outer IP address or outer IP address and add port numbers; Or

The mark of the end points Home eNodeB of secure tunnel and internal layer IP address or internal layer IP address add port numbers and outer IP address or outer IP address and add port numbers.

In addition, secure tunnel information can also be comprised by display or the mode of implicit expression: the mark of Home eNodeB and outer IP address or IP address add the corresponding relation that the corresponding relation of port numbers, ectonexine IP address or IP address add port numbers.

In another implementation, if current Backhaul can not provide the HeNB resource of asking, BPCF can feed back fixed network resource situation via HeNB P to HeNB, HeNB is according to user type, Business Nature, the factors such as fixed network situation, can determine the resource seizing existing business, resource is seized successfully, and is advertised to fixed network.

Embodiment two:

Fig. 4 is the configuration diagram of the embodiment of the present invention two.

T1 interface is set between SeGW and HeNB PF, T2 interface is set between HeNB and HeNB PF.

HeNB powers on, and sets up IPsec tunnel (being prior art) between HeNB and SeGW herein; Safety (IPsec) tunnel information between HeNB and SeGW is advertised to HeNB PF by T1 interface by SeGW, then passes through S9 by HeNB PF ^*interface is advertised to BPCF, and BPCF knows fixed network Backhaul (backhaul network) position that this HeNB is current accessed and/or mark according to this tunnel information.

Wherein HeNB PF and/or BPCF is after receiving safety (IPsec) tunnel information, and stores this information.

Wherein, can be simple mutual between HeNB PF and BPCF, transmit safety (IPsec) tunnel information, also can be establish S9 by interactive information simultaneously ^*session.

Wherein, the composition of safety (IPsec) tunnel information is shown in the description of embodiment one (Fig. 3).

When EPS network side has qos policy to be issued to HeNB GW/MME (or network side is initiatively, or UE asks), HeNB GW/MME is handed down to HeNB qos policy by S1 interface, HeNB sends resource reconfiguration request by T2 interface to HeNB PF, the content of this resource reconfiguration request can be: request dispatching or the bandwidth resources redistributed, or judges whether the link of described fixed network accepts to discharge the bandwidth resources of the required release of Home eNodeB.At this, we are for request dispatching bandwidth resources, and HeNB PF passes through S9 ^*interface is advertised to BPCF, BPCF checks whether the back haul link at this HeNB place can also provide the HeNB resource/bandwidth of asking: if this Backhaul can provide HeNB requested resource, then BPCF is to HeNB PF feedback resources request success message, HeNB PF is to HeNB feedback resources request success message, and HeNB receives this business; If this Backhaul can not provide HeNB requested resource, then BPCF is to HeNB PF feedback resources request failure message, and HeNBPF is to HeNB feedback resources request failure message, and HeNB refuses this business.

Wherein, in above-mentioned scheme, message and the concrete processing method of the one of information in each network element are:

When HeNB powers on, fixed network is that HeNB distributes an IP address or IP address adds port numbers; This IP address or IP address add port numbers at NAT (the Network AddressTranslation through fixed network, network address translation) after equipment, IP address or IP address add port numbers and may be converted into another one IP address or IP address and add port numbers, be described outer IP address or IP address and add port numbers (when there is no nat device present, former IP address or IP address add port numbers be outer IP address or IP address adds port numbers); In IPsec tunnel establishment procedure, SeGW is that HeNB distributes an IP address or IP address adds port numbers, and this IP address or IP address add port numbers and be called internal layer IP address or IP address and add port numbers.

When HeNB powers on, safety (IPsec) tunnel information is delivered by T2 interface between SeGW and HeNB PF, wherein contain internal layer and outer IP address or IP address in this information and add the corresponding relation that port numbers and corresponding relation thereof, HeNB mark and outer IP address or IP address add port numbers, HeNB PF stores this relation.

HeNB send " resource reconfiguration request information carries internal layer IP address or IP address and adds port numbers, this message through IPsec tunnel encapsulation arrive SeGW.Wherein, IPsec carries outer IP address in encapsulating or IP address adds port numbers, and when message arrives SeGW, IPsec encapsulation is dismantled by SeGW, and outer IP address or IP address add port numbers and dismantle thereupon." resource reconfiguration request information is routed to HeNB PF further by SeGW, and SeGW does not resolve (prior art).

HeNB PF adds port numbers and/or HeNB mark corresponding relation according to ectonexine IP address or IP address is " the internal layer IP address of resource reconfiguration request information or IP address add port numbers and/or HeNB identity map adds port numbers to outer IP address or IP address, and by " content of asking in resource reconfiguration request information and outer IP address or IP address add port numbers and be sent to BPCF.BPCF examines outer IP address or IP address and adds in port numbers fixed network link and whether can provide " requested resource in resource reconfiguration request information.Or, HeNB PF receives " after resource reconfiguration request information; add the mark of port numbers and/or HeNB according to the internal layer IP address of " resource reconfiguration request " or IP address and its tunnel information stored finds outer IP address or IP address to add port numbers; add port numbers according to this outer IP address or IP address again; or directly add port numbers according to internal layer IP address or IP address, the content matching of " resource reconfiguration request " to suitable S9 ^*in session, be sent to BPCF." requested resource in resource reconfiguration request information that whether BPCF examines in fixed network link can provide.

In addition, message and the process of information in each network element can have other different schemes:

On T1 interface, when SeGW and HeNB PF interactive information, set up T1 session; S9 ^*on interface, when HeNB PF and BPCF is mutual, set up S9 ^*session; When HeNB send " this resource reconfiguration request, through SeGW, is sent to HeNB PF by corresponding to T1 session with IPsec tunnel by SeGW by resource reconfiguration request information.HeNB PF is according to the IPsec tunnel information stored and T1 session and S9 ^*corresponding relation during session establishment, corresponds to suitable S9 by " resource reconfiguration request " ^*session is sent to BPCF, " requested resource in resource reconfiguration request information that whether BPCF examines in this fixed network link can provide.

Above processing method is all applicable to each flow chart follow-up.

Fig. 5 is the operating process setting up T1 session when HeNB powers in the present invention, and by this flow process, the tunnel information that BBF BPCF can report according to SeGW, judges the fixed network Backhual (fixed network backhaul network) at this HeNB place.T1 session be established as optional step.

Detailed step is described below:

501.HeNB powers on, access fixed network, and fixed network is that HeNB distributes local IP address by related mechanism, and this address is as the outside ip address of encapsulated data packet;

502.HeNB and SeGW sets up IPsec tunnel, to ensure the fail safe of data in transmitting procedure and integrality.

Wherein SeGW is that HeNB distributes an internal layer IP address or IP address adds port numbers, and is carried to HeNB in response to the message of HeNB.

503.SeGW, by T1 interface, offers HeNB PF safety (IPsec) tunnel information between HeNB and SeGW, and sets up T1 session;

504.HeNB PF passes through S9 tunnel information ^*interface report to BPCF, and sets up S9 ^*interface session.BPCF, by this tunnel information, judges the Backhaul of this HeNB place fixed network.

In above-mentioned flow process, when HeNB powers on, SeGW and HeNB PF establishes T1 session and transmits tunnel information.Present invention also offers another implementation method, when HeNB powers on, SeGW and HeNB PF only transmits tunnel information, does not set up T1 session.

Detailed step is described below:

501a.HeNB powers on, access fixed network, and fixed network is that HeNB distributes local IP address by related mechanism, and this address is as the outside ip address of encapsulated data packet;

502a.HeNB and SeGW sets up IPsec tunnel, to ensure the fail safe of data in transmitting procedure and integrality.

503a.SeGW, by T1 interface, only offers HeNB PF the IPsec tunnel information between HeNB and SeGW, without the need to setting up T1 session;

504a.HeNB PF passes through S9 tunnel information ^*interface report to BPCF, and sets up S9 ^*interface session.BPCF, by this tunnel information, judges the Backhaul of this HeNB place fixed network.

The present invention is described in detail below with specific embodiment.

Specific embodiment one:

The present embodiment is in HeNB system, and business is initiated and the instantiation be successfully accepted.Business admission control point is at HeNB.HeNB is when doing business admission, and except factor of the prior art, such as CSG, ARP, access module etc., also combine the resource situation of place fixed network, and concrete operations are shown in that flow process describes.As shown in Figure 6:

601.HeNB powers on, and establishes the IPsec tunnel between HeNB and SeGW.

T1 session is established by the operation of Fig. 3 between SeGW and HeNB PF.This T1 session be established as optional step.

This step is that HeNB performs when powering on, and is not that each business performs when initiating.

602. new business are initiated, and the initiation of this business may be that network side is initiatively initiated, and also may be the business of UE to network side request.To HeNB, by the transmission of S1 interface, " request/session management request information is set up in carrying to the related network elements (HeNB GW or MME) of EPS core net, and carries the information such as qos policy.

603.HeNB sends resource request signaling, to fixed network request resource by T2 interface to HeNB PF.

Wherein this signaling be by HeNB and SeGW between IPsec passage first arrive SeGW's.

If in step 601, establish T1 session between SeGW and PF, then signaling matches in suitable T1 session and sends PF to by SeGW.

If in step 601, do not transmit secure tunnel information between SeGW and PF, then, after signaling arrives SeGW, safety (IPsec) tunnel information at this its place of signaling is together sent to HeNR PF by SeGW.

604.HeNB PF passes through S9 ^*the resource request information that interface sends HeNB and SeGW send tunnel information and are advertised to BPCF and fixed network strategy execution equipment thereof.

If 605. in step 601, establish T1 session and S9 ^*session, BPCF can find the fixed network backhaul at this HeNB place by corresponding session information; If 601 steps do not set up T1 session and S9 ^*session, then BPCF is by this tunnel information, finds the Backhaul of this HeNB place fixed network.

Whether the fixed network Backhaul at BPCF and this HeNB place of fixed network strategy execution unit check can provide this HeNB requested resource.If can provide, then Resources allocation, and return S9 to PF ^*interface: Resourse Distribute success response.

606.BPCF returns S9 to PF ^*interface: Resourse Distribute success response.

607.PF returns T2 to HeNB ^*interface: Resourse Distribute success response.

The success response that 608.HeNB returns according to fixed network, and other attributes existing of this business, the information such as such as ARP, CSG, implement the call access control to this business.

If receive this business, distributing radio resource between HeNB and UE, and set up carrying.

609.HeNB returns " response of response/session management is set up in carrying " notice core net to EPS core net, is this business success Resources allocation.

The relevant treatment of 610. core net.

For flow process shown in Fig. 6, present invention also offers another implementation method, detailed step is described below:

601a.HeNB powers on, and establishes the IPsec tunnel between HeNB and SeGW.

IPsec tunnel information is only delivered by the operation of Fig. 3 between SeGW and HeNB PF.

602a. new business is initiated, and the initiation of this business may be that network side is initiatively initiated, and also may be the business of UE to network side request.To HeNB, by the transmission of S1 interface, " request/session management request information is set up in carrying to the related network elements (HeNB GW or MME) of EPS core net, and carries the information such as qos policy.

603a.HeNB sends resource request signaling, to fixed network request resource by T2 interface to HeNB PF.

604a.HeNB PF finds corresponding S9 according to safety (IPsec) tunnel information ^*session; Resource request information is sent to BPCF and fixed network strategy execution equipment thereof;

Or pass through S9 ^*the resource request information that interface sends HeNB and SeGW send tunnel information and are advertised to BPCF and fixed network strategy execution equipment thereof.

Whether the fixed network Backhaul at 605a.BPCF and this HeNB place of fixed network strategy execution unit check can provide this HeNB requested resource.If can provide, then Resources allocation, and return S9 to PF ^*interface: Resourse Distribute success response.

606a.BPCF returns S9 to PF ^*interface: Resourse Distribute success response.

607a.PF returns T2 to HeNB ^*interface: Resourse Distribute success response.

The success response that 608a.HeNB returns according to fixed network, and other attributes existing of this business, the information such as such as ARP, CSG, implement the call access control to this business.

609a.HeNB returns " response of response/session management is set up in carrying " notice core net to EPS core net, is this business success Resources allocation.

The relevant treatment of 610a. core net.

Specific embodiment two:

The present embodiment is in HeNB system, and business is initiated and is rejected the instantiation of receiving.Business admission control point is at HeNB.HeNB is when doing business admission, and except factor of the prior art, such as CSG, ARP, access module etc., also combine the resource situation of place fixed network, and concrete operations are shown in that flow process describes.As shown in Figure 7:

701.HeNB powers on, and establishes the IPsec tunnel between HeNB and SeGW.

702. new business are initiated, and the initiation of this business may be that network side is initiatively initiated, and also may be the business of UE to network side request.To HeNB, by the transmission of S1 interface, " request/session management request information is set up in carrying to the related network elements (HeNB GW or MME) of EPS core net, and carries the information such as qos policy.

703.HeNB sends resource request signaling, to fixed network request resource by T2 interface to HeNB PF.

If in step 701, establish T1 session between SeGW and PF, then signaling matches in suitable T1 session and sends PF to by SeGW.

If in step 701, do not transmit secure tunnel information between SeGW and PF, then, after signaling arrives SeGW, safety (IPsec) tunnel information at this its place of signaling is together sent to HeNB PF by SeGW.

704.HeNB PF passes through S9 ^*the resource request information that interface sends HeNB and SeGW send tunnel information and are advertised to BPCF and fixed network strategy execution equipment thereof.

If 705. in step 701, establish T1 session and S9 ^*session, BPCF can find the fixed network backhaul at this HeNB place by corresponding session information; If 701 steps do not set up T1 session and S9 ^*session, then BPCF is by this tunnel information, judges the Backhaul of this HeNB place fixed network.

Whether the fixed network Backhaul at BPCF and this HeNB place of fixed network strategy execution unit check can provide this HeNB requested resource.If can not Resources allocation, then return S9 to PF ^*interface: Resourse Distribute failure response.

706.BPCF returns S9 to PF ^*interface: Resourse Distribute failure response.

707.PF returns T2 to HeNB ^*interface: Resourse Distribute failure response.

The failure response that 708.HeNB returns according to fixed network, excludes this business.

709.HeNB returns " response of response/session management is set up in carrying " failure notification to EPS core net.

The relevant treatment of 710. core net.

For flow process shown in Fig. 7, present invention also offers another implementation method, detailed step is described below:

701a.HeNB powers on, and establishes the IPsec tunnel between HeNB and SeGW.

702a. new business is initiated, and the initiation of this business may be that network side is initiatively initiated, and also may be the business of UE to network side request.To HeNB, by the transmission of S1 interface, " request/session management request information is set up in carrying to the related network elements (HeNB GW or MME) of EPS core net, and carries the information such as qos policy.

703a.HeNB sends resource request signaling, to fixed network request resource by T2 interface to HeNB PF.

704a.HeNB PF finds corresponding S9 according to safety (IPsec) tunnel information ^*session, is sent to BPCF and fixed network strategy execution equipment thereof by resource request information;

Whether the fixed network Backhaul at 705a.BPCF and this HeNB place of fixed network strategy execution unit check can provide this HeNB requested resource.If can not Resources allocation, then return S9 to PF ^*interface: Resourse Distribute failure response.

706a.BPCF returns S9 to PF ^*interface: Resourse Distribute failure response.

707a.PF returns T2 to HeNB ^*interface: Resourse Distribute failure response.

The failure response that 708a.HeNB returns according to fixed network, excludes this business.

709a.HeNB returns " response of response/session management is set up in carrying " failure notification to EPS core net.

The relevant treatment of 710a. core net.

Specific embodiment three:

The present embodiment is in HeNB system, the instantiation of resource deexcitation.Concrete operations are shown in that flow process describes.As shown in Figure 8:

801.HeNB powers on, and establishes the IPsec tunnel between HeNB and SeGW.

This step is that HeNB performs when powering on, and all performs when not being at every turn relevant business operation.

802. load bearing deactivations, the initiation of this operation may be that network side is initiatively initiated, and also may be that UE is to network side request.The related network elements (HeNB GW or MME) of EPS core net sends " load bearing deactivation request information, and carry the information such as qos policy to HeNB by S1 interface.

803.HeNB related mechanism, deleting bearing also discharges Radio Resource.

804.HeNB sends resource release request signaling by T2 interface to HeNB PF.

If in step 801, establish T1 session between SeGW and PF, then signaling matches in suitable T1 session and sends HeNB PF to by SeGW.

If in step 801, do not transmit secure tunnel information between SeGW and PF, then, after signaling arrives SeGW, safety (IPsec) tunnel information at this its place of signaling is together sent to HeNB PF by SeGW.

805.HeNB PF passes through S9 ^*the resource release request information that interface sends HeNB and SeGW send tunnel information and are advertised to BPCF and fixed network strategy execution equipment thereof.

If 806. in step 801, establish T1 session and S9 ^*session, BPCF can find the fixed network backhaul at this HeNB place by corresponding session information; If 801 steps do not set up T1 session and S9 ^*session, then BPCF is by this tunnel information, finds the Backhaul of this HeNB place fixed network.

BPCF and fixed network strategy execution equipment reshuffle fixed network resource according to signaling, and return S9 to PF ^*interface: resource release response.

807.BPCF returns S9 to PF ^*interface: resource release response.

808.PF returns T2 to HeNB ^*interface: resource release response.

809.HeNB returns " response of response/session management is set up in carrying " notice core net to EPS core net, load bearing deactivation success.

The relevant treatment of 810. core net.

For flow process shown in Fig. 8, present invention also offers another implementation method, detailed step is described below:

801a.HeNB powers on, and establishes the IPsec tunnel between HeNB and SeGW.

802a. load bearing deactivation, the initiation of this operation may be that network side is initiatively initiated, and also may be that UE is to network side request.The related network elements (HeNB GW or MME) of EPS core net sends " load bearing deactivation request information, and carry the information such as qos policy to HeNB by S1 interface.

803a.HeNB related mechanism, deleting bearing also discharges Radio Resource.

804a.HeNB sends resource release request signaling by T2 interface to HeNB PF.

805a.HeNB PF finds corresponding S9 according to safety (IPsec) tunnel information ^*session, is sent to BPCF and fixed network strategy execution equipment thereof by resource release request information;

Or pass through S9 ^*the resource release request information that interface sends HeNB and SeGW send tunnel information and are advertised to BPCF and fixed network strategy execution equipment thereof.

806a.BPCF and fixed network strategy execution equipment reshuffle fixed network resource according to signaling, and return S9 to PF ^*interface: resource release response.

807a.BPCF returns S9 to PF ^*interface: resource release response.

808a.PF returns T2 to HeNB ^*interface: resource release response.

809a.HeNB returns " response of response/session management is set up in carrying " notice core net to EPS core net, load bearing deactivation success.

The relevant treatment of 810a. core net.

Specific embodiment four:

The present embodiment is in HeNB system, bearing modification instantiation.Business admission control point is at HeNB.HeNB is when doing bearing modification and controlling, and except factor of the prior art, such as CSG, ARP, access module etc., also combine the resource situation of place fixed network, and concrete operations are shown in that flow process describes.As shown in Figure 9:

901.HeNB powers on, and establishes the IPsec tunnel between HeNB and SeGW.

T1 session is established by the operation of embodiment three between SeGW and HeNB PF.This T1 session be established as optional step.

This step is that HeNB performs when powering on, and is not that each operation performs when initiating.

902. bearing modifications are initiated, and the initiation of this business may be that network side is initiatively initiated, and also may be that UE is to network side request.The related network elements (HeNB GW or MME) of EPS core net sends " bearing modification request/session management request information, and carry the information such as qos policy to HeNB by S1 interface.

903.HeNB sends resource reconfiguration signaling by T2 interface to HeNB PF.

If in step 901, establish T1 session between SeGW and PF, then signaling matches in suitable T1 session and sends HeNB PF to by SeGW.

If in step 901, do not transmit secure tunnel information between SeGW and PF, then, after signaling arrives SeGW, safety (IPsec) tunnel information at this its place of signaling is together sent to HeNB PF by SeGW.

904.HeNB PF passes through S9 ^*the resource reconfiguration solicited message that interface sends HeNB and SeGW send tunnel information and are advertised to BPCF and fixed network strategy execution equipment thereof.

If 905. in step 901, establish T1 session and S9 ^*session, BPCF can find the fixed network backhaul at this HeNB place by corresponding session information; If 901 steps do not set up T1 session and S9 ^*session, then BPCF is by this tunnel information, judges the Backhaul of this HeNB place fixed network.

Resource reconfiguration operation during whether the fixed network Backhaul at BPCF and this HeNB place of fixed network strategy execution unit check can accept request.

906.BPCF returns S9 to PF ^*interface: resource reconfiguration success/failure response.

907.PF returns T2 to HeNB ^*interface: resource reconfiguration success/failure response.

The response that 908.HeNB returns according to fixed network, accepts/refusal bearing modification.

909.HeNB returns " response of response/session management is set up in carrying " to EPS core net.

The relevant treatment of 910. core net.

For flow process shown in Fig. 9, present invention also offers another implementation method, detailed step is described below:

901a.HeNB powers on, and establishes the IPsec tunnel between HeNB and SeGW.

902a. bearing modification is initiated, and the initiation of this business may be that network side is initiatively initiated, and also may be that UE is to network side request.The related network elements (HeNB GW or MME) of EPS core net sends " bearing modification request/session management request information, and carry the information such as qos policy to HeNB by S1 interface.

903a.HeNB sends resource reconfiguration signaling by T2 interface to HeNB PF.

904a.HeNB PF finds corresponding S9 according to safety (IPsec) tunnel information ^*session; Resource reconfiguration solicited message is sent to BPCF and fixed network strategy execution equipment thereof;

Or pass through S9 ^*the resource reconfiguration solicited message that interface sends HeNB and SeGW send tunnel information and are advertised to BPCF and fixed network strategy execution equipment thereof.

Resource reconfiguration operation during whether the fixed network Backhaul at 905a.BPCF and this HeNB place of fixed network strategy execution unit check can accept request.

906a.BPCF returns S9 to PF ^*interface: resource reconfiguration success/failure response.

907a.PF returns T2 to HeNB ^*interface: resource reconfiguration success/failure response.

The response that 908a.HeNB returns according to fixed network, accepts/refusal bearing modification.

909a.HeNB returns " response of response/session management is set up in carrying " to EPS core net.

The relevant treatment of 910a. core net.

Specific embodiment five:

The present embodiment is in HeNB system, and/amendment instantiation is set up in carrying.Business admission control point is at HeNB.HeNB is when doing carrying foundation/change control, and according to the resource situation that fixed network returns, comprehensive factor of the prior art, such as CSG, ARP etc., decision is seized the resource of existing business thus is that new business sets up/amendment carrying.Concrete operations are shown in that flow process describes.As shown in Figure 10:

1001.HeNB powers on, and establishes the IPsec tunnel between HeNB and SeGW.

/ amendment initiation is set up in 1002. carryings, and the initiation of this business may be that network side is initiatively initiated, and also may be that UE is to network side request.To HeNB, by the transmission of S1 interface, "/amendment request/session management request information is set up in carrying to the related network elements (HeNB GW or MME) of EPS core net, and carries the information such as qos policy.

1003.HeNB sends resource reconfiguration signaling by T2 interface to HeNB PF.

If in step 1001, establish T1 session between SeGW and PF, then signaling matches in suitable T1 session and sends HeNB PF to by SeGW.

If in step 1001, do not transmit secure tunnel information between SeGW and PF, then, after signaling arrives SeGW, safety (IPsec) tunnel information at this its place of signaling is together sent to HeNB PF by SeGW.

1004.HeNB PF passes through S9 ^*the Resourse Distribute that interface sends HeNB/reconfiguration request information and SeGW send tunnel information and are advertised to BPCF and fixed network strategy execution equipment thereof.

If 1005. in step 1001, establish T1 session and S9 ^*session, BPCF can find the fixed network backhaul at this HeNB place by corresponding session information; If 1001 steps do not set up T1 session and S9 ^*session, then BPCF is by this tunnel information, judges the Backhaul of this HeNB place fixed network.

Resource foundation/reconfiguration operation during whether the fixed network Backhaul at BPCF and this HeNB place of fixed network strategy execution unit check can accept request, a kind of scene is, fixed network can not provide the resource needed for this service request.

1006.BPCF returns S9 to PF ^*interface: resource reconfiguration responds, and the resource situation of fixed network may be returned to PF.

1007.PF returns T2 to HeNB ^*interface: resource reconfiguration responds, and the resource situation of fixed network may be returned to HeNB.

The response that 1008.HeNB returns according to fixed network, comprehensive factor of the prior art, such as CSG, ARP etc., decision is seized the resource of existing business thus is that new business sets up/amendment carrying.

1009. Radio Resource is reshuffled.

1010.HeNB is by T2 interface, and notice PF resource is preempted.

1011.PF pass through S9 ^*interface, notice BPCF resource is preempted.

1012. fixed networks reshuffle resource.

1013.HeNB returns " response of response/session management is set up in carrying " to EPS core net.

The relevant treatment of 1014. core net.

For flow process shown in Figure 10, present invention also offers another implementation method, detailed step is described below:

1001a.HeNB powers on, and establishes the IPsec tunnel between HeNB and SeGW.

/ amendment initiation is set up in 1002a. carrying, and the initiation of this business may be that network side is initiatively initiated, and also may be that UE is to network side request.To HeNB, by the transmission of S1 interface, "/amendment request/session management request information is set up in carrying to the related network elements (HeNB GW or MME) of EPS core net, and carries the information such as qos policy.

1003a.HeNB sends resource reconfiguration signaling by T2 interface to HeNB PF.

1004a.HeNB PF finds corresponding S9 according to safety (IPsec) tunnel information ^*session; By Resourse Distribute/reshuffle reconfiguration request information to be sent to BPCF and fixed network strategy execution equipment thereof;

Or pass through S9 ^*the Resourse Distribute that interface sends HeNB/reconfiguration request information and SeGW send tunnel information and are advertised to BPCF and fixed network strategy execution equipment thereof.

Resource foundation/reconfiguration operation during whether the fixed network Backhaul at 1005a.BPCF and this HeNB place of fixed network strategy execution unit check can accept request, a kind of scene is, fixed network can not provide the resource needed for this service request.

1006a.BPCF returns S9 to PF ^*interface: resource reconfiguration responds, and the resource situation of fixed network may be returned to PF.

1007a.PF returns T2 to HeNB ^*interface: resource reconfiguration responds, and the resource situation of fixed network may be returned to HeNB.

The response that 1008a.HeNB returns according to fixed network, comprehensive factor of the prior art, such as CSG, ARP etc., decision is seized the resource of existing business thus is that new business sets up/amendment carrying.

1009a. Radio Resource is reshuffled.

1010a.HeNB is by T2 interface, and notice PF resource is preempted.

1011a.PF pass through S9 ^*interface, notice BPCF resource is preempted.

1012a. fixed network reshuffles resource.

1013a.HeNB returns " response of response/session management is set up in carrying " to EPS core net.

The relevant treatment of 1014a. core net.

Note: in above embodiment, S9 ^*session is for intercommunication strategy between the HeNB PF in 3GPP connecting system and the BPCF in BBF Access Network.S9 ^*session is a concrete title, certainly can adopt other title, in order to be not limited to S9 ^*session, is referred to as " intercommunication strategy session " in the present invention, corresponding S9 ^*interface is referred to as intercommunication policy interface.

Equally, the session between BNG/BRAS and BPCF can adopt different protocol realization, gets the title of intercommunication, is referred to as in the present invention " fixed network strategy session ".

Above-described embodiment discusses for the Home eNodeB of evolution (HeNB) system, and the method is equally applicable to Home eNodeB (HNB) system.

In order to Unify legislation, " Home eNodeB " in the present invention contains HeNB and HNB.

In sum, by the above embodiment of the present invention, solve the problem specifically how realizing business admission management and resource management, the QoS that the signing fixed network circuit making QoS aggregate demand be no more than Home eNodeB access can provide.

Obviously, those skilled in the art should be understood that, above-mentioned of the present invention each module or each step can realize with general calculation element, they can concentrate on single calculation element, or be distributed on network that multiple calculation element forms, alternatively, they can realize with the executable program code of calculation element, thus, they can be stored and be performed by calculation element in the storage device, and in some cases, step shown or described by can performing with the order be different from herein, or they are made into each integrated circuit modules respectively, or the multiple module in them or step are made into single integrated circuit module to realize.Like this, the present invention is not restricted to any specific hardware and software combination.

The foregoing is only the preferred embodiments of the present invention, be not limited to the present invention, for a person skilled in the art, the present invention can have various modifications and variations.Within the spirit and principles in the present invention all, any amendment done, equivalent replacement, improvement etc., all should be included within protection scope of the present invention.

Claims

1. a method for business admission control, is characterized in that,

The resource reconfiguration request that security gateway is initiated after the information of secure tunnel and Home eNodeB being received the policy information that wireless network side issues is sent to Home eNodeB policy functional entity;

The information of described secure tunnel and described resource reconfiguration request notify to fixed network policy control functions entity by described Home eNodeB policy functional entity, described fixed network policy control functions entity judges whether fixed network link corresponding to the information of described secure tunnel can meet the content of described resource reconfiguration request, and judged result is fed back to described Home eNodeB, Home eNodeB makes call access control decision-making according to described feedback result.

2. the method for claim 1, is characterized in that,

After described security gateway and described Home eNodeB set up secure tunnel, set up the special session with Home eNodeB policy functional entity, and in the process setting up this special session, described secure tunnel information is sent to described Home eNodeB policy functional entity; After described security gateway receives described resource reconfiguration request, this resource reconfiguration request is mapped in the special session corresponding with the secure tunnel at described security gateway place and is sent to described Home eNodeB policy functional entity.

3. method as claimed in claim 1 or 2, is characterized in that,

4. the method for claim 1, is characterized in that,

It is one in following message reciprocal process that wireless network side issues process that described policy information and Home eNodeB initiate resource reconfiguration request:

5. the method for claim 1, is characterized in that,

Described fixed network policy control functions entity judges that the content whether fixed network link corresponding to the information of described secure tunnel can meet described resource reconfiguration request refers to: described fixed network policy control functions entity judges whether described fixed network link can provide described Home eNodeB the required bandwidth resources of distributing or redistributing, or judges whether described fixed network link accepts to discharge the bandwidth resources of the required release of described Home eNodeB.

6. the method for claim 1, is characterized in that,

7. the method for claim 1, is characterized in that,

When fixed network link corresponding to the information of described secure tunnel can not meet the content of described resource reconfiguration request, described Home eNodeB determines to seize existing business resource, and notifies described fixed network policy control functions entity.

8. a system for business admission control, is characterized in that,

This system comprises wireless network side apparatus, security gateway, Home eNodeB, Home eNodeB policy functional entity, fixed network policy control functions entity;

Described wireless network side apparatus, for Home eNodeB distributing policy information;

Described Home eNodeB, for initiating resource reconfiguration request after receiving the policy information that wireless network side apparatus issues; Also whether can meet the result of the content of described resource reconfiguration request for the fixed network link that the information of the secure tunnel according to described fixed network policy control functions Entity feedback is corresponding, make call access control decision-making;

Described security gateway, for being sent to Home eNodeB policy functional entity by the information of secure tunnel and described resource reconfiguration request;

Described Home eNodeB policy functional entity, for the information of described secure tunnel and described resource reconfiguration request notice to fixed network policy control functions entity;

Described fixed network policy control functions entity, for judging according to the information of described secure tunnel whether fixed network link corresponding to the information of described secure tunnel can meet the content of described resource reconfiguration request, and feeds back to described Home eNodeB by judged result.

9. system as claimed in claim 8, is characterized in that,

Described security gateway, also for after setting up secure tunnel with described Home eNodeB, set up the special session with Home eNodeB policy functional entity, and in the process setting up this special session, described secure tunnel information is sent to described Home eNodeB policy functional entity; Also for after receiving described resource reconfiguration request, this resource reconfiguration request is mapped in the special session corresponding with the secure tunnel at described security gateway place and is sent to described Home eNodeB policy functional entity.

10. system as claimed in claim 8 or 9, is characterized in that,

11. systems as claimed in claim 8, is characterized in that,

Described Home eNodeB, also for when knowing that described fixed network link can not provide bandwidth needed for described Home eNodeB, determining to seize fixed network existing business resource, and seizing successfully, notifying described fixed network policy control functions entity.

12. systems as claimed in claim 8, is characterized in that,

The method that 13. 1 kinds of business admissions control, is characterized in that,

Secure tunnel information is sent to Home eNodeB policy functional entity by security gateway, described Home eNodeB policy functional entity by the message notice of described secure tunnel to fixed network policy control functions entity;

Home eNodeB initiates resource reconfiguration request to Home eNodeB policy functional entity after receiving the policy information that wireless network side issues, described Home eNodeB policy functional entity by the context notification of described resource reconfiguration request to fixed network policy control functions entity;

Described fixed network policy control functions entity judges whether fixed network link corresponding to the information of described secure tunnel can meet the content of described resource reconfiguration request, and judged result is fed back to described Home eNodeB, Home eNodeB makes call access control decision-making according to described feedback result.

14. methods as claimed in claim 13, is characterized in that,

The message notice of described secure tunnel in the process of fixed network policy control functions entity, also comprises by described Home eNodeB policy functional entity: set up intercommunication strategy session between Home eNodeB policy functional entity and fixed network policy control functions entity.

15. methods as claimed in claim 13, is characterized in that,

Described secure tunnel information comprises:

The mark of the end points Home eNodeB of secure tunnel and outer IP address or outer IP address add port numbers; Or,

Internal layer IP address or internal layer IP address add port numbers and outer IP address or outer IP address and add port numbers; Or,

16. methods as claimed in claim 14, is characterized in that,

Described Home eNodeB policy functional entity by the context notification of described resource reconfiguration request to fixed network policy control functions entity, specifically comprise: the mark that described Home eNodeB policy functional entity adds the internal layer IP address of resource reconfiguration request or internal layer IP address port numbers or Home eNodeB becomes outer IP address or outer IP address according to the secure tunnel information MAP that it stores and adds port numbers, then the content of resource reconfiguration request and outer IP address thereof or outer IP address are added port numbers be together sent to fixed network policy control functions entity; Or,

Described Home eNodeB policy functional entity adds the mark of port numbers or Home eNodeB according to the internal layer IP address of resource reconfiguration request or internal layer IP address, by the content map of resource reconfiguration request on the intercommunication strategy session of correspondence, send it to fixed network policy control functions entity.

17. methods as claimed in claim 13, is characterized in that,

18. methods as claimed in claim 13, is characterized in that,

19. methods as claimed in claim 13, is characterized in that,

20. methods as claimed in claim 13, is characterized in that,

The system that 21. 1 kinds of business admissions control, is characterized in that,

Described Home eNodeB, for initiating resource reconfiguration request to Home eNodeB policy functional entity after receiving the policy information that wireless network side issues; Also whether can meet the result of the content of described resource reconfiguration request for the fixed network link that the information of the secure tunnel according to described fixed network policy control functions Entity feedback is corresponding, make call access control decision-making;

Described security gateway, for being sent to Home eNodeB policy functional entity by the information of secure tunnel;

Described Home eNodeB policy functional entity, the context notification of the resource reconfiguration request sent for the information of secure tunnel that sent by described security gateway and described Home eNodeB is to fixed network policy control functions entity;

22. systems as claimed in claim 21, is characterized in that,

Described Home eNodeB policy functional entity also for, in the message notice of the secure tunnel sent by described security gateway in the process of fixed network policy control functions entity, and set up intercommunication strategy session between fixed network policy control functions entity.

23. the system as claimed in claim 22, is characterized in that,

Described Home eNodeB policy functional entity also for, at the context notification of the resource reconfiguration request that described Home eNodeB is sent in the process of fixed network policy control functions entity, the mark internal layer IP address of resource reconfiguration request or internal layer IP address being added port numbers or Home eNodeB becomes outer IP address or outer IP address according to the secure tunnel information MAP that it stores and adds port numbers, then the content of resource reconfiguration request and outer IP address thereof or outer IP address are added port numbers is together sent to fixed network policy control functions entity; Or,

24. systems as claimed in claim 21, is characterized in that,

25. systems as claimed in claim 21, is characterized in that,