CN102905388A

CN102905388A - Method and system for access control and network provider element

Info

Publication number: CN102905388A
Application number: CN2011102104694A
Authority: CN
Inventors: 邓云
Original assignee: ZTE Corp
Current assignee: ZTE Corp
Priority date: 2011-07-26
Filing date: 2011-07-26
Publication date: 2013-01-30
Anticipated expiration: 2031-07-26
Also published as: WO2013013531A1; CN102905388B

Abstract

The invention discloses a method for access control. The method includes: a network provider acquires type information about extended access control EAB (extended access barring) of UE (user equipment) accessed to a network through a core network element, and performs access control according to the type information about EAB of the UE. The invention further discloses an access control system for implementation of the method and a network provider element. Different terminals about EAB types are subjected to access control to guarantee a communication system against network congestion, service quality when too much terminals are accessed can be guaranteed, and user experience is improved for accessed terminal users.

Description

The method and system of access control, network side network element

Technical field

The present invention relates in the radio communication to relate in particular to a kind of method and system, network side network element of access control based on the Access Control Technique of EAB.

Background technology

When subscriber equipment (UE, User Equipment is also referred to as terminal) access network, need to carry out access control to it, can initiating business request to judge UE, avoid causing the overload of network side such as at random access overload or signaling overload.At universal mobile telecommunications system (UMTS, Universal Mobile Telecommunications System) and Long Term Evolution (LTE, Long Term Evolution) in the system, subscriber equipment can be divided into 16 access grade (AC, Access Class), wherein, AC 0～9 belongs to common grade, and Random assignment is to UE; AC 10 expression urgent calls (can not dispose to terminal); AC 11 is used for network operation; AC 12 is safety service; AC 13 is public service classification (such as water, gas supplier); AC 14 expression urgency traffics; The AC 15 expression staff of operator.Terminal can be configured to rank among the AC 0～9 and the one or more ranks among the AC 11～15, and these configuration informations are kept in the Subscriber Identity Module (USIM, Universal Subscriber Identity Module).

The network side meeting broadcast system message of UMTS, wherein comprise access grade control (ACB, Access Class Barred) parameter, for different access grades, ACB corresponding to network side broadcasting, ACB is configured to enumeration type, and type comprises forbids (barred) and allow (not barred).When if UE needs initiating business request, whether the ACB parameter that at first needs to check the Cell Broadcast CB that accesses is to forbid (barred) access grade under self, can not initiating business request when being; If do not forbid, then can initiating business request.

The network side of long evolving system also can be broadcasted the ACB parameter, and for the terminal of AC 0～9, network side can be broadcasted the probability that access scale factor (ac-BarringFactor) is used for control subscriber equipment access network.UE produces equally distributed number (RAND) between 0 to 1 at random when the needs initiating business request, if this RAND is lower than the access scale factor, then UE can initiating business request; Otherwise UE can not initiating business request.

In the implementation procedure of Internet of Things, introduced a large amount of equipment for machine type communication (MD, Machine Type Communication Device).These equipment are because One's name is legion, considerably beyond the quantity of existing UE, network side is in order to prevent signaling overload or at random access overload etc., introduced the access control (EAB of expansion, Extended Access Barring) mechanism, the subscriber equipment (comprising the configuration (UE configured with EAB) of EAB in the usim card of UE) that is applicable to EAB need to judge whether to allow the access network initiating business request according to the EAB parameter of network side broadcasting.

Network side can arrange respectively for the roaming characteristic of subscriber equipment corresponding expansion access control parameter when configuration EAB parameter, particularly, network side is by common signal channel such as system message transmission EAB parameter.The roaming characteristic of current user equipment can be divided into following three kinds:

Type A (Category A or 1): all are applicable to the subscriber equipment of EAB;

Type B (or type 2): be applicable to EAB, and not at home public land mobile network (HPLMN, Home Public Land Mobile Network) and the subscriber equipment among the equivalent home public land mobile network (EHPLMN, Equivalent Home Public Land Mobile Network);

Type C (or type 3): be applicable to EAB, and the subscriber equipment in HPLMN, EHPLMN and preferential public land mobile network (Preferred PLMN) not.

Preserve the identification information of signatory home public land mobile network, equivalent home public land mobile network and preferential public land mobile network in the usim card of UE, UE can select network (Select PLMN) when access network.UE is according to the PLMN sign of selecting, and the HPLMN in the usim card, EHPLMN and Preferred PLMN, can judge self affiliated type.When the UE that is applicable to EAB need to initiate business, need to judge according to EAB parameter corresponding to type under self and self can initiate immediately to access at random, whether can initiating business request.

But the problem that above-mentioned access technology exists is, according to existing agreement, network side can not be known the load information of dissimilar UE, also just can not be correct the EAB parameter is set.

Summary of the invention

In view of this, main purpose of the present invention is to provide a kind of method and system, network side network element of access control, can according to the access control of the relevant EAB type realization of UE to the type UE, avoid UE to cause Network normally not carry out because accessing too much.

For achieving the above object, technical scheme of the present invention is achieved in that

A kind of method of access control comprises:

Network side obtains the type information about EAB of the UE of access network by core network element, and implements access control according to the type information about EAB of UE.

Preferably, the described type information enforcement access control about EAB according to UE is:

Described network side is measured the total resources that all UE about the EAB type of described UE use, and the EAB parameter of the type UE is set; Perhaps the type information about EAB according to UE carries out access control to UE.

Preferably, for UMTS, described network side is radio network controller (RNC), and described core network element is MSC or SGSN; For LTE, described network side is evolution base station, and described core network element is MME.

Preferably, described network side obtains the type information about EAB of the UE of access network and is by core network element:

For the UMTS system,

Described MSC or described SGSN by the Iu interface signaling to described RNC send described UE about the EAB type information;

Perhaps, described MSC or described SGSN send the subscription data of described UE by the Iu interface signaling to described RNC, the type about EAB of determining described UE according to subscription data and the access network information under the described UE present access subzone of described UE by described RNC;

For the LTE system,

Described MME by the S1 interface signaling to described evolution base station send described UE about the EAB type information;

Perhaps, described MME sends the subscription data of described UE by the S1 interface signaling to described evolution base station, the type about EAB of determining described UE according to subscription data and the access network information under the described UE present access subzone of described UE by described evolution base station.

Preferably, described method also comprises:

Described MSC or described SGSN or described MME obtain described UE about the type information of EAB from home subscriber server HSS; Perhaps obtain the subscription data of described UE, and according to the access network information under the described UE present access subzone, determine described UE about the EAB type information.

Preferably, the subscription data of described UE comprises: the home public land mobile network HPLMN information of UE;

Or comprise: HPLMN information and equivalent home public land mobile network EHPLMN information;

Or comprise: HPLMN information and preferential public land mobile network information;

Or comprise: HPLMN information, EHPLMN information and preferential public land mobile network information.

Preferably, the type about EAB of UE comprises at least a with Types Below:

All are applicable to the UE information of EAB;

Be applicable to EAB, and the UE in HPLMN and EHPLMN not;

Be applicable to EAB and in HPLMN, EHPLMN and preferential public land mobile network, do not use UE.

A kind of system of access control comprises network side and core network element, wherein,

Network side is used for obtaining by core network element the type information about EAB of the UE of access network, and implements access control according to the type information about EAB of UE.

Preferably, described network side is further used for, and measures the total resources that all UE about the EAB type of described UE use, and the EAB parameter of the type UE is set; Perhaps carry out access control according to UE about the EAB type.

Preferably, for the UMTS system,

Described MSC or described SGSN are further used for, by the Iu interface signaling to described RNC send described UE about the EAB type information;

Perhaps, described MSC or described SGSN are further used for, and send the subscription data of described UE to described RNC by the Iu interface signaling; Described RNC is further used for, the type about EAB of determining described UE according to subscription data and the access network information under the described UE present access subzone of described UE;

For the LTE system,

Described MME is further used for, by the S1 interface signaling to described evolution base station send described UE about the EAB type information;

Perhaps, described MME is further used for, and sends the subscription data of described UE to described evolution base station by the S1 interface signaling; Described evolution base station is further used for, the type about EAB of determining described UE according to subscription data and the access network information under the described UE present access subzone of described UE.

Preferably, described system also comprises HSS;

Described MSC or described SGSN or described MME are further used for, and obtain described UE about the type information of EAB from described HSS; Perhaps obtain the subscription data of described UE, and according to the access network information under the described UE present access subzone, determine described UE about the EAB type information.

Preferably, the type about EAB of UE comprises at least a with Types Below:

All are applicable to the UE information of EAB;

Be applicable to EAB, and the UE in HPLMN and EHPLMN not;

A kind of network side network element comprises acquiring unit and implements the unit; Wherein,

Acquiring unit is for the type information about EAB that obtains the UE of access network by core network element;

Implement the unit, be used for implementing access control according to the type information about EAB of UE.

Preferably, described enforcement unit is further used for, and measures the total resources that all UE about the EAB type of described UE use, and the EAB parameter of the type UE is set, and perhaps carries out access control according to UE about the type of EAB.

Preferably, for UMTS, described network side network element is radio network controller (RNC), and described core network element is MSC or SGSN; For LTE, described network side network element is evolution base station, and described core network element is MME.

Preferably, for UMTS, described acquiring unit by the Iu interface signaling directly obtain described UE about the EAB type information; Perhaps, described acquiring unit obtains the subscription data of described UE by the Iu interface signaling, and the type about EAB of determining described UE according to subscription data and the access network information under the described UE present access subzone of described UE;

For the LTE system, described acquiring unit by the S1 interface signaling directly obtain described UE about the EAB type information; Perhaps, described acquiring unit obtains the subscription data of described UE by the S1 interface signaling, and the type about EAB of determining described UE according to subscription data and the access network information under the described UE present access subzone of described UE.

Among the present invention, network side knows that by core network element UE is about the type information of EAB, network side is by measuring the total resources that uses separately that obtains dissimilar UE, and then can take corresponding Access Control Policy for the dissimilar UE of network to be accessed, rational expansion access control parameter is set, and the dissimilar UE that treat access network realize different access controls.The invention solves the stock number that network side in the existing system can not know that the dissimilar UE of accessed network use, the UE that can not treat access network takes the problem of rational access control.The present invention has guaranteed that by the terminal of different relevant EAB types is carried out access control communication system network congestion can not occur, guarantees the QoS when terminal access quantity is too much, and the user who has promoted the user that accesses terminal experiences.

Description of drawings

Fig. 1 is the schematic diagram of type under the UE;

Fig. 2 is that the embodiment of the invention one is based on the UE access process figure of access control;

Fig. 3 is that the embodiment of the invention two is based on the UE access process figure of access control;

Fig. 4 is that the embodiment of the invention three is based on the UE access process figure of access control;

Fig. 5 is the composition structural representation of network side network element of the present invention.

Embodiment

Basic thought of the present invention is: network side is known the affiliated relevant EAB type information of UE of access network, thereby by measuring the total resources that uses separately that obtains dissimilar UE, and then can take Access Control Policy for the dissimilar UE of network to be accessed, rational expansion access control parameter is set, and the dissimilar UE that treat access network realize different access controls.

For making the purpose, technical solutions and advantages of the present invention clearer, by the following examples and with reference to accompanying drawing, the present invention is described in more detail.

Embodiment one

Present embodiment has been described the method for network side configuration expansion access control parameter in the LTE system.

In the present embodiment, UE1 and UE2 reside in 1 jurisdiction district 1, base station, are in idle condition.UE1 and UE2 all are configured to the UE of applicable EAB.The access category of this UE of usim card indicating of UE1 is 2 in addition, and namely Access Class is 2.Also preserve the HPLMN sign in the usim card of UE1 and UE2, also may comprise EHPLMN sign and preferential public land mobile network sign (preferred PLMN).In the present embodiment, the HPLMN that preserves in the usim card of UE1 is PLMN1, and EHPLMN is PLMN2 and PLMN3, and preferred PLMN is PLMN4.The PLMN that broadcasts in the system message of residential quarter 1 is PLMN4.The HPLMN that preserves in the usim card of UE2 is PLMN2, and EHPLMN is PLMN4, and Preferred PLMN is not set.

Sorting criterion according to subscriber equipment:

Type A (Category A): all are applicable to the subscriber equipment of EAB;

Type B: be applicable to EAB, and the subscriber equipment in home public land mobile network (HPLMN) and equivalent home public land mobile network (EHPLMN) not;

Type C: be applicable to EAB, and the subscriber equipment in HPLMN, EHPLMN and preferential public land mobile network (Preferred PLMN) not.

Fig. 1 has showed the subordinate relation of this three types, can find out that the scope of Category A is greater than the scope of Category B; And the scope of Category B is more than or equal to the scope of Category C.Need to prove, adopt Category A, B, C to represent different types herein, also can adopt Category 1,2,3 to represent different types.In following examples of the present invention, equally also the UE based on above-mentioned three types carries out corresponding access control, no longer one by one explanation in following each embodiment.

The resident residential quarter 1 of UE1 is PLMN4, neither belongs to the HPLMN (PLMN1) of UE1, does not also belong to EHPLMN (PLMN2 and PLMN3), but belongs to the Preferred PLMN of UE1; And UE is configured to applicable EAB, and this moment, UE1 both satisfied the classification of Category A, satisfied again the classification of Category B.From the feature (mating most in other words) that can accurately describe UE1, UE1 belongs to Category B.

According to the cell ID of all types of correspondences of persistent district type and UE self storage, UE2 belongs to Category A, because it does not satisfy the condition of Category B and C.

When UE1 need to initiate business, need to judge whether to allow the access network initiating business request according to EAB parameter or the ACB parameter of residential quarter 1 broadcasting (by the system message transmission).This moment is because the load of base station 1 is lower, have enough resources to satisfy new user's access request, so base station 1 do not dispose EAB parameter (being that the EAB parameter is not set in the system message); UE1 finds in the system message EAB parameter not to be set, adopts the ACB parameter to implement the access judgement, if court verdict is to allow (not barred), then UE1 can initiate to access at random, sends the RRC connection request to network side when accessing at random successfully; If court verdict is not allow (barred), then can not initiate immediately to access at random, need to wait for a period of time and again implement the access judgement.

Fig. 2 is that the embodiment of the invention one is based on the UE access process figure of access control, as shown in Figure 2, in the present embodiment, suppose that the result that UE1 implements the access judgement according to the ACB parameter allows access, UE1 is according to the random access resource in the system message, initiate at random access, set up RRC and connect, the access process of UE1 mainly may further comprise the steps:

Step 201, UE1 is 1 transmission RRC connection request (RRC connection Request) to the base station, in this connection request, has carried the identification information of UE1.

Step 202 after base station 1 receives the RRC connection request, is the UE1 distributing radio resource, sends the RRC connection to UE1 and sets up signaling (RRC Connection Setup).

Step 203, UE1 receive RRC connect set up signaling after, use parameter configuration wherein, 1 returns RRC and connects to set up and finish signaling (RRC Connection Setup Complete) to the base station.This signaling also comprises the service requesting information (belonging to Non-Access Stratum) of UE1.

Step 204, base station 1 is to Mobility Management Entity (MME, Mobility Management Entity) send initial user facility information (Initial UE Message), wherein comprise the identification information of subscriber equipment, and service requesting information (belonging to Non-Access Stratum).

Step 205, after MME receives Initial UE Message, UE1 is carried out authentication, after the authentication success, 1 sends initial context foundation request (Initial Context Setup Request) to the base station, wherein comprise the configuration parameter of RAB (RAB, Radio Access Bearer), the parameter of security configuration and the type information under the UE1.

In this step, when MME carries out authentication to UE, can be from core network element home subscriber server (HSS, Home Subscriber Server) obtains the CAMEL-Subscription-Information of this UE, simultaneously judge type under the UE according to the selected network of UE, namely judging UE is above-mentioned Category B.MME transmits type information under the UE1 by the initial context request of setting up to base station 1, during specific implementation, need to set up in the request message cell of type information under the newly-increased indication UE1 at initial context.

After base station 1 receives initial context foundation request, know the Category that UE1 is affiliated, just can measure the total resources of the UE use of all Category B, comprise Radio Resource total amount and/or transfer resource total amount, wherein the Radio Resource total amount can adopt total Physical Resource Block (Total PRB usage) expression.The LTE system adopts Physical Resource Block (PRB, Physical Resource Block) expression Radio Resource, the total amount of the employed Physical Resource Block of UE that obtains Category B, perhaps ratio (comparing with total Physical Resource Block) can be added up in base station 1.The transfer resource total amount refers to the speed of the UE institute the transmission of data of Category B, and base station 1 can be added up and obtain in certain time period the speed of the UE institute the transmission of data of Category B.

Step 206, base station 1 sends safe mode command (Security Mode Command) to UE1, is UE1 configuration cryptographic algorithm and protection algorithm integrallty.

Step 207, UE1 uses cryptographic algorithm and protection algorithm integrallty wherein, and 1 returns safe mode and finishes signaling (Security Mode Complete) to the base station.

Step 208, base station 1 sends the RRC connection to UE1 and reshuffles signaling (RRC Connection Reconfiguration), wherein comprises the configuration parameter of Data Radio Bearer (DRB, Data Radio Bearer), and measures configuration parameter.Described Data Radio Bearer is used for the transmission of data, corresponding to the RAB in the above-mentioned steps 204.

Step 209, UE1 uses configuration parameter wherein, and 1 returns RRC and connects to reshuffle and finish signaling (RRC Connection Reconfiguration Complete) to the base station.

So far, the carrying that is used for transfer of data has been set up for UE1 in base station 1, and UE1 can commence business.

The total resources of the UE use of Category B will be measured in base station 1 always after step 205, the measured value of this total resources can dynamic change.Along with the UE quantity that accesses residential quarter 1 increases gradually, the total resources that they use also increases gradually, the initial context that base station 1 receives in the time of can setting up radio bearer by UE is set up the Category that demand signalling obtains access UE, and then measures the total resources that other Category UE use.Because the total resource quantity in residential quarter 1 is limited, when the total resources that use at UE base station 1 reaches predetermined threshold, needs to implement access control.Described predetermined threshold can be disposed by background server by operator.In the present embodiment, because the total resources that dissimilar UE uses is different, base station 1 arranges different EAB parameters for different Category, and the UE as for Category A arranges EAB1; UE for Category B arranges EAB2; UE for Category C arranges EAB3.These EAB parameters are broadcasted in base station 1 in the system message of residential quarter 1.

This moment, UE2 was owing to there is business demand, needed access network.UE2 has obtained the corresponding EAB parameter of dissimilar UE by system message, and in view of UE2 belongs to Category A, so UE2 need to implement the access judgement according to the corresponding EAB parameter of Category A (EAB1).If court verdict is permission, UE2 can initiate to access at random, and 1 sets up the RRC connection in the residential quarter, and then sets up Data Radio Bearer again; If court verdict is not for allowing, UE2 does not allow to initiate at random access, again implement the access judgement after need to waiting for a period of time, need perhaps to wait in the system message of residential quarter 1 that EAB parameter for Category A implements the access judgement after changing again.

If UE2 access network, after MME carries out authentication to it, the type information under the UE2 is carried in meeting in initial context foundation request, after base station 1 obtains the affiliated type information of UE2 accordingly, need to make the decision-making that whether allows described subscriber equipment access network according to the load condition of this moment, the decision-making of permission is made in base station 1 herein, base station 2 needs to measure the employed total resources of UE2 afterwards, and then statistics obtains the total resources of the UE use of all Category A, access control is implemented according to total resources in base station 1, and the EAB parameter is set.

In the present embodiment, MME by and the base station between the type information of S1 interface signaling informing base station UE after, the total resources that the type UE uses will be measured in the base station, and then the EAB parameter is set accordingly.In the present embodiment, MME notifies the type information under the UE to the base station by the initial context request of setting up, MME also can set up at initial context and carry its signatory home public land mobile network (HPLMN) sign, equivalent home public land mobile network (EHPLMN) sign and preferential public land mobile network (Preferred PLMN) sign in the request, certainly, this also needs to represent by set up in the request message newly-increased corresponding cell at initial context; Because the selected network of UE has been known in the base station, therefore after the base station receives the signatory RRC signaling that home public land mobile network sign, equivalent home public land mobile network identify and preferential public land mobile network identifies of this UE, can judge the type that this UE is affiliated, and then can measure the total resources that dissimilar UE use, then the EAB parameter is set accordingly.

In the present embodiment, UE1 is when initial access network, base station 1 does not dispose the EAB parameter, base station 1 also can be under the lower scene of load, dispose looser EAB parameter, if the EAB parameter adopts the access scale factor to represent that base station 1 can arrange the EAB parameter close to 1, so just can guarantee that most of subscriber equipmenies can access network.Along with the UE quantity of access network increases, after load increased, the EAB parameter can be adjusted such as the less EAB parameter of configuration numerical value in base station 1, access that like this can restricted part UE, thus reach the purpose of control load.

Embodiment two

Present embodiment has been described the method for network side configuration expansion access control parameter in the universal mobile telecommunications system.

In the present embodiment, UE3 and UE4 reside in 2 jurisdiction districts 2, base station, are in idle condition, and base station 2 is subjected to radio network controller (RNC, Radio Network Controller) administration.UE3 and UE4 all are configured to the UE of applicable EAB.The access category of this UE of usim card indicating of UE3 is 4 in addition, and namely Access Class is 4.Also preserve the HPLMN sign in the usim card of UE3 and UE4, also may comprise EHPLMN sign and preferential public land mobile network sign (preferred PLMN).The HPLMN that preserves in the usim card of UE3 is PLMN1, and EHPLMN is PLMN2 and PLMN3, and preferred PLMN is PLMN4.The HPLMN that preserves in the usim card of UE4 is PLMN2, and EHPLMN is PLMN4, and Preferred PLMN is not set.In the present embodiment, the PLMN that broadcasts in the system message of residential quarter 2 is PLMN1, and to should PLMN, UE3 be the UE of Category A, and UE4 is the UE of Category C.

UE3 need to initiate business, and UE3 need to judge whether to allow the access network initiating business request according to EAB parameter or the ACB parameter of residential quarter 2 broadcasting (by the system message transmission).This moment is because the load of residential quarter 2 is lower, have enough resources to satisfy new user's access request, so base station 3 do not dispose EAB parameter (being that the EAB parameter is not set in the system message); UE3 finds in the system message EAB parameter not to be set, adopts the ACB parameter to implement the access judgement, if court verdict is to allow (not barred), then UE3 can initiate to access at random, after accessing at random successfully, sends service request to network side; If court verdict is not allow (barred), then can not initiate immediately to access at random, need to wait for a period of time and again implement the access judgement.

Fig. 3 is that the embodiment of the invention two is based on the UE access process figure of access control, as shown in Figure 3, in the present embodiment, the result that UE3 implements the access judgement according to the ACB parameter allows, UE3 is according to the random access resource in the system message, initiate at random access, set up RRC and connect, the access process of UE3 mainly may further comprise the steps:

Step 301, UE3 sends RRC connection request (RRC connection Request) to RNC, in this connection request, has carried the identification information of UE3.

Step 302 after RNC receives the RRC connection request, is the UE3 distributing radio resource, sends the RRC connection to UE3 and sets up signaling (RRC Connection Setup).

Step 303, UE3 receive RRC connect set up signaling after, use parameter configuration wherein, return RRC to RNC and connect to set up and finish signaling (RRC Connection Setup Complete).

Step 304, UE3 sends initial direct-sending (Initial Direct Transfer) signaling to RNC, comprises the service requesting information of UE3 in this signaling.

Step 305, RNC will send initial user facility information (Initial UE Message) to core net, wherein comprise the service request of UE3.

In UMTS, core net is divided into CS territory and PS territory, and the core network element in CS territory is mobile switching centre (MSC, Mobile Switching Center), if the UE3 initiation is the service request in CS territory, then RNC sends service request to MSC.The core network element in PS territory is Serving GPRS Support Node (SGSN, Serving GPRS Support Node), if the UE3 initiation is the service request in PS territory, then RNC sends service request to SGSN.

Step 306, after core net receives service request, UE3 is carried out authentication, after the authentication success, send RAB assignment request (Radio Access Bearer Assignment Request) to RNC, wherein comprise the configuration parameter of RAB and the type information under the UE3.

In this step, when core net is carried out authentication to UE3, can be from core network element home subscriber server (HSS, Home Subscriber Server) obtains the CAMEL-Subscription-Information of this UE, simultaneously judge type under the UE3, i.e. Category A recited above according to the selected network of UE3.Core net sends to RNC by the RAB assignment request with the type information under the UE3, and this need to increase cell newly and carry type information under the UE3 in this signaling.The mode that the base station obtains the type information under the UE has two kinds of forms of expression, a kind of is directly to carry the affiliated type information of UE by core network element in the RAB assignment request of network side (being RNC in the present embodiment) transmission, such as the information of the Category A in this example; Another kind is to send the network information (UE subscription data) that UE contracted by core network element to network side, as indicates the HPLMN of this UE, also may comprise EHPLMN, and preferential PLMN, and the type of being determined UE3 by RNC self is CategoryA.In the UE subscription data, EHPLMN and preferential public land mobile network are option.

After RNC obtains the affiliated type information of UE3, just can measure the total resources of the UE use of all Category A, comprise Radio Resource total amount and/or transfer resource total amount, wherein the Radio Resource total amount can adopt spread spectrum code resources to represent.RNC can add up the total amount of the employed spread spectrum code resources of UE that obtains Category A, perhaps ratio (comparing with total spread spectrum code resources).The transfer resource total amount refers to the speed of the UE institute the transmission of data of Category A, and RNC can add up and obtain in certain time period the speed of the UE institute the transmission of data of Category A.If RNC has obtained the signatory network information of UE by the RAB assignment request, RNC need to judge type under the UE in conjunction with the selected network of UE, then measures the total resources that Category A UE uses.

In the process that step 306 is carried out, dispose in addition the flow process of safe mode, purpose is to be UE3 configuration cryptographic algorithm and protection algorithm integrallty.

Step 307, RNC sends radio bearer to UE3 and sets up signaling (Radio Bearer Setup), wherein comprises the configuration parameter of Data Radio Bearer (DRB, Data Radio Bearer).Described Data Radio Bearer is used for the transmission of data, corresponding to the RAB in the above-mentioned steps 306.

Step 308, UE3 uses configuration parameter wherein, returns radio bearer foundation to RNC and finishes signaling (Radio Bearer Setup Complete).

So far, RNC is that UE3 has set up the carrying that is used for transfer of data, and UE3 can commence business.

RNC will measure the total resources of the UE use of Category A always after step 306, this value can dynamic change.Along with the UE quantity that accesses residential quarter 2 increases gradually, the total resources that they use also increases gradually, and RNC can obtain by core net the Category of access UE, and then measures the total resources of other Category UE uses.Because the total resource quantity in residential quarter 1 is limited, when the total resources that RNC uses at UE reaches predetermined threshold, needs to implement access control.Described predetermined threshold can be disposed by background server by operator.In the present embodiment, because the total resources that dissimilar UE uses is different, RNC arranges different EAB parameters for different Category, and the UE as for Category A arranges EAB1; UE for Category B arranges EAB2; UE for Category C arranges EAB3.RNC broadcasts these EAB parameters in the system message of residential quarter 2.

This moment, UE4 was owing to there is business demand, needed access network.UE4 has obtained the corresponding EAB parameter of dissimilar UE by system message, and in view of UE4 belongs to Category C, so UE4 need to implement the access judgement according to the corresponding EAB parameter of Category C (EAB3).If court verdict is permission, UE4 can initiate to access at random, and 2 set up the RRC connection in the residential quarter, and then set up Data Radio Bearer again; If court verdict is not for allowing, UE4 does not allow to initiate at random access, again implement the access judgement after need to waiting for a period of time, need perhaps to wait in the system message of residential quarter 4 that EAB parameter for Category C implements the access judgement after changing again.

If the UE4 access network is set up carrying, RNC can be known type information under the UE to the RAB assignment request of its transmission by core net, after RNC obtains the affiliated type information of UE4, measure the employed total resources of UE4, and then statistics obtains the total resources of the UE use of all Category C, RNC implements access control according to total resources, and the EAB parameter is set.

Embodiment three

In the present embodiment, UE5 resides in 3 jurisdiction districts 3, base station, is in idle condition.UE5 is configured to the UE of applicable EAB.The HPLMN that preserves in the usim card of UE5 is PLMN1, and EHPLMN is PLMN2, and preferred PLMN is PLMN3.The PLMN of residential quarter 3 is PLMN3, and this moment, UE5 belonged to Category B.

UE5 need to initiate business, and UE5 need to judge whether to allow the access network initiating business request according to EAB parameter or the ACB parameter of residential quarter 3 broadcasting (by the system message transmission).Comprise the EAB parameter in the system message of residential quarter 3 at this moment; UE5 adopts the EAB parameter to implement the access judgement, if court verdict is to allow (not barred), then UE5 needs to implement the access judgement according to the ACB parameter again, only have when adjudicating successfully according to ACB parameter enforcement access and can initiate to access at random, when accessing at random successfully, send the RRC connection request to network side; If the result that UE5 implements the access judgement according to EAB or ACB parameter does not allow (barred), then UE5 can not initiate to access at random immediately, need to wait for a period of time and again implement the access judgement.

Fig. 4 be the embodiment of the invention three based on the UE access process figure of access control, as shown in Figure 4, in the present embodiment, the result that UE5 implements the access judgement according to EAB and ACB parameter allows, UE5 initiates at random access according to the random access resource in the system message, and the access process of UE5 is:

Step 401, UE5 is 3 transmission RRC connection requests to the base station, in this connection request, have carried the identification information of UE5.

Step 402 after base station 3 receives the RRC connection request, is the UE5 distributing radio resource, sends the RRC connection to UE5 and sets up signaling.

Step 403, UE5 receive RRC connect set up signaling after, use parameter configuration wherein, 3 return RRC and connect to set up and finish signaling to the base station.This signaling also comprises the service requesting information (belonging to Non-Access Stratum) of UE5.

Step 404, base station 3 sends the initial user facility information to Mobility Management Entity, wherein comprises the identification information of subscriber equipment, and service requesting information (belonging to Non-Access Stratum).

Step 405, after MME receives, UE5 is carried out authentication, after the authentication success, 3 send initial context foundation request (Initial Context Setup Request) to the base station, wherein comprise the configuration parameter of RAB (Radio Access Bearer, RAB), the parameter of security configuration and the type information under the UE5.

In this step, when MME carries out authentication to UE5, can obtain from the core network element home subscriber server CAMEL-Subscription-Information of this UE, simultaneously judge type under the UE5, i.e. Category B recited above according to the selected network of UE5.Then by initial context set up demand signalling with the type information delivery under the UE5 to base station 3.

Step 406, base station 3 receive initial context and set up after the request, know the type information that UE5 is affiliated.This moment is because the subscriber equipment quantity of access residential quarter 3 is more, the load of residential quarter 3 is larger, therefore the decision that does not allow UE5 to set up RAB is made in base station 3, base station 3 sends failure of establishing initial context (Initial Context Setup Failure) signaling to MME, the reason such as the Radio Resource that wherein comprise failure are inadequate, perhaps refuse the subscriber equipment access of the type.

Step 407, base station 3 sends RRC Connection Release signaling to UE5, discharges the RRC that has set up and connects.Comprise release cause in this signaling such as Radio Resource is inadequate, perhaps refuse the subscriber equipment access of the type.

UE5 receives release signaling, gets back to Idle state.While is to the Non-Access Stratum report RR C Connection Release of UE5, and release cause.

The present invention has put down in writing a kind of system of access control, comprises network side and core network element, wherein,

Wherein, described network side is further used for, and measures the total resources that all UE about the EAB type of described UE use, and the EAB parameter of the type UE is set; Perhaps carry out access control according to UE about the EAB type.

Described according to the carrying out access control about the EAB type and refer to of UE, when allowing described UE access, described network side is described UE allocation radio resource, for described UE sets up radio bearer; When not allowing described UE access, described network side refusal is set up radio bearer for described UE.

For UMTS, described network side is radio network controller (RNC), and described core network element is MSC or SGSN; For LTE, described network side is evolution base station, and described core network element is MME.

For the UMTS system,

For the LTE system,

Wherein, described system also comprises HSS;

Wherein, the subscription data of described UE comprises: the home public land mobile network HPLMN information of UE;

Wherein, the type about EAB of UE comprises at least a with Types Below:

All are applicable to the UE information of EAB;

Be applicable to EAB, and the UE in HPLMN and EHPLMN not;

The system that it will be appreciated by those skilled in the art that aforementioned access control does not upgrade the framework of existing network system, just wherein Network Element Function and the interactive function between network element has been carried out corresponding improvement.More than, mainly be that the improved network element of correlation function is described.

Fig. 5 is the composition structural representation of network side network element of the present invention, and as shown in Figure 5, network side network element of the present invention comprises acquiring unit 50 and implements unit 51; Wherein,

Acquiring unit 50 is for the type information about EAB that obtains the UE of access network by core network element;

Implement unit 51, be used for implementing access control according to the type information about EAB of UE.

Above-mentioned enforcement unit 50 is further used for, and measures the total resources that all UE about the EAB type of described UE use, and the EAB parameter of the type UE is set; Perhaps carry out access control according to described UE about the EAB type.

For UMTS, described network side network element is radio network controller (RNC), and described core network element is MSC or SGSN; For LTE, described network side network element is evolution base station, and described core network element is MME.

For UMTS, above-mentioned acquiring unit 50 by the Iu interface signaling directly obtain described UE about the EAB type information; Perhaps, above-mentioned acquiring unit 50 obtains the subscription data of described UE by the Iu interface signaling, and the type about EAB of determining described UE according to subscription data and the access network information under the described UE present access subzone of described UE;

For the LTE system, above-mentioned acquiring unit 50 by the S1 interface signaling directly obtain described UE about the EAB type information;

Perhaps, above-mentioned acquiring unit 50 obtains the subscription data of described UE by the S1 interface signaling, and the type about EAB of determining described UE according to subscription data and the access network information under the described UE present access subzone of described UE.

Art technology should be appreciated that the practical function of the each processing unit that relates in the present invention's network side network element shown in Figure 5 can be with reference to the associated description of the method and system of aforementioned access control and understand.The function of the each processing unit among the figure can realize by the program that runs on the processor, also can realize by concrete logical circuit.

The above is preferred embodiment of the present invention only, is not for limiting protection scope of the present invention.

Claims

1. the method for an access control is characterized in that, described method comprises:

Network side obtains the type information of access control EAB about expansion of the user equipment (UE) of access network by core network element, and implements access control according to the type information about EAB of UE.

2. method according to claim 1 is characterized in that, the described type information about EAB according to UE is implemented access control and is:

3. method according to claim 1 is characterized in that,

For UMTS, described network side is radio network controller (RNC), and described core network element is moving exchanging center MSC or Serving GPRS Support Node SGSN; For LTE, described network side is evolution base station, and described core network element is Mobility Management Entity MME.

4. method according to claim 3 is characterized in that, described network side obtains the UE of access network by core network element the type information about EAB is:

For the UMTS system,

For the LTE system,

5. method according to claim 3 is characterized in that, described method also comprises:

6. according to claim 4 or 5 described methods, it is characterized in that the subscription data of described UE comprises: the home public land mobile network HPLMN information of UE;

7. each described method in 6 according to claim 1 is characterized in that, the type about EAB of UE comprises at least a with Types Below:

All are applicable to the UE information of EAB;

Be applicable to EAB, and the UE in HPLMN and EHPLMN not;

8. the system of an access control comprises network side and core network element, it is characterized in that,

9. system according to claim 8 is characterized in that,

Described network side is further used for, and measures the total resources that all UE about the EAB type of described UE use, and the EAB parameter of the type UE is set; Perhaps carry out access control according to UE about the EAB type.

10. system according to claim 8 is characterized in that,

11. system according to claim 10 is characterized in that:

For the UMTS system,

For the LTE system,

12. system according to claim 10 is characterized in that, described system also comprises HSS;

13. according to claim 11 or 12 described systems, it is characterized in that the subscription data of described UE comprises: the home public land mobile network HPLMN information of UE;

14. each described system in 13 is characterized in that according to claim 8, the type about EAB of UE comprises at least a with Types Below:

All are applicable to the UE information of EAB;

Be applicable to EAB, and the UE in HPLMN and EHPLMN not;

15. a network side network element is characterized in that, comprises acquiring unit and implements the unit; Wherein,

16. network side network element according to claim 15, it is characterized in that described enforcement unit is further used for, measure the total resources that all UE about the EAB type of described UE use, the EAB parameter of the type UE is set, perhaps carries out access control according to UE about the type of EAB.

17. according to claim 15 or 16 described network side network elements, it is characterized in that,

18. network side network element according to claim 17 is characterized in that, for UMTS, described acquiring unit by the Iu interface signaling directly obtain described UE about the EAB type information; Perhaps, described acquiring unit obtains the subscription data of described UE by the Iu interface signaling, and the type about EAB of determining described UE according to subscription data and the access network information under the described UE present access subzone of described UE;