CN104581874A - A method and device for restricting user equipment from accessing base station equipment - Google Patents

Abstract

The invention discloses a method and device for restraining user equipment from accessing to base station equipment. The method comprises the following steps: receiving location updating information sent by the base station equipment; judging the legality of source location information, which is included in the location updating information and is used by the user equipment before the location switching incident happens; when the source location information is determined to be illegal, sending access restriction information containing the source location information to the user equipment accessed to the base station equipment, so as to restrain the user equipment receiving the access restriction information from accessing to the base station equipment corresponding to the source location information. Therefore, by judging the legality of the source location information used by the user equipment before the location switching incident happens, pseudo base station equipment arranged around the base station equipment can be recognized, and the recognized pseudo base station equipment can be sent to the user equipment in the form of access restriction information, so that the user equipment is effectively prevented from accessing to the pseudo base station equipment during location switching, and the user equipment is prevented from being interfered by the pseudo base station equipment.

Description

A method and device for restricting user equipment from accessing base station equipment

technical field

The present invention relates to the field of wireless communication, in particular to a method and device for restricting user equipment from accessing base station equipment.

Background technique

Since the current GSM (Global System for Mobile communication, Global System for Mobile Communications) network system uses non-one-way authentication technology, that is, only the network side authenticates the user equipment that is connected, and the user equipment does not perform authentication on the network that is connected. , so that a large number of fake base station equipment impersonate the mobile communication network deployed by the operator.

Among them, compared with the mobile communication network deployed by the operator, the pseudo base station equipment has the following characteristics:

1. It is the same as the broadcast network number and broadcast frequency of the mobile communication network deployed by the operator;

2. The signal strength is much greater than that of the mobile communication network deployed by the operator, but the coverage area is small.

Since the signal strength is much greater than the signal strength of the mobile communication network deployed by the operator, when the user equipment will enter the coverage area of the pseudo base station equipment, the user equipment will quickly reselect to the pseudo base station equipment for access. After the user equipment accesses the pseudo base station equipment, the pseudo base station equipment obtains information such as IMSI (International Mobile Subscriber Identifier, International Mobile Subscriber Identifier) and IMEI (International Mobile Equipment Identity, International Mobile Equipment Identity) of the user equipment, and pushes the information to the user equipment. A large number of spam text messages, and after the push is over, the user equipment is quickly disconnected from the pseudo base station equipment through settings, and re-selected to access the mobile communication network deployed by the operator. The above process is difficult for the user equipment to detect, but it causes the user equipment to receive a large number of junk messages, which brings troubles to the life of the user.

In addition, during the period when the user equipment accesses the pseudo base station equipment, it cannot communicate normally (for example, it cannot perform calling service, data service, etc.), which seriously affects the user experience.

To sum up, there is an urgent need for a pseudo base station identification method for solving the problem of how to prevent user equipment from accessing pseudo base station equipment.

Contents of the invention

Embodiments of the present invention provide a method and device for restricting user equipment from accessing base station equipment, so as to solve the problem of how to prevent user equipment from accessing pseudo base station equipment.

A method for restricting user equipment access to base station equipment, comprising:

receiving location update information sent by the base station device, wherein the location update information is used to characterize a location handover event occurring on a user equipment accessing the base station device, and includes source location information used before the location handover event of the user equipment occurs;

Judging the legality of the source location information;

When it is determined that the source location information is illegal, send the restricted access information including the source location information to the user equipment accessing the base station equipment, so as to restrict the user equipment receiving the restricted access information from accessing the base station device. Enter the base station equipment corresponding to the source location information.

Before determining the validity of the source location information, the method further includes:

According to the received source location information, determine whether the source location information is a special location area identifier;

When the judgment result is that the source location information is a special location area identifier, count the first number of location update information containing the special location area identifier received within a set time period;

When the judging result is that the source location information is not a special location area identifier, count the second times of receiving location update information including the source location information.

Judging the legality of the source location information, including:

Comparing the statistically obtained first number with a set first threshold;

When the comparison result is that the first number is greater than the set first threshold, it is determined that the source location information belonging to the special location area identifier is illegal;

When the comparison result is that the first number is not greater than the set first threshold, it is determined that the source location information belonging to the special location area identifier is legal.

The special location area identifier includes at least a 0 identifier, a 65534 identifier, and a 65535 identifier.

Judging the legality of the source location information, including:

Comparing the second number of times obtained by statistics with a set second threshold;

When the comparison result is that the second number of times is greater than the set second threshold, it is determined that the source location information is illegal;

When the comparison result is that the second number of times is not greater than the set second threshold, it is determined that the source location information is legal.

Judging the legality of the source location information, including:

When the judging result is that the source location information is not a special location area identifier, judging whether the source location information belongs to the location information of a neighboring base station of the base station device;

When it is determined that the source location information does not belong to the location information of the neighboring base stations of the base station device, it is determined that the source location information is illegal.

After determining that the source location information is illegal, the method further includes:

determining that the base station device corresponding to the source location information is a pseudo base station device, and

Determine the device identifier of the base station device that sends the location update information, search for the device identifiers of adjacent base station devices that send the location update information, and generate an information list of pseudo base station devices, wherein the information list contains sending the device identifier of the base station device that sends the location update information, the found device identifier of the adjacent base station device, and the source location information;

Sending the restricted access information including the source location information to the user equipment accessing the base station equipment, including:

Send the access restriction information including the information list to the user equipment accessing the base station equipment that sends the location update information.

A method for restricting user equipment access to base station equipment, comprising:

The user equipment receives the restricted access information sent by the base station equipment, wherein the restricted access information includes location information of restricted access; and

According to the location information of the restricted access, deny access to the base station equipment corresponding to the location information.

A control device for restricting access of user equipment to base station equipment, comprising:

The receiving module is configured to receive location update information sent by the base station equipment, wherein the location update information is used to represent a location handover event that occurs on a user equipment that accesses the base station equipment, and includes information used before the location handover event of the user equipment occurs. source location information of

A judging module, configured to judge the legality of the source location information;

A sending module, configured to, when it is determined that the source location information is illegal, send restricted access information including the source location information to user equipment accessing the base station device, so as to restrict receiving the restricted access information The user equipment of the information accesses the base station equipment corresponding to the source location information.

The control device also includes:

A judging module, configured to judge whether the source location information is a special location area identifier according to the received source location information before judging the validity of the source location information;

When the judgment result is that the source location information is a special location area identifier, count the first number of location update information containing the special location area identifier received within a set time period;

When the judging result is that the source location information is not a special location area identifier, count the second times of receiving location update information including the source location information.

The judging module is specifically configured to compare the first number obtained through statistics with a set first threshold;

When the comparison result is that the first number is greater than the set first threshold, it is determined that the source location information belonging to the special location area identifier is illegal;

When the comparison result is that the first number is not greater than the set first threshold, it is determined that the source location information belonging to the special location area identifier is legal.

The special location area identifier includes at least a 0 identifier, a 65534 identifier, and a 65535 identifier.

The judging module is specifically configured to compare the second number of times obtained through statistics with a set second threshold;

When the comparison result is that the second number of times is greater than the set second threshold, it is determined that the source location information is illegal;

When the comparison result is that the second number of times is not greater than the set second threshold, it is determined that the source location information is legal.

The judging module is specifically configured to judge whether the source location information belongs to the location information of a neighboring base station of the base station device when the judging result is that the source location information is not a special location area identifier;

When it is determined that the source location information does not belong to the location information of the neighboring base stations of the base station device, it is determined that the source location information is illegal.

The control device also includes:

The fake base station determination module is used to determine that the base station device corresponding to the source location information is a fake base station device after determining that the source location information is illegal, and determine the device identifier of the base station device that sends the location update information, and search for the sending The equipment identification of the adjacent base station equipment of the base station equipment of the location update information generates an information list of pseudo base station equipment, wherein the information list includes the equipment identification of the base station equipment sending the location update information, the found The device identifier of the adjacent base station device and the source location information;

The sending module is specifically configured to send the access restriction information including the information list to the user equipment accessing the base station equipment that sends the location update information.

A user equipment, comprising:

A receiving module, configured to receive restricted access information sent by the base station equipment, wherein the restricted access information includes location information of restricted access;

The access restriction module is configured to refuse access to the base station equipment corresponding to the location information according to the location information of the access restriction.

The beneficial effects of the present invention are as follows:

In the embodiment of the present invention, by receiving the location update information sent by the base station equipment, the validity of the source location information used before the location switching event of the user equipment contained in the location update information is judged, and the source location information is determined to be illegal When , the access restriction information including the source location information is sent to the user equipment accessing the base station equipment, so as to restrict the user equipment receiving the access restriction information from accessing the location corresponding to the source location information. The base station equipment, in this way, by judging the legality of the source location information used before the location switching event of the user equipment contained in the location change information of the access base station equipment, identifying the pseudo base station equipment deployed around the base station equipment, and The identified pseudo base station is sent to the user equipment in the form of restricted access information, which effectively prevents the user equipment from accessing the pseudo base station when location switching occurs, and avoids the interference of the pseudo base station to the user equipment.

Description of drawings

FIG. 1 is a flow chart of a method for restricting user equipment from accessing base station equipment according to Embodiment 1 of the present invention;

FIG. 2 is a flowchart of a method for restricting user equipment from accessing base station equipment according to Embodiment 2 of the present invention;

FIG. 3 is a schematic structural diagram of a control device that restricts user equipment from accessing base station equipment according to Embodiment 3 of the present invention;

FIG. 4 is a schematic structural diagram of a user equipment provided in Embodiment 4 of the present invention;

FIG. 5 is a schematic structural diagram of a system for restricting user equipment from accessing base station equipment according to Embodiment 5 of the present invention.

Detailed ways

In order to achieve the purpose of the present invention, an embodiment of the present invention provides a method and device for restricting user equipment from accessing base station equipment, by receiving location update information sent by the base station equipment, a location switching event occurs for the user equipment included in the location update information judging the validity of the previously used source location information, and when it is determined that the source location information is illegal, sending restricted access information including the source location information to the user equipment accessing the base station device, In order to restrict the user equipment receiving the restricted access information from accessing the base station equipment corresponding to the source location information, in this way, the user equipment contained in the location change information of the access base station equipment used before the location switching event occurs Judging the legitimacy of the source location information, identifying the pseudo base station equipment deployed around the base station equipment, and sending the identified pseudo base station equipment to the user equipment in the form of restricted access information, effectively preventing the user equipment from happening. The pseudo base station equipment is connected during position switching, which avoids the interference of the pseudo base station equipment to the user equipment.

It should be noted that the base station equipment (for example, access point) involved in this embodiment of the present invention may refer to a device in the access network that communicates with wireless terminals through one or more sectors on the air interface; the base station equipment may also use It serves as a router between the wireless terminal and the rest of the access network, which can include the Internet Protocol (IP) network; the base station equipment can also Coordinates attribute management for the air interface. For example, the base station device can be a base station (BTS, Base Transceiver Station) in GSM or CDMA, or a base station (NodeB) in WCDMA, or an evolved base station (NodeB or eNB or e-NodeB, evolutionary Node B), there is no specific limitation here.

Various embodiments of the present invention will be described in detail below in conjunction with the accompanying drawings.

Embodiment one:

As shown in FIG. 1 , it is a flowchart of a method for restricting user equipment from accessing base station equipment provided by Embodiment 1 of the present invention. The methods include:

Step 101: Receive location update information sent by a base station device.

Wherein, the location update information is used to characterize a location handover event occurred by the user equipment accessing the base station device, and includes source location information used before the user equipment location handover event occurs.

In step 101, before receiving the location update information sent by the base station equipment, the method further includes but not limited to:

Obtain the location information of its adjacent base station equipment through the base station equipment, and obtain the location information table of the base station equipment and the base station equipment in neighboring cells.

The location information includes but not limited to: LAC (Location Area Code, location area code), LAI (Location Area Identity, location area identification), CI (Cell Identity, cell identification).

Among them, LAI=MCC+MNC+LAC, MCC is the Mobile Country Code, which is the country code of the mobile station, and MNC is the Mobile Network Code, which is the mobile network code.

For example: the obtained location information table is shown in Table 1:

Location information of base station equipment Location information of adjacent base station equipment CI1 CI 2, CI 3, CI 4, CI 5, CI 6, CI 7 CI 2 CI 1, CI 3, CI 7, CI 9, CI 10

Table 1

It should be noted that the base station equipment can include a base station controller (BSC, Base StationControl) and a mobile switching center (MSC, Mobile Switching Center). One MSC contains multiple BSCs, and one BSC generally corresponds to one BTS (Base Transceiver Station, Base transceiver station); Generally speaking, a base station equipment is a cell (Cell).

It should be noted that LACs are usually allocated according to a certain area, that is, multiple base station devices in an area have one LAC, but one MSC can contain one or more LACs, and one LAC can have one or more BSCs .

Each cell (or base station equipment) has its own CI, and the terminal equipment can obtain the CI of the base station equipment through AT commands.

In the embodiment of the present invention, only the situation that one BSC corresponds to one cell is discussed, but the situation that one BSC corresponds to multiple cells does not affect the application of this aspect, which is hereby explained.

Before the base station equipment sends the location update message, the base station equipment receives the location update request message sent by the user equipment that has undergone location handover and access, and the location update request message includes the location of the base station equipment accessed by the user equipment before the location handover occurs information.

It should be noted here that the ways for the user equipment to initiate location switching include but are not limited to the following three ways:

The first type of location handover: normal location handover, that is, the user equipment is handed over from one base station device to an adjacent base station device according to a normal handover process.

Assuming that the user equipment is handed over in two adjacent areas, the LAC of the base station equipment where the user equipment is located before the handover may be different from the LAC of the base station equipment where the user equipment is located after the handover; assuming that the user equipment is in two adjacent base stations in one area If handover is performed between devices, the LAC of the base station equipment where the user equipment is located before the handover may be the same as the LAC of the base station equipment where the user equipment is located after the handover.

In this process, the user equipment sends a location switching request message to the handover target base station equipment, and the location switching request message includes the location information of the source base station equipment where the user equipment was before switching, that is, the source location information referred to in the present invention .

The location information includes at least TMSI (Temporary Mobile Station Identity, temporary mobile station identifier), LAI information, CI information, and LAC information reported by the user equipment.

Wherein, assuming that the base station device is a pseudo base station, the pseudo base station device has LAC, but does not have CI information.

The second type of location switching: periodic location switching, that is, the network side periodically updates the location of the mobile device attached to the network according to the set time period, and detects the survival status of the user.

The third location switching: IMSI (International Mobile Subscriber Identifier, International Mobile Subscriber Identifier) attachment location update process, that is, the user equipment uses the IMSI to access the base station equipment when it is turned on.

Step 102: According to the received source location information, judge whether the source location information is a special location area identifier, if yes, perform step 103, otherwise, perform step 104.

The special location area identifier includes at least a 0 identifier, a 65534 identifier, and a 65535 identifier.

Step 103: When it is judged that the source location information is a SLA ID, count the first number of received location update information including the SLA ID within a set time period, and execute Step 105.

In step 103, when the user equipment is abnormal, abnormal handover is likely to occur, and abnormal handover is generally handover from the base station equipment corresponding to the special LAC to other base station equipment, but it cannot be determined, so it is necessary to check the The location update information including the special location area identifier is counted, which is the first number.

Wherein, the set time period may be within a period of time, such as: 08:00-09:00; it may also be within a set time period, such as: one day or 24 hours, etc., which is not limited here.

For example: as shown in Table 2, count the first number of received location update information containing the special location area identifier within the set time period:

source location information first number

0 731 65534 5211 65535 96

Table 2

Step 104: When the judging result is that the source location information is not a special location area identifier, count the second times of receiving location update information including the source location information, and execute step 105.

In step 104, the number of received location update information including the source location information is counted, which is the second number of times.

For example: as shown in Table 3, count the second times of receiving location update information including the source location information:

source location information second time 115 4 416 5

table 3

Step 105: Judging the validity of the source location information.

In step 105, since the source location information may be special location information or abnormal location information, after the source location information is received, its legality needs to be judged.

When the source location information belongs to the special location area identifier judged in step 103, the first count obtained through statistics is compared with the set first threshold.

When the comparison result is that the first number is greater than the set first threshold, it is determined that the source location information belonging to the special location area identifier is illegal;

When the comparison result is that the first number is not greater than the set first threshold, it is determined that the source location information belonging to the special location area identifier is legal.

When the source location information belongs to the abnormal location area identifier judged in step 104, the second count obtained through statistics is compared with the set second threshold.

When the comparison result is that the second number of times is greater than the set second threshold, it is determined that the source location information is illegal;

When the comparison result is that the second number of times is not greater than the set second threshold, it is determined that the source location information is legal.

It should be noted that the first threshold may be determined based on experience, and may also be determined according to needs; the second threshold is generally 0, that is, an abnormal LAC is found and the location information is determined to be illegal, or Determine as needed; there is no limit here.

Step 106: When it is determined that the source location information is illegal, send restricted access information including the source location information to the user equipment accessing the base station equipment, so as to restrict the access restricted information from receiving the restricted access information The user equipment accesses the base station equipment corresponding to the source location information.

In step 106, when it is determined that the source location information is illegal, it is determined that the cell where the source location information is located contains a fake base station device, and the LAC number of the fake base station device is the source location information.

When the judgment result is that the source location information is illegal, further obtain the CI information of the base station equipment where the user equipment is currently located (after the location is switched); and confirm that the base station equipment contains pseudo base station equipment.

Specifically, determine the device identifier of the base station device that sent the location update information (that is, the base station device where the user equipment is currently located), search for the device identifiers of adjacent base station devices that send the location update information, and generate a pseudo base station device information list.

Wherein, the information list includes the device identifier of the base station device that sends the location update information, the found device identifiers of the adjacent base station devices, and the source location information.

For example: as shown in Table 4, generate a list of information:

Table 4

After the information list is obtained, the access restriction information of the information list is sent to the user equipment to be accessed to the base station equipment sending the location update information.

Through the solution of Embodiment 1 of the present invention, the location update information sent by the base station equipment is received, and the validity of the source location information used before the location switching event of the user equipment contained in the location update information is judged, and the source When the location information is illegal, sending restricted access information including the location information of the source to the user equipment accessing the base station equipment, so as to restrict the user equipment receiving the restricted access information from accessing the source The base station equipment corresponding to the location information, in this way, by judging the legality of the source location information used before the location switching event of the user equipment contained in the location change information of the access base station equipment, it can identify the fake network deployed around the base station equipment. Base station equipment, and send the identified pseudo base station equipment to the user equipment in the form of restricted access information, effectively preventing the user equipment from accessing the pseudo base station equipment when location switching occurs, and avoiding the interference of the pseudo base station equipment on the user equipment .

Embodiment two:

As shown in Figure 2, it is a flow chart of a method for restricting user equipment from accessing base station equipment provided by Embodiment 2 of the present invention. Embodiment 2 of the present invention is an invention under the same inventive concept as Embodiment 1 of the present invention, so The methods described include:

Step 201: the user equipment receives the access restriction information sent by the base station equipment.

Wherein, the restricted access information includes location information of restricted access.

In step 201, after receiving the restricted access information sent by the base station equipment, the user equipment stores the restricted access location information contained in the restricted access information in the forbidden roaming list (Forbidden Location Areas For Foaming) and forbidden access list (Forbidden Location Areas ForRegion Provision Of Service).

It should be noted that the access restriction information sent by the base station device may be sent periodically or from time to time, which is not limited here.

Step 202: The user equipment refuses to access the base station equipment corresponding to the location information according to the location information of the restricted access.

In step 202, when the user equipment receives the connection request sent by the base station equipment with the access-restricted location information, the user equipment refuses to access the base station equipment according to the locally stored access-restricted location information, so that the user equipment avoids Access to the base station equipment corresponding to the location information.

Embodiment three:

As shown in Figure 3, it is a schematic structural diagram of a control device that restricts user equipment from accessing base station equipment provided by Embodiment 3 of the present invention. The control device described in Embodiment 3 of the present invention is the same as Embodiment 1 of the present invention and the present invention Embodiment 2 Devices under the same inventive concept, the control device includes: a receiving module 11, a judging module 12 and a sending module 13, wherein:

The receiving module 11 is configured to receive location update information sent by the base station equipment, wherein the location update information is used to represent a location handover event that occurs on a user equipment that accesses the base station equipment, and includes information that has occurred before the location handover event of the user equipment occurs. Source location information to use.

A judging module 12, configured to judge the legality of the source location information.

The sending module 13 is configured to, when it is determined that the source location information is illegal, send restricted access information including the source location information to the user equipment accessing the base station equipment, so as to restrict receiving the restricted access information. The user equipment that enters the information accesses the base station equipment corresponding to the source location information.

Optionally, the control device further includes: a judging module 14, wherein:

A judging module 14, configured to judge whether the source location information is a special location area identifier according to the received source location information before judging the validity of the source location information;

When the judgment result is that the source location information is a special location area identifier, count the first number of location update information containing the special location area identifier received within a set time period;

When the judging result is that the source location information is not a special location area identifier, count the second times of receiving location update information including the source location information.

Specifically, the determination module 12 is specifically configured to compare the statistically obtained first number with a set first threshold;

When the comparison result is that the first number is greater than the set first threshold, it is determined that the source location information belonging to the special location area identifier is illegal;

When the comparison result is that the first number is not greater than the set first threshold, it is determined that the source location information belonging to the special location area identifier is legal.

The special location area identifier includes at least a 0 identifier, a 65534 identifier, and a 65535 identifier.

The determination module 12 is specifically configured to compare the second number of times obtained through statistics with a set second threshold;

When the comparison result is that the second number of times is greater than the set second threshold, it is determined that the source location information is illegal;

When the comparison result is that the second number of times is not greater than the set second threshold, it is determined that the source location information is legal.

The judging module 12 is specifically configured to judge whether the source location information belongs to the location information of a neighboring base station of the base station device when the judging result is that the source location information is not a special location area identifier;

When it is determined that the source location information does not belong to the location information of the neighboring base stations of the base station device, it is determined that the source location information is illegal.

Optionally, the control device further includes: a pseudo base station determining module 15, wherein:

The fake base station determination module 15 is used to determine that the base station device corresponding to the source location information is a fake base station device after determining that the source location information is illegal, and determine the device identifier of the base station device that sends the location update information, and search for The equipment identification of the adjacent base station equipment of the base station equipment that sends the location update information, and generates an information list of the pseudo base station equipment, wherein the information list includes the equipment identification of the base station equipment that sends the location update information, the found The device identifier of the neighboring base station device and the source location information.

The sending module 13 is specifically configured to send the restricted access information including the information list to the user equipment accessing the base station device that sends the location update information.

It should be noted that the control device described in Embodiment 3 of the present invention may be a logical component in the base station device, or may be a physical entity unit of the base station device, or may be a third control device other than the base station device, which is not described here. limited.

Embodiment four:

As shown in FIG. 4 , it is a schematic structural diagram of a user equipment provided by Embodiment 4 of the present invention. Embodiment 4 of the present invention is an invention under the same inventive concept as Embodiment 1 to Embodiment 3 of the present invention. The user equipment includes: a receiving module 21 and an access restriction module 22, wherein:

The receiving module 21 is configured to receive access restriction information sent by the base station equipment, wherein the access restriction information includes location information of access restriction.

The access restriction module 22 is configured to refuse access to the base station equipment corresponding to the location information according to the location information of the access restriction.

It should be noted that the user equipment described in Embodiment 4 of the present invention may be a physical unit, or may be a logic component integrated inside the user equipment, which is not limited here.

Embodiment five:

As shown in Figure 5, it is a schematic structural diagram of a system for restricting user equipment from accessing base station equipment provided by Embodiment 5 of the present invention. Embodiment 5 of the present invention is the same invention as Embodiment 1 to Embodiment 4 of the present invention. The invention under the conception, the system includes: base station equipment 31, user equipment 32 and control equipment 33, wherein:

The control device has the functions described in Embodiment 3 of the present invention, the user equipment has the functions described in Embodiment 4 of the present invention, and the base station equipment can be legitimate base station equipment, or illegal and pseudo base station equipment.

Those skilled in the art should understand that the embodiments of the present invention may be provided as methods, devices (devices), or computer program products. Accordingly, the present invention can take the form of an entirely hardware embodiment, an entirely software embodiment, or an embodiment combining software and hardware aspects. Furthermore, the present invention may take the form of a computer program product embodied on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) having computer-usable program code embodied therein.

The present invention is described with reference to flowchart illustrations and/or block diagrams of methods, apparatus (devices) and computer program products according to embodiments of the invention. It should be understood that each procedure and/or block in the flowchart and/or block diagram, and a combination of procedures and/or blocks in the flowchart and/or block diagram can be realized by computer program instructions. These computer program instructions may be provided to a general purpose computer, special purpose computer, embedded processor, or processor of other programmable data processing equipment to produce a machine such that the instructions executed by the processor of the computer or other programmable data processing equipment produce a An apparatus for realizing the functions specified in one or more procedures of the flowchart and/or one or more blocks of the block diagram.

These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing apparatus to operate in a specific manner, such that the instructions stored in the computer-readable memory produce an article of manufacture comprising instruction means, the instructions The device realizes the function specified in one or more procedures of the flowchart and/or one or more blocks of the block diagram.

These computer program instructions can also be loaded onto a computer or other programmable data processing device, causing a series of operational steps to be performed on the computer or other programmable device to produce a computer-implemented process, thereby The instructions provide steps for implementing the functions specified in the flow chart or blocks of the flowchart and/or the block or blocks of the block diagrams.

While preferred embodiments of the invention have been described, additional changes and modifications to these embodiments can be made by those skilled in the art once the basic inventive concept is appreciated. Therefore, it is intended that the appended claims be construed to cover the preferred embodiment as well as all changes and modifications which fall within the scope of the invention.

Obviously, those skilled in the art can make various changes and modifications to the present invention without departing from the spirit and scope of the present invention. Thus, if these modifications and variations of the present invention fall within the scope of the claims of the present invention and their equivalent technologies, the present invention also intends to include these modifications and variations.

Claims (16)

1. a method for restricting user equipment access base station equipment, is characterized in that, comprising:

Receive the location updating message that base station equipment sends, wherein, described location updating message is for characterizing the position handover event of the subscriber equipment generation accessing described base station equipment, the source location information used before containing subscriber equipment occurrence positions handover event;

The legitimacy of described source location information is judged;

When determining that described source location information is illegal, the restriction access information containing described source location information is sent to the subscriber equipment accessing described base station equipment, access base station equipment corresponding to described source location information to limit the subscriber equipment receiving described restriction access information.

2. the method for claim 1, is characterized in that, before judging the legitimacy of described source location information, described method also comprises:

According to the described source location information received, judge whether described source location information is specific position district mark;

When judged result to be described source location information be specific position district mark, in the statistics setting-up time cycle, receive first number of the location updating message comprising described specific position district mark;

When judged result is described source location information Bu Shi specific position district mark, statistics receives second number of the location updating message comprising described source location information.

3. method as claimed in claim 2, is characterized in that, judge, comprising the legitimacy of described source location information:

Compare adding up described first number obtained with setting first threshold;

Comparative result be described first number be greater than setting first threshold time, the described source location information determining to belong to specific position district mark is illegal;

Comparative result be described first number be not more than setting first threshold time, the described source location information determining to belong to specific position district mark is legal.

4. method as claimed in claim 2 or claim 3, is characterized in that, described specific position district mark at least contains 0 mark, 65534 marks, 65535 marks.

5. method as claimed in claim 2, is characterized in that, judge, comprising the legitimacy of described source location information:

Compare adding up described second number obtained with setting Second Threshold;

Comparative result be described second number be greater than setting Second Threshold time, determine that described source location information is illegal;

Comparative result be described second number be not more than setting Second Threshold time, determine that described source location information is legal.

6. method as claimed in claim 2, is characterized in that, judge, comprising the legitimacy of described source location information:

When judged result is described source location information Bu Shi specific position district mark, judge whether described source location information belongs to the positional information of the adjacent base station of described base station equipment;

When determining that described source location information does not belong to the positional information of the adjacent base station of described base station equipment, determine that described source location information is illegal.

7. the method as described in claim 1 or 3 or 5 or 6, it is characterized in that, after determining that described source location information is illegal, described method also comprises:

Determine that base station equipment corresponding to described source location information is pseudo-base station equipment; And

Determine the device identification of the base station equipment sending described location updating message, search the device identification of the adjacent base station equipment of the base station equipment sending described location updating message, generate the information list of pseudo-base station equipment, wherein, the device identification containing the base station equipment sending described location updating message in described information list, the device identification of described adjacent base station equipment found and described source location information;

The restriction access information containing described source location information is sent to the subscriber equipment accessing described base station equipment, comprising:

The restriction access information containing described information list is sent to the subscriber equipment of the base station equipment of the described location updating message of the described transmission of access.

8. a method for restricting user equipment access base station equipment, is characterized in that, comprising:

Subscriber equipment receives the restriction access information that base station equipment sends, and wherein, contains the positional information of restriction access in described restriction access information; And

According to the positional information of described restriction access, the base station equipment that the described positional information of refusal access is corresponding.

9. a control appliance for restricting user equipment access base station equipment, is characterized in that, comprising:

Receiver module, for receiving the location updating message that base station equipment sends, wherein, described location updating message is for characterizing the position handover event of the subscriber equipment generation accessing described base station equipment, the source location information used before containing subscriber equipment occurrence positions handover event;

Determination module, for judging the legitimacy of described source location information;

Sending module, for when determining that described source location information is illegal, the restriction access information containing described source location information is sent to the subscriber equipment accessing described base station equipment, access base station equipment corresponding to described source location information to limit the subscriber equipment receiving described restriction access information.

10. control appliance as claimed in claim 9, it is characterized in that, described control appliance also comprises:

Judge module, for before judging the legitimacy of described source location information, according to the described source location information received, judges whether described source location information is specific position district mark;

When judged result to be described source location information be specific position district mark, in the statistics setting-up time cycle, receive first number of the location updating message comprising described specific position district mark;

When judged result is described source location information Bu Shi specific position district mark, statistics receives second number of the location updating message comprising described source location information.

11. control appliances as claimed in claim 10, is characterized in that,

Described determination module, specifically for comparing adding up described first number obtained with setting first threshold;

Comparative result be described first number be greater than setting first threshold time, the described source location information determining to belong to specific position district mark is illegal;

Comparative result be described first number be not more than setting first threshold time, the described source location information determining to belong to specific position district mark is legal.

12. control appliances as described in claim 10 or 11, is characterized in that, described specific position district mark at least contains 0 mark, 65534 marks, 65535 marks.

13. control appliances as claimed in claim 10, is characterized in that,

Described determination module, specifically for comparing adding up described second number obtained with setting Second Threshold;

Comparative result be described second number be greater than setting Second Threshold time, determine that described source location information is illegal;

Comparative result be described second number be not more than setting Second Threshold time, determine that described source location information is legal.

14. control appliances as claimed in claim 10, is characterized in that,

Described determination module, during specifically for being described source location information Bu Shi specific position district mark in judged result, judges whether described source location information belongs to the positional information of the adjacent base station of described base station equipment;

When determining that described source location information does not belong to the positional information of the adjacent base station of described base station equipment, determine that described source location information is illegal.

15. control appliances as described in claim 9 or 11 or 13 or 14, it is characterized in that, described control appliance also comprises:

Pseudo-base station determination module, for after determining that described source location information is illegal, determine that base station equipment corresponding to described source location information is pseudo-base station equipment, and determine the device identification of the base station equipment sending described location updating message, search the device identification of the adjacent base station equipment of the base station equipment sending described location updating message, generate the information list of pseudo-base station equipment, wherein, the device identification of the base station equipment sending described location updating message is contained in described information list, the device identification of the described adjacent base station equipment found and described source location information,

Described sending module, specifically for sending to the subscriber equipment of the base station equipment of the described location updating message of the described transmission of access by the restriction access information containing described information list.

16. 1 kinds of subscriber equipmenies, is characterized in that, comprising:

Receiver module, for receiving the restriction access information that base station equipment sends, wherein, contains the positional information of restriction access in described restriction access information;

Restriction access module, for the positional information according to described restriction access, the base station equipment that the described positional information of refusal access is corresponding.