CN106686687B

CN106686687B - Access control method and device

Info

Publication number: CN106686687B
Application number: CN201611246740.9A
Authority: CN
Inventors: 陈雨
Original assignee: Nubia Technology Co Ltd
Current assignee: Nubia Technology Co Ltd
Priority date: 2016-12-29
Filing date: 2016-12-29
Publication date: 2020-12-08
Anticipated expiration: 2036-12-29
Also published as: CN106686687A

Abstract

The embodiment of the invention discloses an access control method, which comprises the following steps: acquiring access attribute information of User Equipment (UE); calculating a first access parameter and a second access parameter based on the access attribute information, wherein the first access parameter is used for representing the probability of accessing the UE to a first network, and the second access parameter is used for representing the probability of accessing the UE to a second network; comparing the first access parameter to the second access parameter; and accessing the UE to the first network or the second network according to the comparison result. The embodiment of the invention also discloses an access control device.

Description

Access control method and device

Technical Field

The present invention relates to mobile communications technologies, and in particular, to an access control method and apparatus.

Background

In recent years, mobile communication technologies and standards have been developed rapidly, and a wide variety of Wireless communication systems provide heterogeneous network environments for users, such as Long Term Evolution (LTE) Networks and Wireless Local Area Networks (WLANs). Generally, an LTE network can provide a user with a service with low delay and high reliability, but the cost is higher than that of a WLAN and the throughput is lower; while WLAN can provide users with services with high throughput and low cost, it does not perform as well as delay and reliability as LTE network.

With the increase of terminal data traffic expansion, a single network cannot meet the user requirements, and meanwhile, considering that the existing intelligent mobile terminals all support the WLAN, some operators and companies begin to propose to fuse the LTE network and the WLAN, and the fused network is used to realize joint transmission, so as to achieve the purposes of load sharing and network performance improvement. However, under the heterogeneous network convergence architecture, one key issue that must be considered and solved is: how to enable any user to obtain a communication Service with Quality of Service (QoS) guarantee at any time and any place.

Disclosure of Invention

In view of this, embodiments of the present invention are expected to provide an access control method and an access control device, so as to ensure QoS of emergency communication services and reduce the number of vertical handovers in a converged network.

In order to achieve the purpose, the technical scheme of the invention is realized as follows:

in a first aspect, an embodiment of the present invention provides an access control method, including: acquiring access attribute information of User Equipment (UE); calculating a first access parameter and a second access parameter based on the access attribute information, wherein the first access parameter is used for representing the probability of accessing the UE to a first network, and the second access parameter is used for representing the probability of accessing the UE to a second network; comparing the first access parameter to the second access parameter; and accessing the UE to the first network or the second network according to the comparison result.

In a second aspect, an embodiment of the present invention provides an access control apparatus, including: the device comprises an acquisition unit, a calculation unit, a comparison unit and an access unit, wherein the acquisition unit is used for acquiring access attribute information of User Equipment (UE); the calculating unit is configured to calculate a first access parameter and a second access parameter based on the access attribute information, where the first access parameter is used to characterize a probability of accessing the UE to a first network, and the second access parameter is used to characterize the probability of accessing the UE to a second network; the comparing unit is used for comparing the first access parameter with the second access parameter; the access unit is configured to access the UE to the first network or the second network according to a comparison result.

The access control method and the access control device provided by the embodiment of the invention firstly calculate a first access parameter and a second access parameter based on the access attribute information of the user equipment, wherein the first access parameter is used for representing the probability of accessing the user equipment to a first network, the second access parameter is used for representing the probability of accessing the user equipment to a second network, and then the access control of the user equipment is realized according to the first access parameter and the second access parameter, and the user equipment is accessed to the first network or the second network. Therefore, the method can select the proper network access for the user equipment in the converged network according to the access attribute information of the user equipment, such as the position information of the user equipment, emergency service, real-time service and the like, as the reference for optimizing the network access selection. In addition, the operator can adjust the weight corresponding to each attribute information according to the requirement of the operator and the communication environment, so as to achieve the expected communication state. Therefore, QoS of emergency communication service can be guaranteed, the number of vertical switching times can be reduced, system resource loss is reduced, data loss is reduced, efficient utilization of network resources is guaranteed, and good user experience is provided in a converged network.

Drawings

FIG. 1-1 is a diagram of a hardware configuration of a mobile terminal implementing various embodiments of the invention;

fig. 1-2 is a schematic diagram of a wireless communication system for a mobile terminal as shown in fig. 1-1;

FIG. 2 is a system diagram of a converged network in the prior art;

fig. 3 is a flowchart illustrating an access control method according to a first embodiment of the present invention;

FIG. 4 is a first comparison result of a simulation experiment in the first embodiment of the present invention;

FIG. 5 is a graph II of the comparison result of the simulation experiment in the first embodiment of the present invention;

fig. 6 is a schematic structural diagram of an access control device in a second embodiment of the present invention.

Detailed Description

It should be understood that the embodiments described herein are only for explaining the technical solutions of the present invention, and are not intended to limit the scope of the present invention.

A mobile terminal implementing various embodiments of the present invention will now be described with reference to the accompanying drawings. In the following description, suffixes such as "module", "component", or "unit" used to denote elements are used only for facilitating the explanation of the present invention, and have no specific meaning in themselves. Thus, "module" and "component" may be used in a mixture.

The mobile terminal may be implemented in various forms. For example, the terminal described in the present invention may include a mobile terminal such as a mobile phone, a smart phone, a notebook computer, a digital broadcast receiver, a PDA (personal digital assistant), a PAD (tablet computer), a PMP (portable multimedia player), a navigation device, and the like, and a stationary terminal such as a digital TV, a desktop computer, and the like. In the following, it is assumed that the terminal is a mobile terminal. However, it will be understood by those skilled in the art that the configuration according to the embodiment of the present invention can be applied to a fixed type terminal in addition to elements particularly used for moving purposes.

Fig. 1-1 is a hardware configuration schematic of a mobile terminal implementing various embodiments of the present invention.

The mobile terminal 100 may include a wireless communication unit 110, an a/V (audio/video) input unit 120, a user input unit 130, a sensing unit 140, an output unit 150, a memory 160, an interface unit 170, a controller 180, and a power supply unit 190, etc. Fig. 1-1 illustrates a mobile terminal having various components, but it is to be understood that not all illustrated components are required to be implemented. More or fewer components may alternatively be implemented. Elements of the mobile terminal will be described in detail below.

The wireless communication unit 110 typically includes one or more components that allow radio communication between the mobile terminal 100 and a wireless communication system or network. For example, the wireless communication unit may include at least one of a broadcast receiving module 111, a mobile communication module 112, a wireless internet module 113, a short-range communication module 114, and a location information module 115.

The broadcast receiving module 111 receives a broadcast signal and/or broadcast associated information from an external broadcast management server via a broadcast channel. The broadcast channel may include a satellite channel and/or a terrestrial channel. The broadcast management server may be a server that generates and transmits a broadcast signal and/or broadcast associated information or a server that receives a previously generated broadcast signal and/or broadcast associated information and transmits it to a terminal. The broadcast signal may include a TV broadcast signal, a radio broadcast signal, a data broadcast signal, and the like. Also, the broadcast signal may further include a broadcast signal combined with a TV or radio broadcast signal. The broadcast associated information may also be provided via a mobile communication network and be provided atIn this case, the broadcast associated information may be received by the mobile communication module 112. The broadcast signal may exist in various forms, for example, it may exist in the form of an Electronic Program Guide (EPG) of Digital Multimedia Broadcasting (DMB), an Electronic Service Guide (ESG) of digital video broadcasting-handheld (DVB-H), and the like. The broadcast receiving module 111 may receive a signal broadcast by using various types of broadcasting systems. In particular, the broadcast receiving module 111 may receive a broadcast signal by using a signal such as multimedia broadcasting-terrestrial (DMB-T), digital multimedia broadcasting-satellite (DMB-S), digital video broadcasting-handheld (DVB-H), forward link media (MediaFLO)^@) A digital broadcasting system of a terrestrial digital broadcasting integrated service (ISDB-T), etc. receives digital broadcasting. The broadcast receiving module 111 may be constructed to be suitable for various broadcasting systems that provide broadcast signals as well as the above-mentioned digital broadcasting systems. The broadcast signal and/or broadcast associated information received via the broadcast receiving module 111 may be stored in the memory 160 (or other type of storage medium).

The mobile communication module 112 transmits and/or receives radio signals to and/or from at least one of a base station (e.g., access point, node B, etc.), an external terminal, and a server. Such radio signals may include voice call signals, video call signals, or various types of data transmitted and/or received according to text and/or multimedia messages.

The wireless internet module 113 supports wireless internet access of the mobile terminal. The module may be internally or externally coupled to the terminal. The wireless internet access technology to which the module relates may include WLAN (wireless LAN) (Wi-Fi), Wibro (wireless broadband), Wimax (worldwide interoperability for microwave access), HSDPA (high speed downlink packet access), and the like.

The short-range communication module 114 is a module for supporting short-range communication. Some examples of short-range communication technologies include bluetooth^TMRadio Frequency Identification (RFID), infrared data association (IrDA), Ultra Wideband (UWB), zigbee^TMAnd so on.

The location information module 115 is a module for checking or acquiring location information of the mobile terminal. A typical example of the location information module is a GPS (global positioning system). According to the current technology, the location information module 115 of the GPS calculates distance information and accurate time information from three or more satellites and applies triangulation to the calculated information, thereby accurately calculating three-dimensional current location information according to longitude, latitude, and altitude. Currently, a method for calculating position and time information uses three satellites and corrects an error of the calculated position and time information by using another satellite. In addition, the GPS module 115 can calculate speed information by continuously calculating current position information in real time.

The a/V input unit 120 is used to receive an audio or video signal. The a/V input unit 120 may include a camera 121 and a microphone 1220, and the camera 121 processes image data of still pictures or video obtained by an image capturing apparatus in a video capturing mode or an image capturing mode. The processed image frames may be displayed on the display unit 151. The image frames processed by the camera 121 may be stored in the memory 160 (or other storage medium) or transmitted via the wireless communication unit 110, and two or more cameras 1210 may be provided according to the construction of the mobile terminal. The microphone 122 may receive sounds (audio data) via the microphone in a phone call mode, a recording mode, a voice recognition mode, or the like, and can process such sounds into audio data. The processed audio (voice) data may be converted into a format output transmittable to a mobile communication base station via the mobile communication module 112 in case of a phone call mode. The microphone 122 may implement various types of noise cancellation (or suppression) algorithms to cancel (or suppress) noise or interference generated in the course of receiving and transmitting audio signals.

The user input unit 130 may generate key input data according to a command input by a user to control various operations of the mobile terminal. The user input unit 130 allows a user to input various types of information, and may include a keyboard, dome sheet, touch pad (e.g., a touch-sensitive member that detects changes in resistance, pressure, capacitance, and the like due to being touched), scroll wheel, joystick, and the like. In particular, when the touch pad is superimposed on the display unit 151 in the form of a layer, a touch screen may be formed.

The sensing unit 140 detects a current state of the mobile terminal 100 (e.g., an open or closed state of the mobile terminal 100), a position of the mobile terminal 100, presence or absence of contact (i.e., touch input) by a user with the mobile terminal 100, an orientation of the mobile terminal 100, acceleration or deceleration movement and direction of the mobile terminal 100, and the like, and generates a command or signal for controlling an operation of the mobile terminal 100. For example, when the mobile terminal 100 is implemented as a slide-type mobile phone, the sensing unit 140 may sense whether the slide-type phone is opened or closed. In addition, the sensing unit 140 can detect whether the power supply unit 190 supplies power or whether the interface unit 170 is coupled with an external device. The sensing unit 140 may include a proximity sensor 1410 as will be described below in connection with a touch screen.

The interface unit 170 serves as an interface through which at least one external device is connected to the mobile terminal 100. For example, the external device may include a wired or wireless headset port, an external power supply (or battery charger) port, a wired or wireless data port, a memory card port, a port for connecting a device having an identification module, an audio input/output (I/O) port, a video I/O port, an earphone port, and the like. The identification module may store various information for authenticating a user using the mobile terminal 100 and may include a User Identity Module (UIM), a Subscriber Identity Module (SIM), a Universal Subscriber Identity Module (USIM), and the like. In addition, a device having an identification module (hereinafter, referred to as an "identification device") may take the form of a smart card, and thus, the identification device may be connected with the mobile terminal 100 via a port or other connection means. The interface unit 170 may be used to receive input (e.g., data information, power, etc.) from an external device and transmit the received input to one or more elements within the mobile terminal 100 or may be used to transmit data between the mobile terminal and the external device.

In addition, when the mobile terminal 100 is connected with an external cradle, the interface unit 170 may serve as a path through which power is supplied from the cradle to the mobile terminal 100 or may serve as a path through which various command signals input from the cradle are transmitted to the mobile terminal. Various command signals or power input from the cradle may be used as signals for recognizing whether the mobile terminal is accurately mounted on the cradle. The output unit 150 is configured to provide output signals (e.g., audio signals, video signals, alarm signals, vibration signals, etc.) in a visual, audio, and/or tactile manner. The output unit 150 may include a display unit 151, an audio output module 152, an alarm unit 153, and the like.

The display unit 151 may display information processed in the mobile terminal 100. For example, when the mobile terminal 100 is in a phone call mode, the display unit 151 may display a User Interface (UI) or a Graphical User Interface (GUI) related to a call or other communication (e.g., text messaging, multimedia file downloading, etc.). When the mobile terminal 100 is in a video call mode or an image capturing mode, the display unit 151 may display a captured image and/or a received image, a UI or GUI showing a video or an image and related functions, and the like.

Meanwhile, when the display unit 151 and the touch pad are overlapped with each other in the form of a layer to form a touch screen, the display unit 151 may serve as an input device and an output device. The display unit 151 may include at least one of a Liquid Crystal Display (LCD), a thin film transistor LCD (TFT-LCD), an Organic Light Emitting Diode (OLED) display, a flexible display, a three-dimensional (3D) display, and the like. Some of these displays may be configured to be transparent to allow a user to view from the outside, which may be referred to as transparent displays, and a typical transparent display may be, for example, a TOLED (transparent organic light emitting diode) display or the like. Depending on the particular desired implementation, the mobile terminal 100 may include two or more display units (or other display devices), for example, the mobile terminal may include an external display unit (not shown) and an internal display unit (not shown). The touch screen may be used to detect a touch input pressure as well as a touch input position and a touch input area.

The audio output module 152 may convert audio data received by the wireless communication unit 110 or stored in the memory 160 into an audio signal and output as sound when the mobile terminal is in a call signal reception mode, a call mode, a recording mode, a voice recognition mode, a broadcast reception mode, or the like. Also, the audio output module 152 may provide audio output related to a specific function performed by the mobile terminal 100 (e.g., a call signal reception sound, a message reception sound, etc.). The audio output module 152 may include a speaker, a buzzer, and the like.

The alarm unit 153 may provide an output to notify the mobile terminal 100 of the occurrence of an event. Typical events may include call reception, message reception, key signal input, touch input, and the like. In addition to audio or video output, the alarm unit 153 may provide output in different ways to notify the occurrence of an event. For example, the alarm unit 153 may provide an output in the form of vibration, and when a call, a message, or some other incoming communication (communicating communication) is received, the alarm unit 153 may provide a tactile output (i.e., vibration) to inform the user thereof. By providing such a tactile output, the user can recognize the occurrence of various events even when the user's mobile phone is in the user's pocket. The alarm unit 153 may also provide an output notifying the occurrence of an event via the display unit 151 or the audio output module 152.

The memory 160 may store software programs or the like for processing and controlling operations performed by the controller 180, or may temporarily store data (e.g., a phonebook, messages, still images, videos, etc.) that has been output or is to be output. Also, the memory 160 may store data regarding various ways of vibration and audio signals output when a touch is applied to the touch screen.

The memory 160 may include at least one type of storage medium including a flash memory, a hard disk, a multimedia card, a card-type memory (e.g., SD or DX memory, etc.), a Random Access Memory (RAM), a Static Random Access Memory (SRAM), a read-only memory (ROM), an electrically erasable programmable read-only memory (EEPROM), a programmable read-only memory (PROM), a magnetic memory, a magnetic disk, an optical disk, and the like. Also, the mobile terminal 100 may cooperate with a network storage device that performs a storage function of the memory 160 through a network connection.

The controller 180 generally controls the overall operation of the mobile terminal. For example, the controller 180 performs control and processing related to voice calls, data communications, video calls, and the like. In addition, the controller 180 may include a multimedia module 1810 for reproducing or playing back multimedia data, and the multimedia module 1810 may be constructed within the controller 180 or may be constructed to be separated from the controller 180. The controller 180 may perform a pattern recognition process to recognize a handwriting input or a picture drawing input performed on the touch screen as a character or an image.

The power supply unit 190 receives external power or internal power and provides appropriate power required to operate various elements and components under the control of the controller 180.

The various embodiments described herein may be implemented in a computer-readable medium using, for example, computer software, hardware, or any combination thereof. For a hardware implementation, the embodiments described herein may be implemented using at least one of an Application Specific Integrated Circuit (ASIC), a Digital Signal Processor (DSP), a Digital Signal Processing Device (DSPD), a Programmable Logic Device (PLD), a Field Programmable Gate Array (FPGA), a processor, a controller, a microcontroller, a microprocessor, an electronic unit designed to perform the functions described herein, and in some cases, such embodiments may be implemented in the controller 180. For a software implementation, the implementation such as a process or a function may be implemented with a separate software module that allows performing at least one function or operation. The software codes may be implemented by software applications (or programs) written in any suitable programming language, which may be stored in the memory 160 and executed by the controller 180.

Up to now, the mobile terminal has been described in terms of its functions. Hereinafter, a slide-type mobile terminal among various types of mobile terminals, such as a folder-type, bar-type, swing-type, slide-type mobile terminal, and the like, will be described as an example for the sake of brevity. Accordingly, the present invention can be applied to any type of mobile terminal, and is not limited to a slide type mobile terminal.

The mobile terminal 100 as shown in fig. 1-1 may be configured to operate with communication systems such as wired and wireless communication systems and satellite-based communication systems that transmit data via frames or packets.

A communication system in which a mobile terminal according to the present invention is operable will now be described with reference to fig. 1-2.

Such communication systems may use different air interfaces and/or physical layers. For example, the air interface used by the communication system includes, for example, Frequency Division Multiple Access (FDMA), Time Division Multiple Access (TDMA), Code Division Multiple Access (CDMA), and Universal Mobile Telecommunications System (UMTS) (in particular, Long Term Evolution (LTE)), global system for mobile communications (GSM), and the like. By way of non-limiting example, the following description relates to a CDMA communication system, but such teachings are equally applicable to other types of systems.

Referring to fig. 1-2, a CDMA wireless communication system may include a plurality of mobile terminals 100, a plurality of Base Stations (BSs) 270, Base Station Controllers (BSCs) 275, and a Mobile Switching Center (MSC) 280. The MSC280 is configured to interface with a Public Switched Telephone Network (PSTN) 290. The MSC280 is also configured to interface with a BSC275, which may be coupled to the base station 270 via a backhaul. The backhaul may be constructed according to any of several known interfaces including, for example, E1/T1, ATM, IP, PPP, frame Relay, HDSL, ADSL, or xDSL. It will be understood that a system as shown in fig. 1-2 may include multiple BSCs 2750.

Each BS270 may serve one or more sectors (or regions), each sector covered by a multi-directional antenna or an antenna pointing in a particular direction being radially distant from the BS 270. Alternatively, each partition may be covered by two or more antennas for diversity reception. Each BS270 may be configured to support multiple frequency allocations, with each frequency allocation having a particular frequency spectrum (e.g., 1.25MHz, 5MHz, etc.).

The intersection of partitions with frequency allocations may be referred to as a CDMA channel. The BS270 may also be referred to as a Base Transceiver Subsystem (BTS) or other equivalent terminology. In such a case, the term "base station" may be used to generically refer to a single BSC275 and at least one BS 270. The base stations may also be referred to as "cells". Alternatively, each sector of a particular BS270 may be referred to as a plurality of cell sites.

As shown in fig. 1-2, a Broadcast Transmitter (BT)295 transmits broadcast signals to mobile terminals 100 operating within the system. The broadcast receiving module 111 as shown in fig. 1-1 is provided at the mobile terminal 100 to receive a broadcast signal transmitted by the BT 295. In fig. 1-2, several Global Positioning System (GPS) satellites 300 are shown. The satellite 300 assists in locating at least one of the plurality of mobile terminals 100.

In fig. 1-2, a plurality of satellites 300 are depicted, but it is understood that useful positioning information may be obtained with any number of satellites. The GPS module 115 as shown in fig. 1-1 is generally configured to cooperate with the satellites 300 to obtain desired positioning information. Other techniques that can track the location of the mobile terminal may be used instead of or in addition to GPS tracking techniques. In addition, at least one GPS satellite 300 may selectively or additionally process satellite DMB transmission.

As a typical operation of the wireless communication system, the BS270 receives reverse link signals from various mobile terminals 100. The mobile terminal 100 is generally engaged in conversations, messaging, and other types of communications. Each reverse link signal received by a particular base station 270 is processed within the particular BS 270. The obtained data is forwarded to the associated BSC 275. The BSC provides call resource allocation and mobility management functions including coordination of soft handoff procedures between BSs 270. The BSCs 275 also route the received data to the MSC280, which provides additional routing services for interfacing with the PSTN 290. Similarly, the PSTN290 interfaces with the MSC280, the MSC interfaces with the BSCs 275, and the BSCs 275 accordingly control the BS270 to transmit forward link signals to the mobile terminal 100.

Various embodiments of the method of the present invention will be presented below based on the above-mentioned mobile terminal hardware structure and communication system.

The technical solution of the present invention is further elaborated below with reference to the drawings and the specific embodiments.

In the prior art, in order to solve the problem of excessive network load, considering that most of the current intelligent mobile terminals support the WLAN, some operators and companies start to use a converged network composed of the LTE network and the WLAN to implement joint transmission, so as to achieve the purposes of load sharing and network performance improvement.

Specifically, fig. 2 is a schematic system diagram of a converged network in the prior art, and as shown in fig. 2, in a system model of the converged network composed of an LTE network and a WLAN, each user equipment 21 is a dual-mode device, the LTE network covers a whole cell, the user equipment 21 may be directly connected to a base station 22 in the LTE network for communication, or may be communicated through an Access Point (AP) 23 of the WLAN, where the base station 22 and the AP 23 are both connected to an IP core network 24 and both may support emergency services.

In the above system model of converged network, the service types of users may be divided into: emergency and general services, real-time communication services and non-real-time communication services; the location information of the user terminal may include, according to the mobility of the user: move out of the AP, enter the AP, stay within the AP, and stay outside the AP.

In practical application, the heterogeneous network convergence system provides multiple service types, and different types of services require different QoS guarantees. Emergency services (e.g., voice, video, etc.) have a higher priority than ordinary services (e.g., file transfer) and should be handled in preference to ordinary services. In particular, for real-time emergency communication services, QoS should be guaranteed, and a stable and high-quality communication environment should be provided. In addition, vertical movement may occur due to movement of a User Equipment (UE) between networks with heterogeneous characteristics, and vertical handover may occur in order to ensure that a User keeps communicating continuously, such as moving from outside the access point to the AP or moving from inside the access point to the AP, but the handover execution time is long, and if handover between the LTE network and the WLAN is frequently performed, a large amount of data loss and unreasonable system resource loss are easily caused.

In order to ensure the QoS of the emergency communication service and reduce the number of vertical handovers, embodiments of the present invention provide an access control method, which, in practical applications, may be applied to an occasion where a user equipment needs to perform call access control in a heterogeneous convergence network.

Example one

Then, fig. 3 is a schematic flowchart of an access control method in a first embodiment of the present invention, and referring to fig. 3, the access control method includes:

s301: acquiring access attribute information of UE;

here, the access attribute information is a critical factor that can influence a control access control decision, such as whether the UE is in an AP, whether the UE service is urgent, whether the UE service needs to be processed in real time, and the like.

Specifically, in order to guarantee QoS of the emergency real-time communication service and reduce the number of vertical handovers between the WLAN and the LTE network, access control of a call may be performed according to access attribute information of the user equipment.

In practical applications, different networks have different support capabilities for different services. Such as: a cellular network (such as an LTE network) can provide effective support for real-time services, so that the real-time performance of the cellular network is guaranteed, but the transmission rate of data services is low; short-distance communication networks such as WLAN can provide higher data transmission rate, but the support for real-time services is to be further improved. Therefore, the service newly initiated by the user equipment staying outside the AP and the emergency service (such as voice, video and the like) initiated by the user equipment staying in the AP can be accessed into the LTE network; non-emergency non-real-time services initiated by user equipment staying in the AP or non-emergency real-time services (such as file transmission and the like) initiated by the user equipment staying in the AP can be accessed to the WLAN; the non-emergency real-time service initiated by the user equipment moving out of the AP can be vertically switched to the LTE network. Of course, access control may also be performed based on other access attributes. Here, the embodiments of the present invention are not particularly limited.

Then the access attribute information comprises at least: service priority, service type, and location information. Thus, the service priority includes emergency services and general services, the priority of the general services is lower than that of the emergency services, the service types include real-time services and non-real-time services, and the location information includes stay in the AP, stay out of the AP, move out of the AP, and move into the AP.

S302: calculating a first access parameter and a second access parameter based on the access attribute information;

the first access parameter is used for representing the probability of accessing the UE to the first network, and the second access parameter is used for representing the probability of accessing the UE to the second network.

In practical applications, the first network and the second network are determined by respective networks constituting the converged network system, and for example, if the converged network system is constructed by an LTE network and a WLAN, the first network may be determined as the LTE network and the second network may be determined as the WLAN. Of course, in a specific implementation process, the types of the first network and the second network are not limited to the given examples, and may also be other types, and here, the embodiments of the present invention are not specifically limited.

Here, after obtaining the access attribute information of the ue, the first access parameter and the second access parameter may be calculated by a probabilistic method based on the access attribute information, so as to determine a suitable access network for the ue according to the first access parameter and the second access parameter, that is, whether it is suitable to access the ue to the first network or the second network may be determined according to the first access parameter and the second access parameter.

Illustratively, assume that there are n user nodes in the network, and the access attribute information corresponding to each user equipment, including location information, service priority and service type, is used as a reference for deciding access control. Then, referring to formula (1), the current access attribute information corresponding to each ue in the network may be represented as an S matrix, where each row of the matrix corresponds to the access attribute information of each ue; for each column, for three different types of access attribute information, for example, the first column of the S matrix represents location information of each ue, the second column of the S matrix represents service priority of each ue, and the third column of the S matrix represents service priority of each ue.

Wherein the element s_i1Indicating the location information of the ith user equipment, namely the location of the ith user equipment; element s_i2Indicating the service priority of the ith user equipment, namely whether emergency exists or not; element s_i3The service type of the ith user equipment is represented, namely whether the service is a real-time service or not; i is more than or equal to 1 and less than or equal to n, and n is a positive integer more than or equal to 1.

Here, it should be noted that the number of rows of the S matrix is determined by the number of user nodes in the network; the number of columns of the S matrix may be determined by those skilled in the art according to various factors (access attribute information) that can affect the access control decision, and the embodiment of the present invention is not particularly limited. That is, in the implementation process, a person skilled in the art can consider which access attribute information is used as a reference for deciding access control according to actual situations.

In this way, the a matrix may also be used as a set of candidate network solutions in the heterogeneous converged network. In the embodiment of the present invention, since dual-mode bi-pass is not considered, the candidate network matrix a may be represented as:

A＝(A₁ A₂) (2)

wherein A is₁Indicating access to LTE network, A₂Indicating access to the WLAN network.

In a specific implementation process, S302 may include: acquiring a prediction probability corresponding to the access attribute information; calculating a decision probability matrix through a Bayesian formula based on the prediction probability; and calculating a first access parameter and a second access parameter according to the decision probability matrix and a preset rule.

In practical applications, the obtained access attribute information may be input into a pre-stored probability prediction model to obtain respective prediction probabilities corresponding to respective access attribute information of the UEs in the converged network. Then, the conditional probability of selecting the first network and the second network by the UE under the access attribute information is respectively calculated through a Bayesian formula based on the prediction probability; constructing a decision probability matrix according to the conditional probability; and finally, performing point multiplication on the decision probability matrix and a pre-stored weight matrix, and determining a first access parameter and a second access parameter according to a point multiplication result.

Specifically, the prediction probabilities may include: the probability of the UE staying inside the AP, the probability of the UE staying outside the AP, the probability of the UE moving out of the access point, the probability of the UE moving into the access point, the probability of emergency services, the probability of normal services, the probability of real-time services, and the probability of non-real-time services.

Exemplarily, the conditional probabilities of each ue selecting the LTE network and the WLAN under each access attribute information may be respectively calculated by using a bayesian formula based on the prediction probabilities; and then, according to the conditional probability of selecting the LTE network and the WLAN under each access attribute information, a decision probability matrix is constructed.

Specifically, the decision probability matrix X may be constructed by the conditional probabilities of n user equipment nodes in the network respectively selecting the LTE network and the WLAN, as shown in the following formula (3).

Wherein i is more than or equal to 1 and less than or equal to n, and n is a positive integer more than or equal to 1; j is more than or equal to 1 and less than or equal to 3; x_ijAnd the matrix is a matrix with 2 rows and 1 column and is used for representing the conditional probability that the ith user equipment respectively selects the LTE network and the WLAN under the jth access attribute information.

Wherein i is more than or equal to 1 and less than or equal to n, and n is a positive integer more than or equal to 1; j is more than or equal to 1 and less than or equal to 3; p (A)₁|s_ij) Conditional probability, P (A), for indicating that the ith user equipment selects LTE network under the jth access attribute information₂|s_ij) For indicating the conditional probability of the ith user equipment selecting the WLAN under the jth access attribute information.

Further, the probability that the ith user equipment stays out of the AP is represented as 1-P_istayThe ithThe probability that the user equipment stays within the AP is denoted P_istayThe probability of a common service is denoted as P_iNThe probability of real-time traffic is denoted as P_irtThe probability of moving out of the access point is denoted as P_ioutThe probability of emergency service is denoted as P_iEThe probability of non-real-time traffic is denoted P_inrt。

Then, to obtain the decision probability matrix, a bayesian formula may be used to calculate conditional probabilities that each ue selects the LTE network and the WLAN under each access attribute information, respectively, based on the performance parameters.

The following describes methods for calculating conditional probabilities of selecting the LTE network and the WLAN by the ith ue under the jth access attribute information.

First, conditional probabilities that the ith ue selects the LTE network and the WLAN under the location information (1 st access attribute information) are calculated, respectively, as shown in the following equations (5) and (6).

Wherein, P (A)₁|s_i1) Indicates the conditional probability of the ith user equipment selecting the LTE network under the factor of the location information (1 st access attribute information).

Wherein, P (A)₂|s_i1) Indicating the conditional probability that the ith ue selects WLAN under the location information (1 st access attribute information).

Secondly, the conditional probability of selecting the LTE network and the WLAN by the ith ue under the service priority (2 nd access attribute information) is calculated, as shown in the following equations (7) and (8).

Wherein, P (A)₁|s_i2) Indicating the conditional probability that the ith ue selects the LTE network under the traffic priority (2 nd access attribute information) factor.

Wherein, P (A)₂|s_i2) Indicating the conditional probability that the ith ue will select WLAN under the traffic priority (2 nd access attribute information) factor.

Finally, the conditional probability of the ith ue selecting the LTE network and the WLAN under the service type (3 rd access attribute information) factor is respectively calculated, as shown in the following formula (9) and formula (10).

Wherein, P (A)₁|s_i3) Indicating the conditional probability that the ith user equipment selects the LTE network under the service type (3 rd access attribute information) factor.

Wherein, P (A)₂|s_i3) Indicating the conditional probability that the ith ue selects WLAN under the traffic type (3 rd access attribute information) factor.

In the specific implementation process, in order to effectively utilize and reasonably plan the whole resources of the converged network, the whole network resources can be planned by correspondingly setting different weights for different access attribute information. For example, when the operator attaches importance to the real-time performance of communication, the weight corresponding to the real-time service may be increased; when the operator attaches importance to the handling of the emergency service, the weight corresponding to the priority may be increased. The weights corresponding to different access attribute information are determined by those skilled in the art in the specific implementation process, and the embodiments of the present invention are not specifically limited herein.

Thus, after the decision probability matrix is obtained, the decision probability matrix and the pre-stored weight matrix can be subjected to point multiplication, and then the first access parameter and the second access parameter are determined according to the point multiplication result.

Specifically, the weight of the position information to the user network selection is set to w respectively₁The weight of the service priority to the user network selection is w₂And the weight of the service type to the user network selection is w₃Thus, the weight matrix W stored in advance is as shown in the following equation (11).

Thus, the first access parameter Y corresponding to the ith ue can be calculated as shown in the following equations (12) to (14)_iLTEAnd a second access parameter Y_iWLAN。

Wherein, X_i＝[X_i1 X_i2 X_i3]And representing the decision probability corresponding to the ith user equipment.

That is to say that the position of the first electrode,

Y_iLTE＝w₁×P(A₁|s_i1)+w₂×P(A₁|s_i2)+w₃×P(A₁|s_i3) (13)

Y_iWLAN＝w₁×P(A₂|s_i1)+w₂×P(A₂|s_i2)+w₃×P(A₂|s_i3) (14)

s303: comparing the first access parameter with the second access parameter;

here, in order to select a suitable network for the user equipment to access, after calculating the first access parameter and the second access parameter, the first parameter and the second parameter may be compared, so as to select a corresponding access network according to the comparison result.

S304: and accessing the UE to the first network or the second network according to the comparison result.

Here, after the comparison result of the first access parameter and the second access parameter is obtained, it can be determined whether to access the UE to the first network or to access the UE to the second network.

Specifically, if the first access parameter is greater than the second access parameter, it indicates that the probability of accessing the user equipment to the first network is greater than the probability of accessing the second network under the current access attribute information, and at this time, the user equipment may be accessed to the first network; if the first access parameter is smaller than the second access parameter, the probability that the user equipment is accessed to the second network is larger than the probability that the user equipment is accessed to the first network under the current access attribute information, and at the moment, the user equipment can be accessed to the second network; if the first access parameter is equal to the second access parameter, it indicates that the user equipment can be accessed to the first network or the second network under the current access attribute information. Here, the present invention is not limited to the specific embodiments, which are determined by those skilled in the art in the practical implementation.

Then, in a specific implementation, S304 may include: judging whether the first access parameter is larger than the second access parameter according to the comparison result; and if the first access parameter is larger than the second access parameter, accessing the UE to the first network, otherwise, accessing the UE to the second network.

Thus, the access control of the user equipment is completed.

In addition, in order to verify the validity of the access control method provided by the embodiment of the present invention, MATLAB may be selected as a simulation tool, and it is assumed that 100 pieces of user equipment in a network perform simulation. In practical application, in the access control, besides considering the access attribute information, different services have different requirements on reliability, time delay and data rate, and since different networks use different charging modes and tariff standards, the price is also an important factor influencing the access control. Then, in order to measure the influence of the access control method on the overall network performance, typical network performance parameters such as delay (ms), throughput (MBPS), jitter (ms), and cost can be selected for quantitative analysis.

First, the probability parameters for initialization as shown in table 1 below were randomly generated using MATLAB.

Parameter name	Random number
		P_stay	0.4～0.6
P_E	0.2～0.4
		P_N	0.6～0.8
P_rt	0.4～0.6
		P_nrt	0.4～0.6
P_Out	0.5
		P_in	0.5

TABLE 1

Wherein the probability that the user equipment stays in the AP is represented as P_stayThe probability of emergency service is denoted as P_EThe probability of a common service is denoted as P_NThe probability of real-time traffic is denoted as P_rtThe probability of non-real-time traffic is denoted P_inrtThe probability of moving out of the access point is denoted as P_OutThe probability of moving into an access point is denoted P_in. The initialization parameters must satisfy P_E+P_N＝1，P_rt+P_nrtIn the equilibrium ideal case, the probability of a user entering or exiting a hotspot is equal.

Next, before performing access control, the performance parameters of the two networks in the converged network are shown in table 2 below.

Parameter(s)	Time delay	Throughput capacity	Dithering	Cost of
					LTE	20	85	5	1
WLAN	50	125	20	0.5

TABLE 2

And finally, analyzing the simulation result.

In the initial state, all user equipment is accessed to an LTE network to obtain data in the initial state; then, using the access control method provided by the embodiment of the invention, adopt w₁：w₂：w₃Network switching is performed on a part of user equipment to obtain a comparison result graph shown in fig. 4, which indicates that an operator performs access control by using a policy for balancing access attribute information; finally, hold w₁And w₂Invariably, increasing the real-time traffic weight w₃At this time, it is shown that the operator pays attention to the real-time property of communication, for example, using w₁：w₂：w₃A comparison result graph as shown in fig. 5 is obtained by performing network handover on a part of the ue in a manner of 1:1: 8.

As shown in fig. 4, it can be seen from the experimental result of throughput that, since the throughput of the WLAN is greater than that of the LTE, after a part of the user equipments are handed over, the communication quality is improved, and compared with the throughput of all the access LTE, the network throughput after the handover can be improved by about 27%.

Referring to fig. 5, compared with the initial state, the delay of the network after handover is increased by 40%, the jitter is reduced by about 17%, the network throughput is reduced by about 10%, and the network cost is increased. Thus, it is demonstrated that in order to ensure the effectiveness of user communications, the throughput of the network is reduced and the costs are increased.

Therefore, the simulation result shows that the scheme can enable the user to obtain the best access experience under the condition of considering emergency communication, and meanwhile, the utilization efficiency of the converged network resources can be improved.

As can be seen from the above, in the technical solution provided in the embodiment of the present invention, first, based on the access attribute information of the ue, a first access parameter and a second access parameter are calculated, where the first access parameter is used to characterize a probability of accessing the ue to the first network, and the second access parameter is used to characterize a probability of accessing the ue to the second network, and then, according to the first access parameter and the second access parameter, access control over the ue is implemented, and the ue is accessed to the first network or the second network. Therefore, the method can select the proper network access for the user equipment in the converged network according to the access attribute information of the user equipment, such as the position information of the user equipment, emergency service, real-time service and the like, as the reference for optimizing the network access selection. In addition, the operator can adjust the weight corresponding to each attribute information according to the requirement of the operator and the communication environment, so as to achieve the expected communication state. Therefore, the network switching times can be reduced, the system resource loss is reduced, the data loss is reduced, the efficient utilization of the network resources is ensured, and good user experience is provided in the converged network.

Example two

Based on the same inventive concept, this embodiment further provides an access control apparatus, fig. 6 is a schematic structural diagram of an access control apparatus in the second embodiment of the present invention, and referring to fig. 6, the access control apparatus 60 includes: an obtaining unit 601, a calculating unit 602, a comparing unit 603 and an accessing unit 604, wherein the obtaining unit 601 is configured to obtain access attribute information of a user equipment UE; a calculating unit 602, configured to calculate a first access parameter and a second access parameter based on the access attribute information, where the first access parameter is used to represent a probability of accessing the UE to the first network, and the second access parameter is used to represent a probability of accessing the UE to the second network; a comparing unit 603, configured to compare the first access parameter with the second access parameter; an accessing unit 604, configured to access the UE to the first network or the second network according to the comparison result.

Further, the computing unit is further configured to obtain a prediction probability corresponding to the access attribute information; calculating a decision probability matrix through a Bayesian formula based on the prediction probability; and calculating a first access parameter and a second access parameter according to the decision probability matrix and a preset rule.

Further, the calculating unit is further configured to calculate conditional probabilities that the UE selects the first network and the second network under the access attribute information, respectively, based on the predicted probabilities; and constructing a decision probability matrix according to the conditional probability.

Further, the calculation unit is also used for performing dot multiplication on the decision probability matrix and a pre-stored weight matrix; and determining a first access parameter and a second access parameter according to the dot product result.

Further, the access unit is further configured to determine whether the first access parameter is greater than the second access parameter according to the comparison result; and if the first access parameter is larger than the second access parameter, accessing the UE to the first network, otherwise, accessing the UE to the second network.

In practical application, the obtaining unit, the calculating unit, the comparing unit and the accessing unit can be realized by a central processing unit, a microprocessor, a DSP or an FPGA, and the like.

Here, it should be noted that: the above description of the embodiment of the apparatus is similar to the above description of the embodiment of the method, and has similar beneficial effects to the embodiment of the method, and therefore, the description thereof is omitted. For technical details that are not disclosed in the embodiments of the apparatus of the present invention, please refer to the description of the embodiments of the method of the present invention for understanding, and therefore, for brevity, will not be described again.

Here, it should be noted that:

it should be appreciated that reference throughout this specification to "one embodiment" or "an embodiment" means that a particular feature, structure or characteristic described in connection with the embodiment is included in at least one embodiment of the present invention. Thus, the appearances of the phrases "in one embodiment" or "in an embodiment" in various places throughout this specification are not necessarily all referring to the same embodiment. Furthermore, the particular features, structures, or characteristics may be combined in any suitable manner in one or more embodiments. It should be understood that, in various embodiments of the present invention, the sequence numbers of the above-mentioned processes do not mean the execution sequence, and the execution sequence of each process should be determined by its function and inherent logic, and should not constitute any limitation on the implementation process of the embodiments of the present invention. The above-mentioned serial numbers of the embodiments of the present invention are merely for description and do not represent the merits of the embodiments.

It should be noted that, in this document, the terms "comprises," "comprising," or any other variation thereof, are intended to cover a non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements does not include only those elements but may include other elements not expressly listed or inherent to such process, method, article, or apparatus. Without further limitation, an element defined by the phrase "comprising an … …" does not exclude the presence of other like elements in a process, method, article, or apparatus that comprises the element.

In the several embodiments provided in the present application, it should be understood that the disclosed apparatus and method may be implemented in other ways. The above-described device embodiments are merely illustrative, for example, the division of the unit is only a logical functional division, and there may be other division ways in actual implementation, such as: multiple units or components may be combined, or may be integrated into another system, or some features may be omitted, or not implemented. In addition, the coupling, direct coupling or communication connection between the components shown or discussed may be through some interfaces, and the indirect coupling or communication connection between the devices or units may be electrical, mechanical or other forms.

The units described as separate parts may or may not be physically separate, and parts displayed as units may or may not be physical units; can be located in one place or distributed on a plurality of network units; some or all of the units can be selected according to actual needs to achieve the purpose of the solution of the embodiment.

In addition, all the functional units in the embodiments of the present invention may be integrated into one processing unit, or each unit may be separately regarded as one unit, or two or more units may be integrated into one unit; the integrated unit can be realized in a form of hardware, or in a form of hardware plus a software functional unit.

Those of ordinary skill in the art will understand that: all or part of the steps for realizing the method embodiments can be completed by hardware related to program instructions, the program can be stored in a computer readable storage medium, and the program executes the steps comprising the method embodiments when executed; and the aforementioned storage medium includes: various media that can store program codes, such as a removable Memory device, a Read Only Memory (ROM), a magnetic disk, or an optical disk.

Alternatively, the integrated unit of the present invention may be stored in a computer-readable storage medium if it is implemented in the form of a software functional module and sold or used as a separate product. Based on such understanding, the technical solutions of the embodiments of the present invention may be essentially implemented or a part contributing to the prior art may be embodied in the form of a software product, which is stored in a storage medium and includes several instructions for causing a computer device (which may be a personal computer, a server, or a network device) to execute all or part of the methods described in the embodiments of the present invention. And the aforementioned storage medium includes: a removable storage device, a ROM, a magnetic or optical disk, or other various media that can store program code.

The above description is only for the specific embodiments of the present invention, but the scope of the present invention is not limited thereto, and any person skilled in the art can easily conceive of the changes or substitutions within the technical scope of the present invention, and all the changes or substitutions should be covered within the scope of the present invention. Therefore, the protection scope of the present invention shall be subject to the protection scope of the appended claims.

Claims

1. An access control method, the method comprising:

obtaining access attribute information of User Equipment (UE), wherein the access attribute information comprises: setting different weights for different access attribute information correspondingly according to the service priority, the service type and the position information, and storing the weights as a weight matrix in advance, wherein the position information comprises the positions of staying in an Access Point (AP), staying out of the AP, moving out of the AP and moving in the AP;

inputting the access attribute information into a pre-stored probability prediction model to obtain each prediction probability corresponding to each access attribute information of the UE in the converged network; calculating a decision probability matrix through a Bayesian formula based on the prediction probability; point-multiplying the decision probability matrix with the weight matrix; determining a first access parameter and a second access parameter according to a dot product result, wherein the first access parameter is used for representing the probability of accessing the UE to a first network, and the second access parameter is used for representing the probability of accessing the UE to a second network;

comparing the first access parameter to the second access parameter;

and accessing the UE to the first network or the second network according to the comparison result.

2. The method of claim 1, wherein the service priority comprises at least emergency services and general services, wherein the general services have a lower priority than the emergency services, and wherein the service types comprise real-time services and non-real-time services.

3. The method of claim 1, wherein calculating a decision probability matrix based on the prediction probabilities by a bayesian formula comprises:

respectively calculating the conditional probability of the UE for selecting the first network and the second network under the access attribute information based on the predicted probability;

and constructing a decision probability matrix according to the conditional probability.

4. The method of claim 1, wherein the accessing the UE to the first network or the second network according to the comparison comprises:

judging whether the first access parameter is larger than the second access parameter or not according to the comparison result;

and if the first access parameter is larger than the second access parameter, accessing the UE to the first network, otherwise, accessing the UE to the second network.

5. An access control apparatus, characterized in that the apparatus comprises: an acquisition unit, a calculation unit, a comparison unit and an access unit, wherein,

the acquiring unit is configured to acquire access attribute information of a user equipment UE, where the access attribute information includes: setting different weights for different access attribute information correspondingly according to the service priority, the service type and the position information, and storing the weights as a weight matrix in advance, wherein the position information comprises the positions of staying in an Access Point (AP), staying out of the AP, moving out of the AP and moving in the AP;

the computing unit is used for inputting the access attribute information into a pre-stored probability prediction model to obtain each prediction probability corresponding to each access attribute information of the UE in the converged network; calculating a decision probability matrix through a Bayesian formula based on the prediction probability; point-multiplying the decision probability matrix with the weight matrix; determining a first access parameter and a second access parameter according to a dot product result, wherein the first access parameter is used for representing the probability of accessing the UE to a first network, and the second access parameter is used for representing the probability of accessing the UE to a second network;

the comparing unit is used for comparing the first access parameter with the second access parameter;

the access unit is configured to access the UE to the first network or the second network according to a comparison result.

6. The apparatus of claim 5, wherein the computing unit is further configured to compute conditional probabilities that the UE selects the first network and the second network under the access attribute information based on the predicted probabilities, respectively; and constructing a decision probability matrix according to the conditional probability.