CN108347743B

CN108347743B - Access control method, access network element, core network element and user equipment

Info

Publication number: CN108347743B
Application number: CN201710058957.5A
Authority: CN
Inventors: 戴谦
Original assignee: ZTE Corp
Current assignee: ZTE Corp
Priority date: 2017-01-23
Filing date: 2017-01-23
Publication date: 2023-02-28
Anticipated expiration: 2037-01-23
Also published as: WO2018133604A1; CN108347743A

Abstract

The embodiment of the invention discloses an access control method, an access network element, a core network element and user equipment. The access control method comprises the following steps: and when the network load of the core network or the access network meets the overload condition or the congestion condition of the core network or the access network meets the congestion condition, the network element of the access network sends an access limitation indication to the User Equipment (UE) by using a special Radio Resource Control (RRC) signaling.

Description

Access control method, access network element, core network element and user equipment

Technical Field

The present invention relates to the field of wireless communications, and in particular, to an access control method, an access network element, a core network element, and User Equipment (UE).

Background

The introduction of the internet of things enables a large amount of low-cost, small-bandwidth and small-data devices of the internet of things to be connected to the network. However, the duration of the internet of things device accessing the network is short, the amount of data transmission is small, but the amount of the held device is very large, each time the device establishes connection with the wireless communication network, a large amount of overhead of air interface control plane signaling and ground side control plane signaling is caused, but compared with the amount of data transmitted by the device, the overhead of control plane signaling is larger than the amount of user plane data, which causes the problems of low system transmission efficiency and corresponding network element overload and congestion.

Disclosure of Invention

In view of this, embodiments of the present invention are intended to provide an access control method, an access network element, a core network element, and a user equipment, which partially solve the above problems.

In order to achieve the purpose, the technical scheme of the invention is realized as follows:

a first aspect of an embodiment of the present invention provides an access control method, including:

and when the network load of the core network or the access network meets the overload condition or the congestion condition of the core network or the access network meets the congestion condition, the network element of the access network sends an access limitation indication to the User Equipment (UE) by using a special Radio Resource Control (RRC) signaling.

A second aspect of an embodiment of the present invention provides an access control method, including:

when the network load of a core network meets an overload condition or the congestion condition of the core network meets the congestion condition, sending an access restriction instruction to an access network element; and the access restriction indication is used for the access network element to send to User Equipment (UE) so as to restrict the access of the UE.

A third aspect of an embodiment of the present invention provides an access control method, including:

user Equipment (UE) receives an access restriction indication sent by an access network element through a dedicated Radio Resource Control (RRC) signaling; the access restriction indication is sent by the access network element when the network load of a core network or an access network meets an overload condition or the congestion condition of the core network or the access network meets a congestion condition;

and determining whether to initiate the next access according to the access restriction rule corresponding to the access restriction indication.

A fifth aspect of the present invention provides an access network element, including:

a first sending unit, configured to send an access restriction indication to the UE by using a dedicated radio resource control RRC signaling by an access network element when a network load of a core network or an access network meets an overload condition or a congestion condition of the core network or the access network meets a congestion condition.

A sixth aspect of the present invention provides a core network element, including:

a second sending unit, configured to send an access restriction indication to an access network element when a network load of a core network meets an overload condition or a congestion status of the core network meets the congestion condition; and the access restriction indication is used for the access network element to send to User Equipment (UE) so as to restrict the access of the UE.

A sixth aspect of the present invention provides a UE, including:

a receiving unit, configured to receive an access restriction indication sent by a dedicated RRC signaling from an access network element; the access restriction indication is sent by the access network element when the network load of a core network or an access network meets an overload condition or the congestion condition of the core network or the access network meets a congestion condition;

and the access unit is used for determining whether to initiate the next access according to the access restriction rule corresponding to the access restriction indication.

According to the access control method, the access network element, the core network element and the user equipment provided by the embodiment of the invention, when the overload or congestion condition occurs in the access network or the core network, the access network element sends the access restriction indication to the UE through the special RRC signaling, and the access restriction rule for prohibiting at least part of the UE from being accessed is indicated to take effect, so that the overload or congestion condition of the current access network and/or core network is relieved.

Drawings

Fig. 1 is a flowchart illustrating a first access control method according to an embodiment of the present invention;

fig. 2 is a flowchart illustrating a second access control method according to an embodiment of the present invention;

fig. 3 is a flowchart illustrating a third access control method according to an embodiment of the present invention;

fig. 4 is a schematic structural diagram of a UE according to an embodiment of the present invention;

fig. 5 is a flowchart illustrating a fourth access control method according to an embodiment of the present invention;

fig. 6 is a flowchart illustrating a fifth access control method according to an embodiment of the present invention.

Detailed Description

The technical solution of the present invention is further described in detail with reference to the drawings and the specific embodiments of the specification.

As shown in fig. 1, the present embodiment provides an access control method, including:

step S110: when the network load of the core network or the access network meets the overload condition or the congestion condition of the core network or the access network meets the congestion condition, the access network element sends an access limitation indication to the User Equipment (UE) by using a special Radio Resource Control (RRC) signaling.

The accounting control method provided in this embodiment is a method applied to a network side, for example, a method applied to a network element of an access network, for example, a method in an evolved Node B (eNB). The Access network element may be the eNB or a next generation base station (Gnb), or other wireless Access nodes (Access points, APs), etc.

In this embodiment, the step S110 may include:

step S111: when the network load of a core network or an access network meets an overload condition or the congestion condition of the core network or the access network meets the congestion condition, acquiring an access restriction indication adaptive to the overload condition or the congestion condition of the access network or the core network;

step S112: and sending the access restriction indication to the UE through the dedicated RRC signaling.

In this embodiment, the dedicated RRC signaling includes at least one of:

RRC connection rejection signaling, RRC connection release signaling, and RRC connection reestablishment rejection signaling.

The access control method provided in this embodiment is mainly used for the access network element to send the access restriction indication to a single UE in a unicast manner. The access control method provided in this embodiment is mainly directed to that some UEs have already established the connection with the access network element, and the access network element needs to release the connection in order to alleviate an overload phenomenon or a congestion condition, and prevent the UE from immediately initiating an application condition of the next connection based on an access requirement after the connection is released. Therefore, in this embodiment, the access network element sends the access restriction instruction to the UE through the dedicated RRC signaling, or sends the access restriction instruction to the UE currently establishing the connection with the access network element through the dedicated RRC signaling. The UE herein may be various UEs already connected to an access network element, for example, an internet of things UE.

The special RRC signaling comprises RRC connection release signaling, the RRC connection release signaling is signaling for triggering UE to release the connection, in the embodiment, the access restriction indication is carried in the RRC connection signaling, on one hand, the UE is prompted to release the connection, meanwhile, the access restriction rule currently effective by the UE is informed through the access restriction indication, and when the UE initiates the next access based on the access requirement, whether the access is initiated or not is determined according to the currently effective entry restriction rule, so that the initiation of the next access of the UE is controlled, and the next access of at least part of the UE is delayed or the number of the UE initiating the access within the specified time within the current time is reduced; thereby alleviating overload and congestion.

The RRC connection rejection signaling is used for the access network element to reject the UE that requests access currently, in this embodiment, the access restriction indication is carried in the RRC connection rejection signaling, so that on one hand, the access of this time that the UE sends can be rejected, and on the other hand, the UE is prompted to know the currently valid access restriction rule through sending of the access restriction indication, and when the UE wants to initiate the next access based on the access requirement, the UE can know whether the UE is allowed to initiate the access through querying of the valid access restriction rule, thereby implementing control of the next access of the UE.

The RRC connection reestablishment reject signaling is a reject of a connection reestablishment request initiated by the UE by an access network element, and may be used to reject the connection reestablishment of the current access. Similarly, the access network element carries the access restriction indication in the RRC connection reestablishment reject signaling, so that on one hand, the rejection of the connection reestablishment (equivalent to the access) is realized, the overload or congestion phenomenon can be alleviated, and on the other hand, the next access of the UE can be controlled.

In short, in this embodiment, the access restriction indication is carried by the RRC connection reject signaling, the RRC connection release signaling, and the RRC connection reestablishment reject signaling, and a special signaling does not need to be constructed to send the access restriction indication, thereby reducing signaling overhead. Meanwhile, the RRC connection rejection signaling, the RRC connection release signaling and the RRC connection reestablishment rejection signaling can realize at least two functions, and the public use of the special RRC signaling is improved.

Of course, the dedicated RRC signaling may be other types of RRC signaling besides the RRC connection rejection signaling, the RRC connection release signaling, and the RRC connection reestablishment rejection signaling.

The access restriction indication may be obtained by the access network element itself generating the access restriction indication according to a load condition or a congestion condition of the access network or the core network, or may be received from the core network element, for example, from a Mobility Management Entity (MME).

For example, a corresponding relationship between the load rate or the congestion status and the corresponding access restriction instruction is preset in the network element forming the access restriction instruction, and when the access restriction instruction needs to be issued to the UE is formed, the corresponding relationship is queried according to information such as the current load rate and the congestion status, and the access restriction instruction matching the information such as the load rate and the congestion status in the corresponding relationship is selected as the access restriction instruction currently needing to be issued to the UE. Of course, there are various ways to generate the access restriction indication, and the access restriction indication is not limited to the above example.

When the network load of the core network or the access network meets the preset condition, the method may include: when the load rate of the access network or the core network reaches the load rate threshold or the load amount exceeds the load amount threshold, the network load of the core network or the access network can be considered to accord with the overload condition. In this embodiment, the determining the network load of the core network may include determining whether a current load rate or a current load amount of the MME reaches a corresponding threshold. The network load of the access network meeting the overload condition may include: and judging whether the current load rate or the load capacity of the base station reaches a corresponding threshold. For another example, it is determined whether the current load level of the access network or the core network is a predetermined load level, and if the current load level is the predetermined load level, the predetermined overload condition may be considered to be satisfied.

The congestion status of the core network or the access network may be represented by a load status of the current core network or the access network, or may be characterized according to parameters such as an available resource status of the current network or a number of requests to be responded, and when the congestion status satisfies a certain condition, it may be considered that the core network or the access network is congested and congestion needs to be relieved. For example, when the number of requests to be responded in the current MME or eNB queue exceeds a number threshold, or the utilization rate of the processing resource of the current MME or eNB reaches an upper utilization rate limit, it may be considered that congestion occurs, and the congestion condition is met.

The access restriction indication is used for indicating an effective access restriction rule.

The access restriction rule may comprise at least one of: rule 1: forbidding to use a user plane to optimize a data transmission UP mode or a wireless resource control connection to establish a legacy mode to initiate calling data service mo-data, calling supernormal data mo-exceptingdata, delay tolerant access service delayToleraccess or calling signaling service mo-signaling;

rule 2: forbidding a control plane optimized data transmission (CP) mode to initiate the mo-exceptingdata, the delayTolerataccess or the mo-signaling call;

rule 3: prohibiting UE with a preset proportion from initiating the mo-data call in a CP mode;

rule 4: forbidding the UE only supporting the CP mode to initiate the call of the mo-data, the mo-exceptingdata, the delayTolerataccess or the mo-signaling;

rule 5: forbidding the UE which simultaneously supports the CP mode and the UP mode to initiate the call of the mo-data, the mo-exceptingdata, the delayTolertAccess or the mo-signaling;

rule 6: forbidding the UE which simultaneously supports the CP mode and the UP mode to use the CP mode to initiate the call of the mo-data, the mo-exceptingdata, the delayTolerataccess or the mo-signaling;

rule 7: forbidding the UE which simultaneously supports the CP mode and the UP mode, and initiating the call of the mo-data, the mo-exceptingdata, the delayTolerTACCESS or the mo-signaling by using the UP mode or the legacy mode;

rule 8: forbidding to send non-network protocol data non-IP-data service;

rule 9: the non-IP-data service with a single data packet exceeding a first preset data packet length threshold is forbidden to be sent, the non-IP-data service with a data volume accumulated and sent by one connection and larger than a first accumulation threshold, the non-IP-data service with a flow exceeding a first preset flow threshold, or the non-IP-data service with continuous data packets, wherein the non-IP-data service with continuous data packets is as follows: transmitting the non-IP-data service of a plurality of data packets through one connection;

rule 10: forbidding to send the IP-data service of the network protocol data;

rule 11: forbidding sending the IP-data service with a single data packet exceeding a second preset data packet length threshold, the IP-data service with a primary connection accumulated data volume larger than a second accumulated threshold and the IP-data service with a flow exceeding a second preset flow threshold;

rule 12: forbidding to use the CP mode to initiate a service exceeding a third preset data packet length threshold, a service with a once connection accumulated data volume exceeding a third accumulated threshold, a service with a flow exceeding a third preset flow threshold or a service with continuous data packets;

rule 13: and forbidding to use the UP mode to initiate the service with the length lower than the fourth preset data packet threshold, the service with the once connection accumulated data volume lower than the fourth accumulated threshold or the service with the flow lower than the fourth preset flow threshold.

The ordinal numbers such as "first", "second", and "third" before the predetermined packet length threshold and the accumulation threshold are used to distinguish the thresholds in different situations, and do not represent essential meanings.

In this embodiment, the access network element may indicate that the corresponding access restriction rule is valid according to the current position of the congestion condition or the overload phenomenon and according to the effect of restricting access of the access restriction rule.

In this embodiment, the multiple access restriction rules may be pre-stored in the UE and the access network element, may be pre-negotiated between the UE and the access network element, and may also be pre-defined by a communication protocol. In short, before sending the access restriction indication, both the access network element and the UE may have a corresponding way to obtain the access restriction rule, and obtain a corresponding relationship between the access restriction indication and the access restriction rule, so that the subsequent UE can conveniently execute or take effect of the specific access restriction rule according to the access restriction indication, thereby implementing access control, and relieving overload or congestion caused by simultaneous access of a large number of UEs, especially terminals of the internet of things, to the network.

For example, when the access restriction indication rule 3 is valid, the UE randomly generates a random number between 0 and 1 before initiating access, compares the random number with the predetermined ratio, and allows the UE to initiate access if the random number is greater than the predetermined ratio, otherwise prohibits the UE from initiating access. Of course, it may also be that the UE is allowed to initiate access if the random number is not greater than the predetermined ratio, otherwise the UE is prohibited from accessing.

The above is merely an example of the access restriction rule, but the specific implementation is not limited to any one of the above rules.

The CP mode comprises the following steps: the terminal directly transmits data to the MME through control plane signaling, for example, non-access stratum (NAS) message, and the MME forwards the data to an external network, instead of an access manner that the data is forwarded to the external network through a gateway. The CP mode requires the MME to participate in data transmission, and if too many UEs are accessed by the CP mode, overload or congestion of the MME may be caused.

The UP mode is as follows: before the connection between the UE and the network side is released, the network side stores the historical context of the UE, and when the terminal initiates the connection with the network side next time, the stored context is used for establishing the access mode of the connection. The access method needs an access network element such as a base station to store the context, and if too many UEs are accessed or the contexts are saved too many, the cache resources are reduced, and during the next access, the context saved last time may need to be retrieved, and a certain processing resource needs to be consumed. The processing resources herein may include computing, querying, and retrieval resources provided by a processor or processing circuit.

The legacy mode is a mode of establishing connection by using RRC signaling.

The mo-exception data generally points to burst-type services, such as an alarm service, an abnormal-type data reporting service, and the like.

The network protocol IP data service can be referred to as non-IP-data service for short; the network protocol IP data traffic may be referred to as IP-data traffic. Usually, a data packet corresponding to the non-IP-data service does not carry a destination IP address, and the route forwarding is not based on the destination IP address. The data packet corresponding to the IP-data service is carried with

For the limitation of the CP mode, when the network load of the core network generally meets the overload condition or the congestion condition load of the core network, especially when the current condition load of the MME meets the overload condition or the congestion condition, the indication information sent by the access network element may be used to indicate that part or all of the terminals are prohibited to initiate access in the CP mode, or indicate that the access restriction rule for all or part of the services to initiate access in the CP mode takes effect, so as to alleviate the overload or congestion condition of the core network.

For the limitation of the UP mode, when the network load of the access network meets the overload condition or the congestion condition of the access network meets the congestion condition, especially when the remaining buffer of the base station is smaller than the buffer threshold, or the buffer is in shortage, or the remaining processing resource is smaller than the processing resource threshold, or the like, the indication information sent by the network element of the access network is used for indicating that all or part of the terminals are prohibited to access in the UP mode, or the access restriction rule that all or part of the services are accessed in the UP mode takes effect, so that the overload or congestion condition of the access network is relieved.

In this embodiment, the access restriction rule may be divided into two parts, where the first part is rule content and the second part is restriction parameters for rule execution. The limiting parameters may include one or more of time parameters, proportion parameters and data model parameters, and may also include exception parameters when implemented. The exception parameters herein may correspond to at least those special cases where the rule contents are not valid. Optionally, the access restriction rule further includes at least one of a time parameter, a scale parameter, and a data model parameter;

the time parameter is used for stipulating the effective time length of the access restriction rule;

the proportion parameter is used for indicating the proportion of the user equipment which limits the access or the effective probability of the access limiting rule;

the data model parameters include: a data model threshold;

the data model threshold comprises at least one of;

a packet length threshold;

an accumulation threshold for accumulating the amount of data;

a flow threshold;

a data number threshold of continuous data packets;

the transmission frequency or periodicity threshold of consecutive data packets.

The effective duration corresponds to the time length of a time window. If the UE receives the access restriction instruction, the rule content of a certain access restriction rule is read, the time parameter is extracted, and the effective time can be calculated from the moment when the access restriction instruction is received or the access restriction rule is read according to the effective time length limited in the time parameter. The proportion parameter indicates the effective probability of one or more rules or the proportion of the user terminal. When the proportion parameter is the proportion of the UE which is limited to be accessed, the UE can generate a random number, then the random number is compared with the proportion, and then whether an access request is initiated currently is determined.

In this embodiment, the restriction parameter may be written in each access restriction rule separately, or the one restriction parameter may be shared by multiple restriction rules at the same time. For example, the time parameter may be a parameter that is common to multiple access restriction rules. The time parameter may be sent to the UE by the base station, or may be indicated to the UE by the base station.

There are various ways for the access network element to determine the access restriction indication that needs to be sent to the UE, and at least two of the following are provided:

the first method comprises the following steps:

and when the network load of the access network meets the overload condition or the congestion condition of the access network meets the congestion condition, the access network element automatically forms the access restriction indication.

For example, the eNB forms an access restriction indication to be sent to the UE according to its own load condition or congestion condition.

And the second method comprises the following steps:

and when the network load of the core network meets the overload condition or the congestion condition of the core network meets the congestion condition, the access network element receives the access limitation indication from the core network element.

For example, when the MME is currently in an overload or congestion condition, the MME forms the access restriction indication and sends the formed access restriction indication to the access network element, so that the access network element can receive the access restriction indication.

In this embodiment, both the access restriction indication formed by the access restriction network element and the access restriction indication formed by the core network element may be used to indicate the currently valid access restriction rule. The access restriction rules herein may refer to the corresponding parts of the foregoing embodiments, and are not repeated here.

Further, the step S110 may include:

and when the network load of the core network meets the overload condition or the congestion condition of the core network meets the congestion condition, the access network element receives the access restriction indication from an S1 interface.

When the core network is overloaded or congested, the access network element may receive an access restriction indication sent by the core network element, for example, receive an access restriction indication sent by the MME. In this embodiment, the access restriction indication sent by the network element of the core network is sent through an S1 interface. For example, the MME sends an S1 message to the access network element through the S1 interface, where the S1 message carries the access restriction indication. The S1 message includes, but is not limited to, an overload Start message.

When the access network element receives the access limiting indication, the access limiting indication is forwarded to the corresponding UE through the special RRC signaling, so that the access control of the UE is realized, the number of UE accesses in a specific time, the number of access requests initiated by the UE and the like are controlled, and the frequent occurrence of congestion and overload phenomena is relieved.

As shown in fig. 2, this embodiment provides an access control method, including:

step S210: when the network load of a core network meets an overload condition or the congestion condition of the core network meets the congestion condition, sending an access restriction instruction to an access network element; and the access restriction indication is used for the access network element to send to User Equipment (UE) so as to restrict the access of the UE.

In this embodiment, when it is determined that the network load of the core network meets the overload condition or the congestion condition of the core network meets the congestion condition, the core network element sends an access restriction indication to an access network element.

How to determine that the network load of the core network meets the overload condition or that the congestion status of the core network meets the congestion condition may be referred to in the foregoing embodiments, and will not be repeated.

In this embodiment, the access restriction indication may be carried in various messages sent by the MME to the base station, for example, an S1 message sent by the MME. The S1 message may be a message sent by the S1 interface.

The access restriction indication may be a message indicating that the corresponding access restriction rule is valid.

In some embodiments, the access restriction indication comprises: at least one of a service forbidden type, an access forbidden mode and an access forbidden UE type.

The service type forbidden to be accessed can be a service type forbidden to be accessed. The traffic type here may be the aforementioned IP data traffic or non-IP data traffic. And the data packet corresponding to the IP data service carries a destination IP address and is forwarded by the destination IP address. The data packet corresponding to the non-IP data service does not carry a destination IP address, and is a data packet directly forwarded to a corresponding server or server group according to parameters such as a service type, but the division of the IP data service and the non-IP data service is not limited to this.

Of course, the data service herein may also include the following data features: mo-data, or mo-exceptingdata, or delayTolernoncess, or mo-signaling; the service type of the access prohibition is selected from one or a combination of the above 4 service types.

The access barring mode may be an access mode barring the UE from accessing, where the access mode may be the aforementioned UP mode, CP mode, legacy mode, or the like.

The types of UEs prohibited from accessing may be classified according to the capabilities of the UEs, for example, UEs having only an UP access mode are classified into one type, and UEs supporting both a CP mode and an UP mode are classified into one type. The UE types prohibited from accessing may be used to prohibit which UE types initiate access.

In this embodiment, the access restriction indication indicates the currently valid access restriction rule to the UE. Specific access restriction rules can be seen in the above corresponding parts, and are not repeated here.

When the access restriction rule of this embodiment further includes a restriction parameter, the restriction parameter may include at least one of a time parameter, a scale parameter and a data model parameter;

the data model parameters include: a data model threshold;

the data model threshold comprises at least one of;

a packet length threshold;

an accumulation threshold for accumulating the amount of data;

a flow threshold;

a data number threshold of continuous data packets;

the transmission frequency or periodicity of consecutive data packets is thresholded.

The limiting parameter and the access limiting content in the access limiting rule are used together, and the information such as the execution probability or the execution duration of the access limiting content when the access limiting rule takes effect is limited.

Specifically, the step S210 may include: and when the network load of the core network meets the overload condition or the congestion condition of the core network meets the congestion condition, sending the access restriction indication to the access network element through an S1 interface.

In this embodiment, the access restriction indication is carried in an S1 message sent through an S1 interface. When the access network element receives the S1 message, e.g. an overload message, the access restriction indication may be extracted therefrom.

As shown in fig. 3, the present embodiment provides an access control method, including:

step S310: user Equipment (UE) receives an access restriction indication sent by an access network element through a dedicated Radio Resource Control (RRC) signaling; the access restriction indication is sent by the access network element when the network load of a core network or an access network meets an overload condition or the congestion condition of the core network or the access network meets a congestion condition;

step S320: and determining whether to initiate the next access according to the access restriction rule corresponding to the access restriction indication.

The UE described in this embodiment may be various types of UEs, for example, a mobile phone, a tablet, and other human-mounted UEs, or may be a vehicle-mounted UE. The UE may also be various internet of things UEs.

The UE may receive the access restriction indication through dedicated RRC signaling. The access restriction indication here may be formed for the access network element itself or may be received from a core network element. The accounting restriction indication is used to indicate the access restriction rule that is valid for a period of time after the current time or the current time.

In this embodiment, after receiving the access restriction indication in the dedicated RRC signaling and determining the valid access restriction rule, the UE determines whether to allow the UE to initiate access according to the valid access restriction rule corresponding to the access restriction indication when there is a next access requirement, and if so, initiates access, otherwise, shields the access requirement, and does not perform access, so as to reduce congestion or overload of an access network or a core network.

The dedicated RRC signaling may be RRC connection reject signaling, RRC connection release signaling, and RRC connection reestablishment reject signaling. The RRC signaling has the functions of releasing the connection or rejecting the connection, which is equivalent to releasing or rejecting the access, and simultaneously carries the access limiting indication in the signaling, which can be used for controlling the initiation of the next access of the UE, so that one signaling has multiple effects, the interactive signaling times and number between an access network element and the UE are reduced, and the signaling overhead is reduced.

The details of the access restriction rule in this embodiment can be referred to the foregoing embodiment section, and are not repeated here. Similarly, the access restriction rule may be divided into access restriction content and restriction parameters, and the restriction parameters may include time parameters, scale parameters, or access model parameters, which may be specifically referred to in the foregoing corresponding sections.

This embodiment provides an access network element, including:

The access network element may be various types of devices accessible to the UE, such as an eNB.

The first sending unit in this embodiment may correspond to a sending antenna of a base station, and may be configured to send dedicated RRC signaling to various types of UEs, so as to send the access restriction indication to the UE.

The eNB may also include a processor operable to form the access restriction indication, and/or a storage medium operable to store various information, among other things. The processor can be connected with the transmitting antenna and can control data transmission of the first transmitting unit.

The access network element described in this embodiment may be one of the network elements that implement the access control method. The access restriction indication in this embodiment is also an access restriction rule indicating that the access restriction rule is valid, and the relevant content of the access restriction rule can be referred to in the foregoing embodiment section, which is not repeated here.

In some embodiments, the network element further comprises:

an obtaining unit, configured to form the access restriction indication by the access network element when a network load of the access network meets the overload condition or a congestion status of the access network meets the congestion condition; and/or, when the network load of the core network meets the overload condition or the congestion condition of the core network meets the congestion condition, the access network element receives the access limitation indication from the core network element.

The obtaining unit here may correspond to the receiving interface, may be configured to receive an access restriction indication from a core network element, and is connected to the first sending unit, and may be configured to send the access restriction indication received from the core network element to the UE.

Of course, the obtaining unit may also correspond to the processor, and the processor may generate the access restriction indication itself according to the currently detected load condition or congestion condition.

Optionally, the obtaining unit is specifically configured to receive, by the access network element, the access restriction indication from an S1 interface when a network load of the core network meets the overload condition or a congestion condition of the core network meets the congestion condition. For example, the receiving interface may receive an S1 message through an S1 interface from a network element such as an MME, and then extract the access restriction indication from the S1 message.

In the foregoing, the dedicated RRC signaling includes at least one of:

This embodiment provides a core network element, including:

The core network element described in this embodiment may include any network element located in the core network, specifically may be an MME,

the second sending unit may correspond to the sending interface of the core network element, and may be configured to send the access restriction indication to an access network element such as a base station, where the access restriction indication may be used for the access network element to forward to the UE, and control access of the UE.

For example, the access restriction indication includes: and at least one of the service forbidden type, the access forbidden mode and the UE forbidden type.

In particular, the access restriction indication, the indicated access restriction rule, may be referred to in the foregoing section, and are not repeated here.

Further, the second sending unit is specifically configured to send the access restriction indication to the access network element through an S1 interface when the network load of the core network meets the overload condition or the congestion condition of the core network meets the congestion condition.

In some embodiments, the core network element may further include other structures, such as a processor or a processing circuit, connected to the second sending unit, and configured to generate the access restriction indication.

In this embodiment, the generation of the access restriction instruction may refer to steps S111 and S112, and only generate the access restriction instruction whose main body is the core network element, and which is adapted to the load condition or the congestion condition of the core network according to the load condition and the congestion condition of the core network.

As shown in fig. 4, the present embodiment provides a user equipment UE, including:

a receiving unit 310, configured to receive an access restriction indication sent by a dedicated RRC signaling from an access network element; the access restriction indication is sent by the access network element when the network load of a core network or an access network meets an overload condition or the congestion condition of the core network or the access network meets a congestion condition;

an accessing unit 320, configured to determine whether to initiate a next access according to an access restriction rule corresponding to the access restriction indication.

The receiving unit 310 may be located at a receiving antenna of the UE and may be configured to receive the indication information.

The receiving unit 310 may receive a broadcast message, a multicast message, or a unicast message, and extract the indication information from the broadcast message, the multicast message, or the unicast message.

The access unit 320 may correspond to a processor and a transmitting antenna connected with the processor, and may be configured to send an access request according to an access restriction rule, or not to send an access request. When the processor determines that the current UE has an access requirement, the processor firstly inquires the currently effective access restriction rule, and judges to participate in the matching of the currently effective access restriction rule through the acquisition of the judgment parameter, wherein the processor does not initiate the access when the matching is successful, and initiates the access when the matching is unsuccessful. The judgment parameters may include information such as access capability of the UE, a service type with an access requirement, or an access mode adopted by the UE, and finally determine whether to initiate access by matching with the currently valid access restriction rule.

The access restriction indication and the indicated access restriction rule in this embodiment may be referred to in the foregoing embodiments, and are not repeated here.

The dedicated RRC signaling may be the aforementioned RRC connection release signaling, RRC connection reject signaling, or RRC connection reestablishment reject signaling.

Several specific examples are provided below in connection with the above embodiments:

example 1:

this example serves to illustrate the access restriction procedure initiated by the radio access network itself.

The example adopts an LTE access network as an example, and a network element of the radio access network is an eNB.

As shown in fig. 5, the access restriction method provided by this example includes:

step 101: the eNB judges whether the load level of the eNB is high or overloaded, and if so, the eNB initiates access limitation to the UE.

Step 102: for the UE which newly initiates an access request or a connection reestablishment request, the eNB can limit the access behavior of the UE through an RRC connection rejection process or an RRC reestablishment rejection process, and specific access limiting rules and or access limiting parameters are carried in an RRC connection rejection signaling or an RRC connection reestablishment rejection signaling; for the UE in the RRC connection state, the eNB can release the RRC connection of the UE through an RRC connection release signaling so as to reduce the load of the eNB, and a specific access restriction rule and/or an access restriction parameter are carried in the RRC connection release signaling; or the access restriction rule and/or the access restriction parameter carried in the rejection signaling or the connection release signaling are used for restricting the subsequent access behavior of the rejected or released UE. Specifically, the step S102 includes:

is there a determination made as to whether there is a UE initiating a connection request/reestablishment request or there is a UE in a connected state?

If there is a UE initiating a connection request or a reestablishment request, the eNB may restrict an access behavior of the UE through an RRC connection reject procedure or an RRC reestablishment reject procedure, for example, the eNB is implemented by carrying an access restriction indication of a specific connection restriction rule and a restriction parameter in an RRC connection reject signaling or an RRC connection reestablishment reject signaling.

If there is connected UE, the eNB may release the RRC connection of the UE through an RRC connection release signaling, and carry an access restriction indication in the RRC connection release signaling.

Step 103: before UE (user equipment) prepares to initiate the next access, whether the access behavior can be initiated is judged according to the received access limiting rule and/or access limiting parameter.

Example 2:

this example is used to illustrate the access restriction procedure initiated by the radio access network according to the indication of the network element of the core network;

the present example takes an LTE access network as an example, and the network element of the radio access network is an eNB, and the network element of the core network is an MME (mobility management entity).

As shown in fig. 6, the access restriction method provided by this example includes:

step 201: the MME judges whether the load level of the MME is high or overloaded, if so, the MME sends Overload control information to the eNB through an interface with the eNB, and the information can be sent through Overload start information or through signaling of other S1 interfaces. The overload control information comprises an access limiting rule and/or an access limiting parameter;

step 202: the eNB carries out access control on the UE in the cell according to the received overload control information sent by the MME; for the UE which newly initiates an access request or a connection reestablishment request, the eNB can limit the access behavior of the UE through an RRC connection rejection process or an RRC reestablishment rejection process, and specific access limiting rules and or access limiting parameters are carried in an RRC connection rejection signaling or an RRC connection reestablishment rejection signaling; for the UE in the RRC connection state, the eNB can release the RRC connection of the UE through an RRC connection release signaling so as to reduce the load of the eNB, and a specific access restriction rule and/or an access restriction parameter are carried in the RRC connection release signaling; and the access restriction rule and/or the access restriction parameter carried in the rejection signaling or the connection release signaling are used for restricting the subsequent access behaviors of the rejected or released UE. The access restriction rules and or access restriction parameters should not conflict with overload control information received from the MME. Step 202 is the same as or similar to step 102 and is not repeated here.

Step 203: before UE (user equipment) prepares to initiate the next access, whether the access behavior can be initiated is judged according to the received access limiting rule and/or access limiting parameter.

Example 3:

this example serves to illustrate which access restriction methods and effects may be formed by different combinations of access restriction indications.

This embodiment specifically describes in examples 1 and 2, what access control effect the eNB may include in what manner the access restriction rule and/or the access restriction parameter included in the RRC connection rejection signaling or the RRC connection release signaling may include;

combining this example with examples 1 and 2, a complete detailed example can be formed that includes access control procedures and access control parameters.

The access restriction rules and/or access restriction parameters contained in the RRC connection reject signaling, RRC connection reestablishment reject signaling, or RRC connection release signaling by the eNB include the following categories:

(1) Forbidding to use an UP mode or a legacy mode to initiate a call of mo-data, or mo-exceptingdata, or delayTolertaccess, or mo-signaling;

(2) Forbidding to use the CP mode to initiate mo-exceptingdata, delayTolerAnces or mo-signaling calls;

(3) Prohibiting a certain proportion of X UE (user equipment) from initiating mo-data calls in a CP mode;

(4) The UE with the forbidden device capability of only supporting the CP mode initiates a call of mo-data, or mo-exceptingdata, or delayTolerataccess, or mo-signaling;

(5) The UE with the forbidden device capability of simultaneously supporting the CP mode and the UP mode initiates a call of mo-data, or mo-exceptingdata, or delayTolerataccess, or mo-signaling;

(6) The UE with the forbidden device capability of simultaneously supporting the CP mode and the UP mode initiates a call of mo-data, or mo-exceptingdata, or delayTolerationAcces, or mo-signaling by using the CP mode;

(7) The UE with the forbidden device capability of simultaneously supporting the CP mode and the UP mode initiates a call of mo-data, or mo-exceptingdata, or delayToleraccess, or mo-signaling by using the UP mode or legacy mode;

(8) Forbidding to send the non-IP-data service;

(9) Forbidding to send the non-IP-data service exceeding the size threshold of the preset data packet, or the non-IP-data service exceeding the accumulated data volume threshold, or the non-IP-data service exceeding the preset flow threshold, or the non-IP-data service with continuous data packets;

(10) Forbidding sending of the IP-data service;

(11) Forbidding to send the IP-data service exceeding the size threshold of the preset data packet, or the IP-data service exceeding the accumulated data volume threshold, or the IP-data service exceeding the preset flow threshold;

(12) Forbidding to use the CP scheme to initiate a service exceeding a preset data packet size threshold, or a service exceeding an accumulated data volume threshold, or a service exceeding a preset flow threshold, or a service with continuous data packets, wherein the threshold can be notified to the UE by a network side or preset by a transmitting side and a receiving side;

(13) Forbidding to use the UP scheme to initiate a service below a preset data packet size threshold, or a service below an accumulated data volume threshold, or a service below a preset flow threshold (meaning forbidding to use the UP mode to send small data/small flow service, because the UP scheme is suitable for transmitting large data/large flow)

The eNB selects a class 1 rule or a plurality of rules without mutual conflict from the access restriction rules according to the severity level of the load condition of the eNB and the main reason causing the load; for example, the following examples:

take the example of selecting 1 rule:

example 1: selecting a rule (1), wherein the selected limited service type is delaytorentaccess, and the eNB includes the following instructions in an RRC connection rejection signaling, an RRC connection reestablishment rejection signaling, or an RRC connection release signaling:

forbidding to use the UP mode or the legacy mode to initiate a call of delayTolerataccess;

when the UE receiving the indication initiates a delaytilerantaccess service, it needs to initiate access only by using methods other than the UP method and legacy method according to the indicated access restriction rule;

example 2: still select rule (1), the selected restricted service types are mo-data and delayTolerantAccess, then the eNB includes the following indication in RRC connection rejection signaling, RRC connection re-establishment rejection signaling or RRC connection release signaling:

forbidding to use an UP mode or a legacy mode to initiate a mo-data or delayTolerAnccess call;

when the UE receiving the indication initiates a delaytilerantaccess service or an mo-data service, the UE only can initiate access by using methods except an UP mode and a legacy mode according to the indicated access restriction rule;

example 3: still selecting rule (1), the selected limited service types are mo-exceptingdata and mo-signaling, and mo-data and delaytilentaccess, then the eNB includes the following indications in RRC connection rejection signaling, RRC connection reestablishment rejection signaling, or RRC connection release signaling:

forbidding to use an UP mode or a legacy mode to initiate a call of mo-data, or mo-exceptingdata, or delayTolertaccess, or mo-signaling;

when the UE receiving the indication initiates the 4 services limited by the rule, the UE can only initiate access by using methods except the UP mode and the legacy mode;

example 4: the use of rule 2 can be found in rule 1, see examples 1,2,3;

example 5: selecting a rule (3), wherein the selected limited service type is mo-data, and the eNB includes the following instructions in an RRC connection rejection signaling, an RRC connection reestablishment rejection signaling or an RRC connection release signaling:

prohibiting a certain proportion of X UEs (user equipment) from initiating mo-data calls in a CP mode; the ratio X may be configured by the eNB, and the UE may be notified via a broadcast message or dedicated signaling, for example: when the load is heavy, the ratio X may be set high, for example, 80%.

When the UE receiving the indication initiates mo-data service limited by the rule, if other methods except the CP method are adopted, the UE can directly initiate access, if the CP method is adopted, the probability that the UE can initiate access is calculated according to uniformly distributed random numbers, and when the ratio X is 80%, only 20% of the probability can initiate access by using the CP method;

example 6: selection rule (4)

Prohibiting UE with the equipment capability of 'only supporting CP mode' from initiating a call of mo-data, or mo-exceptingdata, or delayTolerataccess, or mo-signaling;

the rule limits the types of capabilities of the UE and the type of services initiated, and besides the capability limitation, the limitation of the services can be selected from various free combinations, for example:

prohibiting UE with the equipment capability of 'only supporting a CP mode' from initiating a mo-data call;

prohibiting UE with the equipment capability of 'only supporting CP mode' from initiating a delayTolerataccess call;

prohibiting UE (user equipment) with the equipment capability of supporting only a CP (content provider) mode from initiating a mo-exceptingdata or mo-signaling call;

prohibiting UE (user equipment) with the equipment capability of supporting only a CP (content provider) mode from initiating a mo-signaling call;

example 7: selection rules (5)

And prohibiting the UE with the capability of simultaneously supporting the CP mode and the UP mode from initiating a call of mo-data, or mo-exceptingdata, or delayTolerataccess, or mo-signaling. The rule sets access restrictions on the capabilities of another UE; reference example 6 was used;

example 8: selection rules (6)

And the UE with the forbidden device capability of simultaneously supporting the CP mode and the UP mode initiates a call of mo-data, or mo-exceptingdata, or delayTolerationAcces, or mo-signaling by using the CP mode.

The rules contain 3 restrictions on the UE capabilities, access method used, and type of traffic initiated, and the method of use can be referred to the previous example.

Example 9: selection rule (7)

Prohibiting UE with the equipment capability of simultaneously supporting a CP mode and an UP mode from initiating a mo-data call, a mo-exceptionData call, a delayTolerAnccess call or a mo-signaling call in the UP mode or legacy mode; rule (7) is similar to rule 6, but differs in the restriction conditions on the access method used.

Example 10: selection rule (8)

Forbidding to send the non-IP-data service;

the rule only limits access to the service types, and for services which are not based on the IP address transmission technology, the services are mostly transmitted in a CP mode in the current LTE protocol.

The UE receiving the rule can not initiate access no matter what the capability of the UE or what access mode the UE adopts as long as the UE initiates the non-IP-data service;

example 11: selection rule (9)

Forbidding to send the non-IP-data service exceeding the size threshold of the preset data packet, or the non-IP-data service exceeding the threshold of the accumulated data quantity, or the non-IP-data service exceeding the preset flow threshold, or the non-IP-data service with continuous data packets

The rule is more relaxed with respect to the access restriction conditions for non-IP-data traffic than rule (8), and access is restricted to a portion of non-IP-data traffic from the perspective of traffic data characteristics. Wherein the limiting angle of the service data feature comprises one or more of the following combinations:

forbidding exceeding a preset data packet size threshold;

forbidding exceeding of an accumulated data volume threshold;

forbidding to exceed a preset flow threshold;

forbidding having consecutive data packets;

example 12: selection rules (10) or (11)

The rule (8) or (9) can be referred to;

example 13: selection rule (12)

Forbidding to use the CP scheme to initiate a service exceeding a preset data packet size threshold, or a service exceeding an accumulated data volume threshold, or a service exceeding a preset flow threshold, or a service with continuous data packets, wherein the threshold can be notified to the UE by a network side or preset by a transceiver;

the rule combines the limitation condition of the service data characteristic with the limitation condition of the access mode, and the usage of the rule can refer to the former rule with the limitation condition of the CP scheme and the limitation condition of the service data characteristic.

Example 14: selection rule (13)

Forbidding to use the UP scheme to initiate a service below a preset data packet size threshold, or a service below an accumulated data volume threshold, or a service below a preset flow threshold (meaning forbidding to use the UP mode to send small data/small flow service, because the UP scheme is suitable for transmitting large data/large flow)

The rule also combines the restriction conditions of the service data characteristics with the restriction conditions of the access mode, except that the restriction conditions of the access mode are directed to the UP mode, so that the restriction conditions of the corresponding service data characteristics are different from the rule (13), and the example emphasizes that the UP scheme cannot be used for transmitting small data packets or low-flow services.

When the eNB sends the above rules to the UE, one of the rules may be selected, or multiple rules may be selected, and when multiple rules are selected, it should be ensured that there is no mutual conflict between the rules, and there is no mutual repeated part.

Example 4:

this example is used to illustrate how to send access restriction rules and parameters to the eNB when the MME is overloaded. The access restriction rule and/or access restriction parameter contained in the overload control information sent by the MME to the eNB can include which mode and what access control effect is achieved;

the MME may send the Overload control information to the eNB through an S1 interface message, any message of the S1 interface may be used, and a more typical Overload message is an Overload start message.

The access restriction rules and/or access restriction parameters included in the overload control information sent by the MME may refer to the 13 rules described in example 3, and the usage method thereof is the same as example 3.

After receiving the overload control information sent by the MME, the eNB may determine whether to adjust part of the overload control information sent by the MME according to its own condition, and then send the adjusted overload control information to the UE.

Example 5:

this example is intended to illustrate the more flexible access restriction that can be formed in conjunction with additional access restriction parameters.

On the basis of the access restriction rules of examples 3 and 4, the eNB or MME may additionally send other access restriction parameters to cooperate with the access restriction rules to form new and more flexible access restriction rules.

The additional access restriction parameters include:

time parameters, proportion parameters, data model parameters:

-a time parameter: increasing a corresponding wait timer to specify the effective duration of the access restriction rule;

-a ratio parameter: increasing a probability factor or a scale factor to specify a probability or a UE proportion that the access restriction rule takes effect;

-data model threshold: increasing a data packet size threshold, or an accumulated data amount threshold, or a flow threshold, or a quantity threshold of continuous data packets, or a frequency/period threshold of continuous data packets, so as to stipulate that a service prohibition included in the access restriction rule exceeds the data model threshold, or the service prohibition is lower than the data model threshold;

the above 3 parameters may be selected from 1 parameter or a combination of multiple parameters, and combined with the above access restriction rule to form a new rule.

The specific values of the above 3 parameters may be configured by the eNB and notified to the UE through a broadcast message or dedicated signaling.

Example 1: combining the rule (2) "forbidding to use CP mode to initiate mo-exceptingdata, delaytilerantaccess, or mo-signaling" with the time parameter, a new rule can be formed as follows:

and forbidding to use the CP mode to initiate the mo-exceptingdata, delayTolernoncess or mo-signaling calls within the set time range A.

The time range a may be configured by the eNB and signaled to the UE through a broadcast message or dedicated signaling.

Example 2: combining the rule (2) "forbidding to use CP mode to initiate mo-exceptingdata, delaytilerantaccess, or mo-signaling" with the ratio parameter, a new rule can be formed as follows:

and forbidding the user number with the preset proportion B to initiate a call of mo-exceptingdata, delayTolerataccess or mo-signaling in a CP mode.

The preset ratio B may be configured by the eNB and notified to the UE through a broadcast message or dedicated signaling. In this way the eNB may prohibit the number of users of proportion B from initiating calls of the restricted traffic type using the CP mode.

Example 3: combining the rule (2) "forbidding to use the CP mode to initiate mo-exceptingdata, delaytilerantaccess, or mo-signaling" with the data model threshold, where the data model threshold includes a data packet size threshold, or an accumulated data amount threshold, or a traffic threshold, or a number threshold of consecutive data packets, or a frequency/period threshold of consecutive data packets, and one or more of them may be selected. New rules may be formed as follows:

forbidding to use a CP mode to initiate a delayTolerataccess call exceeding the size threshold of the data packet;

forbidding to use a CP mode to initiate mo-signaling calls exceeding an accumulated data volume threshold;

forbidding to use a CP mode to initiate a mo-exceptingdata call exceeding a flow threshold;

forbidding to use the CP mode to initiate a call of mo-exceptingdata, delayTolerNaccess or mo-signaling exceeding the frequency/period threshold of continuous data packets;

forbidding to use a CP mode to initiate a mo-exceptingdata call exceeding a flow threshold or exceeding a quantity threshold of continuous data packets;

example 4: the rule 'no-IP-data service transmission forbidden' is combined with the time parameter, the proportion parameter and the data model threshold at the same time to form a new rule as follows:

and in a preset time range A, prohibiting the number of the users with the preset proportion B from sending the non-IP-data service exceeding the flow threshold.

In all the above examples, the types of radio access network elements include, in addition to the eNB: the method comprises the steps of small cell of a cell, home base station and other access network element types compatible with an EPC architecture.

In addition to the MME, the core network element in the embodiment of the present invention also includes a Cellular Internet of Things Serving Gateway Node (C-SGN), a narrowband Internet of Things (Narrow Band Internet of Things, NB-IoT) MME based on a Cellular, and other core network elements supporting machine type communication and mobility management.

In the several embodiments provided in the present application, it should be understood that the disclosed apparatus and method may be implemented in other ways. The above-described device embodiments are merely illustrative, for example, the division of the unit is only a logical functional division, and there may be other division ways in actual implementation, such as: multiple units or components may be combined, or may be integrated into another system, or some features may be omitted, or not implemented. In addition, the coupling, direct coupling or communication connection between the components shown or discussed may be through some interfaces, and the indirect coupling or communication connection between the devices or units may be electrical, mechanical or other forms.

The units described as separate parts may or may not be physically separate, and parts displayed as units may or may not be physical units, that is, may be located in one place, or may be distributed on a plurality of network units; some or all of the units can be selected according to actual needs to achieve the purpose of the solution of the embodiment.

In addition, all functional units in the embodiments of the present invention may be integrated into one processing module, or each unit may be separately used as one unit, or two or more units may be integrated into one unit; the integrated unit can be realized in a form of hardware, or in a form of hardware plus a software functional unit.

Those of ordinary skill in the art will understand that: all or part of the steps of implementing the method embodiments may be implemented by hardware related to program instructions, and the program may be stored in a computer-readable storage medium, and when executed, executes the steps including the method embodiments; and the aforementioned storage medium includes: a mobile storage device, a Read-Only Memory (ROM), a Random Access Memory (RAM), a magnetic disk or an optical disk, and other various media capable of storing program codes.

The above description is only for the specific embodiments of the present invention, but the scope of the present invention is not limited thereto, and any person skilled in the art can easily conceive of the changes or substitutions within the technical scope of the present invention, and all the changes or substitutions should be covered within the scope of the present invention. Therefore, the protection scope of the present invention shall be subject to the protection scope of the claims.

Claims

1. An access control method, comprising:

when the network load of a core network or an access network meets an overload condition or the congestion condition of the core network or the access network meets a congestion condition, an access network element sends an access limitation indication to User Equipment (UE) by using a dedicated Radio Resource Control (RRC) signaling;

the proprietary RRC signaling includes at least one of:

RRC connection rejection signaling, RRC connection release signaling and RRC connection reestablishment rejection signaling;

the access restriction indication is used for indicating an effective access restriction rule;

the access restriction rule comprises at least one of a time parameter, a proportion parameter and a data model parameter;

the data model parameters include: a data model threshold;

the data model threshold comprises at least one of;

a packet length threshold;

an accumulation threshold for accumulating the amount of data;

a flow threshold;

a data number threshold of continuous data packets;

the sending frequency or period threshold of continuous data packets;

the access restriction rule further comprises at least one of:

forbidding to use a user plane to optimize a data transmission UP mode or a radio resource control connection to establish a legacy mode to initiate calling of calling data service mo-data, calling supernormal data mo-exceptingdata, delay tolerant access service delayTolertAccess or calling signaling service mo-signaling;

forbidding a control plane optimized data transmission (CP) mode to initiate the mo-exceptingdata, the delayTolerataccess or the mo-signaling call;

prohibiting UE with a preset proportion from initiating the mo-data call in a CP mode;

forbidding the UE only supporting the CP mode to initiate the call of the mo-data, the mo-exceptingdata, the delayTolerataccess or the mo-signaling;

forbidding the UE which simultaneously supports the CP mode and the UP mode to initiate the call of the mo-data, the mo-exceptingdata, the delayTolerationAccess or the mo-signaling;

forbidding the UE which simultaneously supports the CP mode and the UP mode to use the CP mode to initiate the call of the mo-data, the mo-exceptingdata, the delayTolerataccess or the mo-signaling;

forbidding the UE which simultaneously supports the CP mode and the UP mode, and initiating the call of the mo-data, the mo-exceptingdata, the delayTolerTACCESS or the mo-signaling by using the UP mode or the legacy mode;

forbidding to send non-network protocol data non-IP-data service;

the non-IP-data service with a single data packet exceeding a first preset data packet length threshold is forbidden to be sent, the non-IP-data service with a data volume accumulated and sent by one connection and larger than a first accumulation threshold, the non-IP-data service with a flow exceeding a first preset flow threshold, or the non-IP-data service with continuous data packets, wherein the non-IP-data service with continuous data packets is as follows: transmitting the non-IP-data service of a plurality of data packets through one connection;

forbidding to send the IP-data service of the network protocol data;

forbidding sending the IP-data service with a single data packet exceeding a second preset data packet length threshold, the IP-data service with a primary connection accumulated data volume larger than a second accumulated threshold and the IP-data service with a flow exceeding a second preset flow threshold;

forbidding to use the CP mode to initiate a service exceeding a third preset data packet length threshold, a service of which the once connection accumulated data quantity exceeds a third accumulated threshold, a service of which the flow exceeds a third preset flow threshold, or a service with continuous data packets;

and forbidding to use the UP mode to initiate the service with the length lower than the fourth preset data packet threshold, the service with the once connection accumulated data volume lower than the fourth accumulated threshold or the service with the flow lower than the fourth preset flow threshold.

2. The method of claim 1,

the method further comprises at least one of:

when the network load of the access network meets the overload condition or the congestion condition of the access network meets the congestion condition, the access network element automatically forms the access restriction indication;

3. The method of claim 2,

when the network load of the core network meets the overload condition or the congestion condition of the core network meets the congestion condition, the receiving, by the access network element, the access restriction indication from the core network element includes:

4. An access control method, comprising:

when the network load of a core network meets an overload condition or the congestion condition of the core network meets a congestion condition, sending an access restriction instruction to an access network element; the access limitation indication is used for the access network element to transmit a dedicated Radio Resource Control (RRC) signaling to User Equipment (UE) so as to limit the access of the UE;

the proprietary RRC signaling includes at least one of:

the data model parameters include: a data model threshold;

the data model threshold comprises at least one of;

a packet length threshold;

an accumulation threshold for accumulating the amount of data;

a flow threshold;

a data number threshold of continuous data packets;

the sending frequency or period threshold of continuous data packets;

the access restriction rule further comprises at least one of:

forbidding to use a user plane to optimize a data transmission UP mode or a radio resource control connection to establish a legacy mode to initiate calling of calling data service mo-data, calling exceptional data mo-exception data, delay tolerant access service delayToleraccess or calling signaling service mo-signaling;

forbidding to send non-network protocol data non-IP-data service;

the non-IP-data service with a single data packet exceeding a first preset data packet length threshold is forbidden to be transmitted, the non-IP-data service with a once connection accumulated transmission data quantity larger than a first accumulation threshold, the non-IP-data service with a flow exceeding a first preset flow threshold, or the non-IP-data service with continuous data packets, wherein the non-IP-data service with continuous data packets is as follows: transmitting the non-IP-data service of a plurality of data packets through one connection;

forbidding to send the IP-data service of the network protocol data;

the IP-data service with a single data packet exceeding a second preset data packet length threshold, the IP-data service with a primary connection accumulated data volume larger than a second accumulated threshold and the IP-data service with a flow exceeding a second preset flow threshold are forbidden to be sent;

forbidding to use the CP mode to initiate a service exceeding a third preset data packet length threshold, a service with a once connection accumulated data volume exceeding a third accumulated threshold, a service with a flow exceeding a third preset flow threshold or a service with continuous data packets;

5. The method of claim 4,

the access restriction indication comprises: at least one of a service forbidden type, an access forbidden mode and an access forbidden UE type.

6. The method according to claim 4 or 5,

when the network load of the core network meets the overload condition or the congestion condition of the core network meets the congestion condition, sending an access restriction instruction to an access network element, including:

and when the network load of the core network meets the overload condition or the congestion condition of the core network meets the congestion condition, sending the access restriction indication to the access network element through an S1 interface.

7. The method of claim 6,

the sending the access restriction indication to the access network element through the S1 interface includes:

and sending the access limitation indication like the access network element through an overload message.

8. An access control method, comprising:

user Equipment (UE) receives an access restriction indication sent by an access network element through a special Radio Resource Control (RRC) signaling; the access restriction indication is sent by the access network element when the network load of a core network or an access network meets an overload condition or the congestion condition of the core network or the access network meets a congestion condition;

the proprietary RRC signaling comprises at least one of:

determining whether to initiate next access according to an access restriction rule corresponding to the access restriction indication;

the data model parameters include: a data model threshold;

the data model threshold comprises at least one of;

a packet length threshold;

an accumulation threshold for accumulating the amount of data;

a flow threshold;

a data number threshold of continuous data packets;

the sending frequency or period threshold of continuous data packets;

the access restriction rule comprises at least one of:

forbidding a control plane optimized data transmission (CP) mode to initiate the call of the mo-exceptingdata, the delayTolerNaccess or the mo-signaling;

prohibiting a predetermined proportion of UE from initiating the mo-data call in a CP mode;

forbidding to send non-network protocol data non-IP-data service;

forbidding to send the IP-data service of the network protocol data;

forbidding to use the UP mode to initiate the service with the length lower than the fourth preset data packet length threshold, wherein the accumulated data volume of the primary connection is lower than that of the primary connection

A service with a fourth accumulation threshold or a service with a flow lower than a fourth preset flow threshold.

9. An access network element, comprising:

a first sending unit, configured to send an access restriction indication to a user equipment UE by using a dedicated radio resource control RRC signaling by an access network element when a network load of a core network or an access network meets an overload condition or a congestion condition of the core network or the access network meets a congestion condition;

the proprietary RRC signaling comprises at least one of:

the data model parameters include: a data model threshold;

the data model threshold comprises at least one of;

a packet length threshold;

an accumulation threshold for accumulating the amount of data;

a flow threshold;

a data number threshold of continuous data packets;

the sending frequency or period threshold of continuous data packets;

the access restriction rule further comprises at least one of:

forbidding sending of non-network protocol data non-IP-data service;

forbidding to send the IP-data service of the network protocol data;

10. The network element of claim 9,

the network element further comprises:

an obtaining unit, configured to form the access restriction indication by the access network element when a network load of the access network meets the overload condition or a congestion status of the access network meets the congestion condition; and/or when the network load of the core network meets the overload condition or the congestion condition of the core network meets the congestion condition, the access network element receives the access limitation indication from the core network element.

11. The network element of claim 10,

the obtaining unit is specifically configured to receive the access restriction indication from an S1 interface by the access network element when the network load of the core network meets the overload condition or the congestion condition of the core network meets the congestion condition.

12. A core network element, comprising:

a second sending unit, configured to send an access restriction indication to an access network element when a network load of a core network meets an overload condition or a congestion status of the core network meets a congestion condition; the access limitation indication is used for the access network element to transmit a dedicated Radio Resource Control (RRC) signaling to User Equipment (UE) so as to limit the access of the UE;

the proprietary RRC signaling comprises at least one of:

the proportion parameter is used for indicating the proportion of the user equipment for limiting access or the effective probability of the access limiting rule;

the data model parameters include: a data model threshold;

the data model threshold comprises at least one of;

a packet length threshold;

an accumulation threshold for accumulating the amount of data;

a flow threshold;

a data number threshold of continuous data packets;

the sending frequency or period threshold of continuous data packets;

the access restriction rule further comprises at least one of:

forbidding the UE only supporting the CP mode to initiate the call of the mo-data, the mo-exceptionData, the delayTolerataccess or the mo-signaling;

forbidding the UE which simultaneously supports the CP mode and the UP mode to initiate the call of the mo-data, the mo-exceptingdata, the delayTolertAccess or the mo-signaling;

forbidding the UE which simultaneously supports the CP mode and the UP mode, and initiating the call of the mo-data, or the mo-exceptionData, the delayTolerAnccess or the mo-signaling by using the UP mode or the legacy mode;

forbidding to send non-network protocol data non-IP-data service;

forbidding to send the IP-data service of the network protocol data;

and forbidding to use the UP mode to initiate the service of which the length is lower than a fourth preset data packet length threshold, the service of which the once connection accumulated data volume is lower than a fourth accumulated threshold or the service of which the flow is lower than a fourth preset flow threshold.

13. The network element of claim 12,

14. The network element of claim 13,

the second sending unit is specifically configured to send the access restriction indication to the access network element through an S1 interface when the network load of the core network meets the overload condition or the congestion condition of the core network meets the congestion condition.

15. The network element of claim 14,

and sending the access restriction indication to the access network element through an S1 interface.

16. A User Equipment (UE), comprising:

the proprietary RRC signaling includes at least one of:

an access unit, configured to determine whether to initiate a next access according to an access restriction rule corresponding to the access restriction indication;

the data model parameters include: a data model threshold;

the data model threshold comprises at least one of;

a packet length threshold;

an accumulation threshold for accumulating the amount of data;

a flow threshold;

a data number threshold of continuous data packets;

the sending frequency or period threshold of continuous data packets;

the access restriction rule further comprises at least one of:

forbidding to send non-network protocol data non-IP-data service;

forbidding to send the IP-data service of the network protocol data;