CN109714493A - The methods, devices and systems of realization machine Ka Chi binding - Google Patents

The methods, devices and systems of realization machine Ka Chi binding Download PDF

Info

Publication number
CN109714493A
CN109714493A CN201711010425.0A CN201711010425A CN109714493A CN 109714493 A CN109714493 A CN 109714493A CN 201711010425 A CN201711010425 A CN 201711010425A CN 109714493 A CN109714493 A CN 109714493A
Authority
CN
China
Prior art keywords
terminal
communication card
device identification
pond
interface
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Granted
Application number
CN201711010425.0A
Other languages
Chinese (zh)
Other versions
CN109714493B (en
Inventor
周辉
邢亮
陈冯
朱海泉
陈强
韩晓斌
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
China Telecom Corp Ltd
Original Assignee
China Telecom Corp Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by China Telecom Corp Ltd filed Critical China Telecom Corp Ltd
Priority to CN201711010425.0A priority Critical patent/CN109714493B/en
Publication of CN109714493A publication Critical patent/CN109714493A/en
Application granted granted Critical
Publication of CN109714493B publication Critical patent/CN109714493B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Landscapes

  • Mobile Radio Communication Systems (AREA)
  • Telephonic Communication Services (AREA)

Abstract

The present disclosure discloses a kind of methods, devices and systems for realizing machine Ka Chi binding, are related to the Internet of Things communications field.This method comprises: obtaining the communication card mark and device identification of terminal by the Sy interface between PCRF, wherein after PCRF receives the session access request of terminal, the communication card mark of terminal and device identification are mapped to Sy interface;The communication card according to associated by terminal identifies the corresponding relationship in pond and device identification pond, carries out binding relationship verification to communication card mark and device identification;Check results are mapped to Sy interface, so that PCRF determines whether that terminal uses data service according to check results.The disclosure can be in the case where not increasing core network service processing load, and the binding function service of N:N machine card pond is realized in triggering, prevents illegality equipment or communication card from accessing network.

Description

The methods, devices and systems of realization machine Ka Chi binding
Technical field
This disclosure relates to the Internet of Things communications field more particularly to a kind of methods, devices and systems for realizing machine Ka Chi binding.
Background technique
Chinese Internet of Things, which is obviously improved from 170,000,000,000 yuan of 2009 to 2015, exceedes 750,000,000,000 yuan, annual compound growth rate More than 25%.The end of the year in 2016, mobile Internet of Things connection number are 1.4 hundred million, wherein the terminal quantity of machine to machine (M2M) application More than the 31% of 100,000,000, Zhan Quanqiu total amount.China Telecom will have huge as domestic full-service operator in Internet of Things industry Development space.China Telecom's Internet of Things mobile network is divided into two level framework of province's net and private network at present, saves net and relies on big network element Deployment, it is main that the wireless access and core net access capability of Internet of Things network users are provided.Internet of Things private network is intensive at present to be arranged in river Soviet Union, be responsible for the whole network Internet of Things customer flow collect, realize Internet of Things network users uniformly open an account, authenticate, charging, Unified Policy distribution, Support intensive operation.
With the introducing that M2M (Machine to Machine, machine to machine) communicates, the especially spy of internet of things equipment Different property, for example, for unattended outdoor internet of things equipment, internet-of-things terminal tariff package inexpensively, to prevent user Card is pulled out to be put into other terminals (such as mobile phone) and is used, influences mobile phone rate, other cannot be replaced by needing to limit user Terminal, namely network support locking and blocking is required, usually require that the IMEI (International an of internet of things equipment Mobile Equipment Identity, International Mobile Equipment Identity code) with insertion equipment IMSI (International Mobile Subscriber Identification Number, international mobile subscriber identity) uniquely corresponds to or be only limitted to It is corresponding with several specified IMSI;It is used conversely, some IMSI is also only limitted to one or several specified IMEI.Therefore, The relationship of IMSI and IMEI need to store in a network, to limit illegal equipment and communication card combination access network, and then realize Anti-theft.But as Internet of Things enterprise largely uses outdoor unattended internet of things equipment, corporate client is applied to operator Large quantities of communication cards, have also purchased large quantities of Internet of Things communication modules, have tied up according to 1:1 or 1:N between original IMSI and IMEI It is fixed, when temporarily being changed between terminal and card, it is necessary to be changed by carrier network devices, increase corporate client The complexity of automation control.
Summary of the invention
The disclosure technical problem to be solved is to provide a kind of methods, devices and systems for realizing machine Ka Chi binding, Can be in the case where not increasing core network service processing load, the binding function service of N:N machine card pond is realized in triggering, is prevented illegal Equipment or communication card access network.
On the one hand according to the disclosure, a kind of method for realizing machine Ka Chi binding is proposed, comprising: by advising with strategy and charging Then the Sy interface between functional unit PCRF obtains the communication card mark and device identification of terminal, wherein PCRF receives terminal After session access request, the communication card mark of terminal and device identification are mapped to Sy interface;The communication according to associated by terminal The corresponding relationship in card mark pond and device identification pond carries out binding relationship verification to communication card mark and device identification;It will verification As a result it is mapped to Sy interface, so that PCRF determines whether that terminal uses data service according to check results.
Further, corresponding communication card ownership number is obtained according to the communication card of terminal mark;According to the communication of terminal Card ownership number obtains corresponding terminal attaching number;It is numbered according to terminal attaching and obtains device identification pond bound in terminal; Judge whether the device identification of terminal is included in device identification pond, if the device identification of terminal is included in device identification pond, Determine that binding relationship verification passes through, otherwise, it determines binding relationship verification does not pass through.
Further, before according to the corresponding communication card ownership numbering step of the communication card of terminal mark acquisition further include: Whether the communication card comprising terminal identifies in query communication card identification database;If not comprising communication in communication card identification database Card mark, it is determined that binding relationship verification passes through;If being identified in communication card identification database comprising communication card, according to terminal Communication card mark obtains corresponding communication card ownership number.
Further, whether the device identification for judging terminal includes in device identification pond before step further include: judgement Whether device identification pond is empty;If device identification pond is sky, it is determined that binding relationship verification passes through;If device identification Chi Buwei Sky, then judge whether the device identification of terminal is included in device identification pond.
Further, by the attribute value of the Sy interface initial consumer limit report request SLR message between PCRF to AVP Field obtains the communication card mark and device identification of terminal;Check results are mapped to the policy calculation shape of Sy interface SLR message State PCS field.
Further, the communication card of terminal is identified as the international mobile subscriber identity IMSI of terminal;The equipment mark of terminal Know the International Mobile Station Equipment Identification IMEI for terminal.
According to another aspect of the present disclosure, it is also proposed that a kind of device for realizing machine Ka Chi binding, comprising: Sy interface handles mould Block, for obtaining the communication card mark and equipment mark of terminal by the Sy interface between Policy and Charging Rules Function PCRF Know, wherein after PCRF receives the session access request of terminal, the communication card mark of terminal and device identification are mapped to Sy and connect Mouthful;Judgment module is verified, for the corresponding relationship in the mark of the communication card according to associated by terminal pond and device identification pond, to communication Card mark and device identification carry out binding relationship verification;Check results mapping block, for check results to be mapped to Sy interface, So that PCRF determines whether that terminal uses data service according to check results.
Further, verification judgment module includes: communication card ownership number acquiring unit, for the communication card according to terminal Mark obtains corresponding communication card ownership number;Terminal attaching number acquiring unit is compiled for being belonged to according to the communication card of terminal Number obtain corresponding terminal attaching number;Device identification pond acquiring unit is tied up for numbering acquisition terminal according to terminal attaching Fixed device identification pond;Device identification judging unit, for judging whether the device identification of terminal is included in device identification pond; Judging unit is verified, if the device identification for terminal is included in device identification pond, it is determined that binding relationship verification passes through, no Then, determine that binding relationship verification does not pass through.
Further, judgment module is verified further include: communication card identifies query unit, is used for query communication card mark data Whether the communication card comprising terminal identifies in library;Wherein, if verification judging unit for not including in communication card identification database Communication card mark, it is determined that binding relationship verification passes through;If communication card, which belongs to number acquiring unit, is used for communication card mark data It is identified in library comprising communication card, then corresponding communication card ownership number is obtained according to the communication card of terminal mark.
Further, judgment module is verified further include: device identification pond judging unit, for whether judging device identification pond For sky;Wherein, if it is sky that verification judging unit, which is used for device identification pond, it is determined that binding relationship verification passes through;Device identification is sentenced If disconnected unit is not sky for device identification pond, judge whether the device identification of terminal is included in device identification pond.
Further, Sy interface processing module is for passing through the Sy interface initial consumer limit report request between PCRF The attribute value of SLR message obtains the communication card mark and device identification of terminal to AVP field;Check results mapping block is used for will Check results are mapped to the policy calculation state PCS field of Sy interface SLR message.
Further, the communication card of terminal is identified as the international mobile subscriber identity IMSI of terminal;The equipment mark of terminal Know the International Mobile Station Equipment Identification IMEI for terminal.
According to another aspect of the present disclosure, it is also proposed that a kind of system for realizing machine Ka Chi binding, including strategy are advised with charging Then functional unit PCRF and the above-mentioned device for realizing machine Ka Chi binding;PCRF is used to receive the session access request of terminal Afterwards, the communication card mark of terminal and device identification are mapped to and are realized the Sy interface between the device of machine Ka Chi binding, Yi Jigen The check results for factually showing the device mapping of machine Ka Chi binding determine whether that terminal uses data service.
According to another aspect of the present disclosure, it is also proposed that a kind of device for realizing machine Ka Chi binding, comprising: memory;And It is coupled to the processor of memory, processor is configured as the method for example above-mentioned based on the instruction execution for being stored in memory.
According to another aspect of the present disclosure, it is also proposed that a kind of computer readable storage medium is stored thereon with computer journey The step of sequence instruction, which realizes above-mentioned method when being executed by processor.
The disclosure obtains the communication card mark and device identification of terminal by the Sy interface between PCRF, is closed according to terminal The corresponding relationship in communication card the mark pond and device identification pond of connection, carries out binding relationship school to communication card mark and device identification It tests, and check results is mapped to Sy interface, so that PCRF determines whether that terminal uses data service according to check results, Can be in the case where not increasing core network service processing load, the binding function service of N:N machine card pond is realized in triggering, is prevented illegal Equipment or communication card access network.
By the detailed description referring to the drawings to the exemplary embodiment of the disclosure, the other feature of the disclosure and its Advantage will become apparent.
Detailed description of the invention
The attached drawing for constituting part of specification describes embodiment of the disclosure, and together with the description for solving Release the principle of the disclosure.
The disclosure can be more clearly understood according to following detailed description referring to attached drawing, in which:
Fig. 1 is the flow diagram of the one embodiment for the method that the disclosure realizes machine Ka Chi binding.
Fig. 2 is the flow diagram of another embodiment of the method that the disclosure realizes machine Ka Chi binding.
Fig. 3 is the flow diagram of the further embodiment for the method that the disclosure realizes machine Ka Chi binding.
Fig. 4 is the structural schematic diagram of the one embodiment for the device that the disclosure realizes machine Ka Chi binding.
Fig. 5 is the structural schematic diagram of another embodiment of the device that the disclosure realizes machine Ka Chi binding.
Fig. 6 is the structural schematic diagram of the one embodiment for the system that the disclosure realizes machine Ka Chi binding.
Fig. 7 is the structural schematic diagram of another embodiment of the system that the disclosure realizes machine Ka Chi binding.
Fig. 8 is the structural schematic diagram of the further embodiment for the device that the disclosure realizes machine Ka Chi binding.
Fig. 9 is the structural schematic diagram of another embodiment of the device that the disclosure realizes machine Ka Chi binding.
Specific embodiment
The various exemplary embodiments of the disclosure are described in detail now with reference to attached drawing.It should also be noted that unless in addition having Body explanation, the unlimited system of component and the positioned opposite of step, numerical expression and the numerical value otherwise illustrated in these embodiments is originally Scope of disclosure.
Simultaneously, it should be appreciated that for ease of description, the size of various pieces shown in attached drawing is not according to reality Proportionate relationship draw.
Be to the description only actually of at least one exemplary embodiment below it is illustrative, never as to the disclosure And its application or any restrictions used.
Technology, method and apparatus known to person of ordinary skill in the relevant may be not discussed in detail, but suitable In the case of, the technology, method and apparatus should be considered as authorizing part of specification.
It is shown here and discuss all examples in, any occurrence should be construed as merely illustratively, without It is as limitation.Therefore, the other examples of exemplary embodiment can have different values.
It should also be noted that similar label and letter indicate similar terms in following attached drawing, therefore, once a certain Xiang Yi It is defined in a attached drawing, then in subsequent attached drawing does not need that it is further discussed.
For the purposes, technical schemes and advantages of the disclosure are more clearly understood, below in conjunction with specific embodiment, and reference The disclosure is further described in attached drawing.
Fig. 1 is the flow diagram of the one embodiment for the method that the disclosure realizes machine Ka Chi binding.This method is by realizing The device of machine Ka Chi binding executes, the device and PCRF (Policy and Charging Rules of realization machine Ka Chi binding Function, Policy and Charging Rules Function) network element pass through Sy interactive interfacing.
In step 110, the communication card mark and device identification of terminal are obtained by the Sy interface between PCRF, wherein After PCRF receives the session access request of terminal, the communication card mark of terminal and device identification are mapped to Sy interface.Terminal Communication card mark can be the IMSI of the SIM card of terminal, the device identification of terminal can be the IMEI of terminal.
In step 120, the communication card according to associated by terminal identifies the corresponding relationship in pond and device identification pond, to communication card Mark and device identification carry out binding relationship verification.For example, the IMEI of multiple terminals can be formed an IMEI end by corporate client Pond is held, multiple SIM card IMSI form an IMSI number pond, wherein a corporate client can only contract an IMSI number pond With an IMEI terminal pond, identifying has an IMSI list and an IMEI terminal list in the corporate client.If IMSI list For sky, the associated IMEI list of corporate client is not sky, then illustrating the corporate client, there has been no IMSI card numbers for distribution, IMEI Terminal is not yet bound, and IMEI terminal can arbitrarily use IMSI card number;If IMSI list is not sky, IMEI terminal list is sky, then There has been no IMEI terminals for the corporate client for distribution, and arbitrary IMEI terminal can be used in the IMSI card of corporate client.If IMSI List is not sky, and IMEI terminal list is not sky, then the IMSI of the enterprise customer is only capable of using the terminal in IMEI terminal list.
In step 130, check results are mapped to Sy interface, so that PCRF determines whether terminal according to check results Use data service.For example, PCRF requires PGW to PDN (the Public Data of terminal if binding relationship verification passes through Network, public data network) connection carrying is using logical strategy is put, if binding relationship verification does not pass through, PCRF requires PGW pairs The PDN connection carrying of terminal uses blocking strategy.
In this embodiment, the communication card mark and device identification that terminal is obtained by the Sy interface between PCRF, according to Communication card associated by terminal identifies the corresponding relationship in pond and device identification pond, binds to communication card mark and device identification Relational checking, and check results are mapped to Sy interface, so that PCRF determines whether that terminal uses number according to check results , can be in the case where not increasing core network service processing load according to business, the binding function service of N:N machine card pond is realized in triggering, Prevent illegality equipment or communication card from accessing network.Also, when temporarily being changed between terminal device and communication card, without logical Cross the corresponding relationship that carrier network devices change terminal device and communication card.
Fig. 2 is the flow diagram of another embodiment of the method that the disclosure realizes machine Ka Chi binding.This method is by reality The device that existing machine Ka Chi is bound executes, and the device of realization machine Ka Chi binding can may be built-in device for external setting, It will be illustrated by taking external device as an example below.
In step 210, after PCRF receives the session access request of terminal, by the communication card mark of terminal and device identification It is mapped to and disappears with the Sy interface SLR (Spending Limit Request, initial consumer limit report request) of setting equipment room AVP (Attribute Value Pairs, attribute value to) field of breath.
In step 220, external device obtains the communication card mark and device identification that terminal is obtained by Sy interface.
Whether identified comprising the communication card in step 230, query communication card identification database, if comprising executing step Rapid 240, otherwise, execute step 280.
In step 240, corresponding communication card ownership number is obtained according to the communication card of terminal mark, according to the communication of terminal Card ownership number obtains corresponding terminal attaching number.Terminal attaching number is corporate client ownership number, for example, enterprise A returns Belonging to number is 1, and enterprise B ownership number is 2.
In step 250, is numbered according to terminal attaching and obtain device identification pond bound in terminal.
In step 260, judges whether device identification pond is sky, if it is empty, thens follow the steps 280, otherwise, execute step 270。
In step 270, judge whether the device identification of terminal is included in device identification pond, if comprising thening follow the steps 280, otherwise, execute step 290.
In step 280, determine that binding relationship verification passes through.If in communication card identification database not including the communication card mark Know, then illustrates that the user not yet contract machine Ka Chi binding business, the PDN connection of the terminal carries session and can continue to execute.If setting Standby mark Chi Weikong then illustrates that the PDN connection carrying session of the terminal can continue to execute.If the device identification of terminal is included in and sets Standby mark pond, then it represents that communication card mark and the device identification of the terminal are legal use, and the PDN connection of the terminal carries session It can continue to execute.
In step 290, determine that binding relationship verification does not pass through.If the device identification of terminal is not included in device identification pond, It then indicates the communication card mark of the terminal and device identification is illegal use, the PDN connection carrying Dialog request of the terminal blocks.
In step 2100, check results are mapped to the PCS (Policy-Counter- of Sy interface SLR message by external device Status, policy calculation state) field.Such as, however, it is determined that binding relationship verification passes through, then sets 0 for the PCS field, if It determines that binding relationship verification does not pass through, then sets 1 for the PCS field.
In step 2110, PCRF determines the PDN connection carrying of the terminal using blocking strategy according to check results or puts logical Strategy.For example, passing through Gx interface CCA (Credit- if the PCS field for the Sy interface SLR message that PCRF is received is set as 0 Control-Answer, Credit Control Answer) message calls PGW can PDN connection carrying to the terminal user using putting logical plan Slightly.It, can be right by Gx interface CCA message calls PGW if the PCS field for the Sy interface SLR message that PCRF is received is set as 1 The PDN connection carrying of the terminal user uses blocking strategy.
In this embodiment, external device obtains the communication card mark and device identification that terminal is obtained by Sy interface, and To the binding relationship for verifying communication card mark and device identification, check results are mapped to Sy interface, so that PCRF is according to school It tests result and determines that the PDN connection carrying of the terminal uses blocking strategy or puts logical strategy, the embodiment is without changing network It is dynamic, and response delay is fast, can be realized the pond binding function service of N:N machine card, prevents illegality equipment or communication card from accessing network.
Fig. 3 is the flow diagram of the further embodiment for the method that the disclosure realizes machine Ka Chi binding.
In step 310, after internet-of-things terminal is online, the terminal initiate PDN connection carry when, from Internet of Things private network PGW to PCRF initiates session access request.
In step 320, after PCRF receives the session establishment request of the terminal, in CC-Request Command (credit Control request command) the interior IMSI and IMEI information for extracting the terminal of message.
In step 330, PCRF is by IMSI the and IMEI information MAP of the terminal to Sy interface SLR between PCRF and external device Message AVP field.
In step 340, external device obtains IMSI the and IMEI information of the terminal by Sy interface.Wherein, the embodiment The middle corresponding relationship needed between IMEI list and IMSI list associated by maintaining enterprise client.One corporate client can only contract One IMSI list and an IMEI list;It is not sky by the associated IMEI list of corporate client, then if list is empty by IMSI There has been no IMSI card numbers for the corporate client for distribution, and IMEI terminal is not yet bound, can arbitrarily be used;If IMSI list is not Sky, list is empty by IMEI, then there has been no IMEI terminals for distribution for the corporate client, and the IMSI card of corporate client can be used arbitrarily IMEI terminal.If IMSI list is not sky, IMEI list is not sky, then the IMSI card of the enterprise is only capable of using in IMEI list Terminal.
It whether include the IMSI information in IMSI contracted user library inquiry, if comprising thening follow the steps in step 350 360, otherwise, execute step 3100.
In step 360, the ownership number of corporate client associated by the IMSI is obtained.For example, first finding communication according to IMSI Card ownership number, then with finding corporate client ownership number according to communication card ownership number.
In step 370, in the IMEI apparatus bound library of external device, obtained by associated corporate client ownership number Take all IMEI bound in the enterprise.Wherein it is possible to obtain all IMEI by device identification data library.
In step 380, judges whether IMEI list is sky, if it is empty, thens follow the steps 3100, otherwise, execute step 390。
All IMEI bound in the enterprise are retrieved using the IMEI information of acquisition as querying condition in step 390, Judge whether that corresponding IMEI information can be retrieved, if can, 3100 are thened follow the steps, otherwise, executes step 3110.
In step 3100,0 is set by the PCS field of Sy interface SLR message, determines the PDN connection carrying meeting of the user Words can continue to execute.If not yet inquiring IMSI in IMSI contracted user library, then it represents that the terminal machine Ka Chi that not yet contracts is tied up Determine business, the PDN connection carrying session of the terminal can continue to execute.If list is empty by IMEI bound in the enterprise, mark should The Gx session of terminal can continue to execute.If retrieving corresponding IMEI information, then it represents that the user IMEI and IMSI is legal It uses, the PDN connection carrying session of the user can continue to execute.
In step 3110,1 is set by the PCS field of Sy interface SLR message, determines the PDN connection carrying meeting of the user Words block.
In step 3120, PCRF by Gx interface requirement PGW can the PDN connection carrying use to the terminal user put logical plan Slightly.
In step 3130, PCRF by Gx interface requirement PGW can PDN connection carrying to the terminal user using blocking plan Slightly.
In this embodiment, the IMEI and IMSI for the terminal that external device is got according to Sy interface, and to terminal IMEI and IMSI carries out binding relationship verification, judging result is mapped to the PCS field of Sy interface SLR message, it is desirable that PCRF root The PDN connection carrying of the terminal user is determined using blocking strategy according to PCS field result or puts logical strategy.The embodiment works as terminal It is temporarily changed between equipment and communication card, without additional with user's interactive session, without being set by carrier network The standby corresponding relationship for changing terminal device and communication card, reduces the complexity of corporate client automation control.
Fig. 4 is the structural schematic diagram of the one embodiment for the device that the disclosure realizes machine Ka Chi binding.Realization machine Ka Chi The device and PCRF network element of binding pass through Sy interactive interfacing, wherein the device of realization machine Ka Chi binding includes the processing of Sy interface Module 410, verification judgment module 420 and check results mapping block 430, in which:
Sy interface processing module 410 is used to obtain the communication card mark and equipment mark of terminal by the Sy interface between PCRF Know, wherein after PCRF receives the session access request of terminal, the communication card mark of terminal and device identification are mapped to Sy and connect Mouthful.The communication card mark of terminal can be the IMSI of terminal, and the device identification of terminal can be the IMEI of terminal.
Judgment module 420 is verified to close for the mark pond of the communication card according to associated by terminal and the corresponding of device identification pond System carries out binding relationship verification to communication card mark and device identification.For example, corporate client can be formed the IMEI of multiple terminals One IMEI terminal pond, multiple SIM card IMSI form an IMSI number pond, wherein a corporate client can only contract one IMSI number pond and an IMEI terminal pond, identifying has an IMSI list and an IMEI terminal list in the corporate client. If list is empty by IMSI, the associated IMEI list of corporate client be not it is empty, then illustrating the corporate client there has been no IMSI card numbers can For distribution, IMEI terminal is not yet bound, and IMEI terminal can arbitrarily use IMSI card number;If IMSI list is not empty, IMEI terminal List is empty, then there has been no IMEI terminals for distribution for the corporate client, and arbitrary IMEI can be used in the IMSI card of corporate client Terminal.If IMSI list is not sky, IMEI terminal list is not sky, then the IMSI of the enterprise customer is only capable of arranging using IMEI terminal Terminal in table.
Check results mapping block 430 is used to check results being mapped to Sy interface, so that PCRF is true according to check results It is fixed that terminal whether is allowed to use data service.For example, PCRF requires PGW to connect the PDN of terminal if binding relationship verification passes through Carrying is connect using logical strategy is put, if binding relationship verification does not pass through, PCRF requires PGW to use the PDN connection carrying of terminal Blocking strategy.
In this embodiment, the communication card mark and device identification that terminal is obtained by the Sy interface between PCRF, according to Communication card associated by terminal identifies the corresponding relationship in pond and device identification pond, binds to communication card mark and device identification Relational checking, and check results are mapped to Sy interface, so that PCRF determines whether that terminal uses number according to check results , can be in the case where not increasing core network service processing load according to business, the binding function service of N:N machine card pond is realized in triggering, Prevent illegality equipment or communication card from accessing network.Also, when temporarily being changed between terminal device and communication card, without logical Cross the corresponding relationship that carrier network devices change terminal device and communication card.
Fig. 5 is the structural schematic diagram of another embodiment of the device that the disclosure realizes machine Ka Chi binding.The realization machine card The device of pond binding includes Sy interface processing module 510, verification judgment module 520 and check results mapping block 530, in which:
Sy interface processing module is used to obtain the communication of terminal by the AVP field of the Sy interface SLR message between PCRF Card mark and device identification.
Verification judgment module 520 may include communication card ownership number acquiring unit 521, terminal attaching number acquiring unit 522, device identification pond acquiring unit 523, device identification judging unit 524 and verification judging unit 525, in which:
Communication card belongs to number acquiring unit 521 and is used to obtain corresponding communication card ownership according to the communication card of terminal mark Number.Terminal attaching number acquiring unit 522 is used to belong to according to the communication card of terminal number and obtains corresponding terminal attaching volume Number.For example, enterprise A ownership number is 1, enterprise B ownership number is 2.Device identification pond acquiring unit 523 is used for according to communication card Ownership number obtains device identification pond bound in terminal, i.e., belongs to number according to communication card and obtain terminal IMEI database.If Standby mark judging unit 524 is for judging whether the device identification of terminal is included in device identification pond.Verify judging unit 525 If the device identification for terminal is included in device identification pond, it is determined that binding relationship verification passes through, otherwise, it determines binding relationship Verification does not pass through.If the device identification of terminal is included in device identification pond, then it represents that communication card mark and the equipment mark of the terminal Knowing is legal use, and the PDN connection carrying session of the terminal can continue to execute.
In another embodiment, verification judgment module 520 can also include that communication card identifies query unit 526, be used for In query communication card identification database whether comprising terminal communication card identify, i.e., IMSI contracted user library inquiry whether include The IMSI information.If identifying in communication card identification database comprising communication card, communication card belongs to number acquiring unit 521 according to end The communication card mark at end obtains corresponding communication card ownership number.If not identified comprising communication card in communication card identification database, Verification judging unit 525 then determines that binding relationship verification passes through.If not identified comprising the communication card in communication card identification database, Then illustrate that the user not yet contracts machine Ka Chi binding business, the PDN connection of the terminal carries session and can continue to execute.
In another embodiment, verification judgment module 520 can also include device identification pond judging unit 527, be used for Judge whether device identification pond is sky, that is, judges whether IMEI list is sky, if it is empty, verification judging unit 525 determines binding Relational checking passes through, and illustrates that the PDN connection carrying session of the terminal can continue to execute.If not empty, device identification judging unit 524 judge whether the device identification of terminal is included in device identification pond.
Check results mapping block 530 is used to for check results being mapped to the PCS field of Sy interface SLR message.For example, if It determines that binding relationship verification passes through, then sets 0 for the PCS field, however, it is determined that binding relationship verification does not pass through, then by the PCS Field is set as 1.PCRF determines the PDN connection carrying of the terminal using blocking strategy according to check results or puts logical strategy.Example It such as, can be right by Gx interface CCA message calls PGW if the PCS field for the Sy interface SLR message that PCRF is received is set as 0 The PDN connection carrying of the terminal user is logical tactful using putting.If the PCS field for the Sy interface SLR message that PCRF is received is arranged Be 1, then by Gx interface CCA message calls PGW can PDN connection carrying to the terminal user using blocking strategy.
In this embodiment, external device obtains the communication card mark and device identification that terminal is obtained by Sy interface, and To the binding relationship for verifying communication card mark and device identification, check results are mapped to Sy interface, so that PCRF is according to school It tests result and determines that the PDN connection carrying of the terminal uses blocking strategy or puts logical strategy, the embodiment is without changing network It is dynamic, and response delay is fast, can be realized the pond binding function service of N:N machine card, prevents illegality equipment or communication card from accessing network. Also, when temporarily being changed between terminal device and communication card, without changing terminal device by carrier network devices With the corresponding relationship of communication card, the complexity of corporate client automation control is reduced.
Fig. 6 is the structural schematic diagram of the one embodiment for the system that the disclosure realizes machine Ka Chi binding.The system includes PCRF 610 and the device 620 for realizing machine Ka Chi binding realize that the device 620 of machine Ka Chi binding and 610 network element of PCRF pass through Sy Interactive interfacing.Wherein, realize that the device 620 of machine Ka Chi binding is described in detail in the above-described embodiments, PCRF 610 After session access request for receiving terminal, the communication card mark of terminal and device identification are mapped to and realize machine Ka Chi Sy interface between the device of binding, and end is determined whether according to the check results for the device mapping for realizing machine Ka Chi binding End uses data service.The communication card mark of terminal can be the IMSI of terminal, and the device identification of terminal can be terminal IMEI。
For example, as shown in fig. 7, when the internet-of-things terminal 630 initiates PDN connection carrying, passing through after internet-of-things terminal is online SGW (Serving GateWay, gateway) 640 initiates session access to PCRF 610 from Internet of Things private network PGW 650 and asks It asks.After PCRF 610 receives the session establishment request CCR of internet-of-things terminal 630, in CC-Request Command message IMSI the and IMEI information of the terminal user is extracted, between the newly-increased device 620 for being mapped to PCRF 610 and realizing machine Ka Chi binding Sy interface SLR message AVP field, to realize the IMEI of terminal that the device 620 of machine Ka Chi binding is got by Sy interface With terminal IMSI currently in use.After receiving the check results of device 620 of realization machine Ka Chi binding, 610 basis of PCRF Policy-Counter-Status field result determines the PDN connection carrying of the terminal user using blocking strategy or puts logical plan Slightly.If it is logical that the Policy-Counter-Status field for the Sy interface SLR message that PCRF is received is set as 0, PCRF 610 Cross Gx interface CCA message, it is desirable that PGW 650 can PDN connection carrying to the terminal user using putting logical strategy.If PCRF The Policy-Counter-Status field of the 610 Sy interface SLR message received is set as 1, PCRF 610 and passes through Gx interface CCA message, it is desirable that PGW 650 can to the terminal user PDN connection carrying use blocking strategy.Wherein, realize that machine Ka Chi is tied up Fixed device 620 can be contracted by CRM (Customer Relationship Management, customer relation management) 660 Interface obtains the communication card identification database and device identification data library that terminal is contracted.
Binding machine and card strategy is used in the relevant technologies operator are as follows: in HSS (Home Subscriber Server, ownership Assigned user server) 670 interior 1:1 binding relationships between IMSI and IMEI are set, in subscription authentication stage, TAU (Tracking Area Update, tracing section updating) periodic location update, MME (Mobility Management Entity, mobility pipe Manage entity) 680 switching etc. the stages, HSS 670 receive MME 680 transmission IMEI and IMSI when, IMSI and IMEI are examined It looks into, if mismatch, refuses accessing terminal to network, it is clear that current implementation strategy mode needs to change at existing HSS logic judgment Reason mechanism is just able to satisfy the demand of Internet of Things corporate client.
And pond data and decision logic are bound built in the device that the embodiment is bound by realization machine Ka Chi, with PCRF network element Interaction, triggering realize that N:N binding machine and card pond function services are not necessarily to when temporarily being changed between terminal device and communication card It is changed by carrier network devices, reduces the complexity of corporate client automation control.
Fig. 8 is the structural schematic diagram of the further embodiment for the device that the disclosure realizes machine Ka Chi binding.The device includes Memory 810 and processor 820.Wherein: memory 810 can be disk, flash memory or other any non-volatile memory mediums. Memory 810 is used to store the instruction in embodiment corresponding to Fig. 1-3.Processor 820 is coupled to memory 810, can be used as One or more integrated circuits are implemented, such as microprocessor or microcontroller.The processor 820 is deposited for executing in memory The instruction of storage.
It in one embodiment, can be as shown in figure 9, the device 900 includes memory 910 and processor 920.Processing Device 920 is coupled to memory 910 by BUS bus 930.The device 900 can also be connected to outside by memory interface 940 and deposit Storage device 950 can also be connected to network or an other department of computer science to call external data by network interface 960 System (not shown), no longer describes in detail herein.
In this embodiment, it is instructed by memory stores data, then above-metioned instruction is handled by processor, it can be not In the case where increasing core network service processing load, the binding function service of N:N machine card pond is realized in triggering, prevents illegality equipment or logical Letter card accesses network.Also, when temporarily being changed between terminal device and communication card, without passing through carrier network devices Change the corresponding relationship of terminal device and communication card.
In another embodiment, a kind of computer readable storage medium, is stored thereon with computer program instructions, this refers to The step of order realizes the method in embodiment corresponding to Fig. 1-3 when being executed by processor.It should be understood by those skilled in the art that, Embodiment of the disclosure can provide as method, apparatus or computer program product.Therefore, complete hardware reality can be used in the disclosure Apply the form of example, complete software embodiment or embodiment combining software and hardware aspects.Moreover, the disclosure can be used one It is a or it is multiple wherein include computer usable program code computer can with non-transient storage medium (including but not limited to Magnetic disk storage, CD-ROM, optical memory etc.) on the form of computer program product implemented.
The disclosure is reference according to the method for the embodiment of the present disclosure, the flow chart of equipment (system) and computer program product And/or block diagram describes.It should be understood that each process in flowchart and/or the block diagram can be realized by computer program instructions And/or the combination of the process and/or box in box and flowchart and/or the block diagram.It can provide these computer programs to refer to Enable the processor of general purpose computer, special purpose computer, Embedded Processor or other programmable data processing devices to generate One machine so that by the instruction that the processor of computer or other programmable data processing devices executes generate for realizing The device for the function of being specified in one or more flows of the flowchart and/or one or more blocks of the block diagram.
These computer program instructions, which may also be stored in, is able to guide computer or other programmable data processing devices with spy Determine in the computer-readable memory that mode works, so that it includes referring to that instruction stored in the computer readable memory, which generates, Enable the manufacture of device, the command device realize in one box of one or more flows of the flowchart and/or block diagram or The function of being specified in multiple boxes.
These computer program instructions also can be loaded onto a computer or other programmable data processing device, so that counting Series of operation steps are executed on calculation machine or other programmable devices to generate computer implemented processing, thus in computer or The instruction executed on other programmable devices is provided for realizing in one or more flows of the flowchart and/or block diagram one The step of function of being specified in a box or multiple boxes.
So far, the disclosure is described in detail.In order to avoid covering the design of the disclosure, it is public that this field institute is not described The some details known.Those skilled in the art as described above, completely it can be appreciated how implementing technology disclosed herein Scheme.
Although being described in detail by some specific embodiments of the example to the disclosure, the skill of this field Art personnel it should be understood that above example merely to be illustrated, rather than in order to limit the scope of the present disclosure.The skill of this field Art personnel are it should be understood that can modify to above embodiments in the case where not departing from the scope of the present disclosure and spirit.This public affairs The range opened is defined by the following claims.

Claims (15)

1. a kind of method for realizing machine Ka Chi binding, comprising:
The communication card mark and device identification of terminal are obtained by the Sy interface between Policy and Charging Rules Function PCRF, Wherein, after the PCRF receives the session access request of terminal, the communication card mark of terminal and device identification are mapped to institute State Sy interface;
The communication card according to associated by terminal identifies the corresponding relationship in pond and device identification pond, identifies to the communication card and described Device identification carries out binding relationship verification;
Check results are mapped to the Sy interface, so that the PCRF determines whether that the terminal makes according to check results Use data service.
2. according to the method described in claim 1, further include:
Corresponding communication card ownership number is obtained according to the communication card of terminal mark;
Belong to number according to the communication card of the terminal and obtains corresponding terminal attaching number;
It is numbered according to the terminal attaching and obtains device identification pond bound in terminal;
Judge whether the device identification of the terminal is included in the device identification pond, if the device identification of the terminal includes In the device identification pond, it is determined that binding relationship verification passes through, otherwise, it determines binding relationship verification does not pass through.
3. according to the method described in claim 2, wherein, obtaining corresponding communication card according to the communication card of terminal mark and returning Before category numbering step further include:
Whether the communication card comprising the terminal identifies in query communication card identification database;
If not identified comprising the communication card in the communication card identification database, it is determined that binding relationship verification passes through;
If being identified in the communication card identification database comprising the communication card, is identified and obtained according to the communication card of the terminal Corresponding communication card ownership number.
4. according to the method described in claim 2, wherein, judging whether the device identification of the terminal is included in the equipment mark Know in pond before step further include:
Judge whether the device identification pond is empty;
If the device identification pond is sky, it is determined that binding relationship verification passes through;
If the device identification pond is not sky, judge whether the device identification of the terminal is included in the device identification pond In.
5. method according to claim 1 to 4, wherein
AVP field is obtained by the attribute value of the Sy interface initial consumer limit report request SLR message between the PCRF The communication card of the terminal identifies and device identification;
Check results are mapped to the policy calculation state PCS field of the Sy interface SLR message.
6. method according to claim 1 to 4, wherein
The communication card of the terminal is identified as the international mobile subscriber identity IMSI of the terminal;
The device identification of the terminal is the International Mobile Station Equipment Identification IMEI of the terminal.
7. a kind of device for realizing machine Ka Chi binding, comprising:
Sy interface processing module, for obtaining the logical of terminal by the Sy interface between Policy and Charging Rules Function PCRF Letter card mark and device identification, wherein after the PCRF receives the session access request of terminal, the communication card of terminal is identified The Sy interface is mapped to device identification;
Judgment module is verified, for the corresponding relationship in the mark of the communication card according to associated by terminal pond and device identification pond, to institute It states communication card mark and the device identification carries out binding relationship verification;
Check results mapping block, for check results to be mapped to the Sy interface, so that the PCRF is according to check results Determine whether that the terminal uses data service.
8. device according to claim 7, wherein the verification judgment module includes:
Communication card belongs to number acquiring unit, compiles for obtaining corresponding communication card ownership according to the communication card of terminal mark Number;
Terminal attaching number acquiring unit obtains corresponding terminal attaching volume for belonging to number according to the communication card of the terminal Number;
Device identification pond acquiring unit obtains device identification pond bound in terminal for numbering according to the terminal attaching;
Device identification judging unit, for judging whether the device identification of the terminal is included in the device identification pond;
Judging unit is verified, if the device identification for the terminal is included in the device identification pond, it is determined that binding relationship Verification passes through, otherwise, it determines binding relationship verification does not pass through.
9. device according to claim 8, wherein the verification judgment module further include:
Communication card identify query unit, in query communication card identification database whether include the terminal communication card mark Know;
Wherein, if the verification judging unit in the communication card identification database comprising the communication card for not identifying, Determine that binding relationship verification passes through;
If the communication card ownership number acquiring unit is used to identify in the communication card identification database comprising the communication card, Corresponding communication card ownership number is then obtained according to the communication card of terminal mark.
10. device according to claim 8, wherein the verification judgment module further include:
Device identification pond judging unit, for judging whether the device identification pond is empty;
Wherein, if it is sky that the verification judging unit, which is used for the device identification pond, it is determined that binding relationship verification passes through;
If the device identification judging unit is not sky for the device identification pond, judge that the device identification of the terminal is It is no to be included in the device identification pond.
11. according to any device of claim 7-10, wherein
The Sy interface processing module is for passing through the Sy interface initial consumer limit report request SLR message between the PCRF Attribute value to AVP field obtain the terminal communication card mark and device identification;
The check results mapping block is used to for check results being mapped to the policy calculation state of the Sy interface SLR message PCS field.
12. according to any device of claim 7-10, wherein
The communication card of the terminal is identified as the international mobile subscriber identity IMSI of the terminal;
The device identification of the terminal is the International Mobile Station Equipment Identification IMEI of the terminal.
13. a kind of system for realizing machine Ka Chi binding, including Policy and Charging Rules Function PCRF and claim 7-12 Any device for realizing machine Ka Chi binding;
After the PCRF is used to receive the session access request of terminal, the communication card mark of terminal and device identification are mapped to With the Sy interface between the device of realization machine Ka Chi binding, and the verification knot according to the device mapping for realizing machine Ka Chi binding Fruit determines whether that the terminal uses data service.
14. a kind of device for realizing machine Ka Chi binding, comprising:
Memory;And
It is coupled to the processor of the memory, the processor is configured to based on the instruction execution for being stored in the memory Such as method as claimed in any one of claims 1 to 6.
15. a kind of computer readable storage medium, is stored thereon with computer program instructions, real when which is executed by processor The step of existing method as claimed in any one of claims 1 to 6.
CN201711010425.0A 2017-10-26 2017-10-26 Method, device and system for binding machine-card pool Active CN109714493B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN201711010425.0A CN109714493B (en) 2017-10-26 2017-10-26 Method, device and system for binding machine-card pool

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201711010425.0A CN109714493B (en) 2017-10-26 2017-10-26 Method, device and system for binding machine-card pool

Publications (2)

Publication Number Publication Date
CN109714493A true CN109714493A (en) 2019-05-03
CN109714493B CN109714493B (en) 2021-06-18

Family

ID=66253276

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201711010425.0A Active CN109714493B (en) 2017-10-26 2017-10-26 Method, device and system for binding machine-card pool

Country Status (1)

Country Link
CN (1) CN109714493B (en)

Cited By (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN114339689A (en) * 2021-12-30 2022-04-12 天翼物联科技有限公司 Internet of things machine card binding pool control method and device and related medium
CN114374942A (en) * 2021-12-29 2022-04-19 天翼物联科技有限公司 Business processing method, system, device and storage medium based on machine-card binding
CN114390509A (en) * 2021-12-28 2022-04-22 天翼物联科技有限公司 Machine-card binding pool implementation method, device, equipment and medium based on Internet of things
CN117221874A (en) * 2023-08-15 2023-12-12 惠州市百富智能技术有限公司 Code number configuration method, configuration device, electronic equipment and storage medium

Citations (9)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101370263A (en) * 2007-08-15 2009-02-18 华为技术有限公司 Policy control method and system
CN102075909A (en) * 2009-11-23 2011-05-25 中兴通讯股份有限公司 Checking method and device of binding relationship of IMSI and IMEI
CN102083212A (en) * 2010-04-30 2011-06-01 大唐移动通信设备有限公司 Method, system and device for identifying terminal
CN102449955A (en) * 2009-11-24 2012-05-09 华为技术有限公司 Method, apparatus and system for controlling behaviors of machine type communication MTC terminals
CN102595400A (en) * 2012-03-19 2012-07-18 中兴通讯股份有限公司 Method, system and user device for detecting whether universal integrated circuit card (UICC) is used on authorized device
CN105100130A (en) * 2014-04-25 2015-11-25 北京奇虎科技有限公司 Terminal device and terminal device theft prevention method and system
CN105120448A (en) * 2015-07-31 2015-12-02 深圳市鼎信通达科技有限公司 System and method for using multiple SIM cards limitlessly
US9277572B1 (en) * 2013-05-10 2016-03-01 Sprint Communications Company L.P. Modification of diameter messages to establish a communication session over a home packet data network gateway
CN106982125A (en) * 2016-01-18 2017-07-25 中兴通讯股份有限公司 Strategic charging control method, protocol converter, policy charging rule equipment, system

Patent Citations (9)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101370263A (en) * 2007-08-15 2009-02-18 华为技术有限公司 Policy control method and system
CN102075909A (en) * 2009-11-23 2011-05-25 中兴通讯股份有限公司 Checking method and device of binding relationship of IMSI and IMEI
CN102449955A (en) * 2009-11-24 2012-05-09 华为技术有限公司 Method, apparatus and system for controlling behaviors of machine type communication MTC terminals
CN102083212A (en) * 2010-04-30 2011-06-01 大唐移动通信设备有限公司 Method, system and device for identifying terminal
CN102595400A (en) * 2012-03-19 2012-07-18 中兴通讯股份有限公司 Method, system and user device for detecting whether universal integrated circuit card (UICC) is used on authorized device
US9277572B1 (en) * 2013-05-10 2016-03-01 Sprint Communications Company L.P. Modification of diameter messages to establish a communication session over a home packet data network gateway
CN105100130A (en) * 2014-04-25 2015-11-25 北京奇虎科技有限公司 Terminal device and terminal device theft prevention method and system
CN105120448A (en) * 2015-07-31 2015-12-02 深圳市鼎信通达科技有限公司 System and method for using multiple SIM cards limitlessly
CN106982125A (en) * 2016-01-18 2017-07-25 中兴通讯股份有限公司 Strategic charging control method, protocol converter, policy charging rule equipment, system

Cited By (8)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN114390509A (en) * 2021-12-28 2022-04-22 天翼物联科技有限公司 Machine-card binding pool implementation method, device, equipment and medium based on Internet of things
CN114390509B (en) * 2021-12-28 2023-12-05 天翼物联科技有限公司 Machine-card binding pool realization method, device, equipment and medium based on Internet of things
CN114374942A (en) * 2021-12-29 2022-04-19 天翼物联科技有限公司 Business processing method, system, device and storage medium based on machine-card binding
CN114374942B (en) * 2021-12-29 2024-05-28 天翼物联科技有限公司 Service processing method, system, device and storage medium based on machine-card binding
CN114339689A (en) * 2021-12-30 2022-04-12 天翼物联科技有限公司 Internet of things machine card binding pool control method and device and related medium
WO2023125674A1 (en) * 2021-12-30 2023-07-06 天翼物联科技有限公司 Internet of things device card binding pool management method and device, and related medium
CN114339689B (en) * 2021-12-30 2023-12-22 天翼物联科技有限公司 Internet of things machine card binding pool management and control method, device and related medium
CN117221874A (en) * 2023-08-15 2023-12-12 惠州市百富智能技术有限公司 Code number configuration method, configuration device, electronic equipment and storage medium

Also Published As

Publication number Publication date
CN109714493B (en) 2021-06-18

Similar Documents

Publication Publication Date Title
CN109714493A (en) The methods, devices and systems of realization machine Ka Chi binding
CN106921957A (en) The recognition methods of secondary number of distributing telephone numbers and device
CN110351111A (en) A kind of subscription processing method, network node and customer data base
CN110084033A (en) User identity management method, system and computer readable storage medium
CN103918295B (en) For preventing the method cheated or abused, subscriber identity module and application program in special services of the user equipment using public land mobile network
CN108335237A (en) It puts on record method, terminal and computer readable storage medium
CN104754287B (en) Video monitoring equipment configuration parameter delivery method and system
CN104025632B (en) LTE user identifier association services
CN105530666A (en) Session binding method and session binding system
CN108536846A (en) Air control engine variable library rule adaptation method, device, equipment and storage medium
CN108804399A (en) The method of calibration and device of list
CN102014364A (en) Semiautomatic charging accuracy testing method based on virtual call test
CN109088949B (en) Matching method of Internet of things services and MME
CN106888446B (en) Methods, devices and systems for verification information recipient's property right identity
CN104484619B (en) It is a kind of to solve the method that client multi-logical channel accesses PKCS#15 file conflicts
CN104539637B (en) Sending method, server and the user terminal of information of check code
CN103595573B (en) Method and device for issuing strategy rules
US9838862B2 (en) Mobile digital cellular telecommunication system with advanced functionality for rating correction
CN108133142A (en) A kind of mobile device remote connection and the method for manipulation PC machine
US20140372287A1 (en) Method and Apparatus for Subscriber Account Selection
CN106060902A (en) Terminal access method and system based on gateway
CN110309635A (en) Management method, device, equipment and the computer storage medium of data quality model
US11275823B2 (en) Authority configuration method and device
CN100512268C (en) Service operation system and method based on business
CN109768947A (en) A kind of method for authenticating user identity, device and medium

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
GR01 Patent grant
GR01 Patent grant