WO2010081351A1 - 一种接入控制的方法、系统及接入侧设备 - Google Patents

一种接入控制的方法、系统及接入侧设备 Download PDF

Info

Publication number
WO2010081351A1
WO2010081351A1 PCT/CN2009/075119 CN2009075119W WO2010081351A1 WO 2010081351 A1 WO2010081351 A1 WO 2010081351A1 CN 2009075119 W CN2009075119 W CN 2009075119W WO 2010081351 A1 WO2010081351 A1 WO 2010081351A1
Authority
WO
WIPO (PCT)
Prior art keywords
access
list
allowed
csg
side device
Prior art date
Application number
PCT/CN2009/075119
Other languages
English (en)
French (fr)
Inventor
吴问付
Original Assignee
华为技术有限公司
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 华为技术有限公司 filed Critical 华为技术有限公司
Publication of WO2010081351A1 publication Critical patent/WO2010081351A1/zh

Links

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W48/00—Access restriction; Network selection; Access point selection
    • H04W48/02—Access restriction performed under specific conditions

Definitions

  • the present invention relates to the field of communications technologies, and in particular, to a method, system, and access side device for access control. Background technique
  • the 3rd Generation Partnership Project (3GPP, 3rd Generation Partnership Project) and the non-3rd Generation Partnership (non-3GPP) standards organization are currently investigating a new access model: Home Access (Home), User Equipment (UE, User Equipment) accesses the network through a common wireless access point (IP, International Protocol) through a home wireless access point (such as Digital Subscriber Line (DSL), cable broadband) ) Connect to the carrier's mobile network.
  • Home Home
  • UE User Equipment
  • IP International Protocol
  • DSL Digital Subscriber Line
  • cable broadband cable broadband
  • CSG Closed Subscriber Group
  • the CSG identifies some UEs (or users) that allow access to one or several cells of the operator, but these cells restrict access to other UEs.
  • a CSG area contains one or several cells, identified by a CSG identifier (ID).
  • ID a CSG identifier
  • a CSG area defines access to a group of UEs, and restricts access to other UEs other than the group of UEs.
  • the CSG ID corresponding to all CSG areas that it is allowed to access constitutes an Allowed CSG List, which may also be called a CSG White List.
  • the allowed CSG list is stored in the UE and needs to be obtained after the UE registers with the network.
  • the UEs that are allowed to access may form an allowed UE List.
  • the list of allowed UEs may be changed, such as a home wireless access point or a CSG-enabled wireless access point or owner of a CSG area/
  • the administrator can change the list of allowed UEs on it, or the operator
  • the station management system can also change the list of allowed UEs on it, and when the list of allowed UEs is changed, there is currently no mechanism to handle access control to the UE.
  • the embodiments of the present invention provide a method, a system, and an access device, which are used for access control, to implement access control to the UE after the UE list is allowed to be changed.
  • An embodiment of the present invention provides a method for access control, including:
  • the access side device receives information that allows the user equipment (UE) list to be changed;
  • An embodiment of the present invention further provides an access side device, including:
  • a receiving unit configured to receive information that allows a user list to be changed
  • a releasing unit configured to: according to the information that the receiving unit receives the change of the allowed UE list, determine that the currently accessed UE is not in the allowed UE list, and then release the UE from the access side device.
  • the embodiment of the present invention further provides a system for access control, including a management device and an access device, where the management device is configured to send information that allows the UE list to be changed to the access device after the UE list is allowed to be changed.
  • the ingress device is configured to receive the information about the allowed user list change, and determine that the currently accessed UE is not in the allowed UE list according to the received information that allows the UE list to be changed, and then release the UE from the access side device.
  • the access control method, the system, and the access side device provided by the embodiment of the present invention, when the UE list is allowed to be changed, after the access side device receives the information that allows the UE list to be changed, determining that the currently accessed UE is not in the allowed UE. In the list, the UE is released from the access device in time, and the UE is allowed to perform timely access control after the UE list is allowed to change.
  • FIG. 1 is a schematic structural diagram of a home access system according to an embodiment of the present invention.
  • FIG. 2 is a flowchart of an access control method according to an embodiment of the present invention.
  • FIG. 3 is a flowchart of another access control method according to an embodiment of the present invention.
  • FIG. 4 is a flowchart of another access control method according to an embodiment of the present invention.
  • FIG. 5 is a flowchart of another access control method according to an embodiment of the present invention.
  • FIG. 6 is a flowchart of another access control method according to an embodiment of the present invention.
  • FIG. 7 is a flowchart of another access control method according to an embodiment of the present invention.
  • FIG. 8 is a flowchart of another access control method according to an embodiment of the present invention.
  • FIG. 9 is a structural diagram of an access side device according to an embodiment of the present invention.
  • FIG. 9 is a structural diagram of another access side device according to an embodiment of the present invention.
  • FIG. 9b is a structural diagram of another access side device according to an embodiment of the present invention.
  • FIG. 9c is a structural diagram of another access side device according to an embodiment of the present invention.
  • FIG. 10 is a schematic diagram of a system for access control according to an embodiment of the present invention.
  • FIG. 10a is a schematic diagram of another system for access control according to an embodiment of the present invention.
  • FIG. Schematic diagram of the system architecture, including: Home wireless access point, licensed spectrum, connecting the UE to the operator's mobile network through a universal IP access network.
  • the home wireless access point can also be called a microcell (Femtocells, which can Deployed in homes, communities, enterprises, etc.), including Home Access Point (HNB, Home NodeB) 101, Home Wireless Access Point operating in the Universal Mobile Telecommunications System Terrestrial Radio Access Network (UTRAN) spectrum; Home evolved NodeB (HeNB), a home wireless access point operating in the evolved UMTS Terrestrial Radio Access Network (E-UTRAN) spectrum; Home non-3GPP WAP, Home non-3GPP WAP, Home non -3GPP wireless access point 103, a home wireless access point operating in a non-3GPP (non-3GPP) network spectrum.
  • HNB Home NodeB
  • HeNB home wireless access point operating in the evolved UMTS Terrestrial Radio Access Network
  • E-UTRAN evolved UMTS Terrestrial Radio Access Network
  • Home non-3GPP WAP Home non-3GPP WAP
  • Home non-3GPP wireless access point 103 a home wireless access point operating in a non-3GPP (non
  • the gateway network element of the home wireless access point collects the home wireless access point, and routes and forwards the signaling data between the home wireless access point and the network element (such as the MME or the SGSN) in the mobile network.
  • Mobility Management Entity MME, 109
  • the Serving GPRS Supporting Node (SGSN) 108 is used to implement functions such as routing and forwarding, mobility management, session management, and user information storage in the GPRS/UMTS network.
  • the non-3GPP gateway (non-3GPP GW) 110 implements mobility management, session management, and the like in the non-3GPP network).
  • the Home Subscriber Server (HSS) 111 is used to store user subscription information.
  • the AAA, Authentication, Authorization and Accounting Server (Server) 112 is configured to perform access authentication, authorization, and accounting for the UE 113.
  • an access control method includes:
  • the access side device receives information that allows a user equipment (UE) list to be changed.
  • UE user equipment
  • the access side device can receive the list of allowed UEs from the management device, such as the HMS or the operator background management system.
  • the allowed UE list may be allowed for a certain CSG.
  • the UE list may also be a list of allowed UEs for the access side device, such as an access UE list corresponding to the access network element or the home access gateway.
  • the information allowing the UE list change includes the updated allowed UE list or the information of deleting the UE from the allowed UE list.
  • the access side device may update the permission according to the received information that allows the UE list to be changed.
  • the UE list determines that the currently accessed UE is not in the allowed UE list.
  • the access side The received information that allows the UE list change is deleted from the information list that deletes the UE from the allowed UE list.
  • the access side device may be an access network element or an access gateway, where the access network element may be a home wireless access point, such as an HNB or HeNB or Home non-3GPP WAP, or a wireless access point with CSG function.
  • a home wireless access point such as an HNB or HeNB or Home non-3GPP WAP
  • a wireless access point with CSG function such as NodeB, eNodeB or non-3GPP WAP.
  • the releasing the UE from the access side device may include:
  • the access side device receives the changed allowed UE list, and determines that the currently accessed UE is not in the allowed UE list, so that the UE can be timely
  • the release from the access side device enables timely access control of the UE after allowing the UE list to change.
  • FIG. 3 it is a flowchart of another access control method according to an embodiment of the present invention, where the method includes:
  • the HMS or the operator's backend system will use the UE from the allowed UE of the CSG.
  • the list or the accessing network element's allowed UE list is deleted, and the updated allowed UE list (ie, the allowed UE list after deleting the UE) is notified to the access network element in the CSG, for example, to the access network element.
  • the message of the Allowed UE List Update Request is sent, and the message may carry the updated list of allowed UEs.
  • the access side gateway passes.
  • the access NE returns an acknowledgment message to the HMS or the operator's backend system, for example, returns an Allowed UE List Update Ack message to the HMS or the operator's backend system.
  • the HMS or the backend system of the operator may also notify the access network element of the information of deleting the UE from the allowed UE list (such as notifying the identifier of the UE and the operation indication of deleting the UE to the access network element), After receiving the notification information, the incoming network element deletes the UE from the allowed UE list.
  • the triggering condition that the UE (or the user, User) deletes from the allowed UE list of the CSG or deletes from the allowed UE list of the access network element may have the following scenarios:
  • the Provider no longer allows the UE to access the CSG or the access NE, and the operator deletes this.
  • the operator's back-end system such as the operator's OSS (Operation Support System) or BOSS (Telecom Service Support System, BOSS) or OMC (Operation and Maintenance Center, Operation and Maintenance Center) or HMS
  • the UE is deleted from the allowed UE list of the CSG or the allowed UE list of the access network element;
  • the access time of the UE accessing the CSG is timed out or the access time of the UE accessing the access network element is timed out.
  • the HMS or the backend system of the operator sets the UE from the CSG to the allowed UE list or the access network element. Allow the UE to be removed from the list.
  • the HMS or the operator's backend system has the access time of the user (such as the deadline for the user to access the CSG or access the network element). When the deadline expires, the HMS or the operator's backend system no longer allows the UE to access.
  • the HMS or the operator's backend system removes the UE from the allowed UE list of the CSG or the allowed UE list of the access NE.
  • the owner or manager of the access network element no longer allows the UE to access the CSG area or the access network element.
  • the owner or manager of the access network element notifies the HMS or the backend system of the operator to the UE. It is deleted from the allowed UE list of the CSG or the allowed UE list of the access network element.
  • the access network element updates the allowed UE list according to the received message.
  • the access network element determines that the currently accessed UE is not in the updated allowed UE list according to the updated allowed UE list, and the access network element notifies the UE to initiate the Detach process or the access network element notifies the core management network element to initiate the Detach process. If the access network element notifies the UE to initiate the Detach process, steps 302, 303 are performed; if the access network element notifies the core tube
  • the network element initiates the Detach process, and steps 304, 305 are performed. That is, steps 302 and 303 or 304 and 305 are alternatively performed, and steps 306, 307 are performed after steps 302 and 303 or 304 and 305.
  • the core management network element includes MME or SGSN or non-3GPP GW.
  • the access network element sends a Release Request message to the UE, and the UE returns an acknowledgement message to the access network element.
  • the access network element may send an RRC Connection Release Request message to the UE, and the message may carry indication information indicating that the release is caused by the UE not allowing access to the CSG or access restrictions ( For example, if the message carries the cause cause value "CSG not allowed" or "Access Restriction", or the message carries the indication information to indicate that the UE initiates the Detach process (such as the message carrying the Detach Indication indication information) or the message carries the indication information indicating that the UE does not Allow access to the CSG and initiate the Detach process (if the message carries a Cause cause value of "CSG not Allowed Detach Required").
  • the access NE can determine that the UE is not allowed to access the CSG as follows:
  • the access network element receives the information of the user equipment list change in the CSG, and the access network element determines that the UE no longer allows access in the CSG according to the information in the CSG that allows the user equipment list to be changed.
  • the access network element receives the information of the user equipment list change in the access network element, and the access network element changes the information of the allowed user equipment list in the access network element and the CSG used by the access network element.
  • the identity determines that the UE no longer allows access in the accessed CSG.
  • the above method of determining that the UE does not allow access to the CSG is applicable to all of the following embodiments.
  • the UE After receiving the foregoing message, the UE initiates a separation process, and sends a Detach Request message to the core management network element.
  • the core management network element separates the UE and returns a Detach Accept message to the UE.
  • the UE may carry the indication information in the message to indicate that the separation is caused by the UE not allowing access to the CSG or the access restriction (for example, the message carrying the Cause cause value is "CSG not allowed" or "Access Restriction"). If the indication information in the Release Request in step 302 indicates that the UE does not allow access to the CSG or the access restriction, the UE may delete the accessed CSG ID from the Allowed CSG List. 304.
  • the access network element sends a release request message (for the E-UTRAN network, the message is a UE Context Release Request message; for the GERAN/UTRAN network
  • the message is an IU Release Request message to the core management network element, and the message carries an indication that the release is caused by the UE not allowing access to the CSG or access restrictions (eg, the message carrying the Cause value is "CSG not""Allow” or "Access Restriction” or the message carrying the indication information to instruct the core management network element to initiate the Detach process (such as the message carrying the Detach Indication indication information) or the message carrying the indication information indicating that the core management network element UE is not allowed to access the CSG. And initiate the Detach process (such as the message carrying the cause cause value "CSG not Allowed Detach Required").
  • the core management network element After receiving the foregoing message, the core management network element initiates a separation process, and sends a Detach Request message to the UE.
  • the core management network element may carry the indication information in the message to indicate that the separation is caused by the UE not allowing access to the CSG or the access restriction (such as the reason that the cause in the message carries "CSG not allowed” or "Access Restriction").
  • the UE may select a cell that allows access (such as selecting a non-CSG cell (ie, a macro cell) or selecting an allowed access.
  • a cell that allows access such as selecting a non-CSG cell (ie, a macro cell) or selecting an allowed access.
  • the CSG cell then initiates the Attach process to register with the carrier's network.
  • the Detach Accept message is sent back to the core management network element. If the indication message in the Detach Request message indicates that the UE does not allow access to the CSG, the UE may delete the accessed CSG ID from the Allowed CSG List.
  • the core management network element notifies the access network element to release the resources of the UE.
  • the MME sends a UE Context Release Command message to the HeNB;
  • the SGSN sends an IU Release Command message to the HNB.
  • the access network element releases the resources of the UE, and releases the completion message to the core management network element. Note: If there is an access side gateway between the access NE and the core management NE, the above message is forwarded through the access side gateway.
  • the access side gateway may be a home wireless access point gateway, such as a HNB GW, a HeNB GW, or a Home non-3GPP WAP GW.
  • the core management network element receives the Detach Request message, and the message carries the indication information indicating that the separation is caused by the UE not allowing access to the CSG or the access restriction, or the core management network element receives the release request message and the message carries the indication information. Instructing the UE to not allow access to the CSG or access restriction, the core management network element may notify the HSS to delete the CSG ID accessed by the UE from the Allowed CSG List of the UE. If the core management NE sends a Notify CSG Request message to the HSS, the message carries the CSG ID and the deletion operation indication.
  • the HSS deletes the CSG ID from the Allowed CSG List of the UE and returns an acknowledgement message to the core management NE.
  • the access NE receives the RRC when the user status switches from the IDLE state to the Connection state.
  • the connection establishment request message if the UE is not in the allowed UE list, the access network element rejects the RRC connection establishment request, and returns a rejection message to the UE.
  • the message may carry the indication information indicating that the rejection is due to the UE not allowing.
  • the access to the CSG or the access restriction (such as the message carrying the Cause cause value is "CSG not allowed” or “Access Restriction") or the message carrying the indication information indicating that the UE initiates the Detach process (if the message carries the Detach Indication indication)
  • the information carries the indication information indicating that the UE does not allow access to the CSG and initiates the Detach process (eg, the message carries the cause cause value "CSG not Allowed Detach Required").
  • the UE initiates a Detach process after receiving the reject message.
  • the UE deletes the accessed CSG ID from the Allowed CSG List.
  • the UE when the UE is deleted from the allowed UE list of the CSG or deleted from the allowed UE list of the access network element, the UE may be separated from the network in time. Further, the UE is After the separation and the UE finds that the separation is caused by the CSG not allowing access, the UE may also Selecting a cell that allows access and then initiating an Attach process to register with the operator's network, so that after the UE is separated, other regions can be selected to continue to use the carrier's network.
  • FIG. 4 is a flowchart of another access control method according to an embodiment of the present invention, including:
  • the access network element notifies the UE to initiate the location update process according to the updated allowed UE list, and determines that the currently accessed UE is not in the updated allowed UE list.
  • There are two ways to notify the UE to initiate location update and the The incoming network element directly informs the UE to initiate the location update process, and the steps 402-405 are performed. The other is that the access network element notifies the core management network element that the UE is not allowed to access the CSG, and the core management network element notifies the UE to initiate the update process. Steps 406-410 are performed. Step 411 is executed after 402-405 or 406-411 is executed.
  • the access network element directly informs the UE to initiate a location update procedure, (eg, for the E-UTRAN network, notifying the UE to initiate a tracking area update procedure, for the GERAN/UTRAN network, notifying the UE to initiate a routing area update procedure), sending a Release Request message.
  • a location update procedure e.g, for the E-UTRAN network, notifying the UE to initiate a tracking area update procedure, for the GERAN/UTRAN network, notifying the UE to initiate a routing area update procedure
  • the message may carry an indication that the release is caused by the UE not allowing access to the CSG or access restrictions (such as the reason that the message carries Cause "CSG not allowed" or "Access Restriction") or a message.
  • the carrying indication information indicates that the UE initiates an update procedure (such as the message carrying the TAU Indication or the RAU Indication indication information) or the indication information in the message indicates that the UE does not allow access to the CSG and initiates an update process (eg, the message carries the Cause cause value as "CSG” Not Allowed TAU Required” or Cause reason value is "CSG not Allowed RAU Required” ).
  • the UE returns an acknowledgement message to the access network element.
  • the UE selects a cell that is allowed to access (eg, selects a non-CSG cell (ie, a macro cell) or selects a CSG cell that is allowed to access, initiates an update process, and sends an update request message. Go to the core management network element. For example, for the E-UTRAN network, a TAU Request message is sent to the MME; for the GERAN/UTRAN network, a RAU Request message is sent to the SGSN. The UE may carry the indication information in the message to indicate that the UE does not allow access to the CSG or the access restriction.
  • the message may carry the CSG ID that the UE does not allow access to the CSG.
  • the UE deletes the accessed CSG ID from the Allowed CSG List.
  • the core management network element accepts the update request and returns the accept message to the UE.
  • step 404 If the UE cannot select a cell that allows access to initiate an update process in step 403, the UE initiates a separation process. Processing is the same as step 303.
  • the core management network element notifies the access network element to release the resources of the UE. Processing is the same as step 306.
  • the access network element sends a release request message (for the E-UTRAN network, the message is The UE Context Release Request message; for the GERAN/UTRAN network, the message is an IU Release Request message) to the core management network element, and the message carries an indication that the release is due to the UE not allowing access to the CSG or access restrictions.
  • a release request message for the E-UTRAN network, the message is The UE Context Release Request message; for the GERAN/UTRAN network, the message is an IU Release Request message
  • the message carrying the cause cause value "CSG not allowed” or “Access Restriction” or the message carrying the indication information to instruct the core management network element to initiate an update process (such as the message carrying the TAU Indication or RAU Indication indication information) or
  • the message carries the indication information to indicate that the core management NE UE does not allow access to the CSG and initiates an update process (eg, the message carries a Cause cause value of "CSG not Allowed TAU Required" or a Cause cause value of "CSG not Allowed RAU Required").
  • the core management network element After receiving the foregoing message, the core management network element notifies the UE to initiate an update process, and sends a release request message to the access network element.
  • the core management network element For the E-UTRAN network, the core management network element sends a UE Context Release Command message to the HeNB; for the GERAN/UTRAN network, the core management network element sends an IU Release Command message to the HNB, and the message carries an indication message indicating that the release is due to the UE not Allows access to the CSG or access restrictions (such as the message carrying the Cause cause value is "CSG not allowed" or "Access Restriction") or the message carries the indication information to indicate that the UE initiates the update process (if the message carries the TAU Indication) Or RAU Indication indication information, etc.) or The message carries the indication information indicating that the UE does not allow access to the CSG and initiates an update process (eg, the message carries a Cause cause value of "CSG not Allowed TAU Required
  • the access network element After receiving the foregoing message, the access network element sends a Release Request (RRC Connection Release Request) message to the UE, where the message carries the indication information indicating that the release is caused by the UE not allowing access to the CSG or access restriction (such as carrying in the message)
  • the Cause cause value is "CSG not allowed" or "Access Restriction”
  • the message carries the indication information to indicate that the UE initiates the update process (such as the message carrying the TAU Indication or the RAU Indication indication information, etc.) or the message carries the indication information indicating that the UE does not Allow access to the CSG and initiate the update process (such as the message carrying the cause cause value "CSG not Allowed TAU Required" or the Cause cause value "CSG not Allowed RAU Required", etc.).
  • the access network element sends the received release request message to the UE.
  • the UE returns an acknowledgement message to the access network element.
  • the access network element releases the resources of the UE, and returns a completion message to the core management network element.
  • the UE may also reject the message to the access network element instead of the acknowledgment message, at which time the access network element rejects the message to the core management network element.
  • the UE After receiving the foregoing message, the UE selects a cell that is allowed to access (such as selecting a non-CSG cell (ie, a macro cell) or selecting a CSG cell that is allowed to access, and initiating an update process. Process the same step 403.
  • a cell that is allowed to access such as selecting a non-CSG cell (ie, a macro cell) or selecting a CSG cell that is allowed to access, and initiating an update process.
  • step 409 If the cell in step 409 cannot select a cell that allows access to initiate an update process, the UE initiates a separation process, and the process is the same as step 303. Alternatively, the core management network element receives the reject message sent in step 408, and the core management network element initiates a separation process, and the same step 305 is processed.
  • the core management network element may notify the HSS to access the UE.
  • the CSG ID is removed from the Allowed CSG List of the UE.
  • Nuclear The heart management network element sends a Notify CSG Request message to the HSS, and the message carries the CSG ID and the deletion operation indication.
  • the HSS deletes the CSG ID from the Allowed CSG List of the UE and returns an acknowledgement message to the core management NE.
  • the access NE receives the RRC when the user status switches from the IDLE state to the Connection state.
  • the connection establishment request message if the UE is not in the allowed UE list, the access network element rejects the RRC connection establishment request, and returns a rejection message to the UE.
  • the message may carry the indication information indicating that the rejection is due to the UE not allowing.
  • Access to the CSG or access restriction such as the message carrying the Cause cause value is "CSG not allowed” or “Access Restriction” or the message carrying the indication information to indicate that the UE initiates the update process (such as the message carrying the TAU Indication or RAU Indication indication information, etc.) or the message carries indication information indicating that the UE does not allow access to the CSG and initiates an update process (eg, the message carries a Cause cause value of "CSG not Allowed TAU Required" or a Cause cause value of "CSG not Allowed RAU Required" " Wait) .
  • the UE initiates an update process after receiving the reject message.
  • the UE deletes the accessed CSG ID from the Allowed CSG List.
  • a flowchart of another access control method according to an embodiment of the present invention includes:
  • the access network element determines, according to the updated allowed UE list, that the currently accessed UE is not in the updated allowed UE list, and the access network element selects a cell that is allowed to access, and initiates a handover procedure.
  • the access NE sends Handover Required to the core management NE.
  • the message can carry an indication to indicate this The handover is caused by the UE not allowing access to the CSG or access restrictions (such as the reason that the message carries Cause is "CSG not allowed" or "Access Restriction").
  • the core management NE sends a Handover Request message to the target access NE, and the target access NE returns a Handover Request Ack message to the core management NE. If the target access NE cannot accept the handover, the Handover Request Reject message is returned.
  • Core management network element
  • the core management NE returns a Handover Command message (a successful handover) or a Handover Failure message (a handover failure) to the access NE.
  • the access network element If the access network element receives the Handover Command message, the access network element sends a Handover Command message to the UE to notify the UE to switch to the selected allowed access cell.
  • the UE switches to the selected cell that is allowed to access, and sends a Handover Confirm message to the target access NE.
  • the target access NE sends a Handover Notify message to the core management NE.
  • the core management network element After receiving the foregoing message, the core management network element notifies the access network element to release the resource. Processing the same steps
  • the access network element may notify the UE to initiate the message.
  • the Detach process or the access network element may notify the core management network element to initiate the Detach process, and separate the UE from the currently accessed access network element, and the processing mechanism is the separation processing mechanism in the embodiment corresponding to FIG. 3, or the core management
  • the network element initiates the Detach process, and separates the UE from the currently accessed access network element, and the processing mechanism is the separation processing mechanism in the embodiment corresponding to FIG. 3.
  • the core management NE may notify the HSS to use the CSG ID accessed by the UE from the Allowed CSG of the UE. Deleted in the List. For example, the core management NE sends a CSG Notify Request message to the HSS, and the message carries the CSG ID and the deletion operation indication.
  • the HSS deletes the CSG ID from the Allowed CSG List of the UE, and returns an acknowledgement message to the core management NE.
  • This mechanism separates the UE from the currently accessed access network element, and at the same time switches the UE to other areas that can be allowed to access. Therefore, the CSG access control is implemented, and the current service used by the UE is not An interruption can increase the user experience.
  • the access control method for the access network element to determine that the currently accessed UE is not in the updated allowed UE list is introduced.
  • FIG. 6 is a flowchart of another access control method according to an embodiment of the present invention, including:
  • the HMS or the operator's backend system sends the UE from the allowed UE of the CSG.
  • the list or the access NE's allowed UE list is deleted.
  • the HMS or the operator's back-end system notifies the access-side gateway of the updated allowed UE list, for example, the Allowed UE List Update Request may notify the access-side gateway.
  • the access side gateway returns an acknowledgement message to the HMS or the operator's backend system.
  • the HMS or the backend system of the operator may also notify the access gateway of the information of deleting the UE from the allowed UE list (such as notifying the access gateway of the identity and operation indication (delete) of the UE), and the access gateway receives After the notification message, the UE is deleted from the allowed UE list.
  • the access gateway may also notify the access gateway of the information of deleting the UE from the allowed UE list (such as notifying the access gateway of the identity and operation indication (delete) of the UE), and the access gateway receives After the notification message, the UE is deleted from the allowed UE list.
  • the access side gateway updates the allowed UE list according to the received message.
  • the access side gateway determines that the currently accessed UE is not in the updated allowed UE list, and the access side gateway notifies the UE to initiate the Detach process or the access side gateway notifies the core management NE to initiate the Detach process. . If the access side gateway notifies the UE to initiate the Detach process, steps 602 to 605 are performed. If the access side gateway notifies the core management network element to initiate the Detach process, steps 606 to 608 are performed, and steps 609 and 610 are performed in step 602. It is executed after 605 or 606 to 608.
  • the access side gateway sends a Release Command message to the access network element (eg, for the E-UTRAN network, the HeNB GW sends a UE Context Release Command message to the HeNB; for the GERAN/ UTRAN network, HeNB GW sends IU
  • the Release Command message is sent to the HNB.
  • the message carries the indication information indicating that the release is caused by the UE not allowing access to the CSG or the access restriction, or the message carrying the indication information indicates that the UE initiates the Detach process or the message carries the indication information indicating that the UE does not Allow access to the CSG and initiate the Detach process.
  • the access side gateway can judge that the UE does not allow access to the CSG as follows:
  • the access side gateway receives the information of the user equipment list change in the CSG, and the access side gateway determines that the UE no longer allows access in the CSG according to the information of the allowed user equipment list change in the CSG.
  • the access side gateway receives the information of the user equipment list change in the access network element, and the access side gateway according to the information of the allowed user equipment list in the access network element and the CSG used by the access network element.
  • the identity determines that the UE no longer allows access in the accessed CSG.
  • the above method of determining that the UE does not allow access to the CSG is applicable to all of the following embodiments.
  • the access network element after receiving the foregoing message, the access network element sends a Release Request message to the UE, where the message carries the indication information indicating that the release is caused by the UE not allowing access to the CSG or the access restriction, or the message carrying the indication information indicates that the UE initiates
  • the Detach procedure or message carries indication information indicating that the UE does not allow access to the CSG and initiates a Detach procedure.
  • the UE returns an acknowledgement message to the access network element; and the access network element releases the resources of the UE.
  • the access NE returns the completion message to the access side gateway.
  • step 602 After receiving the message in step 602, the UE initiates a separation process. The same as step 303.
  • the core management network element notifies the access side gateway to release the resources of the UE.
  • the E-UTRAN network As for the E-UTRAN network,
  • the MME sends a UE Context Release Command message to the HeNB GW;
  • the SGSN sends an IU Release Command message to the HNB GW, and the access side gateway sends a release complete message to the core management NE.
  • the access side gateway sends a release request message (for the E-UTRAN network, the message is the UE Context Release. Request message; for the GERAN/UTRAN network, this message is the IU Release Request message) to the core management network element, and the message carries the indication information indicating that the release is due to the UE not allowing access to the CSG or the access restriction or the message.
  • the carrying indication information indicates that the core management network element initiates the Detach process or the message carries the indication information to indicate that the core management network element UE does not allow access to the CSG and initiates the Detach process.
  • the core management network element After receiving the foregoing message, the core management network element initiates a separation process, which is the same as step 305.
  • the core management network element notifies the access network element to release the resources of the UE, and the processing in step 306 is performed.
  • the access side gateway receives the Initial UE Message message. If the UE is not in the allowed UE list, the access side gateway rejects the Initial UE Message, and returns a reject message to the access network element.
  • the reject message carries the indication information indicating that the rejection is due to the UE not allowing access to the CSG or access restrictions.
  • the caused or the message carries the indication information to initiate the Detach process or the message carries the indication information to indicate that the UE does not allow access to the CSG and initiates the Detach process.
  • the access network element After receiving the message, the access network element sends a release request message to the UE, where the message carries the indication information indicating that the release is caused by the UE not allowing access to the CSG or the access restriction, or the message carries the indication information to indicate that the UE initiates the Detach process or The message carries indication information indicating that the UE does not allow access to the CSG and initiates a Detach procedure.
  • the UE initiates a Detach process and the UE deletes the accessed CSG ID from the Allowed CSG List.
  • the access control mechanism provided in this embodiment implements access control on the access side gateway.
  • the information may be timely. Separating the UE from the network. Further, after the UE is separated and the UE finds that the separation is caused by the CSG not allowing access, the UE may also select a cell that is allowed to access and then initiate an Attach process to register with the operator. The network allows the UE to be separated and then select another area to access and continue to use the carrier's network.
  • FIG. 7 is a flowchart of another access control method according to an embodiment of the present invention, including:
  • the UE is notified to initiate the location update procedure.
  • the access side gateway if the access side gateway directly informs the UE to initiate an update procedure, the access side gateway sends a Release Command message to the access network element (eg, for the E-UTRAN network, the HeNB GW sends a UE Context Release Command message to the HeNB; for the GERAN / UTRAN network, the HeNB GW sends an IU Release Command message to the HNB, and the message carries the indication information indicating that the release is caused by the UE not allowing access to the CSG or the access restriction, or the message carries the indication information to indicate that the UE initiates the update process or The message carries the indication information indicating that the UE does not allow access to the CSG and initiates an update procedure.
  • the access network element eg, for the E-UTRAN network, the HeNB GW sends a UE Context Release Command message to the HeNB; for the GERAN / UTRAN network, the HeNB GW sends an IU Release Command message to the HNB, and the message
  • the access network element after receiving the foregoing message, the access network element sends a Release Request message to the UE, where the message carries the indication information that the release is caused by the UE not allowing access to the CSG or the access restriction, or the message carries the indication information to indicate that the UE initiates The update process or the message carries indication information indicating that the UE does not allow access to the CSG and initiates an update process.
  • the UE returns an acknowledgement message to the access network element.
  • the access network element releases the resources of the UE.
  • the access NE returns the completion message to the access side gateway.
  • the access side gateway sends a release request message (for the E-UTRAN network, the message is UE Context Release Request message; for GERAN/UTRAN network
  • the message is an IU Release Request message to the core management network element, and the message carries an indication that the release is caused by the UE not allowing access to the CSG or the access restriction, or the message carries the indication information to indicate the core management network.
  • the element initiates the update process or the message carries the indication information to indicate that the core management network element UE does not allow access to the CSG and initiates an update process.
  • Steps 708 - 712 the same as the processing of steps 407-411.
  • FIG. 8 is a flowchart of another access control method according to an embodiment of the present invention, including:
  • the access side gateway After receiving the updated allowed UE list, the access side gateway determines that the currently accessed UE is not in the updated allowed UE list, and the access side gateway sends a Handover Trigger message to the access NE to notify the access NE to initiate.
  • the message may carry an indication that the message is caused by the UE not being allowed to access the CSG or the access restriction (for example, the message carrying the Cause value is "CSG not allowed” or "Access Restriction").
  • the access NE returns an acknowledgement message to the access side gateway.
  • the access network element may return a rejection message to the access side gateway.
  • step 803 - 809 the same as step 502 to step 508.
  • the access network element may notify the UE to initiate the Detach process, or the access network element may notify the core management network element to initiate the Detach process, and the UE is accessed from the currently accessed access network. Separating the processing mechanism in the meta-separation, the processing mechanism is the same as the separation processing mechanism in the embodiment corresponding to FIG. 3; or, after receiving the handover failure message, the core management network element initiates a Detach process, and separates the UE from the currently accessed access network element. a separation processing mechanism in the embodiment corresponding to FIG.
  • the access side gateway may notify the UE to initiate the Detach process or the access side gateway may notify the core management network element to initiate the Detach process, and connect the UE from the current access.
  • the separation processing mechanism in the embodiment corresponding to FIG. 6 is separated in the network element.
  • This embodiment implements the access control of the access side gateway to the UE.
  • This mechanism separates the UE from the currently accessed access network element, and at the same time switches the UE to other areas that can be allowed to access, so
  • the access control of the CSG can make the service currently used by the UE not interrupted, and can increase the user experience.
  • FIG. 9 is an access side device according to an embodiment of the present invention, including
  • the receiving unit 901 is configured to receive information that allows the UE list to be changed.
  • the releasing unit 903 is configured to release, according to the information about the allowed UE list change received by the receiving unit, that the currently accessed UE is not in the allowed UE list, and then release the UE from the access side device.
  • the access side device can receive the list of allowed UEs from the management device, such as the HMS or the operator background management system.
  • the allowed UE list may be a list of allowed UEs for a certain CSG, or may be a list of allowed UEs for the access side device, for example, an allowed UE list corresponding to the access network element or the home access gateway.
  • the information allowing the UE list change includes the updated allowed UE list or the information of deleting the UE from the allowed UE list.
  • the access side device may be an access network element or an access gateway, where the access network element may be a home wireless access point, such as an HNB or HeNB or Home non-3GPP WAP, or a wireless access point with CSG function.
  • the access network element may be a home wireless access point, such as an HNB or HeNB or Home non-3GPP WAP, or a wireless access point with CSG function.
  • the access network element may be a home wireless access point, such as an HNB or HeNB or Home non-3GPP WAP, or a wireless access point with CSG function.
  • NodeB, eNodeB or non-3GPP WAP such as NodeB, eNodeB or non-3GPP WAP.
  • the release unit further includes:
  • the updating subunit 9031 is configured to update the allowed UE list according to the information that the receiving unit receives the change of the allowed UE list;
  • the determining release unit 9032 is configured to determine, according to the updated allowed UE list, that the currently accessed UE is not in the allowed UE list, and release the UE from the access side device.
  • the update subunit 9031 may Deleting the information of the UE from the allowed UE list, and deleting the UE from the allowed UE list.
  • FIG. 9b is another access side device according to an embodiment of the present invention.
  • the release unit further includes one or a combination of the following units:
  • a ion separation unit 9033 configured to initiate a separation process to separate user equipment
  • An update subunit 9034 configured to notify the UE to initiate a location update procedure, and migrate the UE to a cell that is allowed to access;
  • the switching subunit 9035 is configured to initiate a handover procedure, and switch the UE to a cell that is allowed to access.
  • the switching subunit 9035 is configured to initiate a handover procedure, and switch the UE to a cell that is allowed to access.
  • Figure 9b can also be implemented in combination with the access side device of Figure 9a such that, based on Figure 9a, the determined release subunit 9032 can further include the subunits included in the release unit of Figure 9b.
  • another access side device further includes: an adding unit 905, configured to perform a separation process initiated by a release unit, and a location update process.
  • the indication information is added to the message sent by the UE or the core management network element in the handover process, to indicate that the process is caused by the UE not allowing access to the CSG or access restriction.
  • the adding unit 905 can also be added on the basis of the access side control device corresponding to FIG. 9a or 9b.
  • FIG. 10 is a schematic diagram of a system for access control according to an embodiment of the present invention, where the system includes:
  • the management device 1001 is configured to send, to the access side device, information that allows the UE list to be changed after the UE list is allowed to be changed;
  • the access side device 1003 is configured to receive the information about the allowed user list change, and determine, according to the received information that the UE list is changed, that the currently accessed UE is not in the allowed UE list, and then the UE is from the access side device. freed.
  • the access side device may further be the access side device in FIG. 9, FIG. 9a, FIG. 9b or FIG. 9c.
  • FIG. 10a is a schematic diagram of another system for access control according to an embodiment of the present invention.
  • the management device further includes a determining subunit 1011 and a notification subunit 1013, where the determining subroutine
  • the unit 1011 is configured to determine that the UE is no longer allowed to access the CSG or access the access side device, delete the UE from the allowed UE list, or receive a notification message sent by the access network element or the owner/administrator of the CSG.
  • the notification message carries information that the UE is no longer allowed to access the CSG or accesses the access side device, and the determining subunit deletes the UE from the allowed UE list according to the notification message;
  • the notification subunit 1013 is configured to send, after the determining subunit deletes the UE from the allowed UE list, information that allows the UE list to be changed to the access side device.

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Mobile Radio Communication Systems (AREA)

Description

一种接入控制的方法、 系统及接入侧设备
技术领域
本发明涉及通信技术领域， 尤其涉及一种接入控制的方法、 系统及接入侧 设备。 背景技术
目前第三代合作伙伴计划（ 3GPP, 3rd Generation Partnership Project )和非 第三代合作伙伴计划（non-3GPP )标准组织正在研究一种新的接入模式： 家庭 接入（Home ) , 用户设备（UE, User Equipment )通过家庭无线接入点， 使用 许可的频谱， 通过通用的网际协议（IP, International Protocol )接入网络（如 数字用户线（DSL, Digital Subscriber Line ) 、 电缆宽带 ( Cable broadband ) ) 连接到运营商的移动网络。
为了限制 UE接入特定的家庭无线接入点或者特定的无线接入点， 引入了 封闭的用户组（ CSG, Closed Subscriber Group )机制。 CSG标识一些 UE (或者 用户）， 这些 UE允许接入运营商的一个或者几个小区， 但是这些小区对其它的 UE是限制接入的。一个 CSG区域包含一个或几个小区，以一个 CSG标识符（ID ) 来标识。一个 CSG区域限定对一组 UE接入，对该组 UE之外的其它 UE限制接入。 对一个 UE, 允许其接入的所有 CSG区域所对应的 CSG ID构成允许接入的 CSG 列表（Allowed CSG List ) , 也可称之为 CSG白名单（ CSG White List ) 。 UE中 存有允许的 CSG 列表， 需在 UE注册到网络后获得。 对于家庭无线接入点或者 具有 CSG功能的无线接入点或者一个 CSG区域来说，其上允许接入的 UE可以组 成一个允许 UE列表 ( Allowed UE List ) 。
对于家庭无线接入点或者具有 CSG功能的无线接入点或者 CSG区域来说， 允许 UE列表可能会变更，例如家庭无线接入点或者具有 CSG功能的无线接入点 或者 CSG区域的所有者 /管理者可以改变其上的允许 UE列表， 抑或者运营商后 台管理系统也可以改变其上的允许 UE列表， 而当允许 UE列表发生变更时， 目 前还没有机制来处理对 UE的接入控制。
发明内容
有鉴于此，本发明实施例提供了一种接入控制的方法、 系统及接入侧设备， 以实现当允许 UE列表发生变更后， 实现对 UE的接入控制。
本发明实施例提供了一种接入控制的方法， 包括：
接入侧设备接收允许用户设备 (UE)列表变更的信息；
根据接收到的允许 UE列表变更的信息， 更新允许 UE列表；
根据更新后的允许 UE列表， 确定当前接入的 UE不在允许 UE列表内， 则将 UE从接入侧设备中释放。
本发明实施例还提供了一种接入侧设备， 包括：
接收单元， 用于接收允许用户列表变更的信息；
释放单元， 用于根据接收单元接收到的允许 UE列表变更的信息， 确定当 前接入的 UE不在允许 UE列表内， 则将 UE从接入侧设备中释放.
本发明实施例还提供了一种接入控制的系统， 包括管理设备以及接入侧设 备， 其中管理设备用于在允许 UE列表变更后， 向接入侧设备发送允许 UE列 表变更的信息， 接入侧设备用于接收所述允许用户列表变更的信息， 根据接收 到的允许 UE列表变更的信息， 确定当前接入的 UE不在允许 UE列表内， 则 将 UE从接入侧设备中释放。
通过本发明实施例提供的接入控制方法、 系统及接入侧设备， 当允许 UE 列表发生变更时， 接入侧设备接收到允许 UE列表变更的信息后， 确定当前接 入的 UE不在允许 UE列表内， 将 UE及时从接入侧设备中释放， 实现了当允 许 UE列表变化以后， 对 UE进行及时的接入控制。
附图说明
图 1是本发明实施例中家庭接入系统的架构示意图。 图 2是本发明实施例提供的接入控制方法流程图。
图 3是本发明实施例提供另一的接入控制方法流程图。
图 4是本发明实施例提供另一的接入控制方法流程图。
图 5是本发明实施例提供另一的接入控制方法流程图。
图 6是本发明实施例提供另一的接入控制方法流程图。
图 7是本发明实施例提供另一的接入控制方法流程图。
图 8是本发明实施例提供另一的接入控制方法流程图。
图 9是本发明实施例提供的一种接入侧设备的结构图。
图 9a是本发明实施例提供的另一种接入侧设备的结构图。
图 9b是本发明实施例提供的另一种接入侧设备的结构图。
图 9c是本发明实施例提供的另一种接入侧设备的结构图。
图 10是本发明实施例提供的一种接入控制的系统示意图。
图 10a是本发明实施例提供的另一种接入控制的系统示意图。
具体实施方式 为使本领域技术人员更好地理解和实现本发明实施例， 以下对本发明实施 例中家庭接入的系统进行筒要介绍， 参照图 1 , 为本发明实施例中家庭接入的 系统的架构示意图， 包括： 家庭无线接入点， 使用许可的频谱， 通过通用的 IP 接入网络将 UE连接到运营商的移动网络家庭无线接入点也可以称为微蜂窝 ( Femtocells,其可以部署在家庭、社区、企业等内 ),其包括家庭接入点（ HNB , Home NodeB ) 101 , 运行在通用移动通信系统陆地无线接入网 （ UTRAN )频 谱的家庭无线接入点； 家庭演进接入点 （HeNB, Home evolved NodeB ) 102, 运行在演进的 UMTS陆地无线接入网 （ E-UTRAN )频谱的家庭无线接入点； 家 庭非 3GPP无线接入点 （ Home non-3GPP WAP, Home non-3GPP wireless access point ) 103, 运行在非 3GPP ( non-3GPP ) 网络频谱的家庭无线接入点。 家庭无 线接入点的网关网元， 汇集家庭无线接入点， 路由和转发家庭无线接入点和移 动网络中的网元（如 MME或者 SGSN等）之间的信令数据等功能。 移动性管理 实体（MME, Mobility Management Entity ) 109, 负责 E-UTRAN网络中的控制 面移动性管理， 包括用户上下文和移动状态管理， 分配用户临时身份标识等。 服务通用分组无线业务支持节点（ SGSN, Serving GPRS Supporting Node ) 108, 用于实现 GPRS/UMTS网络中路由转发、 移动性管理、 会话管理以及用户信息 存储等功能。 非 3GPP网关（non-3GPP GW ) 110实现 non-3GPP网络中的移动性 管理、 会话管理等功能）。 归属用户服务器（HSS, Home Subscriber Server ) 111 用于存储用户签约信息。认证、授权与计费（ AAA, Authentication, Authorization and Accounting Server )服务器 112用于对 UE113执行接入认证、 授权和计费功 h
匕。
可以理解的是， 图 1所示系统架构仅仅是一种家庭接入系统架构示意图， 随着技术的发展， 家庭接入系统的架构还可能和这个架构有所差别， 本发明实 施例同样适用于与本架构类似的家庭接入系统的架构。 如图 2所示， 为本发明实施例提供的一种接入控制方法， 包括：
201、 接入侧设备接收允许用户设备 (UE)列表变更的信息；
其中接入侧设备可以从管理设备， 如 HMS或者运营商后台管理系统， 接 收允许 UE列表。 其中所述的允许 UE列表可以是针对于某一个 CSG的允许
UE列表， 也可以是针对于接入侧设备的允许 UE列表， 例如接入网元或者家 庭接入网关对应的允许 UE列表。
所述允许 UE列表变更的信息包括更新后的允许 UE列表或者从允许 UE 列表中删除 UE的信息。
202、 根据接收到的允许 UE列表变更的信息， 确定当前接入的 UE不在允 许 UE列表内， 则将 UE从接入侧设备中释放。
其中， 接入侧设备可以根据接收到的允许 UE列表变更的信息， 更新允许
UE列表， 并根据更新后的允许 UE列表， 确定当前接入的 UE不在允许 UE列 表内。
当接收到的允许 UE列表变更的信息为更新后的允许 UE列表时， 接入侧 当接收到的允许 UE列表变更的信息为从允许 UE列表中删除 UE的信息 列表中删除。
接入侧设备可以是接入网元或者接入网关， 其中接入网元可以是家庭无线 接入点， 如 HNB或者 HeNB或者 Home non-3GPP WAP, 或者为具有 CSG功 能的无线接入点， 如 NodeB、 eNodeB或者 non-3GPP WAP。
其中， 将 UE从接入侧设备中释放可以包括：
发起分离流程， 将用户设备分离； 或者
指示 UE发起位置更新流程， 将 UE迁移到允许接入的小区； 或者 发起切换流程， 将 UE切换到允许接入的小区。
通过本发明实施例提供的接入控制方法， 当允许 UE列表发生变更时， 接 入侧设备接收到变更后的允许 UE列表， 确定当前接入的 UE不在允许 UE列表 内， 从而可以将 UE及时从接入侧设备中释放， 实现了当允许 UE列表变化以后， 对 UE进行及时的接入控制。 如图 3所示， 为本发明实施例提供的另一种接入控制方法的流程图， 该方 法包括：
301、 当 UE (或者称之为用户， User )从 CSG的允许 UE列表中删除或者从 接入网元的允许 UE列表中删除， HMS或者运营商的后台系统将这个 UE从该 CSG的允许 UE列表或者接入网元的允许 UE列表中删除， 并将更新后的允许 UE 列表（即删除这个 UE后的允许 UE列表）通知给该 CSG下的接入网元， 例如， 向接入网元发送 Allowed UE List Update Request消息， 消息中可以携带更新后 的允许 UE列表， 如果网络结构中有接入侧网关， 则接入网元与 HMS/运营商的 后台系统之间交互的信息还要通过接入侧网关传递。
接入网元回确认消息到 HMS或者运营商的后台系统， 例如回 Allowed UE List Update Ack消息给 HMS或者运营商的后台系统。 步骤 301中， HMS或者运营商的后台系统也可以将从允许 UE列表中删除 UE的信息通知给接入网元（如将 UE的标识和删除 UE的操作指示通知给接入网 元） ， 接入网元收到通知信息后将 UE从允许 UE列表中删除。
在本发明实施例中， UE (或者称之为用户， User )从 CSG的允许 UE列表 中删除或者从接入网元的允许 UE列表中删除的触发条件可以有如下几种场景： 一、运营商不再允许这个 UE接入到这个 CSG或者接入网元中，运营商将这 删除。如运营商的后台系统（如运营商的 OSS (运营支撑系统， Operation Support System )或者 BOSS (电信业务运营支撑系统， BOSS )或者 OMC (操作维护中 心， Operation and Maintenance Center )等系统）或者 HMS将 UE从 CSG的允许 UE列表或者接入网元的允许 UE列表中删除；
二、 这个 UE接入这个 CSG中的准入时间超时或者这个 UE接入这个接入网 元的准入时间超时， HMS或者运营商的后台系统将 UE从 CSG的允许 UE列表或 者接入网元的允许 UE列表中删除。 如， 对于一些临时用户， HMS或者运营商 的后台系统中有这个用户的准入时间 （如这个用户允许接入到这个 CSG中或者 接入网元中的截止时间）。 当截止时间到时， HMS或者运营商的后台系统不再 允许 UE接入， HMS或者运营商的后台系统将 UE从 CSG的允许 UE列表或者接入 网元的允许 UE列表中删除。
三、接入网元的所有者或者管理者不再允许这个 UE接入到这个 CSG区域或 者接入网元中，接入网元的所有者或者管理者通知 HMS或者运营商的后台系统 将 UE从 CSG的允许 UE列表或者接入网元的允许 UE列表中删除。
接入网元根据收到的消息， 更新允许 UE列表。 接入网元根据更新后的允 许 UE列表确定当前接入的 UE不在更新后的允许 UE列表内，则接入网元通知 UE 发起 Detach流程或者接入网元通知核心管理网元发起 Detach流程。 如果接入网 元通知 UE发起 Detach流程， 则步骤 302、 303被执行； 如果接入网元通知核心管 理网元发起 Detach流程，则步骤 304、 305被执行。即步骤 302与 303或者 304与 305 择一执行， 而步骤 306、 307在步骤 302与 303或者 304与 305之后被执行。
注： 核心管理网元包括 MME或者 SGSN或者 non-3GPP GW等。
302、 如果接入网元通知 UE发起分离 Detach流程， 则接入网元发送 Release Request (释放请求 ) 消息到 UE , UE回确认消息到接入网元。 例如对于 GERAN/UTRAN/E-UTRAN网络， 接入网元可以发送 RRC Connection Release Request消息到 UE, 消息中可以携带指示信息指示这个释放是由于 UE不允许接 入 CSG中或者接入限制导致的（如消息中携带 Cause原因值为 "CSG not allowed" 或者 "Access Restriction" ) , 或者消息中携带指示信息指示 UE发起 Detach流 程（如消息中携带 Detach Indication指示信息）或者消息中携带指示信息指示 UE 不允许接入 CSG且发起 Detach流程 （如消息中携带 Cause原因值为 "CSG not Allowed Detach Required" ) 。
注： 接入网元可以按照如下方法判断 UE不允许接入 CSG:
1、 接入网元接收到 CSG中的允许用户设备列表变更的信息， 接入网元根 据所述 CSG中的允许用户设备列表变更的信息确定 UE在 CSG中不再允许接入。
2、 接入网元接收到接入网元中的允许用户设备列表变更的信息， 接入网 元根据所述接入网元中的允许用户设备列表变更的信息以及接入网元使用的 CSG标识确定 UE在接入的 CSG中不再允许接入。
上述判断 UE不允许接入 CSG的方法适用于后面的所有实施例。
303、 UE收到上述消息后发起分离流程，发送 Detach Request消息到核心管 理网元， 核心管理网元分离 UE, 回 Detach Accept消息到 UE。 UE可以在消息中 携带指示信息指示分离是由于 UE不允许接入 CSG或者接入限制导致的（如消息 中携带 Cause原因值为 "CSG not allowed" 或者为 "Access Restriction" ) 。 如 果步骤 302中的 Release Request中携带指示信息指示 UE不允许接入 CSG或者接 入限制， 则 UE可以将接入的 CSG ID从 Allowed CSG List中删除。 304、 如果接入网元通知核心管理网元发起 Detach流程， 则接入网元发送 释放请求消息 (对于 E-UTRAN网络来说，这个消息为 UE Context Release Request 消息； 对于 GERAN/UTRAN网络来说， 这个消息为 IU Release Request消息 )到 核心管理网元， 消息中携带指示信息指示这个释放是由于 UE不允许接入 CSG 中或者接入限制导致的（如消息中携带 Cause原因值为 "CSG not allowed"或者 为 "Access Restriction" )或者消息中携带指示信息指示核心管理网元发起 Detach 流程（如消息中携带 Detach Indication指示信息）或者消息中携带指示信息指示 核心管理网元 UE不允许接入 CSG且发起 Detach流程（如消息中携带 Cause原因 值为 "CSG not Allowed Detach Required" ) 。
305、 核心管理网元收到上述消息后发起分离流程， 发送 Detach Request消 息到 UE。 核心管理网元可以在消息中携带指示信息指示分离是由于 UE不允许 接入 CSG或者接入限制导致的（如消息中携带 Cause原因值为 "CSG not allowed" 或者为 "Access Restriction" ) 。
UE被分离后且 UE发现分离是由于 CSG不允许接入导致的， 则 UE可以选择 一个允许接入的小区（如选择一个 non-CSG小区（即 macro (宏）小区）或者选 择一个允许接入的 CSG小区） ， 然后发起 Attach (附着） 流程注册到运营商的 网络。
UE被分离后， 回 Detach Accept消息到核心管理网元。 如果 Detach Request 消息中携带指示信息指示 UE不允许接入 CSG, 则 UE可以将接入的 CSG ID从 Allowed CSG List中删除。
306、 核心管理网元通知接入网元释放 UE的资源。 如对于 E-UTRAN网络， MME发送 UE Context Release Command消息到 HeNB; 对于 GERAN/UTRAN网 络， SGSN发送 IU Release Command消息到 HNB。
接入网元释放 UE的资源， 回释放完成消息到核心管理网元。 注： 如果接入网元和核心管理网元之间存在接入侧网关， 则上述消息通过 接入侧网关转发。接入侧网关可以为家庭无线接入点网关，如 HNB GW、 HeNB GW或者 Home non-3GPP WAP GW。
307、 如果核心管理网元收到 Detach Request消息且消息中携带指示信息指 示分离是由于 UE不允许接入 CSG或者接入限制导致的或者核心管理网元收到 释放请求消息且消息中携带指示信息指示 UE不允许接入 CSG或者接入限制，则 核心管理网元可以通知 HSS将 UE接入的 CSG ID从 UE的 Allowed CSG List中删 除。 如核心管理网元发送 Notify CSG Request消息给 HSS, 消息中携带 CSG ID, 以及删除操作指示。
HSS将 CSG ID从 UE的 Allowed CSG List中删除， 回确认消息到核心管理网 元。
注： 如果一个用户从 CSG或者接入网元中删除，且这个用户的状态为 IDLE (空闲）状态， 则当这个用户状态从 IDLE状态向 Connection (连接）状态切换 时接入网元收到 RRC Connection Establishment Request ( RRC连接建立请求）消 息时， 判断 UE不在允许 UE列表内， 则接入网元拒绝 RRC连接建立请求， 回拒 绝消息到 UE, 消息中可以携带指示信息指示拒绝是由于 UE不允许接入 CSG中 或者接入限制导致的（如消息中携带 Cause原因值为 "CSG not allowed"或者为 "Access Restriction" )或者消息中携带指示信息指示 UE发起 Detach流程（如 消息中携带 Detach Indication指示信息）或者消息中携带指示信息指示 UE不允 许接入 CSG且发起 Detach流程（如消息中携带 Cause原因值为 "CSG not Allowed Detach Required" ) 。 UE收到拒绝消息后发起 Detach流程。 UE将接入的 CSG ID 从 Allowed CSG List中删除。
以上实施例提供的接入控制方法， 当 UE从 CSG的允许 UE列表中删除或者 从接入网元的允许 UE列表中删除后， 可以及时的将 UE从网络中分离出去， 进 一步的， UE被分离后且 UE发现分离是由于 CSG不允许接入导致的， UE还可以 选择一个允许接入的小区然后发起 Attach (附着） 流程注册到运营商的网络， 使得 UE被分离后还可以选择其它的区域接入后继续使用运营商的网络。
图 4为本发明实施例提供的另一种接入控制方法的流程图， 包括：
401、 同步骤 301的处理。
接入网元根据更新后的允许 UE列表中确定当前接入的 UE不在更新后的允 许 UE列表内， 则通知 UE发起位置更新流程， 有两种方式可以通知 UE发起位置 更新， 一种是接入网元直接通知 UE发起位置更新流程， 则步骤 402-405被执行， 另一种是接入网元通知核心管理网元 UE不允许接入 CSG, 核心管理网元通知 UE发起更新流程， 则步骤 406-410被执行。 步骤 411在 402-405或者 406-411被执 行后执行。
402、接入网元直接通知 UE发起位置更新流程， （如，对于 E-UTRAN网络， 通知 UE发起跟踪区更新流程， 对于 GERAN/UTRAN网络， 通知 UE发起路由区 更新流程） ， 发送 Release Request消息到 UE, 消息中可以携带指示信息指示这 个释放是由于 UE不允许接入 CSG中或者接入限制导致的 （如消息中携带 Cause 原因值为 "CSG not allowed" 或者为 "Access Restriction" )或者消息中携带指 示信息指示 UE发起更新流程 (如消息中携带 TAU Indication或者 RAU Indication 指示信息）或者消息中携带指示信息指示 UE不允许接入 CSG且发起更新流程 (如消息中携带 Cause原因值为 "CSG not Allowed TAU Required" 或者 Cause 原因值为 "CSG not Allowed RAU Required" ) 。
UE回确认消息到接入网元。
403、 UE收到上述消息后选择一个允许接入的小区 （如选择一个 non-CSG 小区 （即 macro (宏） 小区）或者选择一个允许接入的 CSG小区） ， 发起更新 流程， 发送更新请求消息到核心管理网元。 如对于 E-UTRAN网络， 发送 TAU Request消息到 MME; 对于 GERAN/UTRAN网络， 发送 RAU Request消息到 SGSN。 UE可以在消息中携带指示信息指示 UE不允许接入 CSG或者接入限制 (如消息中携带 Cause原因值为 "CSG not allowed"或者 "Access Restriction" ) , 消息中可以携带 UE不允许接入 CSG的 CSG ID。 UE将接入的 CSG ID从 Allowed CSG List中删除。
核心管理网元接受更新请求， 回接受消息到 UE。
404、 如果步骤 403中 UE不能选择一个允许接入的小区发起更新流程， 则 UE发起分离流程。 处理同步骤 303。
405、 核心管理网元通知接入网元释放 UE的资源。 处理同步骤 306。
406、如果接入网元通知核心管理网元 UE不允许接入 CSG,核心管理网元 通知 UE发起更新流程， 则接入网元发送释放请求消息（对于 E-UTRAN网络来 说， 这个消息为 UE Context Release Request消息； 对于 GERAN/UTRAN网络来 说， 这个消息为 IU Release Request消息 )到核心管理网元， 消息中携带指示信 息指示这个释放是由于 UE不允许接入 CSG中或者接入限制导致的（如消息中携 带 Cause原因值为 "CSG not allowed" 或者为 "Access Restriction" )或者消息 中携带指示信息指示核心管理网元发起更新流程（如消息中携带 TAU Indication 或者 RAU Indication指示信息）或者消息中携带指示信息指示核心管理网元 UE 不允许接入 CSG且发起更新流程 （如消息中携带 Cause原因值为 "CSG not Allowed TAU Required " 或者 Cause原因值为 " CSG not Allowed RAU Required" ) 。
407a,核心管理网元收到上述消息后通知 UE发起更新流程， 向接入网元发 送释放请求消息。如对于 E-UTRAN网络，核心管理网元发送 UE Context Release Command消息到 HeNB； 对于 GERAN/UTRAN网络， 核心管理网元发送 IU Release Command消息到 HNB, 消息中携带指示信息指示这个释放是由于 UE不 允许接入 CSG中或者接入限制导致的 （如消息中携带 Cause原因值为 "CSG not allowed" 或者为 "Access Restriction" )或者消息中携带指示信息指示 UE发起 更新流程（如消息中携带 TAU Indication或者 RAU Indication指示信息等）或者 消息中携带指示信息指示 UE不允许接入 CSG且发起更新流程（如消息中携带 Cause原因值为 "CSG not Allowed TAU Required"或者 Cause原因值为 "CSG not Allowed RAU Required" 等） 。 接入网元收到上述消息后发送 Release Request ( RRC连接释放请求） 消息到 UE, 消息中携带指示信息指示这个释放是由于 UE不允许接入 CSG中或者接入限制导致的（如消息中携带 Cause原因值为 "CSG not allowed" 或者为 "Access Restriction" )或者消息中携带指示信息指示 UE 发起更新流程 (如消息中携带 TAU Indication或者 RAU Indication指示信息等 ) 或者消息中携带指示信息指示 UE不允许接入 CSG且发起更新流程（如消息中携 带 Cause原因值为 "CSG not Allowed TAU Required"或者 Cause原因值为 "CSG not Allowed RAU Required" 等 ) 。
407b, 接入网元将收到的释放请求消息发送至 UE。
408a, UE回确认消息到接入网元。
408b, 接入网元释放 UE的资源， 回完成消息到核心管理网元。
注： 如果 UE不能选择一个允许接入的小区发起更新流程， 则 UE也可以回 拒绝消息到接入网元而不是确认消息， 这时接入网元回拒绝消息到核心管理网 元。
409、 UE收到上述消息后选择一个允许接入的小区 （如选择一个 non-CSG 小区 （即 macro (宏） 小区）或者选择一个允许接入的 CSG小区） ， 发起更新 流程。 处理同步骤 403。
410、 如果步骤 409中 UE不能选择一个允许接入的小区发起更新流程， 则 UE发起分离流程， 处理同步骤 303。 或者， 核心管理网元收到步骤 408中发送的 拒绝消息， 则核心管理网元发起分离流程， 处理同步骤 305。
411、 如果核心管理网元收到更新请求或者 Detach Request消息或者释放请 求消息且消息中携带指示信息指示 UE不允许接入 CSG或者接入限制，则核心管 理网元可以通知 HSS将 UE接入的 CSG ID从 UE的 Allowed CSG List中删除。如核 心管理网元发送 Notify CSG Request消息给 HSS, 消息中携带 CSG ID, 以及删除 操作指示。
HSS将 CSG ID从 UE的 Allowed CSG List中删除， 回确认消息到核心管理网 元。
注： 如果一个用户从 CSG或者接入网元中删除，且这个用户的状态为 IDLE (空闲）状态， 则当这个用户状态从 IDLE状态向 Connection (连接）状态切换 时接入网元收到 RRC Connection Establishment Request ( RRC连接建立请求）消 息时， 判断 UE不在允许 UE列表内， 则接入网元拒绝 RRC连接建立请求， 回拒 绝消息到 UE, 消息中可以携带指示信息指示拒绝是由于 UE不允许接入 CSG中 或者接入限制导致的（如消息中携带 Cause原因值为 "CSG not allowed"或者为 "Access Restriction" )或者消息中携带指示信息指示 UE发起更新流程 (如消 息中携带 TAU Indication或者 RAU Indication指示信息等）或者消息中携带指示 信息指示 UE不允许接入 CSG且发起更新流程（如消息中携带 Cause原因值为 "CSG not Allowed TAU Required"或者 Cause原因值为 "CSG not Allowed RAU Required" 等） 。 UE收到拒绝消息后发起更新流程。 UE将接入的 CSG ID从 Allowed CSG List中删除。
本实施例中将 UE从当前接入的接入网元中分离， 同时 UE又发起位置更新 流程， 使其接入到其它能够允许接入的区域， 所以既实现了对 UE的接入控制， 又能使 UE当前使用的业务不发生中断， 能够增加用户的体验。 如图 5所示， 为本发明实施例提供的另一种接入控制方法的流程图， 包括：
501、 同步骤 301。
502、接入网元根据更新后的允许 UE列表中确定当前接入的 UE不在更新后 的允许 UE列表内， 则接入网元选择一个允许接入的小区， 发起切换流程。接入 网元发送 Handover Required到核心管理网元。 消息中可以携带指示信息指示这 个切换是由于 UE不允许接入 CSG中或者接入限制导致的 （如消息中携带 Cause 原因值为 "CSG not allowed" 或者为 "Access Restriction" ) 。
503、 核心管理网元发送 Handover Request消息到目标接入网元， 目标接入 网元回 Handover Request Ack消息到核心管理网元；如果目标接入网元不能接受 切换， 则回 Handover Request Reject消息到核心管理网元。
504、 核心管理网元回 Handover Command消息 （切换成功）或者 Handover Failure消息 （切换失败）到接入网元。
505、如果接入网元收到 Handover Command消息，则接入网元发送 Handover Command消息到 UE通知 UE切换到选择的允许接入的小区。
506、 UE切换到选择的允许接入的小区， 发送 Handover Confirm消息到目 标接入网元。
507、 目标接入网元发送 Handover Notify消息到核心管理网元。
508、 核心管理网元收到上述消息后通知接入网元释放资源。 处理同步骤
306。
509、 如果接入网元收到切换失败的消息， 则接入网元可以通知 UE发起
Detach流程或者接入网元可以通知核心管理网元发起 Detach流程， 将 UE从当前 接入的接入网元中分离， 处理机制同图 3对应的实施例中的分离处理机制， 或 者， 核心管理网元收到切换失败的消息后发起 Detach流程， 将 UE从当前接入的 接入网元中分离， 处理机制同图 3对应的实施例中的分离处理机制。
510、 如果核心管理网元收到 Handover Required消息且消息中携带指示信 息指示 UE不允许接入 CSG或者接入限制， 则核心管理网元可以通知 HSS将 UE 接入的 CSG ID从 UE的 Allowed CSG List中删除。 如核心管理网元发送 CSG Notify Request消息给 HSS , 消息中携带 CSG ID, 以及删除操作指示。
HSS将 CSG ID从 UE的 Allowed CSG List中删除， 回确认消息到核心管理网 元。 这种机制将 UE从当前接入的接入网元中分离， 同时又将 UE切换到其它能 够允许接入的区域， 所以既实现了 CSG的接入控制， 又能使 UE当前使用的业务 不发生中断， 能够增加用户的体验。
以上三个实施例中， 分别介绍了接入网元在确定当前接入的 UE不在更新 后的允许 UE列表内时的接入控制方法，下面通过实施例介绍通过接入网关来进 行接入控制的方法。
图 6为本发明实施例提供的另一种接入控制方法的流程图， 包括：
601、 当 UE (或者称之为用户， User )从 CSG的允许 UE列表中删除或者从 接入网元的允许 UE列表中删除， HMS或者运营商的后台系统将这个 UE从这个 CSG的允许 UE列表或者接入网元的允许 UE列表中删除。 HMS或者运营商的后 台系统将更新后的允许 UE列表通知给接入侧网关， 例如可以 Allowed UE List Update Request通知接入侧网关。
接入侧网关回确认消息到 HMS或者运营商的后台系统。
注： HMS或者运营商的后台系统也可以将从允许 UE列表中删除 UE的信息 通知给接入网关（如将 UE的标识和操作指示（删除）通知给接入网关）， 接入 网关收到通知信息后将 UE从允许 UE列表中删除。
接入侧网关根据收到的消息， 更新允许 UE列表。 接入侧网关根据更新后 的允许 UE列表中确定当前接入的 UE不在更新后的允许 UE列表内， 则接入侧网 关通知 UE发起 Detach流程或者接入侧网关通知核心管理网元发起 Detach流程。 如果接入侧网关通知 UE发起 Detach流程， 则步骤 602至步骤 605被执行； 如果接 入侧网关通知核心管理网元发起 Detach流程， 则步骤 606至步骤 608被执行， 步 骤 609、 610在步骤 602至 605或者 606至 608之后被执行。
602a,如果接入侧网关通知 UE发起 Detach流程， 则接入侧网关发送 Release Command消息到接入网元（如，对于 E-UTRAN网络， HeNB GW发送 UE Context Release Command消息到 HeNB; 对于 GERAN/UTRAN网络， HeNB GW发送 IU Release Command消息到 HNB ) , 消息中携带指示信息指示这个释放是由于 UE 不允许接入 CSG中或者接入限制导致的或者消息中携带指示信息指示 UE发起 Detach流程或者消息中携带指示信息指示 UE不允许接入 CSG且发起 Detach流 程。
注： 接入侧网关可以按照如下方法判断 UE不允许接入 CSG:
1、 接入侧网关接收到 CSG中的允许用户设备列表变更的信息， 接入侧网 关根据所述 CSG中的允许用户设备列表变更的信息确定 UE在 CSG中不再允许 接入。
2、 接入侧网关接收到接入网元中的允许用户设备列表变更的信息， 接入 侧网关根据所述接入网元中的允许用户设备列表变更的信息以及接入网元使 用的 CSG标识确定 UE在接入的 CSG中不再允许接入。
上述判断 UE不允许接入 CSG的方法适用于后面的所有实施例。
602b, 接入网元收到上述消息后发送 Release Request消息到 UE, 消息中携 带指示信息指示这个释放是由于 UE不允许接入 CSG中或者接入限制导致的或 者消息中携带指示信息指示 UE发起 Detach流程或者消息中携带指示信息指示 UE不允许接入 CSG且发起 Detach流程。
603a, UE回确认消息到接入网元； 接入网元释放 UE的资源。
603b、 接入网元回完成消息到接入侧网关。
604、 UE收到步骤 602中的消息后发起分离流程。 同步骤 303的处理。
605、核心管理网元通知接入侧网关释放 UE的资源。如对于 E-UTRAN网络，
MME发送 UE Context Release Command消 息到 HeNB GW； 对于
GERAN/UTRAN网络， SGSN发送 IU Release Command消息到 HNB GW, 接入 侧网关向核心管理网元发送释放完成消息。
606、 如果接入侧网关通知核心管理网元发起 Detach流程， 则接入侧网关 发送释放请求消息（对于 E-UTRAN网络来说， 这个消息为 UE Context Release Request消息； 对于 GERAN/UTRAN网络来说， 这个消息为 IU Release Request 消息 )到核心管理网元， 消息中携带指示信息指示这个释放是由于 UE不允许接 入 CSG中或者接入限制导致的或者消息中携带指示信息指示核心管理网元发 起 Detach流程或者消息中携带指示信息指示核心管理网元 UE不允许接入 CSG 且发起 Detach流程。
607、 核心管理网元收到上述消息后发起分离流程， 同步骤 305的处理。
608、 核心管理网元通知接入网元释放 UE的资源， 同步骤 306的处理。
609、 同步骤 307的处理。
注： 如果一个用户从 CSG或者接入网元中删除，且这个用户的状态为 IDLE 状态， 则当这个用户状态从 IDLE状态向 Connection状态切换时， 接入侧网关收 到 Initial UE Message消息后， 判断 UE不在允许 UE列表内， 则接入侧网关拒绝 Initial UE Message消息， 回一个拒绝消息到接入网元， 拒绝消息中携带指示信 息指示拒绝是由于 UE不允许接入 CSG中或者接入限制导致的或者消息中携带 指示信息指示发起 Detach流程或者消息中携带指示信息指示 UE不允许接入 CSG且发起 Detach流程。 接入网元收到这个消息后发送释放请求消息到 UE , 消 息中携带指示信息指示释放是由于 UE不允许接入 CSG中或者接入限制导致的 或者消息中携带指示信息指示 UE发起 Detach流程或者消息中携带指示信息指 示 UE不允许接入 CSG且发起 Detach流程。 UE收到释放消息后发起 Detach流程且 UE将接入的 CSG ID从 Allowed CSG List中删除。
本实施例提供的接入控制机制， 实现了在接入侧网关上实现接入控制， 当 UE从 CSG的允许 UE列表中删除或者从接入网元的允许 UE列表中删除后， 可以 及时的将 UE从网络中分离出去， 进一步的， UE被分离后且 UE发现分离是由于 CSG不允许接入导致的， UE还可以选择一个允许接入的小区然后发起 Attach (附着 )流程注册到运营商的网络，使得 UE被分离后还可以选择其它的区域接 入后继续使用运营商的网络。 图 7为本发明实施例提供的另一种接入控制方法的流程图， 包括：
701、 同步骤 601。 允许 UE列表内， 则通知 UE发起位置更新流程， 有两种方式可以通知 UE发起位 置更新， 一种是接入侧网关直接通知 UE发起位置更新流程， 则步骤 702至步骤 706被执行， 另一种是接入侧网关通知核心管理网元 UE不允许接入 CSG, 核心 管理网元通知 UE发起更新流程， 则步骤 707至步骤 711被执行。
702a, 如果接入侧网关直接通知 UE发起更新流程， 则接入侧网关发送 Release Command消息到接入网元（如， 对于 E-UTRAN网络， HeNB GW发送 UE Context Release Command消息到 HeNB； 对于 GERAN/UTRAN网络， HeNB GW发送 IU Release Command消息到 HNB ) , 消息中携带指示信息指示这个释 放是由于 UE不允许接入 CSG中或者接入限制导致的或者消息中携带指示信息 指示 UE发起更新流程或者消息中携带指示信息指示 UE不允许接入 CSG且发起 更新流程。
702b, 接入网元收到上述消息后发送 Release Request消息到 UE, 消息中携 带指示信息指示这个释放是由于 UE不允许接入 CSG中或者接入限制导致的或 者消息中携带指示信息指示 UE发起更新流程或者消息中携带指示信息指示 UE 不允许接入 CSG且发起更新流程。
703a, UE回确认消息到接入网元； 接入网元释放 UE的资源。
703b、 接入网元回完成消息到接入侧网关。
704 - 705, 同步骤 403、 404的处理。
706、 同步骤 605的处理。
707、 如果接入侧网关通知核心管理网元 UE不允许接入 CSG, 核心管理网 元通知 UE发起更新流程， 则接入侧网关发送释放请求消息 (对于 E-UTRAN网络 来说， 这个消息为 UE Context Release Request消息； 对于 GERAN/UTRAN网络 来说， 这个消息为 IU Release Request消息）到核心管理网元， 消息中携带指示 信息指示这个释放是由于 UE不允许接入 CSG中或者接入限制导致的或者消息 中携带指示信息指示核心管理网元发起更新流程或者消息中携带指示信息指 示核心管理网元 UE不允许接入 CSG且发起更新流程。
步骤 708 - 712、 同步骤 407-411的处理。
本实施例实现了接入侧网关对 UE进行的接入控制， 本实施例中将 UE从当 前接入的接入网元中分离， 同时 UE又发起位置更新流程，使其接入到其它能够 允许接入的区域， 所以既实现了对 UE的接入控制， 又能使 UE当前使用的业务 不发生中断， 能够增加用户的体验。 图 8为本发明实施例提供的另一种接入控制方法的流程图， 包括：
801、 同步骤 601。
802、接入侧网关收到更新后的允许 UE列表中确定当前接入的 UE不在更新 后的允许 UE列表内， 则接入侧网关发送 Handover Trigger消息到接入网元通知 接入网元发起切换流程，消息中可以携带指示信息指示这个消息是由于 UE不允 许接入 CSG中或者接入限制导致的 （如消息中携带 Cause原因值为 "CSG not allowed" 或者为 "Access Restriction" ) 。
接入网元回确认消息到接入侧网关。
如果接入网元不能选择一个允许接入的小区来发起切换流程， 则接入网元 可以回拒绝消息到接入侧网关。
803 - 809、 同骤 502至步骤 508的处理。
810、 如果接入网元收到切换失败的消息， 则接入网元可以通知 UE发起 Detach流程或者接入网元可以通知核心管理网元发起 Detach流程， 将 UE从当前 接入的接入网元中分离， 处理机制同图 3对应的实施例中的分离处理机制； 或 者， 核心管理网元收到切换失败的消息后发起 Detach流程， 将 UE从当前接入的 接入网元中分离， 处理机制同图 3对应的实施例中的分离处理机制； 或者， 如 果接入侧网关收到切换失败消息或者切换触发失败消息， 则接入侧网关可以通 知 UE发起 Detach流程或者接入侧网关可以通知核心管理网元发起 Detach流程， 将 UE从当前接入的接入网元中分离， 处理机制同图 6对应的实施例中的分离处 理机制。
811、 同步骤 307的处理。
本实施例实现了接入侧网关对 UE的接入控制， 这种机制将 UE从当前接入 的接入网元中分离， 同时又将 UE切换到其它能够允许接入的区域，所以既实现 了 CSG的接入控制， 又能使 UE当前使用的业务不发生中断， 能够增加用户的体 验。
图 9所示， 为本发明实施例提供的一种接入侧设备， 包括
接收单元 901 , 用于接收允许 UE列表变更的信息；
释放单元 903, 用于根据接收单元接收到的允许 UE列表变更的信息， 确定 当前接入的 UE不在允许 UE列表内， 则将 UE从接入侧设备中释放。
其中接入侧设备可以从管理设备， 如 HMS或者运营商后台管理系统， 接 收允许 UE列表。 其中所述的允许 UE列表可以是针对于某一个 CSG的允许 UE列表， 也可以是针对于接入侧设备的允许 UE列表， 例如接入网元或者家 庭接入网关对应的允许 UE列表。
所述允许 UE列表变更的信息包括更新后的允许 UE列表或者从允许 UE列 表中删除 UE的信息。
其中， 管理设备触发允许 UE列表更新的场景同方法实施例中的描述。 接入侧设备可以是接入网元或者接入网关， 其中接入网元可以是家庭无线 接入点， 如 HNB或者 HeNB或者 Home non-3GPP WAP, 或者为具有 CSG功 能的无线接入点， 如 NodeB、 eNodeB或者 non-3GPP WAP。
图 9a所示， 为本发明实施例提供的另一种接入侧设备，其在图 9实施例的 基础上， 所述释放单元进一步包括： 更新子单元 9031 , 用于根据接收单元接收到的允许 UE列表变更的信息， 更新允许 UE列表；
确定释放子单元 9032, 用于根据更新后的允许 UE 列表确定当前接入的 UE不在允许 UE列表内， 将 UE从接入侧设备中释放。
当接收到的允许 UE列表变更的信息为更新后的允许 UE列表时， 更新子 当接收到的允许 UE列表变更的信息为从允许 UE列表中删除 UE的信息 时， 更新子单元 9031可以根据所述从允许 UE列表中删除 UE的信息， 将 UE 从允许 UE列表中删除。
图 9b所示， 为本发明实施例提供的另一种接入侧设备， 其在图 9实施例 的基础上， 所述释放单元进一步包括下列单元之一或组合：
分离子单元 9033 , 用于发起分离流程， 将用户设备分离；
更新子单元 9034, 用于通知 UE发起位置更新流程， 将 UE迁移到允许接 入的小区；
切换子单元 9035 , 用于发起切换流程， 将 UE切换到允许接入的小区。 各子单元的具体实现方式可以参考方法实施例中的描述， 在此不重复描 述。
当然， 图 9b也可以和图 9a中的接入侧设备组合实现， 这样， 在图 9a的基 础上，确定释放子单元 9032可以进一步包括图 9b中释放单元中包括的子单元。
图 9c所示， 为本发明实施例提供的另一种接入侧设备，其在图 9实施例的 基础上， 进一步包括： 添加单元 905 , 用于在释放单元发起的分离流程、 位置 更新流程或切换流程中向 UE或核心管理网元发送的消息中添加指示信息， 用 于指示该流程是由于 UE不允许接入 CSG或者接入限制导致的。
在不同的流程中发送的消息以及具体的指示信息可以参见方法实施例中 的描述。 当然该添加单元 905也可以添加在图 9a或图 9b对应的接入侧控制设备基 础上。
图 10 所示， 为本发明实施例提供的一种接入控制的系统示意图， 该系统 包括：
管理设备 1001 , 用于在允许 UE列表变更后， 向接入侧设备发送允许 UE 列表变更的信息；
接入侧设备 1003 , 用于接收所述允许用户列表变更的信息， 根据接收到的 允许 UE列表变更的信息， 确定当前接入的 UE不在允许 UE列表内， 则将 UE 从接入侧设备中释放。
在本发明另一实施例中， 在图 10 中的接入控制系统基础上， 接入侧设备 进一步还可以是图 9、 图 9a、 图 9b或者图 9c中的接入侧设备。
图 10a为本发明实施例提供的另一种接入控制的系统示意图，在图 10中的 接入控制系统基础上， 所述管理设备进一步包括确定子单元 1011 及通知子单 元 1013, 其中确定子单元 1011用于确定不再允许 UE接入到 CSG或者接入到 接入侧设备， 将 UE从允许 UE列表中删除， 或者接收接入网元或者 CSG的所 有者 /管理者发送的通知消息， 所述通知消息中携带不再允许 UE接入到 CSG 或者接入到接入侧设备的信息，确定子单元根据所述通知消息将 UE从允许 UE 列表中删除；
通知子单元 1013 , 用于在确定子单元将 UE从允许 UE列表中删除后， 向 接入侧设备发送允许 UE列表变更的信息。
以上装置和系统实施例在具体实现过程中的各种技术细节， 均可以参考前 述方法实施例中的描述， 本处不再重复说明。
通过以上的实施方式的描述， 本领域的技术人员可以清楚地了解到本发明 可借助软件加必需的硬件平台的方式来实现， 当然也可以全部通过硬件来实 施， 但很多情况下前者是更佳的实施方式。 基于这样的理解， 本发明的技术方 案对背景技术做出贡献的全部或者部分可以以软件产品的形式体现出来， 该计 算机软件产品可以存储在存储介质中， 如 ROM/RAM、 磁碟、 光盘等， 包括若 干指令用以使得一台计算机设备（可以是个人计算机， 服务器， 或者网络设备 等）执行本发明各个实施例或者实施例的某些部分所述的方法。
总之， 以上所述仅为本发明技术方案的较佳实施例而已， 并非用于限定本 发明的保护范围。凡在本发明的实质和原则之内， 所作的任何修改、等同替换、 改进等， 均应包含在本发明的保护范围之内。

Claims

权利 要求 书
1、 一种接入控制的方法， 其特征在于， 包括：
接入侧设备接收允许用户设备 UE列表变更的信息；
根据接收到的允许 UE列表变更的信息， 确定当前接入的 UE不在允许 UE 列表内， 则将 UE从接入侧设备中释放。
2、 根据权利要求 1所述的接入控制的方法， 其特征在于， 所述允许 UE列
3、 根据权利要求 2所述的接入控制的方法， 其特征在于， 所述根据接收到 的允许 UE列表变更的信息， 确定当前接入的 UE不在允许 UE列表内包括： 根据接收到的允许 UE列表变更的信息， 更新允许 UE列表；
根据更新后的允许 UE列表， 确定当前接入的 UE不在允许 UE列表内。
4、 根据权利要求 3所述的接入控制的方法， 其特征在于， 所述允许 UE列 当所述允许 UE列表变更的信息为从允许 UE列表中删除 UE的信息时， 所 述根据接收到的允许 UE列表变更的信息， 更新允许 UE列表包括：
根据所述从允许 UE列表中删除 UE的信息，将 UE从允许 UE列表中删除。
5、 根据权利要求 2所述的接入控制的方法， 其特征在于， 所述接入侧设备 接收允许 UE列表变更的信息包括：
当管理设备中的允许 UE 列表变更后， 接入侧设备从管理设备中接收允许 UE列表变更的信息。
6、 根据权利要求 5所述的接入控制的方法， 其特征在于， 管理设备中的允 许 UE列表变更包括：
管理设备确定不再允许 UE接入到 CSG或者接入到接入侧设备， 将 UE从 允许 UE列表中删除； 或者
管理设备接收接入网元或者 CSG的所有者 /管理者的通知消息，所述通知消 息中携带不再允许 UE接入到 CSG或者接入到接入侧设备的信息， 管理设备根 据所述通知消息将 UE从允许 UE列表中删除。
7、根据权利要求 1至 6任一权利要求所述的接入控制的方法，其特征在于， 所述将 UE从接入侧设备中释放包括：
发起分离流程， 将用户设备分离；
通知 UE发起位置更新流程， 将 UE迁移到允许接入的小区； 或者
发起切换流程， 将 UE切换到允许接入的小区。
8、 根据权利要求 7所述的接入控制的方法， 其特征在于， 所述接入侧设备 包括接入网元或者接入网关。
9、 根据权利要求 6所述的接入控制的方法， 其特征在于， 所述管理设备包 括家庭接入管理服务器 HMS或者运营商后台管理系统。
10、根据权利要求 7所述的接入控制的方法， 其特征在于， 该方法还包括： 在分离流程、位置更新流程或者切换流程中，核心管理网元接收到接入侧设 备或者 UE发送的消息，所述消息中携带指示信息，该指示信息用于指示所述流 程是由于 UE不允许接入 CSG或者接入限制导致的； 列表中删除。
11、根据权利要求 7所述的接入控制的方法， 其特征在于， 该方法还包括： 在分离流程、位置更新流程或者切换流程中， UE接收到接入侧设备发送的消息， 所述消息中携带指示信息，该指示信息用于指示所述流程是由于 UE不允许接入 CSG或者接入限制导致的；
所述 UE将 CSG标识，
12、 一种接入侧设备， 其特征在于， 包括：
接收单元， 用于接收允许用户设备 UE列表变更的信息；
释放单元， 用于根据接收单元接收到的允许 UE列表变更的信息， 确定当前 接入的 UE不在允许 UE列表内， 则将 UE从接入侧设备中释放。
13、根据权利要求 12所述的接入侧设备， 其特征在于， 所述释放单元包括： 更新子单元， 用于根据接收单元接收到的允许 UE列表变更的信息， 更新允 许 UE列表；
确定释放子单元， 用于根据更新后的允许 UE列表确定当前接入的 UE不在 允许 UE列表内， 将 UE从接入侧设备中释放。
14、 根据权利要求 12所述的接入侧设备， 其特征在于， 所述释放单元包括 下列子单元之一或组合：
分离子单元， 用于发起分离流程， 将用户设备分离；
更新子单元， 用于通知 UE发起位置更新流程， 将 UE迁移到允许接入的小 区；
切换子单元， 用于发起切换流程， 将 UE切换到允许接入的小区。
15、 根据权利要求 14所述的接入侧设备， 其特征在于， 所述接入侧设备还 包括添加单元， 用于在所述释放单元发起的分离流程、 位置更新流程或切换流 程中向 UE或核心管理网元发送的消息中添加指示信息，用于指示该流程是由于 UE不允许接入 CSG或者接入限制导致的。
16、 根据权利要求 12所述的接入侧设备， 其特征在于， 所述接入侧设备包 括接入网元或接入网关。
17、 一种接入控制的系统， 其特征在于， 包括管理设备以及接入侧设备， 所述管理设备用于在允许 UE列表变更后，向接入侧设备发送允许 UE列表 变更的信息；
所述接入侧设备用于接收所述允许用户列表变更的信息， 根据接收到的允 许 UE列表变更的信息， 确定当前接入的 UE不在允许 UE列表内， 则将 UE从 接入侧设备中释放。
18、 根据权利要求 17所述的系统， 其特征在于， 所述接入侧设备如权利 要求 12至 16任一权利要求所述的接入侧设备。
19、 根据权利要求 17所述的系统， 其特征在于， 所述管理设备进一步包括 确定子单元及通知子单元， 其中， 所述确定子单元用于确定不再允许 UE接入到 CSG或者接入到接入侧设备， 将 UE从允许 UE列表中释放， 或者接收接入网元或者 CSG的所有者 /管理者发 送的通知消息， 所述通知消息中携带不再允许 UE接入到 CSG或者接入到接入 侧设备的信息，所述确定子单元根据所述通知消息将 UE从允许 UE列表中释放； 所述通知子单元， 用于在所述确定子单元将 UE从允许 UE列表中删除后， 向接入侧设备发送允许 UE列表变更的信息。
PCT/CN2009/075119 2009-01-17 2009-11-25 一种接入控制的方法、系统及接入侧设备 WO2010081351A1 (zh)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN200910105100.X 2009-01-17
CN200910105100A CN101784104A (zh) 2009-01-17 2009-01-17 一种接入控制的方法、系统及接入侧设备

Publications (1)

Publication Number Publication Date
WO2010081351A1 true WO2010081351A1 (zh) 2010-07-22

Family

ID=42339425

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2009/075119 WO2010081351A1 (zh) 2009-01-17 2009-11-25 一种接入控制的方法、系统及接入侧设备

Country Status (2)

Country Link
CN (1) CN101784104A (zh)
WO (1) WO2010081351A1 (zh)

Families Citing this family (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN104780588B (zh) * 2014-01-10 2018-09-21 中国电信股份有限公司 用于控制传感节点加入的方法和汇聚节点
CN109729042B (zh) * 2017-10-27 2021-03-12 大唐移动通信设备有限公司 一种信息传输、处理方法及装置
CN114885353A (zh) * 2022-06-17 2022-08-09 中国联合网络通信集团有限公司 状态信息的获取方法、装置及存储介质

Citations (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101296451A (zh) * 2008-06-03 2008-10-29 中兴通讯股份有限公司 一种更新终端的内部用户组列表的方法

Family Cites Families (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101340701A (zh) * 2007-07-02 2009-01-07 上海华为技术有限公司 毫微微小区的接入控制方法及基站

Patent Citations (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101296451A (zh) * 2008-06-03 2008-10-29 中兴通讯股份有限公司 一种更新终端的内部用户组列表的方法

Also Published As

Publication number Publication date
CN101784104A (zh) 2010-07-21

Similar Documents

Publication Publication Date Title
US9131427B2 (en) Closed subscriber group information processing method, access control method, system, and device
EP2348782B1 (en) Access controlling method, device and communication system
US10779357B2 (en) Method for avoiding handover failure
US8792892B2 (en) Handover control method, apparatus and system
CN103621123B (zh) 经由本地网络进行流量分流
EP2449811B1 (en) Service continuity during outbound handover from a home network base station with local internet protocol access
WO2010017783A1 (zh) 控制用户设备接入和删除的方法、系统和装置
JP7454563B2 (ja) ネットワークサービス制御方法及び通信機器
WO2009094916A1 (fr) Procédé, système et dispositif de commande pour redémarrage après défaillance dans le domaine circuit
WO2010022618A1 (zh) 用户设备接入超时的处理方法、装置
KR20110002835A (ko) 사용자 장비의 위치 정보를 갱신하기 위한 방법
KR20110102899A (ko) 주변의 무선 네트워크로의 가입자들의 이동
WO2011137823A1 (zh) 密钥隔离方法和装置
WO2010094225A1 (zh) 接入网元过载控制方法及相关设备
WO2013020433A1 (zh) 一种网络切换控制方法、通信系统以及相关设备
WO2012126319A1 (zh) 一种本地访问业务的切换方法及系统
WO2010081351A1 (zh) 一种接入控制的方法、系统及接入侧设备
WO2010017755A1 (zh) Csg信息更新的处理方法、装置以及系统
WO2012167648A1 (zh) 一种进行lipa承载接入控制的方法、系统和设备
WO2013000344A1 (zh) 切换过程中本地访问连接的处理方法及装置
WO2012094971A1 (zh) Ap控制ue驻留的方法和装置
WO2012109944A1 (zh) 一种lipa连接的处理方法和设备
WO2012100622A1 (zh) 一种网元过载的用户释放方法、系统、基站、mme和rn

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 09838138

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE

122 Ep: pct application non-entry in european phase

Ref document number: 09838138

Country of ref document: EP

Kind code of ref document: A1