WO2010130126A1

WO2010130126A1 - Method and system for access control and access side device

Info

Publication number: WO2010130126A1
Application number: PCT/CN2009/075261
Authority: WO
Inventors: 陆伟; 吴问付
Original assignee: 华为技术有限公司
Priority date: 2009-05-15
Filing date: 2009-12-02
Publication date: 2010-11-18
Also published as: CN101888596A

Abstract

A method and a system for access control are provided by the embodiments of the present invention, wherein, the method for access control includes: obtaining the subscriber's permitted service type in the closed subscriber group CSG (11); determining whether the subscriber is permitted to access the CSG according to the subscriber's permitted service type in the CSG (12). The subscriber accesses the CSG by obtaining the subscriber's service type in the closed subscriber group CSG to realize providing discrepant services for different subscribers according to different service types. The invention can not only utilize the network resources effectively, but also create conditions for the subscribers to set the usage of resources according to the requirement, and improve the availability of the network resources.

Description

Method, system and access side device for access control

Technical field

The present invention relates to the field of communications technologies, and in particular, to an access control method and system. Background technique

At present, there are more and more types of communication services. In order to utilize limited resources to meet the business needs of different users, various control strategies are needed for network resources.

Moreover, the fixed network and the mobile network are more and more integrated. As shown in FIG. 1, for example, the UE (User Equipment) can be evolved through the home wireless access device (such as HNB, Home NodeB home base station; HeNB, Home evolved NodeB). Home base station; Home non-3GGP WAP, Home non-3GPP wireless access point, non-third generation partner program wireless access point), connecting UE to carrier through Generic IP Access Network Mobile networks, that is, home access modes, network resources can be used for many home network services.

Therefore, not only do operators want to control network resources, but the owners of home wireless access devices also want to control network resources to ensure their own needs while meeting the needs of other different users.

In order to meet the business needs of different users with limited resources, a CSG (Closed Subscriber Group) access mechanism has been proposed. Specifically, each CSG includes one cell or several cells of the operator, and each CSG is identified by a CSG ID (identity), and the UE (or user user) may belong to one or more CSGs, that is, one or more CSGs. In this way, the CSG ID of one or more CSGs is stored on the UE, and the CSG ID constitutes an Allowed CSG List (also referred to as a CSG ID list).

The mode of CSG access can be Closed Access Mode or Hybrid. Access Mode (mixed mode).

In the Closed Access Mode, the CSG ID included in the Allowed CSG List of the UE is consistent with the CSG ID of the pre-accessed CSG, that is, the UE is a CSG member, allowing the CSG to access the CSG, but not the non-CSG member. The UE accesses the CSG, and the non-CSG member refers to the UE that does not include the CSG ID of the pre-accessed CSG in the Allowed CSG List;

In the case of the Hybrid Access Mode, each UE may choose to access the CSG regardless of whether the UE is a CSG member. However, in order to ensure the normal service of the UE as a CSG member, other non-CSG members may be used in the case of limited resources. The UE is detached or switched to another macro network.

In the process of implementing the present invention, the inventors have found that at least the following problems exist in the prior art: When the Closed Access Mode is used, only the UEs of the CSG members are allowed to access the CSG, and the UEs that are allowed to access the CSG are usually used first. Preemption of resources on a first-come-first-served basis is not conducive to the use of network resources;

When the Hybrid Access Mode is used, the UEs of other non-CSG members are separated or switched to other macro networks in the case of limited resources, which is not conducive to the utilization of network resources and users of non-CSG members. Bring a bad business experience. SUMMARY OF THE INVENTION Embodiments of the present invention provide an access control method and system, which implement access control for different users and effectively utilize resources.

An embodiment of the present invention provides an access control method, including:

Obtain the allowed service type of the user in the closed user group CSG;

Determining, according to the allowed service type of the CSG by the user, whether the user is allowed to access the CSG.

An embodiment of the present invention further provides an access management device, including:

a service type obtaining unit, configured to obtain a permitted service type of the user in the CSG;

The access control unit determines whether the user allows access to the CSG according to the allowed service type of the CSG.

Embodiments of the present invention provide an access control system, including a service type subscription database and a policy and charging rule function device PCRF:

The service type subscription database is configured to store an allowed service type of the CSG pre-configured for the user equipment according to whether the user is a CSG member, and/or a CSG ID accessed by the user, and/or a type of the user equipment;

The PCRF is configured to obtain an allowed service type of the user in the CSG, and determine, according to the allowed service type of the CSG, whether the user is allowed to access the CSG.

The technical solution provided by the foregoing embodiment of the present invention can be used to determine whether the user is allowed to access the CSG according to the allowed service type of the CSG by obtaining the service type of the user in the closed user group CSG. Providing differentiated services for different users for different service types can not only effectively utilize network resources, but also create conditions for users to set resource usage methods according to needs, and improve utilization of network resources. DRAWINGS

In order to more clearly illustrate the technical solutions of the embodiments of the present invention, the drawings used in the description of the embodiments will be described in detail below. It is obvious that the drawings in the following description are only some embodiments of the present invention. It will be apparent to those skilled in the art that other drawings may be obtained from these drawings without the inventive labor. 1 is a schematic structural diagram of a home access mode in the prior art;

2 is a flowchart of an access control method according to an embodiment of the present invention;

3 is a block diagram showing the structure of an access management device according to an embodiment of the present invention;

4 is a block diagram showing the structure of an access control system according to an embodiment of the present invention;

FIG. 5 is a schematic diagram 1 of an application scenario of an access control system according to an embodiment of the present invention; FIG.

6 is a second schematic diagram of an application scenario of an access control system according to an embodiment of the present invention;

7 is a schematic diagram 3 of an application scenario of an access control system according to an embodiment of the present invention;

8 is a schematic diagram 4 of an application scenario of an access control system according to an embodiment of the present invention;

FIG. 9 is a schematic diagram 5 of an application scenario of an access control system according to an embodiment of the present invention. detailed description

BRIEF DESCRIPTION OF THE DRAWINGS The technical solutions in the embodiments of the present invention will be described in detail with reference to the accompanying drawings. All other embodiments obtained by a person of ordinary skill in the art based on the embodiments of the present invention without the creative work are all within the scope of the present invention.

Due to the limited bandwidth resources, many service types occupy a large amount of resources. In the prior art, the CSG access mode restricts users from accessing specific CSGs, and there are defects in that they cannot effectively utilize limited resources to meet the service needs of different users.

An embodiment of the present invention provides an access control method and system, by obtaining a service type of a user in a closed subscriber group CSG, and accessing the CSG to provide different users with different service types for different users. Service can effectively utilize network resources.

Moreover, in combination with the development of the home access mode, the owner of the home wireless access device usually wants the home wireless access device to provide services only to family members and a number of specific visitors, that is, home wireless access. The owner of the incoming device also wants to restrict users' access to specific CSGs, control network resources, and ensure their own needs while meeting the needs of other different users.

The access control method and system provided by the embodiments of the present invention may also set a resource usage method and control network resource creation conditions according to requirements, and improve utilization of network resources.

Referring to FIG. 1 again, a schematic diagram of a structure of a home access mode in the prior art, including a home wireless access device, and a licensed language, connects the user to the operator's mobile network through the Generic IP Access Network.

The home wireless access device includes: an HNB, which operates in a UTRAN (UMTS Terrestrial Radio Access Network UMTS, terrestrial radio access network) spectrum;

HeNB, operating in an E-UTRAN (Evolved UMTS Terrestrial Radio Access Network) spectrum;

Home non-3GPP WAP, running on non-3GPP networks (such as CDMA/Wimax/WLAN/HRPD). (Code Division Multiple Access, WiMAX (Worldwide Interoperability for Microwave Access) / WLAN (High Local Area Network) / HRPD (High Rate Packet Data) Data)) The spectrum used by the radio access network) The GW (Gateway) of the home radio access device, such as HNB GW, HeNB GW, Home non-3GPP WAP GW, performs home wireless access device management and access Control, collect home wireless access equipment, route and forward data between the home wireless access equipment and signaling between network elements in the mobile network.

MME (Mobility Management Entity), responsible for control plane mobility management in E-UTRAN networks, including user context and mobility state management, assigning user temporary Identity, etc.

SGSN (Serving GPRS Supporting Node) is used to implement routing forwarding, mobility management, session management, and user information storage in GPRS/UMTS networks.

non-3GPP GW (non-3GPP gateway) implements mobility management, session management and other functions in non-3GPP networks (for WLAN networks, non-3GPP GW is Evolved Packet Data Gateway (EPDG); for Wimax networks) The non-3GPP GW is an Access Service Network Gateway (ASN GW); for a CDMA network, the non-3GPP GW is an Access Gateway (AGW); for the HRPD network, the non-3GPP GW is a high speed Packet Data Service Gateway (HSGW, HRPD Serving Gateway))

The HSS (Home Subscriber Server) is used to store user subscription information.

The AAA Server (Authentication, Authorization and Accounting Server) is used to perform access authentication, authorization, and accounting functions for users.

HMS (Home Management Server), responsible for the management functions of home wireless access devices. The HMS can be a separate network element or integrated into the HSS. The HMS can also be directly connected to the home wireless access point. This architecture is not limited.

As shown in FIG. 2, an embodiment of the present invention provides an access control method, including:

Step 1 1: Obtain the allowed service type of the user in the closed user group CSG;

Step 12: Determine, according to the allowed service type of the CSG in the CSG, whether the user is allowed to access the CSG.

It can be seen that by obtaining the service type of the user in the CSG, according to the type of the service allowed by the user in the CSG Determining whether the user is allowed to access the CSG, and providing differentiated services for different users for different service types, can effectively utilize network resources, and improve utilization of network resources.

The service type may be pre-defined by the owner and the operator of the home wireless access device, and is pre-stored in the service type subscription database. For example, the service type is for a CSG ID, according to whether the user is a CSG member. And/or the type of user, pre-set for the user.

For example, for a CSG ID, when the user is a CSG member, the user corresponds to a certain service type, or when the user is not a CSG member, the user corresponds to a certain service type.

Or, for a certain CSG ID, according to the type of the user, for example, the user type of the specific visitor is temporary, the user type of the owner of the home wireless access device is normal, and the like, and different types of users are assigned different types of services. .

Or, further, for a CSG ID, when the user is a CSG member, the user corresponds to a certain service type, or when the user is not a CSG member, the user corresponds to a certain service type, and according to the type of the user, the user may be a CSG member. The service type is more finely divided. For example, the user type of the specific visitor is temporary, the user type of the owner of the home wireless access device is normal, and the temporary and normal types of the user type correspond to the service type when the user is a CSG member. Different subdivisions; similarly, according to the type of the user, the corresponding service type can be more finely divided when the user is not a CSG member. The user type, such as classifying the user into high-level, ordinary, etc., will not be described.

Or, for a certain CSG ID, according to the type of the user, different types of users are assigned different service types, and according to whether the user is a CSG member, different types of users are assigned different service types for finer division. I will not go into details here.

The classification method of the user type is not limited to the above.

The service type subscription database can be CSS (CSG Subscriber Server, CSG subscription data) Library), SPR (Subscription Profile Repository), or a database for storing business information data such as HSS.

The QCI Class Identification (QOS Class Identification) of the service type can be used to identify the service permission setting type, for example, the user can only be allowed to perform the service.

If the QCI value is lower than 5, the service authority obtained by the user is the service whose QCI value cannot exceed 5, and the service permission can be set in the manner of a cell, for example, setting with two bytes. , one byte sets the service permission setting method, such as QCI, and another byte sets its upper limit 5;

You can also use other types of service privilege settings, such as whether to allow users to perform GBR (fixed bearer rate) services. For example, users can not perform GBR-bearing services and can only perform non-GBR bearer services. Two bytes, one byte refers to the method used to set the service rights, such as whether to set the GBR bearer, and the other byte is 0 or 1 to set whether the user can use the GBR service;

There may also be other types of service permission settings, such as some users setting available network bandwidth, bandwidth resource settings using the highest bandwidth, and so on.

How to set different service types includes the above methods, but is not limited to the above. Further, the execution body of the step 1 1 of obtaining the allowed service type of the user in the CSG may be a Policy and Charging Rules Function (PCRF), and the PCRF is a Policy and Charging Control (Policy and Charging Control) , PCC) policy and charging rules feature devices.

In combination with the execution subject PCRF, the step 1 1 of obtaining the allowed service type of the user in the CSG includes: The PCRF obtains the CSG information of the user access and/or the type of the user from the mobility management device;

The PCRF obtains the allowed service type of the user in the CSG from the service type subscription database according to the CSG information accessed by the user and/or the type of the user. For details, please refer to the following.

The CSG information accessed by the user includes whether the user is a CSG member and/or a CSG accessed by the user.

ID.

Alternatively, the step 1 1 of obtaining the allowed service type of the user in the CSG may be, before the PCRF obtains the allowed service type of the CSG from the mobility management device, and the home wireless access device accesses according to the user. The CSG information, and/or the type of the user, configures the allowed service type of the user in the CSG, and sends the service type to the service type subscription database; the mobility management device obtains the user's permission in the CSG from the service type subscription database. business type.

It can be seen that the home wireless access device configures the allowed service type of the user in the CSG according to whether the user is the CSG member, and/or the type of the user, and sends the service type to the service type subscription database, for example, for a certain CSG. ID, not only can the user be set as a CSG member, but also the type of the user (temporary or normal, etc.), in particular, the allowed service type of the CSG is preset for the user.

Therefore, the owner of the home wireless access device can restrict the user from accessing a specific CSG, control the network resources, and ensure the needs of other users while satisfying the needs of other users. For details, refer to the following description.

Further, the step 12 of determining, according to the allowed service type of the CSG, whether the user is allowed to access the CSG, includes:

The PCRF sends the allowed service type of the user in the CSG to the mobility management device, and the home wireless At least one of an access device or a user device;

The mobility management device, the home wireless access device, or the user equipment receives the service request of the user; the mobility management device, the home wireless access device, or the user equipment determines whether the service request conforms to the allowed service type of the CSG, and the access conforms Business request, or reject a non-compliant business request.

Or the step 12 of determining, according to the allowed service type of the CSG, whether the user is allowed to access the CSG, includes:

The PCRF receives the service request of the user;

The PCRF accesses a service request of a user who conforms to the allowed service type of the CSG, or rejects a service request of a user who does not comply with the permitted service type of the CSG.

Further, the access control method may further include:

The mobility management device or the home wireless access device receives the user's tracking area update request or handover request;

The mobility management device or the home wireless access device transmits the allowed service type of the user in the CSG to the updated or switched mobility management device or home wireless access device of the tracking area update request or the handover request.

In this way, when the tracking area update request or the handover request is received, for example, when the mobility management device changes, the source mobility management device may send the user permission control class of the CSG to the target mobility management device for access control, and the target network is implemented. The method of access control is the same as the foregoing description, and details are not described herein again.

As shown in FIG. 3, an embodiment of the present invention provides an access management device, including:

a service type obtaining unit 101, configured to obtain a permitted service type of the user in the CSG;

The access control unit 102 determines, according to the allowed service type of the user in the CSG, whether the user is Allow access to the CSG.

Specifically, when the access management device is a PCRF, the service type obtaining unit 101 is configured to obtain, from the mobility management device, an allowed service type of the user in the CSG; or a CSG for obtaining user access from the mobility management device. Information and/or type of the user, obtaining, according to the CSG information accessed by the user and/or the type of the user, the allowed service type of the user in the CSG from the service type subscription database, where the user picks up The incoming CSG information includes whether the user is a CSG ID for the CSG member and/or user access.

Or, when the access management device is a mobility management device, a home wireless access device, or a user equipment, the service type obtaining unit 101 is configured to obtain, by using the policy and charging rule function device, the allowed service type of the user in the CSG.

Specifically, when the access management device is a PCRF, a mobility management device, or a home wireless access device, the access control unit 102 is configured to receive a service request of the user, and determine whether the service request of the user meets the foregoing. The CSG allows the service type, accesses the qualified service request, or rejects the non-compliant service request.

Or, when the access management device is the user equipment, the access control unit 102 is configured to determine, according to the allowed service type of the CSG, whether to initiate a matching service request, or not to initiate a non-compliant service request.

Further, when the access management device is a PCRF, the access management device further includes:

And a first service type sending unit, configured to send the allowed service type of the user in the CSG to at least one of a mobility management device, a home wireless access device, or a user equipment.

Further, when the access management device is a mobility management device or a home wireless access device, the access management device further includes: a second service type sending unit, configured to send the allowed service type of the CSG to the tracking area update request or the switching request update or switch after receiving the tracking area update request or the handover request of the user Access management device.

Further, when the access management device is a home wireless access device, the access management device further includes: a service type configuration unit, configured to configure a user's allowed service in the CSG according to whether the user is a CSG member, and/or a user type Type, and store the allowed service type of the user in the CSG in the service type subscription database.

The home wireless access device may be a home base station HNB, or an evolved home base station HeNB, or a home non-3GPP wireless access point Home non-3GGP WAP.

As shown in FIG. 4, an access control system includes a service type subscription database 200 and a policy and charging rule function device (PCRF) 100:

The service type subscription database 200 is configured to store, according to whether the user is a CSG member, and/or a CSG ID accessed by the user, and/or a type of the user equipment, pre-configuring the allowed service type of the CSG for the user equipment;

The policy and charging rule function device 100 is configured to obtain an allowed service type of the user in the CSG, and determine, according to the allowed service type of the CSG, whether the user is allowed to access the CSG.

Further, the system may further include:

The mobility management device 300 is configured to obtain, by using the policy and charging rule function device 100, the allowed service type of the user in the CSG, and determine, according to the allowed service type of the CSG, whether the user is allowed to access the CSG.

The home wireless access device 400 is configured to obtain, by the policy and charging rule function device 100 and the mobility management device 300, the allowed service type of the user in the CSG, according to the user's permission in the CSG. The service type determines whether the user is allowed to access the CSG.

The user equipment 500 is configured to obtain, by the policy and charging rule function device 100, the mobility management device 300, and the home wireless access device 400, the allowed service type of the user in the CSG, and determine the type according to the allowed service type of the user in the CSG. Whether the user is allowed to access the CSG.

It can be known that the PCRF, the mobility management device, the home wireless access device, and the user equipment can store the allowed service type of the user in the CSG, so as to facilitate monitoring of the user service.

Moreover, the system may further include: a Serving GW (S-GW) and/or a Packet Data Network Gateway (P-GW, PDN GW, Packet Data Network), and the PCRF may pass the service network management and/or the packet data network. The gateway obtains, from the mobility management device, whether the user is the type of the CSG member, and/or the user equipment, or obtains the allowed service of the user equipment in the CSG from the mobility management device by using the service network management and/or the network network management. Types of.

And, the PCRF may send the allowed service type of the user equipment in the CSG to at least one of the mobility management device, the home wireless access device, or the user equipment by using the service network management system and/or the network network management system.

The service network management and the packet data network gateway are not described here. For details, refer to the following.

The technical solution provided by the foregoing embodiment of the present invention can be used to determine whether the user is allowed to access the CSG according to the allowed service type of the CSG by obtaining the service type of the user in the closed user group CSG. Providing differentiated services for different users for different service types can not only effectively utilize network resources, but also create conditions for users to set resource usage methods according to needs, and improve utilization of network resources. Embodiment 1

As shown in FIG. 5, an access control method of an embodiment of the present invention is described in conjunction with an execution body, which is obtained The allowed service type of the user in the CSG determines whether the user is allowed to access the CSG according to the allowed service type of the CSG, and provides differentiated services for different users for different service types: 1 1 1. User equipment passes the family The wireless access device initiates an access request message to the mobility management device.

The user equipment receives the CSG ID of the CSG broadcast, obtains the CSG ID accessed by the user, and sends the CSG ID accessed by the user to the home wireless access device. The home wireless access device can obtain the user's Allowed CSG List information from the HMS, CSS, or the operator's backend system.

The home wireless access device can determine whether the user is a CSG member according to the user's Allowed CSG List (also referred to as the CSG list) and the CSG ID accessed by the user: If the CSG ID accessed by the user is in the user's In the Allowed CSG List, the user is a CSG member; if the CSG ID accessed by the user is not in the Allowed CSG List of the user, the user is a non-CSG member;

The home wireless access device can obtain the type of the user according to the type identification of the user.

The home wireless access device notifies the mobility management device of the CSG information and/or the type of the user accessed by the user, and the CSG information accessed by the user includes whether the user is a CSG member and/or a CSG ID accessed by the user.

The access request message may be an attach request, a tracking area update request, a handover request, or the like, or may be a request for a user to request a service, such as a PDN (Packet Data Network) connection establishment request, a resource modification request, and a resource allocation. The request is either a proprietary bearer setup request, a bearer modification request, and the like.

It should be noted that if there is an access side gateway (such as HNB GW or HeNB GW, etc.) between the home wireless access device and the mobility management device, the home wireless access device sends an access request message to the mobility through the access side gateway. Manage devices. 1 12. The mobility management device acquires the CSG information and/or the type of the user accessed by the user.

The CSG information accessed by the user, such as whether the user is a CSG member and/or a CSG ID accessed by the user. It should be understood that the mobility management device may obtain the CSG information and/or the type of the user access by the user in another manner: if the mobility management device according to the CSG ID of the user access reported by the home wireless access device, the mobility management device The Allowed CSG list of the user obtained in the HMS, CSS or the operator's back-end system, and then the mobility management device compares the CSG ID accessed by the user with the Allowed CSG list of the user, and knows whether the user is a CSG member, and/or knows Information such as the type of user.

1 13. The mobility management device sends a message notification message to the S-GW (Serving GW).

The mobility management device can create a default backup request (Update Default Bearer Request), update a bearer request (Update Bearer Request), create a PDP (Packet Data Protocol) context request (Create PDP Context Request), or update a PDP context. The message such as the request (Update PDP Context Request) informs the S-GW whether the obtained user is a CSG member, and/or a CSG ID accessed by the user, and/or a type of the user.

1 14. The S-GW sends an information notification message to the P-GW (PDN GW, Packet Data Network, Packet Data Network Gateway).

The S-GW notifies the P-GW whether the user is a CSG member, and/or a CSG ID accessed by the user, and/or a type of the user.

If the interface protocol between the S-GW and the P-GW uses GTP (GRP Tunneling Protocol), the S-GW may create a default bearer request by including, but not limited to, these listed messages. Update Bearer Request, Create PDP Context Request, or Update Whether the user obtained by the message such as the PDP context request (Update PDP Context Request) is notified to the P-GW by the CSG member, and/or the CSG ID accessed by the user, and/or the type of the user;

If the interface protocol between the S-GW and the P-GW uses PMIP (Proxy Mobile Internet Protocol), can the S-GW obtain the user through the proxy binding update (PBU, Proxy Binding Update)? Notifying the P-GW to the CSG member, and/or the CSG ID accessed by the user, and/or the type of the user;

1 15. The P-GW sends an information notification message to the PCRF.

The P-GW sends an information notification message to the PCRF to notify the PCRF whether the user is a CSG member, and/or the CSG ID accessed by the user, and/or the type of the user.

It can be known that if the interface protocol between the S-GW and the P-GW uses PMIP, the S-GW can control the Gateway Control Session Establishment, the Gateway Control and the QoS Rules Request, etc. through the Gateway Control Session Establishment, Gateway Control and QoS Rules Request, etc. The message will be notified to the PCRF whether the user is a CSG member, and/or the CSG ID accessed by the user, and/or the type of the user.

1 16. The PCRF sends an information notification message to the service type subscription database.

The PCRF notifies the service type subscription database whether the user is a CSG member, and/or a CSG ID accessed by the user, and/or a type of the user.

This information notification message may be a user subscription data request message, etc., and will not be described again.

1 17. The service type subscription database finds the service type of the CSG where the user is located, and sends a notification message to the PCRF.

The service type subscription database may be in the following manners including, but not limited to, finding the service type of the CSG where the user is located:

(1) Find the user according to the user's RAI (Routing Area Identity) Where the CSG is located;

(2) Find the allowed service type information of the PLMN under the CSG where the user is located according to the user's PLMN (Public Land Mobile Network):

For example, the CSG ID of the user sets different allowed service types for users of different PLMNs. For example, Chinese mobile users can only use one type of service type, such as audio service, while China Unicom users can use various services. , including audio and video services.

(3) Find the allowed business type for the user based on the type of user:

For example, if the user is a non-CSG user, then the service type of the non-CSG user can be found under the category of the China Unicom user under the CSG ID found. For example, the non-CSG user cannot use the video service.

Then, according to the result of the contract type database query of the business type, the user can only use other non-video services.

The information notification response message may include the allowed service type of the user, and may also include at least one of a CSG ID accessed by the user, a CSG member, and a type of the user.

Corresponding to step 1 16, the information notification message may be a user subscription data request message or the like, and the information notification response message may be a subscription data response message or the like.

1 18. The PCRF sends a message notification response message to the P-GW.

The information notification response message may include the type of the allowed service of the user, and may also include at least one of the CSG ID of the user access, whether the user is a CSG member, and the type of the user.

Corresponding to step 115, if PMIP (Proxy Mobile Internet Protocol) is used between the S-GW and the P-GW, the PCRF may also directly send the user's allowed service type to the S-GW, or may include the user. The CSG ID of the access, whether the user is a CSG member, and At least one of the types of households.

1 19. The PCRF sends a message notification response message to the P-GW.

1 1 10. The S-GW sends a message notification response message to the mobility management device.

The information notification response message includes the type of the allowed service of the user, and may also include at least one of the CSG ID accessed by the user, whether the user is a CSG member, and the type of the user.

The type of allowed service of the user that the S-GW can obtain by creating a default bearer response message, updating a bearer response, creating a PDP context response, or updating a PDP context response, a CSG ID of the user access, whether the user is a CSG member, and At least one of the types of users is notified to the mobility management device.

1 1 1 1. The mobility management device sends an access response message to the user through the home wireless access device. The access response message may contain the allowed service type of the user. The mobility management device can notify the user by attaching an accept message (Attach accept), a tracking area update accept message (TAU accept) message, and the like. The home wireless access device can also be notified by the Initial UE context request message.

If the access request is a PDN (Packet Data Network) connection establishment request, a resource modification request, a resource allocation request, or a dedicated bearer setup request, a bearer modification request, and the like. Then, the RRC connection reconfiguration message may be used to notify the UE or the Bearer setup request message to notify the home access device of the allowed service type of the user, or the requested access request has no permission to be denied, and the message may be carried in the Deactive bearer request message. The element notifies the user of the allowed service type to the home access device, or through the Radio bearer release request The message carries the cell to notify the user of the type of allowed service of the user.

When the user is not allowed to access, the user may also be notified of the allowed service type by rejecting the message, including including the mobile service type that is not limited to the PDN CONNECTIVITY REJECT message. It is noted that, in the access control method of the embodiment of the present invention, after the user equipment, the home wireless access device, the mobility management device, or the P-GW, or the PCRF receives the service type of the user, the user equipment, the home wireless The access device, the mobility management device or the P-GW, or the PCRF can monitor the service, such as:

1. After receiving the allowed service type of the user in the CSG, the user equipment saves the allowed service type to control that it no longer initiates a service request without permission.

For example, if the highest QCI value that the user can use is 5, the user will not initiate a service with a QCI value of 5. If the user is not allowed to use the GBR service, the user will not initiate the GBR bearer service.

2. The home wireless access device saves the allowed service type after receiving the allowed service type in the CSG. When the user requests the service, it determines whether the requested service of the user meets the allowed service type, accesses the qualified service request, or refuses to Compliance with business requests.

For example, if the user can only use the service with a maximum QCI of 5, then if the QCI value of the service requested by the user exceeds this maximum value, the home wireless access device can directly initiate the rejection without accepting the request.

For example, if the user can only use non-GBR services, if the home wireless access device finds that its service is to use G B R bearer, then the service request can be directly rejected.

It should be noted that if the user switches, the source home can be connected by switching the message. The service type saved on the device is notified to the target home wireless access device. For example, the Forward relocation request message can be used. The specific message is not restricted.

When the user initiates a service request, the target home wireless access device can select whether to access or reject the service request according to the service type of the user.

3. After receiving the allowed service type of the CSG, the mobility management device saves the allowed service type. When the user requests the service, it determines whether the requested service of the user meets the allowed service type, accesses the qualified service request, or refuses to Compliance with business requests.

For example, if the user can only use the service with the maximum QCI of 5, then if the service requested by the user exceeds the maximum value of QCI value 5, the mobility management device can directly initiate the rejection without accepting the request.

For example, if the user can only use non-GBR services, if the mobility management device finds that its service is to use GBR bearer, then the service request can be directly rejected.

It is worth noting that if the mobility management device changes when the user initiates the tracking area update or handover, the source mobility management device sends the allowed service type of the user in the CSG to the target mobility management device, for example, in the UE CONTEXT Request/Response The (UE Context Request/Response message) message includes the allowed service type of the user in the CSG to facilitate the target mobility management device to perform service control.

4. After receiving the allowed service type of the CSG, the P-GW determines whether the requested service of the user meets the allowed service type, accesses the qualified service request, or rejects the non-compliant service request.

The specific processing includes not limited to the following situations:

For example, if the user can only use the service with the maximum QCI of 5, then if the QCI value of the service requested by the user exceeds this maximum value, the P-GW can directly initiate the rejection without accepting the request. For example, if the user can only use the non-GBR service, if the P-GW finds that its service is to use the GBR bearer, then the service request can be directly rejected.

5. If the PCRF obtains the allowed service type of the user in the CSG, save the allowed service type. When the user initiates a service request, the PCRF determines whether the requested service of the user meets the allowed service type, accesses the qualified service request, or rejects the non-compliant service request.

The PCRF and PCEF (Policy and Charging Enforcement Function) are the main policy control entities in the PCC, and the PCEF can be a device that is integrated with the PGW. It can be known that when a user initiates a service request, the PCEF can also reject the non-compliant service request. Embodiment 2

As shown in FIG. 6-8, a schematic diagram of an application scenario of an access control system according to an embodiment of the present invention illustrates an embodiment of the present invention. When an owner of a home wireless access device joins a user as a CSG member, the user is added to the CSG. The ID list, and the type of the user, in particular, when setting the allowed service type of the CSG at the same time, how to access the CSG to obtain different types of services by obtaining the allowed service type of the user in the CSG Differentiated services for different users:

As shown in Figure 6: For example, a number of specific guest visits, the owner of the home wireless access device, can access the user as a CSG member, and/or set the type of the visiting user (temporary or normal, etc.), in particular, The allowed service type in the CSG is preset for the user.

221. Add users to the CSG ID list.

The user management system involved in this step may be an HMS, but is not limited to the HMS, and is not limited to a specific network element. The user management system includes all the networks involved in the list of CSG IDs added to the user access. yuan. 222. The user management system sends a request message for adding a user to the CSG ID list to the service type subscription database.

The business type contract database may be a database such as HSS, SPR, and CSS (CSG contract server).

The message may include the type of allowed service of the user in the CSG, and the like.

223. The service type subscription database sends an increase user to the CSG ID list confirmation message to the user management system.

This message may include the type of allowed service of the user in the CSG, and the like.

224. The service type subscription database sends a message to the user that allows the user to modify the list request message.

This message may also include the type of allowed service of the user in the CSG, and the like.

225. The user sends a permission to the user to modify the list confirmation message to the service type subscription database.

The above steps are from 221 - Step 225, an example process for joining a user to a CSG member. This process is only an example and should not be considered as the only restriction on joining a user as a CSG member.

As shown in Figure 7, the user downloads the allowed service type from the CSG to the mobility management device. This process can be performed in the attach and location update process (tracking zone update or routing zone update), and the service type subscription database downloads the allowed service type of the specific user in the CSG to the mobility management device.

331. The service type subscription database sends an insertion subscription data message to the mobility management device. The message can contain the type of service allowed by the user in the CSG.

332. The mobility management device sends an insertion contract data confirmation message to the service type subscription database. The mobility management device obtains the type of allowed service of the user in the CSG.

As shown in Figure 8, the owner of the home wireless access device adds the user to the CSG ID column of the user access. In the table, the user's allowed service type in the CSG is also set.

The difference from the first embodiment is that: since the allowed service type of the CSG in the CSG is set by the owner of the home wireless access device and stored in the service type subscription database, the mobility management device can obtain the service type subscription database. The allowed service type of the user in the CSG, and the PCRF can obtain the allowed service type of the user in the CSG from the mobility management device, and the PCRF performs the decision of the bearer rule, and the bearer rule determines the service rule according to the allowed service type. For example, the QOS carried by the business. In the first embodiment, the PCRF obtains the allowed service type of the user in the CSG from the service type subscription database, and then makes a decision on the business rule.

For the user equipment, the access network management network element, the mobility management device, the PCRF, or the P-GW to monitor the service, refer to the method described in the first embodiment, and no further details are provided. Embodiment 3

As shown in FIG. 9, the difference between this embodiment and the first embodiment is that the UE (user equipment) sends an access request message to the non-3GPP GW (non-3GPP gateway) through the home access device, and the user is sent by the non-3GPP GW. The CSG ID of the access, whether the user is a CSG member, and at least one of the types of users are given to the PCRF. The PCRF obtains the allowed service type of the user in the CSG from the service type subscription database, and then makes a decision on the business rule.

The control of the service for the UE, the home radio access device, the non-3GPP GW, and the PCRF may be performed in the manner described in Embodiment 1, and details are not described herein.

Through the description of the above embodiments, those skilled in the art can clearly understand that the present invention can be implemented by means of software plus a necessary general hardware platform, and of course, can also be implemented by hardware, or a combination of the two. Based on such understanding, the technical solution of the present invention is essentially or The portion of the technology contribution can be embodied in the form of a software product, which can be stored in a storage medium, including instructions for causing a computer device (which can be a personal computer, server, or network) Apparatus, etc.) performs the methods described in various embodiments of the present invention. The storage medium may be random access memory (RAM), memory, read only memory (ROM), electrically programmable R〇M, electrically erasable programmable R〇M, registers, hard disk, removable disk, CD-R〇M, Or any other form of storage medium known in the art.

The above is only a preferred embodiment of the present invention, but the scope of the present invention is not limited thereto, and any person skilled in the art can easily think of changes or within the technical scope disclosed by the present invention. Alternatives are intended to be covered by the scope of the present invention. Therefore, the scope of the invention should be determined by the scope of the claims.

Claims

Claim

An access control method, comprising:

Obtain the allowed service type of the user in the closed user group CSG;

Determining whether the user is allowed to access the CSG according to the allowed service type of the CSG.

The access control method according to claim 1, wherein the obtaining the allowed service type of the user in the CSG comprises:

The policy and charging rule function device PCRF obtains the CSG information of the user access and/or the type of the user from the mobility management device;

The PCRF obtains the allowed service type of the user in the CSG from the service type subscription database according to the CSG information accessed by the user and/or the type of the user.

The access control method according to claim 2, wherein the CSG information accessed by the user includes whether the user is a CSG member and/or a CSG I D accessed by the user.

The access control method according to claim 4, wherein, before the PCRF obtains the allowed service type of the user in the CSG from the mobility management device, the method further includes: the home wireless connection The inbound device configures the allowed service type of the user in the CSG according to the CSG information accessed by the user, and/or the type of the user, and sends the information to the service type subscription database. The CSG information accessed by the user includes whether the user is a CSG. CSG ID of the member and/or user access;

The mobility management device obtains the permission of the user in the CSG from the service type subscription database Type of business.

The access control method according to claim 2 or 3 or 4 or 5, wherein determining whether the user is allowed to access the CSG according to the allowed service type of the CSG by the user includes:

Transmitting, by the PCRF, the allowed service type of the user in the CSG to at least one of a mobility management device, a home wireless access device, or a user equipment;

Receiving, by the mobility management device, the home wireless access device, or the user equipment, a service request of the user;

The mobility management device, the home wireless access device, or the user equipment determines whether the service request conforms to the allowed service type of the CSG, accesses a qualified service request, or rejects a non-compliant service request.

The access control method according to claim 6, wherein the method further comprises: the mobility management device or the home wireless access device receiving a tracking area update request or switching of the user Request

Transmitting, by the mobility management device or the home wireless access device, the allowed service type of the CSG to the tracking area update request or the update or handover of the handover request or the mobility management device or the home wireless access device.

The PCRF receives the service request of the user;

9. An access management device, comprising: a service type obtaining unit, configured to obtain a permitted service type of the user in the CSG;

The access management device according to claim 9, wherein, when the access management device is a PCRF, the service type obtaining unit is configured to obtain, from the mobility management device, the allowed service of the user in the CSG. Type; or CSG information for obtaining user access from the mobility management device and/or type of the user, according to the CSG information accessed by the user and/or the type of the user, from the service type The subscription database obtains the allowed service type of the user in the CSG, and the CSG information accessed by the user includes whether the user is a CSG member and/or a CSG ID accessed by the user.

The access management device according to claim 9, wherein, when the access management device is a mobility management device, a home wireless access device, or a user equipment, the service type acquiring unit is configured to: The allowed service type of the user in the CSG is obtained through the policy and charging rule function device.

The access management device according to claim 9, wherein, when the access management device is a PCRF, a mobility management device, or a home wireless access device, the access control unit is configured to receive Determining the service request of the user, determining whether the service request of the user meets the allowed service type of the CSG, accessing a qualified service request, or rejecting a non-compliant service request.

The access management device according to claim 9, wherein, when the access management device is a user equipment, the access control unit is configured to determine, according to the allowed service type of the user in the CSG, Initiate a matching business request, or do not initiate a non-compliant business request.

The access management device according to claim 9 or 10, wherein, when the access management device is a PCRF, the access management device further includes:

a first service type sending unit, configured to send the allowed service type of the user in the CSG to the mobile At least one of an active management device, a home wireless access device, or a user device.

The access management device according to claim 9, wherein, when the access management device is a mobility management device or a home wireless access device, the access management device further includes:

a second service type sending unit, configured to send the allowed service type of the CSG to the tracking area update request or the switching request update or switch after receiving the tracking area update request or the handover request of the user Access management device.

The access management device according to claim 9, wherein, when the access management device is a home wireless access device, the access management device further includes:

a service type configuration unit, configured to configure a permitted service type of the user in the CSG according to the CSG information accessed by the user and/or the type of the user, and store the allowed service type of the user in the CSG in the service type subscription database, The CSG information accessed by the user includes whether the user is a CSG member and/or a CSG ID accessed by the user.

17. An access control system, comprising: a service type subscription database and a policy and charging rule function device PCRF:

The access control system according to claim 17, wherein the system further comprises: a mobility management device, configured to obtain, by using the PCRF, an allowed service type of the user in the CSG, according to the user in the CSG The allowed service type determines whether the user is allowed to access the CSG.

The access control system according to claim 18, wherein the system further comprises:

The allowed service type of the CSG determines whether the user is allowed to access the CSG according to the allowed service type of the CSG.

The access control system according to claim 19, wherein the system further comprises: a user equipment, configured to obtain a user in the CSG by using the PCRF, the mobility management device, and the home wireless access device The allowed service type determines whether the user is allowed to access the CSG according to the allowed service type of the CSG in the user.