WO2011044816A1

WO2011044816A1 - Monitoring method and monitoring device for user equipment

Info

Publication number: WO2011044816A1
Application number: PCT/CN2010/077168
Authority: WO
Inventors: 朱春晖; 宗在峰
Original assignee: 中兴通讯股份有限公司
Priority date: 2009-10-15
Filing date: 2010-09-20
Publication date: 2011-04-21
Also published as: CN102045688A; CN102045688B

Abstract

The present invention discloses a monitoring method and monitoring device for a user equipment. The monitoring method for the user equipment includes the following steps: a mobility management network element of a core network receives access information of the user equipment; the mobility management network element receives the subscription information of said user equipment stored in a mobile user management database; the mobility management network element compares said access information with said subscription information, and monitors said user equipment. The invention enables the user terminal to resolve the security problem existing in actual application.

Description

TECHNICAL FIELD The present invention relates to the field of mobile communications technologies, and in particular, to a monitoring method and a monitoring device for a user equipment. Background technique

The 3GPP wireless core network includes a General Packet Radio Service (GPRS) network, a System Architecture Evolution (SAE) network, and a Universal Mobile Telecommunications System (UMTS). The SAE may also be referred to as an Evolved Packet System (EPS). 1 is a schematic diagram of a network in which a user equipment accesses an MTC Server through a SAE and/or a UMTS according to the prior art. FIG. 1 shows an emergency in which a user equipment (User Equipment, UE for short) accesses an IMS through SAE and/or UMTS. The main network element involved in the call, where the solid line indicates signaling and the dotted line indicates the user's IP channel. When accessed through UMTS, the UE can also be referred to as an MS (Mobile Station). As shown in Figure 1, the primary network elements involved in the UE accessing the Machine Type Communication Server (MTC Server) through the SAE and/or UMTS include: the network element of the SAE network part, and the network of the UMTS network part. Yuan and MTC Server. At this time, the UE may be referred to as an MTC Device (MTC device). The network element of the SAE network part is used to provide bearer management and mobility management. The network elements of the SAE network part include: an enhanced wireless base station (eNodeB), mobility Management entity (Mobility Management Entity, 简称 for short), and user plane data processing network element (SAE GW); SAE GW includes Packet Data Network Gateway (P-GW) and monthly service gateway ( Serving GW, referred to as S-GW); The MME is responsible for managing and storing the context of the UE (eg, UE identity/user identity, mobility management state, user security parameters, etc.), assigning a temporary identity to the user, when the UE is camped on When tracking a region or a network, it is responsible for authenticating the UE. The eNodeB access is also called Long Term Evolution (LTE) access. The P-GW is a mobility anchor in the SAE system. It is a border gateway between the SAE and the Packet Data Network (PDN). It is responsible for PDN access and forwarding data between the SAE and the PDN.

The UMTS network is mainly supported by the 3GPP radio access network (GSM EDGE Radio Access Network/UMTS Terrestrial Radio Access Network, referred to as GERAN/UTRAN, collectively called RAN), Serving GPRS Support Node (SGSN), and Gateway GPRS support. The node (Gateway GPRS Support Node, GGSN for short) is composed. In UMTS, a UE is also referred to as a mobile station (Mobile Station, abbreviated as MS). In practical applications, user equipment deployed in an unattended outdoor area may be stolen or illegally used. However, in the prior art, the mobility management network element of the core network, such as the MME or UMTS network in the SAE network. The SGSN lacks the monitoring function for the user equipment, so the user equipment has security problems. SUMMARY OF THE INVENTION In view of the above, the present invention provides a monitoring solution for a user equipment, which is used to solve the problem that the mobility management network element of the core network lacks monitoring of the user equipment in the prior art. According to an aspect of the present invention, a monitoring method of a user equipment is provided. The monitoring method of the user equipment according to the present invention includes: the mobility management network element of the core network receives the access information of the user equipment; the mobility management network element receives the subscription information of the user equipment saved by the mobile user management database; the mobility management network element The access information is compared with the subscription information to monitor the user equipment. Further, if the mobility management network element compares the access information of the user equipment with the subscription information, the mobility management network element detects the monitoring event of the user equipment, and the method further includes: the mobility management network element The user equipment access is denied, and/or the monitoring event is recorded, and/or the monitoring event is reported. Preferably, the foregoing access information includes at least one of: an International Mobile Subscriber Identity (IMSI) of the user equipment, an identifier of the user equipment (MEID), location information of the user equipment (eg, Cell ID), and capabilities of the user equipment ( Feature ) information. Preferably, the foregoing subscription information includes at least one of the following: an IMSI and a MEID of the user equipment. Binding relationship, location information of the user equipment (such as Cell ID), and capability information of the user equipment. Preferably, the mobility management network element detects a monitoring event of the user equipment when at least one of the following monitoring results is negative: the mobility management network element monitors whether the IMSI and the MEID in the access information meet the subscription information. The binding relationship between the IMSI and the MEID; the mobility management network element monitors whether the location in the access information (such as the Cell ID) is consistent with the location in the subscription information (such as the Cell ID); the mobility management network element monitors the access information. Whether the capability information of the user equipment is consistent with the capability information of the user equipment in the subscription information. Preferably, the capability information of the user equipment includes: access capability information of the user equipment. Further, the receiving, by the mobility management network element, the access information of the user equipment includes: the mobility management network element receiving the attach request initiated by the user equipment, and acquiring the access information carried in the attach request. Preferably, the mobility management network element includes: a mobility management entity; and the mobile user management database includes: a home subscriber server of the user equipment. Preferably, the mobility management network element includes: a serving GPRS support node; and the mobile subscriber management database comprises: a home location register of the user equipment. According to another aspect of the present invention, a monitoring device for a user equipment is provided. The monitoring device of the user equipment according to the present invention includes: an access information receiving module, a subscription information receiving module, and a monitoring module, wherein the access information receiving module is configured to receive access information reported by the user equipment when requesting access; The information receiving module is configured to receive the subscription information of the user equipment saved by the mobile user management database, and the monitoring module is configured to monitor the user equipment according to the access information received by the access information receiving module and the subscription information received by the subscription information receiving module. , detecting the monitoring event of the user equipment. Further, the foregoing apparatus further includes: a sending module, configured to report a monitoring event of the user equipment when the monitoring module detects that a monitoring event of the user equipment occurs. With the above at least one solution of the present invention, the mobility management network element monitors the user equipment by comparing the access information of the user equipment and the subscription information of the user equipment saved by the mobile user management database, thereby solving the existence of the user terminal in the actual application. Security issue. Other features and advantages of the invention will be set forth in the description which follows, and The object and other advantages of the present invention The points may be realized and obtained by the structures specified in the written description, the claims, and the drawings. The drawings are intended to provide a further understanding of the invention, and are intended to be a part of the description of the invention. 1 is a schematic diagram of a network in which a user equipment accesses an MTC Server through SAE and/or UMTS according to the prior art; FIG. 2 is a flowchart of a monitoring method of a user equipment according to an embodiment of the present invention; FIG. 4 is a flow chart according to Embodiment 2 of the present invention; FIG. 5 is a flowchart according to Embodiment 3 of the present invention; FIG. 6 is a monitoring device of a user equipment according to an embodiment of the present invention; Schematic. In the embodiment of the present invention, the mobility management network element of the core network receives the access information reported by the user terminal during the access and the subscription information of the user equipment saved by the mobile user management database, and compares the monitoring access information by comparing the foregoing And signing information, monitoring the monitoring events of the user terminal. The embodiments in the present application and the features in the embodiments may be combined with each other without conflict. The preferred embodiments of the present invention are described in the following with reference to the accompanying drawings, which are intended to illustrate and illustrate the invention. According to an embodiment of the present invention, a method for monitoring a user equipment is first provided. 2 is a flowchart of a method for monitoring a user equipment according to an embodiment of the present invention. As shown in FIG. 2, the method includes the following process (step 202 - step 206): Step 202: A mobility management network element of a core network receives a user equipment. Access information; in a specific implementation process, the user equipment may initiate to the mobility management network element when requesting access An attach request, where the attach request carries the access information of the user equipment, where the access information of the UE may include, but is not limited to, at least one of the following: a user identifier (eg, an IMSI of the user equipment), the user equipment identifier (MEID) ), the capabilities of the user equipment (eg supporting LTE access or supporting UTRAN access). Alternatively, the base station may report the access information of the UE to the mobility management network element. In addition, the foregoing attach request may be forwarded by the access network element. In the process of forwarding, the location information of the user equipment may be added to the access information (for example, the cell identifier Cell ID currently camped by the user equipment). Step 204 The mobility management network element receives the subscription information of the user equipment saved by the mobile user management database. In a specific implementation process, the mobility management network element sends a request for acquiring the subscription data to the mobile user management database, which may be sent by sending a location update request. In the request, the user identifier (IMSI) of the user equipment is required to be carried in the request. After receiving the request for acquiring the subscription data, the user management database determines the subscription information of the user equipment according to the IMSI in the request, where The subscription information may include, but is not limited to, at least one of the following: location information of the user equipment (such as the cell ID of the camping cell), a binding relationship between the user identifier and the user equipment identifier (IMSI binding MEID), and the capability of the user equipment. (For example, the device only has UTRAN access capability.) Step 206, The mobility management network element compares the foregoing access information with the foregoing subscription information, and monitors the user equipment, for example, monitoring whether the user equipment is illegally used. In a specific implementation process, the mobility management network element monitors through the following monitoring events. The user equipment determines that one of the following results is negative, the mobility management network element determines that the user equipment has a monitoring event (eg, is illegally used):

(1) The mobility management network element monitors whether the IMSI and the MEID in the access information meet the binding relationship between the IMSI and the MEID in the subscription information;

(2) The mobility management network element monitors whether location information (such as Cell ID) in the access information is consistent with location information (such as Cell ID) in the subscription information;

(3) The mobility management network element monitors whether the capability information of the user equipment in the access information is consistent with the capability information of the user equipment in the subscription information. If the monitoring event of the user equipment is detected, the mobility management network element may perform one or any combination of the following operations: rejecting the user equipment access; recording that the user equipment is illegally used; to the application server (for example, MTC) Server) and/or information on the user management database that the user device is illegally used. In a specific implementation process, after performing step 206, if the current user equipment does not have the above monitoring event, the user equipment is allowed to access. The following describes the monitoring method of the foregoing user equipment in detail by using a specific embodiment. It should be noted that, in the following embodiments, the MTC server is accessed through the SAE or the UMTS, but the method is not limited to the MTC application. Suitable for other applications. In the following embodiment, if the user equipment accesses the MTC Server through the SAE, the mobility management network element is the MME, the mobile user management database is the HSS (Home Subscriber Server), and the access network element is the eNodeB; if the user equipment is connected through the UMTS In the MTC Server, the mobility management network element is the SGSN, the mobile user management database is the HLR (Home Location Register), and the access network element is RAN. Embodiment 1 In this embodiment, the UE (MTC Device) passes the SAE/UMTS. The initial access to the MME1/SGSN1, and then the access to the MME2/SGSN2. Figure 3 is a flow chart according to the first embodiment of the present invention. As shown in Figure 3, the specific process includes the following steps (step 4: 301 - step 4) 310): Step 301: The user equipment initiates an attach request to the MME1/SGSN1, where the capability of the user equipment is supported, such as supporting LTE access, and the identity of the user, such as IMSI 1 and MEID 2. The message is forwarded by the eNodeB/RAN. The eNodeB/RAN sends the user's current cell identity, Cell ID1, to the MME1 in addition to the message. When the user does not carry the MEID2 in the attach request, the MME1 can directly send the identity request to the user. Equipment, which transmits a request to MME1 MEID2; Step 302: The MME1/SGSN1 sends a location update request to the HSS/HLR, where the user identity identifier is carried: IMSI. Step 303: The HSS/HLR sends a location update response to the MME1/SGSN1, where the user subscription information is carried, specifically, but not It is limited to: the location of the access point (such as CELL ID2, cell ID;), or the capability of the user equipment (the device has only UTRAN access capability), or the correspondence between the user identifier and the user equipment identifier (such as user identifier IMSI1 and user equipment identifier). MEID1); Step 304: The MME1/SGSN1 checks the user subscription information and the access information, and finds that there are inconsistencies, such as: different access point locations, and/or different user equipment capabilities, and/or user identifiers and user equipment identifiers. The corresponding relationship is different (signaling IMSI1 and MEID1, but the actual access is IMSI1 and MEID2), so it is considered that the device has a monitoring event (for example, the user device is illegally used), and the monitoring event is recorded (if the user device is illegally used) Sending an attach reject message to the user equipment; Step 305: The user equipment accesses another MME2/SGSN2 , may be an MME change due to a change in location. The user equipment initiates an attach request to the MME2/SGSN2. Step 306: The MME2/SGSN2 initiates a location update request to the HSS/HLR, where the user identity is carried. Step 307: After receiving the request, the HSS/HLR finds that the MME1/SGSN1 is currently registered as The user service, therefore, sends a deletion location to the MME1/SGSN1, including the user identity; Step 308, after receiving the deletion location message, the MME1/SGSN1 checks the monitoring event of the user equipment saved by the user according to the identity of the user (eg, the user equipment is Illegal use, therefore, send a delete location reply message to the HSS/HLR, the message also includes the monitoring event (such as the user equipment is illegally used); Step 309, the HSS/HLR records the above user equipment monitoring event (eg, the user equipment is If the user equipment is illegally used, the MME2/SGSN2 includes the above-mentioned monitoring event (such as the user equipment being illegally used); Step 310: The MME2/SGSN2 receives the above-mentioned monitoring event (if the user equipment is illegally used), Send an attach rejection message to the user device. Embodiment 2 In this embodiment, the UE (MTC Device) initially accesses the MME1/SGSN1 through the SAE/UMTS, and then accesses the MME2/SGSN2. Unlike the first embodiment, the MME1/SGSN1 detects a monitoring event (eg, the user equipment is Immediately notify the HSS/HLR after illegal use. 4 is a flowchart according to Embodiment 2 of the present invention. As shown in FIG. 4, the specific process includes the following steps (Step 4: 401 - Step 4: 410): wherein, Steps 401-404 and Step 301- Step 304: MME1/SGSN1 initiates a clearing of the user equipment to the HSS according to a monitoring event (such as the user equipment is illegally used), the message includes the foregoing monitoring event (such as the user equipment is illegally used), and the user identity: IMSI Step 406: The HSS/HLR records the monitoring event (such as the user equipment is illegally used), and sends a clear user equipment reply to the MME1/SGSN1; Steps 407-408 are the same as steps 305-306; Step 409, the HSS/HLR according to itself The saved monitoring event (such as the user equipment is illegally used), sends an update location reply to the MME2, which includes the above monitoring event (such as the user equipment is illegally used); Step 410, the MME2/SGSN2 according to the received monitoring event (such as the user) The device is illegally used), and an attachment rejection is sent to the user equipment. Embodiment 3 In this embodiment, after the MME/HSS or SGSN/HLR detects a monitoring event (if it is known that the user equipment is illegally used), the MTC Server is notified. FIG. 5 is a flowchart of Embodiment 3 of the present invention. As shown in FIG. 5, the flow includes the following steps (Step 501 - Step 502): Step 501, in the first embodiment and the second embodiment, when MME/ After detecting the monitoring event (if the user equipment is illegally used), the HSS or the SGSN/HLR sends a monitoring event (such as an alarm message that the user equipment is illegally used) to the MTC Server, where the identity of the user equipment, such as an IMSI, is included; Step 502: After receiving the foregoing alarm message, the MTC Server replies to the sender with a confirmation of receipt. According to an embodiment of the present invention, a monitoring device of a user equipment is also provided, and the device may be disposed in a mobility management network element of a core network, or may be separately configured. FIG. 6 is a schematic structural diagram of a monitoring apparatus of a user equipment according to an embodiment of the present invention. As shown in FIG. 6, the device includes: an access information receiving module 61, a contract information receiving module 62, and a monitoring module 63. The access information receiving module 61 is configured to receive the access information of the user equipment, for example, the access information may be reported by the user equipment when requesting access, or may be reported by the base station; the subscription information receiving module 62. The subscription information is used to receive the user equipment saved by the mobile user management database. The monitoring module 63 is configured to monitor the user according to the access information received by the access information receiving module 61 and the subscription information received by the subscription information receiving module 62. The device detects the occurrence of a monitoring event (for example, a user device is illegally used). In a specific implementation process, the device may monitor whether the UE is illegally used according to the description of the foregoing method embodiment. For example, the monitoring module 63 can monitor (1), whether the IMSI and the MEID in the access information meet the binding relationship between the IMSI and the MEID in the subscription information; (2) location information in the access information (such as the Cell ID). Whether the location information (such as the Cell ID) in the subscription information is consistent; (3) whether the capability information of the user equipment in the access information is consistent with the capability information of the user equipment in the subscription information, to monitor the UE, if one of the above If the result is no, the monitoring module 63 determines that a monitoring event has occurred. Preferably, the foregoing apparatus may further include: a sending module 64, configured to report a monitoring event (such as information that the user equipment is illegally used) when the monitoring module 63 detects that a monitoring event occurs (eg, the user equipment is illegally used). As described above, with the technical solution provided by the embodiment of the present invention, the mobility management network element monitors the user terminal by detecting the access information reported by the user terminal during the access and the subscription information of the user equipment saved in the mobile user management database. The monitoring event occurs, and if the monitoring event occurs, the user equipment is denied access, thereby preventing the user equipment from being stolen or illegally used, thereby solving the security problem existing in the actual application of the user terminal. The above is only the preferred embodiment of the present invention, and is not intended to limit the present invention, and various modifications and changes can be made to the present invention. Any modifications, equivalent substitutions, improvements, etc. made within the scope of the present invention are intended to be included within the scope of the present invention.

Claims

Claim

A method for monitoring a user equipment, comprising:

The mobility management network element of the core network receives the access information of the user equipment;

Receiving, by the mobility management network element, subscription information of the user equipment saved by the mobile user management database;

The mobility management network element compares the access information with the subscription information to monitor the user equipment.

The method according to claim 1, wherein, when the mobility management network element compares the access information with the subscription information, the mobility management network element detects the user equipment. The monitoring event, the method further includes:

The mobility management network element denying access to the user equipment; and/or

The mobility management network element records the monitoring event; and/or

The mobility management network element monitors the event on the network.

The method according to claim 2, wherein the access information comprises at least one of: an international mobile subscriber identity IMSI of the user equipment, an identifier MEID of the user equipment, and the user equipment. Location information, capability information of the user equipment.

The method according to claim 3, wherein the subscription information comprises at least one of the following: a binding relationship between an IMSI and an MEID of the user equipment, location information of the user equipment, and the user equipment. Ability information.

The method according to claim 4, wherein the mobility management network element determines that a monitoring event of the user equipment is detected when at least one of the following monitoring results is negative: the mobility The management network element monitors whether the IMSI and the MEID in the access information meet the binding relationship between the IMSI and the MEID in the subscription information;

The mobility management network element monitors whether location information in the access information is consistent with location information in the subscription information;

The mobility management network element monitors whether the capability information of the user equipment in the access information is consistent with the capability information of the user equipment in the subscription information.

The method according to any one of claims 3 to 5, wherein the capability information of the user equipment comprises: access capability information of the user equipment.

The method according to any one of claims 1 to 5, wherein the receiving, by the mobility management network element, the access information of the user equipment comprises:

The mobility management network element receives the attach request initiated by the user equipment, and obtains the access information carried in the attach request.

8. The method of claim 7 wherein

The mobility management network element includes: a mobility management entity;

The mobile subscriber management database includes: a home subscriber server of the user equipment.

9. The method of claim 7 wherein:

The mobility management network element includes: a service GPRS support node;

The mobile subscriber management database includes: a home location register of the user equipment.

10. A monitoring device for a user equipment, comprising:

An access information receiving module, configured to receive access information of the user equipment;

a subscription information receiving module, configured to receive subscription information of the user equipment saved by the mobile user management database;

a monitoring module, configured to monitor the user equipment according to the access information received by the access information receiving module and the subscription information received by the subscription information receiving module, and detect a monitoring event of the user equipment .

The device according to claim 10, wherein the device further comprises:

And a sending module, configured to report the monitoring event when the monitoring module detects that the monitoring event of the user equipment occurs.