WO2012100684A1

WO2012100684A1 - Method and device for controlling access to local network

Info

Publication number: WO2012100684A1
Application number: PCT/CN2012/070309
Authority: WO
Inventors: 康艳超; 周燕飞
Original assignee: 电信科学技术研究院
Priority date: 2011-01-25
Filing date: 2012-01-13
Publication date: 2012-08-02
Also published as: CN102291800B; CN102083174A; CN102291800A

Abstract

Disclosed are a method and a device for controlling access to a local network, for controlling a UE to remotely access the local network. The method comprises: acquiring an access point name (APN) sent by a user equipment (UE) and belonging to a network to which access is requested; and when determining that the APN is an APN of a local network, the UE has the authority of local IP access to the local network, and the UE is a UE requiring remote access to the local network, determining, according to a packet data network (PDN) subscription context corresponding to the UE, whether the UE is allowed to remotely access the local network.

Description

Method and device for controlling access to local network This application claims to be Chinese patent filed on January 25, 2011, with the application number of 201110026563.4, and the invention titled "a method and device for controlling access to a local network" The right of application, and the priority of the Chinese Patent Office, application number 201110192651.1, entitled "A method and device for controlling access to the local network", submitted on July 11, 2011, the entire contents of which are incorporated by reference. In this application. Technical field

The present invention relates to the field of communications technologies, and in particular, to a method and apparatus for controlling access to a local network.

BACKGROUND H(e)B (Home (Evolved) NodeB, a home base station) is a base station device that improves indoor wireless coverage, and also provides a local access function, that is, a UE can access a local network associated with a home base station through a home base station. For example: home network and corporate network.

LIPA (Local IP Access) is a technology that allows a UE (User Equipment) to access a local network (for example, a home network or a corporate network) associated with the home base station through a home base station. . The UE accesses the local network through the LGW (Local Gateway). The local gateway can be implemented on the same physical entity as the home base station, or can be located in different physical entities.

The PDN packet data network (PDN) connection of the LTE Long Term Evolution (LTE) system is an IP connection established between the UE and the packet data network. After receiving the PDN connection establishment request of the UE, the network will select the appropriate PDN GW packet data gateway (PDN Gateway, the packet data gateway can be written as PDN GW or can be written as PGW). When the network selects the PDN GW for the UE, the PDN GW recorded in the PDN subscription context of the user is preferentially selected.

In the application scenario where the LIPA technology is used, the PDN network is a local network, such as a home network or a corporate network, and the PGW is an LGW (local gateway). A direct user path is used between the home base station and the local gateway, and user data can directly enter the local network or access the Internet (Internet) through the home base station and the local gateway.

LIPA access control is for each APN (Access Point Name, access point name, used to identify the PDN network) and each CSG (Closed Subscriber Group), specifically by MME (Mobility Management Entity, The mobility management entity) controls based on the PDN subscription context of the UE. Therefore, in the PDN subscription context of the UE, the CSG cell LIPA corresponding to which CSG IDs (CSG identifiers) can be accessed by the UE can be used to access the local networks corresponding to the APNs. In summary, in the prior art, the UE can access the PDN network through the home base station to access the PLMN (Public Land Mobile Network), and can also use the LIPA technology to pass between the home base station and the local gateway. Direct user access to the local network. However, in the prior art, when the UE is in the PLMN, it is not possible to remotely access the local network. SUMMARY OF THE INVENTION Embodiments of the present invention provide a method and apparatus for controlling access to a local network, which are used to control a UE to remotely access a local network.

A method for controlling access to a local network provided by an embodiment of the present invention includes:

Obtaining an access point name of the network that the user equipment UE requests to access, APN;

When determining that the APN is an APN of a local network, the UE has local IP access rights of the local network, and the UE is a UE that needs to remotely access the local network, according to packet data corresponding to the UE The network PDN subscription context determines whether the UE is allowed to access the local network remotely.

An apparatus for controlling access to a local network according to an embodiment of the present invention includes:

An APN obtaining unit, configured to acquire an access point name APN of a network that the user equipment UE requests to access; a determining processing unit, configured to: when determining that the APN is an APN of a local network, where the UE has a local network The IP access right, and the UE is a UE that needs to remotely access the local network, and determines whether to allow the UE to remotely access the local network according to the packet data network PDN subscription context corresponding to the UE.

In the embodiment of the present invention, the access point name APN of the network that the user equipment UE requests to access is obtained; when the APN is determined to be the APN of the local network, the UE has the local IP access right of the local network, and the UE When it is required to remotely access the UE of the local network, according to the packet data network PDN signing context corresponding to the UE, determining whether to allow the UE to remotely access the local network, thereby implementing control of the UE remotely accessing the local network, when In the case that the UE is allowed to access the local network remotely, the UE may be further accessed by the remote network.

1 is a schematic flowchart of a method for controlling access to a local network according to an embodiment of the present invention; FIG. 2 is a schematic diagram of a network of a local home base station according to an embodiment of the present invention;

FIG. 3 is a schematic diagram of a specific process of controlling a core network control node to access a local network according to an embodiment of the present invention; FIG. 4 is a schematic diagram of an attach process initiated by a UE;

FIG. 5 is a schematic diagram of a PDN connection process initiated by a UE;

FIG. 6 is a schematic flowchart of a method according to Embodiment 3 of the present disclosure;

FIG. 7 is a schematic structural diagram of an apparatus for controlling access to a local network according to an embodiment of the present disclosure; FIG. 8 is a schematic diagram of two user paths connected to a PDN network and a local network according to the prior art; FIG. 9 is a schematic diagram of a user path of a user remotely accessing a local network according to an embodiment of the present invention. A method and apparatus for controlling access to a local network are used to control a UE to remotely access a local network.

The embodiment of the present invention proposes that when a CSG member (that is, a UE having the access right of the CSG cell) has the LIPA access right of the local network of the CSG cell and is not within the access range of the CSG cell, the CSG member can pass the PLMN. The remote access to the local network's technical solution, and if the roaming agreement allows, the same applies to CSG members remote access to the local network through the visited PLMN (VPLMN).

The technical solution provided by the embodiment of the present invention is applicable to an LTE system and a UMTS (Universal Mobile Telecommunication System).

On the network side, referring to FIG. 1, a method for controlling a core network control node to access a local network according to an embodiment of the present invention includes the following steps:

S101. Acquire an access point name APN of a network that the user equipment UE requests to access.

S102. When determining that the APN is the APN of the local network, the UE has the LIPA (Local IP Access) right of the local network, and the UE is a UE that needs to remotely access the local network, according to the packet data network corresponding to the UE. The PDN subscription context determines whether the UE is allowed to access the local network remotely.

The core network control node in the embodiment of the present invention is an MME (Mobility Management Entity) or an SGSN (GPRS Service Support Node).

It is determined whether the UE has the local IP access right of the local network by looking up the PDN subscription context corresponding to the UE. That is to say, whether the UE has the LIPA access right of the local network with the APN identity can be determined according to the APN in the PDN subscription context and whether the UE is allowed to establish the identity of the LIPA connection to the local network corresponding to the APN.

Preferably, the UE is determined to be a UE that needs to remotely access the local network, and includes:

When the CSG ID (closed user group identifier) is not carried in the Attach Request message or the service request message sent by the UE, the UE is determined to be a UE that needs to remotely access the local network.

If the UE is in the CSG cell, the CSG ID (closed user group identifier) of the CSG cell is carried in the attach request message or the service request message sent by the HeNB.

Preferably, the determining, according to the packet data network PDN subscription context corresponding to the UE, determining whether to allow the UE to remotely access the local network, includes:

Determining whether the UE is allowed to remotely access the identity of the local network according to the PDN subscription context corresponding to the UE, Determine if the UE is allowed to access the local network remotely.

The core network control node may obtain the PDN corresponding to the UE from the HSS (Home Subscriber Server) or the Home Location Register (HLR) in the UE-initiated attach process or the service request process. Sign the contract and save it, which can be applied directly.

In the embodiment of the present invention, the identifier of the local network in the local network corresponding to different UEs in the HSS and the HLR is added in advance, and the identifier of the local network may be allowed to be remotely accessed, for example: Remote Access Permission ). The identifier is set based on the subscription information of the user and the home network operator, and is used to identify whether the user can remotely access the local network. For example, when the identifier is set to 1, the UE is allowed to remotely access the local network, and the identifier is set. When 0, it means that the UE is not allowed to access the local network remotely.

Further, in the embodiment of the present invention, the identifier of the local network in the roaming state may be allowed to be remotely accessed in the PDN subscription context of the local network corresponding to the different UEs in the HSS and the HLR. For example, the identifier may be: VPLMN Remote Access Allowed (VPLMN Remote Access Allowed). The identifier is set in the roaming agreement between the home network operator and the roaming network operator to identify whether the user can remotely access the local network in the roaming network having the roaming agreement. For example, when the identifier is set to 1, it indicates that the UE in the roaming state is allowed to access the local network remotely. When the identifier is set to 0, the UE in the roaming state is not allowed to remotely access the local network.

Preferably, when it is determined that the UE is allowed to access the local network remotely, the method further includes:

Determining whether the UE is a UE in a roaming state;

If yes, determining whether to allow the UE in the roaming state to remotely access the local network according to whether the UE in the roaming state is allowed to remotely access the local network in the PDN subscription context corresponding to the UE in the roaming state; otherwise, Control the UE to access the local network remotely.

Preferably, the method further includes:

When it is determined that the UE in the roaming state is allowed to remotely access the local network, the UE in the roaming state is controlled to remotely access the local network.

Preferably, the controlling the UE to access the local network remotely includes:

Establishing the remote access of the UE to the local network by using the local gateway LGW address recorded in the PDN subscription context corresponding to the UE as the PDN GW address of the UE; or determining the local gateway LGW address of the local network, and using the LGW address as the UE PDN GW address, establishing remote access of the UE to the local network;

Preferably, the UE remotely accessing the local network in the roaming state includes:

The LGW address recorded in the PDN subscription context corresponding to the UE in the roaming state is taken as the PDN of the UE.

GW address, establishing remote access of the UE to the local network in the roaming state; or determining the local gateway LGW address of the local network, using the LGW address as the PDN GW address of the UE, and establishing the UE in the roaming state to the remote of the local network Access. Preferably, the determining the local gateway LGW address of the local network includes:

Determining, as the LGW address of the local network, the LGW address recorded in the PDN subscription context corresponding to the UE; or

Obtaining a local home base station network identifier LHN ID of the local network recorded in the PDN subscription context corresponding to the UE, and determining the LGW address according to the LHN ID and the APN.

In the 3GPP R11 phase, the home base station and the local gateway may be separate physical entities, and the local home base station network (LHN) is as shown in FIG. 2, where a Packet Data Network (PDN) is also a local network.

An LHN consists of a set of H(e) Bs that can obtain IP connections to the local network through one or more LGWs. An LHN is identified by an LHN ID. The LHN has the following characteristics:

A home base station can only belong to one LHN;

An LGW can only belong to one LHN;

When the terminal moves between the home base stations in the same LHN, the continuity of the LIPA connection needs to be supported, and the LGW of the LIPA connection should not be changed.

When the network selects the PDN GW, it will preferentially choose to record the PDN GW in the user's PDN subscription context. If the PDN GW address is not provided in the subscription information, the network can use the subscription information to obtain the address of the PDN GW by querying the DNS.

That is to say, in the embodiment of the present invention, the LGW address of the local network may be recorded in advance in the PDN GW entry in the PDN subscription context of the local network corresponding to different UEs in the HSS, and may be different in the HLR and different UEs. The GGSN (Gateway GPRS Support Node) identifier of the GGSN (Gateway GPRS Support Node) in the PDN subscription context of the corresponding local network records the LGW address of the local network, or increases the record and the APN allowing remote access. Local Local Base Station Network (Local H(e) B network, LHN) identification (ID) of the relevant local network. The LGW address can be an FQDN (Fully Qualified Domain Name) or an IP address (address).

When the network selects the PDN GW for the UE, the PDN GW recorded in the PDN subscription context of the user is preferentially selected, so the PDN GW entry in the PDN subscription context of the local network corresponding to the different UEs in the HSS is recorded locally here. The LGW address of the network, and the GGSN identity entry in the PDN subscription context of the local network corresponding to different UEs in the HLR record the LGW address of the local network, which can improve the efficiency of remote access to the local network without waiting for the HeNB to report the LGW. address.

If the LGW address of the local network is not recorded in the PDN subscription context of the local network corresponding to the different UE, and the LHN ID is recorded, the MME may check the remote location for establishing the UE to the local network from the DNS according to the LHN ID and the APN. The LGW address to be accessed, the specific method can be:

The MME sends a query LGW address request to the DNS, where the LHN ID and the APN are carried;

The DNS determines the LGW address corresponding to the LHN according to the LHN ID (possibly including multiple LGW addresses); The DNS determines the LGW address corresponding to the APN from the LGW address corresponding to the LHN according to the APN, and sends the LGW address to the MME.

The LGW address can be used as a PDN GW when remotely accessing the local network, providing access to the local network. Specific explanations are given below.

When the user needs to initiate remote access, the UE sends the APN of the local network that needs to be remotely accessed to the network side. Specifically, the PDN connection request message or the Activate Packet Data Protocol Context Request may be activated. Context Request) The APN unit (IE) in the message is transmitted.

Receiving the APN sent by the UE, the core network control node (MME or SGSN) determines according to the subscription data: This is an APN of the local network, and the UE has the LIPA access right of the local network identified by the APN, and the UE is not An access request is initiated in a CSG cell of the local network of the APN that allows LIPA access. Then, the core network control node determines whether the UE has subscription information for remote access to the local network, and if so, allows the UE to perform remote access. Further, in the user roaming scenario, the core network control node determines whether the UE has subscription information for remote access in the VPLMN. The specific judgment process of the core network control node is shown in Figure 3, including the steps:

5201. The core network control node determines whether the APN sent by the UE is an APN of the local network, and if yes, performs step S203; otherwise, performs step S202.

5202. The core network control node accesses according to the existing process, and the determining process is terminated.

5203. The core network control node further determines whether the UE has the LIPA access right of the local network that accesses the APN identifier. If yes, step S205 is performed. Otherwise, step S204 is performed.

5204. The core network control node rejects the access request of the UE, and the determining process is terminated.

5205. The core network control node determines whether the cell that the UE initiates the connection request is a CSG cell that is allowed to access the LIPA by the local network identified by the APN. If yes, step S206 is performed; otherwise, step S207 is performed.

Specifically, according to whether the CSG ID is carried in the attach request message or the service request message sent by the UE, it is determined whether the cell in which the UE initiates the connection request is a CSG cell that the local network of the APN identity allows the LIPA to access, if the UE initiates the connection request. The cell is a CSG cell that the local network of the APN identity allows the LIPA to access. The CSG ID is included in the attach request message or the service request message sent by the UE. Otherwise, the CSG ID is not included in the attach request message or the service request message sent by the UE. . Therefore, it can be determined whether the cell in which the UE initiates the connection request is a CSG cell that the local network that the APN identifies allows the LIPA to access, that is, whether the UE needs to remotely access the local network.

S206. The core network control node performs the LIPA access procedure according to the provisions of the existing protocol, and the determining process is terminated.

5207. The core network control node determines, according to the user subscription information, whether the UE has the right to remotely access the local network of the APN identifier. If yes, step S208 is performed. Otherwise, step S211 is performed.

5208. The core network control node determines, according to the PLMN ID submitted by the UE, whether the user is a diffuse The user is logged, if yes, step S209 is performed, otherwise, step S211 is performed.

5209. The core network control node determines, according to the user subscription information, whether the user has the right to remotely access the local network of the APN identifier from the VPLMN. If yes, step S210 is performed; otherwise, step S211 is performed.

5210. The core network control node accepts the remote access, and the judgment process is terminated.

S211. The core network control node rejects the remote access, and the determining process is terminated.

After determining that the UE accepts the remote access to the local network identified by the APN from the PLMN or the VPLMN, the core network control node completes the process of the UE accessing the local network identified by the APN remotely from the PLMN or the VPLMN by using the procedure specified by the existing protocol. Specifically, the local network identified by the APN may be regarded as a normal PDN network, and obtained locally from a PDN GW item or a GGSN identity item in a PDN subscription context of a local network corresponding to different UEs in the HSS or HLR. The LGW address of the network, the LGW address is used as the PDN GW of the remote access local network, or if the LGW address of the local network is not recorded in the PDN subscription context of the local network corresponding to the UE, the LHN ID is recorded (local The home base station network identifier can be used to determine the LHN ID, and the APN determines the LGW address, and then completes the process of the UE remotely accessing the local network identified by the APN according to the existing procedure.

A description of several specific embodiments is given below.

Embodiment 1:

The user-initiated Attach process is shown in Figure 4. The user accesses the local network remotely through the LTE system through the Attach process.

The UE sets a Ciphered Options Transfer Flag in the Attach Request message sent to the network side, indicating that the APN will be provided to the network side in subsequent messages. And, the subsequent UE sends an APN of the local network that initiates the remote access to the MME in the Ciphered Options Response message sent to the network side. The MME obtains the PDN subscription context corresponding to the UE saved in the HSS through the Update Location Ack message sent by the HSS, and saves it locally. Then, the MME performs a remote access control step, that is, performs remote access control according to the remote access determination logic shown in FIG. 2: If the remote access is accepted, the MME allocates the local network of the APN identifier recorded in the PDN subscription context to the UE. Corresponding LGW, or, according to the LHN ID and APN recorded in the PDN subscription context, allocate the LGW address to the UE, and use the existing procedure to establish a remote access to the local network for the UE; if the remote access is rejected, the MME may reject the UE The PDN connection request, and returns the reason for the rejection.

Embodiment 2:

In the prior art, the PDN connection process initiated by the UE is as shown in FIG. 5, and the user requests to remotely access the local network through the LTE system through the PDN connection process initiated by the UE.

The UE sends the APN of the local network that needs to be remotely accessed to the MME in the PDN Connectivity Request. Then, the MME performs a remote access control step, that is, remote access as shown in FIG. Determining logic, performing remote access control: If the remote access is accepted, the MME allocates the LGW corresponding to the local network of the APN identifier recorded in the PDN subscription context to the UE, or uses the LHN ID and the APN recorded in the PDN subscription context as the UE. The LGW address is allocated, and the existing procedure is used to establish remote access to the local network for the UE; if the remote access is rejected, the MME may reject the PDN connection request of the UE and return the reason for the rejection.

Embodiment 3:

The PDP Context Activation Procedure is shown in Figure 5. The user requests remote access to the local network through the UMTS system through the PDP Context Activation Procedure.

Specifically, the MS (mobile terminal) sends an APN of the local network that needs to be remotely accessed to the SGSN in the Activate PDP context request message. Then, the SGSN performs a remote access control step, that is, performs remote access control according to the remote access judgment logic shown in FIG. 3: If the remote access is accepted, the SGSN allocates the local network of the APN identifier recorded in the PDN subscription context to the MS. Corresponding LGW, or, according to the LHN ID and APN recorded in the PDN subscription context, allocate an LGW address to the UE, and use the existing process to establish a remote access to the local network for the MS; if the remote access is rejected, the SGSN may reject the MS The PDN connection request, and returns the reason for the rejection.

Referring to FIG. 7, an apparatus for controlling access to a local network according to an embodiment of the present invention includes:

The APN obtaining unit 101 is configured to acquire an access point name APN of the network that the user equipment UE requests to access; the determining processing unit 102 is configured to: when determining that the APN is an APN of a local network, where the UE has the local network The local IP access right, and the UE is a UE that needs to remotely access the local network, and determines whether to allow the UE to remotely access the local network according to the packet data network PDN subscription context corresponding to the UE.

Preferably, the determining processing unit 102 determines that the UE is a UE that needs to remotely access the local network when the CSG ID is not carried in the attach request message or the service request message sent by the UE.

Preferably, the determining processing unit 102 determines whether to allow the UE to remotely access the local network according to whether the UE is allowed to remotely access the identifier of the local network in the PDN subscription context corresponding to the UE.

Preferably, the determining processing unit 102 determines, when the UE is allowed to remotely access the local network, whether the UE is a UE in a roaming state; if yes, according to a PDN subscription context corresponding to the UE in the roaming state Whether the UE in the roaming state is allowed to remotely access the identity of the local network, and whether the UE in the roaming state is allowed to remotely access the local network; otherwise, the UE is controlled to remotely access the local network.

Preferably, the determining processing unit 102 controls the UE in the roaming state to remotely access the local network when determining that the UE in the roaming state is allowed to remotely access the local network.

Preferably, the determining processing unit 102 establishes a remote access of the UE to the local network by using the local gateway LGW address recorded in the PDN subscription context corresponding to the UE as the PDN gateway address of the UE; The LGW address recorded in the PDN signing context corresponding to the UE is used as the PDN gateway address of the UE, and the flood is established. Remote access from the UE to the local network in the swim state.

The determining processing unit 102 obtains a local home base station network identifier LHN ID of the local network recorded in the PDN subscription context corresponding to the UE, and determines the LGW address according to the LHN ID and the APN.

Preferably, the device may be an MME or an SGSN.

In summary, referring to FIG. 8 , in the prior art, the UE may access the PDN network through the home base station to access the PDN network, or may access the local through the direct user path between the home base station and the local gateway by using the LIPA technology. The network, however, cannot access the local network remotely when the UE is in the PLMN.

In the embodiment of the present invention, the access point name APN of the network that the user equipment UE requests to access is obtained. When the APN is determined to be the APN of the local network, and the UE has the local IP access right of the local network, And if the UE is a UE that needs to remotely access the local network, determine whether to allow the UE to access the local network remotely according to the packet data network PDN subscription context corresponding to the UE, so that the UE can remotely control the local network. When the UE is allowed to access the local network remotely, the UE may further access the local network according to the existing protocol, as shown in FIG. 9 .

Those skilled in the art will appreciate that embodiments of the present invention can be provided as a method, system, or computer program product. Accordingly, the present invention may take the form of an entirely hardware embodiment, an entirely software embodiment, or a combination of software and hardware. Moreover, the present invention is in the form of a computer program product embodied on one or more computer-usable storage media (including but not limited to disk storage and optical storage, etc.) in which computer usable program code is embodied.

The present invention has been described with reference to flowchart illustrations and/or block diagrams of methods, apparatus (system), and computer program products according to embodiments of the invention. It will be understood that each process and/or block of the flowchart illustrations and/or FIG. These computer program instructions can be provided to a processor of a general purpose computer, special purpose computer, embedded processor, or other programmable data processing device to produce a machine for the execution of instructions for execution by a processor of a computer or other programmable data processing device. Means for implementing the functions specified in one or more of the flow or in a block or blocks of the flow chart.

The computer program instructions can also be stored in a computer readable memory that can direct a computer or other programmable data processing device to operate in a particular manner, such that the instructions stored in the computer readable memory produce an article of manufacture comprising the instruction device. The apparatus implements the functions specified in one or more blocks of a flow or a flow and/or block diagram of the flowchart.

These computer program instructions can also be loaded onto a computer or other programmable data processing device such that a series of operational steps are performed on a computer or other programmable device to produce computer-implemented processing for execution on a computer or other programmable device. The instructions provide steps for implementing the functions specified in one or more of the flow or in a block or blocks of a flow diagram. It is apparent that those skilled in the art can make various modifications and variations to the invention without departing from the spirit and scope of the invention. Thus, it is intended that the present invention cover the modifications and modifications of the invention

Claims

Rights request

A method for controlling access to a local network, the method comprising:

The method according to claim 1, wherein the determining that the UE is a UE that needs to remotely access the local network includes:

When the closed request group identifier CSG ID is not carried in the attach request message or the service request message sent by the UE, the UE is determined to be a UE that needs to remotely access the local network.

The method according to claim 2, wherein the determining, according to the packet data network PDN subscription context corresponding to the UE, whether to allow the UE to remotely access the local network, includes:

Determining whether to allow the UE to remotely access the local network according to whether the UE is allowed to remotely access the identity of the local network in the PDN subscription context corresponding to the UE.

The method according to claim 3, wherein when it is determined that the UE is allowed to remotely access the local network, the method further includes:

Determining whether the UE is a UE in a roaming state;

If yes, determining whether to allow the UE in the roaming state to remotely access the local network according to whether the UE in the roaming state is allowed to remotely access the identifier of the local network in the PDN subscription context corresponding to the UE in the roaming state. ;

Otherwise, the UE is controlled to remotely access the local network.

5. The method according to claim 4, wherein the method further comprises:

6. The method of claim 5, wherein

The controlling the UE to access the local network remotely includes:

Establishing a remote access of the UE to the local network by using the local gateway LGW address recorded in the PDN subscription context corresponding to the UE as the PDN gateway address of the UE;

The UE remotely accessing the local network in the roaming state includes:

The LGW address recorded in the PDN subscription context corresponding to the UE in the roaming state is used as the PDN gateway address of the UE, and the remote access of the UE in the roaming state to the local network is established.

7. The method of claim 5, wherein The controlling the UE to remotely access the local network includes:

Determining a local gateway LGW address of the local network, using the LGW address as a PDN gateway address of the UE, and establishing a remote access of the UE to the local network;

The UE remotely accessing the local network in the roaming state includes:

Determining the local gateway LGW address of the local network, using the LGW address as the PDN gateway address of the UE, and establishing remote access of the UE in the roaming state to the local network.

The method according to claim 7, wherein the determining the local gateway LGW address of the local network comprises:

9. A device for controlling access to a local network, the device comprising:

An APN obtaining unit, configured to acquire an access point name APN of a network that the user equipment UE requests to access; a determining processing unit, configured to: when determining that the APN is an APN of a local network, where the UE has a local network IP access rights, and when the UE needs to remotely access the UE of the local network, determine whether to allow the UE to remotely access the local network according to the packet data network PDN subscription context corresponding to the UE.

The apparatus according to claim 9, wherein the determining processing unit determines that the UE needs to be remotely connected when the closed request group identifier CSG ID is not carried in the attach request message or the service request message sent by the UE. The UE entering the local network.

The device according to claim 10, wherein the determining processing unit determines whether to allow the UE to remotely connect according to whether the UE is allowed to remotely access the identifier of the local network in the PDN subscription context corresponding to the UE. Enter the local network.

The apparatus according to claim 11, wherein the determining processing unit determines, when the UE is allowed to remotely access the local network, whether the UE is a UE in a roaming state; if yes, according to Whether the UE in the roaming state is allowed to remotely access the identity of the local network in the PDN subscription context corresponding to the UE in the roaming state, determining whether the UE in the roaming state is allowed to remotely access the local network; otherwise, controlling the UE remotely Access to the local network.

The apparatus according to claim 12, wherein the determining processing unit controls the UE in the roaming state to remotely access the local network when determining that the UE in the roaming state is allowed to remotely access the local network.

The device according to claim 13, wherein the determining processing unit establishes the UE to the local device by using the local gateway LGW address recorded in the PDN subscription context corresponding to the UE as the PDN gateway address of the UE. Remote access to the network; LGW recorded in the context of the PDN subscription corresponding to the UE in the roaming state The address is used as the PDN gateway address of the UE, and the remote access of the UE in the roaming state to the local network is established.

The device according to claim 13, wherein the determining processing unit determines a local gateway LGW address of the local network, uses the LGW address as a PDN gateway address of the UE, and establishes a remote location of the UE to the local network. The local gateway LGW address of the local network is determined, and the LGW address is used as the PDN gateway address of the UE, and the remote access of the UE in the roaming state to the local network is established.

The device according to claim 15, wherein the determining processing unit determines the LGW address recorded in the PDN subscription context corresponding to the UE as the LGW address of the local network; or

The determining processing unit acquires a local home base station network identifier LHN ID of the local network recorded in the PDN subscription context corresponding to the UE, and determines the LGW address according to the LHN ID and the APN.