WO2015165224A1

WO2015165224A1 - Authorization processing method and apparatus, proximity server, and home subscriber server

Info

Publication number: WO2015165224A1
Application number: PCT/CN2014/089260
Authority: WO
Inventors: 朱进国; 梁爽; 卢飞
Original assignee: 中兴通讯股份有限公司
Priority date: 2014-04-30
Filing date: 2014-10-23
Publication date: 2015-11-05
Also published as: CN105025462A

Abstract

The present invention provides an authorization processing solution. An authorization processing method comprises: acquiring camping public land mobile network (PLMN) information of a PLMN that a user equipment (UE) initiating a service request currently camps on; determining whether the camping PLMN information exists in registered PLMN information and/or peer PLMN information corresponding to registered PLMNs that are stored in a proximity server; if the determination result is Yes, performing authorization processing on the service request of the UE according to the camping PLMN information; and/or if the determination result is No, performing authorization processing on the service request of the UE according to current registered PLMN information and/or current peer PLMN information corresponding to the current registered PLMN information that are acquired from a home subscriber server (HSS). The present invention achieves the effect that the HSS can perform effective authorization control on a user when the user moves among various PLMNs.

Description

Authorization processing method, device, proximity server, and home subscriber server

Technical field

The present invention relates to the field of communications, and in particular, to an authorization processing method and apparatus, a proximity server, a user equipment, and a home subscriber server.

Background technique

Direct communication between devices in the vicinity using Device to Device (D2D for short) can bring many benefits to the terminal, such as higher speed, lower latency and lower power consumption, and greatly improved. The wireless resource efficiency of the operator, the D2D Relay mode is beneficial for operators to improve wireless coverage; for applications, the use of proximity information in the D2D communication process can develop more attractive new services. The Public Safety system can also use D2D technology to enable communication between terminals without wireless coverage.

FIG. 1 is a schematic diagram of a D2D architecture related to 3GPP in the related art. As shown in FIG. 1 , the functions of the key network elements are described below.

Terminal: also called User Equipment (UE), which supports the interface PC5 between the terminal and the terminal to send and receive signals. At the same time, it has access to the base station through the radio and access through the S1 interface. In the core network, the terminal communicates with the proximity communication server through the user plane interface PC3.

Base station: In the evolved system, it is also called an evolved NodeB (Evolved NodeB, eNodeB for short), which provides radio resources for the access of the terminal, and communicates with the core network through the S1 interface.

The core network includes the mobility management unit and gateway. The mobile management unit is a control plane entity responsible for temporarily storing user data, and is responsible for authentication, mobility management, and subscription checking. The gateway is a user plane entity, which is responsible for allocating an IP address to the terminal and forwarding the uplink and downlink data packets of the terminal. And billing and so on.

A short-range communication server, which is located outside the core network, and the terminal communicates with the server through the user plane interface PC3. The main functions of the server include D2D service authorization, allocation of temporary code for terminal-requested applications for terminal broadcast, assistance with D2D discovery, and billing. The authorization information comes from the home subscriber server. Currently, a Public Land Mobile Network (PLMN) supports a short-range communication server, and multiple PLMNs can share a short-range communication server.

The home subscriber server is located in the home network. The main function is to provide subscription information and authentication information for users and applications.

The operator allocates a unique application identifier to the application on the terminal. For example, the identifier includes the PLMN information and the application identifier information. The PLMN includes the country code and the network number. The application identifier information uniquely identifies an application, and may also uniquely identify an application. Such as hotels, restaurants, etc. In the case of coverage, if the terminal D2D needs to use the carrier's frequency band resources, it needs to obtain authorization from the operator and the operator can control and charge. In this case, the terminal generally does not allow direct broadcast of its own application identifier, but needs to The proximity server acquires a temporary identification code uniquely corresponding to the application identifier, and then broadcasts the code.

The D2D discovery of the two terminals includes two processes: UE A broadcast, UE B listen. If the code A monitored by UE B already knows, terminal B finds that terminal A is nearby. If the terminal B does not recognize the monitored code A, there is still a process of matching to the network, and the application identifier of the UE A corresponding to the code A is learned from the network, so that the terminal A is found nearby. The description of these three processes is shown in Figures 2, 3 and 4, respectively.

2 is a flow chart of a broadcast request for a D2D service in the related art. As shown in FIG. 2, the process includes the following steps:

In step S202, the terminal A obtains an application identifier from the operator, and the application identifier is only allowed to be used by the UE A.

Step S204, if the terminal A wants to broadcast itself by using the wireless resource of the operator, so that other people can discover themselves, establish a connection with the network, and send a broadcast request message to the proximity server, where the request includes the application identifier that is desired to be broadcast, Endpoint identification and indication of announcing. The terminal A generates the identity of the home proximity server through the PLMN identity that belongs to the terminal, and searches for the IP address of the home server by using the domain name server (DNS). The terminal identifier is an International Mobile Subscriber Identifier (IMSI) or a Mobile Subscriber Integrated Service Digital Network (MSISDN).

Step S206: After receiving the broadcast request, the home proximity server requests, if there is no user context, to send a subscription request to the home subscriber server, with the user identifier.

Step S208: The home subscriber server returns the subscription information of the terminal in the subscription response, and in the case of roaming, the home subscriber server also returns the visited PLMN identifier currently registered by the user.

Step S210: According to the contract information belonging to the proximity server, determine that the terminal is allowed to perform the D2D service, and the user does sign the application identifier, the user context is created, and a temporary identifier code A and corresponding are assigned to the application identifier sent by the user. Validity period.

Step S212, the home proximity server generates an identifier of the visited proximity server according to the visited PLMN identifier obtained in step S208, and obtains the visited proximity server IP address through the DNS lookup, and then sends a broadcast request to the visited proximity server. Authorization message with application identification, terminal identification, and assigned temporary identification code A and corresponding validity period.

In step S214, the visited proximity server authorizes the current broadcast request, and records the received application identifier, the terminal identifier, and the assigned temporary identifier code A and the corresponding validity period, so as to perform subsequent billing. The visited proximity server returns a broadcast request authorization response message.

Step S216: After receiving the local short-distance server to authorize the current broadcast request, the proximity server returns the assigned temporary identifier code A and the corresponding validity period to the UE A.

Step S218, the terminal A acquires radio resources from the current registration network. The user-registered network base station can broadcast the available D2D radio resources, and the terminal obtains the content through the contention. The base station can also specify the available D2D radio resources for the terminal through the RRC procedure.

In step S220, the terminal A broadcasts the obtained code A on the acquired radio resource. In order to improve efficiency, the terminal A sets a timer and periodically broadcasts during the validity period indicated in step S216.

After the validity period expires, the temporary identification code A is invalidated, and the terminal A must re-initiate the process of broadcasting the request, and re-acquire the temporary identification code A and the validity period. After the user moves out of the currently registered PLMN, the Code A immediately becomes invalid, and the terminal also needs to re-initiate the broadcast request process.

FIG. 3 is a flowchart of a listening request for a D2D service in the related art. As shown in FIG. 3, the process includes the following steps:

In step S302, the terminal B obtains the application identifier of the terminal A from the operator or a third party.

Step S304: If the terminal B wants to discover the terminal A, the terminal B establishes a connection with the network, and sends a monitoring request to the proximity server, where the request includes the terminal A application identifier and the terminal B terminal identifier that are to be discovered. The terminal B generates the identity of the proximity server through the PLMN identity that it belongs to, and obtains the IP address of the home server by the DNS lookup. The terminal identifier is IMSI or MSISDN.

Step S306, after receiving the discovery request, the proximity server requests the home subscriber server to send a subscription request with the user identifier if there is no user context.

Step S308, the home subscriber server returns the subscription information of the terminal in the subscription response, and in the case of roaming, the home subscriber server also returns the visited PLMN identifier currently registered by the user.

Step S310: Create a user context according to the fact that the subscription information belongs to the proximity server and determines that the terminal is allowed to perform the D2D service. If the destination application identifier requested by the terminal is another PLMN, the IP address of the destination close-range server is obtained through the DNS according to the provided PLMN information, and then the interception request is sent to the destination close-range server, with the terminal A application identifier that is desired to be discovered. Terminal B terminal identification. If the destination application identifier requested by the terminal is the home PLMN, step S312 is not performed, and the home proximity server directly finds the corresponding code A and the corresponding validity period according to the terminal A application identifier.

Step S312, the destination proximity server finds the corresponding code A and the corresponding validity period according to the terminal A application identifier, and returns the information to the home proximity server.

Step S314, the belonging proximity server sends the obtained code A and the validity period to the terminal B.

In step S316, the terminal B acquires a radio resource. The terminal B configures the radio resource corresponding to each PLMN that the D2D monitors, and the terminal may listen to all the radio resources in the indicated valid value in step S314.

Step S318, when the terminal B listens to the code A, the terminal A is successfully found to be in the adjacent area.

After the validity period expires, the temporary identification code A is invalidated, and the terminal B must re-initiate the process of listening for the request to acquire the new temporary identification code A and the validity period.

If the terminal B brings up a type of application in step S304, then in step S314, a mask may be returned. In this step, if the monitored code matches the template, such as the first few codes. If the bit and the template match exactly, the terminal B needs to initiate a matching process to learn the application identifier corresponding to the code.

FIG. 4 is a flowchart of a matching request for a D2D service in the related art. As shown in FIG. 4, the process includes the following steps:

In step S402, the terminal B listens to the code A, and the code A matches the mask, but the terminal B does not recognize the code A.

Step S404, the terminal B establishes a connection with the network, and sends a matching request to the home proximity server, where the request includes the found code A and the terminal B terminal identifier. The terminal B generates the identity of the proximity server through the PLMN identity that it belongs to, and obtains the IP address of the home server by the DNS lookup. The terminal identifier is IMSI or MSISDN.

Step S406: After receiving the discovery request, the proximity server requests the home subscriber server to send a subscription request with the user identifier if there is no user context. The home subscriber server returns the subscription information of the terminal in the subscription response.

Step S408, determining that the terminal is allowed to perform D2D service according to the subscription information belonging to the proximity server. If the monitored PLMN information in the Code A is the home PLMN, the home proximity server obtains the terminal A application identifier and the validity period according to the code A that is sent. If the monitored PLMN information in the Code A indicates another PLMN, the home proximity server obtains the destination short-range server IP address through the DNS according to the destination PLMN information, and sends a matching request message with the code A and the terminal B terminal identifier. .

Step S410, the destination proximity server obtains the terminal A application identifier and the validity period according to the received Code A.

Step S412, the destination proximity server returns the acquired terminal A application identifier and the validity period to the belonging proximity server.

Step S414, the home proximity server returns the terminal A application identifier and the validity period to the UE B, and the UE B successfully discovers that the terminal A is in the adjacent area. Within this validity period, both the code A and the terminal A application identifiers match.

Based on the above communication flow of D2D, the HSS provides the currently registered PLMN information. However, when the user moves in each PLMN, since the routing/tracking area update is not initiated, the corresponding home proximity server does not initiate an authorization request to the HSS, and thus cannot Implement the authorization control of the HSS to the user.

Summary of the invention

The present invention provides an authorization processing scheme to at least solve the problem that the HSS cannot authorize the user when the user moves between the PLMNs in the related art.

According to an aspect of the present invention, an authorization processing method is provided, including: acquiring resident PLMN information of a public land mobile network PLMN currently camped on by a user equipment UE that initiates a service request; determining whether the resident PLMN information is near In the case of the registered PLMN information stored on the server and/or the peer PLMN information corresponding to the registered PLMN; if the determination result is yes, the service request of the UE is authorized according to the resident PLMN information; And/or, if the determination result is no, authorizing the service request of the UE according to the current registered PLMN information acquired from the home subscriber server HSS and/or the current peer PLMN information corresponding to the currently registered PLMN information. deal with.

Preferably, the authorization processing of the service request of the UE according to the current registered PLMN information acquired from the HSS and/or the current peer PLMN information corresponding to the current registered PLMN information includes: Determining whether the resident PLMN information is in the current registered PLMN information and/or the current peer PLMN information; if the determination result is yes, the service request to the UE according to the resident PLMN information Authorizing; and/or, if the judgment result is no, rejecting the service request of the UE.

Preferably, the obtaining the resident PLMN information of the PLMN currently camped by the UE that initiates the service request comprises: receiving a service request message from the UE, where the service request message carries the UE The resident PLMN information of the PLMN currently camping on.

According to another aspect of the present invention, an authorization processing method is provided, including: acquiring resident PLMN information of a public land mobile network PLMN currently camped by a user equipment UE; and obtaining the resident PLMN information obtained in a service request Transmitted to a proximity server, wherein the resident PLMN information is used by the proximity server to determine registered PLMN information and/or the registered PLMN information stored by the resident PLMN information on the proximity server In the peer PLMN information, and/or when the home subscriber server HSS determines that the camped PLMN information is in the current registered PLMN information and/or the current peer PLMN information corresponding to the currently registered PLMN information, the close range The server and/or the HSS perform authorization processing on the service request of the UE.

Preferably, before acquiring the resident PLMN information of the PLMN currently camped by the UE, at least one of the following resides in the PLMN: residing in the registered PLMN information and/or the current Registering the PLMN information included in the PLMN; when the base station does not support the registered PLMN information and/or the PLMN included in the currently registered PLMN information, camping on the base station support and in the peer PLMN information and/or The PLMN included in the current peer-to-peer PLMN information; the PLMN included in the base station not supporting the registered PLMN information and/or the currently registered PLMN information, and the peer-to-peer PLMN information and/or the current peer-to-peer When the PLMN information includes the PLMN, it resides in the PLMN that is reselected after re-initiating the location request.

According to still another aspect of the present invention, an authorization processing method is provided, including: receiving an authorization request message of a user equipment UE that initiates a service request from a proximity server; determining whether the authorization request message carries the current UE status The resident PLMN information of the resident public land mobile network PLMN; if the determination result is yes, the service to the UE according to the current registered PLMN information and/or the current peer PLMN information corresponding to the currently registered PLMN information Requesting authorization processing; and/or, if the determination result is no, transmitting the current registered PLMN information and/or the current peer PLMN information to the proximity server.

Preferably, performing authorization processing on the service request of the UE according to the current registered PLMN information and/or the current peer PLMN information corresponding to the currently registered PLMN information comprises: determining whether the resident PLMN information is in the office In the current registered PLMN information and/or in the current peer PLMN information; If yes, the service request of the UE is authorized; and/or, if the determination result is no, the service request of the UE is rejected.

Preferably, after authorizing the service request of the UE, the method further includes: sending the current registered PLMN information and/or the current peer PLMN information to the proximity server.

Preferably, before performing authorization processing on the service request of the UE according to the current registered PLMN information and/or the current peer PLMN information corresponding to the currently registered PLMN information, the method further includes: receiving a mobility management entity MME a location update request, wherein the location update request carries current registered PLMN information and/or the current peer PLMN information.

According to still another aspect of the present invention, an authorization processing apparatus is provided, including: a first acquisition module, configured to acquire resident PLMN information of a public land mobile network PLMN currently camped on by a user equipment UE that initiates a service request; a determining module, configured to determine whether the resident PLMN information is stored in the registered PLMN information and/or the peer PLMN information corresponding to the registered PLMN; the first processing module is configured to be in the first If the determination result of the determination module is yes, the service request of the UE is authorized according to the resident PLMN information; and/or the second processing module is set to the determination result of the first determination module. In the case of no, the service request of the UE is authorized according to the current registered PLMN information acquired from the home subscriber server HSS and/or the current peer PLMN information corresponding to the currently registered PLMN information.

Preferably, the first processing module includes: a first determining unit, configured to determine whether the resident PLMN information is in the current registered PLMN information and/or the current peer PLMN information; a first authorization unit, When the determination result of the first determining unit is yes, the service request of the UE is authorized according to the resident PLMN information; and/or the first rejecting unit is set to be in the first When the judgment result of the judgment unit is NO, the service request of the UE is rejected.

Preferably, the first obtaining module includes: a first receiving unit, configured to receive a service request message from the UE, where the service request message carries a location of the PLMN currently camped by the UE Residing PLMN information.

According to still another aspect of the present invention, a proximity server is provided, comprising the apparatus of any of the above.

According to a further aspect of the present invention, there is provided an authorization processing apparatus, comprising: a second acquisition module, configured to acquire resident PLMN information of a public land mobile network PLMN currently camped on by a user equipment UE; a first sending module, setting Transmitting the acquired resident PLMN information to a proximity server in a service request, wherein the resident PLMN information is used by the proximity server to determine the resident PLMN information in the near From the registered PLMN information stored on the server and/or the peer PLMN information of the registered PLMN information, and/or the home subscriber server HSS determines that the resident PLMN information is in the currently registered PLMN information and/or the current When registering the current peer PLMN information corresponding to the PLMN information, the proximity server and/or the HSS perform authorization processing on the service request of the UE.

Advantageously, the apparatus further comprises a camping module arranged to reside in the PLMN by at least one of: residing in the PLMN included in the registered PLMN information and/or the currently registered PLMN information; Supporting the registered PLMN information and/or the PLMN included in the currently registered PLMN information, camping in a PLMN supported by the base station and included in the peer PLMN information and/or the current peer PLMN information; Residing in the PLMN included in the base station not supporting the registered PLMN information and/or the currently registered PLMN information, and not supporting the peer PLMN information and/or the PLMN included in the current peer PLMN information In the PLMN that is reselected after initiating the location request.

According to still another aspect of the present invention, a user equipment UE is provided, comprising the apparatus of any of the above.

According to still another aspect of the present invention, an authorization processing apparatus is provided, including: a first receiving module, configured to receive an authorization request message of a user equipment UE that initiates a service request from a proximity server; and a second determining module, configured to Determining whether the authorization request message carries the resident PLMN information of the public land mobile network PLMN currently camped by the UE; and the third processing module is configured to be that if the judgment result of the second determining module is yes And performing authorization processing on the service request of the UE according to the current registered PLMN information and/or the current peer PLMN information corresponding to the currently registered PLMN information; and/or, the fourth processing module is configured to be in the second judgment If the judgment result of the module is no, the current registered PLMN information and/or the current peer PLMN information is sent to the proximity server.

Preferably, the third processing module includes: a second determining unit, configured to determine whether the resident PLMN information is in the current registered PLMN information and/or in the current peer PLMN information; the second authorization unit And configured to authorize the service request of the UE if the determination result of the second determining unit is yes; and/or, the second reject unit is set to the determination result of the second determining unit In the case of No, the service request of the UE is rejected.

Preferably, the third processing module further comprises: a sending unit, configured to send the current registered PLMN information and/or the current peer PLMN information to the proximity server.

Preferably, the device further includes: a second receiving module, configured to receive a location update request of the mobility management entity MME, where the location update request carries current registered PLMN information and/or the current peer PLMN information .

According to still another aspect of the present invention, a home subscriber server is provided, comprising the apparatus of any of the above.

With the present invention, the resident PLMN information of the public land mobile network PLMN currently camped by the user equipment UE that obtains the service request is obtained; and the registered PLMN information and/or the location of the resident PLMN information stored on the proximity server is determined. In the case of the peer PLMN information corresponding to the registered PLMN; if the determination result is yes, the service request of the UE is authorized according to the resident PLMN information; and/or, if the determination result is no Authorizing the service request of the UE according to the current registered PLMN information acquired from the home subscriber server HSS and/or the current peer PLMN information corresponding to the current registered PLMN information, and solving the related technology in the user between the PLMNs When moving, the HSS cannot perform authorization control on the user, and thus the effect that the HSS can perform effective authorization control for the user when moving between the PLMNs is achieved.

DRAWINGS

The drawings described herein are intended to provide a further understanding of the invention, and are intended to be a part of the invention. In the drawing:

1 is a schematic diagram of a D2D architecture related to 3GPP in the related art;

2 is a flow chart of a broadcast request for a D2D service in the related art;

FIG. 3 is a flowchart of a listening request of a D2D service in the related art;

4 is a flowchart of a matching request of a D2D service in the related art;

FIG. 5 is a flowchart of an authorization processing method 1 according to an embodiment of the present invention; FIG.

6 is a flowchart of an authorization processing method 2 according to an embodiment of the present invention;

FIG. 7 is a flowchart of an authorization processing method 3 according to an embodiment of the present invention; FIG.

FIG. 8 is a structural block diagram of an authorization processing apparatus 1 according to an embodiment of the present invention; FIG.

FIG. 9 is a block diagram showing a preferred structure of the first processing module 86 in the authorization processing apparatus 1 according to an embodiment of the present invention;

FIG. 10 is a block diagram showing a preferred structure of the first obtaining module 82 in the authorization processing apparatus 1 according to an embodiment of the present invention;

11 is a structural block diagram of a proximity server according to an embodiment of the present invention;

FIG. 12 is a structural block diagram of an authorization processing apparatus 2 according to an embodiment of the present invention; FIG.

FIG. 13 is a block diagram showing a preferred structure of an authorization processing apparatus 2 according to an embodiment of the present invention; FIG.

FIG. 14 is a block diagram showing a preferred structure of a user equipment UE according to an embodiment of the present invention; FIG.

FIG. 15 is a structural block diagram of an authorization processing apparatus 3 according to an embodiment of the present invention; FIG.

FIG. 16 is a structural block diagram 1 of a third processing module 156 in an authorization processing apparatus 3 according to an embodiment of the present invention;

17 is a block diagram 2 of a preferred structure of a third processing module 156 in an authorization processing apparatus 3 according to an embodiment of the present invention;

FIG. 18 is a block diagram showing a preferred structure of an authorization processing apparatus 3 according to an embodiment of the present invention; FIG.

19 is a structural block diagram of a home subscriber server according to an embodiment of the present invention;

20 is a flowchart of an authorization process according to an embodiment of the present invention;

21 is a flowchart of a broadcast request for authorization processing in accordance with a preferred embodiment of the present invention;

22 is a flowchart of a listening request for authorization processing according to a preferred embodiment of the present invention;

23 is a flowchart of a matching request for authorization processing according to a preferred embodiment of the present invention;

24 is a flow diagram of a UE, HSS obtaining a peer PLMN, in accordance with a preferred embodiment of the present invention.

detailed description

The invention will be described in detail below with reference to the drawings in conjunction with the embodiments. It should be noted that the embodiments in the present application and the features in the embodiments may be combined with each other without conflict.

In this embodiment, an authorization processing method is provided. FIG. 5 is a flowchart of an authorization processing method according to an embodiment of the present invention. As shown in FIG. 5, the flow includes the following steps:

Step S502, acquiring the resident PLMN information of the public land mobile network PLMN currently camped by the user equipment UE that initiates the service request;

Step S504, determining whether the resident PLMN information is stored in the registered PLMN information stored on the proximity server and/or the peer PLMN information corresponding to the registered PLMN;

Step S506, if the determination result is yes, perform authorization processing on the service request of the UE according to the resident PLMN information; and/or, if the determination result is no, according to the current registered PLMN obtained from the home subscriber server HSS The information and/or the current peer PLMN information corresponding to the currently registered PLMN information performs authorization processing on the service request of the UE.

Through the above steps, for the proximity server, it is determined whether the user is currently between different PLMNs by determining whether the current resident PLMN of the user equipment UE is stored in the PLMN information and/or the peer PLMN information stored on the proximity server. Moving, and performing corresponding authorization processing according to the judgment result, not only solves the problem that the HSS cannot authorize and control the user when the user moves between the PLMNs in the related art, thereby achieving the user even when moving between the PLMNs, even if The HSS can also perform effective authorization control on the user without initiating the routing/tracking process.

Preferably, the authorization processing of the service request of the UE according to the current registered PLMN information acquired from the HSS and/or the current peer PLMN information corresponding to the currently registered PLMN information may adopt the following simple processing manner, for example, determining the resident PLMN information. Whether it is in the currently registered PLMN information and/or the current peer PLMN information; if the judgment result is yes, the service request of the UE is authorized according to the resident PLMN information; and/or, if the judgment result is no , reject the UE's business request. In addition, when the residing PLMN information of the PLMN currently camped by the UE that initiates the service request is obtained, the method may be adopted, for example, by receiving a service request message from the UE, where the service request message carries the current station of the UE. Residing PLMN information of the remaining PLMN. It should be noted that the service request may be related to the technology, for example, may be a D2D broadcast request, a D2D broadcast request, or a D2D matching request.

FIG. 6 is a flowchart of an authorization processing method 2 according to an embodiment of the present invention. As shown in FIG. 6, the process includes the following steps:

Step S602, acquiring resident PLMN information of the public land mobile network PLMN currently camped by the user equipment UE;

Step S604, the acquired resident PLMN information is sent to the proximity server in the service request, where the resident PLMN information is used by the proximity server to determine the registered PLMN information stored on the proximity server for the resident PLMN information and/or In the peer PLMN information for registering the PLMN information, and/or the home subscriber server HSS determines that the camped PLMN information is in the current registered PLMN information and/or the current peer PLMN information corresponding to the currently registered PLMN information, the proximity server and / or HSS authorization processing of the UE's service request.

Through the above steps, for the user equipment UE, by providing the acquired current resident PLMN information to the proximity server, respectively performing the corresponding authorization processing through the proximity server or the HSS, the user in the related technology is also solved. When the HSS moves between PLMNs, the HSS cannot authorize the user. The problem is that when the user moves between the PLMNs, the HSS can effectively control the user even if the routing/tracking process is not initiated.

The user equipment may select the resident PLMN in multiple manners before acquiring the resident PLMN information of the PLMN currently camped by the user equipment. For example, the user equipment may reside in the PLMN in at least one of the following manners: Registering the PLMN information and/or the PLMN included in the currently registered PLMN information; when the base station does not support the registered PLMN information and/or the PLMN included in the currently registered PLMN information, camping on the base station support and in the peer PLMN information and/or the current pair And the PLMN included in the PLMN information; and when the base station does not support the registered PLMN information and/or the PLMN included in the currently registered PLMN information does not support the peer PLMN information and/or the PLMN included in the current peer PLMN information, The new PLMN is selected, that is, the location update request is re-initiated, and resides in the PLMN that is re-selected after re-initiating the location request.

FIG. 7 is a flowchart of a third method of authorization processing according to an embodiment of the present invention. As shown in FIG. 7, the flow includes the following steps:

Step S702, receiving an authorization request message of the user equipment UE that initiates the service request from the proximity server;

Step S704, determining whether the authorization request message carries the resident PLMN information of the public land mobile network PLMN currently camped by the UE;

Step S706, if the determination result is yes, authorizing the service request of the UE according to the current peer PLMN information corresponding to the current registered PLMN information and/or the current registered PLMN information; and/or, if the determination result is no In the case, the currently registered PLMN information and/or the current peer PLMN information is transmitted to the proximity server.

Through the above steps, the home subscriber server HSS determines the authorization processing of the UE service request by judging whether the received authorization request carries the current resident PLMN information, and solves the related art in the related art when the user moves between the PLMNs. The HSS cannot perform authorization control on the user, so that when the user moves between the PLMNs, the HSS can effectively control the user even if the routing/tracking process is not initiated.

Preferably, the following simple processing manner may be adopted for performing authorization processing on the service request of the UE according to the current registered PLMN information and/or the current peer PLMN information corresponding to the currently registered PLMN information, for example, determining whether the resident PLMN information is currently Registering the PLMN information and/or the current peer PLMN information; if the judgment result is yes, authorizing the service request of the UE; and/or, if the judgment result is no, rejecting the service request of the UE. To maintain the registered PLMN information stored on the close server and the corresponding The peer PLMN information is the latest version, and the current registered PLMN information and/or the current peer PLMN information may be sent to the proximity server after authorizing the service request of the UE.

In addition, it should be noted that the above-mentioned peer-to-peer PLMN information or current peer-to-peer PLMN information is relative to the registered PLMN information or the currently registered PLMN information, and the peer-to-peer PLMN information refers to information completely equivalent to the registered PLMN information. The current peer PLMN information is information that is identical to the currently registered PLMN information. Before the current peer-to-peer PLMN information corresponding to the current registered PLMN information and/or the current registered PLMN information is used to perform the authorization processing on the service request of the UE, the current peer PLMN information needs to be acquired, and the current peer PLMN information may be obtained. A plurality of, for example, a mobile management entity (Mobile Management Entity, MME for short) may be obtained, that is, a location update request of the mobile management entity MME is received, where the location update request carries the currently registered PLMN information and / or current peer PLMN information.

In the embodiment, an authorization processing device is also provided, which is used to implement the above-mentioned embodiments and preferred embodiments, and has not been described again. As used below, the term "module" may implement a combination of software and/or hardware of a predetermined function. Although the apparatus described in the following embodiments is preferably implemented in software, hardware, or a combination of software and hardware, is also possible and contemplated.

FIG. 8 is a structural block diagram of an authorization processing apparatus 1 according to an embodiment of the present invention. As shown in FIG. 8, the apparatus includes a first acquisition module 82, a first determination module 84, a first processing module 86, and/or a second processing module. 88. The device will be described below.

The first obtaining module 82 is configured to obtain the resident PLMN information of the public land mobile network PLMN currently camped on by the user equipment UE that initiates the service request. The first determining module 84 is connected to the first acquiring module 82, and is configured to determine the station. Whether the reserved PLMN information is stored in the registered PLMN information and/or the corresponding PLMN information corresponding to the registered PLMN; the first processing module 86 is connected to the first determining module 84, and is set to be in the first determining module. If the determination result is yes, the service request of the UE is authorized according to the resident PLMN information; and/or the second processing module 88 is connected to the first determining module 84, and is set to be determined by the first determining module. If the result is no, the service request of the UE is authorized according to the current registered PLMN information acquired from the home subscriber server HSS and/or the current peer PLMN information corresponding to the currently registered PLMN information.

FIG. 9 is a block diagram showing a preferred structure of the first processing module 86 in the authorization processing apparatus 1 according to the embodiment of the present invention. As shown in FIG. 9, the first processing module 86 includes a first determining unit 92, a first authorization unit 94, and/or Or the first rejecting unit 96, the first processing module 86 will be described below.

The first determining unit 92 is configured to determine whether the resident PLMN information is in the currently registered PLMN information and/or the current peer PLMN information; the first authorization unit 94 is connected to the first determining unit 92, and is set to be in the first judgment. If the judgment result of the unit is yes, the service request of the UE is authorized according to the resident PLMN information; and/or the first reject unit 96 is connected to the first determining unit 92, and is set to be in the first determining unit. If the result of the determination is negative, the service request of the UE is rejected.

FIG. 10 is a block diagram showing a preferred structure of the first obtaining module 82 in the authorization processing apparatus 1 according to the embodiment of the present invention. As shown in FIG. 10, the first obtaining module 82 includes a first receiving unit 102, and the first receiving unit is provided below. Unit 102 is described.

The first receiving unit 102 is configured to receive a service request message from the UE, where the service request message carries the resident PLMN information of the PLMN currently camped by the UE.

11 is a structural block diagram of a proximity server according to an embodiment of the present invention. As shown in FIG. 11, the proximity server 112 includes the authorization processing device 114 of any of the above.

FIG. 12 is a structural block diagram of an authorization processing apparatus 2 according to an embodiment of the present invention. As shown in FIG. 12, the apparatus includes a second acquisition module 122 and a first transmission module 124, which will be described below.

The second obtaining module 122 is configured to acquire the resident PLMN information of the public land mobile network PLMN currently camped by the user equipment UE. The first sending module 124 is connected to the second acquiring module 122, and is configured to acquire the resident PLMN. The information is sent to the proximity server in the service request, wherein the resident PLMN information is used by the proximity server in determining the registered PLMN information and/or the registered PLMN information of the registered PLMN information that the resident PLMN information is stored on the proximity server. And/or, when the home subscriber server HSS determines that the resident PLMN information is in the current registered PLMN information and/or the current peer PLMN information corresponding to the currently registered PLMN information, the proximity server and/or the HSS performs the service request of the UE. Authorization processing.

FIG. 13 is a block diagram showing a preferred structure of an authorization processing apparatus 2 according to an embodiment of the present invention. As shown in FIG. 13, the apparatus includes a resident module 132 in addition to all the modules shown in FIG. Module 132 is described.

The camping module 132 is connected to the second obtaining module 122, and is configured to reside in the PLMN by at least one of: residing in the PLMN included in the registered PLMN information and/or the currently registered PLMN information; the base station does not support When registering the PLMN information and/or the PLMN included in the currently registered PLMN information, camping in the PLMN supported by the base station and included in the peer PLMN information and/or the current peer PLMN information; the base station does not support the registration of the PLMN information and/or the current Registering PLMN information included in the PLMN information does not support peer PLMN information. And/or the PLMN included in the current peer PLMN information, residing in the PLMN reselected after re-initiating the location request.

FIG. 14 is a block diagram showing a preferred structure of a user equipment UE according to an embodiment of the present invention. As shown in FIG. 14, the user equipment UE 142 includes the authorization processing apparatus 144 of any of the above.

FIG. 15 is a structural block diagram of an authorization processing apparatus 3 according to an embodiment of the present invention. As shown in FIG. 15, the apparatus includes a first receiving module 152, a second determining module 154, a third processing module 156, and/or a fourth processing module. 158. The device will be described below.

The first receiving module 152 is configured to receive an authorization request message of the user equipment UE that initiates the service request from the short-range server. The second determining module 154 is connected to the first receiving module 152, and is configured to determine whether the authorization request message is carried. Residing PLMN information of the public land mobile network PLMN currently camped by the UE; the third processing module 156 is connected to the second judging module 154, and is set to be in the case that the judgment result of the second judging module is yes, according to the current Registering the PLMN information and/or the current peer PLMN information corresponding to the currently registered PLMN information to perform authorization processing on the service request of the UE; and/or, the fourth processing module 158 is connected to the second determining module 154, and is set to be in the second When the judgment result of the determination module is negative, the currently registered PLMN information and/or the current peer PLMN information is transmitted to the proximity server.

16 is a block diagram showing the structure of a third processing module 156 in the authorization processing device 3 according to an embodiment of the present invention. As shown in FIG. 16, the third processing module 156 includes a second determining unit 162, a second authorization unit 164, and/or Or the second rejecting unit 166, the third processing module 156 is described below.

The second determining unit 162 is configured to determine whether the resident PLMN information is in the currently registered PLMN information and/or the current peer PLMN information; the second authorization unit 164 is connected to the second determining unit 162, and is set to be in the second If the judgment result of the determination unit is yes, the service request of the UE is authorized; and/or the second rejection unit 166 is connected to the second determination unit 162, and is set to be the determination result of the second determination unit is no. In the case of the UE, the service request of the UE is rejected.

17 is a block diagram of a preferred structure of a third processing module 156 in the authorization processing apparatus 3 according to an embodiment of the present invention. As shown in FIG. 17, the third processing module 156 includes all the structures shown in FIG. The transmitting unit 172 will be described below with reference to the preferred configuration.

The sending unit 172 is connected to the second authorization unit 164, and is configured to send the current registered PLMN information and/or the current peer PLMN information to the proximity server.

FIG. 18 is a block diagram showing a preferred structure of an authorization processing apparatus 3 according to an embodiment of the present invention. As shown in FIG. 18, the apparatus includes a second receiving module 182 in addition to all the modules shown in FIG. The second receiving module 182 is described.

The second receiving module 182 is connected to the foregoing third processing module 156 and configured to receive a location update request of the mobility management entity MME, where the location update request carries the current registered PLMN information and/or the current peer PLMN information.

FIG. 19 is a structural block diagram of a home subscriber server according to an embodiment of the present invention. As shown in FIG. 19, the home subscriber server 192 includes the authorization processing apparatus 194 of any of the above.

For the related art, when the user moves between the PLMNs, the HSS cannot perform authorization control on the user, that is, when the user moves in the peer PLMN, the routing/tracking area update is not initiated, and thus the HSS cannot know the current user real station. The retained PLMN information; after the user PLMN changes, if the user context is stored in the home proximity server, the home proximity server does not initiate an authorization request to the HSS, so that the HSS cannot control the user. In this embodiment, a user authorization processing scheme is provided, which is described below.

FIG. 20 is a flowchart of an authorization process according to an embodiment of the present invention. As shown in FIG. 20, the process includes the following steps:

In step S2002, the home proximity server obtains the currently registered PLMN information and/or the current peer PLMN information (ie, the registered PLMN information and the peer PLMN information corresponding to the registered PLMN information) from the HSS. It should be noted that the PLMN information may be Is a list of identifiers used to identify the currently registered PLMN, and the peer PLMN information may also be a list of identifiers used to identify the peer PLMN.

In step S2004, the terminal brings the PLMN information currently camped by the user to the belonging proximity server in the service request (for example, the broadcast request, the interception request, and the matching request).

Step S2006, the home proximity server receives the PLMN information currently camped by the user, and determines whether the resident PLMN information is also obtained from the HSS last time (before the service request) the registered PLMN information and/or the peer PLMN list. in. The acquisition process of the peer PLMN list is described later in FIG.

In step S2008, if the PLMN information currently camped by the user is in the list of registered PLMNs and/or peer PLMNs that were last acquired from the HSS, there is no need to go to the HSS for authorization.

Step S2010, otherwise, the HSS is re-authorized, and the new registered PLMN information and/or the peer PLMN list (ie, the currently registered PLMN information and the currently registered PLMN information) are re-acquired from the HSS. Corresponding current peer-to-peer PLMN information), it should be noted that the new registered PLMN information and/or peer PLMN list refers to the previously saved registered PLMN information and/or peer PLMN information according to the resident PLMN information. Updated registered PLMN information and/or peer PLMN information.

Preferred embodiments of the present invention will now be described based on a D2D communication flow.

21 is a flowchart of a broadcast request for authorization processing according to a preferred embodiment of the present invention. As shown in FIG. 21, the flow includes the following steps:

In step S2102, the terminal A obtains an application identifier from the operator, and the application identifier is only allowed to be used by the UE A.

Step S2104: If the terminal A wants to broadcast itself by using the wireless resource of the operator, so that other people can discover themselves, establish a connection with the network, and send a broadcast request message to the proximity server, where the request includes the application identifier that is desired to be broadcast, An indication of terminal identification and announcing, and resident PLMN information (e.g., PLMN identity) currently hosted by the terminal. The terminal A generates the identity of the home proximity server through the PLMN identity that it belongs to, and obtains the IP address of the home server by using the DNS lookup. The terminal identifier is IMSI or MSISDN. When the location is updated, the terminal A receives the registered PLMN identity and/or a peer PLMN identity list from the core network, including one or more peer PLMN identifiers. The terminal learns all the PLMN identifiers supported by the current base station by listening to the broadcast message of the base station. The terminal preferably resides in the registered PLMN; if the current base station does not support the registered PLMN, the terminal selects the PLMN supported by the base station and in the peer PLMN list if the base station does not support the registered PLMN and all the peer PLMNs For the list, the terminal needs to re-initiate the location update procedure, re-register with the core network and obtain a new registered PLMN identity and/or a peer PLMN identity list.

Step S2106: After the home proximity server receives the broadcast request, if there is no user context, request the home subscriber server to send a subscription request with the user identifier. In this message, it is also possible to carry the currently resident PLMN identity carried by the terminal.

Step S2108: If the PLMN identifier currently camped by the terminal is not carried in step S2106, the HSS returns the D2D subscription information of the user to the home proximity server, and the PLMN and/or the peer PLMN list currently registered by the terminal (ie, the currently registered PLMN information) And/or current peer PLMN information). The affiliation server determines whether the PLMN currently camped by the terminal is in the list of PLMNs and/or peer PLMNs currently registered by the terminal provided by the HSS. If yes, it further determines whether access is permitted according to the subscription information, otherwise access is not allowed. At this time, the HSS may send all the D2D data to the home proximity server, and the home proximity server performs the access check.

If the step S2106 carries the PLMN information currently residing by the terminal, the home subscriber server HSS can determine whether the PLMN currently camped by the user is allowed, for example, checking whether the currently camped PLMN is currently registered. Whether it is allowed in the PLMN information, or whether it is in the current peer PLMN list, otherwise it is not allowed. If not allowed, the failure is returned, and the home subscriber server HSS is allowed to return the subscription information of the terminal in the subscription response, and in the case of roaming, the home subscriber server also returns the visited PLMN identifier and/or the peer PLMN identifier currently registered by the user. List. At this time, the HSS may issue different subscription data according to different PLMNs where the terminal currently resides.

The home proximity server saves the terminal currently registered PLMN information and/or the current peer PLMN list obtained from the HSS.

When the subsequent terminal initiates the D2D service request message (broadcast request, interception request, matching request) again, the home proximity server checks whether the current resident PLMN of the user is in the registered PLMN and/or the peer PLMN list, and then does not need to To the HSS re-authorization, otherwise step S2106 and step S2108 need to be performed to re-authorize the HSS and obtain new subscription data.

Step S2110: According to the subscription information belonging to the proximity server, determine that the terminal is allowed to perform the D2D service, and the user does sign the application identifier, the user context is created, and a temporary identifier code A and corresponding are assigned to the application identifier sent by the user. Validity period.

Step S2112: The home proximity server generates an identifier of the visited proximity server according to the visited PLMN identifier obtained by the PLMN where the terminal is located in the step S2104, and obtains the IP address of the proximity server through the DNS lookup, and then A broadcast request authorization message is sent to the visited proximity server, with an application identifier, a terminal identifier, and an assigned temporary identifier code A and a corresponding validity period.

In step S2114, the visited proximity server authorizes the current broadcast request, and records the received application identifier, the terminal identifier, and the assigned temporary identifier code A and the corresponding validity period, so as to perform subsequent billing. The visited proximity server returns a broadcast request authorization response message.

Step S2116: After receiving the local short-distance server to authorize the current broadcast request, the proximity server returns the assigned temporary identifier code A and the corresponding validity period to the UE A.

In step S2118, the terminal A acquires radio resources from the current registration network. The user-registered network base station can broadcast the available D2D radio resources, and the terminal obtains the available D2D radio resources through the radio resource control (Radio Resource Control, RRC for short) process.

In step S2120, the terminal A broadcasts the obtained code A on the acquired radio resource. In order to improve efficiency, the terminal A sets a timer, which is periodically broadcast during the validity period indicated by step S2116.

Through the above process, the home proximity server obtains the resident PLMN information from the terminal, performs an authorization check in the HSS, or performs an authorization check by the home proximity server according to the subscription data provided by the HSS, and when the subsequent resident PLMN information is sent from the terminal. The HSS is re-authorized when not in the current registered PLMN information and/or the current peer PLMN list obtained from the HSS. In addition, it is also possible to implement authorization at the terminal visited, and effectively implement D2D control and charging for the visited network.

FIG. 22 is a flowchart of a listening request for authorization processing according to a preferred embodiment of the present invention. As shown in FIG. 22, the flow includes the following steps:

In step S2202, the terminal B acquires the application identifier of the terminal A from the operator or a third party.

Step S2204: If the terminal B wants to discover the terminal A, the terminal establishes a connection with the network, and sends a monitoring request to the proximity server, where the request includes the terminal A application identifier, the terminal B terminal identifier, and the terminal currently camped on the terminal. PLMN logo. The terminal B generates the identity of the proximity server through the PLMN identity that it belongs to, and obtains the IP address of the home server by the DNS lookup. The terminal identifier is IMSI or MSISDN. Terminal B acquires the resident PLMN and is similar to that in step S2104.

Step S2206: After receiving the discovery request, the proximity server requests, if there is no user context, to send a subscription request to the home subscriber server, with a user identifier, and in the message, may also carry the currently camped PLMN brought by the terminal. information.

Step S2208: If the PLMN information currently camped by the terminal is not carried in step S2206, the HSS returns the D2D subscription information of the user to the home proximity server, and the terminal currently registers the PLMN and/or the current peer PLMN list. The affiliation server determines whether the PLMN currently camped by the terminal is in the PLMN and/or the current peer PLMN list currently registered by the terminal provided by the HSS. If yes, it further determines whether access is permitted according to the subscription information, otherwise access is not allowed. At this time, the HSS may send all the D2D data to the home proximity server, and the home proximity server performs the access check.

If the step S2206 carries the PLMN information currently camped on by the terminal, the home subscriber server HSS determines whether the PLMN currently camped by the user is allowed, such as checking whether the currently camped PLMN is in the currently registered PLMN information, or whether it is currently peer-to-peer. Within the PLMN list, yes, otherwise not allowed. The home subscriber server returns the subscription information of the terminal in the subscription response, and in the case of roaming, the home subscriber server also returns the visited PLMN identity and/or the peer PLMN identity list currently registered by the user. At this time, the HSS may issue different subscription data according to different PLMNs where the terminal currently resides.

When the subsequent terminal initiates the D2D service request message (broadcast request, interception request, matching request) again, the home proximity server checks whether the current resident PLMN of the user is in the registered PLMN and/or the peer PLMN. In the list, there is no need to re-authorize the HSS. Otherwise, steps S2206 and S2208 need to be performed to re-authorize the HSS and obtain new subscription data.

Step S2210: Create a user context according to the fact that the subscription information belongs to the proximity server and determines that the terminal is allowed to perform the D2D service. If the destination application identifier requested by the terminal is another PLMN, the IP address of the destination close-range server is obtained through the DNS according to the provided PLMN information, and then the interception request is sent to the destination close-range server, with the terminal A application identifier that is desired to be discovered. Terminal B terminal identification. If the destination application identifier requested by the terminal is the home PLMN, step S2212 is not performed, and the home proximity server directly finds the corresponding code A and the corresponding validity period according to the terminal A application identifier.

In step S2212, the destination proximity server finds the corresponding code A and the corresponding validity period according to the terminal A application identifier, and returns the information to the home proximity server.

Step S2214: The home proximity server generates an identifier of the visited proximity server according to the visited PLMN identifier obtained in step S604, and obtains the visited proximity server IP address through the DNS lookup, and then sends a broadcast request to the visited proximity server. Authorization message with application identification, terminal identification, code A and corresponding validity period.

In step S2216, the visited proximity server authorizes the current interception request, and records the received application identifier, the terminal identifier, and the code A and the corresponding validity period, so as to perform subsequent billing. The visited proximity server returns a listening authorization request response message.

In step S2218, the home proximity server sends the obtained code A and validity period to the terminal B.

In step S2220, the terminal B acquires radio resources. The terminal B configures the radio resource corresponding to each PLMN that the D2D monitors, and the terminal can listen to all the radio resources within the valid value indicated by step S2218.

In step S2222, the terminal B listens to the code A, and successfully finds that the terminal A is in the adjacent area.

If the terminal B brings up a type of application in step S2204, step S2210 may return a mask. In this case, if the code monitored in step S2222 matches the template, such as the first few bits of the code and the If the template is completely matched, the terminal B needs to initiate a matching process to learn the application identifier corresponding to the code.

FIG. 23 is a flowchart of a matching request for authorization processing according to a preferred embodiment of the present invention. As shown in FIG. 23, the flow includes the following steps:

In step S2302, the terminal B listens to the code A, and the code A matches the mask, but the terminal B does not recognize the code A.

In step S2304, the terminal B establishes a connection with the network, and sends a matching request to the home proximity server, where the request includes the found code A, the terminal B terminal identifier, and the PLMN identifier currently hosted by the terminal. The terminal B generates the identity of the proximity server through the PLMN identity that it belongs to, and obtains the IP address of the home server by the DNS lookup. The terminal identifier is IMSI or MSISDN. Terminal B acquires the resident PLMN and is similar to that in step S2004.

Step S2306: After receiving the discovery request, the proximity server requests the home subscriber server to send a subscription request with the user identifier if there is no user context. In this message, it is also possible to carry the currently camped PLMN information carried by the terminal.

Step S2308: If the PLMN information currently camped by the terminal is not carried in step S2306, the HSS returns the D2D subscription information of the user to the home proximity server, and the PLMN and/or the peer PLMN list currently registered by the terminal. The affiliation server determines whether the PLMN currently camped by the terminal is in the list of PLMNs and/or peer PLMNs currently registered by the terminal provided by the HSS. If yes, it further determines whether access is permitted according to the subscription information, otherwise access is not allowed. At this time, the HSS may send all the D2D data to the home proximity server, and the home proximity server performs the access check.

If the PLMN information currently camped by the terminal is carried in step S2306, the home subscriber server HSS determines whether the PLMN currently camped by the user is allowed, such as checking whether the currently camped PLMN is in the currently registered PLMN information, or whether it is in the peer PLMN. Within the list, yes, otherwise not allowed. The home subscriber server returns the subscription information of the terminal in the subscription response, and in the case of roaming, the home subscriber server also returns the visited PLMN identity and/or the peer PLMN identity list currently registered by the user. At this time, the HSS may issue different subscription data according to different PLMNs where the terminal currently resides.

When the subsequent terminal initiates the D2D service request message (broadcast request, interception request, matching request) again, the home proximity server checks whether the current resident PLMN of the user is in the registered PLMN or the peer PLMN list, and then does not need to go to the HSS. Re-authorization, otherwise step S2306 and step S2308 need to be performed to re-authorize the HSS and obtain new subscription data. The user context is created according to the fact that the subscription information belongs to the proximity server and determines that the terminal is allowed to perform the D2D service. The belonging close distance server determines whether the visited proximity server has authorized the current monitoring, and if so, skips step S2310 and step S2312.

Step S2310: The home proximity server generates an identifier of the visited proximity server according to the visited PLMN identifier obtained by the PLMN where the terminal is located in the step S2304, and obtains the IP address of the proximity server through the DNS lookup, and then Sending a broadcast request authorization message to the visited proximity server, with an application identifier, a terminal identifier, and code A.

In step S2312, the visited proximity server authorizes the current listening request, and records the received application identifier, terminal identifier, and code A for subsequent charging. The visited proximity server returns a listening authorization request response message.

Step S2314: If the PLMN information in the code A that is monitored is the home PLMN, the home proximity server obtains the terminal A application identifier and the validity period according to the code A that is sent. If the monitored PLMN information in the CodeA indicates another PLMN, the home proximity server obtains the destination short-range server IP address through the DNS according to the destination PLMN information, and sends a matching request message with the code A and the terminal B terminal identifier.

In step S2316, the destination proximity server obtains the terminal A application identifier and the validity period according to the received Code A.

In step S2318, the destination proximity server returns the acquired terminal A application identifier and validity period to the home proximity server.

In step S2320, the home proximity server sends a matching report to the visited proximity server A of the terminal A, with the terminal A application identifier and the user identifier, and the visited proximity server A saves the information and performs charging.

Step S2322: The home proximity server sends a matching report to the visited proximity server B of the terminal B, with the terminal A application identifier and the user identifier B, and the visited proximity server B saves the information and performs charging.

In step S2324, the home proximity server returns the terminal A application identifier and the validity period to the UE B, and the UE B successfully discovers that the terminal A is in the adjacent area. Within this validity period, both the code A and the terminal A application identifiers match.

FIG. 24 is a flowchart of obtaining a peer PLMN by a UE and an HSS according to a preferred embodiment of the present invention. As shown in FIG. 24, the process includes the following steps:

Step S2402: The terminal accesses an originating or location update request by using an Evolved Telecommunication System Radio Access Network (E-UTRAN), and after receiving the message, the MME acquires the PLMN information selected therein. The PLMN information may be selected by the terminal (supporting the terminal that selects the PLMN) or selected by the base station (the terminal that does not support the selection of the PLMN). The terminal also brings its own ability to support D2D services to the MME.

Step S2404: After the MME completes the authentication and other verification, the MME initiates a location update request to the HSS, where the PLMN information obtained in step S2402 is carried as the PLMN information registered by the terminal; if the terminal indicates that the D2D capability is supported, and the MME is configured with the registered PLMN Corresponding peer-to-peer PLMN list, the location update request message initiated by the HSS also carries a list of peer PLMNs corresponding to the PLMN, including one or Multiple peer PLMNs. The so-called peer PLMN list means that all PLMNs in the list are equivalent to the registered PLMN.

Steps S2406 to S2408, the HSS completes the necessary check. If the terminal is allowed to access from the registered PLMN carried by the MME, the registered PLMN and the peer PLMN list are saved, and the user's subscription data, including the D2D subscription data, is inserted into the MME.

If the MME indicates skipping the insertion of the subscription data (ie, the MME may have obtained the subscription data), the Insert Contract Data portion may be skipped, but the HSS will still maintain the Registered PLMN and/or the Peer PLMN list.

In step S2410, the HSS returns a location update response to the MME.

In step S2412, the MME completes the D2D authorization and the contract check according to the subscription data. The remaining steps of performing the attach and location update, the MME sends the registered PLMN and/or peer PLMN information to the terminal.

It will be apparent to those skilled in the art that the various modules or steps of the present invention described above can be implemented by a general-purpose computing device that can be centralized on a single computing device or distributed across a network of multiple computing devices. Alternatively, they may be implemented by program code executable by the computing device such that they may be stored in the storage device by the computing device and, in some cases, may be different from the order herein. The steps shown or described are performed, or they are separately fabricated into individual integrated circuit modules, or a plurality of modules or steps thereof are fabricated as a single integrated circuit module. Thus, the invention is not limited to any specific combination of hardware and software.

The above description is only the preferred embodiment of the present invention, and is not intended to limit the present invention, and various modifications and changes can be made to the present invention. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and scope of the present invention are intended to be included within the scope of the present invention.

Industrial applicability

As described above, the above embodiments and preferred embodiments solve the problem that the HSS cannot perform authorization control on the user when moving between the PLMNs in the related art, thereby achieving the HSS when the user moves between the PLMNs. The effect of effective authorization control for users.

Claims

An authorization processing method, including:

Obtaining resident PLMN information of a public land mobile network PLMN currently camped on by the user equipment UE that initiates the service request;

Determining whether the resident PLMN information is stored in the registered PLMN information stored on the proximity server and/or the peer PLMN information corresponding to the registered PLMN;

If the determination result is yes, the service request of the UE is authorized according to the resident PLMN information; and/or, if the determination result is no, according to the current registration obtained from the home subscriber server HSS The PLMN information and/or the current peer PLMN information corresponding to the currently registered PLMN information performs authorization processing on the service request of the UE.
The method according to claim 1, wherein the service request of the UE is performed according to the current registered PLMN information acquired from the HSS and/or the current peer PLMN information corresponding to the currently registered PLMN information. Authorization processing includes:

Determining whether the resident PLMN information is in the current registered PLMN information and/or the current peer PLMN information;

If the determination result is yes, the service request of the UE is authorized according to the resident PLMN information; and/or, if the determination result is no, the service request of the UE is rejected.
The method of claim 1, wherein the obtaining the resident PLMN information of the PLMN currently camped by the UE that initiates a service request comprises:

Receiving a service request message from the UE, where the service request message carries the resident PLMN information of the PLMN currently camped by the UE.
An authorization processing method, including:

Obtaining resident PLMN information of a public land mobile network PLMN currently camped on by the user equipment UE;

Transmitting the acquired resident PLMN information to a proximity server in a service request, wherein the resident PLMN information is used by the proximity server to determine that the resident PLMN information is saved on the proximity server In the registered PLMN information and/or the peer PLMN information of the registered PLMN information, and/or the home subscriber server HSS determines that the resident PLMN information is currently When registering in the PLMN information and/or the current peer PLMN information corresponding to the currently registered PLMN information, the proximity server and/or the HSS perform authorization processing on the service request of the UE.
The method according to claim 4, wherein at least one of the following resides in the PLMN before acquiring the resident PLMN information of the PLMN currently camped by the UE:

Residing in the PLMN included in the registered PLMN information and/or the currently registered PLMN information;

And when the base station does not support the registered PLMN information and/or the PLMN included in the currently registered PLMN information, camping on the base station support and included in the peer PLMN information and/or the current peer PLMN information In PLMN;

Residing in the PLMN included in the base station not supporting the registered PLMN information and/or the currently registered PLMN information, and not supporting the peer PLMN information and/or the PLMN included in the current peer PLMN information In the PLMN that is reselected after initiating the location request.
An authorization processing method, including:

Receiving an authorization request message of the user equipment UE that initiates the service request from the proximity server;

Determining whether the authorization request message carries the resident PLMN information of the public land mobile network PLMN currently camped by the UE;

If the result of the determination is yes, the service request of the UE is authorized according to the current registered PLMN information and/or the current peer PLMN information corresponding to the currently registered PLMN information; and/or, in the determination result is no In case, the currently registered PLMN information and/or the current peer PLMN information is sent to the proximity server.
The method according to claim 6, wherein the authorization processing of the service request of the UE according to the current registered PLMN information and/or the current peer PLMN information corresponding to the currently registered PLMN information comprises:

Determining whether the resident PLMN information is in the current registered PLMN information and/or in the current peer PLMN information;

If the determination result is yes, the service request of the UE is authorized; and/or, if the determination result is no, the service request of the UE is rejected.
The method of claim 7, wherein after authorizing the service request of the UE, the method further comprises:

Transmitting the currently registered PLMN information and/or the current peer PLMN information to the proximity server.
The method according to any one of claims 6 to 8, wherein the service request to the UE is performed according to the current peer PLMN information corresponding to the current registered PLMN information and/or the currently registered PLMN information Before performing authorization processing, it also includes:

Receiving a location update request of the mobility management entity MME, where the location update request carries current registered PLMN information and/or the current peer PLMN information.
An authorization processing device comprising:

a first obtaining module, configured to acquire resident PLMN information of a public land mobile network PLMN currently camped by the user equipment UE that initiates the service request;

a first determining module, configured to determine whether the resident PLMN information is stored in the registered PLMN information and/or the peer PLMN information corresponding to the registered PLMN;

a first processing module, configured to perform authorization processing on the service request of the UE according to the resident PLMN information if the determination result of the first determining module is yes; and/or, the second processing module, If the result of the first determining module is negative, the UE is configured according to the current registered PLMN information acquired from the home subscriber server HSS and/or the current peer PLMN information corresponding to the current registered PLMN information. The business request is authorized for processing.
The apparatus of claim 10, wherein the first processing module comprises:

a first determining unit, configured to determine whether the resident PLMN information is in the current registered PLMN information and/or the current peer PLMN information;

a first authorization unit, configured to authorize, according to the resident PLMN information, a service request of the UE, if the determination result of the first determining unit is yes; and/or, the first rejecting unit, setting In case the determination result of the first determining unit is no, the service request of the UE is rejected.
The apparatus of claim 10, wherein the first obtaining module comprises:

The first receiving unit is configured to receive a service request message from the UE, where the service request message carries the resident PLMN information of the PLMN currently camped by the UE.
A proximity server comprising the apparatus of any one of claims 10 to 12.
An authorization processing device comprising:

a second acquiring module, configured to acquire resident PLMN information of a public land mobile network PLMN currently camped by the user equipment UE;

a first sending module, configured to send the acquired resident PLMN information to a proximity server in a service request, where the resident PLMN information is used by the proximity server to determine the resident PLMN information In the registered PLMN information stored on the proximity server and/or the peer PLMN information of the registered PLMN information, and/or the home subscriber server HSS determines that the resident PLMN information is in the currently registered PLMN information and/or When the current registered PLMN information is in the current peer PLMN information, the proximity server and/or the HSS perform authorization processing on the service request of the UE.
The apparatus of claim 14, further comprising a resident module configured to reside in the PLMN by at least one of:

Residing in the PLMN included in the registered PLMN information and/or the currently registered PLMN information;

And when the base station does not support the registered PLMN information and/or the PLMN included in the currently registered PLMN information, camping on the base station support and included in the peer PLMN information and/or the current peer PLMN information In PLMN;

Residing in the PLMN included in the base station not supporting the registered PLMN information and/or the currently registered PLMN information, and not supporting the peer PLMN information and/or the PLMN included in the current peer PLMN information In the PLMN that is reselected after initiating the location request.
A user equipment UE comprising: the apparatus of any one of claims 14 to 15.
An authorization processing device comprising:

a first receiving module, configured to receive an authorization request message of a user equipment UE that initiates a service request from a proximity server;

a second determining module, configured to determine whether the authorization request message carries the resident PLMN information of the public land mobile network PLMN currently camped by the UE;

a third processing module, configured to: in case the determination result of the second determining module is yes, the current peer PLMN corresponding to the current registered PLMN information and/or the currently registered PLMN information The information is authorized to process the service request of the UE; and/or the fourth processing module is configured to: if the determination result of the second determining module is negative, the current registered PLMN information and/or The current peer PLMN information is sent to the proximity server.
The apparatus of claim 17, wherein the third processing module comprises:

a second determining unit, configured to determine whether the resident PLMN information is in the current registered PLMN information and/or in the current peer PLMN information;

a second authorization unit, configured to authorize a service request of the UE if the determination result of the second determination unit is yes; and/or, the second rejection unit is set to be in the second determination If the judgment result of the unit is no, the service request of the UE is rejected.
The apparatus of claim 18, wherein the third processing module further comprises:

And a sending unit, configured to send the current registered PLMN information and/or the current peer PLMN information to the proximity server.
The apparatus according to any one of claims 17 to 19, further comprising:

The second receiving module is configured to receive a location update request of the mobility management entity MME, where the location update request carries current registered PLMN information and/or the current peer PLMN information.
A home subscriber server comprising the apparatus of any one of claims 17 to 20.