WO2016131331A1

WO2016131331A1 - Network accessing method and apparatus

Info

Publication number: WO2016131331A1
Application number: PCT/CN2015/097291
Authority: WO
Inventors: 莫涛
Original assignee: 中兴通讯股份有限公司
Priority date: 2015-07-16
Filing date: 2015-12-14
Publication date: 2016-08-25
Also published as: CN107040975A

Abstract

Provided are a network accessing method and apparatus. The method comprises: processing an access request from a user equipment (UE); obtaining a public land mobile network (PLMN) selected by the UE; if the PLMN selected by the UE is a prohibited PLMN, then after the UE successfully accesses a network, sending to the UE a radio resource control (RRC) release message carrying no idle mode mobile control information (IMMCI).

Description

Network access method and device

Technical field

This application relates to, but is not limited to, the field of wireless communication technology.

Background technique

In some places with high security requirements, it is often desirable to communicate only through the predetermined network provided by the site, even if there are other network signals. However, in the related art, the base station covering the location can control the user to prohibit access to some networks, but cannot control the users to access the prohibited networks through other base stations.

With the development of mobile communication technologies, more and more enterprises choose to use Long Term Evolution (LTE) technology to set up wireless private networks (hereinafter referred to as private networks) to control the users in the private network coverage. .

For example, a private network is set up in a high-security technology company, a prison, etc., and the coverage of the private network overlaps with the coverage of the public network; in the coverage of the private network, the terminal of the private network user uses the private network or the public network communication. The terminals of the external public network users use the public network communication. However, the private network administrators often hope that the private network users and the public network users can not communicate through the public network even if they can search for the public network signal. To prevent security breaches.

However, the coverage of the private network is adjacent to or overlaps with the public network. In the coverage of the private network, the public network user can still access the public network through the public network base station.

Summary of the invention

The following is an overview of the topics detailed in this document. This Summary is not intended to limit the scope of the claims.

The present invention provides a network access method and apparatus for solving the related art, in the coverage of a base station, the base station can control users to prohibit access to some networks, but cannot control users to access these prohibited networks through other base stations. The problem.

A network access method includes: processing an access request of a user equipment UE; acquiring the UE The selected public land mobile network PLMN; if the PLMN selected by the UE is a forbidden PLMN, after the UE network access is successful, the radio resource control RRC that does not carry the idle state mobile control information IMMCI is sent to the UE. Release the message.

The acquiring the PLMN selected by the UE includes: receiving an RRC setup complete message sent by the UE when establishing an RRC connection; and extracting, by the RRC connection setup complete message, the PLMN selected by the UE; If the PLMN selected by the UE is a forbidden PLMN, after the UE network access succeeds, the RRC release message not carrying the IMMCI is sent to the UE, including: if it is determined that the extracted PLMN selected by the UE is prohibited The PLMN directly sends an RRC release message that does not carry the IMMCI to the UE.

The acquiring the PLMN selected by the UE includes: receiving a handover request message sent by the source base station of the UE when performing the X2 interface cell handover; and extracting, by the handover request message, the PLMN selected by the UE; If the PLMN selected by the UE is a forbidden PLMN, after the UE network access succeeds, the RRC release message not carrying the IMMCI is sent to the UE, including: if it is determined that the extracted PLMN selected by the UE is The forbidden PLMN sends an RRC release message that does not carry the IMMCI to the UE after the UE cell handover is completed.

The acquiring the PLMN selected by the UE includes: obtaining the PLMN supported by the mobility management entity MME accessed by the UE when performing the S1 interface cell handover; wherein the MME accessed by the UE supports only one PLMN, where The PLMN supported by the MME that the UE accesses is the PLMN selected by the UE; if the PLMN selected by the UE is a prohibited PLMN, after the UE network access is successful, the UE is sent without carrying the IMMCI. The RRC release message includes: if it is determined that the PLMN supported by the MME is a prohibited PLMN, after the UE cell handover is completed, sending an RRC release message that does not carry the IMMCI to the UE.

The acquiring the PLMN selected by the UE includes: receiving an RRC connection re-establishment complete message sent by the UE when re-establishing an RRC connection; and extracting, by the RRC connection re-establishment complete message, the PLMN selected by the UE If the PLMN selected by the UE is a forbidden PLMN, after the UE network access is successful, sending an RRC release message that does not carry the IMMCI to the UE, including: if it is determined that the extracted UE is selected If the PLMN is a forbidden PLMN, the RRC release message that does not carry the IMMCI is directly sent to the UE.

A network access device, comprising: a processing module, configured to: process an access request of a user equipment UE; and an acquiring module, configured to: acquire a public land mobile network PLMN selected by the UE; and release a module, set to: When the PLMN selected by the UE is a prohibited PLMN, after the UE network access is successful, the radio resource control RRC release message that does not carry the idle state mobility control information IMMCI is sent to the UE.

The acquiring module is configured to: when an RRC connection is established, receive an RRC setup complete message sent by the UE; and extract, from the RRC connection setup complete message, a PLMN selected by the UE; the release module And is configured to: when it is determined that the extracted PLMN selected by the UE is a prohibited PLMN, directly send an RRC release message that does not carry the IMMCI to the UE.

The acquiring module is configured to: when performing the X2 interface cell handover, receive a handover request message sent by the source base station of the UE; and extract, from the handover request message, the PLMN selected by the UE; The release module is configured to: when it is determined that the extracted PLMN selected by the UE is a prohibited PLMN, after the UE cell handover is completed, send an RRC release message that does not carry the IMMCI to the UE.

The acquiring module is configured to: when performing the S1 interface cell handover, obtain a PLMN supported by the mobility management entity MME that is accessed by the UE; where the MME accessed by the UE supports only one PLMN, The PLMN supported by the UE is the PLMN selected by the UE; the release module is configured to: after determining that the PLMN supported by the MME is a prohibited PLMN, after the UE cell handover is completed. And sending an RRC release message that does not carry the IMMCI to the UE.

The acquiring module is configured to: when the RRC connection is re-established, receive an RRC connection re-establishment complete message sent by the UE; and in the RRC connection re-establishment complete message, extract the PLMN selected by the UE; The releasing module is configured to: when it is determined that the extracted PLMN selected by the UE is a prohibited PLMN, directly send an RRC release message that does not carry the IMMCI to the UE.

A computer readable storage medium storing computer executable instructions for performing the method of any of the above.

The embodiment of the present invention pre-sets the forbidden PLMN. When the UE attempts to access the network, the UE is allowed to access the network. After the UE accesses the network, if the PLMN selected by the UE is a prohibited PLMN, the UE is released, and the UE is released. When the UE is released, the IMMCI information is not provided, so that when the UE reselects the cell, the UE still has a stronger base cell. The embodiment of the present invention can effectively control the UE to access the forbidden network through the base station or other base stations, thereby improving network security. Further, the embodiment of the present invention can prevent the public network user from accessing the public network and the private network within the coverage of the private network, and prohibiting the private network user from accessing the public network within the coverage of the private network, thereby avoiding the trigger in the private network. Security issue.

Other aspects will be apparent upon reading and understanding the drawings and detailed description.

BRIEF abstract

1 is a flowchart of a network access method according to a first embodiment of the present invention;

2A-2C are schematic diagrams of network coverage of a private network and a public network according to a first embodiment of the present invention;

3 is a flowchart of a network access method according to a second embodiment of the present invention;

4 is a sequence diagram of a network access method according to a second embodiment of the present invention;

FIG. 5 is a flowchart of a network access method according to a third embodiment of the present invention; FIG.

6 is a sequence diagram of a network access method according to a third embodiment of the present invention;

FIG. 7 is a flowchart of a network access method according to a fourth embodiment of the present invention; FIG.

FIG. 8 is a sequence diagram of a network access method according to a fourth embodiment of the present invention; FIG.

Figure 9 is a structural diagram of a network access apparatus according to a fifth embodiment of the present invention.

Embodiments of the invention

The embodiment of the present invention pre-sets a public land mobile network (PLMN) that is forbidden. When a user equipment (User Equipment, UE for short) attempts to access the network, the UE is allowed to access the network first, and then the UE is selected according to the UE. Whether the PLMN is a prohibited PLMN, determining whether to allow the UE to camp, if the PLMN selected by the UE is a prohibited PLMN, Then the UE is released, and the IMMCI information is not returned to the UE, so that the UE is always in the state of requesting access to the network.

The embodiment of the present invention can effectively prevent the UE from accessing the forbidden network through the base station or other base stations, thereby improving network security. Further, the embodiment of the present invention can prevent the public network user from accessing the public network and the private network within the coverage of the private network, and the embodiment of the present invention can also organize the private network user to access the public network within the coverage of the private network, thereby avoiding Security issues raised within the private network.

Embodiments of the present invention will be described in detail below with reference to the accompanying drawings.

Embodiment 1

This embodiment provides a network access method. As shown in FIG. 1, it is a flowchart of a network access method according to a first embodiment of the present invention. This embodiment is performed on the base station side.

Step S110, processing an access request of the UE.

The UE is a UE of a public network user or a UE of a private network user.

The access request of the UE includes: a Radio Resource Control (RRC) connection request message, an S1 interface-based handover request message, an X2 interface-based handover request message, and an RRC connection re-establishment request message.

The signal strength of the base station is higher than that of the other base stations. When the UE attempts to access, the base station normally processes the access request of the UE, so that the UE can normally access the network selected by the UE. Further, when the UE moves from the cell of one base station to the cell of another base station, the base station with the highest signal strength is selected for network access, so as to obtain an optimal network environment.

Step S120: Acquire a PLMN selected by the UE.

When the UE attempts to access, the UE selects the PLMN that it needs to access in the maintained PLMN list. For example, the UE chooses to access China Mobile's 46000 network. Another example: UE chooses to access China Unicom's 46001 network. For another example: the UE chooses to access a dedicated network built based on LTE technology.

In the process of the UE requesting to establish an RRC connection, in the process of the UE switching from the cell of another base station to the cell of the local base station, the PLMN selected by the UE is acquired. Further, on the base station side, the PLMN restriction list is pre-configured. The PLMN restriction list includes information of PLMNs that are prohibited in the coverage area of the base station.

Step S130, determining whether the PLMN selected by the UE is a prohibited PLMN. If yes, go to step S140; if no, go to step S150.

The PLMN selected by the UE is matched in the pre-configured PLMN restriction list. If the matching is successful, if there is a PLMN that is the same as the PLMN selected by the UE in the PLMN restriction list, it indicates that the UE has selected the prohibited PLMN; if the matching fails, it indicates that the UE has selected the non-prohibited PLMN.

Step S140: After the UE network access is successful, send a radio resource control RRC connection release message that does not carry Idle mode mobility control information (IMMCI) to the UE.

The IMMCI can control the cell reselection of the UE, and control the UE to try to access the base station with weak signal when the base station that has the strongest access signal is successfully accessed.

If the IMMCI is not returned to the UE, the UE will continue to select the base station with the strongest signal according to its default algorithm for network access. In this way, the UE always tries to access the base station with the strongest access signal within the coverage of the base station, and does not consider other base stations, and the base station selects the blocked PLMN after the UE selects the connection, after the UE connects the prohibited PLMN. The UE is released immediately, so that the UE is always in the state of being connected to the network, and the communication service cannot be normally performed.

Step S150, allowing the UE to camp.

Since the PLMN selected by the UE is not a prohibited PLMN, it does not cause security problems within the coverage of the base station, and therefore, the UE is allowed to camp in the cell of the base station.

The base station in the embodiment of the present invention may be a private network base station. The private network base station can control the public network user (public network UE) in the private network coverage area according to the embodiment of the present invention, and the public network user is always in the unconnected network state, so that the public network user cannot access the private network area, nor Return to the public network, so that the public network users can not communicate in the private network coverage area. The private network base station can also control the private network user (private network UE) within the private network coverage area according to the embodiment of the present invention, and can only access the private network but cannot access the public network. 2A-2C are schematic diagrams of network coverage of a private network and a public network according to the first embodiment of the present invention. The private network cell is covered by the private network base station, and the public network cell is covered by the public network base station. The UE can move between the public network cell and the private network cell.

Embodiment 2

3 is a flow chart of a network access method according to a second embodiment of the present invention. 4 is a sequence diagram of a network access method according to a second embodiment of the present invention. This embodiment is performed on the private network base station side.

Step S310, when establishing an RRC connection, receiving an RRC connection setup complete message sent by the UE.

Step 1: Configure a PLMN restriction list on the private network base station eNodeB.

Step 2: The private network base station eNodeB receives an RRC connection request initiated by the UE in the private network cell (RRC Connection Request);

Step 3: The private network base station eNodeB establishes an RRC connection, and sends an RRC connection setup message to the UE (RRC Connection Setup);

Step 4: The UE sends an RRC Connection Setup Complete message to the private network base station eNodeB, and the UE accesses the selected PLMN.

Step S320, extracting, from the RRC connection setup complete message, the PLMN selected by the UE.

The RRC connection setup complete message carries the PLMN selected by the UE, and the PLMN selected by the UE is extracted in the RRC connection setup complete message.

Step S330, determining whether the PLMN selected by the UE is a prohibited PLMN. If yes, go to step S340; if no, go to step S350.

The PLMN carried in the RRC connection setup complete message is determined, and it is determined whether the PLMN selected by the UE exists in the PLMN restriction list. If it is determined that the extracted PLMN selected by the UE is a prohibited PLMN, the RRC release message not carrying the IMMCI is directly sent to the UE.

Step S340, the RRC Connection Release message (RRC Connection Release) that does not carry the IMMCI is sent to the UE.

In step S350, the RRC connection is maintained.

The RRC connection re-establishment process is similar to the embodiment, and the RRC connection re-establishment sent by the receiving UE is received. a request message; the private network base station re-establishes an RRC connection based on the RRC connection re-establishment request message, and receives an RRC connection re-establishment complete message sent by the UE; extracts a PLMN selected by the UE in the RRC connection re-establishment complete message; Whether the PLMN is a forbidden PLMN; if yes, the RRC connection is re-established, and the RRC connection release message not carrying the IMMCI is immediately sent to the UE; if not, the RRC connection is re-established.

Embodiment 3

FIG. 5 is a flowchart of a network access method according to a third embodiment of the present invention. FIG. 6 is a sequence diagram of a network access method according to a third embodiment of the present invention. This embodiment is executed on the target base station side.

The source side base station is referred to as the source base station, and the source eNodeB is the public network base station. The target eNodeB is a private network base station.

Step S510: Receive a handover request message (handover request) sent by the source base station of the UE when performing the X2 interface cell handover.

When the UE moves from the public network cell to the private network cell, the source base station of the UE decides to perform the cell handover based on the X2 interface. The source base station of the UE sends a handover request message to the target base station of the UE.

Step S520: Extract, from the handover request message, a PLMN selected by the UE.

The PLMN selected by the UE is carried in the GUMMI field of the handover request message, and the PLMN selected by the UE is extracted from the GUMMI field of the handover request message.

Step S530, determining whether the PLMN selected by the UE is a forbidden PLMN. If yes, go to step S540; if no, go to step S560.

Step S540, the UE is allowed to perform cell handover, and a handover request response message (handover request ack) is sent to the source base station of the UE, and the UE cell handover is completed.

Step S550: After the UE completes the cell handover, the UE sends an RRC Connection Release message (RRC Connection Release) that does not carry the IMMCI, and sends a UE context release message to the source base station of the UE.

Step S560, allowing the UE to camp in the private network cell. That is to say, the UE is allowed to perform normal X2 handover and resides in the private network cell.

Embodiment 4

FIG. 7 is a flowchart of a network access method according to a fourth embodiment of the present invention. FIG. 8 is a sequence diagram of a network access method according to a fourth embodiment of the present invention. This embodiment is executed on the target base station side.

In step S710, when performing the S1 interface cell handover, the handover request message sent by the Mobility Management Entity (MME) is received.

If the UE moves between cells of the same base station, the S1 interface-based handover (referred to as S1 handover) can be freely performed. If the UE moves between cells of different base stations, the source base station of the UE decides to perform the S1-based handover, as shown in FIG.

The MME in FIG. 8 includes a source MME and a target MME. Further, the source MME is configured for the source base station, and the target MME is configured for the target base station. That is to say, the target cell and the source cell in which the cell handover occurs are belong to different MMEs. If the MME is separately configured, the source base station sends a handover request message to the source MME, and the source MME sends a handover request message to the target base station.

Step S720, obtaining a PLMN supported by the MME accessed by the UE.

The UE is allowed to perform cell handover, and during the UE handover process, the PLMN supported by the MME accessed by the UE is obtained. In this embodiment, the MME accessed by the UE is a public network MME or a private network MME, and the MME accessed by the UE supports only one PLMN, and the PLMN supported by the MME accessed by the UE is the PLMN selected by the UE.

When configuring a network device, the PLMNs of the private network base station (target base station) and the public network base station (source base station) are planned to be different PLMNs; the private network base station supports the public network PLMN and the private network PLMN, and the public network PLMN is configured to prohibit the PLMN. The public network base station supports the public network PLMN. The MME on the core network side is also configured in a separate manner between the public network PLMN and the private network PLMN. Each MME supports only one PLMN (network shared MOCN mode). Therefore, the configured private network MME (target MME) and public network MME (target) The MME) supports only one PLMN, the private network MME supports the private network PLMN, and the public network MME supports the public network PLMN. Then, in this network configuration, the PLMN supported by the MME accessed by the UE is the same as the PLMN selected by the UE.

The private network base station can establish a connection with the private network MME, or can establish a connection with the public network MME, so that the private network base station can know whether the UE performs the S1 handover through the private network MME, or S1 handover by the network MME. If the UE is an S1 handover through the public network MME and the public network MME supports the public network PLMN, the PLMN selected by the UE must be a public network PLMN, that is, a PLMN that is prohibited on the private network base station side. If the UE is an S1 handover through the private network MME and the private network MME supports the private network PLMN, the PLMN selected by the UE must be a private network PLMN, that is, a PLMN that is not prohibited on the private network base station side.

Step S730, determining whether the PLMN supported by the MME, that is, the PLMN selected by the UE is a forbidden PLMN. If yes, go to step S740; if no, go to step S750.

Step S740, sending a handover request response message to the MME accessed by the UE.

After receiving the handover request response message, the MME sends a handover command message to the source base station of the UE.

Step S750, sending a handover notification message (handover Notify) to the MME accessed by the UE.

After receiving the handover notification message, the MME sends a UE context release message to the source base station of the UE, and the UE completes the cell handover.

Step S760, after the UE completes the cell handover, send an RRC connection release message that does not carry the IMMCI to the UE.

Step S770, allowing the UE to camp in the private network cell. That is to say, the UE is allowed to perform normal S1 handover and resides in the private network cell.

Embodiment 5

This embodiment provides a network access device. As shown in FIG. 9, it is a structural diagram of a network access apparatus according to a fifth embodiment of the present invention.

The device includes:

The processing module 910 is configured to: process an access request of the user equipment UE.

The obtaining module 920 is configured to: acquire the public land mobile network PLMN selected by the UE.

The release module 930 is configured to: after the UE network access succeeds, send the radio resource control that does not carry the idle state mobile control information IMMCI, after the UE network access is successful, in the case that the PLMN selected by the UE is a prohibited PLMN. RRC release message.

In an embodiment, the obtaining module 920 is configured to: when an RRC connection is established, receive an RRC setup complete message sent by the UE; and extract, from the RRC connection setup complete message, the PLMN selected by the UE. The release module 930 is configured to: when it is determined that the extracted PLMN selected by the UE is a prohibited PLMN, directly send an RRC release message that does not carry the IMMCI to the UE.

In another embodiment, the acquiring module 920 is configured to: when performing the X2 interface cell handover, receive a handover request message sent by the source base station of the UE; and extract the UE selection from the handover request message. PLMN. The release module 930 is configured to: after determining that the extracted PLMN selected by the UE is a prohibited PLMN, after the UE cell handover is completed, send an RRC release message that does not carry the IMMCI to the UE.

In another embodiment, the obtaining module 920 is configured to: when performing the S1 interface cell handover, obtain the PLMN supported by the mobility management entity MME accessed by the UE; wherein the MME accessed by the UE only supports A PLMN, the PLMN supported by the MME accessed by the UE is the PLMN selected by the UE. The release module 930 is configured to: after determining that the PLMN supported by the MME is a prohibited PLMN, send an RRC release message that does not carry the IMMCI to the UE after the UE cell handover is completed.

In another embodiment, the acquiring module 920 is configured to: when the RRC connection is re-established, receive an RRC connection re-establishment complete message sent by the UE; in the RRC connection re-establishment complete message, extract the The PLMN selected by the UE. The release module 930 is configured to: when it is determined that the extracted PLMN selected by the UE is a prohibited PLMN, directly send an RRC release message that does not carry the IMMCI to the UE.

The functions of the device in this embodiment have been described in the method embodiments shown in FIG. 1 to FIG. 8. Therefore, in the description of the present embodiment, reference may be made to the related description in the foregoing embodiment. This will not be repeated.

One of ordinary skill in the art will appreciate that all or a portion of the steps of the above-described embodiments can be implemented using a computer program flow, which can be stored in a computer readable storage medium, such as on a corresponding hardware platform (eg, The system, device, device, device, etc. are executed, and when executed, include one or a combination of the steps of the method embodiments.

Alternatively, all or part of the steps of the above embodiments may also be implemented using an integrated circuit. The steps may be separately fabricated into individual integrated circuit modules, or a plurality of modules or steps may be fabricated into a single integrated circuit module.

The devices/function modules/functional units in the above embodiments may be implemented by a general-purpose computing device, which may be centralized on a single computing device or distributed over a network of multiple computing devices.

When the device/function module/functional unit in the above embodiment is implemented in the form of a software function module and sold or used as a stand-alone product, it can be stored in a computer readable storage medium. The above mentioned computer readable storage medium may be a read only memory, a magnetic disk or an optical disk or the like.

Industrial applicability

The embodiment of the present invention can effectively control the UE to access the forbidden network through the base station or other base stations, thereby improving network security. In the embodiment of the present invention, the public network user can be prevented from accessing the public network and the private network within the coverage of the private network, and the private network user is prohibited from accessing the public network within the coverage of the private network, thereby avoiding the security problem caused in the private network. .

Claims

A network access method includes:

Processing an access request of the user equipment UE;

Obtaining a public land mobile network PLMN selected by the UE;

If the PLMN selected by the UE is a forbidden PLMN, after the UE network access is successful, the radio resource control RRC release message that does not carry the idle state mobility control information IMMCI is sent to the UE.
The method of claim 1 wherein

Obtaining the PLMN selected by the UE, including:

Receiving an RRC setup complete message sent by the UE when establishing an RRC connection;

Extracting, by the RRC connection setup complete message, the PLMN selected by the UE;

If the PLMN selected by the UE is a forbidden PLMN, after the UE network access is successful, the RRC release message that does not carry the IMMCI is sent to the UE, including:

If it is determined that the extracted PLMN selected by the UE is a prohibited PLMN, the RRC release message not carrying the IMMCI is directly sent to the UE.
The method of claim 1, wherein the acquiring the PLMN selected by the UE comprises:

Receiving a handover request message sent by the source base station of the UE when performing the X2 interface cell handover;

Extracting, by the handover request message, a PLMN selected by the UE;

If the PLMN selected by the UE is a forbidden PLMN, after the UE network access is successful, the RRC release message that does not carry the IMMCI is sent to the UE, including:

If it is determined that the extracted PLMN selected by the UE is a prohibited PLMN, after the UE cell handover is completed, an RRC release message not carrying the IMMCI is sent to the UE.
The method of claim 1, wherein the acquiring the PLMN selected by the UE comprises:

When the S1 interface cell handover is performed, the PLMN supported by the mobility management entity MME that is accessed by the UE is obtained. The MME supported by the UE supports only one PLMN, and the PLMN supported by the MME accessed by the UE is the Said PLMN selected by the UE;

If the PLMN selected by the UE is a forbidden PLMN, after the UE network access is successful, the RRC release message that does not carry the IMMCI is sent to the UE, including:

If it is determined that the PLMN supported by the MME is a prohibited PLMN, after the UE cell handover is completed, an RRC release message not carrying the IMMCI is sent to the UE.
The method of claim 1 wherein

Obtaining the PLMN selected by the UE, including:

Receiving an RRC connection reestablishment complete message sent by the UE when reestablishing an RRC connection;

Extracting, in the RRC connection re-establishment complete message, the PLMN selected by the UE;

If the PLMN selected by the UE is a forbidden PLMN, after the UE network access is successful, the RRC release message that does not carry the IMMCI is sent to the UE, including:

If it is determined that the extracted PLMN selected by the UE is a prohibited PLMN, the RRC release message not carrying the IMMCI is directly sent to the UE.
A network access device includes:

a processing module, configured to: process an access request of the user equipment UE;

An acquiring module, configured to: acquire a public land mobile network PLMN selected by the UE;

a release module, configured to: when the PLMN selected by the UE is a prohibited PLMN, after the UE network access succeeds, send, to the UE, a radio resource control RRC that does not carry idle state mobility control information IMMCI Release the message.
The apparatus of claim 6 wherein

The acquiring module is configured to: when an RRC connection is established, receive an RRC setup complete message sent by the UE; and extract, from the RRC connection setup complete message, a PLMN selected by the UE;

The releasing module is configured to: when it is determined that the extracted PLMN selected by the UE is a prohibited PLMN, directly send an RRC release message that does not carry the IMMCI to the UE.
The apparatus of claim 6 wherein

The acquiring module is configured to: when performing the X2 interface cell handover, receive a handover request message sent by the source base station of the UE; and extract, from the handover request message, the PLMN selected by the UE;

The releasing module is configured to: after determining that the extracted PLMN selected by the UE is a prohibited PLMN, send an RRC release message that does not carry an IMMCI to the UE after the UE cell handover is completed.
The apparatus of claim 6 wherein

The acquiring module is configured to: when performing the S1 interface cell handover, obtain the PLMN supported by the mobility management entity MME that is accessed by the UE; where the MME accessed by the UE supports only one PLMN, and the UE is connected. The PLMN supported by the incoming MME is the PLMN selected by the UE;

The releasing module is configured to: after determining that the PLMN supported by the MME is a prohibited PLMN, send an RRC release message that does not carry the IMMCI to the UE after the UE cell handover is completed.
The apparatus of claim 6 wherein

The acquiring module is configured to: when the RRC connection is re-established, receive an RRC connection re-establishment complete message sent by the UE; and in the RRC connection re-establishment complete message, extract the PLMN selected by the UE;

The releasing module is configured to: when it is determined that the extracted PLMN selected by the UE is a prohibited PLMN, directly send an RRC release message that does not carry the IMMCI to the UE.
A computer readable storage medium storing computer executable instructions for performing the method of any of claims 1-5.