WO2017113866A1

WO2017113866A1 - Access control method and apparatus

Info

Publication number: WO2017113866A1
Application number: PCT/CN2016/097958
Authority: WO
Inventors: 赵明
Original assignee: 中兴通讯股份有限公司
Priority date: 2015-12-30
Filing date: 2016-09-02
Publication date: 2017-07-06
Also published as: CN106937353A

Abstract

The invention discloses an access control method and an apparatus, where the method comprises: obtaining a received signal strength indicator (RSSI) value sent by user equipment (UE) and identification information periodically sent by the UE and used to identify the UE; determining, according to the RSSI value, a distance between the UE and a vehicle-mounted device if it is determined, according to the identification information, that the UE is connected to the vehicle-mounted device; and controlling network access of the UE according to the determined distance. The invention resolves a problem in the related art in which each user equipment cannot be controlled separately when the user equipment accesses a network, and achieves separate control over individual user equipment when the user equipment access a network, improving user experience.

Description

Access control method and device

Technical field

The present invention relates to the field of communications, and in particular to an access control method and apparatus.

Background technique

At present, with the rapid development of communication 3G/4G networks, more and more in-vehicle devices are integrated with wireless communication modules, and such in-vehicle device products are increasingly required to serve as control centers for the entire in-vehicle network. The extension of this control is also growing, in addition to the control of the equipment inside the vehicle, it also needs to be the network channel and control center of the mobile terminal of the passenger inside the vehicle. This requires higher and higher security requirements for in-vehicle equipment. There are two main considerations for the security of in-vehicle devices: unauthorized users cannot connect to the in-vehicle device and authorized users can automatically recycle the connection rights after leaving the car. For the first aspect of security considerations, the industry has a wealth of practices; but for the second aspect of security requirements, the current two commonly used implementation methods in the industry: based on LBS location data and based on reducing the radio frequency transmit power of in-vehicle devices, but these two The shortcomings of the implementation method are obvious.

The implementation based on the LBS location data is to take the location information of the connected device to obtain the distance from the in-vehicle device so as to exceed the limit value and take various recycling connection permission measures. The LBS method is a user equipment calculated by location. The method of location calculation has many limitations. To have GPS positioning, the terminal must be networked. This implementation relies mainly on location data, rather than the true distance; and the accuracy of the data connection must be established, which is not convenient for crowded parking lots or road traffic jams.

The realization of reducing the radio frequency transmission power is to reduce the Wi-Fi coverage by reducing the radio frequency transmission power of the in-vehicle device, and achieve the purpose of reclaiming the connection authority after the distance is exceeded. The problem with this implementation is that once the transmit power is reduced, all mobile devices connected to the in-vehicle device are affected and cannot be individually adjusted for individual devices.

For the problem that the user equipment accesses the network in the related art and cannot individually control each user equipment, an effective solution has not been proposed.

Summary of the invention

The embodiments of the present invention provide an access control method and apparatus, so as to solve at least the problem that the user equipment accesses the network in the related art, and the individual user equipment cannot be separately controlled.

According to an aspect of the present invention, an access control method is provided, including: acquiring a received signal strength indication (RSSI) value sent by a user equipment UE, and using the UE to periodically send The identifier information of the UE is identified; in the case that the UE is determined to be a UE connected to the in-vehicle device according to the identifier information, determining a distance between the UE and the in-vehicle device according to the RSSI value; The distance is controlled by the UE accessing the network.

Further, determining, according to the RSSI value, the distance between the UE and the in-vehicle device, determining, by using a preset mapping table of RSSI values and distances according to the RSSI value, determining that the user equipment is away from the in-vehicle device the distance.

Further, before acquiring the RSSI value sent by the user equipment UE and the identifier information used by the UE to periodically identify the UE, the method further includes: receiving, by the UE, requesting to allocate identifier information. a request message; assigning independent non-repeating identification information to the UE according to the request message.

Further, after the method of assigning the independent non-repeating identification information to the UE according to the request message, the method further includes: determining, according to the identifier information, whether the UE is a UE connected to the in-vehicle device; In case, the UE is notified to re-initiate the request message.

Further, the identification information is heartbeat token information.

Further, controlling, according to the determined distance, the UE accessing the network, by reducing a Wi-Fi negotiation rate or bandwidth between the in-vehicle device and the UE, according to the determined distance, The UE accesses the network for control.

Further, the method further includes: notifying the UE of the adjusted access capability of the UE, where the access capability includes whether the UE can access the in-vehicle device or the UE accesses the in-vehicle device and the vehicle The rate of data exchange between devices.

According to another aspect of the present invention, an access control apparatus is further provided, including: an acquiring module, configured to acquire a received signal strength indication RSSI value sent by a user equipment UE, and a periodicity sent by the UE for identification The determining information of the UE, where the determining module is configured to determine a distance between the UE and the in-vehicle device according to the RSSI value, when determining that the UE is a UE connected to the in-vehicle device according to the identifier information. And a control module configured to control the UE accessing the network according to the determined distance.

Further, the determining module includes: a determining unit, configured to determine, according to the RSSI value, a distance of the user equipment from the in-vehicle device by using a preset mapping table of RSSI values and distances.

Further, the device further includes: a receiving module, configured to receive a request message sent by the UE for requesting allocation of identification information; and an allocation module, configured to allocate an independent non-repeating identifier to the UE according to the request message information.

Further, the device further includes: a determining module, configured to determine, according to the identifier information, whether the UE is a UE connected to the in-vehicle device; and the notification module is configured to notify the UE to re-in the case that the determination result is negative Initiate a request message.

According to still another embodiment of the present invention, a storage medium is also provided. The storage medium is arranged to store program code for performing the following steps:

Acquiring the received RSSI value sent by the user equipment UE and the identifier information periodically sent by the UE to identify the UE; in the case that the UE is determined to be the UE connected to the in-vehicle device according to the identifier information, according to the The RSSI value determines a distance between the UE and the in-vehicle device; and controls the UE to access the network according to the determined distance.

According to the embodiment of the present invention, the RSSI value sent by the user equipment UE and the identifier information used to identify the UE are obtained. In the case that the UE is determined to be the UE connected to the in-vehicle device according to the identifier information, according to the RSSI Determining a distance between the UE and the in-vehicle device; controlling the access network of the UE according to the determined distance, and solving the related art, the user equipment is connected to the network, and the user equipment cannot be performed. The problem of separate control realizes separate control of individual user equipments when accessing the network, which improves the user experience.

DRAWINGS

The drawings are intended to provide a further understanding of the embodiments of the present invention, and are intended to be a part of the present invention, and the description of the present invention is not intended to limit the invention. In the drawing:

1 is a flow chart of an access control method according to an embodiment of the present invention;

2 is a block diagram of an access control apparatus according to an embodiment of the present invention;

3 is a block diagram 1 of an access control apparatus in accordance with a preferred embodiment of the present invention;

4 is a block diagram 2 of an access control apparatus in accordance with a preferred embodiment of the present invention;

Figure 5 is a block diagram 3 of an access control apparatus in accordance with a preferred embodiment of the present invention;

6 is a schematic diagram of functional cooperation between an in-vehicle device and a user device according to an embodiment of the present invention;

7 is a flow chart of operational modes and logical decisions between an in-vehicle device and a user equipment UE, in accordance with an embodiment of the present invention.

detailed description

The invention will be described in detail below with reference to the drawings in conjunction with the embodiments. It should be noted that the embodiments in the present application and the features in the embodiments may be combined with each other without conflict.

An embodiment of the present invention provides an access control method. FIG. 1 is a flowchart of an access control method according to an embodiment of the present invention. As shown in FIG.

Step S102: Acquire an RSSI value sent by the UE and identifier information used to identify the UE.

Step S104: In the case that the UE is determined to be a UE connected to the in-vehicle device according to the identifier information, determining a distance between the UE and the in-vehicle device according to the RSSI value;

Step S106: Control the UE accessing the network according to the determined distance.

Through the above steps, the distance between the in-vehicle device and the connected UE is determined, and the access network of the UE is controlled according to the determined distance, which solves the problem that the user equipment accesses the network in the related art, and cannot be performed on each user equipment. Separate control issues when accessing the network The individual user equipment is separately controlled to improve the user experience.

The distance between the UE and the in-vehicle device can be determined in various manners. In an optional embodiment, the distance between the user equipment and the in-vehicle device can be determined according to the RSSI value through a preset mapping table of the RSSI value and the distance. It should be noted that the distance between the UE and the in-vehicle device may be an accurate distance value or a distance interval. For example, user equipment can be classified into three categories according to a determined distance or distance interval: near, medium, and far. Of course, the classification rules can be customized, generally defined as a close-range device within 1.5 meters; a medium distance device from 1.5 meters to 3 meters; and a long-distance device above 3 meters. This classification rule can be adjusted according to the needs of specific users. The actual distance of the user equipment is calculated by the RSSI value of the user equipment and the preset RSSI and distance correspondence table.

Before obtaining the RSSI value sent by the user equipment UE and the identifier information for identifying the UE, receiving a request message for requesting the allocation of the identifier information sent by the UE, and assigning the independent non-repeating identification information to the UE according to the request message, Through the independent and non-repeating identification information of each user equipment, the in-vehicle device can separately adjust the Wi-Fi access capability of each user equipment, and the prior art cannot separately adjust the user equipment. After the allocation, the identification information is stored in a set to prepare for subsequent verification of whether the UE is a UE that establishes a connection with the in-vehicle device. It should be noted that there are many types of identifier information. As a preferred implementation, the heartbeat token information may be used. Of course, the UE may be identified by the MAC address, the serial number, and the like of the UE. Then, it is determined whether the UE is a UE connected to the in-vehicle device according to the identification information, and if the determination result is no, the UE is notified to re-initiate the request message.

According to the determined distance, there are various ways for the UE to access the network. The in-vehicle device can adjust the Wi-Fi access of the user equipment according to the distance of the user equipment and the different heartbeat of each user equipment. ability. In an optional embodiment, since the in-vehicle device provides the maximum Wi-Fi negotiation rate or bandwidth for each accessed UE in the initial state, as the distance between the UE and the in-vehicle device increases, The access capability of the UE accessing the network can be controlled by reducing the Wi-Fi negotiation rate or bandwidth between the in-vehicle device and the UE, so that the access capability of the UE can be restricted.

Further, the adjusted access capability of the UE may be notified to the UE, where the access capability includes data interaction between the UE and the in-vehicle device after the UE can access the in-vehicle device or the UE accesses the in-vehicle device. rate.

The embodiment of the present invention further provides an access control apparatus. FIG. 2 is a block diagram of an access control apparatus according to an embodiment of the present invention. As shown in FIG. 2, the method includes:

The obtaining module 22 is configured to obtain a received signal strength indication RSSI value sent by the user equipment UE, and identifier information that is periodically sent by the UE to identify the UE;

The determining module 24 is configured to determine, according to the identifier information, a distance between the UE and the in-vehicle device according to the RSSI value, if the UE is determined to be a UE connected by the in-vehicle device according to the identifier information;

The control module 26 is configured to control the UE access network according to the determined distance.

3 is a block diagram 1 of an access control apparatus according to a preferred embodiment of the present invention. As shown in FIG. 3, the determining module 24 includes:

The determining unit 32 is configured to determine, according to the RSSI value, a distance of the user equipment from the in-vehicle device by using a preset mapping table of RSSI values and distances.

4 is a block diagram 2 of an access control apparatus according to a preferred embodiment of the present invention. As shown in FIG. 4, the apparatus further includes:

The receiving module 42 is configured to receive a request message sent by the UE for requesting allocation of identifier information.

The allocating module 44 is configured to allocate independent non-repeating identification information to the UE according to the request message.

FIG. 5 is a block diagram 3 of an access control apparatus according to a preferred embodiment of the present invention. As shown in FIG. 5, the apparatus further includes:

The determining module 52 is configured to determine, according to the identifier information, whether the UE is a UE connected to the in-vehicle device;

The notification module 54 is configured to notify the UE to re-initiate the request message if the determination result is negative.

The following takes the identification information as the heartbeat token information as an example, and further describes the embodiment of the present invention with reference to specific embodiments.

The user connects the in-vehicle device to the wireless network and turns on the power switch. Use your phone to search for in-vehicle devices for pairing. After the connection is completed, the user can freely access the Internet in the range of the vehicle, and the rate conforms to the air interface rate indicator of the in-vehicle device. When the user equipment leaves the car, the Wi-Fi access capability drops sharply. At the same time, in the off-board environment, the Wi-Fi coverage of the in-vehicle device is very limited, and it is difficult for the unauthorized user equipment to be connected to the on-board device outside the vehicle. . In view of the above, the existing technology must rely on the data connection and the limitation that the individual device cannot be adjusted separately. The embodiment of the present invention provides an added software function module, and dynamically reduces the Wi-Fi access capability based on the peripheral sensing technology. .

6 is a schematic diagram of functional cooperation between an in-vehicle device and a user device according to an embodiment of the present invention. As shown in FIG. 6, the device mainly comprises two parts: an in-vehicle device and a user device, and the in-vehicle device represents an AP in the WI-FI link. Device, the entrance to WAN communication. The user equipment represents the STA device in the WI-FI link. The in-vehicle device includes a heartbeat configuration module 612, an RSSI receiving module, a peripheral device sensing processing module 616, and a publishing module 618. The functions of the modules are obtained by the obtaining module 22, the determining module 24, the control module 26, the receiving module 42, and the assigning module 44. Some or all of the determination module 52 and the notification module 54 are implemented together. The user equipment includes a heartbeat application module 622, a subscription module 624, and an RSSI transmission module 626. A brief description of each module follows.

The heartbeat application/configuration module is a pair of functions that are related to each other. The center jump application part is implemented in the user equipment, and the heartbeat configuration part is implemented in the in-vehicle device. The main function is to initiate a heartbeat request on the user equipment, and then the in-vehicle device configures the transmitted heartbeat request and assigns an independent non-repetitive heartbeat to the user equipment.

The RSSI transmitting/receiving module is a pair of functions that are related to each other, wherein the RSSI transmitting part is implemented in the user equipment and the RSSI receiving part is implemented in the in-vehicle device. The main purpose is that the user equipment sends the current Wi-Fi RSSI value to the in-vehicle device through the Wi-Fi link; after receiving the RSSI value sent by the user equipment, the on-board RSSI receiving module identifies whether the heartbeat token is The user equipment mounted on the in-vehicle device, if yes, the RSSI value is passed to the sensing processing module.

The subscription/publishing module is a pair of functionally related functional combinations, wherein the subscription module 624 is implemented on the user device and the publishing module 618 is implemented on the target device. The module is designed to send a notification message according to the subscription value of different terminals after the sensing processing module provides the processing result. At the same time, the publishing module 618 can control the access capability of the user equipment to dynamically reduce the client. The original intention of Wi-Fi access capabilities.

The peripheral device awareness processing module 616 exists only with the in-vehicle device. The specific implementation is that the in-vehicle device has a built-in measured RSSI corresponding distance table before leaving the factory. After receiving the RSSI value of the client device, the sensing processing module calculates the distance of the user device according to the built-in table, thereby achieving the function of sensing the peripheral device. . For each accessed user equipment, the perimeter aware processing module calculates different results and sends the results to the publishing module 618 for the latter to control the access capabilities of the user equipment.

The interaction between the modules is as follows: First, the user equipment firstly initiates a heartbeat application module 622. After receiving the heartbeat request of the user equipment, the heartbeat configuration module 612 of the in-vehicle device allocates an independent non-repetitive heartbeat token to the user equipment. Next, the subscription module 624 of the user equipment initiates a subscription application, and after receiving the subscription application, the publishing module 618 of the in-vehicle device records the current user equipment heartbeat token with a subsequent targeted notification message. Then, the RSSI sending module 626 of the user equipment periodically sends the RSSI value of the Wi-Fi. The RSSI receiving module of the in-vehicle device forwards the RSSI sent by the user equipment to the peripheral device sensing processing module 616. Then, the peripheral device sensing processing module 616 of the in-vehicle device compares the built-in RSSI and the distance correspondence table according to the RSSI value to obtain the classification level of the user equipment, which is near, medium, and far. The access capability of each user equipment is controlled in a targeted manner. This control is mainly achieved by reducing the Wi-Fi negotiation rate and reducing the bandwidth. Finally, the issuing module 618 of the in-vehicle device sends the user equipment classification level and the adjusted access capability as a notification message to the corresponding user equipment.

FIG. 7 is a flowchart of a working mode and logic judgment between an in-vehicle device and a user equipment UE according to an embodiment of the present invention. As shown in FIG. 7, the method includes the following steps:

Step S702: The user equipment initiates a heartbeat application by using a heartbeat application software module.

Step S704: After receiving the heartbeat request, the heartbeat configuration module 612 of the in-vehicle device allocates an independent non-repetitive heartbeat token bound to the user equipment, and transmits the token back to the heartbeat application module 622 of the user equipment.

In step S706, the subscription module 624 of the user equipment initiates a registration subscription request, and after receiving the request, the issuing module 618 of the in-vehicle device establishes a unique correspondence relationship with the heartbeat token of the user equipment.

Step S708, the RSSI sending module 626 of the user equipment periodically sends the RSSI and heartbeat token information of its own WI-FI. After receiving the message, the RSSI receiving module of the in-vehicle device first determines whether the heartbeat token information matches its own heartbeat token table. If it matches, the RSSI value is forwarded to the peripheral device sensing processing module 616; otherwise, the client terminal is notified to re-initiate Heartbeat application.

Step S710: After receiving the RSSI value, the peripheral device sensing processing module 616 of the in-vehicle device classifies the user equipment by using the built-in RSSI and the distance relationship correspondence table: near, medium, and far. The access capability of each user equipment is controlled in a targeted manner. This control is mainly achieved by reducing the Wi-Fi negotiation rate and reducing the bandwidth.

In step S712, the peripheral device perception processing module 616 of the in-vehicle device sends the processing result to the issuing module 618.

In step S714, the issuing module 618 of the in-vehicle device sends the user equipment classification level and the adjusted access capability as the notification message to the corresponding user equipment according to the received processing result.

So far, the function of dynamically reducing the Wi-Fi access capability based on the peripheral sensing technology has been completed.

Through the above steps of the embodiment of the present invention, the function of dynamically reducing the Wi-Fi access capability of the user equipment by the in-vehicle device has the following advantages, and improves the user experience: no need to establish a data connection, as long as the two mobile terminals have Wi-Fi Function, after installing the corresponding software, the function of dynamically reducing the Wi-Fi access capability of the user equipment can be realized. Without the Wi-Fi access capability of the entire in-vehicle device, this patent realizes the function of reducing Wi-Fi access capability for each user device. There is a great improvement in the ease of use and stability of the product, as well as the user experience.

Embodiments of the present invention also provide a storage medium. Optionally, in the embodiment, the foregoing storage medium may be configured to store program code for performing the following steps:

Step S1: Acquire an RSSI value sent by the UE and identifier information used to identify the UE.

Step S2, in the case that it is determined that the UE is a UE connected to the in-vehicle device according to the identifier information, determining a distance between the UE and the in-vehicle device according to the RSSI value;

In step S3, the UE accesses the network according to the determined distance.

Optionally, in this embodiment, the foregoing storage medium may include, but not limited to, a USB flash drive, a Read-Only Memory (ROM), a Random Access Memory (RAM), a mobile hard disk, and a magnetic memory. A variety of media that can store program code, such as a disc or a disc.

It will be apparent to those skilled in the art that the various modules or steps of the present invention described above can be implemented by a general-purpose computing device that can be centralized on a single computing device or distributed across a network of multiple computing devices. Alternatively, they may be implemented by program code executable by the computing device such that they may be stored in the storage device by the computing device and, in some cases, may be different from the order herein. The steps shown or described are performed, or they are separately fabricated into individual integrated circuit modules, or a plurality of modules or steps thereof are fabricated as a single integrated circuit module. Thus, the invention is not limited to any specific combination of hardware and software.

The above description is only the preferred embodiment of the present invention, and is not intended to limit the present invention, and various modifications and changes can be made to the present invention. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and scope of the present invention are intended to be included within the scope of the present invention.

Industrial applicability

The embodiments of the present invention are applied to the field of communications, and solve the problem that the user equipment can access the network and cannot individually control each user equipment in the related art. When accessing the network, the individual user equipment is separately controlled and improved. user experience.

Claims

An access control method includes:

Obtaining a received signal strength indication RSSI value sent by the user equipment UE, and identifier information used by the UE to periodically identify the UE;

And determining, according to the identifier information, a distance between the UE and the in-vehicle device according to the RSSI value;

And controlling, according to the determined distance, the UE accessing the network.
The method according to claim 1, wherein determining the distance between the UE and the in-vehicle device according to the RSSI value comprises:

And determining, according to the RSSI value, a distance of the user equipment from the in-vehicle device by using a preset mapping table of RSSI values and distances.
The method according to claim 1, wherein the method further comprises: before acquiring the RSSI value sent by the user equipment UE and the identifier information used by the UE to periodically identify the UE, the method further includes:

Receiving a request message sent by the UE for requesting allocation of identifier information;

Assigning independent non-repeating identification information to the UE according to the request message.
The method of claim 3, wherein after the assigning the independent non-repeating identification information to the UE according to the request message, the method further comprises:

Determining, according to the identifier information, whether the UE is a UE connected to the in-vehicle device;

If the result of the determination is no, the UE is notified to resend the request message.
The method according to any one of claims 1 to 4, wherein the identification information is heartbeat token information.
The method according to any one of claims 1 to 4, wherein controlling the UE access network according to the determined distance comprises:

The UE accessing the network is controlled according to the determined distance by reducing a Wi-Fi negotiation rate or bandwidth between the in-vehicle device and the UE.
The method of claim 6 wherein the method further comprises:

Notifying the UE of the adjusted access capability of the UE, where the access capability includes a data exchange rate between the UE and the in-vehicle device after the UE can access the in-vehicle device or the UE accesses the in-vehicle device.
An access control device includes:

An acquiring module, configured to acquire a received signal strength indication RSSI value sent by the user equipment UE, and identifier information used by the UE to periodically identify the UE;

a determining module, configured to determine, according to the RSSI value, a distance between the UE and the in-vehicle device, in a case that the UE is determined to be a UE connected to the in-vehicle device according to the identifier information;

And the control module is configured to control, according to the determined distance, the UE accessing the network.
The apparatus of claim 8 wherein said determining module comprises:

The determining unit is configured to determine, according to the RSSI value, a distance of the user equipment from the in-vehicle device by using a preset mapping table of RSSI values and distances.
The apparatus of claim 8 wherein said apparatus further comprises:

a receiving module, configured to receive a request message sent by the UE for requesting allocation of identifier information;

And an allocating module, configured to allocate independent non-repeating identification information to the UE according to the request message.