WO2020118972A1 - 一种利用多个侦测基站的信令管控lte终端的方法及系统 - Google Patents

一种利用多个侦测基站的信令管控lte终端的方法及系统 Download PDF

Info

Publication number
WO2020118972A1
WO2020118972A1 PCT/CN2019/080324 CN2019080324W WO2020118972A1 WO 2020118972 A1 WO2020118972 A1 WO 2020118972A1 CN 2019080324 W CN2019080324 W CN 2019080324W WO 2020118972 A1 WO2020118972 A1 WO 2020118972A1
Authority
WO
WIPO (PCT)
Prior art keywords
detection base
base station
base stations
public network
lte terminal
Prior art date
Application number
PCT/CN2019/080324
Other languages
English (en)
French (fr)
Inventor
翟海莹
曹永福
张宏亮
欧幸宝
袁勇超
黄潮正
张翼翔
Original Assignee
浙江三维通信科技有限公司
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 浙江三维通信科技有限公司 filed Critical 浙江三维通信科技有限公司
Publication of WO2020118972A1 publication Critical patent/WO2020118972A1/zh

Links

Images

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W24/00—Supervisory, monitoring or testing arrangements
    • H04W24/10—Scheduling measurement reports ; Arrangements for measurement reports
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/10—Network architectures or network communication protocols for network security for controlling access to devices or network resources
    • H04L63/101—Access control lists [ACL]
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/08—Access security
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W48/00—Access restriction; Network selection; Access point selection
    • H04W48/16—Discovering, processing access restriction or access information

Definitions

  • the invention relates to the field of mobile communication, and is mainly a method and system for controlling and controlling LTE terminals by using multiple signalings for detecting base stations.
  • LTE Long Term Evolution
  • the current 4G LTE signal uses two-way authentication, which means that the base station must verify the identity of the mobile phone, and the mobile phone must also verify the base station. identity of. Once the mutual authentication is successful, both parties enter the encrypted communication mode.
  • the detection base station cannot pass the two-way authentication to the LTE terminal, and the blacklist it detects cannot remain in the detection base station for a long time. How to effectively manage and control the mobile phones in these areas, especially the mobile phones in the blacklist, has become a major problem that puzzles those skilled in the art.
  • TAC detection base station
  • TAU the routing area of the detection base station
  • the access delay timer (5th T3430) will never be cleared (if the 5th T3430 is cleared, the mobile phone will set the base station Listed as a blacklist, quit re-election, and will not initiate re-election to the base station in the future), thus making the mobile phone seem to be attracted by the pseudo base station.
  • the CN201710835493.4 patent discloses a method for maintaining a target connection state for a long time with a pseudo base station for 4G investigation and control.
  • the positioning device is used as a pseudo base station to allow the designated UE to camp on the positioning device, and then use the positioning device to locate the designated UE, including repeated Modify the routing area code TAC of the positioning device before the specified UE connection times out to trigger the routing area update request (trackingareaupdaterequest), thereby maintaining the connection process and supporting unrestricted time to obtain the target accuracy during the positioning of the specified UE position.
  • the purpose of this patent is to solve the problem of disconnection of the designated UE in the above process, to solve the time limitation caused by the number of TAUs during the positioning process, and to improve the positioning success rate.
  • the above patents need to continuously modify the TAC to achieve adsorption of blacklist mobile phones.
  • the adsorbed UE is limited by the detection base station (like the frequency point in the frequency layout, the degree of interference is large, affecting the public network service), and it cannot turn to a better detection base station (such as a detection station set on an independent idle frequency band)
  • the base station can be attached to more UEs steadily; the detection of the base station needs to increase the shortcomings related to the detection of the base station software required by the change of the TAC.
  • the security process (LTE authentication process, that is, the network and the (Mobile mutual authentication) Before starting, you can directly send a NAS message to the LTE terminal to refuse to attach (Attach Reject), followed by an RRC Connection Connection Release message, which carries redirected Carrier Info information, instructing the phone to close the current connection, and then transfer To the base station network designated by the base station.
  • LTE authentication process that is, the network and the (Mobile mutual authentication
  • Patented technologies such as CN108289318A use the principle of redirection signaling.
  • the specific CN108289318A discloses an LTE terminal management and control method based on the signaling process. It first analyzes the system message blocks broadcast by the base station of the current serving cell and the serving cell and neighbors. The downlink signal transmission frequency of the cell and the cell reselection priority. Choose to send the LTE inducement signal on the highest frequency between the neighboring cell and the serving cell. Induce the FDD-LTE terminal to initiate the tracking area update signaling process, and send TAU rejection signaling to the terminal, so that the LTE terminal initiates the Attach process. Extract the IMSI carried in the Attach Request and establish a control whitelist and blacklist.
  • the purpose of the present invention is to overcome the shortcomings of the existing technology, and to provide a method and system for controlling and controlling LTE terminals by using multiple signaling detection base stations, which is suitable for occasions where a large number of mobile phones need to be controlled, such as troops, courts, and prisons.
  • the invention uses the principle of redirection signaling to make the LTE terminals in the blacklist in the control area always reside in the detection base station, thereby ensuring the information security in the control area.
  • the object of the present invention is achieved by the following technical solution: a method for controlling and controlling an LTE terminal by using signaling of multiple detection base stations, the multiple detection base stations including at least two detection base stations, At least one public network-oriented detection base station is included.
  • the public network-oriented detection base station is set as a neighboring cell of the public network and its routing area TAC is different from the public network base station routing area TAC.
  • the LTE terminal resides and initiates a TAU Request access.
  • the terminal For the public network type detection base station, it requests the terminal to report its information through the signaling NAS message (Identity) Request to obtain the LTE terminal identity code.
  • the obtained identity code is compared with a preset white list to determine whether the LTE terminal is in the white list. If the LTE terminal is determined to be in the white list, the access is denied and returned to the public network base station. If it is determined to be in the black list, then Deny access and use the redirection function to force distribution to the next detection base station;
  • the above forcibly assigned LTE terminal initiates initial access to its corresponding detection base station, and the corresponding detection base station judges the LTE terminal by comparing the obtained LTE terminal identity code with a preset white list Whether it is a white list, if it is judged that it is in the white list, it is redirected to the public network base station, if it is judged that it is in the black list, it is denied access, and is forcibly assigned to the next detection base station through the redirect function;
  • step 4 The next detection base station described in step 4) repeats step 4), so that the LTE terminals in the blacklist always reside between each detection base station.
  • the routing area TAC of the public network type detection base station is set to be different from the public network base station to trigger the routing area update process.
  • the routing area TAC of the public network type detection base station only needs to be set once initially, which reduces Change the relevant detection base station software required.
  • the detection base station forcedly assigned to the LTE terminal in step 4) performs initial access to the LTE terminal. This is because the LTE terminal leaves the original network and is redirected to the new network, so the initiated access is Initial access.
  • the LTE terminal in step 4 if the LTE terminal in step 4) is judged to be in the blacklist, it denies access and uses the redirection function to force allocation to the next detection base station, which may be before forced allocation Detection base station.
  • each detection base station sequentially assigns the LTE terminals determined to be in the black list to the next detection base station forcibly.
  • the plurality of detection base stations include at least three or more detection base stations.
  • the detection base stations include at least one public network-oriented detection base station.
  • the LTE terminals in the blacklist are optimally allocated to the next detection base station.
  • the waiting time must not exceed T3410 (see 3GPP TS24.301 for details); the waiting time of the public network LTE terminal in the routing area update mode must not exceed T3430 (same as above).
  • T3410 and T3430 have a certain configurable range, and the waiting time of the delay timer can be adjusted to the vicinity of the upper limit within the permitted range according to the actual situation, that is, T3410,
  • the value of T3430 is near the upper limit; in addition, the residence time is as close as possible to the upper limit of the waiting time of the delay timer. In this way, the frequency of redirection and hopping can be appropriately reduced, and the access signaling pressure of the detection base station can be reduced, and each detection base station can absorb more LTE terminals.
  • the LTE terminal is an LTE mobile phone or a device using an LTE network.
  • the identity code is IMSI code
  • the identity code is IMEI.
  • the present invention also provides a system for controlling and controlling LTE terminals using the above method.
  • the management and control system includes at least two detection base stations.
  • the detection base stations include at least one public network-oriented detection base station.
  • the public network-oriented detection base station is set as a neighboring cell of the public network and its tracking area TAC is different from the public network base station tracking area TAC.
  • the management and control system also includes allocation detection based on the detection of base station load and signal coverage Base station's intelligent distribution management module.
  • the core mechanism of the present invention is to trigger the routing area update (TAURequest) access, and then obtain the identity code of the LTE terminal through a system command, identify the blacklist terminal through the identity code, and retry the blacklist terminal by denying access Directed to the next detection base station, the next detection base station is redirected to the next detection base station by denying access; through the mutual transfer between multiple detection base stations, the blacklisted LTE terminals are always used by the detection base station The access process is absorbed, that is, the LTE terminal is never allowed to leave the detection base station, thereby realizing the signal management of the blacklisted LTE terminal.
  • TURequest routing area update
  • the invention utilizes signaling of multiple detection base stations to realize the adsorption of a large number of blacklisted LTE terminals.
  • the adsorption capacity can also be increased by increasing the number of detection base stations, and the system can be known almost in real time.
  • the number and information of the retained terminals because there is a continuous process of continuous access identity judgment, you can know the identity of all LTE terminals in the system, if necessary, you can also leave the retained mobile phone out of the detection system and return to the public network base station. Make a white list.
  • the beneficial effects of the present invention are as follows: the present invention only needs to set the tracking area TAC at the beginning, and there is no need to change it subsequently, reducing the related detection base station software required for changing the TAC; the invention can absorb a large number of LTE terminals and increase the detection base station The quantity also increases the adsorption capacity.
  • FIG. 1 is a schematic diagram of a detection base station access structure in Embodiment 1.
  • FIG. 1 is a schematic diagram of a detection base station access structure in Embodiment 1.
  • FIG. 2 is a schematic diagram of the detection base station access structure in Embodiment 2.
  • FIG. 2 is a schematic diagram of the detection base station access structure in Embodiment 2.
  • FIG. 3 is a schematic diagram of a detection base station access structure in Embodiment 2.
  • FIG. 3 is a schematic diagram of a detection base station access structure in Embodiment 2.
  • the invention discloses a method for controlling and controlling an LTE terminal by using signaling of a plurality of detection base stations.
  • the plurality of detection base stations includes at least two detection base stations, and at least one of the detection base stations includes a public network-oriented detection Base station, the public network-oriented detection base station is set as a neighboring cell of the public network and its routing area TAC is different from the public network base station TAC.
  • the specific management and control steps are as follows:
  • the LTE terminal resides and initiates TAU Request access.
  • the terminal For the public network type detection base station, it requests the terminal to report its identity information by signaling NAS message (Identity) Request to obtain the LTE terminal identity code.
  • the identity code is compared with a preset white list to determine whether the LTE terminal is in the white list. If the LTE terminal is determined to be in the white list, the access is denied and it is returned to the public network base station. If it is determined to be in the black list, the access is denied And use the redirection function to force distribution to the next detection base station;
  • the above-mentioned detection base station that is forcibly assigned an LTE terminal performs initial access to the LTE terminal, and compares the obtained LTE terminal identity code with a preset white list to determine whether the LTE terminal is a white list. In the white list, it is redirected to the public network base station, if it is judged in the black list, it is denied access, and is forcibly assigned to the next detection base station through the redirect function;
  • step 4 The next detection base station described in step 4) repeats step 4), so that the LTE terminals in the blacklist always reside between each detection base station.
  • the invention only needs to set the TAC initially, and does not need to change the TAC value of the routing area subsequently. It should be noted that during the access process, it can be detained for a period of time, but the waiting time of the access delay timer must not be exceeded.
  • the invention realizes the monitoring of the blacklisted LTE terminal through the mutual redirection between multiple detection base stations so that the blacklisted LTE terminal is absorbed by the detected base station in the access flow adsorption mode. It can be analogized to use more detection base stations (such as ring or mesh to redirect LTE terminals to each other). The following is a detailed description of several typical ways:
  • the LTE terminal in this embodiment is an LTE mobile phone.
  • it includes two detection base stations, one for public network-oriented detection base stations, and one common-type detection base station (except for public network-type detection base stations).
  • the neighboring cell of the network and the routing area TAC are different from the public network base station TAC, and a white list is set in advance for the public network type detection base station.
  • the legal users are set to the white list, and the black list is the black list except for the white list; To detect the coverage signal strength of the base station for the public network, so that it can meet the need to use the TAU Request function to reside and initiate the TAU Request.
  • the LTE terminal resides and initiates TAU Request access.
  • the base station uses the NAS message (Identity Request) to request the terminal to report its IMSI information to obtain the LTE mobile phone identity code IMSI.
  • IMSI LTE mobile phone identity code
  • Pre-set whitelist comparison to determine whether the LTE mobile phone is in the whitelist, if it is determined to be in the whitelist, then refuse to access to return to the public network base station, if it is determined to be in the blacklist, refuse to access and use the heavy Directional signaling is forcibly assigned to the ordinary detection base station; the ordinary detection base station then distributes the LTE terminals in the blacklist to the public network-oriented detection base station through the redirection function, thus forming a loop to ensure the blacklist Of LTE terminals are always camped.
  • this embodiment includes multiple detection base stations, a public network-oriented detection base station, and n ordinary detection base stations.
  • the blacklisted LTE terminals are The redirection function is forcibly assigned to the ordinary detection base station 1, and after detecting the black and white list, the ordinary detection base station 1 forcibly allocates the LTE terminals in the blacklist to the ordinary detection base station 2 through the redirection function, as above, and then sequentially
  • the LTE terminals in the blacklist are forcibly assigned by the redirection function until the normal detection base station n, and the normal-type detection base station n then forcibly allocates the LTE terminals in the blacklist to the public network-oriented detection base station by the redirection function, so A cycle is formed to ensure that the LTE terminals in the blacklist are always in a camping state.
  • any of the above-mentioned common detection base stations can be replaced with public network-oriented detection base stations.
  • a public network-type detection base station when a public network-type detection base station is assigned to a blacklisted LTE terminal forcibly assigned to the next detection base station, the allocation is not performed in a certain order, but according to the detection base station load, The allocation is carried out in case of signal coverage.
  • the blacklisted LTE terminals are forcibly assigned to the common type detection base station 1.
  • the common type detection base station 1 assigns the blacklisted LTE terminals according to the detected base station load and signal coverage.
  • the common detection base station 3 assigns the blacklisted LTE terminals to the public network-oriented detection base station, and the public network-oriented detection base station also forces the blacklisted LTE terminals to be assigned
  • the ordinary detection base station 2 implements allocation according to the detection base station load and signal coverage. In short, to ensure that the LTE terminal in the blacklist is always in a camping state.
  • any of the above-mentioned ordinary detection base stations can also be replaced with public network-oriented detection base stations.
  • the application of the invention expands: multiple detection base stations adsorb blacklist mobile phones through signaling, and can share resources, such as obtaining the total blacklist mobile phone information and quantity, and considering load distribution to make the adsorption function stable, and can know that real-time online users, The blacklisted mobile phone can be found immediately after it leaves the detection base station.

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Hardware Design (AREA)
  • Computing Systems (AREA)
  • General Engineering & Computer Science (AREA)
  • Mobile Radio Communication Systems (AREA)

Abstract

本发明公开了一种利用多个侦测基站的信令管控LTE终端的方法及系统，步骤如下：面向公网型侦测基站设置成公网的相邻小区且其路由区与公网基站路由区不同，通过触发路由区更新接入，再通过系统命令获得LTE终端的身份码，通过身份码判别出黑名单终端，对黑名单终端，通过拒绝接入而重定向至下一个侦测基站，下一个侦测基站通过拒绝接入而重定向再下一个侦测基站；通过多个侦测基站间的互相传递从而使得黑名单LTE终端被侦测基站用接入流程吸附，即始终不让LTE终端离开侦测基站，实现对黑名单LTE终端的信号管控。本发明只需在最初设置TAC，后续都无需更改，减少了因更改TAC变更所需要相关的侦测基站软件；本发明可以吸附大量LTE终端，增加侦测基站数量的同时也增加吸附容量。

Description

一种利用多个侦测基站的信令管控LTE终端的方法及系统 技术领域
本发明涉及移动通信领域，主要是一种利用多个侦测基站的信令管控LTE终端的方法及系统。
背景技术
LTE(长期演进技术，Long Term Evolution)是电信中用于手机及数据终端的高速无线通讯标准，目前的4G LTE信号采用双向鉴权，意味着基站要验证手机的身份，而手机也要验证基站的身份。一旦相互认证成功，双方就进入加密通信模式。对于部队、法院以及监狱等需要管控大量手机的场合，侦测基站无法对LTE终端通过双向鉴权，其侦测到的黑名单无法长期滞留在侦测基站内。如何能够对这些区域的手机，特别是黑名单中的手机实施有效的管控成为了困扰本领域技术人员的一大问题。
对此，业内常见做法是，通过在接入延时计时器时间内定时改变侦测基站的路由区(英文简称TAC或TAU)，使得手机因为路由区的变更而一直跟侦测基站进行接入流程的循环而不会退出侦测基站，需要注意的是，这种接入并非真正意义上的接入，只是利用了路由区变更而刷新了接入延时计时器，由于路由区变更速度快于接入延时计时器(5次T3430)时长，使得接入延时计时器(第5次T3430)永远不会被清零(如果第5次的T3430被清零，手机就会把该基站列为黑名单，退出重选，以后不再发起对该基站的重选)，从而使得手机看起来被伪基站吸住了。具体的，CN201710835493.4专利公开了一种4G侦控用伪基站长期保持目标连接态方法，采用定位设备作为伪基站，让指定UE驻留定位设备后，使用定位设备定位指定UE，包括不断重复在指定UE连接超时之前通过修改定位设备的路由区码TAC，触发路由区更新请求(tracking area update request)，从而保持连接过程，支持在定位指定UE的过程中有不受限制的时间获取目标精确位置。该专利的目的是解决上述过程中的指定UE掉线问题，解决定位过程中因TAU次数导致的时间限制，提高定位成功率。但是上述专利需要通过不断修改TAC以实现吸附黑名单手机。这种方法存在吸附的UE受此侦测基站所限(如同频布局时的频点，干扰程度大，影响公网业务)，无法转向更好的侦测基站(如独立空闲频段上设置的侦测基站，可以稳定吸附更多的UE)；侦测基站需要增加因更改TAC变更所需要相关的侦测基站软件等诸多缺点。
3GPP协议标准制定时，考虑发生紧急情况、突发事件时可能产生大量手机业务请求，网络可用性对于保证生命、财产安全至关重要，需要能及时调度网络请求，转移压力，这时候大量的鉴权、加密、完整性检查等安全措施可能导致网络瓶颈，在可用性和安全性不可兼得的情况下优先考虑了可用性。重定向信令正是利用了前述的考虑，具体的，LTE终端被基站吸引前来附着，在收到LTE终端发来附着请求(Attach Request)之后、安全流程(LTE鉴权过程，即网络与手机的相互鉴权)启动之前，可以对LTE终端直接下发NAS消息拒绝附着(Attach Reject)，紧接着下发RRC Connection Release消息，该消息携带redirected Carrier Info信息，指示手机关闭当前连接，然后转到基站指定的基站网络。
如CN108289318A等的专利技术正是利用了重定向信令原理，具体的CN108289318A公开了一种基于信令流程的LTE终端管控方法，首先解析当前服务小区基站广播的系统消息块，解析服务小区以及邻小区的下行信号发送频率与小区重选优先级。选择在邻小区与服务小区中最高的频率上发送LTE诱导信号。诱导FDD-LTE终端发起跟踪区更新信令流程，并对终端发送TAU拒绝信令，使LTE终端发起Attach流程。提取Attach Request中所携带的IMSI，建立管控白名单与黑名单。对IMSI在黑名单中的目标用户发送拒绝信令；对IMSI在白名单中的非目标用户发送拒绝信令。以此实现对目标用户的身份甄别，完成对目标用户的通信阻断，对非目标用户的通信保障。该方法不会影响基站的正常通信，也不会影响到其他制式的移动通信网络，所需设备成本低廉并且发送功率低。采用此技术，用户会马上发现提示无网络。
发明内容
本发明的目的在于克服现有技术存在的不足，而提供一种利用多个侦测基站的信令管控LTE终端的方法及系统，适用于部队、法院以及监狱等需要管控大量手机的场合。
本发明利用重定向信令的原理，使得管控区域内黑名单中的LTE终端始终驻留在侦测基站内，从而保证了管控区域的信息安全。
本发明的目的是通过如下技术方案来完成的：一种利用多个侦测基站的信令管控LTE终端的方法，所述多个侦测基站包括至少两个侦测基站，上述侦测基站中至少包括一个面向公网型侦测基站，所述面向公网型侦测基站设置成公网的相邻小区且其路由区TAC与公网基站路由区TAC不同，具体管控步骤如下：
1)、预先对面向公网型侦测基站设定白名单，合法用户设定为白名单，除白名单外即为黑名单；
2)、设置面向公网型侦测基站的覆盖信号强度，使之满足能利用路由区更新(TAU Request)功能进行驻留而发起路由区更新(TAU Request)；
3)、LTE终端驻留发起路由区更新请求(TAU Request)接入，面向公网型侦测基站通过信令NAS消息(Identity Request)要求终端上报其信息而获得该LTE终端身份码，通过将获得的身份码与预先设定的白名单比对，判断该LTE终端是否在白名单中，如果判断在白名单中，则拒绝接入使其退回公网基站，如果判断在黑名单中，则拒绝接入并利用重定向功能强制分配到下一个侦测基站；
4)、上述被强制分配LTE终端向其所对应的侦测基站发起初始接入，所对应的侦测基站通过获得的该LTE终端身份码与预先设定的白名单比对，判断该LTE终端是否为白名单，如果判断在白名单中则重定向至公网基站，如判断在黑名单中则拒绝接入，并通过重定向功能强制分配到下一个侦测基站；
5)、步骤4)中所述的下一个侦测基站重复步骤4)，从而使黑名单中的LTE终端始终驻留在各个侦测基站间。
面向公网型侦测基站的路由区TAC设置成与公网基站不同可以触发路由区更新流程，本 发明中面向公网型侦测基站的路由区TAC只需要最初设置一次，减少了因更改TAC变更所需要相关的侦测基站软件。此外，步骤4)中被强制分配到LTE终端的侦测基站对该LTE终端进行的是初始接入，这是由于LTE终端离开了原先网络，被重定向到新网络，所以发起的接入是初始接入。
作为一种技术方案，步骤4)中的LTE终端如果被判断在黑名单中则拒绝接入并利用重定向功能强制分配到下一个侦测基站，所述下一个侦测基站可以是强制分配前的侦测基站。
作为另一种技术方案，各个侦测基站依次将被判断为黑名单中的LTE终端重定向强制分配至下一个侦测基站。
作为优选，所述多个侦测基站至少包括三个及以上的侦测基站，所述侦测基站包括至少一个面向公网型侦测基站，面向公网型侦测基站根据侦测基站负荷、信号覆盖的情况优化分配黑名单中的LTE终端至下一个侦测基站。
更进一步的，在LTE终端接入过程中先滞留一段时间，滞留时间不得超出接入延时计时器的等候时间。其中，在初始接入方式下，等候时间不得超过T3410(具体可参见3GPP TS24.301)；公网LTE终端在路由区更新模式下的等候时间不得超过T3430(同上)。需要说明的是，根据3GPP协议中的规定，T3410、T3430具有一定的可配置范围，可根据实际情况在许可范围内调整延时计时器的等候时间至其上限附近，也即可以适当调整T3410、T3430的数值至其上限附近；此外所述滞留时间尽可能接近延时计时器的等候时间的上限。这样可以适当减少重定向跳转频度，并减少侦测基站的接入信令压力，并使得每个侦测基站可以吸纳更多的LTE终端。
作为优选，所述的LTE终端为LTE手机或利用LTE网络的设备。对于LTE手机，其身份码为IMSI码，对于LTE终端网络设备，其身份码是IMEI。
本发明同时提供了一种利用上述的方法来管控LTE终端的系统，所述管控系统中包括至少两个侦测基站，所述侦测基站中至少包括一个面向公网型侦测基站，所述面向公网型侦测基站设置成公网的相邻小区且其跟踪区TAC与公网基站跟踪区TAC不同，所述管控系统还包括根据侦测基站负荷、信号覆盖的情况用于分配侦测基站的智能分配管理模块。
本发明的核心机理是：通过触发路由区更新(TAU Request)接入，再通过系统命令获得LTE终端的身份码，通过身份码判别出黑名单终端，对黑名单终端，通过拒绝接入而重定向至下一个侦测基站，下一个侦测基站通过拒绝接入而重定向至下一个侦测基站；通过多个侦测基站间的互相传递从而使得黑名单的LTE终端始终被侦测基站用接入流程吸附，即始终不让LTE终端离开侦测基站，从而实现对黑名单LTE终端的信号管控。
本发明利用多台侦测基站的信令来实现吸附大量黑名单的LTE终端，对于需要管控大量LTE终端的场合，还可以通过增加侦测基站数量来增加吸附容量，可以几乎实时的知道系统内所留住的终端数量与信息，因为有不断的接入身份判断持续过程，可以了解系统内所有LTE终端的身份，如必要时也可以让留住的手机退出侦测系统返回公网基站，变成白名单。
本发明的有益效果为：本发明只需在最初设置跟踪区TAC，后续都无需更改，减少了因更改TAC变更所需要相关的侦测基站软件；本发明可以吸附大量LTE终端，增加侦测基站 数量的同时也增加吸附容量。
附图说明
图1为实施例1中侦测基站接入结构示意图。
图2为实施例2中侦测基站接入结构示意图。
图3为实施例2中侦测基站接入结构示意图。
具体实施方式
下面将结合附图对本发明做详细的介绍：
本发明公开了一种利用多个侦测基站的信令管控LTE终端的方法，所述多个侦测基站包括至少二个侦测基站，上述侦测基站中至少包括一个面向公网型侦测基站，所述面向公网型侦测基站设置成公网的相邻小区且其路由区TAC与公网基站TAC不同，具体管控步骤如下：
1)、预先对面向公网型侦测基站设定白名单，合法用户设定为白名单，除白名单外即为黑名单；
2)、设置面向公网型侦测基站的覆盖信号强度，使之满足能利用路由区更新(TAU Request)功能进行驻留而发起路由区更新(TAU Request)；
3)、LTE终端驻留发起路由区更新(TAU Request)接入，面向公网型侦测基站通过信令NAS消息(Identity Request)要求终端上报其身份信息而获得该LTE终端身份码，通过将身份码与预先设定的白名单比对，判断该LTE终端是否在白名单中，如果判断在白名单中，则拒绝接入使其退回公网基站，如果判断在黑名单中则拒绝接入并利用重定向功能强制分配到下一个侦测基站；
4)、上述被强制分配LTE终端的侦测基站对该LTE终端进行初始接入，通过获得的LTE终端身份码与预先设定的白名单比对，判断该LTE终端是否为白名单，如果判断在白名单中则重定向至公网基站，如判断在黑名单中则拒绝接入，并通过重定向功能强制分配到下一个侦测基站；
5)、步骤4)中所述的下一个侦测基站重复步骤4)，从而使黑名单中的LTE终端始终驻留在各个侦测基站间。
本发明只需在最初设置TAC，后续都不需要更改路由区TAC值。需要说明的是：在接入过程中可以先滞留一段时间，但不得超出接入延时计时器等候时间。
本发明通过多个侦测基站间的互相重定向使得黑名单的LTE终端被侦测基站用接入流程吸附的方式实现对黑名单LTE终端的监控。可以类推用更多的侦测基站(如环状或网状互相重定向LTE终端)，下面就典型的几种方式作具体的说明：
实施例1：
如图1所示，是一种简单型侦测基站接入结构，本实施例中的LTE终端为LTE手机。本实施例中，包括两个侦测基站，一个面向公网型侦测基站，一个普通型侦测基站(除面向公网型侦测基站)，其中面向公网型侦测基站设置成与公网相邻的小区且其路由区TAC与公网 基站TAC不同，并预先对面向公网型侦测基站设定白名单，合法用户设定为白名单，除白名单外即为黑名单；设置面向公网型侦测基站的覆盖信号强度，使之满足能利用路由区更新(TAU Request)功能进行驻留而发起路由区更新(TAU Request)。
LTE终端驻留发起路由区更新(TAU Request)接入，面向公网型侦测基站通过信令NAS消息(Identity Request)要求终端上报其IMSI信息而获得的LTE手机身份码IMSI，通过对IMSI与预先设定的白名单比对，判断该LTE手机是否在白名单中，如果判断在白名单中，则拒绝接入使其退回公网基站，如果判断在黑名单中则拒绝接入并利用重定向信令强制分配到普通型侦测基站；普通型侦测基站再将黑名单中的LTE终端经重定向功能强制分配至面向公网型侦测基站，这样形成一个循环，从而保证黑名单中的LTE终端始终处于驻留状态。
实施例2：
如图2所示，与实施例1不同的是，本实施例中包括多个侦测基站，一个面向公网型侦测基站，以及n个普通型侦测基站，黑名单中的LTE终端经重定向功能强制分配至普通型侦测基站1，普通型侦测基站1在判别黑白名单后将黑名单中的LTE终端经重定向功能强制分配至普通型侦测基站2，同上，再依次将黑名单中的LTE终端经重定向功能强制分配直至普通型侦测基站n，普通型侦测基站n再将黑名单中的LTE终端经重定向功能强制分配至面向公网型侦测基站，这样形成一个循环，从而保证黑名单中的LTE终端始终处于驻留状态。
需要注意的是，上述的任一普通型侦测基站均可以替换成面向公网型侦测基站。
实施例3：
如图3所示，仅表示了重定向的方向，其他相关的做了省略。与实施例2不同的是，本实施例中面向公网型侦测基站将黑名单的LTE终端强制分配至下一侦测基站时并非按照一定的顺序进行分配，而是根据侦测基站负荷、信号覆盖的情况实施分配。这里举个例子，面向公网型侦测基站将黑名单的LTE终端强制分配至普通型侦测基站1，普通型侦测基站1根据侦测基站负荷、信号覆盖的情况将黑名单的LTE终端强制分配至普通型侦测基站3，普通型侦测基站3则将黑名单的LTE终端强制分配至面向公网型侦测基站，面向公网型侦测基站又将黑名单的LTE终端强制分配给普通型侦测基站2，普通型侦测基站2又根据侦测基站负荷、信号覆盖的情况实施分配。总之，保证黑名单中的LTE终端始终处于驻留状态。与实施例2相同的是，上述任一的普通型侦测基站也可以替换成面向公网型侦测基站。
本发明拓展应用：多台侦测基站通过信令吸附黑名单手机，可以共享资源，如获得总黑名单手机信息及数量，可以考虑负荷分配等使得吸附功能稳定，可以知道现在实时在网用户，黑名单手机脱离侦测基站就可以马上被发现。
可以理解的是，对本领域技术人员来说，对本发明的技术方案及发明构思加以等同替换或改变都应属于本发明所附的权利要求的保护范围。

Claims (10)

  1. 一种利用多个侦测基站的信令管控LTE终端的方法，其特征在于，所述多个侦测基站包括至少两个侦测基站，上述侦测基站中至少包括一个面向公网型侦测基站，所述面向公网型侦测基站设置成公网的相邻小区且其路由区TAC与公网基站路由区TAC不同，具体管控步骤如下：
    1)、预先对面向公网型侦测基站设定白名单，合法用户设定为白名单，除白名单外即为黑名单；
    2)、设置面向公网型侦测基站的覆盖信号强度，使之满足能利用路由区更新功能进行驻留而发起路由区更新；
    3)、LTE终端驻留发起路由区更新接入，面向公网型侦测基站通过获得的LTE终端身份码与预先设定的白名单比对，判断该LTE终端是否在白名单中，如果判断在白名单中，则拒绝接入使其退回公网基站；如果判断在黑名单中，则拒绝接入并通过重定向功能强制分配到下一个侦测基站；
    4)、上述被强制分配LTE终端向其所对应的侦测基站发起初始接入，所对应的侦测基站通过获得的该LTE终端身份码与预先设定的白名单比对，判断该LTE终端是否为白名单，如果判断在白名单中，则重定向至公网基站；如判断在黑名单中，则拒绝接入并通过重定向功能强制分配到下一个侦测基站；
    5)、步骤4)中所述的下一个侦测基站重复步骤4)，从而使黑名单中的LTE终端始终驻留在各个侦测基站间。
  2. 根据权利要求1所述的利用多个侦测基站的信令管控LTE终端的方法，其特征在于：步骤4)中所述的下一个侦测基站可以是强制分配前的侦测基站。
  3. 根据权利要求1所述的利用多个侦测基站的信令管控LTE终端的方法，其特征在于：所述各个侦测基站依次将被判断为黑名单中的LTE终端重定向强制分配至下一个侦测基站。
  4. 根据权利要求1所述的利用多个侦测基站的信令管控LTE终端的方法，其特征在于：所述多个侦测基站至少包括三个及以上的侦测基站，所述侦测基站包括至少一个面向公网型侦测基站，面向公网型侦测基站根据侦测基站负荷、信号覆盖的情况优化分配黑名单中的LTE终端至下一个侦测基站。
  5. 根据权利要求1所述的利用多个侦测基站的信令管控LTE终端的方法，其特征在于：除上述面向公网型侦测基站，其他的侦测基站也可以是面向公网型侦测基站。
  6. 根据权利要求1所述的利用多个侦测基站的信令管控LTE终端的方法，其特征在于：在LTE终端接入过程中先滞留一段时间，滞留时间不得超出接入延时计时器的等候时间。
  7. 根据权利要求6所述的利用多个侦测基站的信令管控LTE终端的方法，其特征在于：可根据实际情况在许可范围内调整延时计时器的等候时间至其上限附近。
  8. 根据权利要求7所述的利用多个侦测基站的信令管控LTE终端的方法，其特征在于：所述滞留时间尽可能接近延时计时器的等候时间的上限。
  9. 根据权利要求1-8任一项所述的利用多个侦测基站的信令管控LTE终端的方法，其特征在于：所述的LTE终端为LTE手机或利用LTE网络的设备。
  10. 一种利用如权利要求1所述的方法来管控LTE终端的系统，其特征在于，所述管控系统中包括至少两个侦测基站，所述侦测基站中至少包括一个面向公网型侦测基站，所述面向公网型侦测基站设置成公网的相邻小区且其跟踪区与公网基站跟踪区不同，所述管控系统还包括根据侦测基站负荷、信号覆盖的情况用于分配侦测基站的智能分配管理模块。
PCT/CN2019/080324 2018-12-14 2019-03-29 一种利用多个侦测基站的信令管控lte终端的方法及系统 WO2020118972A1 (zh)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN201811532034.X 2018-12-14
CN201811532034.XA CN109673022B (zh) 2018-12-14 2018-12-14 一种利用多个侦测基站的信令管控lte终端的方法及系统

Publications (1)

Publication Number Publication Date
WO2020118972A1 true WO2020118972A1 (zh) 2020-06-18

Family

ID=66143907

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2019/080324 WO2020118972A1 (zh) 2018-12-14 2019-03-29 一种利用多个侦测基站的信令管控lte终端的方法及系统

Country Status (2)

Country Link
CN (1) CN109673022B (zh)
WO (1) WO2020118972A1 (zh)

Families Citing this family (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN110896537B (zh) * 2019-12-19 2023-07-28 武汉虹信科技发展有限责任公司 通信管控方法及装置
CN112188496B (zh) * 2020-10-21 2021-04-27 苏州智铸通信科技股份有限公司 一种通信区域内终端管控方法、装置、设备及介质

Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN108260124A (zh) * 2018-01-11 2018-07-06 阳光凯讯(北京)科技有限公司 一种针对4g终端侦码及管控的方法
CN108289318A (zh) * 2018-01-26 2018-07-17 重庆邮电大学 一种基于信令流程的lte终端管控方法

Family Cites Families (25)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US7155243B2 (en) * 2004-06-15 2006-12-26 Tekelec Methods, systems, and computer program products for content-based screening of messaging service messages
US9167505B2 (en) * 2007-10-08 2015-10-20 Qualcomm Incorporated Access management for wireless communication
KR101472749B1 (ko) * 2008-09-25 2014-12-16 삼성전자주식회사 Ｈｏｍｅ ｅＮＢ에서 단말의 수락제어 방법 및 장치.
JP5155819B2 (ja) * 2008-10-30 2013-03-06 パナソニック株式会社 無線送受信装置および方法、ならびに、端末装置、基地局装置および無線通信システム
WO2012061955A1 (en) * 2010-11-11 2012-05-18 Nokia Siemens Networks Oy Method and apparatus for handling closed subscriber groups in relay-enhanced system
CN102685734A (zh) * 2011-03-10 2012-09-19 国基电子（上海）有限公司 毫微微型存取点及利用其保护用户安全的方法
CN103152737A (zh) * 2013-03-06 2013-06-12 深圳供电局有限公司 一种移动终端接入管理系统
CN103167582B (zh) * 2013-04-11 2015-09-09 中国人民解放军信息工程大学 一种终端管控方法及管控基站
JP6147562B2 (ja) * 2013-05-10 2017-06-14 京セラ株式会社 通信制御方法、ユーザ端末、及び、プロセッサ
JP2015026970A (ja) * 2013-07-26 2015-02-05 株式会社日立製作所 無線基地局、コアネットワーク装置、および無線通信システムの干渉制御方法
CN103607730A (zh) * 2013-11-19 2014-02-26 成都西科微波通讯有限公司 一种移动设备通信的区域管控方法及系统
US9374742B1 (en) * 2014-09-09 2016-06-21 Sprint Spectrum L.P. Methods and systems for establishing a circuit-switched fallback scan-list
WO2016172391A1 (en) * 2015-04-21 2016-10-27 Parallel Wireless, Inc. Sim whitelisting and multi-operator core networks
CN106211263A (zh) * 2015-05-05 2016-12-07 中兴通讯股份有限公司 一种基于伪基站实现移动通讯的方法及装置
CN104980953A (zh) * 2015-05-27 2015-10-14 中国科学院信息工程研究所 一种终端边界的管控方法及系统
CN104980954B (zh) * 2015-05-27 2020-06-09 中国科学院信息工程研究所 一种终端的实时管控方法及基站控制模块
CN105142142A (zh) * 2015-08-25 2015-12-09 中国科学院信息工程研究所 全制式手机终端管控方法及装置
CN105282820A (zh) * 2015-10-26 2016-01-27 中国人民解放军信息工程大学 一种终端管控方法及装置
US10091697B1 (en) * 2016-02-08 2018-10-02 Cisco Technology, Inc. Mitigation of uplink interference within heterogeneous wireless communications networks
CN107332803A (zh) * 2016-04-29 2017-11-07 北京北信源软件股份有限公司 一种基于终端主机安全状态的准入控制方法和系统
CN107342838B (zh) * 2017-06-12 2020-01-14 京信通信系统（中国）有限公司 一种专网通信的实现方法及系统
CN107708115B (zh) * 2017-10-16 2020-11-06 奇酷互联网络科技（深圳）有限公司 重定向管控方法、装置及移动终端
CN108233955A (zh) * 2018-01-11 2018-06-29 济南爱我本克网络科技有限公司 集屏蔽与管控于一体的车载式4g手机管控系统及方法
CN108419230B (zh) * 2018-02-13 2021-03-16 Oppo广东移动通信有限公司 一种通信方法、基站及存储介质
CN108632822B (zh) * 2018-04-16 2021-06-15 Oppo广东移动通信有限公司 无线接入点的检测方法、装置以及移动终端

Patent Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN108260124A (zh) * 2018-01-11 2018-07-06 阳光凯讯(北京)科技有限公司 一种针对4g终端侦码及管控的方法
CN108289318A (zh) * 2018-01-26 2018-07-17 重庆邮电大学 一种基于信令流程的lte终端管控方法

Also Published As

Publication number Publication date
CN109673022B (zh) 2020-08-04
CN109673022A (zh) 2019-04-23

Similar Documents

Publication Publication Date Title
KR101979856B1 (ko) 접속 제어 방법 및 사용자기기
CN114631364B (zh) 处理切片限制
KR101469335B1 (ko) 머신 타입 통신설비의 네트워크 액세스 제어방법 및 시스템
CN102457938B (zh) 终端接入限制的方法及系统
EP2617261B1 (en) Reduced radio resource control connectivity
JP5199341B2 (ja) セルラー基地局
EP1987628B1 (en) Method and apparatus for providing access for a limited set of mobile stations to a restricted local access point
CN109565742A (zh) 在下一代移动通信网络中执行接入控制的方法和用户设备
CN110366224A (zh) 一种信令优化方法和设备
WO2014032502A1 (zh) 终端接入方法、系统和终端
KR101992278B1 (ko) 무선 통신 시스템 및 그 무선 통신 시스템에서 과부하 제어를 위한 ｒｒｃ 연결 방법
CN106134281A (zh) 用于执行邻近服务的方法及用户装置
EP3100479B1 (en) Method for controlling, charging, and positioning a ue in a small cell system
WO2008134982A1 (fr) Procédé, système et dispositif de commande pour accéder à un nœud privé b
US11671902B2 (en) Apparatus and methods for new radio broadcast and multicast access control
US20180249384A1 (en) Access class barring for mobile terminated communication and active mobility
CN103731872A (zh) 对用户设备通过信令传输数据进行控制的方法和装置
CN102638848A (zh) 一种机器类型通信设备的拥塞控制方法及系统
WO2020118972A1 (zh) 一种利用多个侦测基站的信令管控lte终端的方法及系统
US20170195983A1 (en) Access class barring for mobile terminated communication and active mobility
US10863414B2 (en) Systems, methods, and apparatuses for authorizing utilization of enhanced coverage
JP5883544B2 (ja) 電気通信ネットワークにおいて合法的傍受を可能にする方法、電気通信ネットワークにおいて合法的傍受を可能にするユーザ機器、電気通信ネットワークにおいて合法的傍受を可能にする基地送受信局、及びプログラム
CN102209390A (zh) 寻呼范围的分配方法和设备
CN113557699B (zh) 通信装置、基础设施设备、核心网络设备和方法
WO2024001531A1 (zh) 通信方法及装置

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 19895209

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE

122 Ep: pct application non-entry in european phase

Ref document number: 19895209

Country of ref document: EP

Kind code of ref document: A1