Background technology
IMEI (International Mobile Equipment Identity, the International Mobile Equipment Identity sign) totally 15, the corresponding TAC-FAC-SNR-SP of difference, wherein, TAC (Type Approval Code, the unit type approval code) be 6, equipment front six bit digital of same type should be identical; FAC (Final Assembly Code assembles number at last) is 2, is in which factory when representing mobile device to finish at last, and there is special code name in each factory; SNR (Serial Number, string sign indicating number) is 6, and there are not two identical SNR numbers in areal, the mobile device of same type; SP (Spare, standby number) is 1.
Among the existing mobile network, when mobile subscriber's access service or position renewal, MSC (MobileSwitch Center, mobile switching centre)/VLR (Visit Location Register, VLR Visitor Location Register) utilize CHECK IMEI message to be initiated to EIR (Equipment Identity Register, equipment identity register) legitimate verification, whether legal to check the mobile subscriber, determine the mobile subscriber to carry out other business then in present networks, idiographic flow may further comprise the steps as shown in Figure 1:
Step s101, MSC/VLR sends to EIR by F interface and detects IMEI request message MAPCHECK IMEI, carry mobile subscriber's parameter in this message, for example: call (Invoke) ID, IMEI, equipment state, user error information, reach operator's error message etc., specifically define as shown in table 1.
Step s102, EIR return to MSC/VLR by F interface and detect IMEI response message MAPCHECK IMEI ACK, and whether this mobile subscriber's of notice MSC/VLR IMEI is legal.
Table 1:
| Parameter name |
Request (request) |
Indication (indication) |
Response (response) |
Confirm (affirmation) |
| Invoke id |
M |
M(=) |
M(=) |
M(=) |
| IMEI |
C |
C(=) |
C |
C(=) |
| Equipment status (equipment state) |
|
|
C |
C(=) |
| User error (user error) |
|
|
C |
C(=) |
| Provider error (operator's mistake) |
|
|
|
O |
Coded system to CHECK IMEI message in MSC/VLR equipment is:
CHECK IMEI OPERATION
ARGUMENT
imei OCTET STRING(SIZE(8))
RESULT
equipmentStatus ENUMERATED{
whiteListed (0),
blackListed (1),
greyListed (2)}
ERRORS{
--systemFailure--loealValue:34,
--dataMissing--localValue:35,
--unknownEquipment--localValue:7}
::=localValue:43
When the above-mentioned CHECK of utilization IMEI message was verified mobile subscriber's legitimacy, as long as mobile device is legal, it is legal equally that any SIM (Subscriber Identity Model, client identification module) card is put on this mobile device.Therefore the user loses mobile device or mobile device when stolen, is easy to be used by other people, can not fully obtain protection for the mobile device owner.Just because of there is this defective, a lot of mobile operator in the whole world do not adopt CHECK IMEI technology to carry out the stolen design of mobile device.
Summary of the invention
The embodiment of the invention provides a kind of method and system of checking user validation, realizes the binding of mobile subscriber IMEI and IMSI to utilize existing CHECK IMEI, improves mobile subscriber's fail safe.
The embodiment of the invention provides a kind of method of the mobile subscriber's of inspection legitimacy, comprising:
Moving exchanging center MSC/attaching position register VLR receives when the mobile subscriber carries out position renewal or service access process, obtain described mobile subscriber's IMSI International Mobile Subscriber Identity IMSI and International Mobile Equipment Identity sign IMEI, by the ASN.1 coded system described IMSI is encoded in the solicitation message, and send described solicitation message to equipment identity register by F interface, comprise IMSI and IMEI in the described solicitation message;
Described equipment identity register utilizes the decoding process of described ASN.1 coded system correspondence that described solicitation message is decoded and obtains IMSI and IMEI, utilizes described IMEI inquiry preset data table, if the failure refusal of tabling look-up inserts; If table look-up successfully, then judge the binding state of IMSI and IMEI, insert if be in the unbundling state then allow, allow access if be in binding state and described IMSI when consistent, otherwise then do not allow access with default IMSI.
The embodiment of the invention provides a kind of system of the mobile subscriber's of inspection legitimacy, comprises MSC/VLR and equipment identity register,
Described MSC/VLR receives when the mobile subscriber carries out position renewal or service access process, obtain described mobile subscriber's IMSI and IMEI, with described IMSI and IMEI binding, by the ASN.1 coded system described IMSI is encoded in the solicitation message, and described solicitation message is sent to described equipment identity register by F interface, comprise IMSI and IMEI in the described solicitation message;
Described equipment identity register utilizes the decoding process of described ASN.1 coded system correspondence to parse IMSI and IMEI from described solicitation message, utilizes described IMEI inquiry preset data table, if the failure refusal of tabling look-up inserts; If table look-up successfully, then judge the binding state of IMSI and IMEI, insert if be in the unbundling state then allow, allow access if be in binding state and described IMSI when consistent, otherwise then do not allow access with default IMSI.
The embodiment of the invention provides a kind of equipment identity register of the mobile subscriber's of inspection legitimacy, comprising: detect request decoding unit and legitimacy judging unit;
Described detection request decoding unit is used for utilizing the decoding process of ASN.1 coded system correspondence to parse IMSI and IMEI from the solicitation message of receiving by F interface;
Described legitimacy judging unit is used for according to described IMSI and IMEI, utilizes described IMEI inquiry preset data table, if the failure refusal of tabling look-up inserts; If table look-up successfully, then judge the binding state of IMSI and IMEI, insert if be in the unbundling state then allow, allow access if be in binding state and described IMSI when consistent, otherwise then do not allow access with default IMSI.
In the embodiments of the invention, mobile subscriber IMSI and mobile user identification IMEI are bound together, strengthened mobile subscriber's fail safe by the method that increases parameter.
Embodiment
The method flow that the embodiment of the invention is a kind of checks mobile subscriber's legitimacy may further comprise the steps as shown in Figure 2:
Step s201, MSC/VLR receives that the mobile subscriber does the position and (for example: start shooting and adhere to upgrades, period position upgrades, the general position is upgraded, the intra-office position is upgraded, interoffice position renewal etc.) or (for example: call out to insert do the service access process, note inserts, supplementary service access etc.) obtain mobile subscriber IMEI and IMSI respectively by the Identity flow process, judge then whether this MSC/VLR equipment supports the CHECKIMEI extended message, can judge whether to support CHECK IMEI extended message by self-defining extension flag CheckImeiExFlag in the present embodiment, if do not support then carry out subsequent treatment according to the mode of 3GPP (The 3rd GenerationPartnership Project, third generation partner program) regulation; If support then use coded system such as ASN.1 that IMSI is encoded in the CHECK IMEI message, follow-up according to the 3GPP specification handles:
CHECK IMEI OPERATION
ARGUMENT
imei OCTET STRING(SIZE(8))
imsi OCTET STRING(SIZE(3..8))OPTIONAL,
RESULT
equipmentStatus ENUMERATED{
whiteListed (0),
blackListed (1),
greyListed (2)}
ERRORS{
--systemFailure--localValue:34,
--dataMissing--localValue:35,
--unknownEquipment--localValue:7}
::=localValue:43
Wherein, the CHECK IMEI message format after the expansion is as shown in table 2, and wherein the M representative must be selected, and C represents the selection of having ready conditions, and the O representative is optional:
Table 2:
| Parameter name |
Request (request) |
Indication (indication) |
Response (response) |
Confirm (affirmation) |
| Invoke id |
M |
M(=) |
M(=) |
M(=) |
| IMEI |
C |
C(=) |
C |
C(=) |
| IMSI |
C |
C(=) |
|
|
| Equipment status (equipment state) |
|
|
C |
C(=) |
| User error (user error) |
|
|
C |
C(=) |
| Provider error (operator's mistake) |
|
|
|
O |
Step s202, EIR equipment judge whether this EIR equipment supports CHECK IMEI extended message after receiving CHECK IMEI message, if do not support then get final product according to the 3GPP specification handles.If support CHECK IMEI extended message, then CHECK IMEI extended message decoded and obtain IMEI and IMSI according to the decoding process of the coded system correspondence among the step s201.Use MEI to inquire about predefined tables of data (as table 3), if the failure refusal of tabling look-up inserts; If table look-up successfully, judge binding state by binding sign, if for unbundling then allow to insert, if for binding then check whether current I MSI is consistent with the IMSI of IMSI field in the table, if unanimity then allow to insert, on the contrary then do not allow to insert.
A kind of mobile subscriber's of inspection legitimacy of embodiment of the invention method binds together mobile subscriber IMSI and mobile user identification IMEI by the method that increases parameter, strengthened mobile subscriber's fail safe, more can satisfy customer requirements, thereby strengthen the serviceability of mobile communication.
Table 3:
With reference to figure 3, be concrete handling process in the MSC/VLR equipment:
Step s301, mobile subscriber carry out the position to be upgraded or service observation;
Step s302, whether the MSC/VLR equipment disposition needs to carry out CHECK IMEI is checked, if do not need, then handles by normal flow; If desired, then change step s303;
Step s303, obtain mobile subscriber's IMSI and IMEI, and IMSI is encoded in the CHECK IMEI message according to certain coded system, if it is unusual, then by unusual flow processing, promptly, stop current dialogue, and remove current location more new technological process or operation flow according to 3GPP29.002 protocol anomaly processing mode;
Step s304, MSC/VLR equipment sends to equipment identity register with this CHECK IMEI message by F interface; If unusual, then by unusual flow processing;
Step s305 waits for the IMEI testing result;
Step s306, MSC/VLR equipment is received CHECKIMEI response message from equipment identity register by F interface; If unusual, then by unusual flow processing;
Step s307, MSC/VLR equipment judges according to response results whether the mobile subscriber allows service access, if allow to insert, then according to original processing, otherwise abnormality processing.
With reference to figure 4, be concrete handling process in the equipment identity register:
Step s401, equipment identity register receive CHECK IMEI request message;
Whether step s402, judgment device marker register support CHECK IMEI extended message, if do not support, then handle by normal flow; If support, then change step s403;
Step s403 decodes IMSI and IMEI according to the decoding process corresponding with coded system from CHECK IMEI extended message, if decoding is unusual, then change step s404, if decoding is normal, then changes step s405;
Step s404, equipment identity register sends U-abort message to MSC/VLR equipment, carries cause value DataUnexpect in this message;
Step s405 utilizes IMSI and IMEI to carry out the user validation inspection, obtains status of user equipment; Step s407 is then changeed in the failure if table look-up, if table look-up successfully, then changes step s406;
Step s406, filling in status of user equipment is checking result, changes step s408;
Step s407 fills in status of user equipment for white table user, changes step s408; Eir use IMEI tables look-up to fail and can illustrate that the user does not open the Imei audit function at all, so think that this user is white table user's (validated user).Eir uses IMEI to table look-up successfully, to check also that simultaneously this writes down whether IMEI and IMSI binding, if unbundling then think white table user, if binding, whether the IMSI that then checks binding is current I MSI, be then to be white table user, if the non-current I MSI of IMSI of binding then be black table user (disabled user).
Step s408, equipment identity register is by the legitimacy state notifying MSC/VLR equipment of CHECK IMEI response message with this subscriber equipment.
The embodiment of the invention also provides a kind of system of the mobile subscriber's of inspection legitimacy, as shown in Figure 5, comprise MSC/VLR equipment 100 and equipment identity register 200, MSC/VLR equipment 100 is with IMSI and IMEI binding, be encoded in the solicitation message, and solicitation message is sent to equipment identity register 200; Equipment identity register 200 parses IMSI and IMEI from solicitation message, and determines mobile subscriber's legitimacy according to IMSI and IMEI.
Wherein, MSC/VLR equipment 100 comprises: detect request coding unit 110, be used for IMSI and IMEI binding are encoded in the solicitation message; Detect request transmitting unit 120, be used for solicitation message is sent to equipment identity register 200; IMSI and IMEI acquiring unit 130, be used for obtaining IMSI and IMEI by identification process, identification process is that the position is upgraded or the service access process is used the TMSI identifying user when the mobile subscriber carries out, but current MSC/VLR the inside does not have user's permanent identification IMSI information or current MSC/VLR the inside not to have mobile subscriber equipment sign (IMEI) information, MSC/VLR needs to send Identity message request mobile subscriber toward the A/IU interface provides IMSI or IMEI, the mobile subscriber responds Identity-Ack message can carry IMSI or IMEI information, gets identification process and finishes; Support extended message judging unit 140, be used to judge whether MSC/VLR supports extended message.
Equipment identity register 200 comprises: detect request decoding unit 210, be used for parsing IMSI and IMEI from solicitation message; Legitimacy judging unit 220 is determined mobile subscriber's legitimacy according to IMSI and IMEI; Support extended message judging unit 230, be used to judge whether MSC/VLR supports extended message.Legitimacy judging unit 220 specifically comprises: the subelement 221 of tabling look-up is used to utilize IMEI inquiry preset data table; Binding state judgment sub-unit 222 after the success that is used to table look-up, is determined binding state by the binding sign; IMSI matched and searched subelement 223 is used for binding state and is when binding, checks whether IMSI is consistent in current I MSI and the tables of data, and unanimity then allows access.
A kind of mobile subscriber's of inspection legitimacy of embodiment of the invention system binds together mobile subscriber IMSI and mobile user identification IMEI by the method that increases parameter; can realize protection to the mobile subscriber; avoid antitheft technically; more can satisfy customer requirements, thereby strengthen the serviceability of mobile communication.
More than disclosed only be several specific embodiment of the present invention, still, the present invention is not limited thereto, any those skilled in the art can think variation all should fall into protection scope of the present invention.