CN101945485B - Method, device and system for performing access control judgment by core network - Google Patents

Abstract

The invention discloses a method, device and system for core network to perform access control judgment. In the solution of the present invention, after the access mode of the base station is changed, the mobility management entity obtains user access information that needs to perform access control judgment, and the mobility management entity performs access control judgment on the corresponding user according to the obtained user access information , so that the core network can avoid conflicts with the access control judgment of the base station gateway, there will be no missed or wrong judgments, and it is ensured that after the access mode of the base station changes, users with different CSG capabilities can accurately Complete access control.

Description

A method, device and system for core network access control judgment

technical field

The present invention relates to the communication field, and in particular refers to a method, device and system for a core network to perform access control judgment on a connected user after the access mode of a base station is changed.

Background technique

Home base stations are small, low-power base stations that are deployed in indoor places such as homes and offices. The coverage of cellular wireless communication systems is insufficient. The advantages of femto base stations are affordable, convenient, low power output, plug and play, broadband access, and support for single-mode terminals.

The femto base station can be applied in the third generation (3G, 3Generation) or long term evolution (LTE, Long Term Evolution) wireless communication network. In order to facilitate the management of the HNB, a new network element, namely the HNB gateway, is introduced into the wireless access network. The main functions performed by the home base station gateway are: verifying the security of the home base station, processing the registration of the home base station, operating and maintaining the home base station, configuring and controlling the home base station according to the operator's requirements, and being responsible for switching the core network (CN, Core Network) Data information between HeNB and HeNB.

Figure 1 is a schematic diagram of a 3G wireless network architecture including a home base station. As shown in Figure 1, the 3G home base station is connected to the home base station gateway through the newly defined Iuh interface, and the home base station gateway provides the home base station with an IuCs interface to the circuit domain of the core network. and the IuPS interface to the core network packet domain. For 3G wireless networks, the home base station gateway is mandatory in deployment to shield the impact on user equipment (UE, User Equipment) and the network side after the introduction of home base stations; for LTE wireless networks, the home base station gateway It is optional during deployment. Therefore, in the LTE wireless network, there are two connection modes between the home base station and the core network. One is that the home base station is directly connected to the network elements of the core network, as shown in Figure 2; the other is One is that the home base station is connected to the network elements of the core network through the home base station gateway, as shown in FIG. 3 . In Figure 3, for the case of introducing the HNB gateway, the HNB gateway may not integrate user plane functions. At this time, the HNB will directly establish a user plane connection with the user plane gateway of the core network, as shown in Figure 4. In this way, the user plane can be flattened and the data transmission delay can be reduced.

The access modes of the femto base station are divided into three types: closed mode, mixed mode and open mode. Since the femto base station, as a user-level device, has a certain degree of privacy, there are subscription restrictions on the use of users in different access modes. When the access mode of the home base station is the closed mode, only the subscribers of the home base station can access the base station and enjoy the services provided by the home base station; when the access mode of the home base station is the open mode, any user can access the home base station. At this time, the home base station is equivalent to the macro base station; when the access mode of the home base station is the mixed mode, any user can also access the home base station, but different levels need to be distinguished according to whether the user has signed a contract, that is, It is said that the subscribed users have higher service priority when using the mixed-mode home base station, and can enjoy better service quality and service category.

The access control judgment of whether to allow users to use the HNB can be performed by the HNB gateway or by the mobility management entity of the core network, that is, the access control judgment point can be at the HNB gateway or at the mobility management entity of the core network. management entity. Choose between the HNB gateway and the mobility management entity according to whether the UE has closed subscriber group (CSG, Closed Subscriber Group) capability and whether the core network supports the CSG concept. The following briefly describes the selection and execution methods of the access control judgment point.

The CSG concept was proposed after the introduction of the home base station. Usually, users in a family or an enterprise form a closed subscriber group, which is distinguished and identified by a CSG ID (CSG ID); the home base stations that provide services to users in the closed subscriber group have the same CSG ID. A user can access HNBs corresponding to multiple closed user groups by signing a contract with an operator, such as the user's office, home, and so on. In this way, the concept of an allowed closed user group list (ACL, AllowedCSG List) is introduced, and the ACL can be stored in the UE of the user and the user data server on the network side.

If the user's UE has CSG capability, that is, the UE can identify and read information such as the CSG identifier, and the core network supports the concept of CSG, that is, the core network supports ACL processing, then the access control judgment point for the user corresponding to the UE is located in the mobile sex management entity. When the user initiates access, the mobility management entity uses the ACL issued by the user data server, combined with the CSG identifier and access mode reported by the home base station, to perform access control judgment on the user.

If the user's UE does not have the CSG capability or the core network does not support the CSG concept, then the access control decision point for the user corresponding to the UE is located at the HNB gateway. When the user initiates access, the HNB gateway uses the corresponding relationship between the user identifier and the HNB stored by itself or acquired through the configuration server to perform access control judgment on the user. The configuration server may be a database used to store user-related information in the wireless network, such as the correspondence between user identifiers and home base stations.

If the access mode of the HNB changes, it will have a certain impact on the currently connected users. For example, if the access mode of the home base station is changed from hybrid mode or open mode to closed mode, it is necessary to re-execute access control for users who are currently connected, and release or switch unsubscribed users to other suitable cells.

For the case where the core network supports the CSG concept and the access control judgment points are different due to the different CSG capabilities of the UE, the specific processing is as follows: the access mode of the home base station is changed from the mixed mode or the open mode to the closed mode, The femto base station will notify the femto base station gateway and the mobility management entity of the changed access mode, that is, the current access mode; the femto base station gateway uses the correspondence between the user identity and the base station for all users that do not have CSG capabilities and are in the connected state. Although the mobility management entity can determine all the currently connected users through the HNB ID reported by the HNB or all the cell IDs corresponding to the HNB, the mobility management entity cannot The user's CSG capability is identified, so that it is impossible to distinguish which users should be re-executed for access control judgment, and then conflicts with the access control judgment of the home base station gateway or produces missed or misjudged situations.

Contents of the invention

In view of this, the main purpose of the present invention is to provide a method, device and system for the core network to perform access control judgment, so that the core network can accurately execute the access control judgment for the user when the access mode of the base station changes.

In order to achieve the above object, technical solution of the present invention is achieved in that way:

A method for performing access control judgment by a core network. After an access mode of a base station is changed, the method includes: a mobility management entity obtains user access information that needs to perform access control judgment, and performs an access control based on the obtained user access information. The corresponding user performs access control judgment.

The user access information is user information; the mobility management entity obtaining the user access information that needs to perform control judgment includes: the base station gateway providing the mobility management entity with user information that needs to perform access control judgment.

The user information is: user ID; or user Iu connection ID.

The user access information is an access control flag; the mobility management entity obtaining the user access information that needs to perform control judgment includes: the mobility management entity records the access control in the mobility management context generated by the user's initial access mark; the mobility management entity obtains users who need to perform access control judgment, including: according to the base station ID or all cell IDs deployed under the base station, find all users in the connected state under the base station that has changed the access mode, and according to the record The access control flag identifies the users who need to perform access control decisions.

The method further includes: the base station gateway provides the mobility management entity with the base station identity of the base station that changes the access mode, or all cell identifiers deployed under the base station; and/or, the base station gateway provides a user that does not have CSG capability and is in a connected state Executes access control decisions.

A device for performing access control judgment by a core network, the device comprising:

The obtaining unit is used to obtain user access information that needs to be judged by the mobility management entity for access control after the access mode of the base station is changed;

A judging unit, configured to perform access control judgment on a corresponding user according to the user access information.

The user access information is an access control mark; the acquiring unit includes:

a recording unit, configured to record the access control flag in the user's MM context;

A storage unit for storing the MM context of the user including the access control flag;

The access unit is configured to find all connected users under the base station whose access mode has changed according to the base station identifier or all cell identifiers deployed under the base station, and determine by accessing the access control flag of the user stored in the storage unit A user with CSG capability and in the connected state.

The user access information is user information, and the user information comes from a base station gateway; and/or,

The user access information is a user ID or a user Iu connection ID.

A system for performing access control judgment by a core network, the system comprising:

The base station gateway is used to provide the mobility management entity with user access information that needs to perform access control judgment after the access mode of the base station changes;

The mobility management entity is configured to perform access control judgment on the corresponding user according to the received user access information.

The user access information is: user identifier; or user Iu connection identifier; and/or,

The base station gateway is further configured to provide the mobility management entity with the base station identifier of the base station that changes the access mode, or all cell identifiers deployed under the base station; and/or,

The base station gateway may further be used to perform access control judgment on users that do not have CSG capability and are in a connected state.

In the solution provided by the present invention, after the access mode of the base station is changed, the mobility management entity obtains user access information that needs to perform access control judgment, and the mobility management entity performs access to the corresponding user according to the obtained user access information. Control judgment, so that the core network can avoid conflicts with the access control judgment of the base station gateway, and there will be no missed or wrong judgments. Accurately complete access control.

Description of drawings

FIG. 1 is a schematic diagram of a 3G wireless network architecture including a home base station;

FIG. 2 is a first schematic diagram of an LTE wireless network architecture including a home base station;

FIG. 3 is a second schematic diagram of an LTE wireless network architecture including a home base station;

FIG. 4 is a schematic diagram 3 of an LTE wireless network architecture including a home base station;

FIG. 5 is a message flow chart of Embodiment 1 of the present invention;

Fig. 6 is a message flow chart of the second embodiment of the present invention;

FIG. 7 is a message flow chart of the third embodiment of the present invention;

FIG. 8 is a schematic structural diagram of a device for performing access control judgment in the present invention;

Fig. 9 is a schematic structural diagram of an acquisition unit in the present invention;

FIG. 10 is a schematic diagram of the system structure of the core network performing access control judgment in the present invention.

Detailed ways

In the present invention, after the access mode of the base station is changed, the mobility management entity obtains user access information that needs to perform access control judgment, and the mobility management entity performs access control judgment on the corresponding user according to the obtained user access information.

Specifically, after the access mode of the base station is changed, the HNB gateway provides the mobility management entity with user information that needs to perform access control judgment, and the mobility management entity performs access control judgment on the corresponding user according to the received user information, The user information may be a user identifier, or may be a user Iu connection identifier;

Or, the mobility management entity records the access control flag in the user's mobility management (MM) context; after the access mode of the base station changes, the mobility management entity performs access control according to the recorded access control flag The judged corresponding user executes the access control judgment.

Taking the change of the access mode of the home base station as an example, the specific implementation of the mobility management entity in the present invention to perform access control judgment on the user will be described in detail below. The change of the access mode of the HNB may refer to the change of the HNB from the hybrid mode or the open mode to the closed mode, or may refer to the change of the HNB from the open mode to the hybrid mode.

Fig. 5 is a message flow chart of a specific embodiment 1 of the present invention. As shown in Fig. 5, in this embodiment, the specific processing after the access mode of the home base station is changed includes:

Step 501: Under the supervision of the operator, the manager of the HNB can change the access mode of the HNB.

Step 502: After the access mode of the HNB is changed, send the HNB registration request message to the HNB gateway. The HNB registration request message is based on the HNBAP protocol and includes the HNB identifier and the changed HNB The access mode of the HNB, that is, the current access mode of the HNB.

Step 503: After receiving the HNB registration request message, the HNB gateway stores the current access mode of the HNB, and returns a HNB registration acceptance message to the HNB.

Step 504: When the HNB gateway determines that there are users in the connected state under the HNB that changed the access mode, the HNB gateway re-executes the access control judgment for the users that do not have CSG capabilities and are in the connected state. The user of the home base station in the access mode initiates a release or handover operation; for the user with CSG capability and in the connected state, the home base station gateway will instruct the mobility management entity to perform access control judgment again.

Step 505: The home base station gateway sends a radio access network application part (RANAP) information exchange request message to the mobility management entity. If only one home base station cell is deployed under the home base station that changes the access mode, the RANAP information exchange request message Include the home base station identification, the current access mode of the home base station, and the user identification that needs to perform access control judgment; if multiple home base station cells are deployed under the home base station that changes the access mode, the RANAP information exchange request message Including cell identities of all HNBs deployed under the HNB that changes the access mode, the current access mode of the HNB, and user IDs that need to perform access control judgment.

Step 506: After receiving the RANAP information exchange request message, the mobility management entity returns a RANAP information exchange confirmation message to the HNB gateway.

Step 507: The mobility management entity finds the corresponding user in the MM context of all users according to the user ID reported by the HNB gateway, re-executes the access control judgment in combination with the current access mode of the HNB, and changes the access mode for unsuitable access The user of the HNB in the entry mode initiates a release or handover operation. The specific implementation of the access control judgment performed by the mobility management entity is basically the same as the prior art, so it will not be repeated here.

Fig. 6 is a message flow chart of the second embodiment of the present invention. As shown in Fig. 6, in this embodiment, the specific processing after the access mode of the home base station is changed includes:

Step 601: Under the supervision of the operator, the manager of the HNB can change the access mode of the HNB.

Step 602: After the access mode of the HNB is changed, send the HNB registration request message to the HNB gateway, the HNB registration request message is based on the HNBAP protocol, and includes the HNB identifier and the changed access mode of the HNB, namely The current access mode of the HNB.

Step 603: After receiving the HNB registration request message, the HNB gateway stores the current access mode of the HNB, and returns a HNB registration acceptance message to the HNB.

Step 604: When the HNB gateway determines that there are users in the connected state under the HNB that changes the access mode, the HNB gateway re-executes the access control judgment for the connected users that do not have CSG capabilities, and the users that are not suitable for access change The user of the home base station in the access mode initiates a release or handover operation; for the user with CSG capability and in the connected state, the home base station gateway will instruct the mobility management entity to perform access control judgment again.

Step 605: The HNB gateway sends a RANAP information exchange request message to the mobility management entity. If only one HNB cell is deployed under the HNB that changes the access mode, the RANAP information exchange request message includes the HNB identifier, HNB The current access mode of the user, and the Iu connection identifier of the user that needs to perform access control judgment; if there are multiple home base station cells deployed under the home base station that changes the access mode, the RANAP information exchange request message contains the information for changing the access mode All HNB cell identities deployed under the HNB, the current access mode of the HNB, and the Iu connection ID of the user that needs to perform access control judgment.

Step 606: After receiving the RANAP information exchange request message, the mobility management entity returns a RANAP information exchange confirmation message to the HNB gateway.

Step 607: The mobility management entity finds the corresponding user in the MM context of all users according to the user Iu connection identifier reported by the HNB gateway, and re-executes the access control judgment in combination with the current access mode of the HNB, and the user who is not suitable for access The user of the HNB changing the access mode initiates a release or handover operation.

Fig. 7 is a message flow chart of the third specific embodiment of the present invention. As shown in Fig. 7, in this embodiment, the specific processing after the access mode of the home base station is changed includes:

Step 701: The user's UE initiates a non-access stratum (NAS) message to trigger the establishment of a radio resource control (RRC) connection between the user and the HNB. At this time, the UE also reports the UE's CSG capability.

Step 702: The user's NAS message is sent to the HNB through the RRC initial direct transfer message for buffering.

Step 703: After receiving the RRC initial direct transmission message, the HNB sends a user registration request message to the HNB gateway to initiate user registration. The user registration request message includes the user ID and the UE's CSG capability.

Step 704: After receiving the user registration request message, the HNB gateway performs access control judgment for users without CSG capabilities. Since the access control judgment point for users with CSG capabilities is at the mobility management entity, the HNB The gateway always accepts registration requests from CSG-capable users.

Step 705: The HNB gateway returns a user registration acceptance message to the HNB, and the user registration acceptance message includes the context identifier assigned by the HNB gateway, which is used to identify the user between the HNB and the HNB gateway.

Step 706: After receiving the user registration acceptance message, the HNB sends the cached NAS message to the HNB gateway through the RANAP connection message.

Step 707: After receiving the RANAP connection message, the HNB gateway sends the RANAP connection message to the mobility management entity. The RANAP connection message includes the NAS message, the CSG identifier and the access mode of the HNB, so that the core network completes the access Control judgment.

Step 708: After receiving the RANAP connection message, the mobility management entity performs access control judgment according to the CSG identity of the home base station, the access mode and the user's ACL, and records the access control flag in the user's MM context after success, so as to use The subsequent mobility management entity performs access control judgment.

Step 709: Under the supervision of the operator, the manager of the HNB can change the access mode of the HNB.

Step 710: After the access mode of the HNB is changed, send the HNB registration request message to the HNB gateway, the HNB registration request message is based on the HNBAP protocol, and includes the HNB identifier and the changed access mode of the HNB, namely The current access mode of the HNB.

Step 711: After receiving the HNB registration request message, the HNB gateway stores the current access mode of the HNB, and returns a HNB registration acceptance message to the HNB.

Step 712: When the HNB gateway determines that there are users in the connected state under the HNB that changed the access mode, the HNB gateway re-executes the access control judgment for the users that do not have CSG capabilities and are in the connected state. The user of the HNB in the access mode initiates a release or handover operation.

Step 713: The HNB gateway sends a RANAP information exchange request message to the mobility management entity. If only one HNB cell is deployed under the HNB that changes the access mode, the RANAP information exchange request message includes the HNB identifier and the HNB If there are multiple HNB cells deployed under the HNB that changes the access mode, the RANAP information exchange request message includes all HNB cell IDs and HNBs deployed under the HNB that changes the access mode current access mode.

Step 714: After receiving the RANAP information exchange request message, the mobility management entity returns a RANAP information exchange confirmation message to the HNB gateway.

Step 715: The mobility management entity finds all connected users under the HNB that have changed the access mode according to the HNB ID or the cell IDs of all HNBs deployed under the HNB, and determines that they have CSG according to the recorded access control flag. Users who are capable and in the connected state re-execute the access control judgment based on the current access mode of the home base station, and initiate a release or handover operation for users who are not suitable for accessing the home base station whose access mode has been changed.

The specific implementation of the present invention is described above only by taking the home base station as an example. The solution of the present invention is not only applicable to this, but the solution of the present invention can be applied to the situation where any base station has multiple access modes. Therefore, the base station in the solution of the present invention It can be HNB or HeNB, or any other base station that can work in multiple access modes.

Fig. 8 is a schematic structural diagram of a device for access control judgment in the present invention. As shown in Fig. 8, the device includes: an acquisition unit and a judgment unit, wherein the acquisition unit is used to obtain the information required by the mobile station after the access mode of the base station changes. The user access information for the permanent management entity to perform access control judgment; the judging unit is configured to perform access control judgment on the corresponding user according to the user access information. The user access information may be user information or an access control flag. The device is a mobility management entity of the core network.

When the user access information is user information, the user information comes from the base station gateway. Specifically, the user information may be a user ID or a user Iu connection ID.

Figure 9 is a schematic structural diagram of the acquisition unit in the present invention, as shown in Figure 9, at this time, the user access information is an access control flag, the acquisition unit may include a recording unit, a storage unit, and an access unit, and the recording unit is used for user access The access control flag is recorded in the MM context of the base station; the storage unit is used to store the MM context of the user containing the access control flag; the access unit is used to find the base station that changes the access mode according to the base station ID or all cell IDs deployed under the base station All the users in the connected state are identified, and the users with CSG capability and in the connected state are determined by accessing the access control tokens of the users stored in the storage unit.

Fig. 10 is a schematic diagram of the system structure of the access control judgment of the core network in the present invention. As shown in Fig. 10, the system includes: a base station gateway and a core network, wherein the base station gateway is used for changing the access mode of the base station to the core The network provides user access information that needs to perform access control judgment; the core network is used to perform access control judgment on corresponding users according to the received user access information. The user access information may be a user ID, or may be a user Iu connection ID.

The base station gateway is further configured to provide the mobility management entity with the base station identifier of the base station changing the access mode, or all cell identifiers deployed under the base station.

The base station gateway can also be further used to perform access control judgment for users that do not have CSG capability and are in a connected state.

The above descriptions are only preferred embodiments of the present invention, and are not intended to limit the protection scope of the present invention.

Claims (5)

1. A method for access control judgment of a core network is characterized in that after an access mode of a base station is changed, the method comprises the following steps:

the mobility management entity obtains user access information needing to execute access control judgment, and executes access control judgment on corresponding users according to the obtained user access information; wherein,

the user access information is an access control mark;

the step of the mobility management entity obtaining the user access information needing to execute the control judgment comprises the following steps: the mobility management entity records an access control mark in a mobility management context generated by user initialization access;

the method for the mobility management entity to obtain the user needing to execute the access control judgment comprises the following steps: and searching all users in a connection state under the base station with the changed access mode according to the base station identification or all cell identifications deployed under the base station, and determining the users needing to execute access control judgment according to the recorded access control marks.

2. The method of claim 1, further comprising:

the base station gateway provides the base station identification of the base station changing the access mode or all cell identifications deployed under the base station to a mobility management entity; and/or the presence of a gas in the gas,

and the base station gateway executes access control judgment on the user which does not have CSG capability and is in a connected state.

3. An apparatus for performing access control judgment in a core network, the apparatus comprising:

an obtaining unit, configured to obtain user access information that needs to be subjected to access control judgment by a mobility management entity after an access mode of a base station is changed;

a judging unit, configured to perform access control judgment on a corresponding user according to the user access information;

wherein, the user access information is an access control mark;

the acquisition unit includes:

a recording unit for recording an access control flag in an MM context of a user;

a storage unit for storing an MM context of a user including an access control flag;

and the access unit is used for searching all the users in the connection state under the base station with the changed access mode according to the base station identification or all the cell identifications deployed under the base station, and determining the users with the CSG capability and in the connection state by accessing the access control marks of the users stored in the storage unit.

4. A system for performing access control determination in a core network, the system comprising:

the base station gateway is used for providing user access information which needs to execute access control judgment to the mobility management entity after the access mode of the base station is changed;

the mobile management entity is used for executing access control judgment on corresponding users according to the received user access information;

wherein, the user access information is an access control mark, and the mobility management entity is further configured to: recording an access control mark in the context of user mobility management, searching all users in a connection state under the base station with a changed access mode according to the base station mark or all cell marks deployed under the base station, and determining the users in the connection state with CSG capability according to the recorded access control mark.

5. The system of claim 4,

the base station gateway is further used for providing the base station identification of the base station with the changed access mode or all cell identifications deployed under the base station for the mobility management entity; and/or the presence of a gas in the gas,

the base station gateway may be further configured to perform access control judgment on a user that does not have CSG capability and is in a connected state.