CN105813064A - Service opening processing method and network element - Google Patents

Abstract

Embodiments of the present invention provide a service provisioning processing method and a network element, the processing method includes: the service provisioning system network element receives the service provisioning request sent by the service system network element; the service system network element is a network element in the business support system BSS ; The network element of the service activation system obtains the identification of the BSS and the identification of the business accepted by the BSS according to the service activation request, and determines that the service activation request is legal according to the identification of the BSS and the identification of the business accepted by the BSS; the network element of the service activation system is accepted by the BSS Service provisioning by business; through the processing method and device for service provisioning, after the service provisioning system network element receives the service provisioning request sent by the business system network element in the BSS, it will not immediately perform service provisioning according to the service provisioning request, but according to the BSS The logo and the logo of the business accepted by the BSS determine that the service activation request is legal; only when the service activation request is confirmed to be legal, will the service be activated for the business accepted by the BSS to ensure the security of the service activation.

Description

Processing method and network elements for service provisioning

technical field

The embodiments of the present invention relate to the technical field of communications, in particular, a service provisioning processing method and a network element.

Background technique

As users' requirements for communication services become more and more diversified, multiple business support systems (BSS) are deployed in the IT-based strategic communication network to meet different business needs of users; when users request network services, the The corresponding BSS notifies the network element that provides the network service in the core network of the network service ordered by the user to realize service provisioning; specifically, the BSS system provides the service provisioning system (Provisioning, which can be a subsystem in the BSS or an independent system) ) to submit the user's service provisioning request, and the service provisioning system converts the service request into a language recognizable by the core network element, and completes the service provisioning according to the interaction protocol between the core network element and the BSS.

Due to the increasing number of services required by users, in order to improve service efficiency, the service provisioning system is gradually opened up. Each BSS deployed in the communication network can submit a service provisioning request to the service provisioning system, but the service provisioning system cannot identify whether the submitted service provisioning request is legal. , thus affecting the security of service provisioning. For example, the first BSS illegally submits a service provisioning request to the service provisioning system to log out users in the second BSS. Since the service provisioning system cannot recognize the service provisioning request submitted by the first BSS Whether it is legal or not, users in the second BSS are logged out according to the service activation request of the first BSS, which interferes with the business implementation of the second BSS and adversely affects users' access to network services.

Contents of the invention

The invention provides a service activation processing method and a network element, which are used for optimizing the service activation process and improving the security of the service activation.

In a first aspect, an embodiment of the present invention provides a service activation processing method, including:

The service provisioning system network element receives the service provisioning request sent by the service system network element; the service system network element is a network element in the business support system BSS;

The network element of the service activation system obtains the identifier of the BSS and the identifier of the service accepted by the BSS according to the request for activation of the service, and determines that the request for activation of the service is legal according to the identifier of the BSS and the identifier of the service accepted by the BSS;

The network element of the service provisioning system performs service provisioning for the service accepted by the BSS.

With reference to the first aspect, in the first implementation manner, the determining that the service activation request is legal according to the identifier of the BSS and the identifier of the service accepted by the BSS includes:

The network element of the service provisioning system checks the validity of the service provisioning request by sending the obtained identifier of the BSS and the identifier of the service accepted by the BSS to the user's home network element;

The service provisioning system network element receives the response message sent by the user's home network element for confirming that the service provisioning request is legal.

With reference to the first aspect, in the second implementation manner, the determining that the service activation request is legal according to the identifier of the BSS and the identifier of the service accepted by the BSS includes:

The network element of the service provisioning system queries user attribution information; wherein, the user attribution information includes at least one BSS identifier and the corresponding relationship between each BSS identifier and each service identifier;

When the network element of the service activation system determines that the obtained identifier of the BSS and the identifier of the service accepted by the BSS conform to the corresponding relationship included in the user attribution information, it is determined that the service activation request is legal.

With reference to the second implementation manner of the first aspect, in the third implementation manner, the identification of the BSS acquired by the determination and the identification of the service accepted by the BSS conform to the corresponding relationship included in the user attribution information, including:

The network element of the service provisioning system queries the user attribution information according to the acquired identifier of the BSS to obtain at least one service identifier corresponding to the acquired identifier of the BSS;

The network element of the service provisioning system determines that there is an identifier of the service accepted by the BSS in at least one service identifier corresponding to the obtained identifier of the BSS, and then determines that the acquired identifier of the BSS and the identifier of the service accepted by the BSS The identification conforms to the corresponding relationship included in the user attribution information.

With reference to the second implementation manner of the first aspect, in the fourth implementation manner, the determining that the identifier of the BSS and the identifier of the service accepted by the BSS conform to the corresponding relationship included in the user affiliation information includes:

The network element of the service provisioning system queries the user attribution information according to the identifier of the service accepted by the BSS to obtain the identifier of the BSS corresponding to the identifier of the service accepted by the BSS;

The network element of the service provisioning system determines that the obtained identifier of the BSS is consistent with the identifier of the BSS obtained from the user attribution information query, then determines the identifier of the BSS obtained according to the service provisioning request and the BSS accepted by the BSS. The identifier of the service conforms to the corresponding relationship included in the user attribution information.

In combination with any one of the second to fourth implementations of the first aspect, in the fifth implementation, the processing method further includes:

The network element of the service provisioning system receives the corresponding relationship update message issued by the system management network element;

The network element of the service provisioning system modifies the correspondence included in the user affiliation information according to the correspondence update message.

Combining the first aspect to the fifth implementation manner of the first aspect, in the sixth implementation manner, the identifier of the business accepted by the BSS is a user identifier; the service activation request further includes an identifier of an operation type;

The operation type is any one of the following at least three types:

Account opening, account cancellation, number portability and network transfer.

In combination with the first aspect to the sixth implementation of the first aspect, in the seventh implementation, before determining that the service activation request is legal according to the identifier of the BSS and the identifier of the service accepted by the BSS, the method further includes:

The network element of the service provisioning system performs identity verification on the network element of the service system according to the account number and password submitted by the network element of the service system, and determines that the network element of the service system passes the authentication.

In a second aspect, an embodiment of the present invention provides a service activation processing method, including:

The user's home network element receives the identifier of the BSS sent by the network element of the service provisioning system and the identifier of the service accepted by the BSS;

The user's home network element judges whether the received BSS identifier and the service identifier accepted by the BSS conform to the information stored in the user's home network element according to the received identifier of the BSS and the identifier of the service accepted by the BSS. Correspondence; wherein, the user home network element stores at least one BSS identifier and the correspondence between each BSS identifier and each service identifier;

If the user's home network element determines that the received identifier of the BSS and the service identifier accepted by the BSS conform to the corresponding relationship stored in the user's home network element, then send a message to the network element of the service opening system for confirming the service A valid response message for the activation request.

With reference to the second aspect, in the first embodiment, the judging whether the received identifier of the BSS and the identifier of the service accepted by the BSS conforms to the identifier of the corresponding BSS stored in the user's home network element includes: :

The user home network element queries and obtains at least one service identifier corresponding to the received BSS identifier in the corresponding relationship stored in the user home network element according to the received BSS identifier:

The user home network element judges whether there is an identifier of the service accepted by the BSS in at least one service identifier corresponding to the received identifier of the BSS, and if so, determines the received identifier of the BSS and the identifier of the service accepted by the BSS. The identifier of the service conforms to the corresponding relationship stored in the user's home network element.

With reference to the first embodiment of the second aspect, in the second embodiment, the judging whether the identifier of the BSS and the identifier of the service accepted by the BSS conforms to the identifier of the corresponding BSS stored in the user's home network element includes: :

The user's home network element queries the corresponding relationship stored in the user's home network element according to the identification of the service accepted by the BSS to obtain the identification of the BSS, and obtains the BSS whose identification corresponds to the identification of the service accepted by the BSS ID of:

The user home network element judges whether the received BSS identifier is consistent with the BSS identifier obtained from the query, and if they are consistent, determines that the received BSS identifier and the service identifier accepted by the BSS conform to the Correspondence stored in the user's home network element.

In combination with the second aspect to the second embodiment of the second aspect, in the third embodiment, it also includes:

The network element to which the user belongs receives the corresponding relationship update message issued by the system management network element;

The user home network element modifies the stored correspondence according to the correspondence update message.

In the third aspect, the embodiment of the present invention provides a network element, the network element is a service provisioning system network element in the business support system BSS, including:

The receiving module is used to receive the service activation request sent by the service system network element;

A determining module, configured to obtain the identifier of the BSS and the identifier of the service accepted by the BSS according to the service activation request, and determine that the service activation request is legal according to the identifier of the BSS and the identifier of the service accepted by the BSS;

The processing module is configured to perform service activation for the business accepted by the BSS.

With reference to the third aspect, in the first embodiment, the determining module is specifically configured to send the obtained identifier of the BSS and the identifier of the service accepted by the BSS to the home network element of the user, and request the service provisioning carry out legal verification;

Receive a response message sent by the user's home network element for confirming that the service provisioning request is legal.

With reference to the third aspect, in the second embodiment, the determination module is specifically configured to query user affiliation information; wherein, the user affiliation information includes at least one BSS identifier, each BSS identifier, and each service identifier. Correspondence;

When it is determined that the obtained identifier of the BSS and the identifier of the service accepted by the BSS conform to the corresponding relationship included in the user attribution information, it is determined that the service activation request is legal.

With reference to the second implementation manner of the third aspect, in the third implementation manner, the determining module specifically includes:

A query unit, configured to, according to the obtained identifier of the BSS, inquire in the user attribution information to obtain the identifier of at least one service corresponding to the acquired identifier of the BSS;

A determining unit, configured to determine that the acquired identifier of the BSS matches the identifier of the service accepted by the BSS when at least one service identifier corresponding to the acquired identifier of the BSS exists in The corresponding relationship included in the user attribution information.

With reference to the second implementation manner of the third aspect, in the fourth implementation manner, the determination module includes:

A query unit, configured to query the user attribution information to obtain the identifier of the BSS corresponding to the identifier of the service accepted by the BSS according to the identifier of the service accepted by the BSS;

A determining unit, configured to determine the BSS identifier obtained according to the service provisioning request and the services accepted by the BSS when the acquired identifier of the BSS is consistent with the identifier of the BSS obtained from the user attribution information query. The identifier of conforms to the corresponding relationship included in the user attribution information.

With reference to any one of the second to fourth implementation manners of the third aspect, in the fifth implementation manner, a modification module is further included;

The receiving module is also used to receive a corresponding relationship update message issued by the system management network element;

The modification module is configured to modify the correspondence included in the user affiliation information according to the correspondence update message.

Combining the third aspect to the fifth implementation manner of the third aspect, in the sixth implementation manner, the identifier of the service accepted by the BSS is a user identifier; the service opening request further includes an identifier of an operation type;

The operation type is any one of the following at least three types:

Account opening, account cancellation, number portability and network transfer.

In combination with the third aspect to the sixth implementation manner of the third aspect, in the seventh implementation manner, it further includes:

The verification module is configured to perform identity verification on the service system network element according to the account number and password submitted by the service system network element, and determine that the service system network element passes the verification.

In a fourth aspect, an embodiment of the present invention provides a network element, where the network element is a user's home network element, including:

The receiving module is used to receive the identification of the BSS sent by the network element of the service provisioning system and the identification of the service accepted by the BSS;

A judging module, configured to judge whether the received BSS identifier and the identifier of the service accepted by the BSS conform to the corresponding information stored in the user's home network element according to the received identifier of the BSS and the identifier of the service accepted by the BSS. relationship; wherein, the user home network element stores at least one BSS identifier and the corresponding relationship between the identifiers of each BSS and the identifiers of each service;

The sending module is configured to send a message for confirmation to the network element of the service opening system if the judging module determines that the received identifier of the BSS and the identifier of the service accepted by the BSS conform to the corresponding relationship stored in the user's home network element. A valid response message to the service provisioning request.

With reference to the fourth aspect, in the first embodiment, the judging module is specifically configured to, according to the received BSS identifier in the corresponding relationship stored in the user's home network element, query and obtain the received BSS identifier corresponding to ID of at least one business of:

Judging whether there is an identifier of the service accepted by the BSS in at least one service identifier corresponding to the received identifier of the BSS, and if so, determining that the received identifier of the BSS and the identifier of the service accepted by the BSS conform to the Correspondence stored in the user's home network element.

With reference to the first implementation manner of the fourth aspect, in the second implementation manner, the judgment module is specifically configured to query and obtain the identity of the BSS according to the identity of the service accepted by the BSS in the corresponding relationship stored in the user's home network element The identification of the BSS corresponding to the identification of the service accepted by the BSS is obtained:

Judging whether the received identifier of the BSS is consistent with the identifier of the BSS obtained from the query; Correspondence.

Combining the fourth aspect to the fourth aspect in the second implementation manner, in the third implementation manner, further including a modification module;

The receiving module is also used to receive a corresponding relationship update message issued by the system management network element;

The modification module is configured to modify the stored correspondence according to the correspondence update message.

In the service provisioning processing method and network elements provided by the embodiments of the present invention, after the service provisioning system network element receives the service provisioning request sent by the service system network element in the BSS, it will not immediately perform service provisioning according to the service provisioning request, but will perform service provisioning according to the service provisioning request. The service activation request obtains the identification of the BSS and the identification of the business accepted by the BSS, and determines that the service activation request is legal according to the identification of the BSS and the identification of the business accepted by the BSS; only when the service activation request is confirmed to be legal, the Service activation will be performed for the business accepted by BSS to ensure the security of service activation.

Description of drawings

In order to more clearly illustrate the technical solutions in the embodiments of the present invention or the prior art, the following will briefly introduce the drawings that need to be used in the description of the embodiments or the prior art. Obviously, the accompanying drawings in the following description These are some embodiments of the present invention. For those skilled in the art, other drawings can also be obtained according to these drawings without any creative effort.

FIG. 1 is a schematic diagram of an application scenario of Embodiment 1 of the processing method for opening a service according to the present invention;

FIG. 2 is a schematic flow diagram of Embodiment 1 of the processing method for service provisioning in the present invention;

FIG. 3 is a schematic flow diagram of Embodiment 2 of the processing method for service provisioning in the present invention;

FIG. 4 is a schematic flow diagram of Embodiment 3 of the processing method for service provisioning in the present invention;

FIG. 5 is a schematic flowchart of Embodiment 4 of the processing method for service provisioning in the present invention;

FIG. 6 is a schematic flowchart of Embodiment 5 of the processing method for service provisioning in the present invention;

FIG. 7 is a schematic flowchart of Embodiment 6 of the processing method for service provisioning in the present invention;

FIG. 8 is a schematic flowchart of Embodiment 7 of the processing method for service provisioning in the present invention;

FIG. 9 is a schematic structural diagram of Embodiment 1 of a network element of the present invention;

FIG. 10 is a schematic structural diagram of Embodiment 2 of a network element of the present invention;

FIG. 11 is a schematic structural diagram of Embodiment 3 of a network element of the present invention;

FIG. 12 is a schematic structural diagram of Embodiment 4 of a network element according to the present invention.

detailed description

In order to make the purpose, technical solutions and advantages of the embodiments of the present invention clearer, the technical solutions in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments It is a part of embodiments of the present invention, but not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by persons of ordinary skill in the art without creative efforts fall within the protection scope of the present invention.

FIG. 1 is a schematic diagram of an application scenario of Embodiment 1 of a processing method for service provisioning according to the present invention. As shown in Figure 1, multiple BSSs are deployed in the communication network according to the services required by users. Convert it into a language recognizable by core network element C, and complete service provisioning according to the interaction protocol between core network element C and BSS; understandably, the operation and maintenance of the above-mentioned BSS and service provisioning system can be performed by one network element or multiple network elements, that is, the BSS is deployed on one network element or multiple network elements, and similarly, the service provisioning system can also be deployed on one network element or multiple network elements; the user sends a network element ( The user interface provided by the service system network element) to input the service provisioning request, and then the service system network element will send the service provisioning request to the network element used to deploy the service provisioning system (referred to as the service provisioning system network element) to complete The service is opened, as follows:

FIG. 2 is a schematic flowchart of Embodiment 1 of the processing method for service provisioning in the present invention. As shown in Figure 2, this embodiment includes:

S101. The service provisioning system network element receives the service provisioning request sent by the service system network element.

The business system network element is a network element in the business support system BSS; the user uses the user interface provided by the business system network element to input a service activation request, and the service activation request can be specifically used to request to open an account for a mobile phone number; then the business system network The element sends the service provisioning request to the network element of the service provisioning system.

In this embodiment, the service provisioning system network element is a network element or multiple network elements used to deploy the service provisioning system (Provisioning).

S102. The network element of the service provisioning system acquires the BSS identifier and the service identifier accepted by the BSS according to the service provisioning request, and determines that the service provisioning request is legal according to the BSS identifier and the service service identifier accepted by the BSS.

Different BSSs in the communication network can accept different services. For example, the BSS deployed for individual users is only used to accept personal business, while the BSS for enterprises is only used to accept group business; when the service submitted by the BSS deployed for individual users is opened The request is used to activate a certain group business. If the network element of the service activation system activates the group business according to the service activation request, but the BSS for the enterprise and the users involved in the group business do not know, it will cause service billing, management The chaos of other affairs, and even generate additional fees for the users involved in the group business, affecting the users involved in the group business to obtain network services; therefore, in this embodiment, the network element of the service provisioning system obtains the BSS ID and the ID of the business accepted by the BSS, and judge whether the service activation request is legal based on the ID of the BSS and the ID of the business accepted by the BSS. If it is legal, proceed to the following S103; It will refuse to open services for the business accepted by BSS to ensure the security of service activation.

S103. The network element of the service provisioning system performs service provisioning for the service accepted by the BSS.

In this embodiment, after the network element of the service provisioning system receives the service provisioning request sent by the network element of the service system in the BSS, it will not immediately perform service provisioning according to the service provisioning request, but will obtain the BSS identifier and The identification of the business accepted by the BSS, and according to the identification of the BSS and the identification of the business accepted by the BSS, it is determined that the service activation request is legal; only when the service activation request is confirmed to be legal, the service activation will be performed for the business accepted by the BSS, so as to Guarantee the security of service activation.

FIG. 3 is a schematic flowchart of Embodiment 2 of the processing method for service provisioning in the present invention. As shown in Figure 3, this embodiment is further described on the basis of the embodiment shown in Figure 2, including:

S201. The service provisioning system network element receives the service provisioning request sent by the service system network element.

S202. The service provisioning system network element performs identity verification on the service system network element according to the account number and password carried in the service provisioning request, and determines that the service system network element passes the verification.

Usually, when each BSS is deployed, the system management network element will assign an account and password to each BSS, and each service system network element in the BSS needs to interact with the service provisioning system network element according to the account number and password; that is, only the service system network element provides When the account number and password are the same, that is to say, the service provisioning system NE will process the service provisioning request submitted by the service system NE after passing the identity verification of the service system NE submitting the service provisioning request.

It is understandable that if the account number and password provided by the service system network element are inconsistent, it means that the service system network element has been illegally used, so the service provisioning system network element refuses to process the service provisioning request submitted by the service system network element to maintain the security of each BSS. safety.

In addition, the above S202 may occur before S201, that is, the service provisioning request sent by the service system network element is received only after the network element of the service provisioning system authenticates the network element of the service system and confirms that the network element of the service system passes the verification; Optionally, the service system network element can also send the account number, password, BSS identifier and the service identifier accepted by the BSS to the service activation system network element together with the service activation request, that is, after S201, the service activation system network element according to the account number, The password is used to authenticate the network element of the service system, that is, to execute S202.

S203a. The network element of the service provisioning system acquires the identifier of the BSS and the identifier of the service accepted by the BSS, and sends the acquired identifier of the BSS and the identifier of the service accepted by the BSS to the home network element of the user.

After the network element of the service activation system passes the identity verification of the network element of the service system, the identity of the BSS where the network element of the service system is located can be determined according to the account number, and the identification of the service accepted by the BSS carried in the service activation request can be obtained; or when the service activation request When directly carrying the identification of the BSS where the service system network element is located and the identification of the service accepted by the BSS, the service activation system network element reads the identification number of the service system network element carried in the service activation request after passing the verification of the service system network element. The identifier of the BSS and the identifiers of the services accepted by the BSS.

The user home network element stores at least one BSS identifier and the corresponding relationship between each BSS identifier and each service identifier, that is, the user home network element can know each service that each BSS in the communication network is allowed to accept, so the service provisioning system network element Send the identifier of the BSS obtained according to the service activation request and the identifier of the service accepted by the BSS to the user's home network element, so as to judge whether the service activation request is legal through the user's home network element; and the user's home network element according to The identifier of the BSS and the identifier of the service accepted by the BSS, and judging whether the identifier of the BSS and the identifier of the service accepted by the BSS conform to the corresponding relationship stored in the user's home network element; if so, the user's home network element sends The service provisioning system network element sends a response message for confirming that the service provisioning request is legal, so that the service provisioning system network element performs service provisioning for the service accepted by the BSS.

S204a. The network element of the service provisioning system receives a response message sent by the home network element of the user for confirming that the service provisioning request is legal.

If the network element of the service provisioning system receives the confirmation response sent by the user's home network element, it means that the user's home network element determines that the service provisioning request is legal.

Optionally, the above S203a and S204a may be replaced by the following S203b and S204b:

S203b. The network element of the service provisioning system queries user affiliation information.

When the network element of the service provisioning system has the function of user attribution network element, that is, the network element of the service provisioning system is locally configured with the user attribution information, the network element of the service provisioning system can confirm whether the service provisioning request is legal;

The user affiliation information includes at least one BSS identifier and the corresponding relationship between the identifiers of each BSS and the identifiers of each service.

S204b. The network element of the service activation system determines that the identifier of the BSS and the identifier of the service accepted by the BSS conform to the corresponding relationship included in the user attribution information, and then determines that the request for activation of the service is legal.

For example, the user affiliation information stores the BSS identifier as BSS1, and the corresponding relationship between BSS1 and business 01 to business 04, which means that the services that BSS1 can accept are business 01 to business 04, assuming that business 01 refers to the business content as " Any number from 134xxxxxxxx to 135xxxxxxxx to open or cancel an account", and the service activation request received in S301 is sent by the network element of the business system in BSS1, and is used to open an account for 13485732901, which means that the service "is handled for 13485732901 Account opening" and BSS1 conform to the corresponding relationship between BSS1 and business 01 to business 04, and the service opening request is legal.

Further, when the network element of the service provisioning system executes S203b-S204b, specifically, the network element of the service provisioning system searches the user attribution information according to the obtained identifier of the BSS to obtain at least An identifier of a service; when the network element of the service provisioning system determines that at least one service identifier corresponding to the acquired identifier of the BSS has an identifier of the service accepted by the BSS, then determine the acquired identifier of the BSS and the identifier of the service The identification of the service accepted by the BSS conforms to the corresponding relationship included in the user attribution information; or the network element of the service provisioning system searches the user attribution information according to the identification of the service accepted by the BSS and obtains the corresponding relationship with the service accepted by the BSS The identifier of the BSS corresponding to the identifier of the service; when the service provisioning system network element determines that the obtained identifier of the BSS is consistent with the identifier of the BSS obtained from the user attribution information query, then it is determined that the The identifier of the BSS and the identifier of the service accepted by the BSS conform to the corresponding relationship included in the user attribution information.

In Fig. 3, S203a-S204b is used as an example, but in practical applications, S203b-S204b may be used to determine whether the service activation request is legal.

S205. The network element of the service provisioning system performs service provisioning for the service accepted by the BSS.

In this embodiment, after the network element of the service provisioning system receives the service provisioning request sent by the network element of the service system in the BSS, it will not immediately perform service provisioning according to the service provisioning request, but will obtain the BSS identifier and The identification of the business accepted by the BSS, and according to the identification of the BSS and the identification of the business accepted by the BSS, it is determined that the service activation request is legal; only when the service activation request is confirmed to be legal, the service activation will be performed for the business accepted by the BSS, so as to Guarantee the security of service activation.

FIG. 4 is a schematic flowchart of Embodiment 3 of the processing method for service provisioning in the present invention. As shown in Figure 4, in order to ensure the security of the services requested by each BSS to open the service, in this embodiment, a user home system is set for each BSS in the communication network, and the user home system can be deployed in one network element or multiple network elements. In order to ensure the security of the business that each BSS requests service activation, this embodiment includes:

S301. The user's home network element receives the identifier of the BSS sent by the network element of the service provisioning system and the identifier of the service accepted by the BSS.

S302. The home network element of the user judges whether the received identifier of the BSS and the identifier of the service accepted by the BSS conform to the correspondence stored in the home network element of the user according to the received identifier of the BSS and the identifier of the service accepted by the BSS relation.

Wherein, the user home network element stores the identity of at least one BSS and the corresponding relationship between the identity of each BSS and the identity of each service;

For example, BSS1 and the corresponding relationship between BSS1 and service 01 to service 04 are stored in the user's home network element, which means that the services that BSS1 can accept are service 01 to service 04. Assume that the service content referred to by service 01 is "any one of 134xxxxxxxx to 135xxxxxxxx One number to open an account", and the BSS received in the aforementioned S401 is identified as BSS1, and the service is "open an account for 13485732901", which means that the service "open an account for 13485732901" and BSS1 conform to the corresponding relationship between BSS1 and services 01 to 04 .

Specifically, when judging whether the received identifier of the BSS and the identifier of the service accepted by the BSS conform to the corresponding relationship stored in the user's home network element, the user's home network element stores the In the corresponding relationship stored by the user's home network element, query to obtain at least one service identifier corresponding to the received BSS identifier: then the user's home network element judges whether the received at least one service identifier corresponding to the BSS identifier exists The identifier of the service accepted by the BSS, if so, determining that the received identifier of the BSS and the identifier of the service accepted by the BSS conform to the corresponding relationship stored in the user's home network element; or

According to the identification of the service accepted by the BSS, the user's home network element queries the corresponding relationship stored in the user's home network element to obtain the identification of the BSS corresponding to the identification of the service accepted by the BSS: then the user's home network Determine whether the received BSS identifier is consistent with the BSS identifier obtained from the query, and if they are consistent, determine that the received BSS identifier and the service identifier accepted by the BSS conform to the user's home network element storage corresponding relationship.

S303. If the user's home network element determines that the received identifier of the BSS and the service identifier accepted by the BSS conform to the corresponding relationship stored in the user's home network element, the user's home network element sends a service provisioning system network element Send a response message for confirming the legitimacy of the service provisioning request.

Further, when the user's home network element receives the corresponding relationship update message issued by the system management network element, the user's home network element modifies the stored corresponding relationship according to the corresponding relationship update message. For example, the system management NE issues 136xxxxxxxx to 137xxxxxxxx for BSS1, that is, BSS1 can accept account opening or cancellation of any number in 136xxxxxxxx to 137xxxxxxxx, and the system management NE will update the message through the corresponding relationship, and notify the user that the home NE BSS1 can accept 136xxxxxxxxx To open or cancel an account for any number in 137xxxxxxxx, the corresponding relationship stored in the user's home network element needs to be modified, that is, the new service ID corresponds to BSS1, and the new service ID refers to "account opening for any number in 136xxxxxxxx~137xxxxxxxx" or cancel an account", or modify the business content referred to by service 01 to "open or cancel an account for any number in 134xxxxxxxx~135xxxxxxxx, and 136xxxxxxxx~137xxxxxxxx".

In this embodiment, the home network element of the user judges whether the identity of the BSS and the identity of the service accepted by the BSS match the identity stored in the home network element of the user according to the identity of the BSS sent by the network element of the service provisioning system and the identity of the service accepted by the BSS. Only when the user's home network element confirms whether the BSS identifier and the service identifier accepted by the BSS conform to the corresponding relationship stored in the user's home network element, will the service be opened for the service accepted by the BSS to ensure service Open security.

FIG. 5 is a schematic flowchart of Embodiment 4 of the processing method for service provisioning according to the present invention. As shown in Figure 5, the present embodiment specifically sets up the user's home system in the communication network, and the identification of business comprises user's identification, and this user's identification can be Mobile Subscriber Number MSISDN (MobileSubscriberInternationalISDN/PSTNnumber, wherein ISDN is Integrated Services Digital Network , is the abbreviation of IntegratedServiceDigitalNetwork) and/or International Mobile Identity IMSI (InternationalMobileSubscriberIdentificationNumber), the specific process is as follows:

S401. The system management network element notifies the user's home network element of the mobile subscriber number MSISDN and/or international mobile identity IMSI managed by each BSS.

S402. The user's home network element stores the ID of each BSS and the corresponding relationship between the ID of each BSS and the MSISDN and/or IMSI.

S403. The system management network element sends the MSISDN and/or IMSI managed by the BSS-X to the service system network element X.

S404. The system management network element sends the MSISDN and/or IMSI managed by the BSS-Y to the service system network element Y.

In order to securely activate the service, the user home system needs to store the corresponding relationship between the identifiers of each BSS and the service identifier. It is understandable that at the initial moment of communication network work, the system management network element will allocate resources to each BSS, and the resources are specifically for each BSS The MSISDN and/or IMSI that can be managed by the BSS can regard the resource information allocated by the system management network element to the BSS as the initial correspondence update message, and then the user's home network element modifies the correspondence relationship stored locally, that is, newly records each BSS The corresponding relationship between the identifier of the BSS and the manageable MSISDN and/or IMSI of each BSS;

Possibly, if the BSS returns part of the MSISDN and/or IMSI to the system management network element, correspondingly, the corresponding relationship update message issued by the system management network element to the user's home network element is specifically the MSISDN and/or IMSI returned by the BSS; then the user The home network element deletes the corresponding relationship between the BSS identifier and the MSISDN and/or IMSI returned by the BSS.

In practical applications, if the network element of the service provisioning system integrates the function of the user's home network element, then the above S401 can be "the system management network element notifies the service provisioning system network element of the mobile subscriber number MSISDN and/or international mobile identity managed by each BSS." code IMSI"; and S402 can be replaced by "the network element of the service provisioning system newly records the identification of each BSS and the corresponding relationship between the identification of each BSS and the MSISDN and/or IMSI in the user attribution information"; further, in the service provisioning When the system network element receives the corresponding relationship update message issued by the system management network element, the service provisioning system network element modifies the corresponding relationship included in the user attribution information according to the corresponding relationship update message.

S405. The service system network element X sends a service provisioning request to the service provisioning system network element.

Specifically, for example, if a user needs to apply for a mobile phone number 13485732901, he will enter the account number, password, 13485732901 and operation type (account opening) of the service system network element X in the user interface provided by the service system network element X, and then the service system network element X will send the service The activation system network element sends a service activation request, and the service activation request carries the identification of account number, password, 13485732901 and operation type (account opening);

Or, if the user needs to cancel the account of the mobile phone number 13485732901, then enter the account number, password, 13485732901 and operation type (account cancellation) of the service system network element X in the user interface provided by the service system network element X, and then the service system network element X sends The network element of the service opening system sends a service opening request, and the service opening request carries the identification of account number, password, 13485732901 and operation type (account cancellation).

S406. The service provisioning system network element performs identity verification on the service system network element X according to the account number and password carried in the service provisioning request, and determines that the service system network element passes the verification.

S407. According to the service provisioning request, the network element of the service activation system obtains the identification of BSS-X and the identification of the service accepted by BSS-X, and sends the identification of BSS-X and the identification of the service accepted by BSS-X to Users belong to network elements.

S408. The user's home network element determines whether the identifier of the BSS-X and the identifier of the service accepted by the BSS-X comply with the user's home network according to the identifier of the BSS-X and the identifier of the service accepted by the BSS-X Correspondence between metastores.

S409. The user's home network element sends a response message for confirming that the service provisioning request is legal to the network element of the service provisioning system.

S410. A service provisioning process in which the network element of the service provisioning system initiates a service to the network element of the core network.

For the above-mentioned services such as opening or canceling an account, the network elements of the service activation system interact with corresponding network elements such as STP (Signaling Transfer Point, signaling transfer point) and NEs (network elements) of the core network, so that the corresponding network elements of the core network Update stored information, such as updating routes, etc., to open or cancel an account.

In this embodiment, after the network element of the service provisioning system receives the service provisioning request sent by the network element of the service system in the BSS, it will not immediately perform service provisioning according to the service provisioning request, but will obtain the BSS identifier and The identification of the business accepted by the BSS, and according to the identification of the BSS and the identification of the business accepted by the BSS, it is determined that the service activation request is legal; only when the service activation request is confirmed to be legal, the service activation will be performed for the business accepted by the BSS, so as to Guarantee the security of service activation.

FIG. 6 is a schematic flowchart of Embodiment 5 of the processing method for service provisioning according to the present invention. As shown in Figure 6, in this embodiment, a user home system is specifically set in the communication network, and the service identifier includes a user identifier, and the user identifier is a mobile subscriber number MSISDN and/or an international mobile identity code IMSI. The type is number portability transfer out of the network as an example, the details are as follows:

S501. The system management network element sends a number portability notification to the network element Y of the service system, and the notification carries a user identifier.

Number portability is divided into number portability (Portin) and number portability (Portout);

For example, before the implementation of this embodiment, 13485732901 was managed by BSS-Y, but if the user needs to transfer 13485732901 to BSS-X, the network element X of the service system or a third-party system will send a request for porting the number to the system management network element, and then The system management network element sends a number porting request to the business system network element Y (the network element in BSS-Y); in S501, the system management network element is specifically a network element in the number porting center (MobileNumberPortingcenter).

S502. The service system network element Y sends a service provisioning request Y to the service provisioning system network element.

In S502, the service activation request Y is specifically used to cancel the account of 13485732901, and the service activation request Y carries the BSS-Y account number, password, user identification (ie MSISDN) 13485732901, which is the identification of the operation type (account cancellation).

S503. The service provisioning system network element performs identity verification on the service system network element Y according to the account number and password carried in the service provisioning request Y, and determines that the service system network element Y passes the verification.

Optionally, in S502, the service activation request Y does not need to carry the account number and password of BSS-Y, that is, before S502, the network element Y of the service system has submitted the account number and password of BSS-Y to the network element of the service activation system to perform Identity verification, and the service provisioning system network element confirms that the service system network element Y passes the verification according to the account number and password of BSS-Y, and S503 does not need to be executed at this time.

S504. The network element of the service provisioning system obtains the identifier of the BSS-Y and the user identifier according to the service provisioning request Y, and sends the obtained identifier of the BSS-Y and the user identifier to the user's home network element.

S505. The user's home network element determines that the received BSS-Y identifier and user identifier conform to the corresponding relationship stored in the user's home network element.

S506. The user's home network element sends a response message for confirming that the service provisioning request Y is legal to the network element of the service provisioning system.

S507. The network element of the service provisioning system initiates an account cancellation process to the network element of the core network.

For the account cancellation service, the network elements of the service provisioning system interact with corresponding network elements such as core network elements STP and NEs, so that the corresponding core network elements update stored information, such as updating routes, to realize account cancellation.

S508. The network element of the service provisioning system sends a message that the user identification carried in the service provisioning request Y has been canceled to the system management network element.

S509. The system management network element sends a corresponding relationship update message to the user's home network element.

S510. The user's home network element modifies the stored correspondence according to the correspondence update message.

Since 13485732901 has been canceled, the user's home network element deletes the previously stored correspondence between the BSS-Y identifier and 13485732901.

In this embodiment, after the network element of the service provisioning system receives the service provisioning request sent by the network element of the service system in the BSS, it will not immediately perform service provisioning according to the service provisioning request, but will obtain the BSS identifier and The identification of the business accepted by the BSS, and according to the identification of the BSS and the identification of the business accepted by the BSS, it is determined that the service activation request is legal; only when the service activation request is confirmed to be legal, the service activation will be performed for the business accepted by the BSS, so as to Guarantee the security of service activation.

In the embodiment shown in FIG. 6, the specific example is described by taking the number porting out of the network as an example. The operation type corresponding to the number porting out of the network is porting in to the network. FIG. 7 is an embodiment of the processing method for service activation of the present invention Six schematic diagrams of the process. As shown in Figure 7, this embodiment specifically takes number portability as an example to illustrate, as follows:

S601. The service system network element X sends a number porting request to the system management network element, and the request carries a user identifier.

The 13485732901 (that is, the above-mentioned user ID) used by the user belongs to BSS-Y. When the user expects 13485732901 to be transferred to BSS-X, the user uses the service system network element X (the network element in BSS-X) to send a portable message to the system management network element. The number porting request carries the user ID 13485732901.

S602. The system management network element confirms that number portability is allowed, and sends a corresponding relationship update message to the user's home network element.

In this embodiment, the system management network element is specifically a network element in a mobile number porting center (MobileNumberPortingcenter); after the service system network element X sends a number portability request to the system management network element in S601, the system management network The unit will control the service system network element Y belonging to BSS-Y to perform the account cancellation process. For details, refer to the corresponding steps in the embodiment shown in Figure 6; when the system management network element has learned that the number 13485732901 has been canceled in BSS-Y , it can be determined that the number 13485732901 can be transferred to BSS-X, and at the same time send a corresponding relationship update message to the user's home network element.

S603. The user's home network element modifies the stored corresponding relationship according to the corresponding relationship update message.

That is, the user's home network element adds the correspondence between the BSS-X and the number 13485732901.

S604. After the execution of S603 is completed by the user's home network element, the system management network element notifies the service system network element X of the network access ready message.

S605. The service system network element X sends the service provisioning request X to the service provisioning system network element.

In S605, the service activation request X is specifically used to open an account for 13485732901, and the service activation request X carries the BSS-X account number, password, user identification (ie MSISDN) 13485732901 and the identification of the operation type (account opening).

S606. The service provisioning system network element performs identity verification on the service system network element X according to the account number and password carried in the service provisioning request X, and determines that the service system network element X passes the verification.

Optionally, in S605, the service provisioning request Y does not need to carry the account number and password of BSS-Y, that is, before S605, the service system network element X has submitted the account number and password of BSS-X to the service provisioning system network element for Identity verification, and the service provisioning system network element confirms that the service system network element X passes the verification according to the account number and password of the BSS-X, and S606 does not need to be executed at this time.

S607. The network element of the service provisioning system obtains the identifier of the BSS-X and the user identifier according to the service provisioning request X, and sends the obtained identifier of the BSS-X and the user identifier to the network element to which the user belongs.

S608. The home network element of the user determines that the received identifier of the BSS-X and the user identifier conform to the corresponding relationship stored in the home network element of the user.

S609. The user's home network element sends a response message for confirming that the service provisioning request X is valid to the service provisioning system network element.

S610. The network element of the service provisioning system initiates an account opening process to the network element of the core network.

For the account opening service, the network element of the service provisioning system interacts with corresponding network elements such as core network elements STP and NEs, so that the corresponding core network elements update stored information, such as updating routes, to realize account opening.

In this embodiment, after the network element of the service provisioning system receives the service provisioning request sent by the network element of the service system in the BSS, it will not immediately perform service provisioning according to the service provisioning request, but will obtain the BSS identifier and The identification of the business accepted by the BSS, and according to the identification of the BSS and the identification of the business accepted by the BSS, it is determined that the service activation request is legal; only when the service activation request is confirmed to be legal, the service activation will be performed for the business accepted by the BSS, so as to Guarantee the security of service activation.

It should be noted that for the foregoing method embodiments, for the sake of simple description, they are expressed as a series of action combinations, but those skilled in the art should know that the present invention is not limited by the described action sequence. Because according to the present invention, some steps can be performed in other order or at the same time, for example, in the aforementioned embodiments shown in Figure 6 and Figure 7, based on different application scenarios and network policies, the various steps in the two embodiments can be combined with each other , and the execution sequence can be adjusted accordingly; in addition, it is possible that in the embodiments shown in Figure 6 and Figure 7, the network elements of the service provisioning system can be the same or different, and the user's home network element can also be the same , may also be different; specifically, when the embodiment shown in FIG. 6 is implemented for operator 1 (BSS-Y refers to operator 1), and the embodiment shown in FIG. 7 is implemented for operator 2 (BSS-Y refers to operator 1), and the embodiment shown in FIG. X refers to the operator 2), the network element of the service provisioning system in Figure 6 is different from the network element of the service provisioning system in Figure 7, and the user's home network element is also different, optional at this time, after the implementation of S601, That is, after the service system network element X sends the number portability request to the system management network element, the system management network element initiates the implementation process of the embodiment shown in Figure 6, and at the same time, other steps in the embodiment shown in Figure 7 is also implemented.

Furthermore, before some steps are executed, the corresponding network element will also perform other common steps such as signing and authentication that can be imagined by those skilled in the art. For example, in S602, when the system management network element confirms that the number portability is allowed , It is also necessary to confirm whether there is a contract between the number 13485732901 and BSS-Y and whether the contract is effective.

Optionally, take two service systems in one operator as an example to make further description. FIG. 8 is a schematic flowchart of Embodiment 7 of the processing method for service provisioning according to the present invention. As shown in Figure 8, in this embodiment, BSS-X and BSS-Y belong to two service systems in the same operator, then when performing number portability between BSS-X and BSS-Y, the specific The process is as follows:

S701. The service system network element X sends a number porting request to the system management network element, and the request carries a user identifier.

Service system network element X is a network element in BSS-X, and the above-mentioned user identification is specifically a number, and the number belongs to BSS-Y.

S702. The system management network element confirms to the service system network element Y that the user ID can be transferred out.

Business system network element Y is a network element in BSS-Y. When the number has signed a customized service contract with BSS-Y, and the term is 2 years. If the term is not expired at this time, the number cannot be transferred from BSS-Y. Then the system management network element rejects the service system network element X, and this embodiment stops;

If the number has not signed a customized service contract with BSS-Y, the number can be transferred out by BSS-Y at any time.

S703. The system management network element notifies the service system network element Y to carry out the operation of porting the user ID out of the network.

S704. The service system network element Y sends a service provisioning request Y to the service provisioning system network element.

S705. The service provisioning system network element performs identity verification on the service system network element Y according to the account number and password carried in the service provisioning request Y, and determines that the service system network element Y passes the verification.

S706. The network element of the service provisioning system obtains the identifier of the BSS-Y and the user identifier according to the service provisioning request Y, and sends the obtained identifier of the BSS-Y and the user identifier to the user's home network element.

S707. The user's home network element determines that the received BSS-Y identifier and user identifier conform to the corresponding relationship stored in the user's home network element.

S708. The user's home network element sends a response message for confirming that the service provisioning request Y is legal to the network element of the service provisioning system.

S709. The network element of the service provisioning system initiates an account cancellation process to the network element of the core network.

S710. The network element of the service provisioning system sends a message that the user ID has been canceled to the system management network element.

Specifically, the network element of the service provisioning system may notify the network element of the service system that the user ID has been canceled, and then the network element of the service system notifies the network element of the system management that the operation of transferring the number out of the network has been completed.

S711. The system management network element sends a corresponding relationship update message to the user's home network element.

S712. The user's home network element modifies the stored corresponding relationship according to the corresponding relationship update message.

That is, the corresponding relationship between the BSS-Y identifier and the user identifier is deleted, and the corresponding relationship between the BSS-X and the user identifier is stored.

S713. The system management network element notifies the service system network element X of the network ready message.

S714. The service system network element X sends the service provisioning request X to the service provisioning system network element.

S715. The service provisioning system network element performs identity verification on the service system network element X according to the account number and password carried in the service provisioning request X, and determines that the service system network element X passes the verification.

S716. The network element of the service provisioning system obtains the identifier of the BSS-X and the user identifier according to the service provisioning request X, and sends the identifier of the BSS-X and the user identifier to the user's home network element.

S717. The user's home network element determines, according to the BSS-X's identity and the user's identity, that the BSS-X's identity and the user's identity conform to the corresponding relationship stored in the user's home network element.

S718. The user's home network element sends a response message for confirming that the service provisioning request X is legal to the network element of the service provisioning system.

S719. The network element of the service provisioning system initiates an account opening process to the network element of the core network.

In this embodiment, after the network element of the service provisioning system receives the service provisioning request sent by the network element of the service system in the BSS, it will not immediately perform service provisioning according to the service provisioning request, but will obtain the BSS identifier and The identification of the business accepted by the BSS, and according to the identification of the BSS and the identification of the business accepted by the BSS, it is determined that the service activation request is legal; only when the service activation request is confirmed to be legal, the service activation will be performed for the business accepted by the BSS, so as to Guarantee the security of service activation.

It should be added that those skilled in the art should know that the embodiments described in the specification are all preferred embodiments, and the actions and modules involved are not necessarily necessary for the present invention; and in the above embodiments, the The descriptions of each embodiment have their own emphases, and for the parts not described in detail in a certain embodiment, refer to the relevant descriptions of other embodiments.

FIG. 9 is a schematic structural diagram of Embodiment 1 of a network element according to the present invention. As shown in Figure 9, the network element is a network element of the service provisioning system in the business support system BSS, including:

A receiving module 10, configured to receive a service activation request sent by a service system network element;

The determining module 20 is configured to obtain the identification of the BSS and the identification of the business accepted by the BSS according to the service activation request, and determine that the service activation request is legal according to the identification of the BSS and the identification of the business accepted by the BSS;

The processing module 30 is configured to perform service provisioning for the services accepted by the BSS.

In this embodiment, after the network element of the service provisioning system receives the service provisioning request sent by the network element of the service system in the BSS, it will not immediately perform service provisioning according to the service provisioning request, but will obtain the BSS identifier and The identification of the business accepted by the BSS, and according to the identification of the BSS and the identification of the business accepted by the BSS, it is determined that the service activation request is legal; only when the service activation request is confirmed to be legal, the service activation will be performed for the business accepted by the BSS, so as to Guarantee the security of service activation.

FIG. 10 is a schematic structural diagram of Embodiment 2 of a network element of the present invention. As shown in Figure 10, this embodiment is further described on the basis of the embodiment shown in Figure 9,

Optionally, the determining module 20 is specifically configured to verify the legality of the service activation request by sending the obtained identifier of the BSS and the identifier of the service accepted by the BSS to the home network element of the user;

Receive a response message sent by the user's home network element for confirming that the service provisioning request is legal.

Optionally, the determining module 20 is specifically configured to query user affiliation information; wherein, the user affiliation information includes at least one BSS identifier and a correspondence between each BSS identifier and each service identifier;

When it is determined that the obtained identifier of the BSS and the identifier of the service accepted by the BSS conform to the corresponding relationship included in the user attribution information, it is determined that the service activation request is legal.

Further, in an optional implementation manner, the determination module 20 specifically includes: a query unit 201, configured to query the user affiliation information to obtain the acquired BSS ID according to the acquired identifier of the BSS. An identifier corresponding to at least one service identified;

The determining unit 202 is configured to determine the acquired identifier of the BSS and the identifier of the service accepted by the BSS when at least one service identifier corresponding to the acquired identifier of the BSS exists in the identifier of the service accepted by the BSS It conforms to the corresponding relationship included in the user attribution information.

Further, in another optional implementation manner, the determining module 20 includes: a query unit 201, configured to query the user affiliation information for the service accepted by the BSS according to the identifier of the service accepted by the BSS. The identity of the BSS corresponding to the identity of the service;

A determining unit 202, configured to determine the BSS identifier obtained according to the service provisioning request and the BSS accepted ID when the obtained BSS identifier is consistent with the BSS identifier obtained from the user attribution information query. The identifier of the service conforms to the corresponding relationship included in the user attribution information.

Further, a modification module 40 is also included, and the receiving module 40 is also configured to receive a correspondence update message issued by a system management network element;

The modification module 40 is configured to modify the correspondence included in the user affiliation information according to the correspondence update message.

Further, the identification of the business accepted by the BSS is a user identification; the service activation request also includes an identification of the operation type;

The operation type is any one of the following at least three types:

Account opening, account cancellation, number portability and network transfer.

Further, it also includes: a verification module 50, configured to perform identity verification on the service system network element according to the account number and password submitted by the service system network element, and determine that the service system network element passes the verification.

In this embodiment, after the network element of the service provisioning system receives the service provisioning request sent by the network element of the service system in the BSS, it will not immediately perform service provisioning according to the service provisioning request, but will obtain the BSS identifier and The identification of the business accepted by the BSS, and according to the identification of the BSS and the identification of the business accepted by the BSS, it is determined that the service activation request is legal; only when the service activation request is confirmed to be legal, the service activation will be performed for the business accepted by the BSS, so as to Guarantee the security of service activation.

FIG. 11 is a schematic structural diagram of Embodiment 3 of a network element of the present invention. As shown in FIG. 11 , the network element is the user's home network element, and the network element includes: a receiving module 60, configured to receive the identifier of the BSS sent by the network element of the service provisioning system and the identifier of the service accepted by the BSS;

Judging module 70, configured to judge whether the received BSS identifier and the identifier of the service accepted by the BSS conform to the identifier stored in the user's home network element according to the received identifier of the BSS and the identifier of the service accepted by the BSS. Correspondence; wherein, the user home network element stores at least one BSS identifier and the correspondence between each BSS identifier and each service identifier;

The sending module 80 is configured to send a message to the service opening system network element if the judging module determines that the received identifier of the BSS and the identifier of the service accepted by the BSS conform to the corresponding relationship stored in the user's home network element. A response message confirming that the service provisioning request is legal.

In this embodiment, the home network element of the user judges whether the identity of the BSS and the identity of the service accepted by the BSS match the identity stored in the home network element of the user according to the identity of the BSS sent by the network element of the service provisioning system and the identity of the service accepted by the BSS. Only when the user's home network element confirms whether the BSS identifier and the service identifier accepted by the BSS conform to the corresponding relationship stored in the user's home network element, will the service be opened for the service accepted by the BSS to ensure service Open security.

FIG. 12 is a schematic structural diagram of Embodiment 4 of a network element according to the present invention. As shown in Figure 12, this embodiment is further described on the basis of Figure 11,

In an optional implementation manner, the judging module 70 is specifically configured to, according to the received identifier of the BSS, query and obtain at least A business ID:

Judging whether there is an identifier of the service accepted by the BSS in at least one service identifier corresponding to the received identifier of the BSS, and if so, determining that the received identifier of the BSS and the identifier of the service accepted by the BSS conform to the Correspondence stored in the user's home network element.

In another optional implementation manner, the judging module 70 is specifically configured to, according to the identification of the service accepted by the BSS in the corresponding relationship stored in the user's home network element, query to obtain the identification of the BSS to obtain the identification of the BSS and The identity of the BSS corresponding to the identity of the business accepted by the BSS:

Judging whether the received identifier of the BSS is consistent with the identifier of the BSS obtained from the query; corresponding relationship.

Further, the network element above also includes a modification module 90;

The receiving module 60 is also used to receive a corresponding relationship update message issued by the system management network element;

The modification module 90 is configured to modify the stored correspondence according to the correspondence update message.

In this embodiment, the home network element of the user judges whether the identity of the BSS and the identity of the service accepted by the BSS match the identity stored in the home network element of the user according to the identity of the BSS sent by the network element of the service provisioning system and the identity of the service accepted by the BSS. Only when the user's home network element confirms whether the BSS identifier and the service identifier accepted by the BSS conform to the corresponding relationship stored in the user's home network element, will the service be opened for the service accepted by the BSS to ensure service Open security.

It should be noted that each module in each of the foregoing network element embodiments is used to implement each corresponding step in each of the foregoing method embodiments. For specific implementation processes and technical effects, please refer to the foregoing method embodiments.

Those of ordinary skill in the art can understand that all or part of the steps for implementing the above method embodiments can be completed by program instructions and related hardware. The aforementioned program can be stored in a computer-readable storage medium. When the program is executed, it executes the steps including the above-mentioned method embodiments; and the aforementioned storage medium includes: ROM, RAM, magnetic disk or optical disk and other various media that can store program codes.

Finally, it should be noted that: the above embodiments are only used to illustrate the technical solutions of the present invention, rather than limiting them; although the present invention has been described in detail with reference to the foregoing embodiments, those of ordinary skill in the art should understand that: It is still possible to modify the technical solutions described in the foregoing embodiments, or perform equivalent replacements for some or all of the technical features; and these modifications or replacements do not make the essence of the corresponding technical solutions deviate from the technical solutions of the various embodiments of the present invention. scope.

Claims (24)

1. A processing method for opening a service, comprising: The service provisioning system network element receives the service provisioning request sent by the service system network element; the service system network element is a network element in the business support system BSS; The network element of the service activation system obtains the identifier of the BSS and the identifier of the service accepted by the BSS according to the request for activation of the service, and determines that the request for activation of the service is legal according to the identifier of the BSS and the identifier of the service accepted by the BSS; The network element of the service provisioning system performs service provisioning for the service accepted by the BSS. 2. The processing method according to claim 1, wherein the determining that the service activation request is legal according to the identifier of the BSS and the identifier of the service accepted by the BSS includes: The network element of the service provisioning system checks the validity of the service provisioning request by sending the obtained identifier of the BSS and the identifier of the service accepted by the BSS to the user's home network element; The service provisioning system network element receives the response message sent by the user's home network element for confirming that the service provisioning request is legal. 3. The processing method according to claim 1, wherein the determining that the service activation request is legal according to the identifier of the BSS and the identifier of the service accepted by the BSS includes: The network element of the service provisioning system queries user attribution information; wherein, the user attribution information includes at least one BSS identifier and the corresponding relationship between each BSS identifier and each service identifier; When the network element of the service activation system determines that the obtained identifier of the BSS and the identifier of the service accepted by the BSS conform to the corresponding relationship included in the user attribution information, it is determined that the service activation request is legal. 4. The processing method according to claim 3, characterized in that the identification of the BSS acquired by the determination and the identification of the service accepted by the BSS conform to the corresponding relationship included in the user attribution information, including: The network element of the service provisioning system queries the user attribution information according to the acquired identifier of the BSS to obtain at least one service identifier corresponding to the acquired identifier of the BSS; The network element of the service provisioning system determines that there is an identifier of the service accepted by the BSS in at least one service identifier corresponding to the obtained identifier of the BSS, and then determines that the acquired identifier of the BSS and the identifier of the service accepted by the BSS The identification conforms to the corresponding relationship included in the user attribution information. 5. The processing method according to claim 3, wherein the determining that the identifier of the BSS and the identifier of the service accepted by the BSS conform to the corresponding relationship included in the user attribution information includes: The network element of the service provisioning system queries the user attribution information according to the identifier of the service accepted by the BSS to obtain the identifier of the BSS corresponding to the identifier of the service accepted by the BSS; The network element of the service provisioning system determines that the obtained identifier of the BSS is consistent with the identifier of the BSS obtained from the user attribution information query, then determines the identifier of the BSS obtained according to the service provisioning request and the BSS accepted by the BSS. The identifier of the service conforms to the corresponding relationship included in the user attribution information. 6. The processing method according to any one of claims 3 to 5, characterized in that, the processing method further comprises: The network element of the service provisioning system receives the corresponding relationship update message issued by the system management network element; The network element of the service provisioning system modifies the correspondence included in the user affiliation information according to the correspondence update message. 7. The processing method according to any one of claims 1 to 6, characterized in that, the identifier of the service accepted by the BSS is a user identifier; the service activation request further includes an identifier of an operation type; The operation type is any one of the following at least three types: Account opening, account cancellation, number portability and network transfer. 8. The processing method according to any one of claims 1 to 7, characterized in that, before determining that the service activation request is legal according to the identifier of the BSS and the identifier of the service accepted by the BSS, it further includes: The network element of the service provisioning system performs identity verification on the network element of the service system according to the account number and password submitted by the network element of the service system, and determines that the network element of the service system passes the authentication. 9. A processing method for service provisioning, comprising: The user's home network element receives the identifier of the BSS sent by the network element of the service provisioning system and the identifier of the service accepted by the BSS; The user's home network element judges whether the received BSS identifier and the service identifier accepted by the BSS conform to the information stored in the user's home network element according to the received identifier of the BSS and the identifier of the service accepted by the BSS. Correspondence; wherein, the user home network element stores at least one BSS identifier and the correspondence between each BSS identifier and each service identifier; If the user's home network element determines that the received identifier of the BSS and the service identifier accepted by the BSS conform to the corresponding relationship stored in the user's home network element, then send a message to the network element of the service opening system for confirming the service A valid response message for the activation request. 10. The processing method according to claim 9, wherein the judging whether the received identifier of the BSS and the identifier of the service accepted by the BSS conforms to the corresponding relationship BSS stored in the user's home network element identities, including: The user home network element queries and obtains at least one service identifier corresponding to the received BSS identifier in the corresponding relationship stored in the user home network element according to the received BSS identifier: The user home network element judges whether there is an identifier of the service accepted by the BSS in at least one service identifier corresponding to the received identifier of the BSS, and if so, determines the received identifier of the BSS and the identifier of the service accepted by the BSS. The identifier of the service conforms to the corresponding relationship stored in the user's home network element. 11. The processing method according to claim 9, wherein the judging whether the identifier of the BSS and the identifier of the service accepted by the BSS conforms to the identifier of the corresponding relationship BSS stored in the user's home network element includes : The user's home network element queries the corresponding relationship stored in the user's home network element according to the identification of the service accepted by the BSS to obtain the identification of the BSS, and obtains the BSS whose identification corresponds to the identification of the service accepted by the BSS ID of: The user home network element judges whether the received BSS identifier is consistent with the BSS identifier obtained from the query, and if they are consistent, determines that the received BSS identifier and the service identifier accepted by the BSS conform to the Correspondence stored in the user's home network element. 12. The processing method according to any one of claims 9 to 11, further comprising: The network element to which the user belongs receives the corresponding relationship update message issued by the system management network element; The user home network element modifies the stored correspondence according to the correspondence update message. 13. A network element, characterized in that, the network element is a service provisioning system network element in a business support system BSS, comprising: The receiving module is used to receive the service activation request sent by the service system network element; A determining module, configured to obtain the identifier of the BSS and the identifier of the service accepted by the BSS according to the service activation request, and determine that the service activation request is legal according to the identifier of the BSS and the identifier of the service accepted by the BSS; The processing module is configured to perform service activation for the business accepted by the BSS. 14. The network element according to claim 13, wherein the determining module is specifically configured to send the acquired identifier of the BSS and the identifier of the service accepted by the BSS to the user's home network element, Verify the legality of the above-mentioned service activation request; Receive a response message sent by the user's home network element for confirming that the service provisioning request is legal. 15. The network element according to claim 13, wherein the determination module is specifically configured to query user affiliation information; wherein, the user affiliation information includes at least one BSS identifier and each BSS identifier and each The corresponding relationship of business identification; When it is determined that the obtained identifier of the BSS and the identifier of the service accepted by the BSS conform to the corresponding relationship included in the user attribution information, it is determined that the service activation request is legal. 16. The network element according to claim 15, wherein the determining module specifically comprises: A query unit, configured to, according to the obtained identifier of the BSS, inquire in the user attribution information to obtain the identifier of at least one service corresponding to the acquired identifier of the BSS; A determining unit, configured to determine that the acquired identifier of the BSS matches the identifier of the service accepted by the BSS when at least one service identifier corresponding to the acquired identifier of the BSS exists in The corresponding relationship included in the user attribution information. 17. The network element according to claim 15, wherein the determining module comprises: A query unit, configured to query the user attribution information to obtain the identifier of the BSS corresponding to the identifier of the service accepted by the BSS according to the identifier of the service accepted by the BSS; A determining unit, configured to determine the BSS identifier obtained according to the service provisioning request and the services accepted by the BSS when the acquired identifier of the BSS is consistent with the identifier of the BSS obtained from the user attribution information query. The identifier of conforms to the corresponding relationship included in the user attribution information. 18. The network element according to any one of claims 15-17, further comprising a modification module; The receiving module is also used to receive a corresponding relationship update message issued by the system management network element; The modification module is configured to modify the correspondence included in the user affiliation information according to the correspondence update message. 19. The network element according to any one of claims 13-17, characterized in that, the identifier of the service accepted by the BSS is a user identifier; the service activation request further includes an identifier of an operation type; The operation type is any one of the following at least three types: Account opening, account cancellation, number portability and network transfer. 20. The network element according to any one of claims 13-19, further comprising: The verification module is configured to perform identity verification on the service system network element according to the account number and password submitted by the service system network element, and determine that the service system network element passes the verification. 21. A network element, characterized in that the network element is a user-homed network element, comprising: The receiving module is used to receive the identification of the BSS sent by the network element of the service provisioning system and the identification of the service accepted by the BSS; A judging module, configured to judge whether the received BSS identifier and the identifier of the service accepted by the BSS conform to the corresponding information stored in the user's home network element according to the received identifier of the BSS and the identifier of the service accepted by the BSS. relationship; wherein, the user home network element stores at least one BSS identifier and the corresponding relationship between the identifiers of each BSS and the identifiers of each service; The sending module is configured to send a message for confirmation to the network element of the service opening system if the judging module determines that the received identifier of the BSS and the identifier of the service accepted by the BSS conform to the corresponding relationship stored in the user's home network element. A valid response message to the service provisioning request. 22. The network element according to claim 21, wherein the judging module is specifically configured to, according to the received identifier of the BSS, query and obtain the received The identity of at least one service corresponding to the identity of the BSS: Judging whether there is an identifier of the service accepted by the BSS in at least one service identifier corresponding to the received identifier of the BSS, and if so, determining that the received identifier of the BSS and the identifier of the service accepted by the BSS conform to the Correspondence stored in the user's home network element. 23. The network element according to claim 21, wherein the judging module is specifically configured to query and obtain the identity of the BSS according to the identity of the service accepted by the BSS in the corresponding relationship stored in the user's home network element The identification of the BSS corresponding to the identification of the service accepted by the BSS is obtained: Judging whether the received identifier of the BSS is consistent with the identifier of the BSS obtained from the query; Correspondence. 24. The network element according to any one of claims 21-23, further comprising a modification module; The receiving module is also used to receive a corresponding relationship update message issued by the system management network element; The modification module is configured to modify the stored correspondence according to the correspondence update message.