CN101925151A - Access control method, device and system - Google Patents

Abstract

Embodiments of the present invention provide an access control method, device and system. The method includes: judging whether the user equipment needs to perform access control for individual services; sending a system broadcast message to the user equipment; if the user equipment needs to perform access control for individual services, the system broadcast message includes access control information; otherwise, the system broadcast message includes conventional access control information. With the application of the present invention, the UE can perform access control on different service access requests according to the access control information for individual services, which meets the needs of users.

Description

Access control method, device and system

technical field

The present invention relates to the field of communication technologies, and in particular to an access control method, device and system.

Background technique

In a communication system, when a user equipment (UE, User Equipment) sends an access request to the network, sometimes the network side needs to judge the access request to decide whether to access, how to access, etc. The access control method is as follows:

1. Dynamic Soft Admission Control (DSAC, Dynamic Soft Admission Control)

DSAC is a special access control method performed by the system in the event of a disaster in Universal Mobile Telecommunications Services (UMTS).

Since packet switching (PS, packet switch) services have a higher utilization rate of network resources than circuit switching (CS, Circuit Switched) services, it is hoped that in the case of network congestion caused by a disaster, it is hoped that the unobstructed PS domain can be guaranteed first . DSAC is a domain-based access control method, eg, by restricting calls in the CS domain to avoid discontinuity of PS services. When a disaster occurs, the system sends the control information for different domains to the UE through the system message. After the UE reads the system message, if it finds such domain-based control information, it will apply the information access control, otherwise it will use the normal access control information. control information for access control.

2. Access control of the access (AS, Access Stratum) layer in the long-term evolution system (LTE, Long Term Evolution)

At present, LTE restricts service access at the AS layer by class-based exclusion (ACB, Access Classes Barring) on the UE side and access control on the base station (eNB) side.

The process of ACB includes: after the radio resource control (RRC, Radio Resource Control) layer of the UE receives the access request provided by the upper layer, according to the access type contained in the access request, it restricts the access before the RRC layer. If the UE After judging that the access is allowed, the access type is sent to the eNB in a message, and the eNB performs further access control according to these access types.

At present, there are five access types used by the ACB on the UE side and the access control on the eNB side: emergency call (emergency), high priority user (highPriorityAccess), called (mt-Access), calling signaling (mo- Signaling), caller data (mo-Data).

During the research and practice of the prior art, the inventor found the following problems in the prior art:

In many cases, it is necessary to perform access control based on the service type. For example, when a major disaster occurs, the operator will provide a disaster message board (Disaster Message Board) service to all users. A large number of users can simultaneously read and write the 'Disaster Message Board' through mobile phones to obtain or provide information about personal safety, so this service is a service with a high utilization rate of system bandwidth. However, when a major disaster occurs, the instinctive psychological reaction of human beings is to make a phone call. These instantaneously increased voice services consume a large amount of bandwidth, which seriously affects other services, such as the above-mentioned 'Disaster Message Board' service, disaster Information broadcasting services, data services, etc. At this time, it is necessary to introduce a certain restriction mechanism to distinguish real-time services that consume bandwidth (such as voice services) from data services with high bandwidth utilization (such as disaster information broadcasting), and give priority to ensuring bandwidth utilization. High data traffic.

In the prior art, DSAC can only provide a domain-based access control method, and the five access types provided by AS layer access control in LTE do not include service types, so access control based on service types cannot be performed.

Contents of the invention

The technical problem to be solved by the embodiments of the present invention is to provide an access control method, device and system, so that the UE can perform access control on different service access requests according to the access control information for individual services, so as to meet the needs of users.

In order to solve the above technical problems, an embodiment of the present invention provides an access control method in one aspect, including:

Determine whether the user equipment needs to perform access control for individual services;

Sending a system broadcast message to the user equipment; if the user equipment needs to perform access control for individual services service specific, the system broadcast message includes access control information for individual services; otherwise, the system broadcast message includes regular access control information.

In another aspect, an access control method is provided, including:

The user equipment receives a system broadcast message, where the system broadcast message includes access control information for individual services;

The user equipment performs access control on individual services according to the access control information for individual services.

On the other hand, a network side device is provided, including:

A judging unit, configured to judge whether the user equipment needs to perform access control for individual business service specific;

A sending unit, configured to send a system broadcast message to the user equipment; when the judging unit judges yes, the system broadcast message includes access control information for individual services; when the judging unit judges no, The system broadcast messages include conventional access control information.

In another aspect, an access control system is provided, including user equipment and network side equipment, wherein,

The user equipment is configured to receive a system broadcast message, where the system broadcast message includes access control information for individual services; and perform access control for individual services according to the access control information for individual services.

In another aspect, a user equipment is provided, including:

A receiving unit, configured to receive a system broadcast message, where the system broadcast message includes access control information specific to individual services;

The first control unit is configured to perform access control on the individual service access request according to the access control information for the individual service received by the receiving unit.

In another aspect, an access control system is provided, including network side equipment and user equipment, wherein,

The network side device is used to judge whether the user equipment needs to perform access control for individual services, and send a system broadcast message to the user equipment; if the user equipment needs to perform access control for individual services, the system broadcast message The message includes access control information for individual services; otherwise, the system broadcast message includes regular access control information.

It can be seen from the above technical solutions that since different service types correspond to different access control information for individual services, the UE can perform access control on access requests for different services according to the access control information for individual services, satisfying the needs of users.

Description of drawings

In order to more clearly illustrate the technical solutions in the embodiments of the present invention or the prior art, the following will briefly introduce the drawings that need to be used in the description of the embodiments or the prior art. Obviously, the accompanying drawings in the following description are only These are some embodiments of the present invention. For those skilled in the art, other drawings can also be obtained according to these drawings without any creative effort.

FIG. 1 is a flowchart of Embodiment 1 of an access control method provided by an embodiment of the present invention;

FIG. 2 is a flowchart of Embodiment 2 of the access control method provided by the embodiment of the present invention;

FIG. 3 is a flow chart of Embodiment 3 of the access control method provided by the embodiment of the present invention;

FIG. 4 is a flow chart of Embodiment 4 of the access control method provided by the embodiment of the present invention;

Figure 5 is an example of the mapping relationship between the establishment cause value and the access service type value provided by the embodiment of the present invention;

FIG. 6 is a structural diagram of a network side device provided by an embodiment of the present invention;

FIG. 7 is a structural diagram of user equipment provided by an embodiment of the present invention;

FIG. 8 is a structural diagram of an access control system provided by an embodiment of the present invention.

Detailed ways

The following will clearly and completely describe the technical solutions in the embodiments of the present invention with reference to the accompanying drawings in the embodiments of the present invention. Obviously, the described embodiments are only some, not all, embodiments of the present invention. Based on the embodiments of the present invention, all other embodiments obtained by persons of ordinary skill in the art without creative efforts fall within the protection scope of the present invention.

Usually, when disasters occur, such as earthquakes and tsunamis, access control based on services is required, because in these cases, users will make more calls and send more messages than usual, and the increased For other services, network resources will be very tight. Therefore, access control needs to be performed based on services to give priority to services with higher bandwidth utilization and services with higher priorities. The network side needs to perform access based on services when receiving instructions. When it is judged that access control needs to be performed based on services according to other conditions, the access control information for individual services is sent in the system broadcast message. It should be pointed out that, the embodiment of the present invention adopts the description of "individual service" (service specific) in order to reflect the access control of different services based on the service, so as to be different from the existing division method not based on the service but based on the general It is distinguished from general access control. Therefore, the individual services in the embodiments of the present invention can also use designated services, or dedicated services, or special services, etc., which can reflect other descriptions of the services on which the access control method is based, without affecting the implementation of the embodiments of the present invention and the protected range.

Embodiments of the present invention provide an access control method, device and system. In the service type-based access control method, when network congestion, or disaster, or a large number of instantaneous services is about to occur or has occurred, the network side sends user terminals specific service-specific According to the access control information for individual services, the user terminal performs access control on different service access requests according to the access control information for individual services, so as to implement access control on access requests according to service types.

Specifically, the network side may first judge whether the user equipment needs to perform access control for individual services, and then send a system broadcast message to the user equipment according to the judgment result. If the user equipment needs to perform access control for individual services, the system broadcast message includes access control information for individual services; otherwise, the system broadcast message includes regular access control information, that is, not for individual services access control information.

For user equipment, when receiving a system broadcast message, if the system broadcast message includes access control information for individual services, access control is performed on individual services according to the access control information for individual services. If the system broadcast message includes conventional access control information, that is, access control information that is not specific to individual services, access control that is not specific to specific services can be performed based on the conventional access control information, for example, using the access control information provided by the existing technology into the control method.

In the embodiment of the present invention, possible service types include: voice (MMTEL voice) service, video (MMTEL video) service, data data service, short message SMS service, multimedia multimedia service, network telephone VOIP service, and other services (other services) Any one or a combination of them, among which, various business types are divided into calling or called. Of course, the above is just an example, and more classifications can be made according to the actual situation in actual use. For example, when performing access control for individual services in the system, the individual service types may include calling voice services, called voice services, calling video services, and called video services. The access control information includes access control information for the above four types of services; correspondingly, the service types during conventional access control (that is, access control not for individual services) may include calling service and called service. type of service, conventional access control information (that is, access control information not specific to individual services) includes access control information based on the calling service and access control information based on the called service, without distinguishing specific business.

The access control information for individual services may include: whether the service is allowed to be accessed, the probability of allowing access, any one or a combination of the priority levels of allowed access, and of course other relevant information may also be included.

In the access control method provided by the embodiment of the present invention, different service types correspond to different access control information for individual services, so that the UE can access different service access requests according to the access control information for individual services Control to meet the needs of users.

For the calling service, Fig. 1 is a flow chart of Embodiment 1 of the access control method provided by the embodiment of the present invention, including:

101. Send calling service-based access control information in a system broadcast message, including specific information on individual services for each calling type.

In the event of a disaster or other situations that may trigger a large number of services in an instant, the network judges that access control needs to be performed based on the service, and the access control information for different calling services is sent in the system broadcast message, for example: accessBarringForMO- in this message The voice information is for the MMTEL voice service of the calling type, the accessBarringForMO-video information in the message is for the MMTEL video service of the calling type, and the accessBarringForMO-other information in the message is for other services (other services) of the calling type.

102. The UE receives a system broadcast message.

Specifically, the RRC layer of the UE receives the system broadcast message.

103. The UE obtains the access control information based on the calling service from the system broadcast message.

104. The UE performs access control on the individual service access requests of the calling type according to the calling service-based access control information.

Specifically, the RRC layer of the UE applies the control information to perform access control on the calling service access request initiated by the Non-Access Stratum (NAS, Non-Access-Stratum).

Further, the UE may preferentially use the access control information based on the calling service, and only use the access control information not specific to individual services, such as the existing accessBarringInformation information, when there is no access control information based on the calling service.

For the called service, FIG. 2 is a flow chart of Embodiment 2 of the access control method provided by the embodiment of the present invention, including:

201. Send called service-based access control information in a system broadcast message, including specific information for individual services of each called type.

In the event of a disaster or other situations that may trigger a large number of services at once, the network judges that access control needs to be performed based on the service, and the access control information for different called services is sent in the system broadcast message, for example: accessBarringForMO- in this message The voice information is aimed at the MMTEL voice service of the called type, the accessBarringForMO-video information in the message is aimed at the MMTEL video service of the called type, and the accessBarringForMO-other information in the message is aimed at other services (other services) of the called type.

202. The UE receives a system broadcast message.

Specifically, the RRC layer of the UE receives the system broadcast message.

203. The UE obtains the access control information based on the called service from the system broadcast message;

204. The UE performs access control on the individual service access requests of the called type according to the called service-based access control information.

Specifically, the RRC layer of the UE applies the control information to perform access control on the called service access request initiated by the NAS layer.

Further, the UE may preferentially use the access control information based on the called service, and only use the access control information not specific to an individual service, such as the existing accessBarringInformation information, when there is no access control information based on the called service.

Embodiments 1 and 2 of the access control method provided by the present invention can enable the UE to control access at the earliest stage of connection establishment, so as to prevent congestion of subsequent network nodes in a timely manner; and can set independent access control for different service types Ingress control strategy to improve bandwidth utilization.

The embodiment of the present invention also provides multiple methods for starting and stopping access control based on services.

Specifically, when the network side judges that service-based access control can be started, it continues to send access control information for individual services in system broadcast messages. After receiving the system message containing access control information for individual services, the UE , start to implement service-based access control; when the network side judges that service-based access control can be stopped, it stops sending access control information for individual services in the system broadcast message, and the UE cannot obtain it from the system broadcast message. For the access control information for individual services, stop performing access control on access requests for different services based on the access control information for individual services. If the UE needs to perform access control, it performs access control according to the access control information not specific to individual services.

FIG. 3 is a flow chart of Embodiment 3 of the access control method provided by the embodiment of the present invention. The method includes:

301. Send access control information for individual services or regular access control information in a system broadcast message.

In the event of a disaster or other situations that may trigger a large number of instantaneous services, the network side judges that access control based on services is required, and continues to send access control information for individual services in system broadcast messages until it is judged that access based on services can be stopped. into control.

When the network side judges that it is possible to stop or do not need to perform access control based on services, it may not send access control information for individual services in the system broadcast message, and may further send regular access control information.

302. The UE receives a system broadcast message.

Specifically, the RRC layer of the UE receives the system broadcast message.

303. The UE judges whether the system broadcast message contains access control information for individual services; if yes, execute step 304; otherwise, execute step 305.

Specifically, this step is optional. For example, the UE does not judge independently, but reads the access control-related content of the system broadcast message, and performs 304 or 305 according to the relevant content.

304. The UE acquires access control information for individual services from the system broadcast message, and performs access control on access requests for different services according to the access control information for individual services.

When the system broadcast information received by the user terminal contains access control information for individual services, it immediately starts using the access control information for individual services for access control, and at the same time stops using regular (non-service-based) access control information.

Further, after this step, the UE may continue to receive the system broadcast message, and if the system broadcast message is updated, perform access control according to the updated system broadcast message. For example, if the updated system broadcast message does not include access control information for individual services, then the UE performs 305 .

305. The UE performs access control by applying conventional access control information.

For example, the UE stops applying the access control information for individual services being used, and at the same time resumes using the normal access control information.

Specifically, when the system broadcast information received by the user terminal no longer contains the access control information for individual services, the UE stops applying the access control information (if any) for individual services that is being used, and at the same time resumes using Regular (non-traffic-based) access control information.

By applying this embodiment, the UE can know in time when to start and when to stop using the access control information for individual services, and no additional signaling is required.

Another method for starting and stopping service-based access control provided by the embodiment of the present invention is: after the network side judges that service-based access control is required, it sends a service-based access control message to the user terminal through a paging message. at the same time, the access control information for individual services is sent in the system broadcast message; after receiving the service-based access control instruction, the UE immediately starts to read the system broadcast message, and performs service-based access control access control. Correspondingly, when the network side judges that it is possible to stop or do not need to perform service-based access control, it sends an indication of non-service-based access control to the user terminal through a paging message, and does not send access control for individual services in the system broadcast message. control information, regular access control information can also be sent in this message; after receiving the above instruction, the UE will no longer perform access control on access requests for different services according to the access control information for individual services.

FIG. 4 is a flow chart of Embodiment 4 of the access control method provided by the embodiment of the present invention. The method includes:

401. Send an indication of service-based access control to the user terminal through a paging message, and send access control information for individual services in a system broadcast message.

In the event of a disaster or other situations that may trigger a large number of instantaneous services, the network judges that service-based access control is required, and then sends a service-based access control instruction to the user terminal through a paging message, and broadcasts a message to the user through a system The terminal broadcasts access control information for individual services.

402. The UE receives an indication of service-based access control, and immediately receives a system broadcast message;

403. The UE acquires access control information for individual services in the system broadcast message, and performs access control on access requests for different services according to the access control information for individual services;

In 402-403, when the user terminal receives the instruction of service-based access control, it immediately starts to read the system broadcast message without waiting for the modification boundary of the system broadcast message to read the system broadcast message, then the UE can immediately Obtain the access control information for individual services in the system broadcast message, and perform access control. Of course, when the UE starts to use the access control information for individual services, it also stops using the normal access control information.

404. When judging that service-based access control can be stopped, the network side sends an instruction to stop using service-based access control to the user terminal through a paging message, and stops sending access control for individual services in the system broadcast message information.

Specifically, the network side can carry the instruction to stop using the service-based access control in the updated paging message, or not carry the instruction to use the service-based access control in the updated paging message, so that the UE can know the stop in time Access control information for individual services is used. Further, the indication can also be used to trigger the UE to immediately read the updated system broadcast message. For example, the network side sends an updated paging message, and at the same time or immediately sends an updated system broadcast message, the updated system broadcast message includes conventional access control information, and the conventional access control information may be different from that carried in the previous system broadcast message The regular access control information is the same or different, that is, the updated regular access control information.

405. When the UE receives the instruction to stop using the service-based access control, it stops applying the currently-used access control information for individual services, and at the same time resumes using the normal access control information.

Wherein, the UE can immediately read the system broadcast message and obtain the conventional access control information, so as to implement access control according to the conventional access control information. The UE can also read the system broadcast message when it needs to perform access control. The UE may also configure default regular access control information, or save previously acquired regular access control information, and use the default or saved information for access control before receiving the latest access control information.

Applying this embodiment, the UE can read the access control information immediately after receiving the service-based access control instruction, without waiting for the next system broadcast message to change the boundary, so that the UE can perform service-based access more quickly control to avoid network congestion during the waiting period.

Further, the embodiment of the present invention also provides a method for matching the access service type value carried in the UE's NAS layer access request with the access service type value used by the RRC layer, hereinafter referred to as the synchronization method.

In the first synchronization method provided by the embodiment of the present invention, the NAS layer sends an access request carrying an access service type value to the RRC layer, and the access service type value includes: service-based calling access type and/or Service-based called access type; when the RRC layer of the UE does not perform access control on different service access requests based on the access control information for individual services, it Access control based on the incoming type or called access type.

When the RRC layer of the user equipment performs access control on access requests for different services according to the access control information for individual services, it performs access control for different service access requests according to the access control information for individual services Service access request for access control. That is to say, the NAS layer refines the calling type business and the called type business in the access service type value sent to the RRC layer into service-based calling access types (that is, individual service types of the calling type). ) and the called access type based on the service (that is, the individual service of the called type).

Specifically, when the RRC layer of the user terminal uses conventional (non-service-based) access control information for access control, the terminal ignores the service-based subdivision of the calling type and called type, and uses all information provided by the NAS layer The caller type of access type uniformly uses conventional caller control information for access control, and all called type access types provided by the NAS layer uniformly uses conventional called party control information for access control. When the RRC layer of the user terminal uses the access control information for individual services to perform access control, it directly applies the service-based access control information to all access types provided by the NAS layer for access control.

In the second synchronization method provided by the embodiment of the present invention, when the RRC layer of the UE receives the system broadcast message sent by the network side, and obtains the access control information for individual services from the system broadcast message, the RRC layer of the UE The NAS layer of the UE sends an indication of starting to use service-based access control to the NAS layer of the UE. After receiving the indication of starting to use the service-based access control, the NAS layer of the UE sends an access request to the RRC layer of the UE carry the access service type value, the access service type value includes: service-based calling access type or service-based called access type; the RRC layer of the UE responds to the access request according to the individual The service access control information performs access control on different service access requests. The RRC layer of the UE receives the system broadcast message sent by the network side, and does not obtain the access control information for individual services from the system broadcast message, and the UE is currently using the access control information for individual services When information is used for access control, the RRC layer of the UE sends an instruction to stop using service-based access control to the UE's NAS layer. After receiving the instruction to stop using service-based access control, the UE's NAS layer Stop carrying the access service type value in the access request sent to the RRC layer of the UE (resume carrying the access type value), and the UE stops applying the access control information for individual services being used, and at the same time resumes using the conventional access control information.

Specifically, when the RRC layer of the user terminal receives a system broadcast message containing access control information for individual services, it sends an instruction to the NAS layer to start using service-based access control, and the NAS then sends the access control information to the RRC layer. In the service type value, the calling service and/or called service are subdivided into service-based calling access type and/or service-based called access type, and the access type provided by the RRC layer to the NAS layer Access control is performed using service-based access control information. When the RRC layer of the user terminal receives a system broadcast message that does not contain access control information for individual services and the RRC layer is using the access control information for individual services to perform access control, it sends a stop using service-based access to the NAS layer. The NAS layer stops subdividing the calling service and/or called service into service-based calling and called access types in the access service type value sent to the RRC layer. Type, the RRC layer uses conventional (non-service-based) access control information to perform access control on the access type provided by the NAS layer.

The above two synchronization methods can be combined with the access control provided by other embodiments. The following examples illustrate further.

In the first example, the RRC layer of the UE receives a system broadcast message, reads the regular access control information in the system broadcast message, and notifies the NAS layer of the UE to stop performing access control for individual services. After the NAS layer of the UE learns that the access control for individual services is stopped, it sends an access request including the access service type, where the access service type may include: calling service or called service. After receiving the access request, the RRC layer of the UE performs access control on services corresponding to the access service type according to the regular access control information.

In the second example, the RRC layer of the UE receives a system broadcast message, and reads regular access control information in the system broadcast message. The NAS layer of the UE sends an access request including the access service type, and after receiving the access request, the RRC layer of the UE classifies the access service type as the calling type service and/or the called type service , and perform access control on the services classified according to the access service type according to the regular access control information. Here, the access service type in the access request may include: calling video video service, voice voice service, data data service, short message SMS service, media multimedia service, VoIP service, or other services; or, called type Video video service, voice voice service, data data service, short message SMS service, multimedia multimedia service, VoIP service, or other services.

In the above example, the RRC layer of the UE performs access control on the individual service corresponding to the access service type according to the access control information for the individual service. Access decisions are made for individual services corresponding to the service types. If it is determined that individual services can be accessed, a connection establishment request message including an establishment cause value is sent, where the establishment cause value is determined by the RRC layer of the UE according to the mapping relationship between the access service type and the establishment cause value and the access request in the access request. determined by the business type.

The embodiment of the present invention also provides a mapping method for an access service type and an establishment cause value, and a method for the RRC layer of the UE to determine the establishment cause value according to the mapping relationship obtained by the mapping method and the access service type in the access request, Therefore, the existing set-up cause value has a limited expandable number, and the problem that the set-up cause value and the access service type value cannot match if the value of the access service type is more than the data.

In the mapping method of an access service type value and an establishment cause value provided by an embodiment of the present invention, the access service type value includes: emergency, highPriorityAccess, called (mt-Access), calling signaling (mo-Signalling) , calling data (mo-Data), called video (mt-Video), called voice (mt-Voice), called other services (mt-other Services), calling video (mo-Video), calling Voice (mo-Voice), calling other services (mo-other Services), calling network interconnection protocol multimedia subsystem signaling (mo-IMSsignalling, IP multimedia subsystem IMS) calling time service (mo-realtime service ( e.g.game)), SMS (SMS, Short Message Service).

The establishment cause values in this embodiment include: emergency, highPriorityAccess, mt-Access, mo-Signalling, mo-Data, mo-Voice, mo-Video, and mo-other Services.

Then the mapping relationship between the establishment cause value and the access service type value in this embodiment can be: two values with the same name are directly corresponding, and the access service type value that does not have the same name is according to the different types of the calling class or called class. Corresponding, that is to say, the access service type values of all calling classes that do not have the establishment reason value of the same name correspond to one of the establishment reason values, and all called classes that do not have the establishment reason value of the same name The value of the access service type corresponds to the other value of the establishment cause.

For example, the mapping relationship between the establishment reason value and the access service type value can be: the establishment cause value with the same name directly corresponds to the access service type value; If it is an incoming service type, it corresponds to the establishment reason value mt-Access; if it is a calling access service type, it corresponds to the establishment reason value mo-other Services. Fig. 5 is an example of the mapping relationship between the establishment cause value and the access service type value provided by the embodiment of the present invention. Of course, there may be multiple different service types in practical applications, such as VoIP (Voice over Internet Protocol) service, multimedia (multimedia) service, etc., and the mapping relationship can also be established according to the mapping method provided by the embodiment of the present invention.

In the embodiment of the present invention, the mapping relationship between the access service type value and the establishment cause value may be stored in the UE. After the RRC layer of the UE makes an access control decision on the access service type value provided by the NAS layer, for the access type that is allowed to be accessed, the UE can map the access service type value to the RRC establishment according to the saved mapping relationship. The request message can carry the establishment cause value, and send the RRC establishment request message. For example, when the UE decides to allow access to the emergency call service, the sent RRC establishment request message includes the cause value of the emergency call establishment. For another example, when the UE decides that the access type allowed to be accessed is calling multimedia subsystem signaling, the RRC establishment request message sent includes the establishment cause value of calling other services.

The application of the embodiment of the present invention can solve the problem that the number of RRC establishment cause values is limited and cannot match the value of the access service type. Moreover, the method provided in the embodiment of the present invention can be applied in other scenarios, especially the mapping method can be applied in more scenarios, and is not limited to being combined with the access control method provided in other embodiments of the present invention.

Those of ordinary skill in the art can understand that all or part of the steps in the method of the above-mentioned embodiments can be completed by instructing related hardware through a program. The program can be stored in a computer-readable storage medium, and the program can be executed when executed , including the following steps:

A method of access control, comprising:

Determine whether the user equipment needs to perform access control for individual services;

Sending a system broadcast message to the user equipment; if the user equipment needs to perform access control for individual services service specific, the system broadcast message includes access control information for individual services; otherwise, the system broadcast message includes regular access control information.

A method of access control, comprising:

The user equipment receives a system broadcast message, where the system broadcast message includes access control information for individual services;

The user equipment performs access control on individual services according to the access control information for individual services.

The storage medium mentioned above may be a read-only memory, a magnetic disk or an optical disk, and the like.

The network-side device structure provided by the embodiment of the present invention is shown in Figure 6, including:

A judging unit 601, configured to judge whether the user equipment needs to perform access control for individual services;

The sending unit 602 is configured to send a system broadcast message to the user equipment; when the judging unit 601 judges yes, the system broadcast message includes access control information for individual services; when the judging unit 602 judges as If not, the system broadcast message includes conventional access control information.

Further, the device also includes:

The paging unit is configured to send a paging message after the judging unit judges whether the user equipment needs to perform access control for individual services and before the sending unit sends a system broadcast message to the user equipment; the paging message indicates the The user equipment obtains the access control information immediately.

Further, the judging unit 601 includes:

The triggering unit is configured to determine that the user equipment needs to perform access control for individual services when triggered by the following conditions: knowing of a disaster, or congestion on the network side, or a large number of instantaneous services are about to occur or have occurred.

The network side device provided in the embodiment of the present invention can implement the access control method provided in the embodiment of the present invention.

The structure of the user equipment provided by the embodiment of the present invention is shown in Figure 7, including:

The receiving unit 701 is configured to receive a system broadcast message, where the system broadcast message includes access control information for individual services;

The first control unit 702 is configured to perform access control on the individual service access request according to the access control information for the individual service received by the receiving unit 701 .

Further, the receiving unit 701 includes:

a paging message receiving unit, configured to receive a paging message;

A system broadcast message receiving unit, configured to immediately receive a system broadcast message when the paging message indicates that the user equipment acquires access control information immediately.

Further, the device also includes:

The second control unit is configured to, when the updated system broadcast message received by the receiving unit 701 does not include the access control information for individual services, perform according to the regular access control information in the updated system broadcast message access control; or,

The third control unit is configured to immediately receive a system broadcast message when the paging message received by the paging message receiving unit indicates that the user equipment does not need to perform access control for individual services, and broadcast according to the system The conventional access control information in the message is used for access control.

The user equipment provided in the embodiment of the present invention can implement the access control method provided in the embodiment of the present invention. .

The structure of the access control system provided by the embodiment of the present invention is shown in Figure 8, including:

The network side device 801 is configured to determine whether the user equipment 802 needs to perform access control for individual services, and send a system broadcast message to the user equipment 802; if the user equipment 802 needs to perform access control for individual services, the System broadcast messages include access control information for individual services; otherwise, the system broadcast messages include conventional access control information.

The user equipment 802 is configured to receive a system broadcast message sent by the network side device 801, where the system broadcast message includes access control information for individual services; Perform access control.

For specific structures of the network-side device 801 and the user equipment 802, reference may be made to the above descriptions of the network-side device and the user equipment provided in the embodiments of the present invention.

For specific operation methods of the access control system, network-side equipment, and user equipment provided in the embodiments of the present invention, reference may be made to the above description of the access control method provided in the embodiments of the present invention, and will not be repeated here.

The access control system, network-side equipment, and user equipment provided by the embodiments of the present invention correspond to different service types and different access control information for individual services, so that the UE can control different service types according to the access control information for individual services. Access control is performed on service access requests, which meets the needs of users.

The access control method, equipment and system provided by the present invention have been introduced in detail above. In this paper, specific examples are used to illustrate the principle and implementation of the present invention. The description of the above embodiments is only used to help understand the present invention. The method of the invention and its core idea; at the same time, for those of ordinary skill in the art, according to the idea of the present invention, there will be changes in the specific implementation and scope of application. In summary, the content of this specification should not be understood To limit the present invention.

Claims (20)

1. An access control method, comprising:

judging whether the user equipment needs to carry out access control aiming at individual services or not;

transmitting a system broadcast message to the user equipment; if the user equipment needs to perform access control aiming at individual service specific, the system broadcast message comprises access control information aiming at individual service; otherwise, the system broadcast message includes regular access control information.

2. The access control method of claim 1, wherein after determining whether the ue needs access control for the individual service and before sending the system broadcast message to the ue, the method further comprises:

sending a paging message;

the paging message instructs the user equipment to immediately acquire access control information.

3. The access control method according to claim 1 or 2, wherein the determining whether the user equipment needs to perform access control for individual services comprises:

determining that the user equipment needs to perform access control for individual services when triggered by the following conditions:

learning about a disaster, or network side congestion, or that a large amount of traffic is about to occur or has occurred instantaneously.

4. The access control method according to any of claims 1 to 3, wherein the individual traffic comprises any of the following or a combination thereof:

a calling type video service, a voice service, a data service, a short message SMS service, a multimedia service, a voice over internet protocol (VoIP) service, or other services; or, a called-type video service, a voice service, a data service, a short message SMS service, a multimedia service, a voice over internet protocol (VoIP) service, or other services.

5. An access control method, comprising:

the user equipment receives a system broadcast message, wherein the system broadcast message comprises access control information aiming at individual service;

and the user equipment performs access control on the individual service according to the access control information aiming at the individual service.

6. The access control method of claim 5, wherein the user equipment receiving a system broadcast message comprises:

the user equipment receives a paging message;

and if the paging message indicates that the user equipment immediately acquires the access control information, the user equipment immediately receives a system broadcast message.

7. The access control method of claim 6, wherein the method further comprises:

the user equipment receives an updated system broadcast message, and if the updated system broadcast message does not include access control information for individual services, the user equipment performs access control according to conventional access control information in the updated system broadcast message; or,

and the user equipment receives the updated paging message, and if the paging message indicates that the user equipment does not need to perform access control aiming at individual services, the user equipment immediately receives a system broadcast message and performs access control according to conventional access control information in the system broadcast message.

8. The access control method according to any of claims 5 to 7, wherein the individual traffic is any of or a combination of:

a video service of a calling type, a voice service, a data service, a short message SMS service, a multimedia service, a VoIP service of a voice over internet protocol, or other services, or a video service of a called type, a voice service, a data service, a short message SMS service, a multimedia service, a VoIP service, or other services.

9. The access control method of claim 5, wherein the user equipment receiving a system broadcast message including access control information for an individual service comprises:

a wireless resource control layer of user equipment receives a system broadcast message, reads access control information aiming at individual services in the system broadcast message, and informs a non-access layer of the user equipment of carrying out access control aiming at the individual services;

the user equipment performs access control on the individual service according to the access control information aiming at the individual service, and the access control comprises the following steps:

the wireless resource control layer of the user equipment receives an access request comprising an access service type and performs access control on an individual service corresponding to the access service type according to the access control information aiming at the individual service; wherein, the access request is an access request which is sent after a non-access stratum of the user equipment learns that access control can be performed on individual services, and the access service type is any one of the following types or a combination thereof:

a video service of a calling type, a voice service, a data service, a short message SMS service, a media multimedia service, a VoIP service, or other services, or a video service of a called type, a voice service, a data service, a short message SMS service, a multimedia service, a VoIP service, or other services.

10. The access control method of claim 7, wherein the user equipment receiving the updated system broadcast message comprises:

a wireless resource control layer of user equipment receives a system broadcast message, reads conventional access control information in the system broadcast message, and informs a non-access layer of the user equipment of stopping access control aiming at individual services;

the access control of the user equipment according to the conventional access control information in the updated system broadcast message comprises:

the wireless resource control layer of the user equipment receives an access request comprising an access service type and performs access control on a service corresponding to the access service type according to the conventional access control information; wherein, the access request is an access request sent after a non-access stratum of the user equipment learns to stop performing access control on individual services, and the access service type includes: a caller type service, or a callee type service.

11. The access control method of claim 7, wherein the user equipment receiving a system broadcast message including access control information for an individual service comprises:

a wireless resource control layer of user equipment receives a system broadcast message and reads conventional access control information in the system broadcast message;

the user equipment performs access control on the individual service according to the access control information aiming at the individual service, and the access control comprises the following steps:

the wireless resource control layer of the user equipment receives an access request comprising an access service type, classifies the access service type into a calling type service and/or a called type service, and performs access control on the service classified by the access service type according to the conventional access control information; wherein the access request is sent by a non-access stratum of the user equipment, and the access service type is any one of or a combination of the following:

a video service of a calling type, a voice service, a data service, a short message SMS service, a media multimedia service, a VoIP service, or other services, or a video service of a called type, a voice service, a data service, a short message SMS service, a multimedia service, a VoIP service, or other services.

12. The access control method according to any of claims 9 to 11, wherein the access control of the individual service corresponding to the access service type by the radio resource control layer of the user equipment according to the access control information for the individual service comprises:

the radio resource control layer of the user equipment carries out access judgment on the individual service corresponding to the access service type according to the access control information aiming at the individual service;

sending a connection setup request message if it is determined that the individual service can be accessed, the connection setup message including an establishment cause value; and the establishment cause value is determined by a radio resource control layer of the user equipment according to the mapping relation between the access service type and the establishment cause value and the access service type in the access request.

13. A network-side device, comprising:

a judging unit, configured to judge whether the user equipment needs to perform access control for individual service specific;

a sending unit, configured to send a system broadcast message to the user equipment; when the judging unit judges that the service is the individual service, the system broadcast message comprises access control information aiming at the individual service; and when the judging unit judges that the system broadcast message does not contain the conventional access control information, the system broadcast message contains the conventional access control information.

14. The network-side device of claim 13, wherein the device further comprises:

a paging unit, configured to send a paging message before the sending unit sends a system broadcast message to the ue after the determining unit determines whether the ue needs to perform access control for the individual service; the paging message instructs the user equipment to immediately acquire access control information.

15. The network-side device of claim 13, wherein the determining unit includes:

a triggering unit, configured to determine that a user equipment needs to perform access control for an individual service when triggered by the following conditions: learning about a disaster, or network side congestion, or that a large amount of traffic is about to occur or has occurred instantaneously.

16. An access control system, comprising a user equipment and a network side device according to any one of claims 13-15, wherein,

the user equipment is used for receiving a system broadcast message, wherein the system broadcast message comprises access control information aiming at individual service; and performing access control on the individual service according to the access control information aiming at the individual service.

17. A user device, comprising:

a receiving unit, configured to receive a system broadcast message, where the system broadcast message includes access control information for individual service specific;

the first control unit is used for carrying out access control on the individual service access request according to the access control information aiming at the individual service received by the receiving unit.

18. The user equipment of claim 17, wherein the receiving unit comprises:

a paging message receiving unit for receiving a paging message;

a system broadcast message receiving unit, configured to receive a system broadcast message immediately when the paging message indicates that the ue immediately acquires the access control information.

19. The user equipment of claim 18, further comprising:

a second control unit, configured to perform access control according to conventional access control information in the updated system broadcast message when the updated system broadcast message received by the receiving unit does not include the access control information for the individual service; or,

a third control unit, configured to immediately receive a system broadcast message when the paging message received by the paging message receiving unit indicates that the ue does not need to perform access control for an individual service, and perform access control according to conventional access control information in the system broadcast message.

20. An access control system, comprising a network side device and a user equipment according to any of claims 17-19, wherein,

the network side equipment is used for judging whether the user equipment needs to carry out access control aiming at individual services or not and sending a system broadcast message to the user equipment; if the user equipment needs to perform access control for individual services, the system broadcast message comprises access control information for the individual services; otherwise, the system broadcast message includes regular access control information.

Images