CN1322765C - Calling control method for mobile communication system - Google Patents

Abstract

The invention relates to a call control method in a mobile communication system. The method is as follows: in the mobile communication system, configure the call control information of the calling user for the user; and determine whether the calling user can call the called user according to the call control information configured by the called user. The invention limits the calling authority of the calling user from the perspective of the called user, ensures the interests of the called user, prevents malicious group harassment calls and malicious attacks, and makes technical preparations for the actual operation of the operator. The invention is especially suitable for the mobile communication system adopting the group communication, and enhances the security of the group call function.

Description

Call Control Method in Mobile Communication System

technical field

The invention relates to the technical field of mobile communication, in particular to a call control method in a mobile communication system.

Background technique

In order to enrich the functions of the WCDMA/GPRS (Wideband Code Division Multiple Access/General Packet Radio Service) system, effectively utilize network resources, and reduce user communication costs, a method of packet communication activated by the network side is adopted in the mobile communication system. This method is for users to group through PLMN (PublicLand Mobile Network, public land mobile network) according to MSISDN [Mobile Station International ISDN Number, Mobile Station International ISDN (Integrated Services Digital Network) Number] and APN (Access Point Name, Access Point Name) Call another user, automatically obtain the IP address of the other party, and establish an IP-based communication link between the two users for communication.

However, the existing packet communication technology only provides a method for establishing a communication link between two users in a PPP (Point-to-Point Protocol) access mode by grouping, and does not consider the security of the called user. Therefore, it is difficult to avoid Malicious group harassing calls and malicious attacks aimed at users cannot ensure that users use the group communication method safely. In addition, other mobile communication systems activated by the network side do not provide protection against harassment and attacks on the called user.

Contents of the invention

The purpose of the present invention is to provide a call control method in a mobile communication system, thereby ensuring the security of the called user in the mobile communication system activated by the network side, and effectively avoiding malicious group harassment and attacks aimed at the user.

The purpose of the present invention is achieved like this: the call control method in the mobile communication system comprises:

a. In the AAA (Authentication, Authorization and Accounting, authentication) server of the mobile communication system, configure call control information for the user;

b. Determine whether the calling user can call the called user according to the call control information configured by the called user, if yes, execute step c, and no longer execute step d, otherwise, execute step d;

c. Establish a communication link between the calling user and the called user;

d. Prohibit the calling user from calling the called user.

The step a is: the call control information is the information of the calling party who is allowed to call the user.

Described step b is:

b1, the calling user initiates a PDP Context (packet data protocol context) activation request to the GGSN, and the GGSN sends the authentication request to the authentication server;

b2. The authentication server determines the configured calling user information of the called user according to the called user information in the request message;

b3. Match the calling user with the determined calling user information of the called user, if they match, return an authentication success message to the GGSN, and then call the called user, otherwise, execute step d.

The step a is: the call control information is the information of the caller who is prohibited from calling the user.

Described step b is:

b4. The calling user initiates a PDP activation request to the GGSN, and the GGSN sends the authentication request to the authentication server;

b5. The authentication server determines the configured calling user information of the called user according to the called user information;

b6. Match the calling user with the determined calling user information of the called user, if they match, then execute step d, otherwise, return an authentication success message to the GGSN to determine that the called user can be called.

The step c is: establishing a communication link between the calling user and the called user in the way of IP access.

Described step c comprises:

c1, GGSN sends an activation request success message to the called user, and registers the MSISDN/IP (mobile station international ISDN number and IP address) information of the calling user;

c2. After the registration is successful, the GGSN initiates a network side activation request to the called user;

c3. After the network side activation of the called user is successful, register the MSISDN/IP information of the called user;

c4. After the registration is successful, the GGSN sends the called user activation success message to the calling user;

c5. The calling user obtains the IP address of the called user, and communicates between the calling user and the called user.

When carrying out the registration of the MSISDN/IP information of the calling user described in step c1, carry the activation time simultaneously; When carrying out the registration of the MSISDN/IP information of the called user described in step c3, carry the activation time and APN (access point name) information.

Described step c5 comprises:

c51, the calling user requests the domain name server (DNS) to resolve the IP address of the called user;

c52, DNS determines the IP address of the called user according to the APN of the called user and the activation time, and returns the determined IP address of the called user to the calling user;

c53. The calling user communicates with the called user through the called user's IP address.

While executing step c5, it also includes: the GGSN notifies the RADIUS server to start accounting.

The call control method in the mobile communication system also needs to maintain the call control information of the calling party configured by the user. The specific process is: the user maintains the call control information of the user saved by the authentication server by sending a page .

Before the user maintains the user's call control information saved by the authentication server by sending the page, the user's identity needs to be confirmed, and the user who passes the confirmation can maintain the call control information configured for him.

The call control method in the mobile communication system also needs to maintain the call control information of the calling party configured by the user. The specific process is: the user sends maintenance information through the mobile terminal to control the call of the user stored by the authentication server. information is maintained.

It can be seen from the above technical solution that the present invention adopts the method of authenticating the calling user according to the configured authentication data information of the called user, so as to realize the call control of the calling user. Therefore, the present invention limits the calling authority of the calling user from the perspective of the called user, ensures the interests of the called user, prevents malicious group harassment calls and malicious attacks, and makes technical preparations for the actual operation of the operator. Further enhance the security of the group call function. The present invention is especially suitable for mobile communication systems that use packet communication; at the same time, the present invention further refines the method of group communication between users through the PLMN, that is, the communication link is established in the form of IP access between two UEs through the packet domain , the cost is lower.

Description of drawings

Fig. 1 is the concrete implementation process schematic diagram of the present invention;

Fig. 2 is the database structure diagram 1 of the configured calling party control information;

Fig. 3 is the database structure diagram 2 of the configured calling party control information;

FIG. 4 is a schematic diagram of a database structure for resolving the IP address of the called user in the DNS.

Detailed ways

The specific implementation of the call control method in the mobile communication system of the present invention is as shown in Figure 1:

Step 1: User UEa calls user UEb, enters the MSISDN of user UEb: 13641091737, initiates a PDP Context (packet data protocol context) activation request, and the request message carries 13641091737.wcdma.com as the APN, where wcdma.com is the APN configured by the GGSN , is the APN used by the operator when calling another UE through the packet domain, and the access mode is non-transparent IP access; the request message also carries the called user UEb and the calling user UEa in the PCO (Protocol Configuration Option) option MSISDN as username and password;

Steps 2 and 3: After receiving the activation request information, the GGSN initiates an authentication request to the AAA (authentication) server to determine whether the calling user UEa has the right to call the called user UEb, and returns an authentication result message to the GGSN;

The authentication server stores the configured user call control information, that is, the data used to authenticate the user. The configured data can be the MSISDN number of the user who is allowed to call in, that is, only the MSISDN number recorded in the data corresponds to The user has the right to initiate a call to the user, and the data storage form is shown in Figure 2; the configured data can also be the MSISDN number of the user who is prohibited from calling in, that is, the user corresponding to the MSISD number recorded in the data has no right to initiate a call to the user , the data storage form is shown in Figure 3.

If the saved data is the MSISDN number of the user who is allowed to call in, then when the user is authenticated, the AAA server searches the saved data. Usually, one user name can correspond to multiple MSISDN numbers of the user who is allowed to call in. As long as the AAA request message contains If the user's MSISDN matches one of the numbers, an authentication success message will be returned to the GGSN, otherwise an authentication failure message will be returned;

If the saved data is one or more user MSISDN numbers that are prohibited from calling in, when the user is authenticated, as long as the user MSISDN number in the AAA request message matches one of the numbers, the authentication failure message will be returned to the GGSN, otherwise Return an authentication success message;

The above two authentication methods can be used alone or at the same time as needed;

Steps 4 and 5: GGSN performs different processing according to the authentication response. If the authentication is successful, it will register the MSISDN/IP information with the DNS (Domain Name Server), and at the same time carry the activation time stamp of the activation request initiated by the user UEa, and return to UEa Activation success response, steps 4 and 5 in the figure have no chronological order; if the authentication fails, only the activation failure message is returned to the user UEa;

Step 6: DNS returns the successful registration MSISDN/IP information to GGSN;

Step 7: After the GGSN creates the PDP (Packet Data Protocol) context of the calling user UEa, it initiates the network side activation process to the called user UEb according to the MSISDN of the called user UEb, and the APN format content in the message is the same as the APN used when UEa is activated The latter part is the same, namely: wcdma.com, the access method is transparent IP access;

If the activation on the network side fails and the call fails, return a call failure message to UEa, and prompt UEa whether to continue calling or deactivate;

Step 8: After receiving the activation request message from the network side, UEb initiates an activation context request to activate the indicated PDP context;

Step 9: GGSN receives UEb's context creation request, creates the context, and sends a network-side successful activation message to user UEb; if UEb already has one or more PDP contexts (<=11), then activates the second PDP context;

Step 10: After successfully activating UEb on the GGSN network side, register the MSISDN/IP information with the DNS server, and carry the activation time stamp and APN name of the user UEb at the same time; one or more PDP contexts (<= 11) registration information;

Step 11: DNS returns a registration success response to user UEb;

Step 12: GGSN notifies user UEa that user UEb has been successfully activated;

Step 13: the user UEa sends a DNS request to the DNS, requesting to resolve the IP address corresponding to the MSISDN of the user UEb;

Since there may be multiple PDP addresses corresponding to the MSISDN of user UEb (corresponding to the existence of multiple PDP contexts for UEb), DNS first uses APN="wcdma.com" to match and resolve the PDP address of user UEb, if there are multiple addresses , the address of user UEb is determined according to the comparison between the current time and the registration time of each address: that is, the address whose registration time is closest to the current time is the address of user UEb; assuming that the data information stored in DNS is shown in Figure 4, the current The time is 17:20:26:xxx, and the registration time of PDP address 3 is closest to the current time, then DNS will return PDP address 3 to user Uea;

The activation time of UEa in Figure 4 is used for UEa as the called party, and activates multiple PDP contexts. When there are multiple addresses, it is necessary to analyze and return the most suitable address of UEa to the calling party through this time comparison.

Step 14: DNS returns the IP address of UEb to UEa;

Step 15: GGSN notifies the RADIUS server to start accounting;

Steps 16 and 17: User UEa can communicate with user UEb after obtaining the address of user UEb, that is, transmit application data packets between user UEa and user UEb.

The method of the present invention also includes the process that the called user UEb maintains the configured call control information of the calling user: at the ISP WEB/WAP Proxy (Internet Service Provider WEB/WAP Gateway Proxy) or the short message center accepts the user through the computer Or the mobile terminal maintains the MSISDN information of the calling party whose MSISDN number allows/prohibits the caller who initiates the group call online; number (such as 1001), the server receives a short message with special marking symbols, and after parsing, sends relevant signaling to the AAA server to add, delete, and modify the MSISDN number that allows/prohibits the initiation of group calls, as well as the local MSISDN number.

Claims (13)

1, the calling-control method in a kind of mobile communication system is characterized in that comprising:

A, in the authentication server of mobile communication system, be the control information of user's configuration call;

B, determine according to the call control information of called subscriber configuration whether the calling subscriber can call out the called subscriber, if can, execution in step c then, and execution in step d no longer, otherwise, execution in step d;

C, between calling subscriber and called subscriber, set up communication link;

D, forbid that the calling subscriber calls out this called subscriber.

2, the calling-control method in the mobile communication system according to claim 1 is characterized in that described step a is: described call control information is for allowing to call out this user's calling user information.

3, the calling-control method in the mobile communication system according to claim 2 is characterized in that described step b is:

B1, calling subscriber activate request to gateway support node initiation packet data protocol contexts, and send authentication request by gateway support node to authentication server;

B2, authentication server determine this called subscriber's of being disposed calling user information according to called user information in the request message;

B3, this calling subscriber and determined this called subscriber's calling user information is mated,, then can call out the called subscriber if coupling is returned authentication success message to gateway support node, otherwise, execution in step d then.

4, the calling-control method in the mobile communication system according to claim 1, it is characterized in that described step a is: described call control information is a calling user information of forbidding calling out this user.

5, the calling-control method in the mobile communication system according to claim 4 is characterized in that described step b is:

B4, calling subscriber activate request to gateway support node initiation packet data protocol contexts, and send authentication request by gateway support node to authentication server;

B5, authentication server determine this called subscriber's of being disposed calling subscriber's information according to called user information;

B6, this calling subscriber and determined this called subscriber's calling user information is mated, if coupling, execution in step d then, otherwise, return authentication success message to gateway support node, determine and can call out by the user.

6, the calling-control method in the mobile communication system according to claim 1 is characterized in that described step c is: set up communication link with the IP access way between calling subscriber and called subscriber.

7, the calling-control method in the mobile communication system according to claim 6 is characterized in that described step c comprises:

C1, gateway support node send to the called subscriber and activate the successful message of request, and carry out calling subscriber's the Mobile Subscriber International ISDN number and the registration of IP address information;

C2, succeed in registration after, initiate network side by gateway support node to the called subscriber and activate request;

After c3, called subscriber's network side activate successfully, carry out called subscriber's the Mobile Subscriber International ISDN number and the registration of IP address information;

C4, succeed in registration after, send the called subscriber by gateway support node to the calling subscriber and activate successful message;

The IP address of c5, calling user obtaining called user, and carry out communication between caller and called users.

8, the calling-control method in the mobile communication system according to claim 7 when it is characterized in that the registration of the described calling subscriber's of carrying out of step c1 Mobile Subscriber International ISDN number and IP address information, carries activationary time simultaneously; Step c3 is described when carrying out the registration of called subscriber's Mobile Subscriber International ISDN number and IP address information, carries activationary time and APN information simultaneously.

9, the calling-control method in the mobile communication system according to claim 8 is characterized in that described step c5 comprises:

C51, calling subscriber are to domain name server (DNS) request analysis called subscriber's IP address;

The IP address that c52, DNS determine the called subscriber according to called subscriber's APN and activationary time, and the called subscriber's that determines IP address returned to the calling subscriber;

C53, calling subscriber by the called subscriber the IP address and the called subscriber between communicate.

10, the calling-control method in the mobile communication system according to claim 7 is characterized in that: also comprise in the time of execution in step c5: the process that gateway support node notice remote authentication server begins to charge.

11, the calling-control method in the mobile communication system according to claim 1, also needing to it is characterized in that the maintenance of calling subscriber's call control information that the user is disposed, detailed process is: the user safeguards by this user's of sending the page authentication server being preserved call control information.

12, the calling-control method in the mobile communication system according to claim 11, it is characterized in that: before the user safeguards this user's of authentication server preservation call control information by the transmission page, also need user's identity is confirmed, confirm that the user who passes through just can be maintained as the call control information of its configuration.

13, the calling-control method in the mobile communication system according to claim 1, also needing to it is characterized in that the maintenance of calling subscriber's call control information that the user is disposed, detailed process is: the user safeguards by the call control information that portable terminal sends this user that maintenance information preserves authentication server.

Images