CN101990313A

CN101990313A - Method, informing method and system for realizing local IP access control

Info

Publication number: CN101990313A
Application number: CN2009100907817A
Authority: CN
Inventors: 霍玉臻; 周娜; 宗在峰
Original assignee: ZTE Corp
Current assignee: ZTE Corp
Priority date: 2009-08-06
Filing date: 2009-08-06
Publication date: 2011-03-23
Anticipated expiration: 2029-08-06
Also published as: CN101990313B; WO2011015092A1; WO2011015124A1

Abstract

The invention provided a method, an informing method and a system for realizing local Internet protocol (IP) access control. The method comprises the following steps that: a wireless side net element/a home base station gateway reports local IP access (LIPA) connection capacity information of a local IP access function of the Internet, and/or the LIPA connection capacity information of a home based network, and/or the LIPA connection capacity information of a local network of a user, and/or the LIPA connection capacity information of the local network of an enterprise to a mobility management entity; and the mobility management entity establishes LIPA connection for the user according to the obtained capacity information and determines whether the LIPA connection is the LIPA connection to the Internet or the LIPA connection to the home based network. By using the method of the invention, the LIPA connection to the Internet or the LIPA connection to the home based network is selected and established for a user reasonably so as to ensure the security of LIPA access of a non-CSG user.

Description

Realize method, Notification Method and the system of local IP access control

Technical field

The present invention relates to the base station from home system, refer to the local carrier network agreement of a kind of realization (IP, InternetProtocol) method of access control, Notification Method and system especially.

Background technology

Third generation partner program (3GPP, 3rd Generation Partnership Project) grouping system (EPS of evolution, Evolved Packet System), universal mobile telecommunications system land radio access web (E-UTRAN by evolution, Evolved Universal Terrestrial Radio Access Network), mobile management entity (MME, Mobility Management Entity), gateway (S-GW, ServingGateway), grouped data network gateway (P-GW, Packet Data Network Gateway, be also referred to as PDN GW), home subscriber server (HSS, Home Subscriber Server), authentication and authorization charging (the AAA of 3GPP, Authentication, Authorization and Accounting) server, "Policy and Charging Rules Function (PCRF, Policy and Charging Rules Function) entity and other support node are formed.

Fig. 1 is the composition schematic diagram of existing EPS framework, and as shown in Figure 1, MME is responsible for the related work of chains of command such as the processing of mobile management, Non-Access Stratum signaling and the contextual management of user's mobile management; IAD comprises S-GW and P-GW, and wherein, S-GW is the accessing gateway equipment that links to each other with E-UTRAN, is used for transmitting data between E-UTRAN and P-GW, and is responsible for pending datas such as paging are carried out buffer memory; P-GW is the borde gateway of EPS and packet data network (PDN, Packet Data Network), and the access of being responsible for PDN reaches functions such as transmitting data between EPS and PDN; The Authentication Authorization server comprises HSS, aaa server; PCRF is the "Policy and Charging Rules Function entity, PCRF links to each other with the IP operation network by the Rx receiving interface, obtain business information, in addition, PCRF links to each other with gateway device in the network by the Gx/Gxa/Gxc interface, is responsible for initiating the foundation of IP carrying, the service quality (QoS of assurance business datum, and the control of chargeing Qualityof Service).

Base station from home is a kind of small-sized, lower powered base station, be deployed in indoor places such as family and office, main effect is in order higher service rate to be provided to the user and to reduce and use the needed expense of high rate services, remedying the deficiency that existing distributed cellular radio communication system covers simultaneously.The advantage of base station from home is economical, convenient, low-power output, plug and play etc.

Base station from home can be directly connected to core network, also can be linked into core network by this logical ne of home base-station gateway, as shown in Figure 1, wherein, home base-station gateway is mainly used in, the fail safe of checking base station from home, handle the registration of base station from home, base station from home is carried out operation maintenance management,, be responsible for the data of exchcange core net and base station from home according to Carrier Requirements configuration and control base station from home.IAD can be S-GW, P-GW, Serving GPRS Support Node (SGSN, Serving GPRS Support Node), Gateway GPRS Support Node (GGSN, Gateway GPRS Support Node).It can be local SGW (L-SGW that local access network closes, Local SGW), local PGW (L-PGW, Local PGW), virtual SGW (V-SGW, Virtual SGW), virtual PGW (V-PGW, Virtual PSGW), local GGSN (L-GGSN, Local GGSN).

In order to realize local IP access function (LIPA, Local IP Access), promptly terminal inserts this locality of other IP device or internet in the home network, has set up the local access network pass, as shown in Figure 1 and Figure 2.Local access network closes can be provided the providing powerful support for of local IP access technology, local access network close can and the wireless side network element close and establish or be arranged near the wireless side network element, also can and home base-station gateway close and establish or be arranged near the home base-station gateway.

Fig. 2 is in the mobile communications network framework, the data flow path schematic diagram of local IP access and the visit of traditional IP core network, as shown in Figure 2, the user for supporting local IP access can set up traditional IP core network visit data path and local IP access data path.As shown in Figure 2, for the connection of local IP access, the local IP access data path closes to wireless side network element/home base-station gateway to local access network from terminal that (L-SGW, L-PGW), transfer of data is without core net.In order to realize the LIPA function, can set up two connections, as shown in Figure 2, and local IP access data path 1 direct access internet, local IP access data path 2 is directly visited other IP devices of home network.

When UE initiates to adhere to request, PDN connects the request of foundation, or during the PDP context activation request, Mobility Management Entity need judge whether that can set up local IP access for this request connects, need set up which kind of local IP access connects, the Internet LIPA connects (LIPA to Internet) in this way, or home network LIPA connects (LIPA to home based network).Mobility Management Entity is in order to realize above-mentioned judgement, need whether have LIPA to Internet or LIPA tohome based network ability according to wireless side network element/home base-station gateway, and the ability whether different classes of user has LIPA to Internet or a LIPA tohome based network is judged comprehensively.When aforementioned capabilities changed, Mobility Management Entity need judge whether effective the LIPA that has existed connects according to the ability after changing.The aforesaid operations unification is referred to as the access control of LIPA.

Closed user is that whether CSG user has LIPA to Internet ability or LIPA to home basednetwork ability can realize by contracting.And, can't in signatory, embody this ability for non-CSG user, and limit if non-CSG user's LIPA is not visited, can cause potential safety hazard, can the random access home network as unidentified non-CSG user etc.; And base station from home, the grand station disposed for some enterprises/public place need non-CSG user to visit home network or the Internet by LIPA, therefore, need non-CSG user be set by wireless side network element/home base-station gateway and whether have LIPA toInternet ability or LIPA to home based network ability, need simultaneously this ability is reported to core net, carry out the access control of LIPA for Mobility Management Entity.

When above-mentioned LIPA to Internet ability or LIPA to home based network ability change, Mobility Management Entity need judge whether the LIPA connection that the user has set up lost efficacy according to aforementioned capabilities information, such as: non-CSG user no longer can set up LIPA to home based network connection etc., so that the connection of losing efficacy is handled as discharging.

In the present framework and flow process, do not distinguish and report above-mentioned two category informations.Therefore there is significant limitation in prior art, can not create or keep which class LIPA for user's choose reasonable to connect.

Summary of the invention

In view of this, main purpose of the present invention is to provide the method for two kinds of realization local IP access control, can create or keep which class LIPA for user's choose reasonable to connect.

Another object of the present invention is to provide the system of two kinds of realization local IP access control, can or keep any class LIPA for the establishment of user's choose reasonable and connect.

Another purpose of the present invention is to provide a kind of Notification Method of realizing local IP access control, can obtain to connect failure reasons for the terminal that is.

For achieving the above object, technical scheme of the present invention is achieved in that

A kind of method that realizes local IP access control, this method comprises:

Wireless side network element/home base-station gateway, report the Internet local IP access function LIPA concatenation ability information to Mobility Management Entity, and/or home network LIPA concatenation ability information, and/or subscriber's local network LIPA concatenation ability information, and/or enterprise network local network LIPA concatenation ability information;

Mobility Management Entity is according to the Internet LIPA concatenation ability information that obtains, and/or home network LIPA concatenation ability information, and/or subscriber's local network LIPA concatenation ability information, and/or enterprise network local network LIPA concatenation ability information, whether decision is that the user sets up the LIPA connection.

When described the Internet LIPA concatenation ability information, and/or home network LIPA concatenation ability information, and/or subscriber's local network LIPA concatenation ability information, and/or enterprise network local network LIPA concatenation ability information is when changing, and this method also comprises:

Ability information after described wireless side network element/home base-station gateway will change reports Mobility Management Entity, whether the ability information of described Mobility Management Entity after according to the change that obtains is judged that LIPA that the user has set up connects and was lost efficacy, and discharge the connection of inefficacy.

This method also comprises: described Mobility Management Entity sends the specific reasons value to terminal, perhaps, sending the Internet LIPA connects, or home network LIPA connects, or subscriber's local network LIPA connects, or enterprise network local network LIPA connection inefficacy indication, be used to indicate terminals and Internet LIPA to connect or home network LIPA connection inefficacy;

According to carrier policy or local policy, the Internet LIPA connection or the home network LIPA connection that directly can not be created by described Mobility Management Entity transfer the core net connection to, and connect for the user creates core net.

Ability information behind described will the change reports the Mobility Management Entity method: described wireless side network element/home base-station gateway reports Mobility Management Entity by config update request or register requirement with the ability information after changing.

In the LTE system, described Mobility Management Entity is a mobile management entity MME, and described Mobility Management Entity discharges the LIPA connection of losing efficacy and comprises:

Described MME sends the session removal request to local grouped data network gateway L-PGW, and described L-PGW triggers the carrying release that local IP connects, and returns session deletion response message to described MME;

Described MME initiates the load bearing deactivation request to the wireless side network element, in described load bearing deactivation request message, carry the specific reasons value, perhaps, carry the Internet LIPA and connect, or home network LIPA connects, or subscriber's local network LIPA connects, or enterprise network local network LIPA connection inefficacy indication, be used to indicate terminals and Internet LIPA to connect, or home network LIPA connect, or subscriber's local network LIPA connection, or enterprise network local network LIPA connects inefficacy;

Described wireless side network element is carried out RRC and is connected layoutprocedure, and, in RRC connection configuration messages, carry the specific reasons value, perhaps to terminal transmission RRC connection configuration messages, carrying the Internet LIPA connects, or home network LIPA connection, or subscriber's local network LIPA connection, or enterprise network local network LIPA connects the indication of losing efficacy, be used to indicate terminals and Internet LIPA to connect, or home network LIPA connection, or subscriber's local network LIPA connection, or enterprise network local network LIPA connects inefficacy;

Terminal is replied RRC connection configuration to the wireless side network element and is finished message, and described wireless side network element sends the load bearing deactivation response message to Mobility Management Entity.

When having local service gateway L-SGW, the information interaction between described Mobility Management Entity and L-PGW is transmitted by L-SGW.

Described L-SGW is arranged in described wireless side network element/home base-station gateway; Perhaps, described L-SGW is positioned at core net.

In the UTRAN system, described Mobility Management Entity is Serving GPRS Support Node SGSN, and described Mobility Management Entity discharges the LIPA connection of losing efficacy and comprises:

Described SGSN sends the PDP Context removal request to local gateway GPRS Support Node GGSN; L-GGSN triggers local IP and connects the main carrying release that connects, and returns PDP Context deletion response to SGSN;

Described SGSN sends PDP Context deactivation request through the wireless side network element to terminal, in PDP Context deactivation request, carry the specific reasons value, perhaps, carry the Internet LIPA and connect, or home network LIPA connects, or subscriber's local network LIPA connects, or enterprise network local network LIPA connection inefficacy indication, be used to indicate terminals and Internet LIPA to connect, or home network LIPA connect, or subscriber's local network LIPA connection, or enterprise network local network LIPA connects inefficacy;

Terminal is returned the deactivation of transmission PDP Context through the wireless side network element to SGSN and is accepted message, carries out RAB and discharges flow process.

The described method that reports comprises:

When the user initiates to adhere to request or packet data network PDN connection foundation request or service request, or during PDP context activation, wireless side network element/home base-station gateway carries described the Internet LIPA concatenation ability information in S1/Iu initialization connection message, and/or home network LIPA concatenation ability information, and/or subscriber's local network LIPA concatenation ability information, and/or enterprise network local network LIPA concatenation ability information, report Mobility Management Entity.

Described the Internet LIPA concatenation ability information is the ability that non-closed CSG user the Internet LIPA connects, or the ability of CSG user the Internet LIPA connection, or the ability of wireless side network element/home base-station gateway, or the combination in any of described ability information;

Described home network LIPA concatenation ability information is the ability that non-CSG user household network LIPA connects, or the ability of CSG user household network LIPA connection, or non-CSG subscriber's local network LIPA concatenation ability, or non-CSG user's enterprise network local network LIPA concatenation ability, CSG subscriber's local network LIPA concatenation ability, or non-CSG user's enterprise network local network LIPA concatenation ability, or the ability of wireless side network element/home base-station gateway, or the combination in any of described ability information.

Described wireless side network element is base station or base station from home or radio network controller (RNC);

Described Mobility Management Entity is mobile management entity MME or moving exchanging center MSC or Serving GPRS Support Node SGSN.

A kind of method that realizes local IP access control, when not disposing home base-station gateway or during at macrocellular, this method comprises:

During the wireless side network element registration, with the Internet local IP access function LIPA concatenation ability information, and/or home network LIPA concatenation ability information, and/or subscriber's local network LIPA concatenation ability information, and/or enterprise network local network LIPA concatenation ability information reports Mobility Management Entity;

Mobility Management Entity is according to the Internet LIPA concatenation ability information that obtains, and/or home network LIPA concatenation ability information, and/or subscriber's local network LIPA concatenation ability information, and/or enterprise network local network LIPA concatenation ability information, judge whether to connect for the user sets up LIPA.

Described the Internet LIPA concatenation ability information, and/or home network LIPA concatenation ability information, and/or subscriber's local network LIPA concatenation ability information, and/or enterprise network local network LIPA concatenation ability information is carried at the S1 interface and sets up in the request message and report.

Ability information after described wireless side network element will change reports Mobility Management Entity, and whether the ability information of described Mobility Management Entity after according to the change that obtains is judged that LIPA that the user has set up connects and lost efficacy, and discharge the connection of inefficacy.

Described home network LIPA concatenation ability information is the ability that non-CSG user household network LIPA connects, or the ability of CSG user household network LIPA connection, or non-CSG subscriber's local network LIPA concatenation ability, or non-CSG user's enterprise network local network LIPA concatenation ability, CSG subscriber's local network LIPA concatenation ability, or CSG user's enterprise network local network LIPA concatenation ability, or the ability of wireless side network element/home base-station gateway, or the combination in any of described ability information.

A kind of system that realizes local IP access control comprises wireless side network element/home base-station gateway, Mobility Management Entity, wherein,

Wireless side network element/home base-station gateway, be used for reporting the Internet local IP access function LIPA concatenation ability information to Mobility Management Entity, and/or home network LIPA concatenation ability information, and/or subscriber's local network LIPA concatenation ability information, and/or enterprise network local network LIPA concatenation ability information;

Mobility Management Entity, be used for according to the Internet LIPA concatenation ability information that receives, and/or home network LIPA concatenation ability information, and/or subscriber's local network LIPA concatenation ability information, and/or enterprise network local network LIPA concatenation ability information, whether decision is that the user sets up the LIPA connection.

When described the Internet LIPA concatenation ability information, and/or home network LIPA concatenation ability information, and/or subscriber's local network LIPA concatenation ability information, and/or enterprise network local network LIPA concatenation ability information is when changing,

Described wireless side network element/home base-station gateway also is used for the ability information after changing is reported Mobility Management Entity;

Described Mobility Management Entity also is used for judging according to the ability information after the change that obtains whether the LIPA connection that the user has set up lost efficacy, and discharges the connection of losing efficacy.

Described Mobility Management Entity, also be used for sending the specific reasons value to terminal, perhaps, sending the Internet LIPA connects, or home network LIPA connects, or subscriber's local network LIPA connection, or enterprise network local network LIPA connection inefficacy indication, be used to indicate terminals and Internet LIPA to connect or home network LIPA connection inefficacy.

Described Mobility Management Entity also is used for, and according to carrier policy or local policy, the Internet LIPA that directly can not create connects or home network LIPA connection transfers the core net connection to, and connects for the user creates core net.

A kind of system that realizes local IP access control, when not disposing home base-station gateway or during at macrocellular, comprise the wireless side network element, Mobility Management Entity, wherein,

During described wireless side network element registration, be used for the Internet local IP access function LIPA concatenation ability information, and/or home network LIPA concatenation ability information, and/or subscriber's local network LIPA concatenation ability information, and/or enterprise network local network LIPA concatenation ability information reports Mobility Management Entity;

Mobility Management Entity, be used for according to the Internet LIPA concatenation ability information that receives, and/or home network LIPA concatenation ability information, and/or subscriber's local network LIPA concatenation ability information, and/or enterprise network local network LIPA concatenation ability information, judge whether to connect for the user sets up LIPA.

A kind of Notification Method of realizing local IP access control is judged LIPA that the user set up when Mobility Management Entity and is connected when losing efficacy,

Described Mobility Management Entity sends the specific reasons value to terminal, perhaps, sending the Internet LIPA connects, or home network LIPA connects, or subscriber's local network LIPA connects, or enterprise network local network LIPA connection inefficacy indication, be used to indicate terminals and Internet LIPA to connect or home network LIPA connection inefficacy.

The technical scheme that provides from the invention described above as can be seen, wireless side network element/home base-station gateway reports LIPA to Internet ability to Mobility Management Entity, and/or LIPA to home based network ability, and/or subscriber's local network LIPA concatenation ability information, and/or enterprise network local network LIPA concatenation ability information, Mobility Management Entity connects for the user sets up LIPA according to the ability information that obtains, and determines that it still is that home network LIPA connects that the Internet LIPA connects.By the inventive method, reasonably connect for which class LIPA the user has selected to create, guaranteed the fail safe of non-CSG user's LIPA visit.

Further, when ability changes, ability information after wireless side network element/home base-station gateway will change reports Mobility Management Entity, the ability information of Mobility Management Entity after according to the change that obtains judges whether the LIPA connection that the user has set up lost efficacy, and the connection of release inefficacy, notify the user specific cause value/indication simultaneously, so that the user handles.Reasonably connect for which class LIPA the user has selected to keep.

Description of drawings

Fig. 1 is the composition schematic diagram of existing EPS framework;

Fig. 2 is in the mobile communications network framework, the data flow path schematic diagram of local IP access and the visit of traditional IP core network;

Fig. 3 realizes the flow chart of the method for local IP access control for the present invention;

When Fig. 4 sets up for user in the mobile communication system of the present invention connects, the flow chart of the embodiment of LIPA access control;

Fig. 5 for capacity variation in the mobile communication system of the present invention after the flow chart of embodiment of access control;

Fig. 6 connects the flow chart of the embodiment that carrying discharges for capacity variation in the LTE of the present invention system causes local IP;

Fig. 7 connects the flow chart of the embodiment that carrying discharges for capacity variation in the UTRAN of the present invention system causes local IP;

When Fig. 8 registers for user in the mobile communication system, the flow chart of the embodiment of LIPA access control;

Fig. 9 a realizes first schematic diagram of the composition structure of the system that local IP access is controlled for the present invention;

Fig. 9 b realizes second schematic diagram of the composition structure of the system that local IP access is controlled for the present invention.

Embodiment

Fig. 3 is the flow chart that the present invention realizes the method for local IP access control, as shown in Figure 3, may further comprise the steps:

Step 300: wireless side network element/home base-station gateway reports the Internet LIPA concatenation ability information to Mobility Management Entity, and/or home network LIPA concatenation ability information, and/or subscriber's local network LIPA concatenation ability information, and/or enterprise network local network LIPA concatenation ability information.

The Internet LIPA concatenation ability information, and/or home network LIPA concatenation ability information, and/or subscriber's local network LIPA concatenation ability information, and/or enterprise network local network LIPA concatenation ability information is according to wireless side network element/home base-station gateway owner wish, sets in wireless side network element/home base-station gateway.

Wherein, the ability that the ability of LIPA to Internet can right and wrong CSG user LIPA to Internet also can be the ability of CSG user LIPA to Internet, can also be the ability of wireless side network element/home base-station gateway.Above-mentioned three kinds of ability information can combination in any.Also can only send certain ability information;

The ability of LIPA to home based network can right and wrong CSG user LIPA to home basednetwork ability, it also can be the ability of CSG user LIPA to home based network, or non-CSG subscriber's local network LIPA concatenation ability, or non-CSG user's enterprise network local network LIPA concatenation ability, CSG subscriber's local network LIPA concatenation ability, or CSG user's enterprise network local network LIPA concatenation ability, can also be the ability of wireless side network element/home base-station gateway.Aforementioned capabilities information can combination in any.Also can only send certain ability information.

Whether CSG user and non-CSG user can have LIPA to Internet ability or LIPA to homebased network ability, can be provided with by wireless side network element/home base-station gateway.Whether CSG user can have LIPA to Internet ability or LIPA to home based network ability, can also realize by contracting.

The wireless side network element can be base station, base station from home, radio network controller (RNC, Radio NetworkController).Mobility Management Entity can be MME, mobile switching centre (MSC, MobileSwitching Centre), Serving GPRS Support Node (SGSN, Serving GPRS Support Node).

In this step, when the user initiates to adhere to request, PDN connection foundation request, service request or PDP context activation, wireless side network element/home base-station gateway carries above-mentioned the Internet LIPA concatenation ability information in S1/Iu initialization connection message, and/or home network LIPA concatenation ability information, and/or subscriber's local network LIPA concatenation ability information, and/or enterprise network local network LIPA concatenation ability information, and report Mobility Management Entity.Especially, when not disposing home base-station gateway or during at macrocellular, during the wireless side network element registration its ability being reported Mobility Management Entity.

During reporting ability information, except the ability information of support is carried in employing, also can express support for or not support this kind ability information by not carrying certain ability information.

Step 301: Mobility Management Entity is according to the Internet LIPA concatenation ability information that obtains, and/or home network LIPA concatenation ability information, and/or subscriber's local network LIPA concatenation ability information, and/or enterprise network local network LIPA concatenation ability information, whether decision is that the user sets up the LIPA connection.

Mobility Management Entity is according to the ability information that receives, and whether decision is that the user sets up the Internet LIPA connection or home network LIPA connects.Such as: when the user need create the Internet LIPA connection, need to judge whether the LIPA to Internet ability of wireless side network element/home base-station gateway is supported, for non-CSG user, need also simultaneously to judge whether non-CSG user LIPA to Internet ability is supported, have only when aforementioned capabilities is all supported, Mobility Management Entity just can be initiated the establishment that the Internet LIPA connects for the user.For another example, when the user need create home network LIPA connection, need to judge whether the LIPA to home based network ability of wireless side network element/home base-station gateway is supported, for non-CSG user, need also simultaneously to judge whether non-CSG user LIPA to home based network ability is supported, have only when aforementioned capabilities is supported, Mobility Management Entity just can be initiated the establishment that home network LIPA connects for the user.

Need to prove; can initiate the establishment of the Internet LIPA connection or the establishment that home network LIPA connects for the user in what situations; depend on the condition that is provided with in the Mobility Management Entity, just illustrate here, and be not intended to limit the scope of the invention.

By the inventive method, reasonably connect for which class LIPA the user has selected to create, guaranteed the fail safe of non-CSG user's LIPA visit.

Further, when the Internet LIPA concatenation ability information, and/or home network LIPA concatenation ability information, and/or subscriber's local network LIPA concatenation ability information, and/or enterprise network local network LIPA concatenation ability information is when changing, this method also comprises: wireless side network element/home base-station gateway reports Mobility Management Entity by config update request or register requirement with the ability information after changing.

Further, when the Internet LIPA concatenation ability information, and/or home network LIPA concatenation ability information, and/or subscriber's local network LIPA concatenation ability information, and/or enterprise network local network LIPA concatenation ability information is when changing, Mobility Management Entity judges according to aforementioned capabilities information whether the LIPA connection that the user has set up lost efficacy, and discharges the connection of losing efficacy.Reasonably connect for which class LIPA the user has selected to keep.

Corresponding method shown in Figure 3, the present invention also provides the system that realizes local IP access control.Fig. 9 a realizes first schematic diagram of composition structure of the system of local IP access control for the present invention, shown in Fig. 9 a, comprise wireless side network element/home base-station gateway, Mobility Management Entity, wherein,

When described the Internet LIPA concatenation ability information, and/or home network LIPA concatenation ability information, and/or subscriber's local network LIPA concatenation ability information, and/or enterprise network local network LIPA concatenation ability information is when changing, described wireless side network element/home base-station gateway also is used for the ability information after changing is reported Mobility Management Entity;

Described wireless side network element is base station or base station from home or RNC; Described Mobility Management Entity is MME or MSC or SGSN.

Fig. 9 b realizes second schematic diagram of composition structure of the system of local IP access control for the present invention, when not disposing home base-station gateway or during at macrocellular, shown in Fig. 9 b, comprise the wireless side network element, and Mobility Management Entity, wherein,

Below in conjunction with embodiment the inventive method is described in detail.

When Fig. 4 set up for user in the mobile communication system of the present invention connects, the flow chart of the embodiment of LIPA access control as shown in Figure 4, comprising:

Step 400: terminal needs to set up Radio Resource control (RRC, Radio ResourceControl) and connects before communicating, as the carrying of signaling message or business datum.

Step 401: terminal sends the initialization Non-Access Stratum, and (NAS, Non-Access-Stratum) message is carried out attach operation.

User's operation at this moment can be to initiate to adhere to request (Attach Request), PDN connection foundation request (PDN Connectivity Request).In the UTRAN system, PDN connects foundation and realizes that by the PDP context activation flow process therefore, in the UTRAN system, the operation that the user initiates at this moment can also be a PDP context activation.

Step 402: the wireless side network element sends initial UE message to Mobility Management Entity, and transmits NAS message/PDP context activation request to Mobility Management Entity.

In this step, if there is home base-station gateway, then the wireless side network element is transmitted to home base-station gateway with initial UE message earlier, and then by home base-station gateway message is issued Mobility Management Entity.

In this step, LIPA to Internet ability that wireless side network element/home base-station gateway will be provided with on wireless side network element/home base-station gateway and/or LIPA to home based network ability are carried in the initial UE message (being S1/Iu message) issues Mobility Management Entity.

Wherein, the ability that the ability of LIPA to Internet can right and wrong CSG user LIPA to Internet also can be the ability of CSG user LIPA to Internet, can also be the ability of wireless side network element/home base-station gateway.Aforementioned capabilities information can combination in any, also can only send certain ability information;

The ability of LIPA to home based network can right and wrong CSG user LIPA to home basednetwork ability, it also can be the ability of CSG user LIPA to home based network, or non-CSG subscriber's local network LIPA concatenation ability, or non-CSG user's enterprise network local network LIPA concatenation ability, CSG subscriber's local network LIPA concatenation ability, or CSG user's enterprise network local network LIPA concatenation ability, can also be the ability of wireless side network element/home base-station gateway.Aforementioned capabilities information can make up in twos.Also can only send certain ability information.

In the LTE system, Mobility Management Entity is MME; In the UMTS system, Mobility Management Entity is SGSN.

Step 403: Mobility Management Entity may be opened authentication and safe procedures, and the user is verified.This step belongs to existing procedure, can adopt existing method to realize, repeats no more here.

Step 404: Mobility Management Entity finds to set up local IP connection according to APN (APN, Access Point Name) or local access identities (these signs can be carried) in step 402 message.The ability information that Mobility Management Entity reports according to wireless side network element/home base-station gateway in the step 402, judgement can connect for which kind of LIPA the user creates.

When the user need create the Internet LIPA connection, need to judge whether the LIPA to Internet ability of wireless side network element/home base-station gateway is supported, if right and wrong CSG is the user, need also to judge whether non-CSG user LIPA to Internet ability is supported, have only when aforementioned capabilities is supported, Mobility Management Entity just can be initiated the establishment that the Internet LIPA connects for the user.When the user need create home network LIPA connection, need to judge whether the LIPA to home based network ability of wireless side network element/home base-station gateway is supported, if whether right and wrong CSG user also needs to judge non-CSG user LIPA to home basednetwork ability simultaneously and supports, have only when aforementioned capabilities is supported, Mobility Management Entity just can be initiated the establishment that home network LIPA connects for the user.

In the present embodiment, be that the ability of wireless side network element/home base-station gateway and non-CSG user's ability are example only, described the judgement behavior of Mobility Management Entity with the ability information that in step 402, reports.

Step 405:,, then continue the existing procedure that the user inserts if the Mobility Management Entity decision can the Internet LIPA connects or home network LIPA connects for the user creates according to the judged result of step 404.According to Client-initiated flow process in the step 401, the flow process that the user continues can be attachment flow, PDN connection building process or PDP context activation flow process.

Step 406～step 407: according to the judged result of step 404, if the Mobility Management Entity decision can't the Internet LIPA connects or home network LIPA connects for the user creates, then send the NAS refuse information, refusal this time inserts.In refuse information, can carry the specific reasons value simultaneously, be used to indicate the user can not set up the Internet LIPA connection or home network LIPA connection.According to Client-initiated flow process in the step 401, the flow process that the user refuses at this moment can be attachment flow, PDN connection building process or PDP context activation flow process.

In this step, can not send refuse information yet, connect and transfer core net to by the Internet LIPA connection/home network LIPA connection that Mobility Management Entity directly can not be created according to carrier policy or local policy.Mobility Management Entity utilizes existing procedure to connect for the user creates core net.

Fig. 5 for capacity variation in the mobile communication system of the present invention after the flow chart of embodiment of access control, as shown in Figure 5, when the LIPA to Internet ability that on wireless side network element/home base-station gateway, is provided with, and/or LIPA to home based network ability, and/or subscriber's local network LIPA concatenation ability information, and/or enterprise network local network LIPA concatenation ability information may further comprise the steps when changing:

Step 500: the ability information after the wireless side network element will change reports the Mobility Management Entity of core net.

In the LTE system, LIPA to Internet ability after the wireless side network element will change and/or LIPA tohome based network ability, and/or subscriber's local network LIPA concatenation ability, and/or enterprise network local network LIPA concatenation ability is carried in the config update request message, sends to Mobility Management Entity.If there is home base-station gateway, then the wireless side network element sends to home base-station gateway with configuration update message earlier, is transmitted to Mobility Management Entity by home base-station gateway again.

In the UTRAN system, LIPA to Internet ability after the wireless side network element will change, and/or LIPA to home based network ability, and/or subscriber's local network LIPA concatenation ability, and/or enterprise network local network LIPA concatenation ability is carried in the login request message, send to home base-station gateway, be transmitted to Mobility Management Entity by home base-station gateway again.

Wherein, Mobility Management Entity is MME in the LTE system, and Mobility Management Entity is SGSN in the UTRAN system.

Step 501: Mobility Management Entity is responded the wireless side network element, for the config update response, is registration reply message in the UTRAN system in the LTE system.

Step 502: Mobility Management Entity checks whether the user exists LIPA to connect.If there is then the ability after the variation that reports according to wireless side network element/home base-station gateway in the step 500, whether the LIPA that judges this user connects and lost efficacy.

When the user exists the Internet LIPA to connect, need to judge whether the LIPA to Internet ability of wireless side network element/home base-station gateway is supported, if right and wrong CSG is the user, need also to judge whether non-CSG user LIPA to Internet ability is supported, have only when aforementioned capabilities is supported, Mobility Management Entity can judge that just user's the Internet LIPA connects effectively.When the user exists home network LIPA to connect, need to judge whether the LIPA to home based network ability of wireless side network element/home base-station gateway is supported, if right and wrong CSG is the user, need also to judge whether non-CSG user LIPA to home based network ability is supported, have only when aforementioned capabilities is supported, Mobility Management Entity can judge that just user's home network LIPA connects effectively.

In the present embodiment, be that the ability of wireless side network element/home base-station gateway and non-CSG user's ability are that example is described only with the ability information that in step 500, reports.

Step 503: according to the judgement of Mobility Management Entity in the step 502, remain valid, then do not do any operation, finish if the LIPA that the user exists connects.Lost efficacy if the LIPA that the user exists connects, then the LIPA of Mobility Management Entity release inefficacy connects.Concrete release flow process sees below to the detailed description of Fig. 6, Fig. 7.

In the present embodiment, Mobility Management Entity is the MME in the LTE system, the SGSN in the UTRAN system.

Fig. 6 is in the LTE of the present invention system, and capacity variation causes local IP to connect the flow chart of the embodiment that carrying discharges, in the present embodiment, being arranged in wireless side network element/home base-station gateway with L-SGW is example, Mobility Management Entity is MME, as shown in Figure 6, may further comprise the steps:

Step 600: when the user has been attached to network, and has local IP when connecting, as described in Figure 5, MME judges that according to the ability of the change that wireless side network element/home base-station gateway reports user's the Internet LIPA connection/home network LIPA connects inefficacy, and MME discharges the LIPA that lost efficacy and connects.

Step 601:MME sends the session deletion request message to L-SGW.

Step 602: receive the message that MME sends, L-SGW sends the session deletion request message to L-PGW.

After step 603:L-PGW receives the session deletion request message, trigger the carrying release that local IP connects.L-PGW sends session deletion response message to L-SGW.

Step 604:L-SGW transmits session deletion response message to MME.

Step 605:MME initiates the load bearing deactivation request to the wireless side network element.In the load bearing deactivation request message, carry the specific reasons value, perhaps the Internet LIPA connects or home network LIPA connection or subscriber's local network LIPA connection or enterprise network local network LIPA connection inefficacy indication, is used to indicate terminals and Internet LIPA connection or home network LIPA connection or subscriber's local network LIPA connection or enterprise network local network LIPA connection to lose efficacy.

Step 606: the wireless side network element is carried out RRC and is connected layoutprocedure, and to terminal transmission RRC connection configuration messages, in RRC connection configuration messages, carry the specific reasons value, perhaps the Internet LIPA connects or home network LIPA connection or subscriber's local network LIPA connection or enterprise network local network LIPA connection inefficacy indication, is used to indicate terminals and Internet LIPA connection or home network LIPA connection or subscriber's local network LIPA connection or enterprise network local network LIPA connection to lose efficacy.

Step 607: terminal is replied RRC connection configuration to the wireless side network element and is finished message.

Step 608: the wireless side network element sends the load bearing deactivation response message to MME.

In the present embodiment, local access network closes and is L-PGW and L-SGW, and L-SGW is arranged in wireless side network element/home base-station gateway.

It is similar to flow process shown in Figure 6 that LIPA when not having L-SGW connects the flow process that discharges, and just MME needs directly and L-PGW carries out interacting message, no longer includes the participation of L-SGW in the flow process, herein detailed description no longer.The release flow process that the core net of LIPA when being positioned at to(for) L-SGW connects is identical with flow process shown in Figure 6, is that MME needs and the L-SGW that is positioned at core net carry out interacting message, no longer describes in detail herein.

Fig. 7 is in the UTRAN of the present invention system, and capacity variation causes local IP to connect the flow chart of the embodiment that carrying discharges, as shown in Figure 7, comprising:

Step 700: when the user has been attached to network, and has local IP when connecting, as described in Figure 5, SGSN judges that according to the ability of the change that wireless side network element/home base-station gateway reports user's the Internet LIPA connection/home network LIPA connection/subscriber's local network LIPA connection/enterprise network local network LIPA connects inefficacy, and SGSN initiates the release that inefficacy LIPA connects.

Step 701:SGSN sends the PDP Context removal request to L-GGSN.

Step 702:L-GGSN receives the message that SGSN sends, and triggers local IP and connects the main carrying release that connects.L-GGSN responds PDP Context deletion response to SGSN.

Step 703:SGSN sends PDP Context deactivation request through the wireless side network element to terminal, in PDP Context deactivation request, carry the specific reasons value, perhaps the Internet LIPA connects or home network LIPA connection or subscriber's local network LIPA connection or enterprise network local network LIPA connection inefficacy indication, is used to indicate terminals and Internet LIPA connection or home network LIPA connection or subscriber's local network LIPA connection or enterprise network local network LIPA connection to lose efficacy.

Step 704: terminal is returned the deactivation of transmission PDP Context through the wireless side network element to SGSN and is accepted message.

Step 705: carry out RAB and discharge flow process.

When not disposing home base-station gateway or under the situation of grand station, when the wireless side network element registration its ability being reported Mobility Management Entity, Mobility Management Entity is preserved its ability.Like this, when the user creates when connecting, needn't flow process carrying capacity shown in Figure 4 for another example give Mobility Management Entity, the ability information of preserving during Mobility Management Entity utilization registration is judged and is got final product.When Fig. 8 registered for user in the mobile communication system, the flow chart of the embodiment of LIPA access control as shown in Figure 8, may further comprise the steps:

Step 800: the wireless side network element sends the S1 interface and sets up request message to Mobility Management Entity, sets up S1 with request and connects.The wireless side network element is with the LIPA to Internet ability information that sets, and/or LIPAto home based network ability information, and/or subscriber's local network LIPA concatenation ability information, and/or enterprise network local network LIPA concatenation ability information is carried at the S1 interface and sets up in the request message, and issues Mobility Management Entity.

Wherein, the ability that the ability of LIPA to Internet can right and wrong CSG user LIPA to Internet also can be the ability of CSG user LIPA to Internet, can also be the ability of wireless side network element/home base-station gateway.Above-mentioned three kinds of ability information can combination in any, also can only send certain ability information.

The ability of LIPA to home based network can right and wrong CSG user LIPA to home basednetwork ability, it also can be the ability of CSG user LIPA to home based network, or non-CSG subscriber's local network LIPA concatenation ability, or non-CSG user's enterprise network local network LIPA concatenation ability, CSG subscriber's local network LIPA concatenation ability, or CSG user's enterprise network local network LIPA concatenation ability, can also be the ability of wireless side network element/home base-station gateway.Above-mentioned three kinds of ability information can combination in any.Also can only send certain ability information.

Mobility Management Entity is MME in the LTE system.

Step 801: Mobility Management Entity is responded the S1 interface for the wireless side network element and is set up response message.

Step 802: Mobility Management Entity is preserved LIPA to Internet ability information and/or the LIPA to home based network ability information that copper obtains by step 800.

Like this, when UE initiated connection building process, Mobility Management Entity was according to the ability of the wireless side network element of preserving in the step 802, and judgement can connect for which kind of LIPA the user creates.

When the user need create the Internet LIPA connection, need to judge whether the LIPA toInternet ability of wireless side network element is supported, if whether right and wrong CSG user also needs to judge non-CSG user LIPA toInternet ability simultaneously and supports, have only when aforementioned capabilities is supported, Mobility Management Entity just can be initiated the establishment that the Internet LIPA connects for the user.When the user need create home network LIPA connection, need to judge whether the LIPA to home based network ability of wireless side network element/home base-station gateway is supported, if right and wrong CSG is the user, need also to judge whether non-CSG user LIPA to home based network ability is supported, have only when aforementioned capabilities is supported, Mobility Management Entity just can be initiated the establishment that home network LIPA connects for the user.

In the present embodiment, be that the ability of wireless side network element/home base-station gateway and non-CSG user's ability are that example is described only with the ability information that in step 800, reports.The ability compound mode that other report similarly is not described in detail.

The above is preferred embodiment of the present invention only, is not to be used to limit protection scope of the present invention, all any modifications of being done within the spirit and principles in the present invention, is equal to and replaces and improvement etc., all should be included within protection scope of the present invention.

Claims

1. method that realizes local IP access control is characterized in that this method comprises:

2. require 1 described method according to claim, it is characterized in that, when described the Internet LIPA concatenation ability information, and/or home network LIPA concatenation ability information, and/or subscriber's local network LIPA concatenation ability information, and/or enterprise network local network LIPA concatenation ability information is when changing, and this method also comprises:

3. method according to claim 2, it is characterized in that, this method also comprises: described Mobility Management Entity sends the specific reasons value to terminal, perhaps, send the Internet LIPA and connect, or home network LIPA connection, or subscriber's local network LIPA connects, or enterprise network local network LIPA connection inefficacy indication, be used to indicate terminals and Internet LIPA to connect or home network LIPA connection inefficacy.

4. method according to claim 1, it is characterized in that, according to carrier policy or local policy, the Internet LIPA connection or the home network LIPA connection that directly can not be created by described Mobility Management Entity transfer the core net connection to, and connect for the user creates core net.

5. method according to claim 2, it is characterized in that, ability information behind described will the change reports the Mobility Management Entity method: described wireless side network element/home base-station gateway reports Mobility Management Entity by config update request or register requirement with the ability information after changing.

6. method according to claim 2 is characterized in that, in the LTE system, described Mobility Management Entity is a mobile management entity MME, and described Mobility Management Entity discharges the LIPA connection of losing efficacy and comprises:

7. method according to claim 6 is characterized in that, when having local service gateway L-SGW, the information interaction between described Mobility Management Entity and L-PGW is transmitted by L-SGW.

8. method according to claim 7 is characterized in that, described L-SGW is arranged in described wireless side network element/home base-station gateway; Perhaps, described L-SGW is positioned at core net.

9. method according to claim 2 is characterized in that, in the UTRAN system, described Mobility Management Entity is Serving GPRS Support Node SGSN, and described Mobility Management Entity discharges the LIPA connection of losing efficacy and comprises:

10. method according to claim 1 and 2 is characterized in that, the described method that reports comprises:

11. method according to claim 1 and 2 is characterized in that,

12. method according to claim 1 and 2 is characterized in that, described wireless side network element is base station or base station from home or radio network controller (RNC);

13. a method that realizes local IP access control is characterized in that, when not disposing home base-station gateway or during at macrocellular, this method comprises:

14. method according to claim 13, it is characterized in that, described the Internet LIPA concatenation ability information, and/or home network LIPA concatenation ability information, and/or subscriber's local network LIPA concatenation ability information, and/or enterprise network local network LIPA concatenation ability information is carried at the S1 interface and sets up in the request message and report.

15. method according to claim 13, it is characterized in that, when described the Internet LIPA concatenation ability information, and/or home network LIPA concatenation ability information, and/or subscriber's local network LIPA concatenation ability information, and/or enterprise network local network LIPA concatenation ability information is when changing, and this method also comprises:

16. according to claim 13 or 15 described methods, it is characterized in that,

17. a system that realizes local IP access control is characterized in that, comprises wireless side network element/home base-station gateway, Mobility Management Entity, wherein,

18. system according to claim 17 is characterized in that, when described the Internet LIPA concatenation ability information, and/or home network LIPA concatenation ability information, and/or subscriber's local network LIPA concatenation ability information, and/or enterprise network local network LIPA concatenation ability information is when changing

19. system according to claim 18, it is characterized in that, described Mobility Management Entity, also be used for sending the specific reasons value, perhaps, send the Internet LIPA and connect to terminal, or home network LIPA connects, or subscriber's local network LIPA connection, or enterprise network local network LIPA connection inefficacy indication, be used to indicate terminals and Internet LIPA to connect or home network LIPA connection inefficacy.

20. system according to claim 17, it is characterized in that described Mobility Management Entity also is used for, according to carrier policy or local policy, the Internet LIPA that directly can not create connects or home network LIPA connection transfers the core net connection to, and connects for the user creates core net.

21. system according to claim 17 is characterized in that, described wireless side network element is base station or base station from home or radio network controller (RNC);

22. a system that realizes local IP access control is characterized in that, when not disposing home base-station gateway or during at macrocellular, comprise the wireless side network element, and Mobility Management Entity, wherein,

23. a Notification Method of realizing local IP access control is characterized in that, judges LIPA that the user set up when Mobility Management Entity and connects when losing efficacy,