WO2010124608A1 - 紧急业务的实现方法及家用基站 - Google Patents

紧急业务的实现方法及家用基站 Download PDF

Info

Publication number
WO2010124608A1
WO2010124608A1 PCT/CN2010/072201 CN2010072201W WO2010124608A1 WO 2010124608 A1 WO2010124608 A1 WO 2010124608A1 CN 2010072201 W CN2010072201 W CN 2010072201W WO 2010124608 A1 WO2010124608 A1 WO 2010124608A1
Authority
WO
WIPO (PCT)
Prior art keywords
base station
home base
indication information
access
user
Prior art date
Application number
PCT/CN2010/072201
Other languages
English (en)
French (fr)
Inventor
骆文
霍玉臻
周娜
Original Assignee
中兴通讯股份有限公司
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 中兴通讯股份有限公司 filed Critical 中兴通讯股份有限公司
Publication of WO2010124608A1 publication Critical patent/WO2010124608A1/zh

Links

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W4/00—Services specially adapted for wireless communication networks; Facilities therefor
    • H04W4/90—Services for handling of emergency or hazardous situations, e.g. earthquake and tsunami warning systems [ETWS]
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W76/00—Connection management
    • H04W76/50—Connection management for emergency connections
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W84/00—Network topologies
    • H04W84/02—Hierarchically pre-organised networks, e.g. paging networks, cellular networks, WLAN [Wireless Local Area Network] or WLL [Wireless Local Loop]
    • H04W84/10—Small scale networks; Flat hierarchical networks
    • H04W84/105—PBS [Private Base Station] network

Definitions

  • the present invention relates to the field of communications, and in particular to a method for implementing an emergency service and a home base station.
  • a home base station is a small, low-power base station deployed in indoor places such as homes and offices. The main function is to provide users with higher service rates and lower the cost of using high-speed services. Insufficient coverage of distributed cellular wireless communication systems.
  • the advantages of home base stations are affordable, convenient, low power output, plug and play, and more.
  • the home base station system is already in the 3rd Generation Partnership Project (3GPP), the 3rd Generation Partnership Project 2 (3GPP2) and the Worldwide Interoperability. For Microwave Access, referred to as WiMAX, the research is carried out in three major standards.
  • FIG. 1 is a schematic diagram of a home base station network connection according to the related art.
  • the home base station system can ensure link security between the home base station and the access gateway, and a security gateway can exist between the home base station and the access gateway.
  • the home base station gateway is introduced.
  • the main functions of the home base station gateway are: verifying the security of the home base station, processing the registration of the home base station, performing operation and maintenance management on the home base station, and configuring and controlling the home base station according to the operator's requirements.
  • the home base station can access the access gateway of the core network through the home base station gateway, and at this time, the security gateway and the home base station gateway are combined.
  • the home base station can also access the access gateway of the core network directly through the security gateway without using the home base station gateway.
  • the security gateway can be set up with the access gateway or can be divided, depending on the deployment of the operator.
  • the access gateway is a Femto Gateway, referred to as Fe-GW.
  • the self-organizing network server as shown in FIG.
  • CSG Closed Subscriber Group
  • the user can access the home base station corresponding to multiple closed user groups by signing with the operator, for example, the user's office, home, and the like.
  • closed mode When the home base station is in the closed mode, only the CSG subscription user to which the home base station belongs can access the base station and enjoy the services provided by the base station.
  • open mode When the home base station is in the open mode, the subscriber of any operator can access the base station, and the home base station at this time is equivalent to the macro base station.
  • the home base station may obtain a closed user group list that allows access through a user data server (for example, a Femto Management System) on the network side, or may directly modify the access allowed by the administrator of the home base station on the home base station. Close the user group list.
  • a user data server for example, a Femto Management System
  • the closed mode home base station uses the list to perform access control on the user and rejects the user who is not authorized to access the closed mode home base station; the hybrid mode home base station selects the user class according to the list (for example , CSG users, non-CSG users) to distinguish, in order to implement differentiated billing, quality of service authorization and other operations.
  • the operation of the home base station to determine whether the user belongs to the CSG list is collectively referred to as access control.
  • Various communication networks need to support emergency services, and home base station systems are no exception. For emergency services, the network cannot refuse access to emergency services because the user cannot complete the authentication. The network can also directly access the user's emergency services without authentication or access control.
  • FIG. 2 is a flowchart of establishing an emergency service according to the related art.
  • the existing emergency service flow of WiMAX is specifically performed in steps 201 to 204:
  • Step 201 The air interface parameter synchronization and ranging are completed between the terminal and the base station.
  • Step 4: 202 the terminal requests to negotiate authentication capabilities, such as a user's authentication policy, and the base station,
  • the access gateway completes the capability negotiation work.
  • Step 203 Perform an access authentication process between the terminal and the authentication and authorization charging server.
  • the terminal modifies the Pesudo Network Access Identifier (NAI), and adds an emergency service modification (hereinafter referred to as the emergency service NAI) to indicate that the terminal initiated this time.
  • Emergency service and the emergency service NAI is carried to the authentication and authorization accounting server through the base station and the access gateway.
  • the authentication and authorization accounting server authenticates the emergency service according to the emergency service NAI, and authorizes the emergency service quality of service subscription data preset for the emergency service to the user.
  • the AAA server fails to access the user, it also returns the authentication success (because the emergency service NAI is carried), but only the emergency mode is allowed to be restricted.
  • Step 4 After the access authentication process is successfully completed, the normal access process is continued.
  • the terminal can make an emergency call on the connection. It can be seen from the above process that, in the whole process, since the base station does not parse the NAI, the authorization mode does not notify the base station, and therefore, the base station does not know that the service is an emergency service.
  • the home base station In the home base station system, the home base station is at the location of the base station, and in addition to performing related functions of the base station, an access control function needs to be performed.
  • a user accesses through a home base station that is not authorized to access (ie, a non-CSG user accesses a closed mode home base station) and initiates an emergency service, the home base station is performing access because the home base station does not recognize the emergency service.
  • the home base station in the closed mode rejects the access of the emergency service, thereby preventing the user from performing emergency services through the home base station.
  • an effective solution has not been proposed yet.
  • the main object of the present invention is to provide an improved scheme for implementing emergency services by a home base station to solve the above problems.
  • an implementation method of an emergency service is provided.
  • the method for implementing the emergency service includes: the home base station acquires indication information of the service, where the indication information is used to indicate that the service belongs to the emergency service; and the home base station determines according to the indication information Do not perform access control on the terminal. Further, the obtaining, by the home base station, the indication information includes: the home base station receiving the pseudo network access identifier from the terminal; the home base station determining whether the indication information is carried in the pseudo network access identifier, and if the determination result is yes, accessing from the pseudo network Get the indication information in the logo.
  • the home base station obtains the indication information, including: the home base station receives the air interface message from the terminal; the home base station determines whether the air interface message carries the indication information, and if the determination result is yes, obtains the indication information from the air interface message. Further, the obtaining, by the home base station, the indication information comprises: the home base station receiving the indication information from the authentication authorization charging server. Further, before the home base station receives the indication information from the authentication authorization charging server, the method further includes: the access gateway receiving the user access accept message from the authentication authorization charging server, where the user access accepts the message Carrying the indication information; the access gateway sends an extended authentication protocol forwarding message to the home base station, and carries the indication information therein.
  • the method further includes: the access gateway receiving the user access accept message from the authentication authorization charging server, where the user access accepts the message Carrying the indication information; the access gateway sends a key change indication message to the home base station, and carries the indication information therein. Further, the access gateway indicates that the service is an emergency service by causing the extended authentication protocol forwarding message not to carry the real NAI. Further, the access gateway indicates that the service is an emergency service by causing the key change indication message not to carry the real NAI. Further, the access mode of the home base station includes at least one of the following: a closed access mode, a hybrid access mode.
  • a home base station includes: an obtaining module, configured to obtain indication information of a service initiated by the terminal, where the indication information is used to indicate that the service belongs to an emergency service; and the determining module is configured to determine, according to the indication information acquired by the obtaining module, that the terminal is not performed Access control.
  • the acquiring module includes: a first receiving submodule, configured to receive a pseudo network access identifier from the terminal; and a first determining submodule, configured to determine whether the pseudo network access identifier received by the first receiving submodule is carried in the pseudo network access identifier
  • the first obtaining sub-module is configured to obtain the indication information from the pseudo network access identifier if the determination result of the first determining sub-module is yes.
  • the acquiring module includes: a second receiving submodule, configured to receive an air interface message from the terminal; and a second determining submodule, configured to determine whether the air interface message received by the second receiving submodule carries the indication information;
  • the obtaining submodule is configured to obtain the indication information from the air interface message if the judgment result of the second judgment submodule is yes.
  • the acquiring module includes: a third receiving submodule, configured to receive indication information from an authentication authorization charging server.
  • the home base station obtains the indication information of the service initiated by the terminal, and determines that the terminal does not perform the access control according to the indication information, thereby solving the problem that the user cannot perform the emergency service through the home base station in the related art, thereby achieving
  • the utility model enables the home base station to identify the emergency service, does not perform access control on the emergency service, and allows the emergency service to directly access the network through the home base station.
  • FIG. 1 is a schematic diagram of a home base station network connection according to the related art
  • FIG. 2 is a flowchart of an emergency service establishment according to the related art
  • FIG. 1 is a schematic diagram of a home base station network connection according to the related art
  • FIG. 2 is a flowchart of an emergency service establishment according to the related art
  • FIG. 1 is a schematic diagram of a home base station network connection according to the related art
  • FIG. 2 is a flowchart of an emergency service establishment according to the related art
  • FIG. 2 is a flowchart of an emergency service establishment according to the related art
  • FIG. 3 is a flowchart of a method for implementing an emergency service according to an embodiment of the present invention
  • 4 is a flowchart of implementing emergency services by a home base station according to Embodiment 1 of the present invention
  • FIG. 5 is a flowchart of implementing emergency services by a home base station according to Embodiment 2 of the present invention
  • FIG. 6 is a implementation of a home base station according to Embodiment 3 of the present invention
  • FIG. 7 is a structural block diagram of a home base station according to an embodiment of the present invention
  • FIG. 8 is a structural block diagram of a home base station according to a preferred embodiment of the present invention.
  • the embodiment of the present invention provides an implementation scheme of an emergency service, in which the home base station obtains the indication information of the service, in the process of initiating the service by the terminal, in consideration of the problem that the user cannot perform the emergency service through the home base station.
  • the indication information is used to indicate that the service belongs to the emergency service, and then the home base station determines, according to the indication information, that the terminal does not perform access control.
  • FIG. 3 is a flowchart of a method for implementing an emergency service according to an embodiment of the present invention, as shown in FIG.
  • Step S302 The home base station acquires the indication information of the service, where the indication information is used to indicate that the service belongs to the emergency service; Step S304, the home base station determines that the terminal does not access the indication information. control. There are two ways for the home base station to obtain the indication information. The two methods are specifically described below.
  • the mode 2 home base station receives the indication information from the authentication authorization charging server.
  • the access gateway receives the user access acceptance message from the authentication authorization accounting server, where the user access acceptance message carries the indication information;
  • the ingress gateway sends an extended authentication protocol forwarding message or a key change indication message to the home base station, and carries the indication information in the extended authentication protocol forwarding message or the key change indication message.
  • the access gateway may also indicate that the service is an emergency service by causing the key change indication message or the extended authentication protocol forwarding message not to carry the real NAI. That is, after the authentication and authorization accounting server authenticates the emergency service, the service carries an indication that the service is an emergency service, and notifies the home base station.
  • the home base station does not perform access control on the user (terminal).
  • the access control of the user (terminal) specifically refers to: the home base station will unconditionally accept the emergency service initiated by the user (terminal), and allow the user (terminal) to access the network, that is, not because the user (terminal) Access to the user (terminal) is not denied by its CSG member.
  • the access modes of the foregoing home base station include: a closed access mode and a hybrid access mode. That is, the home base station in the closed access mode must perform the above operation, and the home base station in the open access mode may not perform the above operation, and the home base station in the hybrid access mode may perform the above operation.
  • Embodiment 1 This embodiment implements the processing of emergency services on the basis of the home base station system of FIG. 1.
  • the home base station acquires and parses the pseudo NAI carried by the user to the network, and determines whether the NAI has an emergency service modification. If it is an emergency service NAI, the home base station does not perform access control on the user.
  • 4 is a flowchart of implementing emergency services by a home base station according to Embodiment 1 of the present invention. As shown in FIG. 4, the process includes the following steps 401 to 409: Step 4: 401, and the air interface parameters are completed between the terminal and the home base station. Synchronize and measure 3 giants.
  • Step 402 The terminal requests to negotiate an authentication capability, such as an authentication policy of the user, and completes capability negotiation work with the home base station and the access gateway.
  • Step 403 The access gateway sends a user identity request to the home base station, and the home base station requests the Forward to the terminal.
  • Step 405 After receiving the message, the home base station in the closed access mode obtains the pseudo NAI in the message, and parses, and checks whether the pseudo NAI sent by the terminal carries the modification of the emergency service, and if the emergency service modification is carried, the user is Set as an emergency business user, then go to step 406. If the pseudo NAI does not perform the emergency service, it is considered to be an ordinary user. According to the normal user, normal access control is performed (check whether the user is a CSG user, and if the user is a CSG user, access is allowed. If yes or no) The CSG user will reject the user access;), step 406 is not performed.
  • the home base station in the hybrid access mode can obtain the pseudo ⁇ in the message according to the policy, and parse it to check whether the pseudo ⁇ sent by the terminal carries the modification of the emergency service, and if it carries the emergency service modification, The user is set as an emergency business user, and then step 406 is performed. If you do not perform this step, or if the result of checking the pseudo-command is that there is no emergency service modification, it is considered to be a normal user. According to the normal user processing, normal access control is performed (check whether the user is a CSG user, if it is a CSG user.
  • step 406 is not performed.
  • the home base station in the open access mode may not perform this step and step 406 after receiving the message.
  • Step 406 the home base station in the access mode is closed, and no emergency access control is performed for the emergency service user, that is, the user is not determined to be the CSG user authorized by the home base station, and the user is directly permitted to use the home base station. Continue the follow-up process.
  • the home base station does not perform any access control for the emergency service user, that is, does not distinguish whether the user accesses the CSG user authorized by the home base station, and directly permits the user to use the home base station to continue.
  • Step 407 The home base station forwards the user identifier sent by the terminal to the access gateway.
  • Step 408 The access authentication process is continued between the terminal and the authentication and authorization accounting server. In this process, emergency services are passed to the authentication authorization accounting server.
  • the authentication and authorization accounting server authenticates the emergency service according to the emergency service, and will preset the emergency service. Urgent business service quality contract data is authorized to the user. When the AAA server fails to authenticate the emergency service, the authentication is also successful.
  • Step 409 continuing to perform other processes related to user access.
  • the terminal can make an emergency call on this connection.
  • the terminal sends a pseudo-identity carrying the emergency service modification to the home base station, and the home base station parses the emergency service modification carried in the home base station to learn that the service currently performed by the terminal is an emergency service.
  • the terminal (especially after software upgrade) may also send a direct indication to the home base station to inform the home base station of the type of service currently being performed by the terminal.
  • the terminal may use the air interface message to send the foregoing service type to the home base station (because both the terminal and the base station communicate through the air interface, the air interface message herein refers to the air interface message between the terminal and the base station, and also That is to say, the terminal directly indicates that the message is an emergency service in the sent air interface message, and the emergency service indication information can be obtained without the need for the home base station to parse the relevant protocol support of the pseudo network access identifier, that is, there is no need to parse many packages in the protocol message.
  • the data packet can directly obtain the emergency service indication information, and then the home base station parses the type of the service.
  • the terminal may use the ranging message (ie, an air interface message) to send the service type to the home base station, and then the home base station determines whether the service type of the service is urgent.
  • the service if the determination is yes, performs the method described in the above step 406; then, steps 402-404 are performed in sequence, and step 4 is gathered 407-409.
  • a typical method is to use an Emergency Service indication (ES) in an air interface message, and set it to 1 or set a value of 0 to indicate the current Business is not an emergency business.
  • ES Emergency Service indication
  • Embodiment 2 This embodiment implements the processing of emergency services on the basis of the home base station system of FIG. 1.
  • the authentication and authorization accounting server authenticates the emergency service
  • the service carries the indication that the service is an emergency service, and notifies the home base station.
  • the home base station is instructed to not access the user.
  • FIG. 5 is a flowchart of implementing emergency services by a home base station according to Embodiment 2 of the present invention. As shown in FIG. 5, the process includes the following steps 501 to 509: Step 501: Perform air interface parameter synchronization and ranging between the terminal and the home base station.
  • Step 502 The terminal requests to negotiate an authentication capability, such as an authentication policy of the user, and completes capability negotiation work with the home base station and the access gateway.
  • Step 503 Perform an access authentication process between the terminal and the authentication and authorization charging server.
  • the terminal modifies the pseudo user identifier NAI, adds an emergency service modification, and indicates that the terminal initiates an emergency service, and passes the emergency service NAI.
  • the home base station and the access gateway are carried to the authentication authorization charging server.
  • the authentication and authorization charging server authenticates the emergency service according to the emergency service NAI, and authorizes the emergency service quality of service subscription data preset for the emergency service to the user.
  • the AAA server fails to authenticate the emergency service, the authentication is also successful. Only when the authorization mode is set to limit, only emergency services are allowed.
  • Step 504 After the user authentication is completed, the authentication and authorization accounting server sends a user access accept message to the access gateway. If the AAA server determines that this is an emergency service, the emergency service indication is carried in the message.
  • the emergency service indication in the message may be explicitly indicated as an emergency service by adding a new indication parameter, or may be indicated as an emergency service by not carrying the real NAI.
  • Step 505 The access gateway forwards the authentication success message to the home base station by using an Extensible Authentication Protocol (EAP) forwarding message, and carries an emergency service indication from the AAA server.
  • EAP Extensible Authentication Protocol
  • the emergency service indication in the message may be explicitly indicated as an emergency service by adding a new indication parameter, or may be indicated as an emergency service by not carrying the real NAI.
  • Step 506 After receiving the message, the home base station in the access mode parses the message, and checks whether the message carries the emergency service indication. If the emergency service indication is provided, the user is identified as an emergency service user, and step 507 is performed. If the emergency service indication is not carried, it is considered to be an ordinary user. According to the normal user, normal access control is performed. (Check whether the user is a CSG user. If the user is a CSG user, access is allowed. If it is a non-CSG user, the user will be denied. Access ;), does not perform step 4 507.
  • the home base station in the hybrid access mode can parse the message according to the policy, check whether the message carries the emergency service indication, and if there is an emergency service indication, the user identifier is For emergency business users, go to step 507. If the emergency service indication is not carried, it is considered to be an ordinary user. According to the normal user processing, normal access control is performed (check whether the user is a CSG user, if it is a CSG user, access is allowed, and the indication is a CSG user; if it is a non-CSG The user is allowed to access, and the indication is a non-CSG user), and step 507 is not performed.
  • the home base station in the open access mode may not perform this step and step after receiving the message.
  • step 507 the home base station in the access mode is closed, and no emergency access control is performed for the emergency service user, that is, the user is not determined to be the CSG user authorized by the home base station, and the user is directly permitted to use the home base station. , continue the follow-up process.
  • the home base station does not perform any access control for the emergency service user, that is, does not distinguish whether the user accesses the CSG user authorized by the home base station, and directly permits the user to use the home base station to continue.
  • Step 508 The home base station forwards the authentication success message to the terminal by using an EAP forwarding message. Step 509, continuing to perform other processes related to user access.
  • Embodiment 3 This embodiment implements the processing of emergency services on the basis of the home base station system of FIG. 1.
  • the authentication and authorization accounting server authenticates the emergency service
  • the service carries an indication that the service is an emergency service, and the access gateway is notified, and the access gateway notifies the home base station in a subsequent key change indication message. According to the indication, the home base station does not perform access control on the user.
  • FIG. 6 is a flowchart of implementing emergency services by a home base station according to Embodiment 3 of the present invention. As shown in FIG. 6, the process includes the following steps 601 to 609: Step 601: Performing air interface parameter synchronization between the terminal and the home base station Ranging.
  • Step 602 The terminal requests to negotiate an authentication capability, such as an authentication policy of the user, and completes capability negotiation work with the base station and the access gateway.
  • Step 603 Perform an access authentication process between the terminal and the authentication and authorization accounting server. In the process, if the terminal detects that the emergency service is performed this time, the terminal enters the pseudo user identifier NAI. Line modification, adding emergency service modification, is used to indicate that the terminal initiates an emergency service, and carries the emergency service NAI to the authentication and authorization accounting server through the home base station and the access gateway.
  • the authentication and authorization charging server authenticates the emergency service according to the emergency service NAI, and authorizes the emergency service quality of service subscription data preset for the emergency service to the user.
  • Step 604 After the user authentication is completed, the authentication and authorization accounting server sends a user access accept message to the access gateway. If the AAA server determines that this is an emergency service, the emergency service indication is carried in the message. The access gateway saves the indication and identifies the user as an emergency service user. The emergency service indication in the message may be explicitly indicated as an emergency service by adding a new indication parameter, or may be indicated as an emergency service by not carrying the real NAI.
  • Step 605 The access gateway forwards the authentication success message to the home base station by using the EAP forwarding message, and then forwards the message to the terminal by the home base station.
  • Step 606 The access gateway sends a key change indication message to the home base station to notify the home base station that the authentication is successful. According to step 604, if the user is an emergency service user, the emergency service indication is carried in the message.
  • the emergency service indication in the message may be explicitly indicated as an emergency service by adding a new indication parameter, or may be indicated as an emergency service by not carrying the real NAI.
  • Step 607 After receiving the message, the home base station that closes the access mode parses the message, and checks whether the message carries an emergency service indication.
  • step 608 is performed. If the emergency service indication is provided, the user is identified as an emergency service user, and step 608 is performed. If the emergency service indication is not carried, it is considered to be an ordinary user. According to the normal user, normal access control is performed. (Check whether the user is a CSG user. If the user is a CSG user, access is allowed. If it is a non-CSG user, the user will be denied. Access ;), does not perform step 4 608. After receiving the message, the home base station in the hybrid access mode can parse the message according to the policy, and check whether the message carries the emergency service indication. If the emergency service indication is provided, the user is identified as the emergency service user, and step 608 is performed. If the emergency service indication is not carried, it is considered to be an ordinary user.
  • normal access control is performed (check whether the user is a CSG user, if it is a CSG user, access is allowed, and the indication is a CSG user; if it is a non-CSG user, Then access is allowed, and the indication is a non-CSG user), and step 608 is not performed.
  • the home base station in the open access mode may not perform this step and step 608 after receiving the message.
  • Step 608 the home base station in the access mode is closed, and no emergency access control is performed for the emergency service user, that is, the user is not determined to be the CSG user authorized by the home base station, and the user is directly permitted to use the home base station. Continue the follow-up process.
  • the home base station does not perform any access control for the emergency service user, that is, does not distinguish whether the user accesses the CSG user authorized by the home base station, and directly permits the user to use the home base station to continue.
  • Step 609 continuing to perform other processes related to user access.
  • the terminal can make an emergency call on this connection.
  • the user base station serving the user needs to release or switch some users with low priority because of the shortage of resources, the user who is identified as an emergency service is considered to have a high priority and will not release or switch the emergency service. .
  • the foregoing embodiment uses a scenario in which the home base station does not directly access the access gateway through the home base station gateway, and the application scenario in which the security gateway and the access gateway are combined is taken as an example to describe the manner in which the home base station implements the emergency service.
  • Other implementation scenarios such as the scenario where the home base station does not access the access gateway through the home base station gateway, and the security gateway is separately set, or the home base station accesses the access gateway through the home base station gateway, the processes in FIG. 4, FIG. 5, and FIG. 6 above.
  • FIG. 7 is a structural block diagram of a home base station according to an embodiment of the present invention. As shown in FIG.
  • the home base station includes: an obtaining module 72, determining Module 74.
  • the obtaining module 72 is configured to obtain the indication information of the service initiated by the terminal, where the indication information is used to indicate that the service belongs to the emergency service;
  • the determining module 74 is connected to the obtaining module 72, and is configured to determine, according to the indication information acquired by the obtaining module 72, that the terminal is not performed. Access control.
  • FIG. 8 is a structural block diagram of a home base station according to a preferred embodiment of the present invention. As shown in FIG. 8, the acquiring module 72 includes: a first receiving submodule 81, a first determining submodule 82, and a first obtaining submodule 83. The structure will be specifically described below.
  • the first receiving sub-module 81 is configured to receive the pseudo network access identifier from the terminal.
  • the determining sub-module 82 is connected to the first receiving sub-module 81, and is configured to determine whether the pseudo-network access identifier received by the first receiving sub-module 81 is Carrying the indication information;
  • the obtaining sub-module 83 is connected to the judging sub-module 82, and is configured to obtain the indication information from the pseudo-network access identifier if the judgment result of the sub-module 82 is yes.
  • the obtaining module 72 includes: a second receiving sub-module 84, configured to receive an air interface message from the terminal; and a second determining sub-module 85, configured to determine whether the air interface message received by the second receiving sub-module 84 carries an indication
  • the second obtaining sub-module 86 is configured to obtain the indication information from the air interface message if the determination result of the second determining sub-module 85 is YES.
  • the obtaining module 72 further includes: a third receiving submodule 87, configured to receive the indication information from the authentication authorization charging server.
  • the access gateway Before the second receiving sub-module 87 receives the indication information from the authentication and authorization charging server, the access gateway receives the user access accepting message from the authentication and authorization charging server, where the user access accepting message carries the indication information. Then, the access gateway sends an extended authentication protocol forwarding message or a key change indication message to the home base station, and carries the indication information in the extended authentication protocol forwarding message or the key change indication message. The access gateway indicates that the service is an emergency service by causing the key change indication message or the extended authentication protocol forwarding message not to carry the real NAI.
  • the home base station can obtain emergency service information by parsing the pseudo NAI of the terminal, or obtain emergency information by using an indication of the emergency service by the AAA server.
  • the home base station can identify whether the user initiates. is the emergency service, and based on the knowledge of other 1 J, emergency service access control operation is not performed, thereby ensuring the system is at the home base station, the emergency service can be normally.
  • the above modules or steps of the present invention can be implemented by a general-purpose computing device, which can be concentrated on a single computing device or distributed over a network composed of multiple computing devices.
  • they may be implemented by program code executable by the computing device, such that they may be stored in the storage device by the computing device, or they may be separately fabricated into individual integrated circuit modules, or they may be Multiple modules or steps are made into a single integrated circuit module.

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Business, Economics & Management (AREA)
  • Health & Medical Sciences (AREA)
  • Emergency Management (AREA)
  • Environmental & Geological Engineering (AREA)
  • Public Health (AREA)
  • Mobile Radio Communication Systems (AREA)

Description

紧急业务的实现方法及家用基站 技术领域 本发明涉及通信领域， 具体而言， 涉及一种紧急业务的实现方法及家用 基站。 背景技术 家用基站是一种小型、低功率的基站，部署在家庭及办公室等室内场所， 主要作用是为了给用户提供更高的业务速率并降低使用高速率服务所需要的 费用， 同时弥补已有分布式蜂窝无线通信***覆盖的不足。 家用基站的优点 是实惠、 便捷、 低功率输出、 即插即用等。 家用基站***已经在第三代合作 伙伴计划 （ 3rd Generation Partnership Project, 简称为 3GPP ), 第三代合作伙 伴计划 2 ( 3rd Generation Partnership Project 2, 简称为 3GPP2 ) 和啟波接入 全球互通 ( Worldwide Interoperability for Microwave Access, 简称为 WiMAX ) 三大标准中进行研究， 各个标准组织中家用基站***釆用的网络架构都大体 相同， 下面以 WiMAX为例来说明家用基站的网络架构。 图 1是根据相关技术的家用基站网络连接示意图， 如图 1所示， 家用基 站***为保障家用基站和接入网关之间链路安全， 家用基站和接入网关之间 可以存在一个安全网关。 为了便于对家用基站进行管理， 引入家用基站网关， 家用基站网关主要功能为： 验证家用基站的安全性， 处理家用基站的注册， 对家用基站进行运行维护管理， 根据运营商要求配置和控制家用基站， 负责 交换核心网和家用基站的数据。 家用基站可以通过家用基站网关接入核心网 的接入网关， 此时， 安全网关和家用基站网关合设。 家用基站也可以不通过 家用基站网关而直接通过安全网关接入核心网的接入网关， 此时， 安全网关 可以和接入网关合设， 也可以分设， 具体情况取决于运营商的部署。 在 WiMAX***中， 接入网关为 Femto Gateway , 简称为 Fe-GW。 自组织网络服务器， 如图 1所示， 其作用是在无需人工千预的情况下， 发现和 /或提取家用基站的一系列运维参数，例如，家用基站所处的地理位置， 家用基站周边的无线环境等； 还为家用基站提供初始化参数配置， 支持家用 基站的自举初始化， 例如， 使用一定的频率规划算法给家用基站提供候选工 作频点， 为家用基站提供可接入的候选接入网关等。 此外， 自组织网络服务 器还可以用以支持家用基站的故障恢复等。 闭合用户组 ( Closed Subscriber Group , 简称为 CSG ) 是引入家用基站 后提出的新概念。 通常一个家庭或者一个企业内部的用户组成一个闭合用户 组， 用户通过与运营商签约可以接入到多个闭合用户组所对应的家用基站， 例如， 用户的办公场所、 家庭等。 家用基站的使用模式分为三种： 闭合模式、 混合模式和开放模式。 当家 用基站是闭合模式时，只有该家用基站所属的 CSG签约用户可以接入该基站 并享受基站提供的业务。 当家用基站是开放模式时， 任何运营商的签约用户 都可以接入该基站， 此时的家用基站等同于宏基站使用。 当家用基站是混合 模式时， 同样允许任何运营商的签约用户或者漫游用户接入使用， 但是要根 据用户是否签约 CSG的信息区分不同的级别， 即， 签约该 CSG的用户在使 用混合型家用基站的时候具有更高的业务优先级， 享受更好的服务质量和业 务类别。 家用基站可以通过网络侧的用户数据服务器（例如，家用基站管理***， Femto Management System )获得允许接入的闭合用户组列表， 也可以由家用 基站的管理者在家用基站上直接修改允许接入的闭合用户组列表。 用户接入 时， 闭合模式的家用基站会利用该列表对用户进行接入控制， 并拒绝未授权 接入该闭合模式家用基站的用户； 混合模式的家用基站根据该列表对用户类 另 ij (例如， CSG用户、 非 CSG用户） 进行区分， 以便于实施差异化计费、 服务质量授权等操作。下面将家用基站判断用户是否属于 CSG列表的操作统 称为接入控制。 各种通信网络都需要支持紧急业务， 家用基站***也不例外。 对于紧急 业务， 网络不能因为用户无法完成认证而拒绝紧急业务的接入， 网络也可以 不进行认证或接入控制直接接入用户的紧急业务。 目前 WiMAX***中用户 发起的业务是否是紧急业务， 以及该紧急业务的接入许可是在鉴权授权计费 ( Authentication、 Authorization and Accounting , 简称为 AAA ) 月艮务器冗成 的。 图 2是根据相关技术的紧急业务建立流程图， 如图 2所示， WiMAX现 有紧急业务流程具体步骤 201至步骤 204: 步骤 201 , 终端与基站之间完成空口参数同步及测距。 步 4聚 202, 终端请求协商认证能力， 如用户的认证策略等， 并与基站、 接入网关完成能力协商工作。 步骤 203 , 终端与鉴权授权计费服务器之间进行接入鉴权流程。 在该流 程中， 终端将伪（Pesudo ) 网络接入标识（Network Access Identifier, 简称为 NAI )进行修饰， 添加紧急业务修饰 (以下统一称为紧急业务 NAI ), 用来表 示终端此次发起的是紧急业务，并将紧急业务 NAI通过基站和接入网关携带 给鉴权授权计费服务器。鉴权授权计费服务器根据紧急业务 NAI对此次紧急 业务进行认证权， 并将为紧急业务预置的紧急业务服务质量签约数据授权给 用户。 当 AAA服务器对该用户接入失败时， 也返回认证成功 （因为携带紧 急业务 NAI ), 只是此时设定授权模式为受限只允许紧急业务。 步 4聚 204, 接入鉴权流程成功结束后， 继续正常的接入流程， 在接入流 程完成后， 终端就可以在此连接上进行紧急呼叫。 从上述流程可见， 在整个过程中， 由于基站并不解析 NAI, 授权模式也 不会通知的到基站， 因此， 基站并不知道此次业务是紧急业务。 在家用基站 ***中， 家用基站处于基站的位置， 除了执行基站的相关功能， 还需要执行 接入控制功能。 当某个用户通过未授权接入的家用基站接入（即， 非 CSG用 户接入闭合模式家用基站） 并发起紧急业务时， 由于家用基站对紧急业务的 不可识别， 该家用基站在做接入控制时， 因为该用户是非授权用户 （即， 非 CSG 用户）， 则闭合模式的家用基站会拒绝该紧急业务的接入， 从而导致用 户无法通过家用基站进行紧急业务。 针对相关技术中用户无法通过家用基站进行紧急业务的问题， 目前尚未 提出有效的解决方案。 发明内容 针对相关技术中用户无法通过家用基站进行紧急业务的问题而提出本 发明， 为此， 本发明的主要目的在于提供一种改进的家用基站实现紧急业务 的方案， 以解决上述问题。 为了实现上述目的， 根据本发明的一个方面， 提供了一种紧急业务的实 现方法。 根据本发明的紧急业务的实现方法包括： 家用基站获取业务的指示信 息， 其中， 指示信息用于指示业务属于紧急业务； 家用基站根据指示信息确 定不对终端进行接入控制。 进一步地， 家用基站获取指示信息包括： 家用基站接收来自终端的伪网 络接入标识； 家用基站判断伪网络接入标识中是否携带有上述指示信息， 如 果判断结果为是， 则从伪网络接入标识中获取指示信息。 进一步地， 家用基站获取指示信息包括： 家用基站接收来自终端的空口 消息； 家用基站判断空口消息中是否携带有上述指示信息， 如果判断结果为 是， 则从空口消息中获取指示信息。 进一步地， 家用基站获取指示信息包括： 家用基站接收来自鉴权授权计 费服务器的指示信息。 进一步地， 在家用基站接收来自鉴权授权计费服务器的指示信息之前， 上述方法还包括： 接入网关接收来自鉴权授权计费服务器的用户接入接受消 息， 其中， 用户接入接受消息中携带有指示信息； 接入网关向家用基站发送 扩展认证协议转发消息， 并在其中携带指示信息。 进一步地， 在家用基站接收来自鉴权授权计费服务器的指示信息之前， 上述方法还包括： 接入网关接收来自鉴权授权计费服务器的用户接入接受消 息， 其中， 用户接入接受消息中携带有指示信息； 接入网关向家用基站发送 密钥改变指示消息， 并在其中携带指示信息。 进一步地， 接入网关通过使扩展认证协议转发消息不携带真实的 NAI 来指示业务为紧急业务。 进一步地， 接入网关通过使密钥改变指示消息不携带真实的 NAI来指 示业务为紧急业务。 进一步地， 家用基站的接入模式包括至少以下之一： 闭合接入模式、 混 合接入模式。 为了实现上述目的， 根据本发明的另一方面， 提供了一种家用基站。 根据本发明的家用基站包括： 获取模块， 用于获取终端发起的业务的指 示信息， 其中， 指示信息用于指示业务属于紧急业务； 确定模块， 用于根据 获取模块获取的指示信息确定不对终端进行接入控制。 进一步地， 上述获取模块包括： 第一接收子模块， 用于接收来自终端的 伪网络接入标识； 第一判断子模块， 用于判断第一接收子模块接收的伪网络 接入标识中是否携带有上述指示信息； 第一获取子模块， 用于在第一判断子 模块的判断结果为是的情况下， 从伪网络接入标识中获取指示信息。 进一步地， 上述获取模块包括： 第二接收子模块， 用于接收来自终端的 空口消息； 第二判断子模块， 用于判断第二接收子模块接收的空口消息中是 否携带有指示信息； 第二获取子模块， 用于在第二判断子模块的判断结果为 是的情况下， 从空口消息中获取指示信息。 进一步地， 上述获取模块包括： 第三接收子模块， 用于接收来自鉴权授 权计费服务器的指示信息。 通过本发明， 釆用家用基站获取终端发起的业务的指示信息， 并才艮据该 指示信息确定不对终端进行接入控制， 解决了相关技术中用户无法通过家用 基站进行紧急业务的问题， 进而达到了使得家用基站可以识别紧急业务， 不 对紧急业务进行接入控制，允许紧急业务直接通过家用基站接入网络的效果。 附图说明 此处所说明的附图用来提供对本发明的进一步理解，构成本申请的一部 分， 本发明的示意性实施例及其说明用于解释本发明， 并不构成对本发明的 不当限定。 在附图中： 图 1是根据相关技术的家用基站网络连接示意图； 图 2是根据相关技术的紧急业务建立流程图； 图 3是 居本发明实施例的紧急业务的实现方法的流程图； 图 4是 居本发明实施例一的家用基站实现紧急业务的流程图； 图 5是根据本发明实施例二的家用基站实现紧急业务的流程图； 图 6是 居本发明实施例三的家用基站实现紧急业务的流程图； 图 7是 居本发明实施例的家用基站的结构框图； 图 8是根据本发明优选实施例的家用基站的结构框图。 具体实施方式 考虑到相关技术中用户无法通过家用基站进行紧急业务的问题，本发明 实施例提供了一种紧急业务的实现方案， 应用于终端发起业务的过程中， 家 用基站获取该业务的指示信息， 其中，指示信息用于指示业务属于紧急业务， 然后， 家用基站根据指示信息确定不对终端进行接入控制。 需要说明的是， 在不冲突的情况下， 本申请中的实施例及实施例中的特 征可以相互组合。 下面将参考附图并结合实施例来详细说明本发明。 方法实施例 需要说明的是，在附图的流程图示出的步骤可以在诸如一组计算机可执 行指令的计算机***中执行， 并且， 虽然在流程图中示出了逻辑顺序， 但是 在某些情况下， 可以以不同于此处的顺序执行所示出或描述的步骤。 根据本发明的实施例， 提供了一种紧急业务的实现方法， 应用于终端发 起业务的过程中，图 3是 居本发明实施例的紧急业务的实现方法的流程图， 如图 3所示， 该流程包括如下的步骤 S302至步骤 S304: 步骤 S302, 家用基站获取该业务的指示信息， 其中， 指示信息用于指 示业务属于紧急业务； 步骤 S304 , 家用基站 居上述指示信息确定不对终端进行接入控制。 家用基站获取指示信息的方式有两种， 下面对这两种方式进行具体描 述。 方式一 家用基站接收来自终端的消息，该消息中携带伪网络接入标识或直接指 示信息（即， 在空口消息中携带紧急业务指示信息）； 家用基站判断伪网络接 入标识或空口消息中是否携带有指示信息， 如果判断结果为是， 则从伪网络 接入标识或空口消息中获取指示信息。 即， 家用基站获取并解析用户携带给 网络的伪 NAI, 判断该伪 NAI是否具有紧急业务修饰； 或者， 家用基站判断 直接指示信息 （即， 空口消息） 中是否携带有紧急业务指示； 如果是紧急业 务， 则家用基站不对该用户 （终端）做接入控制。 方式二 家用基站接收来自鉴权授权计费服务器的指示信息。 在家用基站接收来自鉴权授权计费服务器的指示信息之前，接入网关接 收来自鉴权授权计费服务器的用户接入接受消息， 其中， 用户接入接受消息 中携带有指示信息； 然后， 接入网关向家用基站发送扩展认证协议转发消息 或密钥改变指示消息， 并在扩展认证协议转发消息或密钥改变指示消息中携 带指示信息。 接入网关也可以通过使密钥改变指示消息或扩展认证协议转发 消息不携带真实的 NAI来指示业务为紧急业务。 即， 鉴权授权计费服务器对 紧急业务认证后， 携带该业务是紧急业务的指示， 并通知到家用基站。 家用 基站根据该指示， 不对该用户 （终端）做接入控制。 其中， 不对该用户 （终 端） 进行接入控制具体指： 家用基站将会无条件接受用户 （终端）发起的紧 急业务， 并允许用户 （终端）接入到网络， 即， 不因为该用户 （终端） 不是 其 CSG成员而拒绝该用户 （终端） 的接入。 需要说明的是， 上述的家用基站的接入模式包括： 闭合接入模式、 混合 接入模式。 即， 闭合接入模式的家用基站必须执行上述操作， 开放接入模式 的家用基站可以不执行上述操作， 混合接入模式的家用基站可以执行上述操 作。 下面将结合实例对本发明实施例的实现过程进行详细描述。 实施例一 本实施例是在图 1家用基站***的基础上实现紧急业务的处理。 其中， 家用基站获取并解析用户携带给网络的伪 NAI,并判断该 NAI是否具有紧急 业务修饰， 如果是紧急业务 NAI则家用基站不对该用户做接入控制。 图 4是根据本发明实施例一的家用基站实现紧急业务的流程图， 如图 4 所示， 该流程包括如下的步骤 401至步骤 409： 步 4聚 401 , 终端与家用基站之间完成空口参数同步及测 3巨。 步骤 402, 终端请求协商认证能力， 如用户的认证策略等， 并与家用基 站、 接入网关完成能力协商工作。 步骤 403 , 接入网关向家用基站发送用户标识请求， 家用基站将该请求 转发给终端。 步骤 404, 终端接收到家用基站发送的用户标识请求消息后， 检测到此 次进行的是紧急业务， 则终端将伪用户标识 NAI进行修饰， 添加紧急业务修 饰， 用来表示终端此次发起的是紧急业务， 然后， 向家用基站回复响应消息， 并携带经过 4爹饰的伪 N AI。 步骤 405 , 闭合接入模式的家用基站接收到消息后， 获取消息中的伪 NAI, 并解析， 检查终端发送的伪 NAI是否携带有紧急业务的修饰， 如果携 带有紧急业务修饰， 则将该用户设置为紧急业务用户， 然后， 执行步骤 406。 如果伪 NAI没有进行紧急业务^ ί'爹饰，则认为是普通用户，按照普通用户处理， 执行正常的接入控制 （检查用户是否是 CSG用户， 用户如果是 CSG用户则 允许接入， 如果是非 CSG用户则将拒绝用户接入；)， 不执行步骤 406。 混合接入模式的家用基站， 收到消息后，根据策略可以获取消息中的伪 ΝΑΙ, 并解析， 检查终端发送的伪 ΝΑΙ是否带有紧急业务的修饰， 如果携带 有紧急业务修饰， 则将该用户设置为紧急业务用户， 然后， 执行步骤 406。 如果不执行此步骤， 或者， 检查伪 ΝΑΙ的结果为没有进行紧急业务修饰， 则 认为是普通用户， 按照普通用户处理， 执行正常的接入控制 （检查用户是否 是 CSG用户， 如果是 CSG用户则允许接入， 且指示是 CSG用户； 如果是非 CSG用户， 则允许接入， 且指示是非 CSG用户）， 不执行步骤 406。 开放接入模式的家用基站，收到消息后，可以不执行此步骤和步骤 406。 步骤 406, 闭合接入模式的家用基站， 对于紧急业务用户， 不再进行任 何接入控制， 即不判断用户是否是本家用基站所授权接入的 CSG用户， 直接 许可该用户使用本家用基站， 继续后续流程。 混合模式的家用基站， 对于紧急业务用户， 不再进行任何接入控制， 即 不区分用户是否是以本家用基站所授权接入的 CSG用户接入的，直接许可该 用户使用本家用基站， 继续后续流程。 步骤 407 , 家用基站将终端发送的用户标识转发给接入网关。 步骤 408 , 终端与鉴权授权计费服务器之间继续进行接入鉴权流程。 在 该流程中， 紧急业务 ΝΑΙ被传递给鉴权授权计费服务器。 鉴权授权计费服务 器根据紧急业务 ΝΑΙ对此次紧急业务进行认证权，并将为紧急业务预置的紧 急业务服务质量签约数据授权给用户。 当 AAA服务器对该紧急业务认证失 败时， 也返回认证成功， 只是此时设定授权模式为受限只允许紧急业务。 步骤 409 , 继续执行用户接入相关的其他流程。 在接入流程完成后， 终端就可以在此连接上进行紧急呼叫。 可见， 本实施例是终端向家用基站发送携带有紧急业务修饰的伪标识， 并由家用基站解析其中携带的紧急业务修饰来获知终端当前执行的业务是紧 急业务的方法。 进一步地， 作为上述方法的一种变形， 终端 （特别是经过软 件升级后的） 也可以向家用基站发送直接指示， 以通知家用基站当前终端正 在进行的业务的类型。 在具体实施过程中， 终端可以使用空口消息将上述业 务类型发送到家用基站 （由于终端和基站都是通过空中接口进行通信的， 所 以， 这里的空口消息是指终端与基站的空中接口消息， 也就是说， 终端在发 送的空口消息中直接指示该消息是紧急业务， 无需家用基站解析伪网络接入 标识的相关协议支持， 即可得到紧急业务指示信息， 即， 无需解析协议消息 中很多的封装数据包就可直接得到紧急业务指示信息），然后家用基站解析该 业务的类型， 当判断业务类型是紧急业务时， 同上述方法， 后续不进行接入 控制。 如图 4所示， 优选地， 在步骤 401中， 终端可使用测距消息 （即， 一种 空口消息），将上述业务类型发送到家用基站， 然后家用基站判断该业务的业 务类型是否是紧急业务，如果判断为是， 则执行上述步骤 406中描述的方法； 接着再去顺序执行步骤 402-404, 以及步 4聚 407-409。 例如， 在该变形实施例 的步骤 401 中， 一种典型的做法是在空口消息中使用紧急业务标识位 (Emergency Service indication, 简称为 ES), 将其置值 1或置值 0来表示当前 的业务是不是紧急业务。 实施例二 本实施例是在图 1家用基站***的基础上实现紧急业务的处理。 其中， 鉴权授权计费服务器对紧急业务认证后， 携带该业务是紧急业务的指示， 并 通知到家用基站。 家用基站 居该指示， 不对该用户故接入控制。 图 5是根据本发明实施例二的家用基站实现紧急业务的流程图， 如图 5 所示， 该流程包括如下的步骤 501至步骤 509： 步骤 501 , 终端与家用基站之间完成空口参数同步及测距。 步骤 502, 终端请求协商认证能力， 如用户的认证策略等， 并与家用基 站、 接入网关完成能力协商工作。 步骤 503 , 终端与鉴权授权计费服务器之间进行接入鉴权流程。 在该流 程中， 如果终端检测到此次进行的是紧急业务， 则终端将伪用户标识 NAI进 行修饰， 添加紧急业务修饰， 用来表示终端此次发起的是紧急业务， 并将紧 急业务 NAI通过家用基站和接入网关携带给鉴权授权计费服务器。鉴权授权 计费服务器根据紧急业务 NAI对此次紧急业务进行认证权，并将为紧急业务 预置的紧急业务服务质量签约数据授权给用户。 当 AAA服务器对该紧急业 务认证失败时， 也返回认证成功， 只是此时设定授权模式为受限只允许紧急 业务。 步骤 504 , 鉴权授权计费服务器完成用户认证后， 给接入网关发送用户 接入接受消息。 如果 AAA服务器判定此次是紧急业务， 则在该消息中携带 紧急业务指示。 其中，消息中的紧急业务指示可以用新增的一个指示参数来明确表明是 紧急业务， 也可以通过不携带真实 NAI来表明是紧急业务。 步骤 505 , 接入网关通过扩展认证十办议 ( Extensible Authentication Protocol, 简称为 EAP ) 转发消息将鉴权成功消息转发给家用基站， 同时携 带有来自 AAA服务器的紧急业务指示。 其中，消息中的紧急业务指示可以用新增的一个指示参数来明确表明是 紧急业务， 也可以通过不携带真实 NAI来表明是紧急业务。 步骤 506, 闭合接入模式的家用基站， 收到消息后， 解析该消息， 检查 消息中是否携带紧急业务指示， 如果带有紧急业务指示， 则将该用户标识为 紧急业务用户， 执行步骤 507。 如果没有携带紧急业务指示， 则认为是普通 用户，按照普通用户处理，执行正常的接入控制（检查用户是否是 CSG用户， 用户如果是 CSG用户则允许接入， 如果是非 CSG用户则将拒绝用户接入；)， 不执行步 4聚 507。 混合接入模式的家用基站， 收到消息后， 根据策略可以解析该消息， 检 查消息中是否携带紧急业务指示， 如果带有紧急业务指示， 则将该用户标识 为紧急业务用户， 执行步骤 507。 如果没有携带紧急业务指示， 则认为是普 通用户， 按照普通用户处理， 执行正常的接入控制（检查用户是否是 CSG用 户，如果是 CSG用户则允许接入，且指示是 CSG用户；如果是非 CSG用户， 则允许接入， 且指示是非 CSG用户）， 不执行步骤 507。 开放接入模式的家用基站， 接收到消息后， 可以不执行此步骤和步骤
507。 步骤 507, 闭合接入模式的家用基站， 对于紧急业务用户， 不再进行任 何接入控制， 即， 不判断用户是否是本家用基站所授权接入的 CSG用户， 直 接许可该用户使用本家用基站， 继续后续流程。 混合模式的家用基站， 对于紧急业务用户， 不再进行任何接入控制， 即 不区分用户是否是以本家用基站所授权接入的 CSG用户接入的，直接许可该 用户使用本家用基站， 继续后续流程。 步骤 508, 家用基站通过 EAP转发消息将鉴权成功消息转发给终端。 步骤 509 , 继续执行用户接入相关的其他流程。 在接入流程完成后， 终端就可以在此连接上进行紧急呼叫。 实施例三 本实施例是在图 1家用基站***的基础上实现紧急业务的处理。 其中， 鉴权授权计费服务器对紧急业务认证后， 携带该业务是紧急业务的指示， 通 知到接入网关， 接入网关在随后的密钥改变指示消息中通知家用基站。 家用 基站根据该指示， 不对该用户做接入控制。 图 6是根据本发明实施例三的家用基站实现紧急业务的流程图， 如图 6 所示， 该流程包括如下的步骤 601至步骤 609： 步骤 601 , 终端与家用基站之间完成空口参数同步及测距。 步骤 602, 终端请求协商认证能力， 如用户的认证策略等， 并与基站、 接入网关完成能力协商工作。 步骤 603 , 终端与鉴权授权计费服务器之间进行接入鉴权流程。 在该流 程中， 如果终端检测到此次进行的是紧急业务， 则终端将伪用户标识 NAI进 行修饰， 添加紧急业务修饰， 用来表示终端此次发起的是紧急业务， 并将紧 急业务 NAI通过家用基站和接入网关携带给鉴权授权计费服务器。鉴权授权 计费服务器根据紧急业务 NAI对此次紧急业务进行认证权，并将为紧急业务 预置的紧急业务服务质量签约数据授权给用户。 当 AAA服务器对该紧急业 务认证失败时， 也返回认证成功， 只是此时设定授权模式为受限只允许紧急 业务。 步骤 604 , 鉴权授权计费服务器完成用户认证后， 给接入网关发送用户 接入接受消息。 如果 AAA服务器判定此次是紧急业务， 则在该消息中携带 紧急业务指示。 接入网关保存该指示并标识该用户为紧急业务用户。 其中，消息中的紧急业务指示可以用新增的一个指示参数来明确表明是 紧急业务， 也可以通过不携带真实 NAI来表明是紧急业务。 步骤 605 , 接入网关通过 EAP转发消息将鉴权成功消息转发给家用基 站， 再由家用基站转发给终端。 由于目前家用基站不解析 EAP转发消息， 所 以本实施例中在该消息中在不携带来自 AAA服务器的紧急业务指示。 步骤 606, 接入网关给家用基站发送密钥改变指示消息， 通知家用基站 认证成功。 根据步骤 604, 若此用户是紧急业务用户， 则在此消息中携带紧 急业务指示。 其中，消息中的紧急业务指示可以用新增的一个指示参数来明确表明是 紧急业务， 也可以通过不携带真实 NAI来表明是紧急业务。 步骤 607, 闭合接入模式的家用基站， 收到消息后， 解析该消息， 检查 消息中是否携带紧急业务指示， 如果带有紧急业务指示， 则将该用户标识为 紧急业务用户， 执行步骤 608。 如果没有携带紧急业务指示， 则认为是普通 用户，按照普通用户处理，执行正常的接入控制（检查用户是否是 CSG用户， 用户如果是 CSG用户则允许接入， 如果是非 CSG用户则将拒绝用户接入；)， 不执行步 4聚 608。 混合接入模式的家用基站， 收到消息后， 根据策略可以解析该消息， 检 查消息中是否携带紧急业务指示， 如果带有紧急业务指示， 则将该用户标识 为紧急业务用户， 执行步骤 608。 如果没有携带紧急业务指示， 则认为是普 通用户， 按照普通用户处理， 执行正常的接入控制（检查用户是否是 CSG用 户，如果是 CSG用户则允许接入，且指示是 CSG用户；如果是非 CSG用户， 则允许接入， 且指示是非 CSG用户）， 不执行步骤 608。 开放接入模式的家用基站，收到消息后，可以不执行此步骤和步骤 608。 步骤 608, 闭合接入模式的家用基站， 对于紧急业务用户， 不再进行任 何接入控制， 即不判断用户是否是本家用基站所授权接入的 CSG用户， 直接 许可该用户使用本家用基站， 继续后续流程。 混合模式的家用基站， 对于紧急业务用户， 不再进行任何接入控制， 即 不区分用户是否是以本家用基站所授权接入的 CSG用户接入的，直接许可该 用户使用本家用基站， 继续后续流程。 步骤 609 , 继续执行用户接入相关的其他流程。 在接入流程完成后， 终端就可以在此连接上进行紧急呼叫。 实施例四 当为用户服务的家用基站因为资源短缺，需要释放或切换某些优先级低 的用户时， 对于标识为紧急业务的用户， 认为具备高优先级， 不会释放或切 换紧急业务的用户。 为了简化描述，上述实施例以家用基站不通过家用基站网关直接接入接 入网关， 且以安全网关与接入网关合设的应用场景为例来说明家用基站实现 紧急业务的方式。 其他实现场景， 如家用基站不通过家用基站网关接入接入 网关， 且安全网关单独设置， 或家用基站通过家用基站网关接入接入网关的 场景， 上述图 4、 图 5、 图 6的流程同样适用， 只是， 在家用基站和接入网 关之间的消息需要通过中间存在的网元 （安全网关、 家用基站网关） 进行转 发， 不会对阐述本发明造成影响， 故在此不再重复描述。 通过上述实施例， 当用户设备接入家用基站***进行紧急业务时， 家用 基站可以识别紧急业务， 从而不对紧急业务进行接入控制， 允许紧急业务直 接通过家用基站接入网络。 装置实施例 根据本发明的实施例， 提供了一种家用基站， 图 7是根据本发明实施例 的家用基站的结构框图， 如图 1所示， 该家用基站包括： 获取模块 72、 确定 模块 74。 下面对该结构进行具体描述。 获取模块 72 , 用于获取终端发起的业务的指示信息， 其中， 指示信息 用于指示业务属于紧急业务； 确定模块 74连接至获取模块 72 , 用于根据获 取模块 72获取的指示信息确定不对终端进行接入控制。 图 8是根据本发明优选实施例的家用基站的结构框图， 如图 8所示， 上 述获取模块 72包括： 第一接收子模块 81、 第一判断子模块 82、 第一获取子 模块 83。 下面对该结构进行具体描述。 第一接收子模块 81 , 用于接收来自终端的伪网络接入标识； 判断子模 块 82连接至第一接收子模块 81 ,用于判断第一接收子模块 81接收的伪网络 接入标识中是否携带有指示信息； 获取子模块 83连接至判断子模块 82 , 用 于在判断子模块 82 的判断结果为是的情况下， 从伪网络接入标识中获取指 示信息。 优选地， 上述获取模块 72包括： 第二接收子模块 84 , 用于接收来自终 端的空口消息； 第二判断子模块 85 , 用于判断第二接收子模块接收 84的空 口消息中是否携带有指示信息； 第二获取子模块 86 , 用于在第二判断子模块 85的判断结果为是的情况下， 从空口消息中获取指示信息。 上述获取模块 72还包括： 第三接收子模块 87, 用于接收来自鉴权授权 计费服务器的指示信息。 在第二接收子模块 87接收来自鉴权授权计费服务器的指示信息之前， 接入网关接收来自鉴权授权计费服务器的用户接入接受消息， 其中， 用户接 入接受消息中携带有指示信息； 然后， 接入网关向家用基站发送扩展认证协 议转发消息或密钥改变指示消息， 并在扩展认证协议转发消息或密钥改变指 示消息中携带指示信息。 其中， 接入网关通过使密钥改变指示消息或扩展认 证协议转发消息不携带真实的 NAI来指示业务为紧急业务。 综上所述， 通过上述实施例， 家用基站可以通过解析终端的伪 NAI获 取紧急业务信息， 或者通过 AAA服务器对紧急业务的指示获取紧急信息， 根据该信息， 家用基站可以识别出用户是否发起的是紧急业务， 并根据该识 另1 J , 对紧急业务不进行接入控制操作， 从而保证了在家用基站***下， 紧急 业务可以正常进行。 显然， 本领域的技术人员应该明白， 上述的本发明的各模块或各步骤可 以用通用的计算装置来实现， 它们可以集中在单个的计算装置上， 或者分布 在多个计算装置所组成的网络上， 可选地， 它们可以用计算装置可执行的程 序代码来实现， 从而， 可以将它们存储在存储装置中由计算装置来执行， 或 者将它们分别制作成各个集成电路模块， 或者将它们中的多个模块或步骤制 作成单个集成电路模块来实现。 这样， 本发明不限制于任何特定的硬件和软 件结合。 以上所述仅为本发明的优选实施例而已， 并不用于限制本发明， 对于本 领域的技术人员来说， 本发明可以有各种更改和变化。 凡在本发明的 ^"神和 原则之内， 所作的任何修改、 等同替换、 改进等， 均应包含在本发明的保护 范围之内。

Claims

权 利 要 求 书
1. 一种紧急业务的实现方法， 应用于终端发起业务的过程中， 其特征在于， 所述方法包括：
家用基站获取所述业务的指示信息， 其中， 所述指示信息用于指示 所述业务属于紧急业务； 所述家用基站 居所述指示信息确定不对所述终端进行接入控制。
2. 根据权利要求 1所述的方法， 其特征在于， 所述家用基站获取所述指示 信息包括：
所述家用基站接收来自所述终端的伪网络接入标识；
所述家用基站判断所述伪网络接入标识中是否携带有所述指示信 息， 如果判断结果为是， 则从所述伪网络接入标识中获取所述指示信息。
3. 根据权利要求 1所述的方法， 其特征在于， 所述家用基站获取所述指示 信息包括：
所述家用基站接收来自所述终端的空口消息；
所述家用基站判断所述空口消息中是否携带有所述指示信息，如果 判断结果为是， 则从所述空口消息中获取所述指示信息。
4. 根据权利要求 1所述的方法， 其特征在于， 所述家用基站获取所述指示 信息包括：
所述家用基站接收来自鉴权授权计费服务器的所述指示信息。
5. 根据权利要求 4所述的方法， 其特征在于， 在所述家用基站接收来自所 述鉴权授权计费服务器的所述指示信息之前， 所述方法还包括：
接入网关接收来自所述鉴权授权计费服务器的用户接入接受消息， 其中， 所述用户接入接受消息中携带有所述指示信息；
所述接入网关向所述家用基站发送扩展认证协议转发消息，并在其 中携带所述指示信息。
6. 根据权利要求 4所述的方法， 其特征在于， 在所述家用基站接收来自所 述鉴权授权计费服务器的所述指示信息之前， 所述方法还包括： 接入网关接收来自所述鉴权授权计费服务器的用户接入接受消息， 其中， 所述用户接入接受消息中携带有所述指示信息；
所述接入网关向所述家用基站发送密钥改变指示消息，并在其中携 带所述指示信息。
7. 居权利要求 5所述的方法， 其特征在于， 接入网关通过使所述扩展认 证协议转发消息不携带真实的 NAI来指示所述业务为紧急业务。
8. 根据权利要求 6所述的方法， 其特征在于， 接入网关通过使所述密钥改 变指示消息不携带真实的 NAI来指示所述业务为紧急业务。
9. 根据权利要求 1至 8中任一项所述的方法， 其特征在于， 所述家用基站 的接入模式包括以下至少之一：
闭合接入模式、 混合接入模式。
10. —种家用基站， 其特征在于， 包括：
获取模块， 用于获取终端发起的业务的指示信息， 其中， 所述指示 信息用于指示所述业务属于紧急业务；
确定模块，用于根据所述获取模块获取的所述指示信息确定不对所 述终端进行接入控制。
11. 根据权利要求 10所述的家用基站， 其特征在于， 所述获取模块包括： 第一接收子模块， 用于接收来自所述终端的伪网络接入标识； 第一判断子模块，用于判断所述第一接收子模块接收的所述伪网络 接入标识中是否携带有所述指示信息；
第一获取子模块，用于在所述第一判断子模块的判断结果为是的情 况下， 从所述伪网络接入标识中获取所述指示信息。
12. 根据权利要求 10所述的家用基站， 其特征在于， 所述获取模块包括： 第二接收子模块， 用于接收来自所述终端的空口消息； 第二判断子模块，用于判断所述第二接收子模块接收的所述空口消 息中是否携带有所述指示信息；
第二获取子模块，用于在所述第二判断子模块的判断结果为是的情 况下， 从所述空口消息中获取所述指示信息。 根据权利要求 10所述的家用基站， 其特征在于， 所述获取模块包括： 第三接收子模块，用于接收来自鉴权授权计费服务器的所述指示信 息。
PCT/CN2010/072201 2009-04-29 2010-04-26 紧急业务的实现方法及家用基站 WO2010124608A1 (zh)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN200910137267A CN101730038A (zh) 2009-04-29 2009-04-29 紧急业务的实现方法及家用基站
CN200910137267.4 2009-04-29

Publications (1)

Publication Number Publication Date
WO2010124608A1 true WO2010124608A1 (zh) 2010-11-04

Family

ID=42450072

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2010/072201 WO2010124608A1 (zh) 2009-04-29 2010-04-26 紧急业务的实现方法及家用基站

Country Status (2)

Country Link
CN (1) CN101730038A (zh)
WO (1) WO2010124608A1 (zh)

Families Citing this family (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101902716B (zh) * 2010-08-16 2015-12-16 中兴通讯股份有限公司 一种紧急业务的处理方法和***
CN106507325B (zh) * 2016-10-31 2019-08-30 中国联合网络通信集团有限公司 一种随身数据上传方法、Lora网关和随身终端

Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1909576A (zh) * 2005-08-04 2007-02-07 华为技术有限公司 一种实现紧急业务检测的方法及接入控制功能实体
CN1933656A (zh) * 2005-09-16 2007-03-21 中兴通讯股份有限公司 宽带码分多址***中的紧急呼叫处理方法
US20080016556A1 (en) * 2006-04-29 2008-01-17 Alcatel Lucent Method of providing a guest terminal with emergency access to a wlan

Patent Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1909576A (zh) * 2005-08-04 2007-02-07 华为技术有限公司 一种实现紧急业务检测的方法及接入控制功能实体
CN1933656A (zh) * 2005-09-16 2007-03-21 中兴通讯股份有限公司 宽带码分多址***中的紧急呼叫处理方法
US20080016556A1 (en) * 2006-04-29 2008-01-17 Alcatel Lucent Method of providing a guest terminal with emergency access to a wlan

Also Published As

Publication number Publication date
CN101730038A (zh) 2010-06-09

Similar Documents

Publication Publication Date Title
CN110999356B (zh) 网络安全管理的方法及装置
WO2018145654A1 (zh) 实现多接入管理的方法、装置及计算机存储介质
US8549293B2 (en) Method of establishing fast security association for handover between heterogeneous radio access networks
US7519036B2 (en) Method of user access authorization in wireless local area network
CN106576242B (zh) 对于异构网络有效的用户设备标识
JP4687788B2 (ja) 無線アクセスシステムおよび無線アクセス方法
WO2009000206A1 (fr) Procédé et système de commande d'accès de nœud initial b
EP3833150A1 (en) User plane security policy implementation method, apparatus, and system
EP2234438B1 (en) Wireless personal area network accessing method
US20160065575A1 (en) Communication Managing Method and Communication System
KR20080086127A (ko) 이동통신 네트워크 및 상기 이동통신 네트워크에서 이동 노드의 인증을 수행하는 방법 및 장치
WO2021218878A1 (zh) 切片认证方法及装置
WO2010130118A1 (zh) 一种对家用基站用户实施鉴权的***及方法
WO2010069202A1 (zh) 认证协商方法及***、安全网关、家庭无线接入点
US8532618B2 (en) System and method for communications device and network component operation
WO2018058365A1 (zh) 一种网络接入授权方法、相关设备及***
CN103384365A (zh) 一种网络接入方法、业务处理方法、***及设备
CN101990207B (zh) 接入控制方法、家用基站及家用基站授权服务器
WO2010124569A1 (zh) 用户接入控制方法和***
WO2011015091A1 (zh) 用于家用基站的接入方法、装置、***及aaa服务器
US8559337B2 (en) System and apparatus for converging WiMAX and WiFi networks
WO2010124608A1 (zh) 紧急业务的实现方法及家用基站
JP5423320B2 (ja) 無線通信システム及び方法
WO2013166909A1 (zh) Eap认证触发方法及***、接入网设备、终端设备
WO2012174884A1 (zh) 接入控制方法、装置、接口及安全网关

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 10769297

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE

122 Ep: pct application non-entry in european phase

Ref document number: 10769297

Country of ref document: EP

Kind code of ref document: A1