ACCESS CONTROL METHOD AND DEVICE

• US 20180234909A1
• Filed: 06/12/2016
• Published: 08/16/2018
• Est. Priority Date: 08/13/2015
• Status: Active Grant

• Current Assignee: China Mobile Communications Group Co., Ltd.
• Original Assignee: China Mobile Communications Group Co., Ltd.
• Inventors: Chen, Ningyu, Hu, Nan, Chen, Zhuo
• Granted Patent: US 10,645,633 B2
• Time in Patent Office: Days
• CPC Class Codes: H04W 28/02 Traffic management, e.g. flow control or congestion control
• CPC Class Codes: H04W 48/06 based on traffic conditions
• CPC Class Codes: H04W 48/08 Access restriction or access information delivery, e.g. discovery data delivery signalling during connection H04W76/00
• CPC Class Codes: H04W 76/10 Connection setup

Abstract

Provided are an access control method and device. The access control method includes: after a first connection of a first application has been established between a terminal and a network, obtaining identification information of a second application before performing ACDC determination for the second application; according to the identification information, obtaining a blocking parameter of the second application; according to the blocking parameter, performing ACDC determination for the second application, and obtaining a determination result for whether the second application is allowed to perform network communication or not; when the determination result indicates that the second application is allowed to perform network communication, establishing a second connection between the terminal and the network for the second application, or allowing the second application to transmit information on the first connection.

Claims

1. An access control method of Application specific Congestion control for Data Communication (ACDC), the method comprising:

after a first connection of a first application is established between a terminal and a network and before an ACDC judgment is made for a second application, acquiring identification information of the second application;

acquiring a blocking parameter of the second application according to the identification information;

making the ACDC judgment for the second application according to the blocking parameter, to obtain a judgment result indicating whether the second application is allowed to perform network communication; and

when the judgment result indicates that the second application is allowed to perform network communication, establishing a second connection between the terminal and the network for the second application or allowing the second application to deliver information on the first connection.

2. The access control method according to claim 1, wherein the first application and the second application are classified according to application software categories, or are classified according to service types.

3. The access control method according to claim 1, wherein the action of acquiring the blocking parameter of the second application according to the identification information comprises:

acquiring an ACDC category of the second application according to the identification information; and

acquiring the blocking parameter of the second application according to the ACDC category,

wherein, the blocking parameter comprises at least one of a blocking time or a blocking probability.

4. The access control method according to claim 3, further comprising:

when the judgment result indicates that the second application is not allowed to perform network communication, establishing a blocking timer; and

blocking all network communication of the second application within a timing period of the blocking timer.

5. The access control method according to claim 4, wherein before the action of making the ACDC judgment for the second application according to the blocking parameter to obtain the judgment result indicating whether the second application is allowed to perform network communication, the method further comprises:

acquiring an ACDC category of the first application;

comparing a priority of the ACDC category of the second application with a priority of the ACDC category of the first application;

when the priority of the ACDC category of the second application is lower than the priority of the ACDC category of the first application, performing the action of making the ACDC judgment for the second application according to the blocking parameter, to obtain the judgment result indicating whether the second application is allowed to perform network communication; and

when the priority of the ACDC category of the second application is higher than or equal to the priority of the ACDC category of the first application, performing the action of establishing the second connection between the terminal and the network for the second application or allowing the second application to deliver the information on the first connection.

6. The access control method according to claim 4, wherein before the action of making the ACDC judgment for the second application according to the blocking parameter to obtain the judgment result indicating whether the second application is allowed to perform network communication, the method further comprises:

comparing a priority of the ACDC category of the second application with a priority of a preset ACDC category;

when the priority of the ACDC category of the second application is lower than the priority of the preset ACDC category, performing the action of making the ACDC judgment for the second application according to the blocking parameter, to obtain the judgment result indicating whether the second application is allowed to perform network communication; and

when the priority of the ACDC category of the second application is higher than or equal to the priority of the preset ACDC category, performing the action of establishing the second connection between the terminal and the network for the second application or allowing the second application to deliver the information on the first connection.

7. The access control method according to claim 4, wherein, when the access control method is applied to the terminal, the action of acquiring the identification information of the second application after the first connection of the first application is established between the terminal and the network and before the ACDC judgment is made for the second application, comprises:

when a network access request of the second application is acquired, acquiring the identification information of the second application.

8. The access control method according to claim 7, wherein the action of acquiring the ACDC category of the second application according to the identification information, comprises:

acquiring an application and ACDC category corresponding table configured by a local network, wherein the application and ACDC category corresponding table comprises identification information of all applications configured by the local network and an ACDC category corresponding to identification information of each of the applications; and

searching, according to the identification information of the second application, the application and ACDC category corresponding table for the ACDC category of the second application corresponding to the identification information.

9. The access control method according to claim 8, wherein before the action of acquiring the blocking parameter of the second application according to the ACDC category, the method further comprises:

acquiring an correspondence table of ACDC categories and blocking parameters, transmitted by a Radio Resource Control (RRC) layer and acquired from a broadcast of a service network, wherein the correspondence table of ACDC categories and blocking parameters comprises ACDC categories and blocking parameter information corresponding to each of the ACDC categories,

wherein the action of acquiring the blocking parameter of the second application according to the ACDC category, comprises;

acquiring the blocking parameter of the second application from the correspondence table of ACDC categories and blocking parameters according to the ACDC category.

10. The access control method according to claim 7, wherein the action of acquiring the ACDC category of the second application according to the identification information, comprises:

receiving a network connection request of the second application and the ACDC category corresponding to the second application transmitted from a Non-Access Stratum (NAS), wherein the ACDC category corresponding to the second application is obtained, by the NAS, through searching the application and ACDC category corresponding table configured by the local network according to the identification information.

11. The access control method according to claim 10, wherein the action of acquiring the blocking parameter of the second application according to the ACDC category, comprises:

searching, according to the ACDC category, the correspondence table of ACDC categories and blocking parameters, acquired from the broadcast of the service network, for a blocking parameter corresponding to the ACDC category of the second application.

12. The access control method according to claim 11, wherein the action of establishing the second connection between the terminal and the network for the second application or allowing the second application to deliver the information on the first connection, comprises:

sending information indicating that the second application is allowed to access the network to the NAS, to enable the NAS to establish the second connection between the terminal and the network for the second application or allow the second application to deliver the information on the first connection.

13. The access control method according to claim 4, wherein, when the access control method is applied to a base station, the action of acquiring the identification information of the second application after the first connection of the first application is established between the terminal and the network and before the ACDC judgment is made for the second application, comprises:

upon reception of RRC-layer signaling which is sent by the terminal and contains an application establishment request of the second application and the identification information of the second application, parsing the RRC-layer signaling to obtain the identification information or ACDC category of the second application.

14. The access control method according to claim 13, wherein the action of establishing the second connection between the terminal and the network for the second application or allowing the second application to deliver the information on the first connection, comprises:

sending, to the terminal, the ACDC judgment result indicating that the second application is allowed to perform network communication, to enable the terminal to establish the second connection with the network or allow the second application to continue delivering the information on the first connection.

15. The access control method according to claim 4, wherein, when the access control method is applied to the base station, the action of acquiring the identification information of the second application after the first connection of the first application is established between the terminal and the network and before the ACDC judgment is made for the second application, comprises:

acquiring NAS signaling sent by the terminal and comprising a bearer establishment request of the second application or data of the second application sent on the first connection, and transmitting the NAS signaling to a core network; and

receiving the identification information of the second application obtained by the core network according to the NAS signaling.

16. The access control method according to claim 15, wherein the action of establishing the second connection between the terminal and the network for the second application or allowing the second application to deliver the information on the first connection, comprises:

sending, to the terminal through a core network, the ACDC judgment result indicating that the second application is allowed to perform network communication, to enable the terminal to establish the second connection with the network or allow the second application to continue delivering the information on the first connection.

17. The access control method according to claim 4, wherein, when the access control method is applied to the core network, the action of acquiring the identification information of the second application after the first connection of the first application is established between the terminal and the network and before the ACDC judgment is made for the second application, comprises:

upon reception of the NAS signaling sent by the terminal through the base station and comprising the bearer establishment request of the second application or the data of the second application sent on the first connection, acquiring the identification information of the second application.

18. The access control method according to claim 17, wherein the action of establishing the second connection between the terminal and the network for the second application or allowing the second application to deliver the information on the first connection, comprises:

sending, to the terminal through the base station, the ACDC judgment result indicating that the second application is allowed to perform network communication, to enable the terminal to establish the second connection with the network or allow the second application to continue delivering the information on the first connection.

19. An access control device of Application specific Congestion control for Data Communication (ACDC), the device comprising a processor, and one or more modules stored on a memory and executable by the processor, wherein the one or more modules comprise:

a first acquisition module, arranged to, after a first connection of a first application is established between a terminal and a network and before an ACDC judgment is made for a second application, acquire identification information of the second application;

a second acquisition module, arranged to acquire a blocking parameter of the second application according to the identification information;

a judgment module, arranged to make the ACDC judgment for the second application according to the blocking parameter, to obtain a judgment result indicating whether the second application is allowed to perform network communication; and

a communication module, arranged to, when the judgment result indicates that the second application is allowed to perform network communication, establish a second connection between the terminal and the network for the second application or allow the second application to deliver information on the first connection.

20. The access control device according to claim 19, wherein the first application and the second application are classified according to application software categories, or are classified according to service types.

21-36. -36. (canceled)