WO2008113284A1

WO2008113284A1 - Method and device for managing users, measuring and reporting in restricted network

Info

Publication number: WO2008113284A1
Application number: PCT/CN2008/070456
Authority: WO
Inventors: Yinghui Yu
Original assignee: Huawei Technologies Co., Ltd.
Priority date: 2007-03-20
Filing date: 2008-03-10
Publication date: 2008-09-25
Also published as: CN101272298A

Abstract

A method and a device for managing users, measuring and reporting in restricted network are provided which enable a user who has the authority to directly manage the access authority of the users in the restricted network, and belong to the field of wireless communication. In the present invention, the restricted network receives a manipulating request initiated by the terminal used by the user who has the user managing authority to add or delete users; the ID of the manipulated user is carried in the manipulating request; the restricted network notifies the terminal used by the manipulated user that an access restricting ID of the restricted network in the terminal should to be saved or deleted. Before the restricted network adds the user who has the authority to access, the validity of the user to be added is also needed to be authenticated; before the restricted network deletes the only user who has the authority to access, the terminal initiated the deleting request can be confirmed first, so as to avoid improper operation.

Description

Method and device for managing, measuring and reporting restricted network users

Technical field

The present invention relates to the field of wireless communications, and more particularly to a method and apparatus for managing, measuring, and over-restricting network users.

With the development of high technology marked by communication technology and computer technology, people's lives have undergone tremendous changes, and the information transmission between people has become closer and more diverse. The development of cellular mobile communication has brought great convenience to users. At present, its development has experienced three generations, which are the first in the early 1980s based on Frequency Division Multiple Access (FDMA) technology. Generation of analog mobile communication systems, the second generation of digital cellular mobile communication systems based on Time Division Multiple Access (TDMA) technology in the early 1990s, and the current generation of mobile and personal communication systems, namely Third-generation mobile and personal communication systems based on Code Division Multiple Access ("CDMA") technology.

With the development of mobile communication networks, the application of wireless networks is becoming more and more extensive. On the basis of meeting the communication anytime and anywhere, in order to meet the needs of special user groups, the concept of restricted networks has emerged. The restricted network may be a private network, or a network using a specific frequency layer according to a certain policy, or a network using a specific radio access technology (Radio Access Technology, hereinafter referred to as "RAT"). Among them, the private network may be a company, a mall, or a subnet covered by a family. The difference between a restricted network and a public network is that a restricted network is not allowed to be hosted or accessed by all users, but only allows some users belonging to the network to camp or access. Since the users allowed to access a restricted network are subject to change, it is very important to manage the user access rights of the restricted network.

At present, the user access rights of the restricted network are managed by operations similar to adding and deleting users on the public network. For example, if the private network A adds the user A that can be accessed, it needs to go to a specific management background, and perform corresponding operations on the private network A to increase the user. Similarly, if the private network A deletes the user A that can be accessed first. The user deletion operation is also required to be performed in a specific management background. When the user allowed to access the private network A changes, the corresponding addition and deletion operations are performed to implement the management of the user access authority of the private network A.

However, the inventors of the present invention found that the above scheme lacks flexibility. For example, private network A For a home-covered network, when the family has a guest, it needs to access the public network from the private network A. Therefore, it is necessary to add a new user to the private network A to a specific management background; when the guest leaves , also need to go to a specific management background to delete the user for the private network A. Since the user's access rights in the private network A need to be modified, the corresponding user management operations must be performed in a specific management background, which lacks flexibility and brings inconvenience to the management of the private network. Summary of the invention

The main technical problem to be solved by the embodiments of the present invention is to provide a method and a device for managing, measuring, and reporting a restricted network user, so that a privileged user can directly manage user access rights of the restricted network.

To solve the above technical problem, an embodiment of the present invention provides a limited network user management method, which includes the following steps:

The restricted network receives an operation request from a terminal used by a user having user management authority, and the operation request carries an identifier of the operated user;

The restricted network notifies the terminal used by the operated user to update the access restriction identifier of the restricted network on the terminal according to the operation request.

An embodiment of the present invention further provides a network side device, including:

a receiving module, configured to receive an operation request initiated by a terminal used by a user with user management authority to the restricted network, where the operation request carries an identifier of the operated user;

And a notification module, configured to notify the terminal used by the operated user to refresh an access restriction identifier of the restricted network on the terminal.

An embodiment of the present invention further provides a terminal device, including:

a sending module, configured to send an operation request to the restricted network, where the operation request carries an identifier of the operated user, where the restricted network is a network that the terminal has permission to operate; and/or

The second refreshing module is configured to refresh the access restriction identifier of the restricted network on the terminal according to the notification message sent by the restricted network.

The embodiment of the present invention further provides a method for measuring and reporting a terminal, including the following steps:: customizing cell measurement and/or measurement result reporting of the terminal according to the access restriction information; the terminal performs measurement on the cell according to the customized result. Reported.

An embodiment of the present invention further provides a terminal device, including: The measuring module is configured to perform measurement on the cell according to the customized cell measurement and/or the measurement result; and the reporting module is configured to report the information measured by the measurement module to the network side according to the customized cell measurement and/or the measurement result report .

a customized module, configured to customize a cell measurement and/or a measurement result report of the terminal according to the access restriction information;

The sending module is configured to send a customized module customized result to the terminal.

Compared with the prior art, the main effect of the embodiment of the present invention is that: the modification of the user right does not need to be performed in a specific management background, and the user access authority of the restricted network can be directly managed by the authorized user through the terminal, thereby User access rights management for restricted networks is more flexible. DRAWINGS

1 is a flowchart of a method for managing a restricted network user according to a first embodiment of the present invention; FIG. 2 is a flowchart of a method for managing a restricted network user according to a second embodiment of the present invention; FIG. 3 is a third embodiment of the present invention. Flow chart of terminal measurement and reporting methods;

4 is a structural diagram of a restricted network user management system according to a sixth embodiment of the present invention. detailed description

In order to make the objects, technical solutions and advantages of the present invention more comprehensible, the embodiments of the present invention will be further described in detail with reference to the accompanying drawings.

A first embodiment of the present invention relates to a method for managing a restricted network user. In this embodiment, management of a restricted network user is to increase management of a new user, and the restricted network may be a private network.

Local area network (referred to as "WLAN") or short-distance communication network such as Bluetooth technology. This embodiment uses a restricted network as a private network as an example. The specific process is shown in Figure 1.

In step 110, the terminal used by the user with the user management authority initiates an increase request to the private network, where the request carries the identifier of the added user, and the private network receives the request for increasing the user. Specifically, before adding a new user to the private network, the authorized user in the private network first determines whether the user is allowed to access the private network, and if so, the authorized user uses the user. The terminal initiates an increase in the user's request to the private network, and in the request The request carries the identity of the user requesting the addition (such as the phone number used by the user). Among them, the privileged user can be a user with the lowest privilege (that is, access rights), or a user with a higher administrative privilege, such as an administrator, a super administrator, and the like. A privileged user of a private network can be one or more. In this embodiment, it is ensured by the authorized user whether the requested user is a user who can be allowed to access the private network, so as to ensure that the newly added user does not have an unsafe impact on the private network.

Then, proceeding to step 120, the core network (Core Net, referred to as "CN") performs legality authentication on the user who is requested to be added. If the authentication fails, the process proceeds to step 130. If the authentication is passed, the process proceeds to step 140. Specifically, after receiving the request of adding the user, the private network sends a request message to the CN, requesting that the user to be added (that is, the user who is requested to be added) perform legality authentication, and the message carries the user to be added. Identification (such as the phone number used by the user). The CN authenticates whether the user to be added is a legitimate user according to the identifier of the user carried in the message. If the authentication fails, that is, the user to be added is an illegal user, the process proceeds to step 130. If the authentication fails, If it is determined that the user to be added is a legitimate user, then step 140 is entered.

Since the legitimacy of the user includes two aspects, on the one hand, whether the user's joining will have an insecure impact on the private network, as mentioned in step 110, on the other hand, whether the user to join is able to access the public network. Therefore, in this step 120, the user to be authenticated is authenticated by the CN, which further ensures the legitimacy of the user to be joined, thereby making the management of the private network more accurate.

In step 130, the CN returns the result of the authentication failure to the private network, and the private network returns a message requesting the failure to the authorized user who initiated the request, and carries the reason for the failure in the message, that is, the public network authentication fails.

If the CN passes the authentication of the user to be added, the process proceeds to step 140, where the identifier of the user to be added by the CN is converted into a user identifier that can be identified by the private network, and the user identifier is sent to the private network.

Then, proceeding to step 150, the private network saves the user identifier of the user to be added from the CN, and sends the access restriction identifier of the private network to the terminal used by the user to be added through the paging message, or The access restriction identifier of the private network is sent to the terminal used by the user to be added by other downlink signaling methods. Since the user identifier of the user to be added from the CN is an identifier that the private network can recognize, if the newly added user passes the terminal used to the private If the network initiates an access request, the private network can recognize that the user is a user with access rights according to the saved user identifier, so as to perform correct processing.

Then, proceeding to step 160, the terminal that receives the access restriction identifier of the private network saves the access restriction identifier in the terminal, so that the user who uses the terminal, that is, the user to be added, can learn that the user has the authority. Access to the private network.

Then, proceeding to step 170, the user to be added returns a response command to the private network through the terminal used, and the private network considers that the operation of the newly added user is successful, and returns a message of successful request to the terminal of the authorized user who initiated the request.

It should be noted that, in this embodiment, the terminal information for initiating the user request is saved in the CN as an example. Therefore, the private network needs to request the CN to perform legality authentication and number for the user to be added. Conversion. If the terminal user who initiates the user request is an end user that only supports the private network, the end user is authenticated by the private network and the number is converted.

In addition, it is worth mentioning that the management of the user access rights of the private network may involve the user management database of the private network, and the network side (ie, the private network and/or the core network) may have a user management database of the private network. Therefore, the network side also needs to update the user database according to the operation request initiated by the authorized user. In the case that the user management database of the private network is available on the network side, the user having access rights may also send a query request to the network side, where the identifier or name of the private network to be queried is carried, and the network side checks the rights of the user. If the user's authority is legal, the corresponding query result is fed back.

Therefore, in this embodiment, the user access authority does not need to be operated in a specific management background, and the user access authority of the restricted network can be directly managed by the authorized user through the terminal, thereby User access rights management of network-limited networks is more flexible.

The second embodiment of the present invention relates to a method for managing a restricted network user. In this embodiment, the management of the restricted network user is to delete the management of the user, and the restricted network may be a private network or a distance communication network. The present embodiment is described by taking a limited network as a private network as an example. The specific process is shown in FIG. 2 .

In step 210, the terminal used by the authorized user initiates a request to delete the user to the private network, where the request carries the identifier of the deleted user, and the private network receives the request to delete the user. The user requested to delete may be another user allowed to access the private network, or the user itself who initiated the request. For example, User 1, User 2, and User 3 are all allowed to access the private network A. If User 1 wants to delete the access rights of User 2, User 1 initiates the deletion of User 2 to Private Network A through the terminal used. The request, carrying the identity of User 2 in the request.

Next, proceeding to step 220, the private network determines whether the user requested to be deleted is the only user of the private network. For example, in the above case, the user 1 initiates a request to delete the user 2 to the private network A through the terminal used, and then the private network A can determine that the user 2 requested to be deleted is not the only user of the private network, the user Both 1 and User 2 are users of this private network. If only user 1 can access private network A, and user 1 initiates a request to delete user 1 to private network A through the terminal used, private network A will determine that user 1 requested to delete is the only user of the private network. . If the user requested to delete is not the only user of the private network, then step 230 is entered, otherwise, step 250 is entered.

In step 230, the private network deletes the identifier of the user that is requested to be deleted, and sends the access restriction identifier of the private network to the terminal used by the deleted user by using a paging message, or may also pass other downlink signaling. The method sends the access restriction identifier of the private network to the terminal used by the deleted user. Specifically, for the above case, after receiving the request of the user 1 to delete the user 2, the private network A deletes the identifier of the user 2 saved in the private network according to the identifier of the user 2 carried in the request. If the user database of the private network A is stored on the network side, the network side also needs to delete the data related to the user 2 in the user database. And, the access restriction identifier of the private network A is sent to the terminal used by the deleted user 2 by a paging message or other downlink signaling manner.

After step 230, the process proceeds to step 240, where the terminal that receives the access restriction identifier of the private network deletes the access restriction identifier in the terminal, and returns a response to the private network. Specifically, in the above case, after receiving the access restriction identifier of the private network A, the terminal used by the user 2 deletes the access restriction identifier of the private network A in the terminal, so that the deleted user 2 can learn This user no longer has access to private network A. Moreover, after deleting the access restriction identifier of the private network A, the terminal used by the user 2 returns a response message to the private network A.

If the user requested to delete is the only user of the private network, then step 250 is entered. In step 250, the private network notifies that the terminal sending the delete user request will delete the unique user of the private network, requesting confirmation of the operation of deleting the unique user. That is, if the user 1 initiates a request to delete the user 1 to the private network A through the terminal used, the private network A determines that the user 1 is the local The only user of the private network, then, in this step, the private network A notifies the user 1 that the unique user of the private network A will be deleted, requesting confirmation of the deletion operation. After that, the process proceeds to step 260.

In step 260, the terminal that sends the delete user request confirms the request for the delete operation after receiving the notification. If the user requested to delete is the only user of the private network, the user who is requested to delete is the user who initiated the request. Therefore, after confirming to continue the deletion operation, the user deletes the terminal used by the user. The access restriction identifier of the private network. For the above case, after receiving the notification of the private network A, the user 1 confirms the request for the deletion operation. If the user 1 confirms to continue the deletion operation, the user 1 deletes the connection of the private network A in the terminal used by the user. Enter the limit ID.

Next, in step 270, the private network deletes the identity of the user requested to delete after receiving the confirmation message. For the above case, the private network A deletes the identifier of the user 1 saved in the private network A after receiving the confirmation message of the deletion operation by the user 1. If the user database of the private network A is stored on the network side, the network side also needs to delete the data related to the user 1 in the user database.

It is not difficult to find that, in this embodiment, the deletion of user rights does not need to be managed by a specific management background, and the user access rights of the private network can be directly managed by the authorized user, thereby making the restricted network User access rights management is more flexible. Moreover, since the private network receives the request for deleting the unique user of the private network, the user requesting the request needs to confirm the operation request, so as to avoid the misoperation, so that no user has the right to access the private network. Therefore, the private network can no longer be managed by the authorized user, thereby further ensuring the management accuracy of the authorized user to the private network.

A third embodiment of the present invention relates to a terminal measurement and a "^" method. In this embodiment, the terminal customizes the cell measurement and/or measurement result reporting of the terminal according to the access restriction information, and customizes according to the customization. The result is measured and reported to the cell, where the access restriction information includes access restriction information of the restricted network, capability limitation information of the terminal (such as support for special networks, radio access technologies or frequency layers, etc.), Set the access restriction information in the terminal. The specific process is shown in Figure 3.

In step 310, the terminal customizes the information reported by the cell and/or the measurement result of the terminal according to the access restriction information. For example, the terminal prohibits measurement on a cell that does not have access rights according to the access restriction information; or, the terminal includes a cell that does not have access authority in the measured cell according to the access restriction information, but prohibits the The measurement result of the cell is reported to the network side; or, the terminal measures and reports the cell that does not have the access authority according to the access restriction information, but the measurement result is The identifier of the cell in which the terminal does not have access rights is set to a specific identifier, indicating that the terminal cannot access the cell normally; or, the cell that does not have access rights is measured and reported, but the measurement result does not have access. The measurement result of the privileged cell is placed in the lower priority reporting queue; or, the cell that does not have the access authority is measured and reported, but in the measurement result, the measurement result of the cell that does not have the access authority is added to a negative Offset amount.

Next, in step 320, the terminal measures and reports the cell according to the customized result. Specifically, the terminal carries some measurement information (such as measurement results on RACH) in some uplink signaling. Can be in Cell update message, Initial Direct transfer message, Measurement control message, Measurement report message, RRC connection request, etc. Carry these measurement information. When the terminal is idle or active, and the measurement is to be performed, the cell is measured according to the customized result, and the measurement result is reported to the network side.

For example, when the terminal needs to be switched in the active state, the network side sends an indication to the terminal to measure the neighboring cell. The terminal measures the cell according to the customized result, and reports the measurement result to the network side. For example, the terminal checks whether a cell with a restricted network exists in the cell to be measured, and if so, continues to determine whether the terminal has the right to access the cell of the restricted network. If yes, the cell of the restricted network is measured. If not, the cell of the restricted network is not measured according to the customized result; or, although the cell of the restricted network is measured, the reported measurement is performed. The result of the measurement is not included in the result; or the cell of the restricted network is measured and reported, but the measurement result indicates that the terminal does not have the right to access the cell (for example, the identity of the cell is set to Or, the cell that does not have access rights is measured and reported, but in the measurement result, the measurement result of the cell that does not have the access permission is placed in the reporting queue with a lower priority; or, the measurement is not reported. A cell with access rights, but in the measurement result, a negative offset is added to the measurement result of the cell that does not have access rights. Of course, it is also possible for the terminal to measure and report a cell with no good signal quality indicated by the network side.

In this embodiment, the restricted network may be a private network, or a network using a specific frequency layer, such as a network providing a RAT of a special service, and the terminal may determine whether the terminal has the terminal by determining whether the terminal supports the special service. Access to this restricted network.

It is not difficult to find that in the present embodiment, the terminal can avoid the pair by reducing the measurement range. The cell with the access permission initiates unnecessary measurement. The measurement result reported in the report does not include the measurement result of the cell that does not have the access permission, or the measurement and reporting of the cell that does not have the access permission, but The measurement result indicates that the terminal does not have the right to access the cell, or measures and reports the cell that does not have the access right, but in the measurement result, the measurement result of the cell that does not have the access authority is placed at a lower priority. In the reporting queue, the cell that does not have access rights is measured and reported, but in the measurement result, a negative offset is added to the measurement result of the cell that does not have the access authority. When the network side performs the handover, the terminal can be prevented from switching to the cell in which the terminal does not have access rights.

A fourth embodiment of the present invention relates to a terminal measurement and method, and the present embodiment is substantially the same as the third embodiment, and the difference is that, in the third embodiment, the terminal is the cell of the terminal according to the access restriction information. The information reported by the measurement and/or the measurement result is customized. In the present embodiment, the network side performs customization on the cell measurement and/or the measurement result reported by the terminal according to the access restriction information.

Specifically, if the terminal is in an idle state, the terminal reports the access restriction information or partial access restriction information of the terminal in an exchange process such as an attach process or a tracking domain (TA) update and the network side. Give the network side. The network side customizes the information of the cell measurement and/or the measurement result reported by the terminal according to the access restriction information of the terminal, and sends the customized result to the terminal during the process of interacting with the terminal, such as an attach process or a TA update. terminal.

If the terminal is in an active state, the terminal uses uplink signaling (including access layer AS, non-access stratum NAS signaling, L1/L2 (layer 1/layer 2) control signaling) or other means to connect the terminal. The incoming restriction information or part of the access restriction information is reported to the network side. The network side customizes the information of the cell measurement and/or measurement result reported by the terminal according to the access restriction information of the terminal, and adopts downlink signaling (including access layer AS, non-access stratum NAS signaling, L1/L2). (layer 1 / layer 2) control signaling) or other means to deliver customized results to the terminal.

The terminal then measures the cell according to the received customized result, and reports the measurement result to the network side. The result of the customization, that is, the information reported by the cell measurement and/or the measurement result of the terminal may be that the measurement is not performed on the cell that does not have the access right; or the cell that does not have the access permission is included in the measured cell, but the cell is not allowed. Reporting the measurement result of the cell to the network side; or measuring and reporting the cell that does not have the access right, but indicating in the measurement result that the terminal does not have the access right cell (if the cell identity is set to specific In the measurement result, the measurement result of the cell that does not have the access authority is placed in the reporting queue with the lower priority; Alternatively, the cell that does not have access rights is measured and reported, but in the measurement result, a negative offset is added to the measurement result of the cell that does not have the access authority.

It is worth mentioning that when the terminal replaces the network node, the terminal access restriction information and/or the network side customization result may be transmitted between the network nodes, and when the terminal access restriction information and/or network side customization When the result changes, the terminal and/or the network side will initiate an information update to notify the other party.

A fifth embodiment of the present invention relates to a terminal measurement and an uplink method. The present embodiment is substantially the same as the fourth embodiment. The difference is that, in the fourth embodiment, the network side separately measures and/or measures the cell of each terminal. The information reported by the measurement result is customized. In the embodiment, the network side customizes the policy of reporting the cell measurement and/or the measurement result of the terminal according to the access restriction information category, where the policy includes various types of access restriction information. The information of the cell measurement and/or the measurement result is reported, and the customized result is sent to the terminal, and the terminal selects the information corresponding to the cell measurement and/or the measurement result according to the access restriction information category to which the terminal belongs, according to the selected cell. The information reported by the measurement and/or measurement results is measured and reported to the cell.

Specifically, the network side classifies the limiting factors of the restricted network according to the category of access restrictions (such as no access, or no service).

The information reported for the cell measurement and/or measurement results of each type of access restriction category is customized. For example, for the access restriction information of the private network without access, the measurement is prohibited for the cell; for the case where the service is not supported by using the specific frequency layer or the RAT, the cell that does not have the access permission is measured and reported, but In the measurement result, it is indicated that the terminal does not have the access right of the cell. Moreover, the network side sends the information reported by the two customized cell measurement and/or measurement results and the corresponding access restriction information category as a policy, and sends the information to the terminal by means of broadcast or downlink signaling.

After receiving the policy including the information reported by the two cell measurements and/or the measurement result, the terminal selects the corresponding cell measurement and/or the information reported by the measurement result according to the access restriction information of the cell, and according to the selected cell measurement and / or the information reported by the measurement result is measured on the cell, and the measurement result is reported to the network side.

It can be seen that the network side can customize the terminal separately, or can customize a policy, including the information of the cell measurement and/or the measurement result corresponding to the access restriction information, and the terminal according to the access restriction to which the terminal belongs. The selection of categories of information makes the embodiments of the present invention more flexible.

A sixth embodiment of the present invention relates to a restricted network subscriber management system, as shown in FIG. 4, including a network side device and a terminal device. The network side device includes: a receiving module, configured to receive an operation request initiated by the terminal used by the user with the user management authority to the restricted network, where the operation request carries the identifier of the operated user; And refreshing the user identifier according to the operation request received by the receiving module; and the notification module, configured to notify the terminal used by the operated user to refresh the access restriction identifier of the restricted network on the terminal.

It can be seen that the modification of the user rights does not require the management of the user in a specific management background, and the user access rights of the restricted network can be directly managed by the authorized user, thereby enabling the user access rights management of the restricted network. More flexible.

When the operation request is to increase the user's request, the first refresh module refreshes the user identifier by saving the identifier of the user that is requested to be added in the restricted network, and the notification module notifies the terminal used by the added user to save. The access restriction identifier of the restricted network, notifying the terminal to refresh the access restriction identifier of the restricted network on the terminal; when the operation request is to delete the user request, the first refresh module deletes the requested in the restricted network Deleting the identifier of the user, refreshing the user identifier, the notification module notifying the terminal used by the deleted user to delete the access restriction identifier of the restricted network, and notifying the terminal to refresh the access restriction identifier of the restricted network on the terminal . The notification module may send the access restriction identifier of the restricted network to the terminal used by the user who is requested to add or delete by using a paging message or other means. The restricted network can be a private network, or a network using a specific frequency layer or a network using a specific RAT (such as a short-distance communication network such as WLAN or Bluetooth technology).

The first refresh module includes:

a saving unit, configured to save an identifier of a user requested to be added in the restricted network when the operation request is to increase a user's request;

And deleting the unit, when the operation request is to delete the user's request, for deleting the identifier of the user requested to delete in the restricted network.

In addition, it is worth mentioning that the network side device may further include: an authentication module, configured to perform legality authentication on the user that is requested to be added before the first refresh module refreshes the user identifier according to the received operation request (for example, to the network) The side initiates the legality authentication of the user, and the first refreshing module refreshes the user identifier after the authentication is passed; and the database update module is configured to: after the first refreshing module refreshes the user identifier according to the received operation request, according to the operation Request to update the user database of the restricted network.

The terminal device includes: a sending module, configured to send an operation request to the restricted network, where the operation request carries an identifier of the operated user, where the restricted network is a network that the terminal has the authority to perform the operation And a second refreshing module, configured to refresh the access restriction identifier of the restricted network on the terminal according to the notification message sent by the restricted network. The operation request sent by the sending module is to increase the user's request, or delete the user's request; the second refreshing module saves or deletes the restricted network access on the local terminal according to the notification message sent by the restricted network. Restrict the identity and refresh the access restriction identifier of the restricted network.

A seventh embodiment of the present invention relates to a terminal device, including: a measurement module, configured to perform measurement on a cell according to a customized cell measurement and/or measurement result; and a reporting module, configured to perform cell measurement and/or measurement according to a customized As a result, the information measured by the measurement module is reported to the network side.

The terminal device may further include: a customization module, configured to customize a cell measurement and/or a measurement result report of the terminal according to the access restriction information, where the measurement module and the reporting module measure and report the cell according to the customized result of the customized module. Or the terminal device further includes: a receiving module, configured to receive a cell measurement and/or a measurement result report to the terminal customized by the network side, where the measurement module and the reporting module perform the cell according to the customized result received by the receiving module. Measurement and reporting.

The access restriction information includes access restriction information of the restricted network, capability limitation information of the terminal (such as support restrictions for a special network, a radio access technology or a frequency layer, and the like), and an access restriction set in the terminal. information. The customized result may be information reported by the cell measurement and/or measurement result of the terminal, such as prohibiting measurement on a cell that does not have access rights; or, the measured cell includes a cell that does not have access rights, but prohibiting the The measurement result of the cell is reported to the network side; or, the cell that does not have the access right is measured and reported, but the measurement result indicates that the terminal does not have the right to access the cell; or, the measurement and reporting does not have the access right a cell, but in the measurement result, the measurement result of the cell that does not have the access right is placed in the reporting queue with a lower priority; or, the cell that does not have the access authority is measured and reported, but in the measurement result, A measurement of the cell that does not have access rights adds a negative offset. The customized result may also be a policy that includes information on cell measurements and/or measurement results corresponding to various types of access restriction information.

The cell measurement and the measurement result are reported according to the customized result, so that the terminal can reduce the measurement behavior, avoid unnecessary measurement on the cell that does not have the access right, and avoid the network side switching the terminal when performing the handover. A cell that does not have access rights to the terminal.

An eighth embodiment of the present invention relates to a network side device, including: a customization module, configured to customize a cell measurement and/or a measurement result report of a terminal according to the access restriction information; and a sending module, configured to send the Customized results for custom modules. The access restriction information includes access restriction information of the restricted network, capability limitation information of the terminal (such as support restrictions for a special network, a radio access technology or a frequency layer, and the like), and an access restriction set in the terminal. information. The customized result may be information reported by the cell measurement and/or measurement result of the terminal, such as prohibiting measurement on a cell that does not have access rights; or, the measured cell includes a cell that does not have access rights, but prohibiting the The measurement result of the cell is reported to the network side; or, the cell that does not have the access right is measured and reported, but the measurement result indicates that the terminal does not have the right to access the cell; or, the measurement and reporting does not have the access right a cell, but in the measurement result, the measurement result of the cell that does not have the access right is placed in the reporting queue with a lower priority; or, the cell that does not have the access authority is measured and reported, but in the measurement result, A measurement of the cell that does not have access rights adds a negative offset. The customized result may also be a policy, which includes information about cell measurement and/or measurement result corresponding to each type of access restriction information. The terminal can reduce the measurement behavior, avoid unnecessary measurement on the cell that does not have access rights, and prevent the network side from switching to the cell in which the terminal does not have access rights when performing handover. When the network side device is used, the access restriction information of the terminal and/or the customized result of the customization module are transmitted to other network side devices.

In summary, in an embodiment of the present invention, the restricted network receives an operation request from a terminal used by a user having a user management right, and the operation request carries an identifier of the operated user, and notifies the operated user. The terminal used refreshes the access restriction identifier of the restricted network on the terminal. The modification of the user rights does not need to be performed in a specific management background, and the user access rights of the restricted network can be directly managed by the authorized user through the terminal, thereby making the user access rights management of the restricted network more flexible.

The operation request initiated to the restricted network may be an increase of the user's request, or a request to delete the user, so that the authorized user can manage the access rights of the restricted network user more comprehensively and completely.

The restricted network first authenticates the user who is requested to increase the network through the network side, and further ensures the legality of the newly added user. Before deleting the only user with permission to access, First, the terminal that initiated the deletion operation request is confirmed, effectively preventing the user from misoperation, and ensuring the accuracy of the management of the restricted network by the authorized user.

The terminal performs measurement and measurement of the cell according to the information reported by the customized cell measurement and/or measurement result, or the policy including the information of the cell measurement and/or the measurement result corresponding to the access restriction information. The reporting of the result can reduce the measurement behavior, avoid unnecessary measurement on the cell that does not have access rights, and prevent the network side from switching to the cell in which the terminal does not have access rights when performing handover.

While the invention has been illustrated and described with reference to the preferred embodiments embodiments The spirit and scope of the invention.

Claims

Rights request

A method for managing a restricted network user, comprising the steps of:

And the restricted network notifies the terminal used by the operated user to refresh the access restriction identifier of the restricted network on the terminal used by the operated user according to the operation request.

2. The restricted network user management method according to claim 1, further comprising the following steps:

After receiving the operation request, the restricted network refreshes the user identifier according to the operation request.

The method for managing a restricted network user according to claim 2, wherein the operation request is to increase a user's request;

The step of the restricted network refreshing the user identifier according to the operation request includes: saving, on the restricted network, an identifier of the user requested to be added;

The step of notifying the terminal used by the operated user to refresh the access restriction identifier of the restricted network on the terminal comprises: notifying the terminal used by the added user to save the access restriction identifier of the restricted network.

4. The restricted network user management method according to claim 3, wherein before the restricted network saves the identifier of the user requested to be added, the following steps are performed:

The network side performs legality authentication on the user who is requested to be added.

The method for managing a restricted network user according to claim 2, wherein the operation request is a request to delete a user;

The step of the limited network refreshing the user identifier according to the operation request includes: deleting, on the restricted network, an identifier of the user requested to delete;

The step of notifying the terminal used by the operated user to refresh the access restriction identifier of the restricted network on the terminal comprises: notifying the terminal used by the deleted user to delete the access restriction identifier of the restricted network.

The limited network user management method according to claim 5, wherein if the user requested to delete is a unique user of the restricted network, the restricted network deletes the user requested to delete Before the identification of the user, the terminal that sends the operation request is first confirmed to delete the user's request; If the terminal that sent the operation request confirms the request to delete the user, the restricted network deletes the identifier of the user requested to delete.

The restricted network user management method according to claim 3 or 5, wherein the restricted network passes a paging message, layer 1 or layer 2 signaling, or radio resource control layer RRC signaling, The access restriction identifier of the restricted network is sent to the terminal used by the added or deleted user.

The limited network user management method according to any one of claims 1 to 6, wherein if the network side saves the user database of the restricted network, the method further comprises the following steps:

The network side updates the user database according to the operation request.

The limited network user management method according to any one of claims 1 to 6, wherein the restricted network is a private network, or a network using a specific frequency layer, or a specific wireless access is used. Technical RAT network.

10. A network side device, comprising:

The network side device according to claim 10, wherein the network side device further comprises:

The first refreshing module is configured to refresh the user identifier according to the operation request received by the receiving module.

12. The network side device according to claim 11, wherein

The operation request is to increase a user's request, and the first refresh module refreshes the user identifier by saving the identifier of the user that is requested to be added in the restricted network, and the notification module notifies the terminal used by the added user by using the notification Saving an access restriction identifier of the restricted network, and notifying the terminal to refresh the access restriction identifier of the restricted network on the terminal; or

The operation request is to delete a user's request, and the first refreshing module refreshes the user identifier by deleting the identifier of the user that is requested to be deleted in the restricted network, and the notification module notifies the terminal used by the deleted user by Deleting the access restriction identifier of the restricted network, and notifying the terminal to refresh the access restriction identifier of the restricted network on the terminal;

The first refresh module includes:

a saving unit, configured to protect the restricted network when the operation request is to increase a user's request The identifier of the user who is requested to be added;

The network side device according to claim 12, wherein the network side device further comprises: an authentication module, configured to: before the first refreshing module refreshes the user identifier according to the received operation request, The user requested to be added performs legality authentication, and the first refresh module refreshes the user identifier after the authentication is passed.

The network side device according to any one of claims 10 to 13, wherein the network side device further comprises: a database update module, configured to refresh in the first refresh module according to the received operation request After the user identification, the user database of the restricted network is updated according to the operation request.

15. A terminal device, comprising:

a sending module, configured to initiate an operation request to the restricted network, where the operation request carries an identifier of the operated user, where the restricted network is a network in which the terminal has the right to perform the operation; and/or

The terminal device according to claim 15, wherein the operation request sent by the sending module is to increase a user's request, or delete a user's request; and/or

The second refreshing module refreshes the access restriction identifier of the restricted network by saving or deleting the access restriction identifier of the restricted network on the local terminal according to the notification message sent by the restricted network.

17. A terminal measurement and method, characterized in that it comprises the following steps:

Customizing the cell measurement and/or measurement result reporting of the terminal according to the access restriction information; the terminal performs measurement and uplink on the cell according to the customized result.

The terminal measurement and reporting method according to claim 17, wherein the access restriction information comprises one or any combination of the following:

Access restriction information of the restricted network, capability limitation information of the terminal, and access restriction information set in the terminal.

The terminal measurement and reporting method according to claim 17, wherein the network side customizes the cell measurement and/or measurement result reporting of the terminal according to the access restriction information, and customizes the The result is sent to the terminal by using downlink signaling, and the access restriction information or part of the access restriction information is reported by the terminal to the network side by using uplink signaling; or The terminal customizes the cell measurement and/or measurement result reporting of the terminal according to the access restriction information.

The terminal measurement and reporting method according to claim 19, wherein if the result of the network side customization changes, the network side notifies the terminal of the updated customized result;

If the access restriction information reported by the terminal to the network side changes, the terminal notifies the network side of the updated access restriction information;

When the terminal replaces the network node, the access restriction information of the terminal and/or the result of the network side customization may be transmitted between the network nodes.

The terminal measurement and reporting method according to claim 19, wherein the network side separately customizes the information reported by the cell measurement and/or the measurement result of each terminal, and sends the customized result to the corresponding Terminal; or

The network side customizes a policy for reporting the cell measurement and/or the measurement result of the terminal according to the category of the access restriction information, where the policy includes the information about the cell measurement and/or the measurement result corresponding to the type of restriction information, and Sending the customized result to the terminal, the terminal selects the information reported by the corresponding cell measurement and/or measurement result according to the category to which the restriction information belongs, and performs measurement on the cell according to the information of the selected cell measurement and/or measurement result. Reported.

The terminal measurement and reporting method according to any one of claims 17 to 21, wherein the information reported by the customized cell measurement and/or measurement result is one of the following:

It is forbidden to measure the cell that does not have access rights;

The measured cell includes a cell that does not have access rights, but the measurement result of the cell is prohibited from being sent to the network side;

The cell that does not have the access right is measured and reported, but in the measurement result, the cell that does not have the access right for the terminal is set as a specific identifier, indicating that the terminal cannot access the cell normally;

Measure and report the cell that does not have the access right, but in the measurement result, the measurement result of the cell that does not have the access authority is placed in the reporting queue with a lower priority;

The cell that does not have access rights is measured and reported, but in the measurement result, the measurement result of the cell without the access authority is added with a negative offset.

23. A terminal device, comprising:

a measuring module, configured to measure a cell according to a customized cell measurement and/or a measurement result; The reporting module is configured to report the information measured by the measurement module to the network side according to the customized cell measurement and/or the measurement result.

24. The terminal device according to claim 23, wherein

The terminal device further includes: a customization module, configured to customize a cell measurement and/or a measurement result report of the terminal according to the access restriction information, where the measurement module and the reporting module perform measurement on the cell according to the customized result of the customized module. Report; or,

The terminal device further includes: a receiving module, configured to receive a cell measurement and/or a measurement result report to the terminal customized by the network side, where the measurement module and the reporting module measure the cell according to the customized result received by the receiving module And reported.

25. A network side device, comprising:

And a sending module, configured to send a customized result of the customized module to the terminal.