Method, device and system for access control

Abstract

A method, apparatus and system for access control are provided by the embodiment of the present invention. Wherein the method includes the following steps: receiving an access request; obtaining access right information of the UE or the cluster to which UE belongs or the APN in the access request; performing access operation if the access right information accords with the allowing access condition; refusing to perform access operation if the access right information does not accord with the allowing access condition, and determining the UE or the cluster to which UE belongs or some APN is illegal; transmitting the information that the UE or the cluster to which UE belongs or some APN is illegal to a server. The network side judges the access right information of the UE or the cluster to which UE belongs or the APN, allows the UE to access if the UE accords with the allowing access condition, and transmits the information that the UE or the cluster to which UE belongs or some APN is illegal to the server. So that the purpose of limiting the access of UE is achieved, the malice attack from UE to the network side is prevented farther, and the service quality of the network is improved.

Description

technical field [0001] The present invention relates to the field of communication technology, in particular to an access control method, device and system. Background technique [0002] With the popularization and development of wireless communication technology, a large number of terminals have emerged, such as Machine Type Communications (MTC) applications; in MTC, a network between one or more network elements without human participation Communication, that is, machine-to-machine (M2M) applications; specific application scenarios such as: traffic control and management, factory monitoring, remote meter reading, etc. In MTC applications, user equipment (User Equipment, UE) is called M2ME in MTC applications, and multiple M2MEs form a whole, which can be called a group. Network operators or industry users can manage or control the group as a whole. The group identifier of can be used to identify and distinguish different groups. Network operators and industry users can p...

AI Technical Summary

Problems solved by technology

[0004] In the process of realizing the present invention, the inventor found that: when an illegal UE viciously attacks the network side or uses an illegal access point name (Access Point Name, APN) to viciously attack the network, the network side cannot well prevent the illegal UE from continuing to attack other network entities , and the network side does not investigate illegal causes of illegal UEs, resulting in more and more illegal terminals emerging, which poses a great threat to network security and seriously affects the experience of other normal users

Images