Access Control Method, Device, Equipment and Storage Medium

Abstract

The present application provides an access control method, apparatus, device, and storage medium. The method includes: receiving an access configuration message transmitted by a second communication node; and determining whether to access the network based on the access configuration message.

Description

Technical Field

[0001] This application relates to a wireless communication network, and in particular to an access control method, apparatus, device, and storage medium. Background Art

[0002] In a Non-Terrestrial Network (NTN), since the base station is at a high altitude and usually has high mobility, communication is often accompanied by large latency and high Doppler. When the magnitudes of the latency and Doppler exceed the tolerance range of the base station, the communication quality will be significantly degraded or even the user access will fail. Therefore, in a three-dimensional space network, the base station needs to restrict the access of users who do not meet specific conditions in different scenarios and time periods to improve the network performance. However, the mechanisms of traditional terrestrial communication networks cannot meet the diverse requirements of different types of base stations in a three-dimensional space network. Summary of the Invention

[0003] This application provides a method, apparatus, device, storage medium, and system for access control.

[0004] In a first aspect, an embodiment of this application provides an access control method, which is applied to a first communication node and includes:

[0005] Receiving an access configuration message transmitted by a second communication node;

[0006] Determining whether to access the network based on the access configuration message.

[0007] In a second aspect, an embodiment of this application provides an access control method, which is applied to a second communication node and includes:

[0008] Sending an access configuration message to the first communication node, where the access configuration message is used for the first node to determine whether to access the network.

[0009] In a third aspect, an embodiment of this application provides an access control apparatus, which is configured in a first communication node and includes:

[0010] A first receiving module, configured to receive an access configuration message transmitted by a second communication node;

[0011] A determining module, configured to determine whether to access the network based on the access configuration information.

[0012] In a fourth aspect, an embodiment of this application provides an access control apparatus, which is configured in a second communication node and includes:

[0013] A first sending module, configured to send an access configuration message to the first communication node, where the access configuration message is used for the first node to determine whether to access the network.

[0014] In a fifth aspect, an embodiment of the present application provides a device, including:

[0015] One or more processors;

[0016] A memory for storing one or more programs;

[0017] When the one or more programs are executed by the one or more processors, the one or more processors implement any one of the methods in the embodiments of the present application.

[0018] In a sixth aspect, an embodiment of the present application provides a storage medium storing a computer program, and when the computer program is executed by a processor, it implements any one of the methods in the embodiments of the present application.

[0019] More descriptions about the above embodiments and other aspects of the present application and their implementation manners are provided in the accompanying drawings description, the specific implementation manner, and the claims. Description of the Drawings

[0020] Figure 1 It is a schematic structural diagram of a wireless network system provided by an embodiment of the present application;

[0021] Figure 2 It is a schematic flowchart of an access control method provided by an embodiment of the present application;

[0022] Figure 3 It is a schematic flowchart of an access control method provided by an embodiment of the present application;

[0023] Figure 4 It is a schematic structural diagram of an access control device provided by an embodiment of the present application;

[0024] Figure 5 It is a schematic flowchart of an access control device provided by an embodiment of the present application;

[0025] Figure 6 It is a schematic structural diagram of a device provided by an embodiment of the present application. Detailed Description of the Embodiments

[0026] To make the objectives, technical solutions, and advantages of the present application clearer and more understandable, the embodiments of the present application will be described in detail below with reference to the accompanying drawings. It should be noted that, without conflict, the embodiments and features in the embodiments of the present application can be combined arbitrarily with each other.

[0027] The steps illustrated in the process flow diagrams of the accompanying drawings can be executed in a computer system such as a set of computer-executable instructions. And although a logical order is illustrated in the flowcharts, in some cases, the steps shown or described can be executed in a different order than herein.

[0028] The technical solutions of this application can be applied to various communication systems, such as: Global System of Mobile communication (GSM) system, Code Division Multiple Access (CDMA) system, Wideband Code Division Multiple Access (WCDMA) system, General Packet Radio Service (GPRS), Long Term Evolution (LTE) system, LTE-A (Advanced long term evolution) system, Universal Mobile Telecommunication System (UMTS), and 5G system, etc. The embodiments of this application are not limited. In this application, the 5G system is taken as an example for illustration.

[0029] The embodiments of this application can be used in wireless networks of different systems. The radio access network may include different communication nodes in different systems. Figure 1 FIG. is a schematic structural diagram of a wireless network system provided by an embodiment of this application. As Figure 1 shown, the wireless network system 100 includes a base station 101, a user equipment 110, a user equipment 120, and a user equipment 130. The base station 101 performs wireless communication with the user equipment 110, the user equipment 120, and the user equipment 130 respectively.

[0030] First of all, it should be noted that in the embodiments of this application, the base station can be a device capable of communicating with a user terminal. The base station can be any device with wireless transceiver functions. Including but not limited to: base station NodeB, evolved base station eNodeB, base station in a 5G communication system, base station in a future communication system, access node in a WiFi system, wireless relay node, wireless backhaul node, etc. The base station can also be a radio controller in a cloud radio access network (CRAN) scenario; the base station can also be a small station, a transmission node (transmission reference point, TRP), etc. The embodiments of this application are not limited.

[0031] In the embodiments of the present application, the user terminal is a device with wireless transceiver functions that can be deployed on land, including indoor or outdoor, handheld, wearable or vehicle-mounted; it can also be deployed on water (such as ships, etc.); it can also be deployed in the air (such as airplanes, balloons, satellites, etc.). The user terminal can be a mobile phone, a tablet computer (Pad), a computer with wireless transceiver functions, a virtual reality (VR) terminal, an augmented reality (AR) terminal, a wireless terminal in industrial control, a wireless terminal in self-driving, a wireless terminal in remote medical, a wireless terminal in smart grid, a wireless terminal in transportation safety, a wireless terminal in smart city, a wireless terminal in smart home, and so on. The embodiments of the present application do not limit the application scenarios. The user terminal can sometimes also be referred to as a terminal, an access terminal, a UE unit, a UE station, a mobile station, a mobile unit, a remote station, a remote terminal, a mobile device, a UE terminal, a wireless communication device, a UE agent, or a UE device, etc. The embodiments of the present application do not limit this.

[0032] In NTN, since the base station is at high altitude and usually has high mobility, communication is often accompanied by large latency and high Doppler. When the magnitudes of the latency and Doppler exceed the tolerance range of the base station, it will lead to a significant decline in communication quality and even user access failure.

[0033] To cope with the large latency and high Doppler in NTN communication, the location and speed information of the base station and the user can be provided to the user, enabling it to calculate the corresponding latency and Doppler and perform pre-compensation. In this way, it is not necessary to tolerate the large latency and large frequency offset during the access process by enhancing the Physical Random Access Channel (PRACH). The user access can be completed by following the PRACH format in the New Radio (NR).

[0034] However, in different scenarios, the errors of the information obtained by the user are different, and the finally calculated latency and Doppler will also have different error ranges. If the error ranges of the latency and Doppler are greater than the tolerance range of the corresponding base station, the access will still fail even after pre-compensation.

[0035] At the same time, the ability of the user to perform time-frequency pre-compensation also has certain differences, and the network types, service types, etc. supported by different users are also different;

[0036] Therefore, in a spatial three-dimensional network, the base station needs to restrict access to users who do not meet specific conditions in different scenarios and time periods to improve network performance. However, the mechanisms of traditional terrestrial communication networks cannot meet the diverse requirements of different types of base stations in such networks.

[0037] In one embodiment, the present application provides an access control method. Figure 2 It is a schematic flowchart of an access control method provided by an embodiment of the present application. This method can be applied to determine whether a device is allowed to access. This method can be executed by the access control device provided by the present application, and the access control device can be implemented by software and / or hardware. The method is applied to a first communication node.

[0038] As Figure 2 shown, the access control method provided by the embodiment of the present application mainly includes steps S11 and S12.

[0039] S11. Receive an access configuration message transmitted by a second communication node.

[0040] S12. Based on the access configuration message, determine whether to access the network.

[0041] In this embodiment, the first communication node may be any of the above user devices. The second communication node may be any of the above base stations.

[0042] In this embodiment, the access configuration message is configured by the base station and sent to the user device. The specific configuration method of the access configuration message is not limited in this embodiment.

[0043] In an exemplary embodiment, the method further includes:

[0044] Sending first communication node information to the second communication node, where the first communication node information is used by the second communication node to determine whether to allow the first communication node to access the network.

[0045] It should be noted that the user can determine whether to access the network based on the access configuration information. Correspondingly, the base station can also determine whether to allow the user to access according to the user device information.

[0046] Furthermore, in the case where the user accesses the network for the first time, the user initiates the determination of whether to access the network. In the case where the user switches the access network, the base station initiates whether to allow the user to access the network.

[0047] In an exemplary embodiment, the method further includes: stopping accessing the network when the number of failed attempts to access the network reaches a preset number.

[0048] It should be noted that the preset number of times can be configured by the second communication node. When the second communication node restricts access according to immutable parameters such as time-frequency offset thresholds, a lower preset number of times can be configured to save resources; when the second communication node restricts access according to variable parameters such as load, a higher preset number of times can be configured to provide more access opportunities.

[0049] In an exemplary embodiment, the access configuration message includes one or more of the following:

[0050] Access conditions;

[0051] Access indication;

[0052] Second communication node information.

[0053] In an exemplary embodiment, the second communication node information may be base station status information, including the location, speed, and corresponding error range of the base station, etc.

[0054] It should be noted that the first communication node can estimate parameters such as the distance and time-frequency offset between the second communication node and itself based on the second communication node information and its own information, assisting the first communication node in determining whether the access conditions are met.

[0055] In an exemplary embodiment, determining whether to access the network based on the access configuration information includes: determining whether to access the network based on the access indication sent by the second communication node.

[0056] In an exemplary embodiment, the access indication includes one or more of the following:

[0057] Allowed to access;

[0058] Not allowed to access;

[0059] Suspended access.

[0060] In this embodiment, if the access indication is allowed to access, it is determined that the user accesses the network.

[0061] If the access indication is not allowed to access, it is determined that the user is prohibited from accessing the network.

[0062] If the access indication is suspended access, it is determined that the user is prohibited from accessing the network for a period of time. The waiting time can be configured by the second communication node.

[0063] In an exemplary embodiment, determining whether to access the network based on the access configuration information includes: stopping accessing the network when the access conditions are not met.

[0064] In an exemplary embodiment, when the access condition is not met, stopping accessing the network includes:

[0065] Determine the node type of this node;

[0066] When the node type of this node is not the service type of the second communication node, stop accessing the network.

[0067] In this embodiment, the node type can be classified according to services, for example: NB terminal, LTE terminal.

[0068] In this embodiment, the node type can be classified according to the level where the node is located, for example: different power levels, supported antenna configurations (such as whether circular polarization is supported, etc.);

[0069] In this embodiment, the node type can be classified according to the node capabilities, for example: whether pre-compensation capabilities are supported, etc.

[0070] The node type can also be classified according to the site type, for example: ordinary terminal, relay node, IAB node, etc.

[0071] If this node is an ordinary terminal and the base station only allows IAB terminals to access the network, at this time, the ordinary terminal should be prohibited from accessing the network.

[0072] In an exemplary embodiment, when the access condition is not met, stopping accessing the network includes:

[0073] When the signal power of the uplink transmission is greater than the uplink signal power threshold, stop accessing the network.

[0074] In an exemplary embodiment, when the access condition is not met, stopping accessing the network includes:

[0075] Determine the distance between the second communication node and the first communication node based on the location information of this node;

[0076] When the distance is within the non-allowed access range, stop accessing the network.

[0077] In an exemplary embodiment, when the access condition is not met, stopping accessing the network includes:

[0078] When the location information of this node is not within the service range of the second communication node, stop accessing the network.

[0079] In this embodiment, the service range can be understood as the geographical location range that the second communication node can serve, that is, the geographical range.

[0080] The user obtains their own location through positioning and determines whether they are within the area served by the base station. If the user's location is not within the area served by the base station, the user stops accessing the network.

[0081] In an exemplary embodiment, the stopping of accessing the network when the access condition is not met includes:

[0082] When the operator required by this node is different from the operator served by the second communication node, stop accessing the network.

[0083] Base stations of different operators can be separate, so a base station of one operator can restrict the access of users of another operator.

[0084] In an exemplary embodiment, the stopping of accessing the network when the access condition is not met includes:

[0085] When the slice type of this node is not the slice service type supported by the second communication node and this node does not allow the slice type to change, stop accessing the network.

[0086] In an exemplary embodiment, when the access condition is not met, the stopping of accessing the network includes:

[0087] Determine the time offset range and / or frequency offset range of this node;

[0088] When the time offset range exceeds the time offset range that the second communication node can tolerate and / or the frequency offset range exceeds the frequency offset range that the second communication node can tolerate, stop accessing the network.

[0089] In this embodiment, the base station sets the tolerance ranges of the time offset (Timing Offset, TO) and frequency offset (Frequency Offset, FO), and restricts the access of users with TO or FO greater than the tolerance range.

[0090] Furthermore, the base station first notifies the user of its own status information, the tolerable TO range, and the FO range. The user estimates the TO range and FO range that they can achieve based on the status information of the base station and themselves. If the TO range or FO range exceeds the tolerance range of the base station, the user stops accessing the network.

[0091] In an exemplary embodiment, when the access condition is not met, the stopping of accessing the network includes:

[0092] Determine the list of nodes that this node can access;

[0093] When the second communication node is not in the list of nodes that this node can access, stop accessing the network.

[0094] In this embodiment, the content of the node list may be the type of SIB, PLMN arrangement, frequency band allocation, cell ID, etc. The first communication node may determine whether the second communication node can access based on the second communication node information and the content of the node list.

[0095] In this embodiment, the node list at the initial access may be obtained through the information locally stored by the first communication node. During the handover access, the node list may also be configured by the source base station.

[0096] In an exemplary implementation manner, when the access condition is not met, stopping accessing the network includes:

[0097] When it is determined that the resource block for multi-access is overloaded, stop accessing the overloaded resource block.

[0098] In an exemplary implementation manner, when the access condition is not met, stopping accessing the network includes:

[0099] When it is determined that the operator served by the beam where the node is located is inconsistent with the operator of the node, stop accessing the beam where the node is located.

[0100] In one embodiment, the present application provides an access control method. Figure 3 It is a schematic flowchart of an access control method provided by an embodiment of the present application. This method can be applicable to the situation of determining whether a device is allowed to access. This method can be executed by the access control device provided by the present application, and the access control device can be implemented by software and / or hardware. The method is applied to the second communication node.

[0101] As Figure 3 shown, the access control method provided by the embodiment of the present application mainly includes step S21.

[0102] S21. Send an access configuration message to the first communication node, where the access configuration message is used for the first node to determine whether to access the network.

[0103] In an exemplary implementation manner, the method further includes:

[0104] Obtain the first communication node information;

[0105] Based on the first communication node information, determine whether to allow the first communication node to access the network.

[0106] In this embodiment, when it is determined to allow the first communication node to access the network, generate an access permission instruction and send it to the first communication node to allow the first communication node to access the network.

[0107] When it is determined that the first communication node is not allowed to access the network, a non-access instruction is generated and sent to the first communication node to prohibit the first communication node from accessing the network.

[0108] How the second communication node determines whether to allow the first communication node to access the network can be referred to the subsequent specific application embodiments, which will not be described in this embodiment.

[0109] In an exemplary embodiment, the first communication node information includes one or more of the following:

[0110] The time offset range of the first communication node;

[0111] The frequency offset range of the first communication node;

[0112] The uplink signal power of the first communication node;

[0113] The type of the first communication node;

[0114] The service operator corresponding to the first communication node;

[0115] The required service range of the first communication node;

[0116] The slice service type supported by the first communication node;

[0117] The priority category of the first communication node and the load corresponding to the priority category.

[0118] The location information of the first communication node.

[0119] In an exemplary embodiment, the access configuration message includes one or more of the following:

[0120] Access conditions;

[0121] Access indication;

[0122] The second communication node information.

[0123] In an exemplary embodiment, sending the access conditions to the first communication node includes:

[0124] Broadcasting the access conditions to the first communication node through broadcast signaling;

[0125] Pre-storing the access conditions in the SIM or USIM card of the first communication node.

[0126] In an exemplary embodiment, sending the second communication node information to the first communication node includes one or more of the following:

[0127] Broadcasting the second communication node information to the first communication node through broadcast signaling;

[0128] Implicitly transmit the second communication node information through the SIB type;

[0129] Implicitly transmit the second communication node information through different frequency bands, PLMN arrangements, and cell IDs.

[0130] In an exemplary embodiment, the access conditions include one or more of the following:

[0131] The time offset range tolerable by the second communication node;

[0132] The frequency offset range tolerable by the second communication node;

[0133] The uplink signal power threshold set by the second communication node;

[0134] The node types allowed to access by the second communication node;

[0135] The operator served by the second communication node;

[0136] The service range of the second communication node;

[0137] The slice service types supported by the second communication node;

[0138] The priority class of the first communication node and the load corresponding to the priority class.

[0139] In an exemplary embodiment, determining whether to allow the first communication node to access the network based on the first communication node information includes:

[0140] Determine the priority class of the first communication node; in the case of overload of this node, do not allow the first communication node with a low priority to access the network.

[0141] In this embodiment, in the case of overload of this node, do not allow the first communication node with a low priority to access the network, generate a non - access instruction and send it to the first communication node with a low priority to prohibit the first communication node with a low priority from accessing the network.

[0142] This application provides a method for initiating access restriction and information transmission.

[0143] It should be noted that the access restriction can be initiated either on the network side or on the user side. The network side in this application can be understood as the above - mentioned base station or the second communication node, and the user side in this embodiment can be understood as the user equipment, user terminal, or the first communication node.

[0144] In an application example, the base station initiates access restriction on the user according to certain conditions.

[0145] The first method: The base station obtains the type and status information of the user and determines whether the user meets the access conditions. If the user does not meet the access conditions, the base station sends an indication of non - access to the user to restrict its access. The user does not need to know the information related to access restrictions, but its type and status information need to be known by the base station first, and this condition can be met during handover. For this case, the user's information can be transferred from the source base station to the target base station through the core network, and the base station only needs to transfer an access indication to the target user to indicate whether access to the network is allowed.

[0146] The second method: The base station does not know the type and status information of the user, but can transfer the access conditions to the user so that the user can determine whether it meets the access conditions. If not, the user will not initiate an access to the base station.

[0147] For the second method, the following information transfer methods can be considered:

[0148] Method 1: Broadcast the base station access conditions to the user through signaling, which can be done in the following ways of sub - options:

[0149] (1) Define a bit field in broadcast signaling such as MIB or SIB to transfer the base station access conditions, such as the time offset and frequency offset ranges that the base station can tolerate. The length of the bit field is determined by the access conditions. For example, if the access condition is that the time - frequency offset is less than a certain range, the number of bits required is determined by the maximum range and quantization accuracy.

[0150] (2) Define a bit field in broadcast signaling such as MIB or SIB to transfer the type of the base station, and the access conditions corresponding to each type of base station are pre - stored locally in the user. The length of the bit field is X = ceil(log2(NumOfBSType)), where NumOfBSType is the number of types of base stations.

[0151] (3) Implicitly transfer the base station type through the type of SIB. Each type of base station corresponds to a type of SIB, and the user determines the base station type according to the decoded SIB type. The access conditions corresponding to each type of base station are pre - stored locally in the user.

[0152] (4) Implicitly transfer the base station type by using information such as different frequency bands, PLMN arrangements, and cell IDs. The user determines the type of the base station according to the corresponding information. The access conditions corresponding to each type of base station are pre - stored locally in the user.

[0153] Method 2: Pre - store the base station access conditions in the user's SIM or uSIM card. After the user obtains the base station information, it can obtain the access conditions of the base station by looking up the pre - stored information, without consuming additional signaling for transferring the access conditions.

[0154] It should be noted that if the access restriction is initiated only in some scenarios or time periods, an additional 1-bit enable information needs to be used in the MIB or SIB to identify the validity of the access restriction condition.

[0155] In an application example, the user actively initiates an access restriction according to certain conditions.

[0156] The first type: The user attempts to access the base station and stops accessing the base station after failing a certain number of times. In this case, no additional signaling interaction is required between the user and the base station.

[0157] The second type: The user stores in advance in the SIM or uSIM the types of base stations that can be accessed. If the base station type does not meet the requirements, the user will not initiate an access. It should be noted that even if the base station is of a type that the user can access, the user needs to determine whether the access conditions of the base station are met before initiating an access.

[0158] The access restriction can be triggered by various factors. When the trigger scenarios are different, the initiation process of the access restriction and the content of the messages to be transmitted will be different. This application will explain the access initiation process and the content of the messages to be transmitted for different trigger scenarios in sequence.

[0159] In an application implementation, the base station sets the tolerance ranges of the timing offset (TO) and frequency offset (FO), and restricts the access of users with TO or FO greater than the tolerance range.

[0160] In NTN, since the air communication nodes are usually far from the ground users and have high mobility, the communication link is often affected by large delay and high Doppler. To handle the large delay and high Doppler, the location and speed information of the base station and the user are usually provided to the user so that it can calculate the corresponding TO and FO and perform pre-compensation. However, due to certain errors in the positioning information, the calculated TO and FO will also have corresponding errors. If the final residual TO or FO is too large and exceeds the tolerance range that the base station can tolerate, the access of these users should be restricted.

[0161] In this case, the access restriction can be initiated by the base station.

[0162] At initial access, the base station first transmits an access configuration message to the user, including its own status information (location, speed, and corresponding error ranges) and the tolerable TO and FO thresholds. The user estimates the achievable TO and FO calculation accuracies based on the status information of the base station and itself, and obtains the remaining TO and FO ranges after pre-compensation. If the maximum value of TO is greater than the TO threshold or the maximum value of FO is greater than the FO threshold, it is considered that the access is restricted, and the user stops accessing the network; otherwise, it is considered that the access is not restricted due to excessive TO and FO.

[0163] At handover, the target base station obtains the user information from the source base station through the core network and estimates the remaining TO and FO ranges after pre-compensation. If the maximum value of TO is greater than the TO threshold or the maximum value of FO is greater than the FO threshold, it is considered that the access is restricted, and an indication of not allowing access is sent to the user; otherwise, it is considered that the access is not restricted due to excessive TO and FO.

[0164] In an application implementation, the base station only allows specific types of users to access.

[0165] Different users have different hardware configurations, different communication capabilities and functions, so multiple user categories (UE category) will be divided. The base station can only serve users of the target type and restrict the access of other types of users.

[0166] For example: The base station only allows users with a high enough power class to access and restricts the access of users with a low power class to improve network performance. At this time, the UE category is divided according to the power class of the user. Users with different power classes will be divided into different UE categories, and the network can restrict the access of users belonging to a specific UE category.

[0167] For example: The base station only allows integrated access and backhaul (IAB) terminals to access, mainly serving wireless backhaul work, thus restricting the access of ordinary terrestrial users. At this time, the UE category is divided according to the terminal type of the user, including ordinary handheld terminals, IAB terminals, etc. Users with different terminal types will be divided into different UE categories, and the network can restrict the access of users belonging to a specific UE category.

[0168] For example, the base station only serves users of the narrow band internet of things (NB-IoT) service type, restricting the access of users of the LTE and NR service types to improve network performance. At this time, the UE category is divided according to the service type of the user. Users with different service types will be divided into different UE categories, and the network can restrict the access of users belonging to a specific UE category.

[0169] In these cases, the access restriction can be initiated by the base station.

[0170] At initial access, the base station first transmits a list to the user, which contains the UE categories supported by the base station. If the user's UE category is not in this list, it is considered that the access is restricted and the user stops accessing the network; otherwise, it is considered that the access is not restricted due to the UE category.

[0171] At handover, the target base station obtains the user information from the source base station through the core network and learns the user's UE category. If the user's UE category is not the type that it can serve itself and the serviceable types will not change in a short time, it is considered that the access is restricted and an indication of not allowing access is sent to the user; if the user's UE category cannot be served by itself temporarily but is expected to be served after a period of time, it is considered that the access is temporarily restricted, an indication of delaying access is sent to the user and a waiting time is configured; otherwise, it is considered that the access is not restricted due to the UE category.

[0172] In an application implementation manner, the base station sets an uplink signal power threshold to restrict the access of users with an uplink signal power greater than the threshold.

[0173] When multiple users access, users with strong signal power will cause serious interference to users with weak signal power, thus reducing the access success rate of users with weak signal power. Therefore, the base station needs to restrict the access of users with too high uplink signal power to reduce the interference to other users.

[0174] In this case, the access restriction can be initiated by the base station.

[0175] At initial access, the base station can inform the user whether the access is restricted in the following ways:

[0176] Method 1: If the user's transmission power is known, the power of the uplink signal received by the base station is determined by the distance between the base station and the user. Therefore, the base station first transmits an access configuration message to the user, including its own location information and the distance threshold for restricted access. The user estimates the distance from the base station based on the location information of the base station and itself. If the estimated distance is less than the distance threshold, it is considered that access is restricted and the user stops accessing the network; otherwise, it is considered that access is not restricted due to excessive uplink signal power.

[0177] Method 2: The base station directly measures the received power of the uplink signal. If the received power is greater than the power threshold set by the base station and the power threshold will not change in a short period of time, it is considered that access is restricted and an indication of not allowing access is sent to the user; if the received power is greater than the power threshold set by the base station, but it is expected that the power threshold will increase after a period of time, it is considered that access is temporarily restricted, an indication of deferring access is sent to the user and a waiting time is configured; otherwise, it is considered that access is not restricted due to excessive uplink signal power.

[0178] Method 3: The base station first transmits an access configuration message to the user, including its own location information and the received power threshold for restricted access. The user estimates the distance from the base station based on the location information of the base station and itself, and thus calculates the path loss. If the user's transmission power minus the path loss is still greater than the received power threshold of the base station, it is considered that access is restricted and the user stops accessing the network; otherwise, it is considered that access is not restricted due to excessive uplink signal power.

[0179] When handing over, the base station can inform the user whether access is restricted in the following ways:

[0180] Method 1: The target base station obtains the user location information from the source base station through the core network and calculates the distance between the user and the target base station. If the calculated distance is less than the distance threshold, it is considered that access is restricted and an indication of not allowing access is sent to the user; otherwise, it is considered that access is not restricted due to excessive uplink signal power.

[0181] Method 2: The target base station directly measures the received power of the uplink signal. If the received power is greater than the power threshold set by the base station and the power threshold will not change in a short period of time, it is considered that access is restricted and an indication of not allowing access is sent to the user; if the received power is greater than the power threshold set by the base station, but it is expected that the power threshold will increase after a period of time, it is considered that access is temporarily restricted, an indication of deferring access is sent to the user and a waiting time is configured; otherwise, it is considered that access is not restricted due to excessive uplink signal power.

[0182] Method 3: The target base station obtains the user location information and its transmission power from the source base station through the core network. Calculate the distance between the user and the target base station to obtain the path loss. If the transmission power of the user minus the path loss is still greater than the receiving power threshold of the base station, it is considered that the access is restricted, and an indication of not allowing access is sent to the user; otherwise, it is considered that the access is not restricted due to excessive uplink signal power.

[0183] In an application implementation, the base station restricts the access of users of a specific operator.

[0184] Base stations of different operators can be separate, so a base station of one operator can restrict the access of users of another operator. Usually, operators are distinguished by PLMN identifiers.

[0185] In this case, the access restriction can be initiated by the base station or the user.

[0186] Method 1: Initiated by the base station. At initial access and handover, the base station first transmits its own information to the user, including the list of PLMNs supported by the base station. If the PLMN that the user can access is not in the supported PLMN list, it is considered that the access is restricted, and the user stops accessing the network; otherwise, it is considered that the access is not restricted due to non - supported PLMN.

[0187] Method 2: Initiated by the user. At initial access and handover, the user determines the PLMN supported by the base station through pre - stored information. If the PLMN that the user can access is not in the supported PLMN list, it is considered that the access is restricted, and the user stops accessing the network; otherwise, it is considered that the access is not restricted due to non - supported PLMN.

[0188] In an application implementation, the base station restricts the access of users in a specific area.

[0189] Satellite base stations usually have a very wide coverage range and can cover across countries. However, due to policies and other reasons, the base station may only serve users in a specific area and restrict the access of users in other areas.

[0190] In this case, the access restriction can be initiated by the base station.

[0191] At initial access, the base station can inform the user whether the access is restricted in the following ways:

[0192] Method 1: The base station first transmits an access configuration message to the user, including the geographical scope of its service. This geographical scope can be determined by a series of coordinate points. The user obtains its own location information through positioning. If the user's location is outside the service geographical scope, it is considered that the access is restricted, and the user stops accessing the network; otherwise, it is considered that the access is not restricted due to being outside the service geographical scope.

[0193] Method 2: If the user cannot locate its own position or directly accesses the network regardless of the geographical restriction, the base station allows the user to enter first. After the access is completed, the base station measures the user's position through satellite positioning or requests the user to report the position information. If the user's position is not within the geographical scope of the base station's service, it is considered that the access is restricted, and the base station disconnects the connection and sends an indication of not allowing access to the user; otherwise, it is considered that the access is not restricted due to being outside the service geographical scope.

[0194] During handover, the target base station obtains the user's location information from the source base station through the core network. If the user's location is not within the geographical scope of the base station's service, it is considered that the access is restricted, and an indication of not allowing access is sent to the user; otherwise, it is considered that the access is not restricted due to being outside the service geographical scope.

[0195] In an applied implementation, the base station restricts the access of users of specific network slice service types.

[0196] The core network of NR supports multiple network slices, but the slice service types supported by the base station may be different. If the network slice type subscribed by the user from the operator is different from the slice type supported by the base station and does not accept the change of the slice type, its access should be restricted.

[0197] In this case, the access restriction can be initiated by the base station.

[0198] At initial access, the base station first transmits a list to the user, which contains the network slice service types supported by the base station. If the user's network slice type is not in this list and the user does not allow the change of the slice type, it is considered that the access is restricted, and the user stops accessing the network; otherwise, it is considered that the access is not restricted due to the network slice type.

[0199] During handover, the target base station obtains the user's slice type and whether the user allows the change of the slice type from the source base station through the core network. If the user's slice type is not the type supported by the base station and the user does not allow the change of the slice type, it is considered that the access is restricted, and the base station sends an indication of not allowing access to the user; otherwise, it is considered that the access is not restricted due to the network slice type.

[0200] In an applied implementation, the user only accesses base stations of the target type.

[0201] In some dedicated networks, to improve efficiency, users only access pre-set base station types. For example, for an Internet of Things (IoT) network deployed outdoors in the suburbs, it can be specified that its users only access air-to-ground (ATG) base stations designed specifically for this network to avoid inefficient access to other general base stations.

[0202] In this case, the access restriction can be initiated by the user.

[0203] At initial access and handover, after receiving the base station information, the user determines whether the base station is an accessible type based on the base station list pre-stored in the SIM or uSIM card. If the base station is not in the pre-stored list of allowed access base stations, it is considered that the access is restricted and the user stops accessing the network; otherwise, it is considered that the access is not restricted due to the base station type.

[0204] In an application implementation, the base station randomly restricts the access of some users according to the load.

[0205] When the base station is overloaded, the received access requests exceed its capacity. To avoid performance degradation caused by congestion, the base station can restrict the access of some users even if other access restriction conditions are met.

[0206] In this case, the access restriction can be initiated by the base station.

[0207] At initial access and handover, the base station divides users into multiple access categories with different priorities and informs users whether the access is restricted in the following ways:

[0208] Method 1: The base station directly transmits an access indication to the user. The base station sets a load threshold for each access category according to the priority. Usually, the higher the priority of the user, the higher the set threshold. If the load of the base station is greater than the load threshold of a certain access category, the access indication of this access category is set to not allow access or delay access. At access, the base station sends a list to the user, which contains the access indications of each access category and configures a corresponding waiting time for the delay access indication. If the indication of the access category to which the user belongs in the list is not allow access, it is considered that the access is restricted and the user stops accessing the network; if the indication of the access category to which the user belongs in the list is delay access, it is considered that the access is temporarily restricted and the user stops accessing the network within the waiting time; otherwise, it is considered that the access is not restricted due to the access category.

[0209] Method 2: The base station directly transmits the random number threshold to the user for soft restriction. The base station sets a random number threshold for each access category according to its own load and priority. Generally, the lower the load and the higher the priority of the access category, the higher the set threshold. When accessing, the base station sends a list to the user, which contains the random number thresholds of each access category. The user generates a random number locally. If the random number is greater than the threshold corresponding to the access category to which the user belongs in the list, it is considered that the current access is restricted, and the user stops accessing the network for a random period of time; otherwise, it is considered that the access will not be restricted due to the access category.

[0210] The base station can divide wireless resources (frequency, time, beam, etc.) to serve different users. Therefore, it is possible to consider further implementing access restriction based on wireless resources, that is, a base station sets different access restriction conditions for different resource blocks, making the network configuration more flexible and efficient.

[0211] In an application implementation manner, the base station restricts users from accessing overloaded resource blocks.

[0212] Each resource block (such as a frequency band) can be regarded as a channel. When this channel is overloaded, new user access requests should be restricted to reduce the load.

[0213] In this case, the access restriction can be initiated by the base station.

[0214] Method 1: When a user attempts to access through the channel corresponding to a certain resource block, the base station estimates the load of this channel, such as the number of users already accessing, etc. If the load is greater than the threshold set by the base station, it is considered that the access is restricted, and the base station sends a suspension instruction to the user attempting to access the network through this channel and configures a waiting time; otherwise, it is considered that the access will not be restricted due to the overload of the resource block.

[0215] Method 2: The base station transmits the load situation of the channels corresponding to each resource block to the user, such as the quality of service (QoS) that the base station can provide through this channel. If the QoS that the user can obtain is lower than the threshold due to channel overload, it is considered that the access is temporarily restricted, and the user waits for a period of time and then attempts to access through this channel, or attempts to select the channel corresponding to other resource blocks to access; otherwise, it is considered that the access will not be restricted due to the overload of the resource block.

[0216] In an application implementation manner, different resource blocks of the base station belong to different entities, and users with different affiliations are restricted from accessing.

[0217] A satellite base station can generate dozens of beams, and the diameter of each beam can reach dozens to hundreds of kilometers. Therefore, a satellite base station can cover a large area, resulting in a situation where different beams are located in different countries. If the operators in different countries are different, then the beams corresponding to each country need to restrict the access of users in other countries. Therefore, beam-based access restriction is necessary.

[0218] In this case, the access restriction can be initiated by the base station or the user.

[0219] Method 1: Initiated by the base station. During initial access and handover, the base station first transmits the information of the beam where the user is located to the user, including the list of PLMNs supported by the beam. If the PLMN that the user can access is not in the supported PLMN list, it is considered that the access is restricted, and the user stops accessing the network from this beam; otherwise, it is considered that the access is not restricted due to the non - support of the PLMN.

[0220] Method 2: Initiated by the user. During initial access and handover, the user determines the PLMN supported by the beam where the user is located through pre - stored information. If the PLMN that the user can access is not in the supported PLMN list, it is considered that the access is restricted, and the user stops accessing the network from this beam; otherwise, it is considered that the access is not restricted due to the non - support of the PLMN.

[0221] In one embodiment, the present application provides an access control device, Figure 4 which is a schematic structural diagram of an access control device provided by an embodiment of the present application. This device can be applicable to the situation of determining whether a device is allowed to access. The access control device can be implemented by software and / or hardware, and the device is configured in the first communication node.

[0222] As Figure 4 shown, the access control device provided by the embodiment of the present application mainly includes a first receiving module 31 and a determining module 32. Among them,

[0223] The first receiving module 31 is configured to receive an access configuration message transmitted by the second communication node;

[0224] The determining module 32 is configured to determine whether to access the network based on the access configuration information.

[0225] In an exemplary embodiment, the device further includes: a second sending module, where,

[0226] The second sending module is configured to send the first communication node information to the second communication node, where the first communication node information is used for the second communication node to determine whether to allow the first communication node to access the network.

[0227] In an exemplary embodiment, the determination module 32 is configured to stop accessing the network when the number of failed attempts to access the network reaches a preset number.

[0228] In an exemplary embodiment, the access configuration message includes one or more of the following:

[0229] Access conditions;

[0230] Access indication;

[0231] Second communication node information.

[0232] In an exemplary embodiment, the determination module 32 is configured to determine whether to access the network based on the access indication sent by the second communication node.

[0233] In an exemplary embodiment, the access indication includes one or more of the following:

[0234] Access allowed;

[0235] Access not allowed;

[0236] Access postponed.

[0237] In an exemplary embodiment, the determination module 32 is configured to stop accessing the network when the access conditions are not met.

[0238] In an exemplary embodiment, the determination module 32 is configured to determine the node type of this node; when the node type of this node is not the service type of the second communication node, stop accessing the network.

[0239] In an exemplary embodiment, the determination module 32 is configured to stop accessing the network when the signal power of the uplink transmission is greater than the uplink signal power threshold.

[0240] In an exemplary embodiment, the determination module 32 is configured to determine the distance between the second communication node and the first communication node based on the location information of this node; when the distance is within the non-accessible range, stop accessing the network.

[0241] In an exemplary embodiment, the determination module 32 is configured to stop accessing the network when the location information of this node is not within the service range of the second communication node.

[0242] In an exemplary embodiment, the determination module 32 is configured to stop accessing the network when the operator required by this node is different from the operator served by the second communication node.

[0243] In an exemplary embodiment, a determination module 32 is configured to stop accessing the network when the slice type of this node is not the slice service type supported by a second communication node and this node does not allow the slice type to change.

[0244] In an exemplary embodiment, a determination module 32 is configured to determine the time offset range and frequency offset range of this node; and stop accessing the network when the time offset range exceeds the time offset range tolerable by the second communication node and / or the frequency offset range exceeds the frequency offset range tolerable by the second communication node.

[0245] In an exemplary embodiment, a determination module 32 is configured to determine a list of nodes accessible to this node; and stop accessing the network when the second communication node is not in the list of nodes accessible to this node.

[0246] In an exemplary embodiment, a determination module 32 is configured to stop accessing the overloaded resource block when it is determined that the resource block for multi-access is overloaded.

[0247] In an exemplary embodiment, a determination module 32 is configured to stop accessing the beam where this node is located when it is determined that the operator served by the beam where this node is located is inconsistent with the operator of this node.

[0248] The access control device provided in this embodiment can execute the access control method provided in any embodiment of the present invention, and has corresponding functional modules and beneficial effects for executing this method. For technical details not described in detail in this embodiment, reference can be made to the access control method provided in any embodiment of the present invention.

[0249] It should be noted that in the embodiments of the above access control device, the various units and modules included are only divided according to functional logic, but are not limited to the above division, as long as the corresponding functions can be realized; in addition, the specific names of the functional units are only for the convenience of mutual distinction and do not limit the protection scope of this application.

[0250] In an embodiment, the present application provides an access control device Figure 5 is a schematic flowchart of an access control device provided in an embodiment of the present application. This device can be applicable to the situation of determining whether a device is allowed to access. This access control device can be implemented by software and / or hardware, and the device is configured in a second communication node.

[0251] As Figure 5 shown, the access control device provided in an embodiment of the present application mainly includes a first sending module 41.

[0252] Among them, the first sending module 41 is configured to send an access configuration message to the first communication node, where the access configuration message is used for the first node to determine whether to access the network.

[0253] In an exemplary embodiment, the device further includes:

[0254] An acquisition module, configured to acquire first communication node information;

[0255] A second determination module, configured to determine whether to allow the first communication node to access the network based on the first communication node information.

[0256] In an exemplary embodiment, the first communication node information includes one or more of the following:

[0257] The time offset range and frequency offset range of the first communication node;

[0258] The uplink signal power of the first communication node;

[0259] The type of the first communication node;

[0260] The service operator corresponding to the first communication node;

[0261] The required service range of the first communication node;

[0262] The slice service type supported by the first communication node;

[0263] The priority category of the first communication node and the load corresponding to the priority category.

[0264] The location information of the first communication node.

[0265] In an exemplary embodiment, the access configuration message includes one or more of the following:

[0266] Access conditions;

[0267] Access indication;

[0268] Second communication node information.

[0269] In an exemplary embodiment, the first sending module 41 is configured to perform one of the following operations:

[0270] Broadcast the access conditions to the first communication node through broadcast signaling;

[0271] Pre-store the access conditions in the SIM or USIM card of the first communication node.

[0272] In an exemplary embodiment, the first sending module 41 is configured to perform one of the following operations:

[0273] Broadcast the second communication node information to the first communication node through broadcast signaling;

[0274] Implicitly transmit the second communication node information through the SIB type;

[0275] Implicitly transmit the second communication node information through different frequency bands, PLMN arrangements, and cell IDs.

[0276] In an exemplary embodiment, the access conditions include one or more of the following:

[0277] The time offset range and frequency offset range that the second communication node can tolerate;

[0278] The uplink signal power threshold set by the second communication node;

[0279] The node types allowed to access by the second communication node;

[0280] The operator served by the second communication node;

[0281] The service range of the second communication node;

[0282] The slice service types supported by the second communication node;

[0283] The priority class of the first communication node and the load corresponding to the priority class.

[0284] In an exemplary embodiment, the second determination module is configured to determine the priority class of the first communication node; in the case of overload of this node, low-priority first communication nodes are not allowed to access the network.

[0285] The access control device provided in this embodiment can execute the access control method provided in any embodiment of the present invention, and has the corresponding functional modules and beneficial effects for executing this method. For technical details not described in detail in this embodiment, reference can be made to the access control method provided in any embodiment of the present invention.

[0286] It should be noted that in the embodiments of the above access control device, the various units and modules included are only divided according to functional logic, but are not limited to the above division, as long as the corresponding functions can be implemented; in addition, the specific names of the functional units are only for the convenience of mutual distinction and do not limit the protection scope of this application.

[0287] This application embodiment also provides a device, Figure 6 It is a schematic structural diagram of a device provided in this application embodiment, as Figure 6As shown, the device includes a processor 610, a memory 620, an input device 630, an output device 640, and a communication device 650; the number of processors 610 in the device can be one or more, Figure 6 and one processor 610 is taken as an example herein; the processor 610, the memory 620, the input device 630, and the output device 640 in the device can be connected through a bus or other means, Figure 6 and taking connection through a bus as an example herein.

[0288] The memory 620, as a computer-readable storage medium, can be used to store software programs, computer-executable programs, and modules, such as the program instructions / modules corresponding to the access control method in the embodiments of the present application (for example, the first receiving module 31 and the determining module 32 in the access control device), and also such as the program instructions / modules corresponding to the access control method in the embodiments of the present application (for example, the first sending module 41 in the access control device). The processor 610 executes various functional applications and data processing of the device by running the software programs, instructions, and modules stored in the memory 620, that is, implements any method provided in the embodiments of the present application.

[0289] The memory 620 may mainly include a program storage area and a data storage area. Among them, the program storage area can store an operating system and application programs required for at least one function; the data storage area can store data created according to the use of the device, etc. In addition, the memory 620 may include a high-speed random access memory, and may also include a non-volatile memory, such as at least one magnetic disk storage device, a flash memory device, or other non-volatile solid-state storage devices. In some instances, the memory 620 may further include a memory remotely set relative to the processor 610, and these remote memories can be connected to the device through a network. Examples of the above network include but are not limited to the Internet, an enterprise intranet, a local area network, a mobile communication network, and combinations thereof.

[0290] The input device 630 can be used to receive input digital or character information, and generate key signal inputs related to the user settings and function controls of the device. The output device 640 may include a display device such as a display screen.

[0291] The communication device 650 may include a receiver and a transmitter. The communication device 650 is configured to perform information sending and receiving communication according to the control of the processor 610.

[0292] It should be noted that in the case where the above device is a first communication node, the processor 610 executes various functional applications and data processing by running the program stored in the system memory 620, for example, implements the access control method provided in the embodiments of the present application, and this method includes:

[0293] Receive the access configuration message transmitted by the second communication node;

[0294] Based on the access configuration message, determine whether to access the network.

[0295] Of course, those skilled in the art can understand that the processor 610 can also implement the technical solutions of the access control method provided in any embodiment of the present application. The hardware structure and functions of this device can be referred to the content explanation of this embodiment.

[0296] It should be noted that when the above device is the second communication node, the processor 610 executes various functional applications and data processing by running the program stored in the system memory 620, for example, implementing the access control method provided in the embodiment of the present application. The method includes:

[0297] Send an access configuration message to the first communication node, where the access configuration message is used for the first node to determine whether to access the network.

[0298] Of course, those skilled in the art can understand that the processor 610 can also implement the technical solutions of the access control method provided in any embodiment of the present application. The hardware structure and functions of this device can be referred to the content explanation of this embodiment.

[0299] The embodiment of the present application also provides a storage medium containing computer-executable instructions. The computer-executable instructions are used to execute an access control method when executed by a computer processor. The method is applied to the first communication node and includes:

[0300] Receive the access configuration message transmitted by the second communication node;

[0301] Based on the access configuration message, determine whether to access the network.

[0302] Of course, for the storage medium containing computer-executable instructions provided in the embodiment of the present application, the computer-executable instructions are not limited to the method operations as described above, and can also execute the related operations in the access control method provided in any embodiment of the present application.

[0303] The embodiment of the present application also provides a storage medium containing computer-executable instructions. The computer-executable instructions are used to execute an access control method when executed by a computer processor. The method is applied to the second communication node and includes:

[0304] Send an access configuration message to the first communication node, where the access configuration message is used for the first node to determine whether to access the network.

[0305] Of course, for a storage medium containing computer-executable instructions provided in an embodiment of the present application, the computer-executable instructions are not limited to the access control method operations described above, but can also execute relevant operations in the receiving method provided in any embodiment of the present application.

[0306] From the above description of the embodiments, those skilled in the art can clearly understand that the present application can be implemented by means of software and necessary general-purpose hardware. Of course, it can also be implemented by hardware, but in many cases the former is a better implementation method. Based on such an understanding, the technical solution of the present application, in essence, or the part that contributes to the prior art can be embodied in the form of a software product. The computer software product can be stored in a computer-readable storage medium, such as a floppy disk, a read-only memory (ROM), a random access memory (RAM), a flash memory (FLASH), a hard disk, or an optical disc of a computer, and includes several instructions for causing a computer device (which can be a personal computer, a server, or a network device, etc.) to execute the methods described in various embodiments of the present application.

[0307] The above is only an exemplary embodiment of the present application and is not intended to limit the protection scope of the present application.

[0308] Those skilled in the art should understand that the term user terminal covers any suitable type of wireless user equipment, such as a mobile phone, a portable data processing device, a portable network browser, or a vehicle-mounted mobile station.

[0309] Generally speaking, various embodiments of the present application can be implemented in hardware or a dedicated circuit, software, logic, or any combination thereof. For example, some aspects can be implemented in hardware, while other aspects can be implemented in firmware or software that can be executed by a controller, a microprocessor, or other computing devices, although the present application is not limited thereto.

[0310] Embodiments of the present application can be implemented by a data processor of a mobile device executing computer program instructions, for example, in a processor entity, or by hardware, or by a combination of software and hardware. The computer program instructions can be assembly instructions, instruction set architecture (ISA) instructions, machine instructions, machine-related instructions, microcode, firmware instructions, status setting data, or source code or object code written in any combination of one or more programming languages.

[0311] Any block diagram of a logical process in the attached drawings of this application may represent a program step, or may represent interconnected logical circuits, modules, and functions, or may represent a combination of program steps and logical circuits, modules, and functions. A computer program may be stored in a memory. The memory may be of any type suitable for the local technical environment and may be implemented using any suitable data storage technology, such as but not limited to read-only memory (ROM), random access memory (RAM), optical memory devices and systems (Digital Versatile Disc DVD or CD-ROM), etc. A computer-readable medium may include a non-transitory storage medium. A data processor may be of any type suitable for the local technical environment, such as but not limited to general-purpose computers, special-purpose computers, microprocessors, digital signal processors (DSPs), application-specific integrated circuits (ASICs), field-programmable gate arrays (FPGAs), and processors based on multi-core processor architectures.

[0312] By way of illustrative and non-limiting examples, a detailed description of exemplary embodiments of this application has been provided above. However, various modifications and adaptations of the above embodiments will be apparent to those skilled in the art when considered in conjunction with the accompanying drawings and the claims, without departing from the scope of the invention. Accordingly, the proper scope of the invention will be determined in accordance with the claims.

Claims

1. An access control method, characterized in that, The method is applied to a first communication node and includes: Receiving an access configuration message transmitted by a second communication node; Determining whether to access the network based on the access configuration message; Wherein, the access configuration message includes the geographical scope of its own service, and the first communication node obtains its own location information through positioning; If the location of the first communication node is outside the geographical scope of the service, it is determined that the access of the first communication node is restricted, and then the first communication node stops accessing the network; otherwise, it is determined that the access of the first communication node is not restricted due to being outside the service area; If the first communication node cannot locate its own position or directly accesses the network regardless of geographical restrictions, the second communication node allows the first communication node to access first.

2. The method according to claim 1, characterized in that, The method further includes: Sending first communication node information to the second communication node, where the first communication node information is used for the second communication node to determine whether to allow the first communication node to access the network.

3. The method according to claim 1, wherein The method further includes: Stopping accessing the network when the number of failed attempts to access the network reaches a preset number.

4. The method according to claim 1, wherein The access configuration message includes one or more of the following: Access conditions; Access indication; Second communication node information.

5. The method according to claim 4, characterized in that The determining whether to access the network based on the access configuration message includes: Determining whether to access the network based on the access indication sent by the second communication node.

6. The method according to claim 4, wherein The access indication includes one or more of the following: Allowed to access; Not allowed to access; Suspended access.

7. The method according to claim 4, wherein The determining whether to access the network based on the access configuration message includes: Stopping accessing the network when the access conditions are not met.

8. The method according to claim 7, wherein The stopping accessing the network when the access conditions are not met includes: Determining the node type of this node; Stopping accessing the network when the node type of this node is not the service type of the second communication node.

9. The method according to claim 7, wherein The stopping accessing the network when the access conditions are not met includes: Stopping accessing the network when the signal power of the uplink transmission is greater than the uplink signal power threshold.

10. The method according to claim 7, wherein The stopping accessing the network when the access conditions are not met includes: Determining the distance between the second communication node and the first communication node based on the location information of this node; Stopping accessing the network when the distance is within the non-accessible range.

11. The method according to claim 7, wherein The stopping accessing the network when the access conditions are not met includes: Stopping accessing the network when the operator required by this node is different from the operator served by the second communication node.

12. The method according to claim 7, wherein The stopping accessing the network when the access conditions are not met includes: Stopping accessing the network when the slice type of this node is not the slice service type supported by the second communication node and this node does not allow the slice type to change.

13. The method according to claim 7, characterized in that, When the access conditions are not met, stopping accessing the network includes: Determining the time offset range and / or frequency offset range of this node; Stopping accessing the network when the time offset range exceeds the time offset range tolerable by the second communication node and / or the frequency offset range exceeds the frequency offset range tolerable by the second communication node.

14. The method according to claim 7, wherein When the access conditions are not met, stopping accessing the network includes: Determine the list of nodes that can be accessed by this node; In the case where the second communication node is not in the list of nodes that can be accessed by this node, stop accessing the network.

15. The method according to claim 7, characterized in that, In the case where the access condition is not met, stopping accessing the network includes: In the case where it is determined that the resource block for multi-access is overloaded, stop accessing the overloaded resource block.

16. An access control method, characterized in that, The method is applied to a second communication node and includes: Send an access configuration message to the first communication node, where the access configuration message is used for the first node to determine whether to access the network; Wherein, the access configuration message includes the geographical scope served by itself, and the first communication node obtains its own location information through positioning; If the location of the first communication node is outside the served geographical scope, it is determined that the access of the first communication node is restricted, and the first communication node stops accessing the network; otherwise, it is determined that the access of the first communication node is not restricted due to being outside the served geographical area; If the first communication node cannot locate its own position or directly accesses the network regardless of geographical restrictions, allow the first communication node to access first.

17. The method according to claim 16, wherein The method further includes: Obtain the first communication node information; Determine whether to allow the first communication node to access the network based on the first communication node information.

18. The method according to claim 17, wherein The first communication node information includes one or more of the following: The time offset range of the first communication node; The frequency offset range of the first communication node; The uplink signal power of the first communication node; The type of the first communication node; The service operator corresponding to the first communication node; The required service range of the first communication node; The slice service type supported by the first communication node; The priority class of the first communication node and the load corresponding to the priority class; The location information of the first communication node.

19. The method according to claim 16, wherein The access configuration message includes one or more of the following: Access conditions; Access indication; Second communication node information.

20. The method according to claim 19, characterized in that Sending the access conditions to the first communication node includes: Broadcasting the access conditions to the first communication node through broadcast signaling; Pre-storing the access conditions in the SIM or USIM card of the first communication node.

21. The method according to claim 19, wherein Sending the second communication node information to the first communication node includes one or more of the following: Broadcasting the second communication node information to the first communication node through broadcast signaling; Implicitly transmitting the second communication node information through the SIB type; Implicitly transmitting the second communication node information through different frequency bands, PLMN arrangements, and cell IDs.

22. The method according to claim 19, wherein The access conditions include one or more of the following: The time offset range that the second communication node can tolerate; The frequency offset range that the second communication node can tolerate; The uplink signal power threshold set by the second communication node; The node type allowed to access by the second communication node; The operator served by the second communication node; The slice service type supported by the second communication node; The priority class of the first communication node and the load corresponding to the priority class.

23. The method according to claim 17, wherein Determining whether to allow the first communication node to access the network based on the first communication node information includes: Determine the priority class of the first communication node; In the case where this node is overloaded, do not allow the first communication node with a low priority to access the network.

24. An access control device, characterized in that, The device is configured in the first communication node and includes: A first receiving module, configured to receive an access configuration message transmitted by a second communication node; A determination module, configured to determine whether to access the network based on the access configuration message; Wherein, the access configuration message includes the geographical scope of its own service, and the first communication node obtains its own location information through positioning; If the location of the first communication node is outside the geographical scope of the service, it is determined that the access of the first communication node is restricted, and then the first communication node stops accessing the network; otherwise, it is determined that the access of the first communication node is not restricted due to being outside the service geographical area; If the first communication node cannot locate its own position or directly accesses the network regardless of geographical restrictions, the second communication node allows the first communication node to access first.

25. An access control device, characterized in that, The device is configured in the second communication node and includes: A first sending module, configured to send an access configuration message to the first communication node, wherein the access configuration message is used for the first node to determine whether to access the network; Wherein, the access configuration message includes the geographical scope of its own service, and the first communication node obtains its own location information through positioning; If the location of the first communication node is outside the geographical scope of the service, it is determined that the access of the first communication node is restricted, and then the first communication node stops accessing the network; otherwise, it is determined that the access of the first communication node is not restricted due to being outside the service geographical area; If the first communication node cannot locate its own position or directly accesses the network regardless of geographical restrictions, the first communication node is allowed to enter first.

26. An access control device, characterized in that It includes: One or more processors; A memory, used to store one or more programs; When the one or more programs are executed by the one or more processors, the one or more processors implement the method according to any one of claims 1-23.

27. A storage medium, characterized in that, The storage medium stores a computer program, and when the computer program is executed by a processor, the method according to any one of claims 1-23 is implemented.

Images