Access control method and system, small base station and terminal

Abstract

The present disclosure proposes an access control method and system, a small base station and a terminal, which relate to the field of wireless communications. The small base station receives and saves the name and password of the small base station configured by the user; the small base station broadcasts a system message, which carries the name of the small base station; the small base station receives an access request sent by the terminal, which carries the name and password of the small base station to which the terminal requests access; the small base station determines whether the name and password of the small base station in the access request are consistent with the name and password of the saved small base station, and if they are consistent, the terminal is allowed to access, and if they are inconsistent, the terminal is prohibited from accessing. The name and password of the small base station are used for access control, and IMSI is no longer used for access control, thereby solving the problems of difficulty in obtaining IMSI of individual users, security risks of IMSI leakage, and access control that cannot be applied to 5G in traditional access control schemes using IMSI.

Description

Technical Field

[0001] The present disclosure relates to the field of wireless communications, and in particular to an access control method and system, a small base station, and a terminal. Background Art

[0002] At present, LTE (Long Term Evolution) small base stations simulate the Identify-Request message of the core network MME (Mobility Management Entity) / AMF (Access and Mobility Management Function) to let UE (User Equipment) report IMSI (International Mobile Subscriber Identity) information. LTE small base stations parse user IMSI by simulating the core network function. Then, access control is performed by setting the black / white list of IMSI.

[0003] The above solution has the following problems:

[0004] 1) Individual users may not be able to obtain their IMSI. They need the assistance of the operator to query or the terminal to support the display of IMSI, and then the user or operator can configure it to a certain system;

[0005] 2) After the small base station has the ability to obtain IMSI, there is a potential security risk of collecting the IMSI of other public users in the surrounding area;

[0006] 3) LTE’s access control method is not suitable for access control in 5G scenarios. This is because: 5G terminals encrypt IMSI (SUPI, SUbscription Permanent Identifier) ​​and convert it into SUCI (SUbscription Concealed Identifier). Small base stations cannot obtain IMSI through the original method, and it is difficult to perform access control through the IMSI black / white list. Summary of the invention

[0007] In order to solve the above problems, the embodiments of the present disclosure propose an access control solution, which uses the name and password of the small base station for access control, and no longer uses IMSI for access control, thereby solving the problems existing in the traditional access control solution using IMSI, such as the difficulty in obtaining the IMSI of individual users, the security risks of IMSI leakage, and the access control that is not applicable to 5G.

[0008] Some embodiments of the present disclosure provide an access control method, including:

[0009] The small base station receives and saves the name and password of the small base station configured by the user;

[0010] The small cell broadcasts a system message, which carries the name of the small cell;

[0011] The small base station receives the access request sent by the terminal, which carries the name and password of the small base station that the terminal requests to access;

[0012] The small base station determines whether the name and password of the small base station in the access request are consistent with the name and password of the saved small base station. If they are consistent, the terminal is allowed to access; if they are inconsistent, the terminal is prohibited from accessing.

[0013] In some embodiments, the system message includes system information block 1 SIB1, and SIB1 includes an information element of a newly added small base station name.

[0014] In some embodiments, the access request includes an information element of a newly added small base station name and an information element of a small base station password.

[0015] Some embodiments of the present disclosure provide an access control method, characterized by comprising:

[0016] The terminal receives a system message broadcast by the small base station, which carries the name of the small base station;

[0017] The terminal displays the name of the small base station through the terminal interface and enters the password of the small base station corresponding to the name of the small base station;

[0018] The terminal sends an access request to the small base station, which carries the name and password of the small base station that the terminal requests to access, so that the small base station allows or prohibits the terminal from accessing according to whether the name and password of the small base station in the access request are consistent with the name and password of the stored small base station;

[0019] The terminal accesses the small base station when the small base station allows access.

[0020] In some embodiments, the terminal interface includes: a display item of the small base station name; and a setting item of the small base station password;

[0021] Alternatively, the terminal interface includes: a display item of the small base station name; a setting item of the small base station password; and an access control item for configuring whether to give priority to accessing the small base station;

[0022] If the access control item is configured to give priority to accessing the small base station, the terminal gives priority to accessing the small base station, and switches out of the small base station when the signal reception quality of the small base station is lower than a preset threshold;

[0023] If the access control item is not configured to give priority to accessing small base stations, the terminal selects a base station to access by comparing the signal reception qualities of various base stations, wherein the various base stations include macro base stations and small base stations.

[0024] In some embodiments, it also includes:

[0025] Configure the small cell name and small cell password to the small cell through the web configuration page;

[0026] Alternatively, configure the small cell name and small cell password to the small cell through the small cell gateway or small cell network management.

[0027] In some embodiments, the system message includes system information block 1 SIB1, and SIB1 includes an information element of a newly added small base station name.

[0028] In some embodiments, the access request includes an information element of a newly added small base station name and an information element of a small base station password.

[0029] In some embodiments, the access request includes a radio resource control setup request RRC Setup Request, which carries the name and password of the small base station that the terminal requests to access.

[0030] Some embodiments of the present disclosure provide a small base station, including:

[0031] Memory; and

[0032] A processor is coupled to the memory, and the processor is configured to execute an access control method based on instructions stored in the memory.

[0033] Some embodiments of the present disclosure provide a small base station, including:

[0034] The message processing module is configured to receive and save the name and password of the small base station configured by the user; broadcast a system message carrying the name of the small base station; receive an access request sent by a terminal, carrying the name and password of the small base station that the terminal requests to access;

[0035] The access control module is configured to determine whether the name and password of the small base station in the access request are consistent with the name and password of the saved small base station. If they are consistent, the terminal is allowed to access; if they are inconsistent, the terminal is prohibited from accessing.

[0036] Some embodiments of the present disclosure provide a terminal, including:

[0037] Memory; and

[0038] A processor is coupled to the memory, and the processor is configured to execute an access control method based on instructions stored in the memory.

[0039] Some embodiments of the present disclosure provide a terminal, including:

[0040] A password setting module is configured to display the name of the small base station through the terminal interface and input the password of the small base station corresponding to the name of the small base station;

[0041] The message processing module is configured to receive a system message broadcast by a small base station, which carries the name of the small base station; send an access request to the small base station, which carries the name and password of the small base station to which the terminal requests to access, so that the small base station allows or prohibits the terminal from accessing according to whether the name and password of the small base station in the access request are consistent with the name and password of the saved small base station; and access the small base station if the small base station allows access.

[0042] In some embodiments, the terminal also includes: an access control module, configured to provide an access control item through a terminal interface, for configuring whether to give priority to accessing a small base station; if the access control item is configured to give priority to accessing a small base station, the terminal is controlled to give priority to accessing the small base station, and when the signal reception quality of the small base station is lower than a preset threshold, the terminal is switched out of the small base station; if the access control item is not configured to give priority to accessing a small base station, the terminal is controlled to select a base station to access by comparing the strength of the signal reception quality of each base station, and the base stations include macro base stations and small base stations.

[0043] Some embodiments of the present disclosure provide an access control system, including: a small base station; and a terminal.

[0044] Some embodiments of the present disclosure provide a non-transitory computer-readable storage medium having a computer program stored thereon, which implements the steps of the access control method when the program is executed by a processor. BRIEF DESCRIPTION OF THE DRAWINGS

[0045] The following is a brief introduction to the drawings required for use in the embodiments or related technical descriptions. The present disclosure can be more clearly understood according to the following detailed description with reference to the drawings.

[0046] Obviously, the drawings described below are only some embodiments of the present disclosure, and a person skilled in the art can obtain other drawings based on these drawings without creative work.

[0047] Figure 1 A flowchart of an access control method according to some embodiments of the present disclosure is shown.

[0048] Figure 2 A schematic diagram showing a terminal interface according to some embodiments of the present disclosure.

[0049] Figure 3A schematic diagram showing an access control application according to some embodiments of the present disclosure.

[0050] Figure 4 A schematic diagram showing an access control system according to some embodiments of the present disclosure.

[0051] Figure 5a A schematic diagram of a small base station according to some embodiments of the present disclosure is shown.

[0052] Figure 5b Schematic diagrams of small base stations according to other embodiments of the present disclosure are shown.

[0053] Figure 6a A schematic diagram showing a terminal according to some embodiments of the present disclosure.

[0054] Figure 6b Schematic diagrams showing terminals according to other embodiments of the present disclosure. DETAILED DESCRIPTION

[0055] The technical solutions in the embodiments of the present disclosure will be clearly and completely described below in conjunction with the drawings in the embodiments of the present disclosure.

[0056] Unless otherwise specified, descriptions such as “first” and “second” in the present disclosure are used to distinguish different objects and are not used to indicate meanings such as size or time sequence.

[0057] Figure 1 A flowchart of an access control method according to some embodiments of the present disclosure is shown.

[0058] like Figure 1 As shown, the access control method of this embodiment includes: steps 110-150.

[0059] In step 110, the user configures the name and password of the small base station to the small base station; the small base station receives and saves the name and password of the small base station configured by the user.

[0060] The user configures the name and password of the small base station to the small base station. One configuration method includes: an ordinary user can configure the small base station name and the small base station password to the small base station (110a) through a web configuration page. The configuration method is simple and easy to implement; another configuration method includes: a management user configures the small base station name and the small base station password to the small base station (110b) through a small base station gateway or a small base station network management. For example, when an ordinary user forgets the configured small base station name / password, the latter configuration method can be used to configure the small base station name / password.

[0061] In step 120, the small base station broadcasts a system message, which carries the name of the small base station; the terminal receives the system message broadcast by the small base station, which carries the name of the small base station.

[0062] The system message includes system information block 1 (SIB1, System Information Block 1), and SIB1 includes an information element of a newly added small base station name.

[0063] In step 130, the terminal displays the name of the small base station through the terminal interface, and enters the password of the small base station corresponding to the name of the small base station, and can also configure whether to give priority to accessing the small base station.

[0064] The terminal interface includes: a display item for the name of the small base station; and a setting item for the password of the small base station; optionally, it may also include an access control item for configuring whether to give priority to accessing the small base station. If the access control item is configured to give priority to accessing the small base station, the terminal will give priority to accessing the small base station (the default access is to the small base station), and will switch out of the small base station when the signal reception quality of the small base station is lower than the preset threshold; if the access control item is not configured to give priority to accessing the small base station, the terminal will select the base station to access (with a stronger signal) by comparing the signal reception quality of each base station, and each base station includes various base stations such as macro base stations and small base stations. The signal reception quality includes, for example, RSRP (Reference Signal Receiving Power).

[0065] Figure 2 A schematic diagram showing a terminal interface according to some embodiments of the present disclosure.

[0066] like Figure 2 As shown, enter the network connection display interface (terminal interface 1) on the terminal, display the various network connections of the terminal, among which the small base station network connection icon is on the far right. Click the icon to enter the small base station network connection interface (terminal interface 2), display the various small base stations detected by the terminal, such as small base station 1, small base station 2, and small base station 3. Click on one of the small base stations to enter the small base station password setting item and the access control item setting interface (terminal interface 3). Among them, in the small base station password setting item, you can enter the password of the small base station. In the "small base station priority" access control item, if it is selected, it means that it is configured to access the small base station first. If it is not selected, it means that it is not configured to access the small base station first.

[0067] In step 140, the terminal sends an access request to the small base station, which carries the name and password of the small base station that the terminal requests to access, so that the small base station allows or prohibits the terminal from accessing according to whether the name and password of the small base station in the access request are consistent with the name and password of the stored small base station. If the small base station allows access, the terminal accesses the small base station.

[0068] The access request includes an information element of the newly added small base station name and an information element of the small base station password.

[0069] The access request includes a radio resource control setup request (RRC Setup Request), which carries the name and password of the small base station that the terminal requests to access. RRC stands for Radio Resource Control.

[0070] Table 1 Messages and newly added information elements

[0071]

[0072]

[0073] In step 150, the small base station determines whether the name and password of the small base station in the access request are consistent with the name and password of the saved small base station. If they are consistent, the terminal is allowed to access, for example, an RRC Setup message may be sent to the terminal. If they are inconsistent, the terminal is prohibited from accessing, for example, an RRC Reject message may be sent to the terminal.

[0074] The access control scheme of the above-mentioned embodiment uses the name and password of the small base station for access control, and no longer uses IMSI for access control, thereby solving the problems existing in the traditional access control scheme using IMSI, such as the difficulty in obtaining the IMSI of individual users, the security risk of IMSI leakage, and the access control that cannot be applied to 5G. It can be applied to both 5G access control with IMSI encryption and 3G, 4G, LE T and other access control without IMSI encryption.

[0075] Figure 3 A schematic diagram showing an access control application according to some embodiments of the present disclosure.

[0076] like Figure 3 As shown in the figure, terminal 1 is located in the cross-coverage area of ​​the macro base station and the small base station. If the station is selected based on the signal strength, it is impossible to control the terminal to prefer the small base station, which makes it difficult to meet the needs of exclusive bandwidth for families or specific needs of factories. Terminal 2 belongs to users outside the family or factory. If there is no effective access control strategy, terminal 2 will access the small base station after receiving the small base station signal, which poses legal issues and security risks.

[0077] For example, after being applied to a small base station device at home or factory, the user hopes to configure their terminal members to access the network through the small base station anytime and anywhere, and other unfamiliar numbers such as neighbors or non-factory terminals are prohibited from accessing the network through the small base station. The user enters the password through the terminal interface. If the password is incorrect, access to the base station is prohibited, thereby achieving exclusive use of the resources of the home / factory small base station.

[0078] For example, home / factory users can choose to prioritize small base stations through switch control, rather than switching to nearby macro stations or other indoor coverage signal sources based on signal strength, thereby ensuring exclusive data bandwidth at home or the uRLLC (Ultra Reliable Low Latency Communication) experience in the factory, ensuring the stability of service quality.

[0079] It can be seen that the access control method disclosed in the present invention provides a two-way selection mechanism for terminals and base stations, which meets the specific needs of exclusive bandwidth for families or factories. For example, terminal 1 can choose whether to reside in the small base station first, and terminal 2 cannot access the small base station if it does not know the password. In addition, users can configure the terminals for access independently without the participation of the small base station gateway / network management, which is easier for users to implement and has a good user experience, which helps promote the commercial application of small base stations.

[0080] Figure 4 A schematic diagram showing an access control system according to some embodiments of the present disclosure.

[0081] like Figure 4 As shown, the access control system includes: a small base station 400 and a terminal 500.

[0082] Figure 5a A schematic diagram of a small base station according to some embodiments of the present disclosure is shown.

[0083] like Figure 5a As shown, the small base station 400 includes: a memory 410; and a processor 420 coupled to the memory, wherein the processor is configured to execute an access control method based on instructions stored in the memory.

[0084] For example, the small base station receives and saves the name and password of the small base station configured by the user; the small base station broadcasts a system message carrying the name of the small base station; the small base station receives an access request sent by the terminal, which carries the name and password of the small base station that the terminal requests to access; the small base station determines whether the name and password of the small base station in the access request are consistent with the saved name and password of the small base station, and if so, allows the terminal to access; if not, prohibits the terminal from accessing.

[0085] The memory may include, for example, a system memory, a fixed non-volatile storage medium, etc. The system memory may store, for example, an operating system, an application program, a boot loader, and other programs.

[0086] Figure 5b Schematic diagrams of small base stations according to other embodiments of the present disclosure are shown.

[0087] like Figure 5bAs shown, the small base station 400 includes:

[0088] The message processing module 430 is configured to receive and save the name and password of the small base station configured by the user; broadcast a system message carrying the name of the small base station; receive an access request sent by a terminal, carrying the name and password of the small base station that the terminal requests to access;

[0089] The access control module 440 is configured to determine whether the name and password of the small base station in the access request are consistent with the name and password of the saved small base station. If they are consistent, the terminal is allowed to access; if they are inconsistent, the terminal is prohibited from accessing.

[0090] Figure 6a A schematic diagram showing a terminal according to some embodiments of the present disclosure.

[0091] like Figure 6a As shown, the terminal 500 includes: a memory 510; and a processor 520 coupled to the memory, wherein the processor is configured to execute an access control method based on instructions stored in the memory.

[0092] For example, the terminal receives a system message broadcast by the small base station, which carries the name of the small base station; the terminal displays the name of the small base station through the terminal interface and enters the password of the small base station corresponding to the name of the small base station; the terminal sends an access request to the small base station, which carries the name and password of the small base station that the terminal requests to access, so that the small base station allows or prohibits the terminal from accessing based on whether the name and password of the small base station in the access request are consistent with the name and password of the saved small base station; the terminal accesses the small base station if the small base station allows access.

[0093] Among them, the terminal interface includes: a display item of the small base station name; and a setting item of the small base station password; or, the terminal interface includes: a display item of the small base station name; a setting item of the small base station password; and an access control item, which is used to configure whether to give priority to accessing the small base station; if the access control item is configured to give priority to accessing the small base station, the terminal gives priority to accessing the small base station, and switches out of the small base station when the signal reception quality of the small base station is lower than a preset threshold; if the access control item is not configured to give priority to accessing the small base station, the terminal selects the base station to access by comparing the strength of the signal reception quality of each base station, and the various base stations include macro base stations and small base stations.

[0094] The memory may include, for example, a system memory, a fixed non-volatile storage medium, etc. The system memory may store, for example, an operating system, an application program, a boot loader, and other programs.

[0095] Figure 6b Schematic diagrams showing terminals according to other embodiments of the present disclosure.

[0096] like Figure 6b As shown, the terminal 500 includes:

[0097] The password setting module 530 is configured to display the name of the small base station through the terminal interface and input the password of the small base station corresponding to the name of the small base station.

[0098] The message processing module 540 is configured to receive a system message broadcast by the small base station, which carries the name of the small base station; send an access request to the small base station, which carries the name and password of the small base station to which the terminal requests to access, so that the small base station allows or prohibits the terminal from accessing according to whether the name and password of the small base station in the access request are consistent with the name and password of the saved small base station; and access the small base station if the small base station allows access.

[0099] The access control module 550 is configured to provide an access control item through a terminal interface for configuring whether to give priority to accessing a small base station; if the access control item is configured to give priority to accessing a small base station, the control terminal gives priority to accessing the small base station, and switches out of the small base station when the signal reception quality of the small base station is lower than a preset threshold; if the access control item is not configured to give priority to accessing a small base station, the control terminal selects a base station to access by comparing the signal reception quality of each base station, and the base stations include macro base stations and small base stations.

[0100] The present disclosure provides a non-transitory computer-readable storage medium on which a computer program is stored. When the program is executed by a processor, the steps of the access control method are implemented.

[0101] Those skilled in the art will appreciate that the embodiments of the present disclosure may be provided as methods, systems, or computer program products. Therefore, the present disclosure may take the form of a complete hardware embodiment, a complete software embodiment, or an embodiment combining software and hardware. Moreover, the present disclosure may take the form of a computer program product implemented on one or more non-transient computer-readable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer program code.

[0102] The present disclosure is described with reference to the flowcharts and / or block diagrams of the methods, devices (systems), and computer program products according to the embodiments of the present disclosure. It should be understood that each process and / or box in the flowchart and / or block diagram, as well as the combination of the processes and / or boxes in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to generate a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0103] These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing device to operate in a specific manner, so that the instructions stored in the computer-readable memory produce an article of manufacture comprising an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.

[0104] These computer program instructions can also be loaded onto a computer or other programmable data processing device so that a series of operating steps are executed on the computer or other programmable device to produce a computer-implemented process, thereby providing instructions for implementing the process. Figure 1 A process or multiple processes and / or boxes Figure 1 A step that specifies a function in one or more boxes.

[0105] The above description is only a preferred embodiment of the present disclosure and is not intended to limit the present disclosure. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and principles of the present disclosure should be included in the protection scope of the present disclosure.

Claims

1. An access control method, characterized in that: If the IMSI is not obtained, the following situations may occur: The small cell receives and saves the name and password of the small cell configured by the user through the web configuration page, the small cell gateway or the small cell network management; The small cell broadcasts a system message, which carries the name of the small cell; The small base station receives the access request sent by the terminal, which carries the name and password of the small base station that the terminal requests to access; The small base station determines whether the name and password of the small base station in the access request are consistent with the name and password of the saved small base station. If they are consistent, the terminal is allowed to access, and if the access control item is configured to give priority to accessing the small base station, the terminal is controlled to give priority to accessing the small base station, and when the signal reception quality of the small base station is lower than the preset threshold, it switches out of the small base station; if they are inconsistent, the terminal is prohibited from accessing.

2. The method according to claim 1, characterized in that The system message includes system information block 1 SIB1, and SIB1 includes an information element of a newly added small base station name.

3. The method according to claim 1, characterized in that The access request includes an information element of the newly added small base station name and an information element of the small base station password.

4. An access control method, characterized in that: If the IMSI is not obtained, the following situations may occur: The terminal receives a system message broadcast by the small base station, which carries the name of the small base station; The terminal displays the name of the small base station through the terminal interface and enters the password of the small base station corresponding to the name of the small base station; The terminal sends an access request to the small base station, which carries the name and password of the small base station that the terminal requests to access, so that the small base station allows or prohibits the terminal from accessing according to whether the name and password of the small base station in the access request are consistent with the name and password of the stored small base station; The terminal accesses the small base station when the small base station allows access. The terminal interface includes: an access control item for configuring whether to give priority to accessing a small base station; If the access control item is configured to give priority to accessing the small base station, the terminal gives priority to accessing the small base station, and switches out of the small base station when the signal reception quality of the small base station is lower than a preset threshold; If the access control item is not configured to give priority to accessing small base stations, the terminal selects a base station to access by comparing the signal reception qualities of various base stations, wherein the various base stations include macro base stations and small base stations.

5. The method according to claim 4, characterized in that The terminal interface includes: a display item of the small base station name; and a setting item of the small base station password; Alternatively, the terminal interface also includes: a display item for the small base station name; and a setting item for the small base station password.

6. The method according to claim 4, characterized in that Also includes: Configure the small cell name and small cell password to the small cell through the web configuration page; Alternatively, configure the small cell name and small cell password to the small cell through the small cell gateway or small cell network management.

7. The method according to claim 4, characterized in that The system message includes system information block 1 SIB1, and SIB1 includes an information element of a newly added small base station name; The access request includes an information element of the newly added small base station name and an information element of the small base station password.

8. The method according to claim 4, characterized in that The access request includes a radio resource control setup request RRC Setup Request, which carries the name and password of the small base station that the terminal requests to access.

9. A small base station, comprising: Memory; as well as A processor coupled to the memory, wherein the processor is configured to execute the access control method according to any one of claims 1 to 3 based on instructions stored in the memory.

10. A small base station, when the IMSI is not obtained, comprising: A message processing module, configured to receive and save a name and password of the small base station configured by a user; Broadcast system message, which carries the name of the small base station; Receive an access request sent by a terminal, which carries the name and password of the small base station that the terminal requests to access; an access control module, configured to determine whether the name and password of the small base station in the access request are consistent with the name and password of the stored small base station, and if they are consistent, allow the terminal to access, and if the access control item is configured to give priority to accessing the small base station, control the terminal to give priority to accessing the small base station, and switch out of the small base station when the signal reception quality of the small base station is lower than a preset threshold; If they are inconsistent, the terminal is prohibited from accessing.

11. A terminal, comprising: Memory; as well as A processor coupled to the memory, wherein the processor is configured to execute the access control method according to any one of claims 4 to 8 based on instructions stored in the memory.

12. A terminal, when the IMSI is not obtained, comprising: A password setting module is configured to display the name of the small base station through the terminal interface and input the password of the small base station corresponding to the name of the small base station; The message processing module is configured to receive a system message broadcast by the small base station, which carries the name of the small base station; send an access request to the small base station, which carries the name and password of the small base station that the terminal requests to access, so that the small base station allows or prohibits the terminal from accessing according to whether the name and password of the small base station in the access request are consistent with the name and password of the stored small base station; and access the small base station if the small base station allows access; The access control module is configured to provide an access control item through a terminal interface for configuring whether to give priority to accessing a small base station; if the access control item is configured to give priority to accessing a small base station, the control terminal gives priority to accessing the small base station, and switches out of the small base station when the signal reception quality of the small base station is lower than a preset threshold; if the access control item is not configured to give priority to accessing a small base station, the control terminal selects a base station to access by comparing the strength of the signal reception quality of each base station, and the base stations include macro base stations and small base stations.

13. An access control system, comprising: The small base station according to claim 9 or 10; as well as The terminal according to any one of claims 11 to 12.

14. A non-transitory computer-readable storage medium having a computer program stored thereon, wherein when the program is executed by a processor, the steps of the access control method according to any one of claims 1 to 8 are implemented.

Images