A communication terminal management method for an area requiring communication regulation

Abstract

A communication terminal management method for a region requiring communication management, comprising: a communication management base station acquiring communication terminal identity information and initiating a management request to the communication terminal; the communication management base station sending the communication terminal identity information and an authentication request message to a management server; the management server querying permission information of the communication terminal and corresponding permission services, and sending the authentication result to the communication management base station; the communication management base station saving the authentication result; when the communication terminal sends a service request to the communication management base station, the communication management base station judges whether management is needed according to the authentication result, if management is needed, the communication management base station intercepts the service request, if management is not needed, the communication management base station allows the service communication; the application realizes flexible communication management of different strategies for different permission communication terminals while providing public network wireless coverage for the management region according to preset permission information and corresponding permission services.

Description

TECHNICAL FIELD

[0001] The present application relates to a communication terminal management and control method for a region requiring communication regulation, and belongs to the field of combination of wireless communication technology and computer network technology. BACKGROUND

[0002] With the rapid development of mobile Internet and the rapid popularization of intelligent mobile communication user terminals, some related institutions that were not allowed to use communication equipment in the past have now opened the use of ordinary communication equipment to personnel in their respective regions, and the security management and control of important secret-related places and secret-related activities within these related institutions are generally managed in the following ways: wireless signal jammer, base station simulator black and white list management, and manual management. However, the wireless signal jammer indiscriminately interferes with all communication equipment in the region, making it impossible for specific personnel to meet their reasonable communication needs in a timely manner, and also causing interference to the surrounding wireless communication. Although the base station simulator can set up a black and white list to meet some legal communication needs, it cannot flexibly manage the permissions of related personnel within the communication control region and each sub-region. The manual management method is not only costly and inefficient, but also lacks friendliness to the managed personnel.

[0003] To solve the above problems, the present application provides a communication terminal management and control method for a region requiring communication regulation. Through the present application, public network wireless coverage can be provided to the management and control region while the communication terminal in the specific management and control region is managed and controlled, and multiple sub-regions can be divided according to the actual scene in the management and control region, and different strategies can be used for flexible management and control. According to the actual deployment situation and specific user situation, the same communication terminal can have different permissions in each sub-region. The present regional management and control method does not need to pass through the core network and the operator, and can prohibit the communication service of the communication terminal without permission in the local area without affecting the normal communication of the communication terminal with permission, and also does not cause wireless signal pollution to the surrounding environment. SUMMARY

[0004] The present application aims to provide a communication terminal management and control method for a region requiring communication regulation. According to the preset permission information and the corresponding permission service, the communication terminal management and control method allows or prohibits the communication service of the communication terminal, controls the communication behavior of the communication terminal in the management and control region, and thus protects the entire control region.

[0005] To achieve the above-mentioned purpose, the present application provides the following technical solution: a communication terminal management and control method for a region requiring communication regulation, based on a mobile phone management and control system composed of a management and control server, communication management and control base stations in each management and control region, and each communication terminal in the management and control region, the communication terminal management and control method is implemented according to the following steps:

[0006] S1: Based on the permission information of different user communication terminals in each management and control area and the pre-setting of the corresponding permission services on the management and control server, each communication management and control base station acquires the identity identification information of the communication terminals in its management and control area, initiates a management and control request to the communication terminals, and then enters step S2;

[0007] S2: If the communication terminal refuses the management and control request, the communication management and control base station will cut off all service requests of the communication terminal in the management and control area; if the communication terminal accepts the management and control request, the communication management and control base station sends the identity identification information and the authentication request message of the communication terminal to the management and control server, and then enters step S3;

[0008] S3: The management and control server queries the permission information and the corresponding permission services of the communication terminal in the pre-set permission information and the corresponding permission services according to the received identity identification information, and sends the query authentication result to the communication management and control base station, and then enters step S4;

[0009] S4: The communication management and control base station saves the authentication result of the communication terminal, and waits for the communication terminal to initiate a service request, and then enters step S5;

[0010] S5: Based on the service request sent by the communication terminal to the communication management and control base station, the communication management and control base station controls according to the authentication result of the communication terminal, and then enters step S6;

[0011] S6: The communication management and control base station sends the service type, location, time information of the communication terminal and the identification information of the communication management and control base station to the management and control server, and the management and control server performs data mining and analysis according to the received information, and audits the communication behavior and trajectory of the communication terminal in the management and control area; if the management and control server audits that the communication terminal has a violation behavior in the management and control area, enter step S7, otherwise do nothing;

[0012] S7: The management and control server sends a violation warning to the communication terminal, and if the number of violation warnings sent by the management and control server to the communication terminal reaches the pre-set number, the management and control server will list the communication terminal as a blacklisted user without permission, and prohibit the communication terminal from initiating a service request again.

[0013] Further, the aforementioned communication management and control base station comprises a communication management and control device, which comprises a management and control module and a communication module; the management and control module is used for communication terminal identity information acquisition, information exchange with the communication module and function configuration of the protocol stack; the communication module is used for establishing a message channel with the management and control server, transmitting various interactive information of the management and control module and the management and control server, and being responsible for initiating a management and control request to the communication terminal entering the management and control area after the start of the communication management and control base station.

[0014] Further, the aforementioned management and control module comprises a number taking sub-module, an authentication sub-module, and a judging sub-module; the number taking sub-module is used for buffering existing standard signaling content and constructing relevant signaling to request the communication terminal to report identity information;

[0015] The authentication sub-module is used for initiating an authentication request to the management and control server by using the identity information of the communication terminal and processing the authentication result returned by the management and control server; the judging sub-module is used for judging the service type of the communication terminal when the communication terminal initiates a service request, judging whether the communication terminal has the service permission of the type according to the authentication result of the communication terminal, and deciding whether to provide normal service communication service according to the judgment result.

[0016] Further, the aforementioned management and control server comprises a regional management device, wherein the regional management device comprises a message processing module, an audit and interface module, and a database module; the message processing module is used for processing interactive information with the communication management and control base station and writing data into the database or reading corresponding data from the database; the audit and interface module is used for providing a visual interactive interface to perform information input, rule setting, and data analysis; and the database module is used for storing various data information of the management and control system, including identity identification information, regions, permissions, and service data of each communication terminal.

[0017] Further, the aforementioned audit and interface module provides a visual login management interface to distinguish administrator permissions and ordinary user permissions; provides sub-region division of the management and control region, communication terminal permission setting, and setting of other rules; provides analysis and presentation of service behaviors of the communication terminal in the region; provides trajectory query and positioning of the communication terminal in the region; and provides sensitive region alarm.

[0018] Further, the aforementioned method for the communication management and control base station to acquire identity identification information of the communication terminal comprises:

[0019] If the communication terminal reselects into the management and control region from an external public network base station or other public base station, the communication management and control base station acquires the identity identification information of the communication terminal by using a pseudo signaling method; if the communication terminal switches into the management and control region from an external public network base station or other public base station, the communication management and control base station acquires the identity identification information of the communication terminal by using a pseudo signaling method after forcibly releasing the RRC connection between the communication terminal and the original base station and waking up the communication terminal to perform a communication terminal management and control process; and if the communication terminal moves between management and control base stations, the management and control base station acquires the identity identification information of the communication terminal by using a pseudo signaling method or an intra-system handover authentication method.

[0020] Further, the aforementioned service type comprises a short message service, an online service, and a voice call service.

[0021] Further, the aforementioned permission information and the marking manner of the corresponding permission service include: the permission of each service type is represented by a bit, and a bit of 0 represents that the service type has no permission, and a bit of 1 represents that the service type has permission; all the permissions of the service types to be managed and controlled are arranged in a fixed order to form a binary number, which is recorded as the permission value of each communication terminal.

[0022] Further, the step of the aforementioned management and control server querying the permission information of the communication terminal and the corresponding permission service includes: the management and control server receives an authentication request message of the communication management and control base station, obtains the identification information of the communication management and control base station and the identity identification information of the communication terminal, queries the permission value of the communication terminal in the corresponding database according to the identification information of the communication management and control base station, and regards the communication terminal without the permission value as a blacklisted user without permission, sets the permission value as all zeros, and sends the permission value of the communication terminal to the communication management and control base station as an authentication result.

[0023] Further, the step of the aforementioned communication management and control base station managing and controlling according to the authentication result includes: if the permission value is all zeros, it indicates that the communication terminal is a blacklisted user without permission, and the communication management and control base station blocks all service requests of the communication terminal; if the permission value is not zero, when the communication terminal initiates a service request, the permission value is compared, if the requested service type has permission, the communication management and control base station does not limit the communication terminal; if the requested service type has no permission, the communication management and control base station blocks the communication terminal and sends a permission prompt to the communication terminal.

[0024] The communication terminal management and control method for the area in need of communication regulation has the following technical effects compared with the prior art by adopting the above technical scheme:

[0025] 1. The area management and control method can freely switch between a normal mode and a management and control mode, the normal mode can provide public network signal coverage in the area and provide normal wireless communication services for all users, when the management and control mode is started, only the communication terminals with permission in the area can perform the corresponding permission service, and the communication terminals without permission can normally camp but cannot perform service communication, thereby realizing protection of the whole management and control area;

[0026] 2. A plurality of sub-areas are divided in the management and control area according to actual scenes, and the same communication terminal can have different permissions in each sub-area; the permission of the communication terminal is not traditional black or white, and can be flexibly set according to service combination;

[0027] 3. The management and control system can perform behavior auditing on the user according to the trajectory and service condition of the communication terminal, evaluate the area management and control effect, and alarm the illegal behavior;

[0028] 4, The regional control method does not need to pass through the core network and the operator, and can prohibit the communication service of the communication terminal without permission in the local area without affecting the normal communication of the communication terminal with permission, and without causing wireless signal pollution to the surrounding environment. BRIEF DESCRIPTION OF DRAWINGS

[0029] Figure 1 is a communication terminal control system architecture;

[0030] Figure 2 is a communication terminal control method flow. DETAILED DESCRIPTION

[0031] In order to better understand the technical content of the present application, specific embodiments are described below with reference to the accompanying drawings.

[0032] Aspects of the present application are described in this detailed description and illustrated in the accompanying drawings by various illustrative embodiments. Embodiments of the present application are not limited to the illustrations described in the drawings. It should be understood that the present application is implemented by any one of the above-mentioned concepts and embodiments, and the concepts and embodiments described in detail below, because the concepts and embodiments disclosed in the present application are not limited to any embodiment. In addition, some aspects of the present application can be used alone or in any suitable combination with other aspects of the present application.

[0033] Reference Figure 1 and Figure 2 The present application provides a communication terminal control method for a region requiring communication control. The present application is implemented based on a communication terminal control system composed of a control server and communication control base stations in each control region.

[0034] In the present embodiment, the control server includes a region management device, which includes a message processing module, a database module, an audit and interface module. The message processing module is used to process the interaction information with the communication control base station, and write data into the database or read corresponding data from the database. The database module is used to store various data information of the control system, including the identity information of each communication terminal, the region, the permission and the service data. The audit and interface module provides a visual login management interface, distinguishes the administrator permission and the ordinary user permission, provides the sub-region division of the control region, the communication terminal permission setting and other rule setting, provides the analysis and presentation of the communication terminal service behavior in the region, provides the trajectory query and positioning of the communication terminal in the region, and provides the sensitive region alarm.

[0035] The communication control base station comprises a communication control device, the communication control device comprises a communication module and a control module; the communication module is used for establishing a message channel with the control server, transmitting various interactive information of the control module and the control server, and initiating a control request to a communication terminal entering the control area autonomously after the communication control base station is started; the control module comprises a number taking submodule, an authentication submodule and a judgment submodule; the number taking submodule is used for buffering existing standard signaling content, constructing related signaling to request the communication terminal to report identity information; the authentication submodule is used for initiating an authentication request to the control server by using the identity information of the communication terminal, and processing an authentication result returned by the control server; the judgment submodule is used for judging a service type of the communication terminal when the communication terminal initiates a service request, judging whether the communication terminal has a service permission of the type according to the authentication result of the communication terminal, and deciding whether to provide normal service communication service according to a judgment result.

[0036] In the embodiment, the communication terminal comprises but is not limited to a 2G, 3G, 4G, 5G mobile communication terminal; the communication control base station refers to a public network small base station connected to a core network, which can be a small-range coverage public network base station such as an indoor base station. The wireless signal of the communication control base station has a certain coverage range, and the coverage range of the communication control base station is controllable, and the size and position of the control area are controlled by using the characteristics, as shown in Figure 1 In one control area, a plurality of base stations can be included, that is, in each specific sub-area, an independent base station is included as a communication control base station. According to the area characteristics, such as a conference room, an office, a confidential office, the control area is divided into sub-areas, different control settings are made for each sub-area on the control server, and flexible setting of the service permission of the communication terminal user is realized. Each communication control base station is connected to the control server through the Internet and the operator core network. The frequency point priority of each communication control base station is set to the highest priority, and the switching and reselection parameters are configured between the existing external public network base station or other public networks, so that the communication terminal enters the control area, and the communication control base station is preferentially accessed, and then the communication and behavior control of the personnel in the entire control area is performed.

[0037] As shown in Figure 2 Based on the communication terminal control system, the communication terminal control method is realized according to the following steps:

[0038] S1: Based on the pre-setting of the permission information of the different user communication terminals in each control area on the control server and the corresponding permission service, each communication control base station acquires the identity recognition information of the communication terminal in the control area thereof, initiates a control request to the communication terminal, and then enters step S2;

[0039] S2: If the communication terminal refuses the management request, the communication management base station will cut off all service requests of the communication terminal in the management area; if the communication terminal accepts the management request, the communication management base station sends the identity information of the communication terminal and an authentication request message to the management server, and then enters step S3;

[0040] S3: The management server queries the permission information and corresponding permission services of the communication terminal according to the received identity information in the preset permission information and corresponding permission services, and sends the query authentication result to the communication management base station, and then enters step S4;

[0041] S4: The communication management base station saves the authentication result of the communication terminal, and then enters step S5 when the communication terminal initiates a service request;

[0042] S5: Based on the service request sent by the communication terminal to the communication management base station, the communication management base station controls according to the authentication result of the communication terminal, and then enters step S6;

[0043] S6: The communication management base station sends the service type, location, time information and identification information of the communication terminal to the management server, and the management server performs data mining and analysis according to the received information, and audits the communication behavior and track of the communication terminal in the management area; if the management server audits that the communication terminal has a violation behavior in the management area, enter step S7, otherwise do nothing;

[0044] S7: The management server sends a violation warning to the communication terminal, and if the number of violation warnings sent by the management server to the communication terminal reaches the preset number, the management server will list the communication terminal as a blacklisted user without permission, and prohibit the communication terminal from initiating a service request again.

[0045] Once anyone enters the management sub-area, the communication terminal will automatically register the communication management system, and the communication management base station obtains the identity information of the communication terminal, such as IMSI or other information that can uniquely determine the identity of the communication terminal.

[0046] In the embodiment, the method for the communication control base station to acquire the identity information of the communication terminal includes: if the communication terminal reselects into the control area from an external public network base station or other public base station, the communication control base station uses a pseudo signaling mode to make the communication terminal report the identity information; if the communication terminal switches into the control area from an external public network base station or other public base station, the RRC connection between the communication terminal and the original base station needs to be forcibly released, the communication terminal needs to be woken up to re-perform the communication terminal control process, and the current communication control base station uses the pseudo signaling mode to acquire the identity information; if the communication terminal moves between the control base stations, the control base station uses the pseudo signaling mode or the system internal switching authentication method to acquire the identity information.

[0047] After the communication control base station acquires the identity information of the communication terminal, the communication control base station initiates a control request to the communication terminal. If the communication terminal refuses the control request, the communication control base station will cut off all service type request of the communication terminal in the control area. In the embodiment, the service type includes short message service, online service, and voice call service. If the communication terminal accepts the control request, the communication control base station sends the identity information of the communication terminal and an authentication request message to the control server. The control server queries the permission information and the corresponding permission service of the communication terminal according to the received identity information, and sends the authentication result to the communication control base station.

[0048] In the embodiment, the marking method of the permission information and the corresponding permission service includes: the permission of each service type is represented by a bit, the bit is 0, which means that the service has no permission, the bit is 1, which means that the service has permission, all service types are arranged in a fixed order to form a binary number, and the binary number is recorded as the permission value of each communication terminal.

[0049] In the embodiment, the step of the control server querying the permission information and the corresponding permission service of the communication terminal includes: the control server receives the authentication request message of the communication control base station, acquires the identity information of the communication control base station and the identity information of the communication terminal, queries the permission value of the communication terminal in the corresponding database according to the identity information of the communication control base station, regards the communication terminal whose permission value cannot be queried as a blacklisted user without permission, sets the permission value as all zeros, and sends the permission value of the communication terminal to the communication control base station as the authentication result. The communication control base station saves the authentication result of the communication terminal, and controls the communication terminal according to the authentication result when the communication terminal initiates a service request.

[0050] In the embodiment, the step of controlling the communication terminal according to the authentication result by the communication control base station includes: if the permission value is all zeros, it indicates that the communication terminal is a blacklisted user without permission, and the communication control base station will block all service requests of the communication terminal; if the permission value is not zero, when the communication terminal initiates a service request, the requested service type is compared with the permission value, if the requested service type has permission, the communication control base station does not limit the communication of the communication terminal; if the requested service type has no permission, the communication control base station blocks the communication of the communication terminal, and sends a permissionless prompt to the communication terminal.

[0051] The communication control base station sends the service type, location, time information of the communication terminal and the identification information of the communication control base station to the control server, the control server performs data mining and analysis according to the received information, and audits the communication behavior and trajectory of the communication terminal in the control area; if the control server audits that the communication terminal has a violation behavior in the control area, the control server sends a violation warning to the communication terminal, if the number of times of sending the violation warning to the communication terminal by the control server reaches a preset number, the control server lists the communication terminal as a blacklisted user without permission, and prohibits the communication terminal from initiating a service request again.

[0052] In the embodiment, the data mining and analysis of the control server according to the received information can be understood as that according to the communication terminal identity, time point, location, service type and service duration, a person can perform a certain service for a certain duration at a certain time in a certain place, through the time point and location statistics in a day, a trajectory graph can be outlined, through the identity identification information, it can be distinguished that several strangers appear in the control area within a certain time and their trajectories and service behaviors, and the approach of a user without permission to a sensitive area (through the duration of staying in the sensitive area or the number of times of approaching the sensitive area) can be actively alarmed.

[0053] Although the present application has been described as above with reference to the preferred embodiments, it is not intended to limit the present application. Those skilled in the art can make various modifications and improvements without departing from the spirit and scope of the present application. Therefore, the protection scope of the present application should be defined by the claims.

Claims

1. A method for managing communication terminals in a region requiring communication regulation, which protects each managed region by controlling the communication behavior of different user communication terminals in at least one managed region, characterized by, The communication terminal control method is realized by the communication terminal control system composed of the control server and the communication control base stations in each control area according to the following steps: S1: Based on the pre-setting of the permission information of different user communication terminals in each control area and the corresponding permission services on the control server, each communication control base station acquires the identity information of the communication terminals in the control area thereof, initiates a control request to the communication terminals, and then enters step S2; S2: If the communication terminal refuses the control request, the communication control base station will cut off all service requests of the communication terminal in the control area; if the communication terminal accepts the control request, the communication control base station sends the identity information and the authentication request message of the communication terminal to the control server, and then enters step S3; S3: The control server queries the permission information and the corresponding permission services of the communication terminal in the pre-set permission information and the corresponding permission services according to the received identity information, and sends the authentication result to the communication control base station, and then enters step S4; S4: The communication control base station saves the authentication result of the communication terminal, and then enters step S5 when the communication terminal initiates a service request; S5: Based on the service request sent by the communication terminal to the communication control base station, the communication control base station controls according to the authentication result of the communication terminal, and then enters step S6; S6: The communication control base station sends the service type, location, time information of the communication terminal and the identification information of the communication control base station to the control server, and the control server performs data mining and analysis according to the received information, and audits the communication behavior and track of the communication terminal in the control area; If the control server audits that the communication terminal has a violation in the control area, step S7 is entered, otherwise no processing is performed; S7: The control server sends a violation warning to the communication terminal, and if the number of times of sending the violation warning to the communication terminal by the control server reaches the pre-set number, the control server lists the communication terminal as a blacklisted user without permission, and prohibits the communication terminal from initiating a service request again.

2. The communication terminal management method according to claim 1, wherein The communication control base station comprises a communication control device, and the communication control device comprises a control module and a communication module; The control module is used for communication terminal identity information acquisition, information exchange with the communication module, and function configuration of the protocol stack; The communication module is used for establishing a message channel with the control server, transmitting various interactive information of the control module and the control server, and initiating a control request to the communication terminal entering the control area autonomously after the communication control base station is started.

3. The communication terminal management method according to claim 2, wherein The control module comprises a number taking submodule, an authentication submodule and a judgment submodule; The number taking submodule is used for buffering existing standard signaling content, and constructing related signaling to require the communication terminal to report identity information; The authentication submodule is used for initiating an authentication request to the control server by using the identity information of the communication terminal, and processing the authentication result returned by the control server; The judging sub-module judges the type of the service when the communication terminal initiates a service request, and then judges whether the communication terminal has the right to use the type of service according to the authentication result of the communication terminal, and decides whether to provide normal service communication service according to the judgment result.

4. The communication terminal management method according to claim 1, wherein The management and control server comprises a regional management device, the regional management device comprising a message processing module, an audit and interface module, and a database module; The message processing module is used for processing interactive information with the communication management and control base station, and writing data into the database or reading corresponding data from the database; The audit and interface module is used for providing a visual interactive interface for information input, rule setting and data analysis; The database module is used for storing various data information of the management and control system, including the identity information of each communication terminal, regions, permissions and service data.

5. The communication terminal management method according to claim 4, wherein The audit and interface module provides a visual login management interface, and distinguishes between administrator permissions and ordinary user permissions; The sub-regional division of the management and control region, the permission setting of the communication terminal and the setting of other rules are provided; The analysis and presentation of the service behavior of the communication terminal in the region are provided; The trajectory query and positioning of the communication terminal in the region are provided; Sensitive region alarms are provided.

6. The communication terminal management method according to claim 1, wherein The method for the communication management and control base station to obtain the identity information of the communication terminal comprises: If the communication terminal reselects into the management and control region from an external public network base station or other public base station, the communication management and control base station uses a pseudo-signaling method to make the communication terminal report the identity information; If the communication terminal switches into the management and control region from an external public network base station or other public base station, the RRC connection between the communication terminal and the original base station needs to be forcibly released, the communication terminal needs to be woken up to re-perform the communication terminal management and control process, and the current communication management and control base station uses a pseudo-signaling method to obtain the identity information; If the communication terminal moves between management and control base stations, the management and control base station uses a pseudo-signaling method or an intra-system handover authentication method to obtain the identity information.

7. The communication terminal management method according to claim 1, wherein The service types include short message service, online service and voice call service.

8. The communication terminal management method according to claim 7, wherein The permission information and the marking method of the corresponding permission service comprise: the permissions of each service type are represented by bit, a bit of 0 indicates that the service has no permission, and a bit of 1 indicates that the service has permission; all the permissions of the service types that need to be managed and controlled are arranged in a fixed order to form a binary number, which is recorded as the permission value of each communication terminal.

9. The communication terminal management method according to claim 8, wherein The steps for the management and control server to query the permission information and the corresponding permission service of the communication terminal comprise: the management and control server receives an authentication request message of the communication management and control base station, obtains the identification information of the communication management and control base station and the identity information of the communication terminal, queries the permission value of the communication terminal in the corresponding database according to the identification information of the communication management and control base station, regards the communication terminal without the permission value as a blacklisted user without permission, sets the permission value to all zeros, and sends the permission value of the communication terminal to the communication management and control base station as an authentication result.

10. The communication terminal management method according to claim 9, wherein The steps for the communication management and control base station to manage and control according to the authentication result comprise: If the permission value is all zeros, the communication management and control base station will block all service requests of the communication terminal. If the permission value is not zero, when the communication terminal initiates a service request, the permission value is compared, if the requested service type has permission, the communication management and control base station does not make any restrictions on the communication terminal; if the requested service type has no permission, the communication management and control base station blocks the communication terminal, and sends a no permission prompt to the communication terminal.

Images