A 5G home base station with user access authentication capability

Abstract

The present invention discloses a 5G home base station with user access authentication capability, and relates to the field of mobile communication technology. The 5G home base station includes: a 5G home base station networking architecture, a base station-side authorized user information maintenance device, and a base station-side user access authentication processing device, wherein: the 5G home base station networking architecture is used for 5G home base station networking; the base station-side authorized user information maintenance device is used to write, store, and associate authorized user information; the base station-side user access authentication processing device is used to identify and authenticate users accessing the base station, and to prohibit unauthorized users from entering. The present invention enables the 5G home base station to provide an efficient 5G wireless network for designated users, preventing unauthorized users from accessing and occupying user home bandwidth resources, resulting in a degradation of the home user's broadband experience.

Description

Technical Field

[0001] The present invention relates to the field of mobile communication technologies, and in particular to a 5G home base station with user access authentication capability. Background Art

[0002] In June 2019, with the issuance of 5G licenses to operators by the Ministry of Industry and Information Technology, China officially entered the 5G era. According to the current network traffic monitoring, a large number of users' business occurs indoors. Due to the working frequency band of wireless base stations, the signal penetration loss is large, and it is difficult for outdoor signals to achieve deep indoor coverage. In urban residential areas, relying solely on outdoor base stations to solve the internal mobile network coverage of residential areas has little effect. At the same time, since residential areas do not have the architectural characteristics of indoor open spaces or large bays, if indoor distribution systems are used for construction in residential areas, the utilization efficiency of base station equipment will be extremely low. On the other hand, due to the particularity of base station construction, construction in residential buildings has a great impact on user life and cannot be implemented on a large scale. Therefore, when planning and constructing wireless networks, operators need to take comprehensive measures for indoor coverage of residential buildings and adopt multiple measures. According to coverage scenarios and user needs, different construction methods are comprehensively selected to meet business development and user needs while effectively improving the utilization rate of indoor network resources, laying a solid foundation for the sustainable development of enterprises.

[0003] Based on the above needs, operators will gradually deploy 5G home base station equipment to residential users in order to further promote the dual-gigabit goals in residential scenarios, so as to enhance user perception and accelerate the construction of a dual-gigabit society.

[0004] Although operators can effectively improve users' mobile network experience by deploying 5G home base stations for residential users, the bandwidth resources of 5G home base station equipment currently occupy home broadband resources. If there are too many 5G base station users connected and the service throughput is too large, it will have a major impact on home broadband services, leading to problems such as IPTV freezing and slower WiFi download speeds. At the same time, the existing 5G home base stations themselves do not have an authentication mechanism for user access, and cannot avoid such network problems from causing obvious negative perceptions on users. Summary of the invention

[0005] In order to solve the above problems, the present invention provides a 5G home base station with user access authentication capability, and provides user authorization information writing and storage for the 5G home base station, so that the 5G home base station can provide an efficient 5G wireless network for designated users, prevent unauthorized users from accessing and occupying user home bandwidth resources, thereby degrading the broadband experience of home users.

[0006] In order to solve the above technical problems, the technical solution adopted by the present invention is:

[0007] The present invention provides a 5G home base station with user access authentication capability, including a 5G home base station networking architecture, a base station-side authorized user information maintenance device, and a base station-side user access authentication processing device, wherein:

[0008] 5G home base station networking architecture, used for 5G home base station networking;

[0009] The authorized user information maintenance device at the base station side is used to write, store, and associate the authorized user information;

[0010] The user access authentication processing device at the base station side is used to identify and authenticate users accessing the base station and prohibit unauthorized users from entering.

[0011] The present invention provides user authorization information writing and storage for 5G home base stations through the cooperation of 5G home base station networking architecture, authorized user information maintenance device on the base station side, and user access authentication processing device on the base station side, so as to realize that 5G home base stations provide efficient 5G wireless networks for designated users, prevent unauthorized users from accessing and occupying user home bandwidth resources, resulting in degradation of home users' broadband experience. The present invention can effectively intercept and prohibit unauthorized users from accessing base stations at home, avoid excessive access of unauthorized users to 5G home base stations, occupy home users' bandwidth resources, cause home users to have problems such as service freezes and network experience degradation, and guarantee the network experience of home users to the greatest extent. At the same time, home users have the ability to independently authorize base station access, can open base station access capabilities for visitors, set access permissions, etc., which is more convenient for home users to manage their own networks.

[0012] Furthermore, the above-mentioned 5G home base station networking includes:

[0013] 5G home base stations share the transmission channel with the wired network. The base station service transmission occupies the home broadband transmission resources. The data flow passes through the OLT to the switch. The base station service data is diverted to the UPF, and the home broadband service data is diverted to the wired network.

[0014] Furthermore, it includes: using the authorized user information maintenance device at the base station side to maintain multiple permissions, setting different permissions for different user accounts, and setting one or more user accounts under each permission.

[0015] Furthermore, the above user account includes a user number, user authority and an identifier of a device allowed to access.

[0016] Furthermore, it includes: using the authorized user information maintenance device on the base station side to encrypt the user number on the user side to obtain the user number ciphertext, and transmit the user number ciphertext, user authority and allowed access device identification on the user side to the base station. The base station saves the corresponding user number ciphertext, user authority and allowed access device identification, and associates the user information of each access with the user number ciphertext, user authority and allowed access device identification.

[0017] Furthermore, the identification and authentication of the user accessing the base station includes:

[0018] Before accessing, the terminal side searches the network, searches for system messages, and detects the accessible home base station cell;

[0019] The terminal initiates an RRC connection establishment request, which contains an S-TMSI field or a randomvalue field;

[0020] The base station receives the RRC connection establishment request and records the device identifier A currently receiving the request. If the request carries the randomvalue field, the user number and device identifier are judged to complete the user authority acceptance or rejection of user access;

[0021] If the request carries an S-TMSI field, the S-TMSI field is judged. If the base station stores the S-TMSI field of the corresponding user, the device identification is compared to complete the user authority acceptance or rejection of user access;

[0022] If the base station does not save the S-TMSI field of the corresponding user, the user identification is judged. If the user identification has a maintenance record in the base station authorization information maintenance table, the device identification is compared to complete the user authority acceptance or rejection of user access;

[0023] If there is no maintenance record for the user ID in the base station authorization information maintenance table, the user access is denied.

[0024] Furthermore, the terminal initiating an RRC connection establishment request includes:

[0025] If the terminal has accessed the corresponding base station within the preset time and the current terminal has an S-TMSI number, the S-TMSI field is carried in the RRC connection establishment request;

[0026] If the terminal has not accessed the base station within the preset time, or the current terminal does not have an S-TMSI number, the terminal retrieves the corresponding user number ciphertext by comparing the cell identification information in the system message; the terminal initiates an RRC connection establishment request and carries the randomvalue field, and the randomvalue field carries the corresponding user number ciphertext.

[0027] Furthermore, if the request carries a randomvalue field, the user number and device identification determination includes:

[0028] If the request carries a randomvalue field, the randomvalue field is compared with the saved user number ciphertext. If the corresponding user number is found, the device identification information B allowed to access by the user number is retrieved, and the device identification A is compared with the device identification information. If B is equal to A, it is accepted according to the corresponding user authority; if the corresponding user number is not found, or B is not equal to A, the user access is denied.

[0029] Furthermore, if the base station stores the S-TMSI field of the corresponding user, the device identification comparison includes:

[0030] If the base station saves the S-TMSI field of the corresponding user, the device identification information B allowed to access by the corresponding user number is extracted, and the device identification A is compared with the device identification information. If B is equal to A, it is accepted according to the corresponding user authority; if B is not equal to A, the user access is denied.

[0031] Furthermore, if the user identifier has a maintenance record in the base station authorization information maintenance table, performing device identifier comparison includes:

[0032] If the user ID has a maintenance record in the base station authorization information maintenance table, the device identification information B allowed to access by the corresponding user number is extracted, and the device identification A is compared with the device identification information. If B is equal to A, it is accepted according to the corresponding user authority, and the S-TMSI information of the access is kept in the base station authorization information maintenance table; if B is not equal to A, the user access is denied.

[0033] The present invention has at least the following advantages or beneficial effects:

[0034] The present invention provides a 5G home base station with user access authentication capability, and provides user authorization information writing and storage for the 5G home base station, so that the 5G home base station can provide an efficient 5G wireless network for designated users, prevent unauthorized users from accessing and occupying user home bandwidth resources, thereby degrading the broadband experience of home users. BRIEF DESCRIPTION OF THE DRAWINGS

[0035] In order to more clearly illustrate the technical solutions of the embodiments of the present invention, the drawings required for use in the embodiments are briefly introduced below. It should be understood that the following drawings only show certain embodiments of the present invention and therefore should not be regarded as limiting the scope. For ordinary technicians in this field, other related drawings can be obtained based on these drawings without creative work.

[0036] Figure 1 This is a schematic diagram of 5G home base station networking in an embodiment of the present invention;

[0037] Figure 2 Schematic diagram of the working process of the authorization information maintenance table device at the base station side in an embodiment of the present invention;

[0038] Figure 3 The present invention is a flowchart of user access authentication processing at the base station side in an embodiment of the present invention. DETAILED DESCRIPTION

[0039] In order to make the purpose, technical solutions and advantages of the embodiments of the present invention clearer, the technical solutions in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are part of the embodiments of the present invention, not all of the embodiments. Generally, the components of the embodiments of the present invention described and shown in the drawings here can be arranged and designed in various different configurations.

[0040] Therefore, the following detailed description of the embodiments of the present invention provided in the accompanying drawings is not intended to limit the scope of the invention claimed for protection, but merely represents selected embodiments of the present invention. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0041] It should be noted that similar reference numerals and letters denote similar items in the following drawings, and therefore, once an item is defined in one drawing, further definition and explanation thereof is not required in subsequent drawings.

[0042] It should be noted that, in this article, relational terms such as first and second, etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. In the absence of further restrictions, the elements defined by the sentence "comprise a ..." do not exclude the existence of other identical elements in the process, method, article or device including the elements.

[0043] Example:

[0044] An embodiment of the present invention provides a 5G home base station with user access authentication capability, including a 5G home base station networking architecture, a base station-side authorized user information maintenance device, and a base station-side user access authentication processing device, wherein:

[0045] 5G home base station networking architecture, used for 5G home base station networking;

[0046] The authorized user information maintenance device at the base station side is used to write, store, and associate the authorized user information;

[0047] The user access authentication processing device at the base station side is used to identify and authenticate users accessing the base station and prohibit unauthorized users from entering.

[0048] The present invention provides user authorization information writing and storage for 5G home base stations through the cooperation of 5G home base station networking architecture, authorized user information maintenance device on the base station side, and user access authentication processing device on the base station side, so as to realize that 5G home base stations provide efficient 5G wireless networks for designated users, prevent unauthorized users from accessing and occupying user home bandwidth resources, resulting in degradation of home users' broadband experience. The present invention can effectively intercept and prohibit unauthorized users from accessing base stations at home, avoid excessive access of unauthorized users to 5G home base stations, occupy home users' bandwidth resources, cause home users to have problems such as service freezes and network experience degradation, and guarantee the network experience of home users to the greatest extent. At the same time, home users have the ability to independently authorize base station access, can open base station access capabilities for visitors, set access permissions, etc., which is more convenient for home users to manage their own networks.

[0049] Furthermore, if Figure 1 As shown, in some embodiments of the present invention, the above-mentioned 5G home base station networking includes:

[0050] 5G home base stations share the transmission channel with the wired network. The base station service transmission occupies the home broadband transmission resources. The data flow passes through the OLT to the switch. The base station service data is diverted to the UPF, and the home broadband service data is diverted to the wired network.

[0051] Through the deployment of 5G home base stations, residential users can achieve full coverage of wired and wireless signals in their homes at the same time, improving user network experience and perception.

[0052] Further, it includes: using the authorized user information maintenance device at the base station side to maintain multiple permissions, setting different permissions for different user accounts, and setting one or more user accounts under each permission. The above user account includes a user number, user permissions and an allowed access device identifier.

[0053] In some embodiments of the present invention, the base station side maintains multiple permissions, such as high-priority users, ordinary users, restricted users, and guest users. Multiple user accounts can be set under each permission, which can be set and written by home users to set different permissions for different accounts.

[0054] Furthermore, if Figure 2 As shown, it includes: using the authorized user information maintenance device on the base station side to encrypt the user number on the user side to obtain the user number ciphertext, transmitting the user number ciphertext, user authority and allowed access device identifier on the user side to the base station, the base station saves the corresponding user number ciphertext, user authority and allowed access device identifier, and associates the user information of each access with the user number ciphertext, user authority and allowed access device identifier.

[0055] In some embodiments of the present invention, the account setting form of the home user is in the form of user number-user authority-access-permitted device identification, the user number is encrypted to form a ciphertext, and the user number ciphertext-user authority-access-permitted device identification information is transmitted to the base station. The base station saves the ciphertext information, and at the same time, the base station associates the user information of each access, such as S-TMSI, user identification and other information with the above information.

[0056] Furthermore, if Figure 3 As shown, the above identification and authentication of the user accessing the base station includes:

[0057] Before accessing, the terminal side searches the network, searches for system messages, and detects the accessible home base station cell;

[0058] The terminal initiates an RRC connection establishment request, which contains an S-TMSI field or a randomvalue field;

[0059] The base station receives the RRC connection establishment request and records the device identifier A currently receiving the request. If the request carries the randomvalue field, the user number and device identifier are judged to complete the user authority acceptance or rejection of user access;

[0060] If the request carries an S-TMSI field, the S-TMSI field is judged. If the base station stores the S-TMSI field of the corresponding user, the device identification is compared to complete the user authority acceptance or rejection of user access;

[0061] If the base station does not save the S-TMSI field of the corresponding user, the user identification is judged. If the user identification has a maintenance record in the base station authorization information maintenance table, the device identification is compared to complete the user authority acceptance or rejection of user access;

[0062] If there is no maintenance record for the user ID in the base station authorization information maintenance table, the user access is denied.

[0063] Furthermore, the terminal initiating an RRC connection establishment request includes:

[0064] If the terminal has accessed the corresponding base station within the preset time and the current terminal has an S-TMSI number, the S-TMSI field is carried in the RRC connection establishment request; the above preset time is the most recent time.

[0065] If the terminal has not accessed the base station within the preset time, or the current terminal does not have an S-TMSI number, the terminal retrieves the corresponding user number ciphertext by comparing the cell identification information in the system message; the terminal initiates an RRC connection establishment request and carries the randomvalue field, and the randomvalue field carries the corresponding user number ciphertext.

[0066] Furthermore, if the request carries a randomvalue field, the user number and device identification determination includes:

[0067] If the request carries a randomvalue field, the randomvalue field is compared with the saved user number ciphertext. If the corresponding user number is found, the device identification information B allowed to access by the user number is retrieved, and the device identification A is compared with the device identification information. If B is equal to A, it is accepted according to the corresponding user authority; if the corresponding user number is not found, or B is not equal to A, the user access is denied.

[0068] Furthermore, if the base station stores the S-TMSI field of the corresponding user, the device identification comparison includes:

[0069] If the base station saves the S-TMSI field of the corresponding user, it means that the terminal has recently accessed. The device identification information B allowed to access by the corresponding user number is extracted, and the device identification A is compared with the device identification information. If B is equal to A, it is accepted according to the corresponding user authority (the corresponding authority of the user is found in the base station authorization information maintenance table and accepted); if B is not equal to A, the user access is denied.

[0070] Furthermore, if the user identifier has a maintenance record in the base station authorization information maintenance table, performing device identifier comparison includes:

[0071] If the user ID has a maintenance record in the base station authorization information maintenance table, it means that the terminal has recently accessed, and the device identification information B allowed to access by the corresponding user number is extracted, and the device identification A is compared with the device identification information. If B is equal to A, it is accepted according to the corresponding user authority (the corresponding authority of the user is found in the base station authorization information maintenance table and accepted), and the S-TMSI information of the access is kept in the base station authorization information maintenance table; if B is not equal to A, the user access is denied.

[0072] In some embodiments of the present invention, after installing a 5G home base station device for a user's home, the user immediately sets up authorized users, and other mobile phone users around the home residence access the 5G home base station, occupying the user's home bandwidth resources, resulting in a degradation of the user's broadband service experience. The user sets the home user information through the authorization information maintenance function, and the unauthorized user terminal initiates an RRC connection request with the user's home 5G base station device. Since the terminal has recently accessed the user's 5G home base station device, the RRC connection request field carries S-TMSI information. The base station obtains the terminal identifier A through the S-TMSI information. Since the user has set the home user authorization information, the terminal S-TMSI information does not appear in the authorization information maintenance table, and the terminal identifier A is not in the authorization information table. The base station rejects the terminal access request, and the terminal cannot access the user's 5G home base station.

[0073] In another embodiment of the present invention, a 5G home base station device is installed in the user's home. A visitor in the user's home needs to connect to the 5G home base station for business. Since the visitor is an unauthorized user, the visitor cannot connect to the user's 5G home base station device. The user sets the home user information through the authorization information maintenance function to allow specific visitors to connect to the 5G home base station and conduct business. After the setting is completed, the visitor terminal initiates an RRC connection request to the user's 5G home base station. The message carries a randomvalue field. The randomvalue field is used to extract the user terminal identifier A, and the allowed visitor terminal identifier B written by the user to the base station is compared. If A=B, the base station allows the visitor to access and provides the visitor with base station network services according to the permissions written in the authorization information maintenance table.

[0074] The above are only preferred embodiments of the present invention and are not intended to limit the present invention. For those skilled in the art, the present invention may have various modifications and variations. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present invention shall be included in the protection scope of the present invention.

[0075] It will be apparent to those skilled in the art that the present application is not limited to the details of the exemplary embodiments described above, and that the present application can be implemented in other specific forms without departing from the spirit or essential features of the present application. Therefore, the embodiments should be considered exemplary and non-limiting in all respects, and the scope of the present application is defined by the appended claims rather than the above description, and it is intended that all changes falling within the meaning and scope of the equivalent elements of the claims be included in the present application. Any reference numeral in a claim should not be considered as limiting the claim to which it relates.

Claims

1. A 5G home base station with user access authentication capability, characterized in that: It includes a 5G home base station networking architecture, a base station-side authorized user information maintenance device, and a base station-side user access authentication processing device, wherein: 5G home base station networking architecture, used for 5G home base station networking; The authorized user information maintenance device at the base station side is used to write, store, and associate the authorized user information; The user access authentication processing device on the base station side is used to identify and authenticate users accessing the base station and prohibit unauthorized users from entering; The authorized user information maintenance device at the base station side is used to maintain multiple permissions, different permissions are set for different user accounts, and one or more user accounts are set under each permission.

2. A 5G home base station with user access authentication capability according to claim 1, characterized in that: The 5G home base station networking includes: 5G home base stations share the transmission channel with the wired network. The base station service transmission occupies the home broadband transmission resources. The data flow passes through the OLT to the switch. The base station service data is diverted to the UPF, and the home broadband service data is diverted to the wired network.

3. A 5G home base station with user access authentication capability according to claim 1, characterized in that: The user account includes a user number, user authority and an identifier of a device that is allowed to access.

4. A 5G home base station with user access authentication capability according to claim 3, characterized in that: include: The user number on the user side is encrypted by using the authorized user information maintenance device on the base station side to obtain the user number ciphertext, and the user number ciphertext, user authority and allowed access device identification on the user side are transmitted to the base station. The base station saves the corresponding user number ciphertext, user authority and allowed access device identification, and associates the user information of each access with the user number ciphertext, user authority and allowed access device identification.

5. A 5G home base station with user access authentication capability according to claim 4, characterized in that: The identifying and authenticating the user accessing the base station includes: Before accessing, the terminal side searches the network, searches for system messages, and detects the accessible home base station cell; The terminal initiates an RRC connection establishment request, which contains an S-TMSI field or a randomvalue field; The base station receives the RRC connection establishment request and records the device identifier A currently receiving the request. If the request carries the randomvalue field, the user number and device identifier are judged to complete the user authority acceptance or rejection of user access; If the request carries an S-TMSI field, the S-TMSI field is judged. If the base station stores the S-TMSI field of the corresponding user, the device identification is compared to complete the user authority acceptance or rejection of user access; If the base station does not save the S-TMSI field of the corresponding user, the user identification is judged. If the user identification has a maintenance record in the base station authorization information maintenance table, the device identification is compared to complete the user authority acceptance or rejection of user access; If there is no maintenance record for the user ID in the base station authorization information maintenance table, the user access is denied.

6. A 5G home base station with user access authentication capability according to claim 5, characterized in that: The terminal initiating an RRC connection establishment request includes: If the terminal has accessed the corresponding base station within the preset time and the current terminal has an S-TMSI number, the S-TMSI field is carried in the RRC connection establishment request; If the terminal has not accessed the base station within the preset time, or the current terminal does not have an S-TMSI number, the terminal retrieves the corresponding user number ciphertext by comparing the cell identification information in the system message; the terminal initiates an RRC connection establishment request and carries the randomvalue field, and the randomvalue field carries the corresponding user number ciphertext.

7. A 5G home base station with user access authentication capability according to claim 5, characterized in that: If the request carries the randomvalue field, determining the user number and device identification includes: If the request carries a randomvalue field, the randomvalue field is compared with the saved user number ciphertext. If the corresponding user number is found, the device identification information B allowed to access by the user number is retrieved, and the device identification A is compared with the device identification information. If B is equal to A, it is accepted according to the corresponding user authority; if the corresponding user number is not found, or B is not equal to A, the user access is denied.

8. A 5G home base station with user access authentication capability according to claim 5, characterized in that: If the base station stores the S-TMSI field of the corresponding user, performing device identification comparison includes: If the base station saves the S-TMSI field of the corresponding user, the device identification information B allowed to access by the corresponding user number is extracted, and the device identification A is compared with the device identification information. If B is equal to A, it is accepted according to the corresponding user authority; if B is not equal to A, the user access is denied.

9. A 5G home base station with user access authentication capability according to claim 5, characterized in that: If the user identifier has a maintenance record in the base station authorization information maintenance table, performing device identifier comparison includes: If the user ID has a maintenance record in the base station authorization information maintenance table, the device identification information B allowed to access by the corresponding user number is extracted, and the device identification A is compared with the device identification information. If B is equal to A, it is accepted according to the corresponding user authority, and the S-TMSI information of the access is saved in the base station authorization information maintenance table; if B is not equal to A, the user access is denied.

Images