Device access authentication method based on random access preamble sequence signal

Abstract

The present disclosure provides a device access authentication method based on a random access preamble sequence signal, and relates to the technical field of wireless communication. The method comprises the following steps: receiving a random access preamble sequence signal sent by a device to be accessed, wherein the random access preamble sequence signal is sent by the device to be accessed according to cell information broadcast by a target base station; determining physical layer characteristic information of the device to be accessed according to the random access preamble sequence signal; performing access identity authentication on the device to be accessed according to the physical layer characteristic information of the device to be accessed; and determining whether to access the device to be accessed to the target base station according to the authentication result. The present disclosure can avoid wasting base station air interface resources and improve the security of the random access process of the user terminal.

Description

Technical Field

[0001] This disclosure relates to the field of wireless communication technology, and in particular to a device access authentication method based on a random access preamble sequence signal. Background Technology

[0002] For existing 5G protocols, the user authentication process occurs on the core network side, which can easily lead to unauthorized users occupying air interface resources, affecting user experience and posing security risks.

[0003] In related technologies, traditional high-level authentication methods rely on information actively reported by the device. On the one hand, the device does not report its own identity information during the base station air interface access process in the existing protocol process; on the other hand, traditional high-level authentication requires complex encryption algorithms, which is cumbersome and does not meet the high latency sensitivity requirements of the base station access process. At the same time, there is also the possibility of malicious users forging identity information.

[0004] Given that the existing 5G protocol uses a random access mechanism, when there are too many unauthorized devices, even with authentication on the base station side, a large number of unauthorized devices may occupy the air interface channel, preventing legitimate devices from accessing the network.

[0005] It should be noted that the information disclosed in the background section above is only used to enhance the understanding of the background of this disclosure, and therefore may include information that does not constitute prior art known to those skilled in the art. Summary of the Invention

[0006] This disclosure provides a device access authentication method based on a random access preamble sequence signal, which at least to some extent overcomes the security risks that exist in the device access process in related technologies.

[0007] Other features and advantages of this disclosure will become apparent from the following detailed description, or may be learned in part from practice of this disclosure.

[0008] According to one aspect of this disclosure, a device access authentication method based on a random access preamble sequence signal is provided, comprising: receiving a random access preamble sequence signal sent by a device to be accessed, wherein the random access preamble sequence signal is sent by the device to be accessed based on cell information broadcast by a target base station; determining physical layer characteristic information of the device to be accessed based on the random access preamble sequence signal; performing access identity authentication on the device to be accessed based on the physical layer characteristic information of the device to be accessed; and determining whether to allow the device to be accessed to connect to the target base station based on the authentication result.

[0009] In some embodiments, access authentication of the device to be accessed is performed based on the physical layer feature information of the device to be accessed, including: obtaining a pre-established physical layer feature identity information database of the target base station, wherein the physical layer feature identity information database contains physical layer feature information of multiple devices allowed to access the target base station; determining whether the physical layer feature information of the device to be accessed exists in the physical layer feature identity information database; if the physical layer feature information of the device to be accessed exists in the physical layer feature identity information database, comparing the physical layer feature information of the device to be accessed with the existing physical layer features in the physical layer feature identity information database; if the comparison is successful, determining that the identity information of the device to be accessed has passed access authentication; if the comparison fails, determining that the identity information of the device to be accessed has failed access authentication.

[0010] In some embodiments, after determining whether the physical layer feature information of the device to be accessed exists in the physical layer feature identity information database, the method further includes: if the physical layer feature information of the device to be accessed does not exist in the physical layer feature identity information database, then temporarily accessing the device to be accessed to the core network through the target base station, and obtaining the identity authentication result of the device to be accessed returned by the core network; if the identity authentication result returned by the core network is successful access identity authentication, then determining that the identity information of the device to be accessed has passed access identity authentication, and adding the physical layer feature information of the device to be accessed to the physical layer feature identity information database of the target base station; if the identity authentication result returned by the core network is unsuccessful access identity authentication, then determining that the identity information of the device to be accessed has failed access identity authentication.

[0011] In some embodiments, the target base station includes: a first base station or a second base station, wherein the first base station is a base station located in a public network, and the second base station is a base station located in a private network.

[0012] In some embodiments, after determining whether to connect the device to be accessed to the target base station based on the authentication result, the method further includes: if the target base station is a first base station, then updating the physical layer feature identity information database of the target base station based on the authentication result.

[0013] According to another aspect of this disclosure, a device access authentication method based on a random access preamble sequence signal is also provided, comprising: sending a random access preamble sequence signal to a target base station, so that the target base station determines the physical layer characteristic information of the device to be accessed based on the random access preamble sequence signal, and performs access identity authentication on the device to be accessed based on the physical layer characteristic information of the device to be accessed, so as to obtain an authentication result and determine whether to allow the device to be accessed to access the target base station, wherein the random access preamble sequence signal is sent by the device to be accessed based on cell information broadcast by the target base station.

[0014] According to another aspect of this disclosure, a device access authentication system based on a random access preamble sequence signal is also provided, comprising: a target base station and a device to be accessed; wherein the device to be accessed is configured to send a random access preamble sequence signal to the target base station, wherein the random access preamble sequence signal is sent by the device to be accessed based on cell information broadcast by the target base station; the target base station is configured to receive the random access preamble sequence signal sent by the device to be accessed; wherein the target base station is further configured to determine the physical layer characteristic information of the device to be accessed based on the random access preamble sequence signal; wherein the target base station is further configured to perform access identity authentication on the device to be accessed based on the physical layer characteristic information of the device to be accessed; wherein the target base station is further configured to determine whether to allow the device to be accessed to connect to the target base station based on the authentication result.

[0015] According to another aspect of this disclosure, a base station is also provided, comprising: a signal receiving module for receiving a random access preamble sequence signal sent by a device to be accessed, wherein the random access preamble sequence signal is sent by the device to be accessed based on cell information broadcast by a target base station; an information confirmation module for determining physical layer characteristic information of the device to be accessed based on the random access preamble sequence signal; an identity authentication module for performing access identity authentication on the device to be accessed based on the physical layer characteristic information of the device to be accessed; and a device access module for determining whether to connect the device to be accessed to the target base station based on the authentication result.

[0016] According to another aspect of this disclosure, a terminal is also provided, comprising: a signal transmitting module, configured to transmit a random access preamble sequence signal to a target base station, so that the target base station determines the physical layer characteristic information of the terminal based on the random access preamble sequence signal, and performs access authentication on the device to be accessed based on the physical layer characteristic information of the device to be accessed, so as to obtain an authentication result and determine whether to allow the device to be accessed to access the target base station, wherein the random access preamble sequence signal is transmitted by the device to be accessed based on cell information broadcast by the target base station.

[0017] According to another aspect of this disclosure, an electronic device is also provided, comprising: a processor; and a memory for storing executable instructions of the processor; wherein the processor is configured to execute the device access authentication method based on a random access preamble sequence signal as described above by executing the executable instructions.

[0018] According to another aspect of this disclosure, a computer-readable storage medium is also provided, on which a computer program is stored, which, when executed by a processor, implements the device access authentication method based on a random access preamble sequence signal as described in any one of the preceding claims.

[0019] According to another aspect of this disclosure, a computer program product is also provided, including a computer program that, when executed by a processor, implements the device access authentication method based on a random access preamble sequence signal as described above.

[0020] The device access authentication method based on a random access preamble sequence signal provided in the embodiments of this disclosure determines the physical layer characteristic information of the device to be accessed by receiving the random access preamble sequence signal sent by the device to be accessed, and performs identity authentication on the device to be accessed based on the obtained physical layer characteristic information. Based on the authentication result, it determines whether to allow the device to be accessed to connect to the target base station. The embodiments of this disclosure can avoid wasting base station air interface resources and improve the security of the random access process for user terminals.

[0021] It should be understood that the above general description and the following detailed description are exemplary and explanatory only, and are not intended to limit this disclosure. Attached Figure Description

[0022] The accompanying drawings, which are incorporated in and form part of this specification, illustrate embodiments consistent with this disclosure and, together with the description, serve to explain the principles of this disclosure. It is obvious that the drawings described below are merely some embodiments of this disclosure, and those skilled in the art can obtain other drawings based on these drawings without any inventive effort.

[0023] Figure 1 This diagram illustrates a device access authentication method based on a random access preamble sequence signal according to an embodiment of the present disclosure.

[0024] Figure 2 This illustration shows a flowchart of another device access authentication method based on a random access preamble sequence signal in an embodiment of this disclosure;

[0025] Figure 3This diagram illustrates a device access authentication method based on a random access preamble sequence signal in a public network environment, according to an embodiment of this disclosure.

[0026] Figure 4 This invention discloses a flowchart of a device access authentication method based on a random access preamble sequence signal in a private network environment according to an embodiment of the present disclosure.

[0027] Figure 5 This diagram illustrates a signaling flowchart of a device access authentication method based on a random access preamble sequence signal according to an embodiment of this disclosure.

[0028] Figure 6 This diagram illustrates a scenario of dedicated 5G private network base station access control in an embodiment of this disclosure.

[0029] Figure 7 This diagram illustrates a device access authentication system based on a random access preamble sequence signal according to an embodiment of the present disclosure.

[0030] Figure 8 This diagram illustrates a base station according to an embodiment of the present disclosure;

[0031] Figure 9 This diagram illustrates a terminal according to an embodiment of the present disclosure;

[0032] Figure 10 A block diagram of an electronic device according to an embodiment of the present disclosure is shown. Detailed Implementation

[0033] Exemplary embodiments will now be described more fully with reference to the accompanying drawings. However, these exemplary embodiments can be implemented in many forms and should not be construed as limited to the examples set forth herein; rather, they are provided so that this disclosure will be more comprehensive and complete, and will fully convey the concept of the exemplary embodiments to those skilled in the art. The described features, structures, or characteristics may be combined in any suitable manner in one or more embodiments.

[0034] Furthermore, the accompanying drawings are merely illustrative of this disclosure and are not necessarily drawn to scale. The same reference numerals in the drawings denote the same or similar parts, and therefore repeated descriptions of them will be omitted. Some block diagrams shown in the drawings are functional entities and do not necessarily correspond to physically or logically independent entities. These functional entities may be implemented in software, in one or more hardware modules or integrated circuits, or in different network and / or processor devices and / or microcontroller devices.

[0035] The specific implementation methods of the embodiments of this disclosure will now be described in detail with reference to the accompanying drawings.

[0036] Figure 1This diagram illustrates a device access authentication method based on a random access preamble sequence signal, as shown in an embodiment of this disclosure. Figure 1 As shown, the method includes the following steps:

[0037] S102, receive the random access preamble sequence signal sent by the device to be accessed, wherein the random access preamble sequence signal is sent by the device to be accessed based on the cell information broadcast by the target base station.

[0038] In one embodiment of this disclosure, the random access preamble sequence signal is a preamble signal. The current 5G protocol has defined a variety of fixed-format preamble signals for functions such as time synchronization when establishing connections between devices. The device to be accessed refers to the device to be accessed by the target base station. Before formally establishing a connection with the base station, the device to be accessed will send a preamble signal to the target base station.

[0039] S104. Determine the physical layer characteristic information of the device to be accessed based on the random access preamble sequence signal.

[0040] In one embodiment of this disclosure, physical layer feature information typically refers to features extracted from hardware or modulation using the unique characteristics of the communication device and the wireless environment to form a unique feature of the communication device. Physical layer feature information may include radio frequency fingerprints and channel features, etc.

[0041] S106. Based on the physical layer characteristic information of the device to be accessed, perform access identity authentication on the device to be accessed.

[0042] In one embodiment of this disclosure, access authentication is performed on the device to be accessed based on the extracted physical layer feature information of the device to be accessed. The process of authenticating a device using physical layer feature information is called physical layer authentication.

[0043] S108. Based on the authentication results, determine whether to connect the device to be accessed to the target base station.

[0044] As described above, in this embodiment, the base station determines the physical layer characteristic information of the device to be accessed by receiving the random access preamble sequence signal sent by the device to be accessed, and performs identity authentication on the device based on the obtained physical layer characteristic information. Based on the authentication result, it determines whether to allow the device to be accessed to the target base station. This embodiment avoids wasting base station air interface resources and improves the security of the random access process for user terminals.

[0045] The embodiments disclosed herein can be applied to customized dedicated base stations or base stations with high security requirements. Typically, user authentication is performed before the initial access, i.e., initial access authentication. Initial access authentication refers to the authentication process when a user device attempts to access the base station before establishing a connection, distinguishing it from the authentication process when the device has subsequently established a stable connection with the base station and maintains continuous communication.

[0046] In one embodiment of this disclosure, S106 includes: acquiring a pre-established physical layer feature identity information database of a target base station, wherein the physical layer feature identity information database contains physical layer feature information of multiple devices allowed to access the target base station; determining whether the physical layer feature information of the device to be accessed exists in the physical layer feature identity information database; if the physical layer feature information of the device to be accessed exists in the physical layer feature identity information database, comparing the physical layer feature information of the device to be accessed with the existing physical layer features in the physical layer feature identity information database; if the comparison is successful, determining that the identity information of the device to be accessed has passed access identity authentication; if the comparison fails, determining that the identity information of the device to be accessed has not passed access identity authentication.

[0047] In one embodiment of this disclosure, in a public network environment, since unfamiliar legitimate devices are allowed to access the base station, it is impossible to establish a complete physical layer feature identity information database in advance. Instead, the existing physical layer feature identity information database can be used for comparison, and the core network can be used to authenticate the user's identity. The database is then updated in a timely manner based on the authentication results. In a private network environment, since only a limited number of legitimate devices are allowed to access the network, a complete physical layer feature identity information database can be established in advance without the need for an additional core network authentication process.

[0048] In one embodiment of this disclosure, after determining whether the physical layer feature information of the device to be accessed exists in the physical layer feature identity information database, the method further includes: if the physical layer feature information of the device to be accessed does not exist in the physical layer feature identity information database, then the device to be accessed is temporarily connected to the core network through the target base station, and the identity authentication result of the device to be accessed returned by the core network is obtained; if the identity authentication result returned by the core network is successful access identity authentication, then the identity information of the device to be accessed is determined to have passed access identity authentication, and the physical layer feature information of the device to be accessed is added to the physical layer feature identity information database of the target base station; if the identity authentication result returned by the core network is unsuccessful access identity authentication, then the identity information of the device to be accessed is determined to have failed access identity authentication. By using a queue-based access selection mechanism, access responses are selectively sent to ensure that legitimate devices can successfully access the network within a limited time.

[0049] In one embodiment of this disclosure, the target base station includes: a first base station or a second base station, wherein the first base station is a base station located in a public network and the second base station is a base station located in a private network.

[0050] In one embodiment of this disclosure, after S108, the method further includes: if the target base station is a first base station, then updating the physical layer feature identity information database of the target base station according to the authentication result. Because public network base station users are highly mobile, the base station needs to periodically update and maintain the physical layer feature identity information database and clean up expired identity information.

[0051] In one embodiment of this disclosure, the physical layer feature information typically used for physical layer authentication mainly refers to the radio frequency (RF) fingerprint. The RF fingerprint is obtained by inputting IQ data (including raw IQ data and equalized IQ data) carrying a preamble signal into a neural network for feature extraction. By leveraging the uniqueness of the RF fingerprint and the stationarity of the wireless channel's coherence time, and by extracting the device's physical layer features using the preamble signal transmitted during each access, and designing an authentication threshold, lightweight physical layer initial authentication access control is achieved.

[0052] In one embodiment of this disclosure, physical layer features possess stability, heterogeneity, randomness, uniqueness, and difficulty in replication. Physical layer authentication is based on wireless channel characteristics or the radio frequency characteristics of communication entity hardware devices. It implements packet authentication based on wireless channel state and identity authentication based on radio frequency fingerprints at the physical layer, which does not depend on computational complexity and theoretically possesses unconditional security. Furthermore, since physical layer authentication does not focus on signal content, it does not require users to send additional identity information. For the user side, it does not change the original protocol process, and for the base station side, no new hardware needs to be added, facilitating upgrades and deployments.

[0053] Figure 2 This illustration shows a flowchart of another device access authentication method based on a random access preamble sequence signal in an embodiment of this disclosure, such as... Figure 2 As shown, the method includes the following steps:

[0054] S202, a random access preamble sequence signal is sent to the target base station so that the target base station can determine the physical layer characteristic information of the device to be accessed based on the random access preamble sequence signal, and perform access identity authentication on the device to be accessed based on the physical layer characteristic information of the device to be accessed, so as to obtain the authentication result and determine whether to allow the device to be accessed to the target base station. The random access preamble sequence signal is sent by the device to be accessed based on the cell information broadcast by the target base station.

[0055] As described above, in this embodiment of the present disclosure, the device to be accessed sends a random access preamble sequence signal to the target base station. The target base station then determines the physical layer characteristic information of the device to be accessed based on this signal, performs authentication on the device based on the obtained physical layer characteristic information, and determines whether to allow the device to access the target base station based on the authentication result. This embodiment of the present disclosure avoids wasting base station air interface resources and improves the security of the random access process for user terminals.

[0056] Figure 3 This invention discloses a flowchart illustrating a device access authentication method based on a random access preamble sequence signal in a public network environment, as shown in the embodiments of this invention. Figure 3 As shown, the method includes:

[0057] S301, the target base station broadcasts its own cell information.

[0058] S302, the device to be accessed sends a preamble signal to the target base station based on the received cell information to begin the random contention access process.

[0059] S303, the target base station extracts the physical layer feature information of the device to be accessed based on the preamble signal sent by the device to be accessed.

[0060] S304. Determine whether the extracted physical layer feature information exists in the existing physical layer feature identity information database. If yes, proceed to S305; otherwise, proceed to S306.

[0061] S305: Determine the legitimacy of the identity of the device to be accessed based on the physical layer characteristic information. If yes, proceed to S307; otherwise, proceed to S308.

[0062] S306 allows the device to temporarily access the target base station and sends the physical layer characteristic information of the device to the core network.

[0063] S307 allows the device to access the target base station.

[0064] S308, Deny access to the target base station for the device to be accessed.

[0065] S309, based on the identity authentication result, update the existing physical layer feature identity information database of the target base station.

[0066] As described above, in this embodiment, the public network base station determines the physical layer characteristic information of the device to be accessed by receiving the random access preamble sequence signal sent by the device to be accessed, and performs identity authentication on the device based on the obtained physical layer characteristic information. Based on the authentication result, it determines whether to allow the device to be accessed to the target base station, and finally updates the physical layer characteristic identity information database on the public network base station. This embodiment can avoid wasting base station air interface resources and improve the security of the random access process for user terminals.

[0067] Figure 4 This invention discloses a flowchart illustrating a device access authentication method based on a random access preamble sequence signal in a private network environment, as shown in the embodiments of this invention. Figure 4 As shown, the method includes:

[0068] S401, the target base station broadcasts its own cell information.

[0069] S402, the device to be accessed sends a preamble signal to the target base station based on the received cell information to begin the random contention access process.

[0070] S403, the target base station extracts the physical layer feature information of the device to be accessed based on the preamble signal sent by the device to be accessed.

[0071] S404, determine whether the extracted physical layer feature information exists in the existing physical layer feature identity information. If yes, proceed to S405; otherwise, proceed to S406.

[0072] S405 allows the device to access the target base station.

[0073] S406, Deny access to the target base station for the device to be accessed.

[0074] As described above, in this embodiment of the disclosure, the private network base station determines the physical layer characteristic information of the device to be accessed by receiving the random access preamble sequence signal sent by the device to be accessed, and performs identity authentication on the device to be accessed based on the obtained physical layer characteristic information. Based on the authentication result, it determines whether to allow the device to be accessed to the target base station. This embodiment of the disclosure can avoid wasting base station air interface resources and improve the security of the random access process for user terminals.

[0075] Figure 5 This diagram illustrates a signaling flowchart of a device access authentication method based on a random access preamble sequence signal, as shown in an embodiment of this disclosure. Figure 5 As shown, the method includes:

[0076] S501, the target base station broadcasts its own cell information to the terminal.

[0077] S502: The terminal sends a preamble signal to the target base station based on the received cell information.

[0078] S503: The target base station extracts the physical layer feature information of the terminal based on the preamble signal sent by the terminal and performs user authentication.

[0079] S504, the target base station sends a Random Access Response (RAR) message to the authenticated user terminal.

[0080] In one embodiment of this disclosure, the Random Access Response (RAR) message may include a temporary scrambling parameter C-RNTI.

[0081] In step S505, the terminal receives the RAR sent by the target base station and obtains a temporary scrambling parameter C-RNTI from it. During scheduled transmission, the terminal uses the C-RNTI for scrambling and transmits a Radio Resource Control (RRC) connection request and a terminal identifier to the target base station.

[0082] In one embodiment of this disclosure, the terminal identifier is a user-defined identifier on the terminal side, such as a device ID, or any other identifier that can serve a distinguishing function. This disclosure does not specifically limit this.

[0083] S506, the target base station randomly selects a scheduling request from the scheduling requests received from one or more terminals, and sends a contention access resolution message to the terminal.

[0084] In one embodiment of this disclosure, the contention access resolution message includes an identifier reported by the terminal selected by the target base station. In this case, only the terminal corresponding to this identifier can complete the access process; all other terminals must resend a preamble signal to the target base station to begin a new access procedure.

[0085] S507, determine whether the terminal identifier carried in the contention access resolution message sent by the base station is consistent with the identifier reported by the terminal. If yes, proceed to S508; otherwise, proceed to S509.

[0086] S508, the terminal accesses the target base station.

[0087] S509, restart the access process, return to S503.

[0088] As described above, in this embodiment, when a user equipment (UE) first accesses a base station, a random contention access procedure is initiated before establishing an initial connection between the terminal and the target base station. The base station obtains the physical layer characteristic parameters of the transmitting device based on the preamble signal and compares them with the existing physical layer characteristic identity information database of legitimate devices. It only sends a Random Access Response (RAR) to devices with legitimate physical layer characteristic information, thus achieving controlled random contention access for devices. Furthermore, for base stations in different scenarios, an identity database update mechanism for public base stations and a fixed identity database mechanism for dedicated base stations are designed to meet the needs of different scenarios. This embodiment can avoid wasting base station air interface resources and improve the security of the random access process for user terminals.

[0089] Figure 6 This diagram illustrates a scenario for 5G private network dedicated base station access control in an embodiment of this disclosure, as shown below. Figure 6 As shown, in an industrial IoT 5G private network, a dedicated base station (i.e., a 5G private network exclusive base station) is configured to handle the access of several IoT devices. Within the coverage area, there are also multiple malicious and illegal devices that repeatedly attempt to access the network in order to occupy the air interface channel resources of legitimate users. At the same time, the base station coverage area includes some devices in the public environment (i.e., the public network environment), which may also attempt to access the base station, affecting the normal communication of legitimate users.

[0090] In one embodiment of this disclosure, based on the characteristics of private network base stations, the number of users within the network is limited and fixed. Therefore, the physical layer characteristics of all devices are recorded in advance, and a physical layer characteristic identity information database is pre-established for the private network base station.

[0091] In one embodiment of this disclosure, if a legitimate device in a production environment (i.e., a private network environment) attempts to access the base station, while a large number of unauthorized users repeatedly attempt to access the base station and cause interference, the base station receives preamble signals from multiple different devices simultaneously. The base station sequentially extracts the radio frequency fingerprint corresponding to each device through each preamble signal and compares it with an existing physical layer feature identity information database.

[0092] It should be noted that various physical layer feature information can be extracted through the preamble signal. The above example of radio frequency fingerprinting is only for illustrative purposes. This disclosure does not specifically limit the type of physical layer feature information extracted.

[0093] It should be noted that, under the specific condition of a 5G private network base station, "legitimate device" can refer to any legitimate device within the private network environment. In practice, a legitimate device can refer to any device whose physical layer feature identity information already exists in the physical layer feature database, or a device that has been authenticated by the core network. Figure 6The images in this document are for illustrative purposes only. The specific device should be based on the actual situation, and this disclosure does not impose any specific limitations on it.

[0094] It should be noted that, under the specific condition of a 5G private network base station, "illegal device" can refer to any device in a public environment or any illegal device in a private network environment. In practice, "illegal device" can refer to any device that does not have physical layer feature information in the physical layer feature identity information database and is illegal after being authenticated by the core network. Figure 6 The images in this document are for illustrative purposes only. The specific device should be based on the actual situation, and this disclosure does not impose any specific limitations on it.

[0095] In one embodiment of this disclosure, if the device corresponding to the current preamble signal is identified as an unauthorized user, the access request of the device is ignored or rejected; if the device corresponding to the current preamble signal is identified as a legitimate user, a Random Access Response (RAR) message is sent to the device to ensure that a legitimate user can successfully access the device within a limited time.

[0096] It should be noted that the embodiments disclosed herein are not limited to 5G private network environments. The above embodiments are merely illustrative and may be applied to more scenarios as technology develops. This disclosure does not impose any specific limitations on them.

[0097] Figure 7 This diagram illustrates a device access authentication system based on a random access preamble sequence signal, as shown in an embodiment of this disclosure. Figure 7 As shown, the system includes: target base station 701 and device to be accessed 702.

[0098] The device to be accessed 702 is used to send a random access preamble sequence signal to the target base station, wherein the random access preamble sequence signal is sent by the device to be accessed according to the cell information broadcast by the target base station; the target base station 701 is used to receive the random access preamble sequence signal sent by the device to be accessed.

[0099] Among them, the target base station 701 is also used to determine the physical layer characteristic information of the device to be accessed based on the random access preamble sequence signal;

[0100] Among them, the target base station 701 is also used to perform access identity authentication on the device to be accessed based on the physical layer feature information of the device to be accessed;

[0101] The target base station 701 is also used to determine whether to connect the device to be accessed to the target base station based on the authentication result.

[0102] It should be noted that in actual practice, any number of other base stations and devices to be accessed may be used, and this disclosure does not specifically limit this.

[0103] As described above, in this embodiment, the device to be accessed sends a random access preamble sequence signal to the target base station. The base station, upon receiving the random access preamble sequence signal, determines the physical layer characteristic information of the device to be accessed, and performs authentication based on the obtained physical layer characteristic information. Based on the authentication result, it determines whether to allow the device to access the target base station. This embodiment avoids wasting base station air interface resources and improves the security of the random access process for user terminals.

[0104] Based on the same inventive concept, this disclosure also provides a base station, as described in the following embodiments. Since the principle by which this device embodiment solves the problem is similar to that of the above-described method embodiment, the implementation of this device embodiment can refer to the implementation of the above-described method embodiment, and repeated details will not be elaborated further.

[0105] Figure 8 This diagram illustrates a base station according to an embodiment of the present disclosure, such as... Figure 8 As shown, the device includes: a signal receiving module 801, an information confirmation module 802, an identity authentication module 803, and a device access module 804.

[0106] The system includes a signal receiving module 801, which receives a random access preamble sequence signal sent by the device to be accessed, wherein the random access preamble sequence signal is sent by the device to be accessed based on cell information broadcast by the target base station; an information confirmation module 802, which determines the physical layer characteristic information of the device to be accessed based on the random access preamble sequence signal; an identity authentication module 803, which performs access identity authentication on the device to be accessed based on the physical layer characteristic information of the device to be accessed; and a device access module 804, which determines whether to allow the device to be accessed to connect to the target base station based on the authentication result.

[0107] As described above, in this embodiment, the base station determines the physical layer characteristic information of the device to be accessed by receiving the random access preamble sequence signal sent by the device to be accessed, and performs identity authentication on the device based on the obtained physical layer characteristic information. Based on the authentication result, it determines whether to allow the device to be accessed to the target base station. This embodiment avoids wasting base station air interface resources and improves the security of the random access process for user terminals.

[0108] In one embodiment of this disclosure, the identity authentication module 803 is further configured to acquire a pre-established physical layer feature identity information database of the target base station, wherein the physical layer feature identity information database contains: physical layer feature information of multiple devices allowed to access the target base station; determine whether the physical layer feature information of the device to be accessed exists in the physical layer feature identity information database; if the physical layer feature information of the device to be accessed exists in the physical layer feature identity information database, then compare the physical layer feature information of the device to be accessed with the existing physical layer features in the physical layer feature identity information database; if the comparison is successful, then determine that the identity information of the device to be accessed has passed access identity authentication; if the comparison fails, then determine that the identity information of the device to be accessed has not passed access identity authentication.

[0109] In one embodiment of this disclosure, the identity authentication module 803 is further configured to: if the physical layer feature information of the device to be accessed does not exist in the physical layer feature identity information database, temporarily connect the device to the core network through the target base station and obtain the identity authentication result of the device to be accessed returned by the core network; if the identity authentication result returned by the core network is that the access identity authentication is successful, determine that the identity information of the device to be accessed has passed the access identity authentication and add the physical layer feature information of the device to be accessed to the physical layer feature identity information database of the target base station; if the identity authentication result returned by the core network is that the access identity authentication is unsuccessful, determine that the identity information of the device to be accessed has failed the access identity authentication.

[0110] In one embodiment of this disclosure, the target base station includes: a first base station or a second base station, wherein the first base station is a base station located in a public network and the second base station is a base station located in a private network.

[0111] In one embodiment of this disclosure, the apparatus further includes: an information database update module 805, configured to update the physical layer feature identity information database of the target base station according to the authentication result if the target base station is the first base station.

[0112] Based on the same inventive concept, this disclosure also provides a terminal, as described in the following embodiments. Since the principle by which this device embodiment solves the problem is similar to that of the above-described method embodiment, the implementation of this device embodiment can refer to the implementation of the above-described method embodiment, and repeated details will not be elaborated further.

[0113] Figure 9 This illustration shows a terminal schematic diagram according to an embodiment of the present disclosure, such as... Figure 9As shown, the device includes: a signal transmission module 901, used to send a random access preamble sequence signal to a target base station, so that the target base station can determine the physical layer characteristic information of the terminal based on the random access preamble sequence signal, and perform access identity authentication on the device to be accessed based on the physical layer characteristic information of the device to be accessed, so as to obtain the authentication result and determine whether to allow the device to be accessed to be connected to the target base station, wherein the random access preamble sequence signal is sent by the device to be accessed based on the cell information broadcast by the target base station.

[0114] As described above, in this embodiment of the present disclosure, the device to be accessed sends a random access preamble sequence signal to the target base station. The target base station then determines the physical layer characteristic information of the device to be accessed based on this signal, performs authentication on the device based on the obtained physical layer characteristic information, and determines whether to allow the device to access the target base station based on the authentication result. This embodiment of the present disclosure avoids wasting base station air interface resources and improves the security of the random access process for user terminals.

[0115] Those skilled in the art will understand that various aspects of this disclosure can be implemented as a system, method, or program product. Therefore, various aspects of this disclosure can be specifically implemented in the following forms: a completely hardware implementation, a completely software implementation (including firmware, microcode, etc.), or a combination of hardware and software aspects, collectively referred to herein as a "circuit," "module," or "system."

[0116] Based on the same inventive concept, this disclosure also provides an electronic device, comprising: a processor; and a memory for storing executable instructions of the processor; wherein the processor is configured to execute the device access authentication method based on a random access preamble signal as described above by executing the executable instructions. Since the principle by which this electronic device embodiment solves the problem is similar to that of the above method embodiment, the implementation of this electronic device embodiment can refer to the implementation of the above method embodiment, and repeated details will not be described again.

[0117] The following reference Figure 10 To describe an electronic device 1000 according to such an embodiment of the present disclosure. Figure 10 The electronic device 1000 shown is merely an example and should not impose any limitation on the functionality and scope of use of the embodiments disclosed herein.

[0118] Figure 10 A block diagram of an electronic device according to an embodiment of the present disclosure is shown. Referring below... Figure 10 To describe an electronic device 1000 according to such an embodiment of the present disclosure. Figure 10 The electronic device 1000 shown is merely an example and should not impose any limitation on the functionality and scope of use of the embodiments disclosed herein.

[0119] like Figure 10 As shown, the electronic device 1000 is manifested in the form of a general-purpose computing device. The components of the electronic device 1000 may include, but are not limited to: at least one processing unit 1010, at least one storage unit 1020, and a bus 1030 connecting different system components (including storage unit 1020 and processing unit 1010).

[0120] The storage unit stores program code that can be executed by the processing unit 1010, causing the processing unit 1010 to perform the steps described in the "Exemplary Methods" section above according to various exemplary embodiments of this disclosure.

[0121] In one embodiment of this disclosure, when the electronic device 1000 is the target base station, the processing unit 1010 may perform the following steps: receiving a random access preamble sequence signal sent by the device to be accessed, wherein the random access preamble sequence signal is sent by the device to be accessed according to the cell information broadcast by the target base station; determining the physical layer characteristic information of the device to be accessed based on the random access preamble sequence signal; performing access identity authentication on the device to be accessed based on the physical layer characteristic information of the device to be accessed; and determining whether to allow the device to be accessed to connect to the target base station based on the authentication result.

[0122] In one embodiment of this disclosure, when the electronic device 1000 is a device to be accessed, the processing unit 1010 may perform the following steps: sending a random access preamble sequence signal to the target base station, so that the target base station determines the physical layer characteristic information of the device to be accessed based on the random access preamble sequence signal, and performs access identity authentication on the device to be accessed based on the physical layer characteristic information of the device to be accessed, so as to obtain the authentication result and determine whether to access the device to be accessed to the target base station, wherein the random access preamble sequence signal is sent by the device to be accessed based on the cell information broadcast by the target base station.

[0123] Storage unit 1020 may include readable media in the form of volatile storage units, such as random access memory (RAM) 10201 and / or cache memory 10202, and may further include read-only memory (ROM) 10203.

[0124] Storage unit 1020 may also include a program / utility 10204 having a set (at least one) program module 10205, such program module 10205 including but not limited to: operating system, one or more application programs, other program modules and program data, each or some combination of these examples may include an implementation of a network environment.

[0125] Bus 1030 can represent one or more of several types of bus structures, including a memory cell bus or memory cell controller, a peripheral bus, a graphics acceleration port, a processing unit, or a local bus using any of the multiple bus structures.

[0126] Electronic device 1000 can also communicate with one or more external devices 1040 (e.g., keyboard, pointing device, Bluetooth device, etc.), one or more devices that enable a user to interact with electronic device 1000, and / or any device that enables electronic device 1000 to communicate with one or more other computing devices (e.g., router, modem, etc.). This communication can be performed via input / output (I / O) interface 1050. Furthermore, electronic device 1000 can also communicate with one or more networks (e.g., local area network (LAN), wide area network (WAN), and / or public networks, such as the Internet) via network adapter 1060. As shown, network adapter 1060 communicates with other modules of electronic device 1000 via bus 1030. It should be understood that, although not shown in the figures, other hardware and / or software modules can be used in conjunction with electronic device 1000, including but not limited to: microcode, device drivers, redundant processing units, external disk drive arrays, RAID systems, tape drives, and data backup storage systems.

[0127] From the above description of the embodiments, those skilled in the art will readily understand that the exemplary embodiments described herein can be implemented by software or by combining software with necessary hardware. Therefore, the technical solutions according to the embodiments of this disclosure can be embodied in the form of a software product, which can be stored in a non-volatile storage medium (such as a CD-ROM, USB flash drive, external hard drive, etc.) or on a network, including several instructions to cause a computing device (such as a personal computer, server, terminal device, or network device, etc.) to execute the methods according to the embodiments of this disclosure.

[0128] Based on the same inventive concept, this disclosure also provides a computer-readable storage medium storing a computer program that, when executed by a processor, implements the device access authentication method based on a random access preamble sequence signal described above. Since the implementation of this computer-readable storage medium embodiment can refer to the implementation of the above method embodiments, repeated details will not be elaborated further.

[0129] More specific examples of computer-readable storage media in this disclosure may include, but are not limited to: electrical connections having one or more wires, portable computer disks, hard disks, random access memory (RAM), read-only memory (ROM), erasable programmable read-only memory (EPROM or flash memory), optical fiber, portable compact disk read-only memory (CD-ROM), optical storage devices, magnetic storage devices, or any suitable combination of the foregoing.

[0130] In this disclosure, a computer-readable storage medium may include a data signal propagated in baseband or as part of a carrier wave, carrying readable program code. Such propagated data signals may take various forms, including but not limited to electromagnetic signals, optical signals, or any suitable combination thereof. A readable signal medium may also be any readable medium other than a readable storage medium, capable of transmitting, propagating, or transmitting a program for use by or in connection with an instruction execution system, apparatus, or device.

[0131] Optionally, the program code contained on the computer-readable storage medium may be transmitted using any suitable medium, including but not limited to wireless, wired, optical fiber, RF, etc., or any suitable combination thereof.

[0132] In practical implementation, program code for performing the operations of this disclosure can be written in any combination of one or more programming languages, including object-oriented programming languages ​​such as Java and C++, and conventional procedural programming languages ​​such as C or similar languages. The program code can execute entirely on the user's computing device, partially on the user's device, as a standalone software package, partially on the user's computing device and partially on a remote computing device, or entirely on a remote computing device or server. In cases involving remote computing devices, the remote computing device can be connected to the user's computing device via any type of network, including a local area network (LAN) or a wide area network (WAN), or it can be connected to an external computing device (e.g., via the Internet using an Internet service provider).

[0133] Based on the same inventive concept, this disclosure also provides a computer program product, including: a computer program or instructions, which, when executed by a processor, implement the device access authentication method based on a random access preamble sequence signal according to any one of the above method embodiments. Since the principle by which this computer program product embodiment solves the problem is similar to that of the above method embodiments, the implementation of this computer program product embodiment can refer to the implementation of the above method embodiments, and repeated details will not be elaborated further.

[0134] It should be noted that although several modules or units for the device used to perform actions have been mentioned in the detailed description above, this division is not mandatory. In fact, according to embodiments of this disclosure, the features and functions of two or more modules or units described above can be embodied in one module or unit. Conversely, the features and functions of one module or unit described above can be further divided and embodied by multiple modules or units.

[0135] Furthermore, although the steps of the method in this disclosure are described in a specific order in the accompanying drawings, this does not require or imply that the steps must be performed in that specific order, or that all the steps shown must be performed to achieve the desired result. Additional or alternative steps may be omitted, multiple steps may be combined into one step, and / or a step may be broken down into multiple steps.

[0136] From the above description of the embodiments, those skilled in the art will readily understand that the exemplary embodiments described herein can be implemented by software or by combining software with necessary hardware. Therefore, the technical solutions according to the embodiments of this disclosure can be embodied in the form of a software product, which can be stored in a non-volatile storage medium (such as a CD-ROM, USB flash drive, external hard drive, etc.) or on a network, including several instructions to cause a computing device (such as a personal computer, server, mobile terminal, or network device, etc.) to execute the methods according to the embodiments of this disclosure.

[0137] Other embodiments of this disclosure will readily occur to those skilled in the art upon consideration of the specification and practice of the invention disclosed herein. This disclosure is intended to cover any variations, uses, or adaptations of this disclosure that follow the general principles of this disclosure and include common knowledge or customary techniques in the art not disclosed herein. The specification and examples are to be considered exemplary only, and the true scope and spirit of this disclosure are indicated by the appended claims.

Claims

1. A device access authentication method based on a random access preamble sequence signal, characterized in that, include: The system receives a random access preamble sequence signal sent by a device to be accessed, wherein the random access preamble sequence signal is sent by the device to be accessed based on cell information broadcast by the target base station, and the device to be accessed accesses the target base station based on the 5G protocol. Based on the random access preamble sequence signal, the physical layer characteristic information of the device to be accessed is determined; Based on the physical layer feature information of the device to be accessed, the device to be accessed is authenticated. Based on the authentication results, determine whether to connect the device to be accessed to the target base station; The target base station is further configured to send a random access response message containing temporary scrambling parameters to the authenticated terminal, so that the terminal uses the temporary scrambling parameters to scramble during the scheduled transmission and transmits a radio resource control connection request and a terminal identifier to the target base station; the target base station is further configured to randomly select a scheduling request from the scheduling requests received from one or more terminals, and send a contention access resolution message to the terminal, the contention access resolution message containing the terminal identifier selected by the target base station, the terminal corresponding to the terminal identifier completes access, and the remaining terminals resend the random access preamble sequence signal to the target base station; Specifically, the access authentication of the device to be accessed, based on its physical layer feature information, includes: determining whether the physical layer feature information of the device to be accessed exists in a pre-established physical layer feature identity information database; if it exists, comparing the physical layer feature information of the device to be accessed with the existing physical layer features in the physical layer feature identity information database, and determining whether the device to be accessed passes the authentication based on the comparison result; if it does not exist, temporarily connecting the device to be accessed to the core network through the target base station, and obtaining the authentication result of the device to be accessed returned by the core network.

2. The device access authentication method based on a random access preamble sequence signal according to claim 1, characterized in that, The physical layer feature information of the device to be accessed is compared with the physical layer features already existing in the physical layer feature identity information database. Based on the comparison result, it is determined whether the device to be accessed has passed identity authentication, including: If the comparison is successful, it is determined that the identity information of the device to be accessed has passed the access identity authentication. If the comparison fails, it is determined that the identity information of the device to be accessed has not passed the access identity authentication.

3. The device access authentication method based on a random access preamble sequence signal according to claim 1, characterized in that, The method further includes: If the authentication result returned by the core network is that the access identity authentication is successful, then it is determined that the identity information of the device to be accessed has passed the access identity authentication, and the physical layer feature information of the device to be accessed is added to the physical layer feature identity information database of the target base station. If the identity verification result returned by the core network is that the access identity authentication failed, then it is determined that the identity information of the device to be accessed has failed the access identity authentication.

4. The device access authentication method based on a random access preamble sequence signal according to claim 1, characterized in that, The target base station includes either a first base station or a second base station, wherein the first base station is a base station located in a public network, and the second base station is a base station located in a private network.

5. The device access authentication method based on a random access preamble sequence signal according to claim 4, characterized in that, After determining whether to connect the device to be accessed to the target base station based on the authentication result, the method further includes: If the target base station is the first base station, then the physical layer feature identity information database of the target base station is updated according to the authentication result.

6. A device access authentication method based on a random access preamble sequence signal, characterized in that, include: A random access preamble sequence signal is sent to the target base station so that the target base station can determine the physical layer characteristic information of the device to be accessed based on the random access preamble sequence signal, and perform access authentication on the device to be accessed based on the physical layer characteristic information of the device to be accessed to obtain the authentication result, and determine whether to allow the device to be accessed to the target base station. The random access preamble sequence signal is sent by the device to be accessed based on the cell information broadcast by the target base station, and the device to be accessed accesses the target base station based on the 5G protocol. The target base station is further configured to send a random access response message containing temporary scrambling parameters to the authenticated terminal, so that the terminal uses the temporary scrambling parameters to scramble during the scheduled transmission and transmits a radio resource control connection request and a terminal identifier to the target base station; the target base station is further configured to randomly select a scheduling request from the scheduling requests received from one or more terminals, and send a contention access resolution message to the terminal, the contention access resolution message containing the terminal identifier selected by the target base station, the terminal corresponding to the terminal identifier completes access, and the remaining terminals resend the random access preamble sequence signal to the target base station; The target base station is further configured to: determine whether the physical layer feature information of the device to be accessed exists in a pre-established physical layer feature identity information database; if it exists, compare the physical layer feature information of the device to be accessed with the existing physical layer features in the physical layer feature identity information database, and determine whether the device to be accessed has passed identity authentication based on the comparison result; if it does not exist, temporarily connect the device to be accessed to the core network through the target base station, and obtain the identity authentication result of the device to be accessed returned by the core network.

7. A device access authentication system based on a random access preamble sequence signal, characterized in that, include: A target base station and a device to be accessed, wherein the device to be accessed accesses the target base station based on a 5G protocol; The device to be accessed is used to send a random access preamble sequence signal to the target base station, wherein the random access preamble sequence signal is sent by the device to be accessed based on the cell information broadcast by the target base station; The target base station is used to receive the random access preamble sequence signal sent by the device to be accessed; The target base station is also used to determine the physical layer feature information of the device to be accessed based on the random access preamble sequence signal. The target base station is also used to perform access identity authentication on the device to be accessed based on the physical layer feature information of the device to be accessed. The target base station is also used to determine whether to connect the device to be accessed to the target base station based on the authentication result; The target base station is further configured to send a random access response message containing temporary scrambling parameters to the authenticated terminal, so that the terminal uses the temporary scrambling parameters to scramble during the scheduled transmission and transmits a radio resource control connection request and a terminal identifier to the target base station; the target base station is further configured to randomly select a scheduling request from the scheduling requests received from one or more terminals, and send a contention access resolution message to the terminal, the contention access resolution message containing the terminal identifier selected by the target base station, the terminal corresponding to the terminal identifier completes access, and the remaining terminals resend the random access preamble sequence signal to the target base station; The target base station is further configured to: determine whether the physical layer feature information of the device to be accessed exists in a pre-established physical layer feature identity information database; if it exists, compare the physical layer feature information of the device to be accessed with the existing physical layer features in the physical layer feature identity information database, and determine whether the device to be accessed has passed identity authentication based on the comparison result; if it does not exist, temporarily connect the device to be accessed to the core network through the target base station, and obtain the identity authentication result of the device to be accessed returned by the core network.

8. A base station, characterized in that, include: The signal receiving module is used to receive a random access preamble sequence signal sent by the device to be accessed, wherein the random access preamble sequence signal is sent by the device to be accessed according to the cell information broadcast by the target base station, and the device to be accessed accesses the target base station based on the 5G protocol; The information confirmation module is used to determine the physical layer characteristic information of the device to be accessed based on the random access preamble sequence signal. The identity authentication module is used to perform access identity authentication on the device to be accessed based on the physical layer feature information of the device to be accessed; The device access module is used to determine whether to connect the device to be accessed to the target base station based on the authentication result. The target base station is further configured to send a random access response message containing temporary scrambling parameters to the authenticated terminal, so that the terminal uses the temporary scrambling parameters to scramble during the scheduled transmission and transmits a radio resource control connection request and a terminal identifier to the target base station; the target base station is further configured to randomly select a scheduling request from the scheduling requests received from one or more terminals, and send a contention access resolution message to the terminal, the contention access resolution message containing the terminal identifier selected by the target base station, the terminal corresponding to the terminal identifier completes access, and the remaining terminals resend the random access preamble sequence signal to the target base station; The identity authentication module is further configured to: determine whether the physical layer feature information of the device to be accessed exists in a pre-established physical layer feature identity information database; if it exists, compare the physical layer feature information of the device to be accessed with the existing physical layer features in the physical layer feature identity information database, and determine whether the device to be accessed has passed identity authentication based on the comparison result; if it does not exist, temporarily connect the device to be accessed to the core network through the target base station, and obtain the identity authentication result of the device to be accessed returned by the core network.

9. A terminal, characterized in that, include: The signal transmission module is used to send a random access preamble sequence signal to the target base station, so that the target base station can determine the physical layer characteristic information of the terminal based on the random access preamble sequence signal, and perform access authentication on the terminal based on the physical layer characteristic information of the terminal to obtain the authentication result, and determine whether to allow the terminal to access the target base station. The random access preamble sequence signal is sent by the terminal based on the cell information broadcast by the target base station, and the terminal accesses the target base station based on the 5G protocol. The target base station is further configured to send a random access response message containing temporary scrambling parameters to the authenticated terminal, so that the terminal uses the temporary scrambling parameters to scramble during the scheduled transmission and transmits a radio resource control connection request and a terminal identifier to the target base station; the target base station is further configured to randomly select a scheduling request from the scheduling requests received from one or more terminals, and send a contention access resolution message to the terminal, the contention access resolution message containing the terminal identifier selected by the target base station, the terminal corresponding to the terminal identifier completes access, and the remaining terminals resend the random access preamble sequence signal to the target base station; The target base station is further configured to: determine whether the physical layer feature information of the terminal exists in a pre-established physical layer feature identity information database; if it exists, compare the physical layer feature information of the terminal with the existing physical layer features in the physical layer feature identity information database, and determine whether the terminal has passed identity authentication based on the comparison result; if it does not exist, temporarily connect the terminal to the core network through the target base station and obtain the identity authentication result of the terminal returned by the core network.

10. An electronic device, characterized in that, include: processor; as well as Memory for storing the executable instructions of the processor; The processor is configured to execute the device access authentication method based on a random access preamble sequence signal as described in any one of claims 1 to 6 by executing the executable instructions.

11. A computer-readable storage medium having a computer program stored thereon, characterized in that, When the computer program is executed by the processor, it implements the device access authentication method based on random access preamble sequence signals as described in any one of claims 1 to 6.

12. A computer program product, comprising: A computer program or instruction, characterized in that, when executed by a processor, the computer program or instruction implements the device access authentication method based on a random access preamble sequence signal as described in any one of claims 1 to 6.

Images