Access control method and related device

Abstract

According to the access control method and the related device provided by the invention, access management of different types of terminals is realized, and the network access probability of the different types of terminals is ensured. In the method, a terminal sends first information to a network device, the first information indicates the type of the terminal, and the type of the terminal comprises a terminal using an FSS or a terminal using an MSS; correspondingly, the network equipment receives the first information, and determines whether the terminal is allowed to access the network based on the first information; and then the network equipment sends a first message for indicating whether the terminal is allowed to access the network to the terminal.

Description

Technical Field

[0001] The present application relates to the field of communication technology, and in particular to an access control method and related devices. Background Art

[0002] In a communication system, when a terminal accesses a network, it is necessary to first determine the access identity (AI) number (hereinafter referred to as AI) and access category (AC) number (hereinafter referred to as AC) corresponding to the terminal, and then perform a UAC judgment based on a broadcast message from a network device (for example, a unified access control (UAC) parameter carried by a system information block type 1 (SIB1) to determine whether the terminal is allowed to access the network.

[0003] To avoid interference, the fixed satellite service (FSS) and mobile satellite service (MSS) in the non-terrestrial network (NTN) use different frequencies. Considering the improvement of spectrum utilization, frequency band reuse is proposed, for example, the frequency band used by FSS is reused for MSS. However, in the frequency band reuse scenario, there may be too many MSS terminals moving to the cell where the FSS terminal is located, resulting in the FSS terminal being unable to access the network. Summary of the invention

[0004] The present application provides an access control method and related devices to implement access management for different types of terminals.

[0005] In a first aspect, the present application provides an access control method, which can be applied to a communication device. The communication device can be, for example, a terminal, or a component configured in the terminal (such as a chip, a chip system, etc.), or a logic module or software capable of implementing all or part of the terminal functions, which is not limited by the present application. For ease of understanding and explanation, the method is described below using a terminal as an example of a communication device.

[0006] Exemplarily, the method includes: sending first information to a network device, the first information indicating the type of the terminal, the type of the terminal including a terminal using FSS (hereinafter referred to as FSS terminal) or a terminal using MSS (hereinafter referred to as MSS terminal); receiving a first message from the network device, the first message being used to indicate whether the terminal is allowed to access the network device.

[0007] In the case where the network device allows the terminal to access the network, the network device sends a message of allowing access to the terminal; or, in the case where the network device does not allow the terminal to access the network, the network device sends a message of rejecting access to the terminal.

[0008] In the present application, the terminal sends the type of the terminal to the network device, so that the network device can determine whether to allow the terminal to access the network based on the type of the received terminal. For example, in the scenario where the MSS reuses the FSS frequency band, when the terminal type is an MSS terminal, the terminal is not allowed to access the network in the case of network congestion, or when the terminal type is an FSS terminal, the terminal can be allowed to access the network in the case of network congestion. Therefore, the present application can enable the network device to determine whether the terminal can access the network based on the type of the terminal by indicating the terminal type to the network device, thereby ensuring the probability of different types of terminals accessing the network.

[0009] Optionally, the first information is a random access preamble code corresponding to the type of the terminal, and the random access preamble code corresponding to the type of the terminal is determined based on a first mapping relationship, and the first mapping relationship indicates a correspondence between multiple random access preamble codes and multiple terminal types.

[0010] Optionally, the method further includes: receiving the first mapping relationship from a network device; and determining a random access preamble code corresponding to the type of the terminal based on the first mapping relationship.

[0011] In a second aspect, the present application provides an access control method, which can be applied to a communication device. The communication device can be, for example, a network device, or a component (such as a chip, a chip system, etc.) configured in the network device, or a logic module or software capable of implementing all or part of the network device functions, which is not limited by the present application. For ease of understanding and explanation, the following describes the method using a network device as an example of a communication device.

[0012] Exemplarily, the method includes: receiving first information from a terminal, the first information indicating the type of the terminal, the type of the terminal including an FSS terminal or an MSS terminal; based on the first information, determining whether the terminal is allowed to access the network device; and sending a first message to the terminal, the first message being used to indicate whether the terminal is allowed to access the network device.

[0013] When the network device determines that the terminal is allowed to access the network, the network device may send a message of allowing access to the terminal; or, when the network device determines that the terminal is not allowed to access the network, the network device may send a message of rejecting access to the terminal.

[0014] In the present application, the network device can determine whether to allow the terminal to access the network based on the type of the terminal received from the terminal. For example, in a scenario where the MSS reuses the FSS frequency band, when the terminal type is an MSS terminal, the terminal is not allowed to access the network in the case of network congestion, or when the terminal type is an FSS terminal, the terminal can be allowed to access the network in the case of network congestion. Therefore, by receiving information indicating the terminal type, the present application can enable the network device to determine whether the terminal can access the network based on the terminal type, thereby ensuring the probability of different types of terminals accessing the network.

[0015] Optionally, the first information is a random access preamble code corresponding to the type of the terminal.

[0016] Optionally, the method further includes: sending a first mapping relationship to the terminal, wherein the first mapping relationship indicates a correspondence between multiple random access preamble codes and multiple terminal types.

[0017] Optionally, the method further includes: determining a type of terminal corresponding to the first information based on the first mapping relationship.

[0018] In combination with the first and second aspects, in some possible implementations, the first information is carried in any of the following messages of the random access process: a radio resource control (RRC) establishment request message, an RRC recovery request message, or an RRC reconstruction request message.

[0019] Exemplarily, the first information may be a logical channel identification (LCID).

[0020] In a third aspect, the present application provides an access control method, which can be applied to a communication device. The communication device can be, for example, a terminal, or a component configured in the terminal (such as a chip, a chip system, etc.), or a logic module or software capable of implementing all or part of the terminal functions, which is not limited by the present application. For ease of understanding and explanation, the method is described below using a terminal as an example of a communication device.

[0021] Exemplarily, the method includes: determining a first access category or a first access identifier, the first access category is defined for a service type of a first category of terminals, the first access identifier is configured for the first category of terminals, the terminal is the first category of terminals, and the first category of terminals is an FSS terminal or an MSS terminal; based on the first access category or the first access identifier, determining whether the terminal is allowed to access the network.

[0022] Exemplarily, in the case of determining the first access category, the terminal determines whether the terminal is allowed to access the network based on the first access category. Alternatively, in the case of determining the first access identifier, the terminal determines whether the terminal is allowed to access the network based on the first access identifier.

[0023] In the present application, when the terminal is a first-category terminal, the determined first access category is defined for the service type of the first-category terminal, or the determined first access identifier is configured based on the first-category terminal, that is, the access type or access identifier determined by different types of terminals is related to the type of terminal. Since different types of terminals have different priorities for accessing the network, the method provided in the present application can determine the access identifier or access category corresponding to the terminal type when the terminal type is different, thereby ensuring the probability of different types of terminals accessing the network.

[0024] In combination with the third aspect, in some possible implementations of the third aspect, the FSS terminal has a higher priority than the MSS terminal, and the first category of terminals is the FSS terminal; determining whether the terminal is allowed to access the network based on the first access category or the first access identifier includes: determining that the terminal is allowed to access the network based on the first access category or the first access identifier.

[0025] In combination with the third aspect, in some possible implementations of the third aspect, the FSS terminal has a higher priority than the MSS terminal, and the first type of terminal is an MSS terminal; determining whether the terminal is allowed to access the network based on the first access category or the first access identifier includes: determining that the terminal is prohibited from accessing the network based on the first access category or the first access identifier.

[0026] In other words, if the first access category (or the first access identifier) ​​is defined for a class of terminals with a higher access priority, then it is determined based on the first access category (or the first access identifier) ​​that the terminal is allowed to access the network. Alternatively, if the first access category (or the first access identifier) ​​is defined for a class of terminals with a lower access priority, then it is determined based on the first access category (or the first access identifier) ​​that the terminal is prohibited from accessing the network.

[0027] In a fourth aspect, the present application provides an access control method, which can be applied to a communication device. The communication device can be, for example, a terminal, or a component configured in the terminal (such as a chip, a chip system, etc.), or a logic module or software capable of implementing all or part of the terminal functions, which is not limited by the present application. For ease of understanding and explanation, the method is described below using a terminal as an example of a communication device.

[0028] Exemplarily, the method includes: receiving a first UAC parameter and a second UAC parameter from a network device, the first UAC parameter being used to determine whether a first type of terminal is allowed to access the network device, and the second UAC parameter being used to determine whether a second type of terminal is allowed to access the network device; determining a first access identifier; and determining whether the terminal is allowed to access the network device based on the first access identifier and a target UAC parameter, the target UAC parameter being the first UAC parameter or the second UAC parameter.

[0029] The first UAC parameter is different from the second UAC parameter. For example, when the priority of the first type of terminal accessing the network is higher than the priority of the second type of terminal accessing the network, the access probability corresponding to the first UAC parameter is greater than the access probability corresponding to the second UAC parameter; or, when the priority of the first type of terminal accessing the network is lower than the priority of the second type of terminal accessing the network, the access probability corresponding to the first UAC parameter is less than the access probability corresponding to the second UAC parameter.

[0030] Exemplarily, the first UAC parameter and the second UAC parameter may be carried via a broadcast message, such as SIB1.

[0031] Optionally, the terminal belongs to the first category of terminals, and the target UAC parameter is the first UAC parameter.

[0032] Optionally, the terminal belongs to the second category of terminals, and the target UAC parameter is the second UAC parameter.

[0033] In the present application, the terminal receives a first UAC parameter corresponding to a first type of terminal and a UAC parameter corresponding to a second type of terminal from a network device, so that when the terminal makes a UAC judgment, it can determine the UAC parameter corresponding to the type of the terminal from the received first UAC parameter and the second UAC parameter based on the terminal type to which the terminal belongs, and determine whether the access of the terminal is prohibited based on the determined UAC parameter and the determined first access identifier. Since different UAC parameters are configured for different types of terminals, in a frequency band reuse scenario, the method provided in the present application can ensure the probability of different types of terminals accessing the network, thereby realizing access management of different types of terminals.

[0034] In a fifth aspect, the present application provides an access control method, which can be applied to a communication device. The communication device can be, for example, a network device, or a component (such as a chip, a chip system, etc.) configured in the network device, or a logic module or software capable of implementing all or part of the functions of the network device, which is not limited by the present application. For ease of understanding and explanation, the following describes the method using a network device as an example of a communication device.

[0035] Exemplarily, the method includes: generating a first UAC parameter and a second UAC parameter, the first UAC parameter being used to determine whether a first type of terminal is allowed to access the network device, and the second UAC parameter being used to determine whether a second type of terminal is allowed to access the network device; and sending the first UAC parameter and the second UAC parameter to the terminal.

[0036] In the present application, the network device sends a first UAC parameter corresponding to a first type of terminal and a UAC parameter corresponding to a second type of terminal to the terminal, so that when the terminal makes a UAC judgment, it can determine the UAC parameter corresponding to the type of the terminal from the received first UAC parameter and the second UAC parameter based on the terminal type to which the terminal belongs, and determine whether the access of the terminal is prohibited based on the determined UAC parameter and the determined first access identifier. Since different UAC parameters are configured for different types of terminals, in a frequency band reuse scenario, the method provided in the present application can ensure the probability of different types of terminals accessing the network, thereby realizing access management of different types of terminals.

[0037] In combination with the fourth and fifth aspects, in some implementations, the first-category terminal is an FSS terminal, and the second-category terminal is an MSS terminal; or, the first-category terminal is an MSS terminal, and the second-category terminal is an FSS terminal.

[0038] In a sixth aspect, the present application provides a communication device, including a module or unit for implementing the method in any of the above aspects and any possible implementation of any of the aspects. It should be understood that each module or unit can implement the corresponding function by executing a computer program.

[0039] In a seventh aspect, the present application provides a communication device, comprising a processor, wherein the processor is used to execute the method described in any of the above aspects and any possible implementation of any of the aspects.

[0040] The device may further include a memory for storing instructions and data. The memory is coupled to the processor, and when the processor executes the instructions stored in the memory, the methods described in the above aspects may be implemented.

[0041] The apparatus may further include a communication interface, and the communication interface is used for the apparatus to communicate with other devices. Exemplarily, the communication interface may be a transceiver, a circuit, a bus, a module, or other types of communication interfaces.

[0042] In an eighth aspect, the present application provides a chip system comprising at least one processor for supporting the implementation of the functions involved in any of the above aspects and any possible implementation of any of the aspects, for example, receiving or processing the data and / or information involved in the above method.

[0043] In one possible design, the chip system also includes a memory, which is used to store program instructions and data, and the memory is located inside or outside the processor.

[0044] The chip system may be composed of the chip, or may include the chip and other discrete devices.

[0045] In a ninth aspect, the present application provides a computer-readable storage medium, including a computer program, which, when executed on a computer, enables the computer to implement any of the above aspects and any possible implementation of any of the aspects.

[0046] In the tenth aspect, the present application provides a computer program product, comprising: a computer program (also referred to as code, or instruction), which, when executed, enables a computer to execute a method in any of the above aspects and any possible implementation of any of the aspects.

[0047] In the eleventh aspect, the present application provides a communication system, including the aforementioned terminal and network device, the terminal can be used to implement the method in the first aspect and any possible implementation of the first aspect, and the network device can be used to implement the method in the second aspect and any possible implementation of the second aspect; or, the terminal can be used to implement the method in the fourth aspect and any possible implementation of the fourth aspect, and the network device can be used to implement the method in the fifth aspect and any possible implementation of the fifth aspect.

[0048] It should be understood that the sixth to eleventh aspects of the present application correspond to the technical solutions of the first to fifth aspects of the present application, and the beneficial effects achieved by each aspect and the corresponding feasible implementation methods are similar and will not be repeated here. BRIEF DESCRIPTION OF THE DRAWINGS

[0049] Figure 1 It is a schematic diagram of the architecture of a communication system applicable to the method provided in the embodiment of the present application;

[0050] Figures 2 to 4 is a schematic flow chart of an access control method provided in an embodiment of the present application;

[0051] Figure 5 and Figure 6 It is a schematic block diagram of the device provided in an embodiment of the present application. DETAILED DESCRIPTION

[0052] The technical solution in this application will be described below in conjunction with the accompanying drawings.

[0053] To facilitate understanding of the embodiments of the present application, the following points are first explained:

[0054] First, in the embodiments of the present application, the use of prefixes such as "first" and "second" is only to facilitate the distinction and description of different things belonging to the same name category, and does not restrict the order, size or quantity of things. For example, "first type of terminal" and "second type of terminal" are just different types of terminals, and the number of terminals is not limited; for another example, "first UAC parameter" and "second UAC parameter" are just different parameters, and there is no time sequence, size relationship or priority relationship between the two.

[0055] Second, the "sending" and "receiving" in the embodiments of the present application indicate the direction of signal transmission. For example, "the network device sends the first UAC parameter and the second UAC parameter to the terminal" can be understood as the destination end of the information is the terminal, which can include direct sending through the air interface, and also includes indirect sending through the air interface by other units or modules. "The terminal receives the first UAC parameter and the second UAC parameter from the network device" can be understood as the source end of the configuration information is the network device, which can include direct receiving from the network device through the air interface, and also includes indirect receiving from the network device through the air interface from other units or modules. "Sending" can also be understood as the "output" of the chip interface, and "receiving" can also be understood as the "input" of the chip interface.

[0056] In other words, sending and receiving can be performed between devices, for example, between a terminal and a network device; it can also be performed within a device, for example, sending or receiving between components, modules, chips, software modules or hardware modules within the device through a bus, wiring or interface.

[0057] It is understandable that before the information is sent from the source end to the destination end, it may be subjected to necessary processing, such as encoding, modulation, etc. After receiving the information from the source end, the destination end may also perform corresponding processing, such as decoding, demodulation, etc., so as to interpret the valid information from the source end. Similar expressions in this application can be understood similarly and will not be repeated.

[0058] Third, in the embodiments of the present application, "at least one" refers to one or more, and "more" refers to two or more. "And / or" describes the association relationship of associated objects, indicating that three relationships may exist. For example, A and / or B can represent: A exists alone, A and B exist at the same time, and B exists alone, where A and B can be singular or plural. The character " / " generally indicates that the previous and next associated objects are in an "or" relationship, but it does not exclude the situation where the previous and next associated objects are in an "and" relationship. The specific meaning can be understood in conjunction with the context. "At least one of the following" or similar expressions refers to any combination of these items, including any combination of single items or plural items. For example, at least one of a, b, or c can represent: a, b, c; a and b; a and c; b and c; or a and b and c. Where a, b, c can be single or multiple.

[0059] Fourth, in the embodiments of the present application, "indication" may include direct indication and indirect indication, and may also include explicit indication and implicit indication. The information indicated by a certain information (such as the indication information described below) is called information to be indicated. In the specific implementation process, there are many ways to indicate the information to be indicated, such as but not limited to, directly indicating the information to be indicated, such as the information to be indicated itself or the index of the information to be indicated. The information to be indicated may also be indirectly indicated by indicating other information, wherein the other information has an association with the information to be indicated; it may also be possible to indicate only a part of the information to be indicated, while the other parts of the information to be indicated are known or agreed in advance. For example, the indication of specific information may be achieved by means of the arrangement order of each information agreed in advance (such as predefined by the protocol), thereby reducing the indication overhead to a certain extent. The present application does not limit the specific method of indication.

[0060] It can be understood that, for the sender of the indication information, the indication information can be used to indicate the information to be indicated, and for the receiver of the indication information, the indication information can be used to determine the information to be indicated.

[0061] Fifth, the tables in the embodiments of the present application are only examples. The values ​​of the information in each table are only examples and can be configured as other values, which are not limited by the present application. Each table does not limit the scope of protection of the present application. For example, appropriate deformation adjustments can be made based on the tables in the above text, such as splitting, merging, etc. For another example, the parameter names shown in the titles of each table can also use other names that can be understood by the communication device, and the values ​​or representations of its parameters can also be other values ​​or representations that can be understood by the communication device. For another example, when implementing the above tables, other data structures can also be used, such as arrays, queues, containers, stacks, linear lists, pointers, linked lists, trees, graphs, structures, classes, heaps, hash tables or hash tables.

[0062] Sixth, in the embodiments of the present application, descriptions such as "when...", "in the case of...", "if" and "if" all mean that under certain objective circumstances, the device (such as the first device or the second device) will make corresponding processing, which is not a limited time, and does not require the device (such as a network device or a terminal) to have a judgment action when implementing it, nor does it mean that there are other limitations.

[0063] Seventh, the pre-defined in the present application can be understood as: define, pre-define, store, pre-store, pre-negotiate, pre-configure, solidify, or pre-burn.

[0064] The technical solution provided in this application can be applied to various communication systems, such as: long term evolution (LTE) system, LTE frequency division duplex (FDD) system, LTE time division duplex (TDD), sidelink (SL) communication system, worldwide interoperability for microwave access (WiMAX) communication system, fifth generation (5G) mobile communication system or new radio access technology (NR), satellite communication system, etc. Among them, the 5G mobile communication system can include non-standalone (NSA) and / or standalone (SA).

[0065] The technical solution provided in this application can also be applied to future communication systems, such as the sixth generation (6G) mobile communication system, etc. This application does not limit this.

[0066] The radio access network (RAN) device in this application is a device with wireless transceiver function. The radio access network device can provide wireless communication function services and can access the terminal to the wireless network. The radio access network device can be a node in the radio access network, referred to as a RAN node.

[0067] In a possible scenario, a RAN node may be a base station (BS), an evolved NodeB (eNodeB), a transmission reception point (TRP), a home evolved NodeB (or home Node B, HNB), an access point (AP) of wireless fidelity (Wi-Fi), a mobile switching center, a next generation NodeB (gNB) in a 5G mobile communication system, a next generation NodeB in a 6G mobile communication system, or a base station in a future mobile communication system. A RAN node may also be a device that performs base station functions in a device to device (D2D) communication system, a vehicle to everything (V2X) communication system, a machine to machine (M2M) communication system, and an Internet of Things (IoT) communication system. A RAN node may also be a RAN node in a non terrestrial network (NTN), that is, a RAN node may be deployed on a high altitude platform or a satellite. The RAN node can be a macro base station, a micro base station or an indoor station, a relay node or a donor node, or a wireless controller in a cloud radio access network (CRAN) scenario, a node in an open radio access network (O-RAN or ORAN) scenario, etc. Optionally, the RAN node can also be a server, a wearable device, a vehicle or an onboard device, etc. For example, the RAN node in the V2X technology can be a road side unit (RSU). Of course, the RAN node can also be a node in the core network.

[0068] In another possible scenario, multiple RAN nodes collaborate to assist the terminal in achieving wireless access, and different RAN nodes respectively implement part of the functions of the base station. For example, the RAN node can be a centralized unit (CU), a distributed unit (DU), a CU-control plane (CP), a CU-user plane (UP), or a radio unit (RU). The CU and DU can be set separately, or can also be included in the same network element, such as a baseband unit (BBU). The RU can be included in a radio frequency device or a radio frequency unit, such as a remote radio unit (RRU), an active antenna unit (AAU) or a remote radio head (RRH).

[0069] In different systems, CU (or CU-CP and CU-UP), DU or RU may also have different names, but those skilled in the art can understand their meanings. For example, in the ORAN system, CU may also be called an open CU (O-CU), DU may also be called an open DU (O-DU), CU-CP may also be called an open CU-CP (O-CU-CP), CU-UP may also be called an open CU-UP (O-CU-UP), and RU may also be called an open RU (O-RU).

[0070] Among them, any unit in CU (or CU-CP, CU-UP), DU and RU can be implemented by software module, hardware module, or a combination of software module and hardware module. That is, the wireless access network device in this application can be a virtualized device, for example, implemented by general hardware and instantiated virtualization functions, or special hardware and instantiated virtualization functions. Among them, the general hardware can be a server, such as a cloud server.

[0071] The terminal in this application may also be referred to as user equipment (UE), access terminal, user unit, user station, mobile station, mobile station, remote station, remote terminal, mobile device, user terminal, terminal, wireless communication device, user agent or user device.

[0072] A terminal can be a device that provides voice / data connectivity to a user, for example, a handheld device with wireless connection function, a vehicle-mounted device, etc. At present, some examples of terminals can be: mobile phones, tablet computers (pad), computers with wireless transceiver functions (such as laptops, PDAs, etc.), mobile Internet devices (mobile internet devices, MIDs), virtual reality (virtual reality, VR) devices, augmented reality (augmented reality, AR) devices, wireless terminals in industrial control, wireless terminals in self-driving, drones, wireless terminals in remote medical, wireless terminals in smart grids, wireless terminals in transportation safety, wireless terminals in smart cities, wireless terminals in smart homes, cellular phones, cordless phones, session initiation protocol (session initiation protocol, SIP) phones, wireless local loop (wireless local loop, WLL) stations, personal digital assistants (personal digital assistants) assistant, PDA), handheld devices with wireless communication function, computing devices or other processing devices connected to a wireless modem, vehicle-mounted devices, wearable devices, terminals in 5G networks or terminals in future evolved public land mobile communication networks (public land mobile network, PLMN), etc.

[0073] Among them, wearable devices can also be called wearable smart devices, which are a general term for the intelligent design and development of wearable devices for daily wear using wearable technology, such as glasses, gloves, watches, clothing and shoes. Wearable devices are portable devices that are worn directly on the body or integrated into the user's clothes or accessories. Wearable devices are not only hardware devices, but also realize powerful functions through software support, data interaction, and cloud interaction. Broadly speaking, wearable smart devices include full-featured, large-sized, and independent of smartphones to achieve complete or partial functions, such as smart watches or smart glasses, as well as those that only focus on a certain type of application function and need to be used in conjunction with other devices such as smartphones, such as various smart bracelets and smart jewelry for vital sign monitoring.

[0074] In addition, the terminal can also be a terminal in the IoT system. IoT is an important part of the future development of information technology. Its main technical feature is to connect objects to the network through communication technology, thereby realizing an intelligent network of human-machine interconnection and object-to-object interconnection. IoT technology can achieve massive connections, deep coverage, and terminal power saving through narrow band (NB) technology, for example.

[0075] In addition, the terminal can also include sensors such as smart printers, train detectors, and gas stations. Its main functions include collecting data (partial terminals), receiving control information and downlink data from network devices, and sending electromagnetic waves to transmit uplink data to network devices.

[0076] The terminal in the present application may be a virtualized device, for example, implemented by general hardware and instantiated virtualization functions, or by dedicated hardware and instantiated virtualization functions. The general hardware may be a server, for example, a cloud server.

[0077] It should be understood that the present application does not limit the specific forms of the wireless access network equipment and terminals.

[0078] Figure 1 1 is a schematic diagram of the architecture of a communication system 100 applicable to the method provided in the embodiment of the present application. Figure 1 As shown, the communication system 100 includes a wireless access network 10 and a core network 20. Optionally, the communication system 100 may also include the Internet 30. The wireless access network 10 may include at least one wireless access network device (such as Figure 1 110a and 110b), and may further include at least one terminal (such as Figure 1 120a-120j in FIG.

[0079] The terminal can be connected to the wireless access network equipment by wireless means, and the wireless access network equipment can be connected to the core network by wireless or wired means. The core network equipment and the wireless access network equipment can be independent and different physical devices, or the functions of the core network equipment and the logical functions of the wireless access network equipment can be integrated on the same physical device, or part of the functions of the core network equipment and part of the functions of the wireless access network equipment can be integrated on one physical device. Terminals and wireless access network equipment can be connected to each other by wired or wireless means.

[0080] The wireless access network equipment and the terminal, the wireless access network equipment, and the terminals can communicate through the authorized spectrum, through the unlicensed spectrum, or through both the authorized spectrum and the unlicensed spectrum; they can communicate through the spectrum below 6 gigahertz (GHz), through the spectrum above 6 GHz, or through the spectrum below 6 GHz and the spectrum above 6 GHz at the same time. The embodiments of the present application do not limit the spectrum resources used for wireless communication.

[0081] The wireless access network device may be a base station deployed in the air, such as a satellite base station 110a; or may be a base station deployed indoors, such as a micro base station or an indoor station 110b.

[0082] The terminal may be a terminal deployed in the air, such as Figure 1 The helicopter or drone 120i in the example; it can also be a terminal deployed on the ground, such as Figure 1 The mobile phones 120a, 120e, 120f and 120j, the vehicle 120b, the computer 120g, the printer 120h, etc.

[0083] Wireless access network equipment and terminals can be fixed or mobile. For example, wireless access network equipment and terminals can be deployed on land, including indoors or outdoors, handheld or vehicle-mounted; they can also be deployed on the water surface; they can also be deployed in the air on aircraft, balloons and artificial satellites.

[0084] The roles of wireless access network equipment and terminals can be relative. For example, Figure 1 The helicopter or drone 120i in the figure can be configured as a mobile base station. For those 120j that access the wireless access network 10 through 120i, 120i is a base station; but for 110a, 120i is a terminal, that is, 110a and 120i communicate through the wireless air interface protocol. Of course, 110a and 120i can also communicate through the interface protocol between wireless access network devices. In this case, relative to 110a, 120i is also a base station. Therefore, wireless access network devices and terminals can be collectively referred to as communication devices. Figure 1 110a, 110b and 120a-120j in the figure can be called communication devices having their respective corresponding functions, such as communication devices having base station functions, or communication devices having terminal functions.

[0085] It should be understood that Figure 1 This is just a schematic diagram. The communication system may also include other devices, such as wireless relay devices and wireless backhaul devices. Figure 1 Not drawn in.

[0086] To facilitate understanding, the relevant concepts involved in this application are first briefly introduced.

[0087] 1. Access Control

[0088] Access control means that before a terminal initiates a service / signaling request at the non-access stratum (NAS) layer or access stratum (AS) layer, it must first confirm whether the network allows access based on certain mechanisms and control parameters. If the access control check is passed, the NAS layer or AS layer can establish the NAS, AS signaling and service connection. Otherwise, it will take a certain period of time before the access control check can be performed again. The purpose of access control is to filter based on the two dimensions of terminal type and service type when the network is busy, so that terminals with higher priority or more important services can obtain services smoothly.

[0089] In the 5G system, the access control method currently used is to configure the parameters of AC and AI in the unified access control (UAC) broadcast parameters. The terminal then maps the access attempt type to AC and the terminal configuration to AI, and combines the UAC parameters to determine whether the terminal's access is prohibited.

[0090] Table 1 is a mapping table that maps access attempt types to ACs. Currently, there are 64 service types in the AC in the 5G system. AC mainly distinguishes what service type the access attempt corresponds to. Among these 64 ACs, AC 8-31 are reserved for future protocol expansions. AC 32-63 refers to ACs defined by the operator itself. Other ACs have clear corresponding services. For example, AC0 represents an access attempt caused by paging, AC2 represents an emergency call, AC3 represents an access attempt initiated by the terminal itself, and AC4, AC5, AC6, and AC7 all have their own specific instructions.

[0091] The process of terminal mapping AC is as follows: the terminal determines the type of access attempt (or service type); according to Table 1, the determined type of access attempt is mapped to the corresponding AC. For example, if the terminal determines that the access attempt is a paging terminal call initiated, then the access attempt corresponds to AC0. When the terminal makes a UAC judgment, it decides whether to initiate the access attempt based on the value of AC.

[0092] Table 1

[0093] AC Number Access attempt type 0 Mobile originated (MO) signal generated by paging 1 all except for emergency 2 Emergency 3 MO signals other than paging 4 Multimedia telephony (MMTEL) Voice 5 MMTEL video 6 Short message service (SMS) 7 MO data that does not belong to any other access category 8-31 Reserved standardized access categories 32-63 Based on operator classification

[0094] Table 2 is a mapping table for mapping terminal configuration to AI. At present, there are 16 AIs in the 5G system. AI 3-10 is reserved for future expansion of the protocol, AI 11-15 is configurable by operators, and AI 1 and AI 2 refer to the terminal supporting multimedia and the UE device supporting critical services. Terminal configuration is a description of the device type of the terminal, the configuration type of the terminal, etc. It is configured by the terminal according to the characteristics of the terminal itself, or according to the registration information of the terminal in the network. For example, the registration information of the terminal may indicate the configuration information of the terminal for multimedia priority services, or the configuration information of the terminal for critical business services, or the configuration information of the terminal for public land mobile network (PLMN), exclusive PLMN, PLMN list, etc.

[0095] In the configuration of the network side, AI can be configured in the form of a bitmap. For example, the length of the bitmap for configuring AI can be 7, indicating that this bitmap limits whether the access corresponding to 7 of the AIs is prohibited. For example, a bitmap with a length of 7 limits AI = 1, 2, 11, 12, 13, 14, 15, a total of 7 AIs. 1 in the bitmap indicates that the access corresponding to this AI is not prohibited, and 0 indicates that the access corresponding to this AI is prohibited (or 1 in the bitmap indicates that the access corresponding to this AI is prohibited, and 0 indicates that the access corresponding to this AI is not prohibited).

[0096] Table 2

[0097]

[0098]

[0099] After the terminal determines the AC and AI, the UAC judgment process is as follows: First, the AC is judged. If it is impossible to determine whether the access is prohibited based on the AC, it can be determined whether the access is prohibited based on the determined AI and the configuration (bitmap) of the AI ​​carried in the broadcast message; if it is determined that the access is not prohibited, it is considered that the network can be accessed. Otherwise, it is necessary to further confirm whether the access is prohibited according to the following steps. The terminal first determines the parameters uac-BarringTime and uac-BarringFactor according to its own access category; then the AS layer generates a random number (random value) from 0 to 1. If this random number is less than uac-BarringFactor, it is considered that the access is allowed; if this random number is not less than uac-BarringFactor, it is considered that the access is prohibited, and the T390 timer is started. The timer duration T satisfies: T = (0.7 + 0.6 * random number) * uac-BarringTime (seconds). If the same access category is initiated again during the operation of the T390 timer, it is directly rejected.

[0100] The uac-BarringTime is used to determine the time for prohibiting access to the network.

[0101] 2. Random access process

[0102] The random access process is a process in which a terminal starts to send a random access preamble to a network device that is trying to access, until a connection is established between the terminal and the network device.

[0103] If the result of the terminal access control check is that the terminal's access is not prohibited, the terminal can continue to access the network through the random access process. The random access process may occur in processes such as switching and RRC re-establishment. Random access can be divided into contention based random access (CBRA) and non-contention free random access (CFRA). The resources used by CFRA are CFRA resources, which are dedicated RACH resources. CFRA resources may specifically include preamble code indexes and time-frequency resources. In NR, CFRA resources may be CFRA resources associated with a beam of a cell. If the network device configures CFRA resources for the terminal, the terminal can use the CFRA resources to initiate the CFRA process. If CFRA fails or CFRA resources are not configured, the terminal can initiate CBRA. CBRA resources can be understood as public resources, and the terminal can use CBRA resources to initiate the CBRA process in a competitive manner. The random access process mentioned in the following embodiments may refer to the terminal performing a CFRA process, or may refer to the terminal performing a CBRA process, or may refer to the terminal performing a CBRA process after performing CFRA.

[0104] The random access process is currently divided into two types: 4-step random access and 2-step random access. Both 4-step random access and 2-step random access support CBRA and CFRA.

[0105] The following briefly describes the four-step contention-based random access process. The contention-based random access process may specifically include steps 1 to 4 described below.

[0106] Step 1: The terminal sends a random access preamble to the network device via a physical random access channel (PRACH). In other words, the terminal sends Msg1 to the network device.

[0107] Step 2: The network device sends a random access response (RAR) to the terminal. The random access response may include timing advance (TA) information, uplink grant (UL grant) information and temporary C-RNTI (temporary cell-radio network temporary identifier, TC-RNTI), etc. In other words, the network device sends Msg2 to the terminal.

[0108] Step 3: Based on the received random access response, the terminal sends a message or data on the UL grant resources allocated by the network device, for example, sends an RRC establishment request message, and the RRC establishment request message may include the identification information of the terminal. The identification information may be, for example, the TC-RNTI described above. In other words, the terminal sends Msg3 to the network device.

[0109] Step 4: After the network device receives the message or data sent by the terminal on the allocated UL grant resources, if there is no conflict (or no competition), the network device sends a contention resolution message to the terminal, for example, the network device sends an RRC establishment message to the terminal. Thereafter, the terminal can communicate with the network device. In other words, the terminal sends Msg4 to the network device.

[0110] The non-contention-based four-step random access process may specifically include step (1) and step (2) described below.

[0111] Step (1): The terminal sends a random access preamble to the network device via PRACH. In the non-contention random access process, the network device allocates / sends a random access preamble index to the terminal in advance. In other words, the random access preamble index is dedicated. According to the random access preamble index, the terminal sends a random access preamble to the network device.

[0112] Step (2): The network device sends a random access response to the terminal. The random access response may include TA information, UL grant information, etc. It should be noted that the UL grant information is used to indicate the UL grant. The UL grant may specifically include at least one of the following: time-frequency resources, modulation coding scheme (MCS), new data indicator (NDI), the time for initiating uplink transmission (such as a subframe or time slot), and the interval of uplink scheduling. Among them, the time-frequency resources included in the UL grant may specifically refer to the time-frequency position of the uplink resources scheduled by the UL grant. The uplink resources scheduled by the UL grant may be, for example, PUSCH resources. It should be understood that the specific content included in the UL grant can refer to the prior art. The present application does not limit the specific content included in the UL grant.

[0113] Unlike the 4-step random access process, in the 2-step random access process, the terminal sends the PUSCH payload at the same time as the random access preamble. The preamble and PUSCH payload sent by the terminal are called message A (MsgA). After receiving MsgA, the network device sends MsgB to the terminal based on MsgA. The MsgB may include contention resolution response, fallback indication, and backoff indication.

[0114] It can be understood that in the 2-step CFRA, the network can also allocate dedicated PRACH resources to the terminal for sending the preamble and PUSCH load in MsgA.

[0115] During the random access process, the terminal can also indicate the characteristics of the terminal through Msg1, so that the network device can allocate independent random access channel (RACH) resources to terminals with different characteristics. The following is an introduction taking four characteristics as examples:

[0116] 1. Reduced capability (Red Cap) terminal: refers to the terminal with reduced bandwidth or reduced number of antennas. Since the bandwidth supported by Red Cap terminals is smaller than that of traditional terminals, the network needs to identify Red Cap terminals in advance in Msg1, so that the network can perform special processing on Red Cap terminals in the subsequent RACH process, such as ensuring that the uplink resources in Msg3 scheduled in RAR do not exceed the maximum bandwidth supported by Red Cap terminals, and performing appropriate configuration on Red Cap terminals in Msg4;

[0117] 2. Small data transmission (SDT): UE in RRC_INACTIVE state can perform small data transmission based on RACH, that is, UE also sends small data packets when sending Msg3, and the terminal can perform cell data transmission without entering the connected state, thus saving power consumption. Therefore, the terminal needs to report the UE request for small data transmission in Msg1, so that the network can schedule larger Msg3 transmission resources for the UE in RAR.

[0118] 3. Coverage enhancement (Cov Enh): The terminal can report the need for coverage enhancement in Msg1 so that the network can repetition schedule Msg3, that is, the terminal will send Msg3 several times, which can improve the receiving power on the network side and ensure that the uplink receiving power of the terminal is large enough at the edge of the cell.

[0119] 4. Radio access network (RAN) slicing: Considering that the network can provide dedicated RACH resources for some higher-priority services or users, the network supports the high priority of slicing and realizes RACH resource isolation.

[0120] It can be understood that in addition to the above four R17 features, the feature combination between each feature also requires the network to configure dedicated RACH resources. For example, if a Red Cap terminal triggers a small packet transmission based on RACH, the network needs to identify the UE as a Red Cap UE in Msg1, so that the RedCap UE is specially processed in the subsequent RACH process. The network also needs to identify in Msg1 that the UE requests SDT transmission, so that when configuring Msg3 resources, the transmission of small packet data is considered. That is, at this time, the network needs to configure independent RACH resources for the scenario where the Red Cap terminal triggers a small packet transmission based on RACH, which can be expressed as a feature combination of RedCap+SDT. Therefore, the network may not only need to configure independent RACH resources for the above four features, but also need to configure independent RACH resources for the feature combination between the above features.

[0121] At present, NTN is introduced in 5G. NTN is a communication network that introduces aircraft (aircraft / drone) or satellites into the communication system as relay nodes or base stations. According to the provisions of the International Telecommunication Union (ITU), satellite services can be divided into two categories: mobile satellite services (MSS) and fixed satellite services (FSS). Among them, FSS provides services for ground terminals with fixed locations, including a fixed point or several fixed points in a fixed area, such as the feeder link in NTN: geosynchronous orbit (GSO) satellite-gateway station); while MSS provides services for mobile terminals, such as the service link in NTN (movable terminal-satellite, or non-geostationary orbit (NGSO) satellite-gateway station).

[0122] Correspondingly, terminals using the two types of services can also be divided into two categories, namely, terminals using MSS (hereinafter referred to as MSS terminals) and terminals using FSS (hereinafter referred to as FSS terminals). The two different types of services use different frequencies. For example, the S band of R17 is the MSS band, and the Ka band of R18 is the FSS band. This method of using different frequency bands for communication can achieve interference management of FSS terminals and avoid affecting the communication of FSS. However, considering the improvement of spectrum utilization, there may be a scenario in which the FSS band is reused for MSS. In this reuse scenario, it is hoped that when the MSS uses the frequency band, it will try not to interfere with the FSS terminal. That is to say, when the MSS terminal and the FSS terminal access the FSS frequency band at the same time, the priority access of the FSS terminal must be guaranteed.

[0123] However, the current access management does not distinguish between the access of FSS and MSS terminals. Therefore, in the frequency band reuse scenario, if a large number of MSS terminals access the cell where the FSS terminals are located, the FSS terminals may be squeezed out, affecting the access of the FSS terminals.

[0124] In view of this, an embodiment of the present application provides an access control method and a related device. In this method, a new UAC configuration is introduced in the SIB1 broadcast by the network device, for example, a new AC, a new AI or a new UAC parameter, as a condition for judging whether a terminal with a higher or lower access priority is allowed to access the network, so that terminals with different access priorities can be judged based on different parameters, thereby accessing the network with different access probabilities, thereby realizing access management of different types of terminals.

[0125] Combine the following Figures 2 to 4 , describes in detail the method provided in the embodiment of the present application. The method can be applied to Figure 1 The communication system shown, but the embodiments of the present application are not limited to this.

[0126] exist Figure 2 In the flowchart shown, the method is shown from the perspective of the interaction of the communication device, but the present application does not limit the execution subject of the method. Figure 2 The network device in the method may be replaced by a chip, a chip system, or a processor that supports the network device to implement the method, or may be a logic module or software that can implement all or part of the functions of the network device; Figure 2 The terminal in the method can be replaced by a chip, a chip system, or a processor that supports the terminal to implement the method, or a logic module or software that can implement all or part of the terminal functions.

[0127] Figure 2 is a schematic flow chart of the access control method provided in the embodiment of the present application. Figure 2As shown, the method 200 may include S201 to S204. Each step in the method 200 is described in detail below.

[0128] S201: A network device generates a first UAC parameter and a second UAC parameter.

[0129] The first UAC parameter is used to determine whether a first type of terminal is allowed to access the network, and the second UAC parameter is used to determine whether a second type of terminal is allowed to access the network. The first UAC parameter is different from the second UAC parameter.

[0130] It can be understood that when the priority of the first type of terminal accessing the network is higher than the priority of the second type of terminal accessing the network, the access probability corresponding to the first UAC parameter is greater than the access probability corresponding to the second UAC parameter; or, when the priority of the first type of terminal accessing the network is lower than the priority of the second type of terminal accessing the network, the access probability corresponding to the first UAC parameter is less than the access probability corresponding to the second UAC parameter.

[0131] Exemplarily, in a scenario where the frequency band used by the FSS is reused for the MSS, the priority of FSS terminals accessing the network is higher than the priority of MSS terminals accessing the network, and when the first type of terminals are FSS terminals and the second type of terminals are MSS terminals, the access probability corresponding to the first UAC parameter is greater than the access probability corresponding to the second UAC parameter; or, when the first type of terminals are MSS terminals and the second type of terminals are FSS terminals, the access probability corresponding to the first UAC parameter is less than the access probability corresponding to the second UAC parameter.

[0132] Similarly, in a scenario where the frequency band used by MSS is reused for FSS, the priority of MSS terminals accessing the network is higher than the priority of FSS terminals accessing the network. Then, when the first type of terminals are MSS terminals and the second type of terminals are FSS terminals, the access probability corresponding to the first UAC parameter is greater than the access probability corresponding to the second UAC parameter; or, when the first type of terminals are FSS terminals and the second type of terminals are MSS terminals, the access probability corresponding to the first UAC parameter is less than the access probability corresponding to the second UAC parameter.

[0133] The access probability refers to the probability that the terminal is allowed to access the network. The access probability corresponding to the first UAC parameter is greater than the access probability corresponding to the second UAC parameter, which can be understood as: when both the first type of terminal and the second type of terminal need to access the network, the access of the first type of terminal is more likely to be allowed, while the access of the second type of terminal is more likely to be prohibited.

[0134] Exemplarily, the first UAC parameter includes AI configuration information, uac-BarringTime and uac-BarringFactor. Among them, AI configuration information refers to the bitmap mentioned in the above description of AI, which will not be repeated here. For the description of uac-BarringTime and uac-BarringFactor, please refer to the relevant description above, which will not be repeated here.

[0135] Based on the previous description of uac-BarringFactor, it can be known that the uac-BarringFactor in the first UAC parameter can be set larger than the uac-BarringFactor in the second UAC parameter, so that the access probability corresponding to the first UAC parameter is greater than the access probability corresponding to the second UAC parameter.

[0136] S202: The network device sends a first UAC parameter and a second UAC parameter to the terminal. Correspondingly, the terminal receives the first UAC parameter and the second UAC parameter from the network device.

[0137] The first UAC parameter and the second UAC parameter may be carried by a broadcast message, for example, SIB1.

[0138] S203: The terminal determines a first access identifier.

[0139] For the description of the terminal determining the first access identifier, please refer to the description of access control in the related terms above, which will not be repeated here.

[0140] It can be understood that the first access identifier can be any one of the 16 AIs in the 5G system described above.

[0141] S204: The terminal determines whether the terminal is allowed to access the network based on the first access identifier and the target UAC parameter.

[0142] The target UAC parameter is the first UAC parameter or the second UAC parameter.

[0143] Exemplarily, when the terminal is a first type terminal, the target UAC parameter is the first UAC parameter; or, when the terminal is a second type terminal, the target UAC parameter is the second UAC parameter. That is, after the terminal determines the first access identifier, it can determine the corresponding UAC parameter based on the terminal type to which the terminal belongs, thereby determining whether access is allowed based on the corresponding UAC parameter.

[0144] Regarding how the terminal determines whether the terminal is allowed to access the network based on the first access identifier and the target UAC parameter, reference may be made to the above description of the UAC determination process, which will not be repeated here.

[0145] The terminal may be a FSS terminal or a MSS terminal.

[0146] Combined with the above example of the scenario where the frequency band used by FSS is reused for MSS, when the terminal is an FSS terminal, the probability that the terminal is allowed to access the network is greater than the probability that the terminal is allowed to access the network when the terminal is an MSS terminal. For example, when the terminal is an FSS terminal, the terminal is allowed to access the network; when the terminal is an MSS terminal, the terminal is prohibited from accessing the network.

[0147] Combined with the above example of the scenario where the frequency band used by the MSS is reused for the FSS, when the terminal is an FSS terminal, the probability that the terminal is allowed to access the network is lower than the probability that the terminal is allowed to access the network when the terminal is an MSS terminal. For example, when the terminal is an FSS terminal, the terminal is prohibited from accessing the network; when the terminal is an MSS terminal, the terminal is allowed to access the network.

[0148] In an embodiment of the present application, a network device sends a first UAC parameter corresponding to a first type of terminal and a UAC parameter corresponding to a second type of terminal to a terminal, so that when the terminal makes a UAC judgment, it can determine the UAC parameter corresponding to the type of the terminal from the received first UAC parameter and the second UAC parameter based on the terminal type to which the terminal belongs, and determine whether the access of the terminal is prohibited based on the determined UAC parameter and the determined first access identifier. Since different UAC parameters are configured for different types of terminals, in a frequency band reuse scenario, the method provided in the present application can ensure the probability of different types of terminals accessing the network, thereby realizing access management of different types of terminals.

[0149] Optionally, before S204, the method 200 further includes: the terminal determines a first access category, and determines based on the first access category that it is impossible to determine whether the terminal is allowed to access the network.

[0150] For the description of the terminal determining the first access category, please refer to the description of access control in the previous description of related terms, which will not be repeated here.

[0151] It can be understood that the first access category can be any one of the 64 ACs in the 5G system described above.

[0152] Figure 3 3 is another schematic flow chart of the access control method 300 provided in the embodiment of the present application. The method 300 may be executed by a terminal, or by a chip, a chip system, or a processor that supports the terminal to implement the method, or by a logic module or software that can implement all or part of the terminal functions.

[0153] like Figure 3As shown, the method 300 may include S301 and S302. The following describes in detail each step in the method 300 with the terminal as the execution subject. It should be understood that the terminal used to execute the method 300 may be a first type terminal, which is an FSS terminal or an MSS terminal.

[0154] S301: Determine a first access category or a first access identifier.

[0155] The first access category is defined for a service type of a first type of terminal, and the first access identifier is configured for the first type of terminal.

[0156] The first access category may be any access category number not defined in the current protocol, for example, any number in AC 8-31. The first access identifier may be any access category number not defined in the current protocol, for example, any number in AI 3-10.

[0157] Exemplarily, the present application can add a correspondence between at least one service type (i.e., access attempt type) of the first category of terminals and at least one number in the reserved multiple ACs (8-31) in Table 1 shown above, so that the terminals belonging to the first category of terminals can determine the first access category when performing UAC judgment.

[0158] Alternatively, the present application adds a correspondence between the configuration of the first category terminal and at least one of the reserved multiple AI numbers (3-10) in Table 2 shown above, so that the terminal belonging to the first category terminal can determine the first access identifier when performing UAC judgment.

[0159] It can be understood that the present application adds an access category or access identifier for the first type of terminal on the basis of the existing protocol. Therefore, the method for determining the first access category and the first access identifier in the present application can also be obtained by referring to the previous description and will not be repeated here.

[0160] S302: Determine whether the terminal is allowed to access the network based on the first access category or the first access identifier.

[0161] Exemplarily, in the case of determining the first access category, the terminal determines whether the terminal is allowed to access the network based on the first access category. Alternatively, in the case of determining the first access identifier, the terminal determines whether the terminal is allowed to access the network based on the first access identifier.

[0162] It can be understood that before the terminal determines whether the terminal is allowed to access the network based on the first access identifier, the terminal has determined that it is impossible to determine whether the terminal's access is prohibited based on the access category.

[0163] Among them, the process of how the terminal determines whether the terminal is allowed to access the network based on the first access category or the first access identifier can refer to the UAC judgment process described above, which is not repeated here.

[0164] However, it should be noted that since this application newly defines access categories, it is also necessary to define the access network corresponding to the newly added access categories. For example, whether the newly added access category is allowed to access the network; similarly, this application newly defines access identifiers, and it is also necessary to add bits corresponding to the newly defined access identifiers in the AI ​​bitmap included in the UAC parameters.

[0165] In the embodiment of the present application, when the terminal is a first-category terminal, the determined first access category is defined for the service type of the first-category terminal, or the determined first access identifier is defined based on the configuration of the first-category terminal, that is, the access type or access identifier determined by different types of terminals is related to the type of terminal. Since different types of terminals have different priorities for accessing the network, the method based on the embodiment of the present application can determine the access identifier or access category corresponding to the terminal type when the terminal type is different, thereby ensuring the probability of different types of terminals accessing the network and realizing access management for different types of terminals.

[0166] Exemplarily, when the priority of the FSS terminal is higher than that of the MSS terminal, and the first category of terminals are FSS terminals, it is determined based on the first access category or the first access identifier that the terminal is allowed to access the network.

[0167] In other words, the first access category (or the first access identifier) ​​is defined for a class of terminals with higher access priority, and then it is determined based on the first access category (or the first access identifier) ​​that the terminal is allowed to access the network.

[0168] Similarly, when the priority of the FSS terminal is higher than that of the MSS terminal, and the first type of terminal is the MSS terminal, it is determined that the terminal is prohibited from accessing the network based on the first access category or the first access identifier.

[0169] In other words, the first access category (or the first access identifier) ​​is defined for a class of terminals with lower access priority, and then it is determined based on the first access category (or the first access identifier) ​​that the terminal is prohibited from accessing the network.

[0170] The access priority of the above-mentioned terminals can be determined based on the following method: if there are Class A terminals and Class B terminals, and Class A terminals use frequency band A for communication, and Class B terminals use frequency band B for communication, if Class A terminals and Class B terminals reuse frequency band A for communication, then the priority of Class A terminals accessing the network is higher than the priority of Class B terminals accessing the network (or in other words, the priority of Class A terminals accessing the network is higher, and the priority of Class B terminals accessing the network is lower); if Class A terminals and Class B terminals reuse frequency band B for communication, then the priority of Class A terminals accessing the network is lower than the priority of Class B terminals accessing the network (or in other words, the priority of Class A terminals accessing the network is lower, and the priority of Class B terminals accessing the network is higher).

[0171] It is understandable that the above Figure 2 and Figure 3 The embodiments shown can be combined with each other or implemented independently. Figure 2 and Figure 3 When implemented separately, it can perform Figure 2 or Figure 3 More or fewer of the steps shown; when Figure 2 and Figure 3 When combined with the illustrated embodiments, the access control method provided by the present application may include: determining a first access identifier, and determining whether the terminal is allowed to access the network based on the first identifier and a first UAC parameter; wherein the first access identifier is configured for a first type of terminal.

[0172] Figure 4 FIG. 4 is another schematic flow chart of the access control method 400 provided in an embodiment of the present application. Figure 4 In the flowchart shown, the method is shown from the perspective of the interaction of the communication device, but the present application does not limit the execution subject of the method. Figure 4 The network device in the method may be a chip, a chip system, or a processor that supports the network device to implement the method, or may be a logic module or software that can implement all or part of the functions of the network device; Figure 4 The terminal in the method may be a chip, a chip system, or a processor that supports the terminal to implement the method, or may be a logic module or software that can implement all or part of the terminal functions.

[0173] like Figure 4 As shown, the method 400 may include S401 to S403. Each step in the method 400 is described in detail below.

[0174] S401, a terminal sends first information to a network device, where the first information indicates the type of the terminal. Correspondingly, the terminal receives the first information from the network device.

[0175] The type of the terminal includes an FSS terminal or an MSS terminal. In other words, the first information indicates the service type of the terminal.

[0176] Optionally, the first information may be an access identifier, a layer identifier, or other information of the terminal that can identify the type of the terminal, which is not limited in the present application.

[0177] S402: The network device determines whether to allow the terminal to access the network based on the type of the terminal.

[0178] Exemplarily, the priority of FSS terminals accessing the network is higher than the priority of MSS terminals accessing the network. When the network is congested, the network device allows FSS terminals to access the network but does not allow MSS terminals to access the network.

[0179] Similarly, the priority of FSS terminals accessing the network is lower than that of MSS terminals accessing the network. When the network is congested, the network equipment allows MSS terminals to access the network but does not allow FSS terminals to access the network.

[0180] The method for determining the priority of the terminal accessing the network may refer to the description in method 300 and will not be repeated here.

[0181] S403: The network device sends a first message to the terminal, where the first message is used to indicate whether the terminal is allowed to access the network. Correspondingly, the terminal receives the first message.

[0182] Exemplarily, when the network device determines to allow the terminal to access the network, the network device sends a message allowing access to the terminal; or, when the network device determines to prohibit the terminal from accessing the network, the network device sends a message rejecting access to the terminal.

[0183] In an embodiment of the present application, the terminal sends the type of the terminal to the network device, so that the network device can determine whether to allow the terminal to access the network based on the type of the received terminal. For example, in a scenario where the MSS reuses the FSS frequency band, when the type of the terminal is an MSS terminal, the terminal is not allowed to access the network in the case of network congestion, or when the type of the terminal is an FSS terminal, the terminal can be allowed to access the network in the case of network congestion. Therefore, the present application can enable the network device to determine whether the terminal can access the network based on the type of the terminal by indicating the type of the terminal to the network device, thereby ensuring the probability of different types of terminals accessing the network.

[0184] Optionally, the first information is a random access preamble code.

[0185] Optionally, when the first information is a random access preamble, before S401, the method 400 further includes the following steps 1 and 2:

[0186] Step 1: The network device sends a first mapping relationship to the terminal, where the first mapping relationship indicates a correspondence between a plurality of random access preamble codes and a plurality of terminal types. Correspondingly, the terminal receives the first mapping relationship from the network device.

[0187] The first mapping relationship may be carried in a broadcast message, for example, SIB1.

[0188] It can be understood that the first mapping relationship may also be predefined.

[0189] Step 2: The terminal determines a random access preamble code corresponding to the type of the terminal based on the first mapping relationship.

[0190] Optionally, when the first information is a random access preamble code, before S402, the method 400 further includes: the network device determines the type of terminal corresponding to the first information based on the first mapping relationship.

[0191] For the description of the first mapping relationship, please refer to the previous description and will not be repeated here.

[0192] Optionally, before S403, the method 400 further includes the following steps 3 and 4:

[0193] Step 3: When the network device allows the terminal to access the network, the network device sends a random access response message to the terminal. Correspondingly, the terminal receives the random access response message from the network device.

[0194] Step 4: The terminal sends an RRC establishment request message, an RRC recovery request message, or an RRC reestablishment request message to the network device.

[0195] Optionally, the first information is carried in a message 3 of the random access procedure. The message 3 (Msg3) may be an RRC establishment request message, an RRC recovery request message, or an RRC reestablishment request message.

[0196] That is, Msg3 can be an RRC setup request message transmitted during the RRC establishment process, an RRC resume request message during the RRC recovery process, or an RRC re-establishment request message during the RRC re-establishment process. The Msg3 includes the RRC connection establishment reason and the terminal identifier (ID), and the terminal ID can be an S-temporary mobile subscriber identity (S-TMSI) or a random number.

[0197] If Msg3 is an RRC reconstruction request message, the terminal ID included in Msg3 may be composed of the cell radio network temporary identifier (C-RNTI), physical cell ID and short message authentication code for integrity (MAC-I) of the cell.

[0198] Optionally, when the first information is carried in message 3 of the random access procedure, before S401, the method 400 further includes the following steps 5 and 6:

[0199] Step 5: The terminal sends a random access preamble to the network device. Correspondingly, the network device receives the random access preamble from the terminal.

[0200] Step 6: The network device sends a random access response message to the terminal. Correspondingly, the terminal receives the random access response message from the network device.

[0201] For the description of step 5 and step 6, reference may be made to the above description of the random access process, which will not be repeated here.

[0202] Exemplarily, in a possible implementation, the terminal can complete random access according to the existing random access process. After the terminal accesses the network device, it sends a message 5 (Msg5) to the network device, and carries the above-mentioned first information in the message 5. Among them, the message 5 can be a message of RRC establishment completion or a message of RRC reconstruction completion. Correspondingly, the network device receives the message 5, and based on the first information accessed, determines again whether to allow the terminal to access the network.

[0203] It is understandable that the above Figure 4 The illustrated embodiment may be Figure 2 or Figure 3 The method shown is then executed. Figure 2 or Figure 3 If the method shown determines that the terminal is allowed to access the network, the execution may continue Figure 4 The method shown.

[0204] Combination of the above Figures 2 to 4 The method provided in the embodiment of the present application is described in detail. Figure 5 and Figure 6 , describing the device provided in the embodiments of the present application.

[0205] Figure 5 and Figure 6Schematic diagram of possible devices provided by the embodiments of the present application. These devices can be used to implement the functions of the terminal or network device in the above method embodiments, and thus can also achieve the beneficial effects possessed by the above method embodiments.

[0206] Figure 5 is a schematic block diagram of the device provided in the embodiment of the present application. Figure 5 As shown, the device 500 includes a transceiver module 510 and a processing module 520 .

[0207] One possible design is that the device 500 is used to implement the above Figures 2 to 4 The functions of the terminal in the method embodiment shown in FIG.

[0208] Exemplarily, the transceiver module 510 is used to: receive a first UAC parameter and a second UAC parameter from a network device, the first UAC parameter is used to determine whether a first type of terminal is allowed to access the network device, and the second UAC parameter is used to determine whether a second type of terminal is allowed to access the network device; the processing module 520 can be used to: determine a first access identifier; based on the first access identifier and a target UAC parameter, determine whether the terminal is allowed to access the network device, the target UAC parameter is the first UAC parameter or the second UAC parameter.

[0209] Exemplarily, the processing module 520 can be used to: determine a first access category or a first access identifier, the first access category is defined for a service type of a first category of terminals, the first access identifier is configured for the first category of terminals, the terminals are the first category of terminals, the first category of terminals are terminals using FSS or terminals using MSS; and, based on the first access category or the first access identifier, determine whether the terminal is allowed to access the network.

[0210] Optionally, the priority of the terminal using FSS is higher than that of the terminal using MSS, and the first category of terminals is the terminal using FSS; the processing module 520 is specifically used to: determine whether the terminal is allowed to access the network based on the first access category or the first access identifier.

[0211] Optionally, the priority of the terminal using FSS is higher than that of the terminal using MSS, and the first category of terminals are the terminals using MSS; the processing module 520 is specifically used to: determine that the terminal is prohibited from accessing the network based on the first access category or the first access identifier.

[0212] Exemplarily, the transceiver module 510 is used to: send first information to a network device, wherein the first information indicates the type of the terminal, wherein the type of the terminal includes a terminal using FSS or a terminal using MSS; and receive a first message from the network device, wherein the first message is used to indicate whether the terminal is allowed to access the network device.

[0213] Optionally, the first information is a random access preamble code corresponding to the type of the terminal; the transceiver module 510 is also used to: receive a first mapping relationship from a network device, the first mapping relationship indicating a correspondence between multiple random access preamble codes and multiple terminal types; the processing module 520 is used to: determine the random access preamble code corresponding to the type of the terminal based on the first mapping relationship.

[0214] For a more detailed description of the transceiver module 510 and the processing module 520, please refer to Figure 2 The relevant description in the embodiment shown in Figure 4 is directly obtained and will not be repeated here.

[0215] Another possible design is that the device 500 is used to implement the above Figures 2 to 4 The functions of the network device in the method embodiment shown in FIG.

[0216] Exemplarily, the processing module 520 is used to: generate a first UAC parameter and a second UAC parameter, the first UAC parameter is used to determine whether a first type of terminal is allowed to access the network device, and the second UAC parameter is used to determine whether a second type of terminal is allowed to access the network device; the transceiver module 510 is used to: send the first UAC parameter and the second UAC parameter to the terminal.

[0217] Exemplarily, the transceiver module 510 is used to: receive first information from a terminal, the first information indicating the type of the terminal, the type of the terminal including a terminal using FSS or a terminal using MSS; the processing module 520 is used to: determine whether the terminal is allowed to access the network device based on the first information; and send a first message to the terminal, the first message being used to indicate whether the terminal is allowed to access the network device.

[0218] Optionally, the above-mentioned first information is a random access preamble code corresponding to the type of the terminal; the transceiver module 510 is also used to: send a first mapping relationship to the terminal, the first mapping relationship indicating the correspondence between multiple random access preamble codes and multiple terminal types; the processing module 520 is used to: determine the type of terminal corresponding to the first information based on the first mapping relationship.

[0219] For a more detailed description of the transceiver module 510 and the processing module 520, please refer to Figure 2 and Figure 4 The relevant description in the illustrated embodiment is directly obtained and will not be repeated here.

[0220] It should be noted that the device 500 may include a sending module but not a receiving module. Alternatively, the device 500 may include a receiving module but not a sending module. Specifically, it may depend on whether the above solution executed by the device 500 includes a sending action and a receiving action. It is understandable that since the device 500 has a communication function, it can also be called a communication device.

[0221] Figure 6 is another schematic block diagram of the device provided in the embodiment of the present application. Figure 6 As shown, the device 600 includes one or more processors 610. The processor 610 may be a general-purpose processor or a dedicated processor, etc. For example, it may be a baseband processor or a central processing unit. The baseband processor may be used to process the communication protocol and communication data, and the central processing unit may be used to control the device (such as a terminal, a network device or a chip, etc.), execute the software program, and process the data of the software program.

[0222] Optionally, in one design, the processor 610 may include a program (also referred to as code or instruction), which may be executed on the processor 610 to enable the apparatus 600 to perform the method performed by the terminal or network device in the above method embodiment. In another possible design, the apparatus 600 includes a circuit ( Figure 6 (not shown), the circuit is used to implement the functions of the terminal or network device in the above method embodiment.

[0223] For example, the processor 610 may be configured to execute computer programs or instructions in the memory to implement Figures 2 to 4 The steps performed by a terminal or a network device in the method embodiment shown in any one of the illustrated embodiments.

[0224] Optionally, the device 600 may include one or more memories 620 on which programs (sometimes also referred to as codes or instructions) are stored. The programs can be run on the processor 610 so that the device 600 executes the method executed by the terminal or network device in the above embodiment.

[0225] Optionally, the processor 610 and / or the memory 620 may include an artificial intelligence (AI) module, and the AI ​​module is used to implement AI-related functions. The AI ​​module may be implemented by software, hardware, or a combination of software and hardware. For example, the AI ​​module may include a wireless intelligent controller (RIC) module. For example, the AI ​​module may be a near real-time RIC or a non-real-time RIC.

[0226] Optionally, data may also be stored in the processor 610 and / or the memory 620. The processor and the memory may be provided separately or integrated together.

[0227] Optionally, the device 600 may further include a communication interface 630. The processor 610 may also be sometimes referred to as a processing unit, which controls a device (e.g., a terminal or a network device). The communication interface 630 may also be sometimes referred to as a transceiver unit, a transceiver, a transceiver circuit, or a transceiver, etc., which is used to implement the transceiver function of the device.

[0228] Optionally, the device 600 further includes a communication interface 630. The processor 610 and the communication interface 630 are coupled to each other. It can be understood that the communication interface 630 can be a transceiver or an input-output interface.

[0229] It is understandable that, since the device 600 has a communication function, it can also be called a communication device.

[0230] When the device 600 is used to implement Figure 3 When the method is used, the processor 610 is used to execute the functions of the above processing unit, and the communication interface 630 is used to execute the functions of the above transceiver module. Whether the communication interface 630 is used to send or receive can be determined by whether it is used to perform a sending action or a receiving action in the solution executed by the device 600.

[0231] When the above device 600 is a chip applied to a terminal, the chip implements the functions of the terminal in the above method embodiment. The chip of the terminal receives a signal from other modules in the terminal (such as a radio frequency module or an antenna), and the signal may be sent to the terminal by a network device; or the chip of the terminal sends a signal to other modules in the terminal (such as a radio frequency module or an antenna), and the signal may be sent to the network device by the terminal.

[0232] When the above-mentioned device 600 is a chip applied to a network device, the chip implements the functions of the network device in the above-mentioned method embodiment. The chip of the network device receives a signal from other modules (such as a radio frequency module or an antenna) in the network device, and the signal may be sent by the terminal to the network device; or the chip of the network device sends a signal to other modules (such as a radio frequency module or an antenna) in the network device, and the signal may be sent by the network device to the terminal.

[0233] It is understandable that when the device 600 is a terminal or a network device, the communication interface 630 may be a transceiver, which may specifically include a transmitter and a receiver, wherein the transmitter is used to send signals and the receiver is used to receive signals. When the device 600 is a chip applied to a terminal or a network device, the communication interface 630 may be an input-output circuit, wherein the input circuit may be used for receiving and the output interface may be used for sending.

[0234] It should be noted that the above method embodiments can be applied to a processor or implemented by a processor. The processor may be an integrated circuit chip with signal processing capabilities. In the implementation process, each step of the above method embodiment can be completed by an integrated logic circuit of hardware in the processor or an instruction in the form of software.

[0235] The processor may be a general purpose processor, a digital signal processor (DSP), an application specific integrated circuit (ASIC), a field programmable gate array (FPGA) or other programmable logic device, a discrete gate or transistor logic device, a discrete hardware component or any combination thereof. The general purpose processor may be a microprocessor or any conventional processor.

[0236] The steps of the method disclosed in the embodiments of the present application can be directly embodied as being executed by a hardware decoding processor, or can be executed by a combination of hardware and software modules in the decoding processor. The software module can be located in a mature storage medium in the art such as a random access memory, a flash memory, a read-only memory, a programmable read-only memory, or an electrically erasable programmable memory, a register, etc. The storage medium is located in a memory, and the processor reads the information in the memory and completes the steps of the above method in combination with its hardware.

[0237] The memory in the embodiments of the present application may be a volatile memory or a non-volatile memory, or may include both volatile and non-volatile memories. Among them, the non-volatile memory may be a read-only memory (ROM), a programmable read-only memory (PROM), an erasable programmable read-only memory (EPROM), an electrically erasable programmable read-only memory (EEPROM), or a flash memory. The volatile memory may be a random access memory (RAM), which is used as an external cache. By way of example and not limitation, many forms of RAM are available, such as static RAM (SRAM), dynamic RAM (DRAM), synchronous DRAM (SDRAM), double data rate SDRAM (DDRSDRAM), enhanced SDRAM (ESDRAM), synchronous link DRAM (SLDRAM), and direct RAM bus RAM (DR RAM). It should be noted that the memory of the systems and methods described herein is intended to include, but is not limited to, these and any other suitable types of memory.

[0238] The present application also provides a computer-readable medium on which a computer program is stored. When the computer program is executed by a computer, the functions of the above method embodiments are implemented.

[0239] The present application also provides a computer program product comprising instructions, which implements the functions of the above method embodiments when executed by a computer.

[0240] The method provided in the above embodiment can be implemented in whole or in part by software, hardware, firmware or any combination thereof. When implemented using software, it can be implemented in whole or in part in the form of a computer program product. The computer program product may include one or more computer instructions. When the computer program instructions are loaded and executed on a computer, the process or function described in the embodiment of the present application is generated in whole or in part. The computer may be a general-purpose computer, a special-purpose computer, a computer network or other programmable device. The computer instructions may be stored in a computer-readable storage medium, or transmitted from one computer-readable storage medium to another computer-readable storage medium, for example, the computer instructions may be transmitted from a website site, computer, server or data center by wired (e.g., coaxial cable, optical fiber, digital user (DSL)) or wireless (e.g., infrared, wireless, microwave, etc.) mode to another website site, computer, server or data center. The computer-readable storage medium may be any available medium that a computer can access or a data storage device such as a server or data center that includes one or more available media integrated. The available medium may be a magnetic medium (e.g., a floppy disk, a hard disk, a magnetic disk), an optical medium (e.g., a DVD), or a semiconductor medium (e.g., a solid state hard disk (SSD)), etc.

[0241] Those of ordinary skill in the art will appreciate that the units and algorithm steps of each example described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, or a combination of computer software and electronic hardware. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professional and technical personnel can use different methods to implement the described functions for each specific application, but such implementation should not be considered to be beyond the scope of this application.

[0242] Those skilled in the art can clearly understand that, for the convenience and brevity of description, the specific working processes of the systems, devices and units described above can refer to the corresponding processes in the aforementioned method embodiments and will not be repeated here.

[0243] In the several embodiments provided in the present application, it should be understood that the disclosed systems, devices and methods can be implemented in other ways. For example, the device embodiments described above are only schematic. For example, the division of the units is only a logical function division. There may be other division methods in actual implementation, such as multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of devices or units, which can be electrical, mechanical or other forms.

[0244] The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed on multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0245] In addition, each functional unit in each embodiment of the present application may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit.

[0246] If the functions are implemented in the form of software functional units and sold or used as independent products, they can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present application can be essentially or partly embodied in the form of a software product that contributes to the prior art. The computer software product is stored in a storage medium and includes several instructions for a computer device (which can be a personal computer, a server, or a network device, etc.) to perform all or part of the steps of the methods described in the various embodiments of the present application. The aforementioned storage medium includes: various media that can store program codes, such as a USB flash drive, a mobile hard disk, a read-only memory, a random access memory, a magnetic disk, or an optical disk.

[0247] The above is only a specific implementation of the present application, but the protection scope of the present application is not limited thereto. Any person skilled in the art who is familiar with the present technical field can easily think of changes or substitutions within the technical scope disclosed in the present application, which should be included in the protection scope of the present application. Therefore, the protection scope of the present application should be based on the protection scope of the claims.

Claims

1. An access control method, characterized in that: Applied to a terminal, the method comprises: Sending first information to a network device, where the first information indicates a type of the terminal, where the type of the terminal includes a terminal using a fixed satellite service FSS or a terminal using a mobile satellite service MSS; A first message is received from the network device, where the first message is used to indicate whether the terminal is allowed to access the network device.

2. The method according to claim 1, characterized in that: The first information is a random access preamble code corresponding to the type of the terminal; The method further comprises: Receiving a first mapping relationship from the network device, where the first mapping relationship indicates a correspondence between a plurality of random access preamble codes and a plurality of terminal types; Based on the first mapping relationship, a random access preamble code corresponding to the type of the terminal is determined.

3. The method according to claim 1, characterized in that The first information is carried in any of the following messages of the random access procedure: Radio Resource Control RRC establishment request message, RRC recovery request message, or RRC re-establishment request message.

4. An access control method, characterized in that: Applied to a network device, the method comprises: receiving first information from a terminal, where the first information indicates a type of the terminal, and the type of the terminal includes a terminal using an FSS or a terminal using an MSS; Based on the first information, determining whether the terminal is allowed to access the network device; A first message is sent to the terminal, where the first message is used to indicate whether the terminal is allowed to access the network device.

5. The method according to claim 4, characterized in that The first information is a random access preamble code corresponding to the type of the terminal; The method further comprises: Based on a first mapping relationship, a type of terminal corresponding to the first information is determined, where the first mapping relationship indicates a correspondence between multiple random access preamble codes and multiple terminal types.

6. The method according to claim 5, characterized in that The method further comprises: Send the first mapping relationship to the terminal.

7. The method according to claim 4, characterized in that The first information is carried in any of the following messages of the random access procedure: Radio Resource Control RRC establishment request message, RRC recovery request message, or RRC re-establishment request message.

8. An access control method, characterized in that: Applied to a terminal, the method comprises: Determine a first access category or a first access identifier, where the first access category is defined for a service type of a first category of terminals, the first access identifier is configured for the first category of terminals, the terminals are the first category of terminals, and the first category of terminals are terminals using a fixed satellite service FSS or terminals using a mobile satellite service MSS; Based on the first access category or the first access identifier, it is determined whether the terminal is allowed to access the network.

9. The method according to claim 8, characterized in that The priority of the terminal using the FSS is higher than that of the terminal using the MSS, and the first type of terminal is the terminal using the FSS; The determining, based on the first access category or the first access identifier, whether the terminal is allowed to access the network includes: Based on the first access category or the first access identifier, it is determined that the terminal is allowed to access the network.

10. The method according to claim 8, characterized in that The priority of the terminal using the FSS is higher than that of the terminal using the MSS, and the first type of terminal is the terminal using the MSS; The determining, based on the first access category or the first access identifier, whether the terminal is allowed to access the network includes: Based on the first access category or the first access identifier, it is determined that the terminal is prohibited from accessing the network.

11. An access control method, characterized in that: Applied to a terminal, the method comprises: Receiving a first unified access control UAC parameter and a second UAC parameter from a network device, wherein the first UAC parameter is used to determine whether a first type of terminal is allowed to access the network device, and the second UAC parameter is used to determine whether a second type of terminal is allowed to access the network device; Determining a first access identifier; Based on the first access identifier and a target UAC parameter, it is determined whether the terminal is allowed to access the network device, and the target UAC parameter is the first UAC parameter or the second UAC parameter.

12. The method according to claim 11, characterized in that The terminal belongs to the first category of terminals, and the target UAC parameter is the first UAC parameter.

13. The method according to claim 11, characterized in that The terminal belongs to the second category of terminals, and the target UAC parameter is the second UAC parameter.

14. The method according to any one of claims 11 to 13, characterized in that The first type of terminals are terminals using fixed satellite services FSS, and the second type of terminals are terminals using mobile satellite services MSS.

15. An access control method, characterized in that: Applied to a network device, the method comprises: Generate a first unified access control UAC parameter and a second UAC parameter, the first UAC parameter being used to determine whether a first type of terminal is allowed to access the network device, and the second UAC parameter being used to determine whether a second type of terminal is allowed to access the network device; The first UAC parameter and the second UAC parameter are sent to the terminal.

16. The method according to claim 15, characterized in that The first type of terminals are terminals using fixed satellite services FSS, and the second type of terminals are terminals using mobile satellite services MSS.

17. A communication device, characterized in that: Comprising modules for implementing the method as claimed in any one of claims 1 to 16.

18. A communication device, characterized in that: The device comprises a processor configured to cause the communication device to implement the method according to any one of claims 1 to 16 by executing a computer program and / or a logic circuit.

19. The device according to claim 18, characterized in that The system also includes a memory for storing a computer program and / or a configuration file of the logic circuit.

20. The device according to claim 18 or 19, characterized in that A communication interface is also included for inputting and / or outputting signals.

21. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the method according to any one of claims 1 to 16 is performed.

22. A computer program product, characterized in that The invention comprises a computer program, and when the computer program is run, the method according to any one of claims 1 to 16 is performed.

23. A communication system, characterized in that: It comprises a terminal and a network device, wherein the terminal is used to implement the method as claimed in any one of claims 1 to 3, and the network device is used to implement the method as claimed in any one of claims 4 to 7; or, the terminal is used to implement the method as claimed in any one of claims 11 to 14, and the network device is used to implement the method as claimed in any one of claims 15 and 16.

Images