Satellite access control method and device, communication equipment and storage medium

Abstract

The invention relates to a satellite access control method and device, communication equipment and a storage medium. The method comprises the following steps: determining satellite attachment times of a target user, and sending the satellite attachment times to a converged charging function (CHF); the CHF is used for triggering a policy control function (PCF) to send satellite access restriction information to the NACF under the condition that the satellite attachment times meet a preset condition; and limiting the satellite access of the target user according to the received satellite access limiting information. The method can prevent the target user from excessively occupying the satellite resources, ensures the reasonable allocation of the resources, and improves the resource utilization rate.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of communication, in particular to a satellite access control method and device, a communication device and a storage medium. BACKGROUND

[0002] With the deep integration of 5G communication and satellite communication, the demand of enterprise users for satellite access is increasing, and satellite networks can make up for the lack of ground mobile network coverage, so that ocean shipping, aviation, energy exploration and other businesses in remote areas, deserts, oceans and even the air can still maintain stable connection, ensuring that critical businesses do not interrupt, so there are star-ground integrated networks.

[0003] However, in the star-ground integrated network, the construction, maintenance and operation cost of the satellite communication network is much higher than that of the traditional ground mobile network, and the available bandwidth and connection capacity of a single satellite are physically limited, and if enterprise users exceed the use of high-cost satellite resources, other users in the satellite communication network will lack available resources, resulting in unreasonable resource allocation and reduced resource utilization.

[0004] Therefore, the current satellite access technology has the problem of low resource utilization. SUMMARY

[0005] Therefore, it is necessary to provide a satellite access control method and device, a communication device, a computer readable storage medium and a computer program product capable of improving resource utilization.

[0006] In a first aspect, the present application provides a satellite access control method, which is applied to a network access control function (NACF), and includes:

[0007] determining the satellite attachment times of a target user, and sending the satellite attachment times to a converged charging function (CHF); the CHF is configured to trigger a policy control function (PCF) to send satellite access restriction information to the NACF if the satellite attachment times meet a preset condition;

[0008] According to the received satellite access restriction information, the satellite access of the target user is limited.

[0009] In a second aspect, the present application also provides a satellite access control method, which is applied to a converged charging function (CHF), and includes:

[0010] receiving the satellite attachment times of a target user sent by a network access control function (NACF);

[0011] In a case where the satellite attachment times meet preset conditions, a policy control function (PCF) sends satellite access restriction information to the NACF; and the NACF is configured to limit satellite access of the target user according to the received satellite access restriction information.

[0012] In a third aspect, the present application further provides a satellite access control method, which is applied to a policy control function (PCF) and includes the following steps:

[0013] In response to a trigger of a convergence charging function (CHF), a satellite access restriction information is sent to a network access control function (NACF); the CHF is configured to receive satellite attachment times of a target user sent by the NACF, form the trigger in a case where the satellite attachment times meet preset conditions, and the NACF is configured to limit satellite access of the target user according to the received satellite access restriction information.

[0014] In a fourth aspect, the present application further provides a satellite access control device, which is applied to a network access control function (NACF) and includes the following steps:

[0015] A statistics module is configured to determine satellite attachment times of a target user and send the satellite attachment times to a convergence charging function (CHF); the CHF is configured to trigger a policy control function (PCF) to send satellite access restriction information to the NACF in a case where the satellite attachment times meet preset conditions;

[0016] A limiting module is configured to limit satellite access of the target user according to the received satellite access restriction information.

[0017] In a fifth aspect, the present application further provides a satellite access control device, which is applied to a convergence charging function (CHF) and includes the following steps:

[0018] A receiving module is configured to receive satellite attachment times of a target user sent by a network access control function (NACF);

[0019] A triggering module is configured to trigger a policy control function (PCF) to send satellite access restriction information to the NACF in a case where the satellite attachment times meet preset conditions; and the NACF is configured to limit satellite access of the target user according to the received satellite access restriction information.

[0020] In a sixth aspect, the present application further provides a satellite access control device, which is applied to a policy control function (PCF) and includes the following steps:

[0021] A response module is configured to send satellite access restriction information to a network access control function (NACF) in response to a trigger of a converged charging function (CHF). The CHF is configured to receive a satellite attach number of a target user sent by the NACF, and form the trigger if the satellite attach number meets a preset condition. The NACF is configured to limit satellite access of the target user according to the received satellite access restriction information.

[0022] In a seventh aspect, the present application provides a communication device, comprising a memory and a processor, wherein the memory stores a computer program, and the processor implements the steps of the method in any one of the first aspect, the second aspect or the third aspect when executing the computer program.

[0023] In an eighth aspect, the present application provides a computer readable storage medium, which stores a computer program, and the computer program implements the steps of the method in any one of the first aspect, the second aspect or the third aspect when executed by a processor.

[0024] In a ninth aspect, the present application provides a computer program product, which comprises a computer program, and the computer program implements the steps of the method in any one of the first aspect, the second aspect or the third aspect when executed by a processor.

[0025] The satellite access control method, device, communication device, computer readable storage medium and computer program product can determine the satellite attach number of the target user by the NACF, send the satellite attach number to the CHF, trigger the PCF to send the satellite access restriction information to the NACF if the satellite attach number meets the preset condition, and limit the satellite access of the target user according to the received satellite access restriction information. The satellite attach number can be counted in real time when the target user uses satellite access, and the satellite access of the target user can be limited if the satellite attach number meets the preset condition, so that the target user can not occupy too many satellite resources, the resource allocation is ensured to be reasonable, and the resource utilization rate is improved. BRIEF DESCRIPTION OF DRAWINGS

[0026] In order to more clearly illustrate the technical solutions in the embodiments of the present application or the related art, the drawings needed to be used in the description of the embodiments of the present application or the related art will be briefly introduced. Obviously, the drawings in the following description are only some embodiments of the present application, and other related drawings can be obtained by those skilled in the art without any creative effort on the basis of these drawings.

[0027] Figure 1 FIG. 1 is a flowchart of a satellite access control method in an embodiment;

[0028] Figure 2Interaction flow chart of satellite access control method in one embodiment;

[0029] Figure 3 Interaction flow chart of attachment times statistics process of satellite access control method for enterprise-level user in satellite-ground fusion network in one embodiment;

[0030] Figure 4 Interaction flow chart of access restriction process of satellite access control method for enterprise-level user in satellite-ground fusion network in one embodiment;

[0031] Figure 5 Internal structure diagram of communication device in one embodiment. DETAILED DESCRIPTION

[0032] In order to make the purpose, technical scheme and advantages of the present application more clear, the present application is further described in detail below in combination with the drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present application, and are not used to limit the present application.

[0033] It should be noted that the terms "first", "second" and the like used in the present application can be used to describe various elements, but these elements are not limited by these terms. These terms are only used to distinguish the first element from the second element. The terms "include" and "have" and any variations thereof used in the present application are intended to cover non-exclusive inclusion. The term "multiple" used in the present application refers to two and more than two. The term "and / or" used in the present application refers to one of the options, or any combination of multiple options.

[0034] Before introducing the specific embodiments of the present application, the professional terms involved in the present application are explained:

[0035] UE: User Equipment, user equipment, also known as user terminal, terminal device, etc.

[0036] QoS: Quality of Service, service quality

[0037] ToB: To Business, enterprise-oriented, refers to the mode of providing services or products to enterprises

[0038] NACF: Network Access Control Function, network access control function, manages and controls the access permission of UE to satellite-ground fusion network resources

[0039] PCF: Policy Control Function, policy control function, responsible for dynamically formulating and managing network policies (e.g., QoS, charging, access control, etc.), ensuring that services are allocated resources on demand and in accordance with operator rules;

[0040] CHF: Converged Charging Function, converged charging function, supporting real-time (online) charging and offline charging, realizing unified charging control of services and resources;

[0041] ASF: Authentication Server Function, authentication server function, responsible for the core function module of unified identity authentication across satellite and ground networks, providing seamless and secure access authentication services for users and terminals;

[0042] USM: Unified Subscription Management function, unified subscription management function, a core function module for realizing unified management of user subscription data, mainly solving the problem of user identity, business permission and policy coordination across satellite and ground networks;

[0043] UDM: Unified Data Management, unified data management;

[0044] NWDAF: Network Data Analytics Function, network data analytics function;

[0045] DNN: Data Network Name, data network name;

[0046] APP ID: Application Identifier, application identifier.

[0047] The technical solutions of the present application and how the technical solutions solve the technical problems will be described in detail below with specific embodiments. The following specific embodiments can be combined with each other, and the same or similar concepts or processes may not be described again in some embodiments. The embodiments of the present application will be described below with reference to the drawings.

[0048] In an exemplary embodiment, as shown in Figure 1 A satellite access control method is provided, and the method is applied to NACF as an example, including the following steps:

[0049] In step S102, the satellite attachment times of the target user are determined, and the satellite attachment times are sent to the CHF. The CHF is configured to trigger the PCF to send satellite access restriction information to the NACF when the satellite attachment times meet a preset condition.

[0050] The target user can be a user in a satellite-ground fusion network who needs to be controlled in satellite access, for example, a ToB user. The satellite attachment times can be the cumulative number of times that a terminal device of the target user establishes a connection with a satellite network in the satellite-ground fusion network. The preset condition can be, but is not limited to, that the satellite attachment times reach a pre-set number threshold. The satellite access restriction information can be information for limiting the satellite access of the target user, for example, information for prohibiting the satellite access of the target user, or information for instructing the target user to switch from satellite access to ground access. In some embodiments, the satellite access restriction information can be a satellite access restriction policy obtained by the PCF in response to a policy update request of the CHF. The satellite access refers to a communication access mode based on a satellite network in the satellite-ground fusion network, and the ground access refers to a communication access mode based on a ground mobile network in the satellite-ground fusion network.

[0051] Optionally, the NACF can allow the satellite attachment of the target user according to the access policy issued by the PCF, and count the satellite attachment times of the target user, and report the satellite attachment times of the target user to the CHF. The CHF receives the satellite attachment times sent by the NACF, and triggers the PCF to send satellite access restriction information to the NACF if it is detected that the satellite attachment times meet the preset condition.

[0052] In actual application, the NACF, the PCF, the CHF, the ASF, and the USM can be functional entities in a satellite-ground fusion network satellite core network. The PCF can store access policies of multiple users. The NACF sends a policy query request carrying a user identifier of a target user to the PCF. The PCF queries the access policy of the target user according to the user identifier, and issues the access policy of the target user to the NACF. The NACF caches the access policy, allows the satellite attachment of the target user according to the cached access policy, and counts the satellite attachment times corresponding to the same user identifier. The NACF can periodically report the satellite attachment times corresponding to the same user identifier to the CHF. The CHF receives and stores the satellite attachment times from the NACF, and sends a policy update request to the PCF when the satellite attachment times corresponding to the same user identifier reach a pre-set number threshold. The PCF updates the access policy according to the received policy update request, and forms a satellite restriction access policy for the target user. The PCF can carry the user identifier of the target user in the satellite restriction access policy, and send the satellite restriction access policy carrying the user identifier to the NACF.

[0053] Step S104, limiting satellite access of the target user according to the received satellite access restriction information.

[0054] Optionally, the NACF can limit satellite access of the target user upon receiving the satellite access restriction information sent by the PCF.

[0055] In actual application, the NACF receives the satellite access restriction policy carrying the user identifier, can determine the target user according to the user identifier, and limit satellite access of the target user according to the satellite access restriction policy, for example, prohibit satellite access of the target user, or instruct the target user to switch from satellite access to ground access.

[0056] It should be noted that the satellite access control method provided by the embodiments of the present application is not limited to be applied in the star-ground fusion network, for example, it can also be applied in a hybrid non-ground network containing satellites, high-altitude platform stations and low-altitude base stations, and the present application does not limit the specific application scenarios.

[0057] The above satellite access control method determines the satellite attachment times of the target user by the NACF, sends the satellite attachment times to the CHF, and the CHF triggers the PCF to send the satellite access restriction information to the NACF in the case that the satellite attachment times meet the preset condition, and the NACF limits satellite access of the target user according to the received satellite access restriction information; the satellite attachment times can be counted in real time when the target user uses satellite access, and if the satellite attachment times meet the preset condition, satellite access of the target user is limited, which avoids excessive occupation of satellite resources by the target user, ensures reasonable allocation of resources, and improves resource utilization.

[0058] In one exemplary embodiment, the preset condition includes that the satellite attachment times reach a preset threshold, and the satellite access restriction information carries a user identifier of the target user; the above step S104 can specifically include: determining the target user according to the user identifier carried by the satellite access restriction information; prohibiting the user terminal of the target user to use satellite access mode, and / or making the user terminal of the target user use ground access mode.

[0059] The preset threshold can be a threshold of the attachment times, including but not limited to the upper limit of the attachment times. The user identifier can be a special identifier of the target user, including but not limited to a number segment, a DNN, an APP ID, etc. negotiated in advance, or an identifier given by the UDM to a certain type of user obtained from the NWDAF, and the present application does not limit this. The satellite access mode can be a communication access mode based on a satellite network. The ground access mode can be a communication access mode based on a ground mobile network.

[0060] Optionally, when the satellite attachment times reach the preset threshold, the CHF can send a policy update request to the PCF, the PCF updates the access policy according to the received policy update request, and sends satellite access restriction information carrying a user identifier to the NACF, the NACF receives the satellite access restriction information, and determines a target user according to the user identifier in the satellite access restriction information, and restricts the satellite access of the target user, including prohibiting the user terminal of the target user from using the satellite access mode, and / or making the user terminal of the target user use the ground access mode. For example, the CHF judges that the satellite attachment times of a ToB user identifier reach the preset threshold, sends a policy update request to the PCF, the PCF updates the access policy, and sends a satellite access restriction policy carrying the ToB user identifier to the NACF, the NACF receives the satellite access restriction policy, and restricts the satellite access of the corresponding ToB user according to the ToB user identifier carried by the satellite access restriction policy, including rejecting the satellite access request of all terminals of the ToB user, and / or instructing the ToB user to switch the access mode of all terminals to the ground access mode.

[0061] It should be noted that in the case that the target user obtains additional attachment times, the CHF can notify the PCF to update the access policy again, and the NACF removes the restriction on the satellite access of the target user according to the updated access policy again, and the user terminal of the target user can use the satellite access mode again.

[0062] In the embodiment, the NACF determines the target user according to the user identifier carried by the satellite access restriction information, prohibits the user terminal of the target user from using the satellite access mode, and / or makes the user terminal of the target user use the ground access mode, which can prohibit the satellite access of the target user when the satellite attachment times of the target user are too many, or switch the target user to the ground access, avoid that individual users excessively occupy satellite resources to cause insufficient satellite resources of the satellite-ground integration network, and realize reasonable allocation of satellite resources.

[0063] In an exemplary embodiment, the above step S102 can specifically include: receiving the access policy sent by the PCF; determining the satellite attachment times of the target user in the case that the target user performs satellite attachment according to the access policy; and sending the satellite attachment times to the CHF according to a preset period.

[0064] The access policy refers to various rules, schemes, etc. of terminal access to the satellite-ground integration network. The satellite attachment refers to the process of establishing physical connection or logical connection between the terminal and the satellite. The preset period can be a period for the NACF to report to the CHF.

[0065] Optionally, the PCF can send the access policy of the target user to the NACF in response to the request of the NACF, and the NACF can allow the target user to attach according to the received access policy, and count the satellite attachment times of the target user according to the user identifier, and report the satellite attachment times corresponding to the same user identifier to the CHF according to a preset period.

[0066] In this embodiment, the NACF determines the satellite attachment times of the target user when the target user attaches to the satellite according to the access policy sent by the PCF, and sends the satellite attachment times to the CHF according to a preset period. Due to the high delay characteristics of the satellite link, the timeliness of the policy control mechanism based on the ground mobile network is not high, and the policy decision lags behind. In this embodiment, the satellite attachment times are detected in real time on the satellite, so that the excessive occupation of satellite resources by individual users can be found in time, and the timeliness of satellite access control is improved.

[0067] In one exemplary embodiment, before the step S102, the method can further include: in the case that the target user requests satellite access, performing identity verification on the target user through the ASF and / or the USM; in the case that the identity verification is passed, sending a policy query request carrying a user identifier of the target user to the PCF; and the PCF is configured to determine the access policy of the target user according to the user identifier, and return the access policy.

[0068] The identity verification can be, but is not limited to, verifying the legality of the user identity. The policy query request can be a message for querying the access policy of the target user.

[0069] Optionally, the target user can send a satellite access request carrying a user identifier to the NACF through a terminal, the NACF sends the user identifier carried in the satellite access request to the ASF and / or the USM, the ASF and / or the USM returns the subscription data of the target user according to the user identifier, the NACF verifies whether the identity of the target user is legal according to the subscription data, if not, it is determined that the verification is not passed, and the satellite access request of the target user is rejected, otherwise, if the identity of the target user is legal, it is determined that the verification is passed, and a policy query request carrying the user identifier is sent to the PCF, the PCF queries the access policy of the target user according to the user identifier carried in the policy query request, and returns the access policy of the target user to the NACF.

[0070] In this embodiment, the NACF performs identity verification on the target user through the ASF and / or the USM in the case that the target user requests satellite access, and sends a policy query request carrying a user identifier of the target user to the PCF in the case that the identity verification is passed. The access policy of the target user can be queried in the case that the identity verification is passed, so as to ensure the security of satellite access.

[0071] In an exemplary embodiment, the ASF and / or the USM pre-generate contract data of the target user, send the contract data to the PCF, and the PCF generates an access policy according to the contract data; in the case that the target user requests satellite access, the step of authenticating the target user by the ASF and / or the USM can specifically include: sending a user identifier of the target user to the ASF and / or the USM; the ASF and / or the USM are configured to return contract data corresponding to the user identifier; and authenticating the target user according to the contract data.

[0072] The contract data can be related data of a pre-signed contract, including but not limited to a charging policy, a threshold rule, and the like.

[0073] Optionally, the ASF and / or the USM can generate contract data of each user according to a contract signed by an operator and each user, send the contract data of each user to the PCF, and the PCF generates an initial access policy of each user according to the received contract data. When the target user requests satellite access to the NACF, the NACF can send a user identifier of the target user to the ASF and / or the USM, the ASF and / or the USM find contract data of the target user according to the user identifier, and return the contract data of the target user to the NACF, and the NACF authenticates the target user according to the received contract data.

[0074] In the embodiment, the NACF sends a user identifier of a target user to the ASF and / or the USM, the ASF and / or the USM return contract data corresponding to the user identifier, and the NACF authenticates the target user according to the contract data, which can verify the legitimacy of the user identity based on pre-stored contract data, and ensure the security of satellite access.

[0075] In an exemplary embodiment, a satellite access control method is provided, which is described by taking the CHF as an example and includes the following steps.

[0076] Step S202, receiving satellite attachment times of a target user sent by the NACF;

[0077] Step S204, in the case that the satellite attachment times meet a preset condition, triggering the PCF to send satellite access restriction information to the NACF; and the NACF is configured to limit satellite access of the target user according to the received satellite access restriction information.

[0078] Optionally, the NACF can allow the target user satellite attachment according to the access policy issued by the PCF, and count the satellite attachment times of the target user, and send the satellite attachment times of the target user to the CHF. The CHF receives the satellite attachment times sent by the NACF, and if it is detected that the satellite attachment times meet the preset condition, the PCF sends satellite access restriction information to the NACF, and the NACF can limit the satellite access of the target user under the condition of receiving the satellite access restriction information.

[0079] Since the specific processing process of the CHF has been described in detail in the foregoing embodiments, it will not be described here.

[0080] The satellite access control method described above, by the CHF receiving the satellite attachment times of the target user sent by the NACF, in the case where the satellite attachment times meet the preset condition, triggering the PCF to send satellite access restriction information to the NACF, and the NACF limiting the satellite access of the target user according to the received satellite access restriction information; can real-time count the satellite attachment times when the target user uses satellite access, and if the satellite attachment times meet the preset condition, limit the satellite access of the target user, avoid the target user from occupying the satellite resources excessively, ensure the reasonable allocation of resources, and improve the resource utilization rate.

[0081] In an exemplary embodiment, the step S204 can specifically include: in the case where the satellite attachment times reach the preset threshold, sending a policy update request to the PCF; the PCF is configured to update the access policy according to the policy update request, and send the satellite access restriction information to the NACF according to the updated access policy.

[0082] Optionally, when the satellite attachment times reach the preset threshold, the CHF can send a policy update request to the PCF, the PCF updates the access policy according to the received policy update request, and forms an updated access policy. The PCF can send satellite access restriction information carrying a user identifier to the NACF according to the updated access policy, and the NACF receives the satellite access restriction information and determines the target user according to the user identifier carried by the satellite access restriction information to limit the satellite access of the target user.

[0083] In this embodiment, the CHF can timely discover the case that the satellite resources are occupied excessively by sending a policy update request to the PCF in the case where the satellite attachment times reach the preset threshold, and then timely adjust the access policy, thereby increasing the timeliness of the access policy.

[0084] In an exemplary embodiment, a satellite access control method is provided, which is applied to the PCF as an example, including:

[0085] Step S306, in response to the trigger of the CHF, satellite access restriction information is sent to the NACF; the CHF is configured to receive the satellite access times of the target user sent by the NACF, and a trigger is formed in the case that the satellite access times meet the preset condition; and the NACF is configured to limit the satellite access of the target user according to the received satellite access restriction information.

[0086] Optionally, the NACF can allow the satellite attachment of the target user according to the access policy issued by the PCF, and count the satellite attachment times of the target user, and send the satellite attachment times of the target user to the CHF. The CHF receives the satellite attachment times sent by the NACF, and if it is detected that the satellite attachment times meet the preset condition, the PCF triggers the satellite access restriction information to the NACF. The NACF can limit the satellite access of the target user in the case of receiving the satellite access restriction information.

[0087] Since the specific processing process of the PCF has been described in detail in the foregoing embodiments, it will not be described here.

[0088] The satellite access control method described above, by the PCF, in response to the trigger of the CHF, satellite access restriction information is sent to the NACF; the satellite access times of the target user can be counted in real time when the target user uses satellite access, and the satellite access of the target user is limited if the satellite access times meet the preset condition, so as to avoid the target user from excessively occupying satellite resources, ensure reasonable allocation of resources, and improve resource utilization.

[0089] In one exemplary embodiment, the step S306 can specifically include: receiving a policy update request sent by the CHF; the CHF is configured to send the policy update request in the case that the satellite access times reach a preset threshold; updating the access policy according to the policy update request; and sending the satellite access restriction information to the NACF according to the updated access policy.

[0090] Optionally, when the satellite access times reach the preset threshold, the CHF can send a policy update request to the PCF, the PCF updates the access policy according to the received policy update request to form an updated access policy, and the PCF can send satellite access restriction information carrying a user identifier to the NACF according to the updated access policy. The NACF receives the satellite access restriction information, determines the target user according to the user identifier carried by the satellite access restriction information, and limits the satellite access of the target user.

[0091] In this embodiment, the PCF updates the access policy according to the policy update request sent by the CHF, and sends the satellite access restriction information to the NACF according to the updated access policy, so as to timely adjust the access policy when the satellite resources are excessively occupied, limit the users who excessively occupy the satellite resources from continuing to access the satellite, and improve the resource utilization.

[0092] In an example embodiment, before step S306, the method can further include:

[0093] Step S302, generating the access policy of the target user according to the contract data sent by the ASF and / or the USM;

[0094] Step S304, in the case that the policy query request carrying the user identity is received from the NACF, determining the access policy of the target user according to the user identity, and returning the access policy to the NACF.

[0095] Optionally, the ASF and / or the USM can generate the contract data of each user according to the contract signed by the operator and each user in advance, send the contract data of each user to the PCF, and the PCF generates the access policy of each user according to the received contract data, which includes the access policy of the target user. When the access policy of the target user is needed, the NACF can send a policy query request carrying the user identity of the target user to the PCF, the PCF receives the policy query request, determines the target user according to the user identity carried by the policy query request, finds the access policy of the target user in the access policy of each user stored in advance, and returns the access policy of the target user to the NACF.

[0096] In the embodiment, the PCF generates the access policy of the target user according to the contract data sent by the ASF and / or the USM, and in the case that the policy query request carrying the user identity is received from the NACF, determines the access policy of the target user according to the user identity, and returns the access policy to the NACF, so that the access policy of the target user can be quickly obtained, and the efficiency of user access is improved.

[0097] In an example embodiment, as shown in Figure 2 A satellite access control method is provided, including the following steps:

[0098] Step S401, the ASF and / or the USM pre-generate contract data of a target user, and send the contract data to a PCF;

[0099] Step S402, the PCF generates an access policy according to the contract data;

[0100] Step S403, the NACF performs identity authentication on the target user through the ASF and / or the USM in the case that the target user requests satellite access;

[0101] Step S404, the NACF sends a policy query request to the PCF in the case that the identity authentication is passed, and receives the access policy returned by the PCF;

[0102] Step S405, the NACF allows the target user satellite attachment according to the access policy, determines the satellite attachment times of the target user, and sends the satellite attachment times to the CHF.

[0103] Step S406, the CHF triggers the PCF to send satellite access restriction information to the NACF when the satellite attachment times meet the preset condition.

[0104] Step S407, the NACF limits the satellite access of the target user according to the received satellite access restriction information.

[0105] Optionally, the ASF and / or the USM can pre-generate contract data of each user, send the contract data of each user to the PCF, and the PCF generates an access policy of each user according to the received contract data. When the target user requests satellite access, the NACF can obtain the contract data of the target user from the ASF and / or the USM, perform identity verification on the target user according to the contract data, and if the identity verification fails, the target user is not allowed to access the satellite. Otherwise, if the identity verification passes, the NACF can send a policy query request carrying a user identifier to the PCF, the PCF queries the access policy of the target user according to the user identifier, and returns the access policy of the target user to the NACF. The NACF can allow the target user to attach to the satellite according to the received access policy, and count the satellite attachment times of the target user. The NACF periodically reports the satellite attachment times to the CHF. When the CHF detects that the satellite attachment times meet the preset condition, the CHF can send a policy update request to the PCF. The PCF updates the access policy based on the policy update request, and sends satellite access restriction information to the NACF based on the updated access policy. The NACF limits the satellite access of the target user when receiving the satellite access restriction information.

[0106] The above satellite access control method can count the satellite attachment times in real time when the target user uses satellite access. If the satellite attachment times meet the preset condition, the satellite access of the target user is limited, which avoids excessive occupation of satellite resources by the target user, ensures reasonable allocation of resources, and improves resource utilization.

[0107] In order to facilitate those skilled in the art to further understand the embodiments of the present application, the following will be described in conjunction with a specific example.

[0108] The application proposes a satellite-ground fusion network enterprise-level user satellite access control method. For large-scale contract services of ToB customers, the satellite access permission is dynamically controlled through the attachment frequency threshold, realizing cost-controllable differentiated services. On the one hand, in the traditional network, policy updating is a passive response, and policy adjustment needs complex interaction among multiple network elements, resulting in slow response speed. The satellite link signaling transmission delay is long, and the ToB customers frequently attach through the NACF. The NACF replaces the CHF to count the attachment frequency, which can significantly save signaling resources and improve resource utilization. On the other hand, the method adds an access policy module in the PCF network element and an access control module in the NACF, and enhances the functions of the ASF / USM and CHF network elements. In the satellite-ground fusion network, when a new contract of the ToB customer is generated, the contract data is actively pushed to the PCF to reserve resources, and the identity legality of the access user is verified. The NACF counts the satellite attachment frequency of the same identity and periodically sends it to the CHF, reducing the waste of signaling resources. When the number of satellite attachment users with the same identity reaches the threshold, the NACF limits satellite access, realizes fine control of satellite access of ToB customers, and ensures reasonable allocation of resources.

[0109] In order to realize the above-mentioned satellite-ground fusion network enterprise-level user satellite access control method, the following improvements can be made to the on-board core network device:

[0110] ASF / USM network element function enhancement: when a new contract is generated and stored, actively send the new contract data to the PCF network element; support the identity legality verification of the user information carrying the ToB customer identifier provided by the NACF network element (the ToB customer identifier refers to the pre-set special identifier negotiated with the ToB customer, such as the number segment, DNN, APP ID, etc., or the user of a certain type obtained from the NWDAF UDM and identified for this type of user); in this way, the contract data can be actively pushed to the PCF when a new contract is generated, realizing the pre-configuration and resource reservation of the policy, and greatly reducing the delay of policy taking effect.

[0111] Access policy module: add this module to the PCF network element, generate initial access policy according to the contract data from the ASF / USM network element, and reserve resources; support the access policy issued to the NACF when the ToB customer accesses the satellite for the first time; support adjusting the satellite access policy according to the policy update request of the CHF, and if the satellite access attachment frequency is close to the threshold (less than the threshold and differs from the threshold by a preset value), limit (reject, prohibit) satellite access or switch to ground access according to the contract; in this way, the NACF can be provided with access policy, which can adjust the access policy according to the attachment user number, balance, etc. of the CHF, realizing the elastic allocation of resources.

[0112] The access control module is added in the NACF network element, identity legality verification is requested from the ASF / USM network element according to the ToB customer identifier carried by the user requesting satellite access, policy query, policy caching and access policy execution are supported, for the user meeting the satellite access, the satellite attachment times of carrying the same ToB customer identifier are counted and periodically sent to the CHF, satellite access policy is executed to limit user access, thus, the identity legality of the user can be verified, the satellite attachment times are counted and periodically reported, which can reduce the statistical delay and save the reporting resources.

[0113] The CHF network element function is enhanced: the satellite attachment times of carrying the same identifier counted by the NACF are periodically received and stored; the satellite attachment times of carrying the same identifier reaching the threshold value are negotiated with the PCF, and a request for updating the access policy is sent to the PCF; thus, the attachment times statistical data of the NACF can be periodically received, the resources can be saved, and the policy adjustment based on the attachment times threshold value can be realized by negotiating with the PCF.

[0114] Through the above improvement, the access policy can be adjusted based on the satellite attachment times threshold value in the satellite-ground integration network, the user access permission can be dynamically controlled, the satellite access of the ToB customer can be finely controlled, and the reasonable resource allocation and efficient network operation can be ensured.

[0115] Figure 3 An interactive flowchart of an attachment times statistical process of a satellite access control method for enterprise-level users in a satellite-ground integration network is provided. According to Figure 3 , the attachment times statistical process includes the following steps:

[0116] Step S501, the operator signs a contract with the ToB customer, and the ASF / USM generates and stores the ToB customer contract data (including threshold rules, charging policies, etc.);

[0117] Step S502, the ASF / USM sends the newly generated contract data to the PCF;

[0118] Step S503, the access policy module of the PCF generates an initial access policy according to the contract data, and reserves resources for the corresponding ToB customer;

[0119] Step S504, the user carrying the ToB customer identifier requests satellite access to the NACF (the ToB customer identifier refers to a preset special identifier negotiated with the ToB customer, such as a number segment, a DNN, an APP ID, etc., or a certain type of user obtained from the NWDAF by the UDM and identified for the certain type of user);

[0120] Steps S505-S507, the access control module of the NACF sends the ToB customer identifier to the ASF / USM, acquires the subscription data carrying the ToB customer identifier, and verifies the legality of the user;

[0121] Step S508, for the user that passes the verification, the access control module of the NACF sends the ToB customer identifier carried by the user to the access policy module of the PCF, and initiates a policy query;

[0122] Steps S509-S510, the access policy module of the PCF judges that the access requirement is met, and issues an access policy to the access control module of the NACF;

[0123] Step S511, the access control module of the NACF caches the access policy, allows the user to attach according to the access policy, and after the attachment succeeds, counts the number of attachments of the same ToB customer identifier;

[0124] Step S512, the access control module of the NACF periodically reports the satellite attachment number carrying the same ToB customer identifier to the CHF;

[0125] Step S513, the CHF receives and stores the satellite attachment number counted by the NACF.

[0126] It should be noted that the above steps S508-S510 are only produced when the ToB customer first applies for access, and the access policy cached in step S511 can be directly applied to subsequent access of the same type (same enterprise group) user.

[0127] Figure 4 An interactive flowchart of an access restriction process of a satellite access control method for enterprise-level users in a satellite-ground integrated network is provided. According to Figure 4 , the access restriction process includes the following steps:

[0128] Steps S601-S602, the CHF judges that the number of satellite attachments carrying the same ToB customer identifier reaches a threshold, and sends a policy update request to the access policy module of the PCF;

[0129] Step S603, the access policy module of the PCF updates the access policy, and restricts satellite access or allows switching to ground access mode according to the contract;

[0130] Step S604, the access policy module of the PCF sends a satellite access restriction policy carrying the corresponding ToB customer identifier to the access control module of the NACF;

[0131] Step S605, the access control module of the NACF restricts satellite access for the user carrying the corresponding identifier, or allows switching to ground access mode according to the policy.

[0132] It should be noted that if the ToB customer extends the contract or additionally subscribes to the attached number of times, the CHF can notify the PCF to update the policy, and the NACF releases the access restriction.

[0133] In a satellite-ground integrated network, the satellite link transmission delay is high, and the transmission cost is much higher than that of a ground network. The above satellite access control method reduces the policy taking effect delay by actively pushing contract data to realize policy pre-configuration, saves signaling resources by periodically sending the statistical attached number of times, and prevents a single enterprise user from excessively occupying satellite resources by the attached number of times of the customer identifier and the threshold control mechanism, thereby realizing precise management of the network and optimization of resources. The application can also be applied to a low-altitude economic scenario. The attached number of times threshold control mechanism is applicable to a hybrid non-ground network including satellites, high-altitude platform stations, and low-altitude base stations.

[0134] It should be understood that although each step in the flowchart involved in each embodiment as described above is displayed in sequence according to the arrow, these steps are not necessarily executed in sequence according to the arrow. Unless otherwise specified herein, the execution of these steps is not strictly limited in sequence, and these steps can be executed in other sequences. Moreover, at least part of the steps in the flowchart involved in each embodiment as described above can include multiple steps or stages, which are not necessarily executed at the same time, but can be executed at different times. The execution sequence of these steps or stages is not necessarily sequential, but can be executed in rotation or alternation with at least part of other steps or steps or stages in other steps. It can be understood that the steps in different embodiments can be freely combined as needed, and various non-contradictory schemes formed by the combination are within the scope of protection of the present application.

[0135] Based on the same inventive concept, the embodiments of the present application also provide a satellite access control device for implementing the above-mentioned satellite access control method. The implementation scheme for solving the problem provided by the device is similar to the implementation scheme described in the above method, and therefore the specific limitations in one or more satellite access control device embodiments provided below can refer to the limitations of the satellite access control method described above, which will not be described here again.

[0136] In one exemplary embodiment, a satellite access control device is provided, which is applied to a network access control function (NACF) and includes a statistics module and a restriction module, wherein:

[0137] The statistics module is configured to determine the satellite attached number of times of a target user and send the satellite attached number of times to a converged charging function (CHF). The CHF is configured to trigger a policy control function (PCF) to send satellite access restriction information to the NACF if the satellite attached number of times meets a preset condition.

[0138] a limiting module configured to limit satellite access of the target user according to the received satellite access restriction information.

[0139] In an exemplary embodiment, the limiting module is further configured to determine the target user according to a user identity carried by the satellite access restriction information, to prohibit the target user's user terminal from using satellite access mode, and / or to make the target user's user terminal use ground access mode.

[0140] In an exemplary embodiment, the counting module is further configured to receive an access policy sent by the PCF, to determine the satellite attach times of the target user in a case where the target user performs satellite attach according to the access policy, and to send the satellite attach times to the CHF according to a preset period.

[0141] In an exemplary embodiment, the satellite access control apparatus further comprises:

[0142] an identity verification module configured to perform identity verification on the target user by an authentication service function (ASF) and / or a unified subscription management function (USM) in a case where the target user requests satellite access;

[0143] a policy query module configured to send a policy query request carrying a user identity of the target user to the PCF in a case where identity verification is passed, and the PCF is configured to determine an access policy of the target user according to the user identity and to return the access policy.

[0144] In an exemplary embodiment, the identity verification module is further configured to send the user identity of the target user to the ASF and / or USM, and the ASF and / or USM is configured to return contract data corresponding to the user identity and to perform identity verification on the target user according to the contract data.

[0145] In an exemplary embodiment, a satellite access control apparatus is provided, which is applied to a converged charging function (CHF) and comprises a receiving module and a triggering module, wherein:

[0146] the receiving module is configured to receive satellite attach times of a target user sent by a network access control function (NACF);

[0147] the triggering module is configured to trigger a policy control function (PCF) to send satellite access restriction information to the NACF in a case where the satellite attach times meet a preset condition, and the NACF is configured to limit satellite access of the target user according to the received satellite access restriction information.

[0148] In an exemplary embodiment, the triggering module is further configured to send a policy update request to the PCF when the number of satellite attachments reaches a preset threshold; and the PCF is configured to update the access policy according to the policy update request, and send the satellite access restriction information to the NACF according to the updated access policy.

[0149] In an exemplary embodiment, a satellite access control apparatus is provided, which is applied to a policy control function (PCF) and includes a response module configured to:

[0150] The response module is configured to send satellite access restriction information to a network access control function (NACF) in response to a trigger of a converged charging function (CHF). The CHF is configured to receive a number of satellite attachments of a target user sent by the NACF, form the trigger when the number of satellite attachments meets a preset condition, and the NACF is configured to restrict satellite access of the target user according to the received satellite access restriction information.

[0151] In an exemplary embodiment, the response module is further configured to receive a policy update request sent by the CHF, and the CHF is configured to send the policy update request when the number of satellite attachments reaches a preset threshold, update the access policy according to the policy update request, and send the satellite access restriction information to the NACF according to the updated access policy.

[0152] In an exemplary embodiment, the satellite access control apparatus further includes:

[0153] The policy generation module is configured to generate an access policy of the target user according to contract data sent by an authentication service function (ASF) and / or a unified subscription management function (USM).

[0154] The policy sending module is configured to determine the access policy of the target user according to a user identifier when receiving a policy query request carrying the user identifier sent by the NACF, and return the access policy to the NACF.

[0155] Each module in the satellite access control apparatus can be realized by software, hardware, or a combination thereof, in whole or in part. Each module can be embedded in or independent of a processor in a communication device in hardware form, or stored in a memory in the communication device in software form, so as to be called and executed by the processor to perform operations corresponding to each module.

[0156] In an exemplary embodiment, a communication device is provided, which can be a core network, and an internal structure diagram of the communication device can be as shown in Figure 5As shown in the figure. The communication device includes a processor, a memory, an input / output interface (Input / Output, referred to as I / O) and a communication interface. Among them, the processor, the memory and the input / output interface are connected through the system bus, and the communication interface is connected to the system bus through the input / output interface. Among them, the processor of the communication device is used to provide computing and control capability. The memory of the communication device includes a non-volatile storage medium and an internal memory. The non-volatile storage medium stores an operating system, a computer program and a database. The internal memory provides an environment for the operation of the operating system and the computer program in the non-volatile storage medium. The database of the communication device is used to store satellite access control data. The input / output interface of the communication device is used to exchange information between the processor and external devices. The communication interface of the communication device is used to communicate with external terminals through network connection. The computer program is executed by the processor to implement a satellite access control method.

[0157] Those skilled in the art can understand that, Figure 5 The structure shown in the figure is only a block diagram of part of the structure related to the scheme of the present application, and does not constitute a limitation on the communication device to which the scheme of the present application is applied. The specific communication device can include more or fewer components than those shown in the figure, or combine certain components, or have a different component arrangement.

[0158] In an exemplary embodiment, a communication device is provided, including a memory and a processor, the memory storing a computer program, and the processor executing the computer program to implement the steps in the above method embodiments.

[0159] In an exemplary embodiment, a computer readable storage medium is provided, which stores a computer program, and the computer program is executed by a processor to implement the steps in the above method embodiments.

[0160] In an exemplary embodiment, a computer program product is provided, including a computer program, and the computer program is executed by a processor to implement the steps in the above method embodiments.

[0161] It should be noted that the user information (including but not limited to user equipment information, user personal information, etc.) and data (including but not limited to data for analysis, stored data, displayed data, etc.) involved in the present application are all information and data authorized by the user or authorized by all parties, and the collection, use and processing of related data need to comply with relevant regulations.

[0162] Those skilled in the art can understand that all or part of the processes in the above-mentioned embodiment methods can be completed by instructing the relevant hardware through a computer program. The computer program can be stored in a non-volatile computer readable storage medium, and when executed, can include the processes of the above-mentioned embodiment methods. Any reference to memory, database or other medium used in the embodiments provided in the present application can include at least one of non-volatile memory and volatile memory. The non-volatile memory can include read-only memory (ROM), magnetic tape, floppy disk, flash memory, optical storage, high-density embedded non-volatile memory, resistive random access memory (ReRAM), magnetoresistive random access memory (MRAM), ferroelectric random access memory (FRAM), phase change memory (PCM), graphene memory, etc. The volatile memory can include random access memory (RAM) or external cache memory, etc. As an illustration but not limitation, the RAM can be in various forms, such as static random access memory (SRAM) or dynamic random access memory (DRAM), etc. The database involved in the embodiments provided in the present application can include at least one of a relational database and a non-relational database. The non-relational database can include a distributed database based on a block chain, etc., without being limited thereto. The processor involved in the embodiments provided in the present application can be a general-purpose processor, a central processing unit, a graphics processing unit, a digital signal processor, a programmable logic device, a data processing logic device based on quantum computing, an artificial intelligence (AI) processor, etc., without being limited thereto.

[0163] The technical features of the above embodiments can be combined in any manner. To make the description concise, all possible combinations of the technical features in the above embodiments are not described, but as long as the combinations of the technical features do not exist contradictions, they should be considered as the scope of the present application.

[0164] The above-described embodiments are merely illustrative of several embodiments of the present application, which are described in more detail and in a specific manner, but should not be construed as limiting the scope of the patent of the present application. It should be noted that, for those of ordinary skill in the art, several modifications and improvements can be made without departing from the concept of the present application, and these all belong to the protection scope of the present application. Therefore, the protection scope of the present application should be subject to the appended claims.

Claims

1. A satellite access control method, characterized in that, The method is applied to the Network Access Control Function (NACF) and includes: The number of satellite attachments for the target user is determined, and the number of satellite attachments is sent to the Converged Billing Function (CHF). The CHF is used to trigger the Policy Control Function (PCF) to send satellite access restriction information to the NACF when the number of satellite attachments meets preset conditions. Based on the received satellite access restriction information, the satellite access of the target user is restricted.

2. The method according to claim 1, characterized in that, The preset conditions include the number of satellite attachments reaching a preset threshold, and the satellite access restriction information carrying the user identifier of the target user; The step of restricting the satellite access of the target user based on the received satellite access restriction information includes: The target user is determined based on the user identifier carried in the satellite access restriction information; The user terminal of the target user is prohibited from using satellite access, and / or the user terminal of the target user is made to use terrestrial access.

3. The method according to claim 1, characterized in that, The step of determining the number of satellite attachments for the target user and sending the number of satellite attachments to CHF includes: Receive the access policy sent by the PCF; When the target user performs satellite attachment according to the access policy, the number of times the target user attaches to the satellite is determined; The number of satellite attachments is sent to the CHF according to a preset period.

4. The method according to claim 1, characterized in that, The method further includes: When the target user requests satellite access, the target user is authenticated through the Authentication Service Function (ASF) and / or the Unified Subscription Management Function (USM). If authentication is successful, a policy query request carrying the user identifier of the target user is sent to the PCF; the PCF is used to determine the access policy of the target user based on the user identifier and return the access policy.

5. The method according to claim 4, characterized in that, The ASF and / or the USM pre-generate the contract data of the target user, send the contract data to the PCF, and the PCF generates the access policy based on the contract data; When the target user requests satellite access, the authentication of the target user is performed through the Authentication Service Function (ASF) and / or the Unified Subscription Management Function (USM), including: The target user's user identifier is sent to the ASF and / or USM; the ASF and / or USM are used to return the contract data corresponding to the user identifier. The target user is authenticated based on the contract data.

6. A satellite access control method, characterized in that, The method is applied to the Converged Charging Function (CHF) and includes: Receive the number of satellite attachments for the target user sent by the Network Access Control Function (NACF); If the number of satellite attachments meets the preset conditions, the Policy Control Function (PCF) is triggered to send satellite access restriction information to the NACF; the NACF is used to restrict the satellite access of the target user according to the received satellite access restriction information.

7. The method according to claim 6, characterized in that, When the number of satellite attachments meets preset conditions, the policy control function (PCF) is triggered to send satellite access restriction information to the NACF, including: When the number of satellite attachments reaches a preset threshold, a policy update request is sent to the PCF; the PCF is used to update the access policy according to the policy update request, and send the satellite access restriction information to the NACF according to the updated access policy.

8. A satellite access control method, characterized in that, The method is applied to the policy control function (PCF) and includes: In response to the triggering of the Converged Billing Function (CHF), satellite access restriction information is sent to the Network Access Control Function (NACF). The CHF is used to receive the number of satellite attachments of the target user sent by the NACF, and to trigger the system if the number of satellite attachments meets a preset condition. The NACF is used to restrict the satellite access of the target user according to the received satellite access restriction information.

9. The method according to claim 8, characterized in that, The step of sending satellite access restriction information to the Network Access Control Function (NACF) in response to the triggering of the Converged Charging Function (CHF) includes: The system receives a policy update request sent by the CHF; the CHF is used to send the policy update request when the number of satellite attachments reaches a preset threshold. Update the access policy according to the policy update request; The satellite access restriction information is sent to the NACF according to the updated access policy.

10. The method according to claim 8, characterized in that, The method further includes: Based on the contract data sent by the Authentication Service Function (ASF) and / or the Unified Contract Management Function (USM), an access policy for the target user is generated. Upon receiving a policy query request carrying a user identifier from the NACF, the access policy of the target user is determined based on the user identifier, and the access policy is returned to the NACF.

11. A satellite access control device, characterized in that, The device is used in the Network Access Control Function (NACF) and includes: The statistics module is used to determine the number of satellite attachments of the target user and send the number of satellite attachments to the converged billing function (CHF). The CHF is used to trigger the policy control function (PCF) to send satellite access restriction information to the NACF when the number of satellite attachments meets preset conditions. The restriction module is used to restrict the satellite access of the target user based on the received satellite access restriction information.

12. A satellite access control device, characterized in that, The device is used in the Converged Charging Function (CHF) and includes: The receiving module is used to receive the number of satellite attachments of the target user sent by the Network Access Control Function (NACF). The triggering module is used to trigger the policy control function (PCF) to send satellite access restriction information to the NACF when the number of satellite attachments meets the preset conditions; the NACF is used to restrict the satellite access of the target user according to the received satellite access restriction information.

13. A satellite access control device, characterized in that, The device is used in the policy control function (PCF) and includes: The response module is used to send satellite access restriction information to the network access control function (NACF) in response to the triggering of the converged billing function (CHF). The CHF is used to receive the number of satellite attachments of the target user sent by the NACF, and to trigger the system if the number of satellite attachments meets the preset conditions. The NACF is used to restrict the satellite access of the target user according to the received satellite access restriction information.

14. A communication device comprising a memory and a processor, wherein the memory stores a computer program, characterized in that, When the processor executes the computer program, it implements the steps of the method according to any one of claims 1 to 10.

15. A computer-readable storage medium having a computer program stored thereon, characterized in that, When the computer program is executed by a processor, it implements the steps of the method according to any one of claims 1 to 10.

16. A computer program product, comprising a computer program, characterized in that, When the computer program is executed by a processor, it implements the steps of the method according to any one of claims 1 to 10.

Images