Home Base Station Service Access Control via Subscription Segmentation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current mobile communication systems using home base stations lack the ability to separately designate access rights for multiple services provided through local IP access, leading to difficulties in controlling access to internet and home network connections, especially in scenarios where specific services need to be restricted, such as allowing internet access but not home network access to visitors.
Innovation Solution
A mobile communication system that includes a subscriber information management apparatus storing APNs and service classes corresponding to mobile terminal identifiers, allowing for detailed access control through positional information updates and packet filtering based on service classes, enabling the owner or operator to manage access rights for each service and select communication paths accordingly.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If local IP access is provided through home base station, then internet connection service and home network connection service can be provided to UEs, but access control cannot be separately designated for each service
Solution Approach 1:
The access control mechanism is segmented by introducing service class identifiers that distinguish between different services (internet connection service and home network connection service). The subscription information is segmented to include separate service class indicators for each service type, allowing independent control permissions to be assigned and enforced for each service category.
Solution Approach 2:
Different access control policies are applied locally to different services based on their service class identifiers. The system allows the owner or operator to designate specific access rights for each service type (e.g., allowing internet access while restricting home network access), enabling differentiated quality control for each service rather than uniform control.
2Ease of operation
If access right is designated for all UEs through home base station, then local IP access can be provided, but specific service restrictions (e.g., allowing internet but not home network access) cannot be implemented
Solution Approach 1:
Access rights are segmented by service class rather than being applied uniformly to all services. The subscription information includes separate service class identifiers that allow the system to distinguish between internet connection service and home network connection service, enabling granular access control where different permission levels can be assigned to different services independently.
Solution Approach 2:
The access control system becomes dynamic by allowing flexible combination of service classes for different UEs. The system can adaptively grant or restrict access to specific services based on the UE's subscription information and the service class permissions, enabling operators to create customized access profiles that dynamically respond to different service requirements.
3Device complexity
If uniform access control is applied to all services, then system complexity is reduced, but ability to provide differentiated access rights for different services is lost
Solution Approach 1:
The system introduces service class parameters as an additional dimension for access control differentiation. By changing the control parameter from a single uniform permission setting to multiple service class-specific permission settings, the system achieves fine-grained access control without proportionally increasing overall system complexity. The service class identifiers act as parameters that enable differentiated control policies.
Solution Approach 2:
The access control mechanism is designed with multi-functionality to handle both uniform and differentiated access control scenarios. The same basic access control framework can operate in a simplified mode for uniform control or an enhanced mode with service class differentiation, making the system universally applicable to various operational requirements without needing separate control mechanisms.
Data Source
AI summary
A system includes a subscription storage that stores an APN for identifying a home base station and the service class available for a UE as subscription information, in correspondence with a mobile terminal identifier for identifying UE; a positional information update request receiver for receiving a positional information update request of UE 70 from an MME; and a positional information response transmitter that extracts the available service class included in the positional information update request, from the subscription storage and transmits a positional information update response included with the extracted service class to MME. With this configuration, it is possible to provide a mobile communication system in which, for a plurality of services of a home base station, the owner of a home base station can set the access right for each of the services, and communication data is transferred based on the set access right.