WO2010130174A1

WO2010130174A1 - Method for enabling local access control and corresponding communication system

Info

Publication number: WO2010130174A1
Application number: PCT/CN2010/071852
Authority: WO
Inventors: 刘军; 宗在峰
Original assignee: 中兴通讯股份有限公司
Priority date: 2009-05-13
Filing date: 2010-04-16
Publication date: 2010-11-18
Also published as: CN101730187A

Abstract

A method for enabling local access control is provided by the present invention; it includes: a core network sends local access control information down to a network element on the wireless side, and according to said local access control information, the network element on the wireless side performs local access control, so that the network element on the wireless side enables the local access control function. Correspondingly, a telecommunication system, a wireless side network element and a core network device are also provided by the present invention. Adopting the technical scheme of the present invention enables a wireless side network element to access a local network or Internet network.

Description

Method for realizing local access control and corresponding communication system

The present invention relates to the field of communications technologies, and in particular, to a method and system for local access control.

Background technique

The home base station (including: Home Node B (HNB) and Home eNode B (HeNB)) is a small, low-power base station deployed in indoor places such as homes and offices, and is mainly used to provide users with higher service rates. It also reduces the cost of using high-rate services while making up for the deficiencies of existing distributed cellular wireless communication systems. The advantages of home base stations are affordability, convenience, low power output, plug and play, broadband access, and the use of single mode terminals. The home base station can be applied in a 3 generation (3 Generation) or Long Term Evolution (LTE) mobile communication network. In order to facilitate the management of the home base station, a new network element, that is, a home base station gateway, is introduced in the radio access network. The functions performed by the home base station gateway are as follows: verifying the security of the home base station, handling the registration of the home base station, performing operation and maintenance management on the home base station, configuring and controlling the home base station according to the operator's requirements, and exchanging data of the core network and the home base station. Figure 1 is a 3G home base station network architecture diagram. The 3G home base station is connected to the home base station gateway through a newly defined Iuh interface, and the home base station gateway provides IuPS and IuCs interfaces to the core network packet domain and the circuit domain. For a 3G network, the home base station gateway is mandatory to shield the impact on the terminal and the network side after the home base station is introduced. For the LTE network, the home base station gateway is optional. Therefore, the LTE home base station and the core network are connected in two ways. One is that the home base station and the core network element are directly connected, as shown in FIG. 2, and the other is a home base station. Connected through the home base station gateway and the core network element, as shown in Figure 3. In the scenario of the home base station gateway shown in FIG. 3, the home base station gateway may not integrate the user plane function, and the user plane is directly established between the home base station and the core network user plane gateway, so that the user plane is flattened and the data transmission delay is reduced. , As shown in Figure 4. The Closed Subscriber Group (CSG) is a new concept proposed after the introduction of a home base station. Usually a family or a user inside an enterprise forms a closed user group, which is identified by a CSG ID. Home base station serving users in this closed subscriber group Have the same CSG ID. By signing with the operator, the user can access the home base station corresponding to multiple closed user groups, such as the user's office and home. The concept of allowing a closed user group list to be introduced is therefore introduced. This list is stored in the user's terminal and the user data server on the network side. There are three usage modes for home base stations: closed mode, mixed mode, and open mode. When the home base station is in the closed mode, only the subscriber of the CSG to which the home base station belongs can access the home base station and enjoy the service provided by the home base station. When the home base station is in the open mode, any user can access the home base station, and the home base station at this time is equivalent to the macro base station. When the home base station is in the hybrid mode, any user is also allowed to access the use, but different levels are classified according to whether the user subscribes to the CSG. The existing home base station supports the access of the mobile network, but the home base station does not currently support the function of locally accessing other IP devices of the home network and the function of Internet access, that is, the function of the terminal to access the home network and the Internet network through the home base station is not supported. In addition, there are also local access control issues in the macro cellular network scenario. Among them, the macro cellular network scenario mainly refers to the shunting of internet data.

SUMMARY OF THE INVENTION The technical problem to be solved by the present invention is to provide a method and system for implementing local access control, which implements a local access function through a home base station or a macro base station. The local access includes accessing other IP devices or Internet networks of the local network through the home base station or the macro base station. In order to solve the above problem, the present invention provides a local access control method, including: the core network sends the local access control information to the radio side network element, and the radio side network element performs local access control according to the local access control information. Thereby, the wireless side network element implements local access control.

The step of the core network transmitting the local access control information to the radio side network element includes: the user establishes a connection with the radio side network element by using the non-access stratum message; the radio side network element forwards the non-access stratum message to the core network The core network processes the non-access stratum message, and sends local access control information to the radio side network element. In the step of establishing a connection between the user and the wireless side network element by using the non-access stratum message, the non-access stratum The message also carries a local access identifier, indicating that the user wants to perform local access; and the core network processes the non-access stratum message, and the step of sending local access control information to the radio side network element includes: determining, by the core network, the user Whether the local access capability is available, and the local access control information is sent to the wireless side network element when the user has the local access capability, where the local access control information includes local access capability information, routing policy, and uplink of the user equipment. The service flow template; or, when the user does not have the local access capability, the local access control information is sent to the wireless side network element, where the local access control information includes only the local access capability information of the user equipment. The wireless side network element includes but is not limited to: a home base station, a macro base station, or another network element device between the terminal and the general packet radio service support node;

The core network sends the local access control information to the radio side network element: In the third generation (3G) system, the general packet radio service support node of the core network accesses the network application part through the radio access (RANAP) Transmitting the local access control information to the radio side network element; or, in a long term evolution (LTE) system, the local access control is sent by the mobility management entity of the core network by using an initial context setup request message Information is sent to the wireless side network element. The local access control information includes local access capability information of the user equipment, or the local access control information includes local access capability information of the user equipment, and a routing policy and/or an uplink service flow template.

The present invention further provides a communication system, including a core network device and a wireless side network element, where: the core network device is configured to: send local access control information to a wireless side network element; and the wireless side network element setting And receiving local access control information sent by the core network device, and performing local access control according to the local access control information to support local access control of the wireless side network element. The wireless side network element is further configured to: forward a non-access stratum message sent by the user to the network side; The network side device is configured to send the local access control information to the radio side network element in the following manner: the core network device processes the non-access stratum message, and sends the local access control information to the radio side network element. The non-access stratum message sent by the user carries the local access identifier, indicating that the user wants to perform local access; the core network device is configured to process the non-access stratum message in the following manner, and send local access control information to The wireless side network element: determines whether the user has the local access capability, and when the user has the local access capability, the local access control information is sent to the wireless side network element, where the local access control information includes the local access capability information of the user equipment. And the routing policy and the uplink service flow template; or, when the user does not have the local access capability, the local access control information is sent to the wireless side network element, where the local access control information includes only the local access capability information of the user equipment. . The wireless side network element is a home base station, a macro base station, or another network element device between the terminal and the general packet radio service support node; and the system is a (3G) system, and the core network device is a general packet radio service. Supporting the node, the general packet radio service support node is configured to: deliver the local access control information to the radio side network element by using a radio access network application part (RANAP) message; or, the system is a long term evolution (LTE) The system, the core network device is a mobility management entity, and the mobility management entity is configured to: send the local access control information to the wireless side network element by using an initial context setup request message.

In order to solve the above problem, the present invention further provides a radio side network element, which is configured to: receive local access control information delivered by a core network, and perform local access control according to the local access control information. The wireless side network element is a home base station, a macro base station, or another network element device between the terminal and the general packet radio service support node; and the wireless side network element is further configured to:

Forwarding a non-access stratum message sent by the user to the core network, so that the core network processing office The non-access stratum message is sent to the radio side network element, where the local access control information includes the local access capability information of the user equipment, or the local access control information includes the user equipment. Local access capability information, and, routing policies and/or upstream traffic flow templates.

In order to solve the above problem, the present invention further provides a core network device, which is configured to: send local access control information to a wireless side network element; thereby causing the wireless side network element to perform local according to the local access control information. Access control to support wireless side network element local access control. The core network device is configured to send the local access control information to the wireless side network element in the following manner: the core network device receives the non-access stratum message sent by the user that is forwarded by the wireless side network element,

The core network device processes the non-access stratum message and sends local access control information to the radio side network element. The non-access stratum message sent by the user carries the local access identifier, indicating that the user wants to access the local network. The core network device is configured to process the non-access stratum message and send local access control information. The wireless side network element: determines whether the user has the local access capability, and when the user has the local access capability, the local access control information is sent to the wireless side network element, where the local access control information includes the local access capability of the user equipment. The information, the routing policy, and the uplink service flow template; or the local access control information is sent to the wireless side network element when the user does not have the local access capability, where the local access control information includes only the local access capability information of the user equipment. . The core network device is a general packet radio service support node, and the general packet radio The service service support node is configured to send the local access control information to the radio side network element by using a radio access network application part (RANAP) message; or the core network device is a mobility management entity, the mobility management The entity is configured to deliver the local access control information to the wireless side network element by using an initial context setup request message.

In the solution of the present invention, the network side sends the local access control information to the wireless side network element, and the wireless side network element performs local access control according to the local access control information, thereby implementing the function of local access through the wireless side network element.

1 is an architecture diagram of a 3G home base station network; FIG. 2 is an architecture diagram of an LTE home base station directly connected to a core network; FIG. 3 is an architecture diagram of an LTE home base station accessing a core network through a home base station gateway; FIG. 5 is a flowchart of an implementation manner of controlling a local IP access by a 3G home base station according to the present invention; FIG. 6 is a flowchart of an embodiment of controlling an local IP access by an LTE home base station according to the present invention; 7 is a flow chart of an embodiment of a 3G home base station using a local access identifier according to the present invention; and FIG. 8 is a flow chart of an embodiment of the LTE home base station using a local access identifier according to the present invention.

The present invention will be further described in detail below with reference to the accompanying drawings. In the present invention, a method for implementing local access control of a wireless side network element is provided, so that the wireless side network element supports access to other IP devices or Internet networks of the local network, and local access must be approved by the network operator. When the user boots up, the normal attach process will be performed. At this time, there will be three kinds of user plane data on the same Packet Data Network (PDN) connection. Path, one is the normal path through the core network exit, and the other is directly exported to the wireless side network element to

The path of the Internet network, the third is to access the internal network through the wireless side network element, so that the wireless side network element needs to use the Network Address Translation (NAT) to branch the uplink data packet of the mobile user according to the destination address of the data packet. Make routing choices. In order to support local access through the wireless side network element, the present invention provides a method for the wireless side network element to support local IP access, and completes the requirement of local access control without affecting the existing process. When the user is powered on, a normal attach process is performed. In the authentication process, the network side brings the local access control information (ie, local access control information) to the wireless side network element, where the network side is the core network, and the control information There are three types, one is whether the user can perform local access, that is, the local access capability information, and the other is how the wireless side network element routes the destination address of the user equipment (User Equipment, UE), that is, the routing policy; Bind uplink traffic template (TFT). After the user access authentication succeeds, the network side may carry the local access control information through a Radio Access Network Application Part (RANAP) message or an Initial Context Setup Request message or other message. Give the wireless side network element. After that, the wireless side network element can determine whether to allow the UE to use the local access function according to the local access capability information in the local access control information sent by the network side, and the function includes the wireless access from the wireless side network element to the Internet network or the local network internal access, and the wireless The side network element can also determine how to route the user's data stream according to the routing control information. The wireless side network element uses the uplink TFT to perform bearer binding. The local access control information needs to be saved on the radio side network element, and the information cannot be deleted even after the signaling connection is released. In addition, another local access control method is to carry a local access identifier in the attach request message, indicating that the user wants to perform local access (access to the local network or local access to the Internet network), the network side, that is, the core network. According to the contracting capability, it is determined whether the local access is allowed. If not allowed, the network side only sends the local access capability information of the user equipment to the wireless side network element, and does not deliver the routing policy and the uplink TFT to the wireless side network element; The network side sends relevant local access control information (including local access capability information, routing policy, and uplink TFT) to the wireless side network element. The wireless side network element includes but is not limited to: a home base station, a macro base station, or another network element device between the terminal and the general packet radio service support node. Through the above solution, the function of the home base station to locally access other IP devices of the home network can be realized. And the function of Internet access can also be applied to the macro cellular network scenario, mainly referring to the offloading of internet data. Since local access control problems exist in both the home base station and the macro cellular network, the same solution can be used. This embodiment uses a home base station as an example for description. 5 is an implementation manner of controlling a local IP access by a 3G home base station, and the specific method is as follows: Step 501: Establish a radio resource control (Radio Resource Control) between the user and the home base station.

RRC) connection. Step 502: The user initiates a registration process by initializing a non-access stratum (NAS) message, and the type of the NAS message may be an attach request message, a location update message, a service request message, etc. The example is described. Step 503: The home base station finds that there is no context identification information of the user, and sends a registration request message to the home base station gateway, where the registration request message carries the type of registration, the IMSI (International Mobile Subscriber Identity) identifier of the user, the terminal capability, and the home base station identifier. information. Step 504: If the home base station gateway learns that the access control needs to be completed according to the user's terminal capability, perform access control according to the actual usage mode of the user base station accessed by the user and the corresponding relationship between the user IMSI and the home base station, and perform the steps. 505. If the home base station gateway knows that the access control needs to be completed in the core network according to the terminal capability of the user, then the home base station gateway defaults to the access control permission, and step 506 is executed to instruct the core network to perform the access control judgment. Step 505: If the home base station gateway access control is successful, replying to the registration accept message to the home base station, performing step 506; if the home base station gateway access control fails, replying to the registration reject message, the subsequent process is not completed. Step 506: The home base station forwards the NAS message (the attach request message in this embodiment) to the home base station gateway, and the home base station gateway forwards the message to the core network. Step 507: The core network processes the NAS message. In this embodiment, the process of performing authentication, bearer establishment, and the like is performed, if the General Packet Radio Service (GPRS) service support node (SGSN) is locally localized. Without the context identification information of the UE, the subscription data of the UE needs to be obtained from the Home Subscriber Server (HSS). Step 508, the attach request is accepted, and the SGSN passes the subscription data and the local configuration policy. The routing policy of the UE is used to carry the local access control information to the home base station by using the RANAP message, and the home base station needs to save the local access control information carried in the RAN AP message. The attach accept message is carried in the RANAP message.

The local access control information includes one or more of a local access capability (ie, UE local IP access capability) of the UE, a routing policy, and an uplink TFT. The home base station performs local access control based on the saved local access control information. Specifically, the home base station determines whether to allow the UE to use the local access function according to the local access capability, and the function includes accessing from the home base station outlet or the home network, and the home base station may also determine how to route the user data stream according to the routing control information. The home base station uses the uplink TFT for bearer binding. The method for obtaining the local access control information by the macro base station is similar to this embodiment, and no steps are performed.

503 505. If there are other network element devices between the terminal and the general packet radio service support node, the method for obtaining the local access control information is similar to this embodiment, and step 503 505 is not performed. FIG. 6 is an implementation manner of controlling local IP access by an LTE home base station, and the specific method is as follows: Step 601: Establish an RRC (Radio Resource Control) connection between the user and the home base station. Step 602: The user initiates an initialization of a NAS (Non-Access Stratum) message, and the type of the NAS message may be an attach request message, a location update message, or a service request message. In this embodiment, an attach request message is used as an example for description.

Step 603: The NAS message forwarded by the home base station (attach request message in this embodiment) is sent to the home base station gateway, and the home base station gateway forwards the NAS message to the core network. Step 604, the core network processes the NAS message. In this embodiment, the process of performing authentication, bearer establishment, and the like is required. If the Mobility Management Entity (MME) does not have the context identifier information of the UE locally, the HSS needs to be obtained from the HSS. Request the contract data of the UE. Step 605: The attach request is accepted, and the MME generates a routing policy of the UE by using the subscription data and the local configuration policy, and brings the local access control information to the home base station by using an Initial Context Setup Request message. The home base station needs to save the local access control information carried in the message. The attach accept message is carried in the initial context setup request message. The local access control information includes one or more of a local access capability, a routing policy, and an uplink TFT of the UE. Step 606, the RRC connection reconfiguration process. Step 607: The home base station sends an initial context setup response to the MME. Step 608: The home base station sends an Attach Complete message to the MME. The method for the macro base station to acquire local access control information is similar to this embodiment.

If there are other network element devices between the terminal and the general packet radio service support node, the method for obtaining the local access control information is similar to this embodiment.

7 is an implementation manner of using a local access identifier by a 3G home base station, and specifically includes: Step 701: Establish an RRC (Radio Resource Control) connection between the user and the home base station. Step 702: The user initiates a registration process by initializing a NAS (non-access stratum) message, where the message carries a local access identifier, indicating that the user wants to access the local network. The type of the NAS message may be an attach request message, a location update message, a service request message, and the like. In this embodiment, an attach request message is taken as an example for description. Step 703: The home base station finds that there is no context identification information of the user, and sends a registration request message to the home base station gateway, where the message carries information such as the type of registration, the IMSI identity of the user, the terminal capability, and the identity of the home base station. Step 704: If the home base station gateway learns that the access control needs to be completed according to the terminal capability of the user, perform access control according to the actual usage mode of the user base station accessed by the user and the corresponding relationship between the user IMSI and the home base station, and perform the steps. 705. If the home base station gateway needs to know that the access control needs to be completed in the core network according to the user terminal capability, then the home base station gateway defaults to the access control permission, and step 706 is executed to instruct the core network to perform the access control determination. Step 705: If the home base station gateway access control is successful, replying to the registration accept message to the home base station, performing step 706; if the home base station gateway access control fails, replying to the registration reject message, the subsequent process is not completed. Step 706: The home base station forwards the NAS message (attach request message in this embodiment) To the home base station gateway, the home base station gateway forwards the message to the core network. Step 707: The core network processes the NAS message. In this embodiment, the process of performing authentication, bearer establishment, and the like is performed. If the SGSN does not have the context identifier information of the UE locally, the contract data of the UE needs to be obtained from the HSS. Step 708, the attach request is accepted, and the network side determines whether the user has the local access capability. If the user does not have the local access capability, the network side sends the local access control information to the home base station through the RANAP message, where the local access control information includes only the user. The local access capability information of the device does not include other local access control information (such as the routing policy and the uplink TFT). If the user has the local access capability, the SGSN generates the routing policy of the UE through the subscription data and the local configuration policy, and localizes through the RANAP message. The access control information is provided to the home base station, where the local access control information includes the local access capability of the UE, the routing policy, and the uplink TFT. The home base station needs to save the local access control information carried in the message. The attach accept message is carried in the RANAP message. The method for obtaining the local access control information by the macro base station is similar to this embodiment, and steps 703 to 705 are not performed. If there are other network element devices between the terminal and the general packet radio service support node, the method for obtaining the local access control information is similar to this embodiment, and step 703 705 is not performed. 8 is an embodiment of an LTE home base station using a local access identifier, and specifically includes: Step 801: Establish a radio resource control (RRC) connection between a user and a home base station. Step 802: The user initiates a non-access stratum (NAS) message, where the message carries a local access identifier, indicating that the user wants to access the local network. The type of the NAS message may be an attach request message, a location update message, or a service request message. In this embodiment, an attach request message is taken as an example for description. Step 803: The NAS message forwarded by the home base station (attach request message in this embodiment) is sent to the home base station gateway, and the home base station gateway forwards the message to the core network. Step 804: The core network processes the NAS message. In this embodiment, the process of performing authentication, bearer establishment, and the like is performed. If the MME does not have the context identifier information of the UE, the contract data of the UE needs to be obtained from the HSS. Step 805, the attach request is accepted, and the network side determines whether the user has the local access capability. If the user does not have the local access capability, the network side sends the local access control information to the home base station through the Initial Context Setup Request message, where the local access control information is included. Only the local access capability information of the UE is included, and other local access control information (such as the routing policy and the uplink TFT) is not included. If the user has the local access capability, the MME generates the routing policy of the UE through the subscription data and the local configuration policy, through the Initial Context. The setup request message carries the local access control information to the home base station, where the local access control information includes the local access capability information, the routing policy, and the uplink TFT of the UE. The home base station needs to save the local access control information carried in the message. The attach accept message is carried in the Initial Context Setup Request message. Step 806, the RRC connection reconfiguration process. Step 807: The home base station sends an initial context setup response to the MME. Step 808: The home base station sends an Attach complete to the MME. The method for the macro base station to acquire local access control information is similar to this embodiment.

If there are other network element devices between the terminal and the general packet radio service support node, the method for obtaining the local access control information is similar to this embodiment. FIG. 6 and FIG. 8 are diagrams illustrating a process in which a home base station connects to a home base station through a home base station gateway and a core network, and when the home base station is directly connected to the core network, the network side sends local access control information to the home base station, and FIG. 6 and FIG. 8 is similar and will not be described here.

Correspondingly, the present invention also provides a communication system including a core network device and a wireless side network element, where:

The core network device is configured to: send the local access control information to the wireless side network element; and the wireless side network element is set to: receive the local access control information sent by the core network device, and perform local access control according to the local access control information. The radio network element is further configured to: forward the non-access stratum message sent by the user to the core network device, where the core network device is configured to send the local access control information to the radio side network element as follows: The access layer message is sent and the local access control information is sent to the wireless side network element. The non-access stratum message sent by the user carries the local access identifier, indicating that the user wants to perform local access.

The core network device is configured to process the non-access stratum message in the following manner, and send the local access control information to the radio side network element: determine whether the user has the local access capability, and send the local access control information when the user has the local access capability. For the wireless side network element, the local access control information includes the local access capability information, the routing policy, and the uplink service flow template of the user equipment; or when the user does not have the local access capability, the local access control information is sent to the wireless side network. The local access control information includes only the local access capability information of the user equipment. The wireless side network element is a home base station, a macro base station, or another network element device between the terminal and the general packet radio service support node;

The communication system is a (3G) system, and the core network device is a general packet radio service support node, and the general packet radio service support node is configured to: deliver the local access control by using a radio access network application part (RANAP) message The information is sent to the wireless side network element; or, the communication system is a long term evolution (LTE) system, and the core network device is a mobility management entity, and the mobility management entity is configured to: deliver local access control information to the wireless side by using an initial context setup request message. Network element.

Correspondingly, the present invention further provides a wireless side network element, which is configured to: receive local access control information delivered by the core network, and perform local access control according to local access control information.

The wireless side network element is further configured to: forward the non-access stratum message sent by the user to the core network, so that the core network processes the non-access stratum message and sends the local access control information to the radio side network element;

The local access control information includes local access capability information of the user equipment, or the local access control information includes local access capability information of the user equipment, and a routing policy and/or an uplink service flow template. The wireless side network element is a home base station, a macro base station, or other network element device between the terminal and the general packet radio service support node.

Correspondingly, the present invention further provides a core network device, which is configured to: send local access control information to a wireless side network element; thereby enabling a wireless side network element to perform local access control according to local access control information to support wireless Local network element local access control. The core network device is configured to send the local access control information to the wireless side network element in the following manner: the core network device receives the non-access stratum message sent by the user that is forwarded by the radio side network element, and the core network device processes the The non-access stratum message, and the local access control information is sent to the radio side network element. The non-access stratum message sent by the user carries the local access identifier, indicating that the user wants to access the local network. The core network device is configured to process the non-access stratum message in the following manner, and send local access control information to the radio side network. If the user has the local access capability, the local access control information is sent to the wireless side network element, where the local access control information includes the local access capability information, routing policy, and uplink of the user equipment. If the user does not have the local access capability, the local access control information is sent to the wireless side network element, where the local access control information includes only the local access capability information of the user equipment. The core network device is a general packet radio service support node, and the general packet radio service support node is configured to send local access control information to the radio side network element through a radio access network application part (RANAP) message; or, the core network device For the mobility management entity, the mobility management entity is set to pass the initial up and down The text establishment request message sends the local access control information to the radio side network element.

Industrial Applicability The present invention sends local access control information to the wireless side network element by the network side, and the wireless side network element performs local access control according to the local access control information, thereby realizing access to the local network or the Internet network through the wireless side network element. .

Claims

Claim

1. A method for implementing local access control, comprising:

The core network sends the local access control information to the wireless side network element, and the wireless side network element performs local access control according to the local access control information.

The method of claim 1, wherein the step of the core network transmitting the local access control information to the radio side network element comprises: the user establishing a connection with the radio side network element by using the non-access stratum message; The network element forwards the non-access stratum message to the core network; the core network processes the non-access stratum message, and sends local access control information to the radio side network element.

The method of claim 2, wherein, in the step of establishing a connection between the non-access stratum message and the radio side network element, the non-access stratum message carries the local access identifier, indicating that the user wants to perform local access. ; as well as

The step of the core network processing the non-access stratum message, and the sending the local access control information to the radio side network element includes: the core network determining whether the user has the local access capability, and delivering the local access capability when the user has the local access capability Local access control information is sent to the radio side network element, where the local access control information includes local access capability information, a routing policy, and an uplink service flow template of the user equipment; or, when the user does not have local access capability, Sending local access control information to the radio side network element, where the local access control information includes only local access capability information of the user equipment.

The method of claim 2, wherein the wireless side network element is a home base station, a macro base station, or another network element device between the terminal and the general packet radio service support node;

The core network sends the local access control information to the wireless side network element in the following steps: In the third generation (3G) In the system, the general packet radio service support node of the core network sends the local access control information to the radio side network element through a radio access network application part (RANAP) message; or in a long term evolution (LTE) system. And transmitting, by the mobility management entity of the core network, the local access control information to the wireless side network element by using an initial context setup request message.

The method of claim 1, 2 or 4, wherein the local access control information includes local access capability information of the user equipment, or the local access control information includes local access capability information of the user equipment, And, routing policy and/or upstream traffic flow template.

A communication system, comprising: a core network device and a wireless side network element, wherein: the core network device is configured to: send local access control information to a wireless side network element; and the wireless side network element is set to And receiving local access control information sent by the core network device, and performing local access control according to the local access control information.

The communication system according to claim 6, wherein the wireless side network element is further configured to: forward a non-access stratum message sent by a user to the core network device; and the core network device is set to The local access control information is sent to the radio side network element in the following manner: The core network device processes the non-access stratum message and sends the local access control information to the radio side network element.

8. The communication system according to claim 7, wherein the non-access stratum message sent by the user carries a local access identifier, indicating that the user wishes to perform local access; and the core network device is configured to be processed as follows: The non-access stratum message, the local access control information is sent to the radio side network element: determining whether the user has the local access capability, and when the user has the local access capability, the local access control information is sent to the radio side network element, where The local access control information includes local access capability information, a routing policy, and an uplink service flow template of the user equipment; or When the user does not have the local access capability, the local access control information is sent to the wireless side network element, where the local access control information includes only the local access capability information of the user equipment.

The communication system according to claim 7, wherein the wireless side network element is a home base station, a macro base station, or another network element device between the terminal and the general packet radio service support node; and the communication system is ( 3G) system, the core network device is a general packet radio service support node, and the general packet radio service support node is configured to: deliver the local access control information to the radio access network application part (RANAP) message to The wireless side network element; or the communication system is a Long Term Evolution (LTE) system, the core network device is a mobility management entity, and the mobility management entity is configured to: deliver the local device by using an initial context setup request message Access control information to the wireless side network element.

A radio side network element, configured to: receive local access control information sent by a core network, and perform local access control according to the local access control information.

The radio side network element according to claim 10, wherein the radio side network element is a home base station, a macro base station, or another network element device between the terminal and the general packet radio service support node;

The radio side network element is further configured to: forward the non-access stratum message sent by the user to the core network, so that the core network processes the non-access stratum message and sends local access control information to the radio side The local access control information includes the local access capability information of the user equipment, or the local access control information includes the local access capability information of the user equipment, and the routing policy and/or the uplink service flow template. .

12. A core network device, configured to: send local access control information to a wireless side network element, Therefore, the wireless side network element performs local access control according to the local access control information to support wireless side network element local access control.

The core network device according to claim 12, wherein the core network device is configured to send local access control information to the wireless side network element in the following manner: the core network device receives the wireless side network Non-access stratum message sent by the user forwarded by the meta,

The core network device processes the non-access stratum message and sends local access control information to the radio side network element.

The core network device according to claim 13, wherein the non-access stratum message sent by the user carries a local access identifier, indicating that the user wants to access the local network; and the core network device is set as follows: The method is configured to process the non-access stratum message, and send the local access control information to the radio side network element: determine whether the user has the local access capability, and send the local access control information to the radio side network element when the user has the local access capability. The local access control information includes the local access capability information, the routing policy, and the uplink service flow template of the user equipment; or the local access control information is sent to the wireless side network element when the user does not have the local access capability, where The local access control information includes only local access capability information of the user equipment.

The core network device according to claim 14, wherein the core network device is a general packet radio service support node, and the general packet radio service support node is configured to pass a radio access network application part (RANAP) The message is sent by the local access control information to the radio side network element; or the core network device is a mobility management entity, and the mobility management entity is configured to deliver the local access by using an initial context setup request message. Control information to the wireless side network element.