CN101176368B - Method for recognizing mobile terminal validity - Google Patents
Method for recognizing mobile terminal validity Download PDFInfo
- Publication number
- CN101176368B CN101176368B CN2005800497511A CN200580049751A CN101176368B CN 101176368 B CN101176368 B CN 101176368B CN 2005800497511 A CN2005800497511 A CN 2005800497511A CN 200580049751 A CN200580049751 A CN 200580049751A CN 101176368 B CN101176368 B CN 101176368B
- Authority
- CN
- China
- Prior art keywords
- information
- mobile terminal
- equipment
- authentication equipment
- peripheral authentication
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
- 238000000034 method Methods 0.000 title claims abstract description 19
- 230000002093 peripheral effect Effects 0.000 claims abstract description 100
- 238000010295 mobile communication Methods 0.000 claims abstract description 23
- 230000011664 signaling Effects 0.000 claims description 10
- 238000013507 mapping Methods 0.000 claims description 3
- 230000005540 biological transmission Effects 0.000 claims description 2
- 238000010200 validation analysis Methods 0.000 abstract 3
- 230000006854 communication Effects 0.000 description 3
- 238000005516 engineering process Methods 0.000 description 3
- 238000004891 communication Methods 0.000 description 2
- 230000003993 interaction Effects 0.000 description 2
- 230000008569 process Effects 0.000 description 2
- 241001269238 Data Species 0.000 description 1
- 208000027418 Wounds and injury Diseases 0.000 description 1
- 238000007630 basic procedure Methods 0.000 description 1
- 230000006378 damage Effects 0.000 description 1
- 238000012217 deletion Methods 0.000 description 1
- 230000037430 deletion Effects 0.000 description 1
- 238000011156 evaluation Methods 0.000 description 1
- 208000014674 injury Diseases 0.000 description 1
- 238000007689 inspection Methods 0.000 description 1
- 230000006855 networking Effects 0.000 description 1
- 230000001360 synchronised effect Effects 0.000 description 1
Images
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
- H04W12/08—Access security
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
- H04W12/06—Authentication
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
- H04W12/60—Context-dependent security
- H04W12/69—Identity-dependent
- H04W12/71—Hardware identity
Abstract
A method for identifying validation of mobile terminal includes the steps of mobile switching center or GPRS service supporting node sending international mobile equipment identification information of mobile terminal to be identified to present peripheral authentication equipment, and meanwhile sending validation request information; the present peripheral authentication equipment querying status information of mobile terminal to be identified based on international mobile equipment identification information or downloading status information of mobile terminal to be identified by central database; identifying validity of mobile terminal to be identified; achieving validity identification of mobile terminal. The present invention realizes validity identification of all mobile terminals by embedding peripheral authentication equipment and central database which are distributively configured in mobile communication network to constitute validation identification network and by interacting information between mobile switching center or GPRS serving supporting node and peripheral authentication equipment.
Description
Technical field
The present invention relates to a kind of recognition methods of mobile terminal validity, especially a kind of in mobile communication network, by the peripheral authentication equipment that central database is set, is provided with according to area distribution, the method that the legitimacy of portable terminal is discerned.
Background technology
Mobile network's safety is an important content of network operation, realizes aspect the network security that how relevant communications protocol has been done detailed description, and such as the authentication functions that provides by network, the mobile network realizes the evaluation to user identity.In addition, by EIR (Equipment Identification Register, equipment identity register) equipment is set, can discern the legitimacy of portable terminal itself.
At present, from the mobile communications network of actual operation, the authentication functions of network has obtained generally using, and has stoped disabled user's access effectively, thereby has protected the interests of operator and validated user.But; utilize EIR to stop the use aspect of illegal portable terminal but to do to such an extent that be nowhere near; for example; to be exactly some steal the portable terminals that get and use on the net in the same old way with crossing general phenomenon in the life; can reduce the loss of self by the shutdown means though lose mobile terminal user as far as possible; but; because the mobile network lacks the inspection to the legitimacy of portable terminal own; thereby can not be in the behavior that fundamentally stops the stealing portable terminal effectively, grievous injury the vital interests of validated user.
EIR's comes into operation, though can carry out legitimacy identification to portable terminal,, must at first in mobile communications network, set up an EIR who comprises national information of mobile terminal.Yet for the country that has large tracts of land territory, a large amount of mobile subscribers, operator may set up one hardly and cover nationwide EIR equipment, and this is because with the EIR equipment that present technology realized, can't satisfy this requirement on disposal ability.
Summary of the invention
The objective of the invention is to the EIR equipment realized at above-mentioned present technology, on disposal ability, can't satisfy the present situation that large tracts of land territory, a large amount of portable terminals are carried out legitimacy identification, and provide a kind of recognition methods of mobile terminal validity, this method is by being arranged on the portable terminal recognition network among the mobile network, by information transmission, storage, proof procedure, can discern the legitimacy of each portable terminal fast, make illegal portable terminal can not enter mobile communications network.
For achieving the above object, the present invention has adopted a kind of recognition methods of mobile terminal validity, may further comprise the steps:
Connection Service equipment in step 1, the mobile communications network sends to peripheral authentication equipment with the International Mobile Station Equipment Identification information of portable terminal to be identified, and sends the checking solicited message simultaneously; Described peripheral authentication equipment is a plurality of identification equipments that distribute and to be arranged in the mobile communications network and to be connected with described Connection Service devices communicating in central database and the institute compass of competency according to the compass of competency, preserve to some extent each status of mobile terminal information in the compass of competency in each identification equipment respectively, and the international mobile device beacon information of each portable terminal and the state information of himself constitute mapping relations; Described central database is used for storing the flag information of all status of mobile terminal information of described mobile communications network and each pairing peripheral authentication equipment in compass of competency, portable terminal place, and communicates with all identification equipment; Described state information is to allow or do not allow this portable terminal to insert information in the described mobile communications network;
Described status of mobile terminal information to be identified is sought and obtained to step 2, described peripheral authentication equipment according to described International Mobile Station Equipment Identification information;
Step 4, finish the legitimacy identification of described portable terminal.
In the technique scheme, Connection Service equipment can be that distribution is arranged on the mobile switching centre in the mobile communications network, also can be the GPRS serving GPRS support node.A plurality of peripheral authentication equipment and the central database that is provided with that distribute constituted a mobile terminal validity recognition network that embeds in the mobile communications network.All status of mobile terminal information datas in this mobile communications network in central database, have been preserved, and central database can be at each compass of competency, portable terminal place, their state information is backuped in the peripheral authentication equipment of its compass of competency, place, mobile switching centre or GPRS serving GPRS support node in this compass of competency can be discerned the legitimacy of portable terminal by this periphery authentication equipment.Because in mobile communications network; the start first and the roaming of portable terminal appear through regular meeting; therefore; peripheral authentication equipment is being sought and is being obtained in the process of status of mobile terminal information to be identified according to International Mobile Station Equipment Identification information; can also be by sending download request to central database; obtain status of mobile terminal information to be identified; for the portable terminal of roaming, central database then also has the operation of the flag information of the peripheral authentication equipment in this information of mobile terminal of preserving being upgraded according to the flag information of the pairing peripheral authentication equipment in portable terminal compass of competency, current place and asks the pairing peripheral authentication equipment in compass of competency, the preceding place of this mobile terminal roaming to delete the operation of this status of mobile terminal information.
By technique scheme as can be seen, the present invention is by embedding the peripheral authentication equipment and the central database of distributed setting in mobile communications network, form the legitimacy recognition network, and the information interaction by Connection Service equipment and peripheral authentication equipment, realized identification to all mobile terminal validities.
Below, also the present invention is described in further detail in conjunction with the accompanying drawings by embodiment.
Description of drawings
Fig. 1 is the structural representation of distributed mobile terminal legitimacy recognition network involved in the present invention;
Fig. 2 is a flow chart of the present invention;
Fig. 3 is the flow chart of a specific embodiment of the present invention.
Embodiment
Realization of the present invention is based on the mobile terminal validity recognition network of being made up of the peripheral authentication equipment of distributed setting and central database, and this mobile terminal validity recognition network embeds in the mobile communications network, and it constitutes as shown in Figure 1.In Fig. 1, peripheral authentication equipment 1 is according to the setting that distributes of predefined mobile communication compass of competency.All peripheral authentication equipments 1 all communicate with central database 2 and are connected.Each peripheral authentication equipment 1 is connected with mobile switching centre or GPRS serving GPRS support node (MSC/SGSN) 3 in its compass of competency, place respectively.Each authentication equipment 1 has been managed the MSC/SGSN of some sections.Communicate to connect the communication modes that can adopt Signaling System Number 7, Ethernet or some other bearer network between central database 2 and the peripheral authentication equipment 1.
Comprise state that allows this connection of mobile terminal into network or the state that does not allow this connection of mobile terminal into network in the status of mobile terminal information;
The setting of mobile terminal validity recognition network shown in Figure 1 in fact is exactly the setting of a jumbo equipment identity register (EIR), after setting is finished, just can discern the legitimacy of any one portable terminal.
Figure 2 shows that basic procedure of the present invention, it may further comprise the steps:
Connection Service equipment in step 201, the mobile communications network sends to peripheral authentication equipment with the International Mobile Station Equipment Identification information of portable terminal to be identified, and sends the checking solicited message simultaneously;
Described status of mobile terminal information to be identified is sought and obtained to step 202, peripheral authentication equipment according to described International Mobile Station Equipment Identification information;
Because in the mobile communications network; the behaviour in service of each portable terminal all difference might occur, for example shut down, newly network start and roaming, therefore; often need peripheral authentication equipment by with the information interaction of central database, the legitimacy of finishing portable terminal sets.A specific embodiment such as following shown in Figure 3.
In present embodiment shown in Figure 3, the mutual communication process between MSC/SGSN, peripheral authentication equipment and the central database is realized by self-defined MAP (Mobile Application Part, MAP) signaling.The concrete steps of present embodiment are as follows.
The IMEI information that step 301, MSC/SGSN will be in the portable terminal to be identified in the current compass of competency sends to current peripheral authentication equipment, and send the checking solicited message simultaneously, its concrete signaling is the MAP_CHECK_IMEI request, has comprised international mobile equipment identific sign indicating number IMEI (the International Mobile Equipment Identification) information of request identifying information and portable terminal in this signaling simultaneously.
The flag information of the peripheral authentication equipment of the portable terminal of having stored in the IMEI Help Center database during step 305, central database are asked according to MAP_UPDATE_IMEI_INFO to be identified.
After step 309, current peripheral authentication equipment are preserved status of mobile terminal information to be identified, according to this state information, discern the legitimacy of described portable terminal to be identified, and recognition result is returned MSC/SGSN, forward step 310 then to.
Describe from above-mentioned workflow, the EIR that the present invention realizes, owing to adopted distributed frame, central database only is responsible for the storage and the management of information of mobile terminal, therefore live load is effectively controlled, and uses the storage that large storage facilities can be supported a large amount of information of mobile terminal.Peripheral authentication equipment is born frequent MAP_CHECK_IMEI signaling process, satisfies the checking requirement of MSC/SGSN to portable terminal, improves the disposal ability of system by the load sharing of each peripheral authentication equipment.
When portable terminal is crossed over the roaming back, area of peripheral authentication equipment management or started shooting first, when the MSC/SGSN in the current peripheral authentication equipment management area requires to verify the legitimacy of portable terminal for the first time, central database sends information of mobile terminal just need for current peripheral authentication equipment, all the mobile terminal validity checking request of current peripheral authentication equipment independent process MSC/SGSN under other situations, therefore the load of distributed EIR is shared by peripheral authentication equipment, and the disposal ability of EIR is enhanced.EIR can cover whole operator or whole country, thereby prevents the use of illegal travelling carriage effectively.
After other significances of the present invention were that EIR adopts distributed structure/architecture, smooth expansion not only can be accomplished by system, but also has improved the reliability of system.In addition, networking is very flexible, and in order to increase the disposal ability of peripheral authentication equipment, peripheral components also can adopt distributed frame described herein.
Other advantages that adopt distributed frame to realize are: the first, good autgmentability, and by increasing peripheral authentication equipment quantity, the disposal ability of EIR almost can linearly increase; 2, reliability height, such as when some peripheral authentication equipments break down, by revising the setting of MSC/SGSN, the MAP_CHECK_IMEI signaling is pointed to disposal ability other peripheral authentication equipments more than needed, realized the disaster tolerance between the peripheral authentication equipment, in addition, peripheral authentication equipment can be preserved after central database is obtained status information of mobile terminal, therefore take place when unusual when central database, peripheral authentication equipment still can operate as normal, and most customer services are unaffected.
It should be noted last that, above embodiment is only unrestricted in order to technical scheme of the present invention to be described, although the present invention is had been described in detail with reference to preferred embodiment, those of ordinary skill in the art is to be understood that, can make amendment or be equal to replacement technical scheme of the present invention, and not break away from the spirit and scope of technical solution of the present invention.
Claims (6)
1. the recognition methods of a mobile terminal validity, it may further comprise the steps:
Connection Service equipment in step 1, the mobile communications network sends to peripheral authentication equipment with the International Mobile Station Equipment Identification information of portable terminal to be identified, and sends the checking solicited message simultaneously;
Described peripheral authentication equipment is a plurality of identification equipments that distribute and to be arranged in the mobile communications network and to be connected with described Connection Service devices communicating in central database and the institute compass of competency according to the compass of competency, preserve to some extent each status of mobile terminal information in the compass of competency in each identification equipment respectively, and the international mobile device beacon information of each portable terminal and the state information of himself constitute mapping relations;
Described central database is used for storing the flag information of all status of mobile terminal information of described mobile communications network and each pairing peripheral authentication equipment in compass of competency, portable terminal place, and communicates with all identification equipment and to be connected;
Comprise state that allows this connection of mobile terminal into network or the state that does not allow this connection of mobile terminal into network in the described state information;
Step 2, described peripheral authentication equipment are according to described International Mobile Station Equipment Identification information, whether inquiry stores described status of mobile terminal information to be identified, if have, execution in step 3, otherwise described peripheral authentication equipment sends data download request information to described central database and obtain described status of mobile terminal information to be identified from described central database;
Step 3, described peripheral authentication equipment are discerned the legitimacy of described portable terminal to be identified according to described state information, and recognition result is returned described Connection Service equipment, forward step 4 then to;
Step 4, finish the legitimacy identification of described portable terminal.
2. the recognition methods of mobile terminal validity according to claim 1, the equipment of Connection Service described in its step 1 are that distribution is arranged on mobile switching centre or the GPRS serving GPRS support node in the described mobile communications network.
3. the recognition methods of mobile terminal validity according to claim 1 and 2, peripheral authentication equipment described in its step 1 are the pairing current peripheral authentication equipments in compass of competency, the current place of described portable terminal to be identified.
4. the recognition methods of mobile terminal validity according to claim 3, peripheral authentication equipment described in its step 1 are to communicate by Signaling System Number 7 or by the network data transmission agreement to be connected with described central database.
5. the recognition methods of mobile terminal validity according to claim 3, its step 2 specifically may further comprise the steps:
Whether step 21, described current peripheral authentication equipment store described status of mobile terminal information to be identified according to described International Mobile Station Equipment Identification information inquiry, if having, then execution in step 3; If do not have then execution in step 23;
Step 23, described current peripheral authentication equipment send data download request information to described central database, comprise the International Mobile Station Equipment Identification information of described portable terminal to be identified and the flag information of described peripheral authentication equipment in this data download request information;
Step 24, described central database is according to described International Mobile Station Equipment Identification information inquiry and extract described status of mobile terminal information to be identified;
Step 25, described central database return described status of mobile terminal information to be identified and send to described current peripheral authentication equipment;
Step 26, described current peripheral authentication equipment are preserved described status of mobile terminal information to be identified, and execution in step 3 then.
6. the recognition methods of mobile terminal validity according to claim 5, its step 24 specifically may further comprise the steps:
Step 241, described central database are stored in the flag information of the peripheral authentication equipment of corresponding described portable terminal to be identified in this central database according to described International Mobile Station Equipment Identification information inquiry;
The flag information of the current peripheral authentication equipment in the described data download request information of sending in the flag information of the described peripheral authentication equipment that step 242, described central database obtain inquiry and the step 23 compares, judge whether both are consistent, if consistent, then execution in step 25; If inconsistent, then execution in step 243;
Step 243, described central database send the request of deleting described status of mobile terminal information to be identified according to the flag information of the described peripheral authentication equipment that inquiry in the step 242 obtains to this periphery authentication equipment, update stored in the flag information of the peripheral authentication equipment of corresponding described portable terminal to be identified in this central database then with the flag information of described current peripheral authentication equipment.
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| PCT/CN2005/000689 WO2006122445A1 (en) | 2005-05-18 | 2005-05-18 | A method for identifying validation of mobile terminal |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN101176368A CN101176368A (en) | 2008-05-07 |
| CN101176368B true CN101176368B (en) | 2011-11-23 |
Family
ID=37430919
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN2005800497511A Active CN101176368B (en) | 2005-05-18 | 2005-05-18 | Method for recognizing mobile terminal validity |
Country Status (2)
| Country | Link |
|---|---|
| CN (1) | CN101176368B (en) |
| WO (1) | WO2006122445A1 (en) |
Families Citing this family (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| GB2445778A (en) * | 2007-01-10 | 2008-07-23 | Nec Corp | Receiving the lock status of a device from a server database |
| CN102098659B (en) * | 2011-02-11 | 2013-07-24 | 王兰睿 | Method and system for fast verifying international mobile equipment identity (IMEI) |
| CN103179504B (en) * | 2011-12-23 | 2015-10-21 | 中兴通讯股份有限公司 | User validation determination methods and device, user access the method and system of mailbox |
| CN105379304B (en) * | 2013-07-04 | 2018-11-13 | 富士通株式会社 | Data network management system, data network management device, data processing equipment and data network management method |
Citations (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| WO1994013115A1 (en) * | 1992-12-01 | 1994-06-09 | Nokia Telecommunications Oy | Method of checking the identity of a subscriber equipment |
| CN1516503A (en) * | 2003-01-03 | 2004-07-28 | ��Ϊ��������˾ | Method for limiting illegal mobile telephone |
| CN1549482A (en) * | 2003-05-16 | 2004-11-24 | 华为技术有限公司 | Method for realizing high rate group data service identification |
| CN1558693A (en) * | 2004-01-13 | 2004-12-29 | ����ͨѶ�ɷ�����˾ | A system and method for implementing user roaming between different places by routing server |
| US6856800B1 (en) * | 2001-05-14 | 2005-02-15 | At&T Corp. | Fast authentication and access control system for mobile networking |
-
2005
- 2005-05-18 WO PCT/CN2005/000689 patent/WO2006122445A1/en active Application Filing
- 2005-05-18 CN CN2005800497511A patent/CN101176368B/en active Active
Patent Citations (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| WO1994013115A1 (en) * | 1992-12-01 | 1994-06-09 | Nokia Telecommunications Oy | Method of checking the identity of a subscriber equipment |
| US6856800B1 (en) * | 2001-05-14 | 2005-02-15 | At&T Corp. | Fast authentication and access control system for mobile networking |
| CN1516503A (en) * | 2003-01-03 | 2004-07-28 | ��Ϊ��������˾ | Method for limiting illegal mobile telephone |
| CN1549482A (en) * | 2003-05-16 | 2004-11-24 | 华为技术有限公司 | Method for realizing high rate group data service identification |
| CN1558693A (en) * | 2004-01-13 | 2004-12-29 | ����ͨѶ�ɷ�����˾ | A system and method for implementing user roaming between different places by routing server |
Also Published As
| Publication number | Publication date |
|---|---|
| WO2006122445A1 (en) | 2006-11-23 |
| CN101176368A (en) | 2008-05-07 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN101238752B (en) | Method and database for performing a permission status check on mobile equipment | |
| US9860719B2 (en) | Group call management | |
| CN101361390B (en) | A communications system and method | |
| RU2129760C1 (en) | Mobile radio link operating process | |
| CN104244227A (en) | Terminal access authentication method and device in internet of things system | |
| JP2002505056A (en) | How to limit the use of terminal equipment | |
| CN101771998B (en) | Roaming communication method, device and system | |
| US10154403B2 (en) | Method of and system for providing a multi-IMSI solution in an operating mobile network | |
| US20080046979A1 (en) | System for Controlled Access to Information Contained in a Terminal | |
| CN101176368B (en) | Method for recognizing mobile terminal validity | |
| CN105530714B (en) | MIFI communications service system and its MIFI and communication means | |
| CN1179600C (en) | Release of remaining active services in VPLMN | |
| CN104717600A (en) | M2M terminal/terminal peripheral accessibility management method and device | |
| CN101188810B (en) | Communication method and system, and mobile switching center | |
| CN101854678B (en) | Access control method and device | |
| US8682381B2 (en) | Method of accessing closed groups in radio access network | |
| CN104303564A (en) | Method for using a femtocell base station and a user equipment in a public land mobile network, femtocell base station, public land mobile network, program and computer program product | |
| CN1527625A (en) | Method for actuating verification | |
| CN104640113B (en) | Safety method for verification information retrieval request | |
| KR980013481A (en) | Personal communication service subscriber information processing device and method thereof | |
| CN103067849B (en) | A kind ofly to stop using, the method and apparatus of multiplexing gprs service | |
| KR101514328B1 (en) | Apparatus and method for storing of transmission/receipt data in a mobile communication system | |
| CN101137222A (en) | Access authentication processing method and system and device | |
| CN104254057A (en) | Short message transmission method, system and equipment | |
| WO2003030565A2 (en) | System and method of accessing mobile phone network subscriber information from the tcp/ip network |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| C14 | Grant of patent or utility model | ||
| GR01 | Patent grant | ||
| TR01 | Transfer of patent right |
Effective date of registration: 20171226 Address after: 200082 Shanghai city Yangpu District Yixian Road No. 25 room 307K Patentee after: Shanghai source Hui Information Polytron Technologies Inc. Address before: 518057 Nanshan District science and Technology Industrial Park, Guangdong high tech Industrial Park, ZTE building Patentee before: ZTE Corp. |
|
| TR01 | Transfer of patent right | ||
| PE01 | Entry into force of the registration of the contract for pledge of patent right |
Denomination of invention: Methods for identifying the legitimacy of mobile terminals Granted publication date: 20111123 Pledgee: Huangpu Sub branch of Bank of Shanghai Co.,Ltd. Pledgor: Shanghai source Hui Information Polytron Technologies Inc. Registration number: Y2024310000052 |
|
| PE01 | Entry into force of the registration of the contract for pledge of patent right |