WO2006122445A1

WO2006122445A1 - A method for identifying validation of mobile terminal

Info

Publication number: WO2006122445A1
Application number: PCT/CN2005/000689
Authority: WO
Inventors: Yijun Guo
Original assignee: Zte Corporation
Priority date: 2005-05-18
Filing date: 2005-05-18
Publication date: 2006-11-23
Also published as: CN101176368A; CN101176368B

Abstract

A method for identifying validation of mobile terminal includes the steps of mobile switching center or GPRS service supporting node sending international mobile equipment identification information of mobile terminal to be identified to present peripheral authentication equipment, and meanwhile sending validation request information; the present peripheral authentication equipment querying status information of mobile terminal to be identified based on international mobile equipment identification information or downloading status information of mobile terminal to be identified by central database; identifying validity of mobile terminal to be identified; achieving validity identification of mobile terminal. The present invention realizes validity identification of all mobile terminals by embedding peripheral authentication equipment and central database which are distributively configured in mobile communication network to constitute validation identification network and by interacting information between mobile switching center or GPRS serving supporting node and peripheral authentication equipment.

Description

Method for identifying the legitimacy of mobile terminals

The invention relates to a method for identifying the legitimacy of a mobile terminal, in particular to a method for identifying the legitimacy of a mobile terminal by setting a central database and a peripheral authentication device arranged according to a regional distribution in a mobile communication network. Background technique

Mobile network security is an important part of network operation. In terms of how to implement network security, related communication protocols are described in detail. For example, through the authentication function provided by the network, the mobile network realizes the identification of the user identity. In addition, by setting the EIR (Equipment Identification Register) device, the legitimacy of the mobile terminal itself can be identified.

At present, from the perspective of the actual mobile communication network, the authentication function of the network is widely used, effectively preventing the access of illegal users, thereby protecting the interests of operators and legitimate users. However, the use of EIR to prevent the use of illegal mobile terminals is far from enough. For example, the most common phenomenon in life is that some mobile terminals that have been stolen are still used on the Internet, although users who lose mobile terminals can stop by. Means to minimize their own losses, but because the mobile network lacks the check of the legitimacy of the mobile terminal itself, it cannot fundamentally effectively prevent the theft of the mobile terminal, which seriously damages the vital interests of legitimate users.

EIR is put into use. Although it is possible to identify the legality of the mobile terminal, it is necessary to first establish an EIR containing the information of the national mobile terminal in the mobile communication network. However, for countries with large areas of land and large numbers of mobile users, it is almost impossible for operators to establish a nationwide EIR device. This is because the EIR equipment implemented by current technology cannot meet the processing power. Claim. Summary of the invention

The object of the present invention is to address the processing capability of the EIR device implemented by the above prior art. It is unable to satisfy the current situation of legal identification of a large area of land and a large number of mobile terminals, and provides a method for identifying the legitimacy of a mobile terminal. The method identifies the network through a mobile terminal set in the mobile network, and transmits, stores, and authenticates through information. The process can quickly identify the legitimacy of each mobile terminal, so that the illegal mobile terminal cannot enter the mobile communication network.

To achieve the above object, the present invention employs a method for identifying the legitimacy of a mobile terminal, including the following steps:

Step 1. The connection service device in the mobile communication network sends the international mobile device identification information of the mobile terminal to be identified to the peripheral authentication device, and simultaneously sends the face certificate request information; the peripheral authentication device is set according to the jurisdiction distribution. An identification device in the mobile communication network and in communication connection with the central database and the connection service device in the jurisdiction area, each of the identification devices respectively stores state information of each mobile terminal in the jurisdiction, and each mobile terminal The international mobile device identification information is in a mapping relationship with its own state information; the central database is configured to store state information of all mobile terminals in the mobile communication network and a flag of a peripheral authentication device corresponding to a jurisdiction in which each mobile terminal is located Information, and communicating with all of the identification devices; the status information is to allow or disallow the mobile terminal to access information in the mobile communication network; Step 2, the peripheral authentication device is based on the international mobile device identification information Find and get Determining status information of the mobile terminal;

Step 3, the peripheral authentication device identifies the legitimacy of the mobile terminal to be identified according to the status information, and returns the recognition result to the connection service device, and then proceeds to step 4;

Step 4: Perform legality identification of the mobile terminal.

In the above technical solution, the connection service device may be a mobile switching center distributed in the mobile communication network, or may be a GPRS service support node. The distributed peripheral multiple authentication devices and the central database constitute a mobile terminal legality identification network embedded in the mobile communication network. The state information data of all mobile terminals in the mobile communication network is saved in the central database, and the central database can back up the state information of each mobile terminal to the peripheral authentication device of the jurisdiction in which it is located, so that Mobile switching center within the jurisdiction or The GPRS service support node can identify the legitimacy of the mobile terminal through the peripheral authentication device. In the mobile communication network, the first booting and roaming of the mobile terminal often occurs. Therefore, the peripheral authentication device can also search for and obtain the state information of the mobile terminal to be identified according to the international mobile device identification information, and can also go to the central database. Sending a download request to obtain status information of the mobile terminal to be identified, and for the roaming mobile terminal, the central database further has the flag information stored in the mobile terminal according to the identifier information of the peripheral authentication device corresponding to the current jurisdiction of the mobile terminal The operation of updating the flag information of the peripheral authentication device and requesting the peripheral authentication device corresponding to the jurisdiction in which the mobile terminal is roaming to delete the state information of the mobile terminal.

It can be seen from the above technical solution that the present invention forms a legality identification network by embedding a distributed peripheral authentication device and a central database in a mobile communication network, and realizes the interaction by connecting the service device with the information of the peripheral authentication device. Identification of the legitimacy of all mobile terminals.

Hereinafter, the present invention will be further described in detail by way of specific embodiments and drawings. DRAWINGS

1 is a schematic structural diagram of a legality identification network of a distributed mobile terminal according to the present invention; FIG. 2 is a flowchart of the present invention;

Figure 3 is a flow diagram of one embodiment of the present invention. detailed description

The implementation of the present invention is based on a mobile terminal legality identification network composed of a distributed peripheral authentication device and a central database. The mobile terminal legality identification network is embedded in the mobile communication network, and its composition is as shown in FIG. In Fig. 1, the peripheral authentication device 1 performs distribution setting according to a preset mobile communication jurisdiction. All of the peripheral authentication devices 1 are in communication connection with the central database 2. Each of the peripheral authentication devices 1 is connected to a mobile switching center or GPRS service support node (MSC/SGSN) 3 in its jurisdiction. Each authentication device 1 manages some slices District MSC/SGSN. The communication connection between the central database 2 and the peripheral authentication device 1 can be carried out using SS7, Ethernet or some other communication method that carries the network.

The peripheral authentication device 1 is an identification device, and each of the identification devices separately stores state information of each mobile terminal in the jurisdiction. In the peripheral authentication device 1, the international mobile device identification information (IMEI) of each mobile terminal forms a mapping relationship with its own state information. In a specific implementation, the peripheral authentication device corresponding to the jurisdiction where the mobile terminal to be identified is located may be referred to as a current peripheral authentication device.

The central database 2 is for storing status information of all mobile terminals in the mobile communication network and flag information of previous peripheral authentication devices of each mobile terminal, and is in communication connection with all of the identification devices. The previous peripheral authentication device refers to the peripheral authentication device corresponding to the jurisdiction in which each mobile terminal is located for the last time legality identification, in other words, when one mobile terminal roams from another area managed by the peripheral authentication device to another When the peripheral authentication device manages the region, and the mobile terminal has been legally identified in the previous region, for convenience of explanation, the peripheral authentication device corresponding to the jurisdiction where the previous mobile terminal is located is referred to as a previous peripheral authentication device, and the mobile terminal The peripheral authentication device corresponding to another jurisdiction that is roamed is referred to as the current peripheral authentication device.

The status information of the mobile terminal includes a state in which the mobile terminal is allowed to access the network or a state in which the mobile terminal is not allowed to access the network;

The setting of the mobile terminal legality identification network shown in Figure 1 is actually a large-capacity device identification register (EIR) setting. After the setting is completed, the legality of any mobile terminal can be identified.

Figure 2 shows the basic flow of the present invention, which includes the following steps:

Step 201: The connection service device in the mobile communication network sends the international mobile device identification information of the mobile terminal to be identified to the peripheral authentication device, and simultaneously issues verification request information;

Step 202: The peripheral authentication device searches for and acquires state information of the to-be-identified mobile terminal according to the international mobile device identification information. Step 203: The peripheral authentication device 4 identifies the legality of the to-be-identified mobile terminal according to the status information, and returns the identification result to the connection service device.

Step 204: Complete legality identification of the mobile terminal.

Since the usage status of each mobile terminal may be different in the mobile communication network, such as shutdown, new network startup, and roaming, it is often necessary for the peripheral authentication device to complete the legality of the mobile terminal by interacting with the information of the central database. Set up. A specific implementation is shown in Figure 3 below.

In the embodiment shown in FIG. 3, the interactive communication process between the MSC/SGSN, the peripheral authentication device, and the central database is implemented by using a custom MAP (Mobile Application Part) signaling. The specific steps of this embodiment are as follows.

Step 301: The MSC/SGSN sends the IMEI information of the mobile terminal to be identified in the current jurisdiction to the current peripheral authentication device, and simultaneously sends the verification request information, where the specific signaling is a MAP-CHECK_IMEI request, where the signaling is The IMEI number of the mobile terminal to be identified is obtained by the current peripheral authentication device, and the current peripheral authentication device obtains the IMEI number of the mobile terminal to be identified, and whether the mobile terminal to be identified is stored according to the IMEI. Status information, if any, step 303 is performed; if not, step 304 is performed.

Step 303: The current peripheral authentication device identifies the validity of the mobile terminal to be identified according to the status information, and returns the identification result to the MSC/SGSN, and then proceeds to step 310.

Step 304: The current peripheral authentication device sends data download request information to the central database, where the data download request information includes the IMEI information of the mobile terminal to be identified and the identifier information of the current peripheral authentication device, and the specific signaling is MAP— UPDATE - IMEIJMPO request, the request requires obtaining the status information of the mobile terminal from the central database, and telling the central database that the current mobile terminal is under the jurisdiction of the current peripheral authentication device.

Step 305: The central database is based on the IMEI in the MAP_UPDATE_IMEI_INFO request The flag information of the peripheral authentication device of the mobile terminal to be identified that has been stored in the database is queried. Step 306: The central database extracts the stored identifier information of the peripheral authentication device of the mobile terminal to be identified, compares the flag information with the flag information of the current peripheral authentication device in the MAP_UPDATE-IMEI-INFO request, and determines the current peripheral Whether the identifier information of the device is consistent, if yes, step 308 is performed; if not, step 307 is performed.

Step 307: In case of inconsistency, the mobile terminal to be identified is roamed from the previous jurisdiction to the current jurisdiction. Therefore, the identifier information of the peripheral authentication device stored in the central database represents the location of the mobile terminal to be identified before roaming. The peripheral authentication device corresponding to the jurisdiction may be referred to as a previous peripheral authentication device. At this time, the central database sends a request for deleting the status information of the mobile terminal to be identified to the previous peripheral authentication device according to the flag information of the previous peripheral authentication device. The specific signaling is a MAP-CANCEL-IMEIJNFO request, and the request includes the IMEI information of the mobile terminal to be identified, so that the previous peripheral authentication device can clear the status information of the mobile terminal to be identified, and then, the central database uses the flag information of the current peripheral authentication device. Update the flag information of the previous peripheral authentication device. In this step, if the mobile terminal to be identified is powered on for the first time, there is no previous peripheral authentication device. At this time, the central database does not store the flag information of the peripheral authentication device, and the central database directly follows the flag. The status information of the mobile terminal to be identified is sent to the current peripheral authentication device, and at the same time, the flag information of the current peripheral authentication device is stored in the central database and corresponds to the mobile terminal to be identified.

Step 308: The central database returns the status information of the mobile terminal to be identified to the current peripheral authentication device, and the specific signaling is a MAP-INSERT JMEI-INFO request, and the request is used by the central database to synchronize the mobile terminal status information with the peripheral authentication device. The request includes IMEI information of the mobile terminal and mobile terminal status information (for example, whitelist, graylist, blacklist).

Step 309: After the current peripheral authentication device saves the state information of the mobile terminal to be identified, according to the state information, identify the legitimacy of the mobile terminal to be identified, and return the identification result to the MSC/SGSN, and then go to step 310.

Step 310: Complete legality identification of the mobile terminal. From the above description of the workflow, the EIR implemented by the present invention adopts a distributed structure, and the central database is only responsible for the storage and management of mobile terminal information, so the workload is effectively controlled, and a large storage device can support a large amount of mobile terminal information. storage. The peripheral authentication device undertakes frequent MAP-CHECK-IMEI signaling processing, satisfies the verification requirements of the MSC/SGSN for the mobile terminal, and improves the processing capability of the system through the load sharing of each peripheral authentication device.

When the mobile terminal roams across the area managed by the peripheral authentication device or is turned on for the first time, when the MSC/SGSN in the current peripheral authentication device management area first requests verification of the legitimacy of the mobile terminal, the central database needs to send the mobile to the current peripheral authentication device. Terminal information, in other cases, the current peripheral authentication device independently processes the mobile terminal legality verification request of the MSC/SGSN, so the load of the distributed EIR is shared by the Xiweiwei authentication device, and the processing capability of the EIR is enhanced. EIR can cover the entire operator or the entire country, effectively preventing the use of illegal mobile stations.

Another important significance of the present invention is that after the EIR adopts a distributed architecture, the system can not only smoothly expand, but also improve the reliability of the system. In addition, the networking is very flexible, and in order to increase the processing power of the peripheral authentication device, the peripheral components can also adopt the distributed structure described herein.

Other advantages realized by the distributed structure are: First, good scalability, by increasing the number of peripheral authentication devices, the processing capacity of EIR can be increased almost linearly; 2. High reliability, for example, when some peripheral authentication devices fail, By modifying the MSC/SGSN settings, the MAP-CHECK-IMEI signaling is directed to other peripheral authentication devices with sufficient processing capacity to implement disaster tolerance between the peripheral authentication devices. In addition, the peripheral authentication device obtains mobile terminal status information from the central database. It will be saved later, so when the central database is abnormal, the peripheral authentication device can still work normally, and most of the user services are not affected.

It should be noted that the above embodiments are only intended to illustrate the technical solutions of the present invention and are not intended to be limiting, and the present invention will be described in detail with reference to the preferred embodiments. Modifications or equivalents are made without departing from the spirit and scope of the invention.

Claims

Rights request

A method for identifying the legitimacy of a mobile terminal, comprising the steps of:

Step 1. The connection service device in the mobile communication network sends the international mobile device identification information of the mobile terminal to be identified to the peripheral authentication device, and simultaneously issues verification request information; the peripheral authentication device is configured to be moved according to a plurality of jurisdictions. An identification device in the communication network and in communication with the central database and the connection service device in the jurisdiction area, each of the identification devices respectively stores state information of each mobile terminal in the jurisdiction, and each mobile terminal The international mobile device identification information is in a mapping relationship with its own state information; the central database is configured to store state information of all mobile terminals in the mobile communication network and flag information of the peripheral authentication device corresponding to the jurisdiction region where each mobile terminal is located And communicating with all the identification devices; the status information is to allow or disallow the mobile terminal to access information in the mobile communication network; Step 2, the peripheral device according to the international mobile device identification information Find and get Determining status information of the mobile terminal;

Step 4: Perform legality identification of the mobile terminal.

2. The method for identifying the legitimacy of a mobile terminal according to claim 1, wherein the connection service device in the step 1 is a mobile switching center or a GPRS service support node distributed in the mobile communication network.

The method for identifying the legitimacy of the mobile terminal according to claim 1 or 2, wherein the peripheral authentication device in the step 1 is the current peripheral authentication device corresponding to the jurisdiction in which the mobile terminal to be identified is currently located.

The method for identifying the legitimacy of a mobile terminal according to claim 3, wherein the peripheral authentication device in the step 1 and the central database are communicatively connected through the seventh signaling or through a network data transmission protocol.

The method for identifying the legitimacy of a mobile terminal according to claim 3, wherein the step 2 specifically includes the following steps:

Step 21: The current peripheral authentication device queries, according to the international mobile device identification information, whether the state information of the mobile terminal to be identified is stored, if yes, step 22 is performed; if not, step 23 is performed;

Step 22: The current peripheral authentication device identifies the legality of the to-be-identified mobile terminal according to the status information, and returns the identification result to the connection service device, and then proceeds to step 4; Step 23, the current peripheral The authentication device sends data download request information to the central database, where the data download request information includes the international mobile device identification information of the mobile terminal to be identified and the identifier information of the peripheral authentication device;

Step 24: The central database queries and extracts state information of the to-be-identified mobile terminal according to the international mobile device identification information.

Step 25: The central database returns the status information of the to-be-identified mobile terminal to the current peripheral authentication device.

Step 26: After the current peripheral authentication device saves the status information of the mobile terminal to be identified, according to the status information, identify the legality of the mobile terminal to be identified, and return the recognition result to the connection service device, and then execute Step 4.

The method for identifying the legitimacy of a mobile terminal according to claim 5, wherein the step 24 specifically includes the following steps: Step 241: The central database queries the identifier information of the peripheral authentication device corresponding to the to-be-identified mobile terminal in the central database according to the international mobile device identification information.

Step 242: The central database compares the flag information of the peripheral authentication device obtained by the query with the flag information of the current peripheral authentication device in the data download request information sent in step 23, to determine whether the two are consistent. If they are consistent, go to step 25; if they are inconsistent, go to step 243;

Step 243: The central database sends a request for deleting the status information of the to-be-identified mobile terminal to the peripheral authentication device according to the identifier information of the peripheral authentication device that is queried in step 242, and then uses the current peripheral authentication device. The flag information updates the flag information stored in the central database corresponding to the peripheral authentication device of the mobile terminal to be identified.