Method and apparatus for access controlling

Patent metadata

Field	Value
Publication number	US-10313957-B2
Application number	US-201415502905-A
Country	US
Kind code	B2
Filing date	Aug 11, 2014
Priority date	Aug 11, 2014
Publication date	Jun 4, 2019
Grant date	Jun 4, 2019

Abstract

Embodiments of the present disclosure provide a method in a network element for access controlling. The method comprises receiving an access request message from a terminal device and checking a data structure for maintaining state information of terminal devices from which the network element has received access request messages, in response to the reception of the access request message. The method also comprises determining whether the requesting terminal device is abnormal based on said checking of the data structure and rejecting the access request of the requesting terminal device in response to determining that the requesting terminal device is abnormal.

First claim

What is claimed is:

1. A method in a network element for access controlling, the method comprising:
receiving an access request message from a terminal device;
checking a data structure for maintaining state information of terminal devices from which the network element has received access request messages, in response to the reception of the access request message, wherein the data structure comprises entries corresponding respectively to the terminal devices from which the network element has received the access request messages, wherein each of the entries at least comprises: an identifier of a corresponding terminal device; a number of access requests of the corresponding terminal device; a timer, of the corresponding terminal device, for showing a time elapsed since a corresponding entry was started; and a state flag for indicating abnormality or normality of the corresponding terminal device, and wherein said checking the data structure comprises:
obtaining an identifier of the requesting terminal device from the received access request message;
judging whether the obtained identifier is present in the data structure;
when it is judged that the obtained identifier is present in the data structure, judging whether a state flag corresponding to the obtained identifier indicates abnormality;
when it is judged that the state flag corresponding to the obtained identifier indicates normality, updating a timer corresponding to the obtained identifier and judging whether the updated timer indicates expiry; and
when the updated timer indicates not expiry, updating the number of access requests corresponding to the requesting terminal device and judging whether the updated number of access requests meets a predetermined threshold;

determining whether the requesting terminal device is abnormal based on said checking of the data structure, wherein said determining comprises:
 in a case that the obtained identifier is present in the data structure,
 when the state flag corresponding to the obtained identifier indicates abnormality, determining that the requesting terminal device is abnormal; and
when the updated timer indicates not expiry and the updated number of access requests meets the predetermined threshold, determining that the requesting terminal device is abnormal; and

rejecting the access request of the requesting terminal device in response to determining that the requesting terminal device is abnormal.

2. The method according to claim 1 , further comprising updating the data structure, wherein said updating the data structure comprises:
in a case that the obtained identifier is not present in the data structure, creating a new entry for the requesting terminal device in the data structure and initializing the number of access requests, the timer, and the state flag comprised in the new entry; and
in the case that the obtained identifier is present in the data structure:
when the state flag corresponding to the obtained identifier indicates abnormality, updating the timer corresponding to the obtained identifier and when the updated timer indicates expiry, deleting an entry comprising the obtained identifier from the data structure; and
when the state flag corresponding to the obtained identifier indicates normality,
in a case that the updated timer indicates expiry, deleting the entry comprising the obtained identifier from the data structure; and
in a case that the updated timer indicates not expiry and the updated number meets the predetermined threshold, causing the state flag corresponding to the obtained identifier to indicate abnormality.

3. The method according to claim 1 , wherein
the identifier of the corresponding terminal device comprises one of: an international mobile subscriber identity (IMSI), a temporary mobile subscriber identity (TMSI), a packet temporary mobile subscriber identity (P-TMSI), and an international mobile equipment identity (IMEI).

4. An apparatus configured to control access in a network element, the apparatus comprising one or more processors configured to:
receive an access request message from a terminal device;
check a data structure for maintaining state information of terminal devices from which the network element has received access request messages, in response to the reception of the access request message, wherein the data structure comprises entries corresponding respectively to the terminal devices from which the network element has received the access request messages, wherein each of the entries at least comprises: an identifier of a corresponding terminal device; a number of access requests of the corresponding terminal device; a timer, of the corresponding terminal device, for showing a time elapsed since a corresponding entry was started; and a state flag for indicating abnormality or normality of the corresponding terminal device, and wherein to check the data structure, the one or more processors are further configured to:
obtain an identifier of the requesting terminal device from the received access request message;
judge whether the obtained identifier is present in the data structure;
when it is judged that the obtained identifier is present in the data structure, judge whether the state flag corresponding to the obtained identifier indicates abnormality;
when it is judged that the state flag corresponding to the obtained identifier indicates normality, update the timer corresponding to the obtained identifier and judge whether the updated timer indicates expiry; and
when the updated timer indicates not expiry, update the number of access requests corresponding to the requesting terminal device and judge whether the updated number of access requests meets a predetermined threshold;

determine whether the requesting terminal device is abnormal based on said check of the data structure, wherein to determine whether the requesting terminal device is abnormal, the one or more processors are further configured to:
in the case that the obtained identifier is present in the data structure,
when the state flag corresponding to the obtained identifier indicates abnormality, determine that the requesting terminal device is abnormal; and
when the updated timer indicates not expiry and the updated number meets the predetermined threshold, determine that the requesting terminal device is abnormal; and

reject the access request of the requesting terminal device in response to the determination that the requesting terminal device is abnormal.

5. The apparatus according to claim 4 , wherein the one or more processors are further configured to:
in a case that the obtained identifier is not present in the data structure, create a new entry for the requesting terminal device in the data structure and initialize the number of access requests, the timer, and the state flag comprised in the new entry; and
in the case that the obtained identifier is present in the data structure:
when the state flag corresponding to the obtained identifier indicates abnormality, update the timer corresponding to the obtained identifier and when the updated timer indicates expiry, delete an entry comprising the obtained identifier from the data structure; and
when the state flag corresponding to the obtained identifier indicates normality,
in a case that the updated timer indicates expiry, delete the entry comprising the obtained identifier from the data structure; and
in a case that the updated timer indicates not expiry and the updated number of access requests meets the predetermined threshold, cause the state flag to indicate abnormality.

6. The apparatus according to claim 4 , wherein
the identifier of the corresponding terminal device comprises one of: an international mobile subscriber identity (IMSI), a temporary mob

Assignees

• Ericsson Telefon Ab L M

Inventors

• Chen Cheng
• Geng Yi
• Wang Zhike
• Zhang Aiqin

Classifications

• H04W48/08 Primary

  Access restriction or access information delivery, e.g. discovery data delivery (signalling during connection H04W76/00) · CPC title

• H04W48/14

  using user query {or user detection} · CPC title

• H04L43/16

  Threshold monitoring · CPC title

• H04W48/02 Primary

  Access restriction performed under specific conditions · CPC title