Control method for data transmission and terminal

Patent metadata

Field	Value
Publication number	US-11356891-B2
Application number	US-201716321407-A
Country	US
Kind code	B2
Filing date	Sep 19, 2017
Priority date	Sep 27, 2016
Publication date	Jun 7, 2022
Grant date	Jun 7, 2022

Abstract

A control method for data transmission and a terminal are provided. The control method for data transmission includes: determining, when a terminal has established a user-plane bearer link with a network and before transmitting data to be transmitted, whether or not a destination address of the data to be transmitted is recorded in a pre-created address whitelist; acquiring, if the destination address of the data to be transmitted is not recorded in the address whitelist, an application identifier corresponding to the data to be transmitted, and conducting access control decision based on the application identifier to obtain a decision result; and transmitting, when the decision result indicates that transmission of the data to be transmitted is permitted, the data to be transmitted through the user-plane bearer link.

First claim

What is claimed is:

1. A control method for data transmission, performed by a terminal, comprising:
determining, when the terminal has established a user-plane bearer link with a network and before transmitting data to be transmitted, whether or not a destination address of the data to be transmitted is recorded in a pre-created address whitelist;
acquiring, if the destination address of the data to be transmitted is not recorded in the address whitelist, an application identifier corresponding to the data to be transmitted, and conducting access control decision based on the application identifier to obtain a decision result; and
transmitting, when the decision result indicates that transmission of the data to be transmitted is permitted, the data to be transmitted through the user-plane bearer link.

2. The control method according to claim 1 , wherein the step of conducting access control decision based on the application identifier comprises: querying an access category corresponding to the application identifier, and conducting access control decision based on the access category corresponding to the application identifier.

3. The control method according to claim 1 , wherein when the decision result indicates that transmission of the data to be transmitted is permitted, the method further comprises: adding the destination address of the data to be transmitted to the address whitelist.

4. The control method according to claim 1 , wherein when the decision result indicates that transmission of the data to be transmitted is prohibited, the method further comprises: discarding the data to be transmitted.

5. The control method according to claim 1 , wherein the step of acquiring, if the destination address of the data to be transmitted is not recorded in the address whitelist, an application identifier corresponding to the data to be transmitted, and conducting access control decision based on the application identifier to obtain a decision result comprises:
determining, if the destination address of the data to be transmitted is not recorded in the address whitelist, whether or not the destination address of the data to be transmitted is recorded in a pre-created address blacklist; if yes, discarding the data to be transmitted; and otherwise, acquiring the application identifier corresponding to the data to be transmitted and conducting access control decision based on the application identifier to obtain the decision result.

6. The control method according to claim 5 , wherein when the decision result indicates that transmission of the data to be transmitted is prohibited, the method further comprises:
adding the destination address of the data to be transmitted to the address blacklist and activating an aging timer, wherein the destination address of the data to be transmitted is deleted from the address blacklist when the aging timer reaches a preset value.

7. The control method according to claim 1 , further comprising:
transmitting, if the destination address of the data to be transmitted is recorded in the address whitelist, the data to be transmitted through the user-plane bearer link.

8. The control method according to claim 1 , further comprising:
clearing the address whitelist after the user-plane bearer link with the network is established and/or released by the terminal.

9. A terminal, comprising a processor, a storage and a transmitter, wherein:
the processor is configured to call and execute program or data stored in the storage, so as to:
determine, when the terminal has established a user-plane bearer link with a network and before transmitting data to be transmitted, whether or not a destination address of the data to be transmitted is recorded in a pre-created address whitelist; and
acquire, if the destination address of the data to be transmitted is not recorded in the address whitelist, an application identifier corresponding to the data to be transmitted and conduct access control decision based on the application identifier to obtain a decision result; and

the transmitter is configured to transmit, when the decision result obtained by the processor indicates that transmission of the data to be transmitted is permitted, the data to be transmitted through the user-plane bearer link.

10. The terminal according to claim 9 , wherein in conducting access control decision based on the application identifier, the processor is configured to:
query an access category corresponding to the application identifier, and conduct access control decision based on the access category corresponding to the application identifier.

11. The terminal according to claim 9 , wherein the processor is further configured to:
add, when the decision result indicates that transmission of the data to be transmitted is permitted, the destination address of the data to be transmitted to the address whitelist.

12. The terminal according to claim 9 , wherein the processor is further configured to: discard the data to be transmitted when the decision result indicates that transmission of the data to be transmitted is prohibited.

13. The terminal according to claim 9 , wherein the processor is further configured to:
determine, if the destination address of the data to be transmitted is not recorded in the address whitelist, whether or not the destination address of the data to be transmitted is recorded in a pre-created address blacklist; if yes, discard the data to be transmitted; and otherwise acquire an application identifier corresponding to the data to be transmitted, and to conduct access control decision based on the application identifier to obtain the decision result.

14. The terminal according to claim 13 , wherein the processor is further configured to:
add, when the decision result indicates that transmission of the data to be transmitted is prohibited, the destination address of the data to be transmitted to the address blacklist, and activate an aging timer, wherein the destination address of the data to be transmitted is deleted from the address blacklist when the aging timer reaches a preset value.

15. The terminal according to claim 9 , wherein the transmitter is further configured to:
transmit, if the destination address of the data to be transmitted is recorded in the address whitelist, the data to be transmitted through the user-plane bearer link.

16. The terminal according to claim 9 , wherein the processor is further configured to:
clear the address whitelist after establishing and/or releasing the user-plane bearer link with the network by the terminal.

17. A non-transitory computer readable storage medium, storing instructions for executing the following steps:
determining, when a terminal has established a user-plane bearer link with a network and before transmitting data to be transmitted, whether or not a destination address of the data to be transmitted is recorded in a pre-created address whitelist;
acquiring, if the destination address of the data to be transmitted is not recorded in the address whitelist, an application identifier corresponding to the data to be transmitted, and conducting access control decision based on the application identifier to obtain a decision result; and
transmitting, when the decision result indicates that transmission of the data to be transmitted is permitted, the data to be transmitted through the user-plane bearer link.

18. The non-transitory computer readable storage medium according to claim 17 , wherein the step of conducting access control decision based on the application identifier

Assignees

• China Mobile Communication Ltd Res Inst
• China Mobile Comm Corp

Inventors

• Chen Ningyu
• Ding Fei
• Xu Xiaodong
• Hu Nan

Classifications

• H04L61/00

  Network arrangements, protocols or services for addressing or naming · CPC title

• H04L47/2475

  for supporting traffic characterised by the type of applications · CPC title

• H04L63/101 Primary

  Access control lists [ACL] · CPC title

• H04W48/06

  based on traffic conditions · CPC title

• H04W12/08

  Access security · CPC title