WO2012106982A1 - Method and system for quick verification of international mobile station equipment identity - Google Patents
Method and system for quick verification of international mobile station equipment identity Download PDFInfo
- Publication number
- WO2012106982A1 WO2012106982A1 PCT/CN2012/070144 CN2012070144W WO2012106982A1 WO 2012106982 A1 WO2012106982 A1 WO 2012106982A1 CN 2012070144 W CN2012070144 W CN 2012070144W WO 2012106982 A1 WO2012106982 A1 WO 2012106982A1
- Authority
- WO
- WIPO (PCT)
- Prior art keywords
- mobile device
- imei
- information update
- verification
- device information
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Ceased
Links
Images
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W8/00—Network data management
- H04W8/18—Processing of user or subscriber data, e.g. subscribed services, user preferences or user profiles; Transfer of user or subscriber data
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
- H04W12/06—Authentication
Definitions
- the present invention relates to the field of mobile communications, and in particular, to a method, system, device identification register device, and central device identification register device for quickly verifying an international mobile device identity.
- IMEI International Mobile Station Equipment Identity, International Mobile Equipment Identity
- ME Mobile Equipment
- IMEI consists of 15 digits, all numbers are binary coded 0 to 9 The decimal number, the number above this range is invalid.
- the specific configuration is TAC-SNR-SP, where: TAC (Type Allocation Code, The model allocation code is 8 digits; the SNR (Serial Number) is 6 digits, and the same type of mobile device does not have two identical SNR numbers; SP (Spare, alternate number) is 1 digit, set to 0 when transmitting via mobile station, and IMEI stored in mobile station is usually supplemented 1 The bit number is used as a check digit to prevent human error.
- IMEISV International Mobile station Equipment Identity and Software Version Number, International Mobile Device ID and Software Version Number
- SVN Software Version Number
- the specific configuration is TAC-SNR-SVN.
- EIR Equipment Identity Register It contains one or several databases for storing IMEI, and mainly performs functions such as identification of mobile devices, monitoring and blocking.
- IMEI can be stored in three separate lists of whitelists, greylisters, and blacklists:
- ES Equipment Status
- the storage status in the list is: whitelisted, grayed out, blacklisted, and unknown.
- EIR can be based on administrators and CEIR (Central Equipment The Identity Register, Central Device Identification Register) requires updating the stored IMEI and ES.
- Common EIR implementation techniques, generally for ES Implicit storage is used, that is, a whitelist, a graylist, a blacklist, and the like are respectively set, and the status of the IMEI is determined according to whether IMEI appears in a certain data table. In some cases, an IMEI It may appear in different lists at the same time, resulting in ambiguity in the results of the query.
- IMSI International Mobile Subscriber Identity
- MCC Mobile Country Code
- MNC Mobile Network Code, Mobile Network Code
- MSIN Mobile Subscriber Identification Number
- IMSI has been used to improve EIR functionality.
- IMEI can be performed when any access attempt is made by the mobile station. Verify, or in accordance with the mobile communication operator's security policy, perform IMEI verification when dedicated resources are available in an established call.
- the response returned from EIR is received as 'blacklisted' or When 'not whitelisted', the network should prohibit any access attempts or ongoing calls and give the user an 'illegal terminal' The prompt, this is equivalent to authentication failure, therefore, all calls and location updates are forbidden and only emergency calls can be completed.
- the IMEI verification mechanism has also been used for IMS (IP Multimedia Subsystem, IP multimedia subsystem) and other devices in the access management.
- EIR can be based on MSC (Mobile-service Switch Center, Mobile Service Switching Center) ) / SGSN (Serving GPRS Support Node), verify IMEI and its status, and inform the result MSC/SGSN.
- MSC Mobile-service Switch Center, Mobile Service Switching Center
- SGSN Serving GPRS Support Node
- Whitelists should use IMEI, blacklists and graylists can also use IMEISV.
- the type of IMEI can be unknown.
- the MSC/SGSN can be configured to block unknown devices.
- the interface between the MSC and the EIR is the F interface, which is responsible for exchanging data between the MSC and the EIR.
- F Interface signaling uses the MAP protocol.
- the EIR completes the verification of the IMEI status of the mobile terminal in the circuit domain through the F interface.
- MSC server MSC Server
- MGW Media GateWay, Mobile Media Gateway
- the F interface is inherited by the MSC server. Unless otherwise stated, the F The interface will include an interface between the EIR and the MSC and the MSC server, and the MSC device also includes the MSC server device.
- the interface between the SGSN and the EIR is the Gf interface, which is responsible for exchanging data between the SGSN and the EIR.
- Gf Interface signaling uses the MAP protocol.
- the EIR completes the verification of the IMEI status of the mobile terminal in the packet domain through the Gf interface.
- the request and verification process of the IMEI is as shown in FIG. 1, and includes the following steps:
- Step S101 the MSC/SGSN sends to the MS (Mobile Station, mobile station) 'Identity Request (Identity Type)' message;
- Step S102 the MS responds with 'Identity Response (Mobile Identity ) ' ;
- Step S103 if the MSC/SGSN decides to verify the IMEI by EIR, it sends to the EIR. 'Check IMEI(IMEI)' message, otherwise, end the process;
- Step S104 EIR returns a 'Check IMEI Ack (IMEI)' message,
- the MSC/SGSN determines whether the mobile device is allowed to access the network according to the received verification result.
- the authentication encryption and IMEI verification process is as shown in FIG. 2, and includes the following steps:
- Step S201 the MSC/SGSN sends an 'Authentication and Ciphering Request' message containing the IMEISV parameter
- Step S202 MS responds to 'Authentication and Ciphering Response' ;
- Step S203 If the MSC/SGSN decides to verify the IMEI by EIR, it sends to the EIR. 'Check IMEI(IMEI)' message, otherwise, end the process;
- Step S204 EIR returns a message of 'Check IMEI Ack (IMEI)', The MSC/SGSN determines whether the mobile device is allowed to access the network according to the received verification result.
- IMEI 'Check IMEI Ack
- the data exchange function between MSC/SGSN and EIR in the above IMEI check process is performed by 3GPP TS.
- the MAP_CHECK_IMEI primitive defined in 29.002 is completed.
- the MAP_CHECK_IMEI primitive carries multiple mobile-related parameters, such as the call number (Invoke) ID), IMEI, IMEISV, requested device information, device status, BMUEF (Bit Map of UE Faults , user equipment fault bitmap), user error information, and provider error information.
- the specific encoding method of the MAP_CHECK_IMEI primitive is in accordance with the 3GPP protocol TS 29.002
- the different versions are as follows:
- ExtensionContainer OPTIONAL [0] ExtensionContainer OPTIONAL
- RequestedEquipmentInfo :: BIT STRING ⁇
- UESBI-IuA :: BIT STRING (SIZE(1..128))
- UESBI-IuB :: BIT STRING (SIZE(1..128))
- the EIR usually performs the IMEI check as follows:
- Receive 'Check IMEI' message from MSC/SGSN parse out IMEI and extract TAC from it Querying the list of mobile devices indexed by TAC to obtain the corresponding ES, and sending it back to the MSC/SGSN as an IMEI check result;
- the IMEI-based IMEI verification method implements network access control based on mobile device ME individual units.
- the TEI-indexed IMEI check method implements network access control based on the mobile device ME model.
- the above IM4 verification mechanism of R4 and previous versions cannot prevent IMEI from being illegally copied: if an IMEI If it is legal, the mobile device that illegally copied the IMEI will also be considered legal and can access the mobile network smoothly.
- EIR usually completes the IMEI check as follows:
- the EIR device uses an extended list of mobile devices, that is, using IMSI or The MSISDN identifies the legitimate user of the mobile device corresponding to the IMEI. If the IMEI is not illegally copied or is being used by a legitimate user, the ES in the mobile device list will be As a result of the verification, and based on the network access control of the mobile device. If the IMEI If it has been illegally copied and is being used by an illegal user, the mobile device is controlled by the following methods according to the management rules of the carrier:
- Partial Prohibition Prohibition of use by the specific user indicated by IMSI or MSISDN with the IMEI Access the mobile network for the identified mobile device
- Temporarily prohibited Network access control for mobile devices using IMEI that have been illegally copied is not yet available.
- IMSI and MSISDN are added by enhancing the standard 'Check IMEI' message.
- EIR can prevent the IMEI from being illegally copied. Even if there are a large number of mobile devices that use illegal copying of IMEI in the network (the so-called 'cottage machine', Gray Handset) can still enable IMEI verification. By first guiding the 'turning positive' process, gradually reduce the number of 'cottage machines' in the network, and then enable EIR for IMEI Verification can minimize the illegal copying of IMEI and improve the recognizability and serviceability of mobile devices.
- EIR needs to be resolved when IMEI verification is enabled in a larger network Networking problem. This is due to the limitation of signaling processing capability, single EIR
- the capacity of devices is generally tens of thousands to hundreds of thousands of mobile users, and the number of mobile users may range from millions to hundreds of millions, especially mobile users and mobile devices can automatically roam in the network of one or more operators: network Any mobile device inside may appear in any one Among the check queues of EIR devices. Therefore, a single EIR device obviously cannot meet the capacity requirements of a larger network. It is necessary to have multiple EIR devices combined to provide support in a larger network.
- IMEI The transaction processing capabilities required for the verification function.
- CEIR devices are generally introduced in larger networks.
- CEIR is a higher level
- the EIR device stores an IMEI central database that includes information on all mobile devices in the mobile communication network.
- the IMEI central database is a distributed mass database, generally including IMEI and ES.
- Other available information includes IMSI, MSISDN, the time of first activation in the network, the time of the most recent occurrence, and which MSC or SGSN was present.
- CEIR The device implements centralized management of mobile device information and forms a server/client relationship with the EIR device.
- Step S301 the MSC/SGSN sends a 'Check IMEI (IMEI)' to the EIR.
- IMEI 'Check IMEI
- Step S302 EIR sends 'Remote Check IMEI (IMEI)' to CEIR a message that translates the local IMEI verification request into a remote query to CEIR;
- IMEI IMEI
- Step S303 the CEIR uses the internal identity verification unit to verify the mobile device, and returns to the EIR.
- IMEI 'Remote Check IMEI Ack
- Step S304 EIR returns a message of 'Check IMEI Ack (IMEI)', The MSC/SGSN determines whether the mobile device is allowed to access the network according to the received verification result.
- IMEI 'Check IMEI Ack
- CEIR solves the networking problem of the EIR device and can adapt to the construction needs of mobile communication networks of various sizes.
- CEIR In addition to the data exchange function required for IMEI verification in the network, the device is also responsible for the sharing and exchange of mobile device lists (mainly blacklists) between different operators.
- the number of mobile users in a large mobile communication network often reaches tens of millions or even hundreds of millions, enabling IMEI
- the real-time verification function will consume a lot of system processing power, which will eventually lead to a sharp increase in construction costs.
- Real-time query and superposition of large databases that is, real-time query of large databases (especially distributed databases), taking up too much network resources, directly pushing up The cost of the IMEI verification system.
- IMEI The response time of the verify operation is highly volatile; since the valid number of IMEI is up to 14 digits, and IMEI
- the central database stores a large amount of content and can be extended. In the actual storage process, it is difficult to store by address in a mapping manner, which is generally implemented by means of a data table. Therefore, the query algorithm of the database ultimately determines the IMEI.
- Time response characteristics of the check The time of the commonly used data table search algorithm is proportional to NlogN (N is the length of the data table, at IMEI The number of users in the central database); the time taken to query the data table each time is uncertain.
- NlogN is the length of the data table, at IMEI
- the number of users in the central database the time taken to query the data table each time is uncertain.
- the use of caching technology in EIR can improve system performance, but the practical effect is limited and the system complexity is increased.
- the essence of the IMEI check is to make the VLR (Visitor) upon receiving a trigger request for a particular mobile device.
- the target state of the mobile device stored in the central database is consistent; in a network where there is no CEIR device, the IMEI central database is equivalent to the list of devices stored in the EIR device.
- the target state of the mobile device is generally queried from the IMEI central database by means of a lookup table, and the current state stored in the VLR/SGSN is updated in the form of a verification result.
- the statistical report of the 3GSM Alliance shows that Between 2003 and 2008, global GSM mobile phone users switched to a new mobile phone every 25 months on average, and the location update that currently triggers IMEI verification can reach 1 to 2 every day. The user can also switch on and off 1 or 2 times a day. Obviously, an update to the current state of the mobile device when the state of the mobile device has not changed is not necessary.
- IMEI verification is irreplaceable for maintaining the security and identifiability of mobile devices, while existing IMEI
- the high cost, low efficiency and low cost performance of the verification technology and the response time problem are the key factors hindering the enabling of the IMEI check function, so at this stage, IMEI
- the development of calibration technology focuses on improving product performance and reducing construction costs. From the perspective of curbing the gray list device based on 'cottage machine' and improving the security and recognizability of mobile devices, it is cost-effective IMEI
- the market demand for verification technology is becoming more and more urgent, and research on IMEI fast verification technology has also become the focus of EIR applications. Therefore, for IMEI It is also necessary to improve the calibration technology with broad market prospects.
- the common IMEI verification method has been improved within the framework of the protocol to improve the time response metrics of the verification and reduce the usage of large database software, thereby reducing the construction cost of equipment such as EIR.
- the present invention provides a method for quickly verifying IMEI, comprising the following steps:
- Step 1 The EIR receives the IMEI for the MSC/SGSN for a mobile device. After verifying the request message, querying whether there is a data record matching the mobile device in the local mobile device list, and returning the ES determined according to the data record as a check result to the MSC/SGSN And deleting the data record from the local mobile device list if the data record only relates to the mobile device; otherwise returning directly to the current ES as the check result in the IMEI check request message MSC/SGSN; wherein the IMEI check request message carries at least the IMEI of the mobile device and the current ES;
- Step 2 The EIR to CEIR Transmitting a mobile device information update request message; wherein the mobile device information update request message carries information extracted from the IMEI check request message;
- Step 3 The CEIR sends the ES and the IMEI carried in the mobile device information update request message.
- the ES of the corresponding mobile device stored in the central database is compared; if not, the EIR is Returning a first mobile device information update response message carrying information extracted from the IMEI central database according to a predetermined rule; if consistent, or also to the EIR Returning a second mobile device information update response message, the second mobile device information update response message indicating normal reception of the mobile device information update request message;
- Step four EIR After receiving the first mobile device information update response message, it is edited as a data record in the local mobile device list.
- the present invention also provides a system for quickly verifying IMEI, an EIR device, and a CEIR. Equipment.
- the system for quickly verifying IMEI includes EIR and MSC/ interacting with the EIR respectively SGSN and CEIR:
- the MSC/SGSN is configured to send an IMEI for the mobile device to the EIR Verifying the request message, wherein the IMEI check request message carries at least the IMEI of the mobile device and the current ES; and, receives and according to the EIR Returning a verification result, performing network access control on the mobile device;
- the EIR is configured to receive the IMEI sent by the MSC/SGSN Checking the request message, querying whether there is a data record matching the mobile device in the local mobile device list, and returning the device status ES determined according to the data record as a check result to the MSC/SGSN, and if the data record relates only to the mobile device, deleting the data record from the local mobile device list; otherwise directly verifying the current ES in the request message with the IMEI Returning to the MSC/SGSN as a check result; transmitting a mobile device information update request message to the CEIR, wherein the mobile device information update request message carries the IMEI from the And verifying the information extracted in the request message; and receiving the first mobile device information update response message returned by the CEIR, editing it as a data record in the local mobile device list; or receiving the The second mobile device information update response message returned by the CEIR;
- the CEIR is configured to receive the EIR The transmitted mobile device information update request message and the ES carried in the mobile device information update request message and the ES of the corresponding mobile device stored in the IMEI central database Comparing; if not, returning a first mobile device information update response message to the EIR, the first mobile device information update response message carrying the IMEI according to a predetermined rule Information extracted in the central database; if consistent, or returning a second mobile device information update response message to the EIR, the second mobile device information update response message indicates The normal reception of the mobile device information update request message.
- the EIR device for quickly verifying the IMEI includes:
- a verification request receiving unit configured to receive an IMEI verification request message from the MSC/SGSN; wherein The IMEI check request message carries at least one IMEI of the mobile device and the current ES;
- a verification request decoding unit configured to decode information carried in the IMEI verification request message
- a mobile device list management unit configured to manage the local mobile device list
- An identifier checking unit is connected to the check request decoding unit, configured to query whether there is a data record in the local mobile device list that matches the mobile device information decoded by the check request decoding unit, and The ES in the data record is used as a check result, and if the data record only relates to the mobile device, triggering the mobile device list management unit to delete the data record; otherwise directly decoding the current ES As a result of the verification;
- a verification response coding unit coupled to the identity verification unit, for encoding the verification result into the IMEI verification response message
- a verification response sending unit configured to send the IMEI check response message to the MSC/SGSN;
- a mobile device information update request encoding unit coupled to the verification request decoding unit, configured to encode the information decoded by the verification request decoding unit into a mobile device information update request message
- a mobile device information update request sending unit configured to send the mobile device information update request message to the CEIR
- a mobile device information update response receiving unit for using the CEIR Receiving a first mobile device information update response message, or further receiving a second mobile device information update response message; the first mobile device information update response message carrying the IMEI according to a predetermined rule The information extracted in the central database, the second mobile device information update response message indicating normal reception of the mobile device information update request message;
- a mobile device information update response decoding unit configured to decode the first or second mobile device information update response message, if the first mobile device information update response message is triggered, trigger the mobile device list management unit to edit the mobile device for A piece of data record in the list of local mobile devices.
- the CEIR device for quickly verifying the IMEI includes:
- Mobile device information update request receiving unit for receiving from EIR Mobile device information update request message, wherein the mobile device information update request message carries at least one IMEI of the mobile device and the current ES;
- a mobile device information update request decoding unit configured to decode information carried in the mobile device information update request message
- An IMEI central database management unit for providing a human machine interface to manage the IMEI Mobile device information stored in the central database
- An update processing unit coupled to the mobile device information update request decoding unit, the IMEI central database, for Querying, in the IMEI central database, the ES of the mobile terminal, and sending it to the mobile device list remote management unit together with the ES decoded in the mobile device information update request message; Updating information related to the mobile terminal in the IMEI central database according to the mobile device information update request message;
- a mobile device list remote management unit coupled to the update processing unit, for receiving two ESs from the update processing unit Compare; if not, extract information from the IMEI central database according to predetermined rules And triggering the mobile device information update response coding unit; if consistent, or directly triggering the mobile device information update response coding unit;
- a mobile device information update response encoding unit configured to trigger according to the mobile device list remote management unit, if the presence Generating the first mobile device information update response message according to the information extracted from the IMEI central database according to a predetermined rule; otherwise, or generating a second mobile device information update response message;
- the first mobile device information update response message carries information extracted from the IMEI central database according to a predetermined rule, and the second mobile device information update response message indicates Normal reception of the mobile device information update request message;
- a mobile device information update response sending unit for using the EIR Sending the first or second mobile device information update response message for subsequent verification use.
- the technical solution provided by the present invention uses the received mobile device information for the next IMEI check , avoiding real-time remote query during the verification process, effectively improving the time response index, achieving the purpose of quickly verifying IMEI and reducing construction costs; Only the mobile device whose previous device status changed is updated, which saves system resources; and the description of the local mobile device list in the EIR device is deleted immediately after use, which not only further improves IMEI The speed of verification can also avoid the use of large database software, thus achieving the purpose of reducing construction costs.
- Figure 1 is a flow chart of IMEI request and verification
- Figure 2 is a flow chart of authentication encryption and IMEI verification
- Figure 3 is a flow chart of IMEI verification by CEIR
- FIG. 5 is a flowchart of processing an MSC according to an embodiment of the present invention.
- FIG. 6 is a flowchart of processing of an SGSN in an embodiment of the present invention.
- FIG. 9 is a general structural diagram of a system in an embodiment of the present invention.
- FIG. 10 is a system structural diagram of an MSC/SGSN in an embodiment of the present invention.
- FIG. 11 is a system structural diagram of an EIR in an embodiment of the present invention.
- Figure 12 is a system configuration diagram of CEIR in the embodiment of the present invention.
- a method of quickly verifying an international mobile device identity is provided.
- the technical principle of the present invention is: performing IMEI verification EIR decomposes the IMEI check into ES change identification and ES update. In a single IMEI check for a specific mobile device, only one of the phases is performed; that is, EIR is at a certain time. The ES change for a particular mobile device identified in the IMEI check will be updated in the next IMEI check for that particular mobile device.
- the present invention provides a method for quickly verifying an international mobile device identity, comprising the following steps:
- Step 1 The EIR receives the IMEI for the MSC/SGSN for a mobile device. After verifying the request message, querying whether there is a data record matching the mobile device in the local mobile device list, and returning the ES determined according to the data record as a check result to the MSC/SGSN And deleting the data record from the local mobile device list if the data record only relates to the mobile device; otherwise returning directly to the current ES as the check result in the IMEI check request message MSC/SGSN; wherein the IMEI check request message carries at least the IMEI of the mobile device and the current ES, and preferably, further includes IMSI and MSISDN Information such as will be described below;
- Step 2 EIR to CEIR Sending a mobile device information update request message; wherein the mobile device information update request message carries information extracted from the IMEI check request message, including the IMEI of the mobile device and the current ES , preferably, also includes information such as IMSI and MSISDN;
- Step 3 The CEIR sends the ES and the IMEI carried in the mobile device information update request message.
- the ES of the corresponding mobile device stored in the central database is compared; if not, the EIR is Returning a first mobile device information update response message carrying information extracted from the IMEI central database according to a predetermined rule; if consistent, or also to the EIR Returning to the second mobile device information update response message, the second mobile device information update response message indicating normal reception of the mobile device information update request message; Returning the second mobile device information update response message is not a necessary step, and a person skilled in the art may return no information or periodically return information indicating normal reception according to actual needs, since it does not substantially affect the technical solution of the present invention. This will not be repeated here;
- Step four EIR After receiving the first mobile device information update response message, edit it as a data record in the local mobile device list; of course, those skilled in the art can understand that if EIR Receiving the returned second mobile device information update response message, no action is required.
- the present invention adopts the method of first identifying and re-updating, the identification result of the current check is used for the next check to replace the recognition result of the current check in the prior art for the current check. So every IMEI In the verification, there is no need to wait for the response of the CEIR, but it can immediately return a verification result to the MSN/SGSN, so the response time is determined and immediate, which substantially shortens the verification process and improves the verification efficiency;
- the present invention uses the identification result of the current verification for the next verification, so that the EIR has a comfortable time (ie, two IMEIs). Verifying the time between requests) to query CEIR's IMEI central database, thus reducing the performance requirements for EIR equipment and CEIR equipment in terms of processing speed and reducing construction costs;
- the present invention adopts the method of identifying and updating again, and only updates the mobile device whose ES changes, avoiding the existing IMEI. A large number of repeated and unnecessary updates to the ES of the mobile device in the verification technology, saving system resources;
- the local mobile device list stored by the EIR device in the present invention is generally in a state close to the empty table; on the one hand, this makes the MSC/SGSN from the EIR in the IMEI check process of the present invention.
- the time interval between the device receiving the verification request and the verification response is relatively fixed and far lower than the existing IMEI verification technology, further improving the speed of the IMEI check; on the other hand, making the EIR
- the list of local mobile devices stored by the device is generally short, which avoids the use of large database software, thereby reducing the construction cost;
- the improvement measures taken by the present invention to update the ES change identified in the verification at the next verification will undoubtedly result in The delay in the effective time of the IMEI check.
- the frequency of IMEI verification for mobile devices is high, and it can reach 1 ⁇ 2 per hour during busy hours (the period with the highest traffic volume).
- the ES change cycle for mobile devices often reaches months or longer.
- the uncertainty of the triggering event (such as user boot, location update, etc.) itself is checked, and the delay caused by the above improvement measures at the effective time of the verification result is generally acceptable.
- the verification request message and the mobile device information update response message may further carry the IMSI and/or MSISDN of the mobile device to implement blocking of the illegal mobile terminal that copies the IMEI;
- the prior art passes on IMSI and / or MSISDN
- the present invention is capable of verifying IMSI and / or MSISDN with IMEI
- the verification synchronization is performed, and the present invention provides a corresponding technical solution, wherein the information extracted from the IMEI central database according to a predetermined rule in the third step may include:
- the information extracted by TAC is at least the ES under the corresponding index
- the information extracted by IMEI is at least the ES under the corresponding index
- the information extracted by ⁇ IMEI, IMSI> is at least the ES under the corresponding index
- the information extracted by ⁇ IMEI, MSISDN> is at least the ES under the corresponding index. ;
- CEIR The maintainers (generally network operators) are controlled according to actual needs.
- CEIR's IMEI central database is also managed by the maintainer;
- step 3 also includes the IMEI.
- the central database updates the information related to the mobile terminal according to the mobile device information update request message, for example, using information extracted from the mobile device information update request message, such as receiving an IMEI Verifying the time of the message, the source of the IMEI check message, and possibly the IMSI, MSISDN, etc., updating the corresponding records in the IMEI central database related to the IMEI;
- the maintainer can be notified by prompt or other means, and the maintainer adds data information and determines the corresponding ES.
- the next IMEI for the mobile device Checking so in the next round of IMEI check, it is queried whether there is a data record matching the mobile device in the local mobile device list, and the device status determined according to the data record is ES.
- the step of returning to the MSC/SGSN as a result of the verification may include:
- MSISDN For the data record of the index, ie if the IMEI and MSISDN of the mobile device involved in the IMEI verification process are the same as the index value of this record, the ES in this record will be As a result of the verification; thus, network access control based on a single ME individual unit can be realized, and can be deleted after use; the target is IMEI A mobile device that may have been illegally copied, whose current user can be a legitimate mobile user or a specific illegal mobile user (marked by MSISDN), so that the MSISDN checksum and IMEI can be performed. Verify the synchronization;
- ⁇ MSISDN >
- the IMEI of the mobile device involved in the IMEI check process is the same as the IMEI value in the record index but the MSISDN and the MSISDN in the record index If the value is different, if the ES exists in the record, the ES in the record is used as the check result.
- the blacklist status is used as the check result; thus, based on multiple MEs Network access control for individual units; the goal is that the IMEI may have been illegally copied and the current user is not a legitimate mobile user (marked by the MSISDN as a legitimate user, not a) mobile device, and thus The IMSI checksum is synchronized with the MSISDN checksum;
- the information of the legitimate mobile device can be set in the IMEI according to the above rules (6)(7).
- the IMEI and the corresponding information are respectively set for each cottage, which can effectively reduce the workload of the CEIR maintainer;
- the foregoing technical solution may divide the local mobile device list in the EIR into multiple sub-tables for storage and management according to the index type;
- the above cases (1)-(7) are only examples, and those skilled in the art can also perform verification of other mobile terminal information synchronously; but in any case, since there is no MSC/SGSN Waiting for the problem of verifying information, so it will not cause an increase in response time, and there will be no resource occupation and cost increase caused by multiple information interactions.
- EIR The list of local mobile devices stored by the device is no longer a whitelist, graylist, blacklist, or unknown device list in the traditional sense, but a list of instructions for updating the current ES of the mobile device, that is, EIR from CEIR.
- the received management command for the mobile device can be further understood as a certain mobile device that meets the preset rule as an ES directly specified in the command or an ES that can be determined according to the command. , for example, being whitelisted, grayed out, blacklisted, and unknown, etc.;
- MSC/SGSN Performing network access control on the mobile device according to the received verification result, that is, determining whether to allow the mobile device to access the network according to the received verification result;
- MSC/SGSN Upon receiving a trigger message such as a mobile device boot or location update, the information is obtained and encoded to generate an IMEI check request message and sent to the EIR; however, since the present invention encodes the current ES together to the IMEI In the verification request message, even the IMEI check request message may include information such as IMSI and MSISDN, so the MSC/SGSN Adaptation adjustment is also required in the encoding process; specifically, the IMEI verification request message is generated according to the 3GPP protocol standard, and the ES can be directly directly carried only when the current ES information is carried.
- the information is encoded into the extended container parameters that meet the 3GPP protocol standard. When IMSI, MSISDN, etc. are added, IMSI and MSISDN can be added. The information is encoded together into an extended container parameter that satisfies the 3GPP protocol standard;
- the EIR needs to decode the received IMEI check request message before performing a local mobile device list query.
- the codec operation of the check result between the EIR and the MSC/SGSN and the codec operation in the interaction between the EIR and the CEIR are also omitted here.
- the standard message specified in the 3GPP protocol Add the current ES of the mobile device to the 'Check IMEI' message, or further increase the parameters such as IMSI and MSISDN to expand to 'Extended Check
- the IMEI' message is sent to the EIR; the EIR receives the 'Extended Check IMEI' After the message, query the locally stored list of mobile devices.
- the ES determined according to the data record is used as a check result, otherwise the current ES is As a result of the check, the check result is then encoded as an 'Extended Check IMEI Ack' message to the MSC/SGSN; MSC/SGSN Determine whether to allow the mobile device to access the network according to the received verification result; EIR will include the IMEI, ES included in the received 'Extended Check IMEI' message And possible parameters such as IMSI and MSISDN are sent to CEIR in the form of 'Update ME Info Request' message; CEIR will receive the ES Compare with the ES of the corresponding mobile device stored in the IMEI central database to determine whether to update the list of mobile devices stored in the EIR, and if necessary to update the update instructions to 'Update ME Info Response' message and sent to EIR; EIR receives 'Update ME Info Response' Messages and updates to the list of local mobile devices; the maintainer of the CEIR updates the IMEI central database with the
- FIG. 4 shows a flow chart of a method provided by the present invention according to the above embodiment, comprising the following steps:
- Step S401 the MSC/SGSN sends an 'Extended Check to the EIR.
- IMEI' request message which is attached to the current ES of the mobile device based on the original 'Check IMEI' message.
- it may further include IMSI and MSISDN.
- Information such as the current ES is stored in the VLR ( Visit Location Register) or SGSN, MSC/SGSN Can be easily obtained;
- Step S402 the EIR queries the local mobile device list, If there is a data record matching the mobile device in the local mobile device list, the final ES is set according to the list requirement, otherwise the current ES is kept unchanged, and the EIR takes the obtained ES as the verification result.
- the 'Extended Check IMEI Ack' message is sent to the MSC/SGSN, MSC/SGSN Determining whether the mobile device is allowed to access the network according to the received verification result;
- Step S403 EIR sends 'Update ME Info Request' to CEIR Message, transmitting IMEI, current ES and possible IMSI, MSISDN and other mobile device related information to CEIR;
- Step S404 CEIR receives 'Update ME Info Request' Message and compare the ES information in the message with the ES information in the IMEI central database to determine if the corresponding IMEI ES in the EIR should be updated If an update is not required, send an 'Update ME Info Response' message indicating normal reception to the EIR and end the process, otherwise the send contains the EIR for update
- the 'Update ME Info Response' message of the instruction in the mobile device list is given to EIR. In general, it is the ES that will be queried from the IMEI central database.
- the identification information for the mobile device is encoded as a mobile device information update response message 'Update ME Info Response' as an update command to the EIR.
- Step S501 receiving an IMEI check trigger event, such as an identification request, an authentication encryption, or the like;
- Step S502 checking whether the IMEI verification process is started, and if not, ending the process;
- Step S503 acquiring IMEI, ES, and possible IMSI, MSISDN related to the mobile device.
- Step S504 setting an 'Extended Check IMEI' message: according to the 3GPP protocol
- the MAP_CHECK_IMEI primitive encodes IMEI as a standard 'Check IMEI' message, with possible additional information such as ES and IMSI, MSISDN, etc.
- the form of extensionContainer/ privateExtensionList/extId is encoded into MAP_CHECK_IMEI In the extension container of the primitive, where each extId can include up to 16 2-byte integers, encoded in ASN.1 mode;
- Step S505 sending an 'Extended Check IMEI' message to the EIR;
- Step S506 waiting for 'Extended Check IMEI Ack' from EIR Message
- Step S507 receiving 'Extended Check IMEI Ack' from EIR Message
- Step S508 according to 'Extended Check IMEI Ack' The check result in the message determines whether the mobile device is allowed to access the network.
- Step S601 receiving an IMEI check trigger event, such as an identification request, an authentication encryption, or the like;
- Step S602 checking whether the IMEI verification process is started, and if not, ending the process;
- Step S603 acquiring IMEI, ES, and possible IMSI, MSISDN related to the mobile device.
- Step S604 setting an 'Extended Check IMEI' message: according to the 3GPP protocol
- the MAP_CHECK_IMEI primitive encodes IMEI as a standard 'Check IMEI' message, with possible additional information such as ES and IMSI, MSISDN, etc.
- the form of extensionContainer/ privateExtensionList/extId is encoded into MAP_CHECK_IMEI In the extension container of the primitive, where each extId can include up to 16 2-byte integers, encoded in ASN.1 mode;
- Step S605 sending an 'Extended Check IMEI' message to the EIR;
- Step S606 waiting for 'Extended Check IMEI Ack' from EIR Message
- Step S607 receiving an 'Extended Check IMEI Ack' from the EIR Message
- Step S608 according to 'Extended Check IMEI Ack' The check result in the message determines whether the mobile device is allowed to access the network.
- Step S701 receiving an 'Extended Check IMEI' message
- Step S702 decoding the received 'Extended Check IMEI' message, parsing out IMEI, ES and possible parameters such as IMSI and MSISDN;
- Step S703 querying a local mobile device list
- Step S704 If the local mobile device list contains the data record that matches the current mobile device, the ES of the current mobile device needs to be changed, and the process goes to step S706;
- Step S705 using the ES parsed from the 'Extended Check IMEI' message As a result of the verification, the process proceeds to step S707;
- Step S706 Determine a final ES according to a query result of the local mobile device list, and use the verification result as a check result.
- Step S707 encoding the verification result as 'Extended Check IMEI Ack' Sending a message to the MSC/SGSN;
- Step S708 sending 'Update ME Info Request' to the CEIR Message, which contains information such as IMEI, current ES, and possible IMSI, MSISDN;
- Step S709 waiting for 'Update ME Info Response' from CEIR Message
- Step S710 receiving 'Update ME Info Response' from CEIR Message
- Step S711 from 'Update ME Info Response' Parse out all the parameters contained in the message;
- Step S712 if 'Update ME Info Response' The message does not include an instruction to update the local mobile device list, and the process ends.
- Step S713 if 'Update ME Info Response' The message contains an instruction to update the local mobile device list, then the 'Update ME Info Response' The information carried in the message is edited as a data record in the local mobile device list, and an update to the local mobile device list is implemented;
- the above steps are described based on the EIR IMEI verification process for a mobile device, when EIR At the same time, when IMEI check is performed for multiple mobile devices, the 'Update ME Info Request' message will carry information of multiple mobile devices, and 'Update ME The Info Response' message may also include update instructions for multiple mobile devices, in which case multiple data records in the local mobile device list will be edited simultaneously.
- Step S801 receiving an 'Update ME Info Request' message from the EIR
- Step S802 parsing the 'Update ME Info Request' message, obtaining IMEI, current ES and possible IMSI, MSISDN and other information;
- Step S803 querying the IMEI central database to obtain IMEI, ES and possible related to the mobile device Information such as IMSI and MSISDN;
- Step S804 the message from the 'Update ME Info Request' and the IMEI The ES of the central database is compared;
- Step S805 judging whether it is necessary to update the EIR according to the comparison result.
- Step S806 according to a predetermined rule from the IMEI Extract the information from the central database and use it as an update command.
- predetermined rules please refer to the above information extraction method, for example, TAC, IMEI, ⁇ IMEI, IMSI>, ⁇ IMEI, MSISDN>, ⁇ IMEI, IMSI, MSISDN>, ⁇ IMEI, ⁇ IMSI>, ⁇ IMEI, ⁇ MSISDN> is an index, but is not limited to the above extraction method;
- Step S807 encoding 'Update ME info Response'
- the message, the encoding object is either an update instruction obtained based on step S806, or a result of receiving the 'Update ME Info Request' message based on step S805;
- Step S808 sending an 'Update ME Info Response' message to the EIR.
- the IMEI central database ie from 'Update ME Info Information extracted from the Request' message, such as the time when the IMEI check message was received, the source of the IMEI check message, and possible IMSI, MSISDN, etc., to IMEI
- the records related to the IMEI in the central database are updated (not shown).
- a system for quickly verifying IMEI and the overall structure of system 900 is as shown in FIG. Included are CEIR device 910, EIR device 920, MSC device 930, and SGSN device 940.
- the quick check is performed by a specific embodiment below.
- the IMEI system 900 describes:
- MSC device 930 or SGSN device 940 receives IMEI for a mobile device
- the mobile device's current ES and possible IMSI, MSISDN and other information are extendedContainer/
- the privateExtensionList/extId method extends the standard 'Check IMEI' message and the resulting 'Extended Check'
- the IMEI' message is sent to the EIR device 920; the EIR device 920 parses the IMEI of the mobile device from the 'Extended Check IMEI' message , current ES and possible IMSI, MSISDN And parameterizing, and querying the locally stored list of mobile devices; if there is no data record matching the mobile device in the local mobile device list, for example, there is no IMEI with the mobile device For the indexed record, the current ES of the mobile device is used as a check result; otherwise, the ES determined according to the corresponding data record of the local mobile device list is used as a check result; on the one hand, the above check result is passed An 'Ex
- the CEIR device 910 obtains IMEI, ES and possible IMSI, MSISDN and other information corresponding to the mobile device from the IMEI central database query; The CEIR device 910 pairs the ESs contained in the received 'Update ME Info Request' message with the ESs queried from the IMEI central database. For comparison, if they are inconsistent, the mobile device list in the EIR device 920 needs to be updated, and the information extracted from the IMEI central database according to the predetermined rule is used as the update command and the pair. The result of receiving the 'Update ME Info Request' message is encoded into the 'Update ME Info Response' message and sent to the EIR device. 920, otherwise, the result of receiving the 'Update ME Info Request' message is encoded into 'Update ME info Response' The message is sent to the EIR device 920;
- the information extracted by the CEIR device 910 from the IMEI central database according to a predetermined rule may include:
- the information extracted by TAC is at least the ES under the corresponding index
- the information extracted by IMEI is at least the ES under the corresponding index
- the information extracted by ⁇ IMEI, IMSI> is at least the ES under the corresponding index
- the information extracted by ⁇ IMEI, MSISDN> is at least the ES under the corresponding index. ;
- the ES recorded in the EIR local mobile device list and stored in the IMEI central database of the CEIR ES includes: whitelisted, graylisted, blacklisted, and unknown; in particular, the EIR local mobile device list remains close to the empty table for most of the time, thus ensuring The interval between the 'Extended Check IMEI' message and the 'Update ME Info Request' message is relatively fixed and much lower than other common IMEIs. Calibration technique
- the system 900 for quickly verifying the IMEI is described below by way of a specific embodiment.
- the detailed description is intended to be illustrative, and not restrictive.
- the MSC device 9930/SGSN device 940 further includes: a data acquisition unit. 1001, verification request encoding unit 1002, verification request transmitting unit 1003, verification response receiving unit 1004, verification response decoding unit 1005, and network access control unit
- the data obtaining unit 1001 is configured to acquire information about an IMEI, a current ES, and a possible IMSI, MSISDN, and the like of the corresponding mobile device;
- the verification request coding unit 1002 used to encode the ES and possible IMSI, MSISDN and the like together with the IMEI into the IMEI check request message, and the specific coding mode is preferably according to 3GPP.
- the protocol standard encodes the obtained information into an IMEI check request message; the check request sending unit 1003 is configured to send the IMEI check request message to the EIR device 920.
- the check response receiving unit 1004 is configured to receive an IMEI check response message carrying the check result from the EIR device 920; the check response decoding unit 1005 is configured to The verification result is decoded in the IMEI check response message; the network access control unit 1006 is configured to perform network access control on the mobile device according to the check result.
- the EIR device 920 further includes: a verification request receiving unit 1101. a verification request decoding unit 1102, a local mobile device list 1103, a mobile device list management unit 1104, an identity verification unit 1105, and a verification response coding unit 1106 a verification response sending unit 1107, a mobile device information update request encoding unit 1108, a mobile device information update request transmitting unit 1109, and a mobile device information update response receiving unit 1110 And a mobile device information update response decoding unit 1111;
- the verification request receiving unit 1101 is configured to receive an IMEI from the MSC device 930/SGSN device 940 a verification request decoding unit 1102, configured to decode information carried in the IMEI verification request message, such as IMEI, current ES, and possible IMSI, Information such as MSISDN;
- the local mobile device list 1103 for storing records received from the CEIR device 910;
- the mobile device list management unit 1104 For managing the local mobile device list, the identifier verification unit 1105 is connected to the verification request decoding
- the data record matching the mobile device is an ES determined according to the data record as a check result, and if the data record only relates to the mobile device, triggering the mobile device list management unit 1104 Deleting the data record; otherwise, directly using the decoded current ES as a check result, simply speaking, according to the current ES carried in the IMEI check request message
- the check response coding unit 1106 is connected to the identifier check unit 1105, and is configured to encode the check result into the IMEI check response message; the check response sending unit 1107, configured to send the IMEI check response message to the original MSC device 930 or the SGSN device 940; the mobile device information update request coding unit 1108, And connected to the verification request decoding unit 1102, for decoding information that the verification request decoding unit 1102 decodes, such as IMEI, current ES, and possible IMSI, Mobile device information such as MSISDN is encoded into an 'Update ME Info Request' message; the mobile device information update request sending unit 1109 is
- the mobile device information update response decoding unit 1111 is configured to parse the information carried by the 'Update ME Info Response' message, If the update command for the local mobile device list is carried, the mobile device list management unit 1104 is triggered to edit it as the data record in the local mobile device list 1103;
- the query verification unit 1105 querying the local mobile device list specifically includes:
- the identity verification unit 1105 queries the local mobile device list 1103;
- ⁇ IMEI, ⁇ IMSI> or ⁇ IMEI on the mobile device ⁇ MSISDN> is the data record of the index, that is, there is such a data record, the IMEI indexing the data record is the same as the IMEI of the mobile device, but the data record is indexed
- the IMSI or MSISDN is different from the IMSI or MSISDN of the mobile device; then it is identified whether there is an ES in the data record, and the ES in the data record is The verification response encoding unit 1106 is triggered as a result of the verification, otherwise the verification response encoding unit 1106 is triggered by being blacklisted as a verification result.
- the CEIR device 910 further includes: a mobile device information update request receiving unit 1201. , mobile device information update request decoding unit 1202, update processing unit 1203, IMEI central database 1204, IMEI central database management unit 1205, Mobile device list remote management unit 1206, mobile device information update response encoding unit 1207 and mobile device information update response transmitting unit 1208; mobile device information update request receiving unit 1201, configured to receive an 'Update ME Info Request' message from the EIR device 920; the mobile device information update request decoding unit 1202 For parsing the IMEI, the current ES, and the possible IMSI, MSISDN, and the like from the 'Update ME Info Request' message; The IMEI central database 1204 is used for storage of mobile device information.
- the IMEI central database 1204 may be a distributed mass database as in the prior art; the IMEI central database management unit 1205, provided with CEIR Maintainer's human-machine interface, enabling maintainers to store mobile device information (IMEI, ES, and possibly IMSI, MSISDN) stored in the IMEI Central Database 1204 And managing; the update processing unit 1203 is connected to the mobile device information update request decoding unit 1202, the IMEI central database 1204, for using the IMEI The central database 1204 queries the ES of the mobile terminal and sends it to the mobile device list remote management unit 1206 along with the ES decoded in the mobile device information update request message.
- the IMEI central database 1204 queries the ES of the mobile terminal and sends it to the mobile device list remote management unit 1206 along with the ES decoded in the mobile device information update request message.
- the ES decoded in the Info Request' message extracts information from the IMEI central database as an update command according to a predetermined rule.
- the mobile device information update response coding unit 1207 is configured to The 'Update ME Info Response' message is encoded according to the trigger of the mobile device list remote management unit 1206, the 'Update ME Info The Response' message may include an update command, or may only include information indicating that the CEIR device 910 normally receives, of course, even if the same mobile terminal is carrying the update command, The 'Update ME Info Response' message can also carry the CEIR device 910 at the same time.
- the mobile device information update response sending unit 1208 is configured to send the EIR device to the EIR device.
- 920 sends an 'Update ME Info Response' message, the 'Update ME Info Response' message carries the pair 'Update
- the ME Info Request' message is received and/or an update command to the local mobile device list 1103 in the EIR device 920.
- the present invention also provides an EIR device and CEIR for quickly verifying IMEI.
- EIR device and CEIR for quickly verifying IMEI.
Landscapes
- Engineering & Computer Science (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Computer Security & Cryptography (AREA)
- Databases & Information Systems (AREA)
- Mobile Radio Communication Systems (AREA)
Abstract
Description
本发明涉及移动通信领域,尤其涉及一种快速校验国际移动设备标识的方法、系统、设备标识寄存器设备以及中央设备标识寄存器设备。 The present invention relates to the field of mobile communications, and in particular, to a method, system, device identification register device, and central device identification register device for quickly verifying an international mobile device identity.
在 GSM 、 WCDMA 和 TD-SCDMA 数字蜂窝移动通信网中, IMEI(International Mobile station Equipment Identity ,国际移动设备标识 ) 唯一地标识一个移动设备的个体单元。因此,可通过启用 IMEI 校验机制来实现基于 ME ( Mobile Equipment ,移动设备)型号或单个单元的网络访问控制,如防止被盗、故障及其它非法设备接入网络等。 In GSM, WCDMA and TD-SCDMA digital cellular mobile communication networks, IMEI (International Mobile Station Equipment Identity, International Mobile Equipment Identity) An individual unit that uniquely identifies a mobile device. Therefore, it can be implemented based on ME (Mobile Equipment) by enabling IMEI verification mechanism. , mobile device) model or single unit network access control, such as preventing theft, failure and other illegal devices access to the network.
IMEI 由 15 位数字组成,所有数字为二进制编码的 0 至 9 的十进制数字,超过此范围的数字无效。根据 3GPP 协议,具体的构成方式为 TAC-SNR-SP ,其中: TAC(Type Allocation Code, 型号分配码 ) 为 8 位数字,; SNR( Serial Number ,序列号 ) 为 6 位数字,同一类型的移动设备不存在两个相同的 SNR 号码; SP (Spare ,备用号码 ) 为 1 位数字,经由移动台传输时设置为 0 ,移动台中存储的 IMEI 一般补充 1 位数字作为校验位以防止出现人工错误。 IMEI consists of 15 digits, all numbers are binary coded 0 to 9 The decimal number, the number above this range is invalid. According to the 3GPP protocol, the specific configuration is TAC-SNR-SP, where: TAC (Type Allocation Code, The model allocation code is 8 digits; the SNR (Serial Number) is 6 digits, and the same type of mobile device does not have two identical SNR numbers; SP (Spare, alternate number) is 1 digit, set to 0 when transmitting via mobile station, and IMEI stored in mobile station is usually supplemented 1 The bit number is used as a check digit to prevent human error.
IMEISV(International Mobile station Equipment Identity and Software Version Number ,国际移动设备标识和软件版本号 ) 共 16 位数字,是由 IMEI 增加 SVN(Software Version Number ,软件版本号 ) 构成, SVN 为 2 位数字,具体的构成方式为 TAC-SNR-SVN 。 IMEISV (International Mobile station Equipment Identity and Software Version Number, International Mobile Device ID and Software Version Number) A total of 16 digits, which was increased by IMEI The SVN (Software Version Number) is composed of two digits. The specific configuration is TAC-SNR-SVN.
EIR( Equipment Identity Register ,设备标识寄存器 ) 包含一个或几个用于存储 IMEI 的数据库,主要完成对移动设备的识别、监视闭锁等功能。 IMEI 可存储在白名单、灰名单和黑名单三个独立的列表中: EIR ( Equipment Identity Register) It contains one or several databases for storing IMEI, and mainly performs functions such as identification of mobile devices, monitoring and blocking. IMEI can be stored in three separate lists of whitelists, greylisters, and blacklists:
● 白名单中保存所有允许使用的设备标识的号段; ● The number range of all allowed device IDs is saved in the whitelist;
● 黑名单中保存所有被闭锁的设备标识; ● All blocked device IDs are saved in the blacklist.
● 灰名单中的设备不闭锁,但被网络记录(为了统计和其他目的)。 ● Devices in the graylist are not blocked but are recorded by the network (for statistical and other purposes).
ES(Equipment Status ,设备状态 ) 是 IMEI 在 EIR 中的存储状态,分别为:被列入白名单、被列入灰名单、被列入黑名单和未知。 EIR 能够根据管理员和 CEIR ( Central Equipment Identity Register, 中央设备标识寄存器)的要求更新所存储的 IMEI 及 ES 。常见的 EIR 实现技术中 , 一般对 ES 采用隐式存储,即分别设置白名单、灰名单、黑名单等数据表,根据 IMEI 是否出现在某一数据表中确定该 IMEI 的状态。在某些情况下,一个 IMEI 可能同时出现在不同的名单中,从而产生查询结果的歧义。 ES (Equipment Status) is IMEI at EIR The storage status in the list is: whitelisted, grayed out, blacklisted, and unknown. EIR can be based on administrators and CEIR (Central Equipment The Identity Register, Central Device Identification Register) requires updating the stored IMEI and ES. Common EIR implementation techniques, generally for ES Implicit storage is used, that is, a whitelist, a graylist, a blacklist, and the like are respectively set, and the status of the IMEI is determined according to whether IMEI appears in a certain data table. In some cases, an IMEI It may appear in different lists at the same time, resulting in ambiguity in the results of the query.
IMSI(International Mobile Subscriber Identity ,国际移动用户标识 ) 唯一地标识一个移动用户,共 15 位数字,由 MCC ( Mobile Country Code ,移动国家码)、 MNC ( Mobile Network Code ,移动网络码)和 MSIN ( Mobile Subscriber Identification Number ,移动用户识别号)组成。在某些已知应用技术中,已将 IMSI 用于完善 EIR 功能。 IMSI (International Mobile Subscriber Identity) , International Mobile User Identity) uniquely identifies a mobile user with a total of 15 digits, by MCC (Mobile Country Code), MNC ( Mobile Network Code, Mobile Network Code) and MSIN (Mobile Subscriber Identification Number) , mobile user identification number). In some known application technologies, IMSI has been used to improve EIR functionality.
除了 IMSI 分离,在移动台进行任何接入尝试时都可以进行 IMEI 校验,或者按照移动通信运营商的安全策略,在一个已建立的呼叫中,专用资源可用时执行 IMEI 校验。当收到从 EIR 返回的响应结果为 ' 被列入黑名单 ' 或 ' 未被列入白名单 ' 时,网络应禁止任何接入尝试或正在进行的呼叫,并向用户给出 ' 非法终端 ' 的提示,这相当于鉴权失败,因此,禁止所有的呼叫和位置更新,只能完成紧急呼叫。 In addition to IMSI separation, IMEI can be performed when any access attempt is made by the mobile station. Verify, or in accordance with the mobile communication operator's security policy, perform IMEI verification when dedicated resources are available in an established call. When the response returned from EIR is received as 'blacklisted' or When 'not whitelisted', the network should prohibit any access attempts or ongoing calls and give the user an 'illegal terminal' The prompt, this is equivalent to authentication failure, therefore, all calls and location updates are forbidden and only emergency calls can be completed.
另外 ,IMEI 校验机制也已被用于 IMS ( IP Multimedia Subsystem , IP 多媒体子系统)等设备的接入管理中。 In addition, the IMEI verification mechanism has also been used for IMS (IP Multimedia Subsystem, IP multimedia subsystem) and other devices in the access management.
EIR 可根据 MSC(Mobile-service Switch Center ,移动业务交换中心 )/SGSN(Serving GPRS Support Node ,服务 GPRS 支持节点 ) 的要求,校验 IMEI 及其状态,并将结果告知 MSC/SGSN 。 EIR can be based on MSC (Mobile-service Switch Center, Mobile Service Switching Center) ) / SGSN (Serving GPRS Support Node), verify IMEI and its status, and inform the result MSC/SGSN.
白名单应该使用 IMEI ,黑名单和灰名单也可使用 IMEISV 。 IMEI 的类型可以是未知的。 MSC/SGSN 可配置是否闭锁未知设备。 Whitelists should use IMEI, blacklists and graylists can also use IMEISV. The type of IMEI can be unknown. The MSC/SGSN can be configured to block unknown devices.
MSC 与 EIR 之间的接口为 F 接口,负责在 MSC 与 EIR 之间交换数据。 F 接口信令采用 MAP 协议。 EIR 通过 F 接口完成电路域中对移动终端 IMEI 状态的校验。在核心网的演进过程中, MSC 分裂为 MSC 服务器( MSC Server )和 MGW ( Media GateWay ,移动媒体网关)两个网元。 F 接口由 MSC 服务器继承。如无特殊说明,所述 F 接口将包括 EIR 与 MSC 和 MSC 服务器的接口,并不再严格区分,所述 MSC 设备也包括 MSC 服务器设备。 The interface between the MSC and the EIR is the F interface, which is responsible for exchanging data between the MSC and the EIR. F Interface signaling uses the MAP protocol. The EIR completes the verification of the IMEI status of the mobile terminal in the circuit domain through the F interface. During the evolution of the core network, the MSC splits into an MSC server ( MSC Server) and MGW (Media GateWay, Mobile Media Gateway) two network elements. The F interface is inherited by the MSC server. Unless otherwise stated, the F The interface will include an interface between the EIR and the MSC and the MSC server, and the MSC device also includes the MSC server device.
SGSN 与 EIR 之间的接口为 Gf 接口,负责在 SGSN 与 EIR 之间交换数据。 Gf 接口信令采用 MAP 协议。 EIR 通过 Gf 接口完成分组域中对移动终端 IMEI 状态的校验。 The interface between the SGSN and the EIR is the Gf interface, which is responsible for exchanging data between the SGSN and the EIR. Gf Interface signaling uses the MAP protocol. The EIR completes the verification of the IMEI status of the mobile terminal in the packet domain through the Gf interface.
具体地, IMEI 的请求及校验过程如图 1 所示,包括以下步骤: Specifically, the request and verification process of the IMEI is as shown in FIG. 1, and includes the following steps:
步骤 S101 , MSC/SGSN 向 MS ( Mobile Station ,移动台)发送 'Identity Request(Identity Type)' 消息; Step S101, the MSC/SGSN sends to the MS (Mobile Station, mobile station) 'Identity Request (Identity Type)' message;
步骤 S102 , MS 响应 'Identity Response(Mobile Identity ) ' ; Step S102, the MS responds with 'Identity Response (Mobile Identity ) ' ;
步骤 S103 ,如果 MSC/SGSN 决定用 EIR 校验 IMEI ,则向 EIR 发送 'Check IMEI(IMEI)' 消息,否则,结束本进程; Step S103, if the MSC/SGSN decides to verify the IMEI by EIR, it sends to the EIR. 'Check IMEI(IMEI)' message, otherwise, end the process;
步骤 S104 , EIR 返回 'Check IMEI Ack (IMEI)' 消息, MSC/SGSN 根据所收到的校验结果确定是否允许该移动设备接入网络。 Step S104, EIR returns a 'Check IMEI Ack (IMEI)' message, The MSC/SGSN determines whether the mobile device is allowed to access the network according to the received verification result.
具体地,鉴权加密及 IMEI 校验过程如图 2 所示,包括以下步骤: Specifically, the authentication encryption and IMEI verification process is as shown in FIG. 2, and includes the following steps:
步骤 S201 , MSC/SGSN 向 MS 发送 'Authentication and Ciphering Request' 消息,消息中包含 IMEISV 参数; Step S201, the MSC/SGSN sends an 'Authentication and Ciphering Request' message containing the IMEISV parameter;
步骤 S202 , MS 响应 'Authentication and Ciphering Response' ; Step S202, MS responds to 'Authentication and Ciphering Response' ;
步骤 S203 ,如果 MSC/SGSN 决定用 EIR 校验 IMEI ,则向 EIR 发送 'Check IMEI(IMEI)' 消息,否则,结束本进程; Step S203: If the MSC/SGSN decides to verify the IMEI by EIR, it sends to the EIR. 'Check IMEI(IMEI)' message, otherwise, end the process;
步骤 S204 , EIR 返回 'Check IMEI Ack(IMEI)' 消息, MSC/SGSN 根据所收到的校验结果确定是否允许该移动设备接入网络。 Step S204, EIR returns a message of 'Check IMEI Ack (IMEI)', The MSC/SGSN determines whether the mobile device is allowed to access the network according to the received verification result.
上述 IMEI 校验过程中 MSC/SGSN 与 EIR 之间的数据交换功能由 3GPP TS 29.002 中定义的 MAP_CHECK_IMEI 原语来完成。 MAP_CHECK_IMEI 原语中携带多个与移动台相关的参数,如调用号 (Invoke ID) 、 IMEI 、 IMEISV 、请求的设备信息、设备状态、 BMUEF ( Bit Map of UE Faults ,用户设备故障位图)、用户错误信息、及提供者错误信息等。 The data exchange function between MSC/SGSN and EIR in the above IMEI check process is performed by 3GPP TS. The MAP_CHECK_IMEI primitive defined in 29.002 is completed. The MAP_CHECK_IMEI primitive carries multiple mobile-related parameters, such as the call number (Invoke) ID), IMEI, IMEISV, requested device information, device status, BMUEF (Bit Map of UE Faults , user equipment fault bitmap), user error information, and provider error information.
MAP_CHECK_IMEI 原语具体定义如表 1 ( R4 及以前版本)和表 2 ( R5 及以后版本)所示;其中,涉及下列为参数分类的符号: M 表示参数内容为必选项, O 表示参数内容为服务提供者任选项, C 表示条件参数,以及,( = )附加在前述标记之后,表示参数取与左边显示的参数相同的值: The MAP_CHECK_IMEI primitives are defined as shown in Table 1 (R4 and previous versions) and Table 2 (R5). And later versions); among them, the following symbols are classified as parameters: M means that the parameter content is mandatory, O means the parameter content is the service provider option, C means the condition parameter, and, ( = ) appended to the preceding token, indicating that the parameter takes the same value as the one shown on the left:
表 1 : R4 及以前版本中规定的 MAP_CHECK_IMEI 原语 Table 1: MAP_CHECK_IMEI primitives specified in R4 and previous versions
表 2 : R5 及以后版本中规定的 MAP_CHECK_IMEI 原语 Table 2: MAP_CHECK_IMEI primitives specified in R5 and later
MAP_CHECK_IMEI 原语的具体编码方式,按照 3GPP 协议 TS 29.002 ,不同版本分别如下: The specific encoding method of the MAP_CHECK_IMEI primitive is in accordance with the 3GPP protocol TS 29.002 The different versions are as follows:
( 1 ) R4 及以前版本 (1) R4 and previous versions
checkIMEI OPERATION checkIMEI OPERATION
ARGUMENT ARGUMENT
imei OCTET STRING ( SIZE( 8 ) ) Imei OCTET STRING ( SIZE( 8 ) )
RESULT RESULT
equipmentStatus ENUMERATED { equipmentStatus ENUMERATED {
whiteListed ( 0 ), whiteListed ( 0 ),
blackListed ( 1 ), blackListed ( 1 ),
greyListed ( 2 ) } greyListed ( 2 ) }
ERRORS { ERRORS {
-- systemFailure -- localValue : 34, -- systemFailure -- localValue : 34,
-- dataMissing -- localValue : 35, -- dataMissing -- localValue : 35,
-- unknownEquipment -- localValue : 7} -- unknownEquipment -- localValue : 7}
::= localValue : 43 ::= localValue : 43
( 2 ) R5 及 R6 ( 2 ) R5 and R6
checkIMEI OPERATION ::= { checkIMEI OPERATION ::= {
ARGUMENT SEQUENCE { ARGUMENT SEQUENCE {
imei OCTET STRING ( SIZE( 8 ) ), Imei OCTET STRING ( SIZE( 8 ) ),
requestedEquipmentInfo BIT STRING { requestedEquipmentInfo BIT STRING {
equipmentStatus (0 ), equipmentStatus (0),
bmuef (1 )} ( SIZE( 2 .. 8 ) ), Bmuef (1 )} ( SIZE( 2 .. 8 ) ),
extensionContainer SEQUENCE { extensionContainer SEQUENCE {
privateExtensionList [0] IMPLICIT SEQUENCE ( SIZE( 1 .. 10 ) ) OF privateExtensionList [0] IMPLICIT SEQUENCE ( SIZE( 1 .. 10 ) ) OF
SEQUENCE { SEQUENCE {
extId MAP-EXTENSION .&extensionId ( { extId MAP-EXTENSION .&extensionId ( {
, ,
...} ) , ...} ) ,
extType MAP-EXTENSION .&ExtensionType ( { extType MAP-EXTENSION .&ExtensionType ( {
, ,
...} { @extId } ) OPTIONAL} OPTIONAL, ...} { @extId } ) OPTIONAL} OPTIONAL,
pcs-Extensions [1] IMPLICIT SEQUENCE { pcs-Extensions [1] IMPLICIT SEQUENCE {
... } OPTIONAL, ... } OPTIONAL,
... } OPTIONAL, ... } OPTIONAL,
... } ... }
RESULT SEQUENCE { RESULT SEQUENCE {
equipmentStatus ENUMERATED { equipmentStatus ENUMERATED {
whiteListed ( 0 ), whiteListed ( 0 ),
blackListed ( 1 ), blackListed ( 1 ),
greyListed ( 2 ) } OPTIONAL, greyListed ( 2 ) } OPTIONAL,
bmuef SEQUENCE { Bmuef SEQUENCE {
uesbi-IuA [0] IMPLICIT BIT STRING ( SIZE( 1 .. 128 ) ) OPTIONAL, uesbi-IuA [0] IMPLICIT BIT STRING ( SIZE( 1 .. 128 ) ) OPTIONAL,
uesbi-IuB [1] IMPLICIT BIT STRING ( SIZE( 1 .. 128 ) ) OPTIONAL, uesbi-IuB [1] IMPLICIT BIT STRING ( SIZE( 1 .. 128 ) ) OPTIONAL,
... } OPTIONAL, ... } OPTIONAL,
extensionContainer [0] IMPLICIT SEQUENCE { extensionContainer [0] IMPLICIT SEQUENCE {
privateExtensionList [0] IMPLICIT SEQUENCE ( SIZE( 1 .. 10 ) ) OF privateExtensionList [0] IMPLICIT SEQUENCE ( SIZE( 1 .. 10 ) ) OF
SEQUENCE { SEQUENCE {
extId MAP-EXTENSION .&extensionId ( { extId MAP-EXTENSION .&extensionId ( {
, ,
...} ) , ...} ) ,
extType MAP-EXTENSION .&ExtensionType ( { extType MAP-EXTENSION .&ExtensionType ( {
, ,
...} { @extId } ) OPTIONAL} OPTIONAL, ...} { @extId } ) OPTIONAL} OPTIONAL,
pcs-Extensions [1] IMPLICIT SEQUENCE { pcs-Extensions [1] IMPLICIT SEQUENCE {
... } OPTIONAL, ... } OPTIONAL,
... } OPTIONAL, ... } OPTIONAL,
... } ... }
ERRORS { ERRORS {
systemFailure | systemFailure |
dataMissing | dataMissing |
unknownEquipment } unknownEquipment }
CODE local : 43 CODE local : 43
} }
( 3 ) R7 及以后版本 (3) R7 and later versions
checkIMEI OPERATION ::= { checkIMEI OPERATION :: = {
ARGUMENT ARGUMENT
CheckIMEI-Arg CheckIMEI-Arg
RESULT RESULT
CheckIMEI-Res CheckIMEI-Res
ERRORS { ERRORS {
systemFailure | systemFailure |
dataMissing | dataMissing |
unknownEquipment} unknownEquipment}
CODE local:43 } CODE local:43 }
其中, among them,
CheckIMEI-Arg ::= SEQUENCE { CheckIMEI-Arg ::= SEQUENCE {
imei IMEI, Imei IMEI,
requestedEquipmentInfo RequestedEquipmentInfo, requestedEquipmentInfo RequestedEquipmentInfo,
extensionContainer ExtensionContainer OPTIONAL, extensionContainer ExtensionContainer OPTIONAL,
...} ...}
CheckIMEI-Res ::= SEQUENCE { CheckIMEI-Res ::= SEQUENCE {
equipmentStatus EquipmentStatus OPTIONAL, equipmentStatus EquipmentStatus OPTIONAL,
bmuef UESBI-Iu OPTIONAL, Bmuef UESBI-Iu OPTIONAL,
extensionContainer [0] ExtensionContainer OPTIONAL, extensionContainer [0] ExtensionContainer OPTIONAL,
...} ...}
RequestedEquipmentInfo ::= BIT STRING { RequestedEquipmentInfo ::= BIT STRING {
equipmentStatus (0), equipmentStatus (0),
bmuef (1)} (SIZE (2..8)) Bmuef (1)} (SIZE (2..8))
-- exception handling: reception of unknown bit assignments in the -- exception handling: reception of unknown bit Assignments in the
-- RequestedEquipmentInfo data type shall be discarded by the receiver -- RequestedEquipmentInfo data type shall be Discarded by the receiver
UESBI-Iu ::= SEQUENCE { UESBI-Iu ::= SEQUENCE {
uesbi-IuA [0] UESBI-IuA OPTIONAL, uesbi-IuA [0] UESBI-IuA OPTIONAL,
uesbi-IuB [1] UESBI-IuB OPTIONAL, uesbi-IuB [1] UESBI-IuB OPTIONAL,
...} ...}
UESBI-IuA ::= BIT STRING (SIZE(1..128)) UESBI-IuA ::= BIT STRING (SIZE(1..128))
-- See 3GPP TS 25.413 -- See 3GPP TS 25.413
UESBI-IuB ::= BIT STRING (SIZE(1..128)) UESBI-IuB ::= BIT STRING (SIZE(1..128))
-- See 3GPP TS 25.413 -- See 3GPP TS 25.413
EquipmentStatus ::= ENUMERATED { EquipmentStatus ::= ENUMERATED {
whiteListed (0), whiteListed (0),
blackListed (1), blackListed (1),
greyListed (2)} greyListed (2)}
extensionContainer SEQUENCE { extensionContainer SEQUENCE {
privateExtensionList [0] IMPLICIT SEQUENCE ( SIZE( 1 .. 10 ) ) OF privateExtensionList [0] IMPLICIT SEQUENCE ( SIZE( 1 .. 10 ) ) OF
SEQUENCE { SEQUENCE {
extId MAP-EXTENSION .&extensionId ( { extId MAP-EXTENSION .&extensionId ( {
, ,
...} ) , ...} ) ,
extType MAP-EXTENSION .&ExtensionType ( { extType MAP-EXTENSION .&ExtensionType ( {
, ,
...} { @extId } ) OPTIONAL} OPTIONAL, ...} { @extId } ) OPTIONAL} OPTIONAL,
pcs-Extensions [1] IMPLICIT SEQUENCE { pcs-Extensions [1] IMPLICIT SEQUENCE {
... } OPTIONAL, ... } OPTIONAL,
... } OPTIONAL} ... } OPTIONAL}
通过对 3GPP 协议中上述各版本对 MAP_CHECK_IMEI 原语定义和编码方式的比较可知: R4 及以前版本规定了的 MAP_CHECK_IMEI 原语的最基本内容,即请求消息参数中包含 IMEI ,而响应消息参数中包含 ES ; R5 及 R6 在以前版本之上对 MAP_CHECK_IMEI 编码方式的结构和内容均做出了较大的改进,一个主要特征是增加扩展容器( Extension Container )参数,能够携带用户自定义信息,因此,可根据用户需求对标准的 'Check IMEI' 消息进行扩展; R7 及以后版本尚未对 R5 及 R6 做进一步的改进。 By comparing the definitions and encoding methods of the MAP_CHECK_IMEI primitives in the above versions of the 3GPP protocol, it is known: The most basic content of the MAP_CHECK_IMEI primitive specified by R4 and previous versions, that is, the request message parameter contains IMEI, and the response message parameter contains ES; R5 and R6. On the previous version, the structure and content of the MAP_CHECK_IMEI encoding method have been greatly improved. One main feature is to add an extension container (Extension Container). Parameters, which can carry user-defined information, so the standard 'Check IMEI' message can be extended according to user requirements; R7 and later versions are not yet available for R5 and R6 Make further improvements.
可以看出,由于最初校验 IMEI 的目的被设定为阻止故障设备和被盗设备接入移动网络,因此在 R4 及以前版本中对 IMEI 进行校验时,与 IMEI 对应的 ES 是移动设备是否合法的唯一依据,即 EIR 通常采用如下方式完成 IMEI 校验: It can be seen that since the purpose of initially verifying the IMEI is set to prevent the faulty device and the stolen device from accessing the mobile network, it is in R4. When the IMEI is verified in the previous version, the ES corresponding to the IMEI is the only basis for the validity of the mobile device. That is, the EIR usually performs the IMEI check as follows:
● 从 MSC/SGSN 接收 'Check IMEI' 消息,解析出 IMEI ,查询以 IMEI 为索引的移动设备列表获得与之对应的 ES ,并将其作为 IMEI 校验结果发送回所述 MSC/SGSN ; ● Receive 'Check IMEI' message from MSC/SGSN, parse out IMEI, query with IMEI Obtaining an ES corresponding to the indexed mobile device list and sending it back to the MSC/SGSN as an IMEI check result;
● 从 MSC/SGSN 接收 'Check IMEI' 消息,解析出 IMEI 并从中提取 TAC ,查询以 TAC 为索引的移动设备列表获得与之对应的 ES ,并将其做为 IMEI 校验结果发送回所述 MSC/SGSN ; ● Receive 'Check IMEI' message from MSC/SGSN, parse out IMEI and extract TAC from it Querying the list of mobile devices indexed by TAC to obtain the corresponding ES, and sending it back to the MSC/SGSN as an IMEI check result;
以 IMEI 为索引的 IMEI 校验方式实现了基于移动设备 ME 个体单元的网络访问控制,而以 TAC 为索引的 IMEI 校验方式则实现了基于移动设备 ME 型号的网络访问控制。 The IMEI-based IMEI verification method implements network access control based on mobile device ME individual units. The TEI-indexed IMEI check method implements network access control based on the mobile device ME model.
显然,上述 R4 及以前版本的 IMEI 校验机制无法防范 IMEI 被非法复制问题:如果某 IMEI 合法,则非法复制了该 IMEI 的移动设备同样会被认为合法,并可顺利接入移动网络。 Obviously, the above IM4 verification mechanism of R4 and previous versions cannot prevent IMEI from being illegally copied: if an IMEI If it is legal, the mobile device that illegally copied the IMEI will also be considered legal and can access the mobile network smoothly.
特别在 3G 及以后的移动通信网络中,业务对移动设备的依赖性日益显著,对移动设备的识别成为诸多移动新业务推广过程中的一个基本条件。 IMEI 是识别移动设备的唯一途径,但由于被非法复制问题的存在,大量移动设备难于被精确识别,势必影响移动新业务的发展进程。因此,启用 IMEI 校验功能增加移动设备的可识别性成为移动通信网络发展的一个必然趋势,也是规范移动终端产业链最直接、最有效的管理手段,还是加强移动用户信息安全的基本要求。 Especially in 3G In the future mobile communication networks, the dependence of mobile services on mobile devices is becoming more and more obvious. The identification of mobile devices has become a basic condition in the promotion process of many new mobile services. IMEI It is the only way to identify mobile devices, but due to the existence of illegal copying problems, a large number of mobile devices are difficult to be accurately identified, which will inevitably affect the development of new mobile services. Therefore, enable IMEI The verification function increases the recognizability of mobile devices and becomes an inevitable trend in the development of mobile communication networks. It is also the most direct and effective management method for regulating the mobile terminal industry chain, or the basic requirement for enhancing the security of mobile users.
因此,为了解决标准的 IMEI 校验机制中存在的上述无法防范 IMEI 的非法复制问题,一般会选择在标准的 'Check IMEI' 消息中增加参数,如 IMSI 、 MSISDN ( Mobile Subscriber ISDN ,移动用户 ISDN 号码)等,以增加 IMEI 识别过程中的精准度。 Therefore, in order to solve the above-mentioned unavoidable IMEI in the standard IMEI check mechanism Illegal replication problems, generally choose to add parameters in the standard 'Check IMEI' message, such as IMSI, MSISDN (Mobile Subscriber ISDN) , mobile user ISDN number), etc., to increase the accuracy of the IMEI identification process.
基于上述改进, EIR 通常采用如下方式完成 IMEI 校验: Based on the above improvements, EIR usually completes the IMEI check as follows:
● 从 MSC/SGSN 接收增强的 'Check IMEI' 消息,解析出 IMEI 、 IMSI ;查询移动设备列表,确定所述 IMEI 是否已被非法复制以及该 IMSI 所代表的移动用户是否为所述 IMEI 的合法使用者;根据对所述移动设备及其使用者的身份确认结果,以及所述移动设备的合法用户的要求(如是否挂失、是否出现故障等)和运营商的处理规程(如禁止或允许非法复制设备入网等),确定所述移动设备最终的 ES ,并将其作为 IMEI 校验结果发送回所述 MSC/SGSN ; ● Receive enhanced 'Check IMEI' messages from MSC/SGSN and parse out IMEI and IMSI Querying the mobile device list to determine whether the IMEI has been illegally copied and whether the mobile user represented by the IMSI is the IMEI a legitimate user; based on the identity of the mobile device and its user, and the requirements of the legitimate user of the mobile device (such as whether it is reported, whether it is faulty, etc.) and the operator's processing procedures (such as prohibited or Allow illegal copying of devices into the network, etc.) to determine the final ES and send it back to the MSC/SGSN as an IMEI check result;
● 从 MSC/SGSN 接收增强的 'Check IMEI' 消息,解析出 IMEI 、 MSISDN ;查询移动设备列表,确定所述 IMEI 是否已被非法复制以及该 MSISDN 所代表的移动用户是否为所述 IMEI 的合法使用者;根据对所述移动设备及其使用者的身份确认结果,以及所述移动设备的合法用户的要求(如是否挂失、是否出现故障等)和运营商的处理规程(如禁止或允许非法复制设备入网等),确定所述移动设备最终的 ES ,并将其作为 IMEI 校验结果发送回所述 MSC/SGSN 。 ● Receive enhanced 'Check IMEI' messages from the MSC/SGSN and parse out IMEI, MSISDN; querying the mobile device list to determine whether the IMEI has been illegally copied and whether the mobile user represented by the MSISDN is the IMEI a legitimate user; based on the identity of the mobile device and its user, and the requirements of the legitimate user of the mobile device (such as whether it is reported, whether it is faulty, etc.) and the operator's processing procedures (such as prohibited or Allow illegal copying of devices into the network, etc.) to determine the final ES and send it back to the MSC/SGSN as an IMEI check result.
在上述两种 IMEI 校验方式中, EIR 设备所使用的是扩展的移动设备列表,即采用 IMSI 或 MSISDN 标明了所述 IMEI 对应的移动设备的合法用户。如果所述 IMEI 未被非法复制或正在被合法用户使用,则将移动设备列表中的 ES 作为校验结果,并以之为依据对该移动设备进行网络访问控制。如果所述 IMEI 已被非法复制且正在被非法用户使用,则根据运营商的管理规则采用如下方式对该移动设备进行网络访问控制: In the above two IMEI verification methods, the EIR device uses an extended list of mobile devices, that is, using IMSI or The MSISDN identifies the legitimate user of the mobile device corresponding to the IMEI. If the IMEI is not illegally copied or is being used by a legitimate user, the ES in the mobile device list will be As a result of the verification, and based on the network access control of the mobile device. If the IMEI If it has been illegally copied and is being used by an illegal user, the mobile device is controlled by the following methods according to the management rules of the carrier:
严格禁止:除非正在被合法用户使用,禁止所有以所述 IMEI 为标识的移动设备对移动网络进行访问; Strictly prohibited: All mobile devices identified by the IMEI are prohibited from accessing the mobile network unless they are being used by legitimate users;
部分 禁止:禁止被由 IMSI 或 MSISDN 标明的特定用户使用的以所述 IMEI 为标识的移动设备对移动网络进行访问 Partial Prohibition: Prohibition of use by the specific user indicated by IMSI or MSISDN with the IMEI Access the mobile network for the identified mobile device
暂不禁止:暂不对使用已被非法复制的 IMEI 的移动设备进行网络访问控制。 Temporarily prohibited: Network access control for mobile devices using IMEI that have been illegally copied is not yet available.
可以看出,通过对标准的 'Check IMEI' 消息进行增强,增加 IMSI 、 MSISDN 等参数后可使 EIR 具备防范 IMEI 被非法复制的功能。即使网络中已经大量存在着使用非法复制 IMEI 的移动设备(即所谓 ' 山寨机 ' , Gray Handset )仍可以启用 IMEI 校验功能。通过先期引导 ' 转正 ' 过程,逐步减少 ' 山寨机 ' 的在网数量,再启用 EIR 进行 IMEI 校验,即可最大限度地消除 IMEI 被非法复制现象,提高移动设备的可识别性和可服务性。 It can be seen that IMSI and MSISDN are added by enhancing the standard 'Check IMEI' message. After the parameters, EIR can prevent the IMEI from being illegally copied. Even if there are a large number of mobile devices that use illegal copying of IMEI in the network (the so-called 'cottage machine', Gray Handset) can still enable IMEI verification. By first guiding the 'turning positive' process, gradually reduce the number of 'cottage machines' in the network, and then enable EIR for IMEI Verification can minimize the illegal copying of IMEI and improve the recognizability and serviceability of mobile devices.
引入 IMSI 、 MSISDN 等作为辅助参数后,可从理论上解决 IMEI 被非法复制的问题,并将启用 IMEI 校验功能对移动终端产业和移动用户造成的冲击降到最低。虽然引入辅助参数的常见技术方案多采用非标准技术,与规模化商用还有差距,但已不能继续阻碍启用 IMEI 校验功能。 After introducing IMSI, MSISDN, etc. as auxiliary parameters, the problem of IMEI being illegally copied can be theoretically solved and will be enabled. The impact of the IMEI verification function on the mobile terminal industry and mobile users is minimized. Although the common technical solutions for introducing auxiliary parameters mostly use non-standard technologies, there is still a gap with large-scale commercialization, but it cannot continue to hinder the activation. IMEI check function.
在较大型网络中启用 IMEI 校验功能时 , 需要解决 EIR 组网问题。这是由于信令处理能力的限制,单台 EIR 设备的容量一般为数万至数十万移动用户,而移动用户数量则可能从数百万乃至数亿,特别是移动用户和移动设备可以在一个或多个运营商的网络内自动漫游:网络内的任何一部移动设备均可能出现在任何一部 EIR 设备的校验队列之中。因此 , 单台 EIR 设备显然无法满足较大型网络的容量需求,需要由多台 EIR 设备联合组网方可提供较大型网络中的支持 IMEI 校验功能所需的事务处理能力 。 EIR needs to be resolved when IMEI verification is enabled in a larger network Networking problem. This is due to the limitation of signaling processing capability, single EIR The capacity of devices is generally tens of thousands to hundreds of thousands of mobile users, and the number of mobile users may range from millions to hundreds of millions, especially mobile users and mobile devices can automatically roam in the network of one or more operators: network Any mobile device inside may appear in any one Among the check queues of EIR devices. Therefore, a single EIR device obviously cannot meet the capacity requirements of a larger network. It is necessary to have multiple EIR devices combined to provide support in a larger network. IMEI The transaction processing capabilities required for the verification function.
为了解决 EIR 设备的组网问题,一般在较大型的网络中会引入 CEIR 设备。 CEIR 是高一级的 EIR 设备,存储了包括移动通信网络中全部移动设备信息的 IMEI 中央数据库。 IMEI 中央数据库为分布式海量数据库,一般包括 IMEI 和 ES ,其它的可用信息还包括 IMSI 、 MSISDN 、在网络中首次启用的时间、最近一次出现的时间以及曾经在哪个 MSC 或 SGSN 出现等。 CEIR 设备实现了移动设备信息的集中管理,与 EIR 设备形成了服务器 / 客户机关系。 To solve the networking problem of EIR devices, CEIR devices are generally introduced in larger networks. CEIR is a higher level The EIR device stores an IMEI central database that includes information on all mobile devices in the mobile communication network. The IMEI central database is a distributed mass database, generally including IMEI and ES. Other available information includes IMSI, MSISDN, the time of first activation in the network, the time of the most recent occurrence, and which MSC or SGSN was present. CEIR The device implements centralized management of mobile device information and forms a server/client relationship with the EIR device.
配备了 CEIR 设备后, IMEI 校验的具体流程如图 3 所示,包括以下步骤: After the CEIR device is equipped, the specific process of IMEI verification is shown in Figure 3, including the following steps:
步骤 S301 , MSC/SGSN 向 EIR 发送 'Check IMEI (IMEI)' 消息; Step S301, the MSC/SGSN sends a 'Check IMEI (IMEI)' to the EIR. Message
步骤 S302 , EIR 向 CEIR 发送 'Remote Check IMEI (IMEI)' 消息,该消息将本地的 IMEI 校验请求转化为向 CEIR 的远程查询; Step S302, EIR sends 'Remote Check IMEI (IMEI)' to CEIR a message that translates the local IMEI verification request into a remote query to CEIR;
步骤 S303 , CEIR 利用内部的标识校验单元对该移动设备进行校验 , 向 EIR 返回 'Remote Check IMEI Ack (IMEI)' 消息; Step S303, the CEIR uses the internal identity verification unit to verify the mobile device, and returns to the EIR. 'Remote Check IMEI Ack (IMEI)' message;
步骤 S304 , EIR 返回 'Check IMEI Ack (IMEI)' 消息, MSC/SGSN 根据所收到的校验结果确定是否允许该移动设备接入网络。 Step S304, EIR returns a message of 'Check IMEI Ack (IMEI)', The MSC/SGSN determines whether the mobile device is allowed to access the network according to the received verification result.
可见, CEIR 设备解决了 EIR 设备的组网问题,可适应各种规模移动通信网络的建设需要。 CEIR 设备除了满足网内 IMEI 校验需要的数据交换功能外,还负责不同运营商之间的移动设备名单(主要是黑名单)的共享和交换。 It can be seen that the CEIR device solves the networking problem of the EIR device and can adapt to the construction needs of mobile communication networks of various sizes. CEIR In addition to the data exchange function required for IMEI verification in the network, the device is also responsible for the sharing and exchange of mobile device lists (mainly blacklists) between different operators.
根据上述描述可以看出,现阶段 IMEI 校验技术的可行性问题已经得到解决;但在具体实现过程中,仍然存在以下缺陷: According to the above description, it can be seen that the current stage IMEI The feasibility of the verification technology has been solved; however, in the specific implementation process, the following defects still exist:
第一,成本缺陷: First, cost defects:
在较大型移动通信网络中移动用户数往往达到数千万甚至数亿,启用 IMEI 实时校验功能将耗费大量的系统处理能力,最终导致建设成本剧增。 The number of mobile users in a large mobile communication network often reaches tens of millions or even hundreds of millions, enabling IMEI The real-time verification function will consume a lot of system processing power, which will eventually lead to a sharp increase in construction costs.
特别是,在大型移动通信网络中由于需要借助 CEIR 实现联网检索,校验过程往往引入远程查询,大型分布式数据库的应用成为必然之选。 In particular, in large mobile communication networks, due to the need to rely on CEIR To achieve networked retrieval, the verification process often introduces remote queries, and the application of large distributed databases becomes an inevitable choice.
实时查询和大型数据库的叠加,即实时查询大型数据库(尤其是分布式数据库),占用网络资源过多,直接推高了 IMEI 校验系统的成本支出。 Real-time query and superposition of large databases, that is, real-time query of large databases (especially distributed databases), taking up too much network resources, directly pushing up The cost of the IMEI verification system.
第二,响应时间不确定: Second, the response time is uncertain:
在引入 CEIR 设备后,出现的一个主要问题是查询移动设备状态所耗费的时间过长且无法确定, IMEI 校验操作的响应时间波动性很大;由于 IMEI 的有效数字多达 14 位数字,而且 IMEI 中央数据库存储内容较多并可扩展,实际存储过程中难以通过映射方式实现按地址存储,一般以数据表的方式实现,所以,数据库的查询算法最终决定了 IMEI 校验的时间响应特征:常用的数据表搜索算法的时间与 NlogN 成正比( N 为数据表长度,在 IMEI 中央数据库中则为用户数);每次查询数据表所用的时间是不确定的。在 EIR 采用缓存技术可改善系统性能,但实际作用有限,且增加了系统复杂性 。 After the introduction of the CEIR device, a major problem occurred was that it took too long to determine the status of the mobile device and could not be determined, IMEI The response time of the verify operation is highly volatile; since the valid number of IMEI is up to 14 digits, and IMEI The central database stores a large amount of content and can be extended. In the actual storage process, it is difficult to store by address in a mapping manner, which is generally implemented by means of a data table. Therefore, the query algorithm of the database ultimately determines the IMEI. Time response characteristics of the check: The time of the commonly used data table search algorithm is proportional to NlogN (N is the length of the data table, at IMEI The number of users in the central database); the time taken to query the data table each time is uncertain. The use of caching technology in EIR can improve system performance, but the practical effect is limited and the system complexity is increased.
第三,效率低下: Third, inefficiency:
IMEI 校验的实质是在接收到对某一特定移动设备的触发请求时使 VLR ( Visitor Location Register ,拜访位置寄存器) /SGSN 中所存储的该移动设备的当前状态与 IMEI 中央数据库中所存储的该移动设备的目标状态一致;在不存在 CEIR 设备的网络中, IMEI 中央数据库等同于存储于 EIR 设备中的设备列表。常见 IMEI 校验技术中,一般采用查询表格的方式从 IMEI 中央数据库中查询到移动设备的目标状态,以校验结果的形式对 VLR/SGSN 中存储的当前状态进行更新。 The essence of the IMEI check is to make the VLR (Visitor) upon receiving a trigger request for a particular mobile device. Location Register, visit location register) / current state of the mobile device stored in the /SGSN with IMEI The target state of the mobile device stored in the central database is consistent; in a network where there is no CEIR device, the IMEI central database is equivalent to the list of devices stored in the EIR device. Common IMEI In the verification technology, the target state of the mobile device is generally queried from the IMEI central database by means of a lookup table, and the current state stored in the VLR/SGSN is updated in the form of a verification result.
由于在移动设备的使用过程中,绝大部分移动设备完全满足入网需要,不会对无线接入网络的性能造成严重威胁。从网络运行的角度来看,仅有部分已经被专业检测机构认定为禁止入网的移动设备应被列入黑名单。从信息安全的角度来看,移动设备将主要因被盗而被列入黑名单。如果把对被盗设备的目标设定为找到并返回失主,则不应将被盗设备列入黑名单,而是启用追踪功能。从管理的角度来看,将大量的移动设备列入黑名单是不合理的。因此,对网络中大部分移动设备的当前状态的更新是不必要的。 Because most mobile devices fully meet the network access requirements during the use of mobile devices, they will not pose a serious threat to the performance of the wireless access network. From the perspective of network operation, only some mobile devices that have been identified as prohibited by professional testing organizations should be blacklisted. From an information security perspective, mobile devices will be blacklisted primarily for theft. If the target of the stolen device is set to find and return the owner, the stolen device should not be blacklisted, but the tracking function should be enabled. From a management perspective, it is unreasonable to blacklist a large number of mobile devices. Therefore, updates to the current state of most mobile devices in the network are not necessary.
同时由于故障、被盗、更换所导致的移动设备状态变化的周期较长, 3GSM 联盟的统计报告显示,在 2003 年至 2008 年间,全球 GSM 手机用户平均每 25 个月更换一部新手机,而目前触发 IMEI 校验的位置更新在每天的忙时可达到 1 至 2 次,用户每天开关机的也可能到达 1 至 2 次。显然,在移动设备状态未发生变化时对该移动设备的当前状态的更新是不必要的。 At the same time, due to the long period of change of the state of the mobile device caused by the failure, theft, and replacement, the statistical report of the 3GSM Alliance shows that Between 2003 and 2008, global GSM mobile phone users switched to a new mobile phone every 25 months on average, and the location update that currently triggers IMEI verification can reach 1 to 2 every day. The user can also switch on and off 1 or 2 times a day. Obviously, an update to the current state of the mobile device when the state of the mobile device has not changed is not necessary.
可见,对大量移动设备的状态频繁地进行不必要的更新是造成常见 IMEI 校验技术效率低下的主要原因。 It can be seen that frequent updates to the status of a large number of mobile devices are the main reasons for the inefficiency of common IMEI verification techniques.
综上所述, IMEI 校验对维护移动设备的安全性和可识别性的作用无可替代,而现有 IMEI 校验技术所存在的高成本、低效率的过低性价比问题以及响应时间问题是阻碍启用 IMEI 校验功能的关键,因此在现阶段, IMEI 校验技术的发展重点是提高产品性能、降低建设成本。从遏制以 ' 山寨机 ' 为主的灰名单设备、提高移动设备的安全性与可识别性的角度来看,对高性价比 IMEI 校验技术的市场需求日益迫切,同时对 IMEI 快速校验技术方面的研究也成为推动 EIR 应用的重点,因此,对 IMEI 校验技术加以改进具有广阔的市场前景,也是非常必要的。 In summary, IMEI verification is irreplaceable for maintaining the security and identifiability of mobile devices, while existing IMEI The high cost, low efficiency and low cost performance of the verification technology and the response time problem are the key factors hindering the enabling of the IMEI check function, so at this stage, IMEI The development of calibration technology focuses on improving product performance and reducing construction costs. From the perspective of curbing the gray list device based on 'cottage machine' and improving the security and recognizability of mobile devices, it is cost-effective IMEI The market demand for verification technology is becoming more and more urgent, and research on IMEI fast verification technology has also become the focus of EIR applications. Therefore, for IMEI It is also necessary to improve the calibration technology with broad market prospects.
本发明目的在于提供一种快速校验国际移动设备标识 IMEI 的方法及系统。在 3GPP 协议框架内对常见 IMEI 校验方法进行了改进,可改善校验的时间响应指标,并减少大型数据库软件的使用量,从而降低 EIR 等设备的建设成本。 It is an object of the present invention to provide a method and system for quickly verifying an international mobile device identity IMEI. In 3GPP The common IMEI verification method has been improved within the framework of the protocol to improve the time response metrics of the verification and reduce the usage of large database software, thereby reducing the construction cost of equipment such as EIR.
为了实现上述目的,本发明提供了一种用于快速校验 IMEI 的方法,包括下列步骤: In order to achieve the above object, the present invention provides a method for quickly verifying IMEI, comprising the following steps:
步骤一: EIR 接收到 MSC/ SGSN 针对一个移动设备的 IMEI 校验请求消息后,查询本地移动设备列表中是否存在与所述移动设备相匹配的数据记录,是则将根据所述数据记录确定的 ES 作为校验结果返回给所述 MSC/SGSN ,且如果所述数据记录仅涉及所述移动设备,则从本地移动设备列表中删除所述数据记录;,否则直接以所述 IMEI 校验请求消息中的当前 ES 作为校验结果返回给所述 MSC/SGSN ;其中,所述 IMEI 校验请求消息至少携带有所述移动设备的 IMEI 及当前 ES ; Step 1: The EIR receives the IMEI for the MSC/SGSN for a mobile device. After verifying the request message, querying whether there is a data record matching the mobile device in the local mobile device list, and returning the ES determined according to the data record as a check result to the MSC/SGSN And deleting the data record from the local mobile device list if the data record only relates to the mobile device; otherwise returning directly to the current ES as the check result in the IMEI check request message MSC/SGSN; wherein the IMEI check request message carries at least the IMEI of the mobile device and the current ES;
步骤二:所述 EIR 向 CEIR 发送移动设备信息更新请求消息;其中,所述移动设备信息更新请求消息携带有从所述 IMEI 校验请求消息中提取的信息; Step 2: The EIR to CEIR Transmitting a mobile device information update request message; wherein the mobile device information update request message carries information extracted from the IMEI check request message;
步骤三:所述 CEIR 将所述移动设备信息更新请求消息中携带的 ES 与 IMEI 中央数据库中所存储的相应移动设备的 ES 加以比对;如果不一致,则向所述 EIR 返回第一移动设备信息更新响应消息,所述第一移动设备信息更新响应消息携带按照预定规则从所述 IMEI 中央数据库中提取的信息;如果一致,或者还向所述 EIR 返回第二移动设备信息更新响应消息,所述第二移动设备信息更新响应消息表示对所述移动设备信息更新请求消息的正常接收; Step 3: The CEIR sends the ES and the IMEI carried in the mobile device information update request message. The ES of the corresponding mobile device stored in the central database is compared; if not, the EIR is Returning a first mobile device information update response message carrying information extracted from the IMEI central database according to a predetermined rule; if consistent, or also to the EIR Returning a second mobile device information update response message, the second mobile device information update response message indicating normal reception of the mobile device information update request message;
步骤四: EIR 接收到所述第一移动设备信息更新响应消息后,将其编辑为所述本地移动设备列表中的一条数据记录。 Step four: EIR After receiving the first mobile device information update response message, it is edited as a data record in the local mobile device list.
为了实现上述目的,本发明还提供了用于快速校验 IMEI 的系统、 EIR 设备以及 CEIR 设备。 In order to achieve the above object, the present invention also provides a system for quickly verifying IMEI, an EIR device, and a CEIR. Equipment.
所述用于快速校验 IMEI 的系统 包括 EIR 以及分别与所述 EIR 交互的 MSC/ SGSN 和 CEIR : The system for quickly verifying IMEI includes EIR and MSC/ interacting with the EIR respectively SGSN and CEIR:
所述 MSC/SGSN 用于向所述 EIR 发送针对一个移动设备的 IMEI 校验请求消息,其中,所述 IMEI 校验请求消息至少携带有所述移动设备的 IMEI 及当前 ES ;以及,接收并根据从所述 EIR 返回的校验结果,对所述移动设备执行网络访问控制; The MSC/SGSN is configured to send an IMEI for the mobile device to the EIR Verifying the request message, wherein the IMEI check request message carries at least the IMEI of the mobile device and the current ES; and, receives and according to the EIR Returning a verification result, performing network access control on the mobile device;
所述 EIR 用于接收所述 MSC/SGSN 发送的所述 IMEI 校验请求消息,查询本地移动设备列表中是否存在与所述移动设备相匹配的数据记录,是则将根据所述数据记录确定的设备状态 ES 作为校验结果返回给所述 MSC/SGSN , 且如果所述数据记录仅涉及所述移动设备,则从本地移动设备列表中删除所述数据记录 ;否则直接以所述 IMEI 校验请求消息中的当前 ES 作为校验结果返回给所述 MSC/SGSN ;向所述 CEIR 发送移动设备信息更新请求消息,其中,所述移动设备信息更新请求消息携带有从所述 IMEI 校验请求消息中提取的信息;以及,接收所述 CEIR 返回的第一移动设备信息更新响应消息,将其编辑为所述本地移动设备列表中的一条数据记录;或者还接收所述 CEIR 返回的第二移动设备信息更新响应消息; The EIR is configured to receive the IMEI sent by the MSC/SGSN Checking the request message, querying whether there is a data record matching the mobile device in the local mobile device list, and returning the device status ES determined according to the data record as a check result to the MSC/SGSN, and if the data record relates only to the mobile device, deleting the data record from the local mobile device list; otherwise directly verifying the current ES in the request message with the IMEI Returning to the MSC/SGSN as a check result; transmitting a mobile device information update request message to the CEIR, wherein the mobile device information update request message carries the IMEI from the And verifying the information extracted in the request message; and receiving the first mobile device information update response message returned by the CEIR, editing it as a data record in the local mobile device list; or receiving the The second mobile device information update response message returned by the CEIR;
所述 CEIR 用于接收所述 EIR 发送的移动设备信息更新请求消息并将所述移动设备信息更新请求消息中携带的 ES 与 IMEI 中央数据库中所存储的相应移动设备的 ES 加以比对;如果不一致,则向所述 EIR 返回第一移动设备信息更新响应消息,所述第一移动设备信息更新响应消息携带有按照预定规则从所述 IMEI 中央数据库中提取的信息;如果一致,或者还向所述 EIR 返回第二移动设备信息更新响应消息,所述第二移动设备信息更新响应消息表示对 所述移动设备信息更新请求消息的正常接收 。 The CEIR is configured to receive the EIR The transmitted mobile device information update request message and the ES carried in the mobile device information update request message and the ES of the corresponding mobile device stored in the IMEI central database Comparing; if not, returning a first mobile device information update response message to the EIR, the first mobile device information update response message carrying the IMEI according to a predetermined rule Information extracted in the central database; if consistent, or returning a second mobile device information update response message to the EIR, the second mobile device information update response message indicates The normal reception of the mobile device information update request message.
所述用于快速校验 IMEI 的 EIR 设备包括: The EIR device for quickly verifying the IMEI includes:
校验请求接收单元,用于接收来自于 MSC/ SGSN 的 IMEI 校验请求消息;其中,所述 IMEI 校验请求消息至少携带有一移动设备的 IMEI 及当前 ES ; a verification request receiving unit, configured to receive an IMEI verification request message from the MSC/SGSN; wherein The IMEI check request message carries at least one IMEI of the mobile device and the current ES;
校验请求解码单元,用于解码出所述 IMEI 校验请求消息中携带的信息; a verification request decoding unit, configured to decode information carried in the IMEI verification request message;
本地移动设备列表,用于保存从 CEIR 接收的记录; A list of local mobile devices that hold records received from CEIR;
移动设备列表管理单元,用于管理所述本地移动设备列表; a mobile device list management unit, configured to manage the local mobile device list;
标识校验单元,与所述校验请求解码单元连接,用于查询所述本地移动设备列表中是否存在与所述校验请求解码单元解码出的移动设备信息相匹配的数据记录,是则将 所述数据记录中的 ES 作为校验结果,且 如果所述数据记录仅涉及所述移动设备,则触发所述移动设备列表管理单元删除所述数据记录 ;否则直接以解码出的当前 ES 作为校验结果 ; An identifier checking unit is connected to the check request decoding unit, configured to query whether there is a data record in the local mobile device list that matches the mobile device information decoded by the check request decoding unit, and The ES in the data record is used as a check result, and if the data record only relates to the mobile device, triggering the mobile device list management unit to delete the data record; otherwise directly decoding the current ES As a result of the verification;
校验响应编码单元,与所述标识校验单元连接,用于将校验结果编码到 IMEI 校验响应消息中; a verification response coding unit, coupled to the identity verification unit, for encoding the verification result into the IMEI verification response message;
校验响应发送单元,用于将所述 IMEI 校验响应消息发送到所述 MSC/SGSN ; a verification response sending unit, configured to send the IMEI check response message to the MSC/SGSN;
移动设备信息更新请求编码单元,与所述校验请求解码单元连接,用于将所述校验请求解码单元解码出的信息编码到移动设备信息更新请求消息中; a mobile device information update request encoding unit, coupled to the verification request decoding unit, configured to encode the information decoded by the verification request decoding unit into a mobile device information update request message;
移动设备信息更新请求发送单元,用于将所述移动设备信息更新请求消息发送到所述 CEIR ; a mobile device information update request sending unit, configured to send the mobile device information update request message to the CEIR;
移动设备信息更新响应接收单元,用于从所述 CEIR 接收第一移动设备信息更新响应消息,或者还接收第二移动设备信息更新响应消息;所述第一移动设备信息更新响应消息 携带有按照预定规则从所述 IMEI 中央数据库中提取的信息,所述第二 移动设备信息更新响应消息 表示对 所述移动设备信息更新请求消息的正常接收; a mobile device information update response receiving unit for using the CEIR Receiving a first mobile device information update response message, or further receiving a second mobile device information update response message; the first mobile device information update response message carrying the IMEI according to a predetermined rule The information extracted in the central database, the second mobile device information update response message indicating normal reception of the mobile device information update request message;
移动设备信息更新响应解码单元,用于解码所述第一或第二移动设备信息更新响应消息,如果为所述第一移动设备信息更新响应消息,则触发所述移动设备列表管理单元将其编辑为 所述本地移动设备列表中的一条数据记录 。 a mobile device information update response decoding unit, configured to decode the first or second mobile device information update response message, if the first mobile device information update response message is triggered, trigger the mobile device list management unit to edit the mobile device for A piece of data record in the list of local mobile devices.
所述用于快速校验 IMEI 的 CEIR 设备包括: The CEIR device for quickly verifying the IMEI includes:
移动设备信息更新请求接收单元,用于接收来自于 EIR 的移动设备信息更新请求消息,其中,所述移动设备信息更新请求消息至少 携带有一移动设备的 IMEI 及当前 ES ; Mobile device information update request receiving unit for receiving from EIR Mobile device information update request message, wherein the mobile device information update request message carries at least one IMEI of the mobile device and the current ES;
移动设备信息更新请求解码单元,用于解码所述移动设备信息更新请求消息中携带的信息; a mobile device information update request decoding unit, configured to decode information carried in the mobile device information update request message;
IMEI 中央数据库,用于移动设备信息的存储; IMEI central database for storage of mobile device information;
IMEI 中央数据库管理单元,用于提供人机接口来管理所述 IMEI 中央数据库存储的移动设备信息; An IMEI central database management unit for providing a human machine interface to manage the IMEI Mobile device information stored in the central database;
更新处理单元,与所述移动设备信息更新请求解码单元、 IMEI 中央数据库连接,用于从所述 IMEI 中央数据库中查询获得所述移动终端的 ES ,并与所述移动设备信息更新请求消息中解码出的 ES 一起发送给移动设备列表远端管理单元;以及, 根据所述移动设备信息更新请求消息,更新 IMEI 中央数据库中与所述移动终端有关的信息; An update processing unit, coupled to the mobile device information update request decoding unit, the IMEI central database, for Querying, in the IMEI central database, the ES of the mobile terminal, and sending it to the mobile device list remote management unit together with the ES decoded in the mobile device information update request message; Updating information related to the mobile terminal in the IMEI central database according to the mobile device information update request message;
移动设备列表远端管理单元,与所述更新处理单元连接,用于对从所述更新处理单元接收到的两个 ES 加以对比; 如果不一致,则按照预定规则从所述 IMEI 中央数据库中提取信息 ,并触发移动设备信息更新响应编码单元;如果一致,或者还直接触发移动设备信息更新响应编码单元; a mobile device list remote management unit, coupled to the update processing unit, for receiving two ESs from the update processing unit Compare; if not, extract information from the IMEI central database according to predetermined rules And triggering the mobile device information update response coding unit; if consistent, or directly triggering the mobile device information update response coding unit;
移动设备信息更新响应编码单元,用于根据所述移动设备列表远端管理单元的触发,如果存在所述 按照预定规则从所述 IMEI 中央数据库中提取的信息 ,则生成第一 移动设备信息更新响应消息 ;否则,或者还生成第二 移动设备信息更新响应消息; 所述第一移动设备信息更新响应消息 携带有按照预定规则从所述 IMEI 中央数据库中提取的信息,所述第二 移动设备信息更新响应消息 表示对 所述移动设备信息更新请求消息的正常接收; a mobile device information update response encoding unit, configured to trigger according to the mobile device list remote management unit, if the presence Generating the first mobile device information update response message according to the information extracted from the IMEI central database according to a predetermined rule; otherwise, or generating a second mobile device information update response message; The first mobile device information update response message carries information extracted from the IMEI central database according to a predetermined rule, and the second mobile device information update response message indicates Normal reception of the mobile device information update request message;
移动设备信息更新响应发送单元,用于向所述 EIR 发送所述第一或第二移动设备信息更新响应消息,供其后续校验使用。 a mobile device information update response sending unit for using the EIR Sending the first or second mobile device information update response message for subsequent verification use.
本发明提供的技术方案 将收到的移动设备信息用于下一次 IMEI 校验 ,避免了校验过程中的实时远程查询,有效提高了时间响应指标,达到快速校验 IMEI 的目的并降低建设成本;同时, 仅对前一次设备状态发生变化的移动设备加以更新,节约了系统资源; 以及, EIR 设备中本地移动设备列表的记载使用后随即删除,不但进一步提高 IMEI 校验的速度,还可避免使用大型数据库软件,从而达到降低建设成本的目的 。 The technical solution provided by the present invention uses the received mobile device information for the next IMEI check , avoiding real-time remote query during the verification process, effectively improving the time response index, achieving the purpose of quickly verifying IMEI and reducing construction costs; Only the mobile device whose previous device status changed is updated, which saves system resources; and the description of the local mobile device list in the EIR device is deleted immediately after use, which not only further improves IMEI The speed of verification can also avoid the use of large database software, thus achieving the purpose of reducing construction costs.
在发明内容部分中引入了一系列简化形式的概念,这将在具体实施方式部分中进一步详细说明。本发明内容部分并不意味着要试图限定出所要求保护的技术方案的关键特征和必要技术特征,更不意味着试图确定所要求保护的技术方案的保护范围。 A series of simplified forms of concepts are introduced in the Summary of the Invention section, which will be described in further detail in the Detailed Description section. The summary is not intended to limit the key features and essential technical features of the claimed invention, and is not intended to limit the scope of protection of the claimed embodiments.
以下结合附图,详细说明本发明的优点和特征。 Advantages and features of the present invention are described in detail below with reference to the accompanying drawings.
图 1 是 IMEI 请求及校验的流程图; Figure 1 is a flow chart of IMEI request and verification;
图 2 是鉴权加密及 IMEI 校验的流程图; Figure 2 is a flow chart of authentication encryption and IMEI verification;
图 3 是通过 CEIR 进行 IMEI 校验的流程图; Figure 3 is a flow chart of IMEI verification by CEIR;
图 4 是本发明实施例中快速校验国际移动设备标识的流程图; 4 is a flowchart of quickly verifying an international mobile device identifier in an embodiment of the present invention;
图 5 是本发明实施例中 MSC 处理流程图; FIG. 5 is a flowchart of processing an MSC according to an embodiment of the present invention;
图 6 是本发明实施例中 SGSN 处理流程图; 6 is a flowchart of processing of an SGSN in an embodiment of the present invention;
图 7 是本发明实施例中 EIR 处理流程图; 7 is a flow chart of EIR processing in an embodiment of the present invention;
图 8 是本发明实施例中 CEIR 处理流程图; 8 is a flowchart of CEIR processing in an embodiment of the present invention;
图 9 是本发明实施例中系统的总体结构图; 9 is a general structural diagram of a system in an embodiment of the present invention;
图 10 是本发明实施例中 MSC/SGSN 的系统结构图; 10 is a system structural diagram of an MSC/SGSN in an embodiment of the present invention;
图 11 是本发明实施例中 EIR 的系统结构图; 11 is a system structural diagram of an EIR in an embodiment of the present invention;
图 12 是本发明实施例中 CEIR 的系统结构图。 Figure 12 is a system configuration diagram of CEIR in the embodiment of the present invention.
在下文的描述中,给出了大量具体的细节以便提供对本发明更为彻底的理解。然而,对于本领域技术人员来说显而易见的是,本发明可以无需一个或多个这些细节而得以实施。在其他的例子中,为了避免与本发明发生混淆,对于本领域公知的一些技术特征未进行描述。 In the following description, numerous specific details are set forth in the However, it will be apparent to those skilled in the art that the present invention may be practiced without one or more of these details. In other instances, some of the technical features well known in the art have not been described in order to avoid confusion with the present invention.
显然,本发明的施行并不限定于本领域的技术人员所熟习的特殊细节。本发明的较佳实施例详细描述如下,然而除了这些详细描述外,本发明还可以具有其他实施方式。 It is apparent that the practice of the present invention is not limited to the specific details familiar to those skilled in the art. The preferred embodiments of the present invention are described in detail below, but the present invention may have other embodiments in addition to the detailed description.
根据本发明,提供了一种快速校验国际移动设备标识的方法。本发明的技术原理是:执行 IMEI 校验的 EIR 将 IMEI 校验分解为 ES 变化识别和 ES 更新,在针对特定移动设备的单次 IMEI 校验中,仅执行其中的一个阶段;即 EIR 在某一次 IMEI 校验中所识别出的、特定移动设备的 ES 变化将在下一次针对该特定移动设备的 IMEI 校验中进行更新。 In accordance with the present invention, a method of quickly verifying an international mobile device identity is provided. The technical principle of the present invention is: performing IMEI verification EIR decomposes the IMEI check into ES change identification and ES update. In a single IMEI check for a specific mobile device, only one of the phases is performed; that is, EIR is at a certain time. The ES change for a particular mobile device identified in the IMEI check will be updated in the next IMEI check for that particular mobile device.
根据上述技术原理,本发明提供了 一种用于快速校验国际移动设备标识的方法,包括 以下步骤: According to the above technical principle, the present invention provides a method for quickly verifying an international mobile device identity, comprising the following steps:
步骤一: EIR 接收到 MSC/ SGSN 针对一个移动设备的 IMEI 校验请求消息后,查询本地移动设备列表中是否存在与所述移动设备相匹配的数据记录,是则将根据所述数据记录确定的 ES 作为校验结果返回给所述 MSC/SGSN ,且如果所述数据记录仅涉及所述移动设备,则从本地移动设备列表中删除所述数据记录;,否则直接以所述 IMEI 校验请求消息中的当前 ES 作为校验结果返回给所述 MSC/SGSN ;其中,所述 IMEI 校验请求消息至少携带有所述移动设备的 IMEI 及当前 ES ,优选的,还可以进一步包括 IMSI 和 MSISDN 等信息,将在下文中加以展开描述; Step 1: The EIR receives the IMEI for the MSC/SGSN for a mobile device. After verifying the request message, querying whether there is a data record matching the mobile device in the local mobile device list, and returning the ES determined according to the data record as a check result to the MSC/SGSN And deleting the data record from the local mobile device list if the data record only relates to the mobile device; otherwise returning directly to the current ES as the check result in the IMEI check request message MSC/SGSN; wherein the IMEI check request message carries at least the IMEI of the mobile device and the current ES, and preferably, further includes IMSI and MSISDN Information such as will be described below;
步骤二: EIR 向 CEIR 发送移动设备信息更新请求消息;其中,移动设备信息更新请求消息携带有从 IMEI 校验请求消息中提取的信息,包括该移动设备的 IMEI 及当前 ES ,优选的,还包括 IMSI 和 MSISDN 等信息; Step 2: EIR to CEIR Sending a mobile device information update request message; wherein the mobile device information update request message carries information extracted from the IMEI check request message, including the IMEI of the mobile device and the current ES , preferably, also includes information such as IMSI and MSISDN;
步骤三:所述 CEIR 将所述移动设备信息更新请求消息中携带的 ES 与 IMEI 中央数据库中所存储的相应移动设备的 ES 加以比对;如果不一致,则向所述 EIR 返回第一移动设备信息更新响应消息,所述第一移动设备信息更新响应消息携带按照预定规则从所述 IMEI 中央数据库中提取的信息;如果一致,或者还向所述 EIR 返回第二移动设备信息更新响应消息 ,所述第二移动设备信息更新响应消息表示对 所述移动设备信息更新请求消息的正常接收;需要注意的是, 返回第二移动设备信息更新响应消息并非是必要步骤,本领域技术人员也可以根据实际需要,不返回信息或者周期性返回表示正常接收的信息,由于不会对本发明技术方案造成实质性影响,在此不再赘述; Step 3: The CEIR sends the ES and the IMEI carried in the mobile device information update request message. The ES of the corresponding mobile device stored in the central database is compared; if not, the EIR is Returning a first mobile device information update response message carrying information extracted from the IMEI central database according to a predetermined rule; if consistent, or also to the EIR Returning to the second mobile device information update response message, the second mobile device information update response message indicating normal reception of the mobile device information update request message; Returning the second mobile device information update response message is not a necessary step, and a person skilled in the art may return no information or periodically return information indicating normal reception according to actual needs, since it does not substantially affect the technical solution of the present invention. This will not be repeated here;
步骤四: EIR 接收到所述第一移动设备信息更新响应消息后,将其编辑为所述本地移动设备列表中的一条数据记录;当然本领域技术人员可以理解,如果 EIR 接收到返回的第二移动设备信息更新响应消息,不必采取任何操作。 Step four: EIR After receiving the first mobile device information update response message, edit it as a data record in the local mobile device list; of course, those skilled in the art can understand that if EIR Receiving the returned second mobile device information update response message, no action is required.
可以看出,由于本发明采用先识别再更新的方式,采用将本次校验的识别结果用于下次校验来取代现有技术中将本次校验的识别结果用于本次校验,因此在每一次 IMEI 校验中都无需等待 CEIR 的响应,而是能够立即向 MSN/SGSN 返回一个校验结果,故而响应时间是确定而且即时的,实质缩短了校验过程,提高了校验效率; It can be seen that, because the present invention adopts the method of first identifying and re-updating, the identification result of the current check is used for the next check to replace the recognition result of the current check in the prior art for the current check. So every IMEI In the verification, there is no need to wait for the response of the CEIR, but it can immediately return a verification result to the MSN/SGSN, so the response time is determined and immediate, which substantially shortens the verification process and improves the verification efficiency;
以及,本发明将本次校验的识别结果用于下次校验,使 EIR 具有从容的时间(即两次 IMEI 校验请求之间的时间)来查询 CEIR 的 IMEI 中央数据库,因此降低对 EIR 设备和 CEIR 设备在处理速度方面的性能要求,降低建设成本; And, the present invention uses the identification result of the current verification for the next verification, so that the EIR has a comfortable time (ie, two IMEIs). Verifying the time between requests) to query CEIR's IMEI central database, thus reducing the performance requirements for EIR equipment and CEIR equipment in terms of processing speed and reducing construction costs;
同时,本发明采用先识别再更新的方式,仅对 ES 发生变化的移动设备加以更新,避免了现有 IMEI 校验技术中对移动设备的 ES 所进行的大量、重复且不必要的更新,节约了系统资源; At the same time, the present invention adopts the method of identifying and updating again, and only updates the mobile device whose ES changes, avoiding the existing IMEI. A large number of repeated and unnecessary updates to the ES of the mobile device in the verification technology, saving system resources;
此外,由于 大部分数据记录(即仅涉及移动设备个体单元的数据记录) 在使用后即可从 EIR 中删除,因此本发明中 EIR 设备所存储的本地移动设备列表一般处于接近于空表的状态;一方面,这使本发明的 IMEI 校验过程中 MSC/SGSN 从 EIR 设备接收校验请求到发出校验响应的时间间隔相对固定且远低于现有 IMEI 校验技术,进一步提高了 IMEI 校验的速度;另一方面,使 EIR 设备存储的本地移动设备列表一般很短,可避免使用大型数据库软件,从而达到降低建设成本的目的; In addition, since most data records (ie data records involving only individual units of mobile devices) are available from EIR after use Deleted, so the local mobile device list stored by the EIR device in the present invention is generally in a state close to the empty table; on the one hand, this makes the MSC/SGSN from the EIR in the IMEI check process of the present invention. The time interval between the device receiving the verification request and the verification response is relatively fixed and far lower than the existing IMEI verification technology, further improving the speed of the IMEI check; on the other hand, making the EIR The list of local mobile devices stored by the device is generally short, which avoids the use of large database software, thereby reducing the construction cost;
当然,本发明所采取的将本次校验中所识别出的 ES 变化在下次校验时进行更新的改进措施,无疑会造成 IMEI 校验的生效时间的延迟。但在实际网络环境中,对移动设备进行 IMEI 校验的发生频率较高,在每天的忙时(业务量最高的时段)可达每小时 1~2 次;而与此同时,移动设备的 ES 变化周期则往往达到数月或更长。考虑到 IMEI 校验触发事件(如用户开机、位置更新等)本身所具有的不确定性,上述改进措施在校验结果生效时间上所产生的延迟一般是可接受的。 Of course, the improvement measures taken by the present invention to update the ES change identified in the verification at the next verification will undoubtedly result in The delay in the effective time of the IMEI check. However, in the actual network environment, the frequency of IMEI verification for mobile devices is high, and it can reach 1~2 per hour during busy hours (the period with the highest traffic volume). At the same time, the ES change cycle for mobile devices often reaches months or longer. Considering IMEI The uncertainty of the triggering event (such as user boot, location update, etc.) itself is checked, and the delay caused by the above improvement measures at the effective time of the verification result is generally acceptable.
下面结合示例性参数对上述技术方案加以进一步的细化和优化描述,以使本领域技术人员更容易掌握本发明的特点和优点,但示例性参数并非对本发明技术方案的限制。 The above technical solutions are further refined and optimized in combination with the exemplary parameters, so that those skilled in the art can more easily grasp the features and advantages of the present invention, but the exemplary parameters are not limited to the technical solutions of the present invention.
在一个实施例中,作为对本发明所提供方法的一个优化改进,如前所述,在 IMEI 校验请求消息及移动设备信息更新响应消息中还可以携带有移动设备的 IMSI 和 / 或 MSISDN ,以实现对复制 IMEI 的非法移动终端的阻止; In one embodiment, as an optimization of the method provided by the present invention, as previously described, in IMEI The verification request message and the mobile device information update response message may further carry the IMSI and/or MSISDN of the mobile device to implement blocking of the illegal mobile terminal that copies the IMEI;
特别是,现有技术中通过对 IMSI 和 / 或 MSISDN 的先行校验来排除山寨机,获得先行校验结果后再启用 EIR 进行 IMEI 校验,也就是存在两次校验等待问题,不但响应时间大大延长,而且对于系统资源的占用也更为严重,同时进一步推高了 IMEI 校验的成本; In particular, the prior art passes on IMSI and / or MSISDN The first check to exclude the cottage, get the first check result and then enable EIR for IMEI Verification, that is, there are two verification wait problems, not only the response time is greatly prolonged, but also the system resources are occupied more seriously, and the cost of the IMEI check is further pushed up;
而本发明能够将 IMSI 和 / 或 MSISDN 的校验与 IMEI 校验同步进行,本发明提供了相应的技术方案,其中步骤三中按照预定规则从所述 IMEI 中央数据库 中提取的信息可以包括: The present invention is capable of verifying IMSI and / or MSISDN with IMEI The verification synchronization is performed, and the present invention provides a corresponding technical solution, wherein the information extracted from the IMEI central database according to a predetermined rule in the third step may include:
以 TAC 为索引提取的信息,至少包含相应索引下的 ES ; The information extracted by TAC is at least the ES under the corresponding index;
以 IMEI 为索引提取的信息,至少包含 相应索引下的 ES ; The information extracted by IMEI is at least the ES under the corresponding index;
以 <IMEI , IMSI> 为索引 提取的信息,至少包含 相应索引下的 ES ; The information extracted by <IMEI, IMSI> is at least the ES under the corresponding index;
以 <IMEI , MSISDN> 为索引 提取的信息,至少包含 相应索引下的 ES ; The information extracted by <IMEI, MSISDN> is at least the ES under the corresponding index. ;
以 <IMEI , IMSI , MSISDN> 为索引 提取的信息,至少包含 相应索引下的 ES ; Information extracted with <IMEI, IMSI, MSISDN> as an index, including at least ES under the corresponding index;
以 <IMEI , ~IMSI> 为索引提取的信息:或者 Information extracted with <IMEI , ~IMSI> as an index: or
以 <IMEI , ~MSISDN> 为索引提取的信息; Information extracted with <IMEI , ~MSISDN> as the index;
具体按照哪一种或者哪几种规则进行信息提取,由 CEIR 的维护者(一般是网络运营商)根据实际需要加以控制,事实上, CEIR 的 IMEI 中央数据库也由该维护者加以管理; According to which kind or which rules are used for information extraction, CEIR The maintainers (generally network operators) are controlled according to actual needs. In fact, CEIR's IMEI central database is also managed by the maintainer;
因此一般情况下,步骤三还包括所述 IMEI 中央数据库根据所述移动设备信息更新请求消息,更新与所述移动终端有关的信息的步骤,例如 利用从所述移动设备信息更新请求消息中提取的信息,如收到 IMEI 校验消息的时间、 IMEI 校验消息的来源以及可能的 IMSI 、 MSISDN 等,对 IMEI 中央数据库中与所述 IMEI 有关的相应记录进行更新; Therefore, in general, step 3 also includes the IMEI. The central database updates the information related to the mobile terminal according to the mobile device information update request message, for example, using information extracted from the mobile device information update request message, such as receiving an IMEI Verifying the time of the message, the source of the IMEI check message, and possibly the IMSI, MSISDN, etc., updating the corresponding records in the IMEI central database related to the IMEI;
再比如有可能存在某一移动设备信息更新请求消息在 IMEI 中央数据库中找不到对应移动设备的可能性,那么可以通过提示或者其他手段通知给维护者,由维护者相应添加数据信息以及确定对应的 ES 。 For example, there may be a mobile device information update request message at IMEI. If the possibility of corresponding mobile device is not found in the central database, the maintainer can be notified by prompt or other means, and the maintainer adds data information and determines the corresponding ES.
基于上述实施例,本领域技术人员可以理解,由于在步骤三中第一移动设备信息更新响应消息中携带的信息将被编辑为数据记录,用于对该移动设备下一次的 IMEI 校验,因此在下一轮的 IMEI 校验中,查询本地移动设备列表中是否存在与所述移动设备相匹配的数据记录,是则将根据所述数据记录确定的设备状态 ES 作为校验结果返回给所述 MSC/SGSN 的步骤可相应包括: Based on the above embodiments, those skilled in the art can understand that since the information carried in the first mobile device information update response message in step 3 will be edited as a data record, the next IMEI for the mobile device Checking, so in the next round of IMEI check, it is queried whether there is a data record matching the mobile device in the local mobile device list, and the device status determined according to the data record is ES. The step of returning to the MSC/SGSN as a result of the verification may include:
查询所述 本地移动设备列表; Querying the list of local mobile devices;
一方面,如果存在 以所述移动设备的 TAC 、 IMEI 、 <IMEI , IMSI> 、 <IMEI , MSISDN> 或者 <IMEI , IMSI , MSISDN> 为索引的数据记录 ,则将所述数据记录中的 ES 作为校验结果返回给所述 MSC/SGSN ;具体的可以包括以下情况: On the one hand, if there is TAC, IMEI, <IMEI on the mobile device, IMSI>, <IMEI, MSISDN> or <IMEI, IMSI, MSISDN> for indexed data records And returning the ES in the data record to the MSC/SGSN as a check result; specifically, the following may be included:
( 1 )如果存在以所述移动设备的 TAC 为索引的数据记录,即 在 IMEI 校验过程中所涉及移动设备的 TAC 与本记录索引值相同,则将本记录中的 ES 作为校验结果;这样,可实现基于 ME 型号的网络访问控制; (1) If there is a data record indexed by the mobile device's TAC, ie at IMEI If the TAC of the mobile device involved in the verification process is the same as the index value of this record, the ES in this record is used as the verification result; thus, network access control based on the ME model can be implemented;
( 2 )如果存在以所述移动设备的 IMEI 为索引的数据记录,即 如果 IMEI 校验过程中所涉及移动设备的 IMEI 与本记录索引值相同,则将本记录中的 ES 作为校验结果;这样,可实现基于单一 ME 个体单元的网络访问控制,使用后即可删除;其目标是校验 IMEI 未被非法复制的移动设备; (2) If there is a data record indexed by the IMEI of the mobile device, ie if IMEI If the IMEI of the mobile device involved in the verification process is the same as the index value of this record, the ES in this record is used as the verification result; thus, based on a single ME The network access control of the individual unit can be deleted after use; the goal is to verify the mobile device whose IMEI has not been illegally copied;
( 3 ) 如果存在以所述移动设备的 <IMEI , IMSI> 为索引的数据记录 ,即 如果 IMEI 校验过程中所涉及移动设备的 IMEI 及 IMSI 与本记录索引值相同,则将本记录中的 ES 作为校验结果;这样,可实现基于单一 ME 个体单元的网络访问控制,使用后即可删除;其目标是 IMEI 可能已被非法复制的移动设备,其当前使用者可为合法移动用户或者特定的非法移动用户(通过 IMSI 标明),从而 能够将 IMSI 的校验与 IMEI 校验同步进行 ; (3) If there is a data record indexed by <IMEI, IMSI> of the mobile device That is, if the IMEI and IMSI of the mobile device involved in the IMEI verification process are the same as the index value of this record, the ES in this record is used as the verification result; thus, based on a single ME The network access control of individual units can be deleted after use; the target is a mobile device whose IMEI may have been illegally copied, and its current user can be a legitimate mobile user or a specific illegal mobile user (via IMSI) Marked), so that the IMSI checksum can be synchronized with the IMEI check;
( 4 )如果存在以所述移动设备的 <IMEI , MSISDN > 为索引的数据记录,即 如果 IMEI 校验过程中所涉及移动设备的 IMEI 及 MSISDN 与本记录索引值相同,则将本记录中的 ES 作为校验结果;这样,可实现基于单一 ME 个体单元的网络访问控制,使用后即可删除;其目标是 IMEI 可能已被非法复制的移动设备,其当前使用者可为合法移动用户或者特定的非法移动用户(通过 MSISDN 标明),从而 能够将 MSISDN 的校验与 IMEI 校验同步进行 ; (4) If there is an <IMEI with the mobile device, MSISDN > For the data record of the index, ie if the IMEI and MSISDN of the mobile device involved in the IMEI verification process are the same as the index value of this record, the ES in this record will be As a result of the verification; thus, network access control based on a single ME individual unit can be realized, and can be deleted after use; the target is IMEI A mobile device that may have been illegally copied, whose current user can be a legitimate mobile user or a specific illegal mobile user (marked by MSISDN), so that the MSISDN checksum and IMEI can be performed. Verify the synchronization;
( 5 )如果存在以所述移动设备的 <IMEI , IMSI , MSISDN> 为索引的数据记录 ,即 如果 IMEI 校验过程中所涉及移动设备的 IMEI 、 IMSI 及 MSISDN 与本记录索引值相同,则将本记录中的 ES 作为校验结果;这样,可实现基于单一 ME 个体单元的网络访问控制,使用后即可删除;其目标是 IMEI 可能已被非法复制的移动设备,其当前使用者为合法移动用户或者特定的非法移动用户(通过 IMSI 及 MSISDN 标明),从而 能够将 IMSI 和 MSISDN 的校验与 IMEI 校验同步进行 ; (5) If there is an <IMEI, IMSI, MSISDN with the mobile device> For the data record of the index, ie if the IMEI, IMSI and MSISDN of the mobile device involved in the IMEI verification process are the same as the index value of this record, the ES in this record will be As a result of the verification; thus, network access control based on a single ME individual unit can be realized, and can be deleted after use; the target is IMEI Mobile devices that may have been illegally copied, whose current users are legitimate mobile users or specific illegal mobile users (as indicated by IMSI and MSISDN), thus enabling IMSI and The verification of the MSISDN is performed synchronously with the IMEI check;
另一方面,如果存在以所述移动设备的 <IMEI , ~IMSI> 或者 <IMEI , ~MSISDN> 为索引的数据记录,即存在这样一条数据记录,索引所述数据记录的 IMEI 与所述移动设备的 IMEI 相同,但索引所述数据记录的 IMSI 或 MSISDN 与所述 移动设备的 IMSI 或 MSISDN 不同;则识别所述数据记录中是否存在 ES ,是则将 所述数据记录中的 ES 作为校验结果返回给所述 MSC/SGSN ,否则以 被列入黑名单状态作为校验结果 返回给所述 MSC/SGSN ;具体的可以包括以下情况: On the other hand, if there is <IMEI, ~IMSI> with the mobile device or <IMEI, ~MSISDN> is the data record of the index, ie there is such a data record, indexing the IMEI of the data record with the IMEI of the mobile device The same, but the IMSI or MSISDN indexing the data record is different from the IMSI or MSISDN of the mobile device; then it is identified whether there is an ES in the data record, and then The ES in the data record is returned to the MSC/SGSN as a check result, otherwise it is blacklisted as a check result and returned to the MSC/SGSN. Specific can include the following:
( 6 )如果存在以所述移动设备的 <IMEI , ~IMSI> 为索引的数据记录, 即 IMEI 校验过程中所涉及移动设备的 IMEI 与本记录索引中的 IMEI 值相同但 IMSI 与本记录索引中的 IMSI 值不同时,如果记录中存在 ES ,则将记录中的 ES 作为校验结果,否则,以被列入黑名单状态作为校验结果;这样,可实现基于多个 ME 个体单元的网络访问控制;目标是 IMEI 可能已被非法复制但当前使用者并非为合法移动用户(通过 IMSI 标明合法用户,取非)的移动设备,从而也 能够将 IMSI 的校验与 IMEI 校验同步进行 ; (6) If there is a data record indexed by <IMEI, ~IMSI> of the mobile device, That is, if the IMEI of the mobile device involved in the IMEI verification process is the same as the IMEI value in the record index but the IMSI value is different from the IMSI value in the record index, if there is an ES in the record , the ES in the record is used as the check result, otherwise, it is blacklisted as the check result; thus, network access control based on multiple ME individual units can be realized; the target is IMEI The mobile device that may have been illegally copied but the current user is not a legitimate mobile user (marked as a legitimate user by IMSI), so that the IMSI checksum can be synchronized with the IMEI check.
( 7 ) 如果存在以所述移动设备的 <IMEI , ~ MSISDN > 为索引的数据记录, IMEI 校验过程中所涉及移动设备的 IMEI 与本记录索引中的 IMEI 值相同但 MSISDN 与本记录索引中的 MSISDN 值不同时,如果记录中存在 ES ,则将记录中的 ES 作为校验结果,否则,以被列入黑名单状态作为校验结果;这样,可实现基于多个 ME 个体单元的网络访问控制;其目标是 IMEI 可能已被非法复制且当前使用者并非为合法移动用户(通过 MSISDN 标明合法用户,取非)的移动设备,从而也 能够将 IMSI 的校验与 MSISDN 校验同步进行 ; (7) If there is an <IMEI with the mobile device, ~ MSISDN > For the indexed data record, the IMEI of the mobile device involved in the IMEI check process is the same as the IMEI value in the record index but the MSISDN and the MSISDN in the record index If the value is different, if the ES exists in the record, the ES in the record is used as the check result. Otherwise, the blacklist status is used as the check result; thus, based on multiple MEs Network access control for individual units; the goal is that the IMEI may have been illegally copied and the current user is not a legitimate mobile user (marked by the MSISDN as a legitimate user, not a) mobile device, and thus The IMSI checksum is synchronized with the MSISDN checksum;
本领域技术人员可以理解,当 CEIR 维护者接到多起针对某个合法移动设备的复制报告时,完全可以将该合法移动设备的信息以上述( 6 )( 7 )的规则设置在 IMEI 中央数据库中,从而实现对于多个非法移动用户的识别和处理;这样相对于针对每一个山寨机分别设置 IMEI 及对应的信息,能有效降低 CEIR 维护者的工作量; Those skilled in the art can understand that when CEIR When the maintainer receives multiple replication reports for a legitimate mobile device, the information of the legitimate mobile device can be set in the IMEI according to the above rules (6)(7). In the central database, the identification and processing of multiple illegal mobile users is realized; thus, the IMEI and the corresponding information are respectively set for each cottage, which can effectively reduce the workload of the CEIR maintainer;
从上述( 1 )~( 7 )的情况也可以看出,当 IMEI 校验请求消息 仅携带有所述移动设备的 IMEI 及当前设备状态 ES 时,适用( 1 )和( 2 );当 IMEI 校验请求消息携带有 IMSI 和 / 或 MSISDN 信息时,可以相应适用( 1 )~( 7 ),其中( 3 )~( 7 )都能实现对于山寨机的同步校验;以及,( 1 )、( 6 )和( 7 ),即 以 TAC 、 <IMEI , ~IMSI> 、 <IMEI , ~MSISDN> 为索引的数据记录同时涉及多个移动设备的个体单元,在完成对目标设备进行校验后不应从 EIR 的本地移动设备列表中删除。 It can also be seen from the above cases (1) to (7) that when the IMEI check request message carries only the mobile device For IMEI and current device status ES, (1) and (2) apply; when the IMEI check request message carries IMSI and / or MSISDN information, it can be applied accordingly ( 1)~(7), wherein (3)~(7) can realize synchronous verification for the cottage machine; and, (1), (6) and (7), that is, TAC, <IMEI, ~IMSI>, <IMEI, ~MSISDN> The data records for the index involve individual units of multiple mobile devices, and should not be EIR after completing the verification of the target device. Removed from the list of local mobile devices.
以及,上述技术方案 可根据索引类型,将 EIR 中的本地移动设备列表划分为多个子表分别存储和管理; 当然,上面情况( 1 )~( 7 )仅为举例,本领域技术人员也可以同步进行其他移动终端信息的校验;但无论如何,由于不存在 MSC/SGSN 等待校验信息的问题,因此不会造成响应时间的延长,也不会存在多次信息交互导致的资源占用和成本提高问题。 And the foregoing technical solution may divide the local mobile device list in the EIR into multiple sub-tables for storage and management according to the index type; Of course, the above cases (1)-(7) are only examples, and those skilled in the art can also perform verification of other mobile terminal information synchronously; but in any case, since there is no MSC/SGSN Waiting for the problem of verifying information, so it will not cause an increase in response time, and there will be no resource occupation and cost increase caused by multiple information interactions.
进一步的,本领域技术人员可以理解,本发明中 EIR 设备所存储的本地移动设备列表不再是传统意义上的白名单、灰名单、黑名单或未知设备名单,而是对移动设备当前 ES 进行更新的指令列表,即 EIR 从 CEIR 接收的 对移动设备的管理指令, 进一步可理解为将符合预设规则的某一移动设备设为指令中直接规定的 ES 或者根据指令所能确定的 ES ,例如,被列入白名单、被列入灰名单、被列入黑名单以及未知状态,等等; Further, those skilled in the art can understand that in the present invention, EIR The list of local mobile devices stored by the device is no longer a whitelist, graylist, blacklist, or unknown device list in the traditional sense, but a list of instructions for updating the current ES of the mobile device, that is, EIR from CEIR. The received management command for the mobile device can be further understood as a certain mobile device that meets the preset rule as an ES directly specified in the command or an ES that can be determined according to the command. , for example, being whitelisted, grayed out, blacklisted, and unknown, etc.;
再进一步的,本领域技术人员可以将现有技术运用于本发明的技术方案中,例如, MSC/SGSN 根据接收到的校验结果对所述移动设备执行网络访问控制,即根据接收到的校验结果确定是否允许移动设备接入网络; Further, those skilled in the art can apply the prior art to the technical solution of the present invention, for example, MSC/SGSN Performing network access control on the mobile device according to the received verification result, that is, determining whether to allow the mobile device to access the network according to the received verification result;
但有的情况下,为了适应本发明的特点需要对现有技术加以适当调整,举例来说: However, in some cases, in order to adapt to the characteristics of the present invention, it is necessary to appropriately adjust the prior art, for example:
本领域技术人员当然了解, MSC/SGSN 在收到移动设备开机或位置更新等触发消息时,获取信息并编码生成 IMEI 校验请求消息以及发送给 EIR ;但由于本发明将当前 ES 一同编码到该 IMEI 校验请求消息中,甚至该 IMEI 校验请求消息中还可能包括 IMSI 、 MSISDN 等信息,因此 MSC/SGSN 在编码过程中也需要进行适应性调整;具体来说,是按照 3GPP 协议标准生成所述 IMEI 校验请求消息,在仅携带当前 ES 信息的情况下 可以直接将 ES 信息编码到满足 3GPP 协议标准的扩展容器参数中 ,在附加了 IMSI 、 MSISDN 等信息的情况下,可以将 IMSI 、 MSISDN 等信息一起编码到满足 3GPP 协议标准的扩展容器参数中; Those skilled in the art will of course understand that MSC/SGSN Upon receiving a trigger message such as a mobile device boot or location update, the information is obtained and encoded to generate an IMEI check request message and sent to the EIR; however, since the present invention encodes the current ES together to the IMEI In the verification request message, even the IMEI check request message may include information such as IMSI and MSISDN, so the MSC/SGSN Adaptation adjustment is also required in the encoding process; specifically, the IMEI verification request message is generated according to the 3GPP protocol standard, and the ES can be directly directly carried only when the current ES information is carried. The information is encoded into the extended container parameters that meet the 3GPP protocol standard. When IMSI, MSISDN, etc. are added, IMSI and MSISDN can be added. The information is encoded together into an extended container parameter that satisfies the 3GPP protocol standard;
类似的, EIR 需要对接收到的 IMEI 校验请求消息加以解码之后再进行本地移动设备列表的查询, EIR 和 MSC/SGSN 之间存在校验结果的编解码操作,以及 EIR 和 CEIR 的交互过程中同样存在编解码操作等等,在此不再赘述。 Similarly, the EIR needs to decode the received IMEI check request message before performing a local mobile device list query. The codec operation of the check result between the EIR and the MSC/SGSN and the codec operation in the interaction between the EIR and the CEIR are also omitted here.
下面通过具体的实施例来对本发明进行示例性描述,以使本领域技术人员能够更直观的了解本发明所提供的方法的处理过程,但仅为举例而非限制: The present invention is exemplarily described in the following by means of specific embodiments, so that those skilled in the art can more clearly understand the process of the method provided by the present invention, but by way of example and not limitation.
MSC/SGSN 接收到 IMEI 校验的触发消息后,在 3GPP 协议规定的标准消息 'Check IMEI' 消息中增加该移动设备的当前 ES ,或者进一步增加 IMSI 、 MSISDN 等参数,使其扩展为 'Extended Check IMEI' 消息后发送至 EIR ; EIR 收到 'Extended Check IMEI' 消息后,查询本地存储的移动设备列表,如果存在与该设备相匹配的数据记录,则将根据该数据记录确定的 ES 作为校验结果,否则将当前 ES 作为校验结果,然后将校验结果编码为 'Extended Check IMEI Ack' 消息发送给 MSC/SGSN ; MSC/SGSN 根据所收到的校验结果确定是否允许该移动设备接入网络; EIR 将所接收到的 'Extended Check IMEI' 消息中包含的 IMEI 、 ES 及可能的 IMSI 、 MSISDN 等参数以 'Update ME Info Request' 消息的形式发送至 CEIR ; CEIR 将所接收到的 ES 与 IMEI 中央数据库中所存储的相应移动设备的 ES 进行比较,确定是否对 EIR 中所存储的移动设备列表进行更新,如果需要更新则将更新指令编码到 'Update ME Info Response' 消息中并发送给 EIR ; EIR 接收 'Update ME Info Response' 消息,并对本地移动设备列表进行更新; CEIR 的维护者利用所接收到的信息对 IMEI 中央数据库进行更新, 如收到 IMEI 校验消息的时间、 IMEI 校验消息的来源以及可能的 IMSI 、 MSISDN 等 。 After the MSC/SGSN receives the trigger message of the IMEI check, the standard message specified in the 3GPP protocol Add the current ES of the mobile device to the 'Check IMEI' message, or further increase the parameters such as IMSI and MSISDN to expand to 'Extended Check The IMEI' message is sent to the EIR; the EIR receives the 'Extended Check IMEI' After the message, query the locally stored list of mobile devices. If there is a data record matching the device, the ES determined according to the data record is used as a check result, otherwise the current ES is As a result of the check, the check result is then encoded as an 'Extended Check IMEI Ack' message to the MSC/SGSN; MSC/SGSN Determine whether to allow the mobile device to access the network according to the received verification result; EIR will include the IMEI, ES included in the received 'Extended Check IMEI' message And possible parameters such as IMSI and MSISDN are sent to CEIR in the form of 'Update ME Info Request' message; CEIR will receive the ES Compare with the ES of the corresponding mobile device stored in the IMEI central database to determine whether to update the list of mobile devices stored in the EIR, and if necessary to update the update instructions to 'Update ME Info Response' message and sent to EIR; EIR receives 'Update ME Info Response' Messages and updates to the list of local mobile devices; the maintainer of the CEIR updates the IMEI central database with the received information, such as the time of receiving the IMEI check message, IMEI Verify the source of the message and possible IMSI, MSISDN, etc.
图 4 示出了根据上述实施例,本发明所提供方法的流程图,包括以下步骤: 4 shows a flow chart of a method provided by the present invention according to the above embodiment, comprising the following steps:
步骤 S401 ,由 MSC/SGSN 向 EIR 发送 'Extended Check IMEI' 请求消息,该消息在原 'Check IMEI' 消息的基础上附加了移动设备的当前 ES , 优选的,还可以进一步包括 IMSI 和 MSISDN 等信息; 而当前 ES 等信息已存储在 VLR ( Visit Location Register ,拜访位置寄存器)或 SGSN 之中, MSC/SGSN 可以容易地获得; Step S401, the MSC/SGSN sends an 'Extended Check to the EIR. IMEI' request message, which is attached to the current ES of the mobile device based on the original 'Check IMEI' message. Preferably, it may further include IMSI and MSISDN. Information such as the current ES is stored in the VLR ( Visit Location Register) or SGSN, MSC/SGSN Can be easily obtained;
步骤 S402 , EIR 查询本地移动设备列表 , 如果该本地移动设备列表中存在与该移动设备相匹配的数据记录,则按照列表要求设置最终的 ES, 否则保持当前 ES 不变, EIR 将所得 ES 作为校验结果以 'Extended Check IMEI Ack' 消息的形式发送给 MSC/SGSN , MSC/SGSN 根据所收到的校验结果确定是否允许该移动设备接入网络; Step S402, the EIR queries the local mobile device list, If there is a data record matching the mobile device in the local mobile device list, the final ES is set according to the list requirement, otherwise the current ES is kept unchanged, and the EIR takes the obtained ES as the verification result. The 'Extended Check IMEI Ack' message is sent to the MSC/SGSN, MSC/SGSN Determining whether the mobile device is allowed to access the network according to the received verification result;
步骤 S403 , EIR 向 CEIR 发送 'Update ME Info Request' 消息,将 IMEI 、当前的 ES 及可能的 IMSI 、 MSISDN 等与移动设备有关的信息传送给 CEIR ; Step S403, EIR sends 'Update ME Info Request' to CEIR Message, transmitting IMEI, current ES and possible IMSI, MSISDN and other mobile device related information to CEIR;
步骤 S404 , CEIR 接收 'Update ME Info Request' 消息,并对消息中的 ES 信息和 IMEI 中央数据库中的 ES 信息进行比较,确定是否应该更新 EIR 中相应 IMEI 的 ES ;如果不需要更新,则发送表示正常接收的 'Update ME Info Response' 消息给 EIR 并结束本流程,否则发送包含了用于更新 EIR 中移动设备列表的指令的 'Update ME Info Response' 消息给 EIR ,一般情况下,是 将从 IMEI 中央数据库中查询到的 ES 和对所述移动设备的识别信息 作为对所述 EIR 的更新指令来编码 移动设备信息更新响应消息 'Update ME Info Response' 。 Step S404, CEIR receives 'Update ME Info Request' Message and compare the ES information in the message with the ES information in the IMEI central database to determine if the corresponding IMEI ES in the EIR should be updated If an update is not required, send an 'Update ME Info Response' message indicating normal reception to the EIR and end the process, otherwise the send contains the EIR for update The 'Update ME Info Response' message of the instruction in the mobile device list is given to EIR. In general, it is the ES that will be queried from the IMEI central database. And the identification information for the mobile device is encoded as a mobile device information update response message 'Update ME Info Response' as an update command to the EIR.
作为进一步细化,下面分别对上面实施例中 MSC 、 SGSN 、 EIR 和 CEIR 设备的具体处理流程分别加以描述。 As a further refinement, the following examples are respectively for MSC, SGSN, EIR and CEIR in the above embodiments. The specific processing flow of the device is described separately.
参考图 5 ,为 MSC 设备中的具体处理流程: Refer to Figure 5 for the specific processing flow in the MSC device:
步骤 S501 ,接收到 IMEI 校验触发事件,如标识请求、鉴权加密等; Step S501, receiving an IMEI check trigger event, such as an identification request, an authentication encryption, or the like;
步骤 S502 ,检查是否启动 IMEI 校验流程,如果不需要,则结束本流程; Step S502, checking whether the IMEI verification process is started, and if not, ending the process;
步骤 S503 ,获取与该移动设备相关的 IMEI 、 ES 和可能的 IMSI 、 MSISDN 等信息; Step S503, acquiring IMEI, ES, and possible IMSI, MSISDN related to the mobile device. Information
步骤 S504 ,设置 'Extended Check IMEI' 消息:按 3GPP 协议规定的 MAP_CHECK_IMEI 原语将 IMEI 编码为标准的 'Check IMEI' 消息,把 ES 和 IMSI 、 MSISDN 等可能的其它信息以 extensionContainer/ privateExtensionList/ extId 的形式编码到 MAP_CHECK_IMEI 原语的扩展容器中,其中,每个 extId 可包括最多 16 个 2 字节整数,采用 ASN.1 方式编码; Step S504, setting an 'Extended Check IMEI' message: according to the 3GPP protocol The MAP_CHECK_IMEI primitive encodes IMEI as a standard 'Check IMEI' message, with possible additional information such as ES and IMSI, MSISDN, etc. The form of extensionContainer/ privateExtensionList/extId is encoded into MAP_CHECK_IMEI In the extension container of the primitive, where each extId can include up to 16 2-byte integers, encoded in ASN.1 mode;
步骤 S505 ,将 'Extended Check IMEI' 消息发送到 EIR ; Step S505, sending an 'Extended Check IMEI' message to the EIR;
步骤 S506 ,等待来自于 EIR 的 'Extended Check IMEI Ack' 消息; Step S506, waiting for 'Extended Check IMEI Ack' from EIR Message
步骤 S507 ,接收来自于 EIR 的 'Extended Check IMEI Ack' 消息; Step S507, receiving 'Extended Check IMEI Ack' from EIR Message
步骤 S508 ,根据 'Extended Check IMEI Ack' 消息中的校验结果确定是否允许所述移动设备接入网络。 Step S508, according to 'Extended Check IMEI Ack' The check result in the message determines whether the mobile device is allowed to access the network.
参考图 6 ,为 SGSN 设备中的具体处理流程: Refer to Figure 6 for the specific processing flow in the SGSN device:
步骤 S601 ,接收到 IMEI 校验触发事件,如标识请求、鉴权加密等; Step S601, receiving an IMEI check trigger event, such as an identification request, an authentication encryption, or the like;
步骤 S602 ,检查是否启动 IMEI 校验流程,如果不需要,则结束本流程; Step S602, checking whether the IMEI verification process is started, and if not, ending the process;
步骤 S603 ,获取与该移动设备相关的 IMEI 、 ES 和可能的 IMSI 、 MSISDN 等信息; Step S603, acquiring IMEI, ES, and possible IMSI, MSISDN related to the mobile device. Information
步骤 S604 ,设置 'Extended Check IMEI' 消息:按 3GPP 协议规定的 MAP_CHECK_IMEI 原语将 IMEI 编码为标准的 'Check IMEI' 消息,把 ES 和 IMSI 、 MSISDN 等可能的其它信息以 extensionContainer/ privateExtensionList/ extId 的形式编码到 MAP_CHECK_IMEI 原语的扩展容器中,其中,每个 extId 可包括最多 16 个 2 字节整数,采用 ASN.1 方式编码; Step S604, setting an 'Extended Check IMEI' message: according to the 3GPP protocol The MAP_CHECK_IMEI primitive encodes IMEI as a standard 'Check IMEI' message, with possible additional information such as ES and IMSI, MSISDN, etc. The form of extensionContainer/ privateExtensionList/extId is encoded into MAP_CHECK_IMEI In the extension container of the primitive, where each extId can include up to 16 2-byte integers, encoded in ASN.1 mode;
步骤 S605 ,将 'Extended Check IMEI' 消息发送到 EIR ; Step S605, sending an 'Extended Check IMEI' message to the EIR;
步骤 S606 ,等待来自于 EIR 的 'Extended Check IMEI Ack' 消息; Step S606, waiting for 'Extended Check IMEI Ack' from EIR Message
步骤 S607 ,接收来自于 EIR 的 'Extended Check IMEI Ack' 消息; Step S607, receiving an 'Extended Check IMEI Ack' from the EIR Message
步骤 S608 ,根据 'Extended Check IMEI Ack' 消息中的校验结果确定是否允许所述移动设备接入网络。 Step S608, according to 'Extended Check IMEI Ack' The check result in the message determines whether the mobile device is allowed to access the network.
参考图 7 ,为 EIR 设备中的具体处理流程: Refer to Figure 7 for the specific processing flow in the EIR device:
步骤 S701 ,接收 'Extended Check IMEI' 消息; Step S701, receiving an 'Extended Check IMEI' message;
步骤 S702 ,对接收到的 'Extended Check IMEI' 消息进行解码,解析出 IMEI 、 ES 及可能包含的 IMSI 、 MSISDN 等参数; Step S702, decoding the received 'Extended Check IMEI' message, parsing out IMEI, ES and possible parameters such as IMSI and MSISDN;
步骤 S703 ,查询本地移动设备列表; Step S703, querying a local mobile device list;
步骤 S704 ,如果本地移动设备列表中包含了与当前的移动设备相匹配的数据记录,则需要变更当前移动设备的 ES ,转步骤 S706 ; Step S704 If the local mobile device list contains the data record that matches the current mobile device, the ES of the current mobile device needs to be changed, and the process goes to step S706;
步骤 S705 ,采用从 'Extended Check IMEI' 消息中解析出的 ES 作为校验结果,转入步骤 S707 ; Step S705, using the ES parsed from the 'Extended Check IMEI' message As a result of the verification, the process proceeds to step S707;
步骤 S706 ,根据对本地移动设备列表的查询结果 确定最终的 ES 并 作为校验结果; Step S706: Determine a final ES according to a query result of the local mobile device list, and use the verification result as a check result.
步骤 S707 ,将上述校验结果编码为 'Extended Check IMEI Ack' 消息并发送至所述 MSC/ SGSN ; Step S707, encoding the verification result as 'Extended Check IMEI Ack' Sending a message to the MSC/SGSN;
步骤 S708 ,向 CEIR 发送 'Update ME Info Request' 消息,该消息中包含了 IMEI 、当前 ES 及可能的 IMSI 、 MSISDN 等信息; Step S708, sending 'Update ME Info Request' to the CEIR Message, which contains information such as IMEI, current ES, and possible IMSI, MSISDN;
步骤 S709 ,等待来自于 CEIR 的 'Update ME Info Response' 消息; Step S709, waiting for 'Update ME Info Response' from CEIR Message
步骤 S710 ,接收来自于 CEIR 的 'Update ME Info Response' 消息; Step S710, receiving 'Update ME Info Response' from CEIR Message
步骤 S711 ,从 'Update ME Info Response' 消息中解析出所包含的全部参数; Step S711, from 'Update ME Info Response' Parse out all the parameters contained in the message;
步骤 S712 ,如果 'Update ME Info Response' 消息中未包含对本地移动设备列表进行更新的指令,则结束本流程; Step S712, if 'Update ME Info Response' The message does not include an instruction to update the local mobile device list, and the process ends.
步骤 S713 ,如果 'Update ME Info Response' 消息中包含对本地移动设备列表进行更新的指令,则将所述 'Update ME Info Response' 消息中携带的信息编辑为所述本地移动设备列表中的一条数据记录,实现对本地移动设备列表的一次更新; Step S713, if 'Update ME Info Response' The message contains an instruction to update the local mobile device list, then the 'Update ME Info Response' The information carried in the message is edited as a data record in the local mobile device list, and an update to the local mobile device list is implemented;
需要注意的是,上述步骤是基于 EIR 针对某个移动设备的 IMEI 校验过程来描述的,当 EIR 同时针对多台移动设备进行 IMEI 校验时, 'Update ME Info Request' 消息中将携带多台移动设备的信息,而 'Update ME Info Response' 消息中也可能包括针对多台移动设备的更新指令,这种情况下,将同时编辑本地移动设备列表中的多条数据记录。 It should be noted that the above steps are described based on the EIR IMEI verification process for a mobile device, when EIR At the same time, when IMEI check is performed for multiple mobile devices, the 'Update ME Info Request' message will carry information of multiple mobile devices, and 'Update ME The Info Response' message may also include update instructions for multiple mobile devices, in which case multiple data records in the local mobile device list will be edited simultaneously.
参考图 8 ,为 CEIR 设备中的具体处理流程: Refer to Figure 8 for the specific processing flow in the CEIR device:
步骤 S801 ,从 EIR 接收 'Update ME Info Request' 消息; Step S801, receiving an 'Update ME Info Request' message from the EIR;
步骤 S802 ,对 'Update ME Info Request' 消息进行解析,获取 IMEI 、当前 ES 及可能的 IMSI 、 MSISDN 等信息; Step S802, parsing the 'Update ME Info Request' message, obtaining IMEI, current ES and possible IMSI, MSISDN and other information;
步骤 S803 ,查询 IMEI 中央数据库,获取与该移动设备相关的 IMEI 、 ES 及可能的 IMSI 、 MSISDN 等信息; Step S803, querying the IMEI central database to obtain IMEI, ES and possible related to the mobile device Information such as IMSI and MSISDN;
步骤 S804 ,对来自于 'Update ME Info Request' 消息和 IMEI 中央数据库的 ES 进行比较; Step S804, the message from the 'Update ME Info Request' and the IMEI The ES of the central database is compared;
步骤 S805 ,根据上述比较结果判断是否需要更新 EIR 中存储的移动设备列表,如果不需要更新,则转入步骤 S807 ; Step S805, judging whether it is necessary to update the EIR according to the comparison result. The list of mobile devices stored in the file, if no update is required, then proceeds to step S807;
步骤 S806 ,按照预定规则从所述 IMEI 中央数据库中提取信息,并将其作为更新指令;上述预定规则请参考前述的信息提取方式,例如以 TAC 、 IMEI 、 <IMEI , IMSI> 、 <IMEI , MSISDN> 、 <IMEI , IMSI , MSISDN> 、 <IMEI , ~IMSI> 、 <IMEI , ~MSISDN> 为索引,但不限于上述提取方式 ; Step S806, according to a predetermined rule from the IMEI Extract the information from the central database and use it as an update command. For the above-mentioned predetermined rules, please refer to the above information extraction method, for example, TAC, IMEI, <IMEI, IMSI>, <IMEI, MSISDN>, <IMEI, IMSI, MSISDN>, <IMEI, ~IMSI>, <IMEI, ~MSISDN> is an index, but is not limited to the above extraction method;
步骤 S807 ,编码 'Update ME info Response' 消息,编码对象或者是基于步骤 S806 获得的更新指令,或者是基于步骤 S805 的对 'Update ME Info Request' 消息的 接收结果; Step S807, encoding 'Update ME info Response' The message, the encoding object is either an update instruction obtained based on step S806, or a result of receiving the 'Update ME Info Request' message based on step S805;
步骤 S808 ,向 EIR 发送 'Update ME Info Response' 消息。 Step S808, sending an 'Update ME Info Response' message to the EIR.
此外,还包括 IMEI 中央数据库的更新步骤,即利用从 'Update ME Info Request' 消息中提取的信息,如收到 IMEI 校验消息的时间、 IMEI 校验消息的来源以及可能的 IMSI 、 MSISDN 等,对 IMEI 中央数据库中与所述 IMEI 有关的记录进行更新(图中未示) 。 In addition, it also includes the update steps of the IMEI central database, ie from 'Update ME Info Information extracted from the Request' message, such as the time when the IMEI check message was received, the source of the IMEI check message, and possible IMSI, MSISDN, etc., to IMEI The records related to the IMEI in the central database are updated (not shown).
根据本发明,还提供了一种用于快速校验 IMEI 的系统,系统 900 的总体结构如图 9
所示,包括 CEIR 设备 910 、 EIR 设备 920 、 MSC 设备 930 和 SGSN 设备 940 。下面通过一个具体实施例对该快速校验
IMEI 的系统 900 加以描述: According to the present invention, there is also provided a system for quickly verifying IMEI, and the overall structure of
MSC 设备 930 或 SGSN 设备 940 接收到对一个移动设备进行 IMEI
校验的触发消息后,将所述移动设备的当前 ES 及可能的 IMSI 、 MSISDN 等信息以 extensionContainer/
privateExtensionList/ extId 方式对标准的 'Check IMEI' 消息进行扩展,将所得到的 'Extended Check
IMEI' 消息发送到 EIR 设备 920 ; EIR 设备 920 从 'Extended Check IMEI' 消息中解析出所述移动设备的 IMEI
、当前 ES 及可能的 IMSI 、 MSISDN
等参数,并查询本地存储的移动设备列表;如果本地移动设备列表中不存在与所述移动设备相匹配的数据记录,比如不存在以所述移动设备的 IMEI
为索引的记录,则以所述移动设备的当前 ES 作为校验结果,否则,以根据本地移动设备列表相应数据记录所确定的 ES 作为校验结果;一方面,将上述校验结果通过
'Extended Check IMEI Ack' 消息发送给所述 MSC 设备 930 或 SGSN 设备 940 ;另一方面,
如果所述本地移动设备列表的数据记录仅涉及单个设备,即涉及该请求 IMEI 校验的移动设备,则删除所述数据记录 ;以及, EIR 设备 920 将 IMEI
、当前 ES 及可能的 IMSI 、 MSISDN 等信息编码为 'Update ME Info Request' 消息,发送到 CEIR 设备 910 ;
CEIR 设备 910 从 'Update ME Info Request' 消息中解析出 IMEI 、当前 ES 及可能的 IMSI 、 MSISDN
等参数; CEIR 设备 910 从 IMEI 中央数据库查询获得与该移动设备对应的 IMEI 、 ES 及可能的 IMSI 、 MSISDN 等信息;
CEIR 设备 910 对所接收到的 'Update ME Info Request' 消息中所包含的 ES 和从 IMEI 中央数据库中所查询到的 ES
进行对比,如果不一致,则需要更新 EIR 设备 920 中的移动设备列表,将按照预定规则从所述 IMEI 中央数据库中提取的信息作为更新指令 和对
'Update ME Info Request' 消息的接收结果 编码到 'Update ME Info Response' 消息中并发送给 EIR 设备
920 ,否则,将 对 'Update ME Info Request' 消息的接收结果编码到 'Update ME info Response'
消息中并发送给 EIR 设备 920 ; MSC device 930 or SGSN device 940 receives IMEI for a mobile device
After the triggered trigger message, the mobile device's current ES and possible IMSI, MSISDN and other information are extendedContainer/
The privateExtensionList/extId method extends the standard 'Check IMEI' message and the resulting 'Extended Check'
The IMEI' message is sent to the EIR device 920; the EIR device 920 parses the IMEI of the mobile device from the 'Extended Check IMEI' message
, current ES and possible IMSI, MSISDN
And parameterizing, and querying the locally stored list of mobile devices; if there is no data record matching the mobile device in the local mobile device list, for example, there is no IMEI with the mobile device
For the indexed record, the current ES of the mobile device is used as a check result; otherwise, the ES determined according to the corresponding data record of the local mobile device list is used as a check result; on the one hand, the above check result is passed
An 'Extended Check IMEI Ack' message is sent to the MSC device 930 or SGSN device 940; on the other hand,
If the data record of the local mobile device list relates to only a single device, ie, the mobile device that requests the IMEI check, the data record is deleted; and the EIR device 920 will IMEI
The current ES and possible IMSI, MSISDN and other information are encoded as 'Update ME Info Request' message and sent to the CEIR device 910;
The CEIR device 910 parses out the IMEI, the current ES, and the possible IMSI, MSISDN from the 'Update ME Info Request' message.
And other parameters; the
其中, CEIR 设备 910 按照预定规则从所述 IMEI 中央数据库中提取的信息可以包括:
The information extracted by the
以 TAC 为索引提取的信息,至少包含相应索引下的 ES ; The information extracted by TAC is at least the ES under the corresponding index;
以 IMEI 为索引提取的信息,至少包含 相应索引下的 ES ; The information extracted by IMEI is at least the ES under the corresponding index;
以 <IMEI , IMSI> 为索引 提取的信息,至少包含 相应索引下的 ES ; The information extracted by <IMEI, IMSI> is at least the ES under the corresponding index;
以 <IMEI , MSISDN> 为索引 提取的信息,至少包含 相应索引下的 ES ; The information extracted by <IMEI, MSISDN> is at least the ES under the corresponding index. ;
以 <IMEI , IMSI , MSISDN> 为索引 提取的信息,至少包含 相应索引下的 ES ; Information extracted with <IMEI, IMSI, MSISDN> as an index, including at least ES under the corresponding index;
以 <IMEI , ~IMSI> 为索引提取的信息:或者 Information extracted with <IMEI , ~IMSI> as an index: or
以 <IMEI , ~MSISDN> 为索引提取的信息; Information extracted with <IMEI , ~MSISDN> as the index;
以及, EIR 本地移动设备列表中记载的 ES 及所述 CEIR 的 IMEI 中央数据库中存储的 ES 包括:被列入白名单、被列入灰名单、被列入黑名单以及未知状态;特别是, EIR 本地移动设备列表大部分时间都保持接近于空表状态,从而保证 'Extended Check IMEI' 消息和 'Update ME Info Request' 消息之间的间隔相对固定且远低于其他常见 IMEI 校验技术; And the ES recorded in the EIR local mobile device list and stored in the IMEI central database of the CEIR ES includes: whitelisted, graylisted, blacklisted, and unknown; in particular, the EIR local mobile device list remains close to the empty table for most of the time, thus ensuring The interval between the 'Extended Check IMEI' message and the 'Update ME Info Request' message is relatively fixed and much lower than other common IMEIs. Calibration technique
同时,由于引入了 IMSI 和 MSISDN 数据,能够同步实现对于非法复制 IMEI 的移动设备的识别。 At the same time, due to the introduction of IMSI and MSISDN data, it is possible to synchronize IMEI for illegal replication. Identification of mobile devices.
下面通过具体实施例对上述快速校验 IMEI 的系统 900
加以详细描述,同样的,这些具体实施例仅为示例性说明而非限制。 The
如图 10 所示, MSC 设备 9930/SGSN 设备 940 进一步包括:数据获取单元
1001 、校验请求编码单元 1002 、校验请求发送单元 1003 、校验响应接收单元 1004 、校验响应解码单元 1005 以及网络访问控制单元
1006 ;所述数据获取单元 1001 用于获取相应移动设备的 IMEI 、当前 ES 及可能的 IMSI 、 MSISDN 等信息;所述校验请求编码单元
1002 ,用于将 ES 及可能的 IMSI 、 MSISDN 等信息与 IMEI 一起编码到 IMEI 校验请求消息中,具体编码方式优选的,为按照 3GPP
协议标准 将所述获取的信息编码到 IMEI 校验请求消息中 ;所述校验请求发送单元 1003 ,用于将所述 IMEI 校验请求消息发送到 EIR 设备 920
;所述校验响应接收单元 1004 ,用于从 EIR 设备 920 接收 携带有校验结果的 IMEI 校验响应消息;所述校验响应解码单元 1005 ,用于从
IMEI 校验响应消息中解码出校验结果 ; 网络访问控制单元 1006 ,用于根据校验结果对该移动设备执行网络访问控制。 As shown in FIG. 10, the MSC device 9930/
如图 11 所示, EIR 设备 920 进一步包括:校验请求接收单元 1101
、校验请求解码单元 1102 、 本地移动设备列表 1103 、移动设备列表管理单元 1104 、 标识校验单元 1105 、校验响应编码单元 1106
、校验响应发送单元 1107 、移动设备信息更新请求编码单元 1108 、移动设备信息更新请求发送单元 1109 、移动设备信息更新响应接收单元 1110
和移动设备信息更新响应解码单元 1111 ;所述校验请求接收单元 1101 ,用于接收来自于 MSC 设备 930/SGSN 设备 940 的 IMEI
校验请求消息;所述校验请求解码单元 1102 ,用于解码出所述 IMEI 校验请求消息中携带的信息,例如 IMEI 、当前 ES 及可能的 IMSI 、
MSISDN 等信息;所述 本地移动设备列表 1103 ,用于保存从 CEIR 设备 910 接收的记录;所述移动设备列表管理单元 1104
,用于管理本地移动设备列表; 所述标识校验单元 1105 , 与校验请求解码单元 1102 连接,用于查询本地移动设备列表中是否存在
与所述移动设备相匹配的数据 记录,是则将根据 该数据记录确定的 ES 作为校验结果, 如果所述数据记录仅涉及该移动设备,则触发移动设备列表管理单元 1104
删除所述数据记录 ;否则直接以解码出的当前 ES 作为校验结果,简单的说,就是根据所述 IMEI 校验请求消息中携带的当前 ES
作为校验结果;所述校验响应编码单元 1106 , 与标识校验单元 1105 连接, 用于将校验结果编码到 IMEI 校验响应消息中;所述校验响应发送单元
1107 ,用于将所述 IMEI 校验响应消息发送到原 MSC 设备 930 或 SGSN 设备 940 ;所述移动设备信息更新请求编码单元 1108 ,
与所述校验请求解码单元 1102 连接, 用于将 将校验请求解码单元 1102 解码出的信息,例如 IMEI 、当前 ES 及可能的 IMSI 、
MSISDN 等移动设备信息编码到 'Update ME Info Request' 消息中;所述移动设备信息更新请求发送单元 1109 ,用于将所述
'Update ME Info Request' 消息发送到 CEIR 设备 910 ;所述移动设备信息更新响应接收单元 1110 ,用于从 CEIR 设备
910 接收 'Update ME Info Response' 消息, 该 'Update ME Info Response' 消息携带有表示 CEIR
设备 910 对 'Update ME Info Request' 消息接收结果的信息,可能也携带有对本地移动设备列表的更新指令
;所述移动设备信息更新响应解码单元 1111 ,用于从 'Update ME Info Response' 消息中解析出其携带的信息,
如果携带的是对本地移动设备列表的更新指令,则触发移动设备列表管理单元 1104 将其编辑为所述本地移动设备列表 1103 中的数据记录; As shown in FIG. 11, the
其中, 所述标识校验单元 1105 查询本地移动设备列表具体包括: The
所述标识校验单元 1105 查询所述 本地移动设备列表 1103 ; The
如果存在以所述移动设备的 TAC 、 IMEI 、 <IMEI , IMSI> 、 <IMEI , MSISDN> 或者 <IMEI , IMSI , MSISDN> 为索引的数据记录,则将所述数据记录中的 ES 作为校验结果,并触发所述 校验响应编码单元 1106 ; If there is TAC, IMEI, <IMEI, IMSI> of the mobile device, <IMEI, MSISDN> or <IMEI, IMSI, MSISDN> is the indexed data record, then the ES in the data record As a result of the verification, the verification response encoding unit 1106 is triggered;
如果存在以所述移动设备的 <IMEI , ~IMSI> 或者 <IMEI , ~MSISDN> 为索引的数据记录,即存在这样一条数据记录,索引所述数据记录的 IMEI 与所述移动设备的 IMEI 相同,但索引所述数据记录的 IMSI 或 MSISDN 与所述 移动设备的 IMSI 或 MSISDN 不同;则识别所述数据记录中是否存在 ES ,是则将 所述数据记录中的 ES 作为校验结果并触发所述 校验响应编码单元 1106 ,否则以 被列入黑名单状态作为校验结果 触发所述 校验响应编码单元 1106 。 If there is <IMEI, ~IMSI> or <IMEI on the mobile device, ~MSISDN> is the data record of the index, that is, there is such a data record, the IMEI indexing the data record is the same as the IMEI of the mobile device, but the data record is indexed The IMSI or MSISDN is different from the IMSI or MSISDN of the mobile device; then it is identified whether there is an ES in the data record, and the ES in the data record is The verification response encoding unit 1106 is triggered as a result of the verification, otherwise the verification response encoding unit 1106 is triggered by being blacklisted as a verification result.
如图 12 所示, CEIR 设备 910 进一步包括:移动设备信息更新请求接收单元 1201
、移动设备信息更新请求解码单元 1202 、 更新处理单元 1203 、 IMEI 中央数据库 1204 、 IMEI 中央数据库管理单元 1205 、
移动设备列表远端管理单元 1206 、移动设备信息更新响应编码单元 1207 和移动设备信息更新响应发送单元 1208 ;所述移动设备信息更新请求接收单元
1201 ,用于接收来自于 EIR 设备 920 的 'Update ME Info Request' 消息;所述移动设备信息更新请求解码单元 1202
,用于从所述 'Update ME Info Request' 消息中解析出 IMEI 、当前 ES 及可能的 IMSI 、 MSISDN 等信息;所述
IMEI 中央数据库 1204 ,用于移动设备信息的存储,具体来说, CEIR 设备 910 中的全部移动设备信息都存储在 IMEI 中央数据库 1203
中,该 IMEI 中央数据库 1204 可以是如现有技术的分布式海量数据库; 所述 IMEI 中央数据库管理单元 1205 ,提供与 CEIR
维护者的人机接口,从而使维护者能够 对 IMEI 中央数据库 1204 所存储的 移动设备信息( IMEI 、 ES 及可能的 IMSI 、 MSISDN
等)进行管理;所述 更新处理单元 1203 ,与所述移动设备信息更新请求解码单元 1202 、 IMEI 中央数据库 1204 连接,用于从所述 IMEI
中央数据库 1204 中查询获得所述移动终端的 ES ,并与所述移动设备信息更新请求消息中解码出的 ES 一起发送给移动设备列表远端管理单元 1206
;以及, 根据所述移动设备信息更新请求消息,更新 IMEI 中央数据库 1204 中与所述移动终端有关的信息,比如 收到 IMEI 校验消息的时间、 IMEI
校验消息的来源以及可能的 IMSI 、 MSISDN 等 ;所述移动设备列表远端管理单元 1206 , 与所述更新处理单元 1203 连接, 用于
对从所述更新处理单元 1203 接收到的两个 ES 加以对比,具体来说,就是对比来自 IMEI 中央数据库 1204 的 ES 和来自 'Update ME
Info Request' 消息中解码出的 ES ,如果不一致,则按照预定规则从所述 IMEI 中央数据库中提取信息作为更新指令
,并触发移动设备信息更新响应编码单元,如果一致,可以直接触发移动设备信息更新响应编码单元或者不采取操作 ;所述移动设备信息更新响应编码单元 1207 ,用于
根据所述移动设备列表远端管理单元 1206 的触发, 编码 'Update ME Info Response' 消息,该 'Update ME Info
Response' 消息中可能包括更新指令,也可能仅包括表示 CEIR 设备 910 正常接收的信息,当然,即使针对同一移动终端,在携带有更新指令的情况下,该
'Update ME Info Response' 消息也可以同时携带表示 CEIR 设备 910
正常接收的信息,二者并不冲突,由本领域技术人员根据实际需要确定相应编码规则即可;所述移动设备信息更新响应发送单元 1208 ,用于 向所述 EIR 设备
920 发送 'Update ME Info Response' 消息, 该 'Update ME Info Response' 消息携带有对 'Update
ME Info Request' 消息的接收结果和 / 或对 EIR 设备 920 中的本地移动设备列表 1103 的更新指令。 As shown in FIG. 12, the
此外,本发明还提供了用于 快速校验 IMEI 的 EIR 设备和 CEIR 设备,其具体结构及工作方式请参见 用于快速校验 IMEI 的系统中的相应部分,在此不再赘述。 In addition, the present invention also provides an EIR device and CEIR for quickly verifying IMEI. For the specific structure and working mode of the device, refer to the corresponding part in the system for quickly verifying the IMEI, and details are not described here.
综上所述,通过本发明提供的技术方案,在每一次 IMEI 校验中都无需等待 CEIR 的响应,而能够立即向 MSN/SGSN 返回一个校验结果,并将收到的移动设备信息用于下一次 IMEI 校验,即在 IMEI 校验过程中避免了实时远程查询,从而实现了快速校验 IMEI 的功能并降低了建设成本。 In summary, according to the technical solution provided by the present invention, there is no need to wait for CEIR in each IMEI check. Response, and can immediately return a verification result to the MSN/SGSN and use the received mobile device information for the next IMEI check, ie at IMEI Real-time remote query is avoided during the verification process, which enables quick verification of IMEI functions and reduces construction costs.
以及,仅对前一次设备状态发生变化的移动设备加以更新,避免了现有 IMEI 校验技术中对移动设备的 ES 所进行的大量、重复且不必要的更新,节约了系统资源;而 EIR 设备中仅需存储本地移动设备列表,而该列表中的很多仅涉及当前移动终端的数据记录使用后即可删除,所以列表一般很短,不但进一步提高 IMEI 校验的速度,还可避免使用大型数据库软件,从而达到降低建设成本的目的。 And, only the mobile devices whose previous device status changes are updated, avoiding the existing IMEI verification technology for mobile devices. Large, repetitive and unnecessary updates by ES save system resources; EIR Only the local mobile device list needs to be stored in the device, and many of the lists only involve the current mobile terminal's data record can be deleted after use, so the list is generally short, not only further improving IMEI The speed of verification can also avoid the use of large database software, thus achieving the purpose of reducing construction costs.
本发明已经通过上述实施例进行了说明,但应当理解的是,上述实施例只是用于举例和说明的目的,而非意在将本发明限制于所描述的实施例范围内。此外本领域技术人员可以理解的是,本发明并不局限于上述实施例,根据本发明的教导还可以做出更多种的变型和修改,这些变型和修改均落在本发明所要求保护的范围以内。本发明的保护范围由附属的权利要求书及其等效范围所界定。 The present invention has been described by the above-described embodiments, but it should be understood that the above-described embodiments are only for the purpose of illustration and description. Further, those skilled in the art can understand that the present invention is not limited to the above embodiments, and various modifications and changes can be made according to the teachings of the present invention. These modifications and modifications are all claimed in the present invention. Within the scope. The scope of the invention is defined by the appended claims and their equivalents.
Claims (1)
Applications Claiming Priority (2)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN2011100362742A CN102098659B (en) | 2011-02-11 | 2011-02-11 | Method and system for fast verifying international mobile equipment identity (IMEI) |
| CN201110036274.2 | 2011-02-11 |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| WO2012106982A1 true WO2012106982A1 (en) | 2012-08-16 |
Family
ID=44131481
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| PCT/CN2012/070144 Ceased WO2012106982A1 (en) | 2011-02-11 | 2012-01-09 | Method and system for quick verification of international mobile station equipment identity |
Country Status (2)
| Country | Link |
|---|---|
| CN (1) | CN102098659B (en) |
| WO (1) | WO2012106982A1 (en) |
Cited By (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| WO2017109652A1 (en) * | 2015-12-21 | 2017-06-29 | Wheeler Dayle Scott Haven | Associating a token identifier with a user accessible data record |
| WO2018147749A1 (en) * | 2017-02-09 | 2018-08-16 | Vicuna Munoz Jose Antonio | Methods and components for identifying irregular mobile devices that should not operate on any mobile networks in a country or group of countries |
| CN112765408A (en) * | 2020-12-31 | 2021-05-07 | 欧普照明股份有限公司 | Equipment information query method and query equipment for control system |
| CN114630314A (en) * | 2020-12-10 | 2022-06-14 | 中移(苏州)软件技术有限公司 | Method, device, device and storage medium for updating terminal information database |
| CN115243260A (en) * | 2017-09-06 | 2022-10-25 | 北京小米移动软件有限公司 | Unmanned aerial vehicle access method and device |
Families Citing this family (6)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN102098659B (en) * | 2011-02-11 | 2013-07-24 | 王兰睿 | Method and system for fast verifying international mobile equipment identity (IMEI) |
| CN102227147B (en) * | 2011-06-20 | 2013-08-21 | 王兰睿 | Method and system used for corporately verifying international equipment identification |
| CN102355654B (en) * | 2011-07-26 | 2017-11-14 | 中兴通讯股份有限公司 | device identification method and device |
| CN102984684B (en) * | 2011-09-06 | 2015-09-23 | 华为技术有限公司 | A kind of method of reporting terminal information and terminal |
| CN102685733B (en) * | 2012-04-27 | 2016-08-03 | 王兰睿 | A kind of method and system for creating and safeguard mobile station information mirror database |
| CN110191463B (en) * | 2019-05-14 | 2022-03-25 | 惠州Tcl移动通信有限公司 | A kind of fast access method of GSM network and related equipment |
Citations (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN1662090A (en) * | 2004-02-23 | 2005-08-31 | 华为技术有限公司 | Method for testing identification of intermational mobile device |
| CN101238752A (en) * | 2005-08-05 | 2008-08-06 | 艾利森电话股份有限公司 | Method and database for performing license status checks on mobile devices |
| EP2074846A1 (en) * | 2006-09-28 | 2009-07-01 | Erace Security Solutions OY Ltd. | Management of mobile station memory content |
| CN101945380A (en) * | 2009-07-06 | 2011-01-12 | 中兴通讯股份有限公司 | Terminal management method, terminal and system for code division multiple access system |
| CN102098659A (en) * | 2011-02-11 | 2011-06-15 | 王兰睿 | Method and system for fast verifying international mobile equipment identity (IMEI) |
Family Cites Families (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| NO20020290D0 (en) * | 2002-01-18 | 2002-01-18 | Ericsson Telefon Ab L M | Procedure for roaming on mobile networks |
| CN1285235C (en) * | 2003-10-31 | 2006-11-15 | 大唐微电子技术有限公司 | Method and system of preventing handset from theft by using international id code of mobile facilities |
| CN1719919A (en) * | 2004-07-09 | 2006-01-11 | 上海迪比特实业有限公司 | Method for obtaining mobile phone user information |
| CN101176368B (en) * | 2005-05-18 | 2011-11-23 | 中兴通讯股份有限公司 | Identification method of mobile terminal legitimacy |
| CN101277184B (en) * | 2007-03-30 | 2010-11-24 | 展讯通信(上海)有限公司 | Message structure compatible with 3GPP protocol and communication method thereof |
-
2011
- 2011-02-11 CN CN2011100362742A patent/CN102098659B/en active Active
-
2012
- 2012-01-09 WO PCT/CN2012/070144 patent/WO2012106982A1/en not_active Ceased
Patent Citations (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN1662090A (en) * | 2004-02-23 | 2005-08-31 | 华为技术有限公司 | Method for testing identification of intermational mobile device |
| CN101238752A (en) * | 2005-08-05 | 2008-08-06 | 艾利森电话股份有限公司 | Method and database for performing license status checks on mobile devices |
| EP2074846A1 (en) * | 2006-09-28 | 2009-07-01 | Erace Security Solutions OY Ltd. | Management of mobile station memory content |
| CN101945380A (en) * | 2009-07-06 | 2011-01-12 | 中兴通讯股份有限公司 | Terminal management method, terminal and system for code division multiple access system |
| CN102098659A (en) * | 2011-02-11 | 2011-06-15 | 王兰睿 | Method and system for fast verifying international mobile equipment identity (IMEI) |
Cited By (6)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| WO2017109652A1 (en) * | 2015-12-21 | 2017-06-29 | Wheeler Dayle Scott Haven | Associating a token identifier with a user accessible data record |
| WO2018147749A1 (en) * | 2017-02-09 | 2018-08-16 | Vicuna Munoz Jose Antonio | Methods and components for identifying irregular mobile devices that should not operate on any mobile networks in a country or group of countries |
| CN115243260A (en) * | 2017-09-06 | 2022-10-25 | 北京小米移动软件有限公司 | Unmanned aerial vehicle access method and device |
| CN114630314A (en) * | 2020-12-10 | 2022-06-14 | 中移(苏州)软件技术有限公司 | Method, device, device and storage medium for updating terminal information database |
| CN114630314B (en) * | 2020-12-10 | 2023-09-05 | 中移(苏州)软件技术有限公司 | Updating method, device, equipment and storage medium of terminal information base |
| CN112765408A (en) * | 2020-12-31 | 2021-05-07 | 欧普照明股份有限公司 | Equipment information query method and query equipment for control system |
Also Published As
| Publication number | Publication date |
|---|---|
| CN102098659B (en) | 2013-07-24 |
| CN102098659A (en) | 2011-06-15 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| WO2012106982A1 (en) | Method and system for quick verification of international mobile station equipment identity | |
| WO2020251302A1 (en) | Method and system for handling of closed access group related procedure | |
| WO2016167536A1 (en) | Method and apparatus for managing a profile of a terminal in a wireless communication system | |
| WO2021066427A1 (en) | Method and apparatus for handling mobility procedure for ue | |
| EP3284274A1 (en) | Method and apparatus for managing a profile of a terminal in a wireless communication system | |
| WO2012022272A1 (en) | 3gpp protocol compatible method and system for providing mobile equipment user information | |
| WO2019050325A1 (en) | Method and apparatus for supporting transfer of profile between devices in wireless communication system | |
| WO2021133092A1 (en) | Method and apparatus to manage nssaa procedure in wireless communication network | |
| WO2021054770A1 (en) | Method and device for controlling data rate in wireless communication system | |
| WO2016024695A1 (en) | Method and apparatus for profile download of group devices | |
| WO2016163796A1 (en) | Method and apparatus for downloading a profile in a wireless communication system | |
| WO2021187893A1 (en) | Apparatus and method for providing low-latency location information service in wireless communication system | |
| WO2015190895A1 (en) | Method and device for selective communication service in communication system | |
| WO2019098745A1 (en) | Handover method in wireless communication system and apparatus therefor | |
| WO2019190166A1 (en) | Method, user equipment, and network node for performing pdu session establishment procedure for ladn | |
| WO2019070100A1 (en) | Method and device for transmitting or receiving information in wireless communication system supporting network slicing | |
| WO2019098623A1 (en) | Method for supporting and providing ladn service in wireless communication system and apparatus therefor | |
| WO2020080909A1 (en) | Method and apparatus for handling remote profile management exception | |
| WO2019216739A1 (en) | Security protection method and apparatus in wireless communication system | |
| WO2018008944A1 (en) | Method for managing registration in wireless communication system and device for same | |
| WO2019194633A1 (en) | Device and method for policy management of user equipment in wireless communication system | |
| WO2020171672A1 (en) | Method for interoperating between bundle download process and esim profile download process by ssp terminal | |
| WO2019107876A1 (en) | Method and apparatus for managing event in communication system | |
| WO2019216546A1 (en) | Method and device for using ladn in wireless communication system | |
| WO2021201530A1 (en) | Network slice-specific authentication and authorization |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| 121 | Ep: the epo has been informed by wipo that ep was designated in this application |
Ref document number: 12744686 Country of ref document: EP Kind code of ref document: A1 |
|
| NENP | Non-entry into the national phase |
Ref country code: DE |
|
| 122 | Ep: pct application non-entry in european phase |
Ref document number: 12744686 Country of ref document: EP Kind code of ref document: A1 |