US 10,313,957 B2Granted

Method and apparatus for access controlling

AssigneeTelefonaktiebolaget LM Ericsson (publ)

InventorsCheng Chen, Yi Geng, Zhike Wang, Aiqin Zhang

Life of this patent

Estimating the term…

Loading patent…

Abstract

Embodiments of the present disclosure provide a method in a network element for access controlling. The method comprises receiving an access request message from a terminal device and checking a data structure for maintaining state information of terminal devices from which the network element has received access request messages, in response to the reception of the access request message. The method also comprises determining whether the requesting terminal device is abnormal based on said checking of the data structure and rejecting the access request of the requesting terminal device in response to determining that the requesting terminal device is abnormal.

Claims9

Dependent claims

A method in a network element for access controlling, the method comprising:

receiving an access request message from a terminal device;
checking a data structure for maintaining state information of terminal devices from which the network element has received access request messages, in response to the reception of the access request message, wherein the data structure comprises entries corresponding respectively to the terminal devices from which the network element has received the access request messages, wherein each of the entries at least comprises:
an identifier of a corresponding terminal device;
a number of access requests of the corresponding terminal device;
a timer, of the corresponding terminal device, for showing a time elapsed since a corresponding entry was started;
and a state flag for indicating abnormality or normality of the corresponding terminal device, and wherein said checking the data structure comprises:
obtaining an identifier of the requesting terminal device from the received access request message;
judging whether the obtained identifier is present in the data structure;
when it is judged that the obtained identifier is present in the data structure, judging whether a state flag corresponding to the obtained identifier indicates abnormality;
when it is judged that the state flag corresponding to the obtained identifier indicates normality, updating a timer corresponding to the obtained identifier and judging whether the updated timer indicates expiry;
and
when the updated timer indicates not expiry, updating the number of access requests corresponding to the requesting terminal device and judging whether the updated number of access requests meets a predetermined threshold;
determining whether the requesting terminal device is abnormal based on said checking of the data structure, wherein said determining comprises:
in a case that the obtained identifier is present in the data structure,
when the state flag corresponding to the obtained identifier indicates abnormality, determining that the requesting terminal device is abnormal;
and
when the updated timer indicates not expiry and the updated number of access requests meets the predetermined threshold, determining that the requesting terminal device is abnormal;
and
rejecting the access request of the requesting terminal device in response to determining that the requesting terminal device is abnormal.

16 more elements

An apparatus configured to control access in a network element, the apparatus comprising one or more processors configured to:

receive an access request message from a terminal device;
check a data structure for maintaining state information of terminal devices from which the network element has received access request messages, in response to the reception of the access request message, wherein the data structure comprises entries corresponding respectively to the terminal devices from which the network element has received the access request messages, wherein each of the entries at least comprises:
an identifier of a corresponding terminal device;
a number of access requests of the corresponding terminal device;
a timer, of the corresponding terminal device, for showing a time elapsed since a corresponding entry was started;
and a state flag for indicating abnormality or normality of the corresponding terminal device, and wherein to check the data structure, the one or more processors are further configured to:
obtain an identifier of the requesting terminal device from the received access request message;
judge whether the obtained identifier is present in the data structure;
when it is judged that the obtained identifier is present in the data structure, judge whether the state flag corresponding to the obtained identifier indicates abnormality;
when it is judged that the state flag corresponding to the obtained identifier indicates normality, update the timer corresponding to the obtained identifier and judge whether the updated timer indicates expiry;
and
when the updated timer indicates not expiry, update the number of access requests corresponding to the requesting terminal device and judge whether the updated number of access requests meets a predetermined threshold;
determine whether the requesting terminal device is abnormal based on said check of the data structure, wherein to determine whether the requesting terminal device is abnormal, the one or more processors are further configured to:
in the case that the obtained identifier is present in the data structure,
when the state flag corresponding to the obtained identifier indicates abnormality, determine that the requesting terminal device is abnormal;
and
when the updated timer indicates not expiry and the updated number meets the predetermined threshold, determine that the requesting terminal device is abnormal;
and
reject the access request of the requesting terminal device in response to the determination that the requesting terminal device is abnormal.

16 more elements

An apparatus configured to control access in a network element, the apparatus comprising a processor and a memory, said memory containing instructions executable by said processor, whereby said apparatus is operative to:

receive an access request message from a terminal device;
check a data structure for maintaining state information of terminal devices from which the network element has received access request messages, in response to the reception of the access request message, wherein the data structure comprises entries corresponding respectively to the terminal devices from which the network element has received the access request messages, wherein each of the entries at least comprises:
an identifier of a corresponding terminal device;
a number of access requests of the corresponding terminal device;
a timer, of the corresponding terminal device, for showing a time elapsed since a corresponding entry was started;
and a state flag for indicating abnormality or normality of the corresponding terminal device, and wherein to check the data structure, said apparatus is further operative to:
obtain an identifier of the requesting terminal device from the received access request message;
judge whether the obtained Identifier is present in the data structure,
when it is judged that the obtained identifier is present in the data structure, judge whether the state flag corresponding to the obtained identifier indicates abnormality;
when it is judged that the state flag corresponding to the obtained identifier indicates normality, update the timer corresponding to the obtained identifier and judge whether the updated timer indicates expiry;
and
when the updated timer indicates not expiry, update the number of access requests corresponding to the requesting terminal device and judge whether the updated number of access requests meets a predetermined threshold;
determine whether the requesting terminal device is abnormal based on said check of the data structure, wherein to determine whether the requesting terminal device is abnormal, the apparatus is further operative to:
in the case that the obtained identifier is present in the data structure,
when the state flag corresponding to the obtained identifier indicates abnormality, determine that the requesting terminal device is abnormal;
and
when the updated timer indicates not expiry and the updated number meets the predetermined threshold, determine that the requesting terminal device is abnormal;
and
reject the access request of the requesting terminal device in response to the determination that the requesting terminal device is abnormal.

16 more elements

An apparatus configured to control access in a network element, the apparatus comprising processing means configured to:

receive an access request message from a terminal device;
check a data structure for maintaining state information of terminal devices from which the network element has received access request messages, in response to the reception of the access request message, wherein the data structure comprises entries corresponding respectively to the terminal devices from which the network element has received the access request messages, wherein each of the entries at least comprises:
an identifier of a corresponding terminal device;
a number of access requests of the corresponding terminal device;
a timer, of the corresponding terminal device, for showing a time elapsed since a corresponding entry was started;
and a state flag for indicating abnormality or normality of the corresponding terminal device, and wherein to check the data structure, said processing means is further configured to:
obtain an identifier of the requesting terminal device from the received access request message;
judge whether the obtained identifier is present in the data structure;
when it is judged that the obtained identifier is present in the data structure, judge whether the state flag corresponding to the obtained identifier indicates abnormality;
when it is judged that the state flag corresponding to the obtained identifier indicates normality, update the timer corresponding to the obtained identifier and judge whether the updated timer indicates expiry;
and
when the updated timer indicates not expiry, update the number of access requests corresponding to the requesting terminal device and judge whether the updated number of access requests meets a predetermined threshold;
determine whether the requesting terminal device is abnormal based on said check of the data structure, wherein to determine whether the requesting terminal device is abnormal, said processing means is furthermore configured to:
in the case that the obtained identifier is present in the data structure,
when the state flag corresponding to the obtained identifier indicates abnormality, determine that the requesting terminal device is abnormal;
and
when the updated timer indicates not expiry and the updated number meets the predetermined threshold, determine that the requesting terminal device is abnormal;
and
reject the access request of the requesting terminal device in response to the determination that the requesting terminal device is abnormal.

16 more elements

Dependencies are inferred from the claim text.

Facts

Application: 15/502,905Filed 11 Aug 2014
Published: US 2017/0238237 A117 Aug 2017
Granted: 4 Jun 2019
Term ends: Not estimatedThe source records don’t support an estimate.

Classification6 codes

H04W 48/02
Access restriction ; Network selection; Access point selection: access restriction performed under specific conditions
H04L 43/16
Arrangements for monitoring or testing data switching networks: threshold monitoring
H04W 48/08
Access restriction ; Network selection; Access point selection: access restriction or access information delivery, e.g. discovery data delivery
H04W 48/14
Access restriction or access information delivery, e.g. discovery data delivery: using user query or user detection

Family

US 2017/0238237 A1Pre-grant publication · published 17 Aug 2017
US 10,313,957 B2This patent

From the US filing history. Foreign family members aren’t listed.

Timeline

Citations

Open elsewhere

Building an agent or pulling many patents? Use the API or MCP server instead of scraping pages. Get an API key