Access control method and system for packet data network, PCRF entity

An access control method for packet data network, comprising:

• a bearer binding and event report function entity sending an indication of gateway control session establishment to a policy and charging rules function entity, wherein the indication of gateway control session establishment carries a session identifier, the session identifier is used to uniquely identify a internet protocol connectivity access network session of a user equipment;
• a gateway in which the bearer binding and event report function entity resides sending a proxy binding update request message to a gateway in which the policy and charging enforcement function entity resides, and carrying the session identifier in the proxy binding update request message;
• the gateway in which the policy and charging enforcement function entity resides receiving the proxy binding update request message, the policy and charging enforcement function entity sending an indication of internet protocol connectivity access network session establishment or an indication of internet protocol connectivity access network session modification to the policy and charging rules function entity, and carrying the session identifier in the indication of internet protocol connectivity access network session establishment or the indication of internet protocol connectivity access network session modification;
• the policy and charging rules function entity associating the indication of gateway control session establishment with the indication of internet protocol connectivity access network session establishment or the indication of internet protocol connectivity access network session modification according to the session identifier.

An access control system for packet data network, comprising:

• a bearer binding and event report function entity, configured to send an indication of gateway control session establishment to a policy and charging rules function entity, and to carry a session identifier in the indication of gateway control session establishment, wherein the session identifier is used to uniquely identify a internet protocol connectivity access network session of a user equipment;
• a gateway in which the bearer binding and event report function entity resides, configured to send a proxy binding update request message to a gateway in which the policy and charging enforcement function entity resides, and to carry the session identifier in the proxy binding update request message;
• the gateway in which the policy and charging enforcement function entity resides, configured to receive the proxy binding update request message;
• the policy and charging enforcement function entity, configured to send an indication of internet protocol connectivity access network session establishment or an indication of internet protocol connectivity access network session modification to the policy and charging rules function entity, and to carry the session identifier in the indication of internet protocol connectivity access network session establishment or the indication of internet protocol connectivity access network session modification;
• the policy and charging rules function entity, configured to receive the indication of gateway control session establishment from the bearer binding and event report function entity and the indication of internet protocol connectivity access network session establishment or the indication of internet protocol connectivity access network session modification from the policy and charging enforcement function entity, and to associate the indication of gateway control session establishment with the indication of internet protocol connectivity access network session establishment or the indication of internet protocol connectivity access network session modification according to the session identifier.