CN103188764B - Connection control method, apparatus and system - Google Patents

Abstract

The invention discloses an access control method, device and system. The method includes: a network side device determines EAB parameters, wherein the EAB parameters include EAB parameters corresponding to the access network and EAB parameters corresponding to the core network; The side device broadcasts the EAB parameter to the terminal to control the terminal's access. The invention overcomes the problems in the related art that the access conditions of the core network and the access network cannot be determined at the same time, resulting in inaccurate access control and relatively low efficiency, thereby improving the accuracy and efficiency of the access control.

Description

Access control method, device and system

technical field

The present invention relates to the communication field, in particular to an access control method, device and system.

Background technique

User Equipment (UE for short) needs to perform an access decision process when accessing the network to determine whether to allow a service request to avoid overloading the network side, such as random access overload or signaling overload.

In the Universal Mobile Telecommunications System (UMTS for short), user equipment can be divided into 16 access classes (Access Class, AC for short), among which AC0-9 belong to common classes and are randomly assigned to terminals; AC10 indicates that emergency calls will not be configured to terminals); AC11 is used for network operations; AC12 is for security services; AC13 is for public service categories (for example: water and gas suppliers); AC14 is for emergency services; AC15 is for operator staff. A terminal can be configured as one level in AC0-9 and one or more levels in AC11-15, and the configuration information is stored in a Universal Subscriber Identity Module (USIM for short).

The network-side broadcast system message in UMTS includes an Access Class Barred (ACB) parameter for each Public Land Mobile Network (PLMN) connected to the access network. Ordinary access levels AC0~9, the network side broadcasts the corresponding ACB, the ACB is configured as an enumeration type (can be configured as barred or not barred), a total of 10 bits, using a bitmap image (bitmap) The modes correspond to AC0~9 respectively. If it is necessary to initiate a service request, the user equipment first needs to check whether the ACB parameters broadcast by the accessed cell barred the AC to which it belongs, if barred, the user equipment does not initiate a service request; if not barred, the user equipment can initiate a service ask.

UMTS also introduces the concept of access service classes (Access Service Classes, referred to as ASC), which are some levels set by the access network for random access channel (Random Access Channel, referred to as RACH) resource allocation and access probability . UMTS configures AC0-9 and AC10-15 to be mapped to ASC levels. There are 8 levels of ASC, ASC0-7 respectively. Among them, ASC0 has the highest priority and ASC7 has the lowest priority. For different ASC levels, preset Different RACH resources; the terminal judges whether it can access the UMTS according to the persistence value of the ASC corresponding to its own AC and a randomly generated 0-1 random number.

The network side in the Long Term Evolution (LTE for short) system will also broadcast ACB parameters. For terminals with AC0 to 9, the network side broadcasts the access scaling factor (ac-BarringFactor) and access barring time (ac-BarringTime ), ac-BarringFactor is used to control the probability of user equipment accessing the network. When the UE needs to initiate a service request, it randomly generates a random number (RAND) uniformly distributed between 0 and 1. If the RAND is lower than the access scale factor, the UE can initiate a service request; otherwise, the UE cannot initiate a service request, and The UE will calculate a delay time based on the ac-BarringTime, and within the delay time, it is not allowed to access the same service request again.

In the implementation process of the Internet of Things, a large number of Machine Type Communication Devices (MTC Devices for short) have been introduced. The number of these MTC devices far exceeds the existing user equipment. In order to prevent signaling overload or Random access overload, etc., introduces the extended access control (Extended Access Barring, referred to as EAB) mechanism, the user equipment suitable for EAB (that is, the UE with EAB configuration in the USIM card) needs to judge whether to use the EAB parameters broadcast on the network side. The access network is allowed to initiate service requests.

At present, the EAB mechanism has not been fully determined. For example, in the shared radio access network scenario (one radio access network (RAN) is connected to multiple core networks (PLMN), from the perspective of the access network, it is shared by multiple core networks. , so it is also called the access network sharing scenario. As shown in the figure below), how to configure EAB parameters? In a UMTS system, ACB parameters can be configured individually for each PLMN. In the LTE system, the ACB parameters are only configured for the RAN without distinguishing between different PLMNs.

Aiming at the problem in the related art that the access control conditions of the core network and the access network cannot be determined at the same time when the terminal accesses, resulting in inaccurate access control, no effective solution has been proposed yet.

Contents of the invention

Aiming at the problem in the related art that the access conditions of the core network and the access network cannot be determined at the same time when the terminal accesses, resulting in inaccurate access control, the present invention provides an access control method, device, and system to At least solve that problem.

According to one aspect of the present invention, an access control method is provided, including: a network side device determines EAB parameters, wherein the EAB parameters include EAB parameters corresponding to the access network and EAB parameters corresponding to the core network; The network side device broadcasts the EAB parameter to the terminal to control the terminal's access.

Preferably, the EAB parameters corresponding to the access network and the EAB parameters corresponding to the core network include an access indication corresponding to the AC, wherein the access indication includes permission and prohibition.

Preferably, the format of the EAB parameter is a list, wherein, in the list, the EAB parameter corresponding to the access network and the identifier of the access network appear in pairs, and the EAB parameter corresponding to the core network It appears paired with the identifier of the core network; or the EAB parameter at a preset position in the list corresponds to a preset access network or core network.

Preferably, the EAB parameter corresponding to the core network and/or the EAB parameter corresponding to the access network identifies the access indication corresponding to the AC through a bitmap.

Preferably, the AC comprises AC0 to 9.

Preferably, the EAB parameter further includes the category of the terminal corresponding to the EAB parameter.

According to another aspect of the present invention, an access control method is provided, including: the terminal receives the EAB parameters broadcast by the network side equipment, wherein the EAB parameters include the EAB parameters corresponding to the access network and the EAB parameters corresponding to the core network. EAB parameters; the terminal uses the EAB parameters corresponding to the access network and the EAB parameters corresponding to the core network to perform access control.

Preferably, the terminal using the EAB parameters corresponding to the access network and the EAB parameters corresponding to the core network to perform access control includes: the terminal using the EAB parameters corresponding to the access network and the Carrying out EAB judgments corresponding to the EAB parameters of the core network; when the terminal determines that the results of the EAB judgments are all access, access the core network through the access network.

Preferably, the EAB parameters corresponding to the access network and the EAB parameters corresponding to the core network include an access indication corresponding to the AC, wherein the access indication includes permission and prohibition.

Preferably, the format of the EAB parameter is a list, wherein, in the list, the EAB parameter corresponding to the access network and the identifier of the access network appear in pairs, and the EAB parameter corresponding to the core network It appears paired with the identifier of the core network; or the EAB parameter at a preset position in the list corresponds to a preset access network or core network.

Preferably, the EAB parameter corresponding to the core network and/or the EAB parameter corresponding to the access network identifies the access indication corresponding to the AC through a bitmap.

Preferably, the AC comprises AC0 to 9.

According to another aspect of the present invention, an access control device is provided, which is applied to network-side equipment, including: a determining module, configured to determine EAB parameters, wherein the EAB parameters include EAB parameters corresponding to the access network and Corresponding to the EAB parameters of the core network; the broadcast module is used to broadcast the EAB parameters to the terminal to control the access of the terminal.

According to another aspect of the present invention, an access control device is provided, which is applied to a terminal, and includes: a receiving module, configured to receive EAB parameters broadcast by network-side equipment, wherein the EAB parameters include parameters corresponding to the access network EAB parameters and EAB parameters corresponding to the core network; a control module, configured to use the EAB parameters corresponding to the access network and the EAB parameters corresponding to the core network to perform access control.

According to another aspect of the present invention, an access control system is also provided, including the above-mentioned access control device applied to network-side equipment and the above-mentioned access control device applied to terminal-side equipment.

Through the present invention, the network side equipment is used to determine the EAB parameters including the access network and the core network, and the terminal is controlled to access according to the two parameters, which overcomes the inability to simultaneously determine the access conditions of the core network and the access network in related technologies, This leads to the problem of inaccurate access control and relatively low efficiency, thereby improving the accuracy and efficiency of access control.

Description of drawings

The accompanying drawings described here are used to provide a further understanding of the present invention and constitute a part of the application. The schematic embodiments of the present invention and their descriptions are used to explain the present invention and do not constitute improper limitations to the present invention. In the attached picture:

FIG. 1 is a schematic diagram of a shared wireless access network scenario in the related art;

FIG. 2 is a first flowchart of an access control method according to an embodiment of the present invention;

FIG. 3 is a second flowchart of an access control method according to an embodiment of the present invention;

Fig. 4 is a first structural block diagram of an access control device according to an embodiment of the present invention;

Fig. 5 is a second structural block diagram of an access control device according to an embodiment of the present invention;

FIG. 6 is a flow chart of an access control method according to a preferred embodiment of the present invention; and

Fig. 7 is a schematic diagram of parameter configuration according to a preferred embodiment of the present invention.

Detailed ways

Hereinafter, the present invention will be described in detail with reference to the drawings and examples. It should be noted that, in the case of no conflict, the embodiments in the present application and the features in the embodiments can be combined with each other.

This embodiment provides an access control method. FIG. 2 is a first flowchart of the access control method according to the embodiment of the present invention, including the following steps S202 and S204.

Step S202: the network side device determines extended access control (EAB) parameters, wherein the EAB parameters include EAB parameters corresponding to the access network and EAB parameters corresponding to the core network.

Step S204: the network side device broadcasts the EAB parameter to the terminal to control the terminal's access.

Through the above steps, the network side determines the EAB parameters including the access network and the core network, and controls the terminal to access according to the two parameters, which overcomes the inability to simultaneously determine the access conditions of the core network and the access network in related technologies, resulting in The problem of inaccurate access control and relatively low efficiency can be solved, thereby improving the accuracy and efficiency of access control.

As a preferred implementation manner, the EAB parameter corresponding to the access network and the EAB parameter corresponding to the core network include an access indication corresponding to an access class (AC), wherein the access indication includes permission and prohibition. This preferred embodiment defines that both the EAB parameters corresponding to the access network and the EAB parameters corresponding to the core network include access indications corresponding to ACs, which can realize access control of terminals according to AC levels, and improve access control. accuracy.

During implementation, the format of the EAB parameter is a list, wherein, in the list, the parameter can be gemstoned in various ways, and in this embodiment, two ways are provided:

Mode 1: The EAB parameter corresponding to the access network is paired with the access network identifier, and the EAB parameter corresponding to the core network is paired with the core network identifier.

Mode 2: The EAB parameter at a preset position in the list corresponds to a preset access network or core network. In this preferred implementation manner, the EAB parameters are saved in a list form, and various methods are used to correspond to the parameters, which improves the flexibility of parameter configuration.

During implementation, multiple ways can be used to indicate the access indication corresponding to the AC. This embodiment provides a simple method to identify the access indication corresponding to the AC through a bitmap. The signaling in this preferred embodiment low load.

Preferably, the access classes (AC) in the above preferred implementation manner include AC0 to 9. This method limits the AC level and improves the rationality and accuracy of the configuration.

As yet another preferred implementation manner, the EAB parameter further includes the category of the terminal corresponding to the EAB parameter. The EAB parameter in this preferred embodiment may also include the category of the terminal, so that the terminal receiving the EAB parameter can quickly search for suitable parameters for the terminal, thereby improving the speed of access control.

This embodiment provides an access control method. FIG. 3 is a second flowchart of the access control method according to the embodiment of the present invention, including the following steps S302 and S304.

Step S302: The terminal receives EAB parameters broadcast by the network side, wherein the EAB parameters include EAB parameters corresponding to the access network and EAB parameters corresponding to the core network;

Step S304: The terminal uses the EAB parameter corresponding to the access network and the EAB parameter corresponding to the core network to perform access control.

Through the above steps, the terminal obtains the EAB parameters broadcast by the network side including the access network and the core network, and controls the terminal to access according to the two parameters, which overcomes the inability to simultaneously determine the access conditions of the core network and the access network in related technologies , resulting in inaccurate access control and relatively low efficiency, thereby improving the accuracy and efficiency of access control.

As a preferred implementation manner, step S304 can be implemented in the following manner: the terminal uses the EAB parameters corresponding to the access network and the EAB parameters corresponding to the core network to perform EAB judgment respectively; the terminal determines the result of the EAB judgment When both are accessed, the core network is accessed through the access network. During implementation, the EAB parameters of the access network can be judged first, and then the EAB parameters of the core network can be judged, or the EAB parameters of the core network can be judged first, and then the EAB parameters of the access network can be judged. This preferred embodiment improves the judgment of the EAB parameters accuracy.

As a preferred implementation manner, the EAB parameter corresponding to the access network and the EAB parameter corresponding to the core network include an access indication corresponding to an access class (AC), wherein the access indication includes permission and prohibition. This preferred embodiment defines that both the EAB parameters corresponding to the access network and the EAB parameters corresponding to the core network include access indications corresponding to ACs, which can realize access control of terminals according to AC levels, and improve access control. accuracy.

During implementation, the format of the EAB parameter is a list, wherein, in the list, the parameter can be gemstoned in various ways, and in this embodiment, two ways are provided:

Mode 1: The EAB parameter corresponding to the access network is paired with the access network identifier, and the EAB parameter corresponding to the core network is paired with the core network identifier.

Mode 2: The EAB parameter at a preset position in the list corresponds to a preset access network or core network. In this preferred implementation manner, the EAB parameters are saved in a list form, and various methods are used to correspond to the parameters, which improves the flexibility of parameter configuration.

During implementation, multiple ways can be used to indicate the access indication corresponding to the AC. This embodiment provides a simple method to identify the access indication corresponding to the AC through a bitmap. The signaling in this preferred embodiment low load.

Preferably, the access classes (AC) in the above preferred implementation manner include AC0 to 9. This method limits the AC level and improves the rationality and accuracy of the configuration.

As yet another preferred implementation manner, the EAB parameter further includes the category of the terminal corresponding to the EAB parameter. The EAB parameter in this preferred embodiment may also include the category of the terminal, so that the terminal receiving the EAB parameter can quickly search for suitable parameters for the terminal, thereby improving the speed of access control.

It should be noted that the steps shown in the flowcharts of the accompanying drawings may be performed in a computer system, such as a set of computer-executable instructions, and that although a logical order is shown in the flowcharts, in some cases, The steps shown or described may be performed in an order different than here.

In another embodiment, access control software is also provided, and the software is used to implement the technical solutions described in the above embodiments and preferred embodiments.

In another embodiment, there is also provided a storage medium, in which the access control software is stored, the storage medium includes but not limited to: optical discs, floppy disks, hard disks, rewritable memories, and the like.

The embodiment of the present invention also provides an access control device, which is applied to network-side equipment. The access control device can be used to implement the above-mentioned access control method and preferred implementation modes. What has already been described will not be repeated. The following Describe the modules involved in the access control. As used below, the term "module" may be a combination of software and/or hardware that realizes a predetermined function. Although the systems and methods described in the following embodiments are preferably implemented in software, implementations in hardware, or a combination of software and hardware are also possible and contemplated.

Fig. 4 is a first structural block diagram of an access control device according to an embodiment of the present invention. As shown in Fig. 4, the device includes: a determination module 42 and a broadcast module 44, and the above structure will be described in detail below.

A determination module 42, configured to determine extended access control (EAB) parameters, wherein the EAB parameters include EAB parameters corresponding to the access network and EAB parameters corresponding to the core network; the broadcast module 44 is connected to the determination module 42, The EAB parameter determined by the determination module 42 is used to broadcast to the terminal to control the terminal's access.

In another embodiment, access control software is also provided, and the software is used to implement the technical solutions described in the above embodiments and preferred embodiments.

In another embodiment, there is also provided a storage medium, in which the access control software is stored, the storage medium includes but not limited to: optical discs, floppy disks, hard disks, rewritable memories, and the like.

The embodiment of the present invention also provides an access control device, which is applied to network-side equipment. The access control device can be used to implement the above-mentioned access control method and preferred implementation modes. What has already been described will not be repeated. The following Describe the modules involved in the access control. As used below, the term "module" may be a combination of software and/or hardware that realizes a predetermined function. Although the systems and methods described in the following embodiments are preferably implemented in software, implementations in hardware, or a combination of software and hardware are also possible and contemplated.

Fig. 5 is a second structural block diagram of an access control device according to an embodiment of the present invention. As shown in Fig. 5, the device includes: a receiving module 52 and a control module 54, and the above structure will be described in detail below.

The receiving module 52 is used to receive the EAB parameters broadcast by the network side, wherein the EAB parameters include the EAB parameters corresponding to the access network and the EAB parameters corresponding to the core network; the control module 54 is connected to the receiving module 52 for using The EAB parameters corresponding to the access network and the EAB parameters corresponding to the core network received by the receiving module 52 perform access control.

The following will be described in combination with preferred embodiments, and the following preferred embodiments combine the above-mentioned embodiments and preferred implementation modes.

Preferred embodiment one

This embodiment provides an access control method in a shared wireless access network scenario. The method can implement separate control of terminal access based on different core networks and access network states in the shared wireless access network scenario. Fig. 6 is a flowchart of an access control method according to a preferred embodiment of the present invention. As shown in Fig. 6, the method includes the following steps S602 and S604.

Step S602: the access network broadcasts EAB information.

In this step, the EAB parameter may include an indication corresponding to AC0-9 (permission or prohibition), which may be represented by 10 bits, through a bitmap (bitmap) corresponding to a total of 10 levels of terminals from AC0-9, by setting the corresponding bit value to 1 or 0 means to allow or prohibit (barred, not barred) the terminal access of a certain AC.

During implementation, the EAB information may be carried in various manners. Preferably, the EAB information may consist of a list, including EAB parameters corresponding to the core network and/or EAB parameters for the access network.

As a preferred implementation manner, the format of the EAB information in this embodiment may adopt a direct indication method, for example: (PLMN1, EAB1), (RAN, EAB0) pairing occurs (as shown in FIG. 7 ). An indirect indication may also be used to pre-set the EAB parameter at a specific position in the EAB information list to be applicable to the predetermined core network or access network. For example: it is stipulated that the first EAB parameter in the EABlist is applicable to the access network, the second EAB parameter is applicable to the core network 1, and so on.

As another preferred implementation manner, the EAB information may also include other parameter information, such as the type of terminal to which the EAB parameter is applicable.

Before step S602, it also includes: the access network configures EAB parameters. In this configuration process, the parameters of the access network and the core network need to be cooperatively configured. If it is better, it corresponds to the EAB parameters configured respectively for the access network and the predetermined core network. The corresponding allowed AC sets must have an intersection. The following example is used for detailed description.

For example: the EAB parameter corresponding to the predetermined access network is (0, 0, 0, 0, 0, 1, 1, 1, 1, 1), and the EAB parameter for PLMN1 is (1, 1, 1, 1, 1 , 0, 0, 0, 0, 0,), where "0" means that access is allowed (not barred), and "1" means that access is prohibited (barred). If the two sets of EAB parameters are configured in this way, a terminal that wants to access PLMN1, no matter which AC class it belongs to, cannot complete the two sets of EAB judgments, and eventually all terminals that want to access PLMN1 cannot complete the access, even if PLMN1 The load is not very heavy (from the perspective of parameter configuration, it may lead to a limit of 50% terminal access).

Step S604: The terminal suitable for EAB receives the EAB parameters broadcast by the network, and executes the EAB decision before initiating access.

During implementation, multiple methods can be used to determine whether access can be initiated, for example, it can be one of the following methods:

Method 1: If it is found that the system information contains two types of EAB parameters (respectively for the access network and for the core network), the terminal first makes a judgment based on the EAB parameters corresponding to the access network (RAN), and the judgment result is the EAB parameter corresponding to the RAN. After the parameters are allowed, continue to use the EAB parameters corresponding to the PLMN to be accessed by the terminal to make a judgment, and if both judgments are successful, it is determined that the EAB judgment of the terminal is successful.

Method 2: If it is found that the system information contains two types of EAB parameters (respectively for the access network and for the core network), the terminal first makes a judgment based on the EAB parameters corresponding to the PLMN it wants to access, and after the judgment result is allowed, Continue to make judgments according to the EAB parameters corresponding to the RAN, and determine that the EAB judgment of the terminal is successful when both judgments are successful;

In the above two ways, if the first step is judged to be not allowed, the EAB judgment is ended, and the access prohibition is fed back.

Method 3: The terminal performs a certain calculation operation on the corresponding bits of two sets of parameters (respectively for the access network and the core network to be accessed), and then performs a one-time EAB judgment based on the result.

For example: the EAB parameter corresponding to the access network is (0, 0, 0, 0, 0, 1, 1, 1, 1, 1), and the EAB parameter for PLMN1 is (1, 1, 1, 1, 1, 0, 0, 0, 0, 0,), if the terminal wants to access PLMN1, then perform "OR" operation on the corresponding bits of the two sets of numbers, and the result is (1, 1, 1, 1, 1, 1, 1 , 1, 1, 1), that is, the bits corresponding to different ACs are all "1", that is, access is prohibited. Then the terminal judges that access is not allowed, ends the EAB judgment, and feeds back access prohibition.

Another example: the terminal only needs to judge the value of the bit corresponding to the AC of the terminal. For example, if the level of the terminal is AC4, the terminal extracts the EAB parameters (0, 0, 0, 0, 0, 1, 1) of the access network. , 1, 1, 1) and the 5th bit in the EAB parameter (1, 1, 1, 1, 1, 0, 0, 0, 0, 0,) of PLMN1 are "0" and "1" respectively, and carry out After the "or" operation, if "1" is obtained, the terminal judges that the access is not allowed, ends the EAB judgment, and feedbacks that the access is prohibited.

Through the above-mentioned embodiments, it is provided that a terminal obtains the EAB parameters including the access network and the core network broadcasted by the network side, and controls the terminal to access according to the two parameters, which overcomes the inability to simultaneously determine the core network and the access network in related technologies. The access conditions of the network lead to inaccurate access control and low efficiency, thus improving the accuracy and efficiency of access control. It should be noted that these technical effects are not possessed by all the above-mentioned implementation manners, and some technical effects can only be obtained by certain preferred implementation manners.

Obviously, those skilled in the art should understand that each module or each step of the above-mentioned present invention can be realized by a general-purpose computing device, and they can be concentrated on a single computing device, or distributed in a network formed by multiple computing devices Optionally, they can be implemented with program codes executable by computing devices, so that they can be stored in storage devices and executed by computing devices, or they can be made into individual integrated circuit modules, or their Multiple modules or steps are implemented as a single integrated circuit module. As such, the present invention is not limited to any specific combination of hardware and software.

The above descriptions are only preferred embodiments of the present invention, and are not intended to limit the present invention. For those skilled in the art, the present invention may have various modifications and changes. Any modifications, equivalent replacements, improvements, etc. made within the spirit and principles of the present invention shall be included within the protection scope of the present invention.

Claims (12)

1. An access control method, characterized in that it comprises: The network side device determines extended access control EAB parameters, where the EAB parameters include EAB parameters corresponding to the access network and EAB parameters corresponding to the core network, and the EAB parameters corresponding to the access network and the corresponding The EAB parameter of the core network includes an access indication corresponding to the access level AC, wherein the access indication includes permission and prohibition; The network side device broadcasts the EAB parameter to the terminal to control the terminal's access; Wherein, the format of the EAB parameter is a list, wherein, in the list, the EAB parameter corresponding to the access network and the identifier of the access network appear in pairs, and the EAB parameter corresponding to the core network and the The identity pairing of the core network appears; or the EAB parameter in the preset position in the list corresponds to the preset access network or core network. 2. The method according to claim 1, wherein the EAB parameter corresponding to the core network and/or the EAB parameter corresponding to the access network identifies the access indication corresponding to the AC through a bitmap. 3. The method according to claim 1, wherein the access levels AC include AC0 to 9. 4. The method of claim 1, wherein, The EAB parameter also includes the category of the terminal corresponding to the EAB parameter. 5. An access control method, characterized in that it comprises: The terminal receives extended access control EAB parameters broadcast by the network side device, wherein the EAB parameters include EAB parameters corresponding to the access network and EAB parameters corresponding to the core network, and the EAB parameters corresponding to the access network and The EAB parameter corresponding to the core network includes an access indication corresponding to an access class AC, wherein the access indication includes permission and prohibition; The terminal uses the EAB parameters corresponding to the access network and the EAB parameters corresponding to the core network to perform access control; Wherein, the format of the EAB parameter is a list, wherein, in the list, the EAB parameter corresponding to the access network and the identifier of the access network appear in pairs, and the EAB parameter corresponding to the core network and the The identity pairing of the core network appears; or the EAB parameter in the preset position in the list corresponds to the preset access network or core network. 6. The method according to claim 5, wherein the terminal uses the EAB parameters corresponding to the access network and the EAB parameters corresponding to the core network to perform access control comprising: The terminal uses the EAB parameters corresponding to the access network and the EAB parameters corresponding to the core network to perform EAB judgment respectively; When the terminal determines that the result of the EAB decision is all access, access the core network through the access network. 7. The method according to claim 5 or 6, characterized in that, The EAB parameters corresponding to the access network and the EAB parameters corresponding to the core network include an access indication corresponding to an access class AC, wherein the access indication includes permission and prohibition. 8. The method according to claim 5 or 6, wherein the EAB parameter corresponding to the core network and/or the EAB parameter corresponding to the access network identifies the access indication corresponding to the AC through a bitmap. 9. The method according to claim 5 or 6, wherein the access levels AC include AC0-9. 10. An access control device, applied to network side equipment, characterized in that it comprises: A determining module, configured to determine extended access control EAB parameters, wherein the EAB parameters include EAB parameters corresponding to the access network and EAB parameters corresponding to the core network, and the EAB parameters corresponding to the access network and the EAB parameters corresponding to the core network The EAB parameter corresponding to the core network includes an access indication corresponding to the access level AC, wherein the access indication includes permission and prohibition; A broadcast module, configured to broadcast the EAB parameter to the terminal to control the access of the terminal; Wherein, the format of the EAB parameter is a list, wherein, in the list, the EAB parameter corresponding to the access network and the identifier of the access network appear in pairs, and the EAB parameter corresponding to the core network and the The identity pairing of the core network appears; or the EAB parameter in the preset position in the list corresponds to the preset access network or core network. 11. An access control device applied to a terminal, characterized by comprising: The receiving module is configured to receive extended access control EAB parameters broadcast by the network side device, wherein the EAB parameters include EAB parameters corresponding to the access network and EAB parameters corresponding to the core network, and the EAB parameters corresponding to the access network The EAB parameter and the EAB parameter corresponding to the core network include an access indication corresponding to the access level AC, wherein the access indication includes permission and prohibition; A control module, configured to use the EAB parameters corresponding to the access network and the EAB parameters corresponding to the core network to perform access control; Wherein, the format of the EAB parameter is a list, wherein, in the list, the EAB parameter corresponding to the access network and the identifier of the access network appear in pairs, and the EAB parameter corresponding to the core network and the The identity pairing of the core network appears; or the EAB parameter in the preset position in the list corresponds to the preset access network or core network. 12. An access control system, comprising the access control device according to claim 10 and the access control device according to claim 11.