WO2016122224A1

WO2016122224A1 - Method and apparatus of performing access control and handover control of user equipments

Info

Publication number: WO2016122224A1
Application number: PCT/KR2016/000931
Authority: WO
Inventors: Lixiang Xu; Hong Wang; Xiaowan KE
Original assignee: Samsung Electronics Co., Ltd.
Priority date: 2015-01-28
Filing date: 2016-01-28
Publication date: 2016-08-04
Also published as: CN105992302A

Abstract

The present disclosure provides a method and an apparatus of performing access control and handover control of UEs. An entity in an isolated access network may receive information on whether a UE is entitled to an isolated E-UTRAN operation for public safety (IOPS), and perform access control of the UE according to the information. As such, normal operations of the isolated access network can be protected from disturbance, and a waste of radio resources can be avoided. Further, a serving base station of a UE may directly obtain IOPS mode information of a neighboring base station, and perform handover control of the UE according to the IOPS mode information. Thus, service continuity of the UE can be achieved with reduced unnecessary handover and handover failure when the UE is moving between cells in an isolated access network.

Description

METHOD AND APPARATUS OF PERFORMING ACCESS CONTROL AND HANDOVER CONTROL OF USER EQUIPMENTS

The present disclosure relates to wireless communications, and particularly, to a method and an apparatus of performing access control and handover control of UEs.

Modern mobile communications are tending to provide high speed transmission of multimedia services for users. FIG.1 is a schematic diagram illustrating a structure of a system architecture evolution (SAE) system.

In the system, a user equipment (UE) 101 is a terminal device which receives data. Evolved universal terrestrial radio access network (E-UTRAN) 102 is a wireless access network which includes macro base stations (eNodeBs/NodeB) which provide UEs with interfaces for accessing the radio access network. Mobility management entity (MME) 103 manages mobility context, session context and security information of UEs. Serving gateway (SGW) 104 provides user plane functions. MME 103 and SGW 104 may reside in the same physical entity. Packet data network (PDN) gateway (PGW) 105 implements functions including accounting, lawful interception and so on, and may reside in the same physical entity with SGW 104. Policy and charging rule functions (PCRF) 106 provides Quality of Service (QoS) policies and charging rules. Serving GPRS support node (SGSN) 108 is a network node device providing routing for data transmission in the Universal Mobile Telecommunications System (UMTS). Home Subscriber Server (HSS) 109 is a home sub system of UEs, and maintains user information including a current location of the UE, the address of the serving node, user security information, packet data context of the UE, and so on.

Third Generation Partnership Project (3GPP) has agreed on a research subject about providing safe and reliable services for public safety UE in an isolated access network or in an access network having limited band width to a core network.

An isolated radio access network refers to a radio access network having no connection to the core network of a macro network. An isolated radio access network may be formed in the following circumstances.

(1) A base station has lost a backhaul network connection with the core network, thus becomes isolated with no connection to the core network. One or plural isolated base stations may form an isolated radio access network.

(2) Some nomadic base stations may be temporarily deployed in an area without radio access network coverage for providing public safety communication services for public safety UEs. The base stations have no connection with core network entities in a macro network. One or plural nomadic base stations may form an isolated radio access network. One or plural isolated stationary base stations and isolated nomadic base stations may form an isolated radio access network.

According to an architecture, an isolated radio access network enables a local core network to provide services for public safety UEs. If a stationary base station or a nomadic base station supports local core network functions, the base station may enable the local core network to provide UEs with reliable local bearers after becoming isolated. Alternatively, an isolated base station may discover an accessible local core network, establish a connection with the local core network, and then provide services for UEs. The local core network may have no connection with the core network of a macro network.

FIG. 2 is a schematic diagram illustrating the structure of a conventional Isolated E-UTRAN Operation for Public Safety (IOPS) network when there is no backhaul network. The network on the left is a normal network. As described in connection with FIG. 1, the public safety apps (PSA) server is for providing public safety applications, e.g., mission-critical Push To Talk (MCPTT). The IOPS network on the right, including the local core network, is composed of MME, SGW, PGW and eNodeB. The local core network may also include a home subscriber server (HSS) and/or a PSA server.

Only public safety UEs are allowed to access an IOPS network. At present, it all depends on UE to decide whether to access an IOPS network. For example, a base station may broadcast an indication that the base station is working under an isolated mode or broadcast a special public land mobile network (PLMN) identity of the base station, and a UE may decide on its own as to whether the UE can access the IOPS network. If the UE determines the UE can access the IOPS network, the UE may initiate a process to access the IOPS network. The above manner has a problem, i.e., illegal UEs or unauthorized UEs may disturb normal operations of the network and result in wastes of radio resources.

In addition, there is no mechanism for handing a UE over to an IOPS network.

Various examples of the present disclosure provide a method and an apparatus for performing access control of UEs to prevent illegal UEs or unauthorized UEs from accessing an isolated access network and disturbing the normal operation of the isolated access network and wasting radio resources.

Various examples also provide a method and an apparatus for performing handover control to achieve service continuity when a UE moves between cells in an isolated access network with reduced unnecessary handover and handover failures.

The technical scheme of the present disclosure is described as follows.

A method of performing access control of UEs may include:

receiving, by an entity in an isolated access network, information on whether a UE is entitled to an IOPS; and

performing, by the entity, access control of the UE according to the information on whether the UE is entitled to the IOPS.

An apparatus of performing access control of UEs may include a receiving module and an access control module, and

the receiving module is configured to receive information on whether a UE is entitled to an IOPS; and

the access control module is configured to perform access control of the UE according to the information on whether the UE is entitled to the IOPS.

A method of performing handover control may include:

obtaining, by a serving base station of a UE, IOPS mode information of a neighboring base station;

performing, by the serving base station, handover control according to the IOPS mode information of the neighboring base station.

An apparatus of performing handover control may include an obtaining module and a handover control module, and

the obtaining module is configured to obtain IOPS mode information of a neighboring base station; and

the handover control module is configured to perform handover control of the UE according to the IOPS mode information of the neighboring base station.

According to the above technical mechanism, the entity in the isolated access network may perform access control of a UE according to information on whether the UE is entitled to the IOPS. As such, normal operation of the standalone access network can be protected from disturbance, and a waste of radio resources can be avoided.

Further, a serving base station of a UE may directly obtain IOPS mode information of a neighboring base station, and perform handover control of the UE according to the IOPS mode information. Thus, service continuity of the UE can be achieved with reduced unnecessary handover and handover failure when the UE is moving between cells in a standalone access network.

FIG.1 is a schematic diagram illustrating the structure of a conventional SAE system;

FIG. 2 is a schematic diagram illustrating the structure of a conventional IOPS without a backhaul network;

FIG. 3 is a flowchart illustrating a method of performing access control of a UE in accordance with an example of the present disclosure;

FIG. 4 is a flowchart illustrating a method of performing access control of a UE in accordance with an example of the present disclosure;

FIG. 5 is a flowchart illustrating a method of performing access control of a UE in accordance with example one of the present disclosure;

FIG. 6 is a flowchart illustrating a method of performing access control of a UE in accordance with example two of the present disclosure;

FIG. 7 is a flowchart illustrating a method of performing handover control according to an example of the present disclosure;

FIG. 8 is a schematic diagram illustrating the structure of an apparatus of performing handover control according to an example of the present disclosure;

FIG. 9 is a flowchart illustrating a method of performing handover control according to example one of the present disclosure;

FIG. 10 is a flowchart illustrating a method of performing handover control according to example two of the present disclosure;

FIG. 11 is a flowchart illustrating a method of performing handover control according to an example of the present disclosure; and

FIG. 12 is a flowchart illustrating a method of performing access control of a UE in accordance with an example of the present disclosure.

The present invention is hereinafter further described in detail with reference to the accompanying drawings as well as embodiments so as to make the objective, technical solution and merits thereof more apparent.

Various examples adopts an entity in an isolated access network to perform access control of a UE according to information on whether a UE is entitled to an Operation for Public Safety(IOPS) to avoid an illegal UE or an unauthorized UE to access the isolated access network. The entity may be a mobility management entity (MME) or a base station. As such, normal operations of the standalone access network can be protected from disturbance, and a waste of radio resources can be avoided.

FIG. 3 is a flowchart illustrating a method of performing access control of a UE in accordance with an example of the present disclosure. The method may include the following procedures.

At block 301, an entity in an isolated access network may receive information on whether a UE is entitled to an IOPS.

At block 302, the entity may perform access control of the UE according to the information on whether the UE is entitled to the IOPS.

FIG. 4 is a schematic diagram illustrating the structure of an apparatus of performing access control of a UE. The apparatus may include a receiving module and an access control module.

The receiving module may receive information on whether a UE is entitled to an IOPS.

The access control module may perform access control of the UE according to the information on whether the UE is entitled to the IOPS.

The mechanism of FIG. 3 is described with the following examples.

According to example one, the entity in the isolated access network is an MME.

FIG. 5 is a flowchart illustrating a method of performing access control of a UE in accordance with example one of the present disclosure. The method may include the following procedures.

At block 501, the MME may receive information on whether a UE is entitled to an IOPS.

In this procedure, the information on whether the UE is entitled to the IOPS may be information on whether the UE is allowed to use the IOPS network, or a list of PLMN ID of IOPS E-UTRAN networks allowed to be used by the UE, or a network identity of an IOPS that is allowed to be used by the UE. The network identity of the IOPS may uniquely identify an IOPS E-UTRAN.

In an example, the MME may obtain the information on whether a UE is entitled to an IOPS from a home subscriber server (HSS).

In this procedure, the MME may store the information on whether the UE is entitled to the IOPS received from the HSS.

At block 502, the MME may perform access control of the Ue according to the information on whether the UE is entitled to the IOPS.

In this procedure, the MME may perform access control of the UE after receiving a message of the UE sent by a base station working under an IOPS mode.

In this procedure, the MME may determine the UE is connected to a base station working under the IOPS mode according to, but not limited to, the following manners.

In an example, the MME is a local MME, thus various messages, e.g., tracking area update (TAU), or service request, or Attach message, received by the MME are all received from base stations working under the IOPS mode.

In another example, a base station may send a message to the MME when working under the IOPS mode to inform the MME that the base station is working under the IOPS mode. For example, the base station may send an eNB configuration update message to the MME. The eNB configuration update message may include information indicating the base station is working under the IOPS mode. The information indicating the base station is working under the IOPS mode may be an indication of the base station is working under the IOPS mode, or a list of PLMN IDs for the IOPS mode, or an identity of an isolated E-UTRAN.

In yet another example, when the base station sends a non-access stratum (NAS) message to the MME, an initial UE message may include information indicating the base station is working under the IOPS mode. The base station may also send the information of the IOPS mode to the MME via another S1 message. The information indicating the base station is working under the IOPS mode may be the same with that in the above example, thus is not elaborated herein.

In various examples, a base station working under the IOPS mode refers to the base station has lost connection with the core network, or has restricted connection with the core network, or a nomadic base station serves UEs via a local core network.

If the information on whether the UE is entitled to the IOPS is information indicating the UE is allowed to use the IOPS network, the MME may allow the UE to access the network. If the information indicates the UE is not allowed to use the IOPS network, the MME may reject the access of the UE.

If the information on whether the UE is entitled to the IOPS is a list of PLMN IDs of IOPS E-UTRAN networks allowed to be accessed by the UE, the MME may check whether the PLMN ID of the cell currently accessed by the UE is a PLMN ID of an IOPS allowed to be accessed by the UE, and allow the UE to access if the PLMN ID of the cell is a PLMN ID allowed to be accessed for IOPS operation by the UE, or reject the access of the UE if the PLMN ID of the cell is not a PLMN ID allowed to be accessed for IOPS operation by the UE.

If the information on whether the UE is entitled to the IOPS is a list of PLMN IDs of IOPS E-UTRAN networks not allowed to be accessed by the UE, the MME may check whether the PLMN ID of the cell currently accessed by the UE is a PLMN ID of an IOPS not allowed to be accessed by the UE, and allow the UE to access if the PLMN ID of the cell is not a PLMN ID not allowed to be accessed by the UE, or reject the access of the UE if the PLMN ID of the cell is a PLMN ID not allowed to be accessed by the UE.

If the information on whether the UE is entitled to the IOPS is a list of IOPS network identities allowed to be used by the UE, the entity in the isolated access network may check whether the IOPS ID of the base station currently accessed by the UE is allowed to be used by the UE, and allow the UE to access if the IOPS ID of the base station is allowed to be accessed by the UE, or reject the access of the UE if the IOPS ID of the base station is not allowed to be accessed by the UE.

If the information on whether the UE is entitled to the IOPS is a list of IOPS network identities not allowed to be used by the UE, the MME allow the UE to access if the IOPS ID of the base station currently accessed by the UE is allowed to be accessed by the UE, or reject the access of the UE if the IOPS ID of the base station is not allowed to be accessed by the UE.

According to the method as shown in FIG. 5, the MME may perform proper access control of a UE according to information of authorized IOPS of the UE, so as to prevent an illegal or an unauthorized UE from accessing the network.

FIG. 6 is a flowchart illustrating a method of performing access control of a UE in accordance with example two of the present disclosure. The method may include the following procedures.

At block 601, a base station may receive information on whether a UE is entitled to an IOPS from an MME.

In an example, the MME may obtain information on whether IOPS is allowed from an HSS. The detailed process is the same with that in example one, thus will not be described further.

In this procedure, the information on whether the IOPS is allowed may be information on whether the UE is allowed to use the IOPS network, or a list of PLMN IDs of IOPS E-UTRAN networks allowed to be used by the UE, or a network identity of an IOPS that is allowed to be used by the UE. An IOPS network identity may uniquely identify an IOPS E-UTRAN.

In an example, the MME may send the information on whether the UE is entitled to the IOPS to the base station via an initial context setup request, or a handover request, or a path switch request acknowledgement, or a UE context modification message, or a downlink direct transfer message, or the like.

The base station may store the information on whether the UE is entitled to the IOPS received from the MME.

At block 602, the base station may perform access control of the UE according to the information on whether the UE is entitled to the IOPS.

In an example, the base station may perform access control of the UE after receiving an access request from the UE when working under the IOPS mode.

In an example, if the information on whether the UE is entitled to the IOPS is information indicating the UE is allowed to use the IOPS network, the base station may allow the UE to access the network. If the information indicates the UE is not allowed to use the IOPS network, the base station may reject the access of the UE.

If the information on whether the UE is entitled to the IOPS is a list of PLMN IDs of IOPSs allowed to be accessed by the UE, the base station may check whether the PLMN ID of the cell currently accessed by the UE is a PLMN ID of an IOPS allowed to be accessed by the UE, and allow the UE to access if the PLMN ID of the cell is a PLMN ID of an IOPS allowed to be accessed by the UE, or reject the access of the UE if the PLMN ID of the cell is not a PLMN ID of an IOPS allowed to be accessed by the UE.

If the information on whether the UE is entitled to the IOPS is a list of PLMN IDs of IOPSs not allowed to be accessed by the UE, the base station may check whether the PLMN ID of the cell currently accessed by the UE is a PLMN ID of an IOPS not allowed to be accessed by the UE, and reject the access of the UE if the PLMN ID of the cell is a PLMN ID of an IOPS not allowed to be accessed by the UE, or the entity in the isolated access network may allow the UE to access if the PLMN ID of the cell is not a PLMN ID not allowed to be accessed by the UE.

In an example, if the information on whether the IOPS is allowed is an IOPS network identity allowed to be used by the UE, the base station may allow the access of the UE if the isolated E-UTRAN identity of the base station is allowed to be accessed by the UE, or reject the access of the UE if the isolated E-UTRAN identity of the base station is not allowed to be accessed by the UE.

If the information on whether the UE is entitled to the IOPS is a list of IOPS network identities not allowed to be used by the UE, the entity in the isolated access network may reject the access of the UE if the IOPS ID of the base station currently accessed by the UE is not allowed to be used by the UE, or allow the access of the UE if the IOPS ID of the base station is allowed to be accessed by the UE.

When a base station switches from a normal mode to the IOPS mode, e.g., the base station has lost backhaul or has limited backhaul, in response to a determination that a UE currently served by the base station is not allowed to working under the IOPS mode or is not allowed to use the IOPS network of the base station or is not allowed to use the IOPS PLMN ID of the base station according to stored information received from the MME, the base station may directly release a connection wth the UE. The base station may request a UE to reconnect if the UE is allowed to work under the IOPS mode or is allowed to use the IOPS network or is allowed to use the IOPS PLMN ID of the base station.

When the base station is to initiate a handover of a UE, a base station may judge whether a PLMN ID of a neighboring base station is an IOPS PLMN ID allowed to be used by the UE, and initiate a handover of the UE to the neighboring base station if the PLMN ID of the neighboring base station is an IOPS PLMN ID allowed to be used by the UE, or not initiate the handover of the UE to the neighboring base station if the PLMN ID of the neighboring base station is not an IOPS PLMN ID allowed to be used by the UE.

According to the method as shown in FIG. 6, the MME may send authorized IOPS information of the UE to the base station, and the base station may perform proper access control of a UE according to authorized IOPS information of the UE, so as to prevent an illegal or an unauthorized UE from accessing the network.

FIG. 7 is a flowchart illustrating a method of performing handover control according to an example of the present disclosure. The method may include the following procedures.

At block 701, a serving base station of a UE may obtain information on an IOPS mode of a neighboring base station.

At block 702, the serving base station may perform handover control according to the information on the IOPS mode of the neighboring base station.

In an example, if the IOPS mode information of the serving base station of the UE is inconsistent with the neighboring base station, the serving base station may not perform the handover of the UE to the neighbor base station.

If the IOPS mode information of the serving base station of the UE is consistent with the neighboring base station, the serving base station may perform the handover of the UE to the neighbor base station.

FIG. 8 is a schematic diagram illustrating an apparatus of performing handover control in accordance with an example of the present disclosure. The apparatus may include an obtaining module and a handover control module.

The obtaining module may obtain information on an IOPS mode of a neighboring base station.

The handover control module may perform handover control of the UE according to the information on the IOPS mode of the neighboring base station.

The method of performing handover control may be implemented according to the following examples.

FIG. 9 is a flowchart illustrating a method of performing handover control according to example one of the present disclosure. The method may include the following procedures.

At block 901, base station 1 may send IOPS mode information to base station 2.

In an example, base station 2 may be the serving base station of a UE. Base station 1 may be a neighboring base station, and may be a base station to which the UE is to be handed over in the following procedures.

The IOPS mode information may be an indication of whether base station 1 is working under the IOPS mode, and/or a identity of an isolated E-UTRAN network to which base station 1 belongs.

Plural isolated base stations, e.g., including base station having lost backhaul, base station having limited backhaul, nomadic base statation, may form an isolated E-UTRAN uniquely identified by an isolated E-UTRAN ID.

Base station 1 may send the IOPS mode information to base station 2 during an X2 setup process or an eNB configuration update process. Base station 1 may send the information to base station 2 via a core network.

In various examples, a base station working under the IOPS mode refers to the base station has lost connection with the core network, or has limited connection with the core network, or a nomadic base station serves UEs via a local core network.

At block 902, base station 2 stores the received information, and determines whether to initiate handover of a UE to base station 1.

In an example, when base station 2 is working under an IOPS mode and base station 1 is not working under the IOPS mode, base station 2 may determine not to initiate handover of the UE to a cell of base station 1.

According to the method as shown in FIG. 9, neighboring base stations may exchange IOPS mode information, and a base station may initiate handover when the UE moves within the IOPS network to achieve IOPS service continuity. Unnecessary handover when the UE moves out of the IOPS network may be avoided.

FIG. 10 is a flowchart illustrating a method of performing handover control in accordance with example two of the present disclosure. The method may include the following procedures.

At block 1001, a cell of base station 1 may broadcast IOPS mode information.

A base station working under the IOPS mode refers to the base station has lost connection with the core network, or has limited connection with the core network, or a nomadic base station serves UEs via a local core network.

At block 1002, a UE may obtain IOPS mode information broadcasted in a cell of base station 1.

At block 1003, the UE may send the IOPS mode information of the cell of base station 1 to the serving base station of the UE, i.e., base station 2.

Base station 1 is a neighboring base station of base station 2, or the cell of base station 1 is a neighboring cell of a cell of base station 2 where the UE is located.

Base station 2 may store the received information. Base station 2 may determine whether to initiate a handover of the UE to base station 1 according to the information.

In an example, when base station 2 is working under an IOPS mode and base station 1 is not working under the IOPS mode, base station 2 may determine not to initiate the handover of the UE to a cell of base station 1.

According to the method as shown in FIG. 10, a UE may obtain IOPS mode information of a neighboring base station, and a base station may initiate a handover when the UE moves within the IOPS network to achieve IOPS service continuity. Unnecessary handover when the UE moves out of the IOPS network may be avoided.

The following are two examples of the method of performing access control and handover control of a UE.

FIG. 11 is a flowchart illustrating a method of performing handover control according to example one of the present disclosure. The method may include the following procedures.

At block 1101, base station 1 may obtain IOPS mode information of base station 2.

In an example, the method of obtaining the IOPS mode may be the same with the method described in FIG. 9 or FIG. 10, and is not elaborated herein.

At block 1102, base station 1 determines whether to initiate a handover of the UE.

In an example, when base station 1 is working under an IOPS mode and base station 2 is not working under the IOPS mode, base station 1 may determine not to initiate the handover of the UE to a cell of base station 2. In an example, when base station 1 is not working under the IOPS mode and base station 2 is working under the IOPS mode, base station 1 may determine not to initiate the handover of the UE to a cell of base station 2.

If the IOPS PLMN ID broadcasted by base station 1 is different from that of base station 2, base station 1 may determine not to initiate the handover of the UE to a cell of base station 2. If base station 1 and base station 2 belong to different isolated E-UTRANs, base station 1 may determine not to initiate the handover of the UE to a cell of base station 2.

At block 1103, an X2 or S1 handover process to the cell of base station 2 may be performed.

In an example, if base station 2 and base station 1 are both working under the IOPS mode or base station 2 and base station 1 belong to the same isolated network, base station 1 may determine to initiate the handover of the UE to the cell of base station 2

FIG. 12 is a flowchart illustrating a method of performing access control of a UE in accordance with an example of the present disclosure. The method may include the following procedures.

At block 1201, a UE may send a NAS message to a base station via an RRC message.

At block 1202, the base station may send an initial UE message or a direct transfer message to an MME.

In an example, if the base station is working under an IOPS mode, the base station may send information indicating the base station is working under the IOPS mode to the MME. The information indicating the base station is working under the IOPS mode may be the same with that in block 502, thus is not elaborated herein.

At block 1203, the MME may send an initial context setup request to the base station.

In an example, the MME may perform access control of the UE. The MME may perform access control of the UE according to information indicating the base station is working under the IOPS mode and subscription information of the UE. The detailed process is the same with that in block 502, thus will not be described further. If the access control fails or the UE is not allowed to use IOPS, the MME may directly reject the UE in this procedure without having to send the initial context setup request to the base station.

In an example, if the access control is successful or the UE is allowed to use IOPS, the MME may send the initial context setup request to the base station. The message may include an IOPS PLMN ID allowed to be used by the UE. The base station may store the IOPS PLMN ID allowed to be used by the UE.

In an example, when the base station is to initiate a handover of a UE, the base station may judge whether a PLMN ID of a neighboring base station is an IOPS PLMN ID allowed to be used by the UE, and initiate a handover of the UE to the neighboring base station if the PLMN ID of the neighboring base station is an IOPS PLMN ID allowed to be used by the UE, or determine not to initiate the handover of the UE to the neighboring base station if the PLMN ID of the neighboring base station is not an IOPS PLMN ID allowed to be used by the UE.

At block 1204, the base station may configure a radio bearer (RB) over the air interface.

At block 1205, the base station may send an initial context setup response to the MME.

The purpose, technical solution and merits of this invention have been further described in detail by the above preferred embodiments. It should be appreciated that the foregoing is only preferred embodiments of this invention and is not for use in limiting the invention. Any modification, equivalent substitution, improvement within the spirit and principle of the invention should be covered in the protection scope of the invention.

Claims

A method of performing access control of a user equipment (UE), comprising:

receiving, by an entity in an isolated access network, information on whether a UE is entitled to an isolated E-UTRAN operation for public safety (IOPS); and

performing, by the entity, access control of the UE according to the information on whether the UE is entitled to the IOPS.
The method of claim 1, wherein the information on whether the UE is entitled to the IOPS comprises:

information on whether the UE is allowed to use an IOPS network; or

a list of public land mobile network (PLMN) identities (ID) of IOPS networks allowed to be used by the UE; or

network identities of IOPS networks allowed or not allowed to be used by the UE.
The method of claim 2, wherein performing access control of the UE comprises at least one of:

performing, by the entity, access control of the UE if the information on whether the UE is allowed to use the IOPS network is an indication indicating the UE is allowed to use the IOPS network, or rejecting access of the UE if the information on whether the UE is allowed to use the IOPS network is an indication indicating the UE is not allowed to use the IOPS network;

if the list of PLMN IDs of IOPS networks allowed or not allowed to be used by the UE is a list of PLMN IDs of IOPS networks allowed to be accessed by the UE, judging, by the entity, whether a PLMN ID of a cell currently accessed by the UE is one of PLMN IDs of IOPS networks allowed to be accessed by the UE, and performing, by the entity, access control of the UE if the PLMN ID of the cell currently accessed by the UE is one of PLMN IDs of IOPS networks allowed to be accessed by the UE, or rejecting access of the UE if the PLMN ID of the cell currently accessed by the UE is not one of PLMN IDs of IOPS networks allowed to be accessed by the UE; or

if the list of PLMN IDs of IOPS networks allowed or not allowed to be used by the UE is a list of PLMN IDs of IOPS networks not allowed to be accessed by the UE, judging, by the entity, whether a PLMN ID of a cell currently accessed by the UE is one of PLMN IDs of IOPS networks not allowed to be accessed by the UE, and performing, by the entity, access control of the UE if the PLMN ID of the cell currently accessed by the UE is not one of PLMN IDs of IOPS networks not allowed to be accessed by the UE, or rejecting access of the UE if the PLMN ID of the cell currently accessed by the UE is one of PLMN IDs of IOPS networks not allowed to be accessed by the UE; or

if the network identities of the IOPS networks allowed or not allowed to be used by the UE is the network identities of the IOPS networks allowed to be used by the UE, performing, by the entity, access control of the UE if an IOPS ID of a base station currently serving the UE is one of the network identities of the IOPS networks allowed to be used by the UE, or rejecting access of the UE if the IOPS ID of the base station is not one of the network identities of the IOPS networks allowed to be used by the UE; or

if the network identities of the IOPS networks allowed or not allowed to be used by the UE is the network identities of the IOPS networks not allowed to be used by the UE, performing, by the entity, access control of the UE if an IOPS ID of a base station currently serving the UE is not one of the network identities of the IOPS networks not allowed to be used by the UE, or rejecting access of the UE if the IOPS ID of the base station is one of the network identities of the IOPS networks not allowed to be used by the UE.
The method of claim 1, wherein the entity is a mobility management entity (MME), the information is obtained by the MME from a home subscriber server (HSS);

wherein performing access control of the UE comprises: performing, by the MME, the access control of the UE after receiving a UE message sent by a base station working under an IOPS mode.
The method of claim 4, wherein the receiving a UE message sent by the base station working under the IOPS mode by the MME comprises:

directly receiving the UE message from the base station working under the IOPS mode by the MME which is a local MME; or

sending, by the base station, a message to the MME when the base station is working under the IOPS mode; or

sending, by the base station, a non-access stratum (NAS) message to the MME, wherein an initial UE message comprises information indicating the base station is working under the IOPS mode.
The method of claim 1, wherein the entity is a baes station, the information is sent by an MME to the base station after the MME receives the information from an HSS;

wherein performing the access control of the UE comprises:

releasing, by the base station, a connection of the UE directly in response to a determination that the UE is not allowed to use the IOPS work mode or is not allowed to use the IOPS network of the base station or is not allowed to use the IOPS PLMN ID of the base station according to the information; or requesting, by the base station, the UE to re-initiate a connection setup process in response to a determination that the UE is allowed to use the IOPS work mode or is allowed to use the IOPS network of the base station or is allowed to use the IOPS PLMN ID of the base station according to the information.
An apparatus of performing access control of a user equipment (UE), comprising: a receiving module and an access control module, wherein

the receiving module is configured to receive information on whether a UE is entitled to an isolated E-UTRAN operation for public safety (IOPS); and

the access control module is configured to perform access control of the UE according to the information on whether the UE is entitled to the IOPS.
A method of performing handover control, comprising:

obtaining, by a serving base station of a user equipment (UE), isolated E-UTRAN operation for public safety (IOPS) mode information of a neighboring base station; and

performing, by the serving base station, handover control of the UE according to the IOPS mode information of the neighboring base station.
The method of claim 8, wherein the IOPS mode information is an indication indicating whether the neighboring base station is working under the IOPS mode and/or a network identity of an isolated access network to which the neighboring base station belongs.
The method of claim 8, wherein obtaining the IOPS mode information of the neighboring base station comprises:

receiving the IOPS mode information sent by the neighboring base station; or

broadcasting, by the neighboring base station, the IOPS mode information; obtaining, by the UE, the IOPS mode information broadcasted by the neighboring base station, and sending, by the UE, the information to the serving base station.
The method of claim 8, wherein performing by the serving base station the handover control according to the IOPS mode information of the neighboring base station comprises:

determining, by the serving base station, not to perform the handover control of the UE if IOPS mode information of the serving base station of the UE is inconsistent with the IOPS mode information of the neighboring base station; or

performing, by the serving base station, the handover control of the UE if the IOPS mode information of the serving base station is consistent with the IOPS mode information of the neighboring base station.
An apparatus of performing handover control, comprising: an obtaining module and a handover control module, wherein

the obtaining module, is configured to obtain isolated E-UTRAN operation for public safety (IOPS) mode information of a neighboring base station; and

the handover control module is configured to perform handover control of a user equipment (UE) according to the IOPS mode information of the neighboring base station.