FIELD

The described embodiments relate to techniques for communicating information among electronic devices. Notably, the described embodiments relate to techniques for restricting access to a private or neutral-host network.

BACKGROUND

While many electronic devices communicate with each other via large networks owned by a network operator, small-scale networks associated with entities (such as a company or an organization) are increasingly common. A small-scale network complements the service offered by the network operator and can offer improved communication performance, such as in a particular venue or environment.

However, it can be difficult to flexibly restrict or control access to a small-scale network. Notably, the access-control techniques used in larger cellular-telephone networks (which are sometimes referred to as ‘macrocells’), which are operated or provided by mobile network operators, may not be suitable for a small-scale network. For example, it may be difficult to scale down the access-control techniques from a lager cellular-telephone network to the smaller number of users in a small-scale network.

SUMMARY

A computer that restricts access to a private or neutral-host network associated with an entity is described. This computer includes: an interface circuit that communicates with a radio node; a processor coupled to the interface circuit; and memory, coupled to the processor, storing program instructions. When executed by the processor, the program instructions cause the computer to perform operations. Notably, the computer receives an attachment request from the radio node, where the attachment request is associated with an electronic device (e.g., the attachment request may have been sourced from the electronic device, such as the attachment request may include a source address of the electronic device), and includes an identifier of the radio node, an identifier of the electronic device and an identifier of a service provider. Then, the computer determines a first entity identifier of the entity based at least in part on the identifier of the radio node, and a second entity identifier of the entity based at least in part on the identifier of the electronic device. When the first entity identifier matches the second entity identifier, the computer performs authentication of the electronic device. Alternatively, when the first entity identifier is different from the second entity identifier, and the identifier of the service provider matches a predefined identifier of the service provider that is stored in the memory, the computer performs the authentication of the electronic device. Otherwise, the computer does not allow the electronic device to attach to the private or neutral-host network.

Note that the radio node may include: an Evolved Node B (eNodeB), a Universal Mobile Telecommunications System (UMTS) NodeB and radio network controller (RNC), a New Radio (NR) gNB or gNodeB (which communicates with a network with a cellular-telephone communication protocol that is other than Long Term Evolution), etc.

Moreover, the identifier of the radio node may include an E-UTRAN cell global identifier (ECGI). Furthermore, the identifier of the electronic device may include an international mobile subscriber identity (IMSI) or a subscription permanent identifier (SUPI). Additionally, the identifier of the service provider may include a public land mobile network (PLMN) identifier. Note that the identifier of the service provider (such as the PLMN identifier) may be included in the identifier of the electronic device. Thus, in some embodiments, the service provide may operate or provide a cellular-telephone network.

In some embodiments, the identifier of the radio node is a unique identifier, and the identifier of the electronic device is a second unique identifier.

Moreover, determining the first entity identifier may involve performing a lookup in a predefined list of identifiers of radio nodes in the private or neutral-host network and the first entity identifier. Furthermore, determining the second entity identifier may involve performing a lookup in a predefined list of identifiers of electronic devices and the second entity identifier.

Additionally, the computer may include a computer system.

Note that the computer may restrict access to the private or neutral-host network without using a closed subscriber group (CSG).

Another embodiment provides a computer-readable storage medium with program instructions for use with the computer. When executed by the computer, the program instructions cause the computer to perform at least some of the aforementioned operations in one or more of the preceding embodiments.

Another embodiment provides a method, which may be performed by the computer. This method includes at least some of the aforementioned operations in one or more of the preceding embodiments.

This Summary is provided for purposes of illustrating some exemplary embodiments, so as to provide a basic understanding of some aspects of the subject matter described herein. Accordingly, it will be appreciated that the above-described features are examples and should not be construed to narrow the scope or spirit of the subject matter described herein in any way. Other features, aspects, and advantages of the subject matter described herein will become apparent from the following Detailed Description, Figures, and Claims.

