KR100461538B1 - Method of Dynamic IP Address allocation/release on Diameter Server - Google Patents

Abstract

1. TECHNICAL FIELD OF THE INVENTION

The present invention relates to a method for allocating / releasing a dynamic IP address by a diameter server and a computer-readable recording medium having recorded thereon a program for realizing the above methods.

2. The technical problem to be solved by the invention

The present invention provides a computer-readable recording medium recording a method for allocating / releasing a dynamic IP address for assigning or releasing a dynamic IP address through verification of a dynamic IP address authority for a subscriber, and a program for realizing the methods. To provide the purpose.

3. Summary of the Solution of the Invention

The present invention includes a first step in which the diameter server receives a dynamic IP address allocation request from a subscriber authentication terminal to a DHCP server and receives an address of the DHCP server; A second step in which the diameter server transmits the address received from the DHCP server to the terminal and then receives the MAC address from the terminal to verify dynamic IP address authority for a home network or visited network subscriber and verify whether the authority exists; And a third step of requesting the DHCP server to allocate a dynamic IP address to the DHCP server, receiving the dynamic IP address from the DHCP server, and transmitting the dynamic IP address to the terminal.

4. Important uses of the invention

The present invention is used in a wireless LAN network including a diameter server.

Description

Method of dynamic IP address allocation / release by diameter server {Method of Dynamic IP Address allocation / release on Diameter Server}

The present invention relates to a dynamic IP address allocation / deletion method by a diameter server and a computer readable recording medium recording a program for realizing the above methods. A method of allocating / releasing a dynamic IP address for allocating or releasing a dynamic IP address through IP address authority verification, and a computer-readable recording medium recording a program for implementing the methods.

In the existing wireless LAN system, after performing user authentication using the Radius (Remote Access Dial In User Service (RADIUS) protocol), the dynamic IP address allocation for the Internet service is performed by the Dynamic Host Configuration Protocol (DHCP). The method is performed in an access point (AP) having a server function. As such, the method of allocating an address independently without being associated with an authentication server is a structure in which a terminal requests all dynamic IP addresses after authenticating through a port-based access control (802.1X) function. Since the Radius protocol is a client-server concept, the server cannot terminate user sessions or release addresses by the network in operation. Therefore, there are many problems in efficient resource management and wireless LAN network management. In addition, since the Radius protocol is a protocol for small network devices requiring server-based authentication, roaming between wireless LAN networks is difficult.

In order to compensate for this, the proposed Diameter protocol was developed to support roaming and mobile IP networks with a peer-to-peer concept. In a WLAN network interworking system using the diameter protocol, a WLAN network interworking using different authentication protocols and a service provider perform interworking functions between different networks. That is, the system accommodates both subscribers of the WLAN network using the Radius protocol and subscribers of the WLAN network using the Diameter protocol.

However, in order to provide an efficient Internet service in such a WLAN network interworking system, a dynamic IP address allocation function and a release function are required through authentication and dynamic IP address authorization verification for subscribers of both home and visit networks. However, such a function may not be implemented by a method of allocating an address in an access point (AP) having a DHCP server function as in a conventional WLAN network.

The present invention has been proposed to solve the above problems, by independently configuring a DHCP server separated from the access point, when there is a dynamic IP address assignment request from the terminal, both the home network and visiting network users in the diameter server It is an object of the present invention to provide a dynamic IP address allocation method for requesting a dynamic IP allocation to a DHCP server by performing authorization authorization for a DHCP server, and a computer-readable recording medium recording a program for realizing the method.

Meanwhile, the present invention can be read by a computer that records a dynamic IP address release method and a program for realizing the method by a diameter server that receives a request of a terminal from a diameter server and releases the dynamic IP address assigned to the terminal. Another purpose is to provide a recording medium.

The present invention also provides a dynamic IP address release method for releasing a dynamic IP address assigned to an arbitrary terminal in response to a request from a diameter server, and a computer-readable recording medium recording a program for realizing the method. There is another purpose.

1 is an exemplary configuration diagram of a WLAN inter-working system to which the present invention is applied.

Figure 2 is a configuration example of a diameter server to which the present invention is applied.

3 is a flowchart illustrating a method for allocating a dynamic IP address through authorization verification of a diameter server in a WLAN interworking system according to an embodiment of the present invention.

4 is a flowchart illustrating an embodiment of a method for releasing a dynamic IP address by a diameter server according to the present invention.

5 is a flowchart illustrating another embodiment of a method for releasing a dynamic IP address by a diameter server according to the present invention.

* Explanation of symbols on the main parts of the drawing

111: Diameter Server 112: DHCP Server

113: Access Point 131: Radius Server

In order to achieve the above object, the present invention provides a method for allocating a dynamic IP address by a diameter server, wherein the diameter server transmits a dynamic IP address allocation request from a subscriber authentication terminal to a DHCP server, thereby providing an address of the DHCP server. Receiving the first step; A second step in which the diameter server transmits the address received from the DHCP server to the terminal and then receives the MAC address from the terminal to verify dynamic IP address authority for a home network or visited network subscriber and verify whether the authority exists; And a third step of requesting the DHCP server to allocate a dynamic IP address to the DHCP server, receiving the dynamic IP address from the DHCP server, and transmitting the same to the terminal.

In addition, in order to achieve the above object, the present invention provides a method for releasing a dynamic IP address by a diameter server, wherein the diameter server receives a dynamic IP address release request from a terminal of a home network or a visited network. ; And after determining whether the terminal making the dynamic IP address release request is a home network subscriber or a visited network subscriber by the diameter server, and requesting the release of the dynamic IP address to the DHCP server to release the dynamic IP address. It includes a second step.

In addition, in order to achieve the above another object, the present invention, in the dynamic IP address release method by the diameter server, the diameter server requests a dynamic IP address release to the visitor subscriber terminal to the DHCP server dynamic IP A first step of causing the address to be released; And a second step of the diameter server requesting a DHCP server to release a dynamic IP address for a home network subscriber station so that the dynamic IP address is released.

On the other hand, the present invention, the diameter server, the diameter server is a first function for receiving a dynamic IP address allocation request from the subscriber authentication terminal to the DHCP server to receive the address of the DHCP server; A second function of verifying whether the authority is present by verifying dynamic IP address authority for a home network or visiting network subscriber by receiving a MAC address from the terminal after the diameter server transfers the address received from the DHCP server to the terminal; And a computer for recording a program for realizing a third function of requesting the DHCP server to allocate a dynamic IP address to the DHCP server to receive the dynamic IP address from the DHCP server and then transmitting the dynamic IP address to the terminal. To provide.

In addition, the present invention, the diameter server, the diameter server is a first function for receiving a dynamic IP address release request from the terminal of the home network or visit network; And after determining whether the terminal making the dynamic IP address release request is a home network subscriber or a visited network subscriber by the diameter server, and requesting the release of the dynamic IP address to the DHCP server to release the dynamic IP address. A computer readable recording medium having recorded thereon a program for realizing a second function is provided.

In addition, the present invention, the diameter server, the diameter server is a first function for requesting the dynamic IP address release for the visited network subscriber terminal to the DHCP server to the dynamic IP address is released; And a computer-readable recording medium having recorded thereon a program for realizing a second function of requesting a DHCP server to release a dynamic IP address for a home network subscriber station from the DHCP server.

The above objects, features and advantages will become more apparent from the following detailed description taken in conjunction with the accompanying drawings. Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings.

FIG. 1 is an exemplary configuration diagram of a WLAN inter-working system to which the present invention is applied. As an example, FIG. 1 illustrates a WLAN inter-working system including an operator A (11), an operator B (12), and an operator C (13).

As shown in FIG. 1, the operator A 11, the operator B 12, and the operator C 13 may have different network structures, and may communicate with each other through the public Internet 14. First, in case of using the diameter protocol such as the carrier A 11 and the carrier B 12, the diameter servers 111 and 121 and the DHCP servers 112 and 122 must be included, and the DHCP servers 112 and 122 are dynamic IP address pools. Actually assigns an address. The configuration of the diameter servers 111 and 121 will be described in more detail with reference to FIG. 2.

On the other hand, when using the Radius server 131 as an authentication server, such as carrier C (13), the access point 132 performs a DHCP server function, the carrier A (11), carrier B (12), carrier C (13) The access points 113, 123, and 132 are connected to a wireless LAN using a plurality of mobile terminals and IEEE802.11b.

2 is an exemplary configuration diagram of a diameter server to which the present invention is applied.

As shown in FIG. 2, the diameter server 111 performs a protocol conversion unit 201 serving as a gateway for processing a visited network subscriber through a Radius network or a home network subscriber through an access point, subscriber authentication, and message authentication. Key management unit 202 for generating and managing keys for authentication, authentication mechanism management unit 203 for subscriber authentication, message authentication and node authentication, address management unit 204 for assigning and managing addresses to subscribers requesting service, and subscriber information. Information management unit 205 for information management such as network information, system information, database 206 for storing and managing information collected or generated by information management unit 205, and collecting and storing billing related data to be given to a user. The billing management unit 207, the authentication management unit 208 for actual user authentication, the diameter processing unit 209 for processing the diameter protocol, It includes a MIP control unit 210 for controlling the IP address, a server management unit 211 for the operation and management of the diameter server.

In particular, the authentication management unit 208 performs the information management and user authentication function of the home network user, the protocol conversion unit 201 manages information about the home network and visiting network users and performs the authority verification function for dynamic IP address assignment The address manager 204 performs a DHCP relay function and a dynamic IP address assignment management function.

3 is a flowchart illustrating a method for allocating a dynamic IP address through authorization verification of a diameter server in a WLAN interworking system according to an embodiment of the present invention.

First, the mobile terminal 114 that has completed authentication of the wireless LAN network transmits a DHCP server search message (DHCPDISCOVER) to the address manager 204 of the diameter server 111 to find the address of the DHCP server that allocates the dynamic address. (301). Accordingly, when the address management unit 204 receives this and delivers a DHCP server search message (DHCPDISCOVER) to the DHCP server 112 (302), the DHCP server 112 in response to the DHCP address delivery message (including the address of the DHCP server ( DHCPOFFER) is transmitted to the address management unit 204 (303), and the address management unit 204 again transmits a DHCP address delivery message (DHCPOFFER) to the mobile terminal 114 (304).

Then, the mobile terminal 114 receiving the address of the DHCP server 112 transmits a DHCP request message (DHCPREQUEST) to the address management unit 204 to receive a dynamic IP address (305). Then, the address manager 204 loads the MAC address received from the mobile terminal 114 in the address assignment authentication request message AddrAllocAuthReq and sends it to the protocol converter 201 (306). Then, the protocol conversion unit 201 performs the dynamic IP address authority verification for the subscriber corresponding to the received MAC address, and then assigns the information such as authority verification result and subscriber's home network / visit network classification to the address assignment authentication result message ( AddrAllocAuthRes is transmitted to the address management unit 204 (307), and the address management unit 204 receiving the address assignment authentication result message determines whether there is a dynamic IP address authority for the subscriber.

As a result of the determination, if the dynamic IP address authority does not exist, the mobile station 114 transmits an address assignment failure message (DHCPNACK) (308) to disable the Internet service, and if the dynamic IP address authority exists, the DHCP server 112 In step 309, a dynamic IP address allocation request is made by transmitting an address assignment request message (DHCPREQUEST). Then, the requested DHCP server 112 allocates a dynamic IP address to the address assignment success message (DHCPACK) and transmits it to the address manager 204 (310), and the address manager 204 receives it and allocates the dynamic IP. The addresses are transmitted to the protocol conversion unit 201 and the authentication management unit 208 through the address assignment notification message AddrAllocNoti (311 and 313). When the protocol conversion unit 201 and the authentication management unit 208 receiving the address assignment notification message (addrAllocNoti, 311, 313) transmit an address allocation result message (AddrAllocRes) to the address management unit 204 in response (312,314). In operation 315, the address management unit 204 transmits the finally allocated dynamic IP address to the mobile terminal 114 in the address allocation completion message DHCPACK so as to receive the Internet service (315).

4 is a flowchart illustrating a dynamic IP address release method by a diameter server according to the present invention, and illustrates an operation in the case where an address release request is received from the mobile terminal 114.

First, the mobile terminal 114 transmits a DHCP release request message (DHCPRELEASE) to the address management unit 204 of the diameter server 111 to request termination of the Internet service (401). The address management unit 204 receiving the DHCP release request message determines whether the mobile terminal 114 is a home network subscriber or a visited network subscriber, and if the visited network subscriber is an address release notification message (AddrReleaseNoti) to the protocol conversion unit 201. Notify the dynamic IP address release request (402), if the home network subscriber notifies the dynamic IP address release request through the address release notification message (AddrReleaseNoti) (404).

Then, the protocol conversion unit 201 or the authentication management unit 208 receiving the address release notification message accepts the dynamic IP address release to the mobile terminal and transmits an address release request message (AddrReleaseReq) to the address management unit 204, respectively. (403, 405). The address management unit 204 receiving the address release request message transmits an address release message DHCPRELEASE to the DHCP server 112 so that the requested dynamic IP address is released (406), and as a result, the protocol conversion unit 201. And an address release result message (AddrReleaseRes) to the authentication management unit 208 (407 and 408).

FIG. 5 is a flowchart of another embodiment of a dynamic IP address release method by a diameter server according to the present invention, and illustrates an operation when there is an address release request from the diameter server.

The dynamic IP address release function by the diameter server is a function not supported by the existing authentication server. By requesting the dynamic IP address release from the diameter server due to terminal expiration or a reason for operating the WLAN network, Allows efficient management of limited address resources.

First, in order to release a dynamic IP address by the diameter server, if the visited network subscriber, the protocol conversion unit 201 transmits an address release request message (AddrReleaseReq) to the address management unit 204 (501). In step 208, an address release request message AddReleaseReq is transmitted to the address management unit 204 to inform the dynamic IP address release request. Then, the address management unit 204 receiving the address release request message transmits a DHCP release message (DHCPRELEASE) requesting the release of the dynamic IP address to the DHCP server 112 (503). Then, the DHCP server 112 receiving the DHCP release message (DHCPRELEASE) releases the dynamic IP address requested to release.

Thereafter, the address manager 204 transmits an address release result message (AddrReleaseRes) to the protocol converter 201 and the authentication manager 208 (504 and 505).

As described above, the method of the present invention may be implemented as a program and stored in a recording medium (CD-ROM, RAM, floppy disk, hard disk, magneto-optical disk, etc.) in a computer-readable form.

The present invention described above is capable of various substitutions, modifications, and changes without departing from the spirit of the present invention for those skilled in the art to which the present invention pertains, and the above-described embodiments and accompanying It is not limited by the drawings.

The present invention as described above, the method of performing the DHCP server function in the conventional access point to solve the problem of accepting all of the address request for the user without authorization and difficult to release the address in the WLAN network, When requesting a dynamic IP address from the client, the diameter server authenticates authority of the subscriber of the terminal to request a dynamic IP address from the DHCP server, thereby preventing address allocation and over-address allocation for unauthorized users. It works.

In addition, the present invention provides a method for releasing a dynamic IP address by request of a diameter server when the session expires or is required for network operation, as well as releasing a dynamic IP address by a request of a terminal, thereby efficiently restricting a dynamic IP address. It is effective to manage.

Meanwhile, the present invention can be used not only in a WLAN interworking system, but also in any network that supports the diameter protocol.

Claims (13)

In the dynamic IP address allocation method by the diameter server, A first step in which the diameter server receives a dynamic IP address allocation request from a subscriber authentication terminal to a DHCP server and receives an address of the DHCP server; The diameter server transmits the address of the DHCP server received from the DHCP server to the terminal and receives the MAC address from the terminal to verify the dynamic IP address authority for the home network or visited network subscribers to check whether the authority exists. Two steps; And A third step of requesting the DHCP server to allocate a dynamic IP address to the DHCP server and receiving a dynamic IP address from the DHCP server; Dynamic IP address allocation method by the diameter server comprising a. The method of claim 1, A fourth step of transmitting a dynamic IP address allocation failure message to the terminal if there is no authority as a result of checking whether the authority exists in the second step; Dynamic IP address allocation method by the diameter server further comprising. The method according to claim 1 or 2, The first step is, A fifth step of receiving a dynamic IP address allocation request from the subscriber authentication terminal by the address manager of the diameter server and requesting a DHCP server address search from the DHCP server; And A sixth step of receiving a DHCP server address from the DHCP server by the address manager of the diameter server; Dynamic IP address allocation method by the diameter server comprising a. The method according to claim 1 or 2, The second step, A fifth step of transmitting, by the address manager of the diameter server, the address of the DHCP server received from the DHCP server to the terminal; A sixth step of receiving, by the address manager of the diameter server, a MAC address from the terminal, and transmitting the MAC address to the protocol conversion unit of the diameter server; A seventh step of verifying a dynamic IP address authority for a home network or a visited network subscriber based on the MAC address received from the terminal in the protocol conversion unit of the diameter server and transmitting the result to the address management unit of the diameter server; And An eighth step of confirming whether a dynamic IP address authority for the terminal exists in the address manager of the diameter server; Dynamic IP address allocation method by the diameter server comprising a. The method according to claim 1 or 2, The third step, A fifth step of requesting, by the address manager of the diameter server, a dynamic IP address assignment to the DHCP server and receiving a dynamic IP address allocated from the DHCP server; And A sixth step of transmitting the dynamic IP address received from the DHCP server to the protocol conversion unit of the diameter server and the authentication management unit of the diameter server and then transmitting the dynamic IP address received from the DHCP server to the terminal; Dynamic IP address allocation method by the diameter server comprising a. In the dynamic IP address release method by the diameter server, A first step of receiving, by the diameter server, a dynamic IP address release request from a terminal of a home network or a visited network; And After determining whether the terminal requesting the dynamic IP address release from the diameter server is a home network subscriber or a visited network subscriber, after approving the dynamic IP address release, the dynamic IP address is released to the DHCP server to release the dynamic IP address. 2nd step Dynamic IP address release method by the diameter server comprising a. The method of claim 6, The second step, A third step of determining whether a terminal requesting a dynamic IP address release by the address manager of the diameter server is a home network visitor or a visited network subscriber; A fourth step of receiving the approval by transmitting a dynamic IP address release request to the authentication management unit of the diameter server if the home network subscriber is determined as the third step; A fifth step of receiving the approval by transmitting a dynamic IP address release request to the protocol conversion unit of the diameter server if the visited network subscriber is determined as the third step; A sixth step of requesting the DHCP server to release the dynamic IP address by the address manager of the diameter server, which has received the approval from the authentication management unit or the protocol conversion unit of the diameter server, to release the dynamic IP address; And A seventh step of notifying a dynamic IP address release result to an authentication management unit or a protocol conversion unit of the diameter server that the address management unit of the diameter server requests the dynamic IP address release; Dynamic IP address release method by the diameter server comprising a. In the dynamic IP address release method by the diameter server, A first step of the diameter server requesting a DHCP server to release a dynamic IP address for the visited network subscriber station so that the dynamic IP address is released; And A second step in which the diameter server requests a DHCP server to release a dynamic IP address for a home subscriber station so that the dynamic IP address is released; Dynamic IP address release method by the diameter server comprising a. The method of claim 8, The first step is, A third step of requesting, by the protocol conversion unit of the diameter server, a dynamic IP address release for the visited subscriber station to the address management unit of the diameter server; A fourth step of requesting, by the address manager of the diameter server, to release the dynamic IP address for the visited subscriber station from the DHCP server to release the dynamic IP address; And A fifth step of notifying a dynamic IP address release result to a protocol conversion unit of the diameter server by the address manager of the diameter server; Dynamic IP address release method by the diameter server comprising a. The method according to claim 8 or 9, The second step, A sixth step of requesting, by the authentication management unit of the diameter server, a dynamic IP address release to the home network subscriber station to the address management unit of the diameter server; A seventh step of requesting, by the address manager of the diameter server, to release the dynamic IP address for the home subscriber station from the DHCP server so that the dynamic IP address is released; And An eighth step of notifying a dynamic IP address release result to an authentication management unit of the diameter server by the address manager of the diameter server; Dynamic IP address release method by the diameter server comprising a. Diameter servers, A first function of receiving, by the diameter server, a dynamic IP address allocation request from a subscriber authentication terminal to a DHCP server and receiving an address of the DHCP server; A second function of verifying whether the authority is present by verifying dynamic IP address authority for a home network or visiting network subscriber by receiving a MAC address from the terminal after the diameter server transfers the address received from the DHCP server to the terminal; And A third function of requesting the DHCP server to allocate a dynamic IP address to the DHCP server and receiving a dynamic IP address from the DHCP server and then transmitting the dynamic IP address to the terminal; A computer-readable recording medium having recorded thereon a program for realizing this. Diameter servers, A first function of receiving, by the diameter server, a dynamic IP address release request from a terminal of a home network or a visited network; And After determining whether the terminal making the dynamic IP address release request from the diameter server is a home network subscriber or a visited network subscriber, after approving the dynamic IP address release, the dynamic IP address is released to the DHCP server to release the dynamic IP address. 2nd function A computer-readable recording medium having recorded thereon a program for realizing this. Diameter servers, A first function of the diameter server requesting a DHCP server to release a dynamic IP address for the visited network subscriber station so that the dynamic IP address is released; And A second function in which the diameter server requests a DHCP server to release a dynamic IP address for a home subscriber station so that the dynamic IP address is released; A computer-readable recording medium having recorded thereon a program for realizing this.