KR100601857B1 - Method of Subscriber Authentication for Packet Data Communication in Access Network of Mobile Communication System - Google Patents

Abstract

The present invention relates to a subscriber authentication method for packet data communication in a mobile communication network. The present invention relates to a method of requesting a session to a data location register when a packet data service connection request is received from a mobile communication terminal. Step 2, where the registrar transmits the session to the mobile station and a response message including the MIN number and ESN information to the radio station, after step 2, the radio station allocates a traffic channel to the mobile communication terminal; In step 4 and 2, requesting and receiving the hardware ID information, the subscriber authentication is completed when it is determined that the ESN and the hardware ID information are the same in step 5 and step 5 to determine whether the ESN and the received hardware ID information are the same in step 4. The packet data by performing the six steps of providing a packet data service to the mobile communication terminal. And with respect to the mobile communication terminal using the service compares the information received by the request information and the terminal that is stored in the Access Network to verify whether or not the same, and provides an effect to be capable of performing an accurate accounting therethrough.

Description

Subscriber Authentication for Packet Data Communication in Access Network of Mobile Communication System}

1 is a block diagram illustrating a configuration of a mobile communication network capable of performing a packet data service according to the present invention;

2 is a block diagram illustrating a protocol layer of a mobile communication terminal according to the present invention;

3 is a flowchart illustrating an initial process in packet data communication according to the present invention;

4 is a table for explaining an ESN transmission standard in packet data communication according to the present invention;

5 is a flowchart illustrating a service process in packet data communication according to the present invention.

<Brief description of the main parts of the drawings>

100: mobile communication terminal 110: radio station

140: PDSN 150: DCN

160: DLR 170: AAA

The present invention relates to a subscriber authentication method for packet data communication in a mobile communication network which can prohibit the use of data service by an illegal mobile communication terminal during packet data service and minimize the charging error.

The mobile communication service has been continuously developed starting from the low-quality voice call-oriented first generation mobile communication service provided by the analog cellular Advanced Mobile Phone Service (AMPS), which has been in service since the late 1980s. In the second generation mobile communication service, enhanced voice call and low speed (14.4 Kbps) data service provided by digital cellular Global System for Mobile (GSM), Code Division Multiple Access (CDMA), Time Division Multiple Access (TDMA), etc. are possible. It was. In addition, in the 2.5G mobile communication service, the PCS (Personal Communication Service), which can be used around the world in addition to securing the frequency in the GHz band, has been developed to enable improved voice call and low speed (144 Kbps) data service.

Meanwhile, in the 3rd generation mobile communication service, 1xEV-DO service for packet data service has been developed to provide a high speed packet data service to a user.

The 1xEV-DO service is a dedicated protocol for packet data transmission that is different from the existing IS-2000 wireless protocol, and is capable of up to 2.475Mbps when the maximum transmission speed is omnidirectional.

When providing a packet data service to a mobile communication terminal, a unicast access terminal identifier (UATI) consisting of 128 bits is used for the mobile communication terminal. This is the address of the mobile communication terminal temporarily assigned from the Packet Control Function (PCF) of the PDSN when the mobile communication terminal attempts to connect to the system.

The mobile communication terminal receives an UATI from the mobile communication network through an access channel, and this information is stored / managed in the data location register (DLR) in association with the MIN information of the mobile communication terminal.

Accordingly, the mobile communication network inquires UATI information allocated to the mobile communication terminal using the packet data service from the DLR and charges the packet data service fee to the corresponding MIN.

In the conventional mobile communication network (CDMA2000 1xEV-DO), the MIN (or IMSI) information is not exchanged with the access network when a call is established for packet data processing. With the result value stored through the authentication process of the server (AAA), the access network infers the MIN or IMSI of the mobile communication terminal and delivers it to the PDSN.

However, in the conventional mobile communication network, the authentication process between the mobile communication terminal and the access network-authenticator is not performed at every packet data service request, but is automatically performed when the first time is synchronized with the CDMA2000 1xEV-DO network or in the 1xEV-DO network. It is executed only when the packet data service is received for the first time. After authentication is successfully completed, no separate authentication process is performed when accessing the packet data service.

Therefore, UATI and IMSI of the mobile communication terminal are deleted in the process of continuously deleting the existing UATI and IMSI information from the access network to terminals requesting new UATI for the first time accessing the 1xEV-DO network or changing the subnet. When a matching error occurs, there is a concern that an error of charging a wrong data subscriber as well as a packet data service to an illegal subscriber may occur.

For example, when the UATI information stored in the DLR is deleted due to a reason such as software application while the UATI is assigned to the mobile communication terminal A, the mobile communication terminal B is connected to the 1xEV-DO network. In some cases, the UATI assigned to the mobile communication terminal A may be allocated to the mobile communication terminal B by first accessing the terminal or by moving to a subnet. At this time, since the mobile communication network does not perform a separate authentication process after the authentication process of the mobile communication terminal B is performed once as described above, the mobile communication network recognizes the terminal assigned to the UATI as the mobile communication terminal B. do. In this state, when the mobile communication terminal A uses the packet data service, the mobile communication terminal A and the mobile communication terminal B use the same UATI.

For this reason, in the conventional mobile communication network, a charging error occurs in which the packet data service charge used by the mobile communication terminal A is charged to the mobile communication terminal B.

Accordingly, in order to solve the above problems, the present invention authenticates subscribers during packet data communication in a mobile communication network that can prevent charging errors by authenticating through a hardware ID and an ESN to a mobile communication terminal that wants to use a packet data service. The purpose is to provide a method.

A subscriber authentication method for packet data communication in a mobile communication network according to the present invention for achieving the above object is a packet data service for providing a packet data service connected to the mobile station and a wireless station for performing wireless communication with the mobile station. A packet data service communication method of a mobile communication network including a node and a data location register, the method comprising: requesting a session to the data location register when a packet data service connection request is received from a mobile communication terminal; In step 2, the data location register transmits a session for the mobile communication terminal and a response message including a MIN number and ESN information to the wireless station, and after the second step, the wireless station allocates a traffic channel to the mobile communication terminal. Step 3, the wireless station to the mobile communication terminal hardware ID information Step 4 for requesting and receiving, step 5 for determining whether the ESN and the hardware ID information received in step 4 are the same in step 2, and if it is determined that the ESN and hardware ID information are the same in step 5, the subscriber authentication is completed and the And six steps of providing a packet data service to the mobile communication terminal.

Hereinafter, with reference to the accompanying drawings to describe the present invention in detail.

1 is a block diagram illustrating a mobile communication network connection of a mobile communication terminal according to the present invention.

Referring to FIG. 1, a mobile communication network according to the present invention includes a base station (hereinafter referred to as a 'BTS') 111 performing wireless communication with a mobile communication terminal 100, and a base station controller controlling the BTS 111 ( (Hereinafter, referred to as 'BSC') 112, a Packet Data Service Node (hereinafter referred to as 'PDSN') 140 connected to the BSC 112 to service packet data, and the PDSN 140 Data core network (hereinafter referred to as "DCN") 150, which is connected to the BSC 112, and an exchange that is connected to the BSC 112 to perform an exchange (hereinafter, referred to as "MSC"). 120 is configured to include.

The MSC 120 is connected to a home location register (hereinafter referred to as HLR) 130 that manages the location information of the subscriber, and the DCN 150 manages the information of the subscriber using the packet data service and allocates sessions. A data location register (hereinafter referred to as 'DLR') 160 and an authentication server (hereinafter referred to as 'AAA') 170 for authentication are connected.

The DLR 160, if there is a request for session information of a terminal requesting a packet data service from a radio station (BTS / BSC) 110, performs session information on the mobile communication terminal 100 (normal traffic between the terminal and the radio station). As a parameter for open and continuous communication, it is necessary to communicate with each other through the session negotiation process between the terminal and the wireless station prior to packet data service to store the result value in the DLR and MIN information (mobile communication terminal and access network-authentication server (AN). AAA) and the ESN information of the mobile communication terminal 100 together with the MIN information of the terminal stored through the authentication process is provided to the radio station 110.

The wireless station 110 and the DLR 160 of the mobile communication network allocate a temporary address called a unicast access terminal identifier (UATI) to the mobile communication terminal 100 using the packet data service, and the mobile communication terminal 100. And DLR 160 stores the UATI information.

The mobile communication terminal 100 performs a session negotiation process with the wireless station 110, and the access network-AAA performs an authentication process. When the process is completed normally, the DLR 160 receives the session information of the mobile communication terminal 100 from the radio station 110 and the ESN (Electronic Serial Number) and MIN (Mobile Identification) of the mobile communication terminal 100 from the access network-AAA. Number) or IMSI information is acquired and stored in accordance with the corresponding UATI.

2 is a block diagram illustrating a protocol hierarchy of a mobile communication terminal according to the present invention.

Referring to FIG. 2, the mobile communication terminal 100 includes an application layer 10 for an application, a stream layer 20 for managing different application streams, an address management, and a protocol. A session layer 30 that performs functions such as setting, a connection layer 40 that sets or maintains a wireless protocol between the mobile communication terminal 100 and the wireless station 110, and authentication Security layer (50) that is responsible for encryption and encryption, MAC layer (60) that defines procedures for sending and receiving to the physical layer, and modulation, coding, spreading, etc. necessary for communication. It includes a physical layer 70 that operates primarily in hardware.

The physical layer 70 is divided into a forward channel and a reverse channel, and includes a plurality of physical channels in detail. In this case, the forward channel is divided into a pilot channel, a MAC channel, and a traffic channel, and the reverse channel is divided into an access channel and a traffic channel.

In the mobile communication network according to the present embodiment, when a mobile communication terminal first connects to a CDMA2000 1xEV-DO network or a subnet (currently set in MSC or PCF units) is changed in the 1xEV-DO network, an access network ( Access Network (including BTS, BSC, DLR) allocates the mobile communication terminal to a temporary address called unicast access terminal identifier (UATI), and the mobile communication terminal stores and manages the UATI as hardware ID information.

And before requesting a packet data service. A session negotiation process is performed between the mobile communication terminal and the radio station in order to open normal traffic and continuously perform communication, and after the session negotiation process is completed, the terminal performs an authentication process in the access network-AAA 170 and the access network. The result values performed in every process are transmitted to the DLR 160.

Accordingly, the DLR 160 stores and manages the UATI by matching the ESN and the MIN for the mobile communication terminal 100.

Thereafter, the mobile terminal is authenticated through the hardware ID and the ESN information of the mobile terminal each time the connection is established. The detailed process is as follows.

3 is a flowchart illustrating an initial process for packet data communication in a mobile communication network according to the present invention.

Referring to FIG. 3, a mobile communication terminal first tuned to a CDMA2000 1xEV-DO network to perform packet data communication (S11) generates a random access terminal identifier (RATI), which is a random variable based on time (S12). . The mobile communication terminal transmits a message for requesting UATI allocation to the mobile communication network by using the generated RATI (S21).

Accordingly, the radio station of the mobile communication network transmits (S22) / receives (S23) the UATI allocation request message to the DLR 160, and allocates a unicast access terminal identifier (UATI) to the mobile communication terminal 100 (S31). The mobile communication terminal 100 stores the UATI information according to the assignment in step S31 and transmits a UATI allocation completion message to the mobile communication network (S32).

The wireless station transmits and receives a UATI setup complete message and a response message to the DLR 160 (S41 and S42).

As the UATI setup is completed, the DLR 160 of the mobile communication network stores the UATI by matching the hardware ID information of the mobile communication terminal (S6). After the authentication process with the mobile communication terminal is completed, the terminal requests information of the corresponding terminal from the AN-AAA 170 (S51), obtains MIN and ESN information (S52), matches the UATI, and stores and manages (S60). ).

4 is a table for explaining an ESN transmission standard according to the present invention. 5 is a flowchart illustrating a subscriber authentication method for packet data communication in a mobile communication network according to the present invention.

4 and 5, the mobile communication terminal 100 performs a connection request to the radio station 110 using the UATI currently allocated to use the packet data service (S110). Accordingly, the wireless station 110 of the mobile communication network transmits the response according to the connection request to the mobile communication terminal 100 (S120).

The wireless station 110 transmits a response in step S120 and then performs a session retrieve request for the mobile communication terminal 100 which has performed the access request to the DLR 160 (S130). Accordingly, the DLR 160 inquires the session and MIN information of the mobile communication terminal 100, and responds to the ESN (Electronic Serial Number) information of the mobile communication terminal 100, that is, the data as shown in FIG. Included in the transmission to the radio station 110 (S140).

After receiving the response message from the DLR 160, the wireless station 110 allocates a traffic channel to the mobile communication terminal 100 (S150). The mobile communication terminal 100 establishes a traffic channel according to the traffic channel assignment from the radio station 110 and transmits null traffic to the radio station 110 (S160).

After receiving the null traffic in step S160, the wireless station 110 transmits a reverse traffic channel response message to the mobile communication terminal 100 (S170). The mobile communication terminal 100 receives the response in step S170 and transmits a traffic channel completion message to the wireless station 100 (S180).

When the traffic channel allocation between the mobile communication terminal 100 and the wireless station 110 of the mobile communication network is completed according to the above-described process, the wireless station 110 requests a hardware ID of the mobile communication terminal 100 (Hardware ID Request). ) Is transmitted to the mobile communication terminal 100 (S190). In response to the request from the wireless station 110 in step S90, the mobile communication terminal 100 transmits the hardware ID information to the wireless station 110 by including the hardware ID information in the response message (S200).

The wireless station 110 of the mobile communication network compares the hardware ID transmitted from the mobile communication terminal 100 with the ESN information of the mobile communication terminal 100 received from the DLR 160 in step S140 (S210). Then, it is determined whether the hardware ID and the ESN information of the mobile communication terminal 100 are the same (S220).

If it is determined in step S220 that the hardware ID and ESN information of the mobile communication terminal 100 are not the same, the wireless station 110 ends the current session (S230).

However, if it is determined in step S220 that the hardware ID and the ESN information of the mobile communication terminal 100 are the same, the wireless station 110 performs a packet data service for the mobile communication terminal 100 (S240). The mobile communication network charges the fee for the packet data service in step S240 to the mobile communication terminal corresponding to the MIN matched with the ESN.

According to the method according to the present invention, for the mobile communication terminal 100 to use the packet data service to obtain the ESN information from the DLR (160) and the hardware ID from the mobile communication terminal to obtain the packet data only when the same By providing a service and charging for the corresponding MIN, it is possible to prevent data errors for the non-scheduled subscriber that has occurred in the past and thereby charge errors.

The present invention described above, those skilled in the art will understand that the present invention can be implemented in other specific forms without changing the technical spirit or essential features. Therefore, the embodiments described above are to be understood as illustrative and not restrictive in all aspects. The scope of the present invention is shown by the following claims rather than the detailed description, and all changes or modifications derived from the meaning and scope of the claims and their equivalents should be construed as being included in the scope of the present invention. do.

As described in detail above, according to the subscriber authentication method for packet data communication in a mobile communication network according to the present invention, ESN information is obtained from a DLR for a mobile communication terminal using a packet data service and a hardware ID is obtained from the mobile communication terminal. By acquiring the packet data service when the two are identical to each other and charging the MIN, there is an effect of preventing the charging error that has occurred in the past.

Claims (4)

In the packet data service communication method of a mobile communication network comprising a radio station performing wireless communication with a mobile communication terminal, a packet data service node connected to the radio station to provide a packet data service, and a data location register, Requesting a session to the data location register when a packet data service connection request is received from a mobile communication terminal; A second step of transmitting, by the data location register, a response message including the session and the MIN number and the ESN information to the mobile station according to the request in step 1; Step 3, after the step 2, the radio station allocates a traffic channel to the mobile communication terminal; Step 4, the wireless station requesting and receiving hardware ID information from a mobile communication terminal; Step 5 for determining whether the ESN and the hardware ID information received in step 4 is the same in step 2, If it is determined in step 5 that the ESN and the hardware ID information is the same, subscriber authentication method for packet data communication in a mobile communication network comprising the step of completing the subscriber authentication and providing a packet data service to the mobile communication terminal; . The method of claim 1, Before step 1 above, When the mobile communication terminal generates a random variable (RATI) based on time in order to use a packet data service and transmits a message for requesting UATI allocation, the mobile communication terminal receives the message and allocates the UATI to the corresponding mobile communication terminal. Transmitting to the mobile communication terminal; And a data storage step of storing, by the data location register, the data location register when the mobile communication terminal receives the UATI information and transmits the UATI allocation completion message. The method of claim 2, In the information storage step, the data location register before the authentication, the subscriber authentication method for packet data communication in the mobile communication network, characterized in that the UATI is assigned to store and manage the UATI to match the ESN and MIN of the mobile communication terminal. The method of claim 1, And charging the packet data service fee of the sixth step as the fee of the mobile communication terminal corresponding to the MIN of the second step.

Images