KR100754826B1 - Method for performing authorization-controller authentication by inter-working with cdma network in ev-do authentication - Google Patents

Abstract

A method for performing AC(Authorization Controller) authentication by interworking with a CDMA(Code Division Multiple Access) network in case of EV-DO(Evolution Data Only) authentication is provided to be capable of executing CAVE(Cellular Authentication and Voice Encryption) authentication by an AC through the CDMA network during the EV-DO authentication, so as to prevent usage of an EV-DO service by a mobile communication terminal which copies an ESN(Electronic Serial Number). An ANC(Access Network Controller)(120) transmits an LCP(Link Control Protocol) configuration request packet to a terminal(110)(S105). The terminal(110) transmits an LCP configuration confirm response packet to the ANC(120)(S110). The ANC(120) transmits a CHAP(Challenge Handshake Authentication Protocol) challenge packet to the terminal(110)(S115). The terminal(110) transmits a CHAP challenge response packet to the ANC(120)(S120). The ANC(120) transmits basic information on the terminal(110) to an AN_AAA(Access Network_Authentication Authorization Accounting) server(130)(S125). The AN_AAA server(130) demands subscriber information including an ESN and an MIN(Mobile Identification Number) of the terminal(110) to an IMSR(IP Multimedia Subscriber Register)(140)(S130). If the terminal(110) subscribes for CAVE authentication, the IMSR(140) demands authentication to an AC(150)(S135). If the CAVE authentication is successful, an EV-DO call operating in the terminal(110) is continuously maintained(S160).

Description

 Method for Performing Authorization-Controller Authentication by Inter-Working with CDMA Network in EV-DO Authentication}

1 is a flowchart illustrating a method of interworking AC authentication through a CDMA network when performing EV-DO authentication according to a preferred embodiment of the present invention.

<Description of Symbols for Main Parts of Drawings>

110: mobile communication terminal 120: ANC

130: AN_AAA 140: IMSR

150: AC

The present invention relates to a method for performing AC authentication in conjunction with a CDMA network during EV-DO authentication. More specifically, the present invention relates to a method of performing CAVE authentication through AC through a CDMA network when performing EV-DO authentication in order to prevent use of an EV-DO service of a mobile communication terminal in which an ESN is duplicated.

Recently, with the rapid development of high-speed wireless Internet technology, video services using mobile communication terminals have been expanded, and examples thereof include movies, music videos, games, and video phones. These video services are provided through a CDMA 2000 1X EV-DO (EV-DO) network (hereinafter referred to as EV-DO), which supports high-speed wireless Internet with data transfer rates up to 20 times faster than the 'CDMA 2000 1X' network. This is also called an EV-DO service. Representative examples of EV-DO services include SKT's June.

When the EV-DO service is provided by the mobile communication terminal, the authentication processing system performs mobile terminal authentication and user authentication according to the use of the EV-DO service, so that only the subscribers legally subscribed to the EV-DO service can use the mobile communication terminal. Through the EV-DO service can be provided.

However, in the conventional EV-DO authentication, terminal authentication includes, for example, 'user name = subscriber number' and 'password = electronic serial number (ESN)' through AN_AAA (Access Network_Authentication Authorization Accounting). Because it uses hash value, it cannot protect against ESN terminal replication, and user authentication is done through AN_AAA, for example, 'user name = sktelecom@wap95c.n-top.com' and 'password = NULL'. There is a problem that can not be defended against the ESN terminal replication.

In order to solve the above problems, the present invention provides a method for performing CAVE authentication via AC through a CDMA network during EV-DO authentication in order to prevent the use of the EV-DO service of the mobile communication terminal duplicated the ESN. It aims to provide.

According to a first object of the present invention, a method for performing AC authentication in conjunction with a CDMA network during EV-DO authentication, comprising: (a) PPP (Point) between a mobile communication terminal and an access network controller (ANC); establishing a (to-Point Protocol) link and performing PPP authentication; (b) an access network authentication authorization accounting (AN_AAA) receives basic information of the mobile communication terminal from the access network controller and transmits subscriber information and EV- of the mobile communication terminal to an IP Multimedia Subscriber Register (IMSR). Requesting the presence or absence of a DO service subscription; (c) the IMSR requesting an AC authentication in a CDMA network to an Authorization Controller (AC); (d) receiving, by the access network AAA server, the subscriber information of the mobile communication terminal and the presence or absence of the EV-DO service subscription to notify the mobile communication terminal whether to permit access; And (e) the authentication center performing the AC authentication in the CDMA network, wherein the AC authentication is performed in the CDMA network requested in step (c). To provide.

Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings. First of all, in adding reference numerals to the components of each drawing, it should be noted that the same reference numerals are used as much as possible even if displayed on different drawings. In addition, in describing the present invention, when it is determined that the detailed description of the related well-known configuration or function may obscure the gist of the present invention, the detailed description thereof will be omitted.

1 is a flowchart illustrating a method of performing AC authentication in conjunction with a CDMA network during EV-DO authentication according to a preferred embodiment of the present invention.

The access network controller (ANC) 120 transmits a link control protocol (LCP) configuration request packet to the mobile communication terminal 110 (S105). The mobile communication terminal 110 is a terminal supporting an EV-DO service, and includes a subscriber secret key, a temporary secret key, and a call history count, which is history information according to terminal authentication from an Authorization Controller (AC) 150. Algorithms and basic information are provided. The LCP is a protocol for establishing, maintaining, establishing, and releasing a Point-to-Point Protocol (PPP) link that controls and manages data transmission. The LCP determines a selection between the mobile terminal 110 and the ANC 120. Provide a negotiation function for

The mobile communication terminal 110 transmits the LCP configuration confirmation response packet to the ANC 120 (S110).

The ANC 120 transmits a Challenge Handshake Authentication Protocol (CHAP) challenge packet to the mobile communication terminal 110 (S115). The CHAP protocol is a protocol for managing authentication of PPP, and is a three-step handshake authentication protocol that provides stronger security than PAP (Password Authentication Protocol). The CHAP challenge packet includes a challenge value.

The mobile communication terminal 110 transmits the CHAP challenge response packet to the ANC 120 (S120). The CHAP Challenge Response Packet contains a username and a challenge value.

The ANC 120 receives the authentication request of the mobile communication terminal 110 and transmits basic information of the mobile communication terminal 110 to the Access Network_Authentication Authorization Accounting (AN_AAA) 130 and requests an access. (S125). The basic information of the mobile communication terminal 110 includes a user name, a CHAP password, and a CHAP challenge packet of the mobile communication terminal 110.

The AN_AAA 130 requests subscriber information including the Mobile Identification Number (MIN) and the Electronic Serial Number (ESN) of the mobile communication terminal 110 to the IP Multimedia Subscriber Register (IMSR) 140 (S130). IMSR 140 is a system that provides real-time management and authentication of subscriber information in an All IP network. Also, the IMSR 140 receives and stores a circuit authentication subscription from a Customer Oriented Information System (COIS) (not shown), and notifies the AN_AAA 130 of the circuit authentication subscription. The AN_AAA 130 determines whether to perform AC authentication, analyzes the subscriber information received from the IP Multimedia Subscriber Register (IMSR) 140, and requests the AC 150 to authenticate the CDMA network authentication. In addition, the AN_AAA 130 generates an authentication message for CDMA network authentication and interworks with the AC 150.

If it is determined that the mobile communication terminal 110 has subscribed to CAVE authentication, the IMSR 140 requests authentication from the AC 150 (S135). The IMSR 140 has a field value indicating whether the mobile communication terminal 110 performs CDMA authentication. If the mobile communication terminal 110 is subscribed to the CDMA authentication of the CDMA network with reference to the corresponding field value, the AC 150 is used. Request authentication. The AC 150 interoperates with the AN_AAA 130 and performs authentication through the CDMA network for the subscriber, that is, the mobile communication terminal 110, requested by the AN_AAA.

IMSR 140 transmits subscriber information including MIN and ESN to AN_AAA 130 (S140).

The AN_AAA 130 transmits the access permission packet and the MIN to the ANC 120 (S145).

The ANC 120 transmits a CHAP success packet or a CHAP failure packet to the mobile communication terminal 110 (S150).

In response to the request for step S135, the AC 150 performs CAVE authentication with the mobile communication terminal 110 through the CDMA network (S155). CAVE authentication through the CDMA network performs a unique challenge authentication among the authentication performed in the CDMA network. However, when the mobile communication terminal 110 initially subscribes to CAVE authentication, the mobile terminal 110 updates the shared secret data (SSD). Unique Challenge authentication through the CDMA network is defined in the existing CDMA network standard, so the description thereof is omitted here.

When the CAVE authentication is successful in the CDMA network in step S155, the EV-DO call operating in the mobile communication terminal 110 is maintained (S160).

When the CAVE authentication in the CDMA network fails in step S155, the EV-DO call operating in the mobile communication terminal 110 is terminated and locked (S165). When CAVE authentication in the CDMA network fails, the AC notifies the MSC (Mobile Switching Center) (not shown) of the call termination, and the MSC notifies the mobile terminal 110 of the authentication failure and is operating. End the EV-DO call.

The above description is merely illustrative of the technical idea of the present invention, and those skilled in the art to which the present invention pertains may make various modifications and changes without departing from the essential characteristics of the present invention. Therefore, the embodiments disclosed in the present invention are not intended to limit the technical idea of the present invention but to describe the present invention, and the scope of the technical idea of the present invention is not limited by these embodiments. The protection scope of the present invention should be interpreted by the following claims, and all technical ideas within the equivalent scope should be interpreted as being included in the scope of the present invention.

As described above, according to the present invention, it is possible to prevent the use of the EV-DO service of the mobile communication terminal duplicated the ESN by interworking AC authentication through the CDMA network when performing the EV-DO authentication.

Claims (9)

In the method of performing AC authentication in conjunction with a CDMA network during EV-DO authentication, (a) establishing a Point-to-Point Protocol (PPP) link between the mobile communication terminal and an access network controller (ANC) and performing PPP authentication; (b) an access network AAA server (AN_AAA: Access Network_Authentication Authorization Accounting) receives basic information of the mobile communication terminal from the access network controller and transmits subscriber information and EV-DO of the mobile communication terminal to an IP Multimedia Subscriber Register (IMSR). Requesting service subscription; (c) the IMSR requesting an AC authentication in a CDMA network to an Authorization Controller (AC); (d) receiving, by the access network AAA server, the subscriber information of the mobile communication terminal and the presence or absence of the EV-DO service subscription to notify the mobile communication terminal whether to permit access; (e) the authentication center performing the AC authentication on the CDMA network requested in step (c); (f) maintaining the EV-DO call in operation in the mobile communication terminal when the AC authentication succeeds in step (e); And (g) the EV-DO call is terminated when the AC authentication fails in the step (e), and locking the mobile communication terminal. A method of performing AC authentication in conjunction with a CDMA network during EV-DO authentication, comprising a. delete The method of claim 1, wherein in step (g), If the AC authentication fails, the authentication center notifies the mobile communication switching center of the end of the EV-DO call, and the mobile communication switching station terminates the EV-DO call and sends a lock signal to the mobile communication terminal. A method for performing AC authentication in conjunction with a CDMA network during EV-DO authentication, characterized in that the transmission. The method of claim 1, wherein step (a) comprises: (a1) the access network controller transmitting a link control protocol (LCP) configuration request packet to the mobile communication terminal; (a2) the mobile communication terminal confirming the LCP configuration request packet and transmitting an LCP configuration confirmation response packet to the access network controller; (a3) the access network controller transmitting a Challenge Handshake Authentication Protocol (CHAP) challenge packet to the mobile communication terminal; And (a4) the mobile communication terminal confirms the CHAP challenge packet and then transmits a CHAP challenge response packet to the access network controller; A method of performing AC authentication in conjunction with a CDMA network during EV-DO authentication, comprising a. The method of claim 4, wherein The CHAP challenge packet includes a CHAP challenge value value, and the CHAP challenge response packet includes a user name and the CHAP challenge value value to perform AC authentication in conjunction with a CDMA network during EV-DO authentication. How to do it. The method of claim 1, wherein in step (b), The basic information of the mobile terminal includes the user name, CHAP password and the CHAP challenge value value, characterized in that the AC authentication in conjunction with the CDMA network during the EV-DO authentication. The method of claim 1, wherein in step (b), And the subscriber information includes a mobile identification number (MIN) and an electronic serial number (ESN) of the mobile communication terminal. The method of claim 1, wherein in step (e), The AC authentication includes Cave authentication, and the Cave authentication performs unique challenge authentication among the authentications performed in the CDMA network. How to do the. The method of claim 1, The IMSR stores a field value including whether the mobile communication terminal performs the cave authentication, and requests the AC authentication from the authentication center when the mobile communication terminal is subscribed to the cave authentication. A method of performing AC authentication in conjunction with a CDMA network during EV-DO authentication.

Images