KR100784232B1 - Method and system for authentication through mobile network - Google Patents

Abstract

An authentication method through a mobile communication network and a system are provided to conduct Internet connection even without registering in a communication service of a particular mobile communication provider, thereby receiving additional services through the Internet by accessing the Internet even without subscribing for the communication service. An Internet access signal received from a portable terminal(100) is received through a mobile communication network. The mobile communication network decides whether authentication processing information is included in the received Internet access request signal. The Internet(180) is connected according to the Internet access request signal. If the authentication processing information is not included in the signal, portable terminal information included in the signal is read to connect the Internet(180) through authentication by using the read portable terminal information.

Description

Method and system for authentication through mobile network {Method and system for authentication through mobile network}

1 is a configuration diagram showing the configuration of a mobile communication network in which a conventional authentication method is performed.

2 is a flowchart illustrating a procedure of making an Internet connection through a conventional mobile communication network.

3 is a block diagram showing the configuration of an authentication system through a mobile communication network according to an embodiment of the present invention.

Figure 4 is a flow chart showing the order in which the Internet connection is made by the dual authentication method according to an embodiment of the present invention.

5 is a flowchart illustrating a procedure of providing a location tracking service of a mobile terminal using a dual authentication method according to an embodiment of the present invention.

The present invention relates to an authentication method through a mobile communication network, and more particularly, to an authentication method and system for accessing the Internet using a mobile communication network.

First, a description will be given of a mobile communication network including a conventional authentication system with reference to FIG. 1.

As shown in FIG. 1, a conventional mobile communication network includes a mobile terminal 100, a Node B 110, a radio network controller (RNC) 120, a mobile telephone switching center (MSC) 130, and a home location register (HLR). 140, an AuC 150, a Serving GPRS Support Node (SGSN) 160, and a Gateway GPRS Support Node (GGSN) 170 are connected to the Internet 180.

In the conventional mobile communication network, first, the voice call of the mobile terminal 100 and the connection to the Internet 180 are all passed through the Node B 110 and the RNC 120. In the case of the voice call, the MSC 130 is connected to the Internet 180. ) Is connected to the SGSN 160.

The Node B 110 is generally called a base station and transmits and receives signals to or from the mobile terminal 100.

The RNC 120 is a component of a radio access network that controls a base station. The RNC 120 performs a function for radio resource management, a management of a base station in a wireless communication network, and a management function for a connection between a wireless network controller and another network component.

In the case of a voice call, the connected MSC 130 is also referred to as a mobile switching center or mobile switching center. The MSC 130 processes a signal originating or incoming from the base station and adjusts the base station to operate efficiently.

The MSC 130 manages the location of the mobile terminal 100 and queries the subscriber's HLR 140 for the user's location registration information.

The HLR 140 informs the subscriber location and various information such as the subscriber's origination, incoming status, and additional services.

Although not shown in FIG. 1, a voice call is also referred to as a gateway mobile communication switching center in the MSC 130. The automatic tracking for determining a VMSC (Visced MSC) and selecting a call by referring to the location information stored in the HLR 140 is performed. A voice call is connected to the PSTN by being connected to a GMSC (not shown) which performs a connection function.

On the other hand, the connected SGSN 160 for accessing the Internet 180, also called a packet switching support node, is a node that delivers data packets with a base station in a mobile communication service area.

Packet, routing and transmission, mobility management, logical link management, authentication and billing, HLR 140 to which the SGSN 160 is connected is a General Packet Radio Service (GPRS) user registered to the SGSN 160 Stores location information, user profiles and more.

The GGSN 170 is also called a packet gateway support node, and is a node in charge of a connection function between a GPRS backbone network and an external packet data network.

A packet transmitted from the SGSN 160 is converted into an appropriate Packet Data Protocol (PDP) and transmitted, and a PDP address of the incoming packet data is converted into a GSM address. It stores the user's SGSN 160 address and user profile in the location register of SGSN 160 and also performs authentication and charging functions.

A process of performing authentication in a conventional mobile communication network having such a configuration and connecting to the Internet will be described with reference to FIG. 2.

2 is a flowchart illustrating a procedure of making an Internet connection through a conventional mobile communication network.

The Node B 110 only plays a role of transmitting and receiving a signal to or from the mobile terminal 100.

As shown in FIG. 2, first, the mobile terminal 100 transmits a Radio Resource Control (RRC) Connection Request signal, which is an internet access request signal, to the RNC through the Node B 110 (S200).

The RNC 120 sets a radio frequency resource according to the received RRC (Radio Resource Control) Connection Request signal and transmits the RRC (Radio Resource Control) Connection Setup signal to the mobile terminal 100 through the Node B 110. (S202).

When the mobile terminal 100 transmits a Service Request signal for accessing the Internet to the SGSN 160 according to a radio frequency resource set through the Node B 110 (S204), the SGSN 160 authenticates a user from the HLR 140. A security function, which is an authentication process for requesting and processing the processed authentication result and transmitting the same to the RNC 120 to be transmitted back to the mobile terminal 100 through the Node B 110, is performed (S206).

Although the authentication process of step 206 is not shown in FIG. 2, information for user authentication stored in the HLR 140 is processed in the AuC 150 and transmitted to the HLR 140 for storage.

When the authentication procedure is performed, the SGSN 160 transmits a Service Accept signal indicating that the Internet is accessible to the mobile terminal 100 through the Node B 110 (S208), and assigns the bearer allocation of radio frequency resources. The Radio Access Bearer Assignment Request signal is transmitted to the RNC 120 (S210).

According to the received Radio Access Bearer Assignment Request signal, the RNC 120 transmits a Radio Bearer Setup signal, which is a setting for radio frequency allocation, to the mobile terminal 100 through the Node B 110 (S212).

The mobile terminal 100 completes setting of a radio bearer according to a radio bearer setup signal received through the Node B 110 and transmits a radio bearer complete signal to the RNC 120 (S214).

The RNC 120 transmits a Radio Access Bearer Assignment Response signal to the SGSN 160 as a response signal to the Radio Access Bearer Assignment Request signal according to the Radio Bearer Complete signal (S216).

When the Radio Access Bearer Assignment Response signal is received by the SGSN 160, SGSN-Initiated PDP Context modification is performed between the mobile terminal 100, the SGSN 160, the SGSN 170, and the GGSN 110 through the Node B 110. (S218).

A PDP (Packet Data Protocol) context is a message containing information that a user communicates data at a certain speed and a certain quality, and SGSN-Initiated PDP Context modification is a mobile terminal that stores information stored in such a PDP context. 100 and SGSN 160 and the GGSN 170 is a process of joint storage.

If the PDP (Packet Data Protocol) context is stored in the user terminal and the like, the mobile terminal 100, SGSN 160 and the GGSN 170 is jointly stored Uplink PDU (Packet Data Unit) process that can transmit the packet data In operation S218, the mobile terminal 100 is connected to the Internet 180.

In such a conventional mobile communication network, when a user subscribes to a communication service of a specific mobile communication company, the subscription information of the user is inputted to the AuC 150, and the authentication process is processed, and the processed authentication information is stored in the HLR 140. The SGSN 160 inquires the subscriber information of the user to the HLR 140, performs authentication of the user, and compares it with the stored authentication information, that is, only after authentication is processed, the communication service can be provided.

Therefore, there is a problem that a user of the mobile terminal must subscribe to a communication service of a specific mobile communication provider.

Therefore, if it is necessary to provide a service even before subscribing to a specific mobile carrier or paying a fee, for example, a location tracking service when the mobile terminal is lost, the conventional service providing procedure and the charging procedure must be changed. There is a problem.

In order to solve the conventional problems as described above, the present invention proposes an authentication method and system that can be connected to the Internet even without subscribing to a communication service of a specific mobile communication provider.

In addition, when it is necessary to provide a service even before subscribing to a specific mobile carrier or paying for a fee, an authentication method and system capable of accessing the Internet without changing the conventional service provisioning and charging procedure are proposed. .

Still other objects of the present invention will be readily understood through the following description of the embodiments.

In order to achieve the object as described above, according to an aspect of the present invention there is provided a method of authentication via a mobile communication network.

According to a preferred embodiment of the present invention, an authentication method through a mobile communication network, the method comprising: receiving an internet access request signal received from a mobile terminal through the mobile communication network; (B) determining whether the internet access request signal includes authentication processing information in the mobile communication network; And (c) connecting to the Internet according to the internet access request signal, and if the authentication processing information on the mobile communication network is not included in the step (b), the portable terminal information included in the internet access request signal is used. There is provided an authentication method through a mobile communication network, wherein the authentication process is performed using the read portable terminal information and connected to the Internet.

According to another aspect of the present invention, there is provided a recording medium recording a program for implementing an authentication method via a mobile communication network.

According to a preferred embodiment of the present invention, a recording medium on which a program of instructions that can be executed by a digital processing apparatus is tangibly embodied so that an authentication method through a mobile communication network is implemented, and which records a program that can be read by the digital processing apparatus. (A) receiving an internet access request signal received from a mobile terminal through the mobile communication network; (B) determining whether the internet access request signal includes authentication processing information in the mobile communication network; And (c) connecting to the Internet according to the internet access request signal, and if the authentication processing information on the mobile communication network is not included in the step (b), the portable terminal information included in the internet access request signal is used. Provided is a recording medium having recorded thereon a program for implementing an authentication method through a mobile communication network, characterized in that the readout is performed to process authentication using the read portable terminal information and to be connected to the Internet.

In the step of receiving an internet access request signal received from the mobile terminal through the mobile communication network, the internet access request signal may be received from a gateway GPRS support node (GGSN) of the mobile communication network.

In the step of receiving an internet access request signal received from the mobile terminal through the mobile communication network, the internet access request signal is generated using information stored in a subscriber identity module (SIM: SuMScriber Identify Module) included in the mobile terminal. May be a signal.

The step of connecting to the Internet according to the Internet access request signal further includes the step of requesting an input of ID / Password to the portable terminal, and the connection to the Internet corresponds to the ID / Password received from the portable terminal. May be performed.

The portable terminal information may be information set in advance and stored in the portable terminal, and the internet access request signal may be a signal generated including the portable terminal information.

According to another aspect of the present invention, an authentication system via a mobile communication network is provided.

According to a preferred embodiment of the present invention, an authentication system through a mobile communication network, comprising: a proxy server for receiving an Internet connection request signal received from a mobile terminal through the mobile communication network to connect the Internet; And a remote authentication dial-in user service (RADIUS) server configured to receive portable terminal information from the proxy server, process authentication, and transmit the processed authentication result to a proxy server, wherein the proxy server is configured to respond to the Internet access request signal. If it is determined that the authentication processing information in the mobile communication network is included and the authentication processing information in the mobile communication network is not included, the mobile terminal information included in the Internet access request signal is read and an authentication request is made to the RADIUS server. An authentication system through a mobile communication network is provided.

The proxy server may receive the Internet access request signal from a gateway GPRS support node (GGSN) of the mobile communication network.

The internet access request signal received by the proxy server may be a signal generated using information stored in a subscriber identity module (SIM: SuMScriber Identify Module) included in the portable terminal.

The portable terminal information may be information set in advance and stored in the portable terminal, and the internet access request signal may be a signal generated including the portable terminal information.

The proxy server may further request input of ID / Password to the portable terminal, and the RADIUS server may determine whether the ID / Password received from the portable terminal is identical to the proxy server and transmit the determination result to the proxy server. .

As the invention allows for various changes and numerous embodiments, particular embodiments will be illustrated in the drawings and described in detail in the written description. However, this is not intended to limit the present invention to specific embodiments, it should be understood to include all modifications, equivalents, and substitutes included in the spirit and scope of the present invention.

In describing the drawings, similar reference numerals are used for similar elements. In the following description of the present invention, if it is determined that the detailed description of the related known technology may obscure the gist of the present invention, the detailed description thereof will be omitted.

Terms such as first and second may be used to describe various components, but the components should not be limited by the terms. The terms are used only for the purpose of distinguishing one component from another.

For example, without departing from the scope of the present invention, the first component may be referred to as the second component, and similarly, the second component may also be referred to as the first component.

The term and / or includes a combination of a plurality of related items or any item of a plurality of related items.

When a component is referred to as being "connected" or "connected" to another component, it may be directly connected to or connected to that other component, but it may be understood that other components may be present in between. Should be.

On the other hand, when a component is said to be "directly connected" or "directly connected" to another component, it should be understood that there is no other component in between.

The terminology used herein is for the purpose of describing particular example embodiments only and is not intended to be limiting of the present invention.

Singular expressions include plural expressions unless the context clearly indicates otherwise. In this application, the terms "comprise" or "have" are intended to indicate that there is a feature, number, step, operation, component, part, or combination thereof described in the specification, and one or more other features. It is to be understood that the present invention does not exclude the possibility or the possibility of additions or numbers, steps, operations, components, components, or combinations thereof.

Unless defined otherwise, all terms used herein, including technical or scientific terms, have the same meaning as commonly understood by one of ordinary skill in the art.

Terms such as those defined in the commonly used dictionaries should be construed as having meanings consistent with the meanings in the context of the related art, and shall not be construed in ideal or excessively formal meanings unless expressly defined in this application. Do not.

Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings. In the following description of the present invention, the same reference numerals will be used for the same means regardless of the reference numerals in order to facilitate the overall understanding.

First, a configuration of a dual authentication system according to an exemplary embodiment of the present invention will be described with reference to FIG. 3.

3 is a block diagram showing the configuration of an authentication system in a mobile communication network according to an embodiment of the present invention.

Compared with FIG. 1, a description will be given of the difference from the authentication system in the conventional mobile communication network described with reference to FIG.

As shown in FIG. 3, an authentication system in a mobile communication network according to an exemplary embodiment of the present invention includes a mobile terminal 100, a Node B 110, a radio network controller (RNC) 120, and an MSC constituting a mobile communication network. Mobile Telephone Switching Center (130), Home Location Register (HLR) 140, Authentication Center (AuC) 150, Serving GPRS Support Node (SGSN) 160, Gateway GPRS Support Node (GGSN) 170 It includes.

First, the mobile terminal 100 may be a digital communication device as well as a mobile communication terminal. In particular, the WCDMA method supports high-speed mobility, high voice quality, and is suitable for transmitting a large amount of data using a spread spectrum method, thereby enabling various applications.

Therefore, in the present invention, the mobile terminal 100 may include various digital processing apparatuses, and also stores unique information of the portable terminal (for example, unique serial number information of the portable terminal).

The Node B 110 is generally called a base station and transmits and receives signals to or from the mobile terminal 100, and the RNC 120 is a component of a radio access network that controls the base station. And management of a base station in a wireless communication network and a connection between a wireless network control unit and another network component.

In the case of a voice call, the connected MSC 130 is also referred to as a mobile switching center or mobile switching center. The MSC 130 processes a signal transmitted or received at the base station and adjusts the base station to operate efficiently. Manages the location of the mobile terminal 100 and queries the subscriber's location registration information to the HLR 140 of the subscriber.

The HLR 140 informs the subscriber location and various information such as the subscriber's origination, incoming status, and additional services.

SGSN 160, also called a packet switched support node, is a node that delivers data packets with a base station in a mobile communication service area. The SGSN 160 functions as a packet, routing and transmission, mobility management, logical link management, authentication, and charging. The HLR 140 to which the SGSN 160 is connected stores location information, a user profile, and the like of a General Packet Radio Service (GPRS) user registered to the SGSN 160.

The GGSN 170 is also called a packet gateway support node, and is a node in charge of a connection function between a GPRS backbone network and an external packet data network. The GGSN 170 is a packet data protocol (PDP) suitable for transmitting packets transmitted from the SGSN 160. It converts the data into the PDP address of the incoming packet data and transmits it to the GSM address. It stores the user's SGSN 160 address and user profile in the location register of SGSN 160 and also performs authentication and charging functions.

The components of the mobile communication network perform the same functions as those of the conventional mobile communication network described with reference to FIG. 1, but the authentication system according to the preferred embodiment of the present invention is connected to the GGSN of the mobile communication network before being connected to the Internet. It further comprises a proxy server (300) of the proxy and the RADIUS server 310 is connected to such a proxy (300).

The proxy server 300 is a server that generally stores the data once requested on the Internet and provides the stored data in a repeated request. When asked for information retrieval of an Internet address, it reads the address before and retrieves it from the place it was stored in, and if it does exist, retrieves the information immediately. Performs a function to notify the client side after copying.

The RADIUS server 310 is an abbreviation of Remote Authentication Dial-In User Service server and provides a security service for authenticating and authorizing a user. The RADIUS server 310 generally allows the RADIUS server 310 to authenticate the user of the client and grant access to internal network resources when the client is connected to the access server. That is, the remote user is a client of the access server, and the access server is a client of the RADIUS server.

The present invention performs an authentication process for approving the Internet access through the mobile communication network to the functions of the conventional proxy server 300 and RADIUS server 310.

First, the proxy server 300 further stores user information for accessing the Internet separately from the HLR 140 in the mobile communication network, and the RADIUS server 310 authenticates separately from the authentication in the AuC 150 in the mobile communication network. Provide service.

Therefore, the authentication procedure in the mobile communication network and the dual authentication in which authentication by the authentication system including the proxy server 300 and the RADIUS server 310 according to an embodiment of the present invention is performed is performed.

The procedure of accessing the Internet according to the authentication method in which the dual authentication is performed will be described with reference to FIG. 4.

4 is a flowchart illustrating a procedure of making an Internet connection by a dual authentication method according to a preferred embodiment of the present invention.

The mobile terminal 100 only plays a role of transmitting and receiving signals to or from the mobile terminal 100 through the Node B 110. And the same number and the same procedure and order as the procedure for the Internet connection in the conventional mobile communication network described in FIG.

As shown in FIG. 4, the mobile terminal 100 first transmits an RRC (Radio Resource Control) Connection Request signal, which is an internet access request signal, to the RNC through a Node B 110, as in the conventional mobile communication network. Transmit (S200).

The RNC 120 sets a radio frequency resource according to the received RRC (Radio Resource Control) Connection Request signal and transmits the RRC (Radio Resource Control) Connection Setup signal to the mobile terminal 100 through the Node B 110. (S202).

When the mobile terminal 100 transmits a Service Request signal for accessing the Internet to the SGSN 160 according to a radio frequency resource set through the Node B 110 (S204), the SGSN 160 authenticates a user from the HLR 140. A security function, which is an authentication process for requesting the request and receiving the re-processed authentication result and transmitting the result to the RNC 120 to be transmitted back to the mobile terminal 100 through the Node B 110 (S206), is performed.

As described above, in the authentication process of step 206, information for user authentication stored in the HLR 140 is processed in the AuC 150 and transmitted to the HLR 140 for storage.

In the mobile communication network, the authentication procedure is conventionally performed according to the subscriber information when the user subscribes to the mobile communication service.

However, in the present invention, when the user subscribes to the mobile communication service by determining whether the user has subscribed to the mobile communication service, the authentication process is performed as in the related art, and even when the user does not subscribe to the mobile communication service, only the unique information of the mobile terminal 100 is used. Perform the same steps for accessing the Internet as in the prior art.

The mobile subscriber information of the user is generally called a subscriber identity module (SIM: SuMScriber Identify Module), and the SIM may be in the form of a card or chip embedded in or external to the mobile terminal 100.

In addition, the unique information of the mobile terminal 100 may be stored in the mobile terminal 100 as a default value and included in the mobile communication network access request signal and transmitted to the devices configuring the mobile communication network.

When the authentication procedure is performed, the SGSN 160 transmits a Service Accept signal indicating that the Internet is accessible to the mobile terminal 100 through the Node B 110 (S208), and assigns the bearer allocation of radio frequency resources. The Radio Access Bearer Assignment Request signal is transmitted to the RNC 120 (S210).

According to the received Radio Access Bearer Assignment Request signal, the RNC 120 transmits a Radio Bearer Setup signal, which is a setting for radio frequency allocation, to the mobile terminal 100 through the Node B 110 (S212).

The mobile terminal 100 completes setting of a radio bearer according to a radio bearer setup signal received through the Node B 110 and transmits a radio bearer complete signal to the RNC 120 (S214).

The RNC 120 transmits a Radio Access Bearer Assignment Response signal to the SGSN 160 as a response signal to the Radio Access Bearer Assignment Request signal according to the Radio Bearer Complete signal (S216).

When the Radio Access Bearer Assignment Response signal is received by the SGSN 160, SGSN-Initiated PDP Context modification is performed between the mobile terminal 100, the SGSN 160, the SGSN 170, and the GGSN 110 through the Node B 110. (S218).

A PDP (Packet Data Protocol) context is a message containing information that a user communicates data at a certain speed and a certain quality, and SGSN-Initiated PDP Context modification is a mobile terminal that stores information stored in such a PDP context. 100 and SGSN 160 and the GGSN 170 is a process of joint storage.

If the PDP (Packet Data Protocol) context is stored in the user terminal and the like, the mobile terminal 100, SGSN 160 and the GGSN 170 is jointly stored Uplink PDU (Packet Data Unit) process that can transmit the packet data This is performed (S218) is performed between the portable terminal 100 and the proxy server 300 (S220).

Conventionally, Uplink PDU (Packet Data Unit) which can transmit packet data when PDP (Packet Data Protocol) Context has user information, etc. are jointly stored in mobile terminal 100, SGSN 160 and GGSN 170. Unlike the process in which the mobile terminal 100 and the Internet are directly connected to each other, the Uplink Packet Data Unit (PDU) process is first performed through communication with the proxy server 300.

When the proxy server 300 and the mobile terminal 100 are connected through the uplink packet data unit (PDU) process, the proxy server 300 is connected to the HLR of the mobile communication network according to authentication information included in the PDP context. If the authentication process is not performed at 140, an authentication request signal for requesting authentication is transmitted to the RADIUS server 310 (S400), and the RADIUS server 310 transmits an authentication response signal according to the previously stored mobile terminal 100 information. To the proxy server 300 again (S402).

The proxy server 300 requests ID / PASSWORD from the mobile terminal 100 according to the authentication response signal received from the RADIUS server 310 (S404), and the user inputs ID / PASSWORD through the mobile terminal 100. The ID / PASSWORD information is transmitted to the proxy server 300 again (S406).

The proxy server 300 retransmits an authentication request signal according to the ID / PASSWORD information received by the RADIUS server 310 (S408) and receives an authentication response signal from the RADIUS server 310 (S410). Is finally connected to the Internet and Internet access is possible (S412).

On the other hand, if the user of the mobile terminal 100 is already a mobile communication subscriber and the authentication process is performed in the HLR 140 of the mobile communication network without the authentication process between the proxy server 300 and the RADIUS server 310 described above. The connection with the Internet 180 is performed.

In addition, although FIG. 4 illustrates that the proxy server 300 requests ID / PASSWORD again to distinguish a user from the mobile terminal 100 according to the authentication information received from the RADIUS server 310, for example, all portable devices are provided. When the terminal 100 is basically designated as a mobile terminal 100 capable of accessing the Internet, it is obvious that the terminal 100 may connect to the Internet using only the information of the mobile terminal 100.

By providing such a dual authentication system, a user of a mobile terminal 100 such as a mobile phone or a notebook computer can access the Internet 180 without separately joining a mobile communication service provider.

For example, when a device such as a CDMA modem is installed in the notebook, the mobile communication network can be connected to the mobile communication network. However, if the mobile communication company does not subscribe to the mobile communication network, the Internet 180 connection through the mobile communication network is impossible.

However, according to the present invention, if the laptop is equipped with a device capable of accessing a mobile communication network, such as a CDMA modem, the user may be provided with an authentication system including a proxy server 300 and a RADIUS server 310 without subscribing to a specific mobile carrier. It is possible to access the Internet 180 through.

Therefore, by performing the dual authentication process of performing the authentication procedure in the mobile communication network and the separate authentication system connected to the mobile communication network, it is possible to access the Internet by accessing the mobile communication network without subscribing to the mobile communication service of a specific communication company. Therefore, it is possible to provide various additional services using the same.

For example, if a user who wants to receive a mobile communication service using a laptop loses the notebook before opening the mobile communication service, it is possible to provide a location tracking service of the note book, which is the mobile terminal 100.

A case in which a service for providing a location tracking service of the mobile terminal 100 is performed by using the dual authentication method will be described with reference to FIG. 5.

 5 is a flowchart illustrating a procedure of providing a location tracking service of the mobile terminal 100 using the dual authentication method according to an embodiment of the present invention.

As shown in FIG. 5, the order in which the Internet 180 is connected by the dual authentication method according to an exemplary embodiment of the present invention through the portable terminal 100 is as shown in FIG. 4.

However, as shown in FIG. 5, since the proxy server 300 is not an internet access request of the mobile terminal 100, the proxy server 300 does not request a separate authentication procedure from the RADIUS server 310.

In addition, a separate location tracking S / W for location tracking is installed in the mobile terminal 100, and the location tracking S / W periodically updates the location of the mobile terminal 100 through a mobile communication network (S500). The periodically updated location information of the mobile terminal 100 is transmitted to the proxy server 300 (S502), and the proxy server 300 is periodically updated to a location tracking server that provides the location information of the mobile terminal 100. The location information of the mobile terminal is transmitted (S504).

Therefore, when the mobile terminal 100 is lost, when the user accesses the location tracking server and inputs the information of the mobile terminal 100, the user of the lost mobile terminal 100 is periodically updated according to the location information of the mobile terminal 100. The location information can be obtained.

Preferred embodiments of the present invention described above are disclosed for purposes of illustration, and those skilled in the art will be able to make various modifications, changes, and additions within the spirit and scope of the present invention. Additions should be considered to be within the scope of the following claims.

As described above, according to the authentication method and system in a mobile communication network according to the present invention, there is an advantage that the Internet connection can be made without subscribing to a communication service of a specific mobile communication provider.

In addition, when it is necessary to provide a service before subscribing to a specific mobile operator or paying for a fee, an additional service through the Internet can be provided by accessing the Internet without changing the conventional service providing procedure and the charging procedure. There are advantages to it.

Claims (15)

In the authentication method through a mobile communication network, (A) receiving an internet access request signal received from a mobile terminal through the mobile communication network; (B) determining whether the received internet access request signal includes authentication processing information in the mobile communication network; And (C) connecting to the internet according to the internet access request signal, If the authentication process information in the mobile communication network is not included in the step (b), the mobile terminal information included in the internet access request signal is read out, and the authentication process is performed using the read portable terminal information to connect to the Internet. An authentication method through a mobile communication network, characterized in that. The method of claim 1, In step (a), The Internet access request signal is received from a Gateway GPRS Support Node (GGSN) of the mobile communication network. The method of claim 1, In step (a), The Internet access request signal is a signal generated using information stored in a subscriber identity module (SIM: SuMScriber Identify Module) included in the mobile terminal. The method of claim 1, Step (c) is, And requesting input of an ID (ID) and a password (password) to the portable terminal, wherein the connection to the Internet is performed when the ID / Password input and received from the portable terminal matches. Authentication method through a mobile communication network. The method of claim 1, The portable terminal information is information set in advance and stored in the portable terminal, and the internet access request signal is a signal generated by including the portable terminal information. A recording medium having recorded thereon a program that can be read by a digital processing apparatus such that an authentication method via a mobile communication network is implemented, (A) receiving an internet access request signal received from a mobile terminal through the mobile communication network; (B) determining whether the received internet access request signal includes authentication processing information in the mobile communication network; And (C) connecting to the internet according to the internet access request signal, If the authentication process information in the mobile communication network is not included in the step (b), the mobile terminal information included in the internet access request signal is read out, and the authentication process is performed using the read portable terminal information to connect to the Internet. A recording medium having recorded thereon a program for implementing an authentication method through a mobile communication network. The method of claim 6, In step (a), And the Internet access request signal is received from a Gateway GPRS Support Node (GGSN) of the mobile communication network. The method of claim 6, In step (a), The Internet access request signal is a record for recording a program for implementing an authentication method through a mobile communication network, characterized in that the signal generated by using information stored in a subscriber identity module (SIM: SuMScriber Identify Module) included in the portable terminal. media. The method of claim 6, Step (c) is, And requesting input of an ID (ID) and a password (password) to the portable terminal, wherein the connection to the Internet is performed when the ID / Password input and received from the portable terminal matches. Recording medium recording a program for implementing an authentication method through a mobile communication network. The method of claim 6, The portable terminal information is information set in advance and stored in the portable terminal, and the Internet connection request signal is a signal generated by including the portable terminal information, recording a program for implementing the authentication method through a mobile communication network Record carrier. In the authentication system through a mobile communication network, A proxy server for receiving an Internet access request signal received from a mobile terminal through the mobile communication network to connect the Internet; And Including a remote authentication dial-in user service (RADIUS) server for receiving the mobile terminal information from the proxy server to process authentication and transmit the processed authentication result to the proxy server, The proxy server determines whether the internet access request signal includes authentication processing information in the mobile communication network. If the proxy server does not include authentication processing information in the mobile communication network, the proxy server reads the portable terminal information included in the internet access request signal. Authentication system via a mobile communication network, characterized in that the authentication request to the RADIUS server. The method of claim 11, And the proxy server receives the internet access request signal from a gateway GPRS support node (GGSN) of the mobile communication network. The method of claim 11, The internet access request signal received by the proxy server is a signal generated using information stored in a subscriber identity module (SIM: SuMScriber Identify Module) included in the portable terminal. The method of claim 11, The portable terminal information is information set in advance and stored in the portable terminal, and the internet access request signal is a signal generated by including the portable terminal information. The method of claim 11, The proxy server further requests input of an ID (ID) and a password (password) to the portable terminal, and the RADIUS server determines whether the ID / Password received from the portable terminal to the proxy server matches and determines the determination result. Authentication system via a mobile communication network, characterized in that for transmitting a proxy server.

Images