KR101004556B1 - Internet protocol multimedia subsystem and call processing method thereof - Google Patents

Abstract

The present invention relates to a call processing method based on an IP multimedia subsystem and an IP multimedia subsystem.

In accordance with an embodiment of the present invention, a method for processing a call based on an IP multimedia subsystem includes receiving a registration request message including a subscriber's personal ID and a public ID from a terminal, and when an authentication vector corresponding to the personal ID exists. Performing authentication for the subscriber using the authentication vector.

IMS, call processing, subscriber registration

Description

Call processing method based on IP multimedia subsystem and IP multimedia subsystem

The present invention relates to an Internet Protocol Multimedia Subsystem (IMS), and more particularly, to an IMD and an IMS call processing method for subscriber registration.

Recently, with the rapid development of mobile communication and the Internet, it is required to realize various multimedia services of high quality for mobile subscribers. The development of the Internet multimedia service required a change from a circuit-based core network (CN) to a packet-based CN, furthermore, an IP-based core network (IP). It is looking for the evolution to the next generation core network in the form of CN-based.

Currently, the 3rd Generation Partnership Project (3GPP) is standardizing the ALL IP-based network reference model to provide IP-based multimedia (IM) services. An IM service is a service that can simultaneously provide various types of packet-based services based on an IP transport protocol to a mobile subscriber. This enables subscribers to use existing real-time services such as voice and video, as well as non-real-time services such as file transfer, email, and short message.

The Internet Protocol Multimedia Subsystem (IMS) may function as a core network for providing IM services. Therefore, there is a need for an efficient operation method of IMS for providing IM services to subscribers.

An object of the present invention is to provide an IMS and an IMS call processing method for performing efficient subscriber registration.

The objects of the present invention are not limited to the above-mentioned objects, and other objects that are not mentioned will be clearly understood by those skilled in the art from the following description.

In order to achieve the above object, the IP multimedia subsystem-based call processing method according to an embodiment of the present invention receives a registration request message including a subscriber's personal ID and public ID from the terminal, and corresponding to the personal ID And if the authentication vector exists, performing authentication for the subscriber using the authentication vector.

In order to achieve the above object, the IP multimedia subsystem according to an embodiment of the present invention is a proxy call session control device for receiving a registration request message including a subscriber's personal ID and public ID from the terminal, and corresponding to the personal ID And a serving call session control device for authenticating the subscriber using the authentication vector when the authentication vector exists.

Specific details of other embodiments are included in the detailed description and the drawings.

According to the IMS and the IMS-based call processing method according to an embodiment of the present invention as described above, there is an effect that the subscriber registration can be performed more efficiently.

Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings.

1 is a diagram illustrating an Internet Protocol Multimedia Subsystem (IMS) 100 according to an embodiment of the present invention. The illustrated IMS 100 includes a Call Session Control Function (CSCF) 110, a Home Subscriber Server (HSS) 120, and an Application Server (AS) 130. The IMS 100 may comply with 3GPP (3rd Generation Partnership Project) based standards. However, the present invention is not limited by the 3GPP-based standard.

The CSCF 110 may perform basic functions for session initiation protocol (SIP) based multimedia session control such as subscriber registration, authentication, service triggering, routing, various call control, address handling, and the like. . The CSCF 110 includes a proxy CSCF (P-CSCF 112), an interrogating-CSCF (I-CSCF 114), and a serving CSCF (S-CSCF 116). )).

The P-CSCF 112 is the first point where the terminal 140 connects to the IMS network. When a registration request message (REGISTER) is transmitted from the terminal 140, the P-CSCF 112 may transmit it to the I-CSCF 114. The P-CSCF 112 stores the address of the S-CSCF 116 assigned by the I-CSCF 114 in the process of processing a registration request message, and then receives an session request message (INVITE) from the terminal 140. If so, it can be forwarded to the S-CSCF 116.

The I-CSCF 114 serves as a contact point for incoming calls to connect to subscriber stations in the network and a contact point with terminals of other network subscribers roaming in the network. The I-CSCF 114 obtains the address of the S-CSCF available from the HSS 120 in the process of registering a user (hereinafter referred to as a subscriber) of the terminal 140 and refers to the S-CSCF to be in charge of actual registration. CSCF 116 may be determined.

The S-CSCF 116 may register a subscriber with the HSS 120 when a registration request message is received from the I-CSCF 114, and obtain a subscriber profile of the subscriber from the HSS 120. The S-CSCF 116 may identify the type of service to be provided to the terminal 140 using the subscriber profile and perform triggering on the AS 130 that will support the identified service. In addition, the S-CSCF 116 may obtain and manage an authentication vector from the HSS 120. In addition, the S-CSCF 116 may perform subscriber authentication using an authentication vector.

The HSS 120 is a subscriber's master database, which stores and manages subscriber profile, authentication, and location related data and provides the information required by the I-CSCF 114 or the S-CSCF 116. In addition, the HSS 120 may generate an authentication vector required for subscriber authentication. In addition, the HSS 120 may include a function of a home location register (HLR).

AS 130 may retain substantial service logic. Depending on the service logic it has, the AS 130 may support a particular service. Examples of services supported by the AS 130 include a Voice over Internet Protocol (VoIP) service, a video call service, an Instant Message (IM) service, and various session-based multimedia services.

1 shows that IMS 100 includes P-CSCF 112, I-CSCF 114, S-CSCF 116, HSS 120, and AS 130 one by one, which is an IMS. The present invention is not limited to this because it is intended to describe the basic configuration of 100. Accordingly, the IMS 100 may include a plurality of devices or servers shown in FIG. 1. In addition, although not shown in FIG. 1, a known device or server, such as a multimedia resource function (MRF) that handles call mixing and media mixing, may be further included in the IMS 100.

The terminal 140 may be a mobile communication device such as a mobile phone or a personal digital assistant (PDA). However, the present invention is not limited thereto, and the terminal 140 may be a desktop computer, a wired telephone, another wired or wireless communication device.

Although FIG. 1 illustrates that the terminal 140 communicates directly with the IMS 100, the present invention is not limited thereto. For example, the terminal 140 may be a mobile communication network such as Code Division Multiple Access (CDMA), Wideband CDMA (WCDMA), Global System for Mobile communication (GSM), a Public Switched Telephone Network (PSTN), an Integrated Services Digital Network (ISDN). It may be connected to the IMS (100) via a wired communication network, or other known communication network.

The terminal 140 may be provided with an IP multimedia service from the IMS 100. Before the IMS 100 provides an IM service to the terminal 140, a subscriber authentication operation and a subscriber to an authenticated subscriber are performed. Registration work can be performed. The subscriber authentication operation may be performed separately from the subscriber registration operation, but preferably, the subscriber authentication operation is included in the subscriber registration operation and may be performed as a series of procedures.

Subscribers subscribed to the IM service in advance may be assigned one private ID (prid) and one or more public IDs (puids) corresponding to the personal IDs. According to an embodiment of the present invention, the personal ID may be subscriber identification information used to authenticate the subscriber, and the public ID may be identification information of the terminal 140 used by the subscriber. However, the present invention is not limited to specific embodiments of the personal ID and one or more public IDs corresponding thereto.

Meanwhile, through the subscriber registration operation, the IMS 100 may obtain routing information about the subscriber's terminal 140 and may prepare a subscriber profile including information necessary to provide a service to the subscriber. Subscriber registration can be performed based on one personal ID and one public ID pair.

Hereinafter, the subscriber registration process according to an embodiment of the present invention will be described in more detail.

2 is a flowchart illustrating a subscriber registration process according to an embodiment of the present invention.

First, the terminal 140 may transmit a registration request message to the P-CSCF 112 (S210). The registration request message may include the subscriber's personal ID and public ID. In addition, the registration request message may further include a URI (Uniform Resource Identifier, hereinafter referred to as a destination URI) indicating a destination domain, a URI of the terminal 140, an IP address of the terminal 140, and the like.

After receiving the registration request message from the terminal 140, the P-CSCF 112 may perform a DNS (Domain Name System) query operation (S212). Through the DNS query operation, the P-CSCF 112 may obtain the address of the I-CSCF 114. More specifically, in the DNS query operation, the P-CSCF 112 may transmit a DNS query message including a destination URI of the registration request message received from the terminal 140 to a DNS (not shown). . At this time, DNS selects an appropriate I-CSCF 114 by referring to a destination URI included in the DNS query message, and a DNS query response message including an address of the selected I-CSCF 114. May be transmitted to the P-CSCF 112.

The P-CSCF 112 having obtained the address of the I-CSCF 114 may transmit a registration request message of the terminal 140 to the I-CSCF 114 (S214). The registration request message transmitted to the I-CSCF 114 may be a compilation of the registration request message received by the P-CSCF 112 from the terminal 140. Here, editing is a concept that includes adding, deleting, and changing information. For example, the registration request message sent to the I-CSCF 114 may include the address of the P-CSCF 112. An example of the address of the P-CSCF 112 is the URI of the P-CSCF 112. The address of the P-CSCF 112 may be used as a routing path when the S-CSCF 116 later wants to send a message to the terminal 140.

Upon receiving the registration request message from the P-CSCF 112, the I-CSCF 114 may transmit a User-Authorisation-Request (UAR) message to the HSS 120 (S216).

Although omitted in FIG. 2, the operation of obtaining the address of the HSS 120 by the I-CSCF 114 may be performed before the process S216. Here, the I-CSCF 114 may obtain the address of the HSS 120 from an SLF (Server Locator Function, not shown).

The HSS 120 selects the S-CSCF 116 suitable for the terminal 140 by referring to the UAR message transmitted from the I-CSCF 114 and includes a user including information on the selected S-CSCF 116. A User Authorization Answer (UAA) message may be transmitted to the I-CSCF 114 (S218).

The I-CSCF 114 may set the S-CSCF 116 to process the registration request of the terminal 140 through the UAR message, and may transmit a registration request message to the set S-CSCF 116 (S220). . If the HSS 120 transmits the information on the plurality of S-CSCFs in step S218, the I-CSCF 114 sends one of the plurality of S-CSCFs to the S-CSCF 116 to handle message processing of the terminal 140. Can be selected.

The S-CSCF 116 may obtain the subscriber's personal ID and public ID pair in the registration request message sent from the I-CSCF 114. At this time, the S-CSCF 116 may check whether an authentication vector corresponding to the personal ID exists (S222).

According to one embodiment of the present invention, the authentication vector may be provided from the HSS 120 and managed by the S-CSCF 116, in which case the S-CSCF 116 is a subscriber if the subscriber registration has been successfully performed in advance. It may have an authentication vector corresponding to the personal ID of. However, when the subscriber registration operation is performed for the first time, the S-CSCF 116 may obtain an authentication vector corresponding to the subscriber's personal ID from the HSS 120.

According to one embodiment of the invention, the authentication vector is preferably used for one authentication operation. In other words, the authentication vector used once for the subscriber authentication cannot be used again for the next authentication based on the same personal ID. As mentioned earlier, a subscriber can have multiple public IDs corresponding to one personal ID, and subscriber registration is performed for one personal ID and one public ID pair, thus registering multiple subscribers to the same subscriber. It is possible that the work is performed. Therefore, even though the subscriber registration operation is successfully performed in advance and the S-CSCF 116 receives the authentication vector corresponding to the subscriber's personal ID from the HSS 120, a plurality of subscriber registration operations using the same personal ID are performed. In this case, the authentication vector previously provided from the HSS 120 may be already used. In this case, the S-CSCF 116 may determine that there is no authentication vector corresponding to the personal ID in step S222 of FIG. 2, and the S-CSCF 116 determines that the authentication vector corresponding to the personal ID is HSS ( 120 can be obtained again.

A case in which the verification result authentication vector exists in step S222 will be described later with reference to FIG. 3, and a case in which the verification result authentication vector does not exist in step S222 will be described with reference to FIG. 2.

If the authentication vector does not exist in step S222, the S-CSCF 116 may transmit an authentication vector request message to the HSS 120 (S224). The authentication vector request message may include the subscriber's personal ID and the number of necessary authentication vectors. The number information of the authentication vector may be set differently according to the embodiment. However, since at least one authentication vector is required, the number information of the authentication vector is preferably at least '1'. According to an embodiment of the present invention, a multimedia authentication request (MAR) message may be used as the authentication vector request message.

The HSS 120 may generate as many authentication vectors as the S-CSCF 116 requests (S226), and may transmit an authentication vector response message including the generated authentication vector to the S-CSCF 116 (S228). According to an embodiment of the present invention, a multimedia authentication answer (MAA) message may be used as the authentication vector response message.

The authentication vector may include one or more parameters. According to an embodiment of the present invention, the authentication vector may include a random number (RAND), an authentication token (AUTN), and an expected response (XRES). The authentication token may include a message authentication code (MAC) and a sequence number as subparameters. The sequence number may be generated by the HSS 120 and may be a criterion for distinguishing each authentication vector when a plurality of authentication vectors are generated. Since the present invention is not limited by the configuration of the authentication vector, the authentication vector may further include other parameters, and the authentication token may further include other subparameters.

In order to generate the authentication vector in step S226, the HSS 120 may first generate a random number (RAND). Thereafter, the HSS 120 may generate each parameter constituting the authentication vector using a predetermined function shared with the terminal 140 and using a secret key and a generated random number as input values. The function used to generate the parameter may be different for each parameter, and the input value input to the function for generating each parameter may also be different for each parameter. For example, in order to generate the message authentication code included in the authentication token, the HSS 120 may further use the sequence number in addition to the secret key and the random number. Of course, the function or input value used to generate each parameter may be the same depending on the parameter.

The S-CSCF 116 acquiring the authentication vector from the HSS 120 may transmit an authentication challenge message to the I-CSCF 114 (S230). The authentication request message may include a random number and an authentication token included in the authentication vector. The S-CSCF 116 may store the obtained authentication vector together with the subscriber ID. If a plurality of phosphorous vectors are obtained from the HSS 120, the S-CSCF 116 may use the authentication vectors sequentially according to the sequence number used to generate each authentication vector. According to an embodiment of the present invention, a Session Initiation Protocol (SIP) based 4xx series response message may be used as an authentication request message. Preferably, a SIP based 401 response message may be used.

The I-CSCF 114 may transmit an authentication request message to the P-CSCF 112 (S232), and the P-CSCF 112 may transmit an authentication request message to the terminal 140 (S234).

The terminal 140 may perform authentication on the IMS 100 using the information included in the authentication request message (S236).

Referring to step S236 in more detail, the terminal 140 may extract the message authentication code included in the authentication token in the authentication request message, and generate an expected message authentication code (XMAC). The input values and functions used by the terminal 140 to generate the expected message authentication code are the same as the input values and functions used by the HSS 120 when generating the message authentication code included in the authentication token of the authentication vector in step S226. Do. Examples of input values used to generate the expected message authentication code include a secret key previously shared with the HSS 120 by the terminal 140, a sequence number included in the authentication token in the authentication request message, and an authentication request message. And random numbers included.

Therefore, if both the terminal 140 and the IMS 100 are in a normal state, the expected message authentication code generated by the terminal 140 and the message authentication code extracted from the authentication token included in the authentication request message have the same value. However, if at least one of the terminal 140 or the IMS 100 is in an abnormal state (for example, when the terminal 140 is forged / modulated or an abnormality occurs in the IMS 100), the expected message authentication generated by the terminal 140 is generated. The code and the message authentication code included in the authentication request message have different values.

In step S236, the terminal 140 may compare the expected message authentication code generated by the terminal 140 with the message authentication code included in the authentication request message. If the expected message authentication code and the message authentication code are different, the subscriber registration procedure may be terminated. . Of course, in order to terminate the subscriber registration process normally, additional message transmission and processing may be performed between the terminal 140 and the IMS 100, but a detailed description thereof will be omitted.

As a result of performing IMS authentication in step S236, if the message authentication code and the expected message authentication code are the same, the terminal 140 may generate an authentication response value (S238). In order to generate the authentication response value, the terminal 140 may use a predetermined function that uses a secret key shared with the HSS 120 in advance and a random number obtained from the authentication request message as input values. The function used to generate the authentication response value is the same as the function used when the HSS 120 generates the expected response value included in the authentication vector in step S226.

Thereafter, the terminal 140 may transmit an authentication response message including the generated response value and the subscriber's personal ID to the P-CSCF 112 (S240). According to an embodiment of the present invention, the authentication response message may be a SIP-based REGISTER message. Therefore, the authentication response message may further include at least one of the information included in the registration request message transmitted in step S210.

Upon receiving the authentication response message from the terminal 140, the P-CSCF 112 may perform a domain name system (DNS) query operation (S242). Through the DNS query operation, the P-CSCF 112 may obtain the address of the I-CSCF 114.

The P-CSCF 112 having obtained the address of the I-CSCF 114 may transmit an authentication response message of the terminal 140 to the I-CSCF 114 (S244).

Upon receiving the authentication response message from the P-CSCF 112, the I-CSCF 114 may transmit a User-Authorisation-Request (UAR) message to the HSS 120 (S246).

Although omitted in FIG. 2, the operation of obtaining the address of the HSS 120 by the I-CSCF 114 may be performed before the process S246. Here, the I-CSCF 114 may obtain the address of the HSS 120 from an SLF (Server Locator Function, not shown).

The HSS 120 selects the S-CSCF 116 suitable for the terminal 140 by referring to the UAR message transmitted from the I-CSCF 114 and includes a user including information on the selected S-CSCF 116. A User Authorization Answer (UAA) message may be transmitted to the I-CSCF 114 (S248).

The I-CSCF 114 may set the S-CSCF 116 to process the authentication response message of the terminal 140 through the UAR message, and may transmit an authentication response message to the set S-CSCF 116 (S250). ).

For reference, processes S242 to S250 of FIG. 2 may be performed in a similar manner to processes S212 to S220.

Upon receiving the authentication response message, the S-CSCF 116 may perform authentication on the subscriber by comparing the authentication response value included in the authentication response message with the expected response value obtained from the HSS 120 in step S228 (S252). ). The S-CSCF 116 may search for the expected response value to be compared with the authentication response value by using the personal ID included in the authentication response message.

The input values and functions used by the terminal 140 when generating the authentication response value are the same as the input values and functions used when the HSS 120 generates the expected response value included in the authentication vector. Therefore, if both the terminal 140 and the IMS 100 are in a normal state, the authentication response value generated by the terminal 140 and the expected authentication value generated by the HSS 120 will be the same. However, if at least one of the terminal 140 or the IMS 100 is in an abnormal state (for example, when the terminal 140 is forged / modulated or an error occurs in the IMS 100), the authentication response value generated by the terminal 140 is generated. The expected authentication value generated by the HSS 120 and the HSS 120 will be different from each other.

If the authentication response value and the expected response value are different, the S-CSCF 116 may determine that subscriber authentication has failed, and the subscriber registration process may be terminated. Of course, in order to terminate the subscriber registration process normally, additional message transmission and processing may be performed, but a description thereof will be omitted.

Meanwhile, if the authentication response value and the expected response value are the same, the S-CSCF 116 may determine that subscriber authentication is successful. If the subscriber authentication succeeds, the S-CSCF 116 may transmit a Server Assignment Request (SAR) message to the HSS 120 (S254). The server assignment request message may include a routing path capable of delivering the message to the terminal 140. For example, the server assignment request message may include the address of the P-CSCF 112 and the S-CSCF 116 to which the terminal 140 is connected. According to an embodiment of the present invention, the server assignment request message may also include the IP address of the terminal 140. The information included in the server assignment request message may be obtained from a registration request message or an authentication response message sent from the I-CSCF 114.

The HSS 120 may store information (routing path, IP address, etc. of the terminal 140) included in the server assignment request message. Preferably, the HSS 120 may include the routing path and the IP address of the terminal 140 in the initial filter criterion (iFC) of the subscriber profile.

Thereafter, the HSS 120 may transmit a Server Assignment Answer (SAA) message to the S-CSCF 116 as a response to the server assignment request message (S256). The server assignment response message may include a subscriber profile. The subscriber profile may include various pieces of information necessary to provide a service to the terminal 140. According to an embodiment of the present invention, the subscriber profile may further include a routing path leading to the terminal 140 and an IP address of the terminal 140. Preferably, the routing path and IP address of the terminal 140 may be included in the iFC in the subscriber profile. Of course, the iFC may further include reference information necessary for service triggering.

Upon receiving the server assignment response message, the S-CSCF S116 may store the subscriber profile and transmit a 200 OK response message to the I-CSCF 114 (S250). The stored subscriber profile can be used to trigger the appropriate IM service to be provided to the terminal 140 later.

The I-CSCF 114 may transmit a 200 OK response message to the P-CSCF 112 (S260), and the P-CSCF 112 may transmit a 200 OK response message to the terminal 140 (S262).

After subscriber registration is completed through the process of FIG. 2, a case where a subscriber registration operation using the same personal ID is performed may occur. As shown in FIG. 4, when there is a subscriber having one personal ID (personal ID-1) and two public IDs (public ID-1, public ID-2) corresponding thereto, personal ID-1 and public For example, after processing the first subscriber registration request using ID-1, it is necessary to process the second subscriber registration request using private ID-1 and public ID-2. The processing of the first subscriber registration request may correspond to the embodiment of FIG. 2, and the processing of the second subscriber registration request may correspond to the embodiment of FIG. 3. Although FIG. 3 is used as an identification symbol of the terminal in FIG. 3, the terminal mentioned in the embodiment of FIG. 3 may be the same terminal as the terminal 140 mentioned in the embodiment of FIG. 2 or may be another terminal.

Referring to FIG. 3, the terminal 140 may transmit a registration request message to the P-CSCF 112 (S310). The registration request message may include a subscriber's personal ID and a public ID. As described above, the personal ID included in the registration request message transmitted in step S310 of FIG. 3 may correspond to the registration request message transmitted in step S210 of FIG. 2. Same as the included personal ID. However, the publication ID included in the registration request message transmitted in step S310 of FIG. 3 is different from the publication ID included in the registration request message transmitted in step S210 of FIG. 2.

 The P-CSCF 112 that has received the registration request message from the terminal 140 may perform a DNS query operation. Processes S312 to S320 of FIG. 3 may proceed similarly to processes S212 to S220 of FIG. 2. Detailed description thereof will be omitted.

When the registration request message is sent from the I-CSCF 114, the S-CSCF 116 may obtain the subscriber's personal ID and public ID pair in the registration request message and check whether there is an authentication vector corresponding to the personal ID. It can be confirmed (S322).

If a plurality of authentication vectors have been obtained from the HSS 120 in step S228 of FIG. 2, an authentication vector corresponding to the personal ID will remain. In this case, the S-CSCF 116 may use the authentication vector without going through a separate authentication vector acquisition process (processes S224 to S228 of FIG. 2). If, as a result of the check in step S322, a plurality of authentication vectors corresponding to the personal IDs exist, the S-CSCF 116 may use any one of them. Preferably, the highest authentication vector may be used based on the sequence number of each authentication vector.

However, even if the authentication vector corresponding to the personal ID has not been obtained from the HSS 120 in advance or the authentication vector corresponding to the personal ID has been obtained from the HSS 120 in advance, the subscriber based on the same personal ID in advance. If the registration process is performed to consume all of the authentication vectors obtained from the HSS 120, there will be no remaining authentication vectors. In this case, process S224 and subsequent processes of FIG. 2 may be performed.

Since the present embodiment shows a case where a previously acquired authentication vector exists, the S-CSCF 116 may continue the subscriber registration process using the authentication vector managed by the S-CSCF 116.

Referring back to FIG. 3, if there is an authentication vector corresponding to the personal ID as a result of the check in step S322, the S-CSCF 116 sends an I-CSCF an authentication request message including a random number and an authentication token included in the authentication vector. In operation S330, the process may be transmitted to 114.

Processes S332 to S362 after process S330 of FIG. 3 may be understood similarly to processes S232 to S262 of FIG. 2, and thus detailed description thereof will be omitted.

Embodiments of the operation process of the IMS 100 described above may be read by a computer on a medium and may be executed through code or instructions for controlling at least one processing element. The medium may store or transmit computer readable codes.

The computer readable code may be recorded or transmitted through various types of media. Examples of such media include transmission media such as recording media, magnetic storage media (e.g. ROMs, floppy disks, hard disks), optical recording media (e.g. CD-ROMs or DVDs), and carrier waves. Can be mentioned. In addition, according to an embodiment of the present invention, the medium may be a signal such as a synthesized signal or a bitstream. Since the medium may be a distributed network, computer readable code or instructions may be stored and transmitted on a plurality of media in a distributed manner for execution.

In addition, the processing element may comprise a processor or a computer processor. The processing element may be distributed in a plurality of devices or servers, or may be included in one device or server.

Although embodiments of the present invention have been described above with reference to the accompanying drawings, those skilled in the art to which the present invention pertains may implement the present invention in other specific forms without changing the technical spirit or essential features thereof. You will understand that. It is therefore to be understood that the above-described embodiments are illustrative in all aspects and not restrictive.

1 is a diagram illustrating an IP multimedia subsystem according to an embodiment of the present invention.

2 is a flowchart illustrating a subscriber registration process according to an embodiment of the present invention.

3 is a flowchart illustrating a subscriber registration process according to another embodiment of the present invention.

4 is a diagram illustrating a plurality of subscriber registration request states based on the same subscriber ID.

<Explanation of symbols on main parts of the drawings>

110: call session control device

112: proxy call session control device

114: interrogating call session control device

116: Serving call session control device

120: home subscriber server

130: application server

Claims (15)

Receiving a registration request message including a subscriber's personal ID and public ID from the terminal; Authenticating the subscriber using the authentication vector when the authentication vector corresponding to the personal ID exists; And Acquiring at least two authentication vectors corresponding to the personal ID when the authentication vector corresponding to the personal ID does not exist; and authenticating the subscriber using one of the obtained authentication vectors. Including, IP protocol multimedia subsystem based call processing method. delete The method of claim 1, wherein obtaining at least two authentication vectors corresponding to the personal IDs comprises: Transmitting an authentication vector request message including the personal ID and the number of necessary authentication vectors to a home subscriber server; And And receiving, from the home subscriber server, an authentication vector response message including an authentication vector corresponding to the personal ID by the number of information included in the authentication vector request message. The method of claim 1, And registering the subscriber when the authentication of the subscriber is valid as a result of the authentication of the subscriber. The method of claim 4, wherein registering the subscriber comprises: Transmitting a server assignment request message including a routing path of the terminal to a home subscriber server; Receiving a server assignment response message including the subscriber profile of the subscriber from the home subscriber server; And And storing the subscriber profile. The method of claim 1, wherein performing the authentication comprises: Transmitting at least one parameter included in the authentication vector to the terminal; Receiving, by the terminal, an authentication value calculated using the parameter from the terminal; And And determining that the authentication for the subscriber is valid when the received authentication value is equal to the expected authentication value included in the authentication vector. The method of claim 1, And wherein the authentication vector comprises at least one of a random number, an expected authentication value, and an authentication token. A proxy call session control device for receiving a registration request message including a subscriber's personal ID and public ID from the terminal; And If there is an authentication vector corresponding to the personal ID, authentication is performed for the subscriber using the authentication vector. If there is no authentication vector corresponding to the personal ID, the authentication vector corresponding to the personal ID is 2; And a serving call session control device for authenticating the subscriber using one of the obtained authentication vectors after at least two acquisitions. The method of claim 8, If there is no authentication vector corresponding to the personal ID among the authentication vectors managed by the serving call session control device, an authentication vector corresponding to the personal ID is requested to the serving call session control device according to a request of the serving call session control device. Further comprising a home subscriber server for transmitting, And the serving call session control device performs authentication for the subscriber using the authentication vector obtained from the home subscriber server. The method of claim 9, If there is no authentication vector corresponding to the personal ID among the authentication vectors managed by the serving call session control device, the serving call session control device sends an authentication vector request message including the personal ID and the number of necessary authentication vectors. Send it to the home subscriber server, And the home subscriber server transmits an authentication vector response message including an authentication vector corresponding to the personal ID to the serving call session control device as many pieces of information included in the authentication vector request message as possible. The method of claim 8, And the serving call session control device registers the subscriber when the authentication of the subscriber is valid as a result of the authentication of the subscriber. The method of claim 11, Further include a home subscriber server, The serving call session control apparatus transmits a server assignment request message including a routing path of the terminal to the home subscriber server, The home subscriber server sends a server assignment response message including the subscriber profile of the subscriber to the serving call session control device; And the serving call session control device stores the subscriber profile. The method of claim 8, The serving call session control apparatus transmits at least one parameter included in the authentication vector to the terminal, and when the authentication value calculated by the terminal using the parameter is equal to the expected authentication value included in the authentication vector, IP multimedia subsystem for determining that the authentication to the subscriber is valid. The method of claim 8, And the authentication vector comprises at least one of a random number, an expected authentication value, and an authentication token. A recording medium having recorded thereon a computer readable program for executing the method according to claim 1.

Images