KR101025845B1 - Method and system for wireless lan service - Google Patents

Abstract

A WLAN service method and system are disclosed. The wireless LAN service method includes receiving user information from a communication terminal, assigning an authentication number corresponding to the user information and transmitting the same to a communication terminal, receiving an authentication number through a wireless LAN terminal, and receiving the input authentication number. Performing an authentication procedure by comparing one authentication number, and assigning an IP address to the WLAN terminal when both authentication numbers match, and the WLAN service system receives user information from a communication terminal, An authentication number allocator for allocating an authentication number corresponding to the information and transmitting the authentication number to a communication terminal, an authentication unit for receiving an authentication number from a wireless LAN terminal and performing an authentication procedure by comparing the authentication number transmitted from the authentication number assignment unit; An IP address allocator for assigning an IP address to the WLAN terminal if both authentication numbers match. .

Description

Wireless LAN service method and system {Method and system for wireless lan service}

1 is a diagram illustrating an outline of an embodiment of a WLAN service according to the present invention.

2 is a flowchart of an embodiment of a WLAN service method according to the present invention.

3 is a schematic block diagram of an embodiment of a WLAN service system according to the present invention.

The present invention relates to a WLAN service, and more particularly, to providing a WLAN service to a user through authentication.

In general, a method of configuring a WLAN network includes an ad hoc (or peer to peer) method and an infrastructure method. Ad hoc is a method of one-to-one communication between computer terminals such as laptops or PCs. In the Ad Hoc method, a range in which direct communication between terminals is called a BSA (Basic Service Area), and the range is limited to an Ad Hoc network area.                         

The infrastructure method is a method in which a communication system between terminal systems is configured around an access point connected to a wired backbone, and communication between all terminals is performed through the access point.

 In infrastructure, terminals can communicate with wired networks through access points. In one access point, terminals can communicate with the wired network through the access point. An environment composed of one access point and a plurality of terminals wirelessly connected to the access point is called a cell. Accordingly, in an infrastructure network, a plurality of cells exist, and each cell is assigned an identifier that can be distinguished from each other, that is, an SSID (Service Set Identifier).

If a user intends to use the mobile terminal while moving between the access points, the SSIDs of the established access points must be matched. If the SSIDs of the installed access points do not match, the user must adjust the SSID of the terminal to the SSID of the corresponding cell every time the user moves between the access points.

On the other hand, the conventional WLAN system used the SSID, the shared WEP key (Wired Equivalent Privacy Key), MAC (Media Access Control) address of the access point as a terminal authentication method.

However, the SSID is not well used to approve or deny the access of the terminal, which may cause a security problem because the access point sets the SSID to be broadcast by the radio detector, and may cause a problem in the cell of the terminal. This is because the SSIDs of the access points must all be set identically to provide mobility between them.

WEP is a mechanism to protect WLAN data streams using the same keys and algorithms to encrypt and decrypt data. Therefore, in order to be authenticated using WEP, the WEP key must be registered in the same configuration of the terminal and the access point.

In addition, some WLAN vendors authenticate the terminal's WLAN access based on the MAC address of the terminal. At this time, the WLAN access authentication is limited to a terminal in which the MAC address of the WLAN card is registered in the access point.

However, such a conventional WLAN authentication method has many problems in security and mobility of a terminal. First, a method of authenticating a terminal using an SSID and a shared WEP key has a problem in that a password for the remaining terminal equipment needs to be changed when the security of a specific terminal equipment is breached. There is a problem in that both the SSID and the WEP key of the access point must be disclosed. This is because in the WLAN system, all terminals and access points in a cell must set the same SSID and WEP key.

In addition, a method of authenticating a terminal using a MAC address has a problem in that the MAC address of the terminal must be registered in the access point every time a new user enters. Therefore, it is difficult to service a mobile terminal that is temporarily moving or to frequently receive a new terminal.                         

Accordingly, in order to solve the drawbacks of the method using the SSID, WEP key, and MAC address, the authentication method of the wireless LAN terminal using the login ID and the password has been proposed. This method is based on IEEE 802.1x EAP (Extensible). Authentication Protocol). In this method, when a user enters a user ID and password in a network login dialog box or the like, the terminal and the authentication server perform mutual authentication with the terminal by the provided user ID and password. The terminal that has obtained the authentication can receive the WLAN service by receiving the same WEP key as the access point from the access point.

Currently, wireless Internet service providers are building their own WLAN service areas, and these areas have overlapping services according to their regional popularity, and each of them has a specialized WLAN service area that is different from the operator market policy. However, these areas can be used only by the corresponding wireless LAN service subscribers, and even wireless LAN service users could not use the wireless LAN service in the service area of the service provider that they did not subscribe to.

An object of the present invention is to provide a WLAN service method and system for enabling a WLAN service user to use a WLAN service in a service area of another WLAN service provider.

In order to achieve the above object, a wireless LAN service method according to the first aspect of the present invention includes receiving user information from a communication terminal, assigning an authentication number corresponding to the user information, and transmitting the same to the communication terminal. Step, receiving the authentication number via the wireless LAN, comparing the received authentication number and the transmitted authentication number to perform an authentication procedure, and if the two authentication numbers match the IP to the WLAN terminal And assigning an address.

In addition, the communication terminal is preferably characterized in that the wireless communication terminal.

In addition, preferably characterized in that it further comprises the step of providing an automatic response service for receiving user information input to the communication terminal.

Preferably, the authentication information is transmitted to the communication terminal through a short message.

The method may further include generating charging information corresponding to the user information.

In a wireless LAN service system according to a second aspect of the present invention, an authentication number allocating unit for receiving user information from a communication terminal, assigning an authentication number corresponding to the user information, and transmitting the authentication number to the communication terminal, An authentication unit for receiving an authentication number and performing an authentication procedure by comparing the authentication number transmitted from the authentication number assignment unit, and an IP address allocation unit for allocating an IP address to the wireless LAN terminal when the authentication numbers are identical It is characterized by including.

Preferably, the communication terminal is characterized in that the wireless communication terminal.

In addition, preferably characterized in that it further comprises an automatic response service unit for providing an automatic response service to the communication terminal.

Preferably, the authentication information is transmitted to the communication terminal through a short message.

The method may further include a billing unit for generating billing information corresponding to the user information.

Due to this configuration, the WLAN service user can use the WLAN service without additional equipment even in a service area of another WLAN service provider that he does not subscribe to.

Hereinafter, exemplary embodiments of the present invention will be described with reference to the accompanying drawings.

1 is a diagram illustrating an outline of an embodiment of a WLAN service according to the present invention.

In FIG. 1, a wireless LAN service user may check a configuration of communicating with an authentication number assignment server 130 using a mobile phone 100 and accessing an authentication and billing server 140 using a laptop 150 equipped with a wireless LAN card. have. The mobile phone 100 communicates with the authentication number assignment server 130 through a mobile communication network (base stations 110 and 120) of the mobile communication operator, and the notebook 150 authenticates through a wireless LAN (access point 160). And the charging server 140.

The user accesses the authentication number assignment server 130 of the wireless LAN service operator operating the wireless LAN service spot (Hot Spot) where the user is located through the mobile phone 100, is assigned an authentication number, and uses the assigned authentication number. By using a predetermined authentication procedure to use the wireless LAN.

2 is a flowchart of an embodiment of a WLAN service method according to the present invention. As can be seen in Figure 2, first, the user who wants to use the wireless LAN checks the local wireless LAN service provider in the wireless LAN service area (Hot Spot) where they are located, the communication terminal 100 to the telephone number The call is made to access the authentication number assignment unit of the operator's WLAN service system (200).

Confirmation of the operator is to check the telephone number of the operator and the area code of the service area, for example, it can be confirmed using a method such as checking the sign attached to the service area.

Although the communication terminal is preferably a wireless communication terminal, any other communication terminal capable of communicating with the wireless LAN service system as well as the wired telephone can be used.

The WLAN service system provides an automatic response service for receiving user information input to the connected communication terminal (210) and receives user information from the user's communication terminal (220). The user information is information necessary for authentication and billing, and information such as a social security number, service area information, and desired service type.

The WLAN service system allocates an authentication number corresponding to user information and transmits the authentication number to the communication terminal (230). The transmission of the authentication number to the communication terminal is preferably made through a short message service (SMS), but other methods are possible.

The WLAN service system receives the authentication number through the WLAN (240), and compares the received authentication number with the transmitted authentication number and performs an authentication procedure (250). A user performs an authentication procedure by entering a communication terminal number with a user ID as a user ID in the corresponding service area and an authentication number as a password.

This procedure is performed in an access point 160 in a service area. The access point 160 performs an authentication process for a user with reference to an authentication result performed in a WLAN service system.

When the authentication is successfully performed, that is, when the authentication number transmitted to the user through the mobile phone 100 and the authentication number input through the wireless LAN match, an IP address is allocated to the wireless LAN terminal (260), and the access point is Provide the allocated IP address to the WLAN terminal.

Finally, the charging information corresponding to the user information is generated (270). When the user terminates the WLAN service, the corresponding IP address is returned and the billing raw information of the used customer is collected to generate billing data according to the product type of the WLAN operator.

In order to estimate the billing charges of various subscribers joining various mobile phone service networks, it is necessary to cooperate with the service providers for additional charge policies. The identification of the user is performed by the mobile phone, and the collection of these charges is also preferably performed through the mobile phone bill.                     

3 is a schematic block diagram of an embodiment of a WLAN service system according to the present invention. In FIG. 3, the same code | symbol is attached | subjected about the same apparatus as FIG.

 In FIG. 3, the mobile phone 100 of the user may verify that the authentication number assignment system and the wireless LAN terminal 150 are connected to the access point 160 of the service area, respectively. In addition, the access point 160 and the authentication number assignment server are connected to the authentication server 140A and the charging server 140B, respectively.

The authentication server 140A and the charging server 140B are integrally configured in FIG. 1, but are configured as separate servers in FIG. 3. In addition, the authentication number assignment server 130 includes a module 170 that performs an auto-reply service and SMS service. In addition, the access point 160 includes an IP address providing module 180, and a DHCP server for allocating an IP address in association with the IP address providing module 180 is not shown in FIG.

The authentication number assignment server 130 receives user information from the mobile phone 100, allocates an authentication number corresponding to the user information, and transmits the authentication number to the mobile phone 100 again.

In detail, first, a user who wants to use a wireless LAN checks a local wireless LAN service provider in a wireless LAN service area (Hot Spot) where he / she is located, calls a corresponding telephone number to a communication terminal, and uses a wireless LAN service system. Access to the authentication number assignment server 130

Confirmation of the operator is to check the telephone number of the operator and the area code of the service area, for example, it can be confirmed by using a method such as checking the sign attached to the service area.

Next, the answering machine 170 provides an answering service for receiving user information input to the connected communication terminal, and receives the user information from the user's communication terminal. The user information is information necessary for authentication and billing, and information such as a social security number, service area information, and desired service type.

The auto-response service unit 170 provides an auto-response service to the communication terminal 100. In the present embodiment, the auto-response service unit 170 is included in the authentication number assignment server 130 together with the SMS service module, but may be configured as a separate device. .

Although the communication terminal consisting of the mobile phone 100 in the present embodiment is preferably a wireless communication terminal, any other communication terminal capable of communicating with the authentication number assignment server 130 can be used, as well as a wired telephone.

In the present embodiment, the authentication number assignment server 130 uses a short message to allocate the authentication number corresponding to the user information and transmit it to the communication terminal 100. However, the transmission of the authentication information to the communication terminal is preferably made through a short message service (SMS), but other methods are of course possible.

The authentication number assignment server 130 collects and organizes the user's information, sends it to the authentication server 140A and the charging server 140B, and the authentication server 140A waits for the user's access to perform the authentication procedure for the user. do.

The authentication server 140A receives an authentication number from the WLAN terminal 150 and performs an authentication procedure by comparing with the authentication number transmitted from the authentication number assignment unit 130. The authentication number is input through the WLAN and the access point 160, and the authentication procedure is performed by comparing the received authentication number with the transmitted authentication information.

A user enters an authentication procedure by inputting a communication terminal number with a user ID as a user ID and an authentication number as a password in a corresponding service area in a corresponding service area.

Specifically, this procedure is performed in an access point of a service area, which performs an authentication process for a user by referring to an authentication result performed by the WLAN service system.

The IP address assignment unit 180 allocates an IP address to the WLAN terminal when both authentication numbers match. That is, when authentication is successfully performed, that is, when both authentication numbers match with the user, an IP address is allocated to the WLAN terminal, and the access point 160 wirelessly assigns an IP address assigned by a DHCP server (not shown). It is to provide to the LAN terminal.

The billing server 140B generates billing information corresponding to the user information. When the user terminates the WLAN service, the corresponding IP address is returned and the billing raw information of the used customer is collected to generate billing data according to the product type of the WLAN operator.

In order to estimate the billing charges of various subscribers joining various mobile phone service networks, it is necessary to cooperate with the service providers for additional charge policies. The identification of the user is performed by the mobile phone, and the collection of these charges is also preferably performed through the mobile phone bill. In this case, the billing server 140B should also be linked to a carrier server (not shown).

Due to this configuration, the WLAN service user can use the WLAN service without additional equipment even in a service area of another WLAN service provider that he does not subscribe to.

A user of a WLAN is not dependent on a specific WLAN service provider in a specific WLAN service area, and can receive services in the entire WLAN service area with a WLAN terminal and a mobile phone.

The WLAN service provider can share the WLAN service area of other service providers so that they can reasonably establish a service area with other service providers according to market policies, and have the opportunity to use their services to potential customers and customers of other service providers. Can be provided.

Claims (10)

A method of providing a WLAN service to a user who does not subscribe to a corresponding WLAN service in a WLAN service providing system, Receiving, by the authentication number allocating unit of the WLAN service providing system, user information from a first terminal; Allocating, by the authentication number assignment unit, a first authentication number corresponding to the user information to the first terminal; Receiving, by the authentication unit of the WLAN service providing system, a second authentication number through a second terminal; Performing, by the authentication unit, an authentication procedure by comparing the first authentication number with the second authentication number; And And assigning an IP address to the second terminal when both authentication numbers coincide with the WLAN service providing system. The method of claim 1, wherein the first terminal is a mobile phone or a landline phone. The method of claim 1, further comprising the step of providing, by the wireless LAN service providing system, an automatic response service for receiving user information input to the first terminal. The method of claim 1, wherein the authentication information is transmitted to the first terminal through a short message. The WLAN service providing method of claim 1, further comprising generating, by the WLAN service providing system, charging information corresponding to the user information. In a system for providing a wireless LAN service to a user who does not subscribe to a wireless LAN service, An authentication number assignment unit for receiving user information from a first terminal, allocating a first authentication number corresponding to the user information, and transmitting the same to the first terminal; An authentication unit for receiving a second authentication number from a second terminal and performing an authentication procedure by comparing the first authentication number with the second authentication number; And And an IP address allocator for allocating an IP address to the second terminal when the two authentication numbers match. The system of claim 6, wherein the first terminal is a mobile phone or a landline phone. The WLAN service providing system of claim 6, further comprising an autoresponder service unit configured to provide an autoresponder service to the first terminal. The wireless LAN service providing system of claim 6, wherein the authentication information is transmitted to the first terminal through a short message. The wireless LAN service providing system of claim 6, further comprising a charging unit configured to generate charging information corresponding to the user information.

Images