KR101042114B1 - System and method for controlling internet service providing - Google Patents

Abstract

The present invention discloses a subscriber-specific dynamic service provision control system and its control method for Internet access.

Subscriber dynamic service providing control system of the present invention DHCP server for assigning an IP address to the subscriber terminal; By using the MAC address of the subscriber station, the IP address assigned to the subscriber station, and the subscriber information, the subscriber terminal applies the customer policy and additional service policy to be applied to the subscriber when the subscriber station accesses the Internet to control the subscriber's Internet access. A control server; An authentication server for authenticating the subscriber by using the subscriber information and transmitting information on the additional service of the authenticated subscriber to the control server; And a network access system for selectively allocating a user interface to the subscriber station under the control of the control server to support the access of the subscriber station to the internet. By dynamically applying the policy, it is possible to apply the appropriate policy to the arrears or termination of customers and subscribers using illegal multiple terminals, thereby enabling the proper communication service culture policy and proper customer management.

Description

Subscriber service provision control system and its control method {System and method for controlling internet service providing}

1 is a block diagram showing the configuration of a subscriber-specific service provision control system according to the present invention.

2 is a timing diagram for explaining a new authentication access system dynamic policy application function and a customer service policy application method according to an embodiment of the present invention.

FIG. 3 is a timing diagram illustrating an automatic authentication policy application and connection procedure in FIG. 2.

FIG. 4 is a timing diagram illustrating a manual authentication policy application and access procedure (S400) in FIG. 2.

Fig. 5 is a timing chart when terminating an internet connection.

The present invention relates to a service providing control system for each subscriber and a method of controlling the same. More specifically, when a subscriber accesses a network, a user is classified by using a MAC value of a subscriber station connected to the subscriber and a policy to be applied to the corresponding subscriber according to the classification. The present invention relates to a control method for providing dynamic services for each subscriber inquiring.

The high-speed Internet service technology consists of an indoor device consisting of a PC located in the subscriber's premises and a network access device such as a LAN card and a modem, a digital subscriber line access multiplexer (DSLAM) located at the end point of an apartment premises or service provider, a subscriber concentrator, It consists of an access router that is in charge of IP provision and service control, and an Internet relay router network.

A network access router that assigns IP addresses to subscriber terminals, controls subscriber services, and acts as an entry point to the Internet, allocates IP addresses to subscriber terminals through a Dynamic Host Configuration Protocol (DHCP) server and provides each subscriber's IP interface. It performs a function that enables the subscriber to receive the Internet service only after the network operator's service authentication is normally performed on the provided interface.

At this time, the Dynamic Host Configuration Protocol (DHCP) protocol is used to dynamically allocate IP between subscribers and the network, and in the network of the Internet service provider, a broadband server is provided through a DHCP server and authentication function and a control server that can control subscribers. Access technologies include a variety of technologies such as Asymmetric Digital Subscriber Line (ADSL), Very High Data Rate Digital Subscriber Line (VDSL), and Ethernet.

The reason why the high speed internet service provider dynamically assigns IP is to solve the resource shortage due to the limited IP address resources, and only assign IP addresses to subscribers who want to use the Internet without allocating fixed IP addresses to all subscribers. To do this. As a result, each subscriber is assigned one IP through dynamic IP allocation using the DHCP protocol to use the Internet service.

Existing IP series services (IP-xDSL, Ntopia-E, etc.) have performed DHCP server function in subscriber aggregation switch located in apartment premises. In new authentication access system, subscriber aggregation switch acts as DHCP relay router and DHCP server is backbone. Located in the net.

In such an environment, when a subscriber illegally requests multiple IPs using equipment such as an Ethernet hub in the home, the DHCP server allocates IPs only with subscriber MAC information, thereby allocating as many IPs as requested. Accordingly, there is a problem that the IP address shortage problem occurs, and the operator does not have a fair fee recovery for the subscriber.

In addition, if the existing VDSL service is lost and the line of the customer is not switched, there is a problem that the service cannot be controlled even if the subscriber is terminated.

Accordingly, an object of the present invention for solving the above problems is to dynamically control the network connection of the subscriber station using the dynamic service policy application function and the customer service policy information.

Dynamic service provision control system for each subscriber of the present invention for achieving the above object is a DHCP server for assigning an IP address to the subscriber terminal; By using the MAC address of the subscriber station, the IP address assigned to the subscriber station, and the subscriber information, the subscriber terminal applies the customer policy and additional service policy to be applied to the subscriber when the subscriber station accesses the Internet to control the subscriber's Internet access. A control server; An authentication server for authenticating the subscriber by using the subscriber information and transmitting information on the additional service of the authenticated subscriber to the control server; And a network access system for selectively allocating a user interface to the subscriber station under the control of the control server to support internet access of the subscriber station.

In accordance with an aspect of the present invention, there is provided a method of controlling a dynamic service provision for each subscriber, comprising: a first step of receiving IP allocation information including a MAC address of a subscriber station from a network access system; A second step of querying automatic / manual authentication information set for the MAC address; A third step of inquiring a customer policy and an additional service policy to be applied to the authenticated subscriber after performing authentication according to the set automatic / manual authentication information; And a fourth step of controlling the Internet access to the subscriber station by applying the inquired customer policy and the additional service policy to the network access system.

Hereinafter, with reference to the accompanying drawings will be described in detail an embodiment of the present invention.

1 is a block diagram showing the configuration of a subscriber-specific dynamic service provision control system according to the present invention.

The system of FIG. 1 includes a network access system (NAS) 10, a control server 20, an authentication server 30, a DHCP server 40, and an authentication agency server 50.

The network access system 10 is a device that supports the subscriber's Internet access, and allocates a user interface (Source IP i / f) for accessing the Internet to each subscriber station, redirects traffic of the subscriber station, and provides a service path. Provides functions such as selection and user interface release. In particular, the network access system 10 according to the present invention receives a service policy to be applied to the subscriber station from the control server 20 when a particular subscriber station accesses the Internet and selectively provides the Internet access service according to the policy. to provide.

The control server 20 uses a MAC address, IP address, authentication information, and pre-registered subscriber information of each subscriber station to apply a policy to the subscriber when a particular subscriber station accesses the Internet through the network access system 10. Check if there is any. If there is a policy to be applied to the corresponding subscriber as a result of the inquiry, the control server 20 applies the inquired policy to the network access system 10 to control the routing path of the network access system 10 with respect to the IP allocated by the corresponding subscriber. do. In this case, the policy value is applied, and in the case of the customer, the service is blocked, and in the case of the delinquent customer, the delinquent information is transmitted to the subscriber terminal to be displayed on the screen. do.

The control server 20 has a policy server 22, a policy DB 24, a session DB 26 and a customer service policy DB 28.

The policy server 22 converts the MAC address of the subscriber station into the ID and password of the subscriber, retrieves the information of the policy DB 24, the session DB 26 and the customer service policy DB 28, and applies them to each subscriber. Query the policy and apply it to the subscriber interface. The policy DB 24 stores control factors that can be applied to the network connection system 10 with respect to specific parameter values (additional services, policy values, etc.). The session DB 26 stores subscriber related information such as MAC information, subscriber ID, password, automatic / manual authentication information, and recent access time information of the subscriber station.

The customer service policy DB 28 stores information related to the provision of services such as subscriber delinquency information, IP allocation restriction information, loss of visitor information, and factor values of policy information for each service type.

The authentication server 30 performs authentication for the corresponding subscriber according to the authentication request from the control server 20, and transmits additional service information to be applied to the authenticated subscriber to the control server 20.

The DHCP server 40 assigns an IP address so that the subscriber terminal can access the Internet when the subscriber terminal boots up. That is, the subscriber station requests an IP address to the DHCP server 40 when booting, and the DHCP server 40 assigns an IP address to the corresponding subscriber station according to the request.

The authentication agency server 50 operates as a web server, and when a manual authentication policy is applied, when a service use request from a subscriber terminal is redirected and received through the network access system 10, a web window for authenticating the corresponding user is provided. The window is displayed on the screen of the subscriber station so that the subscriber enters his ID and password and sends it to himself. When the subscriber's ID and password are received, the authentication agent server 50 transfers the received ID and password to the authentication server 30 to perform authentication.

2 is a timing diagram illustrating a dynamic authentication policy application function and a customer service policy application method according to an embodiment of the present invention.

When the subscriber boots his terminal to access the Internet (S201), the aggregation switch connected to the subscriber terminal requests an IP address assignment to the DHCP server 40 according to the DHCP protocol (S202).

Accordingly, the DHCP server 40 allocates an appropriate IP address to the subscriber station through the network access system 10 (S203). In this case, the network access system 10 generates a user interface for accessing the Internet of the subscriber station (S204), and then transmits IP allocation information including the MAC address of the subscriber station to the control server 22 (S205). .

The control server 20 stores the MAC address and IP allocation information of the subscriber station received from the network access system 10 in the session DB 26 (S206). The control server 20 inquires whether the MAC address received through the automatic / manual authentication information stored in the session DB 26 is set to automatic authentication or manual authentication (S207).

The control server 20 performs the Internet access procedure after applying the automatic authentication policy immediately if the corresponding MAC address is set to automatic authentication (S300). However, if the corresponding MAC address is set to manual authentication, the control server 20 issues a command to the network access system 10 to perform an internet access procedure through manual authentication (S400).

FIG. 3 is a timing diagram for explaining an automatic authentication policy application and access procedure (S300) in FIG. 2.

The policy server 22 of the control server 20 converts the MAC address of the subscriber station that wants to access the Internet into the corresponding ID and password by using the MAC address, ID and password information stored in the session DB 26. The converted ID and password are transmitted to the authentication server 30 to request authentication for the corresponding subscriber (S301).

The authentication server 30 performs authentication for the corresponding subscriber using the received ID and password, and transfers additional service information of the corresponding subscriber to the policy server 22 when authentication is completed normally (S302).

Next, the policy server 22 inquires whether there is a customer policy to be applied to the corresponding customer in the customer service policy DB 28 and receives the related customer policy (S303, S304).

The policy server 22 checks whether there is a customer policy according to the inquiry result (S305), and if there is a customer policy to be applied, inquires the policy value for the corresponding customer policy from the policy DB 24 (S306). However, if there is no customer policy to be applied, the policy server 22 inquires the policy regarding the additional service received from the authentication server 30 in the policy DB 24 (S307 and 308).

The policy server 22 applies the customer policy value inquired in step S306 or the policy value about the supplementary service inquired in step S307 to the network access system 10 (S309).

In this case, the policy value is applied, and if the customer is not controlled, the service is controlled. If the customer is unpaid, the delinquent information is transmitted to the subscriber terminal to be displayed on the screen. To make it available.

As a result, the subscriber can access the Internet and use the Internet service according to the applied policy.

FIG. 4 is a timing diagram illustrating a manual authentication policy application and access procedure (S400) in FIG. 2.

When the service use request (S401) of the subscriber, the network access system 10 redirects traffic from the subscriber terminal to the authentication agent server 50 (S402).

The authentication agency server 50 receiving the service use request by changing the path provides a web window for manual authentication to the subscriber terminal (S403).

When the subscriber requests authentication by entering his ID and password in a web window, the corresponding ID and password information is transmitted to the authentication server 30 through the authentication agency server 50 to request authentication (S404).

The authentication server 30 performs authentication for the corresponding subscriber by using the received ID and password, and transfers additional service information of the corresponding subscriber to the policy server 22 when authentication is completed normally (S405).

Next, the policy server 22 inquires whether there is a customer policy to be applied to the corresponding customer in the customer service policy DB 28 and receives related customer policy information (S406 and S407).

The policy server 22 checks whether there is a customer policy according to the inquiry result (S408), and if there is a customer policy to be applied, inquires the policy value for the corresponding customer policy from the policy DB 24 (S409). However, if there is no customer policy to be applied, the policy server 22 inquires the policy regarding the additional service received from the authentication server 30 in the policy DB 24 and receives related policy information (S410 and 411).

The policy server 22 applies the customer policy value inquired in step S509 or the policy value about the additional service inquired in step S510 to the network access system 10 (S412).

In this case, the application of the policy value is the same as that of the automatic authentication policy in FIG. 3.

As a result, the subscriber can access the Internet and use the Internet service according to the applied policy.

5 is a timing diagram when terminating an Internet connection.

When the subscriber terminates the Internet connection, the subscriber station transmits a message informing the termination of the connection to the control server 20 (S501).

Upon receiving the access termination message, the control server 20 instructs the network access system 10 to release the user interface for the corresponding subscriber station (S502).

The network access system 10 blocks the Internet access by deleting the user interface for the subscriber terminal.

As described above, the subscriber's dynamic service provision control system of the present invention dynamically applies a customer policy and an additional service policy for each subscriber through a new authentication access system to the subscribers whose arrears or terminations and illegal multiple terminal users are used. Appropriate policy can be applied, which enables proper communication service culture policy and proper customer management.

Claims (8)

DHCP server for allocating IP address to subscriber station; When the subscriber station accesses the Internet, it checks the authentication policy corresponding to the MAC address of the subscriber station to control automatic authentication or manual authentication for the subscriber, and the subscriber-specific customer policy and additional service policy are applied to the authenticated subscriber. A control server controlling the internet access of the subscriber station; An authentication server for authenticating the subscriber by using the authentication information provided from the control server or the authentication information input by the subscriber according to the authentication policy, and transmitting additional service information about the authenticated subscriber to the control server; And And a network access system for selectively allocating a user interface to the subscriber station under the control of the control server to support the access of the subscriber station to the internet. The method of claim 1, wherein the control server When the MAC address of the subscriber station is set to an automatic authentication policy, after converting the MAC address of the subscriber station into a corresponding ID and password, and transmits the converted ID and password to the authentication server to request authentication for the user. Service provision control system for each subscriber, characterized in that. The method of claim 1, wherein the control server And if the MAC address of the subscriber station is set to a manual authentication policy, instructing the network access system to perform an internet access procedure through manual authentication. The method of claim 3, When applying the manual authentication policy for the subscriber station, receives the service providing request message for the subscriber station from the network access system, requests the ID and password of the user to the subscriber terminal received and then received the ID and password received The service provider control system for each subscriber, characterized by further comprising an authentication agent server for transmitting to the authentication server. The method of claim 1, wherein the control server A policy server controlling the Internet access of the subscriber station by inquiring a customer policy and an additional service policy to be applied to the subscriber when the subscriber station accesses the Internet; A policy DB for storing a control factor applicable to the network access system with respect to a specific factor value for the supplementary service and each subscriber policy; A session DB for storing subscriber related information including the MAC address, an ID and password corresponding to the MAC address, authentication information, and recent access time information; And Service provision for each subscriber, characterized in that the customer service policy DB for storing the delinquent information of the subscriber, IP allocation restriction information, information related to the provision of services, including information about the loss of customer information, and the value of the policy information for each service type Control system. A first step of receiving IP allocation information including a MAC address of a subscriber station from a network access system; Querying an authentication policy set for the MAC address; A third step of querying a customer policy and an additional service policy to be applied to the authenticated subscriber after performing automatic authentication or manual authentication according to the set authentication policy; And And a fourth step of controlling the Internet access to the subscriber station by applying the inquired customer policy and the additional service policy to the network access system. 7. The method of claim 6, wherein in the second step And if the MAC address is set to automatic authentication, converting the MAC address into a corresponding ID and password, and automatically performing authentication using the converted ID and password. 8. The method of claim 6 or 7, wherein in the second step If the MAC address is set to passive authentication, by displaying a window asking for the ID and password to the subscriber terminal to receive the ID and password of the subscriber, and performs authentication for each subscriber.

Images