KR20030049553A - Free packet service system in a mobile communication network - Google Patents

Abstract

PURPOSE: A method and a device of a push service for a no-charge packet in a mobile communication network are provided not to charge a push packet using a specific identifier, and to cut off a service for a malicious user caused upon the outflow of the identifier. CONSTITUTION: If a PPP(Point-to-Point Protocol) session initiation call is received to a PDSN(Packet Data Serving Node) from an MS(Mobile Station) on the basis of SIR(Session Initiation Request) information and by using an NAI(Network Access Identifier)(S301), the PDSN requests an RADIUS(Remote Authentication Dial-In User Services) server to authenticate the call(S302). The RADIUS server provides tunneling information including a tunneling protocol and an IP(Internet Protocol) address of a tunneling server to the PDSN(S303). The PDSN transmits a packet of the call to a corresponding IP address of the tunneling server(S304). The tunneling server checks whether a destination list includes the destination of the received packet(S305). If so, the tunneling server transmits the received packet to a PPG(Push Proxy Gateway)(S306), and if not, the tunneling server cuts off the received packet(S307). And the PPG and the MS set up PPP session and provide a push service(S308).

Description

Free packet service system in a mobile communication network

The present invention relates to a non-billing packet push service method in a mobile communication network, and more particularly, when a packet transmission such as an advertisement using a push service in a code division multiple access mobile communication network, Network Access Identifier (NAI) should be used and packets of mobile terminals using the specific NAI should be excluded from billing. The present invention relates to a method of applying a tunneling protocol and an access control technique to filter out all packets except packets destined for a specific server.

In general, a short message service (SMS) is used to allow a terminal that does not have a Point-to-Point Protocol (PPP) set up to receive a push service message to the terminal. When described with reference to:

1 is a diagram illustrating a system for explaining a conventional push service method and a message flow in the system.

First, a content provider server (CP) 11 pushes a push message to a mobile station (MS) 14 by using a push access protocol (PAP). Send to the Gateway (Push Proxy Gateway: PPG) 12. The CP 11 sends the push message to the PPG 12 together with a user-defined-identifier, for example 'username@sktelecom.com'. The PPG 12 has mapping information between the user-defined-recognizer and the temporary (IMSI) and possibly the IP address (S101).

When the PPG 12 receives the push message, it checks whether the corresponding MS 14 has a PPP session. If the MS 14 does not yet have a PPP session, the PPG 12 may use a short message to send a Session Initiation Request (SIR) message to a short message service center. Center: SMSC) 13 to send (S102).

The SMSC 13 sends the received SIR short message to the corresponding MS 14 (S103). When the corresponding MS 14 receives the SIR short message, the MS 14 activates a Session Initiation Application (SIA) (S104).

The SIA of the MS 14 creates a push session with the PPG 12 (S105). The PPG 12 transmits a push message to the MS 14 using the created push session (S106), and the MS 14 sends an application defined in a push message header to process the push message. It performs (S107).

However, there is no separate method for billing a packet used by a subscriber in the conventional push service method as described above, and even if a billing method is introduced for a packet using a specific recognizer, the leak of the specific recognizer is introduced. When a user with a malicious purpose distributes the malicious user packet, the malicious user packet should be charged separately from the non-billing packet, but there is a problem that cannot be solved.

The present invention was created to solve the above problems, and its purpose is to charge the push packet using a specific identifier, but to implement a service blocking method for a malicious user generated when the identifier is leaked. It is an object of the present invention to provide a billing packet push service method in a mobile communication network.

1 is a diagram illustrating a system for explaining a conventional push service method and a message flow in the system;

2 is a block diagram of a non-billing packet push service apparatus in a mobile communication network according to an embodiment of the present invention;

3 is a flowchart illustrating an uncharged packet push service method in a mobile communication network according to an embodiment of the present invention.

※ Explanation of code for main part of drawing

20: mobile terminal 210: packet data switching node

220: billing / authentication server 230: tunneling server

240: push proxy gateway 250: short message service center

In order to achieve the above object, a non-billing packet push service method in a mobile communication network according to the present invention is a mobile communication network that provides a packet push service to a mobile terminal in which a point-to-point protocol (PPP) session is not set up. A packet push service method according to claim 1, further comprising: receiving a specific network connection identifier from the connected mobile terminal when connecting to the communication network for the purpose of setting up a PPP session between the mobile terminal and a specific destination in charge of the push service. Determining the first step; A second step of, upon receipt of the network connection identifier, transmitting a packet of the identifier using call to a specific tunneling server; A third step of confirming, at the tunneling server, whether a destination of the received packet is included in a preset destination list; And a fourth step of transmitting the received packet to a corresponding destination if the check result is found, performing a non-billing packet push service, and blocking the packet if not in the list.

For example, the network connection identifier may be preset in the mobile terminal or in another example, provided to the mobile terminal from the mobile communication network, and provided together with the information when providing information for initiating the PPP session. In this case, the provision is characterized in that made by a short message.

In order to achieve the above object, a non-billing packet push service device in a mobile communication network according to the present invention is a mobile communication network for providing a packet push service to a mobile terminal for which a point-to-point protocol (PPP) session is not set up. In the packet push service apparatus of the present invention, when the call is in charge of packet exchange and a call using a specific network connection identifier is received when a call for establishing a PPP session with a specific destination in charge of the push service is received from the connected mobile terminal, Packet switching means for transmitting the packet to specific tunneling means; Authentication / billing means for performing authentication upon request for authentication of the call from the packet-switching means and providing the packet-switching means with a tunneling protocol and a corresponding address for communication with the specific tunneling means as a result of the authentication; And checking whether the destination of the received packet is included in a preset destination list upon reception of the packet transmitted from the packet exchange means, and based on the result, whether to block the packet and transmit it to the corresponding destination. And the tunneling means for determining.

The specific destination is a server in charge of the push service, and the tunneling means requests the packet switching means to charge the corresponding packet when determining the transmission.

In the method and apparatus of the present invention configured as described above, a separate network access identifier (NAI) is common to all valid subscribers for the purpose of non-billing purposes, and to prevent problems that may occur when it leaks. For billing NAI, the Inter Working Function (IWF) and Packet Data Serving Node (PDSN) (or a specific network access server) use tunneling protocols (eg PPTP or L2TP) to tunnel. The packet is transmitted only to the server, and the corresponding tunneling server drops all packet services if the destination address is not specific hosts.

Accordingly, when attempting to transmit a packet to be charged to the terminal, such as advertising to the terminal that is not PPP is set from the network, the short message center (SMSC) to the terminal via the switch (MSC) as described in Figure 1 It sends a message to the terminal to set up PPP, which allows the terminal to use a non-billing NAI during its set up.

For example, the non-billing NAI may be set and stored in a subscriber terminal in advance. Alternatively, the NAI may be included in the short message when the short message is transmitted for the PPP and provided to the corresponding terminal.

Hereinafter, a method and apparatus for an uncharged packet push service in a mobile communication network according to a preferred embodiment of the present invention will be described in detail with reference to the accompanying drawings.

FIG. 2 is a block diagram of a non-billing packet push service apparatus in a mobile communication network according to an embodiment of the present invention. As shown in FIG. Packet data serving node as a packet switching means for transmitting a packet of the call to a specific tunneling server 230 when the call is a call using a specific network access identifier (NAI). Node: PDSN) 210; When the authentication request for the call from the PDSN 210 is performed, authentication and / or charge initiation according to the request is performed, and as a result of the authentication, a tunneling protocol for communicating with the tunneling server 230 to the PDSN 210. A Tunneling Protocol (eg, PPTP or L2TP) and an authentication / billing server (RADIUS) 220 that provides an IP address as a corresponding address of the tunneling server 230; Upon reception of the packet transmitted from the PDSN 210, it is checked whether a destination of the received packet is included in a preset destination list, and based on the result, whether the packet is blocked and transmitted to the corresponding destination is determined. Determining the tunneling server 230; One of the destinations performing the same configuration and function as the Push Proxy Gateway (PPG) 12 of FIG. 1, but performing data communication including the reception of the transport packet from the tunneling server 230. An example push proxy gateway (PPG) 240; SMSC 250 performing the same configuration and function as the Short Message Service Center (SMSC) 13 of FIG. 1; And an IP network 260 for internet protocol based communication of the PDSN 210, the RADIUS 220, the tunneling server 230, and the PPG 240.

In the configuration of FIG. 2 according to an embodiment of the present invention, the PDSN 210 is not limited to the configuration, and among the access nodes for packets of the mobile communication network, such as the PDSN 210, the mobile terminal 20 It is possible if it is a structure (for example, IWF, etc.) which can be controlled about the transmission path of the packet which comes up from. In addition, the PPG 240 is not limited thereto, and the PPG 240 may be configured in the destination list previously set and registered in the tunneling server 230.

3 is a flowchart illustrating a non-billing packet push service method in a mobile communication network according to an embodiment of the present invention, and is described in parallel with the operation of the apparatus because it is applied to the apparatus of FIG. 2.

When the push service is commercialized, if the customer wants to transmit a packet that the customer does not want, such as an advertisement, to the terminal 20 for which the PPP session is not set up, it should not be charged. Accordingly, the terminal 20 (see step S103, S104 in FIG. 1) that receives a Session Initiation Request (SIP) message for push, such as a push application protocol (PAP) service, may be selected from a specific server, for example, the PPG ( When connecting to the advertisement of 240), the PPP is set up using a non-billing-only NAI. In this case, the NAI is preset in the mobile terminal 20 as an example, or in another example, the short message transmitted from the SMSC 250 to the mobile terminal 20 when the step S103 of FIG. 1 is performed. Included with the SIR information.

It will be described in detail with respect to the method according to the present invention after the above description.

If the PPP session initiation call from the mobile terminal 20 is received by the PDSN 210 based on the SIR information and via the radio section and the corresponding base station / base international controller (not shown) using the NAI (301), The PDSN 210 requests the RADIUS server 220 to authenticate the call using the NAI (S302).

The RADIUS server 220 provides the PDSN 210 with tunneling information including a tunneling protocol and an IP address of the tunneling server 230 as a result of authentication (S303).

Subsequently, the PDSN 210 transmits packets of all calls using the non-billing NAI (in this embodiment, the PPP session initiation call of step S301) to the corresponding IP address of the tunneling server 230 (S304). The tunneling server 230 checks whether the destination of the received packet is included in the destination list pre-registered to the user (S305), and if the check result is in the list, transmits the received packet to the corresponding destination. (S306), and if not in the list to block the packet (S307), in this embodiment, the destination is the PPG 240 and if the destination list is limited to the address of the PPG 240 listed If the destination of the received packet is the same as the address of the registered PPG 240, the received packet is transmitted to the PPG 240 (S306). The ever blocking kit (S307).

Lastly, the RADIUS server 220 charges the packet of the call using the NAI, and in step S306, the corresponding packet from the tunneling server 230 to the PPG 240 (the packet is the terminal). And PPP session start with the PPG), the PPG 240 and the terminal 20 negotiates to set up the PPP session and perform a push service (S308).

In the step S305, the tunneling server 230 has a list of IP addresses that can be used as a destination and a list of IP addresses that cannot be used as a destination and the list of destinations previously set and listed therein are used for transmission or blocking of received packets. If this method is used to perform access control, the packet service using the non-billable NAI is a push server for the purpose of advertisement, that is, even if the non-billable NAI is leaked to the outside. In an embodiment, any service other than the PPG 240 may be blocked, which is an effective security measure.

In addition, in the method of the present invention including the step S305, when a customer who does not subscribe to a service wants to subscribe to a service, the packet directed by the tunneling server 230 to a specific customer helpdesk server in step S305 Allow all, discard all remaining packets, and sign up by assigning NAI and password which will be charged when you subscribe online using credit card number and expiration date. It can be used for the purpose of automating the service with NAI.

As described in detail above, according to the method and apparatus for a non-billing packet push service in a mobile communication network according to the present invention, it is possible to charge a push packet using a specific identifier and to generate a malicious user when the identifier is leaked. By blocking the service for the service, the effect of implementing the non-billing push service is created.

Claims (7)

A packet push service method in a mobile communication network providing a packet push service to a mobile terminal for which a point-to-point protocol (PPP) session is not set up, A first step of determining whether a specific network access identifier is received from the connected mobile terminal when connecting to the communication network for the purpose of setting up a PPP session between the mobile terminal and the specific destination in charge of the push service; A second step of, upon receipt of the network connection identifier, transmitting a packet of the identifier using call to a specific tunneling server; A third step of confirming, at the tunneling server, whether a destination of the received packet is included in a preset destination list; And And as a result of the checking, transmitting the received packet to the corresponding destination if it is in the list to perform an unpaid packet push service, and if not in the list, blocking the packet. Billing packet push service method. The method of claim 1, And the network connection identifier is preset in the mobile terminal. The method of claim 1, The network connection identifier is provided to the mobile terminal from the mobile communication network, the billing packet push service method in a mobile communication network, characterized in that provided with the information when providing the information for initiating the PPP session. The method of claim 3, wherein The billing packet push service method in a mobile communication network, characterized in that the provision is made by a short message. A packet push service apparatus of a mobile communication network for providing a packet push service to a mobile terminal having no point-to-point protocol (PPP) session set up, If the call is a call using a specific network access identifier when receiving a call for establishing a PPP session with a specific destination in charge of the push service from the connected mobile terminal, the packet of the call is transmitted to a specific tunneling means. Packet switching means; Authentication / billing means for performing authentication upon request for authentication of the call from the packet-switching means and providing the packet-switching means with a tunneling protocol and a corresponding address for communication with the tunneling means as a result of the authentication; And Upon reception of the packet transmitted from the packet exchange means, it is checked whether a destination of the received packet is included in a preset destination list, and based on the result, the blocking of the packet and the determination of whether to transmit the packet to the corresponding destination are determined. The billing packet push service apparatus in a mobile communication network, characterized in that configured to include the tunneling means. The method of claim 5, The billing packet push service device in a mobile communication network, characterized in that the specific destination is a server in charge of the push service. The method of claim 5, And the tunneling means requests the packet switching means to charge the packet when the transmission is determined.