KR20090103410A - WiBro System and method of connecting network differentially for the subscriber - Google Patents

Abstract

PURPOSE: A portable internet system for network classifying access per a subscriber and a method thereof are provided to differentially apply an authentication policy, a security policy and a charging policy to each subscriber and a business subscriber of a portable internet, thereby simultaneously accommodating a subscriber and a business subscriber in the portable internet system. CONSTITUTION: A portable internet system includes a subscriber database(230), a base station, and a base station controller. The subscriber database differentially classifies a service policy per a subscriber according to identification information of a portable terminal and manages it. The base station provides a wireless matching function to a portable terminal. The base station controller connects to a corresponding access network by applying a service policy corresponding to a subscriber after distinguishing subscribers corresponding to identification information.

Description

Portable Internet system and its method for network-specific access by subscribers {WiBro System and method of connecting network differentially for the subscriber}

The present invention relates to a mobile Internet system and a method for network access for each subscriber, and more particularly, to provide a differential service for each subscriber by using identification information (for example, MAC address) of the subscriber's mobile terminal in the mobile Internet service. The present invention relates to a mobile Internet system and a method for network access for each subscriber for accommodating general subscribers and enterprise subscribers simultaneously.

In general, the WiBro system provides a service type that is divided into outdoor use and indoor use. In other words, the portable Internet system provides a form of 'outdoor portable Internet service' for unspecified general subscribers outdoors and a form of 'indoor portable Internet service' for specific corporate subscribers indoors.

1 is a block diagram of a conventional portable Internet system.

As shown in FIG. 1, the conventional portable Internet system simultaneously provides an outdoor portable Internet service for a general subscriber and an indoor portable Internet service for a corporate subscriber.

First, in an outdoor portable Internet service for a general subscriber, a base station (RAS) 110 and a base station controller (ACR) 120 are used. The base station 110 performs a radio matching function between the mobile terminal and the base station controller 120, and the base station controller 120 manages mobility of the general subscriber between the base station 110 and the network.

In addition, in an indoor mobile Internet service for a corporate subscriber, an in-building base station (in building RAS) 130 and a micro base station controller (Pico-ACR) 140 are used. The inbuilding base station 130 performs a radio matching function between the mobile terminal and the micro base station controller 140, and the micro base station controller 140 manages the mobility of the enterprise subscriber between the in-building base station 130 and the network.

However, since the outdoor portable Internet service is implemented for an unspecified general subscriber in the outdoors, it is difficult to apply a security policy and authentication policy for a specific corporate subscriber differently for each corporate subscriber. In addition, the outdoor portable Internet service has the disadvantage that the performance may occur indoors, such as inside the building.

To overcome the shortcomings of outdoor portable Internet services, indoor portable Internet services have been implemented for specific corporate subscribers. In other words, indoor mobile Internet service can overcome the performance degradation problem that may occur indoors, such as inside a building, and apply different security policies and authentication policies for each company subscriber.

However, indoor Internet service is implemented for specific corporate subscribers indoors, so it is difficult to accommodate unspecified general subscribers. For example, in a building in which both the outdoor portable Internet service and the indoor portable Internet service are provided as shown in FIG. 1, it is difficult for a general subscriber subscribed to the outdoor portable Internet service to use the outdoor portable Internet service due to the deterioration of wireless performance in the building. In addition, indoor mobile Internet services cannot be used due to security and authentication policies.

Therefore, in the conventional portable Internet service as shown in FIG. 1, the mobile Internet service for the general subscriber and the outdoor portable Internet technology for the corporate subscriber are divided into the mobile Internet service for the indoor subscriber and the corporate subscriber is outdoors. In the mobile Internet service is limited, there is a limit that can not accommodate the general subscriber and corporate subscriber at the same time.

Currently, mobile Internet operators have some limitations in terms of investment cost or investment efficiency in extending coverage to nationwide networks like mobile communication networks due to the characteristics of mobile Internet. Accordingly, mobile Internet service providers tend to provide services through indoor mobile Internet services rather than expanding coverage and securing subscribers through outdoor mobile Internet services.

As described above, in the case of providing the indoor mobile Internet service, the mobile internet service provider needs to provide differential services for each subscriber and the corporate subscriber as described above, but simultaneously accommodates the general subscriber and the corporate subscriber indoors. I can't.

Therefore, the mobile Internet service provider is required to provide a differential service for each subscriber by simultaneously accepting a general subscriber and a corporate subscriber in an indoor portable internet service or an outdoor portable internet service.

Therefore, the prior art as described above has a problem that it is not possible to provide a differential service for each subscriber by accommodating a general subscriber and a corporate subscriber at the same time in the mobile Internet service, it is a problem of the present invention to solve this problem.

Accordingly, the present invention provides a differential service for each subscriber by using identification information (for example, MAC address) of the subscriber's mobile terminal in the mobile Internet service, thereby providing network access for each subscriber for accommodating general subscribers and corporate subscribers at the same time. It is an object of the present invention to provide a portable Internet system and a method thereof.

The objects of the present invention are not limited to the above-mentioned objects, and other objects and advantages of the present invention which are not mentioned above can be understood by the following description, and will be more clearly understood by the embodiments of the present invention. Also, it will be readily appreciated that the objects and advantages of the present invention may be realized by the means and combinations thereof indicated in the claims.

The present invention for achieving the above object, in the mobile Internet system, subscriber DB for classifying and managing the service policy to be applied to the subscriber according to the identification information of the mobile terminal; A base station for providing a wireless matching function to the mobile terminal; And a base station for querying the identification information of the mobile terminal connected through the base station in the subscriber DB to distinguish the subscriber corresponding to the identification information, and then accessing the access network by applying a service policy corresponding to the subscriber. It includes a controller.

In addition, the present invention provides a method for accessing a network in a portable Internet system, comprising: classifying and managing a service policy according to identification information of a mobile terminal as a subscriber to be applied differently; Confirming identification information of the portable terminal when the portable terminal is connected; Identifying a service policy corresponding to the subscriber after distinguishing the subscriber corresponding to the identification information; And connecting the mobile terminal to the corresponding access network by applying the service policy.

The present invention as described above, by applying the authentication policy, security policy, billing policy, and the like to each of the general subscriber and the corporate subscriber of the mobile Internet, the effect that can be accommodated at the same time the general subscriber and corporate subscriber in the portable Internet system There is.

In addition, the present invention provides an enterprise subscriber with specialized services such as security policy, authentication policy, charging policy, etc. that meet the requirements of the enterprise, and at the same time has an effect of providing a service according to a service grade assigned to the general subscriber.

1 is a block diagram of a conventional portable Internet system,

2 is a block diagram of a portable Internet system for network-specific access for each subscriber according to the present invention;

3 is a diagram illustrating an embodiment of a compact base station controller according to the present invention;

4 is a flowchart illustrating an embodiment of a method for network access for each subscriber according to the present invention.

* Explanation of symbols for the main parts of the drawings

210: inbuilding base station

220: ultra small base station controller

230: Subscriber DB

The above objects, features, and advantages will become more apparent from the detailed description given hereinafter with reference to the accompanying drawings, and accordingly, those skilled in the art to which the present invention pertains may share the technical idea of the present invention. It will be easy to implement. In addition, in describing the present invention, when it is determined that the detailed description of the known technology related to the present invention may unnecessarily obscure the gist of the present invention, the detailed description thereof will be omitted. Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings.

Prior to explaining the present invention, in the present invention, the subscriber is a user who can use the portable Internet, and is classified into a general subscriber and a corporate subscriber according to a predetermined network access environment. Depending on the service policy requirements, they can be classified into more detailed classes.

Here, the general subscriber is connected to the public network through a mobile internet system using his mobile terminal (for example, a laptop, PDA, PMP, mobile phone, smart phone, etc.), and the corporate subscriber is connected to the public network Access to a private network through a portable Internet system.

Meanwhile, in the present invention, when an in-building portable internet environment is established, it will be described for subscribers who are active in a building (that is, indoor portable internet environment).

2 is a block diagram of a portable Internet system for network access for each subscriber according to the present invention.

As shown in FIG. 2, a portable Internet system (hereinafter, referred to as a "mobile Internet system") for network-specific access for each subscriber according to the present invention simultaneously accommodates a general subscriber and a corporate subscriber in a building, thereby allowing a mobile terminal for each subscriber. Through the control network (ie, general subscribers 'public network', corporate subscriber 'private network') can be accessed.

To this end, the portable Internet system includes an in-building radio access station (210), a micro base station controller (Pico Access Control Router) 220, and a subscriber DB (230).

The inbuilding base station 210 performs a radio matching function between the subscriber's mobile terminal and the micro base station controller 220. In this case, the in-building base station 210 is assigned a frequency so that the frequencies FA1, FA2, FA3 for the portable Internet service do not overlap with each other.

The micro base station controller 220 manages the subscriber and the in-building base station 210, and is responsible for the mobility management function, packet processing function, routing function, etc. of the mobile terminal between the in-building base station 210 and the network.

In particular, the miniature base station controller 220 is able to simultaneously match the network for each of the public or private network can accommodate the general subscriber and the corporate subscriber in the building at the same time.

To this end, the micro base station controller 220 is linked to the subscriber DB 230 that manages subscriber information for each subscriber, 'mobile terminal identification information' [for example, the MAC address (Media Access) when the portable Internet connection request of the mobile terminal Control Address)] is searched for subscriber information to distinguish whether it is a general subscriber or an enterprise subscriber. Here, the subscriber DB 230 manages subscriber information for each subscriber having a field for identifying whether the subscriber is a general subscriber or an enterprise subscriber.

After distinguishing subscribers as described above, the micro base station controller 220 provides different functions for each subscriber with an authentication policy, a security policy, a charging policy, an IP address assignment policy, etc. (see FIGS. 3 and 4 to be described later).

3 is a block diagram of an embodiment of a micro base station controller 220 according to the present invention.

As shown in FIG. 3, the micro base station controller 220 according to the present invention includes a packet processing unit 221, a public network IP address allocator 222, a private network IP address allocator 223, and a switching unit ( switch, 224).

The packet processing unit 221 identifies a subscriber according to the identification information of the portable terminal when the portable terminal accesses the portable terminal through the in-building base station 210, and then applies a different policy for each subscriber to assign security / IP address / It performs functions such as authentication and billing. At this time, the packet processing unit 221 processes the mobile Internet control and the packet of the data signal.

To this end, the packet processing unit 221 includes a packet filtering unit 221a, a packet classification unit 221b, a packet counting unit 221c, a packet buffering unit 221d, DHCP (Dynamic Host Configuration Protocol) interworking unit 221e and AAA (Authentication Authorization Accounting) interworking unit 221f.

First, the packet filtering unit 221a is a firewall, and applies a security function by checking each packet type and content. The packet filtering unit 221a performs a packet attack function blocking or a content filtering function.

In particular, the packet filtering unit 221a has a different security function applied to each subscriber. In other words, the packet filtering unit 221a is applied to the security functions (for example, illegal / obscene site access restrictions, spam mail restrictions, etc.) required by the mobile Internet service provider in the case of the general subscriber, the company in the case of the corporate subscriber Security functions (eg, messenger restrictions, attachments restrictions when sending e-mails, etc.) required by the service shall be differentially applied.

The packet classifier 221b analyzes the types of packets that have passed through the packet filtering unit 221a, separates the packets, and forwards the corresponding packets. Here, the packet may be separated by type, such as a general data packet, an address resolution protocol (ARP) packet (or a control packet), a DHCP packet, an AAA packet, or the like.

Specifically, the packet classifier 221b transmits the general data packet to the packet counting unit 221c, and the ARP packet (or control packet) is transmitted to the control device of the micro base station controller 220 (not shown in FIG. 2). do.

In addition, the packet classification unit 221b interworks with the DHCP interworking unit 221e to deliver a DHCP packet to one of the public network IP address allocator 222 or the private network IP address allocator 223, thereby providing a differential IP address for each subscriber. Is assigned. That is, the public network IP address is assigned to the general subscriber and the private network IP address is assigned to the corporate subscriber.

In addition, the packet classification unit 221b may be assigned an IP address for each subscriber by interworking with the DHCP interworking unit 221e and forwarding a DHCP packet to an external public or private network DHCP server (not shown in FIG. 2). . At this time, the micro base station controller 220 implements a DHCP relay function to perform a DHCP packet relay function between the DHCP client of the subscriber's portable terminal and the DHCP server of the public or private network.

As such, the method of allocating an IP address for each subscriber through DHCP may vary according to the network configuration policy of the mobile Internet operator. However, in the present invention, as shown in FIG. 222 or the private network IP address allocator 223 will be described as a case of assigning an IP address for each subscriber.

In addition, the packet classification unit 221b cooperates with the AAA interworking unit 221f to transmit the AAA packet to the external AAA server 300 to perform differential authentication procedures for each subscriber. That is, in the case of a general subscriber, authentication is performed according to the PKMv2 authentication procedure by the mobile Internet service provider, and in the case of an enterprise subscriber, authentication is performed according to different authentication procedures (for example, no authentication procedure) for each company.

The packet counting unit 221c counts the number of input / output packets in order to collect charging information according to a charging policy (for example, a subscription or a pay-as-you-go). In particular, in the case of a flat rate, the mobile internet service provider measures the subscriber's packet usage for statistics and band control.

The packet counting unit 221c collects accurate charging information for each subscriber, including a mechanism for preventing duplicate charging. That is, in the case of the general subscriber, the pay-as-you-go information is collected and reported to the AAA server 300 by using the count for the 5-tuple of packets allocated for each service flow by the mobile Internet service provider. In the case of a corporate subscriber, a different billing system is applied for each company (for example, an intranet within a company is used as a service area.

The packet buffering unit 221d may improve the quality of mobile Internet service by buffering data during handover and transferring the buffered data after the handover, in order to prevent packet loss occurring during handover due to subscriber movement. Make sure

The public network IP address allocator 222 and the private network IP address allocator 223 allocate IP addresses according to the Dynamic Host Configuration Protocol (DHCP).

That is, the public network IP address allocator 222 manages public network IP addresses assigned to general subscribers, and requests for lease (discovery) / lease (offer) / lease (request) / lease of dynamic host configuration protocol (DHCP). Acknowledge process assigns / updates / retrieves public network IP address to subscribers.

Similarly, the private network IP address allocator 223 manages private network IP addresses assigned to corporate subscribers, and provides lease request / offer / request / lease of dynamic host configuration protocol (DHCP). Acknowledge process assigns / updates / retrieves private network IP address to corporate subscribers.

The switching unit 224 is a layer 3 switch (Layer3 switch or L3 switch), performs a switching and routing function for the packet transmitted from the packet processing unit 221, the public network IP address allocator 222 or private network IP address allocation The packet is routed based on the 'IP address of the mobile terminal' allocated by the unit 223.

As described above, the 'IP address of the mobile terminal' is the public network IP by the public network IP address allocator 222 according to the identification information (for example, MAC address) of the mobile terminal checked when the mobile terminal is connected. Since an address is assigned and a corporate subscriber is assigned a private network IP address by the private network IP address allocator 223, this may be referred to as a “sender IP address”.

In other words, the switching unit 224 sets the destination of the packet to the traffic generated by the mobile terminal through the IP address-based routing scheme.

Specifically, when the switching unit 224 is the IP address of the public network IP address allocator 222, it determines that the traffic of the general subscriber and forwards the packet to the public network routing port, so that the public network Internet service can be provided to the general subscriber. do. In addition, the switching unit 224 determines that the IP address of the private network IP address allocator 223 is the traffic of the corporate subscriber and forwards the packet to the private network routing port, thereby providing the private network Internet service to the corporate subscriber. .

4 is a flowchart illustrating an embodiment of a method for network access for each subscriber according to the present invention.

As shown in Fig. 4, the subscriber's portable terminal accesses the portable Internet system of the present invention according to a normal network connection procedure (S401).

That is, when the subscriber attempts to access the portable Internet in a building providing the portable Internet service, the portable terminal attempts to match the portable Internet service through the in-building base station 210.

To this end, the mobile terminal attempts to connect to the in-building base station 210. First, the mobile terminal attempts to connect to the Orthogonal Frequency Division Multiple Access / Time Division Duplexing (OFDMA / TDD) frame (ie, time synchronization, frequency synchronization, frame synchronization). To acquire and recognize the downlink transmitted from the in-building base station 210, and obtains by requesting the uplink to the in-building base station 210. In this case, the mobile terminal enables the in-building base station 210 to determine its exact location through a ranging process.

As such, the mobile terminal and the in-building base station 210 can secure communication channels in both directions (that is, up and down) through up / down link acquisition and ranging processes, thereby enabling communication for normal signal processing.

Thereafter, when the mobile terminal transmits its identification information (ie, MAC address) to the in-building base station 210 for subscriber authentication and registration, the in-building base station 210 transmits the identification information of the mobile terminal to the small base station controller 220. Re-deliver.

Here, the micro base station controller 220 analyzes the identification information of the mobile terminal according to the inquiry result of the subscriber DB 230, and determines whether it is a general subscriber for public network access or a corporate subscriber for private network access (S402).

According to the above determination, the micro base station controller 220 implements the portable Internet service in the building, and thus, the mobile terminal authentication process, IP address allocation process, routing destination setting process, billing policy, security policy, etc. for each general subscriber or enterprise subscriber Provide differently.

Specifically, a case where the identification information of the mobile terminal corresponds to a general subscriber will be described.

First, the micro base station controller 220 authenticates the mobile terminal by applying a typical PKMv2 authentication scheme or the like to meet the public network requirements (S403).

When the authentication process of the portable terminal for accessing the public network is normally completed, the micro base station controller 220 allocates one of the public network IP addresses to the portable terminal through the DHCP protocol (S404). Thereafter, the mobile terminal, the in-building base station 210 and the micro base station controller 220 transmit and receive 'REG-REQ' and 'REG-RSP' signals, which are portable Internet registration signals, to complete the registration of the portable Internet service.

When the registration process of the mobile terminal for the mobile Internet service is normally completed, the in-building base station 210 and the micro base station controller 220 request the connection setting of the mobile terminal for data communication. A connector for data communication is allocated to the mobile terminal through DSA-REQ ',' DSA-RSP ', and' DSA-ACK '(S405).

After that, the mobile terminal completes the preparation process for the mobile Internet service through the public network authentication process, the public network IP address allocation process, and the connection establishment process.Then, the mobile terminal uses a data communication connector for wireless data communication and public network IP for network connection. Using the mobile Internet using the address (S406).

As described above, the general subscriber portable terminal is assigned a public network IP address. At this time, the public IP address is always included in the destination IP address of the packet generated by the general subscriber portable terminal.

Therefore, when the switching unit 224 of the micro base station controller 220 looks up the source IP address of the input packet and contains the public network IP address as the source address, the corresponding data traffic is carried by the general subscriber. It determines that the packet is generated by the terminal and forms a route to the public network matching port through a routing technique based on the source IP address.

On the other hand, the case where the identification information of the mobile terminal corresponds to the corporate subscriber will be described.

First, the micro base station controller 220 authenticates the mobile terminal by applying a different authentication scheme for each non-authentication or company according to the private network requirements (S407).

When the authentication process of the mobile terminal for the private network is normally completed, the micro base station controller 220 assigns one of the private network IP addresses to the mobile terminal through the DHCP protocol (S408). Thereafter, the mobile terminal, the in-building base station 210 and the micro base station controller 220 transmit and receive 'REG-REQ' and 'REG-RSP' signals, which are portable Internet registration signals, to complete the registration of the portable Internet service.

When the registration process of the mobile terminal for the mobile Internet service is normally completed, the in-building base station 210 and the micro base station controller 220 request the connection setting of the mobile terminal for data communication. A connector for data communication is allocated to the mobile terminal through DSA-REQ ',' DSA-RSP ', and' DSA-ACK '(S409).

After that, the mobile terminal completes the preparation process for the mobile Internet service through the process of private network authentication, IP address allocation, and connection setup.Then, the connector is used for wireless data communication and the private network IP address is used for network access. Use the mobile Internet using (S410).

As described above, the enterprise subscriber portable terminal is assigned a private network IP address. At this time, the destination IP address of the packet generated by the enterprise subscriber portable terminal always includes the private network IP address.

Therefore, when the switching unit 224 of the micro base station controller 220 looks up the source IP address of the input packet and contains the private network IP address as the source address, the corresponding data traffic is generated by the mobile subscriber terminal. It determines the packet and forms a route to the private network matching port through the routing method based on the source IP address.

Thereafter, the general subscriber can use the Internet service through the public network through the port physically separated by the small base station controller 220, the enterprise subscriber through the port physically separated by the small base station controller 220 Internet services will be available via private networks.

As described above, the present invention may simultaneously or selectively accommodate the general subscriber and the corporate subscriber according to the service policy and the needs of the mobile Internet service provider. That is, the present invention can be applied to the base station controller for outdoor mobile Internet service as well as to the micro base station controller for indoor mobile Internet service as described above. Since this can be easily understood by those skilled in the art, detailed description will be omitted.

On the other hand, the method of the present invention as described above can be written in a computer program. And the code and code segments constituting the program can be easily inferred by a computer programmer in the art. In addition, the written program is stored in a computer-readable recording medium (information storage medium), and read and executed by a computer to implement the method of the present invention. The recording medium may include any type of computer readable recording medium.

The present invention described above is capable of various substitutions, modifications, and changes without departing from the technical spirit of the present invention for those skilled in the art to which the present invention pertains. It is not limited by the drawings.

Claims (14)

In a mobile internet system, A subscriber DB for classifying and managing the service policy according to the identification information of the mobile terminal as a subscriber to be applied differently; A base station for providing a wireless matching function to the mobile terminal; And A base station controller for accessing the identification information of the mobile terminal connected through the base station from the subscriber DB to distinguish the subscriber corresponding to the identification information, and then accessing the access network by applying a service policy corresponding to the subscriber; Portable Internet system for network access for each subscriber including a. The method of claim 1, In the service policy, Portable Internet system for network access for each subscriber, characterized in that the authentication policy, security policy, IP address assignment policy, billing policy, routing policy. The method of claim 2, The subscriber, A portable Internet system for network-specific access for each subscriber, characterized in that one of the general subscriber or corporate subscriber. The method of claim 3, wherein The base station controller, When the subscriber is a general subscriber, the portable Internet system for network-specific access for each subscriber, characterized in that the routing to the public network by assigning a destination-based public network IP address according to the identification information. The method of claim 3, wherein The base station controller, When the subscriber is a corporate subscriber, the mobile Internet system for subscriber-specific network access, characterized in that the routing based on the identification information to the private network IP address based on the identification information and routed to the private network. The method according to claim 4 or 5, The identification information, A portable Internet system for network-specific access for each subscriber, characterized in that the medium access control (MAC) address of the portable terminal. The method of claim 6, The base station is an in-building RAS for an indoor mobile Internet service, and the base station controller is a micro base station controller (Pico-ACR) for an indoor mobile internet service. Portable Internet System. In the network connection method in a portable Internet system, Classifying and managing a service policy according to identification information of the mobile terminal as a subscriber to be applied differently; Confirming identification information of the portable terminal when the portable terminal is connected; Identifying a service policy corresponding to the subscriber after distinguishing the subscriber corresponding to the identification information; And Accessing the mobile terminal to a corresponding access network by applying the service policy; Network access method for each subscriber comprising a. The method of claim 8, In the service policy, Network access method for each subscriber, characterized in that the authentication policy, security policy, IP address assignment policy, billing policy, routing policy is included. The method of claim 9, The subscriber, Network access method for each subscriber, characterized in that the general subscriber or one of the corporate subscriber. The method of claim 10, The step of connecting, And if the subscriber is a general subscriber, assigns a destination-based public network IP address according to the identification information and routes it to the public network. The method of claim 10, The step of connecting, And if the subscriber is a corporate subscriber, assigns a source-based private network IP address according to the identification information and routes the private network to a private network. The method according to claim 11 or 12, The identification information, Network access method for each subscriber, characterized in that the MAC (Medium Access Control) address of the mobile terminal. The method of claim 13, The mobile terminal, A network access method for each subscriber, which is a case of using an indoor mobile Internet service.