KR100419578B1 - Session control method in DIAMETER base transfer internet protocol net - Google Patents

Abstract

1. TECHNICAL FIELD OF THE INVENTION

The present invention relates to a session control method in a diameter based mobile internet protocol network.

2. The technical problem to be solved by the invention

The present invention utilizes session information including a session ID, which is a separator of a diameter session, and a session state of a subscriber for stable message processing, and can process a session establishment and release request according to an address request type of a visiting subscriber home subscriber. To provide a session control method in a diameter-based mobile Internet protocol network and a computer-readable recording medium recording a program for realizing the method.

3. Summary of Solution to Invention

A session control method in a diameter based mobile internet protocol network, the method comprising: a first step of initializing session information to be used in a diameter server and initializing session state information to an idle state; A second step of establishing a connection by creating a socket for communication between connected nodes; Collecting system information from counterpart nodes connected to the diameter server through a connected socket; And using the session ID and session information of DIAMETER messages supporting the mobile IP included in the system information, process the session establishment and release request according to the address request type of the visitor and the home subscriber, And a fourth step of simultaneously processing a session establishment and release request of a subscriber using the network resource.

4. Important uses of the invention

The present invention is used in the diameter-based mobile Internet protocol network.

Description

Session control method in diameter based mobile internet protocol network {Session control method in DIAMETER base transfer internet protocol net}

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a method for controlling a session of a diameter in a DIAMETER based mobile internet protocol network and to a computer readable recording medium having recorded thereon a program for realizing the method, in particular an address type such as a static or dynamic address. The session setup and teardown requests of home subscribers / visitors with home addresses and home agent addresses of the network as well as visitor subscribers with dynamic addresses using visitor resources can be handled simultaneously by a single processor rather than by separating them into other processors. The present invention relates to a session control method in a diameter-based mobile Internet protocol network and a computer readable recording medium storing a program for realizing the method.

Currently, mobile IP has been proposed as a method for providing mobility in an Internet protocol (hereinafter referred to as IP) network. This allows the mobile node to stay connected even when the connection point changes. However, in order to provide a commercial Internet service in a wireless environment, a function of authenticating a subscriber, verifying authorization of a connection, and performing charging must be added.

The Remote Authentication Dial In User Service (RADIUS) protocol has been proposed for this purpose, but as routers and network access servers become more complex, the Roaming Operations Working Groups (ROAMOPS) working group is inadequate for mobile network applications due to the client-server architecture of RADIUS. Pointing out.

In addition, there is a limit in information transmission because of limited data space, and because the operation over UDP does not provide reliability and retransmission function, a diameter protocol has been proposed to compensate for this. The DIAMETER protocol is designed as a "peer-to-peer" model, so messages can be sent and received between DIAMETER servers. In addition, the data is encapsulated in an Attribute Value Pair (AVP), which has enough data space to transmit a large amount of information, and operates over SCTP (Stream Control Transmission Protocol) to provide reliable transmission and retransmission to compensate for the RADIUS shortcomings. To provide.

Therefore, DIAMETER is an authentication, authorization verification and billing protocol used for network access service, and DIAMETER protocol is a session based protocol. One session can be distinguished by session ID, which is the most important element to distinguish between session extension and handover. DIAMETER servers must perform session key distribution for subscriber authentication, authorization verification, and security between mobile node and mobile agent when subscriber registered to new session registers new session. Sessions are identified by session ID, and each session is held for a set session time. In order to maintain session information according to a subscriber's request, it is necessary to extend the session time before expiration or to maintain initial registered session information in order to perform a handover request according to the movement of a mobile node. In addition, DIAMETER session state management is required to correctly process message transmission and reception. The session establishment and release request should be handled according to the type of home address and home agent address requested by the subscriber, and the visiting subscriber should also be able to process. In addition, the subscriber requesting the use of the visited network resource should be able to process the session request according to the pre-arranged matter with the subscriber.

The present invention has been proposed to solve the above problems, and uses session information including session ID, which is a separator of a diameter session, and session state of a subscriber for stable message processing. The purpose of the present invention is to provide a session control method in a diameter-based mobile Internet protocol network that can handle session establishment and teardown requests according to a request type, and a computer-readable recording medium recording a program for realizing the method. have.

1 is a diagram illustrating a configuration of a mobile IP network based on a diameter to which the present invention is applied.

2 is a diagram illustrating an embodiment of a structure and security relationship of a diameter network in a session control method in a diameter-based mobile internet protocol network according to the present invention;

3A is a flowchart illustrating a session control method in a diameter based mobile internet protocol network according to the present invention;

3B is a detailed flowchart illustrating an AMR message processing procedure in a session control method in a diameter-based mobile Internet protocol network according to the present invention;

3c is a detailed flowchart illustrating an AMA message processing procedure in a session control method in a diameter-based mobile internet protocol network according to the present invention;

3d is a detailed flowchart illustrating an HAR message processing procedure in a session control method in a diameter-based mobile internet protocol network according to the present invention;

3E is a detailed flowchart illustrating an HAA message processing procedure in a session control method in a diameter-based mobile internet protocol network according to the present invention;

3F and 3G are detailed flowcharts illustrating an STR message processing procedure of a session control method in a diameter based mobile Internet protocol network according to the present invention.

3h is a detailed flowchart illustrating an STA message processing in a session control method in a diameter-based mobile internet protocol network according to the present invention;

3I is a detailed flowchart illustrating an STI message processing procedure in a session control method in a diameter-based mobile Internet protocol network according to the present invention.

* Explanation of symbols for the main parts of the drawings

11: mobile node 12: wireless access network

13: external agent (FA) 14: router

15: diameter server 16: home agent (HA)

In order to achieve the above object, the present invention provides a session control method in a diameter-based mobile Internet protocol network, comprising: a first step of initializing session information to be used in a diameter server and initializing session state information in an idle state; A second step of establishing a connection by creating a socket for communication between connected nodes; Collecting system information from counterpart nodes connected to the diameter server through a connected socket; And using the session ID and session information of DIAMETER messages supporting the mobile IP included in the system information, process the session establishment and release request according to the address request type of the visitor and the home subscriber, And a fourth step of simultaneously processing a session establishment and release request of a subscriber using a network resource.

The present invention also provides a mobile Internet protocol network having a processor, comprising: a first function of initializing session information to be used in a diameter server and initializing session state information into an idle state; A second function of establishing a connection by creating a socket for communication between connected nodes; A third function of collecting system information from counterpart nodes connected to the diameter server through a connected socket; And using the session ID and session information of DIAMETER messages supporting the mobile IP included in the system information, process the session establishment and release request according to the address request type of the visitor and the home subscriber, A computer readable recording medium having recorded thereon a program for realizing a fourth function of simultaneously processing a session establishment and release request of a subscriber using a network resource.

The above objects, features and advantages will become more apparent from the following detailed description taken in conjunction with the accompanying drawings. Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings.

1 is a diagram illustrating a configuration of a mobile IP network based on a diameter to which the present invention is applied. In the drawing, "11" is a mobile node, "12" is a wireless access network, "13" is an external agent (FA), " 14 denotes a router, 15 denotes a diameter server, and 16 denotes a home agent HA.

As shown in FIG. 1, one domain includes a mobile node 11, a base station, and the like, wherein a mobile node 11, a base station, etc., in which a mobile IP protocol is mounted so that service can continue even if a link is changed is provided. Maintains location information of a plurality of external agents 13 and mobile nodes 11 that route packets of mobile nodes 11 as routers 14 of visited links, performs authentication of mobile nodes 11, and moves It consists of a home agent 16 which delivers packets to the moving place when the link of the node 11 is moved, and a diameter server 15 which performs authentication, authority verification, and charging of the mobile node 11.

2 is a diagram illustrating an embodiment of a structure and security relationship of a diameter network in a session control method in a diameter-based mobile Internet protocol network according to the present invention.

As shown in FIG. 2, one domain consists of a mobile node 11, an external agent 13, a diameter server 15, and a home agent 16.

They have a security association (SA) (SA1) 201, SA2 (202), SA3 (203), which are predefined security relationships with the diameter server (15). There is also SA4 204 between the diameter servers 15.

When the mobile node 11 moves, each domain is divided into a home network 205 and a visited network 206. The home network 205 is a network to which the mobile node 11 joins for the first time, and means a network that can perform authentication and authority verification for subscribers. The visited network 206 means a network that provides a service to the mobile node 11 in a network other than the home network 205 of the mobile node 11.

When the mobile node 11 registers in the visited network 206, subscriber authentication and authority verification for the mobile node 11 may be performed through the SA 201, which only the home diameter server 15 has with the mobile node 11. Can be. If subscriber authentication and authority verification succeed, the session key (session key 1 207, session key 2 208, session key 3 209) used for message authentication and node authentication between the mobile node 11 and the mobile agent. Is generated and distributed by the home diameter server 15. The generated session key includes session key 1 207 between mobile node 11 and home agent 16, session key 2 208 between mobile node 11 and external agent 13, and home agent 13 with home agent. Session key 3 209 between agents 16. The generated session key is encrypted with SA, which is a predefined security relationship at each node, and transmitted to each node. These session keys can be used until session overtime and have no meaning once the session ends.

3A is a flowchart illustrating a session control method in a diameter-based mobile internet protocol network according to the present invention, which authenticates a mobile node 11 in a diameter mobile IP network, verifies the authority for session connection, and The process of session establishment and release request processing in the diameter server 15 to which the mobile node 11 needs to connect in order to charge a service is shown.

The diameter server 15 has the security relationship as shown in FIG. 2 with the subscribers initially registered to the diameter server 15, and has information previously agreed with the subscribers such as the address type and HA domain required by the subscribers.

In the present invention, the session information is divided into three types of home subscriber session information, visited subscriber session information, and visitor temporary session information.

First, home subscriber session information is session information for a diameter home subscriber.

Next, the visited subscriber session information is session information only for visited subscribers who have successfully authenticated and verified their authority.

Lastly, the visitor temporary session information is temporary session information for a subscriber who has not performed authentication and authorization verification of the subscriber who requested the session establishment. If the authentication and authorization verification is successful, information about the subscriber in the visitor temporary session information is displayed. The visited subscriber temporary session information that has been moved and copied to the visited subscriber session information is deleted.

As such, according to the mobile subscriber's information, the mobile subscriber may use a static address and a dynamic address, and may also use a visited network address.

In the present invention, a mobile subscriber uses a dynamic home configuration protocol (DHCP) for dynamic address allocation and a domain name server (DNS) for matching a subscriber address and a host name when the mobile subscriber uses a dynamic address. Be out of argument. In all message transmissions, the time until receipt of a response message to the transmission message is arbitrarily set.

If it does not receive the waiting response message, it ignores the received message and waits. If the time expires, the associated session information is deleted. The subscriber can use the home network resources and the visited network resources according to the contents of the subscriber's initial agreement with the home diameter server. In the present invention, whether a subscriber uses home network resources or visiting network resources is stored in a "ha_domain" variable. The possible values of "ha_domain" are "home", "foreign", and "fha_request". When "home" is used for home network resources, "foreign" is used for visiting network resources, and "fha_request" is registered on the visiting network so that both a home address and a home agent address are required as dynamic addresses, Whether or not the use of the visiting network resources is available cannot be determined by the visitor diameter, and can be determined by the subscriber profile in the home-diameter server. When the subscriber's request is forwarded to the subscriber's home diameter server, the subscriber checks the subscriber profile when requesting the visited network resource usage, and if the visited network resource is available, "ha_domain" is "foreign" and the visited network resource is used. If this is not possible, "ha_domain" is stored as "home". On the other hand, there are two cases in which session release may occur. First, a session release procedure may occur automatically when a subscriber explicitly requests to release a session and when session information expired for session information maintained for a predetermined session time. The session time is maintained by the mobile node, FA, HA, and diameter server. In the session release procedure due to session time expiration, the diameter server generates STI, and the mobile node, FA, and HA generate STR.

As described above, the operation of the session control method in the diameter-based mobile Internet protocol network according to the present invention will be described as follows.

As shown in FIG. 3A, the diameter server 15 initializes session information at startup and stores each session state in an idle state (301).

In this manner, after initializing the session information, a socket is created to exchange information with connected partner nodes (302).

Subsequently, after collecting information on the agents connected to the diameter server 15 (303), waiting for reception of messages transmitted from the counterpart system information, and setting up and tearing down the diameter session, the diameter server 15 The type of message that can be received is determined (304).

Then, according to the type of each received message, process the diameter messages (AMR message, AMA message, HAR message, HAA message, STR message, STA message, and STI message) supporting the mobile IP, respectively (305 to 311). ).

In this way, the message that the diameter server 15 may receive in establishing and releasing a session may include AA-Mobile-Node-Request (AMR), AA-Mobile-Node-Answer (AMA), and Home-Agent- (HAR). MIP-Request, Home-Agent-MIP-Answer (HAA), Session-Termination-Request (STR), Session-Termination-Answer (STA), and Session-Termination-Ind (STI). Upon receiving each message, the processing procedure is as follows, and after processing each message, the diameter server 15 is in a state of waiting for the next message.

3b is a detailed flowchart illustrating an AMR (AA-Mobile-Node-Request) message processing procedure in a session control method in a diameter-based mobile internet protocol network according to the present invention.

As shown in FIG. 3B, the mobile node 11 receiving the agent advertisement message received from the FA 13 transmits a Management Information Protocol (MIP) registration request message to the FA 13, and receives the FA ( 13) generates a unique session ID, generates a diameter AMR message containing a MIP registration request message, and sends it to the diameter server 15 of the corresponding region. The received diameter server 15 searches for subscriber information belonging to the diameter server 15 by NAI (Network Access Identifier) of the subscriber who transmitted the AMR (401) and determines whether it is a home subscriber or a visited subscriber (401). 402).

As a result of the determination (402), in the case of the visitor, information received through the AMR is stored in the visitor temporary session information (403).

Subsequently, when the subscriber requests the dynamic address (404, 405) for both the mobile node (MN) and the HA address, the subscriber designates the HA domain with the visited network home agent 16 requested (ha_domaim = fha_request) 406. At this time, the state transitions to the state waiting for HAR and AMA (state = HarAmaWaiting) (407), and transmits an AMR message to the home diameter server (AAAh) 15 (408).

If the subscriber requested MN and HA address types are different (404.405), the HA domain is designated as the home domain (ha_domain = home) (409). At this time, the state transitions to the state waiting for AMA (state = AmaWaiting) 410.

If the determination result (402), if the home subscriber, the subscriber authentication fails (411) or the subscriber authority verification failed (412), the AMA is sent to the FA (13) including the subscriber authentication failure and subscriber authority verification failure results (Send a failure reason) (413).

If the subscriber authentication 411 and the authority verification 412 succeed, it is checked whether the MN dynamic address is used (414).

As a result of the check (414), if the mobile node 11 and the HA 16 both require the HA dynamic address (415), the mobile node 11 and the HA 16 request the use of the HA (16) in the visited network. 16) If it is available (416, 417), if available, the transition to the state waiting for HAA and the HA domain is stored by using the visited network HA (16) (state = HaaWaiting, ha_domain = foreign) (418). In addition, since both subscriber authentication and authority verification have been successfully performed, the subscriber session information is stored in the home subscriber session information (419). Subsequently, a session key for a new session is generated (420) and the HAR is transmitted to the visiting network diameter server (AAAf) 15 (421).

On the other hand, when both the mobile node 11 and the HA 16 require a dynamic address, but are registered as a subscriber who cannot use the visited network HA 16, and only the mobile node 11 requires a dynamic address, the HA If only (16) requires a dynamic address, the home diameter server requests dynamic address allocation, so it transitions to the address request state (state = AdrPending, ha_domain = home) (422), and the HA domain is assigned to HA (16). Stored for use. When the address is allocated through the address allocation request (423), the state transitions to a waiting state for the HAA (state = HaaWaiting) (424), and the subscriber session information is stored in the home subscriber session information (425). In addition, generate a key for a new session (426), and transmits a HAR message to the HA (427).

On the other hand, if both the mobile node 11 and the HA 16 request a static address (428), the mobile node 11 transitions to waiting for the HAA and the HA domain is stored using the HA 16 of the home domain (429). The requested session information is stored in the home subscriber session information (430), and generates a session key to be used for a new session (431) and transmits an HAR message to the HA (432).

3c is a detailed flowchart illustrating an AMA (AA-Mobile-Node-Answer) message processing procedure in a session control method in a diameter-based mobile Internet protocol network according to the present invention.

As shown in FIG. 3C, upon receiving the AMA, it is checked whether the received session ID is in the visited subscriber temporary session information (501).

When the result of the check 501, the diameter server 15 receives the AMA message, it occurs only during the subscriber processing, so that if the subscriber temporary session information is not found, the related session does not exist in the home diameter server AAAh. Message-Reject-Ind (MRI) notifying of the transmission is transmitted (502).

As a result of the check 501, if the received session ID is in the visitor temporary session information, it is checked whether the state is waiting for HAR (state == HarWaiting) (503), and if the state information is different, the message is ignored (504). If the information matches, it is checked whether the result value of the received AMA is success or failure (505).

As a result of the check (505), if the failure does not need to maintain session information, the visited subscriber temporary session information is deleted (508) and the AMA message is transmitted to the FA (13) (509).

The verification result 505, if successful, the subscriber session information in the subscriber temporary session information is copied to the visited subscriber session information (506). The session state transitions to an active state, meaning that all session establishment procedures have been successfully performed (state = active) (507). After deleting the visited subscriber temporary session information, which is the temporary session information that is no longer used (508), the AMA message is transmitted to the FA 13 (509).

FIG. 3d is a detailed flowchart illustrating a process of processing a Home-Agent-MIP-Request (HAR) message among session control methods in a diameter-based mobile Internet protocol network according to the present invention.

As shown in FIG. 3D, upon receiving HAR, it is checked whether the received session ID is in the visitor temporary session information (601).

As a result of the check 601, if the session information is not found, the MRI is transmitted to the home diameter server AAAh indicating that the related session does not exist (602).

As a result of the check 601, if the corresponding session information is found, it is checked whether the session state is waiting for HAR and AMA (state == HarAmaWaiting) 603.

As a result of the check (603), if the status information is different, the message is ignored (605). If the status information matches, the HA domain checks whether the visiting HA (16) is in use (ha_domain == foreign) (604). When the diameter server 15 receives the HAR because the state information does not match, only the visit subscriber who uses the visit HA 16 corresponds to the visit subscriber ignoring the message when the HA 16 domain information is different (605). On the other hand, if the status information is matched and the HA domain information is matched, the state transitions to the waiting for address assignment (606). If the address assignment is successful (607), the state transition to the state waiting for HAA (state = active) (608). Finally, the HAR message is transmitted to the assigned HA address (609).

FIG. 3E is a detailed flowchart illustrating a process of processing a Home-Agent-MIP-Answer (HAA) message in a session control method in a diameter-based mobile internet protocol network according to the present invention.

As shown in FIG. 3E, upon receiving the HAA, it is checked whether the received session ID is in the home subscriber session information (701).

The check result 701, if present, checks whether the session state is waiting for HAR and AMA (state == HarAmaWaiting) (702), if the state does not match, ignores the message (703), and the session state is If there is a match, it is checked whether a visited or home network HA 16 is used (ha_domain == foreign) 704.

As a result of the check (704), if the visited network HA (16) is used, the state transitions to the state waiting for DNS update (706), the DNS is updated, and then an active means that the session establishment procedure was successful. Transition to state (state = active) (707). Finally, the AMA message is sent to the visiting network diameter server AAAf (708).

As a result of the check 704, when the home network HA 16 is used, it transitions to an active state indicating that the session establishment procedure was successfully performed (state = active) 710. Subsequently, when the mobile node 11 is in the visited network, the AMA is transmitted to the visited network diameter server AAAf, and when the mobile node 11 is in the home network, the AMA is transmitted to the FA 13 (711).

On the other hand, if the received session ID is not in the home subscriber session information (701), it is checked whether the received session ID is in the visited subscriber temporary session information (712), and if it exists, it is checked whether the session state is waiting for HAA ( state == HaaWaiting) (713).

As a result of the check (713), if the status information does not match, the message is ignored (714), and if the status information is matched and the visited network HA (16) is used (ha_domain == foreign) (715), the system transitions to waiting for AMA (State = AmaWaiting) (716), and transmits the HAA message to the home diameter server (AAAh) (717).

Otherwise, it is an abnormal situation, so ignore the message and wait for the next message. If the received session ID is not found in the home subscriber session information and the visited subscriber temporary session information, an MRI indicating that there is no corresponding session ID is transmitted to the node transmitting the AMA (718).

3F and 3G are detailed flowcharts illustrating an example of a process of processing a Session-Termination-Request (STR) message in a session control method in a diameter-based mobile Internet protocol network according to the present invention.

As shown in FIG. 3F and FIG. 3G, upon receiving the STR, it is checked whether the received session ID exists in the visited subscriber session information (801).

As a result of the check (801), it is checked whether the home network HA (16) is used (ha_domain == home) (802).

As a result of the check 802, if the visited network HA 16 is used without using the home network HA 16, it is checked whether the session state is active (state == active) (803) and waits for the STA if it is active. Transitioning to state (state = fha_StaWaiting) (804), sending an STR message to the home network diameter server (AAAh) (805), and checking if the session state is inactive (waiting for STR) by waiting for the STR (806). If the state transitions to the state waiting for the second STA (807), and transmits the STR message to the home diameter server (AAAh) (809), if the session state does not match the above two cases and ignores the message (810) ).

On the other hand, when using the home network HA 16 (802), it is confirmed that the session state is active (state = = active) (811).

As a result of the check (811), if the state transitions to the waiting state for the STA (state = StaWaiting) (812), and transmits the STR message to the home diameter server (AAAh) (813).

If the check result 811 is inactive and waiting for STR (state == StrWaiting) (814), the state transitions to waiting for STA (state = StaWaiting) (815) and transmits the STR to the home network diameter server (AAAh). 816, if the session state does not match in the two cases above, ignore the message (817).

On the other hand, if the check result (801), if it does not exist in the visited subscriber session information checks whether the received session ID exists in the home subscriber session information (818), the received session ID is the visited subscriber session information (801) and home subscriber session information If not present to all, the STA transmits an STA with a result indicating that the corresponding session ID is not present to the node transmitting the STR (819). If the present state is present in the home subscriber session information, whether the session state is active. Check (state == active) (820).

As a result of the check 820, if the session state is active and the session uses the home network HA 16 (ha_domain == home) 821, STA and STI are transmitted (822, 823). Each case is as follows. If the STR is received from the HA 16, the STA is transmitted to the HA 16 (822). If the mobile node 11 is in the home network, the STA is transmitted to the FA 13, and the mobile node 11 transmits the STI. If SFA is in the visited network, the STI is transmitted to the visited network diameter server AAAf (823). If the STR is received from the FA 13, the STA is transmitted to the FA 13 (822), and the STI is transmitted to the HA 16 (823). When the STR is received from the visited network diameter server AAAf, the STA is transmitted to the visited network diameter server AAAf (822) and the STI is transmitted to the HA 16 (823). The session state transitions to a state waiting for a second STR (state = Str2ndWaiting) 824. On the other hand, if the session state is active and the HA 16 in the visiting network is used (ha_domain == foreign) (825), the STA and STI are transmitted to the visiting network diameter server (AAAf) (826,827). The session state transitions to a state waiting for a second STR (state = Str2ndWaiting) 824.

On the other hand, if the check result 820, the receiving session ID is present in the home subscriber session information (818) and the session state is not in the active state (state = = active) (820) is waiting for the second STR (state = = Str2ndWaiting) (828) Check the HA domain (ha_domain == home) (829).

As a result of the verification (829), in case of using the home network HA (16), the STA is transmitted to the node that transmitted the STR (830), and after the address allocation procedure is performed (831), the corresponding home subscriber session information is deleted (835). ), When using visited network HA (ha_domain == foreign) (832), transition the state to "DnsDelPending", which requires DNS to delete the mapping of the address and host name (state == DnsDelpenfing) (833 After the DNS update 404 is performed, the corresponding home subscriber session information is deleted (835). If the other conditions do not match, the message reception is ignored and the next message reception is waited.

3H is a detailed flowchart illustrating a process of processing a Session-Termination-Answer (STA) message in a session control method in a diameter-based mobile Internet protocol network according to the present invention.

As shown in FIG. 3H, upon reception of the STA, it is checked whether the received session ID is in the visited subscriber session information (901).

As a result of the check (901), since the diameter server receives the STA only when the subscriber process, the MRI is transmitted to the home diameter server (AAAf) when the session ID does not exist in the visited subscriber session information (902). If it is, check the HA domain (ha_domain == home) (903).

If the check result 903 uses the home network HA 16, check whether the state is waiting for the STA (state == StaWaiting), and if the state does not match, ignore message reception and stop receiving the next message. If the state matches, the session state transitions to an idle state, transmits an STA to the FA 13 (905), and deletes the corresponding session information (906).

If the check result 903 uses the visiting network HA 16 (ha_domain == foreign) (907), if the session state is waiting for the STA (state == fha_StaWaiting) (908), the state transitions to the waiting state for the STI. (State = fha_StiWaiting) (909), and transmits the STA to the FA (13) or HA (16) that generated the STR (910), and if the session state is not waiting for the STA, the session state is used while using the visited network HA. Check whether the state is waiting for the second STA (state == fha_2ndStaWaiting) 911.

As a result of the check 911, if the STR occurs from the FA 13, the STA is transmitted to the HA 16, and if the STR occurs from the HA 16, the STA is transmitted to the FA 13 (912). In this case, since only the dynamic address is used, when the dynamic address is not used (913), the reception of the message is ignored and the next message is waited for. On the other hand, when using a dynamic address (913), the address allocation is released (914), and the visited subscriber session information is deleted (915).

3I is a detailed flowchart illustrating a process of processing a Session-Termination-Ind (STI) message in a session control method in a diameter-based mobile internet protocol network according to the present invention.

As shown in FIG. 3I, upon receiving the STI, it is checked whether a session ID exists in the visited subscriber session information (1001).

As a result of the check (1001), the diameter server 15 receives the STI only when processing the subscriber, and if the session ID does not exist in the visited subscriber session information, transmits the MRI to the home diameter server AAAh (1002). . If present, it is checked whether the home network HA 16 is used (ha_domain == home) (1003), and if it is used, it is checked whether the session state is active (state == active) (1004).

If the check result (1004), if the active state, the transition to the state waiting for the STR (state = StrWaiting) (1005) and transmits the STI to the FA 13 (1006).

On the other hand, if the home network HA (16) is used (ha_domain == home) (1003), if not used, the visited network HA (16) is checked (ha_domain == foreign) (1007). Check if the state is waiting for STI (state == fha_StiWaiting) (1008).

As a result of the check (1008), if the state is matched, the state transitions to the waiting state for the STR (state = fha_StrWaiting) (1009), if the FA 13 generates the STR, the STI is delivered to the HA 16, and the HA 16 Sends an STI to the FA 13 when the STR has occurred (1010), and if the session state is not active (state == active) (1011) and sends an STI to the HA 16 (1012). If not, the visitor session information is deleted (1013).

The method of the present invention as described above may be implemented as a program and stored in a computer-readable recording medium (CD-ROM, RAM, ROM, floppy disk, hard disk, magneto-optical disk, etc.).

The present invention described above is not limited to the above-described embodiments and the accompanying drawings, and various substitutions, modifications, and changes are possible in the art without departing from the technical spirit of the present invention. It will be clear to those of ordinary knowledge.

As described above, the present invention allows a visitor and a home subscriber to be simultaneously processed in a single processor without being processed separately from other processors, and a session establishment and release request according to the address request type (static or dynamic address) of the subscriber. It is effective to simultaneously handle session establishment and teardown requests of subscribers using network resources.

In addition, the present invention, by managing the session using a predefined session state, the diameter server can correctly control the message transmission and reception process, there is an effect that can know the failure point during the message processing process.

Claims (12)

A session control method in a diameter based mobile internet protocol network, A first step of initializing session information to be used in the diameter server and initializing session state information to an idle state; A second step of establishing a connection by creating a socket for communication between connected nodes; Collecting system information from counterpart nodes connected to the diameter server through a connected socket; And The session ID and session information of DIAMETER messages supporting the mobile IP included in the system information are used to process the session establishment and release request according to the address request type of the visitor and the home subscriber. Fourth step of simultaneously handling session establishment and teardown requests of subscribers using resources Session control method in a diameter-based mobile Internet protocol network comprising a. The method of claim 1, The DIAMETER message is, AA-Mobile-Node-Request (AMR), AA-Mobile-Node-Answer (AMA), Home-Agent-MIP-Request (HAR), Home-Agent-MIP-Answer (HAA), Session-Termination- A request method, a Session-Termination-Answer (STA), and a Session-Termination-Ind (STI) message. The method of claim 1, The session information, Home subscriber session information for diameter home subscribers, authentication of the subscriber requesting session establishment, visitor session information only for visiting subscribers with successful authorization verification, and temporary provision for subscribers whose authentication and authorization verification has not been performed. If the authentication and authorization verification is successful as the session information, the subscriber temporary session information for moving the information on the subscriber in the visitor temporary session information to the visited subscriber session information and deleting the copied visited subscriber temporary session information. A session control method in a diameter based mobile internet protocol network. The method of claim 1, The diameter server, In a diameter-based mobile Internet protocol network, whether a subscriber home network resource or a visiting network resource is used is stored in a "ha_domain" variable, divided into "home", "foreign", and "fha_domain". Session control method. The method according to any one of claims 1 to 4, The fourth step, A fifth step of retrieving subscriber information through the diameter server when receiving an AMR, and determining a home subscriber or a visit subscriber; As a result of the determination of the fifth step, if the visitor is a visitor, the information received through the AMR is stored in the visitor temporary session information, and if the address type requested by the subscriber is a mobile node (MN) or an HA dynamic address, the visitor network is visited. After the transition to the state waiting for HAR and AMA by designating HA as required state, AMR message is delivered to home diameter server. If the address type requested by subscriber is not MN or HA dynamic address, HA domain is home domain. A sixth step of transferring the AMR message to the home-diameter server after the transition to the waiting state for the AMA by designating a state of the AMA; As a result of the determination of the fifth step, if the home subscriber, if the subscriber authentication and authorization verification fails, the AMA is transmitted to the FA (send failure reason), including the subscriber authentication failure and subscriber authority validation failure results, and subscriber authentication and authorization A seventh step of confirming whether or not to use the MN dynamic address if the verification is successful; If the mobile node and the HA both require the HA dynamic address as a result of the check in the seventh step, if the HA is available in the visited network by checking the availability of the HA in the visited network, it is possible to use the HA. Transitioning to the HAA waiting state, storing the HA domain as using the visiting network HA, storing the subscriber session information in the home subscriber session information, generating a session key for the new session, and sending the HAR to the visiting network diameter server (AAAf). An eighth step of transmitting; If the mobile node and the HA require a dynamic address, but are registered as a subscriber who cannot use the visited network HA, and only the mobile node requires the dynamic address, only the HA requires the dynamic address. As the home diameter server requests dynamic address allocation, it transitions to the address request state, and the HA domain is stored as using HA, and when the address is assigned through the address assignment request, it transitions to the HAA waiting state. A ninth step stored in home subscriber session information, generating a key for a new session, and transmitting a HAR message to the HA; And When the mobile node and the HA request a static address as a result of the check of the seventh step, the mobile node and the HA transition to a waiting state of the HAA and the HA domain is stored as using the HA of the home domain, and the session information requested by the subscriber is stored in the home subscriber session. A tenth step of generating a session key stored in the information and to be used for a new session and transmitting a HAR message to the HA; Session control method in a diameter-based mobile Internet protocol network comprising a. The method according to any one of claims 1 to 4, The fourth step, A fifth step of confirming whether the received session ID is in the visited subscriber temporary session information when the AMA is received; As a result of the checking in the fifth step, if it is not found in the visitor temporary session information, the session ID received by transmitting a message-reject-ind (MRI) indicating that the relevant session does not exist to the home diameter server AAAh A sixth step of confirming whether or not to wait for HAR in the visitor temporary session information, ignoring the message if the status information is different, and confirming whether the result value of the received AMA is success or failure if the status information matches; And As a result of the check in step 6, in case of failure, the visitor temporary session information is deleted and the AMA message is transmitted to the FA, and in case of success, the subscriber session information in the visitor temporary session information is copied to the visited subscriber session information. Step 7 of transitioning to the active state, which indicates that all session establishment procedures have been performed successfully, deleting the visited subscriber temporary session information and sending an AMA message to the FA. Session control method in a diameter-based mobile Internet protocol network comprising a. The method according to any one of claims 1 to 4, The fourth step, A fifth step of confirming whether the received session ID is in the visited subscriber temporary session information when receiving the HAR; If the corresponding session information is not found as a result of the checking of the fifth step, an MRI indicating that the related session does not exist is transmitted to the home diameter server AAAh, and if the session information is found, the session state is HAR and AMA. A sixth step of checking whether the state is waiting; And As a result of the check in step 6, if the status information is different, the message is ignored and if the status information is consistent, the HA domain checks whether the visiting HA is in use, and if the status server does not match the status information, the HAR server visits. Only HA subscribers are used, so if the HA domain information is different, the message is ignored. If the HA domain information matches, the state transitions to waiting for address assignment and waits for HAA if the address assignment is successful. Step 7 of transmitting a HAR message to the assigned HA address after the transition Session control method in a diameter-based mobile Internet protocol network comprising a. The method according to any one of claims 1 to 4, The fourth step, A fifth step of confirming whether the received session ID is in home subscriber session information when the HAA is received; As a result of the check in step 5, if it is present in the home subscriber session information, it is checked whether the session state is waiting for HAR and AMA, and if the state is not matched, the message is ignored and the visited or home network is matched. A sixth step of confirming whether HA is used; As a result of the check in the sixth step, in the case of using the visited network HA, the state transitions to the state waiting for DNS update, the DNS is updated, and then the state is changed to the active state, which means that the session establishment procedure was successfully performed. A seventh step of transmitting an AMA message to a network diameter server AAAf; When the home network HA is used as a result of the check in step 6, when the mobile node is in the visited network after transitioning to an active state indicating that the session establishment procedure is successfully performed, the AMA is sent to the visited network diameter server (AAAf). Transmitting the AMA to the FA if it is in the home network; And If the received session ID is not present in the home subscriber session information and in the visitor session information as a result of the checking of the fifth step, the session state is waiting for HAA if the received session ID exists in the visited subscriber temporary session information. If the status information does not match, the message is ignored, and if the status information is matched and the visited network HA is used, transition to the waiting state for AMA, and then send the HAA message to the home diameter server (AAAh). If a session ID is not found in the home subscriber session information and the visited subscriber temporary session information, a ninth step of transmitting an MRI to the node that sent the AMA indicating that the session ID does not exist. Session control method in a diameter-based mobile Internet protocol network comprising a. The method according to any one of claims 1 to 4, The fourth step, A fifth step of, upon receiving the STR, checking whether the received session ID exists in the visited subscriber session information; A sixth step of checking whether the session state is active when using the visited network HA without using the home network HA by checking whether the home network HA is used as a result of the checking of the fifth step; As a result of the check in the sixth step, if it is active, the STA transitions to a waiting state and transmits an STR message to the home network diameter server (AAAh). If the session state is inactive, it is determined whether to wait for the STR to determine the STR. A seventh step of transitioning to a waiting state for the second STA, sending a STR message to the home diameter server AAAh, and ignoring the message if the session state does not match the above two cases; When the home network HA is used as a result of the check in step 5, it is confirmed that the session state is active, and if the state is active, the state transitions to the waiting state for the STA, and then the STR message is transmitted to the home diameter server AAAh and inactivated. Transitioning to a waiting state for the STA and transmitting the STR to the home network diameter server AAAh if the state is waiting for the STR, and ignoring the message if the session state does not match the above two cases; As a result of the checking of the fifth step, if it is not present in the visited subscriber session information, it is checked whether the received session ID exists in the home subscriber session information, and the received session ID does not exist in both the visited subscriber session information and the home subscriber session information. A ninth step of transmitting an STA with a result value indicating that the corresponding session ID is not present to the node transmitting the STR and checking whether the session state is active when it is present in the home subscriber session information; As a result of the check of the ninth step, if the session state is active and the session uses the home network HA, the STA and the STI are transmitted, and if the session state is in a waiting state for the second STR that is not active, the agent checks the HA domain. 10 steps; And As a result of the check of the tenth step, when using the home network HA, if the STA is transmitted to the node that transmitted the STR, and after performing the address assignment release procedure, the corresponding home subscriber session information is deleted, and when using the visited network HA, The eleventh step of transitioning the state to "DnsDelPending", which requires the deletion of the mapping of the address and the host name to the DNS, performing the DNS update, and then deleting the home subscriber session information. Session control method in a diameter-based mobile Internet protocol network comprising a. The method according to any one of claims 1 to 4, The fourth step, A fifth step of confirming whether the received session ID is in the visited subscriber session information when the STA is received; A sixth step of transmitting an MRI to a home diameter server (AAAf) and checking an HA domain if there is no session ID in the visited subscriber session information as a result of the checking of the fifth step; As a result of the inspection of the sixth step, if the home network HA is used, it is checked whether the state is waiting for the STA. If the state does not match, it ignores the reception of the message and waits for receiving the next message. A seventh step of transitioning to the STA and transmitting the STA to the FA and deleting corresponding session information; As a result of the inspection of the sixth step, when using the visited network HA, if the session state is a state waiting for the STA, the state transitions to the state waiting for STI and then transmits the STA to the FA or HA having generated the STR, and the session state transmits the STA. An eighth step of checking whether the session state is waiting for the second STA while using the visited network HA if not in the waiting state; And As a result of the checking of the eighth step, if the STR originates from the FA, the STA is transmitted to the HA, and if the STR is generated from the HA, the STA is transmitted to the FA. The ninth step of unassigning the address and deleting the visited subscriber session information if the dynamic address is used. Session control method in a diameter-based mobile Internet protocol network comprising a. The method according to any one of claims 1 to 4, The fourth step, A fifth step of confirming whether the session ID exists in the visited subscriber session information when the STI is received; If the session ID is not present in the visited subscriber session information as a result of the fifth step, the MRI is transmitted to the home diameter server (AAAh), and if it is present in the visited subscriber session information, it is checked whether home network HA is used. A sixth step of checking if the session state is active when used; A seventh step of transitioning to a waiting state for the STR and transmitting an STI to the FA if it is determined as the result of the sixth step; An eighth step of checking whether the home network HA is used in the sixth step, and if not using the visited network HA, checking whether the session state is waiting for STI if it is used; And As a result of the check of the eighth step, if the state is matched, the state transitions to the waiting state for the STR and if the FA has generated the STR, the STI is delivered to the HA. Otherwise, the ninth step of transmitting the STI to the HA if the session state is active and deleting the visitor session information if the session state is not active. Session control method in a diameter-based mobile Internet protocol network comprising a. In a mobile Internet protocol network with a processor, A first function of initializing session information to be used in the diameter server and initializing session state information into an idle state; A second function of establishing a connection by creating a socket for communication between connected nodes; A third function of collecting system information from counterpart nodes connected to the diameter server through a connected socket; And The session ID and session information of DIAMETER messages supporting the mobile IP included in the system information are used to process the session establishment and release request according to the address request type of the visitor and the home subscriber. Fourth function that simultaneously handles session establishment and teardown requests of subscribers using resources A computer-readable recording medium having recorded thereon a program for realizing this.