KR100438155B1 - Wireless local area network sytem and method for managing the same - Google Patents

Abstract

The present invention relates to a wireless LAN, and more particularly, to a wireless LAN network system and a method of operating the wireless LAN network that can easily perform authentication and billing processing for a wireless LAN user and efficiently perform wireless network management.

In a wireless LAN network system and a method of operating the same according to the present invention, a user terminal having a network operator server, a router, a hub, a plurality of access points, and a wireless LAN card, which provide an Internet access service, are sequentially connected and connected to the Internet of the user terminal. A network system for processing a connection according to a wireless LAN standard, comprising: a user terminal unit having a wireless LAN card configured to store a unique ID for authenticating an Internet connection of a user and to transmit the unique ID to the access point when connecting to the Internet; The channel assignment and IP allocation control is performed for the access point of the access point, and the unique ID authorized through the access point from the user terminal is adjusted while controlling the allocation channel of the corresponding access point based on the access status of the user terminal of each access point. AP manager for transmitting and processing to the network operator server, the user end An access point communicating between the unit and the AP manager and relaying the Internet connection of the user terminal unit under the control of the AP manager, a pre-registered unique ID of the WLAN card and a member ID previously registered by the user; It stores a password in the internal storage means and includes a network operator server to perform the access authentication process for the user against the unique ID, member ID, password that is authorized from the user terminal via the AP manager when accessing the Internet of the user terminal; Characterized in that configured.

Description

Wireless local area network system and its operation method {Wireless local area network sytem and method for managing the same}

The present invention relates to a wireless local area network (WLAN) (hereinafter referred to as a 'wireless LAN'), and in particular, facilitates authentication and billing processing for wireless LAN users, and manages wireless network management. The present invention relates to a wireless LAN network system and an operation method thereof that can be efficiently performed.

In general, a wireless LAN refers to a wireless LAN that transmits and receives data between a computer and a computer or between a computer and other communication systems by using radio frequency (RF) or light. The wireless LAN has been developed in recent years due to the rapid development of Internet service and wireless communication technology, which is easy to install and maintain in a place where wired network is not easy to build, such as network connection between buildings, large offices and logistics center. The use is soaring.

1 is a block diagram showing the configuration of a conventional WLAN network system. In FIG. 1, reference numerals 10 (10 ₁ to 10 _n ) _denote a plurality of user terminals used by a WLAN user, and 20 denotes a plurality of user terminals. The wireless LAN of the user terminal 10 is communicated between the unit 10 and the hub 30 and transmits the Internet 1 connection request from the plurality of user terminals 10 to the network operator server 50. An access point for relaying communication, 30 is a hub, 40 is a router, and 50 is a network operator server that provides Internet (1) access service.

In addition, the user terminal 10 of FIG. 1 is a wireless device which will be described later in a general computer device such as a notebook computer or a desktop computer or a personal digital assistant (PDA) having a communication port such as a PCMCIA port, a USB port, or a PCI slot. LAN card is installed.

2 is a block diagram showing the internal configuration of a conventional wireless LAN card 100 provided in the user terminal 10 of FIG.

In FIG. 2, AN denotes an antenna for transmitting and receiving an RF signal, and 110 receives an RF signal from the access point 20 and transmits the RF signal from the user terminal 10 to the access point 20. The RF unit transmits the data to an RF signal, which is a high frequency signal, wherein the RF unit 110 is combined with an amplifier 111 for amplifying an RF signal and an oscillator (VCO), which is an RF signal and an intermediate frequency signal. An RF / IF converter 112 that performs signal conversion between IF signals and the baseband processor, which is described later, is connected to the RF / IF converter 112 and a baseband signal, BB (Base Band). And an IF / BB converter 113 for performing signal conversion between signals.

In FIG. 2, reference numeral 120 denotes a baseband processor for demodulating data received through the RF unit 110 and modulating data transmitted to the access point 20 through the RF unit 110. The MAC processing unit performs data link processing through a medium access protocol (MAC) protocol (eg, IEEE 802.11b in the case of a wireless LAN) between the access point 20 and the computer device of the user terminal unit 10.

Therefore, when there is a data transmission, the user terminal 10 of FIG. 1 transmits a data link such as channel acquisition according to the access point 20 and the wireless LAN standard (eg, IEEE 802.11b) through the MAC processor 130 of FIG. 2. The transmission data is subjected to the modulation processing of the baseband processing unit 120 and the RF signal conversion processing of the RF unit 110 of FIG. 2, and then transmitted to the access point 20 through the antenna AN. do.

When there is data reception from the Internet 1, the received data is transmitted to the access point 20 via the router 40 and the hub 30 of FIG. 1, and the access point 20 is connected to the corresponding user terminal unit. The reception data is transmitted to the wireless LAN card 100 of (10), which is received through the antenna (AN), and the baseband signal processing of the RF unit 110 and the demodulation processing of the baseband processing unit 20, and MAC After the data link processing according to the wireless LAN standard of the processor 130 is transmitted to the computer device of the user terminal 10.

On the other hand, the access point 20 shown in FIG. 1 provides IP, gateway, and domain name server (DNS) information preset in a computer device of the user terminal 10 when a user requests access to the Internet 1. Internet connection information) is received from the corresponding user terminal 10 to perform a wireless LAN relay function so that the Internet 1 can be connected through the network operator server 50.

In this case, the access point 20 performs IP allocation (fixed IP / flowing IP) processing for accessing the Internet 1 of the user terminal 10 through a fixedly allocated channel, and the user has his own By inputting the registered member ID and password, the network operator server 50 receives the authentication process for accessing the Internet 1. In this case, when the network operator server 50 is authenticated, the user terminal 10 is connected to the Internet 1 through an access point 20, a hub 30, and a router 40 to form a wireless network. When the connection authentication of the network operator server 50 is denied, data transmission and reception through the Internet 1 is performed.

In addition, a plurality of user terminal units 10 are actually connected to the access point 20 of FIG. 1, and when the number of acceptable user terminal units 10 exceeds a predetermined reference value (for example, 50 users), the access point ( The additional installation of 20) divides the management of the user terminal 10 accommodated.

However, in the conventional wireless LAN network system, the Internet 1 connection authentication of the user terminal 10 is performed only by inputting the registered member ID and password of the user, and the user ID and password of the user are leaked to the Thai user. If stolen, there is a problem that Thai users cannot properly prevent illegal internet access.

In addition, in the conventional WLAN network system, when the roaming function between the access points 20 is implemented, the access point 20 to which the WLAN card 100 in the user terminal 10 of FIG. 1 directly moves. In this case, data loss occurs during roaming.

In addition, since the channel for the access point 20 is fixedly allocated as described above, an area A with channel interference is generated between the access points 20 ₁ and 20 ₂ installed in the adjacent area as shown in FIG. 3. . The reason for such channel interference is that a signal collision occurs between the WLAN card 100 attempting to access an arbitrarily determined channel and the access point 20 that needs to use a fixed channel, which is an acceptable user terminal of the access point 20. It causes the number of parts 10 and the quality of a service to deteriorate.

Accordingly, the present invention has been made in view of the above circumstances, and facilitates authentication and billing processing for wireless LAN users, and also manages wireless LAN networks such as channel management for each access point connected to multiple user terminals. An object of the present invention is to provide a wireless LAN network system and an operation method thereof that can be efficiently performed.

1 is a network diagram showing the configuration of a conventional WLAN network system.

Figure 2 is a block diagram showing the internal configuration of a conventional wireless LAN card 100 provided in the user terminal 10 shown in FIG.

3 is a diagram illustrating channel interference in a conventional WLAN network system.

Figure 4 is a network diagram showing the configuration of a wireless LAN network system according to the present invention.

5 is a view showing a channel band applied to a wireless LAN network system according to the present invention.

6 is a block diagram showing the internal configuration of a wireless LAN card 600 provided in the user terminal 60 shown in FIG.

Figure 7 is a block diagram showing the internal configuration of the smart card 610 shown in FIG.

8 is a block diagram showing an internal configuration of the AP manager 80 shown in FIG.

9A and 9B are flowcharts illustrating an operation and a method of operating the WLAN network system according to the present invention.

*** Explanation of symbols for the main parts of the drawing ***

10 (10 ₁ ~ 10 _n ), 60 (60 ₁ ~ 60 _n ): user terminal, 20, 70: access point,

30: hub, 40: router,

50, 90: network operator server, 80: AP manager,

81: first interface unit, 82: second interface unit,

83, 120: baseband processor, 84: RAM,

85: program storage unit, 86: processor unit,

100, 600: wireless LAN card, 110: RF unit,

130: Mac processor, 611: serial input and output interface,

612: RF interface, 613: memory section,

614: Microprocessor.

In the wireless LAN network system according to the present invention for achieving the above object is a network operator server, a router, a hub for providing an Internet access service, a user terminal with a plurality of access points and a wireless LAN card is sequentially connected to the user terminal In a network system for processing an Internet connection according to a wireless LAN standard, a user terminal having a wireless LAN card configured to store a unique ID for authenticating an Internet connection of a user and to transmit the unique ID to the access point when connecting to the Internet. The controller performs channel assignment and IP assignment control for a plurality of access points, and adjusts an allocation channel of the corresponding access point based on the access status of the user terminal of each access point and is authorized through the access point from the user terminal. AP manager for transmitting and processing unique ID to the network operator server An access point communicating between the user terminal unit and the AP manager and relaying the Internet connection of the user terminal unit under the control of the AP manager, a pre-registered unique ID of the WLAN card and a member registered by the user A network operator server storing ID and password in an internal storage means and performing access authentication processing for a user by comparing the user ID with a unique ID, a member ID, and a password authorized through an AP manager when accessing the Internet of the user terminal. Characterized in that configured to include.

In addition, the wireless LAN network operation method for achieving the above object is a network operator server, a router, a hub for providing an Internet access service, a user terminal equipped with a plurality of access points and a wireless LAN card is sequentially connected to the Internet of the user terminal A network operating method using a communication system for processing a connection according to a wireless LAN standard, wherein the unique ID assigned to a wireless LAN card of the user terminal is requested via the access point and an AP manager controlling the connection when a user requests an Internet connection. A first step of transmitting to the network operator server, the second network server performs the first authentication for the user's Internet access by matching the unique ID of the wireless LAN card registered with the unique ID transmitted from the user terminal unit Step, if the first authentication result authentication is authorized to receive the user ID and password of the user A third step of blocking internet access of the user terminal if the evidence is provided; and a fourth step of transmitting the member ID and password of the user inputted through the user terminal to the network operator server via the access point and the AP manager. A fifth step in which the network operator performs a second authentication for accessing the user's Internet by comparing a member ID, a password of a previously registered user, a member ID transmitted from the user terminal, and a password; A sixth step of allocating an IP for internet access to the user terminal if authentication is permitted, and blocking internet access of the user terminal if authentication is denied; and an AP manager if an IP is assigned to the user terminal and connected to the Internet. The seventh stage that checks the current status of the user terminal connected to the access point and adjusts the channel allocation of the access point. And characterized by comprising comprises a.

Hereinafter, embodiments of the present invention will be described with reference to the accompanying drawings.

4 is a diagram illustrating a configuration of a WLAN network system according to the present invention. In FIG. 4, the same components as those shown in FIG. 1 are denoted by the same reference numerals, and detailed description thereof will be omitted.

In FIG. 4, reference numeral 60 (60 ₁ to 60 _n ) denotes a plurality of user terminals provided with a wireless LAN card according to the present invention, and the computer device of the user terminal 60 uses a general computer device and is mounted thereon. Detailed description of the wireless LAN card will be described later.

In FIG. 4, reference numeral 70 denotes an access point communicating with a plurality of user terminals 60 and an AP manager (APManager) to be described later to relay wireless LAN communication. In FIG. 4, only one access point 70 is shown. In practice, however, a plurality of access points 70 are connected to an AP manager, which will be described later, through a predetermined communication network such as Ethernet, to relay the connection of the user terminal 60 to the Internet 1.

The access point 70 performs communication channel allocation and change processing under the control of the AP manager, which will be described later, and performs data transmission / reception processing according to the user terminal 60 and the wireless LAN standard (eg, IEEE 802.11b). A predetermined operation program to be performed is provided in the internal storage means (not shown).

In FIG. 4, reference numeral 80 denotes a communication channel allocation control for each access point 70 connected to a plurality of access points 70 and the access point 70 from a wireless LAN card which will be described later by the user terminal unit 60. FIG. Receiving a unique ID transmitted via the transmission, and transmits it to the network operator server 90 as an AP manager for relaying the Internet (1) connection authentication process of the user using the unique ID, the AP manager 80 for Detailed description will be described later.

In FIG. 4, reference numeral 90 denotes a network operator server for providing an Internet (1) access service, and the network operator server 90 is a unique ID registered in a WLAN card described below of all service subscribers (users) and user's device. After registering and storing the registered member ID and password in the internal database (not shown) as subscriber information, the user ID and password are used as information for the user's Internet (1) connection authentication.

That is, in the present embodiment, the user's Internet (1) access authentication is divided into a first authentication using the unique ID and a second authentication using the user's member ID and password, and the second authentication is the first authentication. It will be executed after authentication. Since the detailed description of the second authentication is the same as the general PPP access method, a detailed description thereof will be omitted.

In addition, the subscriber information may include predetermined loss report information according to the loss report of the wireless LAN card to be described later, and may be used together with the loss report information as well as the unique ID during the first authentication of the user. In this case, the network operator server 90 blocks the user's access to the Internet 1 when the unique ID is not registered or if it is determined that there is a loss report of the WLAN card 600.

5 shows a channel band applied to a wireless LAN network system according to the present invention, the frequency band of the wireless LAN to which the present invention is applied uses an Industrial Scientific Medical (ISM) frequency band, and the ISM band is industrial, Refers to a common frequency band that can be used worldwide for scientific and medical purposes.

According to the IEEE 802.11b, which is a wireless LAN standard, 14 channels are allocated to the ISM band in 5 MHz units from 2.412 GHz to 2.484 GHz. The WLAN channel band used in Korea is 2.412 GHz, 2.417 GHz, 2.422 GHz, 2.427 GHz, 2.432 GHz, 2.437 GHz, 2.442 GHz, 2.447 GHz, 2.452 GHz, 2. 2457 GHz, 2. 11 channels (CH1 to CH11) having a bandwidth of 22 MHz at 462 GHz are allocated, and an area in which frequencies overlap between each channel exists.

For example, in FIG. 3, if the access point 20 ₁ uses channel 1 CH1 and the access point 20 ₂ uses channel 2 CH2, the channel is fixed as shown in FIG. 3. The area A is formed. In this case, it is possible to minimize channel interference by adjusting the allocation channel so that the access point 20 ₂ of FIG. 3 uses the channel 6 CH6.

Therefore, in the present invention, after the AP manager 80 of FIG. 4 monitors the channel state assigned to each of the access points 70, the AP manager 80 recalls the allocated channel of the access point 70 having channel interference or channel interference. You control it in one way.

FIG. 6 is a block diagram showing an internal configuration of a wireless LAN card 600 provided in the user terminal 60 shown in FIG. 4, wherein the wireless LAN card 600 is a user terminal 60 shown in FIG. 4. Installed in the wireless LAN standard (eg, IEEE 802.11b) and performing data communication, and transmitting the unique ID assigned to the wireless LAN card 600 to the access point 70 when the user's Internet 1 is connected. The network operator server 90 requests the user's Internet (1) connection authentication (primary authentication).

In FIG. 6, the same components as those shown in FIG. 2 are denoted by the same reference numerals, and detailed description thereof will be omitted.

That is, the wireless LAN card 600 of FIG. 6 includes an antenna (AN), an RF unit 110, a baseband processing unit 120, and a pulse processing unit 130 like the wireless card 100 described with reference to FIG. 2. As shown in FIG. 6, a smart card connected between the computer device of the user terminal unit 60 and the Mac processing unit 130 to process a unique ID transmission for the user's Internet (1) connection authentication (primary authentication) ( 610 is configured.

Hereinafter, the card 610 shown in FIG. 6 will be described.

FIG. 7 is a block diagram illustrating an internal configuration of the smart card 610. In FIG. 7, reference numeral 611 denotes a serial input / output interface, and 612 denotes an RF interface, and the serial input / output interface 611 and the RF interface 612. ) Is for the smart card 610 to perform data transmission and reception with an external card reader (not shown).

That is, the serial input / output interface 611 and the RF interface 612 may use the charge through an external card reader (not shown) when the charging method of the network operator is rechargeable, for example, a bus card used to charge the charge in advance. It is equipped to be able to charge.

In FIG. 7, reference numeral 613 denotes a memory unit in which a unique ID assigned to the WLAN card 600 and a driving program of the smart card 610 are stored, which stores various temporary data processed when the WLAN card 600 is driven. RAM (613a), a ROM (613b) for storing the drive program of the smart card 610 to process the unique ID transmission and reception, and an EEP ROM (613c) for storing the unique ID It is configured by. When there is a change in the unique ID stored in the EEP ROM 613c, it is transmitted and updated from the network operator server 90 of FIG. 4 when the user accesses the Internet 1. In this case, the first authentication process using the changed unique ID is performed when the user next accesses the Internet (1).

On the other hand, after storing predetermined user information according to the selection / change of the billing method of the user / network operator in the EEP ROM 613c, the user information is requested when the user accesses the Internet (1). By transmitting to the network operator server 90 via the AP manager 80, it is also possible to perform the billing processing according to the user's use of the Internet (1).

The charging method may be performed by a charging method set by a network operator, or may be configured to allow a user to directly access the network operator server 90. For example, the billing method may be selected in various ways, such as a pay-as-you-go, a flat-rate payment system (charge type), and when the user / network operator selects or changes the billing method, the user information may be modified. 1) When the connection is transmitted from the network operator server 90 is stored in the smart card 610 of FIG. And the billing processing according to the modified billing method is made from the next Internet (1) access of the user.

If the charging method selected / modified by the user / network operator is a prepayment system (charge type), the user information includes the user's recharge amount (prepayment amount) information and rate information, which is increased according to the recharge amount of the user. However, when the user accesses the Internet (1), the network service provider will reduce the rate according to the rate pre-determined by the network operator. On the other hand, when a change occurs in the rate specified by the network operator, the changed rate information is transmitted from the network operator server 90 of FIG. 4 when the user accesses the Internet 1 and stored in the smart card 610 of FIG. To be used in processing.

In FIG. 7, reference numeral 614 controls the overall operation of the smart card 610 and reads the unique ID from the memory unit 613 when the user requests access to the Internet (1). A microprocessor configured to process the user's Internet (1) connection authentication by transmitting to the user (70), wherein the microprocessor 614 is the first authentication of the network operator server 90 that has received the unique ID, the member ID of the user, The operation of the WLAN card 600 is executed / stopped according to whether or not the second authentication is authorized according to the password input.

As illustrated in FIG. 7, the serial input / output interface 611, the RF interface 612, the memory unit 613, and the microprocessor 614 are interconnected through an internal bus BS.

Therefore, the wireless LAN card 600 of FIG. 6 transmits the unique ID stored in the memory unit 613 to the network operator server 90 through the access point 70 to block illegal user access to the Internet 1. Of course, after storing the user information according to the selection / change of the billing method of the user / network operator, it is easy to perform the billing process for the user by transmitting it to the network operator server 90 when the user accesses the Internet (1).

Hereinafter, the AP manager 80 illustrated in FIG. 4 will be described.

FIG. 8 is a block diagram schematically showing the internal structure of the AP manager 80 shown in FIG. 4, and in FIG. 8, reference numeral 81 denotes a plurality of access points 70 for communication connection with, for example, 10 / 100M Ethernet. 82 is a first interface unit, and 82 is a second interface unit for communication connection with the hub 30 connected to the Internet 1 via the router 40, for example, 10 / 100M Ethernet, and 83 is the first and second units. The baseband processing unit performs modulation / demodulation processing on data transmitted and received through the two interface units 81 and 82, and 64 is a RAM for temporarily storing various temporary data.

In FIG. 8, reference numeral 85 denotes channel assignment and change for each access point 70 connected to the AP manager 80, IP allocation according to the DHCP protocol, operation state monitoring of each access point 70, and the like. An operating program for storing the program is stored in the program storage unit, and 86 controls the entire apparatus based on the operating program of the program storage unit 85 and is connected to the channel assigned to each access point 70 and connected through the channel. After grasping the current state of the user terminal unit 60, the allocation channel of each access point 70 is adjusted, and after the first and second authentications of the user terminal unit 60 have been performed, Processor section for processing allocation.

Therefore, the AP manager 80 having the above-described configuration uses the unique ID, member ID, and password transmitted via the user terminal 60 and the access point 70 of FIG. It transmits to the network operator server 90 to relay the Internet (1) connection authentication to the user, and assigns the IP to the access point 70 according to the connection authentication or transmits a predetermined authentication rejection message to the user. It permits / blocks the Internet 1 connection, monitors the use channel of each access point 70, adjusts channel allocation between the access points 70 with channel interference, and keeps the communication channel stable.

The AP manager 80 assigns the IP to the access point 70 after the first authentication using the unique ID, the registered member ID of the user, and the second authentication using the password are performed. (1) The transmission of the authentication rejection message according to the connection blocking is executed in accordance with the authentication result of the first authentication or the second authentication.

Hereinafter, an operation and a method of operating the WLAN network system according to the present invention will be described with reference to the flowcharts of FIGS. 9A and 9B.

First, when there is data transmission according to the user's Internet 1 connection request from the computer device of the user terminal unit 60 of FIG. 4, the MAC processing unit 130 of FIG. 6 is assigned an access point 70 installed in the corresponding area. The data link processing according to the wireless LAN standard (eg, IEEE 802.11b) is performed through the channel. At this time, the AP manager 80 of FIG. 4 monitors the channels assigned to each of the access points 70 and adjusts the allocation channel to minimize channel interference between adjacent access points 70 (ST1 step).

The smart card 610 of FIG. 6 reads out a unique ID stored in the internal memory unit 613 as transmission data according to a user's Internet 1 connection request, which is modulated by the baseband processor 120 of FIG. After the process and the RF signal conversion process of the RF unit 110, it is transmitted to the access point 70 of FIG. In addition, when transmitting the unique ID, as shown in FIG. 9A, it may be desirable to transmit user information including the charging method information selected by the user.

Thereafter, the unique ID and user information of the corresponding wireless LAN card 400 transmitted to the access point 70 of FIG. 4 are connected to the Internet 1 via the AP manager 80, the hub 30, and the router 40. The network operator server 90 is transmitted to the network operator server (ST3, ST4 step), the network operator server 90 inquires the registered subscriber information to determine whether the received unique ID is registered and lost report for the unique ID. Inquiry of the registration to process the first authentication for the user using the wireless LAN card 600. (ST5 step)

When the user information is transmitted along with the unique ID in step ST4, the network operator server 90 determines the charging method for the user using the corresponding wireless LAN card 600 based on the user information, and the determined charging The method is executed after the second authentication for the user is made.

Subsequently, as a result of the inquiry in step ST5, the network operator server 90 of FIG. 4 includes a predetermined authentication permission message when it is determined that the unique ID of the corresponding wireless LAN card 600 matches an already registered ID and there is no loss report. The primary access authentication information is transmitted to the AP manager 80, and the AP manager 80 reads the received primary access authentication information and authenticates to the access point 70 to which the corresponding user terminal 60 is connected. The primary access authentication information is transmitted.

On the other hand, if it is determined that the unique ID of the wireless LAN card 600 does not exist in the registered ID or the lost report is received, the network operator server 90 of FIG. 4 performs primary access authentication with a predetermined authentication rejection message. The information is created and transmitted to the AP manager 80, and the AP manager 80 reads the received primary access authentication information, and then accesses the access point 70 to which the corresponding user terminal 60 is connected. The car connection authentication information is transmitted. (ST6, ST7 steps)

Thereafter, the access point 70 that receives the primary access authentication information from the AP manager 80 of FIG. 4 receives the primary access authentication information when the message included in the primary access authentication information is an authentication permission message (step ST8). 60), the user ID and password are inputted (step ST9). Accordingly, the member ID and password information transmitted from the user terminal 60 are transmitted via the access point 70 and the AP manager 80. It is transmitted to the network operator server 90. (ST10 ~ ST12 step)

If the message included in the primary access authentication information in step ST8 is an authentication rejection message, the operation will be described later.

On the other hand, the network operator server 90 receiving the member ID and password of the user inquires the registered subscriber information in the internal database (not shown), and determines the authenticity of the received member ID and password. Next step is to process the authentication (ST13 step).

At this time, the network operator server 90 of FIG. 4 creates secondary access authentication information including a predetermined authentication permission message when it is determined that the corresponding member ID of the corresponding user is a registered ID and the corresponding relationship between the member ID and the password is matched. If it is determined that the corresponding member ID of the user is not registered or the correspondence relationship between the member ID and the password does not match, the secondary access authentication information including the predetermined authentication rejection message is created and the AP manager of FIG. 80). On the other hand, if the member ID and password of the user does not match, the steps ST10 to ST13 are repeatedly executed until a predetermined reference number (for example, three times), and then the second access authentication information including the authentication rejection message is included in the corresponding user terminal. It may also be desirable to transmit to 60. (ST14 step)

In addition, the AP manager 80 of FIG. 4 reads the received secondary access authentication information (step ST15), and when an authentication permission message is included, the AP manager 80 accesses the Internet 70 to the access point 70 to which the corresponding user terminal 60 is connected. 1) Allocate an IP for connection (step ST16), and the access point 70 of FIG. 4 connects the corresponding user terminal 60 to the Internet 1 through the allocated IP (step ST17).

When the read result secondary access authentication information includes the authentication rejection message in step ST15, although not shown in the drawing, the AP manager 80 transmits the secondary access authentication information according to the authentication rejection to the access point 70. Then, the access point 70 transmits the authentication rejection message to the user terminal 60. (ST18) After the smart card 610 in the WLAN card 600 of the user terminal 60 is received. The operation of the wireless LAN card 600 is stopped based on the authentication rejection message. (ST19 step)

When the message included in the primary access authentication information is the authentication rejection message in step ST8, the access point 70 of FIG. 4 is based on the primary access authentication information according to the authentication rejection transmitted from the AP manager 80. The operation after step ST18 is performed.

Therefore, according to the above embodiment, the connection authentication of the Internet user is performed through the first authentication using the unique ID of the WLAN card and the second authentication using the member ID and password of the user. It is possible to prevent unauthorized access of Thai users due to the leakage of passwords, and to store billing information according to the selection / change of users / network operators in smart cards in the wireless LAN card to facilitate billing processing when users use the Internet. Will be.

In addition, according to the above embodiment, the AP manager monitors the channel state assigned to each access point, and adjusts the channel of the access point having channel interference or channel interference. The communication efficiency can be prevented.

As described above, according to the present invention, it is possible to stably perform the access authentication of the wireless LAN Internet user and to easily perform various types of charging processing according to the user's use of the Internet, thereby improving convenience of the Internet service using the wireless LAN. In addition, by efficiently performing the network management of the WLAN, such as channel management of each access point, it is possible to further promote the spread of WLAN Internet services.

Claims (5)

In a network system that provides a network operator server, a router, a hub, a plurality of access points, and a user terminal equipped with a wireless LAN card to sequentially provide an Internet access service, thereby processing the Internet access of the user terminal in accordance with the wireless LAN standard. , A user terminal unit having a wireless LAN card configured to store a unique ID for authenticating a user's Internet access and to transmit the unique ID to the access point when connected to the Internet; Channel allocation and IP allocation control is performed for a plurality of access points, and the access channel is adjusted based on the access status of the user terminal of each access point and uniquely authorized through the access point from the user terminal. AP manager for transmitting and processing the ID to the network operator server, An access point communicating between the user terminal and the AP manager and relaying an Internet connection of the user terminal under control of the AP manager; The unique ID, member ID and password registered by the user in the wireless LAN card are stored in the internal storage means, and the unique ID and member ID authorized from the user terminal through the AP manager when accessing the Internet of the user terminal. And a network operator server configured to perform access authentication processing for the user in contrast to the password. The method of claim 1, The AP manager is a first interface for communicating with the access point via Ethernet; A second interface unit for communicating with the hub via Ethernet; A baseband processor for performing modulation / demodulation processing on data transmitted and received through the first and second interface units, and a RAM for temporarily storing various temporary data; A program storage unit for storing an operation program for processing channel allocation and change for the access point, IP allocation according to a DHCP protocol, and operation state monitoring; Based on the operation program of the program storage unit, the entire apparatus is controlled, the access channel is allocated to the access point, the connection status of the user terminal is determined, the channel assigned to the access point is adjusted, and the Internet access authentication of the user terminal is performed. The WLAN network system, characterized in that configured to include a processor for processing the IP allocation after being made. The method of claim 1, The network operator server compares the unique ID of the registered wireless LAN card and the unique ID transmitted from the user terminal unit, and transmits the first access authentication information according to the match to the AP manager to process the first authentication. After the first authentication is performed, the user ID and password of the registered user are compared with the member ID and password of the user transmitted from the user terminal, and the secondary access authentication information according to the match is transmitted to the AP manager. Process the primary authentication, The AP manager controls the access point according to a result of reading the primary and secondary access authentication information, and allocates an IP to the access point when an authentication permission message is included in the primary and secondary access authentication information. A wireless LAN network system, characterized in that configured to connect a user terminal to the Internet. The method of claim 3, wherein The AP manager notifies the access point when an authentication rejection message is included in the primary and secondary access authentication information as a result of reading the primary and secondary access authentication information, and the access point receives the authentication rejection message. The wireless LAN network system, characterized in that configured to block the connection to the Internet by transmitting to the wireless LAN card of the user terminal. A user terminal equipped with a network operator server, a router, a hub, a plurality of access points, and a wireless LAN card, which provide Internet access services, are sequentially connected to each other and use a communication system to process the Internet access of the user terminal according to a wireless LAN standard. In the network operation method, A first step of transmitting a unique ID assigned to the wireless LAN card of the user terminal to the network operator server via the access point and the AP manager controlling the user when requesting a user's Internet connection; A second step of performing, by the network operator server, primary authentication for accessing the Internet by matching a unique ID of a previously registered wireless LAN card with a unique ID transmitted from the user terminal; A third step of blocking the Internet access of the user terminal of the user terminal when the authentication is denied by inputting the member ID and password of the user when the first authentication result is authenticated; A fourth step of transmitting the member ID and password of the user input through the user terminal to the network operator server via the access point and the AP manager; A fifth step in which the network operator performs a second authentication for accessing the user's Internet by comparing a member ID, a password of a pre-registered user, a member ID transmitted from the user terminal, and a password; A sixth step of allocating an IP for internet access to the user terminal if the second authentication result is authorized, and blocking the internet access of the user terminal if authentication is denied; In case the IP is assigned to the user terminal and connected to the Internet, the AP manager includes a seventh step of checking the current status of the user terminal connected to the corresponding access point to adjust channel allocation of the corresponding access point. How Network Works.