KR100446955B1 - A Logging and Roaming Service Method for Public LAN Service - Google Patents

Abstract

The present invention relates to a public LAN service that provides high-speed wireless Internet access services in a major area centered on a service competition area using a wireless LAN. The present invention relates to a method for implementing a local area network service by implementing a roaming service and application sharing, and a method for providing a local area network service using a wireless local area network in a roaming service method provided to a corresponding operator network 33. A first step (S301, S302) of determining whether authentication information including corresponding operator information of the subscriber is received from the connected subscriber station 31; A second step (S303) of determining whether the subscriber is his or her subscriber based on the received operator information; And as a result of the determination, if it is its subscriber, provide the corresponding service, and if it is not its subscriber, transmit the authentication information to the corresponding operator network 35 of the operator information based on the received operator information (S304, S305) and the third step (S306, S307, S308) of providing a service by determining whether to provide a service based on the response information (that is, authentication result information based on the authentication information).

Description

A Logging and Roaming Service Method for Public LAN Service

The present invention relates to a method of providing a connection and roaming service for a public local area network service, and more particularly, to provide a high-speed wireless Internet access service in a major area mainly in a service competition area by using a wireless local area network (Wires LAN). In a public local area network (LAN) service, the present invention relates to a technology for enabling public local area network service by implementing authentication / billing for users, roaming service and application sharing among operators.

Wireless local area networks are mainly used to provide Internet access services in factories, conference rooms, conference rooms, and exhibition halls where wired installation is difficult. In addition, the wireless local area network is being used as a way to improve productivity by increasing the efficiency of work even when performing mobile work in a restricted area rather than in a fixed place.

Due to the development of mobile communication technology, user demand for high-speed wireless Internet access service in mobile environment is increasing. However, there is a technical limitation in accepting this as a mobile communication system based on a mobile terminal.

In the case of a wireless local area network, instead of having limitations on mobility, a high speed wireless data service is possible, so that a user's request for a high speed wireless data access service can be partially accommodated. In addition, a solution for a wireless local area network (Solution) has already been commercialized and the verification has been completed and has the advantage that it can be easily accommodated in a user terminal such as a personal digital assistant (PDA) or a laptop. In addition, due to the generalization of commercial technology, the price is falling rapidly.

Therefore, the most realistic solution for providing a high speed wireless Internet access service is a wireless local area network, and in order to commercialize it as a mobile communication service, user authentication and billing problems need to be solved. This is not defined in the wireless local area network, and should be solved through a separate authentication protocol.

802.1x is an authentication protocol for identifying a normal user between a user terminal and an authentication server. In this case, a method of authenticating using a user ID and a password and a method of authenticating using a certificate and a smart card are used. Of course, authentication can be performed using a Media Access Control (MAC) address without using 802.1x, but in this case, there is no preventive measure against illegal user use due to leakage of MAC address, It is also impossible to provide services accordingly, so use should be restrained if possible.

When user authentication is performed using a user ID and a password, a pop-up window for inputting a user ID and password must be provided to the subscriber station. In addition, an interface for notifying the result of the user authentication and an interface for terminating the connection should be provided. Currently, Windows XP provides a partial interface for this.

However, until now, all the attention has been focused on user authentication through user ID and password using 802.1x, and only the principle of roaming or sharing of application (AP) among service providers has been established. The presentation is not made.

In conclusion, even if it is assumed that the problem of user authentication is solved by the 802.1x protocol or other types of protocols, the AP sharing problem should be solved for the public local area network service. In providing broadband communication service using a wireless local area network, competition between operators to secure a specific limited space as a service area becomes inevitable unless a full-scale wide area mobility service such as a cellular system is provided. This will lead to excessive competition and overlapping investments. As a result, operators will be able to develop their businesses by sharing service competition areas to improve profitability. In this case, roaming between providers will be presented as a major challenge, and it will be necessary to secure service plans.

The present invention has been made based on the above-mentioned problems and technical backgrounds, and an object thereof is to be considered when providing a public local area network service using a wireless local area network. In order to efficiently support public roaming service between providers of this authentication scheme, and future sharing problem of AP, access for public local area network service to efficiently provide public local area network service using wireless local area network And to provide a roaming service providing method.

1 is a flowchart of a general user authentication procedure.

2 is a screen during connection appearing in the pop-up window of the terminal according to the present invention,

3 is a view for explaining a procedure of a method for providing a connection and roaming service for a public local area network service according to an embodiment of the present invention;

4 is a view for explaining a procedure of a method for providing a connection and roaming service for a public local area network service according to another embodiment of the present invention;

5 is a view for explaining a procedure of a method for providing a connection and roaming service for a public local area network service according to another embodiment of the present invention;

6 and 7 are embodiments for providing an application sharing service through a direct connection between operators as shown in FIG. 5, FIG. 6 illustrates a model using an interworking device, and FIG. 7 illustrates a model directly controlled by an application. will be.

※ Explanation of code for main part of drawing

11,31,41,51: User terminal 33,35,43,45,53,55: Service provider network

37: roaming service server 47: application sharing server

In the method for providing a connection and roaming service for a public local area network service according to the present invention, an access method applied to a user terminal for a public local area network service using a wireless local area network may be used. A first step of determining whether authentication information by a subscriber is input through a specific access program for a communication network service; And a second step of adding the corresponding operator information of the subscriber to the authentication information according to the access program and transmitting it to the public local area network.

The authentication information includes, for example, a user ID and a password and is input through a pop-up window of the terminal. In another example, the authentication information includes specific authentication information such as a certificate.

In the method for providing a connection and roaming service for a public local area network service according to the present invention in order to achieve the above object, a roaming service method applied to a corresponding operator network for a public local area network service using a wireless local area network is connected. A first step of determining whether authentication information including corresponding operator information of the subscriber is received from the corresponding subscriber station; A second step of determining whether the subscriber is his or her subscriber based on the received operator information; And as a result of the determination, if it is its subscriber, provides the corresponding service, and if it is not its subscriber, transmits the authentication information to the operator network of the operator information based on the received operator information, and then responds to the response information ( That is, the method may include a third step of determining whether to provide a service based on the authentication result information based on the authentication information.

The communication between the carrier networks in the third step is, for example, made through a separate roaming service server for roaming services between the carrier networks, and as another example, a separate application sharing server that shares applications of each provider network. In another example, the network of the respective operators share the application and is made by directly communicating with each other.

In addition, when the service is terminated by performing the first to third steps, the billing information is transferred from the provider network side providing the service to the provider network side sending the response information.

Hereinafter, a method for providing a connection and roaming service for a public local area network service according to a preferred embodiment of the present invention will be described in detail with reference to the accompanying drawings.

For the public wireless local area network service according to the present invention, the user authentication and charging of the fee should be provided for the user. The current 802.11b standard considers only the non-business indoor environment and suggests only the solution for the security problem in the wireless section. In addition, the main problem to the wireless local area network system to date is focused on how to solve the security problems caused by the web (WEP) key leakage in the wireless section.

Recently, with the introduction of the 802.1x standard for the commercialization of wireless local area networks, each equipment company is focusing on developing an interface with the 802.1x drive program located above the existing 802.11b drive program. The company is pushing for the development of software (S / W) modules to support 802.1x. In the 802.1x protocol, a mode of performing user authentication using a user ID and a password, a method of authenticating a user based on a user certificate received from a network, and a method of using a smart card are used. In both of these schemes, the authentication information of a user is transmitted to the authentication server, and thus a user right is granted to the user through a predetermined authentication procedure.

A general user authentication procedure will be described with reference to FIG. 1.

In the scheme of using a user ID and password in the 802.1x protocol, when a user connects to a wireless local area network (or access point) 13 through the corresponding terminal 11, activates the communication network and requests the use thereof ( S101), as shown in FIG. 2, a pop-up window requesting input of a user ID and password as information for authentication is displayed on the screen of the corresponding terminal 11 (S102). In this case, the user ID may be given through a new subscription procedure, and when used in connection with a mobile phone, the mobile phone number may be used as it is, and when connected with xDSL, the user ID may be applied without changing the corresponding ID and password.

When the user ID and password are input through the terminal 11 and transmitted to the access point 13 (S103), the access point 13 transmits the received user ID and password to the authentication server 15. Authentication is requested (S104), and in response, the authentication server (AAA server) 15 identifies whether the user is a normal user based on the received user ID, and determines the authentication result according to the access point 13 (S105),

The access point 13 determines whether to allow the service according to the notified authentication result, and when the authentication result is found to be a normal user, the access point 13 determines the service permission and delivers it to the terminal 11. By doing so (S106), a wireless access service is provided (S107).

Subsequently, when the terminal 11 makes a service stop request to the access point 13 (S108), the access point 13 transmits information for charging to the authentication server 15 (S109). ).

As described above, if only the user ID and password are transferred in the procedure of step S103 of FIG. 1, the service in the corresponding single specific provider network proceeds without any problem.

However, when a plurality of service provider networks are mixed and access pointers are shared between service providers, that is, in the case of a public local area network service, a device capable of distinguishing service providers is required. In this case, the simplest method according to the present invention is a method for inputting a business operator using a delimiter in the process of inputting a user ID by the user as in step S103, and automatically inputting it in a specific access program embedded in the terminal. The delivery method is preferred.

That is, if the user ID is 'xxx' and the operator is 'SK', the user inputs only 'xxx' as an ID for accessing the service. Then, through the access program, authentication information is made in the form of 'xxx @ SK' in which the user ID 'xxx' and the operator 'SK' are added and the operator code as the operator information is added to the authentication server. do. In the embodiment of the present invention to be described below, it is assumed that such a user ID system is applied.

3 is a view illustrating a procedure of a method for providing a connection and roaming service for a public local area network service according to an embodiment of the present invention, wherein the access terminal is embedded in the subscriber terminal and the user ID system is applied. On the premise.

First, a user who is currently connected to service provider A's network 33 and is a subscriber of service provider B 35 through his pop-up window as shown in FIG. When 'xxx' as password and 'Passwd' as password are inputted, the user ID 'xxx' and the operator information 'B' and '@' as separators are combined by a specific access program built into the terminal 31. User authentication information including the entered 'xxx @ B' and the entered password is created (S301), and 'xxx @ B + Passwd' as the generated authentication information is used to access the network of the service provider A connected. Point) 33 is passed to (S302).

Based on the received authentication information 'xxx @ B + Passwd', the operator A network 33 identifies whether the user subscribes to his service or the user subscribed to another service (S303). As a result of the identification, when the user is subscribed to his service, all the services are completed through its internal processing. However, in this embodiment, the user of the terminal 31 is a network subscriber of the service provider B. In this case, the operator A network 33 transmits the corresponding user authentication information 'xxx @ B + Passwd' to a separate roaming service server 37 for roaming service between the provider network A and B (33,35). Deliver to (S304)

The roaming service server 37 recognizes that the user is a subscriber of the service provider B network 35 based on the operator information 'B' included in 'xxx @ B + Passwd' as the received user authentication information. The user authentication information 'xxx @ B + Passwd' is transmitted to the operator B network 35 which is the user's subscription network (S305).

The operator B network 35 authenticates his service subscriber based on the received user authentication information 'xxx @ B + Passwd' and transmits the authentication result to the roaming service server 37 (S306). The roaming service server 37 transmits the received authentication result to the operator A network 33 to which the terminal 31 first attempts to connect (S307), and the operator A network to which the terminal 31 is connected. 33 starts providing a service to the terminal 31 based on the transmitted authentication result (S308).

Subsequently, when a service termination request is requested from the terminal 31 to the service A network 33 (S309), the service A network 33 terminates the service based on the request, and calculates the billing information. The roaming service server 37 is transferred to the billing server of the operator B network 35 via the medium to perform billing for the use of the corresponding service (S310, S311).

FIG. 4 is a diagram illustrating a procedure of a method for providing a connection and roaming service for a public local area network service according to another embodiment of the present invention. In the subscriber station, the access program is embedded as in the embodiment of FIG. It is assumed that the above user ID system is applied.

First, a user who is currently connected to service provider A's network 43 and who is a subscriber of service provider B 45 through his or her pop-up window as shown in FIG. When 'xxx' as password and 'Passwd' as password are inputted, the user ID 'xxx' and the operator information 'B' and '@' as separators are combined by a specific access program built into the terminal 41. User authentication information including 'xxx @ B' and the password 'Passwd' entered therein is generated (S401), and 'xxx @ B + Passwd' as the generated authentication information is connected to the network of the connected service provider A ( Is passed to the access point (43) (S402).

The operator A network 43 identifies whether the user subscribes to his service or a user subscribed to another service based on the received authentication information 'xxx @ B + Passwd' (S403). As a result of the identification, in the case of a user subscribed to his service, all services are completed through its internal processing. However, in the present embodiment, the user of the terminal 41 is a network subscriber of the service provider B, so that the service is completed. In this case, the operator A network 43 is a separate application sharing server 47 sharing the application of the user authentication information 'xxx @ B + Passwd' corresponding to the operator network A and B (43, 45) To) (S404)

The application sharing server 47 recognizes that the user is a subscriber of the service provider B network 45 based on the operator information 'B' included in 'xxx @ B and Passwd' as the received user authentication information. The user authentication information 'xxx @ B + Passwd' is transmitted to the operator B network 45 which is the user's subscription network (S405).

The operator B network 45 authenticates his service subscriber based on the received user authentication information 'xxx @ B + Passwd' and transmits the authentication result to the application sharing server 47 (S406). The application sharing server 47 transmits the received authentication result to the operator A network 43 to which the terminal 41 first attempts to connect (S407), and the operator A to which the terminal 41 is connected. The network 43 starts providing a service to the terminal 41 based on the transmitted authentication result (S408).

Subsequently, when a service termination is requested from the terminal 41 to the service A network 43 (S409), the service A network 43 terminates the service based on the request, and calculates the billing information. The application sharing server 47 is transmitted to the corresponding billing server of the service provider B network 45 so as to perform billing for the use of the corresponding service (S410 and S411).

As described above, the service model according to the embodiment of the present invention may be effectively used not only for roaming between providers as shown in FIG. 3 but also for sharing between applications as shown in FIG.

In FIG. 4, an example of providing an AP sharing service through an application sharing server 47 of a third relay service provider by a service provider is illustrated as an example. Alternatively, as shown in FIG. Application sharing services can be performed directly, which will be described below.

FIG. 5 is a diagram illustrating a procedure of a method for providing a connection and roaming service for a public local area network service according to another embodiment of the present invention. The subscriber station is the same as in the embodiment of FIGS. 3 and 4. It is based on the premise that the access program is embedded and the above user ID system is applied, and that each application network can directly communicate with each other by sharing an application.

First, a user who is currently connected to the service provider A's network 53 and who is a subscriber of the service provider B 55 through his pop-up window as shown in FIG. 2 displayed on his terminal 51, has his user ID. When 'xxx' as password and 'Passwd' as password are inputted, the user ID 'xxx' and the operator information 'B' and '@' as separators are combined by a specific access program built into the terminal 51. User authentication information including 'xxx @ B' and the password 'Passwd' entered therein is generated (S501), and 'xxx @ B + Passwd' as the generated authentication information is connected to the network of the service provider A connected thereto. Is passed to the access point (53) (S502).

Based on the received authentication information 'xxx @ B + Passwd', the operator A network 53 identifies whether the user subscribes to his service or the user subscribed to another service (S503). As a result of the identification, when the user is subscribed to his service, all the services are completed through its internal processing. However, in the present embodiment, the user of the terminal 51 is a network subscriber of the service provider B. In this case, the operator A network 53 transfers the corresponding user authentication information 'xxx @ B + Passwd' to the corresponding operator B network 55 based on the operator information 'B' included in the authentication information. Direct delivery (S504).

The operator B network 55 authenticates its service subscriber based on the received user authentication information 'xxx @ B + Passwd' and the service provider A network that the terminal 51 first attempts to access the authentication result. In operation S505, the service provider A network 53 to which the terminal 51 is connected starts to provide a service to the terminal 51 based on the transmitted authentication result in operation S506. .

Subsequently, when a service termination is requested from the terminal 51 to the service A network 53 (S507), the service A network 53 terminates the service based on the request, and also calculates the billing information. Transfer to the billing server of the operator B network 55 to perform billing for the use of the service (S508).

Such direct communication between the operator A network 53 and the operator B network 55 may be implemented by mutually sharing the applications used between the networks as described above, but may be implemented by using interworking equipment between networks as another example.

That is, in order to provide an application sharing service through a direct connection between providers as in the embodiment of FIG. 5, a method of using an interworking device and a method of directly controlling the application may be used. These methods are shown in FIGS. 6 and 7. have.

In the scheme using the interworking equipment of FIG. 6, the MIB gateway equipment 60 converts the information so that the information between the two providers 53 and 55 can be mutually compatible.

In the method of controlling directly by the application as shown in FIG. 7, the application operator 70 identifies the corresponding operator of the user and requests authentication as the corresponding operator. In this case, the application 70 may have different operators 55 or. 55) It must support the function to connect to the authentication server. In addition, when the user terminates the service, the same information should be transmitted to the billing server of the provider 70 that provided the application and the provider 53 or 55 who provided the service.

As described in detail above, according to the method for providing an access and roaming service for a public local area network service according to the present invention, a user access method and a business for efficiently providing a public local area network service using a wireless local area network; By providing a roaming method between manganese, it is possible to effectively solve the problem of roaming and application sharing between operators in the future. This maximizes the stability and efficiency of public local area network services.

Claims (10)

An access method applied to a user terminal for a public local area network service using a wireless local area network, A first step of determining whether there is a connection request of a user including input of authentication information by a subscriber through a specific access program for the public local area network service; And And a second step of adding the corresponding operator information of the subscriber to the authentication information in accordance with the specific access program and transmitting the information to the public local area network. The method of claim 1, The authentication information is a user ID (ID) and password (Password), characterized in that the input via the pop-up (Pop-up) window of the user terminal, characterized in that the access method for a local area network service. The method of claim 1, And the authentication information is a certificate provided from the public local area network. The method according to any one of claims 1 to 3, And wherein the second step includes a delimiter for distinguishing the authentication information from the operator information. In a roaming service method applied to a service provider network for a public local area network service using a wireless local area network, A first step of determining whether authentication information including corresponding operator information of the subscriber is received from a connected subscriber's terminal; A second step of determining whether the subscriber is its own subscriber based on the received operator information; And As a result of the determination, if the subscriber is the subscriber, the communication network service is provided on the public basis, and if the subscriber is not the subscriber, the authentication information is transmitted to the operator network of the operator information based on the received operator information. And a third step of determining whether to provide a service based on the response information about the roaming service. The method of claim 5, wherein The response information is a roaming method for a public local area network service, characterized in that the authentication result information based on the authentication information. The method of claim 5, wherein The third-party communication between the provider network, roaming method for a public local area network service, characterized in that the communication is made via a separate roaming service server for the roaming service between the operator network. The method of claim 5, wherein The third step communication between the carrier network, roaming method for a public local area network service, characterized in that the communication via the separate application sharing server sharing the application of the operator network. The method of claim 5, wherein The third step communication between the carrier network, the roaming method for a public local area network service, characterized in that the communication between the operator network and the application directly to each other. The method according to any one of claims 5 to 9, Roaming method for a public local area network service, when the termination of the provision of the public local area network service, the billing information is transferred to the provider network side that has sent the response information from the provider network side providing the public local area network service.