KR100456034B1 - System and Method For On-Line Release In Wireless Local Loop System - Google Patents

Abstract

The present invention relates to an on-line recovery system and method in a wireless subscriber network system, and more particularly, to recover an on-recovery terminal that has failed due to authentication failure while performing an authentication function by using an SSD item, to perform on-line recovery using an paging channel in an idle state. An online recovery system and method in a subscriber network system.

The present invention can use the paging channel (Paging Channel) to recover the non-recovery terminal due to the authentication failure can change the SSD item without connecting the route between the call between the call destination terminal, authentication failure without visiting the service center An object of the present invention is to provide an online service for recovering a terminal.

Description

System and Method for On-Line Release In Wireless Local Loop System

The present invention relates to an on-line recovery system and method in a wireless subscriber network system, and more particularly, to recover an on-recovery terminal that has failed due to authentication failure while performing an authentication function by using an SSD item, to perform on-line recovery using an paging channel in an idle state. An online recovery system and method in a subscriber network system.

In general, a wireless local loop (hereinafter referred to as a "WLL") is also called a wireless subscriber line, and a subscriber line connecting a telephone station and a subscriber station is configured using a wireless system instead of a wired line.

The products developed for the WLL include a system using a communication satellite, a system using a fixed microwave, a system using a cellular technology, a system using a codeless technology, etc. The most commonly used product is a cellular technology. It is a system.

The system applying the cellular technology can use the same network as a cellular mobile phone or PCS (personal mobile communication), but can cover a larger area and can configure the network economically, and the transmission path capacity of the cellular system The multiple access method that multiple users use is divided into analog FDMA and digital TDMA and CDMA, which have larger subscriber capacity than other methods, non-flammable, and no multi-channel paging. CDMA is expected to become mainstream.

In addition, the WLL system is expected to have many applications due to the economical improvement and the ease and flexibility of the communication network.

Hereinafter, a configuration for terminal authentication in a conventional WLL system will be described with reference to FIG. 1.

1 is a block diagram briefly illustrating a configuration for terminal authentication in a conventional WLL system.

In the conventional WLL system, a terminal for authentication is composed of a mobile station (MS) 10, a base station transceiver subsystem (BTS) 20, and a WLL system 30. Here, the WLL system 30 transmits and receives a signal and a message through the base station 20 to authenticate the terminal 10.

In addition, the WLL system 30 may perform an authentication function by interworking with an authentication center (AC) to authenticate the terminal 10, or independently perform an authentication function without interworking with the authentication center. You may.

Hereinafter, a terminal authentication method in a conventional WLL system will be described with reference to FIG. 2.

2 is a flowchart briefly illustrating a terminal authentication method in a conventional WLL system.

First, authentication of the terminal 10 is performed when the terminal 10 attempts to make an incoming / outgoing call. The terminal 10 authenticates the originating call via the base station 20 by the WLL system 30. In the case of interworking with the center, the authentication center is transmitted. On the other hand, when the WLL system 30 does not interwork with the authentication center, the WLL system 30 is transmitted to the authentication center or the WLL system 30. The authentication data transmitted by 10 is received (step S201).

The WLL system 30 performs an authentication function based on the received authentication data to determine whether the terminal is a legitimate terminal (step S202). In the following description, the WLL system 30 does not interwork with the authentication center.

In this case, when it is determined that the terminal 10 is not valid, the WLL system does not connect a call because it does not connect a path to a call, whereas, when it is determined that the terminal 10 is determined as the result of the determination, When the WLL system notifies the mobile switching center (hereinafter referred to as 'MSC') that it is a legitimate terminal 10, the MSC performs a function of connecting a call by connecting a path to a call.

Then, the authentication data function is performed and authentication data is updated to perform authentication at the next arrival and reception (step S203). The authentication data update item is classified according to the 95A and 95B recommendations. , 'SSD' item, a count item, and a unique challenge item. There are three items that can be selected and used when the authentication data is updated.

In addition, a key element for performing authentication is a secret key (hereinafter referred to as 'A-key'), in particular used to update the SSD value, the authentication value used to perform the authentication function is managed by the authentication center, When the WLL system 30 performs an authentication function independently in the WLL system 30 without interworking with an authentication center, it manages various data required for performing authentication, such as SSD, count, uniqueness attempt, and A-Key value.

Therefore, in order to use the authentication function between the terminal 10 and the WWL system 30, an A-Key value should be generated by the WLL system 30 and manually inserted into the terminal 10. Although a large amount of data needs to be exchanged between the terminal 10 and the WLL system 30, since the security and reliability of authentication are important, SSD items are mainly used in the majority of authentication methods, and the WLL system 30 ) Also uses SSD items.

When the terminal attempts to make an incoming / outgoing call, that is, after the call path is opened, various values necessary for authentication are updated by using a traffic channel of the call path. Here, the traffic channel is also referred to as a call channel, and refers to a radio frequency channel through which actual voice communication is transmitted and is distinguished from a control channel, and refers to a pair of a forward traffic channel and a reverse traffic channel.

Among the various values required for the authentication, the SSD value is configured as a 64-bit (Bite) value, and the terminal 10 and the WLL system 30 are each maintained as a unique value. The SSD value and the resultant value thereof are exchanged between the terminal 10 and the WLL system 30 and changed to a new SSD value, respectively.

In addition, it performs an authentication function to change the SSD value for each call in order to block the incoming and outgoing access of the illegal terminal.

However, when the authentication data signal is lost due to a failure of the air section and the WLL system 30 during the SSD update to the traffic channel after the path of the call is connected, the authentication failure occurs and the call is disconnected. When it occurs, since the SSD values managed by the terminal 10 and the WLL system 30 are different, the terminal 10 is in an unrecoverable state in which a call is not made even when the terminal is a legitimate terminal (step S204).

In order to recover the non-recovery terminal 10 due to the authentication failure, the WLL system 30 recovers the terminal by generating a new A-Key and manually inserting the A-Key value into the terminal to initialize the SSD value. This function can only provide offline services that the customer must visit the service center (step 205).

Therefore, since the offline service is provided to recover the authentication failure terminal in the WLL system as in the prior art, it is necessary to visit the service center, expose various data values according to the authentication, and independently authenticate the function without having an authentication center. In the case of the WLL system that performs the authentication, the load of the authentication is easy to increase and the authentication function is performed using the traffic channel of the channel path, thereby causing an overload of the WLL system.

The present invention is to solve the problems described above, by using a paging channel (Paging Channel) to recover the non-recovery terminal due to the authentication failure to change the SSD item without connecting the path to the call between the destination terminal It is possible to provide an online service that can recover an authentication failure terminal without visiting a service center, and an object thereof is provided.

1 is a block diagram schematically showing a configuration for terminal authentication in a conventional WLL system.

2 is a flow chart briefly showing a terminal authentication method in a conventional WLL system.

3 is a block diagram schematically illustrating a configuration for terminal authentication in a WLL system to which an on-line recovery system and method according to an embodiment of the present invention are applied.

4 is a flowchart illustrating a terminal authentication method in a WLL system to which an on-line recovery system and method according to an exemplary embodiment of the present invention are applied.

FIG. 5 is a block diagram of an online recovery system in a WLL system according to an embodiment of the invention in FIG.

6 is a flow chart illustrating in detail the online recovery method in the WLL system according to an embodiment of the present invention.

Explanation of symbols on the main parts of the drawings

40: terminal (MS: Mobile Station)

50: Base Station Transceiver Subsystem (BTS)

60: WLL (Wireless Local Loop)

In the wireless subscriber network system of the present invention for solving the above object, the on-line recovery system is an unrecovered state of a terminal that cannot make an incoming / outgoing call because the authentication data is lost due to a failure of the wireless section and the WLL system while performing the authentication function. An MMC command processing module for instructing an operator to perform online recovery of an incomplete recovery terminal due to an authentication failure; A terminal location inquiry module for searching for information of the non-recovery terminal due to the authentication failure to find the location of the terminal; An SSD update performing module for performing SSD update by calculating and analyzing authentication data between the non-recovery terminal due to the authentication failure and the WLL system; And a processing result output module for outputting a processing result for performing the on-line recovery function of the non-recovery terminal due to the authentication failure to the operator console.

In addition, the on-line recovery method in the wireless subscriber network system of the present invention is the authentication failure terminal in the unrecovered state of the terminal that can not be sent and received because the authentication data is lost due to the failure of the wireless section and the WLL system during the authentication function Receiving an MMC command of an operator for performing an online recovery function of the to perform processing; Searching for information on the failed authentication terminal and checking a state by finding a location of the failed authentication terminal using paging; Performing an SSD update function by calculating and analyzing authentication data between the authentication failure terminal and the WLL system using a paging channel to update the SSD of the located authentication failure terminal; And performing a function of outputting a processing result of performing an on-line recovery function between the authentication failure terminal and the WLL system to an operator console.

Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings.

First, referring to FIG. 3, a configuration for terminal authentication in a WLL system to which the present invention is applied is as follows.

3 is a block diagram schematically illustrating a configuration for terminal authentication in a WLL system to which an on-line recovery system and method according to an embodiment of the present invention are applied.

In the WLL system to which the on-line recovery system and method according to an embodiment of the present invention is applied, a configuration for terminal authentication includes a mobile station (MS) 40 and a base station transceiver subsystem (BTS) 50. And the WLL system 60.

Herein, an air section refers to a section in which a signal is exchanged between the terminal 40 and the base station 50, and a paging message indicates a WLL system when the terminal 40 fails authentication. In step 60, this refers to a message sent through the paging channel to recover the authentication failure terminal 40.

Meanwhile, referring to FIG. 4, a terminal authentication method in a WLL system to which the present invention is applied is as follows.

4 is a flowchart illustrating a terminal authentication method in a WLL system to which an on-line recovery system and method according to an exemplary embodiment of the present invention are applied.

Authentication of the terminal 40 is performed when the terminal 40 attempts to make a call to and from the WLL system 60 through the base station 50. Hereinafter, the terminal 40 and the WLL system 60 will be performed. When transmitting and receiving a signal between the base station 50 via.

First, the terminal 40 combines authentication data of the terminal 40 managed by the terminal 40 to calculate an AUTHR (AUTHentication Result) value, which is an authentication response, and sends and receives the call through the base station 50. The WLL system 60 transmits authentication data of the terminal 40 including the AUTHR to the WLL system 60 through the base station 50 at the same time as the WLL system 60 attempts. At the same time as receiving the call from the terminal 40 and receives the authentication data of the terminal 40 including the AUTHR (step S401). Here, the AUTHR is the authentication response of the CAVE algorithm during the Global Challenge.

Accordingly, the WLL system 60 calculates the AUTHR value of the WLL system 60 by combining the authentication data of the WLL system 60 managed by the WLL system 60, and when the terminal 40 makes an incoming / outgoing call. It compares with the AUTHR value of the terminal 40 contained in the authentication data of the terminal 40 transmitted to (step S402).

Accordingly, the legitimacy of the terminal 40 is determined according to whether the two AUTHR values match. The legitimacy of the terminal 40 is determined whenever the terminal 40 tries to make an incoming / outgoing call (step S403). .

In this case, when the terminal 40 is illegal, that is, when the AUTHR value of the terminal 40 and the AUTHR value of the WLL system 60 do not match, the WLL system 60 receives the originating terminal. The call is not connected because the path is not connected to the terminal (step S404). In addition, the called terminal also performs the same authentication function as the calling terminal and does not connect a path to a call when the called terminal is illegal.

On the other hand, when the terminal 40 is legitimate, that is, when the AUTHR value of the terminal 40 and the AUTHR value of the WLL system 60 coincide, the WLL system 60 receives the originating terminal. The call is connected by connecting a path with a call to the terminal (step S405). In addition, the called terminal performs the same authentication function as the calling terminal, and if the called terminal is legitimate, connects the path with a call.

Accordingly, the call path between the calling terminal and the called terminal is connected to perform authentication data update function on the traffic channel of the call path to perform the next call authentication. In particular, the SSD is updated using an SSD update item. When performing the update procedure, the WLL system 60 calculates a RANDSSD value for updating the SSD value with reference to the A-Key and transmits the RANDSSD value to the terminal 40, and the terminal 40 is connected to the A-Key. The RANDBS value is calculated by referring to the received RANDSSD value and transmitted to the WLL system 60.

Accordingly, the WLL system 60 analyzes the RANDSSD value calculated by the WLL system 60 and the RANDBS value received from the terminal 40, and the WLL system 60 updates the SSD to the terminal 40. When the AUTHBS indicating to do is transmitted, the terminal 40 receiving the AUTHBS combines the A-KEY value maintained by the terminal 40 with the RANDSSD value transmitted from the WLL system 60 to generate a new value. Change the SSD value and transmit the result to the WLL system 60, and the WLL system 60 transmits the A-Key value managed by the WLL system 30 and the RANDSSD value transmitted to the terminal 10. Are combined to change to the new SSD value (step 406).

The WLL system 60 checks whether a failure occurs in the air section between the base station 50 and the terminal 40 and the WLL system 60 during the SSD update to the traffic channel after the call path is connected. The determination is made (step 407).

At this time, if a failure does not occur during the SSD update process, authentication of the terminal 40 in the WLL system 60 succeeds (step 408).

On the other hand, when a failure occurs during the SSD update, that is, when the authentication data signal (Signal) is lost during the SSD update, authentication of the terminal 40 in the WLL system 60 fails, the WLL System 60 cuts the connected arc (step 409).

Accordingly, since the failure occurs during the SSD update, the terminal 40 is not authenticated by the WLL system 60, and the connected call is disconnected, so the SSD value managed by the terminal 40 and the WLL system 30 are managed. Since the SSD values are different from each other, even in the case of a legitimate terminal, an incomplete recovery state is prevented (step S410).

Accordingly, the on-line recovery process of the authentication failure terminal for recovering the non-recovery terminal 40 due to the authentication failure on-line using the SSD item is performed (step S411). That is, to recover the authentication failed terminal 40, the operator drives the man machine communication (MMC) performing module 61 to retrieve the location of the authentication failed terminal requested by the operator. And a series of outputting the result of the SSD update of the terminal 40 in the SSD update performing module 63 based on the location information of the terminal and driving the processing result output module 64 to the operator console. Through the process of recovering the authentication failure terminal.

Hereinafter, the configuration of the WLL system for the online recovery of the authentication failure terminal at the time of terminal authentication in the WLL system will be described with reference to FIG. 5.

FIG. 5 is a block diagram illustrating an online recovery system in a WLL system according to an embodiment of the present invention.

In the WLL system 60, the online recovery system includes an MMC command processing module 61 for instructing an operator to perform online recovery of the non-recovery terminal 40 due to an authentication failure, and a non-recovery terminal due to the authentication failure. Calculate and analyze authentication data between the terminal location inquiry module 62 for retrieving the information of 40 and the location of the terminal 40, and the non-recovery terminal 40 due to the authentication failure and the WLL system 60. SSD update performing module 63 for performing SSD update and processing results for performing the online recovery function of the non-recovery terminal 40 due to the authentication failure in the WLL system 60 (Consol) It is composed of a processing result output module 64 for outputting.

Hereinafter, an online recovery process of an authentication failure terminal during terminal authentication in a WLL system will be described with reference to FIG. 6.

FIG. 6 is a flowchart illustrating in detail an online recovery method in a WLL system according to an embodiment of the present invention.

First, the operator transmits a MMC (Man Machine Communication) command to the WLL system 60 to request the restoration of the authentication failure terminal 40, and the WLL system 60 receives the MMC command (step S601).

Accordingly, the WLL system 60 drives the MMC command processing module 61 to read the number of the authentication failure terminal 40 requested for recovery (step S602). Here, the authentication failure terminal 40 refers to the non-recovery terminal 40 due to the authentication failure.

The WLL system 60 determines whether the number of the read authentication failure terminal 40 exists in the DB (DataBase) of the WLL system 60 (step S603).

At this time, if the number of the authentication failure terminal 40 does not exist in the DB of the WLL system 60, the WLL system 60 drives the processing result output module 64 to the authentication failure terminal 40 ) Outputs a result message including the reason for the recovery failure to the operator console (step S604).

On the other hand, when the number of the authentication failure terminal 40 exists in the DB of the WLL system 60, the WLL system 60 drives the terminal location inquiry module 62 to operate the authentication failure terminal 40 Is checked (step S605).

Accordingly, the WLL system 60 determines whether the state of the authentication failure terminal 40 is idle and can receive paging or busy and cannot receive paging. Determine (step 606). Here, the state that can receive the paging refers to a state capable of receiving a paging message through the paging channel, and the state that cannot receive the paging refers to a paging channel. Paging message (Paging Message) can not be received through the state. In addition, the paging channel is a radio control channel used for a terminal call, and is a forward control channel (FCC) used to send a command to call a mobile station.

At this time, when the state of the authentication failure terminal 40 is Busy and cannot receive paging, the WLL system 60 drives the processing result output module 64 so that the authentication failure terminal ( A result message including the recovery failure reason of 40) is output to the operator console (step S604).

On the other hand, when the state of the authentication failure terminal 40 is idle and paging can be received, the WLL system 60 drives the SSD update performing module 63 (step S607). Here, the SSD update performing module 63 includes a RANDSSD value calculation procedure, a RANDBS value analysis procedure, an AUTHBS value calculation procedure, and an update processing result analysis procedure.

Accordingly, the WLL system 60 calculates a RANDSSD value by driving a RANDSSD value calculation procedure and transfers the RANDSSD value to the authentication failure terminal 40 (step S608). Here, the RANDSSD value calculation procedure is a CAVE algorithm by extracting a random number with a random number generator and combining the A-kEY value of the authentication failure terminal 40 stored in the DB of the WLL system 60 based on the extracted random number Calculate the RANDSSD value.

Accordingly, the authentication failure terminal 40 receiving the RANDSSD value calculates a RANDBS value and transfers the RANDBS value to the WLL system 60. Accordingly, the WLL system 60 receives the authentication failure terminal ( It is determined whether the RANDBS value has been received from 40) (step S609).

In this case, when the RANDBS value is not received from the authentication failure terminal 40, the WLL system 60 drives the processing result output module 64 to include a recovery failure reason of the authentication failure terminal 40. The resulting message is output to the operator console (step S604).

On the other hand, when receiving the RADNBS value from the authentication failure terminal 40, the WLL system 60 runs a RANDBS value analysis procedure to analyze the result (step S610), the authentication failure terminal 40 It is determined whether or not the update processing is possible (step S611). Here, the RANDBS value analysis procedure analyzes the RANDBS value which is a report on the result of processing the RANDSSD value delivered to the authentication failure terminal 40 by the authentication failure terminal 40, and outputs the corresponding result. (50) A random number generated by the authentication failure terminal 40 during a challenge and used as an input to the CAVE algorithm.

At this time, when the authentication failure terminal 40 is unable to update, the WLL system 60 drives the processing result output module 64 to output a result message including the recovery failure reason of the authentication failure terminal 40. Output to the console (step S604).

On the other hand, when the authentication failure terminal 40 is capable of updating, the WLL system 60 calculates an AUTHBS value by driving an AUTHBS value calculation procedure and transfers the AUTHBS value to the authentication failure terminal 40. (Step S612). Here, the AUTHBS value calculation calculates a new SSD value and instructs the authentication failure terminal 40 to update the SSD. The AUTHBS is an authentication result of the CAVE algorithm during the base station 50 attempt.

Accordingly, the authentication failure terminal 40 having received the AUTHBS value changes the existing SSD value to a new SSD value for SSD update, and transfers the SSD update processing result to the WLL system 60. The WLL system 60 determines whether the SSD update processing result has been received from the authentication failure terminal 40 (step S613).

In this case, when the SSD update processing result is not received from the authentication failed terminal 40, the WLL system 60 drives the processing result output module 64 to restore the failure of the authentication failed terminal 40. Output the resulting message including the to the operator console (step S604).

On the other hand, when the SSD update processing result is received from the authentication failure terminal 40, the WLL system 60 runs an update processing result analysis procedure to analyze the received SSD update processing result (step S614). In step S615, it is determined whether the authentication failed terminal 40 has been successfully updated. Here, in the update processing result analysis procedure, the authentication failure terminal 40 analyzes the SSD update processing result, which is a report on the change processing to the new SSD value, and outputs the corresponding result.

At this time, when the update process of the authentication failure terminal 40 is successful, the WLL system 60 drives the processing result output module 64 to output a result message including the reason for the restoration success of the authentication failure terminal 40. Output to the operator console (step S616).

On the other hand, when the update process of the authentication failure terminal 40 fails, the WLL system 60 drives the processing result output module 64 so as to include a result message including the recovery failure reason of the authentication failure terminal 40. Is output to the operator console (step S604).

As described above, it is possible to recover the non-recovery terminal due to the authentication failure online.

In addition, the embodiment according to the present invention is not limited to the above-mentioned, and can be implemented by various alternatives, modifications, and changes within the scope apparent to those skilled in the art.

As described above, since the present invention uses a paging channel in an idle state to recover a non-recovery terminal due to an authentication failure, an SSD item can be changed without connecting a path to a call between terminals. In addition, if a batch job is performed using a small amount of time without causing an overload of the WLL system, a function can be performed more efficiently.

In addition, the present invention can recover the authentication failure terminal on-line without visiting the service center, and thus it is possible to increase the security and reliability of authentication since it does not expose various data values according to authentication as offline.

Claims (7)

In the unrecovered state of a terminal that cannot make an incoming / outgoing call because authentication data is lost due to a failure of a wireless section and a WLL system while performing an authentication function, An MMC instruction processing module for instructing an operator to perform on-line recovery of the non-recovery terminal due to authentication failure; A terminal location inquiry module for searching for information of the non-recovery terminal due to the authentication failure to find the location of the terminal; An SSD update performing module for performing SSD update by calculating and analyzing authentication data between the non-recovery terminal due to the authentication failure and the WLL system; And a processing result output module for outputting a processing result for performing the on-line recovery function of the non-recovery terminal due to the authentication failure to an operator console. In the unrecovered state of a terminal that cannot make an incoming / outgoing call because authentication data is lost due to a failure of a wireless section and a WLL system while performing an authentication function, Receiving and processing an MMC command of an operator for performing an online recovery function of the authentication failure terminal; Searching for information on the failed authentication terminal and checking a state by finding a location of the failed authentication terminal using paging; Performing an SSD update function by calculating and analyzing authentication data between the authentication failure terminal and the WLL system using a paging channel to update the SSD of the located authentication failure terminal; And performing a function of outputting a processing result of performing an on-line recovery function between the authentication failure terminal and the WLL system to an operator console. The method of claim 2, The MMC command processing process, And receiving an MMC command which is a recovery request for an authentication failure terminal of an operator, and then driving an MMC command processing module to read the number of the authentication failure terminal requested for recovery. The method of claim 2, The location finding process of the terminal, Determining whether the read authentication failed terminal number exists in a DB (DataBase) of the WLL system; If the number of the failed authentication terminal is present in the DB of the WLL system, driving the terminal location inquiry module to check the state of the failed authentication terminal. Recovery method. The method of claim 2, The SSD update process, When the state of the authentication failure terminal is idle and can receive paging, after the SSD update execution module is driven, a RANDSSD value calculation procedure is driven to calculate a RANDSSD value and the RANDSSD is transmitted to the authentication failure terminal. Passing a value; Determining whether a RANDBS value is received from the authentication failure terminal; When the RANDBS value is received from the authentication failure terminal, determining whether to update processing of the authentication failure terminal by driving a RANDBS value analysis procedure; In the case where the authentication failure terminal can be updated, the step of calculating the AUTHBS value by running an AUTHBS value calculation procedure and transmitting the AUTHBS value to the authentication failure terminal, characterized in that the on-line in the wireless subscriber network system Recovery method. The method of claim 2, The process result output process, Determining whether an SSD update processing result is received from the authentication failure terminal; When the SSD update processing result is received from the authentication failure terminal, driving an update processing result analysis procedure to determine whether the authentication failure terminal has succeeded in updating; And when the update processing of the authentication failure terminal is successful, driving the process result output module to output a result message including a reason for the restoration success of the authentication failure terminal to the operator console. How to recover online. The method of claim 6, The process result output process, The case where the number of the authentication failure terminal does not exist in the DB of the WLL system, the state of the authentication failure terminal is busy and cannot receive paging, and the RANDBS value from the authentication failure terminal. Is not received, when the authentication failure terminal cannot update processing, when the SSD update processing result is not received from the authentication failure terminal, and when the update processing of the authentication failure terminal fails, the processing result output module. And outputting a result message including a reason for the restoration failure of the authentication failure terminal to an operator console by driving the controller.