KR100595870B1 - Intergrated services management apparatus and method in W-LAN - Google Patents

Abstract

1. TECHNICAL FIELD OF THE INVENTION

The present invention relates to an apparatus and method for managing service integration in a wireless LAN.

2. The technical problem to be solved by the invention

The present invention, when providing a high-speed Internet service centered on a wireless LAN network, regardless of the location of the wireless terminal (LAN card equipped with a PDA or PDA) in the wireless LAN to ensure continuous service provision and transparent data transmission using the Internet To provide a service integrated management apparatus and a method thereof and a computer-readable recording medium recording a program for realizing the method.

3. Summary of Solution to Invention

The present invention provides a device for integrated service management in a wireless LAN, wherein, when providing a wireless Internet service, a network management and service management for providing a service without interruption by guaranteeing mobility of a wireless terminal based on user information authentication is performed. By integrating authentication service / billing service / subscriber management function according to type, it provides MAC ID based authentication service, usage inquiry function according to real time usage detection, and packet based time / date / period pay-as-you-go billing function. Facilitates service provision and service management using the Internet in specialized hot spots, unifies network management and service management processing needs, and provides stabilized and uninterrupted Internet service through centralized management, Traffic information management service means for the integrated management of WLAN services And WLAN service integration management means for transmitting to the operator access means; In order to perform service operation management for service processing from the WLAN service integrated management means, traffic information transmitted and received and information processed by each means are collected regularly or at the request of an operator, and analyzed and managed. Service operation management means for storing in a database and managing operation management information in real time by setting operation management parameters according to an operator's request; An operator access means for receiving a command from an operator and informing the operator of the result of the service integration management in the WLAN; And a database management means for managing a subscriber information database for subscription of a subscriber, an authentication information database for authentication, a charging information database for charging, and an operation management database for operating a service, and providing status information according to the management.

4. Important uses of the invention

The present invention is used in a WLAN service network.

Wireless LAN, Nespot, Integrated Management, Authentication Service, Subscriber Management, Billing Service

Description

Intergrated services management apparatus and method in W-LAN             

1 is a diagram illustrating a configuration of a WLAN service network to which the present invention is applied.

2 is a flowchart illustrating a service integration management method in a WLAN according to the present invention;

3 is a configuration diagram of an embodiment of an integrated service management apparatus for a wireless LAN according to the present invention;

Figure 4 is a detailed configuration diagram of an embodiment of the authentication service processing unit of the service integrated management apparatus according to the present invention.

Figure 5 is a detailed configuration diagram of an embodiment of the billing service processing unit of the service integration management apparatus according to the present invention.

6 is a detailed configuration diagram of an embodiment of a subscriber management unit of a service integrated management device according to the present invention;

7 is a detailed configuration diagram of an embodiment of a service operation management unit of the service integrated management device according to the present invention.

8 is a detailed configuration diagram of an embodiment of the operator connection of the service integration management apparatus according to the present invention.

* Explanation of symbols for the main parts of the drawings

31: authentication service processing unit 32: billing service processing unit

33: subscriber management unit 34: service operation management unit

35: operator connection 36: database management system (DBMS)

The present invention relates to an apparatus for integrated service management in a wireless LAN, a method thereof, and a computer-readable recording medium recording a program for realizing the method. Particularly, the present invention provides subscribers with uninterrupted and stable service and various service conveniences. A service integrated management device in a wireless LAN for providing services capable of providing services and providing additional management functions and expandable functions for business establishments, and a computer recording the method and a program for realizing the method. The present invention relates to a readable recording medium.

According to the present invention, authentication based on user information and MAC ID is provided in a high speed wireless Internet service providing a mobile access service to the Internet through a wireless interface centered on a hot spot where a wireless terminal is characterized when providing an IP-based high speed internet service. By providing the authentication service based on this, it is possible to provide reliable and uninterrupted service to subscribers and to offer the integrated service management technology for NEPSOT for network operators, and to provide stable and various internet services. In particular, the UDP (User Datagram Protocol) based authentication protocol (RADIUS) provided by the existing 802.11b has a weakness in security.

The 802.1X-based wireless section complements this and provides the Internet access service to which the 802.1X-EAP-MD5 authentication method can be applied.In case of abnormal termination and failure of the AP that must provide the authentication protocol quickly, users can access the service. Since it can not be provided to the network operators to provide unreliable authentication services, which is disadvantageous in competition with other operators.

Therefore, we propose a service integrated management technology for NEPSOT that can perform the service management online as quickly as possible by minimizing the effect on the service by connecting the hot spot area and the central management system due to the characteristics of the service. In this way, each functional element is designed to be modular and extensible so that transparent service usage can be applied to different networks among network operators, thereby providing convenient services suitable for subscribers' preferences and supporting differentiated services from other operators. To make it possible. Furthermore, in order to reflect the characteristics of the Internet Protocol (IP) network properly and satisfy the increasing demands of the Internet users, it provides a usage inquiry function based on real-time usage detection and a pay-as-you-go function based on time / date / period.

Therefore, in the current technical field, by providing mobile access to the Internet through a wireless interface in a specialized hot spot when providing IP-based high-speed Internet service, it is possible to guarantee various terminal mobility based on user information authentication. When providing mobile Internet service, uninterrupted service is provided to subscribers and scalable service is provided to network operators, so service integration management technology in high-speed wireless LAN is essential.

The present invention has been proposed in order to meet the above-mentioned requirements, and when providing high-speed Internet service centering on a wireless LAN network, without interruption using the Internet regardless of the location of a wireless terminal (laptop or PDA equipped with a LAN card). An object of the present invention is to provide a service integrated management apparatus in a wireless LAN for guaranteeing service provision and transparent data transmission, and a method and a computer readable recording medium recording a program for realizing the method.

The present invention for achieving the above object, in the integrated service management device in a wireless LAN, network management and service for providing services without interruption by guaranteeing the mobility of the wireless terminal based on user information authentication when providing wireless Internet service For management, it integrates authentication service / billing service / subscriber management function according to subscriber type, provides MAC ID based authentication service, usage inquiry function according to real time usage detection, and packet based time / date / Period pay-per-period to facilitate service provision and service management using the Internet in specialized hot spots, and unify network management and service management processing needs to ensure stable and uninterrupted management through centralized management Provides Internet service and traffic for integrated management of WLAN service Information service WLAN service integration management means for transmitting to the operation management means, and operator access means; In order to perform service operation management for service processing from the WLAN service integrated management means, traffic information transmitted and received and information processed by each means are collected regularly or at the request of an operator, and analyzed and managed. Service operation management means for storing in a database and managing operation management information in real time by setting operation management parameters according to an operator's request; An operator access means for receiving a command from an operator and informing the operator of the result of the service integration management in the WLAN; And a database management means for managing a subscriber information database for subscribing subscribers, an authentication information database for authentication, a charging information database for charging, and an operation management database for operating a service, and providing status information according to the management. It is characterized by.

On the other hand, the present invention, in the integrated service management method in a wireless LAN, when providing wireless Internet service, for network management and service management for providing services without interruption by guaranteeing the mobility of the wireless terminal based on user information authentication, Integrate authentication service / billing service / subscriber management function according to subscriber type, provide MAC ID based authentication service, usage inquiry function based on real-time usage detection, and packet based time / date / period Functions to facilitate service provision and service management using the Internet in specialized hot spots, unified network management and service management processing needs, and provide stable and uninterrupted Internet service through centralized management And wirelessly delivers traffic information for wireless LAN service integration management Services integrated management step; In order to perform the service operation management for the integrated WLAN service processing, the traffic information and the processed information to be transmitted and received are periodically or collected by the operator's request, analyzed and stored in the operation management database, the operator's request According to the step of setting the management parameters management management information in real time; Receiving a command from an operator and notifying the operator of the result of the service integration management in the WLAN; And managing a subscriber information database for subscribing subscribers, an authentication information database for authentication, a charging information database for charging, and an operation management database for operating a service, and providing status information according to the management. It is done.

On the other hand, the present invention, in the integrated service management device provided with a processor, when providing wireless Internet service, for network management and service management for providing services without interruption by guaranteeing the mobility of the wireless terminal based on user information authentication, Integrate authentication service / billing service / subscriber management function according to subscriber type, provide MAC ID based authentication service, usage inquiry function based on real-time usage detection, and packet based time / date / period Functions to facilitate service provision and service management using the Internet in specialized hot spots, unified network management and service management processing needs, and provide stable and uninterrupted Internet service through centralized management For delivering traffic information for wireless LAN service integration management .; In order to perform the service operation management for the integrated WLAN service processing, the traffic information and the processed information to be transmitted and received are periodically or collected by the operator's request, analyzed and stored in the operation management database, the operator's request According to, the function of setting the operation management parameters to manage the operation management information in real time; Receiving a command from an operator and notifying the operator of the result of the service integration management in the WLAN; And a program for managing a subscriber information database for subscriber registration, an authentication information database for authentication, a billing information database for billing, and an operation management database for service operation, and providing a function for providing status information according to the management. Provide a computer-readable recording medium for recording.

The present invention provides a high-speed wireless Internet service providing a mobile access service to the Internet through a wireless interface in a hot spot where a wireless terminal is characterized, thereby ensuring uninterrupted terminal mobility based on user information authentication. It aims to provide service processing and stabilized service management technology for service provision, and in particular, to provide real-time billing pay-as-you-go service to provide differentiated services from other operators.

In addition, the present invention provides a basis for providing a MAC ID-based certificate service that can provide the characteristics of the wireless LAN, when providing a high-speed Internet access service in a specialized hot spot (Hot Spot), centralized We will provide a foundation to provide stable and uninterrupted Internet service through management of users, provide uninterrupted service to subscribers, and provide scalable and reliable high availability services to network operators.

In addition, the present invention, unlike the existing centralized network management and service management system to ensure a systematic integrated management function by unifying the central management system and the workplace, which is a hot spot area that occurs due to the characteristics of the service, according to the failure detection By providing a quick solution, it is intended to provide reliable and uninterrupted service to service subscribers (fixed subscribers or temporary subscribers) and to be applied when building a scalable management system in different networks. In addition, roaming and network management and service management processing requests with other operators are unified to handle various services as quickly as possible in order to easily provide various services and service management using the Internet in the hot spot area generated by service characteristics. It is intended to have enough performance to minimize the impact on the system.

In addition, by providing the service processing and network / service management function that can maximize this by activating the high speed wireless internet service, it can be easily expanded and modularized so that it can be applied well when system expansion and roaming with other service providers are allowed. We want to provide service integration management technology for NESPOT.

The above objects, features and advantages will become more apparent from the following detailed description taken in conjunction with the accompanying drawings. Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings.

1 is a diagram illustrating a configuration of a WLAN service network to which the present invention is applied.

As shown in FIG. 1, in the case of using an Internet service through a wireless terminal (preferably a laptop or PDA) 10 equipped with a wireless LAN card in a wireless LAN (nespot) service network, the procedure is divided into three procedures. Can be processed.

First, a procedure for subscribing to a WLAN service, a procedure for processing a second WLAN service, and a procedure for performing a charging function for a service (authentication service) processed third.

In particular, the WLAN service processing procedure may be divided into a procedure of performing an authentication service before processing a service and a process of processing a service after authentication. The present invention focuses on the function of performing the authentication service before the service processing and the charging service providing function after the authentication service processing among the service processing procedures, which are the core functions of the above three procedures.

In the present invention, various processing methods (authentication / billing) associated with the authentication service constituting the WLAN service network, that is, the 802.1X-based authentication function processing and (user ID / PWD-based authentication service based MAC) ID-based authentication service) This article focuses on the procedure to perform authentication service before service processing, real-time billing inquiry function, and pay-as-you-go service function to provide authentication service. The service procedure after the authentication refers to that described in the invented device, and is not described in the present invention.

The present invention is a service integrated management device for performing the overall management for the wireless LAN service processing, the wireless terminal (notebook or PDA) 10 equipped with a wireless LAN card in the 802.1X network consisting of 802.1X-based AP (20) After requesting the Internet service processing (101,102) and performing preprocessing (registration (subscription) / authentication / service initiation / billing processing) on it from the service integrated management device 30, the response 103,104 to the wireless terminal 10 is received. ), The user can use the internet access service (if authentication is successful) or not (if authentication is not successful) depending on the response. At this time, the subject function that performs the response is the authentication service function before the service processing, the service integration management device 30 performs a series of detailed procedures for the processing thereof.

The authentication service processing unit 31 in the service integrated management device is a device that performs the most essential functions in the service integrated management device in the WLAN, and is based on various user information based on MAC ID in addition to the authentication service based on accurate user ID / PWD. It also provides a function to process authentication service, and performs the function in connection with the billing service processing unit to receive the billing information and perform the real time billing function after the authentication is successful. In addition, in order to provide accurate authentication services and provide reliable, uninterrupted and highly available services, when the AP 20 abnormally terminates, failure information is received from the AP management system that manages the AP for failure information on the AP 20. Deletes all session information in AP.

The billing service processor 32 receives the real-time billing information from the authentication service processor 31 and forms a DB to provide a real-time billing inquiry function for the pay-per-user user and billing information of the users who used once a month for billing of the subscription user. Is transmitted to the Integrated Customer Information System (ICIS) 106 for billing settlement.

The subscriber management unit 33 provides a registration / termination / change / inquiry function of the subscriber information according to the subscriber subscription service. At this time. In the subscriber subscription service, registration of a regular subscriber is performed through the ICIS 106, registration of a temporary subscriber is performed through the Nessot homepage 107, and data interworking with respect to regular subscriber registration is performed through the SDMS 108.

This information is used as basic data for authentication service when subscriber wants to use WLAN service using WLAN card, laptop or PDA.

FIG. 2 is a flowchart illustrating an integrated service management method in a wireless LAN according to the present invention, and illustrates a detailed processing procedure for integrated management of authentication / billing / subscriber in a service integrated management device. It will be described the most core functions for the Nessot (NESPOT) service integration management to participate in the function of the service integration management device (30).

As shown in FIG. 2, the service processing procedure 214 is largely comprised of a procedure for subscribing. In the present invention, the service processing procedure 214 is mainly described.

First, the service processing procedure 214 will be described. First, when a wireless terminal (laptop or PDA) 10 equipped with a LAN card is to be provided with high-speed Internet service in an 802.1X wireless LAN network configured with an AP 20 supporting 802.1X function, the integrated service management device 30 It handles all of these matters.

That is, a user acquires an ID / password (ID / PWD), which is obtained at the time of subscription for use of an Internet service in an 802.1X wireless LAN configured by an AP 20 using a wireless terminal 10 equipped with a LAN card (laptop or PDA). Alternatively, when the MAC ID is input, the service processing request message is received by the authentication service processing unit 31 in the service integrated management device 30 (201).

In this way, the service processing request message received by the authentication information processing unit 312 in the authentication service processing unit 31 processes a series of functions for providing 802.1X-based authentication services and detailed functions for MAC ID-based authentication (202). This message is sent to the authentication service unit 315 (203).

Then, the authentication service unit 315 analyzes the received service processing request message to determine whether it is a registered subscriber or an accurate ID (204) and transmits a response to the authentication information processing unit 312 (205). At this time, the authentication information processing unit 312 transmits the received response message to the AP 20 (206).

When the authentication is successful, the AP 20 transmits the charging information start request message to the accounting information processing unit 313 so as to perform the accurate billing processing in the service of the registered subscriber (208). DB) to perform a series of billing processing functions for the prepaid pay-as-you-go (209), and transmits its real-time usage information to the billing service processor 32 (222). At this time, in order to provide an accurate pay-as-you-go service (per time / period / date), the session management function 207 is performed to perform the prepaid pay-as-you-go charge management function by the linkage function with the session information processing unit 314 (209). .

At this time, the main function of the session information processing unit 314 is when the user is actually using the Internet service after the successful authentication (at start) (210), and performs the session management function 207 for the session of the subscriber is created, the user service Upon completion, the accounting information processing unit 313 which has received the charging information end request message 211 from the AP 20 transmits the session termination information to the session information processing unit 314 (212) to perform a series of session management functions and to correct Create basic data that can provide cumulative usage and pay-as-you-go services. In addition, by receiving the AP failure information from the AP management system (213) to process a series of functions (function to forcibly disconnect the session) to provide a smooth authentication service in case of abnormal failure of the AP (20).

Next, looking at the main functions of the billing service processing unit 32, when receiving a real-time usage information inquiry request from the Nespot homepage through the task seat 50 to search the real-time billing information of temporary subscribers (219) by extracting the information thereof The results are transmitted to the Nespot homepage (221) and the monthly aggregated billing information is periodically transmitted to the ICIS (60) for the billing settlement of the regular subscribers (220).

Subsequently, as a function related to the subscription process, the subscription process is classified according to the type of subscriber using Nespot service. That is, a regular subscriber who wants to use a subscription performs a subscription procedure through the ICIS 60, and a temporary subscriber who wants to use a pay-per-service service subscribes through the Nespot homepage that supports service opening immediately. Therefore, the subscriber management unit 33 in the integrated service management device 30 receives the Nespot regular subscriber subscription information processing request 215 received from the ICIS-SDMS and the temporary subscriber subscription information processing request from the Nespot homepage of the work seat 50. Received (223) it is made into a DB, and transmits the results of the processing to each (216, 224). In addition, the received subscriber information is transmitted to the billing service processing unit 32 and the authentication service processing unit 31, respectively, the subscriber information necessary for billing service processing and authentication service processing (217, 218) to be used as basic data for authentication and billing. do.

In addition, the service operation management unit 34 receives (225) a service statistics related to the necessity service service and request for information inquiry about the operation from the operator connection unit 35, generates a series of statistical information, and transmits a response for inquiry ( 226).

3 is a configuration diagram of an integrated service management apparatus in a wireless LAN according to an embodiment of the present invention. In the drawing, "31" is an authentication service processor, "32" is a billing service processor, "33" is a subscriber manager, "34". "35" represents a service operation management unit, "35" represents an operator connection unit 35, and "36" represents a database management system (DBMS) 36, respectively.

As shown in FIG. 3, the apparatus for managing service integration in a wireless LAN according to the present invention includes an authentication service processor 31 and an authentication service processor 31 for performing an authentication function for a subscriber using a necessity service. Receives real-time billing information and makes it a database, performs billing inquiry function that provides pay-as-you-go service and real-time usage information inquiry function, and periodically transmits to ICIS once a month for billing settlement data. Billing service processing unit 32 for providing the traffic information about the service operation management unit 34, and periodically SDMS (Subs Receive regular subscriber registration information input from criber data management system and temporary subscriber registration information from Nespot homepage through UI (User Interface) and database it, and authentication information related to authentication service processing to authentication service processing unit 31. , The basic data of the billing related to the billing service processing is transmitted to the billing service processing unit 32, the subscriber management unit 33 for providing traffic information on the transmission and reception process information to the service operation management unit 34, and the authentication service processing unit (31), in order to perform service operation management for service processing from the billing service processing unit 32 and the subscriber management unit 33, the traffic information to be transmitted and received and the processing information in each processing unit at regular or by request of the operator. Collect, analyze and store it in the operation management database, With a parameter setting function, the information required for real-time output is delivered to the operator connection unit 35 to receive a command from the service operation management unit 34 and the operator to enable the operator to know the operation management information in real time, the wireless LAN Operator connection unit 35 to provide an environment that can check the result of the service integration management in the screen, subscriber information database for subscriber subscription, authentication information database for authentication, billing information database and service for billing A database management system 36 is provided to manage an operation management database for operation and provide status information according to the management.

Here, the authentication service processing unit 31 mainly performs a series of functions (authentication processing function equipped with 802.1X-EAP-MD5 function) for processing the authentication function for the subscriber using the Nespot service, and through the UDP port. When receiving authentication service processing request information (USER ID / PWD-based, MAC ID-based information) based on the authentication protocol (RADIUS) from the AP, it performs a series of authentication processing procedures and transmits the service processing result message to the AP. At this time, the procedure for performing the first authentication service of the service processing procedure, if the authentication is successful in detail, receives the billing information, collects the billing information for the real-time billing function and transmits it to the billing service processing unit 32 to pay-as-you-go service and Provides real-time usage information search function. At this time, the traffic information about the transmitted and received processing information is provided to the service operation management unit 34.

In addition, the operator connection unit 35 is a device that provides an environment in which the operator requests an internal function of the subscriber management unit 33 and checks the execution result on a screen, as well as a command execution request for inputting in the operator screen form, as well as a command form. It also handles the request of execution and also provides the function to execute several commands at once with command file. When entering a command, the command is requested to the corresponding function block after analyzing the syntax and semantics of the command itself. It provides a function for the operator to log in to the system and also provides a function for adding / deleting / searching / changing operator-related accounts. In addition, the command added by the operator when the command is executed is added to the system access history file to provide a history of accessing the system if the operator desires it. Help is also provided for command execution.

4 is a detailed configuration diagram of an authentication service processing unit 31 of the integrated service management apparatus according to the present invention. In the drawing, "311" is an authentication information transmitting and receiving unit, "312" is an authentication information processing unit, and "313" is An accounting information processing unit, "314" represents a session information processing unit, "315" represents an authentication service unit, and "316" represents an authentication service management unit, respectively.

The authentication information transmitting and receiving unit 311 is a function for transmitting and receiving network access authentication and accounting information based on an authentication protocol (RADIUS protocol), and receives authentication information and accounting information from the AP to process each function. It performs a function of transmitting to the processing unit 312 and the accounting information processing unit 313, and receives a result of the processing and transmits it to the AP.

The authentication information processing unit 312 performs a detailed authentication function for providing the 802.1X-EAP-MD5 function with respect to the received authentication information. That is, when the EAP authentication function is performed, the session information processing unit 314 checks whether the number of concurrent sessions of the user who has currently requested authentication has been allowed, and if the number of sessions is exceeded, the authentication rejection function is performed. Add EAP-related information to the authentication information which is a series of procedure functions for performing MD5 authentication, and if it is confirmed whether the authentication information has a session timeout function, sets this value and transmits it to the authentication service processor 316. In addition, when requesting MAC ID authentication information, since there is no "realm" information, if the user name is checked before authentication and it is determined to be MAC ID, add "@mac_realm" to the back of the user name and "mac_realm" as the "PW_USER_REALM" attribute value in the authentication information. Add to and transmit to the authentication service unit 315 to be authenticated by the authentication method registered in "mac_realm". The session information processing unit 314 provides detailed functions for guaranteeing and preventing multiple logins when processing authentication information, and determines whether the allowable session is exceeded by providing the number of sessions during authentication, and provides a pay-as-you-go service during accounting information processing. It provides a service, registers user sessions and increases the number of sessions when accounting starts, and decreases the number of sessions after deleting user sessions when accounting stops. In addition, by receiving the AP failure information received from the AP management system performs a series of functions (deleting user session information in the AP IP) for providing a smooth authentication service.

The accounting information processing unit 313 performs an accounting function. When the accounting information is received, the accounting information processing unit 313 transmits the information about the accounting information to the session information processing unit 314 to make the basic data and the usage amount for the DB, and to charge the information in real time. (32) performs the function of sending accounting logging and billing information. That is, when receiving the accounting information request from the authentication information transmitting and receiving unit 311 performs a function to perform the pay-as-you-go and prepaid billing function in comparison with the user information in the authentication information table, and if the prepaid billing function authentication service unit 315 After performing the detailed authentication function (for real-time charging function implementation) for the pay-as-you-go service, and sends a usage update request to the billing service processing unit 32 and updates the billing usage information in the authentication information.

The authentication service unit 315 receives the authentication information request received from the authentication information processing unit 312 and performs detailed functions related to authentication, such as remaining use time for checking user information and providing a pay-as-you-go service and calculating a remaining date. That is, after performing a series of authentication check functions for the received authentication information, it performs a function for transmitting a response thereto and also performs a detailed authentication function for processing pay-as-you-go services and prepaid billing (time / date / time). In addition, it provides a local restriction function to perform the function of allowing the use of the service only in the place.

The authentication service manager 316 transmits the total number of times of processing and success / failure of the authentication process information to the service operation manager 34.

5 is a detailed configuration diagram of an embodiment of a billing service processing unit of a service integrated management device according to the present invention. In the drawing, "321" is a billing information transmitting and receiving unit, "322" is a billing information processing unit, and "323" is a billing information management unit. Respectively.

When the billing information transmitting / receiving unit 321 receives a real-time usage update request from the authentication service processing unit 31, the billing information transmitting / receiving unit 321 stores it in a billing information database for each user type and transmits a response to the authentication service processing unit 31.

The billing information processing unit 322 classifies and processes each user type. In the case of a temporary subscriber, the accounting DB provides a usage inquiry function in real time. In the case of a regular subscriber, the billing information processing DB is referred to the accounting DB at a designated time. It generates and transmits it to ICIS periodically.

The billing information manager 323 performs a function of delivering the total number of times of processing and success / failure of the billing processing information to the service operation manager 34.

FIG. 6 is a detailed configuration diagram of an embodiment of a subscriber management unit of an integrated service management apparatus according to the present invention, in which "331" represents a subscriber information transmission and reception unit and "332" represents a subscriber information management unit, respectively.

The subscriber information transmitting / receiving unit 331 receives the subscriber information through the SDMS or the Nespot homepage, divides the subscriber information by type, stores it in the subscriber information database, and transmits the processing result to the SDMS and the Nespot homepage. It performs the function. In addition, the subscriber information associated with the authentication information among the received subscriber information is transmitted to the authentication service processing unit 31, and the subscriber information associated with the charging information is transmitted to the charging service processing unit 32.

The subscriber information management unit 332 performs a function of transmitting the total number of times of processing and success / failures of the subscriber processing information to the service operation management unit 34.

FIG. 7 is a detailed configuration diagram of an embodiment of a service operation management unit of an integrated service management apparatus according to the present invention. In the drawing, "341" is a collection unit, "342" is a control unit, and "343" is an information analyzer.

The collection unit 341 is a function of collecting various measurement information required for the service operation management unit 34 to collect state information of hardware (H / W), and to request authentication / accounting and session processing from the authentication service processing unit 31. Collects traffic information for the traffic information, and collects the traffic information for each processing result from the billing service processing unit 32, subscriber management unit 33. The collection of information is done on a regular basis by the collection function, but can also be collected at irregular intervals at the request of the operator. Collected information is stored in the operation management database and forwarded to the information analysis function. At this time, the information necessary for real-time display of the collected information is delivered to the operator connection unit 35 and output.

The control unit 342 is a function for processing a function of changing operation management parameters and manual collection of operation management information at the request of an operator. It receives and processes the manual collection request of the operator and the change request and control request of the operation management parameter transmitted from the operator connection unit 35, and transmits the result to the operator through the operator connection unit 35. In addition, the control result and the change history of the operation management parameters are stored in the operation management database.

The information analysis unit 343 extracts system information by comparing and analyzing the information collected and collected by the collection unit 341 with respective limit values, and stores the extracted information in the operation management database and immediately delivers the information to the operator.

FIG. 8 is a detailed configuration diagram of an operator connection unit of an integrated service management apparatus according to the present invention. In the drawing, "351" is a system security unit, "352" is a command processing and file unit, "353" is a help unit, " 354 "denotes a login unit and" 355 "denotes an operator screen control unit, respectively.

The system security unit 351 manages information on an operator who uses the system and manages a history of operation commands performed by the operator. It saves the history of command execution in the system access history table so that the operator can search it and performs the function of modifying, searching, and deleting new registration and operator information of the operator who uses the system.

The command processing and file unit 352 analyzes the syntax and semantics of the command input through the task seat and requests execution of the corresponding command in case of normal operation, and provides an error message when an input error occurs. In addition, the command execution method provides immediate execution and scheduled execution, and after processing the command, it is stored in the history database so that the system access history can be retrieved later.

The help unit 353 is a function for outputting a guide and a brief sentence at the request of an operator.

The login unit 354 is a function for first access when the operator wants to perform a function of the service integrated management apparatus. After checking whether the operator is registered in the account file by using the operator's name and password, and granting the access authority corresponding to the operator's level, the command corresponding to the access authority can be executed until the operator logs out.

The operator screen control unit 355 controls a screen for operation and controls a transition between screens.

As mentioned above, the necessity for mobile access to an IP network through a wireless interface suggests various solutions for internet access in each network infrastructure. In particular, technology for multimedia communication between devices in limited areas as well as global Internet access has become a very important issue in securing subscribers and preoccupying the communication market for wireless internet preemption.

In the present invention, using the wireless LAN technology, authentication service and security technology, network management technology and subscriber management technology for multimedia communication between devices in a limited area as well as global Internet access, the maximum convenient service and high reliability to subscribers By providing high-speed internet access service of the user, it guarantees the mobility of the subscriber with the guarantee of the transparent transmission message and reduces the network load and system load generated whenever the user moves by reflecting the processing request for the subscriber's use of the Internet service. Can be.

As seen through the above embodiment, the mobile station can guarantee accessibility and application service message transmission without reconfiguring a separate network while ensuring terminal mobility based on a region specialized for a subscriber requesting service using the Internet. By suggesting a stable and reliable integrated service management device, it is possible to increase network efficiency by reducing various subscribers and reducing network and system loads. Therefore, even when the service protocols for mutual roaming and a scalable mobile communication network are established even in different networks having different communication protocols between operators, mobile internet services that guarantee mobility can be provided in a timely manner.

In addition, the present invention, by providing a service processing and management function that can maximize this by activating the high-speed wireless Internet service, it is well applied when the system expansion and roaming (mobile communication providers and WLAN operators) with other operators It can be easily extended and modular.

The method of the present invention as described above may be implemented as a program and stored in a computer-readable recording medium (CD-ROM, RAM, ROM, floppy disk, hard disk, magneto-optical disk, etc.).

The present invention described above is not limited to the above-described embodiments and the accompanying drawings, and various substitutions, modifications, and changes are possible in the art without departing from the technical spirit of the present invention. It will be clear to those of ordinary knowledge.

As described above, the present invention is a device capable of maximizing the mobility service between each business site according to the mobility of an individual based on a specialized area, providing a highly available service, transparent transmission of data, and user convenience when providing various services using the Internet. It is possible to guarantee the function to provide the performance and to maximize the use efficiency of mobile data service, and to expand the service providers and wired / wireless integrated operators who want to provide additional information using the Internet regardless of the location of the terminal in the wireless LAN environment. There is an effect that can provide a management function that can ensure the functionality and mobility of the subscriber.

That is, the present invention, by providing a high-speed Internet service centered on a wireless LAN, by providing a service integrated management device that can be guaranteed to provide uninterrupted service and transparent data delivery using the Internet regardless of the location of the terminal, the subscriber is interrupted There is an effect of providing a service that can provide a stable and convenient service and a variety of service convenience and provide additional management functions and expandable functions when expanding the workplace.

Claims (11)

In the integrated service management device in a wireless LAN, When providing wireless Internet service, it integrates authentication service / billing service / subscriber management function according to subscriber type for network management and service management to provide uninterrupted service by guaranteeing mobility of wireless terminal based on user information authentication. , MAC ID based authentication service and real-time usage detection function and packet based time / date / period pay-per-use billing function Provides stable and uninterrupted Internet service through centralized management by facilitating provision and service management, unified network management and service management processing requirements, and provides traffic information on WLAN service integration management Wireless LAN service integration tube delivered to the operator access means It means; In order to perform service operation management for service processing from the WLAN service integrated management means, traffic information transmitted and received and information processed by each means are collected regularly or at the request of an operator, and analyzed and managed. Service operation management means for storing in a database and managing operation management information in real time by setting operation management parameters according to an operator's request; An operator access means for receiving a command from an operator and informing the operator of the result of the service integration management in the WLAN; And Database management means for managing subscriber information database for subscriber registration, authentication information database for authentication, billing information database for billing and operation management database for service operation, and providing status information according to management Service integration management apparatus in a wireless LAN comprising a. The method of claim 1, The wireless LAN service integration management means, An authentication service processor for performing authentication on a subscriber using the WLAN Internet; In accordance with the authentication result from the authentication service processing unit, the database charges the real-time billing information, performs the function of periodically sending the billing inquiry function and the billing settlement data providing the pay-as-you-go service and the real-time usage information inquiry function, A billing service processor for transmitting traffic information on service processing information to the service operation management means; And Subscriber management unit for receiving and registering the registration information of subscribers (regular or temporary subscribers) from the outside, and manages the authentication information related to authentication service processing, billing information related to billing service processing, and traffic information about transmitted and received service processing information Service integration management apparatus in a wireless LAN comprising a. The method of claim 2, The authentication service processing unit, An authentication information transceiver for transmitting and receiving network access authentication and accounting information based on an authentication protocol (RADIUS protocol); EAP related information is added to the authentication information received through the authentication information transmission and reception unit, and if the authentication information has a session timeout function, if it is set, this value is set and transmitted to the authentication service management unit, and the MAC ID (MAC ID). An authentication information processing unit that checks a user name before authentication and transmits the authentication information to the authentication service unit when the authentication information is requested; Provides detailed functions to ensure and prevent multiple logins when processing the authentication information, provides the number of sessions during authentication and determines whether the allowed sessions are exceeded, provides pay-as-you-go services and billing services when processing accounting information, and starts accounting. It registers user sessions and increases the number of sessions, deletes user sessions when accounting stops, and reduces the number of sessions. Session information provides smooth authentication services by receiving AP failure information received from the AP management system. Processing unit; Upon receipt of accounting information, information about this is transmitted to the session information processing unit to form a database (DB) for basic data and usage for billing, and the accounting and billing information is transmitted to the billing service processing means in real time. An accounting information processing unit; An authentication service unit which receives the authentication information received from the authentication information processing unit and performs detailed functions related to authentication such as remaining use time and remaining date calculation for checking user information and providing a pay-as-you-go service; And Authentication service management unit for transmitting the total number of times of processing and success / failure of the authentication processing information to the service operation management means Service integration management apparatus in a wireless LAN comprising a. The method of claim 2, The billing service processing unit, A charging information transmitting / receiving unit for receiving a real-time usage update request from the authentication service processing unit and storing it in a charging information database for each user type and then transmitting a response to the authentication service processing unit; According to the user type, if a temporary subscriber, the usage inquiry function is provided in real time by referring to the accounting database (DB), and in the case of a regular subscriber, the monthly sum DB is generated by referring to the accounting DB at a specified time and periodically A billing information processor for transmitting to a customer information system; And Billing information management unit for transmitting the total number of times of processing and success / failure of the billing processing information to the service operation management means Service integration management apparatus in a wireless LAN comprising a. The method of claim 2, The subscriber management unit, Subscriber information is received through the subscriber data management system (SDMS) or Nespot homepage, and the subscriber information is classified by type, stored in the subscriber information database, and the processing results are transmitted to the SDMS and Nespot homepage. Subscriber information transmission and reception unit for transmitting the subscriber information associated with the authentication information of the received subscriber information to the authentication service processing means, the subscriber information associated with the charging information to the billing service processing means; And Subscriber information management unit for transmitting the total number of processing and the success / failure of the subscriber processing information to the service operation management means Service integration management apparatus in a wireless LAN comprising a. The method of claim 1, The wireless terminal, Substantially, the integrated service management device in a wireless LAN, characterized in that the notebook or PDA (Personal Digital Assistants) equipped with a wireless LAN card. The method according to any one of claims 1 to 6, The service operation management means, Collects various measurement information necessary for the service operation management means, collects traffic information on authentication / accounting and session processing request from the authentication service processing means, and each processing result from the charging service processing means and the subscriber management means. Collecting unit for collecting the traffic information for; In accordance with the request of the operator, processing of the operation management parameter change, the manual collection function of the operation management information, and receives and processes the operator's manual collection request and the operation management parameter change request and control request, which is transmitted from the operator connection means, A control unit which transmits the result to an operator through the operator connection unit, and stores control results and changes of operation management parameters in an operation management database; And The information collected by the collector is analyzed and compared with the respective limit values to extract system information, and the information analysis unit stores the extracted information in the operation management database and delivers it to the operator. Service integration management apparatus in a wireless LAN comprising a. The method according to any one of claims 1 to 6, The operator connecting means, A system security unit for managing information on an operator using the AP system and managing a history of operation commands performed by the operator; Analyzes the syntax and semantics of the command input through the task seat to request the execution of the command if it is normal, provides an error message when an input error occurs, and provides immediate execution and reservation execution as a command execution method. A command processing and file unit stored in a history database for later retrieval with a system access history; Help unit for outputting a guide and a brief sentence on the command of the operator; When the operator wants to perform the function of the service integrated management device for the first time, the administrator checks whether the operator is registered in the accounting file using the operator's name and password, and grants the access authority corresponding to the operator's level. A login unit executing a command corresponding to an access right until logging out; And Operator screen control unit to control the screen for operation and to control the transition between screens Service integration management apparatus in a wireless LAN comprising a. In the service integration management method in a wireless LAN, When providing wireless Internet service, it integrates authentication service / billing service / subscriber management function according to subscriber type for network management and service management to provide uninterrupted service by guaranteeing mobility of wireless terminal based on user information authentication. , MAC ID based authentication service and real-time usage detection function and packet based time / date / period pay-per-use billing function WLAN service that facilitates provisioning and service management, centralizes network management and service management processing needs, provides stabilized and uninterrupted Internet service through centralized management, and delivers traffic information for integrated WLAN service management Integrated management phase; In order to perform the service operation management for the integrated WLAN service processing, the traffic information and the processed information to be transmitted and received are periodically or collected by the operator's request, analyzed and stored in the operation management database, the operator's request According to the step of setting the management parameters management management information in real time; Receiving a command from an operator and notifying the operator of the result of the service integration management in the WLAN; And Managing a subscriber information database for subscriber registration, an authentication information database for authentication, a charging information database for charging, and an operation management database for operating a service, and providing status information according to the management Service integration management method in a wireless LAN comprising a. The method of claim 9, The wireless LAN service integration management step, Performing authentication on a subscriber using the WLAN Internet; According to the authentication result, the database charges the real-time billing information, performs the billing inquiry function that provides the pay-as-you-go service and the real-time usage information inquiry function, and periodically transmits the billing settlement data. Conveying information; And Receiving a database of the subscriber (regular or temporary subscriber) registration information from the outside, and managing the authentication information related to the authentication service processing, billing information related to billing service processing and traffic information about the service processing information transmitted and received Service integration management method in a wireless LAN comprising a. In a service integrated management device having a processor, When providing wireless Internet service, it integrates authentication service / billing service / subscriber management function according to subscriber type for network management and service management to provide uninterrupted service by guaranteeing mobility of wireless terminal based on user information authentication. , MAC ID based authentication service and real-time usage detection function and packet based time / date / period pay-per-use billing function Facilitating provision and service management, unifying network management and service management processing requirements to provide stabilized and uninterrupted Internet services through centralized management, and delivering traffic information for integrated WLAN service management; In order to perform the service operation management for the integrated WLAN service processing, the traffic information and the processed information to be transmitted and received are periodically or collected by the operator's request, analyzed and stored in the operation management database, the operator's request According to, the function of setting the operation management parameters to manage the operation management information in real time; Receiving a command from an operator and notifying the operator of the result of the service integration management in the WLAN; And Function to manage subscriber information database for subscriber registration, authentication information database for authentication, charging information database for billing and operation management database for service operation, and provide status information according to management A computer-readable recording medium having recorded thereon a program for realizing this.

Images