KR100769820B1 - System and Method For Prepaid Packet Data Service Without Authentication - Google Patents

Abstract

1. TECHNICAL FIELD OF THE INVENTION

The present invention relates to an unauthorized prepaid packet data service technology.

2. The technical problem to be solved by the invention

An object of the present invention is to provide an authentication-free prepaid packet data service system and method for providing a prepaid packet data service by exchanging a connection request and response message even without performing CHAP / PAP authentication.

3. Summary of Solution to Invention

The present invention provides a system for providing an unauthenticated prepaid packet data service, comprising: a packet controller for establishing a session with a subscriber station and receiving subscriber identification information from the subscriber station; A packet data access node which receives the subscriber identification information from the packet controller and determines no authentication for a connection request of the subscriber station; And a charging server that receives the subscriber identification information from the packet data access node and informs the subscriber's balance information when determining no authentication for the subscriber terminal.

4. Important uses of the invention

The present invention is used for CDMA communication and the like.

CHAP, PAP, No Authentication, Billing, Prepay, Packet, CDMA

Description

Unauthenticated prepaid packet data service system and its method {System and Method For Prepaid Packet Data Service Without Authentication}

1 is a configuration diagram of a mobile communication network of CDMA 2000;

2 is a signal flow diagram illustrating a prepaid packet data service process through a CHAP authentication process;

3 is a signal flow diagram illustrating a prepaid packet data service process through a PAP (Password Authentication Protocol) authentication process;

4 is an exemplary signal flow diagram illustrating a method for providing an unauthenticated packet data service according to the present invention;

5 is a flowchart illustrating another exemplary prepaid packet data service method according to the present invention;

6 is a block diagram of an embodiment of a packet data service node for providing an unauthenticated prepaid packet data service according to the present invention.

* Description of the main references in the drawings *

610: A11 interface unit 620: PPP negotiation unit

630: RADIUS client 640: storage unit

The present invention relates to a prepaid packet data service technology, and more particularly, a system and method for providing a prepaid packet data service while performing without authentication (without CHAP / PAP) for a mobile subscriber and determining the non-authentication. A packet data service apparatus for providing a prepaid packet data service.

The CDMA 2000 standard is a Code Division Multiple Access (CDMA) version of the IMT-2000 standard established by the International Telecommunication Union (ITU), and provides high-speed voice and packet data services based on the Internet Protocol (IP).

In the CDMA 200 standard mobile communication system, a mobile communication terminal or a personal portable terminal can be used for data services while traveling without restriction of location.

In addition, a method of paying a data service fee by a user who uses a data service using a mobile communication terminal may also pay various fees such as a prepaid fee payment service in addition to a postpaid billing method according to a conventional data service use time or data usage amount. Method is being developed.

1 is a configuration diagram of a mobile communication network of CDMA 2000. As shown in FIG. 1, a mobile communication network of CDMA 200 is largely a radio access network 110 and a backbone network for packet data service. 120, a voice core network 130 for a voice service.

 First, the radio access network 110 is a base station controller (BSC) that processes the physical layer of the CDMA 2000 and manages radio resources, a base station (BTS, 111), a base station 111 and a link (Link), and controls the call setup 112), a packet controller (PCF) 113 for handling A8 / A9 and A10 / A11 interfaces. The wireless access network 110 is connected to an ATM network, and generally, an ATM switch exists in a base station controller (BSC) 112.

Next, the DCN 120 for packet data service performs a packet data serving node (PDSN) 121 and a mobile IP (Mobile IP) registration process that routes IP packets and manages mobility of terminals in the area. HA (Home Agent, 122), Authentication, Authorization, and Accounting (AAA) server (123) that performs user authentication, authorization verification, and billing functions (PrePaid Server (PPS) is implemented together or separately when providing prepaid services) It may be implemented as, but will be described as below AAA includes the functionality of the PPS). The basic network (DCN) 120 for such a packet data service is an IP network, and is matched with the radio access network 110 according to the A10 / A11 interface standard. The backbone network 120 for packet data services performs packet data services in conjunction with the Internet.

On the other hand, the underlying network 130 for voice service performs MSC / VLR (Mobile Switching Center / Visiting Location Register, 131) for performing voice call processing and processing additional service functions such as intelligent network service, subscriber information management, authentication, user It is configured to include a HLR (Home Location Register, 132) that performs the location management function of the. The basic network 130 for the voice service is a TDM-based circuit-switched network, interworking with the PDSN 121, and matching the wireless access network 110 with an A1 / A2 / A5 interface. do.

In the mobile communication network as shown in FIG. 1, a prepaid packet data service means a prepaid subscriber who purchased a prepaid card for a predetermined amount or a prepaid card purchased for a predetermined period to a subscriber who previously paid a predetermined amount to a mobile communication service company. As a form of service that allows a call service to be used within the amount of money within or within the amount of money paid, it is currently being developed to allow a real-time fee deduction for the amount of use data or the time of use.

In order to enable such prepaid packet data service, the 3GPP2 wireless IP standard requires an authentication process for billing of prepaid subscribers.

FIG. 2 is a signal flow diagram illustrating a prepaid packet data service process through a CHAP authentication process. Referring to FIG. 2, a conventional prepaid packet data service process is described below.

First, after completing the radio link setup with the base station, the MS establishes a session for packet data service with the packet controller (PCF) via the forward and reverse channels (S201).

After establishing the session, the packet controller (PCF) performs an A11 registration with the packet data service node. In the A11 connection, the packet controller (PCF) sends an A11 Registration Request message to the packet data service node (PDSN) (S202), and the packet data service node (PDSN) to the packet controller (PCF) correspondingly. A11 connection response (A11 Registration Response) is made by sending a message (S203).

Subsequently, the mobile terminal MS negotiates a Link Control Protocol (LCP) negotiation with the packet data service node PDSN (S204), and performs an authentication process with the packet data service node PDSN.

For authentication, first, the packet data service node PDSN generates a Challenge Handshake Authentication Protocol (CHAP) challenge and transmits a CHAP challenge message to the mobile terminal MS (S205). The CHAP response message is transmitted to the data service node PDSN (S206). At this time, the CHAP response message includes a CHAP password set by the mobile terminal MS.

Subsequently, the packet data service node (PDSN) transmits a remote authentication dial-in user service (RADIUS) access request message to the AAA / PPS (S207), and the AAA / PPS receiving the access request message moves to the corresponding AAA / PPS. The terminal performs authentication and determines whether the corresponding subscriber is a prepaid subscriber. That is, the RADIUS access request message includes the CHAP password and the CHAP challenge generated during the CHAP authentication process, and the AAA / PPS determines whether the user is valid using the information included in the CHAP password and the CHAP challenge.

If the user's authentication is valid and determined to be a prepaid subscriber, the AAA / PPS sends a packet data service node (PDSN) a RADIUS Access Response message containing the subscriber's prepaid information (eg, balance information). The data service node PDSN is transmitted (S208).

After the CHAP authentication is successful, the MS and the PDSN establish an Point to Point Protocol connection (PPP) connection by performing IPCP negotiation (S210).

Subsequently, the packet data service node PDSN transmits an accounting request message to an accounting server (AAA) to inform the start of charging (S211), and sends an accounting response message thereto from the accounting server (AAA). Receive (S212).

After that, the packet data service node PDSN continuously checks the subscriber's data usage (IP datagram) and transmits an access request message to the AAA / PPS when the subscriber's balance information is exhausted or reaches a predetermined threshold (S213). .

The AAA / PPS updates the subscriber's prepaid information according to the access request message received from the packet data service node PDSN and transmits the access response message to the packet data service node PDSN again (S214). When the prepaid fee is exhausted, a connection response message including call release information is transmitted to the packet data service node (PDSN).

Meanwhile, FIG. 3 is a signal flow diagram illustrating a prepaid packet data service process through a PAP (Password Authentication Protocol) authentication process, and similarly to CHAP authentication to provide a prepaid packet data service as in FIG. 2 (S301). , S302).

As described above, in order to provide a prepaid packet data service, an authentication process (CHAP or PAP) is essential. However, this authentication process is a delay factor of the initial call access time, and when providing a packet data service, an out-of-authentication (without CHAP / PAP) call connection may be introduced to shorten the initial access time.

However, as mentioned above, according to the current standard of 3GPP2, there is a problem in that an operator using an unauthenticated method cannot provide a prepaid packet data service. Therefore, there is an urgent need for a method for providing a prepaid packet data service even when using an unauthenticated scheme.

The present invention has been proposed to solve the above problems, and provides an authentication-free prepaid packet data service system and method for providing a prepaid packet data service by exchanging a connection request and response message even without performing CHAP / PAP authentication. The purpose is.

It is another object of the present invention to provide a packet data service apparatus for determining unauthorized authentication for a mobile communication subscriber and providing a prepaid packet data service.

Other objects and advantages of the present invention can be understood by the following description, and will be more clearly understood by the embodiments of the present invention. Also, it will be readily appreciated that the objects and advantages of the present invention may be realized by the means and combinations thereof indicated in the claims.

According to an aspect of the present invention, there is provided a system for providing an unauthenticated prepaid packet data service, comprising: a packet controller for establishing a session with a subscriber station and receiving subscriber identification information from the subscriber station; A packet data access node which receives the subscriber identification information from the packet controller and determines no authentication for a connection request of the subscriber station; And a charging server that receives the subscriber identification information from the packet data access node and informs the balance information of the subscriber when determining no authentication for the subscriber station.

The present invention also provides a method for providing an unauthenticated prepaid packet data service, comprising: (a) receiving subscriber identification information from a terminal of a subscriber; (b) determining no authentication of the subscriber station; (c) transmitting the subscriber identification information to a charging server; And (d) receiving balance information of the subscriber from the billing server.

In addition, the present invention provides a packet data access apparatus for providing an unauthenticated prepaid packet data service, comprising: a receiver configured to receive subscriber identification information of a subscriber station from a packet controller; Determination unit for determining the non-authentication of the subscriber station; And after determining the non-authentication for the subscriber, characterized in that it comprises a transmitting unit for transmitting the subscriber identification information to the charging server.

The above objects, features and advantages will become more apparent from the following detailed description taken in conjunction with the accompanying drawings, whereby those skilled in the art may easily implement the technical idea of the present invention. There will be. In addition, in describing the present invention, when it is determined that the detailed description of the known technology related to the present invention may unnecessarily obscure the gist of the present invention, the detailed description thereof will be omitted. Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings.

4 is an exemplary signal flow diagram illustrating a method for providing an unauthenticated packet data service according to the present invention.

First, the mobile station (MS) completes the radio link setup with the base station and establishes a session for packet data service with the packet controller (PCF) via the forward and reverse channels (S401).

After establishing a session, the packet controller (PCF) performs an A11 registration with a packet data service node (PDSN) set to provide an unauthenticated packet data service. In the A11 connection, the packet controller (PCF) sends an A11 Registration Request message to the packet data service node (PDSN) (S402), and the packet data service node (PDSN) to the packet controller (PCF) correspondingly. A11 connection response (A11 Registration Response) is made by sending a message (S403).

At this time, the A11 connection request message includes the subscriber identification information (Calling-Station-ID) transmitted by the mobile terminal in the form of a parameter and is transmitted to the packet data service node (PDSN).

Subsequently, the mobile terminal MS performs a link control protocol (LCP) negotiation with the packet data service node PDSN (S404). At this time, the packet data service node (PDSN) transmits an LCP Configure NAK message to the mobile terminal (MS) that does not include an authentication protocol when the LCP is negotiated with the mobile terminal (MS). Do not perform CHAP / PAP authentication.

That is, the MS transmits an LCP Configure Request message including a type CHAP, a receivable frame length Maximum Receive Unit (MRU), a Magic-Number, etc., to the packet data service node (PDSN). In operation S4041, the packet data service node PDSN notifies that the authentication is performed by transmitting an LCP configuration response message including no authentication protocol to the mobile terminal MS (S4042).

In addition, even if the mobile station (MS) can support both CHAP and PAP, the packet data service node (PDSN) may transmit an LCP setup response message that does not include an authentication protocol to the mobile station (MS) to perform no authentication. Can be.

In addition, when the MS transmits an LCP setup request message that does not include an authentication protocol to the packet data service node PDSN, the packet data service node PDSN transmits an LCP configure ACK message. No authentication can be determined.

Next, the packet data service node PDSN transmits a RADIUS (Remote Authentication Dial-In User Service) access request message to the AAA / PPS (S405). The RADIUS access request message includes a user name (eg, a network access identifier (NAI) in the form of IMSI @ Realm) and a packet data service node (PDSN) configured by using a calling station ID. Parameters such as an IP address, a physical port type of a packet data service node (PDSN), and an ID for identifying a session are included.

Upon receiving the RADIUS access request message including the subscriber identification information, the AAA / PPS searches for the user's profile in a billing database (not shown) to verify authorization of the subscriber of the mobile terminal as a prepaid subscriber. If it is determined to be a prepaid subscriber, the AAA / PPS is a packet data service node (PDSN) that accesses the RADIUS access response that includes the subscriber's billing information (e.g., PPAQ (VolumeQuota, VT: VoulumeThreshold)). ) Send a message (S406).

The following table summarizes the parameters that make up the RADIUS access request and response messages. However, the parameters in [Table 1] are for illustration only and do not necessarily include all information.

Subsequently, the packet data service node PDSN performs IPCP negotiation with the MS and completes the PPP connection (S407). Then, the packet data service node PDSN transmits an accounting request message to the AAA (Accounting Server) to start charging. Notify (S408), and receives the accounting response (Accounting Response) message for this from the Accounting Server (AAA) (S409).

After that, the packet data service node (PDSN) continuously checks the subscriber's data usage (IP datagram), and if the subscriber's balance (VQ) is exhausted or the data usage reaches a certain threshold (VT), RADIUS to AAA / PPS. The access request message is transmitted (S410). That is, the AAA / PPS periodically updates the charging information of the subscriber by transmitting the access request message periodically.

The AAA / PPS updates the charging information of the subscriber according to the access request message received from the packet data service node PDSN and transmits the access response message to the packet data service node PDSN again (S411). If the remaining charges are used up, a connection response message including call release information is transmitted to the PDSN.

As described above, the non-authenticated prepaid packet data service method according to the present invention prepaid by performing only authorization for the prepaid subscriber identity between the packet data service node (PDSN) and AAA / PPS without CHAP / PAP authentication. Type packet data services.

FIG. 5 is a flowchart illustrating another exemplary method of authenticating a prepaid packet data service according to the present invention. FIG.

As shown in FIG. 5, the packet data service node PDSN first receives subscriber identification information (Calling-Station-ID) from the packet controller PCF (S501). The subscriber identification information is obtained by the packet data service node PDSN performing A11 registration with the packet controller PCF.

Subsequently, the packet data service node PDSN performs LCP negotiation with the mobile terminal MS to determine no authentication (S502). That is, the packet data service node PDSN receives an LCP Configure Request message including a type CHAP, a receivable frame length MRU (Maximum Receive Unit), a Magic-Number, etc. from an MS. Then, no authentication is determined by sending an LCP Configure NAK message that does not include an authentication protocol to the MS.

In addition, when the MS transmits an LCP setup request message that does not include an authentication protocol to the packet data service node PDSN, the packet data service node PDSN transmits an LCP configure ACK message. No authentication can be determined.

Subsequently, the packet data service node PDSN transmits a RADIUS (Remote Authentication Dial-In User Service) access request message to the AAA / PPS to check whether the MS is a prepaid subscriber. (S503). The RADIUS access request message includes a user name (eg, a network access identifier (NAI) in the form of IMSI @ Realm) and a packet data service node (PDSN) configured by using a calling station ID. Parameters such as an IP address, a physical port type of a packet data service node (PDSN), and an ID for identifying a session are included.

Next, the packet data service node PDSN receives a response message to the RADIUS access request message from the AAA / PPS (S504). That is, the AAA / PPS receiving the RADIUS access request message including the subscriber identification information searches for the user's profile in a billing database (not shown) and performs authorization verification on whether the subscriber of the mobile terminal is a prepaid subscriber. If the AAA / PPS is determined to be a prepaid subscriber, the AAA / PPS transmits a RADIUS access response message including charging information (eg, PPAQ (VQ, VT)) of the subscriber to the packet data service node (PDSN). If not, send a RADIUS Access Reject message.

The packet data service node (PDSN) receiving the RADIUS access response message including the charging information of the subscriber performs IPCP negotiation with the mobile station (MS) to allocate an IP address to the mobile station (MS) (S505), and AAA. Initiate charging by sending an Accounting Request message to / PPS.

The Packet Data Service Node (PDSN), which receives the accounting response message from the AAA / PPS, continuously checks the subscriber's data usage (IP datagram) and receives the subscriber's balance (VQ) received from the AAA / PPS. When all are exhausted or the data usage reaches a certain threshold (VT), the AAA / PPS sends a RADIUS access request message to the AAA / PPS so that the AAA / PPS updates the billing information of the subscriber (S506).

FIG. 6 is a diagram illustrating an embodiment of a packet data service node for providing an unauthenticated prepaid packet data service according to the present invention. As shown in FIG. 6, the packet data service node according to the present invention includes an A11 interface unit 610; PPP negotiation unit 620, RADIUS client 630 and storage unit 640. The function and operation of each component are as follows.

The A11 interface unit 610 performs an A11 connection with the packet controller (PCF). That is, when the MS completes the radio link setup with the base station and establishes a session with the packet controller PCF, the packet controller PCF transmits and receives an A11 connection request message and a response message with the A11 interface unit 610. A11 Make a connection. At this time, the A11 connection request message includes subscriber identification information (Calling Station ID) transmitted from the mobile terminal (MS), the subscriber identification information is temporarily stored in the storage unit 640.

After performing the A11 connection with the packet controller (PCF), the PPP connection unit 620 negotiates a PPP connection option with the MS using the Link Control Protocol (LCP). At this time, the mobile station (MS) transmits an LCP Configure Request message including information such as the type of authentication protocol to perform authentication, the maximum allowable frame length required for PPP connection, and the PPP connection unit 620 By sending a LCP Configure NAK message, which removes the type of authentication protocol, to the MS, it notifies that the service is non-authenticated.

On the other hand, when the PPP connection unit 620 receives the LCP configuration request message that does not include the authentication protocol from the mobile terminal (MS) by determining the authentication by transmitting an LCP configuration response message (Configure ACK).

Meanwhile, after the LCP negotiation between the PPP connection unit 620 and the mobile terminal (MS) is completed, the RADIUS client 630 transmits a RADIUS access request message to the AAA / PPS. At this time, the RADIUS client 630 is configured to store the subscriber identification information (Calling-Station-ID), the IP address of the packet data service node (PDSN), and the physical port type of the packet data service node (PDSN) stored in the storage unit 640. , The RADIUS access request message is generated using parameters such as an ID for identifying a session.

In addition, the RADIUS client 630 receives a RADIUS Access Response message containing the subscriber's prepaid information from the AAA / PPS, stores the prepaid information in the storage unit 640, and the PPP connection unit 620 moves. Perform IPCP negotiation with the MS and complete the PPP setup by allocating an IP address to the MS.

In addition, the RADIUS client 630 transmits a subtraction start RADIUS access request to AAA / PPS, and checks an IP packet transmitted on the PPP connection established by the PPP connection unit 620 with the mobile terminal (MS). MS) checks the data usage and sends a RADIUS access request message to AAA / PPS to update the billing information when the remaining balance in the storage unit 640 is exhausted or the data usage reaches the threshold stored in the storage unit 640. do.

As described above, the method of the present invention may be implemented as a program and stored in a recording medium (CD-ROM, RAM, ROM, floppy disk, hard disk, magneto-optical disk, etc.) in a computer-readable form. Since this process can be easily implemented by those skilled in the art will not be described in more detail.

The present invention described above is capable of various substitutions, modifications, and changes without departing from the technical spirit of the present invention for those skilled in the art to which the present invention pertains. It is not limited by the drawings.

The present invention as described above has the effect of providing an existing prepaid standard scheme by exchanging RADIUS access request and response messages while performing no authentication.

In addition, the present invention has the effect of enabling an unauthenticated connection of the prepaid subscriber, thereby reducing the initial call connection time.

Claims (14)

A system for providing an unauthenticated prepaid packet data service, A packet controller for establishing a session with the subscriber station and receiving subscriber identification information from the subscriber station; A packet data access node which receives the subscriber identification information from the packet controller and determines no authentication for a connection request of the subscriber station; And The billing server that receives the subscriber identification information from the packet data access node and informs the balance information of the subscriber when determining no authentication for the subscriber terminal. System comprising a. The method of claim 1, The packet data connection node, And determine the non-authentication by receiving the non-authentication request from the subscriber terminal and accepting it. The method of claim 1, The packet data connection node, And a non-authentication is determined by transmitting a response message removing an authentication protocol with respect to the authentication request received from the subscriber station. The method of claim 2 or 3, The packet data connection node, And a CDMA Packet Data Service Node (PDSN). A method of providing an unauthenticated prepaid packet data service, (a) receiving subscriber identification information from a subscriber's terminal; (b) determining no authentication of the subscriber station; (c) transmitting the subscriber identification information to a charging server; And (d) receiving balance information of the subscriber from the billing server Authentication-free prepaid packet data service method comprising a. The method of claim 5, In step (b), And a non-authentication request from the subscriber station. The method of claim 5, In step (b), (b1) receiving a connection request message including an authentication protocol type from a terminal of the subscriber; And (b2) sending a response message removing the authentication protocol type. Authentication-free prepaid packet data service method comprising a. The method of claim 5, Checking the usage amount of the packet data of the subscriber and subtracting the balance Authentication-free prepaid packet data service method further comprising. The method according to any one of claims 6 to 8, Step (c) and (d), An authentication-free prepaid packet data service method, which is based on a Remote Authentication Dial-In User Service (RADIUS) protocol. delete A packet data access device that provides an unauthenticated prepaid packet data service. Receiving unit for receiving the subscriber identification information of the subscriber station from the packet controller; Determination unit for determining the non-authentication of the subscriber station; And Transmitter for transmitting the subscriber identification information to the billing server after determining the non-authentication for the subscriber Packet data connection device comprising a. The method of claim 11, The determination unit, And determining no authentication based on the no authentication request from the subscriber station. The method of claim 11, The determination unit, And an authentication is determined by transmitting a response message removing an authentication protocol to the authentication request from the subscriber station. The method of claim 11, Storage unit for receiving and storing the balance information of the subscriber from the billing server Packet data access device further comprises.

Images