KR100821201B1 - Method for authentication in switching device and the switching device thereof - Google Patents

Abstract

An authentication method in a switching device and the switching device thereof are provided to process a basic communication call even without carrying out an authentication process if a mobile communication system is unstable owing to a system overload. A communication call request message is received from at least one of a sending terminal and a receiving terminal(210). It is decided whether an authentication flag set within an exchange is set to the first information(215). If not, a communication call is processed without carrying out authentication according to the communication call request message. The first information is set information indicating that authentication performance is to be demanded to an authentication center for the communication call request message.

Description

Authentication method in switching device and its switching device {Method for authentication in switching device and the switching device

1 is a schematic block diagram of a mobile communication system including an exchange apparatus for performing an authentication function according to an embodiment of the present invention;

2 is a flowchart illustrating a method in which an exchange according to an embodiment of the present invention controls authentication processing according to a communication call type of a terminal.

3 is a flowchart illustrating a method in which an exchange according to an embodiment of the present invention performs authentication according to location registration of a terminal.

4 is a flowchart illustrating a method in which an exchange according to an embodiment of the present invention controls authentication based on a call request from a terminal.

5 is a flowchart illustrating a method in which an exchange controls authentication of a called terminal to an incoming call according to an embodiment of the present invention.

<Explanation of symbols for the main parts of the drawings>

110: terminal

115: base station

120: base station controller

125: exchanger

130: home location register

135: Certification Center

The present invention relates to a mobile communication system, and more particularly, to an authentication method and a switching device in the switching device.

IMT-2000 (International Mobile Telecommunication 2000, for example, wide-band code division multiple access (WCDMA)), which is a third generation of mobile communication, and GSM, which is compatible with IMT-2000, is one of the second generation of mobile communication. In (Global System for Mobile Communications), the following authentication is standardized. The authentication is performed by a subscriber authentication module (Universal Subscriber Identity Module (USIM), Subscriber Identity Module (SIM), etc.) issued by a network operator contracted by a subscriber of a mobile communication network. For example, when a mobile phone or other wireless terminal is attached to a mobile communication network (hereinafter referred to as a home network) and a subscriber authentication module of a home network. Mutual authentication.

Using a WCDMA network as an example of a mobile communication network, the mobile communication network generates an authentication vector generating device (ie, an HLR (Home Location Register) / AuC (authentication center) that generates an authentication vector (AV) used for authentication of a subscriber authentication module). And an authentication device (that is, a VLR (Visitor Location Register) / SGSN (Serving GPRS Support Node) which performs authentication processing of the subscriber authentication module).

When the authentication apparatus sends predetermined data included in the authentication vector generated by the authentication vector generating apparatus to the subscriber authentication module, the subscriber authentication module performs the operation using the predetermined data and transmits the result to the authentication apparatus. Then, the authentication apparatus determines the calculation result by the predetermined data included in the authentication vector, so that authentication processing of the subscriber authentication module is performed.

When the mobile communication system is overloaded, normal authentication of the communication call requested by the terminal cannot be performed. In addition, the terminal that has not been authenticated cannot use the requested communication service, and the mobile communication system has a problem that the system becomes more unstable to perform authentication for the terminal.

Accordingly, an object of the present invention for solving the above problems is authentication in an exchange apparatus that can be processed without performing authentication for basic communication calls (for example, incoming calls) when the mobile communication system is unstable due to system overload or the like. A method and an exchange apparatus thereof are provided.

Other objects of the present invention will be easily understood through the description of the following examples.

In order to achieve the above object, according to an aspect of the present invention, there is provided a method for controlling the authentication performance of the terminals in the mobile communication system for processing a communication call between the calling terminal and the called terminal.

According to an embodiment of the present invention, in a mobile communication system for processing a communication call between an originating terminal and a called terminal, a method for controlling an authentication of terminals by a switch, the communication call request from at least one of the calling terminal and the called terminal Receiving a message; When the received communication call request message is received, determining whether an authentication flag set in the exchange is set to first information (On); And if the authentication flag is not set as the first information, processing the communication call without performing authentication in response to the communication call request message.

According to another aspect of the present invention, there is provided a mobile communication system including an exchange that can control the authentication performed in the mobile communication system for processing a communication call between the calling terminal and the called terminal.

According to an embodiment of the present invention, in a mobile communication system that processes a communication call between a calling terminal and a called terminal, when a communication call request message is received from at least one of the calling terminal and the called terminal, authentication is set in the exchange. It is determined whether or not the flag is set to the first information (On), and if the authentication flag is not set to the first information, the mobile communication including a switch to process the communication call without performing authentication corresponding to the communication call request message A communication system can be provided.

As the invention allows for various changes and numerous embodiments, particular embodiments will be illustrated in the drawings and described in detail in the written description. However, this is not intended to limit the present invention to specific embodiments, it should be understood to include all modifications, equivalents, and substitutes included in the spirit and scope of the present invention. In describing the drawings, similar reference numerals are used for similar elements.

Hereinafter, with reference to the accompanying drawings, it will be described in detail a preferred embodiment of the present invention. Hereinafter, the same reference numerals are used for the same components in the drawings, and duplicate descriptions of the same components are omitted. In addition, in describing the present invention, when it is determined that the detailed description of the related known technology may unnecessarily obscure the gist of the present invention, the detailed description thereof will be omitted.

1 is a schematic block diagram of a mobile communication system including a switching device performing an authentication function according to an embodiment of the present invention.

As shown in FIG. 1, the mobile communication system 100 according to the present invention includes a user terminal 110, a base station 115, a base station controller 120, an exchange 125, a home location register 130, and an authentication center. And 135.

The terminal 110 is a terminal capable of receiving a mobile communication service (for example, an incoming call or an outgoing call) through a communication network (for example, a CDMA network or a W-CDMA network). , Smart phones, mobile broadcasting system (MBS) can include all the phones. Hereinafter, for convenience of understanding and explanation, a terminal corresponding to an incoming call will be referred to as a called terminal, and a terminal corresponding to an outgoing call will be referred to as a calling terminal.

The base station 115 is a network termination device directly connected to a subscriber station and performs baseband signal processing, wired / wireless conversion, and transmission and / or reception of a radio signal.

The base station controller 120 is located between the base station 115 and the switch 125 to perform base station 115 management and control functions. That is, the base station controller 120 assigns and releases radio channels for each terminal, controls transmission powers of the terminal 110 and the base station, performs soft handoff between cells, determines hard handoff, transcoding and vocoding functions, and handoff. And GPS clock distribution for signal processing, operation and maintenance of a base station, and the like.

Switch 125 is a basic and additional service processing, incoming or / and outgoing call processing, terminal location registration and handoff procedure processing for the communication of the terminal as a wired / wireless hybrid digital switching station providing a wired communication function and a mobile communication function; It is in charge of interworking with other communication networks.

In addition, when the authentication flag is set to the first information (for example, On), the exchange 125 transmits a communication call (for example, an outgoing call, an incoming call, and a third party) of the called terminal or the calling terminal. Call), SMS origination and / or incoming request, etc. may request a predetermined authentication function to the authentication center 135. Here, the authentication flag may be information set corresponding to whether to send an authentication request corresponding to a request of the called terminal or the calling terminal to the authentication center 135. In addition, the authentication flag may be set to any one of the first information and the second information (for example, off).

For example, when the authentication flag is set as the first information, the exchange 125 may perform an authentication function corresponding to the communication call type of the called terminal or the calling terminal in association with the authentication center 135. In addition, if the authentication flag is set as the second information, the exchange 125 may control to perform a basic communication call (for example, an incoming call or an outgoing call) of the called terminal or the calling terminal without performing a separate authentication procedure. Can be. Of course, if the authentication flag is set as the second information, the exchange 125 may control the originating call, incoming call, location registration, etc. of the calling terminal to proceed with the call processing without performing the authentication process. Of course, in the case of a three-way call, the exchange 125 may transmit a predetermined guide message to the called or originating terminal and control the communication call not to be performed.

In the present specification, the communication call type may be an outgoing call, an incoming call, an SMS call, an SMS incoming call, a location registration, a three-way call (or a conference call), and the like.

The home location register (HLR) 130 is a database that stores information on the subscribers of the mobile communication service. The home location register (HLR) 130 stores all data on the subscriber, such as call origination, location registration, and call reception. It stores the necessary routing information for the incoming call to the terminal (110). For example, the home location register 250 is N0. 7 Common line signaling may be used to share data stored for a subscriber with other devices (eg, visitor location register (VLR)). In addition, the home location register 130 is another device in the communication network (for example, switch 125, operation maintenance device (not shown), authentication sensor (not shown), billing device and short message center (not shown), etc.) ) Is performed.

An authentication center (AC) 135 performs a function of interworking with the exchange 125 to perform authentication according to communication call types of the called terminal and the calling terminal, and transmits the authentication result to the exchange 125. That is, when the authentication flag of the exchange 125 is set as the first information, the authentication center 135 may perform authentication of the incoming and / or originating terminal at the request of the exchange 125.

2 is a flowchart illustrating a method in which an exchange controls an authentication process according to a communication call type of a terminal according to an embodiment of the present invention. Hereinafter, a description will be given of a method of controlling the authentication process according to the communication call request of the calling terminal by the exchange 125. Since the same applies to the receiving terminal, a duplicate description thereof will be omitted. Hereinafter, a method of controlling the authentication process according to the authentication flag by the exchange 125 will be described schematically, a method of controlling the authentication process for each communication call type will be described separately with reference to the accompanying drawings.

In step 210, the exchange 125 receives the communication call request message of the calling terminal. Here, the communication call request message may be a different message corresponding to the communication call requested by the calling terminal. In the present specification, the switch 125 is collectively referred to as a communication call request message to explain a method of controlling authentication processing according to a communication call request of an originating terminal, but may be different depending on the communication call requested by the originating terminal. .

When the exchange 125 receives the communication call request message from the originating terminal in step 215, the authentication flag in the exchange 125 is set to the first information (for example, On) for the subscriber authentication of the originating terminal according to the communication call request. Determine whether it is set to)).

If the authentication flag is set as the first information, in step 220 the exchange 125 includes parameters for authentication (hereinafter referred to as "authentication parameters") in the communication call request message received from the originating terminal. Determine whether there is.

If the authentication parameter is included, the switch 125 transmits an authentication request message for performing authentication corresponding to the communication call request message received from the originating terminal to the authentication center 135 in step 225. Accordingly, the authentication center 135 may perform authentication according to a preset authentication function according to the communication call and transmit the authentication result to the exchange 125.

However, if the authentication parameter is not included, in step 230 the exchange 125 sends an authentication error report (AFREPROT: authentication fail report) to the authentication center 135. The authentication center 135 may analyze the authentication error message received from the exchange 125 to determine whether to accept the call requested by the calling terminal, and instruct the exchange 125 to provide a corresponding command. Since this is obvious to those skilled in the art, a separate description thereof will be omitted.

Here, the authentication error message (ARFEPORT) indicates that the subscriber of the calling terminal does not satisfy the authentication subscriber or the necessary conditions for authentication (for example, fails to receive related parameters necessary to perform authentication or the RAND value is inconsistent). May be a message transmitted by the exchange 125 to the authentication center 135.

Referring back to step 215, if the authentication flag is not set to the first information (i.e., if the authentication flag is set to the second information (e.g., Off)), then at step 225 exchange 125 ) Determines whether the requested communication call is a basic communication call. Here, the basic communication call may be an originating signal and a data communication call.

If it is determined that the requested communication call is a basic communication call, the exchange 125 processes the communication call at step 240.

However, if it is determined that it is not a basic communication call, the exchange 125 terminates the communication call after transmitting a message indicating that the requested communication call cannot be performed due to the system load to the calling terminal.

3 is a flowchart illustrating a method in which an exchange according to an embodiment of the present invention performs authentication according to location registration of a terminal. Hereinafter, a description will be given of a method for performing authentication corresponding to location registration of a calling terminal.

First, it will be described on the assumption that the terminal receives and stores an authentication vector necessary for authentication from the authentication center 135.

In step 310, the originating terminal transmits a location registration message to the base station controller 120 for location registration using the authentication vector received from the authentication center 135 in advance. Here, the location registration message may include parameters necessary for authentication including the received authentication vector. Authentication parameters may be, for example, AUTHER, RAND, COUNT, and the like.

In step 315, the base station controller 120 transmits a location update request message to the exchange 125 in response to the location registration message received from the originating terminal. Here, the location update request message may include authentication parameters included in the location registration message received from the originating terminal.

In step 320, when the switch 125 receives the location update request message from the base station controller 120, the switch 125 determines whether the authentication flag in the switch 125 is set as the first information to perform authentication for the subscriber of the calling terminal. do.

If the authentication flag is set to the first information, in step 325, the exchange 125 requests the VLR (not shown) whether the subscriber information corresponding to the originating terminal exists.

If there is no subscriber information corresponding to the originating terminal in the VLR (eg, if a message is received from the VLR corresponding to the absence of subscriber information), then at step 330 the exchange 125 may register the home location register 130. By requesting the subscriber information of the calling terminal and requesting location registration corresponding to the calling terminal, a registration notification message (registration notification return result) is received from the home location register 130 and transmitted to the VLR. Accordingly, the VLR registers subscriber information and location corresponding to the calling terminal.

However, if there is subscriber information corresponding to the calling terminal in the VLR (for example, if a message corresponding to the presence of subscriber information is received from the VLR), the switch 125 in step 335 receives the location registration message received from the calling terminal. Determine whether the authentication parameters are included in the.

Here, the exchange 125 may determine in advance whether the subscriber of the calling terminal is the subscriber to be authenticated before determining whether the authentication parameter is included. If the subscriber does not need to perform authentication, the exchange 125 may control to perform the calling signal requested by the calling terminal without an authentication procedure.

If it is determined that the authentication parameters are included, the switch 125 transmits an authentication request message to the authentication center 135 in step 340.

Here, the authentication request message may include authentication parameters received from the calling terminal, communication call type requested by the calling terminal, authentication capability information of the exchange, and the like. Here, the communication call type may be a preset value corresponding to the location registration. Accordingly, since the communication type included in the authentication request message is location registration, the authentication center 135 may perform authentication preset according to location registration, and transmit the authentication result message to the exchange 125.

In step 345, exchange 125 receives an authentication result message from authentication center 135.

Then, if the authentication is successful by analyzing the authentication result message, the switch 125 transmits a location update accept message to the base station controller 120 in step 350. The base station controller 120 transmits a registration accept order to the terminal 110 in response to the location update approval message received from the exchange 125.

Referring back to step 335 if no authentication parameters are included, in step 360 the exchange 125 sends an authentication error message to the authentication center 135. In addition, the authentication center 135 analyzes the authentication error message received from the exchange 125 to determine whether to allow the communication call requested by the originating terminal to be referred to as corresponding information (hereinafter referred to as "communication call determination information"). ) To the exchange 125. The exchange 125 may process the communication call according to the communication call acceptance determination information received from the authentication center 135.

4 is a flowchart illustrating a method in which an exchange controls an authentication according to an outgoing call request of a terminal according to an embodiment of the present invention. Hereinafter, a description overlapping with FIG. 3 will be omitted.

First, it will be described on the assumption that the terminal receives and stores an authentication vector necessary for authentication from the authentication center 135.

In step 410, the originating terminal uses the authentication vector received from the authentication center 135 in advance to make an origination request message including cipher values (hereinafter, referred to as "authentication parameters") for authentication according to originating call. ) Is transmitted to the base station controller 120. Here, the call request message may include parameters required for authentication including the received authentication vector. Authentication parameters may be, for example, AUTHER, RAND, COUNT, and the like.

In step 415, the base station controller 120 transmits an outgoing call service request message CmSvcReq to the exchange 125 corresponding to the outgoing call request message received from the originating terminal. Here, the caller service request message may include authentication parameters (eg, AUTHER, RAND (random value), COUNT, etc.) included in the caller request message received from the originating terminal.

Steps 420 to 435 are the same as 320 to 335 of FIG. 3, and thus a detailed description thereof will be omitted.

In step 440, exchange 125 transmits an authentication request message to authentication center 135. Here, the authentication request message may include authentication parameters received from the calling terminal, communication call type requested by the calling terminal, authentication capability information of the exchange, and the like. Here, the communication call type may be a preset value corresponding to the originating signal. Therefore, since the communication type included in the authentication request message is an outgoing call, the authentication center 135 may perform authentication preset according to the outgoing call and transmit the authentication result message to the exchange 125. Here, the authentication result message may be any one of an authentication success or authentication failure message. The exchange 125 then receives an authentication result message from the authentication center 135 (step 445). If the authentication success message is received, the exchange 125 performs the call signal processing according to the call request request of the calling terminal. However, if an authentication failure message is received, the exchange 125 may transmit a preset guidance message to the calling terminal corresponding to the authentication failure.

5 is a flowchart illustrating a method in which an exchange controls an authentication of a called terminal to an incoming call according to an embodiment of the present invention. Hereinafter, descriptions overlapping with FIGS. 3 and 4 will be omitted. In addition, it will be described on the assumption that the destination terminal receives and stores an authentication vector necessary for authentication from the authentication center 135.

In step 510, the exchange 125 transmits a communication call call request message corresponding to the originating terminal request through the base station controller 120 to the called terminal.

In step 515, the switch 125 requests whether the subscriber information of the called terminal corresponding to the originating terminal request is present in the VLR.

If not present, in step 520, the exchange 125 requests the subscriber information of the called terminal to the home location register 130, receives the corresponding subscriber information, and transmits it to the VLR. Accordingly, the VLR may register subscriber information corresponding to the called terminal.

In step 525, the called terminal transmits a response message (page response, hereinafter referred to as an "incoming call response message") according to the call request requested by the exchange 125 to the switch 125 through the base station controller 120. do. Here, the incoming call response message may include authentication parameters (eg, AUTHER, RAND, COUNT) necessary for authentication.

In operation 530, the switch 125 determines whether the authentication flag in the switch 125 is set as the first information according to the incoming call response message received through the called terminal 110.

If the authentication flag is set as the first information, in step 535, the exchange 125 determines whether authentication parameters are included in the incoming call response message received from the called terminal.

If it is determined that the authentication parameters are included, in step 540, the exchange 125 transmits an authentication request message including the communication call type (ie, incoming call), authentication parameters, exchange authentication information, etc. of the called terminal. To send. The following step is the same as step 345 of FIG.

The exchange 125 may control to perform an incoming call when an authentication success message is received from the authentication center 135, and control only to perform an incoming call of the called terminal when an authentication failure message is received. If the called terminal requests a separate communication service (for example, wireless Internet, etc.) during the incoming call, a preset authentication failure guide message indicating that only the incoming call is possible may be transmitted to the called terminal.

As described above, the exchange 125 sets an authentication parameter that determines whether to perform authentication according to the type of communication call requested by the terminal 110 in the exchange 125, and when the authentication parameter is set as the first information, authentication If the authentication request is performed to the center 135 and the second information is set, it may be controlled so that only basic communication calls (for example, incoming calls) can be performed without an authentication procedure.

As described above, by providing the authentication method in the switching device according to the present invention and the switching device, if the mobile communication system is unstable due to system overload, etc., without performing authentication for the basic communication call (for example, incoming call) There is an effect that can be processed.

Although the above has been described with reference to a preferred embodiment of the present invention, those skilled in the art to which the present invention pertains without departing from the spirit and scope of the present invention as set forth in the claims below It will be appreciated that modifications and variations can be made.

Claims (8)

Claims [1] A method for controlling an authentication of terminals in a mobile communication system in which a communication call between a calling terminal and a called terminal is handled, Receiving a communication call request message from at least one of the calling terminal and the called terminal; When the received communication call request message is received, determining whether an authentication flag set in the exchange is set to first information (On); And If the authentication flag is not set as the first information, processing the communication call without performing authentication according to the communication call request message, And the first information is set information indicating requesting authentication to the authentication center for the communication call request message. The method of claim 1, If the authentication flag is set as the first information, determining whether authentication parameters corresponding to the communication call request message are included; Transmitting an authentication request message including the authentication parameters to the authentication center if the authentication parameters are included; And And when the authentication success message is received from the authentication center, connecting a communication call corresponding to the communication call request message. The method of claim 2, And said authentication parameters comprise authentication identification information and random information (RAND) previously received from said authentication center. The method of claim 2, If the authentication parameters are not included, sending an authentication error message to the authentication center; Receiving decision whether to allow the communication call analyzed through the authentication error message from the authentication center; And And connecting the communication call according to the decision whether to allow the communication call. In the mobile communication system for processing a communication call between the calling terminal and the called terminal, When a communication call request message is received from at least one of the calling terminal and the called terminal, it is determined whether a preset authentication flag is set to first information (On), and if the authentication flag is not set to the first information. And a switch configured to process a communication call without performing authentication corresponding to the communication call request message. And the first information is set information indicating to request an authentication center to perform authentication for the communication call request message. The method of claim 5, If the authentication flag is set as the first information, it is determined whether authentication parameters corresponding to the communication call request message are included, and if the authentication parameters are included, the authentication request message including the authentication parameters is authenticated. And transmits a communication call corresponding to the communication call request message when an authentication success message is received from the authentication center. The method of claim 6, If the authentication parameters are not included, an authentication error message is transmitted to the authentication center, and the communication center determines whether to accept the communication call from the authentication error message through the authentication error message. And connecting the communication call according to the mobile communication system. The method of claim 6, And wherein said authentication parameters comprise authentication identification information and random information (RAND) previously received from said authentication center.

Images