KR100951384B1 - Connection control method for network and system using the same - Google Patents

Abstract

The present invention relates to a network access control system and method.

This invention according to the present invention, while receiving the data from the service server while maintaining the PPP session between the mobile terminal and the packet data service node, and stops the data transmission by performing the appropriate termination process accordingly, Provide procedures, methods and systems for this.

Mobile terminal, PPP, HTTP, TCP, IP

Description

CONNECTION CONTROL METHOD FOR NETWORK AND SYSTEM USING THE SAME

The present invention relates to a network access control system and method, and more particularly, to a network access control system and method for supporting appropriate packet transmission interruption in a mode in which a session is always maintained between a mobile terminal and a server.

With the rapid development of electronic calculators, fast computations have been developed, and machines have been developed to handle certain instructions. These machines have been equipped with faster operation processing functions over time, and with the development of peripherals, they are now transformed into computers that are essential to real life. These computers have recently been designed to transmit signals to each other, forming a network of signal transmission and reception between computers. The above-mentioned network is a physical foundation that forms a cyberspace called the Internet, while being connected at large within the company and large worldwide.

The advent of the Internet has led to the rapid development of computers and the specification of appropriate systems, protocols, that can be used worldwide. TCP / IP (Transmission Control Protocol / Internet Protocol) is one of the most widely used protocols and is likely to be used in the future. Dual IP has been proposed as a mobile IP (MIP) when it is transformed into a transmission method for a mobile communication network, that is, a connection between a mobile terminal and the Internet.

Meanwhile, in the above-described TCP / IP-based transmission method, an application program is conceptually operated on the IP, and a session based on PPP (Point to Point Protocol) is formed on the TCP.

In a conventional mobile communication network having such a structure, the portable terminal connects to a specific server based on IP, in particular MIP, and receives specific data from the server. In this process, however, the mobile terminal is not provided with an appropriate method for stopping data being received, so that the server cannot make an appropriate data transmission stop request. For this reason, proper signal transmission and reception cannot be performed between the server and the mobile terminal, causing problems such as unnecessary packet transmission and unnecessary occupation of network resources for packet transmission.

Accordingly, an object of the present invention is to provide a network access control method and system for supporting packet interruption in a mode in which a session is always maintained.

In accordance with another aspect of the present invention, there is provided a network access control method comprising: establishing a PPP (Point to Point Protocol) session between a mobile terminal and a packet data service node; Establishing, by the portable terminal, a Transmission Control Protocol (TCP) connection with a service server through the packet data service node; Receiving, by the portable terminal, data from the service server based on the TCP connection; Generating, by the portable terminal, a message requesting to stop transmission of data currently being received and transmitting the received message to the service server; Transmitting, by the service server, a response message and a data transmission end message to the portable terminal to a data transmission stop request message of the portable terminal; Stopping the data transmission from the service server to the mobile terminal; And releasing a TCP connection between the mobile terminal and the service server.

The network access control system according to an embodiment of the present invention for achieving the above object, forms a PPP (Point to Point Protocol) session between the packet data service node, and the service server and TCP (through the packet data service node) A mobile terminal for establishing a connection and generating a message for stopping transmission of data currently being received while transmitting data from the service server based on the TCP connection and transmitting the message to the service server; The service server generating a response message and a data transmission end message for the data transmission stop request message of the mobile terminal and transmitting the generated message to the mobile terminal; And the packet data service node configured to transmit and receive the data, the message for stopping the data transmission request, and the data transmission termination message between the portable terminal and the service server.

According to the method and system for controlling network access according to an embodiment of the present invention, the present invention can correctly perform a data transmission stop process by providing an appropriate TCP connection termination process while maintaining a PPP session.

Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings. In the following description, only parts necessary for understanding the operation according to the embodiment of the present invention will be described, it should be noted that the description of other parts will be omitted so as not to distract from the gist of the present invention.

Also, the terms or words used in the specification and claims described below should not be construed as being limited to the ordinary or dictionary meanings, and the inventors should use the concept of terms to explain their own invention in the best way. Based on the principle that it can be properly defined, it should be interpreted as meaning and concept corresponding to the technical idea of the present invention. Therefore, the embodiments described in the specification and the drawings shown in the drawings are only one of the most preferred embodiments of the present invention, and do not represent all of the technical idea of the present invention, various modifications that can be replaced at the time of the present application It should be understood that there may be equivalents and variations.

A portable terminal that can be applied in an embodiment of the present invention is a terminal capable of establishing a Point to Point Protocol (PPP) session with a server. Preferably, the mobile terminal is a mobile communication terminal, a digital broadcasting terminal, a personal digital assistant (PDA). ), Smart phone, International Mobile Telecommunication 2000 (IMT-2000) terminal, Wideband Code Division Multiple Access (WCDMA) terminal and Global System for Mobile communication (GSM) terminal, Universal Mobile Telecommunication Service (UMTS) terminal, GSM It will be apparent that the present invention can be applied to all information communication devices and multimedia devices, such as a General Packet Radio Service (GPRS) terminal, and applications thereof.

In the following description, signals transmitted and received between the mobile terminal, the communication network, and the server will be referred to as data, packets, or data packets and datagrams. In practice, each signal may be converted into data, packets, datagrams, etc. according to a process processed in a corresponding device, and thus may be understood as the same meaning even if given a different name. For example, while the mobile terminal receives a specific service from the server, what the server wants to send to the mobile terminal is data, which is converted into a packet according to the TCP / IP protocol. The converted packet is transmitted as a datagram when transmitted through the communication network. The datagram becomes a packet when it is received by the portable terminal again, and the packet may be data when restored according to the TCP / IP protocol. Accordingly, in the following description, a signal transmitted for each device will be described as an appropriate name.

1 schematically illustrates an overall configuration included in a network access control system according to an embodiment of the present invention.

Referring to FIG. 1, the network access control system of the present invention includes a mobile terminal 200, a communication network 100 forming a communication channel with the mobile terminal 200, and a packet corresponding to data requested by the mobile terminal 200. It is formed including a service server 300 to provide.

In the network access control system, the mobile terminal 200 manages a plurality of protocols formed between the communication networks 100 for each layer, and controls the PPP session to be always maintained when there is no direct termination request among the layers. In addition, the mobile terminal 200 may access the service server 300 through the communication network 100, and then download a data packet corresponding to various services provided by the service server 300. At this time, in the process of receiving a data packet from the service server 300, the mobile terminal 200 writes a message corresponding to the request to stop transmission of the currently received data packet in the TCP header if it wants to stop receiving the data packet. Send to server 300. When the service server 300 receives a TCP packet requesting to stop transmission of the data packet being transmitted from the mobile terminal 200, the service server 300 stops the transmission of the data packet. Through this process, the network access control system of the present invention can stop the normal data packet transmission even in the process of receiving the data packet from the service server 300. Hereinafter, each configuration of the network access control system of the present invention will be described in detail with reference to the accompanying drawings.

2 is a diagram schematically showing a communication network configuration of the present invention.

2, the communication network of the present invention includes a wireless access network 110, a packet data service including a packet data serving node foreign agent (PDSN / FA) and a home agent (PDSN home agent: PDSN / HA). Node (Packet Data Service Node) 140, the Internet network 150, AAA (Authentication Authorization Accounting) server 160 is configured to include.

The Radio Access Network (RAN) 110, upon completion of basic data call authentication between the mobile terminal 200 and the service server 300, transmits to an external agent of a packet data service node and a Generic Routing Encapsulation (GRE) protocol. Set up a virtual connection for The radio access network 110 relays a message transmission and reception for authentication, registration and termination of the network access identifier between the mobile terminal 200 and the external agent of the packet data service node. In addition, the wireless access network 110 of the present invention transmits a service request message of the mobile terminal 200 to the service server 300, and transmits a data packet corresponding to the service request message of the mobile terminal 200 from the service server 300. It relays to the portable terminal 200. In particular, the wireless access network 110 of the present invention maintains the session protocol layer with the mobile terminal 200 until the communication network access program terminates.

The packet data service node 140 establishes a Point-to-Point Protocol (PPP) connection with the mobile terminal 200 and establishes a Remote Authentication Dial In User Service (RADIUS) server. It passes network access identifier authentication, subscriber authentication and billing information. In this process, the packet data service node 140 performs 'PPP de-framing' and 'byte de-stuffing' to convert the PPP packet data into the IP packet. To perform. The packet data service node 140 is disposed between the mobile terminal 200 and the service server 300 to control the data packet from the service server 300 and transmit the data packet to the mobile terminal 200. Control to transmit the data packet from the () to the service server 300. In this case, when the packet data service node 140 checks a TCP packet including a message corresponding to a data transmission stop request among the packets transmitted by the mobile terminal 200, the packet data service node 140 transmits the corresponding TCP packet to the service server 300. In addition, a response message from the service server 300 is received and transmitted to the mobile terminal 200. The packet data service node 140 transmits a data transmission termination message corresponding to the data transmission stop request to the mobile terminal 200 when the service server 300 transmits the data transmission termination message, and the response message of the corresponding message from the mobile terminal 200. Receives and transmits it to the service server 300. In this case, the packet data service node 140 controls the radio access network 110 to maintain the PPP session protocol between the mobile terminal 200 and the service server 300. Through the above-described process, the mobile terminal 200 may stop receiving data packets from the service server 300.

The internet network 150 interconnects an external agent and a home agent as an Internet Protocol (IP). The internet network 150 interconnects the packet data service node 140 and the service server 300.

The authorization / authentication / billing (AAA) server 160 performs authentication, authorization verification, and charging for the user. For this purpose, standard remote access dial-in user service (RADIUS) protocol is used, and service billing information collection function, mobile IP registration authentication function, dial-in service user authentication / authority verification function, etc. are performed. do. That is, the mobile terminal is authenticated from the AAA server 160 for a network access identifier for internet access, thereby connecting to the service server 300 through the Internet, and then using the corresponding service. Application applications necessary for Internet connection are pre-stored in the mobile terminal 200.

As described above, the communication network 100 of the present invention, in particular, the packet data service node 140, if the mobile terminal 200 intends to stop receiving data while receiving specific data, a message corresponding to stopping data reception. In addition to the transfer from the mobile terminal 200 to the service server 300, and transmits a message from the service server 300 for the end of data transmission to the mobile terminal (200).

3 is a diagram illustrating an example of a protocol stack structure between a mobile terminal, a packet data service node, and a service server according to an exemplary embodiment of the present invention.

Referring to FIG. 3, in the case of the mobile terminal 200 and the service server 300, the protocol stack structure according to the embodiment of the present invention includes the first layer 10, the second layer 20, and the first layer 10. The third layer 30, the fourth layer 40, and the application layer 50 may be configured, and the packet data service node 140 may have a stack structure excluding the application layer 50. Prior to the description, the present invention describes a protocol stack structure composed of five and four layers by way of example, but the present invention is not limited thereto. That is, the hierarchy can be further subdivided or integrated as needed, and accordingly, the number of layers can be changed.

The first layer 10 is a physical layer, and provides a radio link composed of a specific throughput and data quality. The first layer 10 includes a broadcast control channel (BCCH), a common control channel (CCCH), a user packet channel (UPCH), an associated control channel (ACCH), a dedicated control channel (DCCH), a traffic channel (TCH), and the like. Functional channels are defined.

The second layer 20 may be divided into two sub-layers as a data link layer. The lower sub-layer is a media access control (MAC) layer, and the upper sub-layer is a connection access control. (LAC: Link Access Control) layer. Here, the MAC layer is responsible for controlling the radio link provided by the physical layer and sending data coming from the upper layer to the radio link. Thus, some functions of the MAC layer may belong to the physical layer. The LAC layer is responsible for establishing, managing, and terminating logical links. In other words, the LAC layer establishes one logical link for one call requested by the user.

The third layer 30 is a layer to which a PPP (Point to Point Protocol) is applied. The third layer 30, which is a PPP layer, is a communication protocol for a wide area network (WAN) used when data communication is performed by connecting two points. In the PPP layer, most routers of the local area network (LAN) access devices support the point-to-point protocol (PPP). The PPP layer includes a function that compresses only the header portion of a data packet or an authentication protocol such as a password authentication protocol (PAP) or a challenge-handshake authentication protocol (CHAP) so that these functions can be used when establishing a connection. The PPP layer also has the capability of the Internet Protocol Control Protocol (IPCP), which allows an access server to automatically assign IP addresses to client personal computers when connecting to a remote LAN. This PPP layer provides a packet-based address provision and a function for maintaining a connection between the terminal and the network. In particular, the PPP layer between the mobile terminal 200 and the packet data service node 140 of the present invention may be maintained even if the upper fourth layer and the application layer of the mobile terminal 200 are changed or terminated.

The fourth layer 40 may be a Transmission Control Protocol (TCP) / Internet Protocol (IP) layer. Accordingly, the service server 300 packetizes data generated in the application layer 50 based on TCP / IP, and transfers the data to the third layer 30. Then, the third layer 30 passes through the second layer 20 and the first layer 10 to the first layer 10 of the packet data service node 140, and the packet data service node 140 After passing the received packet to the second layer 20, the third layer 30 and the fourth layer 40, the fourth layer 40 checks the characteristics of the packet. In the same manner, the mobile terminal 200 generates a message for the data transmission stop request in the application layer 50 and via the fourth layer to the first layer 10, the first of the packet data service node 140. When forwarding to the layer 10, the packet data service node 140 may check the contents of the corresponding packet at the fourth layer 40. The packet data service node 140 confirms that the message is to be delivered from the fourth layer 40 to the service server 300, and transmits the message to the service server 300. When the service server 300 receives the corresponding message from the packet data service node 140, the service server 300 stops the transmission of the data packet to be transmitted to the mobile terminal 200, generates a message about the end of the data transmission, and generates the packet data service node 140. To pass).

The application layer 50 is a layer in which a user-oriented application program such as a graphical user interface (GUI) for a user is activated. In the case of the service server 300, a program for managing the server and an application program for the administrator may be activated. The application layer 50 may be a variety of applications such as MIP (Mobile Internet Protocol) -based Internet web, MIP-based communication, SIP (Simple Internet Protocol) -based Internet access, PTT (Push to Talk) -based communication, HTTP-based communication, and the like. This can be the area where applications are activated. In particular, the application layer 50 of the present invention may generate a message for stopping data transmission in the case of the portable terminal 200 and transmit the message to the fourth layer 40, and the service server 300 from the portable terminal 200. When receiving the message for stopping the data transmission, it performs a corresponding process, and generates a message for the end of the data transmission to support the mobile terminal 200 to pass through the packet data service node 140.

That is, in the present invention, when the packet data service node 140 receives the data transmission stop message from the mobile terminal 200, the packet data service node 140 transmits the data transmission stop message to the service server 300, and the corresponding data from the service server 300. A response message for receiving the transmission message may be received and transmitted to the mobile terminal 200. When the packet data service node 140 receives the data transmission termination message from the service server 300, the packet data service node 140 transmits the data transmission termination message to the mobile terminal 200 and receives a response message from the mobile terminal 200 to receive the service server 300. ) Can be delivered. At this time, since the packet data service node 140 stops the actual packet transmission in the process of the service server 300 receiving the data transmission stop message and transmitting the response message to the mobile terminal 200, the packet data service node 140 is portable at this time. Data transmission to the terminal 200 may be stopped. Here, the packet data service node 140 maintains the third layer 30 between the mobile terminal 200 and the service server 300, so that the packet data service node 140 can quickly activate a new application program of the mobile terminal 200. Done. The mobile terminal 200 may further perform a separate termination process for releasing the third layer 30 after terminating a specific application program.

As described above, each stack of the network access control system according to the embodiment of the present invention supports an appropriate procedure to perform the appropriate packet transmission and interruption during the data transmission and termination process through a specific application. In addition, the mobile terminal and the packet data service node may maintain a third layer and may transmit data through the third layer, and may quickly execute a new application program operated on the third layer.

4 is a diagram illustrating a configuration of a mobile terminal 200 according to an embodiment of the present invention.

Referring to FIG. 4, the mobile terminal 200 according to the present invention includes a radio frequency unit (RF) unit 210, an input unit 240, a memory 250, a display unit 270, and a control unit ( 260).

The RF unit 210 performs a series of communication related to cellular phone communication, short message service (SMS) or MMS communication and data communication. The RF unit 210 includes an RF transmitter for upconverting and amplifying a frequency of a transmitted signal, and an RF receiver for low noise amplifying and downconverting a received signal.

In particular, the RF unit 210 forms a mobile communication channel with the communication network 100 under the control of the control unit 260, and is generated according to the operation of an application program activated in the application layer through the formed mobile communication channel. The signal may be transmitted and received with the service server 300. The RF unit 210 may belong to the first layer 10 that is a physical layer in the protocol stack structure. In this case, the mobile communication channel may be a variety of conventional schemes, for example, code division multiple access (CDMA), frequency division multiple access (FDMA), and time division multi access (FDM). , Wideband Code Division Multi Access (WCDMA), Portable Internet (e.g., Wireless Broadband Internet (WiBro), Universal Mobile Telecommunication System (UMTS) and Orthogonal Frequency) A channel may be formed by at least one of a method such as Orthogonal Frequency Division Multi Access (OFDMA), and a communication channel may be formed by a combination of CDMA and the portable Internet.

The input unit 240 generates a selection signal of an application program to be activated by the user among the overall functions of the mobile terminal 200, or a key signal for menu selection and data request of the mobile terminal 200 according to the application program. It generates and delivers to the control unit 260.

The memory 250 stores each protocol unit necessary for the portable terminal 200 to have a protocol stack structure, which is formed when a protocol is established with the packet data service node 140 under the control of the controller 260. Is activated. The memory 250 temporarily or semi-permanently stores data packets received from the communication network 100 according to activation of the application program, and may store user data generated by a user. The memory 250 may be divided into a program memory and a data memory.

The program memory may store program modules for controlling a general operation of the mobile terminal 200 and program modules necessary for data communication of the mobile terminal. That is, the program memory includes a first layer protocol unit for supporting each protocol required for the first layer 10, which is a physical layer, a second layer protocol unit for supporting a second layer, and a third layer for supporting a third layer. The layer protocol unit, the fourth layer protocol unit supporting the fourth layer and the application programs for the application layer 40 are stored. That is, the program memory of the present invention may store a protocol unit, a corresponding program, a routine corresponding thereto, and the like necessary for forming a corresponding communication channel according to the characteristics of the portable terminal 200.

The data memory performs a function of storing data and user setting information generated during the execution of the protocol unit and the programs. For example, the data memory may store data packets generated when the mobile terminal 200 accesses the service server 300 and downloads specific content.

The display unit 270 displays a function screen and a menu screen according to the use of the mobile terminal 200. The display unit 270 of the present invention displays a screen according to the use of an application program stored in the memory 250 of the portable terminal 200. For example, when the portable terminal 200 wants to access the MIP-based Internet web, the display unit 270 accesses the corresponding service server according to a key input signal for accessing the Internet web generated from the input unit 240. Create a connection screen. In addition, the display unit 270 displays a screen during the connection process and a data signal received from the Internet web when the connection is completed when accessing the service server 300. In addition, the display unit 270 may display a phone number input from the input unit 240 when the PTT service is to be used, and may display a transmission status screen, a reception standby status screen, a reception status screen, and the like during a call. have. In particular, the display unit 270 of the present invention may output a screen corresponding to the process of downloading a specific content from the service server 300, and when the data transmission corresponding to the content is to be stopped, the display unit 270 generated from the input unit 240 According to the transmission stop input signal, a transmission stop confirmation pop-up message or a transmission stop confirmation screen may be output.

The controller 260 performs a function of controlling the overall operation of the mobile terminal 200. For example, the controller 260 controls the signal flow between the RF unit 210, the input unit 240, the memory 250, and the display unit 270, and generates a signal in response to a key signal input from the input unit 240. Control to display additional functions or user data managed or managed.

In particular, the control unit 260 of the present invention activates the Internet connection application programs stored in the memory 250, that is, the protocols described above, in response to the input signal transmission corresponding to the connection of the service server 300 from the input unit 240. In addition, the radio frequency unit 210 is operated to control communication channel establishment with the service server 300 through the communication network 100. When the communication channel is formed, the controller 260 receives data provided by the service server 300, for example, data corresponding to the access screen, and accesses the display unit 270 by operating an application program, for example, a web application program. You can control the screen output. Thereafter, the controller 260 requests the service server 300 to transmit a data packet for specific content or activates various contents transmitted by the service server 300 in response to an input signal from the input unit 240. do. When the control unit 260 of the present invention receives an input signal for stopping data reception from the input unit 240 while receiving a data packet from the service server 300, the controller 260 generates a message corresponding to the data transmission stop request. This control is transmitted to the service server 300 through the radio frequency unit 210 and the communication network 100. A message corresponding to the data transmission stop request will be described in more detail with reference to FIG. 5. Then, the controller 260 receives a response message for the data transmission stop request message from the service server 300. In addition, the controller 260 may receive a data transmission termination message transmitted from the service server 300, and in this case, transmits a response message corresponding to the data transmission termination message to the service server 300. Meanwhile, the controller 260 first establishes a PPP session with the communication network 100, that is, the packet data service node 140 in the process of accessing the service server 300 through the communication network 100 at the user's request. Based on this, the controller performs a TCP connection with the packet data service server 300. In addition, the controller 260 may continuously maintain the aforementioned PPP session regardless of TCP connection and disconnection. In the process of forming a PPP session, the controller 260 activates the corresponding protocol from the memory 250 when power is supplied to the mobile terminal 200 and the booting is completed, even though a separate user request is not generated. 140), it may be controlled to establish a PPP session.

As described above, the mobile terminal 200 of the present invention controls the TCP / IP connection with the service server 300 while the packet data service node and the PPP session are connected, and the data from the service server 300. By controlling to perform the normal data transmission stop request in the process of receiving the, it is possible to perform the appropriate data transmission stop.

The configuration of the mobile terminal 200 of the present invention has been described only for the description of the embodiment of the present invention, and other configurations, for example, a camera module, a digital multimedia broadcasting module, a music reproduction module, etc. may be added as necessary. .

FIG. 5 is a diagram schematically illustrating a configuration of a TCP packet in a message including a data transmission stop request according to an embodiment of the present invention.

Referring to FIG. 5, the data transmission stop request message of the present invention includes a TCP header, Option, and data. Here, the TCP header includes a 16-bit source port number, a 16-bit destination number, and a 32-bit sequence number and a 32-bit response number, as defined in the protocol. The TCP header includes a 4-bit header size, reserved 6-bit and 16-bit TCP checksum areas, and a 16-bit emergency pointer area. And a 16-bit window size area, such as "URG, ACK, PSH, RST, SYN, FIN", which defines the message type of the packet in the TCP header. The message type corresponding to the data transmission stop request of the present invention may be determined by defining a predetermined area, for example, an “URG area, an FIN area, and a 16-bit window size” area among the above-mentioned areas. That is, the data transmission stop request message of the present invention can be set to "URG = 1", "FIN = 1" and "Windowsize = 0", it can be informed that the packet to be transmitted is a message requesting to stop the data transmission. The service server 300 may search the above-described area, check whether the message requests to stop data transmission, and perform the processing accordingly.

In addition, in the present invention, the data transmission stop request message type may be determined by defining an option area. That is, inserting a code indicating that the packet currently being transmitted in the option area is a message for stopping the data transmission request and transmitting the code to the service server 300, the service server 300 checks the packet to confirm that the data transmission stop request And the processing accordingly. Here, the service server 300 may predetermine a code corresponding to a data transmission stop request in an option area in advance, and when receiving a code that meets a predetermined standard, the service server 300 may perform a process regarding data transmission stop. That is, the code corresponding to the data transmission stop request message of the present invention is preferably defined in the "Unassigned" area of the TCP header option area as shown in FIG. 6, and the service server 300 checks this area. If the code corresponding to the predetermined data transmission stop request message is described, the data transmission termination process as described above may be performed.

In the above, the configuration, location, and role of each of the mobile terminal 200, the communication network 100, and the service server 300 according to the embodiment of the present invention have been described. Hereinafter, a method of stopping data transmission according to an exemplary embodiment of the present invention will be described with reference to FIG. 6.

7 is a diagram illustrating a signal flow transmitted and received between components of a network access control system for explaining a network access control method according to an exemplary embodiment of the present invention.

Referring to FIG. 7, in another network access control method according to an embodiment of the present invention, first, the portable terminal 200 forms a third layer, that is, a PPP session, with the packet data service node 140 in step S101 (PPP session established). )do. Such a PPP session may be established when the portable terminal 200 is turned on or when a user of the portable terminal 200 directly generates an input signal for connection.

When the PPP session is established, the portable terminal 200 performs a TCP connection with the service server 300 through the packet data service node 140 in step S103. That is, the portable terminal 200 forms a TCP connection with the packet data service node 140, and the packet data service node 140 forms a TCP connection with the service server 300, and as a result, the portable terminal 200 And a TCP connection is established between the service server and the service server 300. After the TCP connection, the mobile terminal 200 may access the service server 300 by operating an HTTP-based web application. Substantially, when the mobile terminal 200 activates the web application program, the controller of the terminal activates the TCP / IP protocol unit on the PPP session already established, and activates the web application program above it. At this time, when the mobile terminal 200 searches for the service server 300 to be serviced using a web application, the Internet through the packet data service node 140 using the IP address corresponding to the service server 300. Entering the network, the service server 300 may be searched by using an address search function such as a domain name service provided by the Internet network. Thereafter, the mobile terminal 200 performs a TCP-based connection, that is, 3-hand shaking, to the searched service server 300 to occupy a virtual communication channel.

Thereafter, the mobile terminal 200 requests a content transmission request, that is, data transmission, related to the service provided by the service server 300 in step S104. In this case, the portable terminal 200 may request data corresponding to the access screen provided by the service server 300. When the access screen is already provided, the portable terminal 200 inputs an input signal from the input unit 240 of the portable terminal 200. May request data corresponding to specific content designated by the user. Then, the service server 300 transmits the data requested by the mobile terminal 200 to the mobile terminal 200 via the packet data service node 140 in step S105. In this process, the service server 300 transmits to the mobile terminal 200 through the layers as described above.

On the other hand, if the mobile terminal 200 wants to stop while receiving data from the service server 300 in step S107, the mobile terminal 200 generates a request message corresponding to the data transmission stop in step S109, and transmits the message to the service server 300. To be sent). Here, as described above, the mobile terminal 200 may indicate that the message currently transmitted is a message for stopping data transmission by setting a predetermined message type, that is, a specific area value of the TCP packet, with the service server 300. In addition, the mobile terminal 200 may indicate that the message to be transmitted is a message requesting to stop data transmission by inserting a code previously promised with the service server 300 in the option area of the TCP packet.

When the service server 300 receives a message requesting data transmission stop from the mobile terminal 200 in step S109, the service server 300 sends a response message (FIN Ack) to the mobile terminal 200 in response to the data transmission stop request message in step S111. send. In operation S113, the service server 300 transmits a message (FIN Flg: 1) indicating that the data transmission is to be terminated, to the portable terminal 200. Here, the service server 300 sets the FIN area among the flag values of the TCP header to 1, indicating that the data transmission termination message currently transmitted indicates that the mobile terminal 200 terminated the message requesting data transmission. Can be.

In operation S115, the service server 300 stops data transmission that has been transmitted to the mobile terminal 200. On the other hand, while the service server 300 stops transmitting data to the mobile terminal 200 in step S115, if the mobile terminal 200 receives a data transmission end message transmitted by the service server 300, the data in step S117 A response message (FIN Ack) for the transmission end message may be transmitted to the service server 300.

Next, the data transmission traffic may be down between the mobile terminal 200 and the packet data service node 140 as in step S121. As shown in step S123, the PPP session may be maintained between the mobile terminal 200 and the packet data service node 140. In this case, the PPP session may be substantially maintained in the above-described data transmission stop request and stop and response message exchange process unless the mobile terminal 200 performs a separate direct termination operation.

As described above, the network access control method according to an embodiment of the present invention forms a PPP session between the mobile terminal 200 and the packet data service node 140, and then maintains the PPP session. While performing a TCP connection with the 300 and transmitting data based on the TCP connection, if a data transmission is to be stopped, a data transmission stop request message is generated and transmitted to the service server 300, and an appropriate response process is performed. By performing, the data transmission process can be completely performed.

8 is a diagram illustrating a process of requesting to stop data transmission by defining a specific region of a TCP header in a network access control method according to an embodiment of the present invention.

Referring to FIG. 8, the mobile terminal 200 establishes a PPP session with the PDSN 140, and establishes a TCP connection with the service server 300 based on this. Thereafter, the mobile terminal 200 performs a content request (Http download request) to the service server in response to a user input. Then, the service server 300 transmits the corresponding content to the mobile terminal 200.

On the other hand, when the mobile terminal 200 receives a data transmission stop request from the input unit while receiving content from the service server 300, the portable terminal 200 sets the header area of the TCP packet according to a predetermined protocol, and then sets the corresponding TCP packet to the service server. To transmit. That is, the mobile terminal 200 sets the value of the "URG" flag area in the header area of the TCP packet to "1", sets the "FIN" flag area to "1", and "WND (window size)". Set the area to "0".

When the service server 300 receives a TCP packet in which the URG flag area and the FIN flag area are set to 1 and the WND area is set to 0 from the mobile terminal 200, the service server 300 is a response message for receiving the corresponding TCP packet. The message “FIN Ack” is transmitted to the mobile terminal 200. In addition, the service server 300 defines a message indicating that the transmission of the data currently being transmitted to the mobile terminal 200 is set by setting the FIN flag area value of the header area of the TCP packet to 1, and carries the message. It transmits to the terminal 200.

After transmitting the message in which the URG flag area and the FIN flag area are set to 1 and the WND area is set to 0, the mobile terminal 200 transmits a data transmission end message in which the FIN flag area is set to 1 from the service server 300. When receiving, the FIN Ack message is transmitted to the service server 300 in response to the reception of the data transmission end message.

When the above-described process is completed, the TCP connection between the mobile terminal 200 and the service server 300 is released from each other, so that the mobile terminal 200 reduces traffic with the PDSN. Meanwhile, while performing the above-described process, the mobile terminal 200 and the PDSN may maintain a PPP session.

Here, the present invention has been described as setting the URG flag area, the FIN flag area and the WND area to define a data transmission stop request message, but is not limited thereto, and between the service server 300 and the mobile terminal 200. By setting a pre-defined area, the mobile terminal 200 may generate a corresponding data transmission stop request message.

9 is a diagram illustrating a process of requesting to stop data transmission by defining an option area of a TCP packet in a network access control method according to an embodiment of the present invention.

Referring to FIG. 9, similarly to FIG. 8, the mobile terminal 200 establishes a PPP session with the PDSN 140 and forms a TCP connection with the service server 300 based on the same. Thereafter, the mobile terminal 200 performs a content request (Http download request) to the service server in response to a user input. Then, the service server 300 transmits the corresponding content to the mobile terminal 200.

On the other hand, when the mobile terminal 200 receives a data transmission stop request from the input unit while receiving content from the service server 300, after setting the option area of the TCP packet according to a predetermined protocol, the mobile terminal 200 sets the corresponding TCP packet to the service server. To transmit. That is, the mobile terminal 200 writes a specific code in the "Unassigned" area as shown in FIG. 6 among the option areas of the TCP packet. Here, the specific code is a code previously agreed with the service server 300 and may be various binary data values. The TCP packet thus prepared is transmitted to the service server 300 through the PDSN 140.

When the service server 300 receives the TCP packet from the mobile terminal 200, the service server 300 unpacks the TCP packet, examines the option area, and checks whether there is a specific code. In this case, the mobile terminal 200 and the service server 300 need to define a specific code for stopping data transmission in advance. When the specific code receives the TCP packet described in the option area, the service server 300 transmits a "FIN Ack" message, which is a response message to the reception of the TCP packet, to the mobile terminal 200. The service server 300 defines a message indicating that the transmission of data currently being transmitted to the mobile terminal 200 is terminated by setting the FIN flag region value in the header region of the TCP packet to 1, and defines the message as the mobile terminal. Transmit to 200.

When the mobile terminal 200 transmits a TCP packet including a specific code to the option area and receives a data transmission end message having the FIN flag area set to 1 from the service server 300, the mobile terminal 200 receives the data transmission end message. In response to the FIN Ack message is sent to the service server (300).

When the above-described process is completed, the TCP connection between the mobile terminal 200 and the service server 300 is released from each other, so that the mobile terminal 200 reduces traffic with the PDSN. Meanwhile, while performing the above-described process, the mobile terminal 200 and the PDSN may maintain a PPP session.

As described above, in the network access control method according to an exemplary embodiment of the present invention, a specific area of a TCP packet may be adjusted to correspond to a data transmission stop request, thereby performing a transmission stop request of data being received by a service server. In addition, the service server of the present invention receives the TCP packet for stopping data transmission from the mobile terminal and performs the processing thereof, thereby terminating the transmission of the data being transmitted to the mobile terminal in an appropriate manner.

As described above, in the detailed description of the present invention has been described with respect to specific embodiments, various modifications are possible without departing from the scope of the invention. Therefore, the scope of the present invention should not be limited to the described embodiments, but should be determined not only by the claims below, but also by the equivalents of the claims.

1 is a view schematically showing the configuration of a network access control system according to an embodiment of the present invention;

2 is a view schematically showing the configuration of a mobile communication network of the present invention;

3 is a diagram schematically showing a protocol stack structure of the present invention;

4 is a view schematically showing the configuration of a portable terminal of the present invention;

5 is a diagram showing the structure of a TCP packet according to an embodiment of the present invention;

6 is a view showing in more detail the option region of the structure of a TCP packet according to an embodiment of the present invention;

7 is a signal flow diagram illustrating a signal flow transmitted and received between a network access control system for explaining a network access control method according to an embodiment of the present invention.

Claims (14)

Establishing a Point to Point Protocol (PPP) session between the mobile terminal and the packet data service node; Establishing, by the portable terminal, a Transmission Control Protocol (TCP) connection with a service server through the packet data service node; Receiving, by the portable terminal, data from the service server based on the TCP connection; Generating, by the portable terminal, a message requesting to stop transmission of data currently being received and transmitting the received message to the service server; Transmitting, by the service server, a response message and a data transmission end message to the portable terminal to a data transmission stop request message of the portable terminal; Stopping the data transmission from the service server to the mobile terminal; And Disconnecting a TCP connection between the mobile terminal and the service server while maintaining a PPP session between the mobile terminal and the packet data service node. According to claim 1, Forming, by the portable terminal, a physical layer and a data link layer physically connected to the packet data service node before establishing the PPP session; And And forming an application layer configured to control the portable terminal to receive and process an input signal corresponding to the data transmission stop request message formed on the TCP / IP layer after forming the TCP connection. , The forming of the PPP session is a process of forming a PPP layer in which the mobile terminal is formed on the data link layer and transmits the data transmission stop request message to the packet data service node in a point-to-point manner. The forming of the TCP connection may include forming a TCP / IP layer in which the portable terminal is formed on the PPP layer and defines a TCP packet corresponding to the data transmission stop request message. . The method of claim 2, Before the forming of the PPP session, the packet data service node forming a physical layer and a data link layer that are physically connected to the mobile terminal and the service server; In the forming of the PPP session, the packet data service node is formed on the data link layer, receives the data transmission stop request message from the mobile terminal, and transmits the data to the service server in a point-to-point manner. Forming a PPP layer for transmitting a message from the service server to the mobile terminal in a point-to-point manner; The establishing of the TCP connection may include TCP / IP, in which the packet data service node is formed on the PPP layer to identify an address of a data packet corresponding to the data transmission stop request message and a data packet corresponding to the data transmission end message. Network access control method, characterized in that the process of forming an IP layer. The method of claim 3, Forming, by the service server, a physical layer and a data link layer that are physically connected to the packet data service node before the forming of the PPP session; And Forming an application layer configured to form the service server on the TCP / IP layer and to generate the data transmission end message in response to the data transmission stop request message after forming the TCP connection; and, The establishing of the PPP session may include the service server being formed on the data link layer, receiving the data transmission stop request message from the packet data service node in a point-to-point manner, and receiving the data transmission end message from the packet data service. Is a process of forming a PPP layer that transmits to a node in a point-to-point manner, The forming of the TCP connection may include forming a TCP / IP layer in which the service server is formed on the PPP layer and checks a TCP packet corresponding to the data transmission stop request message. . The method of claim 2, The process of generating a message requesting the data transmission stop and transmitting to the service server Inserting, by the portable terminal, a code corresponding to the message requesting to stop the data transmission in an option region of the TCP packet header; And Transmitting a data packet including the TCP packet header to the service server. The method of claim 2, The process of generating a message requesting the data transmission stop and transmitting to the service server Defining, by the portable terminal, a "URG" region, a "FIN" region, and a "Window Size" region defined in the TCP packet header to correspond to a message requesting to stop data transmission; And Transmitting a data packet including the TCP packet header to the service server. delete Establish a Point to Point Protocol (PPP) session between packet data service nodes, establish a Transmission Control Protocol (TCP) connection with a service server through the packet data service node, and establish data from the service server based on the TCP connection A mobile terminal for generating a message requesting to stop transmission of data currently being received during transmission and transmitting the message to the service server; The service server generating a response message and a data transmission end message for the data transmission stop request message of the mobile terminal and transmitting the generated message to the mobile terminal; And And the packet data service node configured to transmit and receive the data, the message for stopping the data transmission, and the data transmission termination message between the mobile terminal and the service server. And the PPP session between the portable terminal and the packet data service node is maintained even while the TCP connection between the portable terminal and the service server is released. The method of claim 8, The mobile terminal A physical layer and a data link layer physically connected with the packet data service node; A PPP layer formed on the data link layer and transmitting the data transmission stop request message to the packet data service node in a point-to-point manner; A Transmission Control Protocol / Internet Protocol (TCP / IP) layer formed on the PPP layer and defining a TCP packet corresponding to the data transmission stop request message; And And an application layer formed on the TCP / IP layer and controlling to receive and process an input signal corresponding to the data transmission stop request message. The method of claim 9, The packet data service node A physical layer and a data link layer physically connected to the portable terminal and the service server; The data link layer is formed on the data link layer and receives the data transmission stop request message from the mobile terminal and transmits the data transmission end message to the mobile terminal in a point-to-point manner. Transmitting PPP layer; And And a TCP / IP layer formed on the PPP layer to identify an address of a data packet corresponding to the data transmission stop request message and a data packet corresponding to the data transmission end message. . The method of claim 10, The service server A physical layer and a data link layer physically connected with the packet data service node; A PPP layer formed on the data link layer and receiving the data transmission stop request message from the packet data service node in a point-to-point manner, and transmitting the data transmission termination message to the packet data service node in a point-to-point manner; A TCP / IP layer formed on the PPP layer and identifying a TCP packet corresponding to the data transmission stop request message; And And an application layer formed on the TCP / IP layer and controlling to generate the data transmission end message in response to the data transmission stop request message. The method of claim 9, The mobile terminal Inserting a code corresponding to the message requesting to stop the data transmission in the option area of the TCP packet header to create a message for the data transmission stop request, and transmitting a data packet including the TCP packet header to the service server Network access control system, characterized in that. The method of claim 9, The mobile terminal In order to create a message for the data transmission stop request, the "URG" area, "FIN" area, and "Window Size" area defined in the TCP packet header are defined to correspond to the message requesting the data transmission stop, and the TCP And transmitting a data packet including a packet header to the service server. delete

Images