KR101044171B1 - Apparatus and Method of Unity Authentication for Wire/Wireless Internet Service - Google Patents

Abstract

The present invention relates to an integrated authentication processing apparatus and method for wired and wireless Internet services, and to unify authentication, security, billing, and subscriber management functions for wired and wireless services in a systematic manner when requesting processing of high-speed Internet services through heterogeneous access networks. To provide a stable and uninterrupted Internet service, and to provide an integrated authentication processing device and method for wired and wireless Internet service.

To this end, the present invention, authentication processing means for performing a series of authentication procedures for the authentication service processing request received through the network connection means; Billing processing means for performing a session control function in association with session processing means with respect to the access information received through said network access means, and receiving billing information from said network access means to make a database; The session processing means for performing a session control function in association with the authentication processing means and the charging processing means; IP interlocking processing means for receiving the client information in connection with the IP management system at the time of authentication and transmitting to the authentication processing means; And database processing means for interfacing with the subscriber management system to database information necessary for authentication, billing, and session for the authentication, wherein the authentication processing means receives the authentication information from the network access means and classifies the wired / wireless service. Authentication information transmission and reception means for transmitting to a wired service processing means and a wireless service processing means, and receiving the result and transmitting the result to the network connection means; The wired service processing unit for processing the wired service processing request received from the authentication information transmitting and receiving unit in association with the session processing unit and the database processing unit, and receiving and transmitting a roaming service processing request to the roaming service processing unit; The wireless service processing means for processing the wireless service processing request received from the authentication information transmitting and receiving means in association with the session processing means and the database processing means, and receiving a roaming service processing request and transmitting the received roaming service processing request to the roaming service processing means; The roaming service processing means for processing a roaming service processing request received from the wired service processing means and the wireless service processing means; And an IP processing unit for receiving the client information and transmitting the client information to the authentication information transmitting / receiving unit in association with the IP interworking processing unit.

Integrated authentication processing unit, wired and wireless Internet service

Description

Apparatus and Method of Unity Authentication for Wire / Wireless Internet Service             

1 is an exemplary configuration of a wired and wireless Internet service network to which the present invention is applied.

2 is a flowchart illustrating an integrated authentication method for wired and wireless Internet services according to the present invention.

3 is a block diagram of an integrated authentication processing device for wired and wireless Internet services according to the present invention.

Figure 4 is a detailed configuration diagram of an embodiment of the authentication processing unit of Figure 3 according to the present invention.

Figure 5 is a detailed configuration of one embodiment of the charging processing unit of Figure 3 according to the present invention.

6 is a detailed diagram of an embodiment of the session processing unit of FIG. 3 according to the present invention;

Figure 7 is a detailed configuration diagram of an embodiment of the IP (IP) interworking processing unit of Figure 3 according to the present invention.

8 is a detailed configuration diagram of an embodiment of the database processing unit of FIG. 3 in accordance with the present invention.

* Explanation of symbols for the main parts of the drawings                 

31: network connection device 32: authentication processing unit

33: billing processing unit 34: session processing unit

35: IP interworking processing unit 36: database processing unit

37: IP Management System (IPMS) 38: Subscriber Management System (IDMS)

39: Statistical processing system

The present invention relates to an integrated authentication processing apparatus and method for wired and wireless Internet services, and more particularly, to authentication, security, billing, and subscriber management of wired and wireless services in a systematic manner when requesting processing of high-speed Internet services through heterogeneous access networks. The present invention relates to an integrated authentication processing apparatus and method for wired and wireless Internet services for providing a stable and uninterrupted Internet service by unifying functions.

In general, the Internet access service is provided using the RADIUS (RADIUS: Remote Authentication Dial-In User Service) based authentication protocol based on the User Datagram Protocol (UDP). In the event of a failure in a device that needs to provide authentication protocols quickly, users will not be able to receive access services, and the network operators will have to provide unreliable authentication services, which is disadvantageous in competition with other providers. Do.

Therefore, unified authentication of high speed wired / wireless internet service that has the capability to minimize the impact on the service by processing home processing requests as quickly as possible by unifying home and specialized hot spot and central management system. By suggesting processing technology, each functional element is modularly designed to be scalable so that transparent service use can be applied to different access networks among network operators, providing convenient wired / wireless internet service that meets subscriber's preferences and differentiated from other providers. It should be possible to support the provision of services.

In other words, in the current technical field, the service and network / service management function can be maximized by activating high-speed wired / wireless internet service, so that it can be easily extended when the system is expanded and roaming with other service providers is easily applied. There is a need for an integrated authentication processing technology for high-speed wired and wireless Internet services.

The present invention has been proposed to meet the above demands, and it is stabilized and uninterrupted by unifying authentication, security, billing, and subscriber management functions for wired and wireless services in a systematic manner when requesting processing of high-speed Internet services through heterogeneous access networks. It is an object of the present invention to provide an integrated authentication processing apparatus and method for wired and wireless Internet services for providing an Internet service.

The apparatus of the present invention for achieving the above object comprises: authentication processing means for performing a series of authentication procedures for the authentication service processing request received through the network connection means; Billing processing means for performing a session control function in association with session processing means with respect to the access information received through said network access means, and receiving billing information from said network access means to make a database; The session processing means for performing a session control function in association with the authentication processing means and the charging processing means; IP interlocking processing means for receiving the client information in connection with the IP management system at the time of authentication and transmitting to the authentication processing means; And database processing means for interfacing with the subscriber management system to database information necessary for authentication, billing, and session for the authentication, wherein the authentication processing means receives the authentication information from the network access means and classifies the wired / wireless service. Authentication information transmission and reception means for transmitting to a wired service processing means and a wireless service processing means, and receiving the result and transmitting the result to the network connection means; The wired service processing unit for processing the wired service processing request received from the authentication information transmitting and receiving unit in association with the session processing unit and the database processing unit, and receiving and transmitting a roaming service processing request to the roaming service processing unit; The wireless service processing means for processing the wireless service processing request received from the authentication information transmitting and receiving means in association with the session processing means and the database processing means, and receiving a roaming service processing request and transmitting the received roaming service processing request to the roaming service processing means; The roaming service processing means for processing a roaming service processing request received from the wired service processing means and the wireless service processing means; And an IP processing unit for receiving the client information and transmitting the client information to the authentication information transmitting / receiving unit in association with the IP interworking processing unit.

Meanwhile, in the method of the present invention, as the wired / wireless terminal transmits the user information authentication request message to the authentication processing unit through the network connection device, the authentication processing unit transmits the session information processing request message to the session processing unit, and thereby processes the session information. An authentication step of receiving a result message, transmitting an authentication information processing request message to a database processor, and receiving the authentication information processing result message and transmitting a service processing result message to the wired / wireless terminal through the network access device; When the network access device transmits the charging information start request message to the charging processing unit as the authentication succeeds, the database processing unit receives the session information processing request message to the session processing unit and receives the session information processing result message accordingly. A service providing step of transmitting a billing information processing request message and receiving a billing information processing result message accordingly, thereby providing a pay-as-you-go service and an Internet service; As the wired / wireless terminal terminates service use, when the network access device transmits a service termination message to the charging processor, the charging processor transmits a session information processing request message to the session processor, and accordingly, a session information processing result message. A service termination step of receiving a transmission, transmitting a billing information processing request message to the database processor, and receiving a billing information processing result message accordingly; And a session processing step of transmitting a session information processing request message to the session processing unit when the network access device transmits a charging information processing request message to the charging processing unit as a failure occurs. do.

delete

In the present invention, the user ID / password (USER ID / PWD) based, media access control (MAC: Media Access Control, referred to as 'MAC') ID (ID) based and point-to-point protocol over Ethernet (PPPoE: Point to Point over Ethernet (hereinafter referred to as 'PPPoE') will be described through an integrated authentication processing apparatus and a method for unifying an authentication service management system.                     

The above-mentioned objects, features and advantages will become more apparent from the following detailed description in conjunction with the accompanying drawings. Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings.

1 is an exemplary configuration of a wired and wireless Internet service network to which the present invention is applied.

As shown in FIG. 1, when using an Internet service through a wired / wireless terminal 11 equipped with a LAN card in a high speed internet network, the following four procedures are used.

The procedure for signing up for the first Internet service, the process for processing the Internet service (authentication service), the process for performing the charging function for the service (authentication service) processed for the third process, and the statistics function for the service (authentication service) processed for the fourth process. This is a procedure to perform.

In the present invention, an apparatus that performs the above four procedures will be referred to as an integrated authentication processing apparatus, and will be described with particular emphasis on the second procedure.

Authentication requirements for Internet services are divided into two categories: Point-to-Point Protocol over Ethernet (PPPoE) -based wired and Extensible Authentication Protocol (EAP) -based wireless.

In the case of a wired line, an authentication client when a user terminal (computer) 11 in an asymmetric digital subscriber line (ADSL) wants to use a point-to-point (PPP) -based Internet service. An Internet access device 12 (Network Attached Storage (NAS) hereinafter referred to as 'NAS') requests Internet service (authentication) processing, and in the case of wireless, a wireless terminal equipped with a LAN card (laptop) Alternatively, if the personal digital terminal (PDA) 11 wants to use an EAP-based Internet service, requesting the Internet service (authentication) process to the network access device 12 (access point), which is an authentication client (14). It is divided into

Thereafter, the network access device (access point or NAS) 12, which is an authentication client that has received the Internet service processing request 14, requests the Internet service (authentication) processing from the integrated authentication processing device 13 (15).

Then, when the integrated authentication processing device 13 receives the Internet service processing request 15 to perform a series of integrated authentication processing and transmits the Internet service processing result 16 for them to the network access device 12. The network connection device 12 transmits the Internet service processing result 17 to the user terminal 11.

At this time, the IP interworking processing unit of the integrated authentication processing device 13 processes the IP information of the authentication client in association with an IP management system (IPMS) 19 for authentication processing, The database processing unit of the integrated authentication processing device 13 processes subscriber information in association with a subscriber management system (IDMS) (18).

2 is a flowchart illustrating an integrated authentication method for wired and wireless Internet services according to the present invention.

As shown in FIG. 2, the integrated authentication method for wired and wireless Internet services can be largely divided into two procedures. First, a preprocessing process 205 that must be made before a user requests authentication, and second, a LAN card is mounted. A wired / wireless terminal 11 performs authentication service processing for receiving high-speed Internet access service through the integrated authentication processing device 13 based on pre-subscribed information in a network composed of network access devices (AP, NAS) 12. It consists of an integrated authentication process performed.

First, referring to the authentication preprocessing process 205, the subscriber's subscription information is transmitted to the database processing unit 25 through real-time interworking with the subscriber management system (IDMS) (201), the IP interworking processing unit 24 is the IP management system The IP processing request is transmitted to the authentication processing unit 21 so that the network source information (authentication client information) 202 can be processed at the time of authentication through interworking with the IPMS (203), and the authentication processing unit 21. The IP processing result is received from 204, and information about the IP processing is managed.

On the other hand, when the user looks at the authentication service processing procedure when the Internet service processing request, first of all, the wired / wireless user terminal 11 equipped with a LAN card in the communication network uses different network connection devices 12 in the integrated authentication processing device 13. When the service processing request message (user information authentication request [user ID / PWD, MACID]) is transmitted to the authentication processing unit 21 (206), the authentication processing unit 21 which receives the service processing request message (filter ID) is analyzed to analyze the received information. Based on the ID) and network source information, it processes the wired / wireless authentication service and processes the session information processing request message to the session processing unit 23 (user information authentication request [user ID (ID) / PWD, MACID]). Send (207).

Thereafter, the session processing unit 23 receives the session information processing request message, determines whether the subscriber is a registered subscriber, and authenticates the session information processing result message (user information authentication result [OK / NotOK]) according to the determination result. 208.                     

Next, the authentication processing unit 21 receives the session information processing result message and transmits the authentication information processing request message to the LD (LDAP: Lightweight Directory Access Protocol, hereinafter referred to as 'LDAP') in the database processing unit 25 ( 209) and receives an authentication information processing result message thereof (210).

The authentication processing unit 21 transmits the service processing result message (user information authentication result [OK / NotOK]) to the user terminal 11 through the network connection device 12 (211).

When the authentication is successful and the user starts the Internet service, the network connection device 12 transmits the service processing start message (charging information start request [user ID / MACID]) to the charging processing unit 22 (212). Then, the charging processing unit 22 receives the service processing start message and transmits the session information processing request message to the session processing unit 23 for the actual pay-as-you-go function and the real-time usage service inquiry (213), thereby processing the session information processing result. Receive the message (215), and transmits the billing information processing request message to the database processing unit 25 (214), receives the billing information processing result message for this (216) to secure the base to provide the actual pay-as-you-go service (217).

Thereafter, when the user uses the Internet service (208) and terminates the service (219), the network connection device 12 sends a service termination message (billing information termination request [user ID / MACID]) to the charging processing unit 22. Transmit (220).

Subsequently, the charging processing unit 22 receiving the service end message transmits the session information processing request message to the session processing unit 23 (221), receives the session information processing result message (223), and the database processing unit 25. In step 222, the billing information processing request message is transmitted (222), the billing information processing result message is received (224), and the session and billing processing are performed and the result thereof is received.

On the other hand, even if the user does not terminate normally, a series of session processing for providing an authentication service can be provided. When the connection is lost due to the abnormality of the network connection device 12, the authentication service is provided by providing session processing for this. To be provided.

That is, when the charging information processing request message ([AP / NAS IP]) is received from the network connection device 12 in which the failure occurs (225), the charging processing unit 22 sends the session information processing request message to the session processing unit 23. Transmit 226.

Thereafter, when the session processing unit 23 receives the session information processing request message, the session processing unit 23 performs a series of session processing (227).

Meanwhile, when various authentication and charging statistics functions are desired, the database processing unit 25 receives the authentication / billing information request message from the statistical processing system 229 (228), and provides information on this.

3 is a configuration diagram of an integrated authentication processing apparatus for wired and wireless Internet services according to the present invention.

As shown in FIG. 3, the integrated authentication processing apparatus for wired / wireless Internet service according to the present invention includes an authentication processing unit for performing a series of authentication procedures for an authentication service processing request received through a network access device 31. 32) to perform the session control function in connection with the session processing unit 34 with respect to the connection information received through the network connection device 31, and to receive the database from the charging information from the network connection device 31 The session processing unit 34 for performing the session control function in association with the charging processing unit 33, the authentication processing unit 32 and the charging processing unit 33, and the client information in connection with the IP management system (IPMS) 37 during authentication Information required for authentication, billing, and sessions in connection with the IP interworking processing unit 35 for receiving and transmitting to the authentication processing unit 32, and the subscriber management system (IDMS) 38 and the statistical processing system 39. It includes a database processor 36 for databased.

An access point (AP) or a NAS is used as the network access device 31, and transmits and receives a message necessary for an internet service with a wired or wireless terminal through the Internet.

At this time, each network connection device 31 provides a port separation function for transmitting authentication and charging functions separately, and transmits an authentication service processing request to the authentication processing unit 32 through the UDP 1812 port, and receives a result therefrom. Performs a function of transmitting information to the user terminal. In addition, the charging service processing request is transmitted to the charging processing unit 33 through the UDP 1813 port, and receives a result therefrom to transmit information to the user terminal. On the other hand, when the network connection device 31 has a failure to transmit the charging information to the charging processing unit 33 to perform a series of session processing functions.

The authentication processing unit 32 is a series of wired / wireless authentication functions (PPP / 802.11B (MAC based) /802.1X-AP-MD5 (EAP) for processing authentication for subscribers using wired Internet service and wireless Internet service. -MD5), a device for removing the 802.1X-AP-TTLS (authentication processing function with EAP-TTLS) function, the network connection device 31 (access point (AP) or through the UDP 1812 port) Receiving an authentication service processing request message (USER ID / PWD based, MAC ID based) based on the authentication protocol (RADIUS) from the NAS, after performing a series of authentication processing procedures for this, the network access device 31 sends a service processing result message. (Access point (AP) or NAS).

At this time, the authentication processing unit 32 interoperates with the session processing unit 34 to inquire session information necessary for authentication, and interworking with the IP (IP) interworking processing unit 35 to refer to the client information required for authentication at the time of authentication, and the database processing unit After extracting the authentication information from the reference (36), the authentication information is referred to and transmitted to the network access device (31).

In addition, the authentication processing unit 32 receives the charging information after successful authentication, and transmits to the session processing unit 34 and the database processing unit 36 for the real-time charging function to provide a pay-as-you-go service and real-time usage information inquiry function.

The billing processing unit 33 interworks with the session processing unit 34 to receive the user access information from the network access device 31 and performs a session control function thereof, receives the real-time billing information and makes a database thereof, and pays a fee. And also performs a linkage function with the database processing unit 36 to provide a real-time usage information query function. In addition, it interworks with the session processor 34 to perform the session control function by receiving information on the failure of the network connection device 31.

The session processor 34 performs a session control function, which is the most important function in authentication, in cooperation with the authentication processor 32 and the charging processor 33. First, in order to provide a user authentication function, in conjunction with the authentication processing unit 32 to process session information required for authentication, and in conjunction with the billing processing unit 33 to provide a pay-as-you-go service and real-time usage function with the database processing unit 36 Performs the interworking function and performs session control function for providing user authentication and billing function.

In particular, by performing the session control function by receiving information about this from the charging processing unit 33 in the event of a network connection device 31 failure, it does not occur when providing the authentication service.

IP (IP) interworking processing unit 35 is a device for processing client information that is information required for authentication in conjunction with the IP management system (IPMS) 37, the authentication processing unit 32 to receive and process the client information Perform the function of sending to.

The database processing unit 36 may provide a performance improvement in authentication processing by interfacing the subscriber's subscription information with a subscriber management system (IDMS) to database (using LDAP) information necessary for authentication, billing, and sessions. Provide the function.

In addition, the database processing unit 36 configures a database for providing real-time usage information and a pay-as-you-go service, and based on this, the statistical processing system 39 performs processing for various operational-related statistical information requests.

4 is a detailed configuration diagram of an embodiment of the authentication processing unit of FIG. 3 according to the present invention.

As shown in FIG. 4, the authentication processing unit 32 in the integrated authentication processing device according to the present invention receives authentication information from the network connection device 31, classifies the wired / wireless service, and separates the wired service processing unit 42 and wireless. The session processing unit receives the wired service processing request received from the authentication information transmission / reception unit 41 and the authentication information transmission / reception unit 41 for transmitting to the service processing unit 43 and receiving the result and transmitting the result to the network connection device 31. 34) and a wireless service received from the wired service processing unit 42 and the authentication information transmitting and receiving unit 41 for processing in conjunction with the database processing unit 36, and receives the roaming service processing request and transmits it to the roaming service processing unit 44 The wireless service processing unit 43 processes the processing request in association with the session processing unit 34 and the database processing unit 36, receives the roaming service processing request, and transmits the processing request to the roaming service processing unit 44. ), The roaming service processing unit 44 for processing the roaming service processing request received from the wired service processing unit 42 and the wireless service processing unit 43, and the IP interworking processing unit 35 to receive and authenticate the client information. IP (IP) processing unit 45 for transmitting to the information transmitting and receiving unit 41 is included.

Looking at each of the above components in detail as follows.

The authentication information transmitting / receiving unit 41 transmits and receives network connection authentication information based on the RADIUS protocol (UDP Port 1812), and receives authentication information from the network access device 31 to classify the wired / wireless service, and wired. The authentication information is transmitted to the wired service processor 42 for authentication service processing, and the authentication information is transmitted to the wireless service processor 43 for wireless authentication service processing. Thereafter, the processing result is received from the wired service processor 42 and the wireless service processor 43 and transmitted to the network connection device 31. At this time, the client information is received from the IP processing unit 45 and used to classify authentication information.

The wired service processing unit 42 is a function of processing a received wired service processing request. The basic information required for authentication is configured in connection with LDAP to configure information required for authentication, and when providing a service requiring additional session control, LDAP and session In conjunction with the processing unit 34 performs extraction and detailed processing for the information necessary for authentication, and transmits this request to a separate roaming service processing unit 44 when a roaming service processing request.

The wireless service processing unit 43 is a function of processing a received wireless service processing request. The wireless service processing unit 43 interworks with the LDAP and the session processing unit 34 to extract information necessary for authentication and to perform detailed processing thereof, and to request roaming service processing. The request is transmitted to a separate roaming service processor 44. In particular, a detailed authentication function for providing 802.1X-EAP-MD5 and TTLS functions for the authentication information received to perform the encryption function of the wireless section is also performed.

On the other hand, in order to provide the characteristic that the same session should be maintained during wireless service authentication, it checks whether the number of concurrent sessions of the user who currently requests authentication exceeds the allowable number of simultaneous sessions through interworking with the session processing unit 34. If not, set this value if EAP-related information is added to the authentication information, which is a series of procedures for performing EAP-MD5 and TTLS authentication, and if the authentication information has a session timeout function. Then perform authentication.

In addition, since the wireless service processing unit 43 does not have realm information when requesting MAC ID authentication information, the wireless service processing unit 43 checks a user name before authentication, and if it is found as a MAC ID, The authentication method is registered in the mac_realm by adding 'mac_realm' (@mac_realm) and adding the mac_realm as an attribute value of the password_user_realm to the authentication information. Provide authentication service function if possible.

IP processing unit 45 receives the client information in conjunction with the IP management system (IPMS) and performs a function for transmitting information about this to the authentication information transmission and reception unit 41.

5 is a detailed configuration diagram of an embodiment of the charging processing unit of FIG. 3 according to the present invention.

As shown in FIG. 5, the charging processing unit 33 in the integrated authentication processing device according to the present invention receives the charging information from the network connection device 31 and performs a pay-as-you-go service and session control function based on the access information. The billing information transmitting and receiving unit 51 for transmitting the billing information processing unit 52 and storing the result in a billing information database in a database management system (DBMS), and the authentication processing unit 32 and the session processing unit 34. And a billing information processor 52 for transmitting the data to the database processor 36 when receiving billing information to database the basic data and the amount of billing and generating real-time accounting logging and billing information.

The charging information transmitting / receiving unit 51 receives the charging information from the network access device 31 based on the RADIUS protocol (UDP Port 1813) and based on the access information of the user (every time the user uses the service, Upon receiving the real-time usage update request), the billing information processing unit 52 transmits the billing information so as to perform the pay-as-you-go service and the session control function, and stores the result thereof in the billing information database in the DBMS.

In order to control the session control function, the billing information processing unit 52 performs a session control function by dividing a billing message for each user billing type by interworking with the session processing unit 34, and then transmits the information on the information to a database management system (DBMS). When storing the billing information, it transmits the information to the database processor 36 to database the basic data and the amount of billing, and generates the accounting logging and billing information in real time.

In addition, when the billing information requesting unit 52 receives the billing information request signal, the billing information processing unit 52 performs a function for performing a pay-as-you-go and prepaid billing function by comparing with the user information in the authentication information table in the database processor 36. If the usage update request is sent and the billing usage information in the authentication information is updated.

On the other hand, when the billing information processing unit 52 receives a request for billing information, the billing information processing unit performs detailed functions related to authentication such as remaining usage time for calculating user information and providing a pay-as-you-go service and calculating remaining dates. That is, by performing a series of authentication check function for the received billing information and transmitting a response thereto, it also performs detailed functions for processing pay-as-you-go service and prepaid billing (time / date / term). .

6 is a detailed block diagram of an embodiment of the session processing unit of FIG. 3 according to the present invention.

As shown in FIG. 6, the session processing unit 34 in the integrated authentication processing apparatus according to the present invention receives session information from the authentication processing unit 32 and the charging processing unit 33 and transmits the session information to the session information processing unit 62. The session information transceiver 61 receives the result and transmits the result to the authentication processor 32 and the charging processor 33, and analyzes the message received from the session information transceiver 61 to the authentication processor 32. It includes a session information processor 62 for transmitting allowable session information during authentication and deleting, registering, updating, and inquiring a session according to the charging information of the charging processor 33.

The session information transmitting and receiving unit 61 receives the session information from the authentication processing unit 32 and the charging processing unit 33 and transmits it to the session information processing unit 62, and receives the result from the session information processing unit 62 It performs the function of transmitting to the authentication processing unit 32 and the charging processing unit 33.

The session information processor 62 analyzes the received message and transmits the session information allowable during authentication to the authentication processor 32 to provide a session control function. That is, it provides a detailed function for ensuring and preventing multiple logins when processing authentication information, and determines whether the allowed session is exceeded by providing the number of sessions during authentication.

In addition, the session information processor 62 analyzes when the session information transceiver 61 receives the billing information from the billing processor 33, and registers a user session at the start of billing to provide a pay-as-you-go service and a billing service. It increases the number of sessions and deletes user sessions after the end of billing.

That is, the session deletion / registration / update / query function is provided according to the user billing information type. In addition, based on the charging information received when the network connection device 31 failure performs a function for deleting the session information for this.

7 is a detailed configuration diagram of an embodiment of the IP (IP) interworking unit of FIG. 3 according to the present invention.

As shown in FIG. 7, the IP interworking unit 35 in the integrated authentication processing device according to the present invention includes an IP information transmitting and receiving unit 71 and an IP information processing unit 72. do.

IP information transmitting and receiving unit 71 receives the authentication client information from the IP management system (IPMS) so that it can be used during authentication and billing processing, and transmits to the IP (IP) information processing unit 72, the result It receives from the IP information processing unit 72 and transmits to the database management system (DBMS).

The IP information processing unit 72 manages the IP information received from the IP information transmitting and receiving unit 71 and transmits the IP information to the authentication processing unit 32 when necessary.

8 is a detailed configuration diagram of an embodiment of the database processing unit of FIG. 3 according to the present invention.

As shown in Fig. 8, the database processing unit 36 in the integrated authentication processing device according to the present invention includes an LDAP 81, a database management system (DBMS) 82, and a DBMS interface function unit (DBIF) 83. It includes.

The database processing unit 26 configures the authentication information with the LDAP (LP) 81 so that the authentication processing unit 32 can process the authentication information quickly.                     

The database management system (DBMS) 82 constructs a subscriber information database of the subscriber in association with the subscriber management system (IDMS) and collects various measurement information necessary for service operation (status information and authentication of hardware (H / W)). Information about the authentication processing from the processing unit 32, the charging information from the charging processing unit 33, and the session processing information from the session processing unit 34).

That is, the database management system (DBMS) 82 is composed of a subscriber information database for subscription, an authentication information database for authentication, a billing information database for billing, and an operation management database for service operation.

In particular, in order to provide statistical and operational functions for authentication information and billing information, the DBMS Interface Function (DBIF) 83 can be operated using various SQL statements or Web functions from users. Provides related statistics.

The DBS interface function unit (DBIF) analyzes the syntax and semantics of the input command and requests execution of the corresponding command in case of normal operation, and provides an error message when an input error occurs. In addition, the command execution method provides immediate execution and scheduled execution, and after processing the command, it is stored in the history database so that the system access history can be retrieved later.

The method of the present invention as described above may be embodied as a program and stored in a computer-readable recording medium (such as a CD-ROM, a RAM, a ROM, a floppy disk, a hard disk, or a magneto-optical disk). Since this process can be easily implemented by those skilled in the art will not be described in detail any more.

The present invention described above is not limited to the above-described embodiments and the accompanying drawings, and various substitutions, modifications, and changes are possible in the art without departing from the technical spirit of the present invention. It will be clear to those of ordinary knowledge.

The present invention as described above, by providing a centralized management function and security, session and subscriber management efficiently and network management associated with a specialized region, there is an effect that can provide an uninterrupted wired and wireless authentication service.

In addition, the present invention by providing a variety of billing processing and pay-as-you-go service functions and authentication services based on user ID / password (USER ID / PWD), MAC ID (MAC ID) based authentication and point-to-point over Ethernet (PPPoE) In addition, it can play a role in securing subscribers by reducing overall system maintenance cost and unifying management system, and it is effective to solve economic benefits and convenience of subscribers.

In addition, the present invention provides a high-speed Internet service that can provide a fast failure detection function and stabilized performance and management services by combining a network / service management function, as well as expandable to new subscribers as well as existing network operators. Service provision can be provided quickly, and differentiated services from other operators can provide a competitive advantage by taking over the new market for wired and wireless Internet services.

Claims (8)

delete Authentication processing means for performing a series of authentication procedures for the authentication service processing request received through the network access means; Billing processing means for performing a session control function in association with session processing means with respect to the access information received through said network access means, and receiving billing information from said network access means to make a database; The session processing means for performing a session control function in association with the authentication processing means and the charging processing means; IP interlocking processing means for receiving the client information in connection with the IP management system at the time of authentication and transmitting to the authentication processing means; And Database processing means to database information required for authentication, billing, and sessions in connection with subscriber management system ≪ / RTI > The authentication processing means, Authentication information transmission and reception means for receiving authentication information from the network access means, classifying a wired / wireless service, transmitting the wired service processing means and a wireless service processing means, and receiving the result and transmitting the result to the network access means; The wired service processing unit for processing the wired service processing request received from the authentication information transmitting and receiving unit in association with the session processing unit and the database processing unit, and receiving and transmitting a roaming service processing request to the roaming service processing unit; The wireless service processing means for processing the wireless service processing request received from the authentication information transmitting and receiving means in association with the session processing means and the database processing means, and receiving a roaming service processing request and transmitting the received roaming service processing request to the roaming service processing means; The roaming service processing means for processing a roaming service processing request received from the wired service processing means and the wireless service processing means; And IP processing means for receiving the client information and transmitting it to the authentication information transmission and reception means in association with the IP interworking processing means; Integrated authentication processing device for a wired or wireless Internet service comprising a. The method of claim 2, The charging processing means, Billing information for receiving the billing information from the network access means and transmitting the billing information processing means to perform the pay-as-you-go service and session control function based on the access information, and to store the result in the billing information database in the database management system. Transmitting and receiving means; And The billing information processing for interworking with the authentication processing means and the session processing means to transmit the database to the database processing means when receiving the billing information, to make a database of basic data and usage for billing, and to generate real-time accounting logging and billing information. Way Integrated authentication processing device for a wired or wireless Internet service comprising a. The method of claim 2, The session processing means, Session information transmission and reception means for receiving session information from the authentication processing means and the charging processing means and transmitting the session information to the session information processing means, and receiving the result and transmitting the result to the authentication processing means and the charging processing means; And The session for analyzing the message received from the session information transmitting and receiving means, transmitting the session information allowable in authentication to the authentication processing means, and deleting, registering, updating, and inquiring a session according to the charging information of the charging processing means. Information processing Integrated authentication processing device for a wired or wireless Internet service comprising a. The method of claim 2, The IP (IP) interlocking processing means, For transmitting the IP information received from the IP management system (IPMS) to the IP information processing means to be used in the authentication and billing processing, receiving the result and transmitting to the database management system (DBMS) in the database processing means IP information transmitting and receiving means; And The IP information processing means for managing the IP information received from the IP information transmitting and receiving means and transmitting the IP information to the authentication processing means; Integrated authentication processing device for a wired or wireless Internet service comprising a. The method of claim 2, The database processing means, An LDAP for processing authentication information in association with the authentication processing means; Database management means for managing a subscriber database and an operation management database in association with the authentication processing means, the charging processing means and the session processing means, and providing status information according to the management; And DMS interface function means for providing the operation and statistics processing function in connection with the statistical processing system Integrated authentication processing device for a wired or wireless Internet service comprising a. As the wired / wireless terminal transmits the user information authentication request message to the authentication processing unit through the network access device, the authentication processing unit transmits the session information processing request message to the session processing unit, and receives the session information processing result message accordingly to the database processing unit. An authentication step of transmitting an authentication information processing request message, receiving the authentication information processing result message, and transmitting a service processing result message to the wired / wireless terminal through the network access device; When the network access device transmits the charging information start request message to the charging processing unit as the authentication succeeds, the database processing unit receives the session information processing request message to the session processing unit and receives the session information processing result message accordingly. A service providing step of transmitting a billing information processing request message and receiving a billing information processing result message accordingly, thereby providing a pay-as-you-go service and an Internet service; As the wired / wireless terminal terminates service use, when the network access device transmits a service termination message to the charging processor, the charging processor transmits a session information processing request message to the session processor, and accordingly, a session information processing result message. A service termination step of receiving a transmission, transmitting a billing information processing request message to the database processor, and receiving a billing information processing result message accordingly; And If the network connection device transmits a billing information processing request message to the billing processing unit as a failure occurs, the session processing step of transmitting the session information processing request message to the session processing unit to perform the session processing; Integrated authentication processing method for a wired or wireless Internet service comprising a. delete

Images