KR101049729B1 - Encryption method by subscriber or service type in portable internet system - Google Patents

Abstract

The present invention relates to a method and system for encryption by subscriber or by service type in a portable Internet system.

The present invention provides a personal subscriber station (PSS) (hereinafter referred to as a "PSS") that provides a portable Internet service and performs data communication by accessing the wireless Internet while on the move, and a portable Internet network providing the portable Internet service. A method for performing encryption on a subscriber or service type basis in a portable Internet system comprising: (a) initiating a connection between the PSS and the system of the portable Internet network; (b) determining a subscriber type of the PSS when receiving a request for any portable Internet service from the PSS; (c) if the subscriber type of the PSS is an encryption request type as a result of the determination of step (b), performing encryption and transmitting the data used in the mobile Internet service requested in the step (b); And (d) if the subscriber type of the PSS is not an encryption request type as a result of the determination of step (b), determine the service type of the portable Internet service requested in step (b) and encrypt the service type. Method for performing encryption for each subscriber or service type in the portable Internet system, characterized in that it comprises the step of performing encryption to the data used in the mobile Internet service only in the case of a necessary service It is about the system.

Portable Internet, Encryption, PSS, RAS, ACR, Encrypt by Subscriber, Encrypt by Service Type

Description

Method and System for Providing Encryption by Subscriber or Service Type in Portable Internet System}

1 is a block diagram schematically showing an encryption system for each subscriber or service type in a portable Internet system according to an embodiment of the present invention;

2 is a block diagram showing the internal configuration of RAS for encryption by subscriber or by service type in a portable Internet system according to an embodiment of the present invention;

3 is a block diagram schematically showing an internal configuration of an encryption module according to an embodiment of the present invention;

4 is a flowchart schematically illustrating an encryption process for each subscriber or service type in a portable Internet system according to a preferred embodiment of the present invention.

<Explanation of symbols for the main parts of the drawings>

110: PSS 120: RAS

130: ACR 140: IP network

150: HA 160: LMS

170: AAA 200: communication module

202: initialization module 204: subscriber type determination module

206: service type determination module 208: encryption module

300: encryption key setting unit 302: data encryption unit

The present invention relates to a method and system for encryption by subscriber or by service type in a portable Internet system. More specifically, when a subscriber accesses the portable Internet network, the subscriber's type and requested service are checked to determine whether to encrypt accordingly, so that encryption is performed only for the subscriber / service requiring encryption to reduce the load on the system. The present invention relates to an encryption method and system for each subscriber or service type in a portable Internet system.

Due to the development of mobile communication technology, the services provided by the code division multiple access (CDMA) mobile communication system are not only voice services but also multimedia for transmitting data such as circuit data or packet data. It is developing into a communication service.

In addition, IMT-2000 (International Mobile Telecommunication 2000) (eg, CDMA2000 1X, 3X, EV-DO, WideBand CDMA), etc., which is a third generation mobile communication system established by ITU-R as a standard due to the development of information and communication ) Is commercially available. IMT-2000 is a CDMA 2000 1X, 3X, EV-DO, WCDMA (WideBand CDMA), etc., which is used in IS-95A and IS-95B networks by using the IS-95C network that has evolved from the existing IS-95A and IS-95B networks. It is a service that can provide wireless Internet at a transmission speed of up to 144 Kbps, much faster than the supported data transmission speed of 14.4 Kbps or 56 Kbps. In particular, by using IMT-2000 service, it is possible to provide various multimedia services (AOD, VOD, etc.) at a faster speed as well as improving existing voice and WAP service quality.

Currently, the wireless Internet technology used worldwide includes a third generation cellular system based on the aforementioned mobile phone network and a wireless local area network (WLAN) system based on IP-based packet transmission. .

Existing cellular systems support high mobility and handoff, guarantee data rates required for voice calls, and additionally support packet data services. However, the existing cellular system has a high base station construction cost and high wireless Internet usage fee, and a small screen size of the mobile communication terminal has limited content available, and guarantees sufficient transmission speed for packet data service. There is a limit to this.

On the other hand, WLAN guarantees superior data transmission rate compared to cellular systems, but there is a problem in mobility due to radio interference and limitation in provision of public service due to problems such as narrow coverage.

This has resulted in a mobile Internet (WiBro: Wireless Broadband or PI: Portable Internet) service system that supports the mobility and handoff of cellular systems with WLANs as fast as WLANs, and provides high-speed wireless Internet services at a low cost.

The portable Internet service, referred to as the 3.5 generation, uses various types of portable personal subscriber terminals such as laptops, PDAs, and handheld PCs to access the Internet in indoor and outdoor stationary environments and mobile environments at walking speeds and low to medium speeds. Information and content available services. In addition, the portable Internet system for providing such a mobile Internet service provides a mobility of 60 km / h per hour and a downlink transmission speed of 30 Mbps, and downlink transmission of 50 Mbps when a multiple input multiple output (MIMO) system is applied. It is an IP-based wireless data system that can provide speed.

In addition, the portable Internet system uses the 2.3 GHz frequency band, and in order to effectively use the allocated frequency spectrum, a time division duplex (TDD) is used as a duplex method and a multiple access method is used as a duplex method. Uses Orthogonal Frequency Division Multiple Access (OFDMA). In this case, OFDMA is a multiple access scheme similar to TDMA in which all subcarriers spread over the entire bandwidth are allocated to one user for a predetermined time and to another user for the next predetermined time. In addition, the portable Internet system employs technologies such as Adaptive Modulation Coding (AMC), Multi Input Multi Output (MIMO), and Smart Antenna for efficient operation of radio resources.

In the conventional IEEE 802.16 portable Internet system, in order to provide a reliable service, the encryption function for traffic data is defined as a necessary requirement. The IEEE 802.16 portable Internet system defines a method of generating and distributing a traffic encryption key to be used for a corresponding traffic connection in order to encrypt the traffic data. Specifically, the subscriber station and the base station use a PKM-REQ (Privacy Key Management-Request) message and a PKM-RSP (Privacy Key Management-Response) message for generating and distributing a traffic encryption key. That is, the terminal requests a traffic encryption key assignment by transmitting a key request message, which is one of PKM-REQ messages, to the base station, and the base station sends a response to the terminal. Specifically, the base station sends a key reply message to the terminal when the traffic encryption key assignment is successful, and transmits a key reject message to the terminal when the traffic encryption key assignment is successful. By using the traffic encryption key assigned through the traffic encryption key assignment procedure, the terminal and the base station encrypts and transmits all traffic data.

However, such a conventional encryption procedure performs encryption for all data of all services without considering service characteristics. However, services such as simple internet, game, and music file transmission and reception among real data services are services that do not need encryption unless it is a special case. Therefore, it is not necessary to perform encryption while putting a load on the system for such a service that does not require encryption, but there is a problem in that the conventional system is not efficient because it performs encryption without distinguishing it.

An object of the present invention is to determine the type and request service of the subscriber when the subscriber accesses the portable Internet network to determine the encryption accordingly, thereby reducing the load on the system by performing encryption only for the subscriber / service that requires encryption To provide a method and system for encryption by subscriber or by service type in a portable Internet system.

In order to achieve the above object, in the portable Internet system according to the present invention, the encryption method and system for each subscriber or service type have the following features.

In the portable Internet system according to the present invention, an encryption method for each subscriber or service type is provided by a personal subscriber station (PSS: Personal Subscriber Station (PSS)), which receives a mobile Internet service and performs data communication by accessing the wireless Internet on the go. In a portable Internet system including a portable Internet network for providing the portable Internet service, the method for performing encryption for each subscriber or service type includes: (a) establishing a connection between the PSS and the system of the portable Internet network; Initializing; (b) determining a subscriber type of the PSS when receiving a request for any portable Internet service from the PSS; (c) if the subscriber type of the PSS is an encryption request type as a result of the determination of step (b), performing encryption and transmitting the data used in the mobile Internet service requested in the step (b); And (d) if the subscriber type of the PSS is not an encryption request type as a result of the determination of step (b), determine the service type of the portable Internet service requested in step (b) and encrypt the service type. The present invention provides a method for performing encryption on a subscriber or service type basis in a portable internet system, comprising transmitting and encrypting the data used in the portable Internet service only in case of a necessary service.

In addition, in the portable Internet system according to the present invention, the encryption system for each subscriber or service type is provided with a personal subscriber station (PSS: Personal Subscriber Station (PSS), which performs data communication by accessing the wireless Internet while being provided with a portable Internet service. A system for performing encryption on a subscriber or service type basis, comprising: a communication module configured to communicate with the PSS; An initialization module for initializing a connection with the PSS using the communication module; A subscriber type determination module that determines a subscriber type of the PSS when a request for any portable Internet service is received from the PSS through the communication module; A service type determination module that determines the type of the requested portable Internet service if the subscriber type of the PSS is not an encryption request type as a result of the determination in the subscriber type determination module; And when the subscriber type of the PSS is an encryption request type, or when the determination result in the service type determination module indicates that the portable Internet service is an encryption required service, the requested portable Internet service. Provided is a system for performing encryption for each subscriber or service type in a portable Internet system, comprising an encryption module for performing encryption on data to be used.

Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings. First of all, in adding reference numerals to the components of each drawing, it should be noted that the same reference numerals are used as much as possible even if displayed on different drawings. In addition, in describing the present invention, when a detailed description of a related well-known configuration or function is apparent to those skilled in the art, or it is determined that the subject matter of the present invention may be obscured, the detailed description thereof will be omitted.

1 is a block diagram schematically illustrating an encryption system for each subscriber or service type in a portable Internet system according to a preferred embodiment of the present invention.

As shown in FIG. 1, in a portable Internet system according to a preferred embodiment of the present invention, an encryption system for each subscriber or service type is a personal subscriber station (PSS) 110, wireless. Access device (RAS: Radio Access Station, hereinafter referred to as "RAS") 120, Access Control Router (ACR) (130), IP Network (Internet Protocol Network) (140), Home Agent (HA: Home Agent, hereinafter referred to as 'HA' (150), Location Management Server (LMS: Location Management Server, hereinafter referred to as 'LMS') 160 and Billing Server (AAA: Accounting, Authentication, Authorization, hereinafter referred to as 'AAA') 170) and the like.

Here, one network including the RAS 120, the ACR 130, the IP network 140, the HA 150, the LMS 160, and the AAA 170 will be referred to as a portable Internet network for convenience of description. do.

PSS 110 according to a preferred embodiment of the present invention refers to a portable terminal provided with a portable Internet service from the portable Internet network. PSS 110 according to a preferred embodiment of the present invention includes a low-power radio frequency (RF) / IF (intermediate frequency) module, a controller function, a media access control (MAC) frame variable control function according to a propagation environment, and a hand. Hand over function, authentication and encryption functions are provided. In addition, the PSS 110 according to a preferred embodiment of the present invention includes a browser for accessing the Internet for accessing the portable Internet network and using the portable Internet service.

The PSS 110 according to the preferred embodiment of the present invention initializes the connection with the system of the portable Internet network while accessing the RAS 120 according to the preferred embodiment of the present invention, and executes any portable Internet through the RAS 120. Send and receive data used for services.

Here, the PSS 110 may be a personal digital assistant (PDA), a hand-held PC, a notebook PC, a smart phone, a multi-mode multi-band (MM-MB) terminal, or the like. In particular, a smart phone is a terminal that combines the advantages of a mobile communication terminal and a personal portable terminal, and includes a terminal that integrates data communication functions such as schedule management, fax transmission and Internet access, etc. it means. In addition, the PSS 110 according to a preferred embodiment of the present invention means a terminal capable of operating not only in a portable Internet system but also in other mobile communication systems, for example, a CDMA 2000 system, a WCDMA system, and the like.

The RAS 131 according to a preferred embodiment of the present invention is a base station of a portable Internet system, and wirelessly transmits packet data received from the ACR 130 to the PSS 110, and has a controller function and orthogonal frequency division multiple access ( OFDMA / Time Division Duplex (TDD) packet scheduling, channel multiplexing, MAC frame variable control according to service characteristics and propagation environment, 50 Mbps high-speed traffic real-time control, handover, and the like.

In addition, the PSS 100 and the RAS 122 according to a preferred embodiment of the present invention include a 50 Mbps packet transmission modulation and demodulation function, a high speed packet channel coding function, a real time modem control function, and the like for data transmission.

The RAS 120 according to the preferred embodiment of the present invention initializes the connection between the PSS 110 and the system of the portable Internet network according to the preferred embodiment of the present invention, and requests a request for any portable Internet service from the PSS 110. If received, the subscriber type of the PSS 110 is determined to determine whether to encrypt data according to the subscriber type. In addition, even if the subscriber type of the PSS 110 is not the encryption request type, the service type of the requested portable Internet service is determined to determine whether to encrypt the service according to the service type, and the corresponding encryption action is taken. Detailed internal configuration and function of the RAS 120 performing this function will be described later with reference to FIG. 2.

ACR 130 according to a preferred embodiment of the present invention as a base station controller of a portable Internet system, accommodates a plurality of RAS (120), connecting a plurality of RAS or a plurality of RAS and IP network 140 to accommodate As a packet access router, handover control function between multiple RASs, handover function between multiple ACRs, handover function between base stations and other RASs of other networks (for example, CDMA 2000 network, WCDMA network, etc.), packet routing function, Internet It has a connection function and the like and is connected to the IP network 140.

IP network 140 according to a preferred embodiment of the present invention is a backbone network for transmitting and receiving data in a portable Internet network, and includes a plurality of network equipment such as a router. In addition, the IP network 140 connects the ACR 130, the HA 150, the LMS 160, the AAA 170, and the like, and receives the packet data from an external packet data service such as the Internet (not shown). Send to 130.

HA 150 according to a preferred embodiment of the present invention is a software for performing the function of routing a packet transmitted from the outside through the Internet (not shown) when using a mobile (Mobile) IP in the portable Internet network and This means hardware in combination with this.

The LMS 160 according to a preferred embodiment of the present invention refers to software for managing status information and location information of a subscriber and hardware coupled thereto. When the LMS 160 provides an incoming service to the PSS 110 from a specific node (for example, a switch connected to a mobile Internet network or a mobile communication network (not shown), an application server connected to the Internet (not shown), etc.), The location information of the PSS 110 is retrieved and transmitted to the ACR 130. In addition, the LMS 160 stores and manages subscriber status information, subscriber location information, subscriber service information, and the like.

The AAA 170 according to the preferred embodiment of the present invention performs the charging for the packet data used in the PSS 110 in conjunction with the ACR 130, and the software for performing the location of the PSS 110 and combined with it Means hardware.

Figure 2 is a block diagram showing the internal configuration of the RAS 120 for encryption by subscriber or by service type in the portable Internet system according to an embodiment of the present invention.

As shown in FIG. 2, in the portable Internet system according to an embodiment of the present invention, the RAS 120 for encryption by subscriber or by service type may include a communication module 200, an initialization module 202, and a subscriber type determination module ( 204, a service type determination module 206, an encryption module 208, and the like.

The communication module 200 according to the preferred embodiment of the present invention performs a function of performing communication with the PSS 110 and the ACR 130 according to the preferred embodiment of the present invention. 110 or ACR 130 to transmit and receive.

When the initialization module 202 according to the preferred embodiment of the present invention receives a connection request from the PSS 110 according to the preferred embodiment of the present invention through the communication module 200, the initialization module 202 performs initialization of the connection with the PSS 110. The initialization module 202 according to the preferred embodiment of the present invention transmits subscriber information of the PSS 110 to the subscriber type determination module 204 which will be described later when the PSS 110 according to the preferred embodiment of the present invention is connected. Control to determine the subscriber type of the PSS 110 and, if the subscriber type of the PSS 110 is an encryption request type, an encryption key between the PSS 110 and the system of the portable Internet network using the encryption module 208 to be described later. Control to set. A detailed description thereof will be described later.

The subscriber type determination module 204 according to the preferred embodiment of the present invention receives a request for any mobile Internet service from the PSS 110 through the communication module 200 according to the preferred embodiment of the present invention. The subscriber type of 110) is determined. Here, the subscriber type may be an encryption request type or an encryption non-request type, but is not limited thereto.

When the service type determination module 206 according to the preferred embodiment of the present invention determines that the subscriber type of the PSS 110 is not an encryption request type, as a result of the determination in the subscriber type determination module 204 according to the preferred embodiment of the present invention, It determines the type of mobile Internet service requested. The type of portable Internet service may be an encryption required service type or an encryption unnecessary service type, but is not limited thereto.

The encryption module 208 according to the preferred embodiment of the present invention determines that the subscriber type of the PSS 110 is an encryption request type or the determination result of the subscriber type determination module 204 according to the preferred embodiment of the present invention. As a result of the determination in the service type determination module 206 according to the preferred embodiment, if the requested portable Internet service is an encryption required service, encryption is performed on data used in the requested portable Internet service.

3 is a block diagram schematically showing an internal configuration of an encryption module 208 according to a preferred embodiment of the present invention.

As shown in FIG. 3, the encryption module 208 according to the preferred embodiment of the present invention may include an encryption key setting unit 300 and a data encryption unit 302.

The encryption key setting unit 300 according to the preferred embodiment of the present invention functions to set an encryption key between the PSS 110 and the system of the portable Internet network according to the preferred embodiment of the present invention. That is, in the encryption key setting unit 300 according to the preferred embodiment of the present invention, when the encryption key assignment is requested from the PSS 110 and the encryption key is successfully assigned, the key reply message is sent to the PSS 110. In case of failure, a key reject message is transmitted to the PSS 110. Here, the request for allocation of an encryption key may be performed using a PKM-REQ (Request) message of a Privacy Key Management (PKM) protocol, and the key response message and the key rejection message may be PKM- of a Privacy Key Management (PKM) protocol. Internal messages of RSP (Response) messages can be used.

The data encryption unit 302 according to the preferred embodiment of the present invention performs encryption on data used in any portable Internet service using the encryption key set by the encryption key setting unit 300 according to the preferred embodiment of the present invention. Function to transmit data.

4 is a flowchart schematically illustrating an encryption process for each subscriber or service type in a portable Internet system according to a preferred embodiment of the present invention.

First, when the PSS 110 requests the connection of the portable Internet network according to the preferred embodiment of the present invention, the connection between the PSS 110 and the system of the portable Internet network is initialized (S400). At this time, the subscriber type determination module 204 of the RAS 120 according to the preferred embodiment of the present invention determines the subscriber type of the PSS 110, and if the subscriber type of the PSS 110 is an encryption request type, the encryption module. Using 208, an encryption key is set between the PSS 110 and the system of the portable Internet network.

Next, when the RAS 120 according to the preferred embodiment of the present invention receives a request for any portable Internet service from the PSS 110 (S402), the subscriber type determination module 204 of the RAS 120 PSS The subscriber type of the 110 is determined (S404).

As a result of the determination of the subscriber type determination module 204, if the subscriber type of the PSS 110 is an encryption request type, the encryption module 208 of the RAS 120 performs encryption on the data used in the requested mobile Internet service and transmits it. (S410). On the other hand, when the subscriber type determination module 204 determines that the subscriber type of the PSS 110 is not an encryption request type, the service type determination module 206 of the RAS 120 determines the service type of the requested portable Internet service. It is determined (S406).

As a result of the determination of the service type determination module 206, if the requested service type is an encryption required service, the encryption module 208 of the RAS 120 sets an encryption key between the PSS 110 and the system of the portable Internet network (S408). ). After setting the encryption key, the encryption module 208 of the RAS 120 performs encryption on the data used in the requested portable Internet service and transmits it (S410).

In the above description, although the modules of FIG. 2 are included in the RAS 120 of the portable Internet system according to the preferred embodiment of the present invention, the modules of FIG. 2 perform the same function, according to the preferred embodiment of the present invention. It may be implemented in the ACR 130.

While the present invention has been described with reference to exemplary embodiments, it is to be understood that the invention is not limited to the disclosed exemplary embodiments. Accordingly, the embodiments disclosed herein are intended to be illustrative rather than limiting, and the spirit and scope of the present invention are not limited by these embodiments. The protection scope of the present invention should be interpreted by the following claims, and all the technologies within the equivalent scope should be interpreted as being included in the scope of the present invention.

According to the present invention, when a subscriber accesses the portable Internet network, the subscriber's type and request service are checked to determine whether to encrypt or not. Therefore, encryption is performed only for subscribers / services that require encryption. By omitting the effect, the load on the system can be greatly reduced.

Claims (12)

A mobile terminal including a personal subscriber station (PSS) (hereinafter referred to as a "PSS") that receives a portable Internet service and performs data communication by accessing the wireless Internet while on the move, and a portable Internet network that provides the portable Internet service. In the Internet system, a method for performing encryption by subscriber or by service type, (a) initiating a connection between the PSS and the system of the portable Internet network; (b) determining a subscriber type of the PSS when receiving a request for any portable Internet service from the PSS; (c) if the subscriber type of the PSS is an encryption request type as a result of the determination of step (b), performing encryption and transmitting the data used in the mobile Internet service requested in the step (b); And (d) If the subscriber type of the PSS is not an encryption request type as a result of the determination of step (b), it is necessary to determine the service type of the portable Internet service requested in the step (b) to encrypt the service type. Encrypting and transmitting the data used in the mobile Internet service only in case of a service Method for performing encryption by subscriber or by service type in a portable Internet system comprising a. The method of claim 1, Step (a) is, (a1) if the PSS accesses the portable Internet network, determining the subscriber type of the PSS; And (a2) When the subscriber type of the PSS is the encryption request type, as a result of the determination of step (a1), an encryption key is set between the PSS and the system of the portable Internet network to establish an encryption key of the PSS and the portable Internet network. Initiating a connection between the systems Method for performing encryption by subscriber or by service type in a portable Internet system comprising a. The method of claim 1, Step (d) is, (d1) determining the service type of the portable Internet service requested in step (b) if the subscriber type of the PSS is not an encryption request type as a result of the determination of step (b); (d2) setting an encryption key between the PSS and the system in the portable Internet network when the service type is an encryption required service as a result of the determination in step (d1); And (d3) encrypting and transmitting the data used in the portable Internet service using the encryption key; Method for performing encryption by subscriber or by service type in a portable Internet system comprising a. The method according to claim 2 or 3, In the setting of the encryption key, when the encryption key assignment is requested from the PSS, the key reply message is transmitted to the PSS when the encryption key is successfully assigned, and the key reject message is returned when the encryption key is unsuccessful. And performing encryption by the subscriber or by the service type in the portable internet system. The method of claim 4, wherein The request for assignment of the encryption key is performed using a PKM-REQ (Request) message of a Privacy Key Management (PKM) protocol. The method of claim 4, wherein And the key response message and the key rejection message are internal messages of a PKM-RSP (Response) message of a privacy key management (PKM) protocol. A mobile terminal including a personal subscriber station (PSS) (hereinafter referred to as a "PSS") that receives a portable Internet service and performs data communication by accessing the wireless Internet while on the move, and a portable Internet network that provides the portable Internet service. In the Internet system, in a system that performs encryption by subscriber or service type, A communication module for communicating with the PSS; An initialization module for initializing a connection with the PSS using the communication module; A subscriber type determination module that determines a subscriber type of the PSS when a request for any portable Internet service is received from the PSS through the communication module; A service type determination module that determines the type of the requested portable Internet service if the subscriber type of the PSS is not an encryption request type as a result of the determination in the subscriber type determination module; And When the subscriber type of the PSS is an encryption request type as a result of the determination in the subscriber type determination module, or when the portable Internet service is an encryption required service as a result of the determination in the service type determination module, the mobile Internet service is used. Encryption module for encrypting data being encrypted System for performing encryption by subscriber or service type in a portable Internet system comprising a. The method of claim 7, wherein When the PSS is connected, the initialization module controls to determine the subscriber type by transmitting the information of the PSS to the subscriber type determination module, and uses the encryption module when the subscriber type of the PSS is the encryption request type. And controlling to set an encryption key between the PSS and the system of the portable internet network. The method of claim 7, wherein The encryption module, An encryption key setting unit for setting an encryption key between the PSS and the system of the portable Internet network; And A data encryption unit which encrypts and transmits the data used in the portable Internet service by using the encryption key set by the encryption key setting unit System for performing encryption by subscriber or by service type in a mobile Internet system comprising a. The method of claim 9, The encryption key setting unit receives an encryption key assignment request from the PSS, transmits a key reply message to the PSS when the encryption key is successfully assigned, and returns a key reject message when the encryption key is assigned successfully. A system for performing encryption by subscriber or by service type in a portable Internet system, characterized in that the transmission to the PSS. 11. The method of claim 10, The request for allocation of the encryption key is performed by using a PKM-REQ (Request) message of a Privacy Key Management (PKM) protocol. 11. The method of claim 10, And the key response message and the key rejection message are internal messages of a PKM-RSP (Response) message of a Privacy Key Management (PKM) protocol.

Images