KR101192441B1 - A provisioning method for heterogeneous service system - Google Patents

Abstract

According to the present invention, if the subscription processing system provides the integrated profile system with subscription information regarding a first service subscription of a first user and requests construction of a service profile reflecting the first service subscription, the subscription processing system is stored in heterogeneous service systems. The service profile is invalidated by indicating invalidation of the service profile. Then, when the first service system-one of the service systems-receives a connection request from the terminal of the first user, the service profile of the first user newly constructed (updated) from the integrated profile system is determined by determining the invalidation of the service profile. After requesting, obtaining and storing, the present invention relates to a method for provisioning a heterogeneous service system profile allowing access to a terminal of a first user according to a newly stored service profile.

Provisioning, Service Profiles, Authentication, Roaming, Integration Profiles

Description

A provisioning method for heterogeneous service system

The present invention relates to a method for provisioning heterogeneous service system profiles, and more particularly, to a method for provisioning heterogeneous service system profiles in a cache form based on an integrated profile system.

In order to provide a service to a user, provisioning is required to receive a customer's subscription, convert the information into a form that can provide a customer's actual service by using typed subscription information, and deliver the information to a system for providing a real service.

Provisioning is based on the system that provides each service (eg, AAA (Authentication, Authorization and Account) on the high-speed Internet, Home Subscriber Server (HSS) on the IP Multimedia Subsystem (IMS) network), and hardware. ) And application software, so data conversion and structure conversion must be performed for each service system. Such operations such as data conversion and structure conversion continue to increase as the number of services provided and the types of service providing equipment increase, and also cause problems such as duplicate management of the same information in each service system. .

Moreover, in order to provide convergence services between various services, it is difficult to provide services based on different heterogeneous profiles, and it is necessary to introduce a unified unified profile system (UPS).

Even with the introduction of the integrated profile system, batch replacement of existing serviced equipment is very difficult, and accessing the remote DB with a common profile is more delayed than accessing the local DB. Since time is required, the structure may not be suitable for a real-time service system.

Therefore, data synchronization between provisioning and service systems is required to ensure high performance of integrated profiles and profiles of existing service systems.

The technical problem to be achieved by the present invention is to provide a method for provisioning heterogeneous service system profiles that can provide real-time services by guaranteeing high performance of different heterogeneous profiles based on the integrated profile system.

According to a first aspect of the present invention to solve the above technical problem, (a) the subscription processing system provides the subscription information for the profile update event of the first user-except for the termination of service-to the integrated profile system the subscription information Requesting the establishment of a first service profile for the first user reflecting the (b) invalidating the second service profile for the first user, which the subscription processing system has stored itself in heterogeneous service systems. Instructing, (c) the first service system invalidating the second service profile, one of the service systems, confirms the second service profile in response to a first request of the terminal of the first user; Determining invalidation of a second service profile, (d) the first service system informs the integrated profile system; Requesting, acquiring and storing a service profile, and (e) allowing the first service system to accept the first request using the first service profile. do.

In order to solve the above technical problem, according to a second aspect of the present invention, (a) the subscription processing system provides subscription information on a first service cancellation of a first user to the integrated profile system to cancel the first service. Requesting the establishment of the reflected first service profile, (b) the subscription processing system instructing heterogeneous service systems to invalidate the second service profile of the first user which is stored in itself, and (c) A first service system that invalidates the second service profile, one of the service systems, identifies the second service profile in response to a first request of the terminal of the first user and invalidates the second service profile. Determining, (d) the first service system requests the first service profile from the integrated profile system; Deukhayeo storing step, and (e) the first service system that provides a service provision method in a heterogeneous system, the profile comprising the step of rejecting the first request using the first service profile.

According to the present invention, we propose a method of gradually transferring a batch conversion of a new system to an existing system, which is the greatest risk factor when constructing a system into a service provision form for providing various convergence services based on an integrated profile, and a single system. It can solve the high cost investment risk caused by the load increase of the integrated profile system.

Hereinafter, embodiments of the present invention will be described in detail with reference to the accompanying drawings so that those skilled in the art can easily carry out the present invention. As those skilled in the art would realize, the described embodiments may be modified in various different ways, all without departing from the spirit or scope of the present invention. In the drawings, parts irrelevant to the description are omitted in order to clearly describe the present invention, and like reference numerals designate like parts throughout the specification.

Now, a method for provisioning heterogeneous service system profiles according to an embodiment of the present invention will be described in detail with reference to the accompanying drawings.

First, to assist in understanding the present invention, a concept of a method for provisioning heterogeneous service system profiles according to an embodiment of the present invention will be described with reference to FIG. 7.

7 is a conceptual diagram illustrating a provisioning method of heterogeneous service system profiles according to an exemplary embodiment of the present invention.

In general, a service profile of a user includes subscription information on a service subscribed to by a user (or user terminal), subscription information on a network accessible by the user (or user terminal), information on additional services linked to a subscribed service, and user. Identification information (eg, UICC / USIM information, etc.) for the user terminal (or user terminal).

Therefore, a specific service is provided by accessing a plurality of network access management systems (1, 2, etc.) and a network (e.g., the Internet, a WiBro network, a 3G network, etc.) that perform authentication for a user (or user terminal) connected to the corresponding network. A plurality of service systems (3, 4, etc.) that perform authentication for a user (or user terminal) requesting to provide a plurality of services for managing a user's identification information and providing the user's identification information to a device or server. Information management system (5, etc.) uses the user's service profile.

Since a plurality of network connection management systems (1, 2, etc.), a plurality of service systems (3, 4, etc.), a plurality of information management systems (5, etc.) are mostly heterogeneous systems for processing data of different types, Each service profile used in the servers (1, 2, 3, 4, 5, etc.) is a heterogeneous system profile stored / managed in the form of a data standard that conforms to the heterogeneous system.

The present invention is directed to a provisioning method that allows for the breakthrough management and use of heterogeneous system profiles used in heterogeneous systems (1, 2, 3, 4, 5, etc.).

Specifically, as illustrated in FIG. 7, the service profile of the user when the user subscribes to any service, terminates any service, or changes (modifies / delete / adds, etc.) information included in the service profile SP1. SP1 updates the included information.

The present invention updates the information on the service profile (SP1) in the central management (A), the service profile (SP2) updated in the central management (A) heterogeneous systems (1, 2, 3, 4, 5, etc.) ) To use. Central management here refers to at least one server (or device), or at least one system comprising two or more servers (or devices).

Of course, the present invention immediately updates the service profile in the central management 300, so that each heterogeneous system (1, 2, 3, 4, 5, etc.) no longer uses the service profile SP1 before the update.

That is, the present invention allows the central management 300 to use only the service profile SP2 updated in each heterogeneous system (1, 2, 3, 4, 5, etc.) as soon as the service profile is updated.

On the other hand, in the first half (including the claims) of the present invention, the service profile SP1 is updated and updated in the central management (A), such as the subscription of the service, the change of the information included in the service profile, except the service termination. All cases where a service profile (SP2) must be created are called "profile update events".

Hereinafter, a method of provisioning a heterogeneous service system profile according to an embodiment of the present invention to achieve the concept of the present invention described with reference to FIG. 7 and an example of a system applied to the method will be described.

Prior to the description, the following embodiment describes an example of a method for provisioning heterogeneous service system profiles according to an embodiment of the present invention applied to a plurality of network access management systems (1, 2, etc.).

Of course, in the following embodiments, since the application example of the network access management system, it will be described that the service profile is used when authenticating the user (or user terminal). However, as described above, the service profile is applied not only to network access authentication but also to service authentication and various events required by the service profile in addition to authentication, which can be easily predicted by those skilled in the art, and thus a detailed description thereof will be omitted.

1 is a block diagram of an integrated profile provisioning system according to an exemplary embodiment of the present invention.

As shown in FIG. 1, the integrated profile provisioning system according to an exemplary embodiment of the present invention includes a subscription system 100, a subscription processing system 200, an integrated profile system 300, and a plurality of service systems 410, 420, and 430. And the like).

The subscription system 100 receives a subscription for a service subscription (or service termination, information change, etc.) from a user and provides the subscription information of the user to the subscription processing system 200.

The subscription processing system 200 converts the subscription information of the user received from the subscription system 100 into information corresponding to the service profile and provides the integrated profile system 300. In this case, the subscription processing system 200 provides a service profile to the integrated profile system 300 and simultaneously synchronizes information on the service profile between the integrated profile system 300 and each service system (410, 420, 430, etc.). .

In order to synchronize information on the service profile, the subscription processing system 200 collectively invalidates the service profile of the corresponding user stored in the cache server (10, 11, 12, etc.) of each service system (410, 420, 430, etc.). To generate a cache miss, and according to the cache miss, each service system (410, 420, 430, etc.) takes the profile of the user stored in the integrated profile system 300 and stores it.

The integrated profile system 300 stores a service profile for each user, and generates, updates, or terminates the service profile of the corresponding subscriber according to the subscription information received from the subscription processing system 200, and applies the service profile requested by the service system. To the service system.

As shown in FIG. 3, the integrated profile system 300 includes an integrated profile DB 330 storing a service profile of each user, and an integrated profile DB 330 with subscription information received from the subscription processing system 200. The integrated profile system 300 in the integrated profile management unit 310 and heterogeneous service systems 410, 420, 430, etc., which generate, update, or terminate the profiles stored in the system, and provide the service profile in a form corresponding to the corresponding service system. ) And an integrated profile interface unit 320 for requesting a service profile.

Each service system (410, 420, 430, etc.) is a system that manages network access. The service server (30, 31, 32, etc.) that provides a service, the user's connection authentication (that is, the service for the service requested by the user) Authentication server (20, 21, 22, etc.) for performing authentication), and a cache server (10, 11, 12, etc.) for storing a service profile of its subscribers in the form of a cache and providing it at the request of the authentication server. do.

Of course, the cache server (10, 11, 12, etc.) may be configured independently of the authentication server (20, 21, 22, etc.), but may be included as a cache unit in the authentication server (20, 21, 22, etc.).

Hereinafter, a logical configuration of an integrated file provisioning system according to an exemplary embodiment of the present invention will be described with reference to FIGS. 2 to 6.

First, a detailed example of an integrated profile provisioning system to which a method for provisioning heterogeneous service system profiles according to an exemplary embodiment of the present invention is applied will be described with reference to FIG. 2.

2 is a diagram illustrating an integrated profile provisioning system for a method for provisioning heterogeneous service system profiles according to an exemplary embodiment of the present invention.

As shown in FIG. 2, a service system according to an exemplary embodiment of the present invention is a case of a WiFi system and a WiMax system.

The terminal 50 is a terminal equipped with a WiFi network interface and a WiMax network interface that can be connected to both a WiFi network and a WiMax network.

The WiFi network and the WiMax network are connected to the respective authentication servers 20 and 21 through the backbone network, and each authentication server 20 and 21 is connected through the integrated profile system 300 and the integrated profile interface 320. .

And each authentication server (20, 21) processes the authentication whether the service access to the terminal 50 by using the profile cache table (T1, T2) when the service access request from the terminal 50.

Here, the profile cache tables T1 and T2 are stored in the cache servers 10 and 11, and information about service profiles of each user is recorded in a table form (see FIG. 4).

Next, a first embodiment based on the integrated profile provisioning system according to the embodiment of the present invention configured as shown in FIG. 2 will be described with reference to FIGS. 3 and 4.

Prior to the description, the service profile includes subscription product information, identification information indicating that service provision is in a normal state, a password of a user for access authentication, and user ID information for a WiMax access service. However, for convenience of explanation, hereinafter, only two items of <user ID and service status> of the service profile information are considered.

3 is a diagram illustrating a provisioning method of a heterogeneous service system profile according to a first embodiment of the present invention, in which a user subscribes to a WiMax connection service (roaming to WiFi).

4 is a diagram illustrating a provisioning method of a heterogeneous service system profile according to a first embodiment shown in FIG. 3 based on a service profile.

When the first user subscribes to a WiMax connection service capable of roaming to WiFi (or changes in information of a service profile, etc.), the subscription information of the first user is provided from the subscription system 100 to the subscription processing system 200 ( S301). In this case, the subscription information includes subscription product information (eg, a WiMax connection service capable of roaming to WiFi), identification information indicating that service provision is in a normal state, and user ID information (eg, A1234) of the WiMax connection service.

The subscription processing system 200 requests the service profile construction by providing the received subscription information to the integrated profile system (UPS) 300 (S302).

At the same time, the subscription processing system 200 transmits a cache entry, that is, a cache entry recorded in the profile cache table, to the authentication server (AAA) 20 of Wi-Fi and the authentication server 21 of WiMax. 1 Instructs to invalidate the service profile of the user (S303, S304).

 The integrated profile system 300 builds a service profile of the first user according to the subscription information received from the subscription processing system 200 (S305).

Here, the construction of the service profile in the integrated profile system 300 according to the step S305 is as shown in FIG. 4 as an example.

4, if the service profile of the first user is not generated (registered), no information is recorded in the profile cache table T10 corresponding to the service profile of the first user as shown in (a). It is in a state (of course, the profile cache table T10 itself is not created), and the construction of the service profile is to record the service profile of the first user in the profile cache table T10 as shown in (c).

If the service profile of the first user is generated (registered), the predetermined service profile is recorded in the profile cache table T10 corresponding to the service profile of the first user as shown in (b) ( Of course, the profile cache table T10 itself is not created), and the construction of the service profile is to update the service profile of the first user in the profile cache table T10 as shown in (c).

Meanwhile, the authentication server 20 of Wi-Fi and the authentication server 21 of WiMax are first recorded in the profile cache tables T1 and T2 according to the invalidation instructions S303 and S304 for the service profile of the first user. Invalidate user service profile.

The invalidation of the service profile is made by recording the value of the [Validity] field of the profile cache tables T1 and T2 as "invalid". Of course, invalidation of the service profile can be achieved by deleting each item value of the service profile in the profile cache tables T1 and T2.

As described above, as the first user subscribes to the WiMax connection service, the service profile of the first user is registered in the integrated profile system, and the service profile of the first user is invalidated in each of the authentication servers 20 and 21. The first user terminal 50 requests a connection to the WiMax system (S306).

At this time, the access request transmitted from the first user terminal 50 includes the ID and password of the first user.

The authentication server 21 of WiMax performs connection authentication according to a connection request of the first user terminal 50. If there is a service profile of the first user stored in the cache server 11 for connection authentication, the connection is established. Find out if it is possible.

However, WiMax authentication server 21 determines that the cache miss (S307) because the service profile of the first user is invalidated (S307). The authentication server 21 of the WiMax is connected to the integrated profile system 300 to request the service profile of the first user (S308), and obtains (S309).

Then, the authentication server 21 of the WiMax registers the acquired service profile of the first user in the cache server 11 (S310), and allows the terminal 50 to access according to the registered service profile of the first user. (S311).

Here, registering the service profile to the cache server 11 is a profile cache table stored in the integrated profile system 300, the service profile of the profile cache table T2 stored in the cache server 11, as shown in FIG. This means synchronizing data (information) with the service profile of T10.

 The first user terminal 50 accesses the WiMax system according to the access permission, receives the service desired by the first user, and terminates the connection at the request of the first user (S312).

Subsequently, when the first user terminal 50 requests access to the WiMax system (S313), the authentication server 21 of the WiMax checks the service profile of the first user stored in the cache server 11 to access the WiMax access service. As the "valid" state authenticates the connection (S314), and allows the terminal 50 to access (S315).

Next, a method for provisioning heterogeneous service system profiles according to a second embodiment of the present invention will be described with reference to FIG. 5.

FIG. 5 is a diagram illustrating a method for provisioning heterogeneous service system profiles according to a second embodiment of the present invention. As described with reference to FIG. 3, a service profile of the integrated profile system 300 and WiMax according to a WiMax access service request is described. The present invention relates to a provisioning method of a service profile corresponding to roaming to WiFi performed in a state registered with the cache server 11.

The first user terminal 50 requests a connection to the WiFi system (S501).

The authentication server 20 of the WiFi checks the service profile of the first user registered in the cache server 10. Since the service profile of the first user is invalidated, the authentication server 20 determines that the cache is missed (S502).

The authentication server 20 of the WiFi is connected to the integrated profile system 300 to request the service profile of the first user (S503), the integrated profile system 300 of the first user stored in the integrated profile DB (330) The profile (see (a) of FIG. 5) is provided to the authentication server 20 (S504).

Then, the authentication server 20 of the WiFi registers the obtained service profile of the first user to the cache server 10 as shown in (c) of FIG. 5 (S505), the service profile of the registered first user As a result, the terminal 50 confirms that the terminal 50 is allowed to roam from its own network to the WiMax and allows the connection (S506).

 Here, registering the service profile of the first user in the cache server 10 may include the service profile of the profile cache table T1 stored in the cache server 10 of the profile cache table T10 stored in the integrated profile system 300. It means to synchronize service profile with data (information).

On the other hand, the first user terminal 50 is connected to the WiFi system in accordance with the access permission to receive the service desired by the first user, and later terminates the connection at the request of the first user (S507).

Thereafter, when the first user terminal 50 requests a connection to the WiFi system (S508), the authentication server 20 of the WiFi verifies the service profile of the first user stored in the cache server 10 to authenticate the connection. (S509) and allow the terminal 50 to connect (S510).

Hereinafter, a termination processing method according to a termination request of a subscriber applied to a provisioning method of a heterogeneous service system profile according to an embodiment of the present invention will be described with reference to FIG. 6.

6 is a view illustrating a cancellation processing method according to a cancellation request of a WiMax subscriber according to an embodiment of the present invention.

When the first user subscribes to the WiMax connection service capable of roaming to WiFi, the subscription information for the service cancellation of the first user is provided from the subscription system 100 to the subscription processing system 200 (S601).

In this case, the subscription information includes subscription product information (eg, a WiMax connection service capable of roaming to WiFi), identification information indicating that the service is terminated, and user ID information (eg, A1234) of the WiMax connection service.

The subscription processing system 200 requests the service profile construction by providing the subscription information on the received service termination to the integrated profile system (UPS) 300 (S602).

At the same time, the subscription processing system 200 transmits a cache entry, that is, a cache entry recorded in the profile cache table, to the authentication server (AAA) 20 of Wi-Fi and the authentication server 21 of WiMax. 1 Instructs to invalidate the service profile of the user (S603, S604).

 The integrated profile system 300 builds the state information in the service profile of the first user in the service profile of the first user according to the subscription information for the service termination received from the subscription processing system 200 as a "terminated state". (S605).

The authentication server 20 of Wi-Fi and the authentication server 21 of WiMax are the first user service recorded in each profile cache table T1 and T2 according to the invalidation instructions S603 and S604 for the service profile of the first user. [Validity] is changed to "Invalid" in the profile to invalidate the first user profile (S606).

In this state, the first user terminal 50 requests a connection to the WiMax system (S607). At this time, the access request transmitted from the first user terminal 50 includes the ID and password of the first user.

The authentication server 21 of WiMax performs connection authentication according to a connection request of the first user terminal 50, and checks a service profile of the first user stored in the cache server 11 for connection authentication. The WiMax authentication server 21 determines that the cache is a miss because the service profile of the first user is invalidated (S608).

The authentication server 21 of the WiMax is connected to the integrated profile system 300 to request the service profile of the first user (S609), and obtains (S610).

Then, WiMax's authentication server 21 registers the obtained service profile of the first user (see (a) of FIG. 6) in the cache server 11 (S611), and according to the registered service profile of the first user. The access to the terminal 50 is refused (S612).

Next, the first user terminal 50 requests a connection to the WiFi system (S613).

The authentication server 20 of the WiFi checks the service profile of the first user registered in the cache server 10. Since the service profile of the first user is invalidated, it is determined that the cache miss (S614).

The authentication server 20 of the WiFi is connected to the integrated profile system 300 to request the service profile of the first user (S615), the integrated profile system 300 of the first user stored in the integrated profile DB (330) The profile (see (a) of FIG. 6) is provided to the authentication server 20 (S616).

Then, the authentication server 20 of the WiFi registers the obtained service profile of the first user to the cache server 10 as shown in (c) of FIG. 6 (S617), the service profile of the registered first user In accordance with the denial of the access of the terminal 50 (S618).

The embodiments of the present invention described above are not only implemented by the apparatus and method but may be implemented through a program for realizing the function corresponding to the configuration of the embodiment of the present invention or a recording medium on which the program is recorded, The embodiments can be easily implemented by those skilled in the art from the description of the embodiments described above.

While the present invention has been particularly shown and described with reference to exemplary embodiments thereof, it is to be understood that the invention is not limited to the disclosed exemplary embodiments, It belongs to the scope of right.

1 is a block diagram of an integrated profile provisioning system according to an exemplary embodiment of the present invention.

2 is a diagram illustrating an integrated profile provisioning system for a method for provisioning heterogeneous service system profiles according to an exemplary embodiment of the present invention.

3 is a diagram illustrating a provisioning method of a heterogeneous service system profile according to a first embodiment of the present invention.

FIG. 4 is a diagram for describing a method for provisioning a heterogeneous service system profile according to a first embodiment shown in FIG. 3 based on a service profile.

5 is a diagram illustrating a provisioning method of a heterogeneous service system profile according to a second embodiment of the present invention.

6 is a view illustrating a cancellation processing method according to a cancellation request of a WiMax subscriber according to an embodiment of the present invention.

7 is a conceptual diagram illustrating a provisioning method of heterogeneous service system profiles according to an exemplary embodiment of the present invention.

Claims (8)

(a) the subscription processing system provides the integrated profile system with subscription information regarding the profile update event of the first user, except for the termination of the service, to request the establishment of the first service profile for the first user reflecting the subscription information. step, (b) the subscription processing system instructing heterogeneous service systems to invalidate a second service profile for the first user that is self-stored, (c) a first service system that invalidates the second service profile, one of the service systems, identifies the second service profile in response to a first request of the terminal of the first user and the second service profile; Determining the invalidation of, (d) the first service system requesting, acquiring and storing the first service profile in the integrated profile system, and (e) allowing the first service system to allow the first request using the first service profile. The method of claim 1, If the first service profile includes the use of a second system, After the step (e) (f) the second service system, the other of the service systems, having received the second request from the terminal of the first user, identifies the second service profile stored in itself in response to the second request, and 2 determining the invalidation of the service profile, (g) the second service system requesting, acquiring and storing the first service profile in the integrated profile system; (h) the second service system further comprising the step of allowing the second request using the first service profile. The method according to claim 1 or 2, And the first service profile or the second service profile are stored and managed in a cache form. The method of claim 3, (i) requesting, by the subscription processing system, to provide subscription information on the termination of the first service of the first user to the integrated profile system to establish a third service profile reflecting the termination of the first service; (j) the subscription processing system instructing heterogeneous service systems to invalidate the service profile of the first user, which is stored in itself; (K) the first service system invalidating the self-stored service profile confirming the self-stored service profile in response to the first request of the terminal of the first user and determining the invalidation of the self-stored service profile , (l) the first service system requesting, acquiring and storing the third service profile in the integrated profile system, and (m) the first service system denying the first request using the third service profile. 5. The method of claim 4, If the first service profile includes the use of a second system, After step (m), (n) the second service system receiving the second request from the terminal of the first user, checking a self-stored service profile in response to the second request, and determining invalidation of the self-stored service profile; (o) the second service system requesting, acquiring and storing the third service profile in the integrated profile system; (p) the second service system further comprising the step of denying the second request using the third service profile. (a) the subscription processing system requesting the establishment of a first service profile reflecting the cancellation of the first service by providing subscription information on the termination of the first service of the first user to the integrated profile system; (b) the subscription processing system instructing heterogeneous service systems to invalidate a second service profile of the first user, which is stored in itself; (c) a first service system that invalidates the second service profile, one of the service systems, identifies the second service profile in response to a first request of the terminal of the first user and the second service profile; Determining the invalidation of, (d) the first service system requesting, acquiring and storing the first service profile in the integrated profile system, and (e) the first service system rejecting the first request using the first service profile. The method of claim 6, If the first service profile includes the use of a second system, After the step (e) (f) a second service system, which has received a second request from the terminal of the first user, the other of the service systems, identifies the second service profile in response to the second request and determines the second service profile; Determining the invalidation, (g) the second service system requesting, acquiring and storing the first service profile in the integrated profile system; (h) the second service system further comprising the step of denying the second request using the first service profile. 8. The method according to claim 6 or 7, And the first and second service profiles are stored and managed in a cache form.

Images