KR101262744B1 - Security system using wimax and vpn and controlling method thereof - Google Patents

Abstract

PURPOSE: A security system using WiMAX(World interoperability for Microwave Access) and a virtual private network and a control method thereof are provided to prevent user inconvenience without individually installing a firewall with the virtual private network. CONSTITUTION: A security device generates a security code through searched security codes(800). The security device provides warning when a virtual private network is not connected(900). The security device encodes data(1000). The security device adds a header file which allows the authentication of transmission data(1100). The security device adds encryption codes(1200). The security device transmits the encrypted data(1300). [Reference numerals] (100) Start; (1000) Encrypt data; (1100) Generate header files; (1200) Add encryption codes; (1300) Transmit security treated data; (1400) End; (200) Access to WiFi AP; (300) Transmit a tunneling signal; (400) Authenticate a user; (500) Generate a VPN tunnel; (600) Transmit data requiring security treatment; (700) Inquire a security code; (800) Generate the security code; (900) Set VPN warning

Description

Security system using WiMAX and virtual private network and its control method {SECURITY SYSTEM USING WiMAX AND VPN AND CONTROLLING METHOD THEREOF}

The present invention relates to a security system using WiMAX and a virtual private network (VPN) and a control method thereof.

As shown in FIG. 1, the wired network forms most of the current network, but when the wireless network is constructed in a complementary form to the wired network, LTC is currently used in mobile communication. , LTE) and a method using wireless network equipment WiMAX (world interoperability for microwave access, WiMAX). Many users who use LTE use mobile devices using Wi-Fi in areas where wireless fidelity (WiFi) is used for reasons such as network usage or data traffic. Is most of them.

In this case, when using Wi-Fi, the Wi-Fi zone is created by connecting to a wired network, which reduces the flexibility of equipment installation. One solution to this problem is to connect Wi-Fi to the WiMAX system, which is an easy-to-install system. You can configure a wireless network by connecting.

WiMAX complements the existing digital subscriber line (DSL) and cable modem methods, and is a link to 802.11 Wi-Fi in network configuration, which can be used to build an inexpensive backhaul. Technology.

WiMAX can be used efficiently by connecting various devices using closed circuit television (CCTV) and ubiquitous sensor network (USN) as well as users of mobile devices.

However, in the case of a wireless network, there is a weaker side in security such as hacking than a wired network. Therefore, a security problem for hacking must be solved when processing a company and a personal work using a wireless network.

If you install and use each of these virtual private networks (VPN) individually, you need to install a virtual private network (VPN) for each device and also install a firewall, so install a virtual private network (VPN) for each device and install a firewall. Discomfort arises.

The technical problem to be achieved by the present invention is to install a virtual private network on the Wi-Fi installed or connected to WiMAX, to prevent the inconvenience of installing a virtual private network for each user's terminal and a firewall (Firewall) and secure data processing It becomes easy.

According to an aspect of the present invention, a security system using WiMAX and a virtual private network (VPN) includes two or more terminals, WiMAX enabling wireless communication between the terminals, and a virtual private network applied for data security. A security module having a VPN) and a firewall that prevents access by a person who is not authorized from outside, and a tunnel secured by the security module.

Each of the two or more terminals may be a personal terminal or an organization site to which a plurality of personal terminals are connected.

According to another aspect of the present invention, a method for controlling a security system using WiMAX and a virtual private network (VPN) may include: connecting a user to a Wi-Fi access point, transmitting a tunneling signal, and tunneling Receiving a signal to authenticate the user, creating a virtual private network tunnel when the user is authenticated, transmitting data to be secured through the virtual private network (VPN), and querying the security code of the transmitted data Generating a security code using the inquired security code, setting up an alert to warn the user when a virtual private network is not properly connected, encrypting the data, and adding a header file to allow authentication of transmission data. Adding the encryption code, and sending the secured encrypted data It should.

According to this feature, as the virtual private network (VPN) is installed on Wi-Fi connected to WiMAX, there is no need to install a virtual private network (VPN) for each user's terminal and there is no need to install a firewall, thereby keeping the user secure. In one state, the processing burden on the user's terminal can be reduced, and security processing of data can be facilitated.

Figure 1 shows the structure of a wireless network using a conventional WiMAX and Wi-Fi.
2 is a schematic configuration diagram of a security system using WiMAX and a virtual private network (VPN) according to an embodiment of the present invention.
3 is a flowchart illustrating an operation of a security system using WiMAX and a virtual private network (VPN) according to an embodiment of the present invention.

DETAILED DESCRIPTION Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings so that those skilled in the art may easily implement the present invention. The present invention may, however, be embodied in many different forms and should not be construed as limited to the embodiments set forth herein. In the drawings, parts irrelevant to the description are omitted in order to clearly describe the present invention, and like reference numerals designate like parts throughout the specification.

A security system using WiMAX and Virtual Private Network (VPN) according to an embodiment of the present invention will be described with reference to the accompanying drawings.

First, referring to FIG. 2, a security system using WiMAX and a virtual private network (VPN) according to an embodiment of the present invention provides wireless communication between two or more terminals 10 and these terminals 10. Security module (20) consisting of a WiMAX (ViiMax) to enable, a virtual private network (VPN) used for data security, and a firewall (firewall) to prevent access unless authorized from outside, and the security module 20 It has a tunnel 30 secured by the.

The two or more terminals 10 are an organization site to which a personal terminal or a plurality of personal terminals are connected.

The security system according to an embodiment of the present invention employs a tunneling technique as a method for securely transmitting data through the Internet.

The tunnel 30 refers to a virtual point-to-point (P2P) connection and generates a tunnel by encapsulating packet data and delivering it in the form of payload of another protocol. The tunnel is created between the same Open System Interconnection (OSI) Layer 7 (OSI 7 Layer) of two separate networks.

The OSI 7 layer includes the physical layer (1 layer), link layer (2 layer), network layer (3 layer), transport layer (4 layer), session layer (5 layer), presentation layer (6 layer) and application layer ( 7 layers), which is proposed by the International Organization for Standardization (ISO) to facilitate the exchange of information between different terminals, for example, computers, and divides the components of the network into hierarchical methods. It is the standard of hierarchy.

These tunnels require three elements to fully protect the data: user authentication, data integrity, and data confidentiality. These tunnels are called virtual private networks (VPNs). do.

This allows you to connect between two or more private networks that are separated from each other, as well as remotely access private networks from outside. Protocols that support virtual private network (VPN) tunneling include layer two tunneling protocol (L2TP), point-to-point protocol (PPTP), Internet Protocol Security (IPSec), secure socket layer (SSL), and transport layer security (TLS). have.

Among them, Internet Protocol Security (IPSec), which supports tunneling, is for a security solution, and the IPSec protocol can be used in both a transport mode and a tunnel mode.

In transport mode, IPSec exists as a normal Internet Protocol (IP) packet between the network and the transmission [transmission control protocol (TCP) or user datagram protocol (UDP)].

The transport mode was developed as an end system, and its use is described for deployment on all systems in the collective, so in most cases you will need to reprogram the application.

The IPSec connection is defined by the Security Association (SA). Since the SA is not pre-directed, two SAs are required for the connection.

The SA defines various parameters of the IPSec connection. For example, it is used between a communication system and a session key for encryption and various parameters controlling its own functions, such as encryption and authentication algorithms.

IPSec consists of a protocol that uses authentication and encryption algorithms within it.

The system is configured to apply an authentication header (AH), an encapsulation security payload (ESP), which is a security protocol of a virtual private network (VPN), and an Internet security association and key management protocol (ISAKMP), a key management protocol, and IKE (Internet). By applying an algorithm that applies key generation and exchange protocols such as key exchange to WiMAX or Wi-Fi interworking with WiMAX, it provides a security-enhanced solution for users using wireless networks.

If necessary, PP-VPN (Provider Provisioned Virtual Private Networks) is installed on Wi-Fi, which works with WiMAX, for Wi-Fi, a virtual private network (VPN) system, and a sector controller (SC). By applying a virtual private network (VPN) independently for six channel controllers (SC) to one WiMAX through interworking with the virtual private network (VPN) system, the individual virtual private network (VPN) in units of sector controllers (SC) ) Is a system applied.

Virtual Private Networks (VPNs) allow remote users to log in without entering their sensitive data at risk. Even if the user connects to the network remotely using the device that he is currently trying to access, the Wi-Fi VPN gateway way has three types: authentication, confidentiality, and integrity of the data that the user sends. Required elements must be provided.

When connecting, authentication is handled using a certificate, password, smart card, or security key, and the security is enhanced through encryption, and the system is configured to be impossible to modify during data transmission.

In order to use the public network as a private network to transmit data, a virtual tunnel was formed between two points by using a tunneling technique, which is a feature of VPN, to transmit and receive information in a situation that is not affected by the outside.

How far the tunnel is constructed is an important factor in the method of constructing the tunnel. In this case, a tunnel is formed between the backbone and the subscriber front, that is, the WiFi gateway (WiFi). Tunneling methods include two-layer and three-layer tunneling.

Here, Point-to-Point Tunneling Protocol (PPTP) is used to operate a separate virtual private network (VPN) that cannot be accessed from the outside while still using the Internet protocol TCP / IP (transfer control protocol / internet protocol). It is configured and guarantees stability like using a single LAN (Local Area Network).

In PPTP, a mobile device and a server are connected by IP (internet protocol) to form a PPTP tunnel through a LAN.

In addition, an Authentication Header (Authentication Header) that allows authentication of transmitted data using IPSec (Internet Protocol Security), Encapsulating Security Payload (ESP), and Key Exchange, which can handle authentication and data encryption of transmitted data It provides security service by using IKE (internet key exchange).

In a security system according to an embodiment of the present invention, a new internet protocol header is attached before an internet protocol header and a payload to authenticate a part of the internet protocol header to be applied to a Wi-Fi security gateway.

In addition, in order to maintain the Internet speed, the distributed tunneling technique for the Wi-Fi gateway is used to maintain the Internet speed.

IPSec also configures the system to use a combination of Secure Socket Layer (SSL) VPNs for mobile devices to improve the case of complex installation and incompatibility by platform. The entire system is configured to apply within the WiFi VPN gateway so that mobile device users can use the SSL protocol without a separate VPN program.

By applying the tunnel mode that encrypts the entire packet by sector controller (SC) unit, the sector controller (SC) is used as a WiMAX gateway to be applied between the WiMAX gateway and the WiMAX gateway. Configure your system to form the entire system.

In other words, the entire system is configured as a gateway for each mobile device (for example, a smart phone or a notebook), and a VPN is applied to the core network. It is a system that strengthens security for users by connecting to WiMAX and applying virtual private network (VPN) individually in small group or individual unit as necessary.

3 is a diagram illustrating a method of operating a security system according to an embodiment of the present invention.

When the security device according to an embodiment of the present invention is operated, the user accesses a Wi-Fi access point 200, transmitting a tunneling signal 300, and receiving the tunneling signal to authenticate the user. In step 400, if the user is authenticated, creating a virtual private network tunnel 500, transmitting a data to be secured through the virtual private network (VPN) (600), the security code of the transmitted data Inquiring step (700), step of generating a security code using the security code (800), a warning setting step (900) for alerting when the virtual private network (VPN) is not properly connected, encrypting the data (1000), adding a header file (header file) allowing the authentication of the transmission data (1100), adding an encryption code (1200), and transmitting the encrypted data with security measures Is operating as system 1300 provides an enhanced security device for data transmission.

While the present invention has been particularly shown and described with reference to exemplary embodiments thereof, it is to be understood that the invention is not limited to the disclosed exemplary embodiments, It belongs to the scope of right.

10: terminal 20: security module
30: tunnel

Claims (3)

delete delete A user connecting to a Wi-Fi Access Point,
Transmitting a tunneling signal,
Receiving the tunneling signal to authenticate the user;
Creating a virtual private network tunnel when the user is authenticated,
Transmitting data to be secured through a virtual private network (VPN),
Querying the security code of the transmitted data,
Generating a security code using the inquired security code,
Alert setup step to warn you when the virtual private network is not properly connected,
Encrypting the data,
Adding a header file allowing authentication of the transmitted data,
Adding an encryption code, and
Sending encrypted data with security measures
Method of controlling a security system using a WiMAX and virtual private network comprising a.

Images