KR20050106979A - Method and apparatus for providing wireless internet service with wi-fi - Google Patents

Abstract

The present invention relates to a method and apparatus for providing a wireless internet service using a wireless LAN, and more particularly, to a method for providing a wireless internet service using a wireless LAN with improved security and mobility using a virtual private network (VPN). Relates to a device. According to a preferred embodiment, a method for providing a wireless Internet service using a wireless LAN (a) is coupled to the virtual private network server through the network, access to the wireless LAN access point in the wireless LAN area performs a wireless LAN authentication, Receiving a tunnel generation request signal from a terminal that generates the tunnel generation request signal including the terminal identification information; (b) extracting terminal identification information included in the tunnel creation request signal and performing authentication; (c) generating a virtual private network tunnel with the terminal in response to the tunnel creation request signal; And (d) accessing the content server to which the terminal has requested access, and transmitting data corresponding to the content server to the terminal using a virtual private network tunnel.

Description

Method and apparatus for providing wireless Internet service using wireless LAN {Method and apparatus for providing wireless Internet service with Wi-Fi}

The present invention relates to a method and apparatus for providing a wireless internet service using a wireless LAN, and more particularly, to a method for providing a wireless internet service using a wireless LAN with improved security and mobility using a virtual private network (VPN). Relates to a device.

Wireless LAN, also known as Wi-Fi, means that wireless networks can be used conveniently, such as hi-fi audio. You can use the Internet. At the beginning, the radio range was only 10m, but in the 2000s, it has expanded to 50-hundreds of meters. In particular, with the popularization of terminals, the WLAN is rapidly expanding as an open wireless network, and Wi-Fi, which stands for wireless fidelity, provides high-speed data services to the entire city such as schools, airports, and hotels. It is used to. However, access functions (for example, hotspots) necessary for the Wi-Fi service are weak compared to the reliability of the conventional mobile communication network, and in particular, the WLAN security that can guarantee the safe use of the WLAN user is very weak.

Although the WLAN according to the prior art has the advantage of being low in cost while being able to transmit and receive a large amount of multimedia information while improving the transmission speed, there are many problems in terms of mobility and security compared to the existing mobile communication network. Recently, in order to provide a wireless Internet service through such a WLAN, a related technology for enhancing security and providing stability and convenience has been requested, but there is no effective technology.

As described above, the WLAN cannot provide the same level of service as the existing mobile communication network in terms of mobility and security, and there is a weak provision of effective service through connection with the mobile communication network.

In order to solve the above problems, an object of the present invention is to provide a method and apparatus for providing a wireless Internet service using a wireless LAN with improved security and mobility using a virtual private network (VPN).

In addition, another object of the present invention is to provide a method and apparatus for providing a wireless Internet service capable of providing a service in connection with an existing mobile communication network by extending a user's mobility beyond a wireless LAN service area. That is, the present invention can extend the use radius from the WLAN to the existing mobile communication network to activate the wireless Internet.

In addition, another object of the present invention is to provide a method and apparatus for transmitting and receiving data using a virtual private network in a wireless Internet access environment using a wireless LAN.

In addition, another object of the present invention by using a Wi-Fi (Wi-Fi) connection by strengthening the security of the weakness of the wireless LAN, it is possible to maximize the customer satisfaction by providing safety and convenience when using the wireless data service. In other words, the present invention may provide a wireless Internet service by connecting a wireless LAN and a mobile communication network, and at the same time, may provide a wireless Internet access service that guarantees safety, security, and convenience.

In addition, another object of the present invention is to provide a method and apparatus that can perform the charging continuously regardless of the switch between the wireless LAN and the mobile communication network, to prevent the charging accident, and to perform a security authentication of the customer. .

Other objects of the present invention will become more apparent through the preferred embodiments described below.

In order to achieve the above object, according to an aspect of the present invention, it is possible to disclose a method for providing a wireless Internet service using a wireless LAN with improved security and mobility using a virtual private network (VPN).

According to a preferred embodiment, a method for providing a wireless Internet service using a wireless LAN (a) is coupled to the virtual private network server through a network, access to a wireless LAN access point in the wireless LAN area performs a wireless LAN authentication Receiving the tunnel generation request signal from a terminal that generates the tunnel generation request signal including terminal identification information; (b) extracting terminal identification information included in the tunnel generation request signal and performing authentication; (c) generating a virtual private network tunnel with the terminal in response to the tunnel generation request signal; And (d) accessing a content server requested by the terminal to transmit data corresponding to the content server to the terminal using the virtual private network tunnel.

Here, step (b) may be performed using subscriber identification information stored in a mobile communication network AAA server connected to the virtual private network server. In the step (d), the data may be encrypted and transmitted according to the security information or the detailed security information which is preset in accordance with the terminal. The method may further include generating a call detail record (CDR) corresponding to data transmitted to the terminal; And transmitting the call detail record to the billing server so that the billing server coupled to the virtual private network server performs billing on the data using the call detail record.

According to another preferred embodiment, a method for providing a wireless Internet service using a wireless LAN comprises the steps of: (a) performing wireless LAN authentication by accessing a wireless LAN access point in the wireless LAN area; (b) generating a tunnel creation request signal including terminal identification information corresponding to the terminal; (c) transmitting the tunnel creation request signal to a virtual private network server coupled to the terminal through a network; And (d) extracting terminal identification information included in the tunnel creation request signal to perform authentication, and the terminal accesses from the virtual private network server that generates the virtual private network tunnel with the terminal in response to the tunnel creation request signal. Receiving data corresponding to the content server requesting the request using the virtual private network tunnel.

Here, in step (d), the received data may be decrypted in accordance with security information or detailed security information preset in accordance with the terminal.

In order to achieve the above object, according to an aspect of the present invention, a wireless Internet service providing apparatus using a wireless LAN with improved security and mobility using a virtual private network (VPN).

According to a preferred embodiment, an apparatus for providing a wireless Internet service using a wireless LAN performs wireless LAN authentication by accessing a wireless LAN access point in a wireless LAN area, generates a tunnel generation request signal including terminal identification information, and generates the virtual private network. A receiver configured to receive the tunnel creation request signal from a terminal coupled with a server through a network; A virtual private network generation unit connected to the receiver and configured to generate a virtual private network tunnel with the terminal in response to the tunnel generation request signal; An authentication unit connected to a virtual private network generation unit and configured to perform authentication by extracting terminal identification information included in the tunnel generation request signal; And a transmitter, connected to the authentication unit, for accessing a content server requested by the terminal to transmit data corresponding to the content server to the terminal using the virtual private network tunnel.

Here, the apparatus may further include an encryption unit for encrypting and transmitting the data according to security information or detailed security information preset in accordance with the terminal. The authentication unit may be performed using subscriber identification information stored in a mobile communication network AAA server connected to the virtual private network server. The apparatus may further include a billing information generation unit for generating a call detail record (CDR) corresponding to the data transmitted to the terminal; And a billing information transmitter for transmitting the bill detail record to the billing server so that the billing server coupled to the virtual private network server performs billing on the data using the bill detail record.

According to another preferred embodiment, an apparatus for providing a wireless Internet service using a wireless LAN includes: a wireless LAN card unit for accessing a wireless LAN access point in a wireless LAN area to perform wireless LAN authentication; A tunnel generation request signal generation unit connected to the WLAN card unit and configured to generate a tunnel generation request signal including terminal identification information corresponding to the terminal; A transmitter connected to the tunnel generation request signal generation unit and transmitting the tunnel generation request signal to a virtual private network server coupled to the terminal through a network; And from the virtual private network server connected to the transmitting unit, extracting terminal identification information included in the tunnel generation request signal to perform authentication, and generating a virtual private network tunnel with the terminal according to the tunnel generation request signal. The terminal may include a receiving unit for receiving data corresponding to the content server requesting the connection by using the virtual private network tunnel.

The apparatus may further include a decrypting unit for decrypting the data received by the receiving unit corresponding to the security information or the detailed security information preset in accordance with the terminal.

Hereinafter, a preferred embodiment of a method and apparatus for providing a wireless Internet service using a wireless LAN according to the present invention will be described in detail with reference to the accompanying drawings. The components to be given the same reference numerals and duplicate description thereof will be omitted.

Complete configuration and operating procedure

The present invention can disclose a method and apparatus for providing a wireless LAN-based wireless Internet service with improved security and mobility using a virtual private network (VPN). Hereinafter, FIG. 1 illustrates an overall configuration according to a preferred embodiment of the present invention, and FIG. 2 illustrates an overall operation procedure.

1 is a view showing the overall configuration of a wireless Internet service providing system using a wireless LAN according to a preferred embodiment of the present invention.

Wireless Internet service providing system using a wireless LAN according to the present invention includes a terminal 100 and a wireless LAN network and a mobile communication network connected to the terminal 100, the wireless LAN network and the mobile communication network is a virtual private network server 400 and wireless It may be coupled through the gateway 500. Here, the WLAN network may include a WLAN access point 200 and a wired network AAA server 210, and the mobile communication network may include a base station 230 and a mobile communication network AAA server 240. The wired network AAA server 220 may include at least one external wired portal or a wired content provider (CP) server 220. The mobile communication network may include a base station 230 and the mobile communication network AAA server 240. It may include a wireless portal or wireless CP server 250 outside of.

The terminal 100 according to the present invention is not limited to a PDA, a mobile phone, a notebook, a computer, and the like. If the terminal can be provided with a wireless LAN service by mounting a wireless LAN card, the terminal includes all existing or future terminals. The mobile communication module may include a mobile communication module (eg, a CDMA module or a GSM module) for receiving a mobile communication service.

The WLAN access point 200 enables a connection between the Internet and a network between users, and the WLAN technology according to the present invention may include a radio method using a radio wave technology and an infrared method using light. There are various standard standards for such a WLAN. Currently, IEEE 802.11b using wireless RF technology is determined as a standard standard of 11 Mbps, but the present invention is not limited to the name and method of the WLAN.

In general, when a wireless LAN service is requested, the wireless LAN must check the security of the customer in order to prevent charging accidents that may occur through the public network. In order to secure the security of the present invention, the terminal uses the terminal installed with the virtual private network module for the terminal, and executes the virtual private network client module (VPN Client Module) of the terminal when the platform is driven, and then authenticates the virtual private network server of the wireless operator. It may be configured to create a tunnel. In addition, after receiving the wireless data service, the generation of information fee for the use of the content may generate the CDR at the gateway and transmit the charge to the charging server, thereby performing real-time charging.

According to the related art, in a hotspot area in which a WLAN is available, the Internet is automatically connected to the Internet using a WLAN, and when the user leaves the hotspot, the Internet connection is disconnected. There is discomfort. The present invention is configured to combine the wireless LAN and the mobile communication network, so that the switching between the wireless LAN and the mobile communication network is automatically recognized and switched to one terminal.

Here, the virtual private network server 400 performs a function of establishing a virtual private network, and the wireless gateway 500 is shown separately to perform the function of authenticating the terminal 100 in conjunction with a mobile communication network AAA server, the virtual Of course, the private network server 400 may be implemented in one device to perform the wireless gateway 500. When the virtual private network server 400 or the wireless gateway 500 generates call detail record (CDR) information and transmits it to the charging server 600, the charging server 600 collects the CDR information and collects the charging information. It can create and settle.

Herein, the virtual private network server according to the present invention accesses a wireless LAN access point in a wireless LAN area, performs wireless LAN authentication, generates a tunnel generation request signal including terminal identification information, and combines the virtual private network server through a network. A receiver configured to receive the tunnel generation request signal from a terminal, the receiver connected to the receiver, a virtual private network generator configured to generate a virtual private network tunnel with the terminal according to the tunnel generation request signal, and a virtual private network generator; An authentication unit for performing authentication by extracting terminal identification information included in the tunnel creation request signal, and connected to the authentication unit, and accessing a content server requested by the terminal to access data corresponding to the content server; Song for transmission to the terminal using a virtual private network tunnel It may comprise portions, in response to the terminal preset security information or details corresponding to encryption for secure transfer of information by encrypting the data portion.

In addition, the terminal according to the present invention is connected to a WLAN card unit for accessing a WLAN access point in the WLAN area, the WLAN card unit in order to perform WLAN authentication, and includes terminal identification information corresponding to the terminal. A tunnel generation request signal generator for generating a tunnel generation request signal, a transmitter connected to the tunnel generation request signal generator, for transmitting the tunnel generation request signal to a virtual private network server combined with the terminal through a network, the transmitter The terminal is connected to the virtual private network server, which extracts the terminal identification information included in the tunnel generation request signal, performs authentication, and generates the virtual private network tunnel with the terminal according to the tunnel generation request signal. The data corresponding to the content server requesting the virtual private network Has a corresponding receiver and the data received by the receiving unit to the terminal it may further include a decoding for decoding corresponding to a preset security information or detailed security information for receiving used.

2 is a view showing the overall operation of a wireless Internet service providing system using a wireless LAN according to a preferred embodiment of the present invention.

Referring to Figure 2 showing the entire operation process according to the present invention, the overall process according to the present invention may include an authentication process, a data transmission and reception process through the VPN setting, the charging process.

Hereinafter, referring to a flowchart describing the entire operation procedure according to a preferred embodiment of the present invention, first, in step S210, the terminal attempts to access a WLAN service in a WLAN area, and after WLAN subscriber authentication In operation S220, when the platform of the wireless terminal is driven, the VPN client is pre-installed on the terminal and the tunnel generation signal is transmitted. Here, the header of the tunnel generation signal may include terminal identification information for real subscriber authentication of the terminal.

In operation S230, the wireless gateway may perform terminal subscriber authentication by extracting terminal identification information included in the header according to a preset method. The authentication according to the invention is configured to authenticate using terminal identification information (e.g. device serial number) set corresponding to the terminal.

In step S240, after performing authentication, a virtual private network server and a tunnel is created. This tunnel is connected through a public IP network, but it ensures safety in a closed section and is connected from a wireless G / W server.

In step S240, the service of the wireless portal through the wireless G / W and the content information usage fee generates a CDR in the G / W and transmits to the billing server.

Here, after the terminal user and after such authentication, it can be determined whether the security private security network virtual subscriber. The present invention may be configured to identify a subscriber so as to guarantee QoS according to a user, and to provide a virtual private network service according to the present invention when the subscriber is a preset subscriber. When moving or leaving the WLAN area, the mobile network is switched to the mobile communication network, and the mobile communication network can provide and charge a service according to a conventional or future method. That is, the present invention can determine whether the terminal is a wireless LAN service area or a mobile communication network service area, and can provide a virtual private network service with enhanced security corresponding to the determination area.

VPN service

Hereinafter, a configuration of a virtual private network according to an embodiment of the present invention will be described with reference to FIG. 3, and a virtual private network connection procedure according to a preferred embodiment of the present invention will be described with reference to FIG. 4.

3 is a diagram illustrating a configuration of a virtual private network according to an embodiment of the present invention.

Hereinafter, an embodiment of the present invention will be described based on the case where the virtual private network is connected using a router for convenience of description, but the wireless LAN and the wireless gateway section may be connected to the virtual private network using other methods. Of course it is. For example, the present invention can establish a virtual private network using the above-described VPN support software, and can transmit and receive data through a protected virtual path.

Referring to FIG. 3, the terminal according to the present invention may be coupled to the virtual private network server 400 via the WLAN access point 200 and the WLAN-VPN router 300.

The WLAN-VPN router 300 connected to the WLAN access point 200 is an apparatus for allowing the terminal 100 to access the virtual private network server 400 at a predetermined specific location. The WLAN-VPN router 300 connects the WLAN-VPN router 300 to a virtual private network, and forms an IP tunnel between the WLAN-VPN routers 300 to transmit and receive data. Is configured to.

The terminal may be pre-installed in the mobile communication terminal, and may include a virtual private network client that transmits a tunnel creation request signal for the virtual private network to the virtual private network server when the Wi-Fi access point is connected. When the virtual private network client module of the terminal 100 transmits a location registration request signal to a visitor agent (not shown), the visitor agent identifies the visitor agent included in the location registration request signal of the terminal 100. When the information is transmitted to a home agent (HA) corresponding to the terminal 100, the home agent stores identification information of the visitor agent and in real time, the WLAN-VPN router 300 corresponding to the terminal and the virtual private network. Can be built.

For example, when the terminal transmits a virtual private network service request signal simultaneously with the operation of the platform, the visitor agent recognizes this and requests the virtual private network connection request to inform the WLAN-VPN router 300 that the terminal is connected to the service. Send the signal. Thereafter, the WLAN-VPN router 300 transmits data to a virtual private network established corresponding to the WLAN-VPN router 300 connected to the terminal or transmits the data through the WLAN-VPN router 300. Can be received.

4 is a diagram illustrating a virtual private network connection procedure according to a preferred embodiment of the present invention.

Hereinafter, the aforementioned virtual private network connection procedure will be described in more detail with reference to FIG. 4. First, the case of transmitting from the terminal will be described. When the terminal accesses the wireless LAN in step S405, when the virtual private network registration request signal is transmitted to the visitor agent corresponding to the wireless LAN area to which the terminal is connected, in step S410, the visitor agent accesses the terminal side wirelessly connected to the terminal. The registration is completed by sending the LAN-VPN router information to the home agent. Thereafter, the terminal-side WLAN-VPN router 300 may extract preset router information and access the virtual private network server 400 via the server-side WLAN-VPN router 300.

Next, the case of transmitting from the virtual private network server is as follows.

When detecting data to be transmitted to the terminal 100 of the virtual private network server 400 in step S420, via the server-side WLAN-VPN router 419, in step S425 corresponding to the terminal 100 as a home agent Request information from the visitor agent's address.

In step S435, the home agent extracts the address information of the visitor agent stored in advance, and transmits the address information to the server-side WLAN-VPN router 300 in step S440.

In step S445, the server-side WLAN-VPN router 300 performs routing to the terminal WLAN-VPN router 300 by using the address information. Thereafter, when the virtual private network is established between the server-side WLAN-VPN router 300 and the terminal-side WLAN-VPN router 300, the virtual private network server may transmit data to the terminal at step S450.

Virtual private network construction according to security level

The virtual private network according to the present invention may establish a virtual private network with a difference in security level in order to satisfy different QoSs corresponding to subscribers. Hereinafter, a process of establishing a virtual path will be described in FIG. 5, a data transmission process will be described in FIG. 6, and a data reception process will be described in FIG. 7.

5 is a flowchart illustrating a process of setting a virtual path for each security level according to an embodiment of the present invention.

First, when the virtual private network server receives a request signal for setting a virtual path for each security level corresponding to the virtual private network in step S510, the security information corresponding to the terminal is extracted in step S520. Here, the terminal-specific security information refers to information related to the security level required when transmitting and receiving data using the virtual path, which is different depending on the type of service subscribed to by the terminal user. Accordingly, security paths can be selected by selecting virtual paths for each security level that have different virtual paths for different security levels.

In operation S530, it may be determined whether security information corresponding to the terminal exists, and if the determination result includes security information, in operation S540, the security information of the terminal may be extracted, and a virtual path may be selected according to the extracted security information. If there is no original information, in step S550, a subscription invitation message, subscription information, etc. for the virtual private network setting service for each security level may be provided.

According to the present invention, selection information for more detailed security information can also be provided. Here, the detailed security information refers to a series of information necessary for data security, such as authentication and encryption information. When subscribing to the detailed security information service as described above, it may be determined whether the detailed security information exists in step S560. As a result of the determination, if there is security information, a virtual path for each security level may be set according to the detailed security information in step S570. If there is no security information, the virtual path may be set according to the default detailed security information set in advance in step S580.

In step S590, a process of setting a virtual path for each security level according to the security information and the detailed security information as described above, and transmitting and receiving data of the wireless Internet service will be described in detail.

6 is a flowchart illustrating a transmission procedure corresponding to a virtual path for each security level according to the present invention.

Hereinafter, the data transmission process according to the virtual path for each security level will be described with reference to FIG. 6. If there is a request for data transmission in step S610, the security information or detailed security information is inquired in step S620, and in step S630 it is checked whether the virtual path for each security level is set. As a result of the check, if the virtual paths for each security level are not set, the virtual paths for each security level are set in step S640, and if the virtual paths for each security level are set, the data is encrypted according to the security level in step S640. In operation S650, the method may further include adding encryption information and additional data security information as a header. Then, it is configured to transmit the data in step S660.

According to the present invention, the security information and configuration are downloaded from the virtual private network server, and configured to be pushed to the terminal when a connection is established, thereby ensuring high scalability and security while facilitating implementation and management. .

7 is a flowchart illustrating a procedure for receiving a security level corresponding to a virtual path for each security level according to an embodiment of the present invention.

When the data is received in step S710, the security header information of the data received in step S720 is extracted and analyzed. Here, the security header may include encryption related information and security information or detailed security information.

The received data may be decrypted using the security information analyzed in operation S730, and a verification step of determining whether the data received in operation S740 is normal data may be further performed. In the determination step, if the normal data is determined, the terminal is recognized and displayed as normal data in step S750. If the abnormal data is determined, the terminal is discarded in step S750 and retransmission is requested.

Billing service

8 is a diagram illustrating a configuration of a wireless gateway and a charging server for charging according to a preferred embodiment of the present invention.

According to the present invention, the terminal connected to the wireless gateway may be configured to continuously charge regardless of the movement of the WLAN or mobile communication network. The wireless gateway and billing server according to the present invention is a call billing processing apparatus including a wireless LAN and a mobile communication network, and can transmit billing data online using a data transmission network.

Referring to FIG. 8, the wireless gateway according to the present invention uses an authentication unit 510 for authenticating the terminal using a unique terminal identifier corresponding to the terminal, not an ID and password, and charges for generating CDR information. It may include a generation unit 520, a billing extraction unit 530 for extracting the CDR information, and a billing transmission unit 540 for transmitting the CDR information to the billing server.

In addition, the billing server 600 may include a bill collector 610 for receiving the CDR information and a bill calculator 620 for billing the bill using the collected billing information.

Here, the transmission network may include a mobile communication network, an X.25 network, an ATM network and an internet network for transmitting the billing data, and may enhance security and stability by using a virtual private network for the data network. Of course.

Although described above with reference to a preferred embodiment of the present invention, those skilled in the art that various modifications of the present invention without departing from the spirit and scope of the invention described in the claims below And can be changed.

As described above, the method and apparatus for providing a wireless Internet service using a wireless LAN according to the present invention provide a method and apparatus for providing a wireless Internet service using a wireless LAN with improved security and mobility using a virtual private network (VPN). There is an effect that can be provided.

In addition, the present invention can extend the user's mobility beyond the wireless LAN service area to provide a service in connection with an existing mobile communication network.

In addition, the present invention has the effect of transmitting and receiving data using a virtual private network in a wireless Internet access environment using a wireless LAN.

In addition, the present invention has the effect of maximizing customer satisfaction by providing security and convenience when using a wireless data service by using a Wi-Fi (Wi Fi) connection by strengthening security that is a vulnerability of the wireless LAN. In other words, the present invention may provide a wireless Internet service by connecting a wireless LAN and a mobile communication network, and at the same time, may provide a wireless Internet access service that guarantees safety, security, and convenience.

In addition, the present invention can perform the charging continuously regardless of the switch between the wireless LAN and the mobile communication network, there is an effect that can prevent the charging accident, and perform the security authentication of the customer.

In addition, the present invention by providing a wired and wireless combined service safely, the customer can be provided with a secure service, can be a catalyst for the development of the IT industry, the new business model of wired and wireless operators can bring new market creation and sales increase effect There is also.

Meanwhile, in the detailed description of the present invention, specific embodiments have been described, but various modifications are possible without departing from the scope of the present invention. Therefore, the scope of the present invention should not be limited to the described embodiments, but may be determined not only by the scope of the following claims but also by the scope equivalent to the scope of the claims.

1 is a view showing the overall configuration of a wireless Internet service providing system using a wireless LAN according to an embodiment of the present invention.

2 is a view showing the overall operation of a wireless Internet service providing system using a wireless LAN according to a preferred embodiment of the present invention.

3 is a diagram showing the configuration of a virtual private network according to a preferred embodiment of the present invention.

4 is a flowchart illustrating a virtual private network connection procedure according to a preferred embodiment of the present invention.

5 is a flowchart illustrating a virtual path establishment process according to a preferred embodiment of the present invention.

6 is a flowchart illustrating a data transmission process according to a preferred embodiment of the present invention.

7 is a flowchart illustrating a data receiving process according to a preferred embodiment of the present invention.

8 is a diagram illustrating a configuration of a wireless gateway and a charging server for charging according to a preferred embodiment of the present invention.

<Explanation of symbols for the main parts of the drawings>

100: terminal

200: WLAN access point

210: wired network AAA server

220: wired CP server

230: base station

240: mobile communication network AAA server

250: wireless CP server

400: virtual private network server

500: wireless gateway

Claims (12)

In the method of providing a wireless Internet service using a wireless LAN in a virtual private network server, (a) generating the tunnel from a terminal coupled to the virtual private network server through a network, accessing a WLAN access point in a WLAN area, performing WLAN authentication, and generating a tunnel generation request signal including terminal identification information; Receiving a request signal; (b) extracting terminal identification information included in the tunnel generation request signal and performing authentication; (c) generating a virtual private network tunnel with the terminal in response to the tunnel generation request signal; And (d) accessing the content server that the terminal has requested to access, and transmitting data corresponding to the content server to the terminal using the virtual private network tunnel; Wireless Internet service providing method using a wireless LAN, characterized in that it comprises a. The method of claim 1, Step (b) is Method of providing a wireless Internet service using a wireless LAN, characterized in that the subscriber identification information stored in the mobile communication network AAA server connected to the virtual private network server. The method of claim 1, Step (d) Method for providing a wireless Internet service using a wireless LAN, characterized in that for transmitting the data encrypted according to the security information or detailed security information preset in accordance with the terminal. The method of claim 1, Generating a call detail record (CDR) corresponding to the data transmitted to the terminal; And Transmitting the call detail record to the billing server so that the billing server coupled to the virtual private network server performs billing for the data using the call detail record; Wireless Internet service providing method using a wireless LAN, characterized in that it further comprises. In the method for providing a wireless Internet service using a wireless LAN in a terminal, (a) performing WLAN authentication by accessing a WLAN access point in a WLAN area; (b) generating a tunnel creation request signal including terminal identification information corresponding to the terminal; (c) transmitting the tunnel creation request signal to a virtual private network server coupled to the terminal through a network; And (d) extracting the terminal identification information included in the tunnel generation request signal to perform authentication, and the terminal establishes a connection from the virtual private network server that generates the virtual private network tunnel with the terminal in response to the tunnel generation request signal. Receiving data corresponding to the requested content server by using the virtual private network tunnel Wireless Internet service providing method using a wireless LAN, characterized in that it comprises a. The method of claim 5, Step (d) Method for providing a wireless Internet service using a wireless LAN, characterized in that for decrypting the received data corresponding to the security information or detailed security information preset in accordance with the terminal. In the wireless Internet service providing apparatus using a wireless LAN, Accessing a WLAN access point in a WLAN area, performing WLAN authentication, generating a tunnel generation request signal including terminal identification information, and receiving the tunnel generation request signal from a terminal coupled with the virtual private network server through a network. Receiving unit for; A virtual private network generation unit connected to the receiver and configured to generate a virtual private network tunnel with the terminal in response to the tunnel generation request signal; An authentication unit connected to a virtual private network generation unit and configured to perform authentication by extracting terminal identification information included in the tunnel generation request signal; And A transmitter connected to the content server to which the terminal requests access, and transmitting data corresponding to the content server to the terminal using the virtual private network tunnel Wireless Internet service providing apparatus using a wireless LAN, characterized in that it comprises a. The method of claim 7, wherein And an encryption unit for encrypting and transmitting the data according to the security information or the detailed security information preset in accordance with the terminal. The method of claim 7, wherein The authentication unit Apparatus for providing a wireless Internet service using a wireless LAN, characterized in that the subscriber identification information stored in the mobile communication network AAA server connected to the virtual private network server. The method of claim 7, wherein A billing information generation unit for generating a call detail record (CDR) corresponding to the data transmitted to the terminal; And A billing information transmitter for transmitting the bill detail record to the billing server so that billing server coupled to the virtual private network server performs billing on the data using the bill detail record; Wireless Internet service providing apparatus using a wireless LAN, characterized in that it further comprises. In the wireless Internet service providing apparatus using a wireless LAN, A WLAN card unit for accessing a WLAN access point in a WLAN area to perform WLAN authentication; A tunnel generation request signal generation unit connected to the WLAN card unit and configured to generate a tunnel generation request signal including terminal identification information corresponding to the terminal; A transmitter connected to the tunnel generation request signal generation unit and transmitting the tunnel generation request signal to a virtual private network server coupled to the terminal through a network; And The terminal is connected to the transmitter, extracts terminal identification information included in the tunnel generation request signal, performs authentication, and the terminal from the virtual private network server that generates a virtual private network tunnel with the terminal in response to the tunnel generation request signal. Receiving unit for receiving data corresponding to the content server that has requested access by using the virtual private network tunnel Wireless Internet service providing apparatus using a wireless LAN, characterized in that it comprises a. The method of claim 11, And a decryption unit for decrypting the data received by the reception unit according to the security information or the detailed security information preset in accordance with the terminal.