KR20060027588A - Public wireless lan service system and authentication method thereof - Google Patents

Abstract

The present invention relates to a public wireless LAN service system and a method thereof.

In the public WLAN service authentication method according to the present invention, when a bearer of a wireless terminal pays a fee using the wireless terminal, the user authenticates user authentication for the same amount of time and provides the Internet service to the wireless terminal.

Wlan, authentication, internet, payment, time

Description

Public wireless LAN service system and its authentication method {PUBLIC WIRELESS LAN SERVICE SYSTEM AND AUTHENTICATION METHOD THEREOF}

1 is a schematic diagram of a public WLAN service system according to an embodiment of the present invention.

2 is a diagram illustrating an example of an authentication list used in an embodiment of the present invention.

3 is a flowchart illustrating a public WLAN authentication method according to an embodiment of the present invention.

The present invention relates to a public wireless LAN service system and a method thereof. In particular, when a wireless terminal bearer pays a fee using the wireless terminal, the user authenticates user authentication for a time of the cost to provide an Internet service to the wireless terminal. The present invention relates to a public wireless LAN service system and an authentication method thereof.

In general, a wireless LAN means a wireless LAN that transmits and receives data between a computer and a computer or between a computer and other communication devices by using radio frequency (RF) or light. These WLANs have been developed in recent years due to the rapid development of Internet services and wireless communication technologies. These WLANs are mainly installed in places where wired networks are not easily built, such as network access between buildings, large offices, and logistics centers. The use is soaring.

When accessing the Internet using the WLAN, a user's wireless terminal is generally connected to a user authentication system through an access point. After that, the user wireless terminal receives the Internet service after receiving user authentication from the user authentication system.

There are two main methods of user authentication of the WLAN service.

First, the user subscribes to the wireless LAN service, and the MAC address (physical unique number of the LAN card) embedded in the wireless terminal of the user to the backend server that manages the entire wireless LAN subscriber. Register and save in advance. When the wireless LAN service subscriber accesses the wireless LAN service system using the wireless terminal, the wireless LAN service system compares the MAC address of the wireless LAN card with the same address among the MAC addresses previously stored in the backend server. There is a Media Access Control (MAC) authentication method that authenticates after verifying.

Secondly, the user subscribes to the WLAN service and registers and stores the ID and password of the WLAN service subscriber in the backend server in advance. Next, when the WLAN service subscriber accesses the WLAN service system using a wireless terminal, the WLAN service system requests the presentation of an ID and a password and authenticates using the presented ID and password. Extension Authentication Protocol There is an authentication method.                         

The user authentication method of the wireless LAN cannot use the wireless LAN service unless the user subscribes to the wireless LAN service in advance and stores user information in the back-end server.

That is, since the WLAN authentication method needs to be registered as a member of the WLAN service in advance, a user who wants to use the WLAN service for a while due to a sudden emergency cannot use it. In addition, when a user subscribes as a member of the WLAN service, in general, the user pays the fee in units of one month or more, so this method of paying the fee is unreasonable for the user who uses the WLAN service for a little time.

An object of the present invention is to provide a public WLAN service system and a method of authenticating the same, when a wireless terminal holder pays a fee using the wireless terminal, approves user authentication for a time of the cost to provide an Internet service. It is to.

Public wireless LAN service authentication method according to a feature of the present invention for achieving the above object

A public WLAN service authentication method for providing an Internet service to a wireless terminal by a public WLAN service system having an authentication list including a MAC address and time information of the wireless terminal,

(a) the public WLAN service system allocates an IP address according to a request of the wireless terminal, and payment induction information, wherein the payment induction information is a MAC address of the wireless terminal, an alias or IP address information of the wireless terminal, and one of them; Providing an interface for selecting, including the information for making a mobile phone payment or credit card payment for the selected wireless terminal;

(b) completing the payment using the provided payment induction information; And

(c) MAC authentication of the wireless terminal to provide an internet service when the payment is completed.

According to another aspect of the present invention, a recording medium having a computer readable program recorded thereon

Claims [1] A recording medium in which a computer-readable program for providing an Internet service to a wireless terminal by a public WLAN service system having an authentication list including a MAC address and time information of the wireless terminal is recorded.

(a) the public WLAN service system allocates an IP address according to a request of the wireless terminal, and payment induction information, wherein the payment induction information is a MAC address of the wireless terminal, an alias or IP address information of the wireless terminal, and one of them; Providing an interface for selecting, including the information for making a mobile phone payment or credit card payment for the selected wireless terminal;

(b) completing the payment using the provided payment induction information; And

(c) MAC authentication of the wireless terminal to provide an internet service when the payment is completed.                     

Public wireless LAN system according to another feature of the present invention

In the public wireless LAN service system for providing an Internet service to a wireless terminal,

An authentication list database in which the MAC address and time information of the wireless terminal are stored;

An access point for relaying wireless communication between the wireless terminal and the inside of a public WLAN service system;

A network access management module for retrieving an authentication list of the authentication list database and approving MAC authentication when time information of the corresponding wireless terminal is not 0 in the authentication list; And

Payment induction information at the request of the wireless terminal, wherein the payment induction information is a MAC address of the wireless terminal, an alias or IP address information of the wireless terminal and an interface for selecting one of them, and a small amount of mobile phones for the selected one wireless terminal. And a billing processing module for providing payment or credit card payment information, and updating time information of the wireless terminal when the payment is completed.

Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings so that those skilled in the art may easily implement the present invention. As those skilled in the art would realize, the described embodiments may be modified in various different ways, all without departing from the spirit or scope of the present invention.                     

1 is a structural diagram of a public WLAN service system 200 according to an embodiment of the present invention. The public WLAN service system 200 according to an embodiment of the present invention may include an access point (AP) 210, a network access management module 220, a billing processing module 230, and an authentication list database 240. It includes, and is connected to a plurality of wireless terminals (111-11n) and the Internet (300). Here, the wireless terminal 111 may be, for example, a laptop or a portable information wireless terminal equipped with a wireless LAN 120.

Next, each part of the public WLAN service system 200 will be described in detail.

The access point 210 is connected to the network connection management module 220 and the billing processing module 230 to relay communication with the wireless terminal 111.

The authentication list database 240 stores the MAC address of each wireless terminal, the time when the wireless terminal having the MAC address can use the wireless LAN, and alias information of the wireless terminal as an authentication list.

Since the MAC address is a physically unique address of the LAN card, the alias information of the wireless terminal does not need to be stored separately. However, since the MAC address used by the user is difficult to recognize, the alias information of the wireless terminal is stored together. It is desirable to. In addition, although the embodiment of the present invention shows that the alias information of the wireless terminal is stored together, alternatively, the IP address allocated to the wireless terminal may be stored together.

However, since the alias information and the IP address of the wireless terminal may be changed, in the embodiment of the present invention, all identification of the wireless terminal by the public WLAN service system shall be identified based on the MAC address.

An example of an authentication list stored in the authentication list database 240 is shown in FIG. 2. Referring to FIG. 2, an alias of a wireless terminal having a MAC address of 00: 00: 00: 00: 00: 01 is Kaeru, and a time when a wireless terminal having an alias of Kaeru can receive the WLAN service is 10. You can see that it is 12 minutes.

The alias information of the wireless terminal may use a name of a network basic input / output system (NetBIOS) set in the wireless terminal. The NetBIOS name is a communication protocol used for reading and writing resources on the network. Alias information of the wireless terminal is stored in advance in the wireless terminal by the user.

The network access management module 220 includes an authentication unit 221, a dynamic host configuration protocol (DHCP) unit 222, and a data connection unit 223, and includes an access point 210 and billing. It is connected to the processing module 230 and the authentication list database 240.

When the wireless terminal 111 requests MAC authentication, the network access management module 220 has the same MAC address as that of the wireless LAN card 120 of the wireless terminal 111 and the authentication list database 240. Check if it is stored in the authentication list of). If the same MAC address as that of the wireless terminal is stored in the authentication list, time information of the wireless terminal is checked. In this case, when the time information of the wireless terminal is not 0 (seconds), MAC authentication of the wireless terminal 111 is performed, and a wireless LAN service is provided by assigning an IP (Internet Protocol) address to the wireless terminal 100. .

When the authentication unit 221 requests MAC authentication through the access point 210, the authentication unit 221 has the same MAC address as that of the wireless LAN card 120 of the wireless terminal 111. Check if it is stored in the authentication list. If the same MAC address as that of the wireless terminal is stored in the authentication list, time information of the wireless terminal is checked. If the time information of the wireless terminal is not 0 (seconds), the MAC authentication of the wireless terminal 111 is approved.

Here, if there is no MAC address information identical to the MAC address of the wireless terminal 111 in the authentication list, or the MAC address information identical to the MAC address of the wireless terminal 111 is included in the authentication list, If the time information is 0 (seconds), the MAC authentication of the wireless terminal 111 is rejected.

In addition, when the time information of the authentication list is updated, the authentication unit 211 cancels or approves MAC authentication for the corresponding wireless terminal accordingly. That is, when the time information is updated from 0 (seconds) to a time other than 0 (seconds), the MAC authentication of the wireless terminal is approved, and when the time information is updated to 0 (second), the MAC authentication of the wireless terminal is canceled. do.

The DHCP unit 222 allocates an IP address to the wireless terminal 111 when the wireless terminal 111 requests MAC authentication.

The data connection unit 223 connects the public WLAN service system 200 to the Internet, and the data connection unit 223 includes a router, a hub, and the like. In addition, the data connection unit 223 provides the Internet service by passing the packet of the IP address approved MAC authentication, but transfers the packet of the IP address is not authorized MAC authentication to the billing processing module 230 to be described later (redirection)

In detail, when a user tries to access a predetermined URL (Uniform Resouce Locator, an address indicating a server location on the Internet) using a web browser of a wireless terminal for which MAC authentication has not been approved, the data connection unit 223 may use the URL. To the URL of the billing processing module 230. Therefore, the information provided by the charging processing module appears in the web browser of the wireless terminal 111.

The billing processing module 230 includes a billing processing user interface (UI) unit, a billing communication unit 232 and a counter unit 233, the access point 210, the network connection management module 220 It is connected to the authentication list database 240 and an external payment server (not shown).

When the billing processing module 230 receives a packet of an IP address for which MAC authentication is not approved from the data connection unit 223, the billing processing module 230 provides information necessary for payment to the wireless terminal 111 having the IP address to induce payment. When the payment is made, the time information of the payment-completed wireless terminal 111 is updated in the authentication list.

In addition, when the MAC authentication of the wireless terminal 111 is performed by the network access management module 220, the charging processing module 230 reversely counts time information of the wireless terminal 111 of the authentication list. When the charging processing module 230 reverses the time information to 0 (seconds), the charging processing module 230 updates the time information of the corresponding wireless terminal of the authentication list to 0 (seconds).

When the billing processing UI unit 231 receives a packet of an IP address for which MAC authentication is not approved from the data connection unit 223, it provides information necessary for payment to the wireless terminal 111 having the IP address.

In detail, when a user connects to the billing processing UI unit 231 using a web browser of a wireless terminal, the billing processing UI unit 231 provides various information necessary for payment to a web browser of the wireless terminal 111. To provide. In other words, the charging processing UI unit 231 serves as a web server.

The information provided to the web browser of the wireless terminal 111 may be a mobile phone micropayment or credit card payment, MAC address of 0 (seconds) time information in the authentication list, wireless terminal alias or the wireless Payment induction information including IP address information of the terminal.

That is, the charging processing UI unit 231 provides the MAC address, wireless terminal alias, or IP address information of the wireless terminal having time information of 0 (seconds) to the web browser of the wireless terminal 111. In addition, when the user selects the MAC address of the wireless terminal to be paid, the alias or IP address of the wireless terminal, the billing processing UI unit 231 can make a small cell phone payment or credit card payment for the selected wireless terminal Provide a user interface.

When the billing communication unit 232 requests payment according to a user interface required for payment provided by the billing processing UI unit 231, the billing communication unit 232 connects to an external payment server (not shown) and relays communication regarding payment. .

In addition, when the payment is completed, the charging communication unit 232 updates the time information for the wireless terminal in the authentication list. For example, when the user completes the payment of 1,000 won by using the micro payment or credit card payment information, the billing communication unit 232 may update the time information for the wireless terminal from 0 seconds to 30 minutes.

The counter unit 233, if the authentication unit 221 of the network connection management module 220 approves the MAC authentication of the wireless terminal updated with the time information, then the time information of the wireless terminal using a timer or the like. To count down to 0 (seconds). When the time information becomes 0 (seconds), the counter unit 233 updates the time information of the corresponding wireless terminal in the authentication list.

Next, the operation of the public WLAN service system according to the embodiment of the present invention having such a structure will be described.

3 is a flowchart illustrating a public WLAN service method according to an embodiment of the present invention.

However, in this flowchart, the checking and updating of the authentication list and the time information of the authentication list may be performed by both the network connection management module and the charging processing module. Therefore, the processing related to the check and update is displayed in the form of a box covering both the network connection management module and the charging processing module.                     

First, when the user's wireless terminal requests MAC authentication from the access point, the access point transmits a MAC authentication request to the network access management module using the MAC address of the wireless terminal (S100 and S101).

When receiving the MAC authentication request from the access point, the network access management module checks whether the MAC address of the wireless terminal is stored in the authentication list. If the same MAC address as that of the wireless terminal is stored in the authentication list, time information of the wireless terminal is checked. At this time, if the MAC address of the wireless terminal is stored in the authentication list, and the time information of the wireless terminal is not 0 (seconds), the MAC authentication of the wireless terminal is performed (S102).

The network access management module allocates an IP address to the wireless terminal. At this time, the wireless terminal having MAC authentication may use the Internet using a wireless LAN service (S103, S104).

When the wireless terminal is assigned an IP address, the wireless terminal transmits its own alias to the network access management module, and the network access management module stores the MAC address of the wireless terminal and the alias of the wireless terminal in the authentication list. By doing so, the authentication list is updated (S105-S107).

The billing processing module uses the information for enabling the mobile phone payment or credit card payment, and the MAC address whose time information is 0 (seconds) in the authentication list, the wireless terminal alias, or the IP address information of the wireless terminal as payment induction information. to provide.

The charging processing module operates as a web server. Therefore, when the user accesses the charging processing module using a web browser of the wireless terminal device, the charging processing module provides payment induction information to the web browser of the wireless terminal.

In detail, the charging processing module provides the web browser of the wireless terminal with MAC address, wireless terminal alias, or IP address information of the wireless terminal whose time information is 0 (seconds). In addition, when the user selects the MAC address, the alias of the wireless terminal or the IP address of the wireless terminal to be paid, the billing processing module provides a user interface for making small payments or credit card payment for the selected wireless terminal. (S108).

When the user completes the cellular phone payment or credit card payment for the wireless terminal using the wireless terminal, the charging processing module updates the time information of the authentication list. For example, when the user completes the payment of 1,000 won using the mobile payment or credit card payment information, the billing processing module updates the time information of the wireless terminal of the authentication list from 0 (seconds) to 30 minutes. (S109, S110).

When the time information is updated from 0 (seconds) to another time, the network access management module approves MAC authentication of the corresponding wireless terminal (S111).

When the network processing management module approves the MAC authentication of the wireless terminal, the charging processing module reverses the time information of the wireless terminal until it becomes 0 (second) using a timer or the like. When the time information reaches 0 (seconds), the accounting processing module ends the count and updates the time information of the authentication list to 0 (seconds) (S112 and S113). When the time information is updated to 0 (seconds), the network access management module cancels MAC authentication of the corresponding wireless terminal (S114).

The public WLAN service system provides a WLAN service for a predetermined time when a user makes a payment such as a credit card or a cellular phone payment using the wireless terminal.

In the public WLAN service system according to an embodiment of the present invention, the authentication list includes alias information of the wireless terminal, but the wireless terminal alias may not be included.

In addition, the public wireless LAN service system according to an embodiment of the present invention is time information is updated according to the payment amount, MAC authentication is performed according to the time information, otherwise the amount of receivable packets is updated according to the payment amount In accordance with the received packet amount, MAC authentication may be performed.

That is, the authentication list stores the amount of receivable packets (hereinafter, referred to as packet information) instead of time information, and the public WLAN service system updates the packet information according to a payment amount, and the packet received by the wireless terminal. The amount may be checked to subtract the packet information, and the MAC authentication may be approved or canceled according to the packet information. Such a public WLAN service system updates the packet information to 10 Mbytes when the payment of 1,000 won is completed, approves the MAC authentication of the corresponding wireless terminal, and transmits the packet information according to the amount of received data of the wireless terminal. If the packet information becomes 0 (byte), the MAC authentication is canceled.                     

In addition, the public WLAN service system according to an embodiment of the present invention provides payment guidance information when a user accesses a billing processing module by using a web browser of a wireless terminal. However, the billing processing module provides time information in the authentication list. The payment induction information may be provided in the form of pushing the payment induction information to the wireless terminal having a MAC address of 0. In this case, the MAC address of which time information is 0 (seconds), the wireless terminal alias, or the IP address information of the wireless terminal may not be included in the payment guide information in the authentication list.

That is, when checking the MAC address with time information of 0 in the authentication list, the charging processing module provides information for mobile phone micropayment or credit card payment to a wireless terminal having the MAC address with time information of 0, When the payment is made by the user, it is possible to find out the IP address where the payment is made and to update time information corresponding to the MAC address of the wireless terminal having the corresponding IP address.

The series of processes described above can also be executed by software. The software is stored on a computer-readable recording medium such as a magnetic disk (including a flexible disk), an optical disk (CD-ROM), a DVD, and a magneto-optical disk (MD). In addition, the public WLAN service system of the present invention may be embedded in a computer system.

Although the preferred embodiments of the present invention have been described in detail above, the scope of the present invention is not limited thereto, and various modifications and improvements of those skilled in the art using the basic concepts of the present invention defined in the following claims are also provided. It belongs to the scope of rights.

As described above, according to the present invention, a payment such as a credit card or a mobile phone payment can be made using a wireless terminal, and a wireless LAN service can be received. That is, the holder of the wireless terminal can make a payment using the wireless terminal without using a separate subscription procedure and use the internet as much as the payment amount.

Claims (13)

A public WLAN service authentication method for providing an Internet service to a wireless terminal by a public WLAN service system having an authentication list including a MAC address and time information of the wireless terminal, (a) the public WLAN service system allocates an IP address according to a request of the wireless terminal, and payment induction information, wherein the payment induction information is a MAC address of the wireless terminal, an alias or IP address information of the wireless terminal, and one of them; Providing an interface for selecting, including the information for making a mobile phone payment or credit card payment for the selected wireless terminal; (b) completing the payment using the provided payment induction information; And (c) MAC authentication of the wireless terminal when the payment is completed, comprising the steps of providing an Internet service. The method of claim 1, In step (b), When the payment is completed using the provided payment induction information, update the time information of the wireless terminal to a predetermined time, In step (c), MAC authentication of the wireless terminal reverse counts the time information of the wireless terminal until 0 (seconds), and when the time information is 0 (seconds), the MAC authentication for the wireless terminal is cancelled. Public WLAN service authentication method. The method of claim 2, In step (c), And if the time information is 0 (seconds), update the time information of the corresponding wireless terminal to 0 (seconds). The method according to any one of claims 1 to 3, Before step (a) above, (d) when the wireless terminal accesses the wireless LAN service system, additionally storing the MAC address of the wireless terminal in an authentication list, and updating time information of the corresponding MAC address to 0 (seconds). Public WLAN service authentication method, characterized in that. The method of claim 4, wherein In step (d), Public wireless LAN service authentication method, characterized in that when storing the authentication list of the MAC addition also stores the alias of the wireless terminal. The method of claim 4, wherein Public wireless LAN service authentication method characterized in that when storing the authentication list MAC additionally stores the IP address of the wireless terminal. Claims [1] A recording medium in which a computer-readable program for providing an Internet service to a wireless terminal by a public WLAN service system having an authentication list including a MAC address and time information of the wireless terminal is recorded. (a) the public WLAN service system allocates an IP address according to a request of the wireless terminal, and payment induction information, wherein the payment induction information is a MAC address of the wireless terminal, an alias or IP address information of the wireless terminal, and one of them; Providing an interface for selecting, including the information for making a mobile phone payment or credit card payment for the selected wireless terminal; (b) completing the payment using the provided payment induction information; And (c) recording the computer readable program including the step of providing the Internet service by MAC authentication of the wireless terminal when the payment is completed. The method of claim 7, wherein In step (b), When the payment is completed using the provided payment induction information, update the time information of the wireless terminal to a predetermined time, In step (c), MAC authentication of the wireless terminal reverse counts the time information of the wireless terminal until 0 (seconds), and when the time information is 0 (seconds), the MAC authentication for the wireless terminal is cancelled. A recording medium that records a computer readable program. The method of claim 8, In step (c), And recording the computer-readable program, wherein the time information of the wireless terminal is updated to 0 (second). The method according to any one of claims 7 to 9, Before step (a) above, (d) when the wireless terminal accesses the wireless LAN service system, additionally storing the MAC address of the wireless terminal in an authentication list, and updating time information of the corresponding MAC address to 0 (seconds). And a recording medium having a computer readable program recorded thereon. The method of claim 10, In step (d), And a computer-readable program, wherein the computer-readable program is stored when the authentication list is additionally stored in the MAC. The method of claim 10, And storing a computer-readable program, wherein the computer-readable program is stored. In the public wireless LAN service system for providing an Internet service to a wireless terminal, An authentication list database in which the MAC address and time information of the wireless terminal are stored; An access point for relaying wireless communication between the wireless terminal and the inside of a public WLAN service system; A network access management module for retrieving an authentication list of the authentication list database and approving MAC authentication when time information of the corresponding wireless terminal is not 0 in the authentication list; And Payment induction information at the request of the wireless terminal, wherein the payment induction information is a MAC address of the wireless terminal, an alias or IP address information of the wireless terminal and an interface for selecting one of them, and a small amount of mobile phones for the selected one wireless terminal. And a billing processing module for providing payment or credit card payment information, and updating time information of the wireless terminal when the payment is completed.

Images