KR20060074828A - Scalable roaming authentication system and method using hierarchical caching structure, and fast paging method using its - Google Patents

Abstract

1. TECHNICAL FIELD OF THE INVENTION

The present invention relates to a roaming authentication system and a method using a hierarchical caching structure, a fast paging method using the same, and a computer-readable recording medium having recorded thereon a program for realizing the method.

2. The technical problem to be solved by the invention

The present invention minimizes authentication delays by using a hierarchical caching structure based on direct and indirect trust relationships in an environment where international roaming and heterogeneous handovers are enabled, thereby providing excellent scalability and smooth roaming. It is an object of the present invention to provide a roaming authentication system capable of supporting roaming and a method thereof, and a computer-readable recording medium recording a program for realizing the method.

3. Summary of Solution to Invention

The present invention provides a roaming authentication system comprising: an authentication server (AAAH) of a home domain for managing revisions and service contracts, billing, and statistical information of mobile communication terminals and roaming users to be authenticated; A remote authentication server (AAAL) in which the mobile communication terminal and the roaming user leave the home domain to receive the service; And a direct or indirect trust relationship with the AAAH and the AAAL, and when selected as a caching agent, becomes a child or a child node of the hierarchical structure rooted in the AAAH, and receives remote authentication information (moved from a parent or a parent node). Information for authenticating the communication terminal and the roaming user at a remote location) and at least one caching agent candidate for performing inter-domain roaming authentication at a remote location using the cached information.

4. Important uses of the invention

The present invention is used for roaming authentication and paging.

Trust, Hierarchical Caching, Roaming, Authentication, Paging

Description

Scalable roaming authentication system and method using hierarchical caching structure, and fast paging method using its}

1 is a diagram illustrating an embodiment of a roaming authentication system and method using a hierarchical caching structure according to the present invention;

2 to 7 are exemplary diagrams illustrating a roaming authentication procedure using a hierarchical caching structure according to the present invention.

* Explanation of symbols on the main parts of the drawing

11: Home Domain Authentication Server (AAAH) 12: Remote Authentication Server (AAAL)

13: hierarchical caching agent (CAH)

The present invention relates to a roaming authentication system and a method using a hierarchical caching structure, a fast paging method using the same, and a computer-readable recording medium having recorded thereon a program for realizing the method. And hierarchical caching structure based on direct and indirect trust relationship in an environment where heterogeneous handover is enabled, thereby supporting scalable and seamless roaming by minimizing authentication delay. A roaming authentication system and method thereof, and a computer-readable recording medium having recorded thereon a program for realizing the method. The present invention also relates to a fast paging method capable of providing fast paging using the hierarchical caching structure in the above environment and a computer readable recording medium having recorded thereon a program for realizing the method.

A conventional authentication method for receiving a service of a remote location where a mobile communication terminal and a user have an indirect trust relationship with a home domain is as follows.

Basically, when the mobile communication terminal and the user attempts to authenticate at a remote location away from the home domain, the mobile communication terminal and the user may be authenticated by interworking with the authentication server of the home domain.

For example, the proxy and relay functions of the RADIUS or DIAMETER protocols can be used with existing authentication protocols such as various EAP-methods. At this time, although the form and path of the authentication information is various, there is a common point that the roaming from a new remote location to another domain, and whenever the authentication is attempted accordingly, direct linkage with the server of the home domain cannot be avoided. Such interworking with home domains increases authentication delays and hinders smooth handover and roaming scalability.

Exceptionally, the remote authentication server can verify in the past several successful authentications for the mobile terminal and the user, and if the authentication information has not expired, the user does not need to be authenticated directly from the home domain. You can accept the authentication request.

However, this is an optimization method that assumes a special case, and may not be general scalability. In addition, in the conventional method, it is common that a remote server capable of confirming past authentication information does not process an authentication request (due to heterogeneous roaming between heterogeneous networks) on behalf of the home domain server.

If you use a forwardable ticket of Kerberos v5, a server that can verify the authenticity of the new remote site may act for you. However, there is a problem in that the mobile communication terminal and the user have no information on the authentication agent server having the smallest authentication delay at the current location, so that the authentication delay reduction cannot be guaranteed.

In addition, Kerberos v5 requires the servers of all domains that have a direct trust relationship between the two domains to participate in establishing an authentication chain between the remote authentication server and the home domain / agent proxy domain. However, there is a problem in that scalability is inferior due to an increased burden on the intermediate server.

On the other hand, WCDMA prevents the user domain from requesting authentication to the home domain whenever roaming moves around the base station (BS) by bringing the user profile of the home domain to the remote domain where the user requests authentication.

However, this is only limited to roaming between WCDMA and does not provide a scalable general authentication method for a user roaming to different heterogeneous domains.

The present invention has been proposed to solve the above problems, by minimizing the authentication delay by using a hierarchical caching structure based on direct and indirect trust relationship in an environment where international roaming and heterogeneous network handover is enabled, An object of the present invention is to provide a roaming authentication system and a method capable of supporting highly roaming and seamless roaming, and a computer-readable recording medium recording a program for realizing the method.

Another object of the present invention is to provide a fast paging method capable of providing fast paging using the hierarchical caching structure in the above environment and a computer-readable recording medium having recorded thereon a program for realizing the method. have.

Other objects and advantages of the present invention can be understood by the following description, and will be more clearly understood by the embodiments of the present invention. Also, it will be readily appreciated that the objects and advantages of the present invention may be realized by the means and combinations thereof indicated in the claims.

In order to achieve the above object, the present invention provides a roaming authentication system comprising: an authentication server (AAAH) of a home domain for managing revision and service contracts, billing, and statistical information of a mobile communication terminal and a roaming user to be authenticated; A remote authentication server (AAAL) in which the mobile communication terminal and the roaming user leave the home domain to receive the service; And a direct or indirect trust relationship with the AAAH and the AAAL, and when selected as a caching agent, becomes a child or a child node of the hierarchical structure rooted in the AAAH, and remote authentication information allocated from a parent or a parent node (mobile communication). And caching information for authenticating the terminal and the roaming user at a remote location, and using at least one caching agent candidate for performing inter-domain roaming authentication at the remote location using the cached information.

The present invention also provides authentication information to a caching agent on a trust path between a home domain authentication server (AAAH) and a remote authentication server (AAAL) in a roaming authentication method in an environment in which international roaming and heterogeneous network handover are activated. Roaming authentication initialization step of allocating and initializing the hierarchy; A quick roaming authentication step in which the caching agent handles a quick roaming authentication request on behalf of a home domain authentication server AAAH whenever an authentication request is generated at a new remote location due to roaming of a user; And a roaming timeout expiration step in which the authentication information maintained in the soft state is no longer used for roaming authentication even if a time limit for allowing roaming authentication expires, even though a special message is not sent or received.

In addition, the present invention provides a paging method in a mobile communication system, wherein at least one caching agent in a direct or indirect trust relationship between a home domain authentication server (AAAH) and a remote authentication server (AAAL) is rooted in the AAAH. A hierarchy management step of forming and managing one node of a hierarchy (caching agent hierarchy (CAH)); A paging request step of forwarding a paging request from a root node of said caching agent hierarchy (CAH) to a leaf node; And a paging response step in which the leaf node transmits a paging response to the root node, and delivers the latest information among nodes of the caching agent hierarchy (CAH) in a tournament format.

Meanwhile, the present invention provides a roaming authentication system in which a roaming authentication system including a processor allocates authentication information to a caching agent on a trust path between a home domain authentication server AAAH and a remote authentication server AAAL and initializes a hierarchical structure. Initialization function; A fast roaming authentication function in which the caching agent handles a fast roaming authentication request on behalf of a home domain authentication server AAAH whenever a user roams an authentication request at a new remote location; And the authentication information maintained in the soft state can be read by a computer recording a program for realizing the roaming timeout function, which is no longer used for roaming authentication without sending or receiving a special message when the time limit for allowing roaming authentication expires. Provide a recording medium.

In addition, the present invention provides a mobile communication system having a processor for at least one caching agent in a direct or indirect trust relationship between a home domain authentication server (AAAH) and a remote authentication server (AAAL) for fast paging. A hierarchy management function of forming and managing as a node of a root hierarchy (caching agent hierarchy (CAH)); A paging request function for forwarding a paging request from a root node of said caching agent hierarchy (CAH) to a leaf node; And the leaf node transmits a paging response to the root node, and reads a program for realizing a paging response function for delivering a most recent information in a caching agent hierarchy (CAH) node in a tournament format. Provide a recording medium.

The present invention, in the environment in which international roaming and heterogeneous handover is activated, minimizes the cost for maintaining the trust relationship between operators, and reduces the delay of the user due to the authentication and security procedures in a range that guarantees stability. We want to support this excellent smooth roaming. In addition, a scalable hierarchical caching structure and its information are used to support fast paging in the environment.

In particular, the present invention dynamically manages the hierarchical structure of the agent to cache authentication information (manages the authentication agent server hierarchically to minimize the authentication delay), and minimizes the authentication delay at a remote location using this hierarchy. Provides a quick authentication process.

That is, the present invention securely expands and uses a layered caching structure based on a trust relationship when a mobile communication terminal and a user attempts an authentication request to receive a service from a remote location that has an indirect trust relationship with a home domain. Provide an authentication procedure to support roaming. In other words, the present invention by distributing the information for authenticating the mobile terminal and the user remotely to one or more agents that have a direct or indirect trust relationship with the home domain and by hierarchically managing the agents that have received the authentication information Authentication delay can be minimized.

According to the present invention, a fast, secure and scalable authentication procedure is performed for a terminal and a user to receive a transparent service in a remote domain indirectly maintaining a trust relationship with the mobile terminal and the user's home domain.

In addition, according to the present invention, by using the scalable hierarchical caching structure and the hierarchical structure information thereof, it is possible to provide fast paging in an environment in which international roaming and heterogeneous handover are activated.

The above objects, features and advantages will become more apparent from the following detailed description taken in conjunction with the accompanying drawings, whereby those skilled in the art may easily implement the technical idea of the present invention. There will be. In addition, in describing the present invention, when it is determined that the detailed description of the known technology related to the present invention may unnecessarily obscure the gist of the present invention, the detailed description thereof will be omitted. Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings.

1 is a diagram illustrating an embodiment of a roaming authentication system and method using a hierarchical caching structure according to the present invention.

In FIG. 1, the vertical solid line represents the passage of time, and the horizontal dotted line represents the direct and indirect trust relationship. The CAH 13 is composed of at least one caching agent and has a hierarchical structure. If CAH1 (13-1) is selected as a caching agent candidate between AAAL1 (12-1) or AAAL1 (12-1) and CAH1 (13-1), CAH1 (13-1) is CAH2 (13-2). Is updated to

As shown in FIG. 1, a roaming authentication system using a hierarchical caching structure constructed based on direct and indirect trust relationships according to the present invention includes a revision and service agreement of a mobile communication terminal and a user to be authenticated. Authentication server (AAAH) 11 of a home domain for managing accounting, billing, statistical information, etc., an authentication server (AAAL) 12 of a remote place where a mobile communication terminal and a user intends to receive services from the home domain, and AAAH Directly or indirectly maintain trust relationship with (11) and AAAL (12), and when selected as a caching agent, becomes a child or child node of the hierarchy rooted by AAAH (11), and remote authentication assigned from parent or parent node Caching information (information for authenticating mobile communication terminals and users at a remote location) and using the cached information to perform inter-domain roaming authentication at a remote location. One of the caching agent candidates and their hierarchy: include (CAH Caching Agent Hierarchy) (13).

Here, the home domain authentication server (AAAH) 11 and the remote authentication server (AAAL) 12 have a direct trust relationship, or have a direct trust relationship as in selecting any two nodes in FIG. It is assumed that there is an indirect trust relationship with one or more nodes in between. In addition, in some cases, a trust relationship may be dynamically concluded.

In addition, the optimal path information between any nodes is known (i.e. each node knows the optimal path information between nodes with a trust relationship), and the nodes on the path proxy the message according to the routing information. Or have a duty to relay.

Also, the caching agent candidate is a node that is directly or indirectly trusted with AAAH 11 and AAAL 12. If the caching agent is selected as a caching agent, the caching agent candidate becomes a node of a hierarchy rooted at AAAH 11, wherein the hierarchy A preferred example of is to form a tree structure in which the parent-child relationship is clear. In extreme cases, all caching agents may consist of children of AAAH 11, or all caching agents may maintain parent child relationships in a single line.

Nodes of the hierarchy can be dynamically added, deleted, and reconfigured. When adding nodes in hierarchy management, a new caching agent candidate satisfies the following conditions. At this time, the CAH 13 is updated by adding or deleting nodes, and inform the user of the updated information.

Since each node in the hierarchy knows the best path information between the nodes that have a trust relationship, this routing information is used to determine the trusted path to forward the new remote certificate request, and to forward all certificate requests, including the initial certificate that occurs at the remote location. Candidates can be nodes on the path or nodes close to them with excellent caching capabilities. In this case, when a caching agent candidate request is made, information related to the candidate's state and capability is delivered to the node of the nearest hierarchy, and the node receiving the request has its own state and ability, the candidate's state and capability, itself and its parents, and Add candidates to the Caching Agent Hierarchy (CAH) 13 as their child nodes by referring to statistics such as the number of hops between candidates, delivery delays, the frequency of user authentication requests, and the time since the last authentication request. You can. Alternatively, the node to be deleted and added to its CAH 13 may have its place in the CAH 13.

Then, based on the above configuration, at least one caching agent in a direct or indirect trust relationship between AAAH (11) and AAAL (12) forms a hierarchy to support roaming authentication between domains occurring in remote locations. With reference to Figures 2 to 7 will be described in more detail.

The authentication method according to the present invention comprises a remote roaming authentication initialization process 101, a quick remote roaming authentication process 102, and a roaming time expiration process 103 in which the use time of the authentication information maintained in the soft state expires. do.

First, the initialization process 101 for roaming authentication will be described.

The initialization process 101 for roaming authentication may be performed by a user from the AAAH 11, such as individual authentication protocols such as TLS and AKA, various EAP-methods, and single sign-on (SSO) schemes such as Kerberos. In this process, the authentication information is assigned to a caching agent (hierarchical caching agent (CAH) 13) on the trust path between AAAH (11) and AAAL (12) and the hierarchy is initialized. .

That is, as shown in FIG. 3, the caching agent candidates transmit their capability information from the user (Useri) to the home (AAAH (11)) while the user is authenticated using the existing method from the AAAH 11. do. Subsequently, the parent node of the hierarchy that received the capability information (the initial caching agent hierarchy starts at AAAH and grows the hierarchy with AAAH as the root) can hop to include that candidate in the hierarchy. Judgment is made by considering your ability and the candidate's ability.

Next, in order to include the candidate in the hierarchy as shown in FIG. 4, the parent node assigns the remote authentication information about the user to the candidate, passes it through a secure path, and registers the candidate in the hierarchy list. Update

As such, when the candidate participates in the hierarchical structure, the remote authentication information allocated from the parent or the parent node is cached, and the caching information is used to process the authentication request for the user later.

In addition, in the initialization process 101 of the remote roaming authentication, the CAH 13 securely delivers matching information and a list of CAHs to the cached remote authentication information to the user. This is used for the purpose of presenting the corresponding information when the user receives the roaming authentication in the CAH 13 in the fast roaming authentication process 102. That is, when the CAH 13 issues corresponding information corresponding to the remote authentication information to be cached to the user, the user presents the corresponding information to the CAH 13 at the time of the remote authentication request, and the CAH 13 presents the remote authentication information and the presented information. Authentication processing is performed using the corresponding information. At this time, the list of CAH 13 reflects the hierarchical structure, and can be made shorter by mobilizing possible shortening schemes.

Now, a quick roaming authentication process 102 will be described.

When the initialization process 101 of roaming authentication is completed as described above, CAH 13 roams fast on behalf of AAAH 11 whenever an authentication request occurs at a new remote location due to roaming of the user in the fast roaming authentication process 102. It handles authentication requests.

That is, when the user roams to a new domain as shown in FIG. 5, the user presents the CAH 13 of the user to the new AAAL 12, and the AAAL 12 is closest to itself (the least authentication delay is made). ) The caching agent is selected from the CAH 13 to receive fast roaming authentication from the selected caching agent using the corresponding information presented by the user.

In this case, roaming authentication using caching information used and corresponding information may be performed using a symmetric key and a symmetric key (for example, a Kerberos ticket and a forwarding ticket), and a similar method (cookie and token, etc.). SSO technique can be used, and the correct response to the server-proposed challenge (eg AKA) can be taken. In this case, the response information may be information that generates a correct response to the challenge or the response itself, and the caching information may be similarly performed.

If the authentication information used by the CAH 13 is different for each caching agent, the AAAL 12 receives corresponding information corresponding to the selected caching agent from the user and delivers it. At this time, in case an authentication request is passed in the root direction from the node selected by the AAAL 12 (caching agent) (described below), at least one parent node of the node selected in the hierarchy (the top node is the root node). (Although not all generations should be included).

Also, if the caching agent selected for roaming authentication cannot handle the authentication request due to unavoidable reasons (that is, there is no valid authentication information or the agent stops working), the caching agent that cannot be authenticated The CA sends the authentication request (including the corresponding information and the CAH) to the parent and the parent node on the CAH presented with the user's response information so that the user can receive transparent authentication without going through the authentication process from the beginning. At this time, in the worst case, authentication processing is impossible at all nodes on the CAH path, so that the authentication request may be delivered to AAAH. This ensures transparent resilience to malfunctions of intermediate caching agents.

In addition, if roaming authentication fails at the caching agent, the caching agent does not notify the AAAL of the result, but instead allows one or more parent nodes (which can request AAAH to confirm the authentication failure immediately) on the CAH to confirm the authentication failure. In this case, the caching agent may prevent roaming or authentication failure due to a malfunction.

In the process of passing authentication information to the nearest caching server in FIG. 5, nodes including AAAL (node I in FIG. 5) in the path between the AAAL 12 and the selected caching server may be candidates for caching agents, if desired. You can share your skills and other information you need to make decisions. If the remote roaming authentication succeeds as shown in FIG. 6 and the AAAL 12 is selected as the caching agent as in the example, the CAH 13 is updated as shown in the example of FIG. In this case, the subject of the update may be the selected agent or the selected agent. As shown in FIG. 7, when the user wants to roam to a new domain in which the node H is AAAL 12, fast remote roaming authentication is possible by the above method. In the example of FIG. 7, when the node E is selected as the caching agent on the CAH 13 closest to the node I, and the node H is added to the CAH 13 through the above procedure, the updated CAH 13 is shown.

In the process of fast roaming authentication 102, the AAAL 12 exchanges authentication information with the optimal node of the CAH 13, and the caching agent candidate may forward its capabilities from the AAAL 12 to the CAH 13. Can be added to CAH 13 in this manner. In addition, a node that has performed an authentication request for a long time or frequently receives an authentication request may be deleted from the CAH 13 according to a corresponding algorithm.

Therefore, after the roaming authentication initialization process 101, the optimal caching agent is added to the hierarchy and unnecessary nodes are deleted according to the path where the user roams, and the CAH 13 is dynamically reconfigured. At this time, the reconstructed hierarchical structure may be delivered to the user by the CAH 13 as needed.

2 to 7, the dotted line basically shows a direct trust relationship, but may also indicate an indirect trust relationship.

Finally, the roaming time expiration process 103 will be described.

The roaming time expiration process 103 maintains a soft state time limit for roaming authentication, so when the time expires, each time expires and is not used for roaming authentication even if a special message is not received. If, before the time expires, the initialization process 101 for roaming authentication is performed, the roaming authentication service can be continued.

At this time. Depending on the policy, you can either get both cached and corresponding information new or keep using old information. Preferably, the new information is updated and used within a certain time limit.

Through the operation of the roaming authentication initialization process 101, fast roaming authentication process 102, roaming time expiration process 103, when the frequent authentication requests due to roaming in the remote place, AAAH (11) to direct authentication Fast roaming authentication can be realized by configuring the CAH 13 to optimize the authentication delay without involvement.

The hierarchical caching management technique enables user location management in an environment in which international roaming and heterogeneous network handover is activated, and can be used as a scalable paging system. At this time, the AAAH 11 sends a paging request to the Caching Agent Hierarchy (CAH) 13, and when a paging request is transmitted to the last along the hierarchy, a response is sent from the leaf node to the root node. At this time, when the response is delivered, the most recent valid information among the nodes of the hierarchy on the path is delivered in the form of a tournament.

In more detail, first, at least one caching agent having a direct or indirect trust relationship between the home domain authentication server (AAAH) 11 and the remote authentication server (AAAL) 12 as described above is hierarchical structure (caching agent hierarchy). (CAH) 13) to manage (hierarchical management).

Then, when the paging request is forwarded from the root node of the caching agent hierarchy (CAH) 13 to the leaf node, the leaf node forwards the paging response to the root node, where the most recent of the nodes of the caching agent hierarchy (CAH) The information in is delivered in tournament format.

Here, in a paging request, a node with one or more children copies the paging request and forwards it to all nodes.

In addition, in the case of a paging request, when the hierarchical management knows that a node having one or more children has the most recent valid location information among the child nodes, the paging request is not copied and transmitted to all nodes. It can be delivered only to the child node, or if there is enough information, it can generate a response and send it to the root direction.

The leaf node receiving the paging request transmits a paging request to the corresponding domain through the AAAL 12 which has been authenticated when its authentication information is up-to-date. In this case, paging in the domain controlled by the AAAL 12 may vary depending on the domain, and layer 3 paging may be used when layer 2 paging is not supported. In this case, whether the authentication information is up-to-date may be determined by determining whether a difference between the time at which the paging request is received and the time at which authentication is performed is equal to or less than a predetermined reference value.

The paging response also contains the exact location of the node and can be safely delivered to the root node along the CAH 13. In this case, in the case of a multi-homing node, several valid paging responses may arrive.

When paging is implemented using the hierarchical caching structure of the present invention, a cost for location management of roaming users and a paging delay can be reduced.

As described above, the method of the present invention may be implemented as a program and stored in a recording medium (CD-ROM, RAM, ROM, floppy disk, hard disk, magneto-optical disk, etc.) in a computer-readable form. Since this process can be easily implemented by those skilled in the art will not be described in more detail.

The present invention described above is capable of various substitutions, modifications, and changes without departing from the technical spirit of the present invention for those skilled in the art to which the present invention pertains. It is not limited by the drawings.

As described above, the present invention allows a service provider to hierarchically cache authentication information based on an indirect trust relationship without requiring a subscriber to directly maintain a trust relationship with all roamable domains, and minimizes network management burden. There is an effect that can guarantee the scalability of dynamic layer management to minimize the delay.

In addition, the present invention, in an environment in which international roaming and heterogeneous network handover is activated, a transparent roaming service of a remote domain that is directly and indirectly maintained in a trust relationship with the home domain, leaving the mobile domain and the home domain subscribed to by the user. It can be used as a highly scalable authentication method for receiving a certificate, and this can reduce the delay of the user due to the security procedure, thereby supporting smooth roaming.

The present invention also enables location management of users in an environment where international roaming and heterogeneous network handover is enabled, and can be used as an extensible paging system. It has the effect of being delivered. As such, when paging is implemented using a hierarchical caching structure, cost for location management of roaming terminals and users can be reduced, and paging delay can be reduced.

In addition, the present invention has the effect of providing an inexpensive and secure technique for scalable and fast roaming services.

Claims (26)

In a roaming authentication system, An authentication server (AAAH) of a home domain for managing revisions and service contracts, billing, and statistical information of mobile terminals and roaming users to be authenticated; A remote authentication server (AAAL) in which the mobile communication terminal and the roaming user leave the home domain to receive the service; And Directly or indirectly maintains a trust relationship with the AAAH and the AAAL, and when selected as a caching agent, becomes a child or a child node of the hierarchical structure rooted in the AAAH, and the remote authentication information allocated from a parent or a parent node (mobile communication terminal) At least one caching agent candidate for caching roaming authentication at a remote location by caching the cache information; Roaming authentication system using a hierarchical caching structure comprising a. The method of claim 1, The at least one caching agent candidate is A node that is directly or indirectly trusted with the AAAH and the AAAL. When selected as a caching agent, the node becomes a node of the hierarchy rooted at the AAAH, and the hierarchy forms a tree structure in which parent and child relationships are clear. Roaming authentication system using a hierarchical caching structure, characterized in that. The method of claim 1, The AAAH and the AAAL, A roaming authentication system using a hierarchical caching structure, characterized in that it has a direct trust relationship or an indirect trust relationship between one or more nodes having a direct trust relationship. The method of claim 1, The AAAH and the AAAL, Roaming authentication system using a hierarchical caching structure, characterized in that the trust relationship is dynamically concluded. The method of claim 1, The roaming user, And a list of caching agents and corresponding information for caching information, wherein the caching agent can reflect the actual hierarchical structure and can be expressed in a condensable format. The method according to any one of claims 1 to 5, The node of the hierarchy, Roaming authentication system using a hierarchical caching structure, which can be added, deleted, or reconfigured dynamically. The method of claim 6, The at least one caching agent candidate is Because each node knows the best path information between nodes that it has a trust relationship with, it uses this routing information to determine the trusted path to forward new remote authentication requests, and on the path forwarding all authentication requests, including the initial authentication that occurs at the remote location. A roaming authentication system using a hierarchical caching structure, characterized in that a node or a node close to the node having excellent caching capability can be a candidate. The method of claim 7, wherein When adding a node in the hierarchy, When a caching agent candidate request is made, information about the candidate's status and capabilities is forwarded to the nearest hierarchical node, and the node receiving the request has its own status and capabilities, the candidate's status and capabilities, and between itself and its parents and candidates. Candidates can be added to the Caching Agent Hierarchy (CAH) as their child nodes by referring to the number of hops, the delay of delivery, the frequency of user authentication requests, and statistics from the time since the last authentication request. Roaming authentication system using a hierarchical caching structure, characterized in that the node to be deleted and added in the CAH can take its place in the CAH. The method of claim 8, In the Caching Agent Hierarchy (CAH), Roaming authentication system using a hierarchical caching structure, characterized in that the CAH is updated by the addition, deletion of nodes, and can inform the user of the updated information. The method of claim 1, Roaming authentication system using a hierarchical caching structure, it is possible to provide fast paging of a mobile communication terminal and a roaming user roaming at a remote location using the hierarchical structure of the caching agent and its information. A roaming authentication method in an environment in which international roaming and heterogeneous network handover is enabled, A roaming authentication initialization step of allocating authentication information to a caching agent on a trust path between the home domain authentication server AAAH and the remote authentication server AAAL and initializing a hierarchy; A quick roaming authentication step in which the caching agent handles a quick roaming authentication request on behalf of a home domain authentication server AAAH whenever an authentication request is generated at a new remote location due to roaming of a user; And Roaming expiration phase, where authentication information that remains in soft state is no longer used for roaming authentication without sending or receiving special messages once the time limit to allow roaming authentication expires. Roaming authentication method using a hierarchical caching structure comprising a. The method of claim 11, The hierarchical structure, Rooted at AAAH, a parent-child relationship can be defined, Roaming authentication method using a hierarchical caching structure, characterized in that the node of the hierarchical structure can be dynamically added, deleted, reconfigured. The method according to claim 11 or 12, The roaming authentication initialization step, Initializing the caching agent hierarchy (CAH); In the CAH initialization process, the upper node assigns authentication information to be cached to a lower node, and a list of caching agent hierarchy (CAH) reflecting the updated hierarchy is safely transmitted to the node. Roaming authentication method. The method of claim 13, The caching agent hierarchy (CAH) initialization process, Roaming authentication method using a hierarchical caching structure, characterized in that the initial authentication must be completed using a separate method before the initialization of the CAH. The method of claim 13, The quick roaming authentication step, Roaming authentication method using a hierarchical caching structure, characterized in that the authentication request is sent to the node closest to the CAH by using the list of the CAH. The method of claim 13, In the quick roaming authentication step, If the node that has received the authentication request cannot perform authentication processing, the request is forwarded to a higher node of the hierarchy, where the authentication request can be delivered to the AAAH, which is the root of the hierarchy, and roaming authentication using a hierarchical caching structure. Way. The method of claim 13, In the quick roaming authentication step, If the authentication request fails in the node receiving the authentication request, the authentication failure is transmitted to the upper node with permission, wherein the upper node may be one or more nodes on the CAH path including the AAAH. Roaming authentication method using hierarchical caching structure. In the paging method in a mobile communication system, At least one caching agent in a direct or indirect trust relationship between a home domain authentication server (AAAH) and a remote authentication server (AAAL) is formed as a node of a hierarchy (caching agent hierarchy (CAH)) rooted at the AAAH. A layer management step of managing; A paging request step of forwarding a paging request from a root node of said caching agent hierarchy (CAH) to a leaf node; And A paging response step in which the leaf node delivers a paging response to the root node, but delivers the latest information among nodes of the caching agent hierarchy (CAH) in a tournament format; Fast paging method comprising a. The method of claim 18, The caching agent hierarchy (CAH) is, Rooted at AAAH, a parent-child relationship can be defined, The node of the hierarchical structure may be dynamically added, deleted, reconfigurable. The method of claim 18 or 19, In the paging request step, Fast paging method characterized in that the node with more than one child copies the paging request to all nodes. The method of claim 18 or 19, In the paging request step, If the hierarchical management step is informed that the node having at least one child has the most recent valid location information among the child nodes, the paging request is not copied and transmitted to all nodes, but only to the corresponding child nodes as needed. Fast paging method characterized in that, if there is sufficient information, it can generate a response directly to the root direction. The method of claim 18 or 19, The leaf node receiving the paging request, If the authentication information is up-to-date, the paging request is forwarded to the corresponding domain through the AAAL that the authentication process is performed, but paging in the domain controlled by the AAAL may be different depending on the domain, and layer 2 paging is performed. Fast paging method, characterized in that layer 3 paging can be used if not supported. The method of claim 22, Whether the authentication information is up to date, A fast paging method, characterized in that it is possible to determine by determining whether the difference between the time that the paging request came in and the time that the authentication is made or less than a predetermined reference value. The method of claim 18 or 19, The paging response is, Fast paging, which contains the exact location of the node and can be safely delivered to the root node along the CAH, where multiple valid paging responses can arrive in the case of multi-homing nodes. Way. Roaming authentication system with a processor, A roaming authentication initialization function for allocating authentication information and initializing a hierarchy to a caching agent on a trust path between a home domain authentication server AAAH and a remote authentication server AAAL; A fast roaming authentication function in which the caching agent handles a fast roaming authentication request on behalf of a home domain authentication server AAAH whenever a user roams an authentication request at a new remote location; And Roaming expiration feature that ensures that the credentials maintained in the soft state are no longer used for roaming authentication without sending or receiving a special message when the time limit for allowing roaming authentication expires. A computer-readable recording medium having recorded thereon a program for realizing this. In a mobile communication system having a processor for high-speed paging, At least one caching agent in a direct or indirect trust relationship between a home domain authentication server (AAAH) and a remote authentication server (AAAL) is formed as a node of a hierarchy (caching agent hierarchy (CAH)) rooted at the AAAH. A layer management function for managing; A paging request function for forwarding a paging request from a root node of said caching agent hierarchy (CAH) to a leaf node; And The leaf node delivers a paging response to the root node, but a paging response function that delivers the latest information among nodes of the caching agent hierarchy (CAH) in a tournament format. A computer-readable recording medium having recorded thereon a program for realizing this.

Images